	.file	"extr_kwindbg.c_kuhl_m_sekurlsa_krbtgt_keys.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC0:
	.string	"\n%s krbtgt: "
.LC1:
	.string	"%u credentials\n"
.LC2:
	.string	"\t * %s : "
.LC3:
	.string	"\n"
	.text
	.p2align 4
	.globl	kuhl_m_sekurlsa_krbtgt_keys
	.type	kuhl_m_sekurlsa_krbtgt_keys, @function
kuhl_m_sekurlsa_krbtgt_keys:
.LFB0:
	.cfi_startproc
	endbr64
	push	r15
	.cfi_def_cfa_offset 16
	.cfi_offset 15, -16
	push	r14
	.cfi_def_cfa_offset 24
	.cfi_offset 14, -24
	push	r13
	.cfi_def_cfa_offset 32
	.cfi_offset 13, -32
	push	r12
	.cfi_def_cfa_offset 40
	.cfi_offset 12, -40
	push	rbp
	.cfi_def_cfa_offset 48
	.cfi_offset 6, -48
	push	rbx
	.cfi_def_cfa_offset 56
	.cfi_offset 3, -56
	sub	rsp, 40
	.cfi_def_cfa_offset 96
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 24[rsp], rax
	xor	eax, eax
	test	rdi, rdi
	je	.L1
	mov	rbx, rdi
	lea	rdi, .LC0[rip]
	call	dprintf@PLT
	mov	rax, QWORD PTR KULL_M_WIN_BUILD_10_1607[rip]
	xor	ecx, ecx
	mov	edi, ebx
	cmp	QWORD PTR NtBuildNumber[rip], rax
	mov	rsi, rsp
	mov	edx, 12
	jge	.L4
	call	ReadMemory@PLT
	test	rax, rax
	jne	.L45
	.p2align 4,,10
	.p2align 3
.L1:
	mov	rax, QWORD PTR 24[rsp]
	xor	rax, QWORD PTR fs:40
	jne	.L46
	add	rsp, 40
	.cfi_remember_state
	.cfi_def_cfa_offset 56
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	ret
	.p2align 4,,10
	.p2align 3
.L4:
	.cfi_restore_state
	call	ReadMemory@PLT
	test	rax, rax
	je	.L1
	mov	eax, DWORD PTR [rsp]
	mov	edi, DWORD PTR LPTR[rip]
	sub	eax, 1
	cdqe
	lea	r12, 16[0+rax*4]
	mov	rsi, r12
	call	LocalAlloc@PLT
	mov	rbp, rax
	test	rax, rax
	je	.L1
	xor	ecx, ecx
	mov	rdx, r12
	mov	rsi, rax
	mov	edi, ebx
	call	ReadMemory@PLT
	test	rax, rax
	jne	.L11
.L12:
	mov	rdi, rbp
	call	LocalFree@PLT
	jmp	.L1
	.p2align 4,,10
	.p2align 3
.L45:
	mov	eax, DWORD PTR [rsp]
	mov	edi, DWORD PTR LPTR[rip]
	sub	eax, 1
	cdqe
	lea	r12, 16[0+rax*4]
	mov	rsi, r12
	call	LocalAlloc@PLT
	mov	rbp, rax
	test	rax, rax
	je	.L1
	xor	ecx, ecx
	mov	rdx, r12
	mov	rsi, rax
	mov	edi, ebx
	call	ReadMemory@PLT
	test	rax, rax
	je	.L12
	mov	esi, DWORD PTR 0[rbp]
	lea	rdi, .LC1[rip]
	xor	eax, eax
	call	dprintf@PLT
	mov	edx, DWORD PTR 0[rbp]
	test	edx, edx
	je	.L12
	xor	ebx, ebx
	lea	r15, .LC2[rip]
	jmp	.L10
	.p2align 4,,10
	.p2align 3
.L9:
	mov	rdi, r12
	call	LocalFree@PLT
.L8:
	lea	rdi, .LC3[rip]
	xor	eax, eax
	add	rbx, 1
	call	dprintf@PLT
	movsx	rax, DWORD PTR 0[rbp]
	cmp	rax, rbx
	jbe	.L12
.L10:
	mov	rax, QWORD PTR 8[rbp]
	lea	r13, [rbx+rbx*2]
	lea	r14, 0[0+r13*8]
	mov	edi, DWORD PTR 16[rax+r14]
	call	PtrToLong@PLT
	mov	edi, eax
	call	kuhl_m_kerberos_ticket_etype@PLT
	mov	rdi, r15
	mov	esi, eax
	xor	eax, eax
	call	dprintf@PLT
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	mov	edi, DWORD PTR LPTR[rip]
	mov	rsi, rax
	call	LocalAlloc@PLT
	mov	r12, rax
	test	rax, rax
	je	.L8
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	xor	ecx, ecx
	mov	rsi, r12
	mov	rdx, rax
	mov	rax, QWORD PTR 8[rbp]
	mov	rdi, QWORD PTR 8[rax+r14]
	call	ReadMemory@PLT
	test	rax, rax
	je	.L9
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	xor	edx, edx
	mov	rdi, r12
	mov	rsi, rax
	call	kull_m_string_dprintf_hex@PLT
	jmp	.L9
	.p2align 4,,10
	.p2align 3
.L11:
	mov	esi, DWORD PTR 0[rbp]
	lea	rdi, .LC1[rip]
	xor	eax, eax
	call	dprintf@PLT
	mov	eax, DWORD PTR 0[rbp]
	test	eax, eax
	je	.L12
	xor	ebx, ebx
	lea	r15, .LC2[rip]
	jmp	.L15
	.p2align 4,,10
	.p2align 3
.L14:
	mov	rdi, r12
	call	LocalFree@PLT
.L13:
	lea	rdi, .LC3[rip]
	xor	eax, eax
	add	rbx, 1
	call	dprintf@PLT
	movsx	rax, DWORD PTR 0[rbp]
	cmp	rax, rbx
	jbe	.L12
.L15:
	mov	rax, QWORD PTR 8[rbp]
	lea	r13, [rbx+rbx*2]
	lea	r14, 0[0+r13*8]
	mov	edi, DWORD PTR 16[rax+r14]
	call	PtrToLong@PLT
	mov	edi, eax
	call	kuhl_m_kerberos_ticket_etype@PLT
	mov	rdi, r15
	mov	esi, eax
	xor	eax, eax
	call	dprintf@PLT
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	mov	edi, DWORD PTR LPTR[rip]
	mov	rsi, rax
	call	LocalAlloc@PLT
	mov	r12, rax
	test	rax, rax
	je	.L13
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	xor	ecx, ecx
	mov	rsi, r12
	mov	rdx, rax
	mov	rax, QWORD PTR 8[rbp]
	mov	rdi, QWORD PTR 8[rax+r14]
	call	ReadMemory@PLT
	test	rax, rax
	je	.L14
	mov	rax, QWORD PTR 8[rbp]
	mov	edi, DWORD PTR [rax+r13*8]
	call	PtrToUlong@PLT
	xor	edx, edx
	mov	rdi, r12
	mov	rsi, rax
	call	kull_m_string_dprintf_hex@PLT
	jmp	.L14
.L46:
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	kuhl_m_sekurlsa_krbtgt_keys, .-kuhl_m_sekurlsa_krbtgt_keys
	.comm	NtBuildNumber,8,8
	.comm	LPTR,4,4
	.comm	KULL_M_WIN_BUILD_10_1607,8,8
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_kwindbg.c_kuhl_m_sekurlsa_krbtgt_keys.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"\012%s krbtgt: \000"
	.align	2
.LC1:
	.ascii	"%u credentials\012\000"
	.align	2
.LC2:
	.ascii	"\011 * %s : \000"
	.align	2
.LC3:
	.ascii	"\012\000"
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC4:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	kuhl_m_sekurlsa_krbtgt_keys
	.syntax unified
	.arm
	.fpu softvfp
	.type	kuhl_m_sekurlsa_krbtgt_keys, %function
kuhl_m_sekurlsa_krbtgt_keys:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	ldr	r3, .L53
	sub	sp, sp, #20
	subs	r4, r0, #0
	ldr	r3, [r3]
	str	r3, [sp, #12]
	mov	r3,#0
	beq	.L1
	ldr	r0, .L53+4
	bl	dprintf
	ldr	r2, .L53+8
	ldr	r3, .L53+12
	ldr	r2, [r2]
	ldr	r3, [r3]
	mov	r0, r4
	cmp	r2, r3
	mov	r2, #4
	mov	r3, #0
	add	r1, sp, r2
	bge	.L4
	bl	ReadMemory
	cmp	r0, #0
	bne	.L51
.L1:
	ldr	r3, .L53
	ldr	r2, [r3]
	ldr	r3, [sp, #12]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L52
	add	sp, sp, #20
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, pc}
.L4:
	bl	ReadMemory
	cmp	r0, #0
	beq	.L1
	ldr	r7, [sp, #4]
	ldr	r6, .L53+16
	add	r7, r7, #1
	lsl	r7, r7, #2
	mov	r1, r7
	ldr	r0, [r6]
	bl	LocalAlloc
	subs	r5, r0, #0
	beq	.L1
	mov	r2, r7
	mov	r0, r4
	mov	r3, #0
	mov	r1, r5
	bl	ReadMemory
	cmp	r0, #0
	bne	.L11
.L12:
	mov	r0, r5
	bl	LocalFree
	b	.L1
.L51:
	ldr	r7, [sp, #4]
	ldr	r6, .L53+16
	add	r7, r7, #1
	lsl	r7, r7, #2
	mov	r1, r7
	ldr	r0, [r6]
	bl	LocalAlloc
	subs	r5, r0, #0
	beq	.L1
	mov	r2, r7
	mov	r0, r4
	mov	r3, #0
	mov	r1, r5
	bl	ReadMemory
	cmp	r0, #0
	beq	.L12
	ldr	r1, [r5]
	ldr	r0, .L53+20
	bl	dprintf
	ldr	r3, [r5]
	cmp	r3, #0
	beq	.L12
	mov	r4, #0
	ldr	r9, .L53+24
	mov	r7, r4
	ldr	r8, .L53+28
	b	.L10
.L9:
	mov	r0, r10
	bl	LocalFree
.L8:
	mov	r0, r8
	bl	dprintf
	ldr	r3, [r5]
	add	r7, r7, #1
	cmp	r3, r7
	add	r4, r4, #12
	bls	.L12
.L10:
	ldr	r3, [r5, #4]
	add	r3, r3, r4
	ldr	r0, [r3, #8]
	bl	PtrToLong
	bl	kuhl_m_kerberos_ticket_etype
	mov	r1, r0
	mov	r0, r9
	bl	dprintf
	ldr	r3, [r5, #4]
	ldr	r10, [r6]
	ldr	r0, [r3, r4]
	bl	PtrToUlong
	mov	r1, r0
	mov	r0, r10
	bl	LocalAlloc
	subs	r10, r0, #0
	beq	.L8
	ldr	r3, [r5, #4]
	add	r2, r3, r4
	ldr	r0, [r3, r4]
	ldr	fp, [r2, #4]
	bl	PtrToUlong
	mov	r3, #0
	mov	r2, r0
	mov	r1, r10
	mov	r0, fp
	bl	ReadMemory
	cmp	r0, #0
	beq	.L9
	ldr	r3, [r5, #4]
	ldr	r0, [r3, r4]
	bl	PtrToUlong
	mov	r2, #0
	mov	r1, r0
	mov	r0, r10
	bl	kull_m_string_dprintf_hex
	b	.L9
.L11:
	ldr	r1, [r5]
	ldr	r0, .L53+20
	bl	dprintf
	ldr	r3, [r5]
	cmp	r3, #0
	beq	.L12
	mov	r4, #0
	ldr	r9, .L53+24
	mov	r7, r4
	ldr	r8, .L53+28
	b	.L15
.L14:
	mov	r0, r10
	bl	LocalFree
.L13:
	mov	r0, r8
	bl	dprintf
	ldr	r3, [r5]
	add	r7, r7, #1
	cmp	r3, r7
	add	r4, r4, #12
	bls	.L12
.L15:
	ldr	r3, [r5, #4]
	add	r3, r3, r4
	ldr	r0, [r3, #8]
	bl	PtrToLong
	bl	kuhl_m_kerberos_ticket_etype
	mov	r1, r0
	mov	r0, r9
	bl	dprintf
	ldr	r3, [r5, #4]
	ldr	r10, [r6]
	ldr	r0, [r3, r4]
	bl	PtrToUlong
	mov	r1, r0
	mov	r0, r10
	bl	LocalAlloc
	subs	r10, r0, #0
	beq	.L13
	ldr	r3, [r5, #4]
	add	r2, r3, r4
	ldr	r0, [r3, r4]
	ldr	fp, [r2, #4]
	bl	PtrToUlong
	mov	r3, #0
	mov	r2, r0
	mov	r1, r10
	mov	r0, fp
	bl	ReadMemory
	cmp	r0, #0
	beq	.L14
	ldr	r3, [r5, #4]
	ldr	r0, [r3, r4]
	bl	PtrToUlong
	mov	r2, #0
	mov	r1, r0
	mov	r0, r10
	bl	kull_m_string_dprintf_hex
	b	.L14
.L52:
	bl	__stack_chk_fail
.L54:
	.align	2
.L53:
	.word	.LC4
	.word	.LC0
	.word	NtBuildNumber
	.word	KULL_M_WIN_BUILD_10_1607
	.word	LPTR
	.word	.LC1
	.word	.LC2
	.word	.LC3
	.size	kuhl_m_sekurlsa_krbtgt_keys, .-kuhl_m_sekurlsa_krbtgt_keys
	.comm	NtBuildNumber,4,4
	.comm	LPTR,4,4
	.comm	KULL_M_WIN_BUILD_10_1607,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
