Function at 0x468f70
Capabilities:
Encrypt or decrypt via wincrypt

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x576bb3
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x5c7128]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edx, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 4], 0
mov esi, dword [ecx + 8]
mov dword [ebp - 0x38], ecx
test esi, esi
jne 0x469005
push 0x80090003
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x48], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Key_is_not_valid
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x44], xmm0
call fcn.0051a861
add esp, 8
mov dword [ebp - 0x48], vtable.WinAESException.0
lea eax, [ebp - 0x48]
push 0x5c36a0
push eax
call fcn.00519884
test edi, edi
jne 0x469053
push 0x6f8
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x54], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Buffer_is_NULL
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x50], xmm0
call fcn.0051a861
add esp, 8
mov dword [ebp - 0x54], vtable.WinAESException.0
lea eax, [ebp - 0x54]
push 0x5c36a0
push eax
call fcn.00519884
test edx, 0xf
je 0x4690a5
push 0x80090005
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x60], vtable.std::exception.0
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], str.Decrypt_1_:_Data_size_is_not_a_multple_of_block_size
xorps xmm0, xmm0
mov byte [ebp - 0x30], 1
push eax
movq qword [ebp - 0x5c], xmm0
call fcn.0051a861
add esp, 8
mov dword [ebp - 0x60], vtable.WinAESException.0
lea eax, [ebp - 0x60]
push 0x5c36a0
push eax
call fcn.00519884
lea eax, [edx - 0x10]
cmp dword [ebp + 0xc], eax
ja 0x4690d3
push 0x80090028
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.Decrypt_1_:_Buffer_is_too_small
lea ecx, [ebp - 0x6c]
call fcn.00466bc0
push 0x5c36a0
lea eax, [ebp - 0x6c]
push eax
call fcn.00519884
cmp byte [ecx + 0x10], 0
jne 0x4690ff
push 0x80090027
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.Decrypt_1_:_IV_has_not_been_set
lea ecx, [ebp - 0x78]
call fcn.00466bc0
push 0x5c36a0
lea eax, [ebp - 0x78]
push eax
call fcn.00519884
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push edi
push 0
push 1
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
mov ecx, eax
test ecx, ecx
jne 0x4691f2
sub esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00469ce0
mov edx, str.Decrypt_1_:_CryptDecrypt_failed__
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x11c]
call fcn.0046d400
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
mov ecx, eax
call fcn.004696c0
mov edx, eax
lea ecx, [ebp - 0x11c]
call fcn.0046d400
mov edx, str.__0x
lea ecx, [ebp - 0x11c]
call fcn.0046d400
push 0x4682f0
mov ecx, eax
call fcn.0046a570
mov edi, eax
call esi
push eax
mov ecx, edi
call fcn.0046a3d0
mov edx, 0x5a1200
mov ecx, eax
call fcn.0046d400
lea eax, [ebp - 0x2c]
mov dword [ebx], 0
push eax
lea ecx, [ebp - 0x11c]
call fcn.00469c00
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 0x10
jb 0x4691b1
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x84]
call fcn.00466bc0
push 0x5c36a0
lea eax, [ebp - 0x84]
push eax
call fcn.00519884
mov eax, dword [ebp - 0x38]
test byte [eax + 0x14], 0x10
je 0x4691e0
push 0
push 0
call fcn.00519884
mov dword [ebp - 0x38], 0
mov eax, 0x4691ed
ret
mov eax, dword [ebp - 0x3c]
mov dword [ebx], eax
xor eax, eax
test ecx, ecx
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004f598f
mov esp, ebp
pop ebp
ret 0x10