Function at 0x478f80
Capabilities:
Check os version
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d8
mov eax, dword [0x5b0008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0x3a8], edx
push 0x100
xor edi, edi
mov dword [ebp - 0x3a4], ecx
xor esi, esi
mov dword [ebp - 0x3b8], 0
push eax
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3ac], edi
mov dword [ebp - 0x3b0], esi
call fcn.0051f3ce
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
push str.netapi32.dll
call ebx
test eax, eax
jne 0x47901c
push str.radmin32.dll
call ebx
test eax, eax
je 0x479dc4
mov ebx, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
call ebx
push 0x90
lea eax, [ebp - 0x39c]
push 0
push eax
call fcn.0051b450
add esp, 0xc
mov dword [ebp - 0x3a0], 0x94
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x479dc4
cmp dword [ebp - 0x390], 2
jne 0x47908b
mov eax, dword [ebp - 0x39c]
cmp eax, 4
jne 0x47907a
mov dword [ebp - 0x3ac], 1
jmp 0x47908b
cmp eax, 5
mov ecx, 1
cmovae esi, ecx
mov dword [ebp - 0x3b0], esi
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4790d8
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.0051a9e0
add esp, 8
test eax, eax
je 0x479dc4
push str._authadmin.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051f428
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3c8], eax
test eax, eax
je 0x479103
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b8], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479150
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.0051a9e0
add esp, 8
test eax, eax
je 0x479dc4
push str.workgrpdomnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051f428
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3cc], eax
test eax, eax
je 0x479175
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b4], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4791c2
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.0051a9e0
add esp, 8
test eax, eax
je 0x479dc4
push str.ldapauth.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051f428
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d0], eax
test eax, eax
je 0x4791e7
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3bc], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479234
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.0051a9e0
add esp, 8
test eax, eax
je 0x479dc4
push str.ldapauthnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051f428
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d4], eax
test eax, eax
je 0x479259
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c0], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4792a6
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.0051a9e0
add esp, 8
test eax, eax
je 0x479dc4
push str.ldapauth9x.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0051f428
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d8], eax
test eax, eax
je 0x4792cb
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c4], eax
mov ecx, dword [0x5be08c]
mov edx, 0x569fe8
add ecx, 0xe69
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x479300
test al, al
je 0x4792fc
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x479300
add ecx, 2
add edx, 2
test al, al
jne 0x4792e0
xor eax, eax
jmp 0x479305
sbb eax, eax
or eax, 1
mov esi, dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jne 0x4793f7
mov eax, dword [0x5be08c]
mov ecx, 0x569fe8
add eax, 0xeff
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479342
test dl, dl
je 0x47933e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479342
add eax, 2
add ecx, 2
test dl, dl
jne 0x479322
xor eax, eax
jmp 0x479347
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4793f7
mov eax, dword [0x5be08c]
mov ecx, 0x569fe8
add eax, 0xf95
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479380
test dl, dl
je 0x47937c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479380
add eax, 2
add ecx, 2
test dl, dl
jne 0x479360
xor eax, eax
jmp 0x479385
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4793f7
cmp dword [ebp - 0x3ac], edi
jne 0x479399
cmp dword [ebp - 0x3b0], edi
je 0x4793f7
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x4793e3
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
jmp 0x4793f7
push 0x5bbc98
mov edx, str.authadmin.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
mov eax, dword [0x5be08c]
mov ecx, 0x569fe8
add eax, 0xe69
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479426
test dl, dl
je 0x479422
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479426
add eax, 2
add ecx, 2
test dl, dl
jne 0x479406
xor eax, eax
jmp 0x47942b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4795fc
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x47947d
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
jmp 0x479491
push 0x5bbc98
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
call fcn.00478f00
test al, al
je 0x479504
cmp dword [ebp - 0x3b0], 0
je 0x4794fb
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x4794b8
cmp eax, 3
jne 0x4794fb
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x479630
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
call fcn.00478f00
test al, al
je 0x479580
cmp dword [ebp - 0x3ac], 0
je 0x479577
call fcn.00478f20
test al, al
je 0x479577
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x479534
cmp eax, 3
jne 0x479577
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x479649
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
call fcn.00478f00
test al, al
je 0x4795fc
cmp dword [ebp - 0x3ac], 0
jne 0x4795f3
cmp dword [ebp - 0x3b0], 0
jne 0x4795f3
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x4795b0
cmp eax, 3
jne 0x4795f3
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x479662
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
mov eax, dword [0x5be08c]
mov ecx, 0x569fe8
add eax, 0xeff
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479678
test dl, dl
je 0x47962c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479678
add eax, 2
add ecx, 2
test dl, dl
jne 0x479610
xor eax, eax
jmp 0x47967d
push 0x5bbc98
mov edx, str.ldapauth.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x479504
push 0x5bbc98
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x479580
push 0x5bbc98
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x4795fc
sbb eax, eax
or eax, 1
test eax, eax
je 0x4799d3
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x4796cf
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
jmp 0x4796e3
push 0x5bbc98
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x4796f5
cmp dword [ebp - 0x3b0], 0
je 0x479734
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x47973f
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
jmp 0x479753
push 0x5bbc98
mov edx, str.authadmin.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
call fcn.00478f00
test al, al
je 0x4797c6
cmp dword [ebp - 0x3b0], 0
je 0x4797bd
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x47977a
cmp eax, 3
jne 0x4797bd
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x47998d
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
call fcn.00478f00
test al, al
je 0x479842
cmp dword [ebp - 0x3ac], 0
je 0x479839
call fcn.00478f20
test al, al
je 0x479839
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x4797f6
cmp eax, 3
jne 0x479839
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x4799a6
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4798c2
call fcn.00478f00
test al, al
je 0x4799d3
cmp dword [ebp - 0x3ac], 0
jne 0x4798b9
cmp dword [ebp - 0x3b0], 0
jne 0x4798b9
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x479876
cmp eax, 3
jne 0x4798b9
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x4799bf
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x4799d3
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479904
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.0051a9e0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051f428
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x479939
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x479946
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x479953
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x479960
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x47996d
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x47997a
push eax
call ebx
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00519459
mov esp, ebp
pop ebp
ret
push 0x5bbc98
mov edx, str.ldapauth.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x4797c6
push 0x5bbc98
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x479842
push 0x5bbc98
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
mov eax, dword [0x5be08c]
mov ecx, 0x569fe8
add eax, 0xf95
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x479a02
test dl, dl
je 0x4799fe
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x479a02
add eax, 2
add ecx, 2
test dl, dl
jne 0x4799e2
xor eax, eax
jmp 0x479a07
sbb eax, eax
or eax, 1
test eax, eax
je 0x479d60
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x479a59
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c4c
jmp 0x479a6d
push 0x5bbc98
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x479a7f
cmp dword [ebp - 0x3b0], 0
je 0x479abe
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x479ac9
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c4c
jmp 0x479add
push 0x5bbc98
mov edx, str.authadmin.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
call fcn.00478f00
test al, al
je 0x479b50
cmp dword [ebp - 0x3b0], 0
je 0x479b47
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479b04
cmp eax, 3
jne 0x479b47
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x479d1a
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c4c
call fcn.00478f00
test al, al
je 0x479bcc
cmp dword [ebp - 0x3ac], 0
je 0x479bc3
call fcn.00478f20
test al, al
je 0x479bc3
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479b80
cmp eax, 3
jne 0x479bc3
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x479d33
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x479c4c
call fcn.00478f00
test al, al
je 0x479d60
cmp dword [ebp - 0x3ac], 0
jne 0x479c43
cmp dword [ebp - 0x3b0], 0
jne 0x479c43
mov eax, dword [0x5be08c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x479c00
cmp eax, 3
jne 0x479c43
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x479d4c
call esi
mov eax, dword [0x5be08c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x479d60
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479c8e
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.0051a9e0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051f428
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x479cc3
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x479cd0
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x479cdd
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x479cea
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x479cf7
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x479d04
push eax
call ebx
pop edi
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00519459
mov esp, ebp
pop ebp
ret
push 0x5bbc98
mov edx, str.ldapauth.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x479b50
push 0x5bbc98
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
jmp 0x479bcc
push 0x5bbc98
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425040
add esp, 8
xor edi, edi
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x479da2
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.0051a9e0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0051f428
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x479939
push str.LOGFAILEDUSER
jmp 0x47991d
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00519459
mov esp, ebp
pop ebp
ret