Function at 0x5bd1e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [0x7c3824]
xor ecx, ebp
mov dword [esp + 0xb0], ecx
mov ebx, dword [edx + 0xc]
mov eax, dword [ebx + eax*4 + 0x148]
mov dword [esp + 8], eax
mov dword [esp + 0x7c], 0
mov eax, dword [edx + 0x61c]
test eax, eax
mov edi, str.rcmd
cmovne edi, eax
push 0x2f
push edi
call fcn.005e2960
add esp, 8
test eax, eax
je 0x5bd24c
push edi
call dword [0x7c3888]
add esp, 4
test eax, eax
jne 0x5bd2b2
jmp 0x5bd61f
push edi
call fcn.005fef10
add esp, 4
mov esi, eax
mov eax, dword [0x7c387c]
mov dword [esp + 4], eax
push dword [ebx + 0x8c]
call fcn.005fef10
add esp, 4
add eax, esi
add eax, 2
push eax
call dword [esp + 8]
add esp, 4
test eax, eax
je 0x5bd61f
add esi, 2
mov ebx, dword [ebx + 0x8c]
push ebx
mov dword [esp + 8], eax
call fcn.005fef10
add esp, 4
add eax, esi
push ebx
push edi
push 0x65e6f3
push eax
mov esi, dword [esp + 0x14]
push esi
call fcn.005798c0
add esp, 0x14
mov eax, esi
mov dword [esp + 4], eax
mov dword [esp + 0x5c], 1
lea eax, [esp + 0x64]
mov dword [esp + 0x60], eax
mov dword [esp + 0x58], 0
mov dword [esp + 0x68], 2
mov dword [esp + 0x64], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x50], 1
lea eax, [esp + 0x70]
mov dword [esp + 0x54], eax
mov dword [esp + 0x4c], 0
mov dword [esp + 0x74], 2
mov dword [esp + 0x70], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x44], 3
lea eax, [esp + 0x8c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov eax, dword [0x7d1c7c]
sub esp, 0x24
lea ecx, [esp + 0x34]
mov dword [esp + 0x20], ecx
lea esi, [esp + 0x4c]
mov dword [esp + 0x1c], esi
movaps xmm0, xmmword [0x614370]
movups xmmword [esp + 8], xmm0
mov dword [esp + 0x18], 0
mov dword [esp + 4], str.Kerberos
mov dword [esp], 0
call dword [eax + 0xc]
mov ebx, dword [ebp + 0xc]
mov ecx, ebx
mov edx, eax
push str.AcquireCredentialsHandle
call fcn.005bdee0
add esp, 4
test eax, eax
je 0x5bd3c0
push str.Failed_to_acquire_credentials.
push ebx
call fcn.0051ed60
add esp, 8
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [0x7d1c7c]
push esi
call dword [eax + 0x10]
jmp 0x5bd7cc
push 0
push dword [esp + 0xc]
call fcn.005a1350
add esp, 8
xor esi, esi
push dword [esp + 4]
call fcn.0057a1d0
add esp, 4
test eax, eax
je 0x5bd61f
mov edi, eax
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x80]
push ecx
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push 0
lea ecx, [esp + 0x6c]
push ecx
push 0x10
push 0
push 0x116
push edi
push esi
lea ecx, [esp + 0x54]
push ecx
call dword [eax + 0x18]
mov esi, eax
push edi
call fcn.005fd8d5
add esp, 4
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x5bd449
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x64], 0
mov ecx, ebx
mov edx, esi
push str.InitializeSecurityContext
call fcn.005bdee0
add esp, 4
test eax, eax
jne 0x5bd653
mov eax, dword [esp + 0x70]
test eax, eax
je 0x5bd4f8
mov word [esp + 0x88], 0x101
movzx eax, ax
push eax
call dword [sym.imp.WSOCK32.dll_htons]
mov word [esp + 0x8a], ax
lea eax, [esp + 0x80]
push eax
push 4
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0051f090
add esp, 0x14
test eax, eax
jne 0x5bd773
cmp dword [esp + 0x80], 4
jne 0x5bd773
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x74]
push dword [esp + 0x80]
push dword [esp + 0x14]
push ebx
call fcn.0051f090
add esp, 0x14
test eax, eax
jne 0x5bd649
mov eax, dword [esp + 0x70]
cmp eax, dword [esp + 0x80]
jne 0x5bd649
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5bd512
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov dword [esp + 0x78], 0
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x5bd534
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x64], 0
cmp esi, 0x90312
jne 0x5bd693
lea eax, [esp + 0x84]
push eax
push 4
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0059e260
add esp, 0x14
test eax, eax
jne 0x5bd704
cmp dword [esp + 0x84], 4
jne 0x5bd704
movzx eax, byte [esp + 0x89]
cmp eax, 1
jne 0x5bd629
movzx eax, word [esp + 0x8a]
push eax
call dword [sym.imp.WSOCK32.dll_ntohs]
movzx edi, ax
mov dword [esp + 0x64], edi
push edi
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0x6c], eax
test eax, eax
je 0x5bd745
lea ecx, [esp + 0x84]
push ecx
push dword [esp + 0x68]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0059e260
add esp, 0x14
test eax, eax
jne 0x5bd5e9
lea esi, [esp + 0x20]
cmp dword [esp + 0x84], edi
je 0x5bd3d0
push str.Failed_to_receive_SSPI_authentication_token.
push ebx
call fcn.0051ed60
add esp, 8
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x5bd739
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
jmp 0x5bd739
mov esi, 0x1b
jmp 0x5bd7d1
cmp al, 0xff
jne 0x5bd714
movzx eax, byte [esp + 0x88]
push 0xff
push eax
push str.User_was_rejected_by_the_SOCKS5_server___u__u_.
jmp 0x5bd723
push str.Failed_to_send_SSPI_authentication_token.
jmp 0x5bd778
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x28]
push ecx
call dword [eax + 0x10]
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x20]
push ecx
call dword [eax + 0x24]
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x5bd68c
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
push str.Failed_to_initialise_security_context.
jmp 0x5bd6f6
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x1c]
push ecx
push 1
lea edi, [esp + 0x30]
push edi
call dword [eax + 8]
mov esi, eax
mov eax, dword [0x7d1c7c]
push edi
call dword [eax + 0x10]
mov ecx, ebx
mov edx, esi
push str.QueryCredentialAttributes
call fcn.005bdee0
add esp, 4
test eax, eax
je 0x5bd7e9
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x20]
push ecx
call dword [eax + 0x24]
mov eax, dword [0x7d1c7c]
push dword [esp + 0x1c]
call dword [eax + 0x40]
push str.Failed_to_determine_user_name.
push ebx
call fcn.0051ed60
add esp, 8
jmp 0x5bd7cc
push str.Failed_to_receive_SSPI_authentication_response.
push ebx
call fcn.0051ed60
add esp, 8
jmp 0x5bd72c
movzx ecx, byte [esp + 0x88]
push eax
push ecx
push str.Invalid_SSPI_authentication_response_type___u__u_.
push ebx
call fcn.0051ed60
add esp, 0x10
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x28]
push ecx
jmp 0x5bd7bc
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x28]
push ecx
call dword [eax + 0x10]
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x20]
push ecx
call dword [eax + 0x24]
mov esi, 0x1b
jmp 0x5bd7d1
push str.Failed_to_send_SSPI_authentication_request.
push ebx
call fcn.0051ed60
add esp, 8
push dword [esp + 4]
call dword [0x7c3880]
add esp, 4
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5bd7a0
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [esp + 0x6c]
test eax, eax
lea esi, [esp + 0x28]
je 0x5bd7b6
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [0x7d1c7c]
push esi
call dword [eax + 0x10]
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x20]
push ecx
call dword [eax + 0x24]
mov esi, 7
mov ecx, dword [esp + 0xb0]
xor ecx, ebp
call fcn.005db451
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push dword [esp + 0x1c]
push str.SOCKS5_server_authenticated_user__s_with_GSS_API.
push ebx
call fcn.0051ec50
add esp, 0xc
mov eax, dword [0x7d1c7c]
push dword [esp + 0x1c]
call dword [eax + 0x40]
mov eax, dword [esp + 0x7c]
test eax, 0x10000
mov ecx, 0x65c2a9
mov edx, 0x65c252
cmove edx, ecx
mov word [esp + 0x88], 0x201
test al, 0x10
cmovne edx, ecx
test eax, 0x10010
mov eax, 0x65fd43
cmovne eax, edx
push eax
push str.SOCKS5_server_supports_GSS_API__s_data_protection.
push ebx
call fcn.0051ec50
add esp, 0xc
mov ax, 1
cmp byte [ebx + 0x72d], 0
je 0x5bd950
movzx eax, ax
push eax
call dword [sym.imp.WSOCK32.dll_htons]
mov word [esp + 0x8a], ax
lea eax, [esp + 0x80]
push eax
push 4
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0051f090
add esp, 0x14
test eax, eax
jne 0x5bd98c
cmp dword [esp + 0x80], 4
jne 0x5bd98c
cmp byte [ebx + 0x72d], 0
je 0x5bda7d
mov byte [esp + 0x88], 0
lea eax, [esp + 0x80]
push eax
push 1
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0051f090
add esp, 0x14
test eax, eax
jne 0x5bdac9
cmp dword [esp + 0x80], 1
jne 0x5bdac9
lea eax, [esp + 0x84]
push eax
push 4
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0059e260
add esp, 0x14
test eax, eax
jne 0x5bdaf9
cmp dword [esp + 0x84], 4
jne 0x5bdaf9
movzx eax, byte [esp + 0x89]
cmp eax, 2
je 0x5bdb3e
cmp al, 0xff
jne 0x5bdc1f
movzx eax, byte [esp + 0x88]
push 0xff
push eax
push str.User_was_rejected_by_the_SOCKS5_server___u__u_.
jmp 0x5bdc2e
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0x30]
lea esi, [esp + 0x20]
push ecx
push 0
push esi
call dword [eax + 0x2c]
mov ecx, ebx
mov edx, eax
push str.QueryContextAttributes
call fcn.005bdee0
add esp, 4
test eax, eax
je 0x5bd996
mov eax, dword [0x7d1c7c]
push esi
call dword [eax + 0x24]
push str.Failed_to_query_security_context_attributes.
jmp 0x5bd6f6
push str.Failed_to_send_SSPI_encryption_request.
jmp 0x5bdad5
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], 2
push eax
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0x94], eax
test eax, eax
je 0x5bdb33
mov dword [esp + 0x98], 1
push 1
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0xa0], eax
test eax, eax
je 0x5bdb0c
mov byte [eax], 0
mov dword [esp + 0xa8], 9
mov eax, dword [esp + 0x38]
mov dword [esp + 0xa4], eax
push eax
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0xac], eax
mov ecx, dword [0x7d1c7c]
test eax, eax
je 0x5bdb1a
lea eax, [esp + 0x40]
push 0
push eax
push reloc.WSOCK32.dll_accept
push esi
call dword [ecx + 0x64]
mov ecx, ebx
mov edx, eax
push str.EncryptMessage
call fcn.005bdee0
add esp, 4
test eax, eax
je 0x5bdc3c
mov eax, dword [0x7d1c7c]
push dword [esp + 0x94]
call dword [eax + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xa0]
call dword [eax + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xac]
call dword [eax + 0x40]
jmp 0x5bd979
lea eax, [esp + 0x80]
push eax
push dword [esp + 0x74]
push dword [esp + 0x80]
push dword [esp + 0x14]
push ebx
call fcn.0051f090
add esp, 0x14
test eax, eax
jne 0x5bdad0
mov eax, dword [esp + 0x70]
cmp eax, dword [esp + 0x80]
jne 0x5bdad0
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5bd8ea
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
jmp 0x5bd8ea
push str.Failed_to_send_SSPI_encryption_type.
jmp 0x5bdafe
push str.Failed_to_send_SSPI_encryption_type.
push ebx
call fcn.0051ed60
add esp, 8
mov eax, dword [esp + 0x78]
test eax, eax
je 0x5bd7bf
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
jmp 0x5bd7bf
push str.Failed_to_receive_SSPI_encryption_response.
push ebx
call fcn.0051ed60
add esp, 8
jmp 0x5bd7bf
mov eax, dword [0x7d1c7c]
push dword [esp + 0x94]
jmp 0x5bdb30
push dword [esp + 0x94]
call dword [ecx + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xa0]
call dword [eax + 0x40]
mov eax, dword [0x7d1c7c]
push esi
jmp 0x5bd769
movzx eax, word [esp + 0x8a]
push eax
call dword [sym.imp.WSOCK32.dll_ntohs]
movzx esi, ax
mov dword [esp + 0x8c], esi
push esi
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0x94], eax
test eax, eax
je 0x5bd75f
lea ecx, [esp + 0x84]
push ecx
push dword [esp + 0x90]
push eax
push dword [esp + 0x14]
push ebx
call fcn.0059e260
add esp, 0x14
test eax, eax
jne 0x5bdd46
cmp dword [esp + 0x84], esi
jne 0x5bdd46
cmp byte [ebx + 0x72d], 0
je 0x5bdd88
mov eax, dword [esp + 0x8c]
cmp eax, 1
jne 0x5bde2b
mov eax, dword [esp + 0x94]
mov cl, byte [eax]
mov byte [esp + 0x88], cl
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
push 1
push dword [esp + 0xc]
call fcn.005a1350
add esp, 8
mov al, byte [esp + 0x88]
cmp al, 1
mov ecx, str._GSS_API_integrity
mov edx, str._GSS_API_confidentiality
cmove edx, ecx
test al, al
mov eax, str.out_GSS_API_data
cmovne eax, edx
push eax
push str.SOCKS5_access_with_s_protection_granted.
push dword [ebp + 0xc]
call fcn.0051ec50
add esp, 0xc
xor esi, esi
jmp 0x5bd7d1
movzx ecx, byte [esp + 0x88]
push eax
push ecx
push str.Invalid_SSPI_encryption_response_type___u__u_.
push ebx
call fcn.0051ed60
add esp, 0x10
jmp 0x5bd7bf
mov eax, dword [esp + 0x98]
add eax, dword [esp + 0x8c]
add eax, dword [esp + 0xa4]
mov dword [esp + 0x70], eax
push eax
call dword [0x7c387c]
add esp, 4
mov dword [esp + 0x78], eax
test eax, eax
je 0x5bdd59
push dword [esp + 0x8c]
push dword [esp + 0x98]
push eax
call fcn.005e2280
add esp, 0xc
mov eax, dword [esp + 0x78]
add eax, dword [esp + 0x8c]
push dword [esp + 0x98]
push dword [esp + 0xa4]
push eax
call fcn.005e2280
add esp, 0xc
mov eax, dword [esp + 0x78]
add eax, dword [esp + 0x8c]
add eax, dword [esp + 0x98]
push dword [esp + 0xa4]
push dword [esp + 0xb0]
push eax
call fcn.005e2280
add esp, 0xc
mov eax, dword [0x7d1c7c]
push dword [esp + 0x94]
call dword [eax + 0x40]
mov dword [esp + 0x94], 0
mov dword [esp + 0x8c], 0
mov eax, dword [0x7d1c7c]
push dword [esp + 0xa0]
call dword [eax + 0x40]
mov dword [esp + 0xa0], 0
mov dword [esp + 0x98], 0
mov eax, dword [0x7d1c7c]
push dword [esp + 0xac]
call dword [eax + 0x40]
mov dword [esp + 0xac], 0
mov dword [esp + 0xa4], 0
movzx eax, word [esp + 0x70]
jmp 0x5bd859
push str.Failed_to_receive_SSPI_encryption_type.
push ebx
call fcn.0051ed60
add esp, 8
jmp 0x5bde3c
mov eax, dword [0x7d1c7c]
push dword [esp + 0x94]
call dword [eax + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xa0]
call dword [eax + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xac]
jmp 0x5bdb30
mov dword [esp + 0x44], 2
mov dword [esp + 0x90], 0xa
mov dword [esp + 0x9c], 1
mov dword [esp + 0x98], 0
mov dword [esp + 0xa0], 0
mov eax, dword [0x7d1c7c]
lea ecx, [esp + 0xc]
lea edx, [esp + 0x40]
lea esi, [esp + 0x20]
push ecx
push 0
push edx
push esi
call dword [eax + 0x68]
mov ecx, dword [ebp + 0xc]
mov edx, eax
push str.DecryptMessage
call fcn.005bdee0
add esp, 4
test eax, eax
je 0x5bde50
mov eax, dword [esp + 0x94]
test eax, eax
je 0x5bde00
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x5bde15
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [0x7d1c7c]
push esi
call dword [eax + 0x24]
push str.Failed_to_query_security_context_attributes.
push dword [ebp + 0xc]
jmp 0x5bd6f7
push eax
push str.Invalid_SSPI_encryption_response_length___lu_.
push dword [ebp + 0xc]
call fcn.0051ed60
add esp, 0xc
mov eax, dword [0x7d1c7c]
push dword [esp + 0x94]
call dword [eax + 0x40]
jmp 0x5bd7bf
mov eax, dword [esp + 0x98]
cmp eax, 1
jne 0x5bde91
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0xa0]
mov cl, byte [ecx]
mov byte [esp + 0x88], cl
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [0x7d1c7c]
push dword [esp + 0xa0]
call dword [eax + 0x40]
jmp 0x5bdbd9
push eax
push str.Invalid_SSPI_encryption_response_length___lu_.
push dword [ebp + 0xc]
call fcn.0051ed60
add esp, 0xc
mov eax, dword [esp + 0x94]
test eax, eax
je 0x5bdeb7
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [esp + 0xa0]
test eax, eax
je 0x5bdecc
mov ecx, dword [0x7d1c7c]
push eax
call dword [ecx + 0x40]
mov eax, dword [0x7d1c7c]
push esi
jmp 0x5bd7c9