Function at 0x4451a7
Capabilities:
Link many functions at runtime
Query or enumerate registry value

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
push 8
push 1
call fcn.0040b3b0
push 0x54
push 3
mov ebp, eax
call fcn.0040b3b0
add esp, 0x10
mov dword [ebp], eax
lea eax, [esp + 0x14]
push eax
push str.SOFTWAREMITKerberos
xor ebx, ebx
push 0x80000002
mov dword [ebp + 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jne 0x4452f5
lea eax, [esp + 0x18]
push eax
push ebx
lea eax, [esp + 0x18]
push eax
push ebx
push str.InstallDir
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x44526c
cmp dword [esp + 0x10], 1
jne 0x44526c
mov eax, dword [esp + 0x18]
add eax, 0x14
push 1
push eax
call fcn.0040b3b0
pop ecx
pop ecx
mov edi, eax
lea eax, [esp + 0x18]
push eax
push edi
lea eax, [esp + 0x18]
push eax
push ebx
push str.InstallDir
push dword [esp + 0x28]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x445265
cmp dword [esp + 0x10], 1
jne 0x445265
push str._bingssapi32.dll
push edi
call fcn.0044df00
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
push edi
call fcn.0040b470
pop ecx
push dword [esp + 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x4452f5
mov eax, dword [ebp + 4]
mov edi, eax
imul edi, edi, 0x54
add edi, dword [ebp]
inc eax
mov dword [ebp + 4], eax
and dword [edi], 0
push str.gss_delete_sec_context
push ebx
mov dword [edi + 4], str.Using_GSSAPI_from_GSSAPI32.DLL
mov dword [edi + 0x50], ebx
call esi
push str.gss_display_status
push ebx
mov dword [edi + 0x30], eax
call esi
push str.gss_get_mic
push ebx
mov dword [edi + 0x34], eax
call esi
push str.gss_import_name
push ebx
mov dword [edi + 0x38], eax
call esi
push str.gss_init_sec_context
push ebx
mov dword [edi + 0x3c], eax
call esi
push str.gss_release_buffer
push ebx
mov dword [edi + 0x40], eax
call esi
push str.gss_release_cred
push ebx
mov dword [edi + 0x44], eax
call esi
push str.gss_release_name
push ebx
mov dword [edi + 0x48], eax
call esi
push edi
mov dword [edi + 0x4c], eax
call fcn.00426c71
pop ecx
push str.secur32.dll
call fcn.004464b2
mov edi, eax
test edi, edi
pop ecx
je 0x44538b
mov eax, dword [ebp + 4]
mov ebx, eax
imul ebx, ebx, 0x54
add ebx, dword [ebp]
inc eax
mov dword [ebp + 4], eax
push str.AcquireCredentialsHandleA
push edi
mov dword [ebx], 1
mov dword [ebx + 4], str.Using_SSPI_from_SECUR32.DLL
mov dword [ebx + 0x50], edi
call esi
push str.InitializeSecurityContextA
push edi
mov dword [0x47617c], eax
call esi
push str.FreeContextBuffer
push edi
mov dword [0x476170], eax
call esi
push str.FreeCredentialsHandle
push edi
mov dword [0x47616c], eax
call esi
push str.DeleteSecurityContext
push edi
mov dword [0x476178], eax
call esi
push str.QueryContextAttributesA
push edi
mov dword [0x476174], eax
call esi
push str.MakeSignature
push edi
mov dword [0x476180], eax
call esi
mov dword [0x476184], eax
mov eax, ebx
call fcn.00445160
push 0x28
push dword [esp + 0x24]
call fcn.0040238d
mov eax, dword [eax]
cmp byte [eax], 0
pop ecx
pop ecx
mov dword [esp + 0x18], eax
je 0x445442
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x445442
mov eax, dword [ebp + 4]
push dword [esp + 0x18]
mov edi, eax
imul edi, edi, 0x54
add edi, dword [ebp]
inc eax
mov dword [ebp + 4], eax
push str.Using_GSSAPI_from_user_specified_library__s
mov dword [edi], 2
call fcn.0040b852
pop ecx
pop ecx
push str.gss_delete_sec_context
push ebx
mov dword [edi + 4], eax
mov dword [edi + 0x50], ebx
call esi
push str.gss_display_status
push ebx
mov dword [edi + 0x30], eax
call esi
push str.gss_get_mic
push ebx
mov dword [edi + 0x34], eax
call esi
push str.gss_import_name
push ebx
mov dword [edi + 0x38], eax
call esi
push str.gss_init_sec_context
push ebx
mov dword [edi + 0x3c], eax
call esi
push str.gss_release_buffer
push ebx
mov dword [edi + 0x40], eax
call esi
push str.gss_release_cred
push ebx
mov dword [edi + 0x44], eax
call esi
push str.gss_release_name
push ebx
mov dword [edi + 0x48], eax
call esi
push edi
mov dword [edi + 0x4c], eax
call fcn.00426c71
pop ecx
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
add esp, 0xc
ret