Function at 0x180152a40
Capabilities:
Encrypt data via sspi

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov rax, qword [0x18020ce50]
xor rax, rsp
mov qword [rbp - 1], rax
xor r12d, r12d
mov qword [rbp - 0x59], rcx
mov r15, rcx
mov ebx, r9d
mov rcx, qword [rcx + 0x58]
mov r14, r8
mov rdi, rdx
mov esi, r12d
test rcx, rcx
je 0x180152a8d
call fcn.1801683fc
mov qword [r15 + 0x58], r12
cmp byte [r15 + 0x6d], sil
je 0x180152ab4
lea r8, [rbp - 0x41]
xor edx, edx
lea rcx, [r15 + 0x40]
call sub.Secur32.dll_QueryContextAttributesA
test eax, eax
je 0x180152ac0
lea rdx, str.QueryContextAttributes
mov ecx, eax
call fcn.180152fd0
mov rax, 0xffffffffffffffff
jmp 0x180152e3f
test r14, r14
je 0x180152acd
lea eax, [rbx + 4]
mov dword [rbp - 0x61], eax
jmp 0x180152ae4
lea rdx, [rbp - 0x61]
mov rcx, rdi
call fcn.180152e60
mov rsi, rax
test rax, rax
je 0x180152ab4
mov eax, dword [rbp - 0x61]
mov r8d, dword [rbp - 0x39]
add r8d, dword [rbp - 0x35]
add r8d, eax
mov qword [rsp + 0x98], r13
mov ecx, r8d
mov edi, r8d
call fcn.18016ea30
mov r13, rax
test rax, rax
jne 0x180152b1b
mov rcx, rsi
call fcn.1801683fc
lea rax, [r13 - 1]
jmp 0x180152e37
mov eax, dword [rbp - 0x35]
mov rbx, 0xffffffffffffffff
lea rcx, [rax + r13]
test r14, r14
je 0x180152b9f
mov dword [rcx], 1
mov r8, rbx
inc r8
cmp byte [r14 + r8], r12b
jne 0x180152b37
mov eax, dword [rbp - 0x35]
add rcx, 4
sub rdi, rax
sub rdi, 4
test r8, r8
je 0x180152c0d
test rcx, rcx
jne 0x180152b71
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
call fcn.1801670f8
jmp 0x180152c0d
cmp rdi, r8
jb 0x180152b83
mov rdx, r14
call fcn.180162090
jmp 0x180152c0d
mov r8, rdi
xor edx, edx
call fcn.180162730
call fcn.180175c18
mov dword [rax], 0x22
call fcn.1801670f8
jmp 0x180152c0d
mov r14d, dword [rbp - 0x61]
sub rdi, rax
test r14, r14
je 0x180152c05
test rcx, rcx
jne 0x180152bbd
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152c00
test rsi, rsi
je 0x180152bd4
cmp rdi, r14
jb 0x180152bd4
mov r8, r14
mov rdx, rsi
call fcn.180162090
jmp 0x180152c05
mov r8, rdi
xor edx, edx
call fcn.180162730
test rsi, rsi
jne 0x180152bf0
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152c00
cmp rdi, r14
jae 0x180152c05
call fcn.180175c18
mov dword [rax], 0x22
call fcn.1801670f8
mov rcx, rsi
call fcn.1801683fc
mov r8d, dword [rbp - 0x35]
lea rax, [rbp - 0x31]
mov edx, dword [rbp - 0x61]
lea rcx, [r15 + 0x40]
mov dword [rbp - 0x21], edx
add edx, r8d
add rdx, r13
mov qword [rbp - 0x49], rax
cmp dword [rbp + 0x7f], r12d
mov eax, 1
mov qword [rbp - 9], rdx
mov edx, 0x80000001
mov dword [rbp - 0x1d], eax
cmovne edx, r12d
lea rax, [r8 + r13]
mov dword [rbp - 0x31], r8d
mov qword [rbp - 0x19], rax
lea r8, [rbp - 0x51]
mov eax, dword [rbp - 0x39]
xor r9d, r9d
mov dword [rbp - 0x4d], 3
mov dword [rbp - 0x51], r12d
mov dword [rbp - 0x2d], 2
mov qword [rbp - 0x29], r13
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], 9
call sub.Secur32.dll_EncryptMessage
mov edi, eax
test eax, eax
je 0x180152c9e
mov rcx, r13
call fcn.1801683fc
lea rdx, [0x1801bc810]
mov ecx, edi
call fcn.180152fd0
jmp 0x180152e35
mov r12d, dword [rbp - 0x11]
add r12d, dword [rbp - 0x21]
add r12d, dword [rbp - 0x31]
mov ecx, r12d
mov edi, r12d
call fcn.18016ea30
mov r14d, dword [rbp - 0x31]
mov rsi, rax
mov r15, qword [rbp - 0x29]
test r14, r14
je 0x180152d25
test rax, rax
jne 0x180152cd7
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152d20
test r15, r15
je 0x180152cf1
cmp rdi, r14
jb 0x180152cf1
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.180162090
jmp 0x180152d25
mov r8, rdi
xor edx, edx
mov rcx, rsi
call fcn.180162730
test r15, r15
jne 0x180152d10
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152d20
cmp rdi, r14
jae 0x180152d25
call fcn.180175c18
mov dword [rax], 0x22
call fcn.1801670f8
mov edx, dword [rbp - 0x31]
mov r14d, r12d
mov edi, dword [rbp - 0x21]
sub r14d, edx
mov r15, qword [rbp - 0x19]
lea rcx, [rsi + rdx]
test rdi, rdi
je 0x180152d98
test rcx, rcx
jne 0x180152d50
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152d93
test r15, r15
je 0x180152d67
cmp r14, rdi
jb 0x180152d67
mov r8, rdi
mov rdx, r15
call fcn.180162090
jmp 0x180152d98
mov r8, r14
xor edx, edx
call fcn.180162730
test r15, r15
jne 0x180152d83
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152d93
cmp r14, rdi
jae 0x180152d98
call fcn.180175c18
mov dword [rax], 0x22
call fcn.1801670f8
mov eax, dword [rbp - 0x21]
mov r14d, r12d
mov edx, dword [rbp - 0x31]
sub r14d, eax
mov edi, dword [rbp - 0x11]
sub r14d, edx
mov r15, qword [rbp - 9]
lea rcx, [rsi + rax]
add rcx, rdx
test rdi, rdi
je 0x180152e07
test rcx, rcx
jne 0x180152dcc
call fcn.180175c18
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x180152e02
test r15, r15
je 0x180152de3
cmp r14, rdi
jb 0x180152de3
mov r8, rdi
mov rdx, r15
call fcn.180162090
jmp 0x180152e07
mov r8, r14
xor edx, edx
call fcn.180162730
test r15, r15
je 0x180152dbf
cmp r14, rdi
jae 0x180152e07
call fcn.180175c18
mov dword [rax], 0x22
call fcn.1801670f8
mov edx, r12d
mov rcx, rsi
call fcn.180152f20
mov rcx, qword [rbp - 0x59]
test rax, rax
mov qword [rcx + 0x58], rax
mov eax, 1
mov rcx, r13
cmovne ebx, eax
call fcn.1801683fc
mov rcx, rsi
call fcn.1801683fc
mov eax, ebx
mov r13, qword [rsp + 0x98]
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.18015c050
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret