Function at 0x4738b0
Capabilities:
Check os version
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3d8
mov eax, dword [0x5a6008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0x3a8], edx
push 0x100
xor edi, edi
mov dword [ebp - 0x3a4], ecx
xor esi, esi
mov dword [ebp - 0x3b8], 0
push eax
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x3ac], edi
mov dword [ebp - 0x3b0], esi
call fcn.0051736e
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0xc
push str.netapi32.dll
call ebx
test eax, eax
jne 0x47394c
push str.radmin32.dll
call ebx
test eax, eax
je 0x4746f4
mov ebx, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push eax
call ebx
push 0x90
lea eax, [ebp - 0x39c]
push 0
push eax
call fcn.00513330
add esp, 0xc
mov dword [ebp - 0x3a0], 0x94
lea eax, [ebp - 0x3a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x4746f4
cmp dword [ebp - 0x390], 2
jne 0x4739bb
mov eax, dword [ebp - 0x39c]
cmp eax, 4
jne 0x4739aa
mov dword [ebp - 0x3ac], 1
jmp 0x4739bb
cmp eax, 5
mov ecx, 1
cmovae esi, ecx
mov dword [ebp - 0x3b0], esi
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x473a08
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x4746f4
push str._authadmin.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3c8], eax
test eax, eax
je 0x473a33
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b8], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x473a80
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x4746f4
push str.workgrpdomnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3cc], eax
test eax, eax
je 0x473aa5
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3b4], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x473af2
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x4746f4
push str.ldapauth.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d0], eax
test eax, eax
je 0x473b17
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3bc], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x473b64
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x4746f4
push str.ldapauthnt4.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d4], eax
test eax, eax
je 0x473b89
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c0], eax
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x473bd6
lea eax, [ebp - 0x108]
push 0x5c
push eax
call fcn.005128c0
add esp, 8
test eax, eax
je 0x4746f4
push str.ldapauth9x.dll
mov byte [eax], 0
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.005173c8
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call esi
mov dword [ebp - 0x3d8], eax
test eax, eax
je 0x473bfb
push str.CUGP
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3c4], eax
mov ecx, dword [0x5b6e6c]
mov edx, 0x560f28
add ecx, 0xe69
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x473c30
test al, al
je 0x473c2c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x473c30
add ecx, 2
add edx, 2
test al, al
jne 0x473c10
xor eax, eax
jmp 0x473c35
sbb eax, eax
or eax, 1
mov esi, dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jne 0x473d27
mov eax, dword [0x5b6e6c]
mov ecx, 0x560f28
add eax, 0xeff
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x473c72
test dl, dl
je 0x473c6e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x473c72
add eax, 2
add ecx, 2
test dl, dl
jne 0x473c52
xor eax, eax
jmp 0x473c77
sbb eax, eax
or eax, 1
test eax, eax
jne 0x473d27
mov eax, dword [0x5b6e6c]
mov ecx, 0x560f28
add eax, 0xf95
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x473cb0
test dl, dl
je 0x473cac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x473cb0
add eax, 2
add ecx, 2
test dl, dl
jne 0x473c90
xor eax, eax
jmp 0x473cb5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x473d27
cmp dword [ebp - 0x3ac], edi
jne 0x473cc9
cmp dword [ebp - 0x3b0], edi
je 0x473d27
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x473d13
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
jmp 0x473d27
push 0x5b4ac8
mov edx, str.authadmin.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
mov eax, dword [0x5b6e6c]
mov ecx, 0x560f28
add eax, 0xe69
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x473d56
test dl, dl
je 0x473d52
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x473d56
add eax, 2
add ecx, 2
test dl, dl
jne 0x473d36
xor eax, eax
jmp 0x473d5b
sbb eax, eax
or eax, 1
test eax, eax
je 0x473f2c
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x473dad
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
jmp 0x473dc1
push 0x5b4ac8
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
call fcn.00473850
test al, al
je 0x473e34
cmp dword [ebp - 0x3b0], 0
je 0x473e2b
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x473de8
cmp eax, 3
jne 0x473e2b
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x473f60
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
call fcn.00473850
test al, al
je 0x473eb0
cmp dword [ebp - 0x3ac], 0
je 0x473ea7
call fcn.00473870
test al, al
je 0x473ea7
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x473e64
cmp eax, 3
jne 0x473ea7
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x473f79
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
call fcn.00473850
test al, al
je 0x473f2c
cmp dword [ebp - 0x3ac], 0
jne 0x473f23
cmp dword [ebp - 0x3b0], 0
jne 0x473f23
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x102c]
cmp eax, 2
je 0x473ee0
cmp eax, 3
jne 0x473f23
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x473f92
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x102c]
add eax, 0xe69
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
mov eax, dword [0x5b6e6c]
mov ecx, 0x560f28
add eax, 0xeff
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x473fa8
test dl, dl
je 0x473f5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x473fa8
add eax, 2
add ecx, 2
test dl, dl
jne 0x473f40
xor eax, eax
jmp 0x473fad
push 0x5b4ac8
mov edx, str.ldapauth.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x473e34
push 0x5b4ac8
mov edx, str.ldapauthnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x473eb0
push 0x5b4ac8
mov edx, str.ldapauth9x.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x473f2c
sbb eax, eax
or eax, 1
test eax, eax
je 0x474303
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x473fff
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
jmp 0x474013
push 0x5b4ac8
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x474025
cmp dword [ebp - 0x3b0], 0
je 0x474064
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x47406f
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
jmp 0x474083
push 0x5b4ac8
mov edx, str.authadmin.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
call fcn.00473850
test al, al
je 0x4740f6
cmp dword [ebp - 0x3b0], 0
je 0x4740ed
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x4740aa
cmp eax, 3
jne 0x4740ed
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x4742bd
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
call fcn.00473850
test al, al
je 0x474172
cmp dword [ebp - 0x3ac], 0
je 0x474169
call fcn.00473870
test al, al
je 0x474169
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x474126
cmp eax, 3
jne 0x474169
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x4742d6
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x4741f2
call fcn.00473850
test al, al
je 0x474303
cmp dword [ebp - 0x3ac], 0
jne 0x4741e9
cmp dword [ebp - 0x3b0], 0
jne 0x4741e9
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1030]
cmp eax, 2
je 0x4741a6
cmp eax, 3
jne 0x4741e9
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x4742ef
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1030]
add eax, 0xeff
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x474303
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x474234
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.005128c0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.005173c8
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x474269
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x474276
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x474283
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x474290
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x47429d
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x4742aa
push eax
call ebx
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00511339
mov esp, ebp
pop ebp
ret
push 0x5b4ac8
mov edx, str.ldapauth.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x4740f6
push 0x5b4ac8
mov edx, str.ldapauthnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x474172
push 0x5b4ac8
mov edx, str.ldapauth9x.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
mov eax, dword [0x5b6e6c]
mov ecx, 0x560f28
add eax, 0xf95
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x474332
test dl, dl
je 0x47432e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x474332
add eax, 2
add ecx, 2
test dl, dl
jne 0x474312
xor eax, eax
jmp 0x474337
sbb eax, eax
or eax, 1
test eax, eax
je 0x474690
mov edi, dword [ebp - 0x3b4]
push 0
test edi, edi
je 0x474389
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x47457c
jmp 0x47439d
push 0x5b4ac8
mov edx, str.workgrpdomnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
cmp dword [ebp - 0x3ac], 0
jne 0x4743af
cmp dword [ebp - 0x3b0], 0
je 0x4743ee
mov edi, dword [ebp - 0x3b8]
push 0
test edi, edi
je 0x4743f9
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x47457c
jmp 0x47440d
push 0x5b4ac8
mov edx, str.authadmin.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
call fcn.00473850
test al, al
je 0x474480
cmp dword [ebp - 0x3b0], 0
je 0x474477
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x474434
cmp eax, 3
jne 0x474477
mov edi, dword [ebp - 0x3bc]
push 0
test edi, edi
je 0x47464a
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x47457c
call fcn.00473850
test al, al
je 0x4744fc
cmp dword [ebp - 0x3ac], 0
je 0x4744f3
call fcn.00473870
test al, al
je 0x4744f3
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x4744b0
cmp eax, 3
jne 0x4744f3
mov edi, dword [ebp - 0x3c0]
push 0
test edi, edi
je 0x474663
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
je 0x47457c
call fcn.00473850
test al, al
je 0x474690
cmp dword [ebp - 0x3ac], 0
jne 0x474573
cmp dword [ebp - 0x3b0], 0
jne 0x474573
mov eax, dword [0x5b6e6c]
mov eax, dword [eax + 0x1034]
cmp eax, 2
je 0x474530
cmp eax, 3
jne 0x474573
mov edi, dword [ebp - 0x3c4]
push 0
test edi, edi
je 0x47467c
call esi
mov eax, dword [0x5b6e6c]
push dword [eax + 0x1034]
add eax, 0xf95
push eax
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x3a8]
push dword [ebp - 0x3a4]
call edi
add esp, 0x14
mov edi, eax
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, 1
jne 0x474690
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4745be
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.005128c0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.005173c8
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x4745f3
push str.LOGLOGONUSER
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x208]
push ecx
call eax
add esp, 8
push esi
call ebx
mov eax, dword [ebp - 0x3c8]
test eax, eax
je 0x474600
push eax
call ebx
mov eax, dword [ebp - 0x3cc]
test eax, eax
je 0x47460d
push eax
call ebx
mov eax, dword [ebp - 0x3d0]
test eax, eax
je 0x47461a
push eax
call ebx
mov eax, dword [ebp - 0x3d4]
test eax, eax
je 0x474627
push eax
call ebx
mov eax, dword [ebp - 0x3d8]
test eax, eax
je 0x474634
push eax
call ebx
pop edi
pop esi
mov eax, 2
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00511339
mov esp, ebp
pop ebp
ret
push 0x5b4ac8
mov edx, str.ldapauth.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x474480
push 0x5b4ac8
mov edx, str.ldapauthnt4.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
jmp 0x4744fc
push 0x5b4ac8
mov edx, str.ldapauth9x.dll_not_found
call fcn.004257b0
add esp, 8
xor edi, edi
push 0x104
lea eax, [ebp - 0x30c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4746d2
lea eax, [ebp - 0x30c]
push 0x5c
push eax
call fcn.005128c0
push str.logging.dll
push 0x104
mov byte [eax], 0
lea eax, [ebp - 0x30c]
push eax
call fcn.005173c8
add esp, 0x14
lea eax, [ebp - 0x30c]
push eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
call eax
mov esi, eax
test esi, esi
je 0x474269
push str.LOGFAILEDUSER
jmp 0x47424d
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00511339
mov esp, ebp
pop ebp
ret