Function at 0x1400aae3b
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movaps xmmword [rsp + 0x240], xmm6
mov rbx, rcx
xor r15d, r15d
dec dword [rcx - 0x43]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax + 0xbc41], al
add byte [rax], al
cmp qword [rcx + 0x30], r13
je 0x1400aaea3
mov rax, qword [rbx + 0x40]
mov r12d, 0
mov esp, 0
test rax, rax
je 0x1400aaea3
mov rcx, qword [rbx + 0x38]
xor r12d, r12d
lea rdx, [0x140159e88]
xor r8d, r8d
movzx r9d, byte [rcx + r8]
or r12d, dword [rdx + r9*4]
inc r8
cmp rax, r8
jne 0x1400aae92
xorps xmm6, xmm6
movups xmmword [rsp + 0x90], xmm6
mov ah, 0x24
nop
add byte [rax], al
add byte [rdi], cl
adc dword [rsp + 0x80], esi
movups xmmword [rsp + 0x70], xmm6
movups xmmword [rsp + 0x60], xmm6
je 0x1400aaee3
invalid
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x98], 0x400010
mov dword [rsp + 0x88], r12d
add byte [rax], al
mov rsi, qword [rbx + 0x10]
test rsi, rsi
je 0x1400aaf34
lea r14, [rsi*8]
mov rax, rsi
shr rax, 0x3c
jne 0x1400ab136
invalid
add al, byte [rax]
invalid
mov rbp, qword [rbx + 8]
mov r15d, 8
mov ecx, 8
mov rdx, r14
call fcn.1400aa5ef
test rax, rax
test eax, eax
je 0x1400ab139
mov rdi, rax
xor eax, eax
mov rcx, qword [rbp + rax*8]
mov qword [rdi + rax*8], rcx
invalid
inc rax
cmp rsi, rax
jne 0x1400aaf1e
mov r15d, esi
jmp 0x1400aaf3b
mov edi, 8
xor esi, esi
mov dword [rsp + 0x54], r15d
mov qword [rsp + 0x58], rdi
jl 0x1400aaf68
pop rax
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
and qword [rsp + 0xc0], 0
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
and qword [rsp + 0x110], 0
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
cmp qword [rbx + 0x18], r13
jne 0x1400ab048
lea rcx, [0x14012a224]
call qword [sym.imp.kernel32.dll_GetModuleHandleW]
test rax, rax
je 0x1400ab05b
lea rdx, [0x14012a238]
mov rcx, rax
call qword [sym.imp.kernel32.dll_GetProcAddress]
test rax, rax
je 0x1400ab05b
mov rbx, rax
lea r14, [rsp + 0x124]
mov r8d, 0x110
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov dword [r14 - 4], 0x114
lea r14, [rsp + 0x120]
mov rcx, r14
call rbx
cmp dword [r14 + 4], 0xa
ja 0x1400ab006
jne 0x1400ab05b
cmp dword [rsp + 0x12c], 0x4562
jbe 0x1400ab05b
test r12d, r12d
je 0x1400ab016
not r12d
mov dword [rsp + 0xb0], r12d
lea rax, [rsp + 0xd0]
mov dword [rax], 5
movabs rcx, 0x100400010
mov qword [rax + 0x34], rcx
mov dword [rax + 8], r15d
mov qword [rax + 0x10], rdi
lea rcx, [rsp + 0xa0]
mov qword [rax + 0x40], rcx
jmp 0x1400ab05d
mov eax, dword [rbx + 0x28]
mov dword [rsp + 0x78], eax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x80], rax
xor eax, eax
test rax, rax
lea rcx, [rsp + 0x50]
cmovne rcx, rax
xorps xmm0, xmm0
lea rax, [rsp + 0x120]
movaps xmmword [rax], xmm0
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
and qword [rsp + 0x40], 0
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.secur32.dll_AcquireCredentialsHandleA]
test eax, eax
je 0x1400ab0ba
mov ebx, eax
shl rbx, 0x20
or rbx, 2
mov r14d, 1
jmp 0x1400ab0fb
mov r14, qword [rsp + 0x120]
mov r15, qword [rsp + 0x128]
mov ecx, 8
mov edx, 0x20
xor r8d, r8d
call fcn.1400aa5f7
test rax, rax
je 0x1400ab144
mov rbx, rax
mov eax, 1
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r15
xor r14d, r14d
test rsi, rsi
je 0x1400ab114
shl rsi, 3
mov edx, 8
mov rcx, rdi
mov r8, rsi
call fcn.14000384b
mov rax, r14
mov rdx, rbx
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor r15d, r15d
mov rcx, r15
mov rdx, r14
call fcn.1400ddae0
mov ecx, 8
mov edx, 0x20
call fcn.1400ddb00
int3