Function at 0x4be480
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4be54b
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rbx, qword [0x00617840]
mov rcx, qword [0x00617848]
xor eax, eax
lea rdi, [0x004e5bc9]
mov esi, 8
call sym.runtime.concatstring2
mov ecx, 0x242
mov edi, 0x1b6
nop dword [rax]
call sym.os.OpenFile
test rbx, rbx
jne 0x4be502
mov qword [rsp + 0x28], rax
mov rbx, qword [str._::03938c58_ded9_4e95_b879_cb81e3e77c93_r_n_set_masver2.7_r_n_setlocal_DisableDelayedExpansion_r_n_echo_off_r_n_r_n_r_n::__Set_environment_variables__it_helps_if_they_are_misconfigured_in_the_system_r_n_r_nsetlocal_EnableExtensions_r_nsetlocal_DisableDelayedExpansion_r_n_r_nset__PathExt.COM_.EXE_.BAT_.CMD_.VBS_.VBE_.JS_.JSE_.WSF_.WSH_.MSC__r_n_r_nset__SysPath_SystemRoot_System32__r_nset__Path_SystemRoot_System32__SystemRoot___SystemRoot_System32Wbem__SystemRoot_System32WindowsPowerShell_v1.0__r_nif_exist___SystemRoot_Sysnative_reg.exe____r_nset__SysPath_SystemRoot_Sysnative__r_nset__Path_SystemRoot_Sysnative__SystemRoot___SystemRoot_SysnativeWbem__SystemRoot_SysnativeWindowsPowerShell_v1.0__Path___r_n__r_n_r_nset__ComSpec_SysPath_cmd.exe__r_nset__PSModulePath_ProgramFiles_WindowsPowerShellModules__SysPath_WindowsPowerShell_v1.0Modules__r_n_r_nset___cmdf_f0__r_nfor____in_____do___r_nif__i______r1__set_r11_r_nif__i______r2__set_r21_r_n__r_n_r_n::_Re_launch_the_script_with_x64_process_if_it_was_initiated_by_x86_process_on_x64_bit_Windows_r_n::_or_with_ARM64_process_if_it_was_initiated_by_x86_ARM32_process_on_ARM64_Windows_r_n_r_nif_exist__SystemRoot_Sysnativecmd.exe_if_not_defined_r1___r_nsetlocal_EnableDelayedExpansion_r_nstart__SystemRoot_Sysnativecmd.exe__c_____cmdf_____r1__r_nexit__b_r_n__r_n_r_n::_Re_launch_the_script_with_ARM32_process_if_it_was_initiated_by_x64_process_on_ARM64_Windows_r_n_r_nif_exist__SystemRoot_SysArm32cmd.exe_if__PROCESSOR_ARCHITECTURE_AMD64_if_not_defined_r2___r_nsetlocal_EnableDelayedExpansion_r_nstart__SystemRoot_SysArm32cmd.exe__c_____cmdf_____r2__r_nexit__b_r_n__r_n_r_n::_r_n_r_nset__blank__r_nset__masht_blank_tps_blank_:__mass_blank_grave.dev___r_n_r_n::__Check_if_Null_service_is_working__its_important_for_the_batch_script_r_n_r_nsc_query_Null__find__i__RUNNING__r_nif__errorlevel__NEQ_0___r_necho:_r_necho_Null_service_is_not_running__script_may_crash..._r_necho:_r_necho:_r_necho_Help____mas_troubleshoot_r_necho:_r_necho:_r_nping_127.0.0.1__n_20_r_n__r_ncls_r_n_r_n::__Check_LF_line_ending_r_n_r_npushd___dp0__r_n_nul_findstr__v_______nx0_____r_necho:_r_necho_Error___Script_either_has_LF_line_ending_issue_or_an_empty_line_at_the_end_of_the_script_is_missing._r_necho:_r_necho:_r_necho_Help____mas_troubleshoot_r_necho:_r_necho:_r_nping_127.0.0.1__n_20__nul_r_npopd_r_nexit__b_r_n__r_npopd_r_n_r_n::_r_n_r_ncls_r_ncolor_07_r_ntitle__Windows_Slammer____Bello_r_n_r_nset__args_r_nset__elev_r_nset__unattended0_r_n_r_nset__args__r_nif_defined__args_set__args__args:___r_nif_defined__args___r_nfor___A_in____args___do___r_nif__i____A___el_____________________set__elev1_r_n__r_n__r_n_r_nif_defined__args_echo____args____find__i______nul__set__unattended1_r_n_r_n::_r_n_r_nset__nul11_nul__r_nset__nul22_nul__r_nset__nul62_nul__r_nset__nul_nul_2_1__r_n_r_ncall_:dk_setvar_r_n_r_nif__winbuild__LSS_7600___r_n_nceline__r_necho_Unsupported_OS_version_detected___winbuild__._r_necho_Project_is_supported_only_for_Windows_7_8_8.1_10_11_and_their_Server_equivalents._r_ngoto_dk_done_r_n__r_n_r_n::_r_n_r_n::__Fix_special_character_limitations_in_path_name_r_n_r_nset___work_dp0__r_nif____work:_1_____set___work__work:0__1___r_n_r_nset___batf_f0__r_nset___batp__batf:___r_n_r_nset__PSarg____f0_____el___args__r_nset__PSarg__PSarg:__r_n_r_nset___ttemp_userprofile_AppDataLocalTemp__r_n_r_nsetlocal_EnableDelayedExpansion_r_n_r_n::]
mov rcx, qword [0x006100a8]
mov rdi, qword [0x006100b0]
call sym.os._File_.Write
nop
mov rdx, qword [rsp + 0x28]
test rdx, rdx
je 0x4be4fc
mov rax, qword [rdx]
call sym.os._file_.close
add rsp, 0x40
pop rbp
ret
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x004c9360]
mov qword [rsp + 0x30], rdx
lea rdx, [0x0050fd48]
mov qword [rsp + 0x38], rdx
mov rbx, qword [0x006175e8]
lea rax, [0x00510388]
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
nop dword [rax + rax]
call sym.fmt.Fprintln
add rsp, 0x40
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.main.extractToTemp