Function at 0x440076
Capabilities:
Encrypt data via sspi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov esi, edx
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x60]
mov dword [edx + 0xa4], eax
lea edi, [esp + 0x10]
mov ecx, edi
call fcn.0043f00d
mov eax, dword [edi]
cmp eax, 2
jne 0x4400bd
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], edi
cmp bl, 4
jne 0x4401dd
jmp 0x440256
test eax, eax
je 0x4401c6
mov edi, dword [esi + 0x48]
mov eax, dword [esi + 0x38]
xor eax, edi
or eax, dword [esi + 0x3c]
jne 0x440235
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
cmp eax, ebx
cmovb ebx, eax
mov dword [esp], ecx
lea eax, [ebx + ecx]
mov edx, dword [esp + 0x18]
add edx, eax
cmp edi, edx
jae 0x440106
lea ecx, [esi + 0x40]
mov edi, eax
call fcn.00402229
mov eax, edi
mov edi, dword [esi + 0x48]
cmp eax, dword [esp]
jb 0x44027b
mov dword [esp + 8], eax
cmp edi, eax
jb 0x44028a
mov eax, dword [esi + 0x44]
mov ebp, dword [esp]
add eax, ebp
push ebx
push dword [esp + 0x68]
push eax
call fcn.004b64b0
add esp, 0xc
cmp edi, ebp
jb 0x44029a
mov dword [esp + 0xc], ebx
mov edx, dword [esi + 0x48]
mov eax, edx
mov edi, dword [esp + 8]
sub eax, edi
lea ebp, [esp + 0x10]
jb 0x4402a9
mov ecx, dword [esi + 0x44]
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov edx, dword [esp]
mov dword [esp + 0x10], edx
add edx, ecx
add edi, ecx
mov dword [esp + 0x14], 7
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], 1
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 6
mov dword [esp + 0x30], edi
lea eax, [esp + 0x40]
mov dword [eax], ebx
mov dword [eax + 4], 4
mov dword [eax + 8], ebp
lea ecx, [esi + 0x68]
push ebx
push eax
push ebx
push ecx
call dword [sym.imp.secur32.dll_EncryptMessage]
test eax, eax
je 0x44020f
mov edi, eax
jmp 0x4400a7
mov dword [esp + 0x14], 0x80090317
mov dword [esp + 0x10], 0
mov edi, 0x80090317
xor ebx, ebx
lea ecx, [esp + 0x10]
call fcn.00430584
cmp al, 0xd
jne 0x440207
mov eax, dword [esp + 4]
mov byte [eax], 5
mov dword [esi + 0xa4], 0
movzx ecx, bl
mov edx, edi
call fcn.0043d9ff
jmp 0x44026a
mov eax, dword [esp + 4]
mov dword [eax], ebx
jmp 0x44025d
mov eax, dword [esp + 0x1c]
add eax, dword [esp + 0x10]
add eax, dword [esp + 0x28]
cmp dword [esi + 0x48], eax
jb 0x440223
mov dword [esi + 0x48], eax
xor eax, eax
mov dword [esi + 0x3c], eax
mov dword [esi + 0x38], eax
mov eax, dword [esp + 0xc]
mov dword [esi + 0xac], eax
lea edi, [esp + 0x10]
mov ecx, edi
mov edx, esi
call fcn.0043fed4
cmp byte [edi], 4
je 0x440250
mov ebx, dword [esp + 0x10]
cmp bl, 4
jne 0x440272
mov edi, dword [esi + 0xac]
mov eax, dword [esp + 4]
mov byte [eax], 4
mov dword [eax + 4], edi
mov dword [esi + 0xa4], 0
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x14]
jmp 0x4400a7
mov ecx, dword [esp]
mov edx, eax
push 0x4f5208
call fcn.004cbbd0
mov ecx, dword [esp + 8]
mov edx, edi
push 0x4f5208
call fcn.004cb960
mov ecx, dword [esp]
mov edx, edi
push 0x4f5218
call fcn.004cb960
mov ecx, edi
push 0x4f5228
call fcn.004cb960
mov eax, dword [esp + 4]
push 0
push dword [eax]
call dword [sym.imp.crypt32.dll_CertCloseStore]
ret