Function at 0x1f8d0404
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp
Get session user name

Disassembly:
push 0x26c
mov eax, 0x1f9635d8
call fcn.1f8a6081
mov esi, ecx
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0443
test dword [eax + 0x1c], 0x400
je 0x1f8d0443
push dword [esi + 0x22dc]
push esi
push 0x1f879438
push 0x5f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f89f5b3
xor ebx, ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 4], 1
xor eax, eax
lea edi, [ebp - 0x230]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
cmp dword [eax + 0x1f4], ebx
je 0x1f8d05df
lea ebx, [esi + 0x2284]
lea ecx, [ebx + 0xc]
push ecx
lea ecx, [ebx + 8]
push ecx
mov dword [ebx + 0x18], 2
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
lea ecx, [ebx + 4]
push ecx
push ebx
push dword [eax + 0x1f4]
push dword [esi + 0x22b0]
call fcn.1f8a9e30
test eax, eax
jne 0x1f8d04da
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d04ca
test dword [eax + 0x1c], 0x200
je 0x1f8d04ca
push 0x1f879438
push 0x60
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
call dword [eax + 0x48]
jmp 0x1f8d0aa3
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
cmp dword [eax + 0x1fc], 0
je 0x1f8d05d0
mov eax, dword [eax + 0x1f8]
push 0
lea ecx, [ebp - 0x231]
push ecx
push eax
mov dword [ebp - 0x230], eax
call sym.WsmSvc.DLL_public:_static_void____stdcall_WSManMemory::Alloc_unsigned_int__class_TestSystem::CallSite_const___enum_TestSystem::Mode_
mov edi, eax
mov dword [ebp - 0x22c], edi
test edi, edi
jne 0x1f8d0527
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
call dword [eax + 0xc]
push 0xe
pop esi
jmp 0x1f8d0aa5
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
push dword [eax + 0x1f8]
push dword [eax + 0x1fc]
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
push 0
push dword [ebp - 0x230]
push edi
push 1
call fcn.1f8afdb1
test eax, eax
jne 0x1f8d05b5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [esi + 0x22b0]
mov ebx, eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 0x20]
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0594
test dword [eax + 0x1c], 0x200
je 0x1f8d0594
push ebx
push 0x1f879438
push 0x61
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
mov ecx, dword [ebp - 0x230]
mov eax, edi
test ecx, ecx
je 0x1f8d05a7
mov byte [eax], 0
inc eax
dec ecx
jne 0x1f8d05a0
push edi
call fcn.1f897c43
pop ecx
mov esi, ebx
jmp 0x1f8d0aa5
mov eax, edi
mov dword [ebx + 0x10], edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1f8d05bd
sub eax, edx
sar eax, 1
mov dword [ebx + 0x14], eax
jmp 0x1f8d05d8
and dword [ebx + 0x10], 0
and dword [ebx + 0x14], 0
xor edi, edi
jmp 0x1f8d0789
lea ecx, [eax + 0x124]
mov eax, dword [ecx]
call dword [eax + 0x24]
xor edi, edi
cmp dword [esi + 0x2b54], edi
je 0x1f8d0789
test eax, 0x100
jne 0x1f8d0789
push 2
pop eax
lea ecx, [ebp - 0x224]
push ecx
push edi
lea ebx, [esi + 0x2284]
push eax
mov dword [ebx + 0x18], eax
mov dword [ebp - 0x224], edi
call sub.SspiCli.dll_GetUserNameExW
test al, al
jne 0x1f8d0677
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x1f8d0677
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x22b0]
mov edi, eax
mov eax, dword [ecx]
push edi
call dword [eax + 0x20]
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0670
test dword [eax + 0x1c], 0x200
je 0x1f8d0670
push edi
push 0x1f879438
push 0x62
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
mov esi, edi
jmp 0x1f8d0aa5
mov eax, dword [ebp - 0x224]
cmp eax, edi
jne 0x1f8d06a6
push dword [esi + 0x22b0]
mov esi, 0x54f
push esi
push 0x1f879ab8
push 0x701
push 0x1f879448
call fcn.1f8a7bdf
jmp 0x1f8d0aa5
push 2
pop edx
xor ecx, ecx
mul edx
seto cl
xor edi, edi
push edi
neg ecx
or eax, ecx
lea ecx, [ebp - 0x225]
push ecx
push eax
call sym.WsmSvc.DLL_public:_static_void____stdcall_WSManMemory::Alloc_unsigned_int__class_TestSystem::CallSite_const___enum_TestSystem::Mode_
push eax
lea ecx, [ebp - 0x220]
call fcn.1f95b4ee
cmp dword [ebp - 0x220], edi
je 0x1f8d0514
lea eax, [ebp - 0x224]
push eax
push dword [ebp - 0x220]
push 2
call sub.SspiCli.dll_GetUserNameExW
test al, al
jne 0x1f8d0732
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x22b0]
mov edi, eax
mov eax, dword [ecx]
push edi
call dword [eax + 0x20]
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0670
test dword [eax + 0x1c], 0x200
je 0x1f8d0670
push edi
push 0x1f879438
push 0x63
jmp 0x1f8d0665
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebx + 8]
push ecx
lea eax, [ebx + 4]
push eax
push ebx
push dword [ebp - 0x220]
push dword [esi + 0x22b0]
call fcn.1f8a9e30
test eax, eax
jne 0x1f8d077d
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d04ca
test dword [eax + 0x1c], 0x200
je 0x1f8d04ca
push 0x1f879438
push 0x64
jmp 0x1f8d04bf
mov dword [ebx + 0xc], edi
mov dword [ebx + 8], edi
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov ecx, esi
call fcn.1f8cc10b
mov dword [ebp - 0x240], eax
cmp eax, 3
jne 0x1f8d07b6
push dword [esi + 0x22b0]
mov esi, 0x54f
push esi
push 0x1f879aac
push 0x72b
jmp 0x1f8d0697
mov ecx, eax
imul ecx, ecx, 0x3c
mov ecx, dword [ecx + 0x1f97b1a8]
mov dword [ebp - 0x238], ecx
cmp eax, 2
jne 0x1f8d07ef
xor eax, eax
lea edi, [ebp - 0x24c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x24c], 0x33
lea ebx, [ebp - 0x24c]
xor edi, edi
lea eax, [ebp - 0x278]
push eax
lea eax, [esi + 0x2038]
push eax
push edi
push edi
push ebx
push edi
push 2
push dword [ebp - 0x238]
push edi
call dword [sym.imp.SspiCli.dll_AcquireCredentialsHandleW]
mov ebx, eax
mov eax, dword [ebp - 0x22c]
cmp eax, edi
je 0x1f8d0839
mov ecx, dword [ebp - 0x230]
cmp ecx, edi
je 0x1f8d082d
mov byte [eax], 0
inc eax
dec ecx
jne 0x1f8d0826
push dword [ebp - 0x22c]
call fcn.1f897c43
pop ecx
cmp ebx, edi
jl 0x1f8d0a75
lea eax, [ebp - 0x23c]
push eax
push dword [ebp - 0x238]
call dword [sym.imp.SspiCli.dll_QuerySecurityPackageInfoW]
mov ebx, eax
cmp ebx, edi
jl 0x1f8d0a56
mov eax, dword [ebp - 0x23c]
mov ecx, dword [eax + 8]
push eax
mov dword [esi + 0x2048], ecx
call sub.SspiCli.dll_FreeContextBuffer
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x34]
mov eax, dword [ecx + 0x184]
lea ebx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, di
jne 0x1f8d0882
sub eax, ebx
sar eax, 1
cmp dword [esi + 0x2b54], edi
je 0x1f8d0926
push 1
lea ecx, [ebp - 0x270]
call fcn.1f8a8014
mov byte [ebp - 4], 2
lea eax, [ebp - 0x270]
push eax
call fcn.1f8aff2e
mov ebx, eax
mov eax, dword [ebp - 0x268]
shr eax, 1
not eax
test al, 1
jne 0x1f8d0912
lea ecx, [ebp - 0x270]
call fcn.1f895ff2
mov esi, eax
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d08fe
test dword [eax + 0x1c], 0x200
je 0x1f8d08fe
push esi
push 0x1f879438
push 0x67
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x270]
call fcn.1f8a807f
jmp 0x1f8d0aa5
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x270]
call fcn.1f8a807f
jmp 0x1f8d0a0a
mov edx, dword [ecx + 0x184]
cmp word [edx], 0x5b
jne 0x1f8d09e5
cmp word [edx + eax*2 - 2], 0x5d
jne 0x1f8d09e5
add eax, 0xfffffffe
push eax
mov ecx, edx
add ecx, 2
push ecx
push 0x105
lea eax, [ebp - 0x21c]
push eax
call fcn.1f897e99
test eax, eax
jge 0x1f8d096b
mov esi, 0x54f
jmp 0x1f8d0aa5
lea ebx, [ebp - 0x21c]
cmp byte [esi + 0xd], 0
je 0x1f8d0a28
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
mov eax, dword [eax + 0x180]
push eax
push ebx
push 0x1f879a94
lea edi, [esi + 0x204c]
push 0x118
push edi
call fcn.1f89bf1e
add esp, 0x14
test eax, eax
jl 0x1f8d0961
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d09cf
test dword [eax + 0x1c], 0x400
je 0x1f8d09cf
push edi
push esi
push 0x1f879438
push 0x68
push dword [eax + 0x14]
push dword [eax + 0x10]
call int.1f8b0017
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.1f8fe52c
xor eax, eax
jmp 0x1f8d0ab6
push dword [ecx + 0x184]
lea eax, [ebp - 0x21c]
push 0x105
push eax
call fcn.1f89fa84
test eax, eax
jl 0x1f8d0961
lea ebx, [ebp - 0x21c]
cmp ebx, edi
jne 0x1f8d0971
push edi
mov esi, 0x54f
push esi
push 0x1f879a88
push 0x783
jmp 0x1f8d0697
cmp dword [ebp - 0x240], 2
mov eax, 0x1f879a78
jne 0x1f8d0a3b
mov eax, 0x1f879a64
push ebx
push eax
lea edi, [esi + 0x204c]
push 0x118
push edi
call fcn.1f89bf1e
add esp, 0x10
jmp 0x1f8d09a2
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0a9d
test dword [eax + 0x1c], 0x200
je 0x1f8d0a9d
push ebx
push 0x1f879438
push 0x65
jmp 0x1f8d0a92
mov eax, dword [0x1f97b00c]
cmp eax, 0x1f97b00c
je 0x1f8d0a9d
test dword [eax + 0x1c], 0x200
je 0x1f8d0a9d
push ebx
push 0x1f879438
push 0x66
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
push ebx
call fcn.1f8a9cdd
mov esi, eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.1f8fe52c
mov eax, esi
call fcn.1f8a6113
ret