Function at 0x140131eb0
Capabilities:
Encrypt data via sspi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rdi, r9
mov r13, rdx
mov r15, rcx
mov qword [rdx + 0x180], r8
lea rcx, [rsp + 0x20]
call fcn.140120820
mov rsi, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
cmp dword [rsp + 0x20], 1
jne 0x140131f62
mov rbp, rsi
shr rbp, 8
mov rbx, rsi
shr rbx, 0x10
mov rdi, rsi
shr rdi, 0x20
movzx r14d, sil
test r14b, r14b
je 0x1401321bc
cmp sil, 1
je 0x140132004
mov al, byte [r12 + 0x10]
cmp al, 0xa
je 0x1401321cb
mov qword [r15], 1
shl rdi, 0x20
movzx eax, bx
shl rax, 0x10
or rax, rdi
movzx ecx, bpl
shl rcx, 8
or rcx, rax
or rcx, r14
mov qword [r15 + 8], rcx
mov qword [r15 + 0x10], r12
mov qword [r13 + 0x180], 0
jmp 0x140132239
cmp dword [rsp + 0x24], 0
je 0x140132013
mov r14, qword [r13 + 0x1e8]
cmp r14, qword [r13 + 0x1e0]
jne 0x14013227c
mov rbp, qword [rsp + 0xf0]
mov rbx, rsi
shr rbx, 0x20
mov eax, r12d
cmp rax, rbp
cmovb rbp, rax
mov esi, esi
lea r12, [rsi + rbp]
add rbx, r12
sub rbx, r14
jbe 0x1401320d5
mov rax, qword [r13 + 0x1d8]
mov rcx, rax
sub rcx, r14
cmp rcx, rbx
jae 0x14013201d
add r14, rbx
jb 0x14013230b
lea rcx, [rax + rax]
cmp rcx, r14
cmova r14, rcx
cmp r14, 8
mov edx, 8
cmova rdx, r14
test rax, rax
je 0x14013206b
mov rcx, qword [r13 + 0x1d0]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 1
jmp 0x140132074
mov eax, ebp
cmp al, 0xa
je 0x1401321cb
jmp 0x140131f27
mov edi, 0x80090317
jmp 0x1401321b0
mov rax, qword [r13 + 0x1d0]
lea rcx, [rax + r14]
cmp rbx, 2
jb 0x1401320c2
lea rdx, [rbx + r14]
mov qword [rsp + 0x80], rdx
lea r8, [rbx - 1]
xor edx, edx
mov qword [rsp + 0x78], rax
call sub.VCRUNTIME140.dll_memset
add r14, rbx
add r14, 0xffffffffffffffff
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x78]
add rcx, rax
add rcx, 0xffffffffffffffff
jmp 0x1401320c7
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x60]
lea r9, [rsp + 0x20]
mov r8d, 1
call fcn.14016c1f0
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
cmp qword [rsp + 0x60], 1
je 0x140132306
mov qword [r13 + 0x1d0], rax
mov qword [r13 + 0x1d8], rdx
mov r14, qword [r13 + 0x1e0]
lea rcx, [rax + r14]
cmp rbx, 2
jae 0x140132032
test rbx, rbx
je 0x1401320ce
mov byte [rcx], 0
add r14, 1
mov qword [r13 + 0x1e0], r14
cmp r14, r12
jb 0x1401322dd
test rbp, rbp
je 0x14013210a
mov rax, qword [r13 + 0x1d0]
add rax, rsi
xor ecx, ecx
nop
movzx edx, byte [rdi + rcx]
mov byte [rax + rcx], dl
lea rdx, [rcx + 1]
mov rcx, rdx
cmp rbp, rdx
jne 0x1401320f0
mov r14, qword [r13 + 0x1e0]
cmp r14, rsi
jb 0x1401322e6
cmp r14, r12
jb 0x1401322f2
mov rax, qword [r13 + 0x1d0]
movabs rcx, 0x700000000
or rcx, rsi
add rsi, rax
movabs rdx, 0x100000000
or rdx, rbp
lea rbx, [rax + r12]
sub r14d, r12d
movabs rdi, 0x600000000
or rdi, r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea rax, [rsp + 0x20]
mov qword [rsp + 0x68], rax
movabs rax, 0x400000000
mov qword [rsp + 0x60], rax
lea rcx, [r13 + 8]
lea r8, [rsp + 0x60]
xor edx, edx
xor r9d, r9d
call sub.Secur32.dll_EncryptMessage
test eax, eax
je 0x14013224e
mov edi, eax
xor r14d, r14d
xor r12d, r12d
xor esi, esi
xor ebp, ebp
xor ebx, ebx
mov ecx, edi
call fcn.140144e80
cmp al, 0xa
jne 0x140131f27
mov qword [r15], 2
mov qword [r13 + 0x180], 0
cmp sil, 2
jb 0x140132239
mov rcx, qword [r12]
mov rax, qword [r12 + 8]
call qword [rax]
mov rax, qword [r12 + 8]
cmp qword [rax + 8], 0
je 0x140132227
mov rsi, qword [r12]
cmp qword [rax + 0x10], 0x11
jae 0x140132214
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x140132222
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
call fcn.14021dfcd
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, r12
call fcn.14021dfcd
nop
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [rsp + 0x30]
add eax, dword [rsp + 0x20]
add eax, dword [rsp + 0x40]
cmp qword [r13 + 0x1e0], rax
jb 0x14013226a
mov qword [r13 + 0x1e0], rax
mov qword [r13 + 0x1e8], 0
mov qword [r13 + 0x1f0], rbp
lea rcx, [rsp + 0x20]
mov rdx, r13
call fcn.1401222b0
cmp qword [rsp + 0x20], 1
jne 0x1401322a0
mov rsi, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
jmp 0x140131eee
mov rax, qword [r13 + 0x1f0]
movabs rcx, 0xffffffff00000000
and rcx, rax
mov edx, eax
movzx ebp, al
and eax, 0xffff0000
or rax, rcx
and edx, 0xff00
or rdx, rax
or rbp, rdx
mov qword [r15], 0
mov qword [r15 + 8], rbp
jmp 0x140131f52
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_schannel_0.1.19_src_tls_stream.rs
jmp 0x1401322f9
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_schannel_0.1.19_src_tls_stream.rs
mov rcx, rsi
jmp 0x1401322fc
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_schannel_0.1.19_src_tls_stream.rs
mov rcx, r12
mov rdx, r14
call fcn.1400201a0
ud2
test rdx, rdx
jne 0x140132312
call fcn.1400182c0
ud2
mov rcx, rax
call fcn.1400182a0
ud2