Function at 0x4792c0
Capabilities:
Check os version
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d8
mov eax, dword [0x5b0008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0x3a8], edx
push 0x100
xor edi, edi
mov dword [ebp - 0x3a4], ecx
xor esi, esi
mov dword [ebp - 0x3b8], 0
push eax
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3ac], edi
mov dword [ebp - 0x3b0], esi
call fcn.0051e70e
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
push str.netapi32.dll
call ebx
test eax, eax
jne 0x47935c
push str.radmin32.dll
call ebx
test eax, eax
je 0x47a104
mov ebx, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
call ebx
push 0x90
lea eax, [ebp - 0x39c]
push 0
push eax
call fcn.0051a780
add esp, 0xc
mov dword [ebp - 0x3a0], 0x94
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x47a104
cmp dword [ebp - 0x390], 2
jne 0x4793cb
mov eax, dword [ebp - 0x39c]
cmp eax, 4
jne 0x4793ba
mov dword [ebp - 0x3ac], 1
jmp 0x4793cb
cmp eax, 5
mov ecx, 1
cmovae esi, ecx
mov dword [ebp - 0x3b0], esi
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479418
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00519d20
add esp, 8
test eax, eax
je 0x47a104
push str._authadmin.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051e768
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3c8], eax
test eax, eax
je 0x479443
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b8], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479490
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00519d20
add esp, 8
test eax, eax
je 0x47a104
push str.workgrpdomnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051e768
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3cc], eax
test eax, eax
je 0x4794b5
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b4], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479502
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00519d20
add esp, 8
test eax, eax
je 0x47a104
push str.ldapauth.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051e768
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d0], eax
test eax, eax
je 0x479527
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3bc], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479574
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00519d20
add esp, 8
test eax, eax
je 0x47a104
push str.ldapauthnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051e768
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d4], eax
test eax, eax
je 0x479599
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c0], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4795e6
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00519d20
add esp, 8
test eax, eax
je 0x47a104
push str.ldapauth9x.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051e768
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d8], eax
test eax, eax
je 0x47960b
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c4], eax
mov ecx, dword [0x5bdff0]
mov edx, 0x569fa8
add ecx, 0xe69
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x479640
test al, al
je 0x47963c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x479640
add ecx, 2
add edx, 2
test al, al
jne 0x479620
xor eax, eax
jmp 0x479645
sbb eax, eax
or eax, 1
mov esi, dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jne 0x479737
mov eax, dword [0x5bdff0]
mov ecx, 0x569fa8
add eax, 0xeff
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479682
test dl, dl
je 0x47967e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479682
add eax, 2
add ecx, 2
test dl, dl
jne 0x479662
xor eax, eax
jmp 0x479687
sbb eax, eax
or eax, 1
test eax, eax
jne 0x479737
mov eax, dword [0x5bdff0]
mov ecx, 0x569fa8
add eax, 0xf95
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4796c0
test dl, dl
je 0x4796bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4796c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4796a0
xor eax, eax
jmp 0x4796c5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x479737
cmp dword [ebp - 0x3ac], edi
jne 0x4796d9
cmp dword [ebp - 0x3b0], edi
je 0x479737
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x479723
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
jmp 0x479737
push 0x5bbc10
mov edx, str.authadmin.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
mov eax, dword [0x5bdff0]
mov ecx, 0x569fa8
add eax, 0xe69
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479766
test dl, dl
je 0x479762
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479766
add eax, 2
add ecx, 2
test dl, dl
jne 0x479746
xor eax, eax
jmp 0x47976b
sbb eax, eax
or eax, 1
test eax, eax
je 0x47993c
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x4797bd
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
jmp 0x4797d1
push 0x5bbc10
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
call fcn.00479260
test al, al
je 0x479844
cmp dword [ebp - 0x3b0], 0
je 0x47983b
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x4797f8
cmp eax, 3
jne 0x47983b
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x479970
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
call fcn.00479260
test al, al
je 0x4798c0
cmp dword [ebp - 0x3ac], 0
je 0x4798b7
call fcn.00479280
test al, al
je 0x4798b7
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x479874
cmp eax, 3
jne 0x4798b7
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x479989
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
call fcn.00479260
test al, al
je 0x47993c
cmp dword [ebp - 0x3ac], 0
jne 0x479933
cmp dword [ebp - 0x3b0], 0
jne 0x479933
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x4798f0
cmp eax, 3
jne 0x479933
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x4799a2
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
mov eax, dword [0x5bdff0]
mov ecx, 0x569fa8
add eax, 0xeff
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4799b8
test dl, dl
je 0x47996c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4799b8
add eax, 2
add ecx, 2
test dl, dl
jne 0x479950
xor eax, eax
jmp 0x4799bd
push 0x5bbc10
mov edx, str.ldapauth.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x479844
push 0x5bbc10
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x4798c0
push 0x5bbc10
mov edx, str.ldapauth9x.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x47993c
sbb eax, eax
or eax, 1
test eax, eax
je 0x479d13
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x479a0f
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
jmp 0x479a23
push 0x5bbc10
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x479a35
cmp dword [ebp - 0x3b0], 0
je 0x479a74
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x479a7f
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
jmp 0x479a93
push 0x5bbc10
mov edx, str.authadmin.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
call fcn.00479260
test al, al
je 0x479b06
cmp dword [ebp - 0x3b0], 0
je 0x479afd
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x479aba
cmp eax, 3
jne 0x479afd
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x479ccd
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
call fcn.00479260
test al, al
je 0x479b82
cmp dword [ebp - 0x3ac], 0
je 0x479b79
call fcn.00479280
test al, al
je 0x479b79
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x479b36
cmp eax, 3
jne 0x479b79
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x479ce6
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c02
call fcn.00479260
test al, al
je 0x479d13
cmp dword [ebp - 0x3ac], 0
jne 0x479bf9
cmp dword [ebp - 0x3b0], 0
jne 0x479bf9
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x479bb6
cmp eax, 3
jne 0x479bf9
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x479cff
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x479d13
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479c44
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00519d20
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051e768
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x479c79
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x479c86
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x479c93
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x479ca0
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x479cad
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x479cba
push eax
call ebx
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00518799
mov esp, ebp
pop ebp
ret
push 0x5bbc10
mov edx, str.ldapauth.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x479b06
push 0x5bbc10
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x479b82
push 0x5bbc10
mov edx, str.ldapauth9x.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
mov eax, dword [0x5bdff0]
mov ecx, 0x569fa8
add eax, 0xf95
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479d42
test dl, dl
je 0x479d3e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479d42
add eax, 2
add ecx, 2
test dl, dl
jne 0x479d22
xor eax, eax
jmp 0x479d47
sbb eax, eax
or eax, 1
test eax, eax
je 0x47a0a0
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x479d99
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479f8c
jmp 0x479dad
push 0x5bbc10
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x479dbf
cmp dword [ebp - 0x3b0], 0
je 0x479dfe
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x479e09
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479f8c
jmp 0x479e1d
push 0x5bbc10
mov edx, str.authadmin.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
call fcn.00479260
test al, al
je 0x479e90
cmp dword [ebp - 0x3b0], 0
je 0x479e87
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479e44
cmp eax, 3
jne 0x479e87
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x47a05a
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479f8c
call fcn.00479260
test al, al
je 0x479f0c
cmp dword [ebp - 0x3ac], 0
je 0x479f03
call fcn.00479280
test al, al
je 0x479f03
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479ec0
cmp eax, 3
jne 0x479f03
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x47a073
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479f8c
call fcn.00479260
test al, al
je 0x47a0a0
cmp dword [ebp - 0x3ac], 0
jne 0x479f83
cmp dword [ebp - 0x3b0], 0
jne 0x479f83
mov eax, dword [0x5bdff0]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479f40
cmp eax, 3
jne 0x479f83
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x47a08c
call esi
mov eax, dword [0x5bdff0]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x47a0a0
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479fce
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00519d20
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051e768
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x47a003
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x47a010
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x47a01d
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x47a02a
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x47a037
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x47a044
push eax
call ebx
pop edi
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00518799
mov esp, ebp
pop ebp
ret
push 0x5bbc10
mov edx, str.ldapauth.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x479e90
push 0x5bbc10
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
jmp 0x479f0c
push 0x5bbc10
mov edx, str.ldapauth9x.dll_not_found
call fcn.00424f50
add esp, 8
xor edi, edi
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x47a0e2
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00519d20
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051e768
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x479c79
push str.LOGFAILEDUSER
jmp 0x479c5d
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00518799
mov esp, ebp
pop ebp
ret