Function at 0x412c80
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
mov esi, ecx
xor edi, edi
mov ecx, dword [esi + 8]
mov dword [esi + 0xc], edi
mov dword [esi + 0x18], edi
mov eax, dword [esi + 4]
cmp eax, edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
je 0x412caa
cmp ecx, edi
je 0x412caa
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp + 0xc]
cmp eax, edi
mov dword [esi + 8], eax
je 0x412cbf
mov eax, dword [ebp + 8]
push eax
call fcn.00407270
jmp 0x412cc9
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [esi + 4], eax
mov dword [esi + 0xc], 1
mov eax, dword [esi + 4]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, edi
je 0x412cee
push str.InitializeSecurityDescriptor
push eax
call ebx
mov dword [esi + 0x1c], eax
jmp 0x412cf1
mov dword [esi + 0x1c], edi
cmp dword [esi + 0x1c], edi
jne 0x412cf9
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412d0d
push str.SetSecurityDescriptorDacl
push eax
call ebx
mov dword [esi + 0x20], eax
jmp 0x412d10
mov dword [esi + 0x20], edi
cmp dword [esi + 0x20], edi
jne 0x412d18
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412d2c
push str.ConvertStringSecurityDescriptorToSecurityDescriptorW
push eax
call ebx
mov dword [esi + 0x24], eax
jmp 0x412d2f
mov dword [esi + 0x24], edi
cmp dword [esi + 0x24], edi
jne 0x412d37
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412d4b
push str.GetSecurityDescriptorSacl
push eax
call ebx
mov dword [esi + 0x28], eax
jmp 0x412d4e
mov dword [esi + 0x28], edi
cmp dword [esi + 0x28], edi
jne 0x412d56
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412d6a
push str.SetSecurityInfo
push eax
call ebx
mov dword [esi + 0x2c], eax
jmp 0x412d6d
mov dword [esi + 0x2c], edi
cmp dword [esi + 0x2c], edi
jne 0x412d75
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412d89
push str.GetSecurityInfo
push eax
call ebx
mov dword [esi + 0x30], eax
jmp 0x412d8c
mov dword [esi + 0x30], edi
cmp dword [esi + 0x30], edi
jne 0x412d94
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412da8
push str.SetNamedSecurityInfoA
push eax
call ebx
mov dword [esi + 0x34], eax
jmp 0x412dab
mov dword [esi + 0x34], edi
cmp dword [esi + 0x34], edi
jne 0x412db3
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412dc7
push str.GetNamedSecurityInfoA
push eax
call ebx
mov dword [esi + 0x38], eax
jmp 0x412dca
mov dword [esi + 0x38], edi
cmp dword [esi + 0x38], edi
jne 0x412dd2
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412de6
push 0x47ba54
push eax
call ebx
mov dword [esi + 0x3c], eax
jmp 0x412de9
mov dword [esi + 0x3c], edi
cmp dword [esi + 0x3c], edi
jne 0x412df1
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412e05
push str.GetTokenInformation
push eax
call ebx
mov dword [esi + 0x40], eax
jmp 0x412e08
mov dword [esi + 0x40], edi
cmp dword [esi + 0x40], edi
jne 0x412e10
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412e24
push 0x47ba28
push eax
call ebx
mov dword [esi + 0x44], eax
jmp 0x412e27
mov dword [esi + 0x44], edi
cmp dword [esi + 0x44], edi
jne 0x412e2f
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412e43
push str.ConvertSidToStringSidA
push eax
call ebx
mov dword [esi + 0x48], eax
jmp 0x412e46
mov dword [esi + 0x48], edi
cmp dword [esi + 0x48], edi
jne 0x412e4e
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412e62
push str.ConvertStringSidToSidA
push eax
call ebx
mov dword [esi + 0x4c], eax
jmp 0x412e65
mov dword [esi + 0x4c], edi
cmp dword [esi + 0x4c], edi
jne 0x412e6d
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412e81
push str.AllocateAndInitializeSid
push eax
call ebx
mov dword [esi + 0x50], eax
jmp 0x412e84
mov dword [esi + 0x50], edi
cmp dword [esi + 0x50], edi
jne 0x412e8c
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412ea0
push str.CopySid
push eax
call ebx
mov dword [esi + 0x54], eax
jmp 0x412ea3
mov dword [esi + 0x54], edi
cmp dword [esi + 0x54], edi
jne 0x412eab
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412ebf
push str.GetLengthSid
push eax
call ebx
mov dword [esi + 0x58], eax
jmp 0x412ec2
mov dword [esi + 0x58], edi
cmp dword [esi + 0x58], edi
jne 0x412eca
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412ede
push str.IsValidSid
push eax
call ebx
mov dword [esi + 0x5c], eax
jmp 0x412ee1
mov dword [esi + 0x5c], edi
cmp dword [esi + 0x5c], edi
jne 0x412ee9
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412efd
push str.SetEntriesInAclW
push eax
call ebx
mov dword [esi + 0x60], eax
jmp 0x412f00
mov dword [esi + 0x60], edi
cmp dword [esi + 0x60], edi
jne 0x412f08
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412f1c
push str.CryptAcquireContextA
push eax
call ebx
mov dword [esi + 0x64], eax
jmp 0x412f1f
mov dword [esi + 0x64], edi
cmp dword [esi + 0x64], edi
jne 0x412f27
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412f3b
push str.CryptAcquireContextW
push eax
call ebx
mov dword [esi + 0x68], eax
jmp 0x412f3e
mov dword [esi + 0x68], edi
cmp dword [esi + 0x68], edi
jne 0x412f46
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412f5a
push str.CryptCreateHash
push eax
call ebx
mov dword [esi + 0x6c], eax
jmp 0x412f5d
mov dword [esi + 0x6c], edi
cmp dword [esi + 0x6c], edi
jne 0x412f65
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412f79
push str.CryptHashData
push eax
call ebx
mov dword [esi + 0x70], eax
jmp 0x412f7c
mov dword [esi + 0x70], edi
cmp dword [esi + 0x70], edi
jne 0x412f84
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412f98
push str.CryptGetHashParam
push eax
call ebx
mov dword [esi + 0x74], eax
jmp 0x412f9b
mov dword [esi + 0x74], edi
cmp dword [esi + 0x74], edi
jne 0x412fa3
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412fb7
push str.CryptDestroyHash
push eax
call ebx
mov dword [esi + 0x78], eax
jmp 0x412fba
mov dword [esi + 0x78], edi
cmp dword [esi + 0x78], edi
jne 0x412fc2
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412fd6
push str.CryptReleaseContext
push eax
call ebx
mov dword [esi + 0x7c], eax
jmp 0x412fd9
mov dword [esi + 0x7c], edi
cmp dword [esi + 0x7c], edi
jne 0x412fe1
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x412ff8
push str.CredEnumerateA
push eax
call ebx
mov dword [esi + 0x80], eax
jmp 0x412ffe
mov dword [esi + 0x80], edi
cmp dword [esi + 0x80], edi
jne 0x413009
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x413020
push str.CredEnumerateW
push eax
call ebx
mov dword [esi + 0x84], eax
jmp 0x413026
mov dword [esi + 0x84], edi
cmp dword [esi + 0x84], edi
jne 0x413031
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x413048
push str.CredFree
push eax
call ebx
mov dword [esi + 0x88], eax
jmp 0x41304e
mov dword [esi + 0x88], edi
cmp dword [esi + 0x88], edi
jne 0x413059
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x413070
push str.CredDeleteA
push eax
call ebx
mov dword [esi + 0x8c], eax
jmp 0x413076
mov dword [esi + 0x8c], edi
cmp dword [esi + 0x8c], edi
jne 0x413081
mov dword [esi + 0xc], edi
mov eax, dword [esi + 4]
cmp eax, edi
je 0x413098
push str.CredDeleteW
push eax
call ebx
mov dword [esi + 0x90], eax
jmp 0x41309e
mov dword [esi + 0x90], edi
mov eax, dword [esi + 0x90]
pop ebx
cmp eax, edi
jne 0x4130ac
mov dword [esi + 0xc], edi
mov eax, dword [esi + 0xc]
pop edi
pop esi
pop ebp
ret 8