Function at 0x1800097e3
Capabilities:
Decrypt data via sspi

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
push rbp
mov rbp, rsp
push rbx
push rdi
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x88
lea rdx, [rbp - 0x38]
sub rdx, rsp
sub rsp, 0x20
lea rcx, [rsp + 0x20]
call fcn.180009e0b
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x18]
mov rdx, 8
call fcn.180009e0b
add rsp, 0x20
mov rdi, qword [rbp + 0x18]
mov dword [rbp - 0x58], 0x8000
sub rsp, 0x20
mov rcx, 0
mov rdx, qword [rbp - 0x58]
mov r8, 0x3000
mov r9, 4
call qword [sym.imp.kernel32.dll_VirtualAlloc]
add rsp, 0x20
test rax, rax
je 0x180009aca
mov qword [rbp - 0x40], rax
cmp qword [rbp - 0x48], 0
je 0x18000988b
cmp dword [rbp - 0xb0], 0x80090318
jne 0x1800098f6
mov rax, qword [rbp - 0x40]
add rax, qword [rbp - 0x48]
mov r12, qword [rbp - 0x58]
sub r12, qword [rbp - 0x48]
test r12, r12
jne 0x1800098cc
add qword [rbp - 0x58], 0x8000
sub rsp, 0x20
lea rcx, [rbp - 0x40]
mov rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x58]
call fcn.180009ca0
add rsp, 0x20
test rax, rax
je 0x180009aca
jmp 0x18000988b
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
mov rdx, rax
mov r8, r12
mov r9, 0
call fcn.1800032f8
add rsp, 0x20
test eax, eax
jle 0x180009aca
add qword [rbp - 0x48], rax
sub rsp, 0x20
lea rcx, [rbp - 0x48]
lea rdx, [rbp - 0xa8]
mov r8, 4
call fcn.180009fab
add rsp, 0x20
mov dword [rbp - 0xa4], 1
sub rsp, 0x20
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0xa0]
mov r8, 8
call fcn.180009fab
add rsp, 0x20
mov dword [rbp - 0x98], 0
mov dword [rbp - 0x94], 0
mov qword [rbp - 0x90], 0
mov dword [rbp - 0x88], 0
mov dword [rbp - 0x84], 0
mov qword [rbp - 0x80], 0
mov dword [rbp - 0x78], 0
mov dword [rbp - 0x74], 0
mov qword [rbp - 0x70], 0
lea rax, [rbp - 0xa8]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x68], 0
mov dword [rbp - 0x64], 4
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
lea rdx, [rbp - 0x68]
mov r8, 0
mov r9, 0
call qword [sym.imp.secur32.dll_DecryptMessage]
add rsp, 0x20
mov qword [rbp - 0xb0], rax
cmp dword [rbp - 0xb0], 0x80090318
je 0x180009878
cmp qword [rbp - 0xb0], 0x90317
je 0x180009a0b
cmp qword [rbp - 0xb0], 0x90321
jne 0x180009a02
jmp 0x180009aca
cmp eax, 0
jne 0x180009aca
mov qword [rbp - 0x48], 0
mov rbx, 1
jmp 0x180009aad
imul rcx, rbx, 0x10
lea rsi, [rbp + rcx - 0xa8]
cmp dword [rsi + 4], 1
jne 0x180009a6b
cmp qword [rsi + 8], 0
je 0x180009a6b
cmp dword [rsi], 0
je 0x180009a6b
mov r9d, dword [rsi]
sub rsp, 0x20
mov rcx, rdi
mov rdx, qword [rbp - 0xb8]
mov r8, qword [rsi + 8]
call fcn.180009c21
add rsp, 0x20
test rax, rax
je 0x180009aca
mov eax, dword [rsi]
add qword [rbp - 0xb8], rax
jmp 0x180009aaa
cmp dword [rsi + 4], 5
jne 0x180009aaa
cmp qword [rsi + 8], 0
je 0x180009aaa
cmp dword [rsi], 0
je 0x180009aaa
mov rdx, qword [rbp - 0x40]
add rdx, qword [rbp - 0x48]
mov ecx, dword [rsi]
add qword [rbp - 0x48], rcx
mov qword [rbp - 0xb0], 0x90312
mov r8d, dword [rsi]
sub rsp, 0x20
mov rcx, qword [rsi + 8]
call fcn.180009fab
add rsp, 0x20
inc rbx
cmp rbx, 3
jbe 0x180009a1f
cmp qword [rbp - 0xb0], 0x90312
je 0x180009878
jmp 0x180009ae6
sub rsp, 0x20
mov rcx, qword [rbp + 0x18]
call fcn.180009da1
add rsp, 0x20
mov qword [rbp - 0xb8], 0
sub rsp, 0x20
lea rcx, [rbp - 0x40]
call fcn.180009da1
add rsp, 0x20
mov rax, qword [rbp - 0xb8]
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rdi
pop rbx
pop rbp
ret