Function at 0x101b2380
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x70
call fcn.100bab40
mov eax, dword [0x102db080]
xor eax, esp
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x78]
push ebx
mov ebx, dword [esp + 0x94]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x80]
push esi
mov esi, dword [esp + 0x88]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], 0
push edi
mov edi, dword [esp + 0x80]
mov dword [esp + 0x2c], edi
cmp esi, ebx
je 0x101b2406
push edi
call fcn.10107920
add esp, 4
cmp eax, 0x2c
jne 0x101b2429
cmp esi, 0x18
jne 0x101b2429
cmp ebx, 0x15
jne 0x101b2429
mov dword [esp + 0x30], 1
push ebp
call fcn.1011ac50
mov ebp, eax
mov dword [esp + 0x38], ebp
test ebp, ebp
jne 0x101b2467
pop ebp
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c]
xor ecx, esp
call fcn.100b9f43
add esp, 0x70
ret
call fcn.1010b5b0
push str.KRB5KDF
push 0x193
push str.providersimplementationskdfskrb5kdf.c
call fcn.1010b6b0
push 0
push 0x8b
push 0x39
call fcn.1010b760
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6c]
xor ecx, esp
call fcn.100b9f43
add esp, 0x70
ret
push esi
push dword [esp + 0x2c]
push dword [esp + 0x34]
push edi
push ebp
call fcn.101b2880
mov esi, eax
add esp, 0x14
test esi, esi
je 0x101b2844
push ebp
call fcn.10107390
mov ebx, dword [esp + 0x9c]
mov esi, eax
add esp, 4
mov dword [esp + 0x18], esi
cmp ebx, esi
jbe 0x101b24cf
call fcn.1010b5b0
push str.KRB5KDF
push 0x1a6
push str.providersimplementationskdfskrb5kdf.c
call fcn.1010b6b0
push 0
push 0x9d
push 0x39
call fcn.1010b760
add esp, 0x18
xor esi, esi
jmp 0x101b2844
jne 0x101b24e9
mov eax, dword [esp + 0x10]
push ebx
push eax
lea eax, [esp + 0x44]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x101b25df
mov ecx, ebx
test ebx, ebx
je 0x101b24fe
nop
mov eax, esi
xor edx, edx
div ecx
mov esi, ecx
mov ecx, edx
test edx, edx
jne 0x101b24f0
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x3c]
push edi
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, edi
xor edx, edx
imul eax, ebx
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x1c], ecx
div esi
mov esi, eax
sub esi, 1
mov dword [esp + 0x14], esi
js 0x101b25bd
mov ebp, edi
xor edx, edx
lea edi, [esp + 0x3c]
mov eax, esi
div ebp
mov eax, esi
mov ecx, edx
xor edx, edx
div ebx
add edi, ecx
mov ecx, 8
imul edx, eax, 0xd
mov eax, edx
and edx, 7
shr eax, 3
sub esi, eax
mov dword [esp + 0x24], edx
xor edx, edx
sub ecx, dword [esp + 0x24]
lea eax, [esi - 1]
div ebx
mov eax, dword [esp + 0x10]
movzx ebx, byte [edx + eax]
mov eax, esi
xor edx, edx
mov esi, dword [esp + 0x14]
div dword [esp + 0x98]
mov eax, dword [esp + 0x10]
shl ebx, cl
mov cl, byte [esp + 0x24]
movzx eax, byte [edx + eax]
shr eax, cl
movzx ecx, byte [edi]
or ebx, eax
movzx eax, bl
add eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x98]
add ecx, eax
mov byte [edi], cl
shr ecx, 8
sub esi, 1
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], esi
jns 0x101b2532
mov ebp, dword [esp + 0x38]
mov esi, dword [esp + 0x18]
lea edx, [esi - 1]
test edx, edx
js 0x101b25df
test ecx, ecx
je 0x101b25df
movzx eax, byte [esp + edx + 0x3c]
add ecx, eax
mov byte [esp + edx + 0x3c], cl
shr ecx, 8
sub edx, 1
jns 0x101b25c8
xor ebx, ebx
lea ecx, [esp + 0x3c]
lea edi, [esp + 0x5c]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0xa0], ebx
jbe 0x101b2749
nop word [eax + eax]
push esi
push ecx
lea eax, [esp + 0x18]
push eax
push edi
push ebp
call fcn.1011bc80
mov esi, eax
add esp, 0x14
test esi, esi
je 0x101b2844
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push edi
push ebp
call fcn.1011ba30
mov esi, eax
add esp, 0xc
test esi, esi
je 0x101b2844
cmp dword [esp + 0x10], 0
jne 0x101b271b
mov esi, dword [esp + 0xa0]
mov eax, dword [esp + 0x20]
sub esi, ebx
cmp dword [esp + 0x1c], esi
cmovbe esi, dword [esp + 0x1c]
add eax, ebx
push esi
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0xac]
add ebx, esi
add esp, 0xc
cmp eax, ebx
jbe 0x101b270a
push ebp
call fcn.1011acf0
mov esi, eax
add esp, 4
test esi, esi
je 0x101b2844
push 0
push dword [esp + 0x2c]
push dword [esp + 0x34]
push dword [esp + 0x3c]
push ebp
call fcn.1011bc50
mov esi, eax
add esp, 0x14
test esi, esi
je 0x101b2844
push ebp
call fcn.101074e0
mov ecx, dword [esp + 0x94]
add esp, 4
cmp ecx, eax
je 0x101b26d5
push ecx
push ebp
call fcn.1011add0
add esp, 8
test eax, eax
jle 0x101b24c8
push 0
push ebp
call fcn.1011af80
add esp, 8
mov esi, eax
test esi, esi
je 0x101b2844
lea eax, [esp + 0x3c]
mov ecx, edi
cmp edi, eax
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xa0]
jne 0x101b2704
add edi, 0x20
jmp 0x101b270e
lea edi, [esp + 0x3c]
jmp 0x101b270e
mov ecx, dword [esp + 0x14]
cmp ebx, eax
jae 0x101b2749
mov esi, dword [esp + 0x18]
jmp 0x101b2600
call fcn.1010b5b0
push str.KRB5KDF
push 0x1bb
push str.providersimplementationskdfskrb5kdf.c
call fcn.1010b6b0
push 0
push 0x6b
push 0x39
call fcn.1010b760
add esp, 0x18
xor esi, esi
jmp 0x101b2844
push dword [esp + 0x30]
call fcn.10107920
add esp, 4
cmp eax, 0x2c
jne 0x101b283f
cmp dword [esp + 0x34], 0
jne 0x101b283f
lea ebx, [eax - 0x2a]
mov eax, dword [esp + 0x20]
lea ebp, [eax + 0xe]
lea edi, [eax + 0x17]
push 7
lea esi, [edi - 7]
push ebp
push esi
call sub.VCRUNTIME140.dll_memmove
mov dl, byte [esi]
and dl, 1
add dl, dl
mov byte [edi], dl
mov cl, byte [edi - 5]
movzx eax, byte [edi - 6]
and cl, 1
and al, 1
add cl, cl
or cl, al
shl cl, 2
or cl, dl
mov byte [edi], cl
mov al, byte [edi - 4]
and al, 1
shl al, 4
or al, cl
mov byte [edi], al
mov dl, byte [edi - 3]
and dl, 1
shl dl, 5
or dl, al
mov byte [edi], dl
mov cl, byte [edi - 2]
and cl, 1
shl cl, 6
or cl, dl
mov byte [edi], cl
movzx eax, byte [edi - 1]
shl al, 7
or al, cl
push esi
mov byte [edi], al
call fcn.101d6ef0
add esp, 0x10
lea edi, [edi - 8]
sub ebp, 7
sub ebx, 1
jns 0x101b2776
mov ebx, dword [esp + 0x20]
push 8
lea esi, [ebx + 8]
push esi
push ebx
call fcn.10001390
mov ebp, dword [esp + 0x44]
add esp, 0xc
test eax, eax
je 0x101b2815
push 8
lea eax, [ebx + 0x10]
push eax
push esi
call fcn.10001390
add esp, 0xc
test eax, eax
jne 0x101b283f
xor esi, esi
call fcn.1010b5b0
push str.KRB5KDF
push 0x1dd
push str.providersimplementationskdfskrb5kdf.c
call fcn.1010b6b0
push esi
push 0x79
push 0x39
call fcn.1010b760
add esp, 0x18
jmp 0x101b2844
mov esi, 1
push ebp
call fcn.1011abf0
lea eax, [esp + 0x40]
push 0x40
push eax
call fcn.10001320
mov ecx, dword [esp + 0x88]
add esp, 0xc
mov eax, esi
pop ebp
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100b9f43
add esp, 0x70
ret