Function at 0x140004d90
Capabilities:
Impersonate user

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov r14, rcx
xor sil, sil
xor ebx, ebx
mov qword [rbp + 0x48], rbx
lea r9, [rbp + 0x48]
xor r8d, r8d
lea rdx, [0x140009200]
xor ecx, ecx
call sub.NETAPI32.dll_NetUserGetInfo
test eax, eax
jne 0x140004ec9
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9d, [rbx + 2]
lea r8, str.FKGJ__dflj3t9u_.dmfg94
lea rdx, [0x140008f34]
lea rcx, [0x140009200]
call qword [sym.imp.ADVAPI32.dll_LogonUserW]
test eax, eax
je 0x140004e1c
mov sil, 1
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x48]
call sub.NETAPI32.dll_NetApiBufferFree
movzx eax, sil
add rsp, 0x60
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r9d, 0xffffffff
xor r8d, r8d
lea rdx, str.The__1_user_exists__but_the_password_is_incorrect
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QObject::tr_char_const____ptr64__char_const____ptr64__int_]
mov rdi, rax
mov dl, 0x20
lea rcx, [rbp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ebx, word [rax]
mov edx, 3
lea rcx, [0x1400090dc]
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call qword [sym.imp.cpncfg.dll_class_QString___cdecl_CfgTransform::applicationName_class_QString_]
nop
mov word [rsp + 0x20], bx
xor r9d, r9d
mov r8, rax
lea rdx, [rbp - 0x28]
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x28]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
mov rcx, qword [rbp + 0x48]
call sub.NETAPI32.dll_NetApiBufferFree
movzx eax, sil
add rsp, 0x60
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r9d, 0xffffffff
xor r8d, r8d
lea rcx, [rbp - 0x28]
cmp eax, 0x8ad
jne 0x140004f61
lea rdx, str.The__1_user_has_not_been_created
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QObject::tr_char_const____ptr64__char_const____ptr64__int_]
mov rdi, rax
mov dl, 0x20
lea rcx, [rbp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ebx, word [rax]
mov edx, 3
lea rcx, [0x1400090dc]
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call qword [sym.imp.cpncfg.dll_class_QString___cdecl_CfgTransform::applicationName_class_QString_]
nop
mov word [rsp + 0x20], bx
xor r9d, r9d
mov r8, rax
lea rdx, [rbp - 0x18]
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
jmp 0x140004fdf
lea rdx, str.An_error_occurred_while_checking_for_the_existence_of_the__1_user
call qword [sym.imp.Qt5Core.dll_public:_static_class_QString___cdecl_QObject::tr_char_const____ptr64__char_const____ptr64__int_]
mov rdi, rax
mov dl, 0x20
lea rcx, [rbp + 0x38]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QChar::constructor_struct_QLatin1Char____ptr64]
movzx ebx, word [rax]
mov edx, 3
lea rcx, [0x1400090dc]
call qword [sym.imp.Qt5Core.dll_private:_static_struct_QTypedArrayData_unsigned_short_int_____ptr64___cdecl_QString::fromAscii_helper_char_const____ptr64__int_]
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x20]
call qword [sym.imp.cpncfg.dll_class_QString___cdecl_CfgTransform::applicationName_class_QString_]
nop
mov word [rsp + 0x20], bx
xor r9d, r9d
mov r8, rax
lea rdx, [rbp - 0x18]
mov rcx, rdi
call qword [sym.imp.Qt5Core.dll_public:_class_QString___cdecl_QString::arg_class_QString_const____ptr64__int__class_QChar____ptr64]
mov rdx, rax
mov rcx, r14
call qword [sym.imp.Qt5Core.dll_public:_class_QString____ptr64___cdecl_QString::operator_class_QString____ptr64____ptr64]
lea rcx, [rbp - 0x18]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x20]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.Qt5Core.dll_public:_void___cdecl_QString::destructor_void____ptr64]
movzx eax, sil
add rsp, 0x60
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret