Function at 0x1400e30d0
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [0x1402c0304], 0
mov rbx, rcx
jne 0x1400e3128
cmp qword [0x1402c0378], 0
jne 0x1400e33a0
lea rcx, str.ncrypt.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x1402c0378], rax
test rax, rax
jne 0x1400e3130
mov rcx, rbx
mov byte [0x1402c0304], 1
call fcn.140052920
mov rax, qword [rbx]
lea rdx, str.Failed_to_load_ncrypt.dll
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
add rsp, 0x20
pop rbx
ret
lea rdx, str.NCryptDecrypt
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0318], rax
test rax, rax
jne 0x1400e3176
lea rdx, str.NCryptDecrypt_function_not_found.
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
xor al, al
mov byte [0x1402c0304], 1
mov qword [0x1402c0378], 0
add rsp, 0x20
pop rbx
ret
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptOpenKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0358], rax
test rax, rax
jne 0x1400e319f
lea rdx, str.NCryptOpenKey_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptImportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0360], rax
test rax, rax
jne 0x1400e31c8
lea rdx, str.NCryptImportKey_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptCreatePersistedKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0368], rax
test rax, rax
jne 0x1400e31f4
lea rdx, str.NCryptCreatePersistedKey_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptFinalizeKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0370], rax
test rax, rax
jne 0x1400e3220
lea rdx, str.NCryptFinalizeKey_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptExportKey
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0350], rax
test rax, rax
jne 0x1400e324c
lea rdx, str.NCryptExportKey_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptEnumKeys
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0340], rax
test rax, rax
jne 0x1400e3278
lea rdx, str.NCryptEnumKeys_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptFreeBuffer
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0348], rax
test rax, rax
jne 0x1400e32a4
lea rdx, str.NCryptFreeBuffer_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptEnumStorageProviders
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0338], rax
test rax, rax
jne 0x1400e32d0
lea rdx, str.NCryptEnumStorageProviders_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptOpenStorageProvider
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0330], rax
test rax, rax
jne 0x1400e32fc
lea rdx, str.NCryptOpenStorageProvider_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptSignHash
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0320], rax
test rax, rax
jne 0x1400e3328
lea rdx, str.NCryptSignHash_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptFreeObject
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0310], rax
test rax, rax
je 0x1400e331c
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptSetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0328], rax
test rax, rax
jne 0x1400e3374
lea rdx, str.NCryptSetProperty_function_not_found.
jmp 0x1400e3153
mov rcx, qword [0x1402c0378]
lea rdx, str.NCryptGetProperty
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1402c0308], rax
test rax, rax
jne 0x1400e33a0
lea rdx, str.NCryptGetProperty_function_not_found.
jmp 0x1400e3153
mov al, 1
add rsp, 0x20
pop rbx
ret