Function at 0x1400015b1
Capabilities:
Get inbound credentials handle via credssp
Get outbound credentials handle via credssp

Disassembly:
push rbp
push rbx
sub rsp, 0x138
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x20], 0xffffffffffffffff
lea rax, str.NTLM
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
lea rdx, [rbp + 0x78]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x90]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 2
mov rdx, rax
mov ecx, 0
call sub.Secur32.dll_AcquireCredentialsHandleA
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x140001658
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.AcquireCredentialsHandle_Client_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
mov rax, qword [rbp + 0xa8]
lea rdx, [rbp + 0x70]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp + 0x80]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 1
mov rdx, rax
mov ecx, 0
call sub.Secur32.dll_AcquireCredentialsHandleA
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x1400016d8
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.AcquireCredentialsHandle_Server_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
mov dword [rbp + 0x60], 0
mov dword [rbp + 0x64], 1
lea rax, [rbp + 0x30]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x30], 0x2ee0
mov dword [rbp + 0x34], 2
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8d, 0x2ee0
mov edx, 8
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x90]
lea rdx, [rbp + 0x78]
mov qword [rsp + 0x58], rdx
lea rdx, [rbp - 0x14]
mov qword [rsp + 0x50], rdx
lea rdx, [rbp + 0x60]
mov qword [rsp + 0x48], rdx
mov rdx, rbp
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
mov r9d, 0x400
mov r8d, 0
mov edx, 0
mov rcx, rax
call sub.Secur32.dll_InitializeSecurityContextA
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x1400017b4
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.InitializeSecurityContext_Type_1_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
mov dword [rbp + 0x50], 0
mov dword [rbp + 0x54], 1
lea rax, [rbp + 0x20]
mov qword [rbp + 0x58], rax
mov dword [rbp + 0x20], 0x2ee0
mov dword [rbp + 0x24], 2
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8d, 0x2ee0
mov edx, 8
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x28], rax
lea rcx, [rbp + 0x60]
lea rax, [rbp + 0x80]
lea rdx, [rbp + 0x70]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp - 0x18]
mov qword [rsp + 0x38], rdx
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x30], rdx
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x10
mov r9d, 0x400
mov r8, rcx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_AcceptSecurityContext]
call rax
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x14000187d
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.AcceptSecurityContext_Type_2_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
mov dword [rbp + 0x40], 0
mov dword [rbp + 0x44], 1
lea rax, [rbp + 0x10]
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x10], 0x2ee0
mov dword [rbp + 0x14], 2
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8d, 0x2ee0
mov edx, 8
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapAlloc]
call rax
mov qword [rbp + 0x18], rax
mov rax, rbp
lea rdx, [rbp + 0x78]
mov qword [rsp + 0x58], rdx
lea rdx, [rbp - 0x14]
mov qword [rsp + 0x50], rdx
lea rdx, [rbp + 0x40]
mov qword [rsp + 0x48], rdx
mov rdx, rbp
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], 0
lea rdx, [rbp + 0x50]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov rdx, rax
mov ecx, 0
call sub.Secur32.dll_InitializeSecurityContextA
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x140001955
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.InitializeSecurityContext_Type_3_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
lea rcx, [rbp + 0x40]
lea rax, [rbp - 0x10]
lea rdx, [rbp + 0x70]
mov qword [rsp + 0x40], rdx
lea rdx, [rbp - 0x18]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], 0
lea rdx, [rbp - 0x10]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x10
mov r9d, 0
mov r8, rcx
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.Secur32.dll_AcceptSecurityContext]
call rax
mov dword [rbp + 0xa4], eax
cmp dword [rbp + 0xa4], 0
jns 0x1400019d3
mov eax, dword [rbp + 0xa4]
mov edx, eax
lea rax, str.AcceptSecurityContext_failed_with_secstatus_code_0x_x__n
mov rcx, rax
call fcn.140009850
mov eax, 0
jmp 0x140001a93
lea rdx, [rbp - 0x20]
lea rax, [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_QuerySecurityContextToken]
call rax
mov rbx, qword [rbp + 0x38]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
call rax
mov rbx, qword [rbp + 0x28]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
call rax
mov rbx, qword [rbp + 0x18]
mov rax, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
call rax
mov r8, rbx
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_HeapFree]
call rax
lea rax, [rbp + 0x90]
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_FreeCredentialsHandle]
call rax
lea rax, [rbp + 0x80]
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_FreeCredentialsHandle]
call rax
mov rax, rbp
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_DeleteSecurityContext]
call rax
lea rax, [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.Secur32.dll_DeleteSecurityContext]
call rax
mov rax, qword [rbp - 0x20]
add rsp, 0x138
pop rbx
pop rbp
ret