Function at 0x44f560
Capabilities:
Encrypt or decrypt via wincrypt

Disassembly:
push 0xffffffffffffffff
push 0x4da22b
mov eax, dword fs:[0]
push eax
mov eax, 0x1100
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x10fc], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x1114]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1124]
xor edi, edi
xor ebx, ebx
mov ebp, ecx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x24], 0x80
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], edi
mov byte [esp + 0x17], bl
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x30], vtable.dwcl::Blowfish.0
mov ecx, esi
mov dword [esp + 0x111c], edi
call fcn.00424be0
cmp edx, edi
jg 0x44f62d
jl 0x44f5ef
cmp eax, 0x80
jae 0x44f62d
mov ecx, esi
call fcn.0043a470
mov eax, dword [esp + 0x34]
mov dword [esp + 0x30], vtable.dwcl::AbstractCipher.0
cmp eax, edi
je 0x44f613
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x3c]
cmp eax, edi
je 0x44f866
push eax
call fcn.004690f0
add esp, 4
jmp 0x44f866
mov ebp, dword [ebp + 0x2c]
cmp ebp, 1
jne 0x44f65a
mov eax, dword [esp + 0x24]
push 0
push eax
lea ecx, [esp + 0x1098]
push ecx
push 0
mov ebp, 0x80
push 0
mov ecx, esi
mov dword [esp + 0x3c], ebp
call fcn.00424750
jmp 0x44f695
cmp ebp, 2
jne 0x44f85d
mov edx, dword [esp + 0x24]
xor ebp, ebp
push ebp
push edx
lea eax, [esp + 0x1098]
push eax
mov ecx, esi
mov dword [esp + 0x34], edi
call fcn.00424be0
mov ecx, dword [esp + 0x30]
xor ebx, ebx
sub eax, ecx
sbb edx, ebx
push edx
push eax
mov ecx, esi
call fcn.00424750
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push edx
mov edx, dword [ecx + 0x28]
lea eax, [esp + 0x1094]
push eax
push 0
push 1
push 0
push edx
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
jne 0x44f6c6
mov ecx, esi
call fcn.0043a470
jmp 0x44f85d
cmp dword [esp + 0x24], 0x38
jne 0x44f6ba
push 0
push 0x38
lea eax, [esp + 0x1098]
push eax
lea ecx, [esp + 0x3c]
call fcn.004014d0
mov ecx, esi
call fcn.00424be0
test edx, edx
jl 0x44f702
jg 0x44f6f6
cmp eax, 0x14000080
jbe 0x44f702
mov eax, 0x14000000
mov byte [esp + 0x17], 1
jmp 0x44f70c
mov ecx, esi
call fcn.00424be0
add eax, 0xffffff80
mov edx, eax
and edx, 7
mov dword [esp + 0x18], edx
je 0x44f719
sub eax, edx
add eax, dword [esp + 0x28]
mov ecx, 0
mov dword [esp + 0x28], eax
mov eax, ecx
adc ecx, eax
mov dword [esp + 0x2c], ecx
cmp edi, ecx
ja 0x44f79c
jb 0x44f73a
cmp ebp, dword [esp + 0x28]
jae 0x44f79c
push 0
push 8
lea ecx, [esp + 0x1090]
push ecx
push edi
push ebp
mov ecx, esi
call fcn.00424750
lea edx, [esp + 0x1088]
push edx
mov eax, edx
push eax
lea ecx, [esp + 0x38]
call fcn.004036d0
mov edx, dword [esp + 0x20]
push 0
push 8
lea ecx, [esp + 0x1090]
push ecx
push edx
push ebx
mov ecx, esi
call fcn.00424860
add ebp, 8
adc edi, 0
add ebx, 8
adc dword [esp + 0x20], 0
cmp edi, dword [esp + 0x2c]
jb 0x44f73a
ja 0x44f798
cmp ebp, dword [esp + 0x28]
jb 0x44f73a
mov edx, dword [esp + 0x18]
test edx, edx
je 0x44f7e5
xor eax, eax
push eax
push edx
lea eax, [esp + 0x1090]
push eax
push edi
push ebp
mov ecx, esi
call fcn.00424750
mov ecx, dword [esp + 0x18]
xor eax, eax
push eax
mov eax, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x1090]
push edx
push eax
push ebx
mov ecx, esi
call fcn.00424860
mov ecx, dword [esp + 0x18]
add ebp, ecx
mov eax, 0
adc edi, eax
add ebx, ecx
adc dword [esp + 0x20], eax
cmp byte [esp + 0x17], 0
je 0x44f84f
mov ecx, esi
call fcn.00424be0
cmp edi, edx
ja 0x44f84f
jb 0x44f7fd
cmp ebp, eax
jae 0x44f84f
push 0
push 8
lea ecx, [esp + 0x1090]
push ecx
push edi
push ebp
mov ecx, esi
call fcn.00424750
mov eax, dword [esp + 0x20]
push 0
push 8
lea edx, [esp + 0x1090]
push edx
push eax
push ebx
mov ecx, esi
call fcn.00424860
mov ecx, dword [esp + 0x18]
add ebp, ecx
mov eax, 0
adc edi, eax
add ebx, ecx
adc dword [esp + 0x20], eax
mov ecx, esi
call fcn.00424be0
cmp edi, edx
jb 0x44f7fd
ja 0x44f84f
cmp ebp, eax
jb 0x44f7fd
push 0
push 0x80
mov ecx, esi
call fcn.00424c20
lea ecx, [esp + 0x30]
call fcn.0042e700
mov ecx, dword [esp + 0x1114]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x10fc]
xor ecx, esp
call fcn.004690b5
add esp, 0x110c
ret 8