Function at 0x140012c10
Capabilities:
Add user account

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x90
mov rdi, qword [sym.imp.libssp_0.dll___stack_chk_guard]
mov r12d, dword [rsp + 0xf0]
mov rbp, qword [rsp + 0xf8]
mov rax, qword [rdi]
mov qword [rsp + 0x88], rax
xor eax, eax
mov rbx, rcx
mov esi, r9d
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
mov rcx, rdx
test r8b, r8b
jne 0x140012e20
mov r9, rbp
lea r8, [rsp + 0x38]
mov rdx, 0xffffffffffffffff
call dbg.qbase64_decode
mov rcx, rax
test rax, rax
je 0x140012dfa
mov rax, qword [rsp + 0x38]
lea r14, [rsp + 0x48]
lea rdx, [rax + 1]
call sym.g_realloc
mov rcx, rbx
xor r9d, r9d
xor r8d, r8d
mov r13, rax
mov rax, qword [rsp + 0x38]
mov edx, 0xffffffff
mov byte [r13 + rax], 0
mov qword [rsp + 0x20], r14
call sym.g_utf8_to_utf16
mov rbx, rax
test rax, rax
je 0x140012efa
cmp word [rax], 0
jne 0x140012ced
mov rcx, rax
call sym.g_free
call dbg.get_builtin_admin_name
mov rbx, rax
test rax, rax
je 0x140012ec8
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, r13
call sym.g_utf8_to_utf16
mov r14, rax
test rax, rax
je 0x140012d9d
test sil, sil
je 0x140012d72
test r12b, r12b
je 0x140012d72
pxor xmm0, xmm0
xor r9d, r9d
xor ecx, ecx
mov edx, 1
lea r8, [rsp + 0x50]
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x64], 1
mov dword [rsp + 0x78], 0x10001
call sym.NetUserAdd
test eax, eax
je 0x140012d9d
cmp eax, 0x8b0
jne 0x140012e98
xor ecx, ecx
lea r9, [rsp + 0x40]
mov r8d, 0x3eb
mov rdx, rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x40], r14
call sym.NetUserSetInfo
test eax, eax
jne 0x140012e50
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140012de2
mov rax, qword [rax + 8]
mov rcx, rbp
lea r9, global___func__.118
mov r8d, 0x83a
lea rdx, str..._qga_commands_win32.c
mov qword [rsp + 0x28], rax
lea rax, str.Guest_agent_command_failed__error_was__s
mov qword [rsp + 0x20], rax
call dbg.error_setg_internal
mov rcx, qword [rsp + 0x48]
call sym.g_error_free
mov rcx, rbx
call sym.g_free
mov rcx, r14
call sym.g_free
mov rcx, r13
call sym.g_free
mov rax, qword [rsp + 0x88]
sub rax, qword [rdi]
jne 0x140012f04
add rsp, 0x90
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
lea rax, str.this_feature_or_command_is_not_currently_supported
mov r8d, 0x7f8
mov rcx, rbp
mov qword [rsp + 0x20], rax
lea r9, global___func__.118
lea rdx, str..._qga_commands_win32.c
call dbg.error_setg_internal
jmp 0x140012dfa
mov ecx, eax
call dbg.get_net_error_message
lea r9, global___func__.118
mov r8d, 0x834
mov qword [rsp + 0x28], rax
mov rsi, rax
lea rax, str.failed_to_set_password:__s
mov qword [rsp + 0x20], rax
mov rcx, rbp
lea rdx, str..._qga_commands_win32.c
call dbg.error_setg_internal
mov rcx, rsi
call sym.g_free
jmp 0x140012d9d
mov ecx, eax
call dbg.get_net_error_message
lea r9, global___func__.118
mov r8d, 0x827
mov qword [rsp + 0x28], rax
mov rsi, rax
lea rax, str.failed_to_add_user:__s
mov qword [rsp + 0x20], rax
jmp 0x140012e78
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, global___func__.118
mov r8d, 0x80c
mov rcx, rbp
mov dword [rsp + 0x28], eax
lea rax, str.failed_to_find_builtin_administrator_name:_win32err_d
lea rdx, str..._qga_commands_win32.c
mov qword [rsp + 0x20], rax
call dbg.error_setg_internal
xor r14d, r14d
xor ebx, ebx
jmp 0x140012d9d
call sym.__stack_chk_fail
nop
nop word [rax + rax]