Function at 0xc5db00
Capabilities:
Decrypt data via sspi

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x148
mov eax, dword [0xce16ec]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov dword [ebp - 0x148], ecx
mov eax, dword [ebp - 0x148]
mov ecx, dword [eax + 0x9c]
add ecx, 0x14
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0x148]
mov eax, dword [edx + 0x9c]
add eax, 0x34
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ef30
movzx ecx, al
test ecx, ecx
jne 0xc5de7f
lea ecx, [ebp - 0x124]
call fcn.00c5f040
push 0
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov dword [eax + 4], 1
mov ecx, dword [ebp - 0xe4]
call fcn.00c36910
mov esi, eax
push 0
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov dword [eax], esi
push 0
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ef50
mov esi, eax
push 0
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov dword [eax + 8], esi
push 0
push 0
lea ecx, [ebp - 0x124]
call fcn.00c2f550
push eax
mov edx, dword [ebp - 0x148]
mov eax, dword [edx + 0x9c]
add eax, 8
push eax
call sub.Secur32.dll_DecryptMessage
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0xc5de35
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x134], 0
jmp 0xc5dc1b
mov ecx, dword [ebp - 0x134]
add ecx, 1
mov dword [ebp - 0x134], ecx
lea ecx, [ebp - 0x124]
call fcn.00c2f550
mov edx, dword [ebp - 0x134]
cmp edx, dword [eax + 4]
jae 0xc5dd1e
mov eax, dword [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
call fcn.00c5f020
cmp dword [eax + 4], 1
jne 0xc5dce1
mov ecx, dword [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov edx, dword [ebp - 0x12c]
add edx, dword [eax]
mov dword [ebp - 0x12c], edx
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0xe8]
call fcn.00c385c0
mov ecx, dword [eax]
mov dword [ebp - 0x13c], ecx
mov edx, dword [ebp - 0x134]
push edx
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov esi, eax
mov eax, dword [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov ecx, dword [eax + 8]
add ecx, dword [esi]
push ecx
mov edx, dword [ebp - 0x134]
push edx
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov eax, dword [eax + 8]
push eax
mov ecx, dword [ebp - 0x13c]
push ecx
mov ecx, dword [ebp - 0xe8]
call fcn.00c5f4a0
jmp 0xc5dd19
mov edx, dword [ebp - 0x134]
push edx
lea ecx, [ebp - 0x124]
call fcn.00c5f020
cmp dword [eax + 4], 5
jne 0xc5dd19
mov eax, dword [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
call fcn.00c5f020
mov ecx, dword [ebp - 0x130]
add ecx, dword [eax]
mov dword [ebp - 0x130], ecx
jmp 0xc5dc0c
cmp dword [ebp - 0x12c], 0
jne 0xc5dd46
push 0
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ef50
movsx edx, byte [eax]
cmp edx, 0x15
jne 0xc5dd46
mov dword [ebp - 0x128], 0x90317
cmp dword [ebp - 0x130], 0
je 0xc5ddaa
mov ecx, dword [ebp - 0xe4]
call fcn.00c36910
sub eax, dword [ebp - 0x130]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ef50
push eax
push 0
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ef50
push eax
call fcn.00c08cc0
add esp, 0xc
mov edx, dword [ebp - 0x130]
push edx
mov ecx, dword [ebp - 0xe4]
call fcn.00c5ee60
jmp 0xc5ddb5
mov ecx, dword [ebp - 0xe4]
call fcn.00c368a0
cmp dword [ebp - 0x128], 0
je 0xc5de25
xor eax, eax
je 0xc5de25
push 0xc8b020
mov ecx, dword [ebp - 0x128]
push ecx
lea edx, [ebp - 0x20]
push edx
call fcn.00c340e0
add esp, 0xc
push eax
push str.DecryptMessage_returned_continuation_code:
push 0
push 0
push 0
push 2
push 0
push 0
lea ecx, [ebp - 0xe0]
call fcn.00c34170
mov ecx, eax
call fcn.00c2f550
push eax
call fcn.00ac16a0
add esp, 8
push eax
call fcn.00ac9f20
add esp, 8
lea ecx, [ebp - 0xe0]
call fcn.00c34580
lea ecx, [ebp - 0x20]
call fcn.00b80ca0
jmp 0xc5ddbe
lea ecx, [ebp - 0x124]
call fcn.00c5f090
jmp 0xc5db44
cmp dword [ebp - 0x128], 0x80090318
jne 0xc5de50
lea ecx, [ebp - 0x124]
call fcn.00c5f090
jmp 0xc5de7f
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x144], eax
lea ecx, [ebp - 0x124]
call fcn.00c5f090
mov eax, dword [ebp - 0x144]
jmp 0xc5de81
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00c08a41
mov esp, ebp
pop ebp
ret