Function at 0x14001d5a0
Capabilities:
Decrypt data via sspi

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0x88
mov rax, qword [0x14037ac60]
xor rax, rsp
mov qword [rbp - 1], rax
mov r15, rdx
mov r13, r9
xor edx, edx
mov r12, r8
mov r14, rcx
mov edi, edx
mov esi, edx
test rcx, rcx
je 0x14001d7d2
mov rax, qword [rcx + 0x48]
test rax, rax
je 0x14001d7d2
cmp qword [rax + 0x10], rdx
je 0x14001d7d2
mov rbx, qword [rcx + 0x38]
test rbx, rbx
je 0x14001d7d2
test r8, r8
je 0x14001d7d2
mov rbx, qword [rbx + 0x10]
mov dword [r8], edx
mov ecx, dword [rbx + 0x50]
test ecx, ecx
je 0x14001d647
cmp dword [rbp + 0x7f], ecx
mov rdx, qword [rbx + 0x58]
cmovb ecx, dword [rbp + 0x7f]
mov edi, ecx
mov r8d, ecx
mov rcx, r9
call sub.VCRUNTIME140.dll_memcpy
add qword [rbx + 0x58], rdi
sub dword [rbx + 0x50], edi
xor eax, eax
mov dword [r12], edi
jmp 0x14001d7d7
mov eax, dword [rbx + 0x40]
test eax, eax
je 0x14001d668
mov rdx, qword [rbx + 0x48]
mov r8d, eax
mov rcx, qword [rbx + 0x10]
call sub.VCRUNTIME140.dll_memmove
mov edi, dword [rbx + 0x40]
mov dword [rbx + 0x40], 0
test edi, edi
je 0x14001d674
cmp esi, 0x80090318
jne 0x14001d697
mov r8d, dword [rbx + 0x18]
mov rcx, r14
mov r9, qword [r14 + 0x48]
sub r8d, edi
mov edx, edi
add rdx, qword [rbx + 0x10]
call qword [r9 + reloc.WS2_32.dll_recv]
test rax, rax
jle 0x14001d7cb
add edi, eax
xor ecx, ecx
lea rdx, [rbp - 0x51]
mov dword [rbp - 0x31], ecx
xor r9d, r9d
mov qword [rbp - 0x29], rcx
xor r8d, r8d
mov dword [rbp - 0x21], ecx
mov qword [rbp - 0x19], rcx
mov dword [rbp - 0x11], ecx
mov qword [rbp - 9], rcx
mov rax, qword [rbx + 0x10]
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x41]
mov dword [rbp - 0x2d], ecx
mov dword [rbp - 0x1d], ecx
mov dword [rbp - 0xd], ecx
mov dword [rbp - 0x51], ecx
mov rcx, r15
mov qword [rbp - 0x49], rax
mov dword [rbp - 0x41], edi
mov dword [rbp - 0x3d], 1
mov dword [rbp - 0x4d], 4
call sub.Secur32.dll_DecryptMessage
mov esi, eax
cmp eax, 0x80090318
je 0x14001d668
test eax, eax
jne 0x14001d7bd
xor edx, edx
mov dword [rbx + 0x40], edx
mov dword [rbx + 0x50], edx
mov eax, dword [rbp - 0x3d]
cmp eax, 1
jne 0x14001d71d
movaps xmm0, xmmword [rbp - 0x41]
movups xmmword [rbx + 0x50], xmm0
mov eax, dword [rbp - 0x3d]
cmp eax, 5
jne 0x14001d72a
movaps xmm0, xmmword [rbp - 0x41]
movups xmmword [rbx + 0x40], xmm0
mov eax, dword [rbp - 0x2d]
cmp eax, 1
jne 0x14001d73d
movaps xmm0, xmmword [rbp - 0x31]
movups xmmword [rbx + 0x50], xmm0
mov eax, dword [rbp - 0x2d]
cmp eax, 5
jne 0x14001d74a
movaps xmm0, xmmword [rbp - 0x31]
movups xmmword [rbx + 0x40], xmm0
mov eax, dword [rbp - 0x1d]
cmp eax, 1
jne 0x14001d75d
movaps xmm0, xmmword [rbp - 0x21]
movups xmmword [rbx + 0x50], xmm0
mov eax, dword [rbp - 0x1d]
cmp eax, 5
jne 0x14001d76a
movaps xmm0, xmmword [rbp - 0x21]
movups xmmword [rbx + 0x40], xmm0
mov eax, dword [rbp - 0xd]
cmp eax, 1
jne 0x14001d77d
movaps xmm0, xmmword [rbp - 0x11]
movups xmmword [rbx + 0x50], xmm0
mov eax, dword [rbp - 0xd]
cmp eax, 5
jne 0x14001d78a
movaps xmm0, xmmword [rbp - 0x11]
movups xmmword [rbx + 0x40], xmm0
mov ecx, dword [rbx + 0x50]
test ecx, ecx
je 0x14001d647
mov eax, dword [rbp + 0x7f]
cmp ecx, eax
mov rdx, qword [rbx + 0x58]
cmovb eax, ecx
mov rcx, r13
mov r8d, eax
mov edi, eax
call sub.VCRUNTIME140.dll_memcpy
sub dword [rbx + 0x50], edi
add qword [rbx + 0x58], rdi
xor eax, eax
mov dword [r12], edi
jmp 0x14001d7d7
mov edx, esi
mov rcx, r14
call fcn.14001d800
mov eax, esi
jmp 0x14001d7d7
mov eax, 0x80090301
jmp 0x14001d7d7
mov eax, 0x80090304
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1400623a0
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret