Function at 0x140009604
Capabilities:
Decrypt data via sspi
Receive data
Receive data on socket

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x88
mov rax, qword [0x140017008]
xor rax, rsp
mov qword [rbp + 7], rax
mov eax, dword [rcx + 0xfaf0]
mov r13d, r9d
mov r14d, r8d
mov r12, rdx
mov rsi, rcx
test eax, eax
jle 0x140009678
mov rdx, qword [rcx + 0xfae0]
cmp eax, r8d
mov edi, r8d
mov rcx, r12
cmovl edi, eax
movsxd rbx, edi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add qword [rsi + 0xfae0], rbx
add r12, rbx
sub dword [rsi + 0xfaf0], edi
sub r14d, edi
je 0x1400099a3
and dword [rbp - 0x49], 0
lea rax, [rbp - 0x39]
mov qword [rbp - 0x41], rax
mov ecx, 4
lea rax, [rbp - 0x35]
mov dword [rbp - 0x45], 4
and dword [rax], 0
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140009694
mov rcx, rsi
call fcn.140008cbc
test r14d, r14d
jle 0x1400099a3
mov ecx, dword [rsi + 0x7dc8]
test ecx, ecx
jne 0x140009729
movsxd rax, dword [rsi + 0x7dc8]
add rax, qword [rsi + 0x7da8]
cmp rax, qword [rsi + 0x7db0]
jae 0x1400097c2
mov rcx, qword [rsi]
mov edx, r13d
call fcn.140009ed8
test eax, eax
je 0x1400097c2
mov r8d, dword [rsi + 0x7db0]
xor r9d, r9d
sub r8d, dword [rsi + 0x7dc0]
mov rdx, qword [rsi + 0x7dc0]
mov rcx, qword [rsi]
call qword [sym.imp.WS2_32.dll_recv]
movsxd rcx, eax
test eax, eax
jle 0x1400097c2
add qword [rsi + 0x7dc0], rcx
add dword [rsi + 0x7dc8], ecx
mov ecx, dword [rsi + 0x7dc8]
mov rax, qword [rsi + 0x7db8]
lea rdx, [rbp - 0x49]
and dword [rbp - 0x25], 0
xor r9d, r9d
and dword [rbp - 0x15], 0
xor r8d, r8d
and dword [rbp - 5], 0
mov dword [rbp - 0x39], ecx
lea rcx, [rsi + 0x18]
mov qword [rbp - 0x31], rax
mov dword [rbp - 0x35], 1
call qword [sym.imp.Secur32.dll_DecryptMessage]
cmp eax, 0x80090318
je 0x1400096bc
test eax, eax
jne 0x1400097c2
cmp dword [rsi + 0x7dc8], eax
je 0x1400097a3
and dword [rsi + 0x7dc8], 0
lea rcx, [rsi + 0x44]
lea rax, [rcx + 0x7d64]
mov qword [rsi + 0x7da8], rcx
mov qword [rsi + 0x7db0], rax
mov qword [rsi + 0x7db8], rcx
mov qword [rsi + 0x7dc0], rcx
mov ecx, 1
lea rax, [rbp - 0x25]
mov edx, ecx
cmp dword [rax], 1
je 0x1400097c9
inc ecx
inc rdx
add rax, 0x10
cmp rdx, 4
jl 0x1400097ae
xor al, al
jmp 0x1400099a5
movsxd rax, ecx
lea rbx, [rbp - 0x39]
shl rax, 4
add rbx, rax
je 0x1400097c2
mov rcx, r12
mov rdx, qword [rbx + 8]
cmp dword [rbx], r14d
jl 0x1400098a6
mov r8d, r14d
mov r15d, r14d
call sub.VCRUNTIME140.dll_memcpy
mov edi, dword [rbx]
mov rcx, qword [rsi + 0xfae8]
sub edi, r14d
mov r14, qword [rbx + 8]
movsxd rbx, edi
add r14, r15
lea rax, [rcx + rbx]
cmp rax, qword [rsi + 0xfad8]
jbe 0x140009889
mov eax, dword [rsi + 0xfae0]
sub eax, ecx
sub eax, dword [rsi + 0xfad0]
add eax, dword [rsi + 0xfad8]
cmp eax, edi
jl 0x1400097c2
movsxd r8, dword [rsi + 0xfaf0]
mov rdx, qword [rsi + 0xfae0]
mov rcx, qword [rsi + 0xfad0]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsi + 0xfad0]
mov r8, rbx
movsxd rcx, dword [rsi + 0xfaf0]
mov rdx, r14
add rcx, rax
mov qword [rsi + 0xfae0], rax
call sub.VCRUNTIME140.dll_memcpy
add dword [rsi + 0xfaf0], edi
movsxd rax, dword [rsi + 0xfaf0]
add rax, qword [rsi + 0xfad0]
mov qword [rsi + 0xfae8], rax
jmp 0x1400098a1
mov r8, rbx
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add qword [rsi + 0xfae8], rbx
add dword [rsi + 0xfaf0], edi
xor r14d, r14d
jmp 0x1400098b4
mov r8d, dword [rbx]
call sub.VCRUNTIME140.dll_memcpy
mov r15d, dword [rbx]
sub r14d, r15d
mov ecx, 1
lea rax, [rbp - 0x25]
mov edx, ecx
add r12, r15
cmp dword [rax], 5
je 0x1400098db
inc ecx
inc rdx
add rax, 0x10
cmp rdx, 4
jl 0x1400098c2
jmp 0x1400096a9
movsxd rax, ecx
lea rcx, [rbp - 0x39]
shl rax, 4
add rcx, rax
je 0x1400096a9
movsxd rdi, dword [rcx]
mov r15, qword [rcx + 8]
mov rbx, rdi
mov rcx, qword [rsi + 0x7dc0]
lea rax, [rdi + rcx]
cmp rax, qword [rsi + 0x7db0]
jbe 0x140009986
mov eax, dword [rsi + 0x7db8]
sub eax, ecx
sub eax, dword [rsi + 0x7da8]
add eax, dword [rsi + 0x7db0]
cmp eax, edi
jl 0x1400097c2
movsxd r8, dword [rsi + 0x7dc8]
mov rdx, qword [rsi + 0x7db8]
mov rcx, qword [rsi + 0x7da8]
call sub.VCRUNTIME140.dll_memmove
mov rax, qword [rsi + 0x7da8]
mov r8, rbx
movsxd rcx, dword [rsi + 0x7dc8]
mov rdx, r15
add rcx, rax
mov qword [rsi + 0x7db8], rax
call sub.VCRUNTIME140.dll_memcpy
add dword [rsi + 0x7dc8], edi
movsxd rax, dword [rsi + 0x7dc8]
add rax, qword [rsi + 0x7da8]
mov qword [rsi + 0x7dc0], rax
jmp 0x1400096a9
mov r8, rbx
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add qword [rsi + 0x7dc0], rbx
add dword [rsi + 0x7dc8], edi
jmp 0x1400096a9
mov al, 1
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.14000c390
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret