Function at 0x449b6a
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
push 8
push 1
call fcn.0040bca9
push 0x54
push 3
mov ebp, eax
call fcn.0040bca9
add esp, 0x10
mov dword [ebp], eax
lea eax, [esp + 0x14]
push eax
push str.SOFTWAREMITKerberos
xor ebx, ebx
push 0x80000002
mov dword [ebp + 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jne 0x449cb8
lea eax, [esp + 0x18]
push eax
push ebx
lea eax, [esp + 0x18]
push eax
push ebx
push str.InstallDir
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x449c2f
cmp dword [esp + 0x10], 1
jne 0x449c2f
mov eax, dword [esp + 0x18]
add eax, 0x14
push 1
push eax
call fcn.0040bca9
pop ecx
pop ecx
mov edi, eax
lea eax, [esp + 0x18]
push eax
push edi
lea eax, [esp + 0x18]
push eax
push ebx
push str.InstallDir
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x449c28
cmp dword [esp + 0x10], 1
jne 0x449c28
push str._bingssapi32.dll
push edi
call fcn.00453c80
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
push edi
call fcn.0040bd73
pop ecx
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x449cb8
mov eax, dword [ebp + 4]
mov edi, eax
imul edi, edi, 0x54
add edi, dword [ebp]
inc eax
mov dword [ebp + 4], eax
and dword [edi], 0
push str.gss_delete_sec_context
push ebx
mov dword [edi + 4], str.Using_GSSAPI_from_GSSAPI32.DLL
mov dword [edi + 0x50], ebx
call esi
push str.gss_display_status
push ebx
mov dword [edi + 0x30], eax
call esi
push str.gss_get_mic
push ebx
mov dword [edi + 0x34], eax
call esi
push str.gss_import_name
push ebx
mov dword [edi + 0x38], eax
call esi
push str.gss_init_sec_context
push ebx
mov dword [edi + 0x3c], eax
call esi
push str.gss_release_buffer
push ebx
mov dword [edi + 0x40], eax
call esi
push str.gss_release_cred
push ebx
mov dword [edi + 0x44], eax
call esi
push str.gss_release_name
push ebx
mov dword [edi + 0x48], eax
call esi
push edi
mov dword [edi + 0x4c], eax
call fcn.00428fc0
pop ecx
push str.secur32.dll
call fcn.0044b234
mov edi, eax
test edi, edi
pop ecx
je 0x449d4e
mov eax, dword [ebp + 4]
mov ebx, eax
imul ebx, ebx, 0x54
add ebx, dword [ebp]
inc eax
mov dword [ebp + 4], eax
push str.AcquireCredentialsHandleA
push edi
mov dword [ebx], 1
mov dword [ebx + 4], str.Using_SSPI_from_SECUR32.DLL
mov dword [ebx + 0x50], edi
call esi
push str.InitializeSecurityContextA
push edi
mov dword [0x47d1a4], eax
call esi
push str.FreeContextBuffer
push edi
mov dword [0x47d198], eax
call esi
push str.FreeCredentialsHandle
push edi
mov dword [0x47d194], eax
call esi
push str.DeleteSecurityContext
push edi
mov dword [0x47d1a0], eax
call esi
push str.QueryContextAttributesA
push edi
mov dword [0x47d19c], eax
call esi
push str.MakeSignature
push edi
mov dword [0x47d1a8], eax
call esi
mov dword [0x47d1ac], eax
mov eax, ebx
call fcn.00449b23
push 0x28
push dword [esp + 0x24]
call fcn.00402570
mov eax, dword [eax]
cmp byte [eax], 0
pop ecx
pop ecx
mov dword [esp + 0x18], eax
je 0x449e05
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x449e05
mov eax, dword [ebp + 4]
push dword [esp + 0x18]
mov edi, eax
imul edi, edi, 0x54
add edi, dword [ebp]
inc eax
mov dword [ebp + 4], eax
push str.Using_GSSAPI_from_user_specified_library__s
mov dword [edi], 2
call fcn.0040c314
pop ecx
pop ecx
push str.gss_delete_sec_context
push ebx
mov dword [edi + 4], eax
mov dword [edi + 0x50], ebx
call esi
push str.gss_display_status
push ebx
mov dword [edi + 0x30], eax
call esi
push str.gss_get_mic
push ebx
mov dword [edi + 0x34], eax
call esi
push str.gss_import_name
push ebx
mov dword [edi + 0x38], eax
call esi
push str.gss_init_sec_context
push ebx
mov dword [edi + 0x3c], eax
call esi
push str.gss_release_buffer
push ebx
mov dword [edi + 0x40], eax
call esi
push str.gss_release_cred
push ebx
mov dword [edi + 0x44], eax
call esi
push str.gss_release_name
push ebx
mov dword [edi + 0x48], eax
call esi
push edi
mov dword [edi + 0x4c], eax
call fcn.00428fc0
pop ecx
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0xc
ret