Function at 0x14008e780
Capabilities:
Execute command

Disassembly:
push rbx
sub rsp, 0x50
lea rcx, str.echo_on__NUL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14008e3d0
test al, al
jne 0x14008e7a8
lea rcx, str.privilege_failed_n
call fcn.1400014e0
lea rdx, str.Growtopia
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400f18f0], rax
lea rcx, str.click_to_growtopia_n
call fcn.1400014e0
mov rax, qword [0x1400f18f0]
test rax, rax
jne 0x14008e7fb
nop word [rax + rax]
lea rdx, str.Growtopia
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400f18f0], rax
test rax, rax
je 0x14008e7e0
lea rdx, [0x1400f18e0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x1400f18e0]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1400f18e8], rax
test rax, rax
jne 0x14008e8b5
nop
lea rdx, [0x1400f18e0]
mov rcx, qword [0x1400f18f0]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [0x1400f18e0]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x1400f18e8], rax
test rax, rax
jne 0x14008e8b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.OpenProcess_failed._Error_code:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140009110
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140033c80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x1400f18e8]
test rax, rax
je 0x14008e830
lea rdx, str.4C_8B_D1_B8_50
lea rcx, [rsp + 0x30]
call fcn.140006f20
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtProtectVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.14008e480
call fcn.14002de90
mov edx, 1
lea rcx, [0x14008e2e0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rdx, str.127.0.0.1_www.growtopia1.com_n127.0.0.1_www.growtopia2.com
lea rcx, [rsp + 0x30]
call fcn.140008ac0
nop
lea rcx, [rsp + 0x30]
call fcn.14002da70
nop
lea rcx, [rsp + 0x30]
call fcn.140008910
call fcn.1400a05c0
lea rax, str.randomstrlol
mov qword [0x1400f22f8], rax
call fcn.1400a03e0
call fcn.1400a0170
lea rdx, [0x1400a05a0]
lea rcx, [rsp + 0x20]
call fcn.14008e9b0
nop
mov rcx, rax
call fcn.14008e2a0
nop
lea rcx, [rsp + 0x20]
call fcn.140017980
lea rdx, [0x14008e630]
lea rcx, [rsp + 0x20]
call fcn.14008e9b0
nop
mov rcx, rax
call fcn.14008e2a0
nop
lea rcx, [rsp + 0x20]
call fcn.140017980
call fcn.14008e5d0
int3