Function at 0x1400d8c50
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movaps xmmword [rsp + 0x240], xmm6
mov rdi, rcx
xor r15d, r15d
cmp r15, qword [rcx + 0x30]
jo 0x1400d8cb1
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x1400d8cb1
mov rcx, qword [rdi + 0x38]
xor r15d, r15d
lea rdx, [0x140169b08]
xor r8d, r8d
nop word cs:[rax + rax]
movzx r9d, byte [rcx + r8]
or r15d, dword [rdx + r9*4]
inc r8
cmp rax, r8
jne 0x1400d8ca0
xorps xmm0, xmm0
movups xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0xd0], xmm0
movups xmmword [rsp + 0xc0], xmm0
movups xmmword [rsp + 0xb0], xmm0
mov dword [rsp + 0xa0], 4
mov dword [rsp + 0xe8], 0x400010
mov dword [rsp + 0xd8], r15d
mov r12, qword [rdi + 0x10]
lea rbx, [r12*8]
xor ecx, ecx
mov rax, r12
shr rax, 0x3d
jne 0x1400d9039
movabs rax, 0x7ffffffffffffff8
cmp rbx, rax
ja 0x1400d9039
mov r13, qword [rdi + 8]
xor ebp, ebp
test rbx, rbx
je 0x1400d8d55
movzx eax, byte [0x140177ea0]
xor ecx, ecx
mov rdx, rbx
call fcn.1400f3650
test rax, rax
je 0x1400d9034
mov rsi, rax
mov r14, r12
test r12, r12
jne 0x1400d8d66
jmp 0x1400d8e23
mov esi, 8
xor r14d, r14d
test r12, r12
je 0x1400d8e23
xor eax, eax
cmp r12, 6
jb 0x1400d8db3
mov rcx, rsi
sub rcx, r13
cmp rcx, 0x20
jb 0x1400d8db3
movabs rax, 0x1ffffffffffffffc
and rax, r12
xor ecx, ecx
nop dword [rax]
movups xmm0, xmmword [r13 + rcx*8]
movups xmm1, xmmword [r13 + rcx*8 + 0x10]
movups xmmword [rsi + rcx*8], xmm0
movups xmmword [rsi + rcx*8 + 0x10], xmm1
add rcx, 4
cmp rax, rcx
jne 0x1400d8d90
cmp r12, rax
je 0x1400d8e20
mov rdx, r12
mov rcx, rax
and rdx, 3
je 0x1400d8de1
mov rcx, rax
nop word cs:[rax + rax]
mov r8, qword [r13 + rcx*8]
mov qword [rsi + rcx*8], r8
inc rcx
dec rdx
jne 0x1400d8dd0
sub rax, r12
cmp rax, 0xfffffffffffffffc
ja 0x1400d8e20
nop word [rax + rax]
mov rax, qword [r13 + rcx*8]
mov qword [rsi + rcx*8], rax
mov rax, qword [r13 + rcx*8 + 8]
mov qword [rsi + rcx*8 + 8], rax
mov rax, qword [r13 + rcx*8 + 0x10]
mov qword [rsi + rcx*8 + 0x10], rax
mov rax, qword [r13 + rcx*8 + 0x18]
mov qword [rsi + rcx*8 + 0x18], rax
add rcx, 4
cmp r12, rcx
jne 0x1400d8df0
mov ebp, r12d
mov dword [rsp + 0xa4], ebp
mov qword [rsp + 0xa8], rsi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x100], xmm0
movaps xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x110], 0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x90], 0
xor eax, eax
cmp rax, qword [rdi + 0x18]
jno 0x1400d8f3f
lea rcx, [0x14015f38c]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400d8f55
lea rdx, str.RtlGetVersion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400d8f55
mov rdi, rax
lea rcx, [rsp + 0x124]
mov r8d, 0x110
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x120], 0x114
lea rcx, [rsp + 0x120]
call rdi
cmp dword [rsp + 0x124], 0xa
ja 0x1400d8ef5
jne 0x1400d8f55
cmp dword [rsp + 0x12c], 0x4562
jbe 0x1400d8f55
test r15d, r15d
je 0x1400d8f05
not r15d
mov dword [rsp + 0x100], r15d
mov dword [rsp + 0x50], 5
movabs rax, 0x100400010
mov qword [rsp + 0x84], rax
mov dword [rsp + 0x58], ebp
mov qword [rsp + 0x60], rsi
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x50]
jmp 0x1400d8f57
mov eax, dword [rdi + 0x28]
mov dword [rsp + 0xc8], eax
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0xd0], rax
xor eax, eax
test rax, rax
lea rcx, [rsp + 0xa0]
cmovne rcx, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x120], xmm0
lea rax, [rsp + 0x120]
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], 0
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.secur32.dll_AcquireCredentialsHandleA]
test eax, eax
je 0x1400d8ff5
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov ebx, 1
test r14, r14
je 0x1400d8fd3
mov rcx, qword [0x140177e28]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, rbx
mov rdx, rdi
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movaps xmm6, xmmword [rsp + 0x120]
movzx eax, byte [0x140177ea0]
mov edx, 0x20
xor ecx, ecx
call fcn.1400f3650
test rax, rax
je 0x1400d9041
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
movups xmmword [rax + 0x10], xmm6
xor ebx, ebx
test r14, r14
jne 0x1400d8fc1
jmp 0x1400d8fd3
mov ecx, 8
mov rdx, rbx
call fcn.1401131b0
mov ecx, 8
mov edx, 0x20
call fcn.1401131d0
int3