Function at 0x412a5f
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1030
call fcn.00420300
push 0x43d894
lea eax, [ebp - 0x400]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
and dword [ebp - 0x404], 0
push 0x43972c
call fcn.0041b768
pop ecx
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x412981
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x43973c
push 1
call fcn.0041a819
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x412c88
push 0x439758
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x418], eax
push str.NetUserGetLocalGroups
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x418], 0
je 0x4129c1
cmp dword [ebp - 0x408], 0
jne 0x4129eb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetLocalGroups_:_Failed_to_get_API_pointers
push 1
call fcn.0041a819
add esp, 0xc
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
or eax, 0xffffffff
jmp 0x412c88
push dword [ebp + 0xc]
call fcn.0041ea20
pop ecx
test eax, eax
je 0x412a3e
mov eax, dword [ebp + 0xc]
movsx eax, byte [eax]
cmp eax, 0x5c
je 0x412a3e
push 0x200
push dword [ebp + 0xc]
lea eax, [ebp - 0x820]
push eax
call fcn.004201f5
add esp, 0xc
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x820]
push eax
push dword [ebp - 0x41c]
call fcn.0041108f
add esp, 0xc
mov dword [ebp - 0x404], eax
jmp 0x412a55
push 0x200
push dword [ebp + 0xc]
lea eax, [ebp - 0x400]
push eax
call fcn.004201f5
add esp, 0xc
cmp dword [ebp - 0x404], 0
jne 0x412c76
push 0x200
mov eax, dword [ebp + 8]
add eax, 0x312
push eax
lea eax, [ebp - 0xc20]
push eax
call fcn.004201f5
add esp, 0xc
push 0x200
mov eax, dword [ebp + 8]
add eax, 0x434
push eax
lea eax, [ebp - 0x1020]
push eax
call fcn.004201f5
add esp, 0xc
push 0x4397b0
lea eax, [ebp - 0x1020]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0x1020]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x414]
push eax
push 0xfa00
lea eax, [ebp - 0x410]
push eax
push 1
push 0
lea eax, [ebp - 0x1020]
push eax
lea eax, [ebp - 0x400]
push eax
call dword [ebp - 0x408]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
jne 0x412c61
mov eax, dword [ebp + 8]
add eax, 0xf74
push eax
call fcn.0041ea20
pop ecx
test eax, eax
je 0x412b85
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xf70]
mov dword [ebp - 0x1028], eax
and dword [ebp - 0x1024], 0
jmp 0x412b4e
mov eax, dword [ebp - 0x1024]
inc eax
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp - 0x1028]
add eax, 4
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0x1024]
cmp eax, dword [0x44f92c]
jae 0x412b6c
mov eax, dword [ebp - 0x1028]
push dword [eax]
call fcn.0041efe8
pop ecx
jmp 0x412b32
mov eax, dword [ebp + 8]
push dword [eax + 0xf70]
call fcn.0041efe8
pop ecx
mov eax, dword [ebp + 8]
and dword [eax + 0xf70], 0
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
add eax, 0xf74
push eax
call fcn.0041eab0
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x414]
mov dword [eax + 0xf6c], ecx
cmp dword [ebp - 0x414], 0
jbe 0x412c53
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0x414]
shl eax, 2
push eax
call fcn.0041a65d
pop ecx
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xf70], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xf70]
mov dword [ebp - 0x102c], eax
jmp 0x412c15
mov eax, dword [ebp - 0x414]
dec eax
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x1030]
add eax, 4
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0x102c]
add eax, 4
mov dword [ebp - 0x102c], eax
cmp dword [ebp - 0x414], 0
je 0x412c53
cmp dword [ebp - 0x404], 0
jne 0x412c53
push 0x40
call fcn.0041a65d
pop ecx
mov ecx, dword [ebp - 0x102c]
mov dword [ecx], eax
push 0x40
mov eax, dword [ebp - 0x1030]
push dword [eax]
mov eax, dword [ebp - 0x102c]
push dword [eax]
call fcn.004213d8
add esp, 0xc
jmp 0x412bea
push dword [ebp - 0x410]
call dword [ebp - 0x418]
jmp 0x412c76
push dword [ebp - 0x404]
push 0x4397b4
push 1
call fcn.0041a819
add esp, 0xc
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x404]
leave
ret