Function at 0x14005fc27
Capabilities:
Get remote cert context via schannel

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x178
movaps xmmword [rsp + 0x160], xmm6
mov rdi, rdx
mov qword [rsp + 0x68], rcx
lea rax, [rdx + 0x14]
mov qword [rsp + 0x118], rax
lea r13, [rdx + 0x98]
lea rax, [rdx + 8]
mov qword [rsp + 0x120], rax
lea rax, [rdx + 0x78]
mov qword [rsp + 0x128], rax
xorps xmm6, xmm6
mov qword [rsp + 0x108], r13
movzx eax, byte [rdi + 0x10]
test rax, rax
jne 0x14006060b
mov r14b, byte [rdi + 0x11]
mov bpl, byte [rdi + 0x12]
mov bl, byte [rdi + 0x13]
mov sil, byte [rdi + 0x14]
lea rcx, [rsp + 0x70]
mov rdx, rdi
call fcn.140060892
cmp qword [rsp + 0x70], 0
jne 0x140060631
cmp qword [rsp + 0x78], 0
jne 0x14005fcc2
test r14b, r14b
je 0x14005fccc
cmp byte [rdi + 0x10], 0
jne 0x14005fccc
mov byte [rdi + 0x11], 0
or sil, bl
jne 0x140060112
cmp byte [rdi + 0xfa], 0
jne 0x140060112
and qword [rsp + 0x70], 0
mov rcx, r13
mov edx, 0x53
lea r8, [rsp + 0x70]
call sub.secur32.dll_QueryContextAttributesW
mov rsi, rax
shl rsi, 0x20
or rsi, 2
test eax, eax
jne 0x14005fd0e
mov rsi, qword [rsp + 0x70]
je 0x14005fd28
test bpl, bpl
je 0x1400606fd
mov rcx, rsi
call fcn.140060792
xor eax, eax
jmp 0x1400600fd
mov r12, qword [rsi + 0x20]
test r12, r12
mov qword [rsp + 0xa8], rsi
je 0x14005fd98
mov rcx, r12
call sub.crypt32.dll_CertDuplicateStore
mov r14, rax
cmp qword [rdi], 0
je 0x14005fdc2
and qword [rsp + 0x70], 0
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x70]
call fcn.14002e2e1
test rax, rax
je 0x14005fda6
mov r13, rdx
mov rcx, r14
call fcn.14002e2a5
mov rsi, rdx
test rax, rax
jne 0x140060681
mov rcx, rsi
call fcn.14006783c
mov rcx, r13
call fcn.14006783c
jmp 0x14005fd60
mov r14, qword [rdi]
test r14, r14
je 0x14005fdd2
mov r14, qword [rdi + 8]
jmp 0x14005fdd2
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
call fcn.14002e350
test r12, r12
mov r13, qword [rsp + 0x108]
je 0x14005fdca
mov rcx, r14
call fcn.14002e29e
mov rsi, qword [rsp + 0xa8]
and qword [rsp + 0x80], 0
movaps xmmword [rsp + 0x70], xmm6
mov dword [rsp + 0x70], 0x20
mov dword [rsp + 0x78], 1
lea rax, [0x14008ad64]
mov qword [rsp + 0xc0], rax
lea rax, str.1.3.6.1.4.1.311.10.3.3
mov qword [rsp + 0xc8], rax
lea rax, str.2.16.840.1.113730.4.1
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0x80], 3
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x88], rax
and qword [rsp + 0xe0], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xc0000001
xor ecx, ecx
mov rdx, rsi
xor r8d, r8d
mov r9, r14
call sub.crypt32.dll_CertGetCertificateChain
test eax, eax
je 0x140060704
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x130], rax
cmp qword [rdi], 0
je 0x14005ff95
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x130]
call fcn.14002e184
cmp qword [rsp + 0xc0], 0
je 0x14005ff95
movups xmm0, xmmword [rsp + 0xc8]
movups xmmword [rsp + 0xb0], xmm0
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xe0], rax
and qword [rsp + 0xe8], 0
lea rcx, [rsp + 0xe0]
call fcn.14002e234
mov rsi, rdx
cmp rax, 1
jne 0x14005ff9c
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x80], rax
and qword [rsp + 0x70], 0
lea rcx, [rsp + 0x70]
call fcn.14002e2e1
mov r14, rax
mov r13, rdx
cmp rax, 1
jne 0x14005ff5a
mov rcx, qword [r13 + 8]
mov edx, dword [r13 + 0x10]
mov r8, qword [rsi + 8]
mov r9d, dword [rsi + 0x10]
call fcn.14002e294
mov r12d, eax
mov rcx, r13
call fcn.14006783c
test r12b, r12b
je 0x14005ff1d
jmp 0x14005ff65
mov rcx, r14
mov rdx, r13
call fcn.14002e350
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
call fcn.14002e350
mov rcx, rsi
call fcn.14006783c
cmp r14, 1
mov r13, qword [rsp + 0x108]
jne 0x14005feed
mov esi, 0xf10
jmp 0x14005ffac
mov esi, 0xf00
jmp 0x14005ffb9
mov rcx, rax
mov rdx, rsi
call fcn.14002e350
mov esi, 0xf00
mov rcx, qword [rsp + 0xb8]
call fcn.140067834
lea rax, [rsp + 0xe8]
movups xmmword [rax], xmm6
movabs rax, 0x200000018
mov qword [rsp + 0xe0], rax
mov rax, qword [rdi + 0xa8]
test rax, rax
je 0x14005fff3
cmp byte [rdi + 0xf9], 0
jne 0x14005fff3
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0xb0], 0x10
mov dword [rsp + 0xb4], esi
lea rax, [rsp + 0xe0]
mov qword [rsp + 0xb8], rax
movaps xmmword [rsp + 0xc0], xmm6
and qword [rsp + 0xd0], 0
mov dword [rsp + 0xc0], 0x18
mov ecx, 4
mov rdx, qword [rsp + 0x100]
lea r8, [rsp + 0xb0]
lea r9, [rsp + 0xc0]
call sub.crypt32.dll_CertVerifyCertificateChainPolicy
test eax, eax
je 0x14006070e
mov eax, dword [rsp + 0xc4]
mov rsi, rax
shl rsi, 0x20
or rsi, 2
mov rcx, qword [rdi + 0xc0]
test rcx, rcx
je 0x1400600d9
test eax, eax
mov edx, 0
cmove rsi, rdx
mov r8, qword [rdi + 0xc8]
mov rdx, qword [r8 + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
mov rdx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x100]
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x7c], rdx
lea rdx, [rsp + 0x70]
call qword [r8 + 0x28]
mov r14, rax
mov rcx, rsi
call fcn.140061369
test r14, r14
je 0x1400600ee
jmp 0x14006072a
test eax, eax
jne 0x140060716
mov rcx, qword [rsp + 0x100]
call fcn.140067834
mov rcx, qword [rsp + 0xa8]
call fcn.14006783c
mov al, 1
test al, al
je 0x140060112
cmp byte [rdi + 0x10], 0
jne 0x140060112
mov rax, qword [rsp + 0x118]
mov byte [rax], 1
test bpl, bpl
je 0x14006058d
cmp qword [rdi + 0xd0], 0
je 0x14006014a
lea rcx, [rsp + 0x70]
mov rdx, rdi
call fcn.14006092f
cmp qword [rsp + 0x70], 0
jne 0x140060631
cmp qword [rsp + 0x78], 0
je 0x140060641
mov r14, qword [rdi + 0x70]
mov ecx, 0x20
call fcn.140060a1c
mov rsi, rax
mov rcx, qword [rdi + 0x58]
mov rdx, qword [rdi + 0x68]
mov r8, r14
call fcn.140060a4b
test rax, rax
mov ecx, 0
cmove edx, ecx
mov dword [rsi], edx
mov dword [rsi + 4], 2
mov qword [rsi + 8], rax
movups xmmword [rsi + 0x10], xmm6
mov qword [rsp + 0xe0], rsi
mov eax, 2
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], rax
mov rdx, qword [rdi + 0xe0]
test rdx, rdx
je 0x140060226
mov r8, qword [rdi + 0xf0]
lea rcx, [rsp + 0xc0]
call fcn.14002e36c
mov r12, qword [rsp + 0xc0]
test r12, r12
je 0x14006022f
mov rbx, qword [rsp + 0xd0]
mov ebp, dword [rsp + 0xc8]
mov edx, 2
lea rcx, [rsp + 0xe0]
call fcn.14002e09d
mov rsi, qword [rsp + 0xe0]
mov r14, qword [rsp + 0xf0]
mov rax, r14
shl rax, 4
mov dword [rsi + rax], ebp
mov dword [rsi + rax + 4], 0x12
mov qword [rsi + rax + 8], rbx
inc r14
mov qword [rsp + 0xf0], r14
jmp 0x140060238
and qword [rsp + 0xc0], 0
mov r14d, 2
xor r12d, r12d
and dword [rsp + 0x140], 0
mov dword [rsp + 0x144], r14d
mov qword [rsp + 0x148], rsi
movabs rax, 0x200000000
mov qword [rsp + 0x70], rax
and qword [rsp + 0x78], 0
movabs rax, 0x1100000000
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x88]
and qword [rax + 0x10], 0
movups xmmword [rax], xmm6
and dword [rsp + 0xfc], 0
movabs rax, 0x300000000
mov qword [rsp + 0x130], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x138], rax
cmp byte [rdi + 0xfa], 0
je 0x140060321
cmp byte [rdi + 0xfb], 0
mov edx, 0
cmove rdx, r13
mov rax, qword [rdi + 0x28]
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm0
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x30], rax
and qword [rsp + 0x40], 0
mov qword [rsp + 0x28], r13
and dword [rsp + 0x20], 0
lea rcx, [rsp + 0xb0]
lea r8, [rsp + 0x140]
mov r9d, 0x1011c
call sub.secur32.dll_AcceptSecurityContext
jmp 0x1400603a8
cmp byte [rdi + 0xf8], 0
mov rax, qword [rdi + 0xa8]
mov r8d, 0
cmovne r8, rax
test rax, rax
cmove r8, rax
mov rax, qword [rdi + 0x28]
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm0
and qword [rsp + 0x58], 0
and qword [rsp + 0x40], 0
lea rax, [rsp + 0xfc]
mov qword [rsp + 0x50], rax
and dword [rsp + 0x38], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0x48], rax
and dword [rsp + 0x28], 0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x30], rax
and dword [rsp + 0x20], 0
lea rcx, [rsp + 0xb0]
mov rdx, r13
mov r9d, 0x9819c
call sub.secur32.dll_InitializeSecurityContextW
mov ebp, eax
mov ebx, 0x18
cmp rbx, 0x38
je 0x1400603ca
mov rcx, qword [rsp + rbx + 0x70]
test rcx, rcx
je 0x1400603c4
call sub.secur32.dll_FreeContextBuffer
add rbx, 0x10
jmp 0x1400603af
cmp ebp, 0x80090318
je 0x140060475
test ebp, ebp
je 0x1400604a4
cmp ebp, 0x90312
jne 0x1400606bd
mov byte [rdi + 0xfb], 0
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
cmp dword [rax + 4], 5
mov r13, qword [rdi + 0x70]
jne 0x140060416
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
mov eax, dword [rax]
sub r13, rax
mov r14d, dword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rcx, rdi
mov rdx, r13
call fcn.140060a85
xor eax, eax
cmp qword [rdi + 0x70], 0
sete al
test r14, r14
mov qword [rdi + 0xd0], rax
mov rdx, rbp
lea rax, str.description___is_deprecated__use_Displaycalled__Option::unwrap____on_a__None__value
cmove rdx, rax
add r14, rdx
mov rcx, qword [rsp + 0x128]
mov r8, r14
call fcn.14002dc1d
mov rcx, rbp
call sub.secur32.dll_FreeContextBuffer
mov r13, qword [rsp + 0x108]
jmp 0x140060568
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
mov ecx, 1
cmp dword [rax + 4], 4
jne 0x140060498
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
mov ecx, dword [rax]
mov qword [rdi + 0xd0], rcx
jmp 0x140060568
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
cmp dword [rax + 4], 5
mov rbp, qword [rdi + 0x70]
jne 0x1400604c9
mov rcx, rsi
mov rdx, r14
call fcn.140060a5c
mov eax, dword [rax]
sub rbp, rax
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x1400604de
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x114], eax
mov rcx, rdi
mov rdx, rbp
call fcn.140060a85
mov rax, qword [rdi + 0x70]
xor ecx, ecx
test rax, rax
sete cl
mov qword [rdi + 0xd0], rcx
test rbx, rbx
cmovne r15, rbx
je 0x14006053b
mov eax, dword [rsp + 0x114]
test eax, eax
mov r8d, eax
mov rdx, r15
lea rax, str.description___is_deprecated__use_Displaycalled__Option::unwrap____on_a__None__value
cmove rdx, rax
add r8, rdx
mov rcx, qword [rsp + 0x128]
call fcn.14002dc1d
mov rcx, r15
call sub.secur32.dll_FreeContextBuffer
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x14006055e
lea rcx, [rsp + 0xb0]
mov rdx, rdi
call fcn.140060aff
cmp byte [rsp + 0xb0], 0
jne 0x1400606c7
cmp byte [rdi + 0x10], 0
jne 0x140060568
mov byte [rdi + 0x12], 0
mov rdx, qword [rsp + 0xd0]
mov rcx, r12
call fcn.140060c71
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.14002e14d
jmp 0x14005fc80
mov al, 2
test bl, bl
jne 0x1400605e1
movaps xmmword [rsp + 0x70], xmm6
and dword [rsp + 0x80], 0
mov rcx, r13
mov edx, 4
lea r8, [rsp + 0x70]
call sub.secur32.dll_QueryContextAttributesW
test eax, eax
jne 0x140060732
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x110], eax
mov rax, qword [rsp + 0x74]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x7c]
mov qword [rsp + 0x150], rax
mov al, 1
mov byte [rdi + 0x10], al
mov eax, dword [rsp + 0x110]
mov dword [rdi + 0x14], eax
mov rax, qword [rsp + 0x158]
mov qword [rdi + 0x18], rax
mov rax, qword [rsp + 0x150]
mov qword [rdi + 0x20], rax
jmp 0x14005fc80
cmp eax, 1
jne 0x140060638
mov rcx, qword [rsp + 0x118]
mov eax, dword [rcx + 0x10]
mov rdi, qword [rsp + 0x68]
mov dword [rdi + 0x14], eax
movups xmm0, xmmword [rcx]
movups xmmword [rdi + 4], xmm0
mov eax, 1
jmp 0x140060663
mov rax, qword [rsp + 0x78]
jmp 0x140060655
xor eax, eax
mov rdi, qword [rsp + 0x68]
jmp 0x140060663
lea rdx, str.unexpected_EOF_during_handshakeassertion_failed:_size___nreadassertion_failed:_buf.len_____sizes.cbMaximumMessage_as_usize1.3.6.1.5.5.7.3.1
mov r8d, 0x1f
mov cl, 0x25
call fcn.14002dd2c
mov rdi, qword [rsp + 0x68]
mov qword [rdi + 8], rax
mov eax, 2
mov dword [rdi], eax
movaps xmm6, xmmword [rsp + 0x160]
add rsp, 0x178
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, r13
call fcn.14006783c
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
call fcn.14002e350
mov ecx, 1
mov rdx, r14
call fcn.14005fb07
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0xa8]
call fcn.14006783c
mov qword [rdi + 8], rsi
jmp 0x14006065e
shl rbp, 0x20
or rbp, 2
jmp 0x1400606cf
mov rbp, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xd0]
mov rcx, r12
call fcn.140060c71
mov rdx, qword [rsp + 0xe8]
mov rcx, rsi
call fcn.14002e14d
mov rdi, qword [rsp + 0x68]
mov qword [rdi + 8], rbp
jmp 0x14006065e
mov rdi, qword [rsp + 0x68]
jmp 0x1400606b7
call fcn.14002e27e
mov rsi, rax
jmp 0x1400606a5
call fcn.14002e27e
mov rsi, rax
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x100]
call fcn.140067834
jmp 0x1400606aa
mov rsi, r14
jmp 0x1400606a5
shl rax, 0x20
or rax, 2
jmp 0x140060655