Function at 0x140002070
Capabilities:
Decrypt data via sspi
Receive data
Receive data on socket

Disassembly:
sub rsp, 0xb8
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x58], r8d
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x44], 0
cmp dword [rsp + 0x58], 0
je 0x1400024f2
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x48], 0
je 0x1400021e7
mov eax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x48]
cmp eax, dword [rcx + 0x44]
jge 0x1400020da
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x34], eax
jmp 0x1400020e6
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x44]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x40], eax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax + 0x48]
movsxd r8, dword [rsp + 0x40]
call fcn.14001a8e0
mov rax, qword [rsp + 0x50]
movsxd rcx, dword [rsp + 0x40]
add rax, rcx
mov qword [rsp + 0x50], rax
mov ecx, dword [rsp + 0x40]
mov eax, dword [rsp + 0x58]
sub eax, ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x40]
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
cmp eax, dword [rcx + 0x44]
jne 0x1400021ba
mov rcx, qword [rsp + 0x48]
add rcx, 0x50
mov rdx, qword [rsp + 0x48]
add rdx, 0x50
mov rax, qword [rsp + 0x48]
movsxd rax, dword [rax + 0x40]
add rdx, rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x3c]
mov r8, qword [rsp + 0x48]
sub eax, dword [r8 + 0x40]
movsxd r8, eax
call fcn.14001a8e0
mov rax, qword [rsp + 0x48]
mov edx, dword [rax + 0x40]
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x3c]
sub ecx, edx
mov dword [rax + 0x3c], ecx
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x40], 0
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x44], 0
mov rax, qword [rsp + 0x48]
mov qword [rax + 0x48], 0
jmp 0x1400021e2
mov edx, dword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x44]
sub ecx, edx
mov dword [rax + 0x44], ecx
mov edx, dword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x48]
movsxd rdx, edx
add rcx, rdx
mov qword [rax + 0x48], rcx
jmp 0x1400024ed
mov rax, qword [rsp + 0x48]
cmp dword [rax + 0x3c], 0
je 0x140002439
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x34]
mov ecx, eax
mov al, 1
cmp rcx, 4
mov byte [rsp + 0x33], al
je 0x14000222f
lea rcx, str.s__sizes.cBuffers__ARRAYSIZE_buffers_
lea rdx, str.main.c
mov r8d, 0x196
call fcn.140006474
xor eax, eax
mov byte [rsp + 0x33], al
mov al, byte [rsp + 0x33]
mov dword [rsp + 0x74], 1
mov rax, qword [rsp + 0x48]
add rax, 0x50
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x3c]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x84], 0
mov dword [rsp + 0x94], 0
mov dword [rsp + 0xa4], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x64], 4
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x48]
add rcx, 0x18
lea rdx, [rsp + 0x60]
xor r8d, r8d
xor eax, eax
mov r9d, eax
call sub.Secur32.dll_DecryptMessage
mov dword [rsp + 0x3c], eax
cmp dword [rsp + 0x3c], 0
jne 0x1400023c8
mov al, 1
cmp dword [rsp + 0x74], 7
mov byte [rsp + 0x32], al
je 0x1400022ea
lea rcx, str.buffers_0_.BufferType__SECBUFFER_STREAM_HEADER
lea rdx, str.main.c
mov r8d, 0x1a4
call fcn.140006474
xor eax, eax
mov byte [rsp + 0x32], al
mov al, byte [rsp + 0x32]
mov al, 1
cmp dword [rsp + 0x84], 1
mov byte [rsp + 0x31], al
je 0x140002321
lea rcx, str.buffers_1_.BufferType__SECBUFFER_DATA
lea rdx, str.main.c
mov r8d, 0x1a5
call fcn.140006474
xor eax, eax
mov byte [rsp + 0x31], al
mov al, byte [rsp + 0x31]
mov al, 1
cmp dword [rsp + 0x94], 6
mov byte [rsp + 0x30], al
je 0x140002358
lea rcx, str.buffers_2_.BufferType__SECBUFFER_STREAM_TRAILER
lea rdx, str.main.c
mov r8d, 0x1a6
call fcn.140006474
xor eax, eax
mov byte [rsp + 0x30], al
mov al, byte [rsp + 0x30]
mov rcx, qword [rsp + 0x88]
mov rax, qword [rsp + 0x48]
mov qword [rax + 0x48], rcx
mov ecx, dword [rsp + 0x80]
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x44], ecx
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x3c]
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0xa4], 5
jne 0x1400023a6
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x28], eax
jmp 0x1400023b1
xor eax, eax
mov dword [rsp + 0x28], eax
jmp 0x1400023b1
mov ecx, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x28]
sub ecx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x40], ecx
jmp 0x1400020a0
cmp dword [rsp + 0x3c], 0x90317
jne 0x1400023ef
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x3c], 0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x5c], eax
jmp 0x1400024fa
cmp dword [rsp + 0x3c], 0x90321
jne 0x14000240a
mov dword [rsp + 0x5c], 0xffffffff
jmp 0x1400024fa
cmp dword [rsp + 0x3c], 0x80090318
je 0x140002425
mov dword [rsp + 0x5c], 0xffffffff
jmp 0x1400024fa
jmp 0x14000242a
jmp 0x14000242f
jmp 0x140002434
jmp 0x140002439
cmp dword [rsp + 0x44], 0
je 0x140002449
jmp 0x1400024f2
mov rax, qword [rsp + 0x48]
movsxd rax, dword [rax + 0x3c]
cmp rax, 0x4200
jne 0x14000246b
mov dword [rsp + 0x5c], 0xffffffff
jmp 0x1400024fa
mov rax, qword [rsp + 0x48]
movsxd rcx, dword [rax + 0x3c]
mov eax, 0x4200
sub rax, rcx
mov r8d, eax
mov rdx, qword [rsp + 0x48]
add rdx, 0x50
mov rax, qword [rsp + 0x48]
movsxd rax, dword [rax + 0x3c]
add rdx, rax
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jne 0x1400024c1
mov dword [rsp + 0x5c], 0
jmp 0x1400024fa
cmp dword [rsp + 0x38], 0
jge 0x1400024d9
mov dword [rsp + 0x44], 0xffffffff
jmp 0x1400024f2
jmp 0x1400024de
mov ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x48]
add ecx, dword [rax + 0x3c]
mov dword [rax + 0x3c], ecx
jmp 0x1400020a0
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x24], eax
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1400026e0
mov eax, dword [rsp + 0x24]
add rsp, 0xb8
ret