Function at 0x4a1470
Capabilities:
Decrypt data via sspi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x40
mov ebp, ecx
mov eax, dword [edx + 0x50]
mov ecx, dword [edx + 0x60]
cmp ecx, eax
jb 0x4a16e6
mov ecx, dword [edx + 0x58]
mov dword [esp + 4], eax
lea eax, [esp + 4]
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 4
mov edi, edx
mov dword [esp + 8], 1
mov dword [esp + 0x3c], eax
lea eax, [edx + 0x80]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], 0
lea ecx, [esp + 0x34]
push 0
push 0
push ecx
push eax
call dword [sym.imp.secur32.dll_DecryptMessage]
cmp eax, 0x90316
jg 0x4a15e0
cmp eax, 0x80090318
je 0x4a1641
test eax, eax
jne 0x4a1635
mov eax, dword [esp + 0x18]
mov esi, dword [edi + 0x58]
mov dword [esp], ebp
mov ebp, dword [esp + 0x10]
mov edx, dword [edi + 0x60]
mov dword [edi + 0x48], 0
sub eax, esi
mov ecx, eax
add ecx, ebp
jb 0x4a171e
cmp ecx, edx
ja 0x4a172f
add esi, eax
cmp dword [edi + 0x44], ebp
mov ebx, 0
jb 0x4a16cf
mov eax, dword [edi + 0x40]
add eax, ebx
push ebp
push esi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, ebp
cmp dword [esp + 0x2c], 5
mov ebp, 0
mov dword [edi + 0x48], ebx
mov dword [edi + 0x3c], 0
mov dword [edi + 0x38], 0
mov ecx, dword [edi + 0x50]
jne 0x4a15a2
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp]
mov eax, ecx
sub eax, ebp
jb 0x4a16f7
test ebp, ebp
je 0x4a16ab
mov edx, dword [edi + 0x60]
mov esi, edx
sub esi, eax
jb 0x4a170d
cmp ebp, ecx
mov dword [edi + 0x60], 0
jne 0x4a1694
cmp edx, eax
jne 0x4a16a8
jmp 0x4a16ab
cmp eax, 0x90317
je 0x4a1659
cmp eax, 0x90321
jne 0x4a1635
mov dword [edi + 0x20], 0x10000
mov byte [edi + 0x24], 0
xor ebx, ebx
cmp dword [esp + 0x2c], 5
mov ecx, dword [edi + 0x50]
jne 0x4a1609
mov ebx, dword [esp + 0x28]
mov eax, ecx
sub eax, ebx
jb 0x4a16f7
test ebx, ebx
je 0x4a1678
mov edx, dword [edi + 0x60]
mov esi, edx
sub esi, eax
jb 0x4a170d
cmp ebx, ecx
mov dword [edi + 0x60], 0
jne 0x4a1661
cmp edx, eax
jne 0x4a1675
jmp 0x4a1678
mov byte [ebp], 0
mov dword [ebp + 4], eax
jmp 0x4a16c7
cmp dword [esp + 0x14], 4
mov eax, 1
jne 0x4a1651
mov eax, dword [esp + 0x10]
mov dword [edi + 0xa0], eax
jmp 0x4a168c
mov word [ebp], 0x104
jmp 0x4a16c7
cmp edx, eax
je 0x4a1678
mov ecx, dword [edi + 0x58]
add eax, ecx
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [edi + 0x60], esi
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], 0
mov dword [edi + 0xa0], 0
mov word [ebp], 4
jmp 0x4a16c7
cmp edx, eax
je 0x4a16ab
mov ecx, dword [edi + 0x58]
add eax, ecx
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [edi + 0x60], esi
xor eax, eax
test ebp, ebp
mov dword [edi + 0x50], ebp
mov dword [edi + 0x54], 0
mov word [ebx], 4
sete al
mov dword [edi + 0xa0], eax
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [edi + 0x40]
push ebp
push 0
push eax
call fcn.0059c3c0
add esp, 0xc
mov ebx, dword [edi + 0x48]
jmp 0x4a156c
push 0x60d314
push ecx
push eax
call fcn.005a0fc0
add esp, 0xc
ud2
push 0x60d2c4
push 0x1f
push 0x60d2a3
call fcn.005a0b60
add esp, 0xc
ud2
push 0x6097d0
push edx
push eax
call fcn.005a0fc0
add esp, 0xc
ud2
push 0x60d324
push ecx
push eax
call fcn.005a1030
add esp, 0xc
ud2
push 0x60d324
push edx
push ecx
call fcn.005a0fc0
add esp, 0xc
ud2