Function at 0x1400915fe
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x258
movaps xmmword [rsp + 0x240], xmm6
mov rdi, rcx
movabs r12, 0x8000000000000000
xor ebp, ebp
mov r15d, 0
cmp qword [rcx + 0x30], r12
je 0x140091665
mov rax, qword [rdi + 0x40]
mov r15d, 0
test rax, rax
je 0x140091665
mov rcx, qword [rdi + 0x38]
xor r15d, r15d
lea rdx, [0x140139fc8]
xor r8d, r8d
movzx r9d, byte [rcx + r8]
or r15d, dword [rdx + r9*4]
inc r8
cmp rax, r8
jne 0x140091654
xorps xmm6, xmm6
movups xmmword [rsp + 0x90], xmm6
movups xmmword [rsp + 0x80], xmm6
movups xmmword [rsp + 0x70], xmm6
movups xmmword [rsp + 0x60], xmm6
mov dword [rsp + 0x50], 4
mov dword [rsp + 0x98], 0x400010
mov dword [rsp + 0x88], r15d
mov r14, qword [rdi + 0x10]
test r14, r14
je 0x1400916f3
lea rbx, [r14*8]
mov rax, r14
shr rax, 0x3c
jne 0x1400918ea
mov r13, qword [rdi + 8]
mov al, byte [0x140149110]
xor ecx, ecx
mov rdx, rbx
call sym.std::sys::pal::windows::alloc::process_heap_alloc::h1ca289f3d44bb24b
test rax, rax
je 0x1400918ee
mov rsi, rax
xor eax, eax
mov rcx, qword [r13 + rax*8]
mov qword [rsi + rax*8], rcx
inc rax
cmp r14, rax
jne 0x1400916dd
mov ebp, r14d
jmp 0x1400916f8
mov esi, 8
mov dword [rsp + 0x54], ebp
mov qword [rsp + 0x58], rsi
xor eax, eax
mov qword [rsp + 0xc0], rax
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
mov qword [rsp + 0x110], rax
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
cmp qword [rdi + 0x18], r12
jne 0x1400917ff
lea rcx, str.ntdll.dll
call sub.kernel32.dll_GetModuleHandleW
test rax, rax
je 0x140091812
lea rdx, str.RtlGetVersion
mov rcx, rax
call sub.kernel32.dll_GetProcAddress
test rax, rax
je 0x140091812
mov rdi, rax
lea rbx, [rsp + 0x124]
mov r8d, 0x110
mov rcx, rbx
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rbx - 4], 0x114
lea rbx, [rsp + 0x120]
mov rcx, rbx
call rdi
cmp dword [rbx + 4], 0xa
ja 0x1400917be
jne 0x140091812
cmp dword [rsp + 0x12c], 0x4562
jbe 0x140091812
test r15d, r15d
je 0x1400917ce
not r15d
mov dword [rsp + 0xb0], r15d
lea rax, [rsp + 0xd0]
mov dword [rax], 5
movabs rcx, 0x100400010
mov qword [rax + 0x34], rcx
mov dword [rax + 8], ebp
mov qword [rax + 0x10], rsi
lea rcx, [rsp + 0xa0]
mov qword [rax + 0x40], rcx
jmp 0x140091814
mov eax, dword [rdi + 0x28]
mov dword [rsp + 0x78], eax
mov rax, qword [rdi + 0x20]
mov qword [rsp + 0x80], rax
xor eax, eax
test rax, rax
lea rcx, [rsp + 0x50]
cmovne rcx, rax
xorps xmm0, xmm0
lea rax, [rsp + 0x120]
movaps xmmword [rax], xmm0
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], 0
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call sub.secur32.dll_AcquireCredentialsHandleA
test eax, eax
je 0x140091872
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov ebx, 1
jmp 0x1400918b2
mov rbx, qword [rsp + 0x120]
mov r15, qword [rsp + 0x128]
mov al, byte [0x140149110]
mov edx, 0x20
xor ecx, ecx
call sym.std::sys::pal::windows::alloc::process_heap_alloc::h1ca289f3d44bb24b
test rax, rax
je 0x1400918fb
mov rdi, rax
mov eax, 1
mov qword [rdi], rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], r15
xor ebx, ebx
test r14, r14
je 0x1400918c8
mov rcx, qword [0x1401490c0]
xor edx, edx
mov r8, rsi
call fcn.1400d78a4
mov rax, rbx
mov rdx, rdi
movaps xmm6, xmmword [rsp + 0x240]
add rsp, 0x258
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
jmp 0x1400918f3
mov ecx, 8
mov rdx, rbx
call sym.alloc::raw_vec::handle_error::hd43ffb3afada7951
mov ecx, 8
mov edx, 0x20
call sym.alloc::alloc::handle_alloc_error::h526f0ddc898dc940
int3