Function at 0x100b6c50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c4
mov eax, dword [0x101354c0]
xor eax, esp
mov dword [esp + 0x5c0], eax
mov eax, dword [esp + 0x5d0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x5d4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x5d8]
push ebx
mov ebx, dword [esp + 0x5e0]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x5e4]
push ebp
mov dword [esp + 0x44], eax
xor ebp, ebp
mov eax, dword [esp + 0x5ec]
push esi
mov esi, dword [esp + 0x5d4]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x44]
push edi
mov edi, dword [esp + 0x5dc]
push eax
mov eax, dword [0x101363e0]
push str.WDigest
mov dword [esp + 0x38], esi
mov dword [esp + 0x18], edi
mov eax, dword [eax + 0x44]
mov dword [esp + 0x2c], ebx
call eax
test eax, eax
je 0x100b6cf0
push str.SSPI:_couldnt_get_auth_info
push esi
call fcn.1008b080
add esp, 8
lea eax, [ebp + 0x5e]
jmp 0x100b7101
mov eax, dword [esp + 0x48]
push eax
mov esi, dword [eax + 8]
mov eax, dword [0x101363e0]
mov dword [esp + 0x2c], esi
mov eax, dword [eax + 0x40]
call eax
push esi
call dword [0x10135128]
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x100b70fc
mov ecx, dword [ebx + 0xc]
test edi, edi
je 0x100b6d2d
test ecx, ecx
je 0x100b6dcd
jmp 0x100b6d35
test ecx, ecx
jne 0x100b6dcd
lea esi, [ebx + 0x10]
mov eax, dword [esi]
cmp dword [esp + 0x18], ebp
je 0x100b6d4a
test eax, eax
je 0x100b6dcd
jmp 0x100b6d4e
test eax, eax
jne 0x100b6dcd
test edi, edi
je 0x100b6d85
test ecx, ecx
je 0x100b6d85
mov edx, edi
mov bl, byte [edx]
cmp bl, byte [ecx]
jne 0x100b6d78
test bl, bl
je 0x100b6d74
mov bl, byte [edx + 1]
cmp bl, byte [ecx + 1]
jne 0x100b6d78
add edx, 2
add ecx, 2
test bl, bl
jne 0x100b6d58
xor ecx, ecx
jmp 0x100b6d7d
sbb ecx, ecx
or ecx, 1
mov ebx, dword [esp + 0x24]
test ecx, ecx
jne 0x100b6dcd
mov ecx, dword [esp + 0x18]
mov edi, esi
mov dword [esp + 0x1c], edi
test ecx, ecx
je 0x100b6e0f
mov dword [esp + 0x1c], edi
test eax, eax
je 0x100b6e0f
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x100b6dc0
test dl, dl
je 0x100b6dbc
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x100b6dc0
add ecx, 2
add eax, 2
test dl, dl
jne 0x100b6da0
xor eax, eax
jmp 0x100b6dc5
sbb eax, eax
or eax, 1
mov dword [esp + 0x1c], edi
test eax, eax
je 0x100b6e0f
mov eax, dword [ebx + 8]
test eax, eax
je 0x100b6dee
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x24]
call eax
push dword [ebx + 8]
call dword [0x1013512c]
add esp, 4
mov dword [ebx + 8], ebp
push dword [ebx + 0xc]
call dword [0x1013512c]
push dword [ebx + 0x10]
lea edi, [ebx + 0x10]
mov dword [ebx + 0xc], ebp
mov dword [esp + 0x24], edi
call dword [0x1013512c]
add esp, 8
mov dword [edi], ebp
mov esi, dword [esp + 0x20]
cmp dword [ebx + 8], ebp
je 0x100b6f40
mov ecx, esi
mov dword [esp + 0x3c], ebp
lea eax, [esp + 0x94]
mov dword [esp + 0x40], 5
mov dword [esp + 0x44], eax
mov dword [esp + 0x98], 2
mov dword [esp + 0x9c], ebp
lea edx, [ecx + 1]
mov dword [esp + 0x94], ebp
mov dword [esp + 0xa4], 3
mov dword [esp + 0xa8], esi
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6e63
sub ecx, edx
push ecx
call fcn.1008d9c0
mov dword [esp + 0xa4], eax
add esp, 4
mov eax, dword [esp + 0x2c]
mov ecx, eax
mov dword [esp + 0xb0], 3
mov dword [esp + 0xb4], eax
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b6e97
sub ecx, edx
push ecx
call fcn.1008d9c0
push dword [esp + 0x2c]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0xc4], 3
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xd0], 9
mov dword [esp + 0xd4], eax
call fcn.1008d9c0
add esp, 8
mov dword [esp + 0xc4], eax
lea eax, [esp + 0x3c]
push 0
push eax
mov eax, dword [0x101363e0]
push 0
push dword [ebx + 8]
mov eax, dword [eax + 0x38]
call eax
test eax, eax
jne 0x100b6f12
mov ebp, dword [esp + 0xc4]
jmp 0x100b6f40
push eax
push str.digest_sspi:_MakeSignature_failed__error_0x_08lx
push dword [esp + 0x38]
call fcn.1008b150
mov eax, dword [0x101363e0]
add esp, 0xc
push dword [ebx + 8]
mov eax, dword [eax + 0x24]
call eax
push dword [ebx + 8]
call dword [0x1013512c]
add esp, 4
mov dword [ebx + 8], ebp
cmp dword [ebx + 8], 0
jne 0x100b73b4
push dword [ebx + 0xc]
call dword [0x1013512c]
push dword [edi]
mov dword [ebx + 0xc], 0
call dword [0x1013512c]
mov ebp, dword [esp + 0x18]
add esp, 8
mov dword [edi], 0
test ebp, ebp
je 0x100b70d8
cmp byte [ebp], 0
je 0x100b70d8
lea eax, [esp + 0x78]
push eax
push dword [esp + 0x1c]
push ebp
call fcn.100b79c0
add esp, 0xc
test eax, eax
jne 0x100b70ef
cmp dword [esp + 0x80], 0
mov eax, dword [ebx]
mov dword [esp + 0x10], eax
je 0x100b6fc0
cmp dword [esp + 0x84], 0
jne 0x100b70d2
nop dword [eax]
mov cl, byte [eax]
test cl, cl
je 0x100b6fe5
movzx eax, cl
push eax
call fcn.10090920
add esp, 4
test eax, eax
mov eax, dword [esp + 0x10]
je 0x100b6fe5
inc eax
mov dword [esp + 0x10], eax
mov cl, byte [eax]
test cl, cl
jne 0x100b6fc6
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x1d4]
push ecx
lea ecx, [esp + 0xd8]
push ecx
push eax
call fcn.100c2c90
add esp, 0x10
test al, al
je 0x100b70ce
lea eax, [esp + 0xd0]
push str.realm
push eax
call fcn.1008f840
add esp, 8
test eax, eax
je 0x100b7087
lea eax, [esp + 0x1d0]
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll__strdup
mov edi, eax
add esp, 4
test edi, edi
je 0x100b70ef
push edi
call dword [0x10135134]
mov esi, eax
add esp, 4
test esi, esi
je 0x100b70c3
push dword [esp + 0x80]
call dword [0x1013512c]
add esp, 4
mov dword [esp + 0x80], esi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x100b7068
sub esi, ecx
push esi
call fcn.1008d9c0
push edi
mov dword [esp + 0x8c], eax
call fcn.100cc3ad
add esp, 8
mov eax, dword [esp + 0x10]
mov cl, byte [eax]
test cl, cl
je 0x100b70b0
movzx eax, cl
push eax
call fcn.10090920
add esp, 4
test eax, eax
mov eax, dword [esp + 0x10]
je 0x100b70b0
inc eax
mov dword [esp + 0x10], eax
mov cl, byte [eax]
test cl, cl
jne 0x100b7091
cmp byte [eax], 0x2c
jne 0x100b6fc0
inc eax
mov dword [esp + 0x10], eax
jmp 0x100b6fc0
push edi
call fcn.100cc3ad
add esp, 4
jmp 0x100b70ef
mov esi, dword [esp + 0x20]
lea edi, [esp + 0x78]
jmp 0x100b70de
xor edi, edi
test ebp, ebp
je 0x100b711a
push ebp
call dword [0x10135134]
add esp, 4
mov dword [ebx + 0xc], eax
test eax, eax
jne 0x100b711a
push dword [esp + 0x14]
call dword [0x1013512c]
add esp, 4
mov eax, 0x1b
mov ecx, dword [esp + 0x5d0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100ca284
add esp, 0x5c4
ret
mov eax, dword [esp + 0x18]
test eax, eax
je 0x100b7155
push eax
call dword [0x10135134]
mov ecx, dword [esp + 0x20]
add esp, 4
mov dword [ecx], eax
test eax, eax
jne 0x100b7155
push dword [esp + 0x14]
call dword [0x1013512c]
push dword [ebx + 0xc]
call dword [0x1013512c]
add esp, 8
mov dword [ebx + 0xc], 0
jmp 0x100b70fc
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x101363e0]
push 0
push 0
push edi
mov eax, dword [eax + 0xc]
push 0
push 2
push str.WDigest
push 0
call eax
test eax, eax
je 0x100b719a
push edi
call fcn.100b7af0
push dword [esp + 0x18]
call dword [0x1013512c]
add esp, 8
mov eax, 0x43
jmp 0x100b7101
push dword [ebx + 4]
lea eax, [esp + 0x98]
mov dword [esp + 0x40], 0
mov dword [esp + 0x48], eax
mov eax, dword [ebx]
mov dword [esp + 0x44], 3
mov dword [esp + 0x9c], 2
mov dword [esp + 0xa0], eax
call fcn.1008d9c0
add esp, 4
mov dword [esp + 0x94], eax
mov dword [esp + 0xa4], 3
lea ecx, [esi + 1]
mov dword [esp + 0xa8], esi
mov al, byte [esi]
inc esi
test al, al
jne 0x100b71f0
sub esi, ecx
push esi
call fcn.1008d9c0
push dword [esp + 0x2c]
mov ebp, dword [esp + 0x1c]
mov dword [esp + 0xa8], eax
lea eax, [esp + 0x68]
mov dword [esp + 0xb8], 3
mov dword [esp + 0xbc], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 1
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], 2
mov dword [esp + 0x70], ebp
call fcn.1008d9c0
push dword [esp + 0x34]
mov dword [esp + 0x6c], eax
call sub.api_ms_win_crt_string_l1_1_0.dll__strdup
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x100b7292
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.100b7af0
push ebp
call dword [0x1013512c]
add esp, 8
jmp 0x100b70fc
push 8
push 1
call dword [0x10135138]
mov ebp, dword [esp + 0x2c]
add esp, 8
mov dword [ebp + 8], eax
test eax, eax
je 0x100b70fc
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0x5c]
push ecx
push eax
push 0
lea eax, [esp + 0x50]
push eax
push 0
push 0
push 0x1000000
push ebx
push 0
lea eax, [esp + 0x60]
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x18]
call eax
push ebx
mov esi, eax
call fcn.100cc3ad
add esp, 4
cmp esi, 0x90313
je 0x100b7384
cmp esi, 0x90314
je 0x100b7384
test esi, esi
je 0x100b7398
cmp esi, 0x90312
je 0x100b7398
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.100b7af0
push dword [esp + 0x18]
call dword [0x1013512c]
push dword [ebp + 8]
call dword [0x1013512c]
add esp, 0xc
mov dword [ebp + 8], 0
cmp esi, 0x80090300
je 0x100b70fc
push 0x100
lea eax, [esp + 0xd4]
push eax
push esi
call fcn.100754b0
push eax
push str.schannel:_InitializeSecurityContext_failed:__s
push dword [esp + 0x44]
call fcn.1008b150
add esp, 0x18
mov eax, 0x5e
jmp 0x100b7101
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x20]
call eax
mov ebp, dword [esp + 0x60]
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x101363e0]
mov eax, dword [eax + 0x10]
call eax
push edi
call fcn.100b7af0
add esp, 4
lea eax, [ebp + 1]
push eax
call dword [0x10135128]
mov esi, eax
add esp, 4
test esi, esi
je 0x100b70ef
mov ebx, dword [esp + 0x14]
push ebp
push ebx
push esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x58]
mov byte [esi + ebp], 0
push ebx
mov dword [eax], esi
mov eax, dword [esp + 0x60]
mov dword [eax], ebp
call dword [0x1013512c]
add esp, 0x10
xor eax, eax
jmp 0x100b7101