Function at 0x1400ca980
Capabilities:
Encrypt data via sspi

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov rax, qword [0x1401c1280]
xor rax, rsp
mov qword [rbp - 1], rax
xor r12d, r12d
mov qword [rbp - 0x59], rcx
mov r15, rcx
mov ebx, r9d
mov rcx, qword [rcx + 0x58]
mov r14, r8
mov rdi, rdx
mov esi, r12d
test rcx, rcx
je 0x1400ca9cd
call fcn.14005a3c0
mov qword [r15 + 0x58], r12
cmp byte [r15 + 0x6d], sil
je 0x1400ca9f4
lea r8, [rbp - 0x41]
xor edx, edx
lea rcx, [r15 + 0x40]
call sub.Secur32.dll_QueryContextAttributesA
test eax, eax
je 0x1400caa00
lea rdx, str.QueryContextAttributes
mov ecx, eax
call fcn.1400caf10
mov rax, 0xffffffffffffffff
jmp 0x1400cad7f
test r14, r14
je 0x1400caa0d
lea eax, [rbx + 4]
mov dword [rbp - 0x61], eax
jmp 0x1400caa24
lea rdx, [rbp - 0x61]
mov rcx, rdi
call fcn.1400cada0
mov rsi, rax
test rax, rax
je 0x1400ca9f4
mov eax, dword [rbp - 0x61]
mov r8d, dword [rbp - 0x39]
add r8d, dword [rbp - 0x35]
add r8d, eax
mov qword [rsp + 0x98], r13
mov ecx, r8d
mov edi, r8d
call fcn.14005a3d0
mov r13, rax
test rax, rax
jne 0x1400caa5b
mov rcx, rsi
call fcn.14005a3c0
lea rax, [r13 - 1]
jmp 0x1400cad77
mov eax, dword [rbp - 0x35]
mov rbx, 0xffffffffffffffff
lea rcx, [rax + r13]
test r14, r14
je 0x1400caadf
mov dword [rcx], 1
mov r8, rbx
inc r8
cmp byte [r14 + r8], r12b
jne 0x1400caa77
mov eax, dword [rbp - 0x35]
add rcx, 4
sub rdi, rax
sub rdi, 4
test r8, r8
je 0x1400cab4d
test rcx, rcx
jne 0x1400caab1
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
call fcn.14002aba8
jmp 0x1400cab4d
cmp rdi, r8
jb 0x1400caac3
mov rdx, r14
call fcn.1400e2bb0
jmp 0x1400cab4d
mov r8, rdi
xor edx, edx
call fcn.1400e3250
call fcn.14002ed7c
mov dword [rax], 0x22
call fcn.14002aba8
jmp 0x1400cab4d
mov r14d, dword [rbp - 0x61]
sub rdi, rax
test r14, r14
je 0x1400cab45
test rcx, rcx
jne 0x1400caafd
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cab40
test rsi, rsi
je 0x1400cab14
cmp rdi, r14
jb 0x1400cab14
mov r8, r14
mov rdx, rsi
call fcn.1400e2bb0
jmp 0x1400cab45
mov r8, rdi
xor edx, edx
call fcn.1400e3250
test rsi, rsi
jne 0x1400cab30
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cab40
cmp rdi, r14
jae 0x1400cab45
call fcn.14002ed7c
mov dword [rax], 0x22
call fcn.14002aba8
mov rcx, rsi
call fcn.14005a3c0
mov r8d, dword [rbp - 0x35]
lea rax, [rbp - 0x31]
mov edx, dword [rbp - 0x61]
lea rcx, [r15 + 0x40]
mov dword [rbp - 0x21], edx
add edx, r8d
add rdx, r13
mov qword [rbp - 0x49], rax
cmp dword [rbp + 0x7f], r12d
mov eax, 1
mov qword [rbp - 9], rdx
mov edx, 0x80000001
mov dword [rbp - 0x1d], eax
cmovne edx, r12d
lea rax, [r8 + r13]
mov dword [rbp - 0x31], r8d
mov qword [rbp - 0x19], rax
lea r8, [rbp - 0x51]
mov eax, dword [rbp - 0x39]
xor r9d, r9d
mov dword [rbp - 0x4d], 3
mov dword [rbp - 0x51], r12d
mov dword [rbp - 0x2d], 2
mov qword [rbp - 0x29], r13
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], 9
call sub.Secur32.dll_EncryptMessage
mov edi, eax
test eax, eax
je 0x1400cabde
mov rcx, r13
call fcn.14005a3c0
lea rdx, [0x1401a9510]
mov ecx, edi
call fcn.1400caf10
jmp 0x1400cad75
mov r12d, dword [rbp - 0x11]
add r12d, dword [rbp - 0x21]
add r12d, dword [rbp - 0x31]
mov ecx, r12d
mov edi, r12d
call fcn.14005a3d0
mov r14d, dword [rbp - 0x31]
mov rsi, rax
mov r15, qword [rbp - 0x29]
test r14, r14
je 0x1400cac65
test rax, rax
jne 0x1400cac17
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cac60
test r15, r15
je 0x1400cac31
cmp rdi, r14
jb 0x1400cac31
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.1400e2bb0
jmp 0x1400cac65
mov r8, rdi
xor edx, edx
mov rcx, rsi
call fcn.1400e3250
test r15, r15
jne 0x1400cac50
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cac60
cmp rdi, r14
jae 0x1400cac65
call fcn.14002ed7c
mov dword [rax], 0x22
call fcn.14002aba8
mov edx, dword [rbp - 0x31]
mov r14d, r12d
mov edi, dword [rbp - 0x21]
sub r14d, edx
mov r15, qword [rbp - 0x19]
lea rcx, [rsi + rdx]
test rdi, rdi
je 0x1400cacd8
test rcx, rcx
jne 0x1400cac90
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cacd3
test r15, r15
je 0x1400caca7
cmp r14, rdi
jb 0x1400caca7
mov r8, rdi
mov rdx, r15
call fcn.1400e2bb0
jmp 0x1400cacd8
mov r8, r14
xor edx, edx
call fcn.1400e3250
test r15, r15
jne 0x1400cacc3
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cacd3
cmp r14, rdi
jae 0x1400cacd8
call fcn.14002ed7c
mov dword [rax], 0x22
call fcn.14002aba8
mov eax, dword [rbp - 0x21]
mov r14d, r12d
mov edx, dword [rbp - 0x31]
sub r14d, eax
mov edi, dword [rbp - 0x11]
sub r14d, edx
mov r15, qword [rbp - 9]
lea rcx, [rsi + rax]
add rcx, rdx
test rdi, rdi
je 0x1400cad47
test rcx, rcx
jne 0x1400cad0c
call fcn.14002ed7c
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1400cad42
test r15, r15
je 0x1400cad23
cmp r14, rdi
jb 0x1400cad23
mov r8, rdi
mov rdx, r15
call fcn.1400e2bb0
jmp 0x1400cad47
mov r8, r14
xor edx, edx
call fcn.1400e3250
test r15, r15
je 0x1400cacff
cmp r14, rdi
jae 0x1400cad47
call fcn.14002ed7c
mov dword [rax], 0x22
call fcn.14002aba8
mov edx, r12d
mov rcx, rsi
call fcn.1400cae60
mov rcx, qword [rbp - 0x59]
test rax, rax
mov qword [rcx + 0x58], rax
mov eax, 1
mov rcx, r13
cmovne ebx, eax
call fcn.14005a3c0
mov rcx, rsi
call fcn.14005a3c0
mov eax, ebx
mov r13, qword [rsp + 0x98]
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.140023a50
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret