Function at 0x14006c1f0
Capabilities:
Encrypt data via sspi
Send data
Send data on socket

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov dword [rbp - 0x61], r8d
mov qword [rbp - 0x21], rdx
mov r12, rcx
and dword [rbp - 0x11], 0
xor eax, eax
mov qword [rbp - 0xd], rax
mov qword [rbp - 5], rax
add rcx, 0x858
lea r8, [rbp - 0x11]
lea ebx, [rax + 4]
mov edx, ebx
call qword [sym.imp.Secur32.dll_QueryContextAttributesW]
test eax, eax
jns 0x14006c25f
or rax, 0xffffffffffffffff
jmp 0x14006c603
mov eax, reloc.SHELL32.dll_ILFindLastID
mul rbx
mov r13, 0xffffffffffffffff
cmovo rax, r13
mov rcx, rax
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov rsi, rax
mov qword [rbp - 0x41], rax
xor edx, edx
lea r8d, [r13 + 0x41]
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
mov dword [rbp - 0x39], ebx
and dword [rbp - 0x65], 0
mov ecx, dword [rbp - 9]
lea edi, [rcx + rcx]
movsxd rbx, edi
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov r14, rax
mov qword [rbp - 0x51], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
mov dword [rbp - 0x49], edi
mov ecx, dword [rbp - 0x11]
lea edi, [rcx + rcx]
movsxd rbx, edi
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov r15, rax
mov qword [rbp - 0x31], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
mov dword [rbp - 0x29], edi
mov ecx, dword [rbp - 0xd]
add ecx, ecx
movsxd rbx, ecx
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov rdi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
nop
mov ebx, dword [rbp - 0x61]
test ebx, ebx
je 0x14006c5c4
mov eax, dword [rbp - 0x65]
cmp ebx, dword [rbp - 9]
cmova ebx, dword [rbp - 9]
mov r8d, ebx
movsxd rdx, eax
add rdx, qword [rbp - 0x21]
mov rcx, r14
call qword [sym.imp.msvcrt.dll_memcpy]
add dword [rbp - 0x65], ebx
mov qword [rsi + 8], r15
mov eax, dword [rbp - 0x11]
mov dword [rsi], eax
mov dword [rsi + 4], 7
mov qword [rsi + 0x18], r14
mov dword [rsi + 0x10], ebx
mov dword [rsi + 0x14], 1
mov qword [rsi + 0x28], rdi
mov eax, dword [rbp - 0xd]
mov dword [rsi + 0x20], eax
mov dword [rsi + 0x24], 6
xor ebx, ebx
mov qword [rsi + 0x38], rbx
mov qword [rsi + 0x30], rbx
lea rax, [r12 + 0x868]
mov dword [rax], ebx
mov qword [r12 + 0x870], rsi
mov dword [r12 + 0x86c], 4
xor r9d, r9d
mov r8, rax
xor edx, edx
lea rcx, [r12 + 0x858]
call qword [sym.imp.Secur32.dll_EncryptMessage]
test eax, eax
js 0x14006c593
mov eax, dword [rsi]
mov dword [rbp - 0x69], eax
mov rcx, qword [rsi + 8]
mov qword [rbp - 0x59], rcx
xor r9d, r9d
mov r8d, eax
mov rdx, rcx
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
je 0x14006c40a
mov esi, dword [rbp - 0x69]
mov r14, qword [rbp - 0x59]
cmp eax, r13d
je 0x14006c402
add ebx, eax
cmp ebx, esi
je 0x14006c402
mov r8d, esi
sub r8d, ebx
movsxd rdx, ebx
add rdx, r14
xor r9d, r9d
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
jne 0x14006c3da
mov rsi, qword [rbp - 0x41]
mov r14, qword [rbp - 0x51]
cmp ebx, dword [rsi]
jne 0x14006c596
mov eax, dword [rsi + 0x10]
mov dword [rbp - 0x69], eax
mov rcx, qword [rsi + 0x18]
mov qword [rbp - 0x59], rcx
xor ebx, ebx
xor r9d, r9d
mov r8d, eax
mov rdx, rcx
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
je 0x14006c470
mov esi, dword [rbp - 0x69]
mov r14, qword [rbp - 0x59]
cmp eax, r13d
je 0x14006c468
add ebx, eax
cmp ebx, esi
je 0x14006c468
mov r8d, esi
sub r8d, ebx
movsxd rdx, ebx
add rdx, r14
xor r9d, r9d
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
jne 0x14006c440
mov rsi, qword [rbp - 0x41]
mov r14, qword [rbp - 0x51]
cmp ebx, dword [rsi + 0x10]
jne 0x14006c596
mov eax, dword [rsi + 0x20]
mov dword [rbp - 0x69], eax
mov rcx, qword [rsi + 0x28]
mov qword [rbp - 0x59], rcx
xor ebx, ebx
xor r9d, r9d
mov r8d, eax
mov rdx, rcx
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
je 0x14006c4d7
mov esi, dword [rbp - 0x69]
mov r14, qword [rbp - 0x59]
cmp eax, r13d
je 0x14006c4cf
add ebx, eax
cmp ebx, esi
je 0x14006c4cf
mov r8d, esi
sub r8d, ebx
movsxd rdx, ebx
add rdx, r14
xor r9d, r9d
mov rcx, qword [r12]
call qword [sym.imp.WS2_32.dll_send]
test eax, eax
jne 0x14006c4a7
mov rsi, qword [rbp - 0x41]
mov r14, qword [rbp - 0x51]
cmp ebx, dword [rsi + 0x20]
jne 0x14006c596
test rdi, rdi
je 0x14006c4ef
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r15, r15
je 0x14006c4fe
mov rcx, r15
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r14, r14
je 0x14006c50c
mov rcx, r14
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov eax, dword [rbp - 9]
lea edi, [rax + rax]
movsxd rbx, edi
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov r14, rax
mov qword [rbp - 0x51], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
mov dword [rbp - 0x49], edi
mov eax, dword [rbp - 0x11]
lea edi, [rax + rax]
movsxd rbx, edi
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov r15, rax
mov qword [rbp - 0x31], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
mov dword [rbp - 0x29], edi
mov eax, dword [rbp - 0xd]
add eax, eax
movsxd rbx, eax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__]
mov rdi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.msvcrt.dll_memset]
nop
mov ebx, dword [rbp - 0x61]
mov eax, dword [rbp - 0x65]
sub ebx, eax
jne 0x14006c31d
jmp 0x14006c5c4
mov ebx, r13d
test rdi, rdi
je 0x14006c5a5
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r15, r15
je 0x14006c5b4
mov rcx, r15
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r14, r14
je 0x14006c5f3
mov rcx, r14
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
jmp 0x14006c5f3
test rdi, rdi
je 0x14006c5d3
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r15, r15
je 0x14006c5e2
mov rcx, r15
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
nop
test r14, r14
je 0x14006c5f0
mov rcx, r14
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov ebx, dword [rbp - 0x61]
test rsi, rsi
je 0x14006c601
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov eax, ebx
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140001010
mov rbx, qword [rsp + 0x108]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret