Function at 0x140055340
Capabilities:
Encrypt data via sspi

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
mov qword [rbp], 0xfffffffffffffffe
mov r14, r9
mov rsi, rcx
mov qword [rdx + 0x138], r8
lea rcx, [rbp - 0x48]
mov qword [rbp - 8], rdx
call fcn.1400515c0
mov eax, dword [rbp - 0x48]
cmp eax, 2
je 0x14005557a
test eax, eax
je 0x1400553f8
mov rdx, qword [rbp - 8]
mov r13, qword [rdx + 0x198]
cmp r13, qword [rdx + 0x190]
jne 0x14005556a
mov rax, qword [rbp + 0x70]
mov rdi, qword [rbp - 0x40]
mov ebx, edi
shr rdi, 0x20
cmp rax, rdi
cmovb rdi, rax
mov r12d, dword [rbp - 0x44]
lea r15, [rdi + r12]
add rbx, r15
sub rbx, r13
jbe 0x140055417
mov rax, qword [rbp - 8]
lea rcx, [rax + 0x180]
mov rax, qword [rcx]
sub rax, r13
cmp rax, rbx
jae 0x14005541d
mov rdx, r13
mov r8, rbx
call fcn.1401bfef0
mov rax, qword [rbp - 8]
mov r13, qword [rax + 0x190]
jmp 0x140055421
movabs rbx, 0x8009031700000002
mov rcx, rbx
call fcn.14004d5d0
cmp al, 0xd
jne 0x14005551f
jmp 0x14005558a
mov rbx, qword [rbp - 8]
jmp 0x14005545f
mov rax, qword [rbp - 8]
mov rax, qword [rax + 0x188]
lea rcx, [rax + r13]
cmp rbx, 2
jb 0x14005544e
lea r8, [rbx - 1]
xor edx, edx
mov qword [rbp - 0x50], rax
call sub.VCRUNTIME140.dll_memset
add r13, rbx
dec r13
mov rcx, qword [rbp - 0x50]
add rcx, r13
mov byte [rcx], 0
inc r13
mov rbx, qword [rbp - 8]
mov qword [rbx + 0x190], r13
cmp r15, r13
ja 0x1400555e2
mov rcx, qword [rbx + 0x188]
add rcx, r12
mov rdx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbx + 0x190]
cmp rdx, r12
jb 0x1400555f6
cmp rdx, r15
jb 0x140055607
mov rax, qword [rbx + 0x188]
lea rcx, [rax + r12]
sub edx, r15d
add r15, rax
mov dword [rbp - 0x48], r12d
mov dword [rbp - 0x44], 7
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], edi
mov dword [rbp - 0x34], 1
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0x28], edx
mov dword [rbp - 0x24], 6
mov qword [rbp - 0x20], r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
movabs rax, 0x400000000
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x48]
mov qword [rbp - 0x58], rax
lea rcx, [rbx + 0x1f0]
lea r8, [rbp - 0x60]
xor edx, edx
xor r9d, r9d
call qword [sym.imp.secur32.dll_EncryptMessage]
mov ebx, eax
test eax, eax
je 0x14005553b
shl rbx, 0x20
or rbx, 2
mov rcx, rbx
call fcn.14004d5d0
cmp al, 0xd
je 0x14005558a
mov qword [rsi], 1
mov qword [rsi + 8], rbx
mov rax, qword [rbp - 8]
mov qword [rax + 0x138], 0
jmp 0x1400555a8
mov eax, dword [rbp - 0x38]
add eax, dword [rbp - 0x48]
add eax, dword [rbp - 0x28]
mov rdx, qword [rbp - 8]
cmp qword [rdx + 0x190], rax
jb 0x140055558
mov qword [rdx + 0x190], rax
mov qword [rdx + 0x198], 0
mov qword [rdx + 0x218], rdi
lea rcx, [rbp - 0x48]
call fcn.1400536c0
cmp qword [rbp - 0x48], 0
je 0x1400555bf
mov rbx, qword [rbp - 0x40]
mov rcx, rbx
call fcn.14004d5d0
cmp al, 0xd
jne 0x14005551f
mov qword [rsi], 2
mov rax, qword [rbp - 8]
mov qword [rax + 0x138], 0
mov rcx, rbx
call fcn.1400125b0
mov rax, rsi
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, qword [rbp - 8]
mov rax, qword [rcx + 0x218]
mov qword [rsi], 0
mov qword [rsi + 8], rax
mov qword [rcx + 0x138], 0
jmp 0x1400555a8
lea r8, str.C:Users_rootkit.cargo_registry_srcindex.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rsassertion_failed:_pos___self.dec_in.get_ref__.len___as_u64
mov rcx, r15
mov rdx, r13
call fcn.1401ca820
jmp 0x140055616
lea r8, str.C:Users_rootkit.cargo_registry_srcindex.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rsassertion_failed:_pos___self.dec_in.get_ref__.len___as_u64
mov rcx, r12
call fcn.1401ca820
jmp 0x140055616
lea r8, str.C:Users_rootkit.cargo_registry_srcindex.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rsassertion_failed:_pos___self.dec_in.get_ref__.len___as_u64
mov rcx, r15
call fcn.1401ca820
ud2