Function at 0x140042690
Capabilities:
List groups for user account

Disassembly:
sub rsp, 0x148
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x108], rdx
mov byte [rsp + 0x107], 0
call dbg.default<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0
mov dword [rsp + 0xac], 0
lea rax, [0x140158ed0]
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], 1
jmp 0x140042728
lea rcx, [rsp + 0xa0]
call dbg.sysinfo::windows::users::NetApiBuffer<T>::inner_mut_as_bytes::h759d3670005283c6
mov qword [rsp + 0x80], rax
jmp 0x14004273f
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x80]
mov rax, rsp
lea r8, [rsp + 0xac]
mov qword [rax + 0x38], r8
lea r8, [rsp + 0xa8]
mov qword [rax + 0x30], r8
mov qword [rax + 0x20], rcx
mov dword [rax + 0x28], 0xffffffff
lea rcx, [0x140158ed0]
xor r8d, r8d
mov r9d, 1
call sub.NETAPI32.dll_NetUserGetLocalGroups
mov dword [rsp + 0x7c], eax
jmp 0x140042790
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x124], eax
cmp eax, 0
je 0x1400427af
lea rcx, [rsp + 0xe8]
call dbg.alloc::vec::Vec<T>::new::h20a3a9f6cc89e34d
jmp 0x1400427ca
mov eax, dword [rsp + 0xa8]
mov edx, eax
lea rcx, [rsp + 0xd0]
call dbg.alloc::vec::Vec<T>::with_capacity::h2b13d85c4d9974e6
jmp 0x14004285a
mov byte [rsp + 0x107], 1
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0x90]
mov byte [rsp + 0x107], 0
mov rcx, qword [rsp + 0xb0]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xb8]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0xc0]
mov qword [rax + 0x10], rcx
mov byte [rsp + 0x107], 0
lea rcx, [rsp + 0xa0]
call dbg.drop_in_place<sysinfo::windows::users::NetApiBuffer<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>>
mov rax, qword [rsp + 0x98]
add rsp, 0x148
ret
mov byte [rsp + 0x107], 1
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xc0], rax
movups xmm0, xmmword [rsp + 0xd0]
movaps xmmword [rsp + 0xb0], xmm0
mov rcx, qword [rsp + 0xa0]
call dbg.is_null<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>
mov byte [rsp + 0x7b], al
jmp 0x140042895
mov al, byte [rsp + 0x7b]
test al, 1
jne 0x140042802
jmp 0x1400428a3
mov rcx, qword [rsp + 0xa0]
mov eax, dword [rsp + 0xa8]
mov edx, eax
call dbg.from_raw_parts<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rax
jmp 0x1400428c5
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rdx
call dbg.iter<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], rax
jmp 0x1400428f0
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
call dbg.map<core::slice::iter::Iter<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>, alloc::string::String, sysinfo::windows::users::get_groups_for_user::{closure_env#0}>
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rax
jmp 0x14004290b
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0xb0]
call dbg.extend<alloc::string::String, alloc::alloc::Global, core::iter::adapters::map::Map<core::slice::iter::Iter<winapi::um::lmaccess::LOCALGROUP_USERS_INFO_0>, sysinfo::windows::users::get_groups_for_user::{closure_env#0}>>
jmp 0x140042924
jmp 0x140042802