Function at 0x140009030
Capabilities:
Get inbound credentials handle via credssp
Get outbound credentials handle via credssp

Disassembly:
jmp 0x140009030
push rsi
push rdi
sub rsp, 0x158
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rax, 0xffffffffffffffff
mov qword [rsp + 0x90], rax
xor eax, eax
mov r9d, eax
lea rdx, str.NTLM
mov r8d, 2
lea r10, [rsp + 0x140]
lea rax, [rsp + 0x128]
mov rcx, r9
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x40], rax
call qword [sym.imp.Secur32.dll_AcquireCredentialsHandleW]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x1400090dc
mov edx, dword [rsp + 0x8c]
lea rcx, str.AcquireCredentialsHandle_Client_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
xor eax, eax
mov r9d, eax
lea rdx, str.NTLM
mov r8d, 1
lea r10, [rsp + 0x130]
lea rax, [rsp + 0x120]
mov rcx, r9
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x40], rax
call qword [sym.imp.Secur32.dll_AcquireCredentialsHandleW]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x14000915e
mov edx, dword [rsp + 0x8c]
lea rcx, str.AcquireCredentialsHandle_Server_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
mov dword [rsp + 0x110], 0
mov dword [rsp + 0x114], 1
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x118], rax
mov dword [rsp + 0xe0], 0x2ee0
mov dword [rsp + 0xe4], 2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0x2ee0
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0x140]
xor eax, eax
mov r8d, eax
mov r9d, 0x400
xor eax, eax
lea rsi, [rsp + 0xb0]
lea r11, [rsp + 0x110]
lea r10, [rsp + 0x9c]
lea rax, [rsp + 0x128]
mov rdx, r8
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0x10
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x58], rax
call qword [sym.imp.Secur32.dll_InitializeSecurityContextW]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x140009261
mov edx, dword [rsp + 0x8c]
lea rcx, str.InitializeSecurityContext_Type_1_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
mov dword [rsp + 0x100], 0
mov dword [rsp + 0x104], 1
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x108], rax
mov dword [rsp + 0xd0], 0x2ee0
mov dword [rsp + 0xd4], 2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0x2ee0
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xd8], rax
lea rcx, [rsp + 0x130]
xor eax, eax
mov edx, eax
lea r8, [rsp + 0x110]
mov r9d, 0x400
lea rsi, [rsp + 0xa0]
lea r11, [rsp + 0x100]
lea r10, [rsp + 0x98]
lea rax, [rsp + 0x120]
mov dword [rsp + 0x20], 0x10
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x40], rax
call qword [sym.imp.Secur32.dll_AcceptSecurityContext]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x14000934d
mov edx, dword [rsp + 0x8c]
lea rcx, str.AcceptSecurityContext_Type_2_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
mov dword [rsp + 0xf0], 0
mov dword [rsp + 0xf4], 1
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0xc0], 0x2ee0
mov dword [rsp + 0xc4], 2
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8d, 0x2ee0
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xc8], rax
xor eax, eax
mov r8d, eax
lea rsi, [rsp + 0xb0]
xor r9d, r9d
lea rdi, [rsp + 0x100]
lea r11, [rsp + 0xf0]
lea r10, [rsp + 0x9c]
lea rax, [rsp + 0x128]
mov rcx, r8
mov rdx, rsi
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0x10
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x38], 0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x50], r10
mov qword [rsp + 0x58], rax
call qword [sym.imp.Secur32.dll_InitializeSecurityContextW]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x14000944a
mov edx, dword [rsp + 0x8c]
lea rcx, str.InitializeSecurityContext_Type_3_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
xor eax, eax
mov ecx, eax
lea r11, [rsp + 0xa0]
lea r8, [rsp + 0xf0]
xor r9d, r9d
lea r10, [rsp + 0x98]
lea rax, [rsp + 0x120]
mov rdx, r11
mov dword [rsp + 0x20], 0x10
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x40], rax
call qword [sym.imp.Secur32.dll_AcceptSecurityContext]
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0
jge 0x1400094cc
mov edx, dword [rsp + 0x8c]
lea rcx, str.AcceptSecurityContext_failed_with_secstatus_code_0x_x__n
call fcn.14000254a
mov ecx, 0xffffffff
call fcn.140001389
lea rcx, [rsp + 0xa0]
lea rdx, [rsp + 0x90]
call qword [sym.imp.Secur32.dll_QuerySecurityContextToken]
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x68], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x68]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x70]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x78], rax
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, qword [rsp + 0x78]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rcx, [rsp + 0x140]
call qword [sym.imp.Secur32.dll_FreeCredentialsHandle]
lea rcx, [rsp + 0x130]
call qword [sym.imp.Secur32.dll_FreeCredentialsHandle]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.Secur32.dll_DeleteSecurityContext]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.Secur32.dll_DeleteSecurityContext]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1400025b8
mov rax, qword [rsp + 0x80]
add rsp, 0x158
pop rdi
pop rsi
ret