Function at 0x1400513a0
Capabilities:
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x58], r9
mov qword [rbp - 0x50], r8
mov dword [rbp - 0x44], edx
mov qword [rbp - 0x40], rcx
mov eax, dword [rbp + 0x90]
mov dword [rbp - 0x34], eax
mov rax, qword [0x14009e7a8]
xor rax, rbp
mov qword [rbp + 0x20], rax
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
mov edx, ecx
sub edx, 0x95664c7b
sub edx, 1
add edx, 0x95664c7b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x2a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x29], al
mov dword [rbp - 0x30], 0x76a009b9
mov eax, dword [rbp - 0x30]
mov dword [rbp - 0x5c], eax
sub eax, 0x836a59f6
je 0x140051d6f
jmp 0x140051438
mov eax, dword [rbp - 0x5c]
sub eax, 0x93ddfd97
je 0x140051b24
jmp 0x14005144b
mov eax, dword [rbp - 0x5c]
sub eax, 0x9581bcee
je 0x140052026
jmp 0x14005145e
mov eax, dword [rbp - 0x5c]
sub eax, 0x9c9e413a
je 0x140051b5f
jmp 0x140051471
mov eax, dword [rbp - 0x5c]
sub eax, 0x9e832100
je 0x140051d98
jmp 0x140051484
mov eax, dword [rbp - 0x5c]
sub eax, 0xb2db5b5f
je 0x140051f2f
jmp 0x140051497
mov eax, dword [rbp - 0x5c]
sub eax, 0xbee7e883
je 0x140051911
jmp 0x1400514aa
mov eax, dword [rbp - 0x5c]
sub eax, 0xcb49734a
je 0x140051ce3
jmp 0x1400514bd
mov eax, dword [rbp - 0x5c]
sub eax, 0xe271387f
je 0x140052064
jmp 0x1400514d0
mov eax, dword [rbp - 0x5c]
sub eax, 0xf126a59b
je 0x140051f02
jmp 0x1400514e3
mov eax, dword [rbp - 0x5c]
sub eax, 0xf6989a57
je 0x140051a42
jmp 0x1400514f6
mov eax, dword [rbp - 0x5c]
sub eax, 0xf9fd9e5f
je 0x140051be0
jmp 0x140051509
mov eax, dword [rbp - 0x5c]
sub eax, 0xf9fffde1
je 0x140051a98
jmp 0x14005151c
mov eax, dword [rbp - 0x5c]
sub eax, 0xfd53ca31
je 0x140051edf
jmp 0x14005152f
mov eax, dword [rbp - 0x5c]
sub eax, 0x740ff53
je 0x140052006
jmp 0x140051542
mov eax, dword [rbp - 0x5c]
sub eax, 0x96f08dc
je 0x140051e25
jmp 0x140051555
mov eax, dword [rbp - 0x5c]
sub eax, 0xf156945
je 0x1400518f1
jmp 0x140051568
mov eax, dword [rbp - 0x5c]
sub eax, 0xf58f88a
je 0x140051ca8
jmp 0x14005157b
mov eax, dword [rbp - 0x5c]
sub eax, 0x107c30fb
je 0x1400518a5
jmp 0x14005158e
mov eax, dword [rbp - 0x5c]
sub eax, 0x274b5694
je 0x140051899
jmp 0x1400515a1
mov eax, dword [rbp - 0x5c]
sub eax, 0x2bcc4599
je 0x140051db9
jmp 0x1400515b4
mov eax, dword [rbp - 0x5c]
sub eax, 0x2f8d853f
je 0x1400519ad
jmp 0x1400515c7
mov eax, dword [rbp - 0x5c]
sub eax, 0x2ffe2681
je 0x140051cc3
jmp 0x1400515da
mov eax, dword [rbp - 0x5c]
sub eax, 0x33b253a6
je 0x140051dd6
jmp 0x1400515ed
mov eax, dword [rbp - 0x5c]
sub eax, 0x372b8033
je 0x140051ec2
jmp 0x140051600
mov eax, dword [rbp - 0x5c]
sub eax, 0x524adeb3
je 0x140051a4e
jmp 0x140051613
mov eax, dword [rbp - 0x5c]
sub eax, 0x5566a381
je 0x140051d7b
jmp 0x140051626
mov eax, dword [rbp - 0x5c]
sub eax, 0x5ddc999d
je 0x14005195e
jmp 0x140051639
mov eax, dword [rbp - 0x5c]
sub eax, 0x6091ba4a
je 0x140051b3f
jmp 0x14005164c
mov eax, dword [rbp - 0x5c]
sub eax, 0x618f2283
je 0x140051eb6
jmp 0x14005165f
mov eax, dword [rbp - 0x5c]
sub eax, 0x6dfe6ded
je 0x140051d3f
jmp 0x140051672
mov eax, dword [rbp - 0x5c]
sub eax, 0x7459cd0e
je 0x1400520ac
jmp 0x140051685
mov eax, dword [rbp - 0x5c]
sub eax, 0x75e3eba1
je 0x140051708
jmp 0x140051698
mov eax, dword [rbp - 0x5c]
sub eax, 0x76a009b9
je 0x1400516b0
jmp 0x1400516ab
jmp 0x1400520c8
mov r11b, byte [rbp - 0x2a]
mov r10b, byte [rbp - 0x29]
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb2db5b5f
mov ecx, 0x75e3eba1
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rcx, qword [rbp - 0x40]
mov edx, dword [rbp - 0x44]
mov r8, qword [rbp - 0x50]
mov r9, qword [rbp - 0x58]
mov r10d, dword [rbp - 0x34]
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 0x68], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 0x28], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 0x20], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 0x18], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 0x10], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp - 8], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [rbp + 8], r11
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r11, rsp
mov qword [rbp + 0x10], r11
mov dword [rax], r10d
mov rax, qword [rbp - 0x28]
mov qword [rax], r9
mov rax, qword [rbp - 0x20]
mov qword [rax], r8
mov rax, qword [rbp - 0x18]
mov dword [rax], edx
mov rax, qword [rbp - 0x10]
mov qword [rax], rcx
mov rax, qword [rbp - 8]
mov dword [rax], 1
mov rax, qword [rbp]
mov qword [rax], 0
mov rax, qword [rbp + 8]
mov qword [rax], 0
mov rax, qword [rbp + 0x10]
mov qword [rax], 0
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
mov edx, ecx
sub edx, 0x64004677
sub edx, 1
add edx, 0x64004677
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb2db5b5f
mov ecx, 0x274b5694
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov dword [rbp - 0x30], 0x107c30fb
jmp 0x1400520c8
mov rcx, qword [rbp]
xor eax, eax
mov r8d, eax
mov r9d, 0x18
sub rsp, 0x30
mov rdx, r8
mov dword [rsp + 0x20], 0xf0000000
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rdx, qword [rbp - 8]
mov eax, 0xbee7e883
mov ecx, 0xf156945
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
sub rsp, 0x20
lea rcx, str.CryptAcquireContext_Error_r_n
call fcn.14002f330
add rsp, 0x20
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov rax, qword [rbp]
mov rcx, qword [rax]
mov rax, qword [rbp + 8]
mov edx, 0x8003
xor r8d, r8d
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rdx, qword [rbp - 8]
mov eax, 0x524adeb3
mov ecx, 0x5ddc999d
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov eax, dword [0x14009f568]
mov ecx, dword [0x14009f56c]
mov edx, eax
sub edx, 0x532f4a8e
sub edx, 1
add edx, 0x532f4a8e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x740ff53
mov ecx, 0x2f8d853f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
sub rsp, 0x20
lea rcx, str.CryptCreateHash_Error_r_n
call fcn.14002f330
add rsp, 0x20
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
mov edx, ecx
add edx, 0xa2cc2b2e
sub edx, 1
sub edx, 0xa2cc2b2e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x740ff53
mov ecx, 0xf6989a57
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov eax, dword [0x14009f568]
mov ecx, dword [0x14009f56c]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9581bcee
mov ecx, 0xf9fffde1
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rax, qword [rbp - 0x18]
mov r8d, dword [rax]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
xor r9d, r9d
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
cmp dword [rax], 0
sete al
and al, 1
mov byte [rbp + 0x1e], al
mov eax, dword [0x14009f568]
mov ecx, dword [0x14009f56c]
mov edx, eax
add edx, 0x76ab71c4
sub edx, 1
sub edx, 0x76ab71c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9581bcee
mov ecx, 0x93ddfd97
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov dl, byte [rbp + 0x1e]
mov eax, 0x9c9e413a
mov ecx, 0x6091ba4a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
sub rsp, 0x20
lea rcx, str.CryptHashData_Error_r_n
call fcn.14002f330
add rsp, 0x20
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
mov edx, ecx
sub edx, 0x6d974166
sub edx, 1
add edx, 0x6d974166
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe271387f
mov ecx, 0xf9fd9e5f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rax, qword [rbp + 8]
mov r8, qword [rax]
mov rax, qword [rbp]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
mov edx, 0x660e
mov r9d, 1
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
cmp dword [rax], 0
sete al
and al, 1
mov byte [rbp + 0x1f], al
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
mov edx, ecx
add edx, 0xb45a031d
sub edx, 1
sub edx, 0xb45a031d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe271387f
mov ecx, 0xf58f88a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov dl, byte [rbp + 0x1f]
mov eax, 0xcb49734a
mov ecx, 0x2ffe2681
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
sub rsp, 0x20
lea rcx, str.CryptDeriveKey_Error_r_n
call fcn.14002f330
add rsp, 0x20
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
mov rcx, qword [rbp - 0x20]
mov r10, qword [rcx]
mov rcx, qword [rbp + 0x10]
mov rcx, qword [rcx]
xor edx, edx
mov r8d, 1
xor r9d, r9d
sub rsp, 0x30
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x28], rax
call qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rdx, qword [rbp - 8]
mov eax, 0x836a59f6
mov ecx, 0x6dfe6ded
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov edx, eax
sub rsp, 0x20
lea rcx, str.CryptDecrypt_Error_GetLastError:_x_n
call fcn.14002f330
add rsp, 0x20
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov dword [rbp - 0x30], 0x5566a381
jmp 0x1400520c8
mov rdx, qword [rbp + 0x10]
mov eax, 0x2bcc4599
mov ecx, 0x9e832100
cmp qword [rdx], 0
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rax, qword [rbp + 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
add rsp, 0x20
mov dword [rbp - 0x30], 0x2bcc4599
jmp 0x1400520c8
mov rdx, qword [rbp + 8]
mov eax, 0x372b8033
mov ecx, 0x33b253a6
cmp qword [rdx], 0
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov eax, dword [0x14009f568]
mov ecx, dword [0x14009f56c]
mov edx, eax
sub edx, 0x588c66cf
sub edx, 1
add edx, 0x588c66cf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7459cd0e
mov ecx, 0x96f08dc
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
add rsp, 0x20
mov ecx, dword [0x14009f568]
mov eax, dword [0x14009f56c]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7459cd0e
mov ecx, 0x618f2283
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov dword [rbp - 0x30], 0x372b8033
jmp 0x1400520c8
mov rdx, qword [rbp]
mov eax, 0xf126a59b
mov ecx, 0xfd53ca31
cmp qword [rdx], 0
cmovne eax, ecx
mov dword [rbp - 0x30], eax
jmp 0x1400520c8
mov rax, qword [rbp]
mov rcx, qword [rax]
xor edx, edx
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
add rsp, 0x20
mov dword [rbp - 0x30], 0xf126a59b
jmp 0x1400520c8
mov rax, qword [rbp - 8]
mov eax, dword [rax]
mov dword [rbp - 0x74], eax
mov rcx, qword [rbp + 0x20]
xor rcx, rbp
sub rsp, 0x20
call fcn.140058500
mov eax, dword [rbp - 0x74]
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov r10, qword [rbp - 0x40]
mov esi, dword [rbp - 0x44]
mov rbx, qword [rbp - 0x50]
mov r15, qword [rbp - 0x58]
mov r13d, dword [rbp - 0x34]
mov eax, 0x10
mov qword [rbp - 0x80], rax
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r12, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r14, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdi, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r11, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r9, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov r8, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rdx, rsp
call fcn.140058490
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rcx, rsp
call fcn.140058490
sub rsp, rax
mov rax, rsp
mov dword [r12], r13d
mov qword [r14], r15
mov qword [rdi], rbx
mov dword [r11], esi
mov qword [r9], r10
mov dword [r8], 1
mov qword [rdx], 0
mov qword [rcx], 0
mov qword [rax], 0
mov dword [rbp - 0x30], 0x75e3eba1
jmp 0x1400520c8
sub rsp, 0x20
lea rcx, str.CryptCreateHash_Error_r_n
call fcn.14002f330
add rsp, 0x20
mov dword [rbp - 0x30], 0x2f8d853f
jmp 0x1400520c8
mov rax, qword [rbp - 0x18]
mov r8d, dword [rax]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
xor r9d, r9d
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
mov dword [rbp - 0x30], 0xf9fffde1
jmp 0x1400520c8
mov rax, qword [rbp + 8]
mov r8, qword [rax]
mov rax, qword [rbp]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
mov edx, 0x660e
mov r9d, 1
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
mov dword [rbp - 0x30], 0xf9fd9e5f
jmp 0x1400520c8
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
add rsp, 0x20
mov dword [rbp - 0x30], 0x96f08dc
jmp 0x140051422