Function at 0x483820
Capabilities:
Check os version
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d8
mov eax, dword [0x5c3040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0x3a8], edx
push 0x100
xor edi, edi
mov dword [ebp - 0x3a4], ecx
xor esi, esi
mov dword [ebp - 0x3bc], 0
push eax
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3ac], edi
mov dword [ebp - 0x3b0], esi
call fcn.0052c1a3
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
push str.netapi32.dll
call ebx
test eax, eax
jne 0x4838bc
push str.radmin32.dll
call ebx
test eax, eax
je 0x484679
mov ebx, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
call ebx
push 0x90
lea eax, [ebp - 0x39c]
push 0
push eax
call fcn.00526a30
add esp, 0xc
mov dword [ebp - 0x3a0], 0x94
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x484679
mov eax, dword [ebp - 0x390]
mov edx, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x3b4], edx
cmp eax, 2
jne 0x48393e
xor edx, edx
cmp ecx, 4
cmove edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3ac], edx
mov edx, 1
cmp eax, 2
jne 0x48393e
cmp ecx, 5
cmovae esi, edx
mov dword [ebp - 0x3b0], esi
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x48398b
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00525fd0
add esp, 8
test eax, eax
je 0x484679
push str._authadmin.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0052c1fd
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3cc], eax
test eax, eax
je 0x4839b6
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3bc], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x483a03
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00525fd0
add esp, 8
test eax, eax
je 0x484679
push str.workgrpdomnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0052c1fd
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d0], eax
test eax, eax
je 0x483a28
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b8], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x483a75
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00525fd0
add esp, 8
test eax, eax
je 0x484679
push str.ldapauth.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0052c1fd
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d4], eax
test eax, eax
je 0x483a9a
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c0], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x483ae7
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00525fd0
add esp, 8
test eax, eax
je 0x484679
push str.ldapauthnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0052c1fd
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d8], eax
test eax, eax
je 0x483b0c
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c4], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x483b59
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.00525fd0
add esp, 8
test eax, eax
je 0x484679
push str.ldapauth9x.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0052c1fd
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3b4], eax
test eax, eax
je 0x483b7e
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c8], eax
mov ecx, dword [0x5d1914]
mov edx, 0x579be0
add ecx, 0xe69
nop
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x483bb0
test al, al
je 0x483bac
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x483bb0
add ecx, 2
add edx, 2
test al, al
jne 0x483b90
xor eax, eax
jmp 0x483bb5
sbb eax, eax
or eax, 1
mov esi, dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jne 0x483ca8
mov eax, dword [0x5d1914]
mov ecx, 0x579be0
add eax, 0xeff
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x483bf2
test dl, dl
je 0x483bee
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x483bf2
add eax, 2
add ecx, 2
test dl, dl
jne 0x483bd2
xor eax, eax
jmp 0x483bf7
sbb eax, eax
or eax, 1
test eax, eax
jne 0x483ca8
mov eax, dword [0x5d1914]
mov ecx, 0x579be0
add eax, 0xf95
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x483c30
test dl, dl
je 0x483c2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x483c30
add eax, 2
add ecx, 2
test dl, dl
jne 0x483c10
xor eax, eax
jmp 0x483c35
sbb eax, eax
or eax, 1
test eax, eax
jne 0x483ca8
cmp dword [ebp - 0x3ac], edi
jne 0x483c49
cmp dword [ebp - 0x3b0], edi
je 0x483ca8
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x483c94
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x102c]
lea ecx, [eax + 0xe69]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
jmp 0x483ca8
push 0x5cf298
mov edx, str.authadmin.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
mov eax, dword [0x5d1914]
mov ecx, 0x579be0
add eax, 0xe69
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x483cd7
test dl, dl
je 0x483cd3
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x483cd7
add eax, 2
add ecx, 2
test dl, dl
jne 0x483cb7
xor eax, eax
jmp 0x483cdc
sbb eax, eax
or eax, 1
test eax, eax
je 0x483eae
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x483d2e
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
jmp 0x483d42
push 0x5cf298
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
call fcn.004837c0
test al, al
je 0x483db5
cmp dword [ebp - 0x3b0], 0
je 0x483dac
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x483d69
cmp eax, 3
jne 0x483dac
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x483ee0
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
call fcn.004837c0
test al, al
je 0x483e32
cmp dword [ebp - 0x3ac], 0
je 0x483e29
call fcn.004837e0
test al, al
je 0x483e29
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x483de5
cmp eax, 3
jne 0x483e29
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x483ef9
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x102c]
lea ecx, [eax + 0xe69]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
call fcn.004837c0
test al, al
je 0x483eae
cmp dword [ebp - 0x3ac], 0
jne 0x483ea5
cmp dword [ebp - 0x3b0], 0
jne 0x483ea5
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x483e62
cmp eax, 3
jne 0x483ea5
mov edi, dword [ebp - 0x3c8]
push 0
test edi, edi
je 0x483f12
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
mov eax, dword [0x5d1914]
mov ecx, 0x579be0
add eax, 0xeff
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x483f28
test dl, dl
je 0x483edc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x483f28
add eax, 2
add ecx, 2
test dl, dl
jne 0x483ec0
xor eax, eax
jmp 0x483f2d
push 0x5cf298
mov edx, str.ldapauth.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x483db5
push 0x5cf298
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x483e32
push 0x5cf298
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x483eae
sbb eax, eax
or eax, 1
test eax, eax
je 0x484285
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x483f7f
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
jmp 0x483f93
push 0x5cf298
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x483fa5
cmp dword [ebp - 0x3b0], 0
je 0x483fe5
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x483ff0
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1030]
lea ecx, [eax + 0xeff]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
jmp 0x484004
push 0x5cf298
mov edx, str.authadmin.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
call fcn.004837c0
test al, al
je 0x484078
cmp dword [ebp - 0x3b0], 0
je 0x48406f
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x48402b
cmp eax, 3
jne 0x48406f
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x48423f
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1030]
lea ecx, [eax + 0xeff]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
call fcn.004837c0
test al, al
je 0x4840f4
cmp dword [ebp - 0x3ac], 0
je 0x4840eb
call fcn.004837e0
test al, al
je 0x4840eb
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x4840a8
cmp eax, 3
jne 0x4840eb
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x484258
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484174
call fcn.004837c0
test al, al
je 0x484285
cmp dword [ebp - 0x3ac], 0
jne 0x48416b
cmp dword [ebp - 0x3b0], 0
jne 0x48416b
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x484128
cmp eax, 3
jne 0x48416b
mov edi, dword [ebp - 0x3c8]
push 0
test edi, edi
je 0x484271
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x484285
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4841b6
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00525fd0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0052c1fd
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x4841eb
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x4841f8
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x484205
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x484212
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x48421f
push eax
call ebx
mov eax, dword [ebp - 0x3b4]
test eax, eax
je 0x48422c
push eax
call ebx
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00524763
mov esp, ebp
pop ebp
ret
push 0x5cf298
mov edx, str.ldapauth.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x484078
push 0x5cf298
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x4840f4
push 0x5cf298
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
mov eax, dword [0x5d1914]
mov ecx, 0x579be0
add eax, 0xf95
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4842b4
test dl, dl
je 0x4842b0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4842b4
add eax, 2
add ecx, 2
test dl, dl
jne 0x484294
xor eax, eax
jmp 0x4842b9
sbb eax, eax
or eax, 1
test eax, eax
je 0x484615
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x48430c
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1034]
lea ecx, [eax + 0xf95]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484501
jmp 0x484320
push 0x5cf298
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x484332
cmp dword [ebp - 0x3b0], 0
je 0x484371
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x48437c
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484501
jmp 0x484390
push 0x5cf298
mov edx, str.authadmin.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
call fcn.004837c0
test al, al
je 0x484404
cmp dword [ebp - 0x3b0], 0
je 0x4843fb
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x4843b7
cmp eax, 3
jne 0x4843fb
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x4845cf
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1034]
lea ecx, [eax + 0xf95]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484501
call fcn.004837c0
test al, al
je 0x484481
cmp dword [ebp - 0x3ac], 0
je 0x484478
call fcn.004837e0
test al, al
je 0x484478
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x484434
cmp eax, 3
jne 0x484478
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x4845e8
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1034]
lea ecx, [eax + 0xf95]
push ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x484501
call fcn.004837c0
test al, al
je 0x484615
cmp dword [ebp - 0x3ac], 0
jne 0x4844f8
cmp dword [ebp - 0x3b0], 0
jne 0x4844f8
mov eax, dword [0x5d1914]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x4844b5
cmp eax, 3
jne 0x4844f8
mov edi, dword [ebp - 0x3c8]
push 0
test edi, edi
je 0x484601
call esi
mov eax, dword [0x5d1914]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x484615
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x484543
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00525fd0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0052c1fd
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x484578
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x484585
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x484592
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x48459f
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x4845ac
push eax
call ebx
mov eax, dword [ebp - 0x3b4]
test eax, eax
je 0x4845b9
push eax
call ebx
pop edi
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00524763
mov esp, ebp
pop ebp
ret
push 0x5cf298
mov edx, str.ldapauth.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x484404
push 0x5cf298
mov edx, str.ldapauthnt4.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
jmp 0x484481
push 0x5cf298
mov edx, str.ldapauth9x.dll_not_found
call fcn.00425f30
add esp, 8
xor edi, edi
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x484657
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.00525fd0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.0052c1fd
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x4841eb
push str.LOGFAILEDUSER
jmp 0x4841cf
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00524763
mov esp, ebp
pop ebp
ret