Function at 0x40d24d
Capabilities:
Contain obfuscated stackstrings
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x454
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x14], 0x6a6f7972
mov dword [ebp - 0x10], 0x6d7a6c76
mov dword [ebp - 0xc], 0x796c6164
mov dword [ebp - 8], 0x6a726c67
mov dword [ebp - 0x34], 0x69786368
mov dword [ebp - 0x30], 0x62716b6c
mov dword [ebp - 0x2c], 0x7a636862
mov dword [ebp - 0x28], 0x6c756566
mov dword [ebp - 0x24], 0x73626774
mov dword [ebp - 0x20], 0x616d646b
mov dword [ebp - 0x1c], 0x76696e75
mov dword [ebp - 0x18], 0x6f75666d
call fcn.00631510
pop ecx
cmp eax, 1
jae 0x40d2cf
xor eax, eax
jmp 0x40d425
push esi
push 0x3e8
lea eax, [ebp - 0x41c]
push eax
push ebx
call fcn.00445e29
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x40d2fb
push ebx
push str.DecryptRazorSynapsePassword
push str._s:_DecodeBase64Data_failed_to_decode_input_data__s
jmp 0x40d41a
push esi
push ebx
call fcn.00631510
pop ecx
push eax
push str.DecryptRazorSynapsePassword
push str._s:_DecodeBase64Data_Success___Input_length__d__Decoded_Length_d
call fcn.00449974
lea eax, [ebp - 0x41c]
push esi
push eax
call fcn.004498ca
push 0x20
pop eax
push eax
mov dword [ebp - 0x440], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x448], 0x208
push eax
mov dword [ebp - 0x444], 0x6610
call fcn.006269d0
add esp, 0x24
lea eax, [ebp - 0x454]
xor ebx, ebx
push 0xf0000000
push 0x18
push ebx
push ebx
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x40d383
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DecryptRazorSynapsePassword
push str._s:_CryptAcquireContext_failed__Error0x_.8x
jmp 0x40d41a
lea eax, [ebp - 0x450]
push eax
push ebx
push ebx
push 0x2c
lea eax, [ebp - 0x448]
push eax
push dword [ebp - 0x454]
call dword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
jne 0x40d3b8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DecryptRazorSynapsePassword
push str._s:_CryptImportKey_failed__Error0x_.8x
jmp 0x40d41a
push ebx
lea eax, [ebp - 0x14]
push eax
push 1
push dword [ebp - 0x450]
call dword [sym.imp.ADVAPI32.dll_CryptSetKeyParam]
test eax, eax
jne 0x40d3e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DecryptRazorSynapsePassword
push str._s:_CryptSetKeyParam_failed__Error0x_.8x
jmp 0x40d41a
lea eax, [ebp - 0x44c]
mov dword [ebp - 0x44c], esi
push eax
lea eax, [ebp - 0x41c]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x450]
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
jne 0x40d433
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DecryptRazorSynapsePassword
push str._s:_CryptDecrypt_failed__Error0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
mov eax, dword [ebp - 0x44c]
cmp eax, 0x3e8
jae 0x40d4c4
push eax
mov byte [ebp + eax - 0x41c], bl
lea eax, [ebp - 0x41c]
push eax
push dword [ebp + 0x10]
push edi
call fcn.00631360
push edi
push dword [ebp - 0x44c]
push str.DecryptRazorSynapsePassword
push str._s:_Decrypted_password_is___d______s_
call fcn.00449974
mov eax, dword [ebp - 0x44c]
add esp, 0x20
mov esi, ebx
test eax, eax
je 0x40d4a8
movsx eax, byte [edi + esi]
push eax
call fcn.006303a0
pop ecx
test eax, eax
je 0x40d49d
mov eax, dword [ebp - 0x44c]
inc esi
cmp esi, eax
jb 0x40d481
jmp 0x40d4a8
mov eax, esi
mov byte [edi + esi], bl
mov dword [ebp - 0x44c], eax
push edi
push eax
push str.DecryptRazorSynapsePassword
push str._s:__After_Refining...__Final_Decrypted_password_is___d______s_
call fcn.00449974
xor eax, eax
add esp, 0x10
inc eax
jmp 0x40d424
call fcn.005fe87a
int3