Function at 0x1400058d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb0
mov r9d, 1
lea r8, [rsp + 0x3c]
mov rdi, rdx
lea rdx, [rsp + 0x48]
mov rcx, rdi
call dbg.RequestApReq
test eax, eax
mov ebx, eax
jne 0x1400059b0
movabs rax, 0x12f78648862a0906
mov esi, dword [rsp + 0x3c]
mov rbp, qword [rsp + 0x48]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x97], 0x2020112
mov r12, rsi
lea rax, [rbp + 0xb]
add rsi, rbp
cmp rsi, rax
jb 0x140005e2f
lea r13, [rsp + 0x90]
sub rsi, 0xa
mov rbx, rbp
jmp 0x140005959
cmp rsi, rbx
je 0x140005e2f
mov rdx, rbx
mov r8d, 0xb
mov rcx, r13
call dbg._memcmp
mov r14, rbx
add rbx, 1
test eax, eax
jne 0x140005950
cmp word [rbx + 0xa], 1
je 0x1400059e0
mov ecx, 1
call qword [sym.__acrt_iob_func]
lea rdx, [0x1400110a3]
mov rcx, rax
add rsp, 0xb0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.fprintf_6
mov ecx, 1
call qword [sym.__acrt_iob_func]
lea rdx, [0x1400110c0]
mov r8d, ebx
mov rcx, rax
add rsp, 0xb0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.fprintf_6
mov ecx, 1
mov rsi, qword [sym.__acrt_iob_func]
call rsi
lea rdx, str.___Found_the_AP_REQ_delegation_ticket_in_the_GSS_API_output_n
mov rcx, rax
call sym.fprintf_6
lea rax, [r14 + 0xb]
sub rax, rbp
sub r12d, eax
mov dword [rsp + 0x3c], r12d
call dbg.KRB5_Module_Startup
test rax, rax
mov rbx, rax
je 0x140005cc0
lea rax, [rsp + 0x50]
mov r8d, r12d
mov r9d, 0x1f
lea rdx, [r14 + 0xd]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call dbg.KerbUnpackData
test eax, eax
mov r12d, eax
jne 0x140005c80
mov rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x58], 0
mov r12d, dword [rax + 0x64]
mov ecx, r12d
call dbg.GetEncryptionTypeString
mov r14, qword [rsp + 0x58]
mov ecx, 1
test r14, r14
je 0x140005cd8
call rsi
lea rdx, str.___Authenticator_etype:__s_n
mov r8, r14
mov rcx, rax
call sym.fprintf_6
mov rcx, qword [rsp + 0x58]
call sym.free
lea r9, [rsp + 0x40]
mov rcx, rdi
mov edx, r12d
lea r8, [rsp + 0x60]
call dbg.GetKeyFromCache
mov ecx, 1
test eax, eax
mov edi, eax
jne 0x140005cee
call rsi
lea rdx, str.___Successfully_extracted_the_service_ticket_session_key_n
lea r14, [rsp + 0x80]
mov rcx, rax
call sym.fprintf_6
mov eax, dword [rsp + 0x40]
mov r9, r14
mov rdx, r13
mov dword [rsp + 0x90], r12d
mov r12, qword [rsp + 0x60]
mov ecx, 0xb
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa0], r12
lea r8, [rax + 0x70]
call dbg.KerberosDecrypt
mov ecx, 1
test eax, eax
mov edi, eax
jne 0x140005d16
call rsi
lea rdx, str.___Successfully_decrypted_authenticator_n
mov rcx, rax
call sym.fprintf_6
mov r8d, dword [rsp + 0x80]
lea rax, [rsp + 0x68]
mov r9d, 0x1e
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov rcx, rbx
call dbg.KerbUnpackData
test eax, eax
mov edi, eax
jne 0x140005d34
mov rax, qword [rsp + 0x68]
test byte [rax], 0x80
je 0x140005d50
cmp dword [rax + 0x20], 0x8003
jne 0x140005d7a
mov rax, qword [rax + 0x30]
test byte [rax + 0x14], 1
je 0x140005d92
movzx r8d, word [rax + 0x1a]
lea rdx, [rax + 0x1c]
mov r9d, 0x24
mov rcx, rbx
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call dbg.KerbUnpackData
test eax, eax
jne 0x140005daa
mov rax, qword [rsp + 0x70]
mov r9, r14
mov rdx, r13
mov ecx, 0xe
lea r8, [rax + 0x20]
call dbg.KerberosDecrypt
test eax, eax
mov edi, eax
jne 0x140005dc2
mov rdx, qword [rsp + 0x70]
xor eax, eax
mov r8d, 0x24
mov rcx, rbx
movdqa xmm0, xmmword [rsp + 0x80]
lea r9, [rsp + 0x44]
mov dword [rdx + 0x14], eax
lea rax, [rsp + 0x78]
movups xmmword [rdx + 0x20], xmm0
mov qword [rsp + 0x20], rax
call dbg.KerbPackData
test eax, eax
mov edi, eax
jne 0x140005e14
mov ecx, dword [rsp + 0x44]
call dbg.Base64encode_len
mov edx, 1
movsxd rcx, eax
call sym.calloc
test rax, rax
mov rdi, rax
je 0x140005df2
mov r8d, dword [rsp + 0x44]
mov rcx, rax
mov rdx, qword [rsp + 0x78]
call dbg.Base64encode
mov ecx, 1
call rsi
lea rdx, str.___Successfully_extracted_TGT:__s_n
mov r8, rdi
mov rcx, rax
call sym.fprintf_6
mov rcx, rdi
add rsp, 0xb0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.free
mov ecx, 1
call rsi
lea rdx, [0x140011058]
mov r8d, r12d
mov rcx, rax
call sym.fprintf_6
mov rcx, rbx
call dbg.KRB5_Module_Cleanup
mov rcx, rbp
call sym.free
nop
add rsp, 0xb0
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov ecx, 1
call rsi
lea rdx, [0x140011080]
mov rcx, rax
call sym.fprintf_6
jmp 0x140005ca1
call rsi
lea rdx, [0x140010e38]
mov rcx, rax
call sym.fprintf_6
jmp 0x140005a97
call rsi
lea rdx, str.____Could_not_obtain_the_key_from_cache:_0x_x_n
mov r8d, edi
mov rcx, rax
call sym.fprintf_6
mov r8, qword [rsp + 0x50]
mov edx, 0x1f
mov rcx, rbx
call dbg.KerbFreeData
jmp 0x140005c99
call rsi
lea rdx, str.____Unable_to_decrypt_authenticator:_0x_x_n
mov r8d, edi
mov rcx, rax
call sym.fprintf_6
mov rcx, r12
call sym.free
jmp 0x140005d02
mov ecx, 1
call rsi
movsxd rdx, edi
mov rcx, rax
call sym.fprintf_6
mov rcx, r14
call sym.free
jmp 0x140005d2a
mov ecx, 1
call rsi
lea rdx, str.____Missing_checksum_in_the_authentticator_n
mov rcx, rax
call sym.fprintf_6
mov r8, qword [rsp + 0x68]
mov edx, 0x1e
mov rcx, rbx
call dbg.KerbFreeData
jmp 0x140005d46
mov ecx, 1
call rsi
lea rdx, str.____Wrong_checksum_type_n
mov rcx, rax
call sym.fprintf_6
jmp 0x140005d66
mov ecx, 1
call rsi
lea rdx, str.____Missing_delegation_flag_n
mov rcx, rax
call sym.fprintf_6
jmp 0x140005d66
mov ecx, 1
call rsi
lea rdx, str.____Failed_to_unpack_KRB_CRED_n
mov rcx, rax
call sym.fprintf_6
jmp 0x140005d66
mov ecx, 1
call rsi
lea rdx, str.____Failed_to_decrypt_KRB_CRED:_0x_x_n
mov r8d, edi
mov rcx, rax
call sym.fprintf_6
mov r8, qword [rsp + 0x70]
mov edx, 0x24
mov rcx, rbx
call dbg.KerbFreeData
jmp 0x140005d66
mov ecx, 1
call rsi
lea rdx, str.____Could_not_allocate_memory._n
mov rcx, rax
call sym.fprintf_6
mov rcx, qword [rsp + 0x78]
call sym.free
jmp 0x140005ddb
mov ecx, 1
call rsi
lea rdx, str.____Failed_to_pack_plain_KRB_CRED:_0x_x_n
mov r8d, edi
mov rcx, rax
call sym.fprintf_6
jmp 0x140005ddb
movzx eax, word [pe_dos_header]
ud2