Function at 0x405b80
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x14c]
push ebx
sub esp, 0x174
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
mov dword [esp + 4], eax
mov dword [esp], str.NTLM
call dword [0x452088]
sub esp, 8
test eax, eax
jne 0x405e88
lea edx, [ebp - 0x140]
lea edi, [ebp - 0x138]
mov dword [esp + 0x18], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], str.NTLM
mov dword [esp], 0
call dword [0x452084]
sub esp, 0x24
mov ebx, eax
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5e5
mov eax, ebx
call fcn.00404950
mov dword [esp + 4], str.AcquireCredentialsHandle___failed__s_n
mov dword [esp + 8], eax
xor eax, eax
test ebx, ebx
sete al
mov dword [esp], eax
mov esi, dword fs:[0x18]
call fcn.004055c0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x118], 2
mov eax, dword [eax + 8]
mov dword [ebp - 0x11c], eax
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x11c]
sub esp, 0xc
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x144]
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x144], 0x100
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp], 2
call dword [0x452054]
sub esp, 0xc
movzx ebx, al
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5f1
mov eax, dword [esi + 0x34]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], str.GetUserNameExA_failed__lu_n
call fcn.004055c0
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x148]
mov dword [esp], edi
lea ecx, [ebp - 0x110]
mov dword [esp + 0x2c], edx
lea edx, [ebp - 0x130]
mov dword [esp + 0x28], eax
lea eax, [ebp - 0x128]
mov dword [esp + 8], ecx
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x800
mov dword [esp + 4], 0
call dword [0x45207c]
sub esp, 0x30
mov ebx, eax
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5f6
mov eax, ebx
call fcn.00404950
mov dword [esp + 4], str.InitializeSecurityContextA_failed__s_n
mov dword [esp + 8], eax
xor eax, eax
cmp ebx, 0x90312
sete al
mov dword [esp], eax
call fcn.004055c0
lea edx, [ebp - 0x130]
mov dword [esp], edx
call dword [0x45206c]
sub esp, 4
mov ebx, eax
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5f9
movzx eax, bl
mov dword [esp + 8], eax
xor eax, eax
test bl, bl
sete al
mov dword [esp + 4], str.DeleteSecurityContext_failed_with_error_0x_x_n
mov dword [esp], eax
call fcn.004055c0
mov dword [esp], edi
call dword [0x452070]
sub esp, 4
mov ebx, eax
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5fb
movzx eax, bl
mov dword [esp + 8], eax
xor eax, eax
test bl, bl
sete al
mov dword [esp + 4], str.FreeCredentialsHandle_failed_with_error_0x_x_n
mov dword [esp], eax
call fcn.004055c0
mov eax, dword [ebp - 0x14c]
mov dword [esp], eax
call dword [0x45208c]
mov eax, dword [ebp - 0x114]
sub esp, 4
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
call fcn.004162e0
mov dword [eax], 0x41b2cf
mov dword [eax + 4], 0x5df
mov dword [esp + 4], str.NTLM_package_not_installed__skipping_test_n
mov dword [esp], 0
call fcn.004055c0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret