Function at 0x1400363b0
Capabilities:
Decrypt data via sspi

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov rax, qword [0x14049b9c0]
xor rax, rsp
mov qword [rbp - 1], rax
mov r12, rdx
mov qword [rbp - 0x61], r9
xor edx, edx
mov r13, r8
mov r15, rcx
mov edi, edx
mov esi, edx
test rcx, rcx
je 0x14003666a
mov rax, qword [rcx + 0x48]
test rax, rax
je 0x14003666a
cmp qword [rax + 0x10], rdx
je 0x14003666a
mov rbx, qword [rcx + 0x38]
test rbx, rbx
je 0x14003666a
test r8, r8
je 0x14003666a
mov rbx, qword [rbx + 0x10]
mov dword [r8], edx
mov ecx, dword [rbx + 0x250]
test ecx, ecx
je 0x140036462
cmp dword [rbp + 0x7f], ecx
mov rdx, qword [rbx + 0x258]
cmovb ecx, dword [rbp + 0x7f]
mov edi, ecx
mov r8d, ecx
mov rcx, r9
call fcn.140092830
add qword [rbx + 0x258], rdi
sub dword [rbx + 0x250], edi
xor eax, eax
mov dword [r13], edi
jmp 0x140036639
mov qword [rsp + 0x98], r14
nop word [rax + rax]
mov eax, dword [rbx + 0x240]
test eax, eax
je 0x1400364a0
mov rdx, qword [rbx + 0x248]
mov r8d, eax
mov rcx, qword [rbx + 0x10]
call fcn.140092830
mov edi, dword [rbx + 0x240]
mov dword [rbx + 0x240], 0
nop dword [rax]
test edi, edi
je 0x1400364ac
cmp esi, 0x80090318
jne 0x1400364cf
mov r8d, dword [rbx + 0x18]
mov rcx, r15
mov r9, qword [r15 + 0x48]
sub r8d, edi
mov edx, edi
add rdx, qword [rbx + 0x10]
call qword [r9 + reloc.WS2_32.dll_recv]
test rax, rax
jle 0x140036663
add edi, eax
xor ecx, ecx
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x31], ecx
xor r9d, r9d
mov qword [rbp - 0x29], rcx
xor r8d, r8d
mov dword [rbp - 0x21], ecx
mov qword [rbp - 0x19], rcx
mov dword [rbp - 0x11], ecx
mov qword [rbp - 9], rcx
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x41]
mov dword [rbp - 0x2d], ecx
mov dword [rbp - 0x1d], ecx
mov dword [rbp - 0xd], ecx
mov dword [rbp - 0x59], ecx
mov rcx, r12
mov qword [rbp - 0x51], rax
mov dword [rbp - 0x41], edi
mov dword [rbp - 0x3d], 1
mov dword [rbp - 0x55], 4
call sub.Secur32.dll_DecryptMessage
mov esi, eax
cmp eax, 0x80090318
je 0x1400364a0
test eax, eax
je 0x140036541
cmp eax, 0x90321
jne 0x140036657
xor edx, edx
mov dword [rbx + 0x240], edx
mov dword [rbx + 0x250], edx
mov eax, dword [rbp - 0x3d]
cmp eax, 1
jne 0x140036565
movaps xmm0, xmmword [rbp - 0x41]
movups xmmword [rbx + 0x250], xmm0
mov eax, dword [rbp - 0x3d]
cmp eax, 5
jne 0x140036575
movaps xmm0, xmmword [rbp - 0x41]
movups xmmword [rbx + 0x240], xmm0
mov eax, dword [rbp - 0x2d]
cmp eax, 1
jne 0x14003658b
movaps xmm0, xmmword [rbp - 0x31]
movups xmmword [rbx + 0x250], xmm0
mov eax, dword [rbp - 0x2d]
cmp eax, 5
jne 0x14003659b
movaps xmm0, xmmword [rbp - 0x31]
movups xmmword [rbx + 0x240], xmm0
mov eax, dword [rbp - 0x1d]
cmp eax, 1
jne 0x1400365b1
movaps xmm0, xmmword [rbp - 0x21]
movups xmmword [rbx + 0x250], xmm0
mov eax, dword [rbp - 0x1d]
cmp eax, 5
jne 0x1400365c1
movaps xmm0, xmmword [rbp - 0x21]
movups xmmword [rbx + 0x240], xmm0
mov eax, dword [rbp - 0xd]
cmp eax, 1
jne 0x1400365d7
movaps xmm0, xmmword [rbp - 0x11]
movups xmmword [rbx + 0x250], xmm0
mov eax, dword [rbp - 0xd]
cmp eax, 5
jne 0x1400365e7
movaps xmm0, xmmword [rbp - 0x11]
movups xmmword [rbx + 0x240], xmm0
mov ecx, dword [rbx + 0x250]
test ecx, ecx
jne 0x1400365fd
cmp esi, 0x90321
jne 0x140036470
mov eax, dword [rbp + 0x7f]
cmp ecx, eax
cmovb eax, ecx
mov edi, eax
test eax, eax
je 0x14003661e
mov rdx, qword [rbx + 0x258]
mov r8d, edi
mov rcx, qword [rbp - 0x61]
call fcn.140092830
sub dword [rbx + 0x250], edi
add qword [rbx + 0x258], rdi
mov dword [r13], edi
mov eax, esi
mov r14, qword [rsp + 0x98]
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.14008e500
add rsp, 0xa0
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edx, esi
mov rcx, r15
call fcn.140036680
jmp 0x14003662f
mov eax, 0x80090301
jmp 0x140036631
mov eax, 0x80090304
jmp 0x140036639