Function at 0x14005c250
Capabilities:
Link many functions at runtime

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov r14, rcx
mov ecx, 1
mov edx, 0x10
xor r8d, r8d
call fcn.14003f680
mov r15, rax
mov rcx, qword [0x14012eb50]
test rcx, rcx
jne 0x14005c2a2
lea rcx, str.kernel32.dll
call fcn.140042b00
mov rcx, rax
mov qword [0x14012eb50], rax
test rax, rax
je 0x14005c70f
lea rdx, str.AddDllDirectory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14012eb58], rax
mov ecx, 3
mov edx, 0xc8
xor r8d, r8d
call fcn.14003f680
mov qword [r15], rax
mov dword [r15 + 8], 0
mov qword [rsp + 0x20], 0
lea r9, str.SOFTWAREMITKerberos
xor ecx, ecx
xor edx, edx
mov r8, 0xffffffff80000002
call fcn.140042ce0
test rax, rax
je 0x14005c539
mov rdi, rax
lea rdx, str.InstallDir
mov rcx, rax
call fcn.140042fd0
test rax, rax
je 0x14005c531
mov rsi, rax
lea rdx, str._bin
mov rcx, rax
xor r8d, r8d
call fcn.14003e7a0
mov r12, rax
cmp qword [0x14012eb58], 0
je 0x14005c357
xor ecx, ecx
mov rdx, r12
call fcn.14003eb00
mov rbx, rax
mov rcx, rax
call qword [0x14012eb58]
mov rcx, rbx
call fcn.14003f720
lea rdx, str.gssapi64.dll
mov rcx, r12
xor r8d, r8d
call fcn.14003e7a0
mov r13, rax
mov rcx, rax
xor edx, edx
mov r8d, 0xd00
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rbx, rax
mov rcx, qword [0x14012eba0]
test rcx, rcx
jne 0x14005c3a2
lea rcx, [0x14002c410]
call fcn.140040bc0
mov rcx, rax
mov qword [0x14012eba0], rax
mov rdx, rbx
xor r8d, r8d
call fcn.140041980
test rax, rax
je 0x14005c3bb
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [0x14012eba0]
test rcx, rcx
jne 0x14005c3dd
lea rcx, [0x14002c410]
call fcn.140040bc0
mov rcx, rax
mov qword [0x14012eba0], rax
mov rdx, rbx
call fcn.140040ca0
mov rcx, r13
call fcn.14003f720
mov rcx, r12
call fcn.14003f720
mov rcx, rsi
call fcn.14003f720
mov rcx, rdi
call sub.ADVAPI32.dll_RegCloseKey
test rbx, rbx
je 0x14005c539
mov rdi, qword [r15]
movsxd rax, dword [r15 + 8]
lea ecx, [rax + 1]
mov dword [r15 + 8], ecx
imul rsi, rax, 0xc8
lea r12, [rdi + rsi]
mov dword [rdi + rsi], 0
lea rax, str.Using_GSSAPI_from_GSSAPI64.DLL
mov qword [rdi + rsi + 8], rax
mov qword [rdi + rsi + 0xc0], rbx
lea rdx, str.gss_delete_sec_context
mov r13, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x68], rax
lea rdx, str.gss_display_status
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x70], rax
lea rdx, str.gss_get_mic
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x78], rax
lea rdx, str.gss_verify_mic
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x80], rax
lea rdx, str.gss_import_name
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x88], rax
lea rdx, str.gss_init_sec_context
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x90], rax
lea rdx, str.gss_release_buffer
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0x98], rax
lea rdx, str.gss_release_cred
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0xa0], rax
lea rdx, str.gss_release_name
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0xa8], rax
lea rdx, str.gss_acquire_cred
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0xb0], rax
lea rdx, str.gss_inquire_cred_by_mech
mov rcx, rbx
call r13
mov qword [rdi + rsi + 0xb8], rax
mov rcx, r12
call fcn.1400873b0
jmp 0x14005c539
mov rcx, rdi
call sub.ADVAPI32.dll_RegCloseKey
lea rcx, str.secur32.dll
call fcn.140042b00
test rax, rax
je 0x14005c6ac
mov rsi, rax
mov rdi, qword [r15]
movsxd rax, dword [r15 + 8]
lea ecx, [rax + 1]
mov dword [r15 + 8], ecx
imul rbx, rax, 0xc8
mov dword [rdi + rbx], 1
lea rax, str.Using_SSPI_from_SECUR32.DLL
mov qword [rdi + rbx + 8], rax
mov qword [rdi + rbx + 0xc0], rsi
lea rdx, str.AcquireCredentialsHandleA
mov r12, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rsi
call r12
mov qword [0x14012eb60], rax
lea rdx, str.InitializeSecurityContextA
mov rcx, rsi
call r12
mov qword [0x14012eb68], rax
lea rdx, str.FreeContextBuffer
mov rcx, rsi
call r12
mov qword [0x14012eb70], rax
lea rdx, str.FreeCredentialsHandle
mov rcx, rsi
call r12
mov qword [0x14012eb78], rax
lea rdx, str.DeleteSecurityContext
mov rcx, rsi
call r12
mov qword [0x14012eb80], rax
lea rdx, str.QueryContextAttributesA
mov rcx, rsi
call r12
mov qword [0x14012eb88], rax
lea rdx, str.MakeSignature
mov rcx, rsi
call r12
mov qword [0x14012eb90], rax
lea rdx, str.VerifySignature
mov rcx, rsi
call r12
mov qword [0x14012eb98], rax
lea rax, [0x14005c970]
mov qword [rdi + rbx + 0x10], rax
lea rax, [0x14005c980]
mov qword [rdi + rbx + 0x18], rax
lea rax, [0x14005c9c0]
mov qword [rdi + rbx + 0x20], rax
lea rax, [0x14005c9f0]
mov qword [rdi + rbx + 0x28], rax
lea rax, [0x14005cc70]
mov qword [rdi + rbx + 0x30], rax
lea rax, [0x14005cca0]
mov qword [rdi + rbx + 0x38], rax
lea rax, [0x14005cd50]
mov qword [rdi + rbx + 0x40], rax
lea rax, [0x14005cda0]
mov qword [rdi + rbx + 0x48], rax
lea rax, [0x14005ceb0]
mov qword [rdi + rbx + 0x50], rax
lea rax, [0x14005cf60]
mov qword [rdi + rbx + 0x58], rax
lea rax, [0x14005cf80]
mov qword [rdi + rbx + 0x60], rax
mov rcx, r14
mov edx, 0x35
call fcn.14003d920
mov r12, rax
mov rcx, rax
call fcn.1400543a0
test al, al
jne 0x14005c89c
mov rdi, qword [r12]
cmp qword [0x14012eb58], 0
je 0x14005c754
mov rcx, rdi
call fcn.1400d0180
mov esi, eax
nop word cs:[rax + rax]
nop
test esi, esi
jle 0x14005c754
movzx eax, word [rdi + rsi*2 - 2]
add rsi, 0xffffffffffffffff
cmp ax, 0x5c
je 0x14005c716
cmp ax, 0x3a
jne 0x14005c6f0
test esi, esi
jne 0x14005c719
jmp 0x14005c754
xor eax, eax
jmp 0x14005c2af
add esi, 1
lea ecx, [rsi + 1]
mov edx, 2
xor r8d, r8d
call fcn.14003f680
mov rbx, rax
mov esi, esi
lea r8, [rsi + rsi]
mov rcx, rax
mov rdx, rdi
call fcn.1400ba4a0
mov word [rbx + rsi*2], 0
mov rcx, rbx
call qword [0x14012eb58]
mov rcx, rbx
call fcn.14003f720
mov rcx, rdi
xor edx, edx
mov r8d, 0xd00
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rax, rax
je 0x14005c89c
mov rdi, rax
mov rbx, qword [r15]
movsxd rax, dword [r15 + 8]
lea ecx, [rax + 1]
mov dword [r15 + 8], ecx
imul rsi, rax, 0xc8
lea r14, [rbx + rsi]
mov dword [rbx + rsi], 2
mov rdx, qword [r12 + 8]
lea rcx, str.Using_GSSAPI_from_user_specified_library__s
call fcn.14003ea20
mov qword [rbx + rsi + 8], rax
mov qword [rbx + rsi + 0xc0], rdi
lea rdx, str.gss_delete_sec_context
mov r12, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x68], rax
lea rdx, str.gss_display_status
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x70], rax
lea rdx, str.gss_get_mic
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x78], rax
lea rdx, str.gss_verify_mic
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x80], rax
lea rdx, str.gss_import_name
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x88], rax
lea rdx, str.gss_init_sec_context
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x90], rax
lea rdx, str.gss_release_buffer
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0x98], rax
lea rdx, str.gss_release_cred
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0xa0], rax
lea rdx, str.gss_release_name
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0xa8], rax
lea rdx, str.gss_acquire_cred
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0xb0], rax
lea rdx, str.gss_inquire_cred_by_mech
mov rcx, rdi
call r12
mov qword [rbx + rsi + 0xb8], rax
mov rcx, r14
call fcn.1400873b0
mov rax, r15
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret