Function at 0x14014fcc0
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0xf0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x68], 0xfffffffffffffffe
xorps xmm0, xmm0
movaps xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x30], 4
mov dword [rbp + 0x18], 0x400010
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x14014fd15
mov edx, dword [rcx + 0x28]
mov dword [rbp - 8], edx
mov qword [rbp], rax
mov rax, qword [rcx + 0x30]
test rax, rax
je 0x14014fd54
mov r8, qword [rcx + 0x40]
xor edx, edx
test r8, r8
je 0x14014fd51
lea r9, [0x1401e9aa8]
xor r10d, r10d
nop word cs:[rax + rax]
movzx r11d, byte [rax + r10]
or edx, dword [r9 + r11*4]
inc r10
cmp r8, r10
jne 0x14014fd40
mov dword [rbp + 8], edx
mov rbx, qword [rcx + 0x10]
test rbx, rbx
mov qword [rbp + 0x58], rbx
je 0x14014fe73
mov rax, rbx
shr rax, 0x3c
jne 0x14014ff91
mov rdi, qword [rcx]
lea rsi, [rbx*8]
movzx eax, byte [0x14023c318]
mov rcx, qword [0x14023c280]
test rcx, rcx
jne 0x14014fda9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x14014ff82
mov rcx, rax
mov qword [0x14023c280], rax
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14014ff82
xor r9d, r9d
cmp rbx, 6
jb 0x14014fe00
mov rcx, rax
sub rcx, rdi
cmp rcx, 0x20
jb 0x14014fe00
mov r9, rbx
and r9, 0xfffffffffffffffc
xor ecx, ecx
nop word [rax + rax]
movups xmm0, xmmword [rdi + rcx*8]
movups xmm1, xmmword [rdi + rcx*8 + 0x10]
movups xmmword [rax + rcx*8], xmm0
movups xmmword [rax + rcx*8 + 0x10], xmm1
add rcx, 4
cmp r9, rcx
jne 0x14014fde0
cmp rbx, r9
je 0x14014fe6f
mov rcx, r9
not rcx
add rcx, rbx
mov rdx, rbx
and rdx, 3
je 0x14014fe30
nop word cs:[rax + rax]
mov r8, qword [rdi + r9*8]
mov qword [rax + r9*8], r8
inc r9
dec rdx
jne 0x14014fe20
cmp rcx, 3
jb 0x14014fe6f
nop word cs:[rax + rax]
mov rcx, qword [rdi + r9*8]
mov qword [rax + r9*8], rcx
mov rcx, qword [rdi + r9*8 + 8]
mov qword [rax + r9*8 + 8], rcx
mov rcx, qword [rdi + r9*8 + 0x10]
mov qword [rax + r9*8 + 0x10], rcx
mov rcx, qword [rdi + r9*8 + 0x18]
mov qword [rax + r9*8 + 0x18], rcx
add r9, 4
cmp rbx, r9
jne 0x14014fe40
mov ecx, ebx
jmp 0x14014fe7a
xor ecx, ecx
mov eax, 8
mov dword [rbp - 0x2c], ecx
mov qword [rbp + 0x60], rax
mov qword [rbp - 0x28], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.secur32.dll_AcquireCredentialsHandleA]
mov esi, eax
test eax, eax
je 0x14014ff06
shl rsi, 0x20
or rsi, 2
mov edi, 1
mov rbx, qword [rbp + 0x58]
mov r14, qword [rbp + 0x60]
test rbx, rbx
je 0x14014fef2
mov rcx, qword [0x14023c280]
xor edx, edx
mov r8, r14
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, rdi
mov rdx, rsi
add rsp, 0xf0
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
mov qword [rbp + 0x20], 1
mov qword [rbp + 0x28], 1
movaps xmm0, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x30], xmm0
movzx eax, byte [0x14023c318]
mov rcx, qword [0x14023c280]
test rcx, rcx
mov rbx, qword [rbp + 0x58]
mov r14, qword [rbp + 0x60]
jne 0x14014ff4e
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x14014ff98
mov rcx, rax
mov qword [0x14023c280], rax
mov r8d, 0x20
xor edx, edx
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x14014ff98
mov rsi, rax
movups xmm0, xmmword [rbp + 0x20]
movups xmm1, xmmword [rbp + 0x30]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
xor edi, edi
test rbx, rbx
jne 0x14014fee0
jmp 0x14014fef2
mov ecx, 8
mov rdx, rsi
call fcn.1401846a0
ud2
call fcn.140005200
ud2
mov ecx, 8
mov edx, 0x20
call fcn.1401846a0
ud2