Function at 0x4052d8
Capabilities:
Decrypt data via sspi

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rbx, rcx
xor r13d, r13d
mov rcx, qword [rcx + 0xbe0]
test rcx, rcx
je 0x40555e
mov rdi, qword [rbx + 0xbe8]
test rdi, rdi
je 0x40555e
mov rax, qword [rbx + 0xbf8]
lea r8d, [r13 + 0x40]
xor edx, edx
sub rdi, rax
lea r14, [rax + rcx]
lea rcx, [rbp - 0x40]
call fcn.00424830
lea rax, [rbp - 0x40]
mov qword [rbp - 0x38], r14
lea r12, [rbx + 0xb98]
mov qword [rbp - 0x48], rax
lea esi, [r13 + 1]
mov dword [rbp - 0x40], edi
lea r15d, [r13 + 4]
mov dword [rbp - 0x3c], esi
mov rcx, r12
mov dword [rbp - 0x2c], r13d
mov dword [rbp - 0x1c], r13d
mov dword [rbp - 0xc], r13d
mov dword [rbp - 0x50], r13d
mov dword [rbp - 0x4c], r15d
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rbx + 0xbc0]
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x50]
call qword [sym.imp.Secur32.dll_DecryptMessage]
cmp eax, 0x80090318
je 0x405525
cmp eax, 0x90317
jne 0x40542b
mov rax, qword [rbx + 0xbf8]
mov qword [rbx + 0xbe8], rax
mov rax, qword [rbx + 8]
cmp rax, 0xffffffffffffffff
je 0x40549c
lea rcx, [rbx + 0x22c]
mov edx, 0xff
lea r8, str.tls___socket_closed_in_decrypt_message
sub r8, rcx
lea rax, [rdx + 0x7ffffeff]
test rax, rax
je 0x4053f9
movzx eax, word [r8 + rcx]
test ax, ax
je 0x4053f9
mov word [rcx], ax
add rcx, 2
sub rdx, rsi
jne 0x4053d7
test rdx, rdx
lea rax, [rcx - 2]
mov edx, 2
cmovne rax, rcx
mov word [rax], r13w
mov rcx, qword [rbx + 8]
call qword [sym.imp.WS2_32.dll_shutdown]
mov rcx, qword [rbx + 8]
call qword [sym.imp.WS2_32.dll_closesocket]
mov qword [rbx + 8], 0xffffffffffffffff
jmp 0x40549c
cmp eax, 0x80090308
jne 0x40547a
add rbx, 0x22c
lea rcx, str.tls___invalid_token_in_decrypt_message
sub rcx, rbx
mov edx, 0xff
lea rax, [rdx + 0x7ffffeff]
test rax, rax
je 0x405469
movzx eax, word [rcx + rbx]
test ax, ax
je 0x405469
mov word [rbx], ax
add rbx, 2
sub rdx, rsi
jne 0x405448
test rdx, rdx
lea rax, [rbx - 2]
cmovne rax, rbx
mov word [rax], r13w
jmp 0x405499
test eax, eax
je 0x4054ad
lea rcx, [rbx + 0x22c]
mov r9d, eax
lea r8, str.tls___decrypt_message_failed___d_status
mov edx, 0xff
call fcn.0040457c
mov sil, r13b
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, sil
jmp 0x405560
lea rdi, [rbp - 0x40]
cmp dword [rdi + 4], esi
jne 0x4054d9
mov rcx, qword [rbx + 0xbf8]
add rcx, qword [rbx + 0xbe0]
mov r8d, dword [rdi]
mov rdx, qword [rdi + 8]
call fcn.00424180
mov eax, dword [rdi]
add qword [rbx + 0xbf8], rax
add rdi, 0x10
sub r15, rsi
jne 0x4054b1
cmp dword [rbp - 0x3c], 5
jne 0x4054f2
lea rax, [rbp - 0x40]
lea rcx, [rbp - 0x38]
jmp 0x405520
cmp dword [rbp - 0x2c], 5
jne 0x405502
lea rax, [rbp - 0x30]
lea rcx, [rbp - 0x28]
jmp 0x405520
cmp dword [rbp - 0x1c], 5
jne 0x405512
lea rax, [rbp - 0x20]
lea rcx, [rbp - 0x18]
jmp 0x405520
cmp dword [rbp - 0xc], 5
jne 0x405559
lea rax, [rbp - 0x10]
lea rcx, [rbp - 8]
mov r14, qword [rcx]
mov edi, dword [rax]
test rdi, rdi
je 0x405543
mov rcx, qword [rbx + 0xbf8]
mov r8, rdi
add rcx, qword [rbx + 0xbe0]
mov rdx, r14
call fcn.00424180
mov rdx, qword [rbx + 0xbf8]
add rdx, rdi
mov qword [rbx + 0xbe8], rdx
jmp 0x40549c
mov rdi, r13
jmp 0x405543
xor al, al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret