Function at 0x4a1740
Capabilities:
Decrypt data via sspi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x40
mov ebp, ecx
mov eax, dword [edx + 0xf8]
mov ecx, dword [edx + 0x108]
cmp ecx, eax
jb 0x4a1a11
mov ecx, dword [edx + 0x100]
mov dword [esp + 4], eax
lea eax, [esp + 4]
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 4
mov edi, edx
mov dword [esp + 8], 1
mov dword [esp + 0x3c], eax
lea eax, [edx + 0x128]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], 0
lea ecx, [esp + 0x34]
push 0
push 0
push ecx
push eax
call dword [sym.imp.secur32.dll_DecryptMessage]
cmp eax, 0x90316
jg 0x4a18da
cmp eax, 0x80090318
je 0x4a194e
test eax, eax
jne 0x4a1942
mov eax, dword [esp + 0x18]
mov esi, dword [edi + 0x100]
mov dword [esp], ebp
mov ebp, dword [esp + 0x10]
mov edx, dword [edi + 0x108]
mov dword [edi + 0xf0], 0
sub eax, esi
mov ecx, eax
add ecx, ebp
jb 0x4a1a49
cmp ecx, edx
ja 0x4a1a5a
add esi, eax
cmp dword [edi + 0xec], ebp
mov ebx, 0
jb 0x4a19f4
mov eax, dword [edi + 0xe8]
add eax, ebx
push ebp
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, ebp
cmp dword [esp + 0x2c], 5
mov ebp, 0
mov dword [edi + 0xf0], ebx
mov dword [edi + 0xe4], 0
mov dword [edi + 0xe0], 0
mov ecx, dword [edi + 0xf8]
jne 0x4a1896
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp]
mov eax, ecx
sub eax, ebp
jb 0x4a1a22
test ebp, ebp
je 0x4a19ca
mov edx, dword [edi + 0x108]
mov esi, edx
sub esi, eax
jb 0x4a1a38
cmp ebp, ecx
mov dword [edi + 0x108], 0
jne 0x4a19ad
cmp edx, eax
jne 0x4a19c4
jmp 0x4a19ca
cmp eax, 0x90317
je 0x4a1966
cmp eax, 0x90321
jne 0x4a1942
mov dword [edi + 0xc8], 0x10000
mov byte [edi + 0xcc], 0
xor ebx, ebx
cmp dword [esp + 0x2c], 5
mov ecx, dword [edi + 0xf8]
jne 0x4a1910
mov ebx, dword [esp + 0x28]
mov eax, ecx
sub eax, ebx
jb 0x4a1a22
test ebx, ebx
je 0x4a198b
mov edx, dword [edi + 0x108]
mov esi, edx
sub esi, eax
jb 0x4a1a38
cmp ebx, ecx
mov dword [edi + 0x108], 0
jne 0x4a196e
cmp edx, eax
jne 0x4a1985
jmp 0x4a198b
mov byte [ebp], 0
mov dword [ebp + 4], eax
jmp 0x4a19ec
cmp dword [esp + 0x14], 4
mov eax, 1
jne 0x4a195e
mov eax, dword [esp + 0x10]
mov dword [edi + 0x148], eax
jmp 0x4a19a5
mov word [ebp], 0x104
jmp 0x4a19ec
cmp edx, eax
je 0x4a198b
mov ecx, dword [edi + 0x100]
add eax, ecx
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [edi + 0x108], esi
mov dword [edi + 0xf8], ebx
mov dword [edi + 0xfc], 0
mov dword [edi + 0x148], 0
mov word [ebp], 4
jmp 0x4a19ec
cmp edx, eax
je 0x4a19ca
mov ecx, dword [edi + 0x100]
add eax, ecx
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [edi + 0x108], esi
xor eax, eax
test ebp, ebp
mov dword [edi + 0xf8], ebp
mov dword [edi + 0xfc], 0
mov word [ebx], 4
sete al
mov dword [edi + 0x148], eax
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [edi + 0xe8]
push ebp
push 0
push eax
call fcn.0059c3c0
add esp, 0xc
mov ebx, dword [edi + 0xf0]
jmp 0x4a1851
push 0x60d314
push ecx
push eax
call fcn.005a0fc0
add esp, 0xc
ud2
push 0x60d2c4
push 0x1f
push 0x60d2a3
call fcn.005a0b60
add esp, 0xc
ud2
push 0x6097d0
push edx
push eax
call fcn.005a0fc0
add esp, 0xc
ud2
push 0x60d324
push ecx
push eax
call fcn.005a1030
add esp, 0xc
ud2
push 0x60d324
push edx
push ecx
call fcn.005a0fc0
add esp, 0xc
ud2