Function at 0x14001141a
Capabilities:
Create process on windows
Execute command

Disassembly:
jmp 0x140014fe0
push rbp
push rdi
sub rsp, 0x1d8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x3a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140023040]
xor rax, rbp
mov qword [rbp + 0x198], rax
lea rcx, [0x1400290f3]
call fcn.1400115d2
nop
lea rdx, str.http:__www.google.com
lea rcx, [rbp + 8]
call fcn.140011294
nop
lea rdx, str.https:__www.youtube.com_watch_vdQw4w9WgXcQ
lea rcx, [rbp + 0x48]
call fcn.140011294
nop
lea rdx, str.1_or_2_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
lea rdx, [0x140011046]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rdx, str.Enter_number:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
nop
lea rdx, [rbp + 0x84]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov qword [rbp + 0x168], rax
mov rax, qword [rbp + 0x168]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rbp + 0x168]
add rcx, rax
mov rax, rcx
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x140015173
lea rdx, str.Enter_number:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
nop
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x194], eax
cmp dword [rbp + 0x194], 1
je 0x1400150f6
cmp dword [rbp + 0x194], 2
je 0x140015128
jmp 0x14001515a
lea rcx, [rbp + 8]
call fcn.140011096
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
jmp 0x14001516e
lea rcx, [rbp + 0x48]
call fcn.140011096
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
nop
jmp 0x14001516e
lea rdx, str.Error
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110b4
nop
jmp 0x140015078
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
mov dword [rbp + 0x184], 0
lea rcx, [rbp + 0x48]
call fcn.140011122
nop
lea rcx, [rbp + 8]
call fcn.140011122
mov eax, dword [rbp + 0x184]
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001ee90]
call fcn.1400114f6
mov eax, edi
mov rcx, qword [rbp + 0x198]
xor rcx, rbp
call fcn.1400112e9
lea rsp, [rbp + 0x1a8]
pop rdi
pop rbp
ret