Function at 0x4807a0
Capabilities:
Encrypt or decrypt via wincrypt

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x593393
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x5ea110]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 4], 0
mov esi, dword [ecx + 8]
mov dword [ebp - 0x38], ecx
test esi, esi
jne 0x480835
push 0x80090003
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x48], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Key_is_not_valid
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x44], xmm0
call fcn.00533bf1
add esp, 8
mov dword [ebp - 0x48], vtable.WinAESException.0
lea eax, [ebp - 0x48]
push 0x5e68e0
push eax
call fcn.00532c14
test edi, edi
jne 0x480883
push 0x6f8
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x54], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Buffer_is_NULL
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x50], xmm0
call fcn.00533bf1
add esp, 8
mov dword [ebp - 0x54], vtable.WinAESException.0
lea eax, [ebp - 0x54]
push 0x5e68e0
push eax
call fcn.00532c14
test edx, 0xf
je 0x4808d5
push 0x80090005
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x60], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Data_size_is_not_a_multple_of_block_size
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x5c], xmm0
call fcn.00533bf1
add esp, 8
mov dword [ebp - 0x60], vtable.WinAESException.0
lea eax, [ebp - 0x60]
push 0x5e68e0
push eax
call fcn.00532c14
lea eax, [edx - 0x10]
cmp dword [ebp + 0xc], eax
ja 0x480903
push 0x80090028
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.Decrypt_1_:_Buffer_is_too_small
lea ecx, [ebp - 0x6c]
call fcn.0047e3f0
push 0x5e68e0
lea eax, [ebp - 0x6c]
push eax
call fcn.00532c14
cmp byte [ecx + 0x10], 0
jne 0x48092f
push 0x80090027
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.Decrypt_1_:_IV_has_not_been_set
lea ecx, [ebp - 0x78]
call fcn.0047e3f0
push 0x5e68e0
lea eax, [ebp - 0x78]
push eax
call fcn.00532c14
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push edi
push 0
push 1
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
mov ecx, eax
test ecx, ecx
jne 0x480a22
sub esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00481510
mov edx, str.Decrypt_1_:_CryptDecrypt_failed__
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.00484c20
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ecx, eax
call fcn.00480ef0
mov edx, eax
lea ecx, [ebp - 0x11c]
call fcn.00484c20
mov edx, str.__0x
lea ecx, [ebp - 0x11c]
call fcn.00484c20
push 0x47fb20
mov ecx, eax
call fcn.00481da0
mov edi, eax
call esi
push eax
mov ecx, edi
call fcn.00481c00
mov edx, 0x5c1598
mov ecx, eax
call fcn.00484c20
lea eax, [ebp - 0x2c]
mov dword [ebx], 0
push eax
lea ecx, [ebp - 0x11c]
call fcn.00481430
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x4809e1
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x84]
call fcn.0047e3f0
push 0x5e68e0
lea eax, [ebp - 0x84]
push eax
call fcn.00532c14
mov eax, dword [ebp - 0x38]
test byte [eax + 0x14], 0x10
je 0x480a10
push 0
push 0
call fcn.00532c14
mov dword [ebp - 0x38], 0
mov eax, 0x480a1d
ret
mov eax, dword [ebp - 0x3c]
mov dword [ebx], eax
xor eax, eax
test ecx, ecx
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0050ed39
mov esp, ebp
pop ebp
ret 0x10