Function at 0x140001000
Capabilities:
Get hostname
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbp
push rbx
sub rsp, 0x1c8
mov rdi, rdx
mov esi, ecx
mov rax, qword [0x140079508]
mov qword [rsp + 0x1c0], rax
xor ecx, ecx
call fcn.14005b2a8
xor r14d, r14d
mov qword [rsp + 0x180], r14
xor eax, eax
xor r12d, r12d
mov qword [rsp + 0x1a8], r14
mov qword [rsp + 0x1b0], r14
mov qword [rsp + 0x1a0], r14
mov dword [rsp + 0x1b8], eax
mov qword [rsp + 0x198], r12
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x170], r14
mov dword [rsp + 0x16c], eax
xor r14d, r14d
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x188], r12
mov dword [rsp + 0x15c], eax
mov dword [rsp + 0x164], eax
lea r11, str.iMZFabcekKnrtvqQh:p:D:w:d:f:X:U:P:W:E:O:V:o:Y:
mov qword [rsp + 0x58], r11
mov dword [rsp + 0x148], eax
mov qword [rsp + 0x178], r12
mov dword [rsp + 0x130], eax
mov byte [rsp + 0x134], al
mov dword [0x1400795a4], 0x4d2
xor r15d, r15d
xor eax, eax
xor r13d, r13d
mov dword [rsp + 0x50], r15d
mov dword [0x140079570], eax
mov dword [0x140079574], eax
mov dword [0x140079578], eax
mov dword [0x14007957c], eax
mov dword [0x140079580], eax
mov dword [0x140079584], eax
mov dword [0x140079588], eax
xor ebp, ebp
call fcn.140006c40
mov rbx, rax
test rbx, rbx
je 0x14000219a
mov rdx, qword [rdi]
xor ecx, ecx
mov r8d, 0x5c
call fcn.14000a826
test rax, rax
jne 0x14000113b
mov rdx, qword [rdi]
mov qword [0x140079540], rdx
jmp 0x140001163
mov qword [0x140079540], rax
xor ecx, ecx
mov rdx, rax
mov r8d, 1
call fcn.140008ba6
movsxd rdx, eax
add rdx, qword [0x140079540]
mov qword [0x140079540], rdx
xor ecx, ecx
lea r8, str.ldapadd
mov r9d, 7
call fcn.14000aa12
test eax, eax
jne 0x140001187
mov dword [0x14007957c], 1
jmp 0x14000119d
mov dword [0x14007957c], 0
lea rax, str.iMZFabcekKnrtvqQh:p:D:w:d:f:U:P:W:E:O:V:o:Y:
mov qword [rsp + 0x58], rax
xor ecx, ecx
xor edx, edx
call fcn.140008de0
mov qword [rsp + 0x20], 5
mov qword [0x140079548], rax
lea rdx, str.LDAP_PASSWORD_PROMPTONLY
mov dword [rsp + 0x28], 1
lea rcx, [rsp + 0x150]
mov r8d, 0x19
lea r9, [rsp + 0x130]
call sub.oracore11.dll_slzgetevar
test eax, eax
jle 0x14000122c
lea rdx, [rsp + 0x130]
movsxd rax, eax
mov byte [rsp + rax + 0x130], 0
xor ecx, ecx
lea r8, str.TRUE
call fcn.14000aa9c
test eax, eax
je 0x140001223
lea rdx, [rsp + 0x130]
xor ecx, ecx
lea r8, [0x140060d70]
call fcn.14000aa9c
test eax, eax
jne 0x14000122c
mov eax, 1
mov dword [rsp + 0x50], eax
mov r8, qword [rsp + 0x58]
mov ecx, esi
mov rdx, rdi
call fcn.140004ae0
cmp eax, 0xffffffff
je 0x14000128f
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], rbx
mov rbx, qword [rsp + 0x58]
lea r12, [0x140000000]
lea edx, [rax - 0x44]
cmp edx, 0x33
ja case.0x140001269.71
add eax, 0xffffffbc
mov rdx, qword [r12 + rax*8 + 0x60b00]
jmp rdx
mov rcx, qword [rdi]
call fcn.140004320
mov ecx, esi
mov rdx, rdi
mov r8, rbx
call fcn.140004ae0
cmp eax, 0xffffffff
jne 0x140001256
mov r12, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
cmp esi, dword [0x140078040]
jne 0x14000129c
cmp esi, 2
jge 0x1400012a4
mov rcx, qword [rdi]
call fcn.140004320
mov eax, dword [rsp + 0x48]
test eax, eax
jne 0x1400012b8
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140001347
mov rcx, rbx
mov edx, 1
mov r8d, 0x28
call fcn.14000b0c4
mov r12, rax
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x1400012e7
mov dword [r12], 0xa
mov dword [r12 + 0x10], 0x1fb9
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140001301
mov dword [r12 + 0x14], 0xa
mov dword [r12 + 0x20], 0x1fba
mov rcx, rbx
mov rdx, r12
call fcn.140004828
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140001329
mov rax, qword [r12 + 8]
mov qword [r12 + 8], 0
mov qword [0x140079550], rax
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140001347
mov rax, qword [r12 + 0x18]
mov qword [r12 + 0x18], 0
mov qword [rsp + 0x190], rax
mov rcx, rbx
mov rdx, r12
call fcn.14000adf4
mov eax, dword [rbx + 0x198]
test eax, eax
je 0x1400015d9
mov rdx, qword [0x140079548]
xor eax, eax
mov qword [rsp + 0x138], rax
test rdx, rdx
mov qword [rsp + 0x140], rax
je 0x14000143b
xor ecx, ecx
call fcn.1400081f4
mov rdx, qword [0x140079548]
lea r9, [rsp + 0x138]
movsxd r8, eax
lea rax, [rsp + 0x140]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14000ca28
test eax, eax
je 0x1400013f2
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x835
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov ecx, 0xffffffff
call qword [sym.imp.MSVCR80.dll_exit]
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov rdx, qword [0x140079548]
mov rcx, rbx
mov byte [rax + rsi], 0
call fcn.14000adf4
mov rdx, qword [rsp + 0x138]
xor ecx, ecx
call fcn.140008de0
mov rdx, qword [rsp + 0x138]
mov qword [0x140079548], rax
mov rcx, rbx
call fcn.14000adf4
mov rdx, qword [0x140079550]
test rdx, rdx
je 0x140001504
xor ecx, ecx
call fcn.1400081f4
mov rdx, qword [0x140079550]
lea r9, [rsp + 0x138]
movsxd r8, eax
lea rax, [rsp + 0x140]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14000ca28
test eax, eax
je 0x1400014bb
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x835
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov ecx, 0xffffffff
call qword [sym.imp.MSVCR80.dll_exit]
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov rdx, qword [0x140079550]
mov rcx, rbx
mov byte [rax + rsi], 0
call fcn.14000adf4
mov rdx, qword [rsp + 0x138]
xor ecx, ecx
call fcn.140008de0
mov rdx, qword [rsp + 0x138]
mov qword [0x140079550], rax
mov rcx, rbx
call fcn.14000adf4
mov rax, qword [rsp + 0x190]
test rax, rax
je 0x1400015d9
mov rdx, qword [rsp + 0x190]
xor ecx, ecx
call fcn.1400081f4
mov rdx, qword [rsp + 0x190]
lea r9, [rsp + 0x138]
movsxd r8, eax
lea rax, [rsp + 0x140]
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14000ca28
test eax, eax
je 0x14000158e
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x835
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov ecx, 0xffffffff
call qword [sym.imp.MSVCR80.dll_exit]
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x190]
mov rcx, rbx
mov byte [rax + rsi], 0
call fcn.14000adf4
mov rdx, qword [rsp + 0x138]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x190], rax
mov rdx, qword [rsp + 0x138]
mov rcx, rbx
call fcn.14000adf4
test rbp, rbp
je 0x1400015e3
test r15d, r15d
je 0x1400015f1
mov qword [rsp + 0x1b0], 1
jmp 0x14000165c
lea r9, [rsp + 0x1b0]
xor ecx, ecx
mov rdx, rbp
mov r8d, 7
call fcn.140006856
test eax, eax
je 0x14000165c
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x27d8
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
mov qword [rsp + 0x28], 0
xor ecx, ecx
mov edx, 3
mov qword [rsp + 0x20], rbp
mov r9d, 0x19
call fcn.140006264
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
mov rsi, qword [0x140079558]
test rsi, rsi
je 0x140002139
test r14d, r14d
je 0x140001688
mov eax, dword [0x140078030]
cmp eax, 0x185
jne 0x140001688
mov dword [0x140078030], 0x27c
mov eax, dword [0x140079588]
test eax, eax
jne 0x140001891
mov edx, dword [0x140078030]
mov rcx, rsi
call sym.ldapadd.exe_ldap_open
mov qword [0x140079568], rax
test rax, rax
je 0x1400020ef
mov rcx, rax
mov edx, 0x11
lea r8, [0x140078034]
call sym.ldapadd.exe_ldap_set_option
mov rcx, qword [0x140079568]
mov edx, 0x10
lea r8, reloc.WS2_32.dll_getpeername
call sym.ldapadd.exe_ldap_set_option
mov rcx, qword [0x140079568]
mov edx, 8
mov r8d, 1
call sym.ldapadd.exe_ldap_set_option
mov eax, dword [rsp + 0x164]
test eax, eax
je 0x140001719
mov rcx, qword [0x140079568]
mov edx, 0xc8
mov r8d, 1
call sym.ldapadd.exe_ldap_set_option
cmp r14d, 1
jle 0x140001742
mov rax, qword [rsp + 0x198]
test rax, rax
je 0x140001f18
mov rax, qword [rsp + 0x190]
test rax, rax
jne 0x140001748
jmp 0x140001f18
jl 0x1400017d4
cmp r14d, 1
je 0x1400017a7
cmp r14d, 2
jne 0x14000175c
mov r14d, 0x20
jmp 0x1400017ad
cmp r14d, 3
jne 0x14000176a
mov r14d, 0x40
jmp 0x1400017ad
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x22c5
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 2
xor r9d, r9d
call fcn.140006264
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x1400017ad
mov r14d, 1
mov rcx, qword [0x140079568]
mov rdx, qword [rsp + 0x198]
mov r8, qword [rsp + 0x190]
mov r9d, r14d
call sym.ldapadd.exe_ldap_init_SSL
test eax, eax
jne 0x1400020b4
mov rcx, qword [0x140079568]
mov dword [rcx + 0x1c0], 0
test r13d, r13d
jne 0x1400017f1
mov esi, 0x80
jmp 0x140001802
mov eax, 0x81
cmp r13d, 1
mov esi, 0xff
cmove esi, eax
mov eax, dword [rsp + 0x15c]
test eax, eax
je 0x140001830
mov dword [rsp + 0x20], 2
xor edx, edx
lea r8, str.GSSAPI
xor r9d, r9d
call sym.ldapadd.exe_ldap_native_bind_s
test eax, eax
jne 0x140001f58
jmp 0x14000184e
mov rdx, qword [0x140079548]
mov r8, qword [0x140079550]
mov r9d, esi
call sym.ldapadd.exe_ldap_bind_s
test eax, eax
jne 0x140002091
mov rax, qword [rsp + 0x188]
test rax, rax
je 0x140001881
mov rcx, qword [0x140079568]
mov rdx, qword [rsp + 0x188]
lea r8, [0x140060dac]
mov r9d, esi
call sym.ldapadd.exe_ldap_bind_s
test eax, eax
jne 0x140001f7b
mov eax, dword [rsp + 0x148]
cmp eax, 1
je 0x14000202f
mov rax, qword [rsp + 0x180]
mov dword [rsp + 0x15c], 0
test rax, rax
je 0x140001921
mov rdx, qword [rsp + 0x180]
lea r9, [rsp + 0x1a0]
xor ecx, ecx
mov r8d, 4
call fcn.140006856
test eax, eax
je 0x140001921
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x27d8
call fcn.140009ef8
mov rax, qword [rsp + 0x180]
mov r8, qword [rsp + 0x170]
mov qword [rsp + 0x28], 0
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov edx, 3
mov r9d, 0x19
call fcn.140006264
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
test r15d, r15d
jne 0x140002008
mov r14, qword [rsp + 0x178]
mov r15, qword [rsp + 0x180]
mov qword [rsp + 0x148], rbp
mov rcx, qword [rsp + 0x1b0]
lea rdx, [rsp + 0x1a8]
lea r8, [rsp + 0x1b8]
call fcn.14000b972
mov edi, eax
test edi, edi
jne 0x140001fb8
test r15, r15
je 0x140001980
mov rdx, qword [rsp + 0x1a8]
xor ecx, ecx
call fcn.140008de0
mov rsi, rax
mov rdx, qword [rsp + 0x1a8]
xor ecx, ecx
mov r8d, 0x3a
call fcn.14000a3ec
mov rbp, rax
test rbp, rbp
je 0x1400019e3
mov rdx, qword [rsp + 0x1a8]
xor ecx, ecx
mov r8d, 0xa
call fcn.14000a3ec
test rax, rax
je 0x1400019e3
cmp rbp, rax
jae 0x1400019e3
mov rdx, qword [rsp + 0x1a8]
xor ecx, ecx
mov r8d, 0x3d
call fcn.14000a3ec
test rax, rax
je 0x1400019db
cmp rbp, rax
jae 0x1400019e3
mov r12d, 1
jmp 0x1400019e6
xor r12d, r12d
mov rdi, qword [rsp + 0x1a8]
test r12d, r12d
jne 0x140001a5e
xor ecx, ecx
mov rdx, rdi
mov r8d, 0xa
call fcn.14000a3ec
mov r13, rax
test r13, r13
je 0x140001a6e
mov rbp, qword [rsp + 0x1a8]
cmp rbp, r13
jae 0x140001a41
xor ecx, ecx
mov rdx, rbp
call fcn.140009dee
test eax, eax
je 0x140001a59
xor ecx, ecx
mov rdx, rbp
mov r8d, 1
call fcn.140008ba6
movsxd rax, eax
add rbp, rax
cmp rbp, r13
jb 0x140001a18
xor ecx, ecx
mov rdx, r13
mov r8d, 1
call fcn.140008ba6
movsxd rdi, eax
add rdi, r13
jmp 0x140001a5e
test r12d, r12d
je 0x140001a6e
mov rcx, rdi
mov rdx, r14
xor r8d, r8d
call fcn.1400021c4
jmp 0x140001a7c
mov rcx, rdi
mov rdx, r14
xor r8d, r8d
call fcn.140003e42
test eax, eax
je 0x140001bb7
mov dword [rsp + 0x15c], eax
test r15, r15
je 0x140001ae2
mov rdx, qword [rsp + 0x1a0]
xor ecx, ecx
mov r8, rsi
xor r9d, r9d
call fcn.140006264
mov rdx, qword [rsp + 0x1a0]
mov qword [rsp + 0x28], 0
xor ecx, ecx
lea r8, str._LDAP_Error_code:__d__n__n
lea rax, [rsp + 0x15c]
mov qword [rsp + 0x20], rax
mov r9d, 5
call fcn.140006264
mov rcx, rbx
mov rdx, rsi
call fcn.14000adf4
mov eax, dword [0x140079574]
test eax, eax
jne 0x140001942
mov rbp, qword [rsp + 0x148]
mov rdx, qword [rsp + 0x1a8]
test rdx, rdx
je 0x140001b0d
mov rcx, rbx
call fcn.14000adf4
mov rdx, qword [rsp + 0x1a0]
test rdx, rdx
je 0x140001b41
xor ecx, ecx
call fcn.140006808
mov rdx, qword [rsp + 0x1a0]
mov rcx, rbx
call fcn.14000adf4
mov rdx, qword [rsp + 0x180]
mov rcx, rbx
call fcn.14000adf4
mov eax, dword [0x140079588]
test eax, eax
jne 0x140001b57
mov rcx, qword [0x140079568]
call sym.ldapadd.exe_ldap_unbind
mov rdx, qword [rsp + 0x1b0]
test rdx, rdx
je 0x140001b82
cmp rdx, 1
je 0x140001b82
mov rcx, rbx
call fcn.140006808
mov rdx, qword [rsp + 0x1b0]
mov rcx, rbx
call fcn.14000adf4
mov rcx, rbx
mov rdx, rbp
call fcn.14000adf4
mov ebx, dword [rsp + 0x15c]
mov rcx, qword [rsp + 0x1c0]
call fcn.14005fbf0
mov eax, ebx
add rsp, 0x1c8
pop rbx
pop rbp
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
test r15, r15
je 0x140001942
mov rcx, rbx
mov rdx, rsi
call fcn.14000adf4
jmp 0x140001942
mov rcx, qword [0x14007a2e8]
movzx eax, byte [rcx]
cmp eax, 0x2d
je 0x140001c53
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x178]
mov r8d, dword [rdx + 0x38]
mov qword [0x140079560], rcx
test r8d, 0x4000000
jne 0x140001c1c
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x140001c1a
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140001c01
add rax, 0xffffffffffffffff
jmp 0x140001c21
call sub.oranls11.dll_lxsulen
test rax, rax
jbe 0x140001273
mov rcx, qword [rsp + 0x38]
mov rdx, qword [0x140079560]
call fcn.14000cf12
test eax, eax
je 0x140001273
mov ecx, 0xffffffff
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140001273
mov qword [0x140079560], 0
add dword [0x140078040], 0xffffffff
jmp 0x140001273
mov dword [0x140079570], 1
jmp 0x140001273
mov r13d, 1
jmp 0x140001273
lea rax, section..data
mov qword [rsp + 0x178], rax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008d44
test eax, eax
jl 0x140001273
mov dword [reloc.WS2_32.dll_getpeername], eax
jmp 0x140001273
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x140001cfc
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x1fbc
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov rcx, qword [rdi]
call fcn.140004320
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x190], rax
jmp 0x140001273
mov eax, 1
mov dword [rsp + 0x48], eax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008d44
mov r14d, eax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008d44
cmp eax, 3
je 0x140001d57
cmp eax, 2
jne 0x140001273
mov dword [0x140078034], eax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x198], rax
jmp 0x140001273
mov r15d, 1
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov rbp, rax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x188], rax
jmp 0x140001273
mov eax, 1
mov dword [rsp + 0x15c], eax
jmp 0x140001273
mov dword [0x14007957c], 1
jmp 0x140001273
mov dword [0x140079580], 1
jmp 0x140001273
mov dword [0x140079574], 1
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008d44
mov dword [0x140078044], eax
jmp 0x140001273
mov eax, 1
mov dword [rsp + 0x164], eax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [0x140079558], rax
jmp 0x140001273
mov eax, 1
mov dword [rsp + 0x148], eax
jmp 0x140001273
mov r13d, 2
jmp 0x140001273
add dword [0x140079588], 1
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x180], rax
jmp 0x140001273
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008d44
mov dword [0x140078030], eax
jmp 0x140001273
mov eax, 1
mov dword [rsp + 0x40], eax
jmp 0x140001273
mov dword [0x140079578], 1
jmp 0x140001273
add dword [0x140079584], 1
jmp 0x140001273
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x140001efe
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x1fbb
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov rcx, qword [rdi]
call fcn.140004320
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [0x140079550], rax
jmp 0x140001273
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x22c4
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 2
xor r9d, r9d
call fcn.140006264
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140001748
mov rcx, qword [0x140079568]
lea rdx, str.ldap_native_bind
call sym.ldapadd.exe_ldap_perror
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x14000184e
mov rcx, qword [0x140079568]
lea rdx, [0x140060da0]
call sym.ldapadd.exe_ldap_perror
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140001881
mov rdx, qword [0x14007a2e8]
xor ecx, ecx
call fcn.140008de0
mov qword [0x140079548], rax
jmp 0x140001273
mov rbp, qword [rsp + 0x148]
cmp edi, 7
je 0x140001af8
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x22d9
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 3
xor r9d, r9d
call fcn.140006264
mov dword [rsp + 0x15c], edi
jmp 0x140001af8
mov rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x178]
mov rcx, rbp
xor r9d, r9d
call fcn.140003d5c
mov dword [rsp + 0x15c], eax
jmp 0x140001af8
mov r8, qword [0x140079548]
test r8, r8
je 0x140001891
mov rax, qword [rsp + 0x188]
mov rdx, qword [0x140079568]
mov r9, qword [0x140079550]
mov dword [rsp + 0x20], esi
mov rcx, rbx
mov qword [rsp + 0x28], rax
call fcn.1400150c6
test eax, eax
je 0x140001891
mov rcx, qword [0x140079568]
lea rdx, str.unable_to_save_credentials
call sym.ldapadd.exe_ldap_perror
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140001891
mov rcx, qword [0x140079568]
lea rdx, [0x140060da0]
call sym.ldapadd.exe_ldap_perror
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x14000184e
mov ecx, eax
call sym.ldapadd.exe_ldap_err2string
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov edx, 2
lea r8, str.__s_n
mov r9d, 0x19
call fcn.140006264
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x1400017d4
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x2af8
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 2
xor r9d, r9d
call fcn.140006264
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
mov rax, qword [0x140079568]
jmp 0x1400016b4
lea rsi, [rsp + 0x30]
mov rcx, rsi
mov edx, 0xff
call qword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
je 0x14000218e
lea r8, [rsp + 0x170]
lea r9, [rsp + 0x16c]
xor ecx, ecx
mov edx, 0x2af9
call fcn.140009ef8
mov r8, qword [rsp + 0x170]
xor ecx, ecx
mov edx, 2
xor r9d, r9d
call fcn.140006264
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
mov qword [0x140079558], rsi
jmp 0x14000166c
call qword [sym.imp.MSVCR80.dll___iob_func]
add rax, 0x60
mov rcx, rax
lea rdx, str._unable_to_locate_message_file:_ldap_language_.msb_n
call qword [sym.imp.MSVCR80.dll_fprintf]
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x14000111a