Function at 0x1400501b0
Capabilities:
Create thread
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x140064010]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edi, edi
lea rcx, str.Johanna.cc_made_by_Pirolo
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
call fcn.140041700
test al, al
je 0x140050240
lea rcx, [0x140059e88]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.sorry_you_are_using_a_too_old_version_of_Johanna.cc_please_update__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140050fd0
lea rdx, [0x1400511a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp - 0x50], 5
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x28]
call fcn.1400417b0
mov rcx, rax
call fcn.1400511e0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140040770
test al, al
jne 0x140050252
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, str.if_you_paid_for_this_you_got_scammed
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140050fd0
lea rdx, [0x1400511a0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140041700
test al, al
jne 0x14005034c
mov rbx, qword [0x14006c490]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
mov r8d, 0x71
lea rdx, str.48_8B_0D_____________8B_C5_48_C1_E8____48_8B_54_C1____48_85_D2_74____8B_C5_25_____________48_6B_C0____48_03_D0_74
lea rcx, [rbp - 0x48]
call fcn.140051390
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400414a0
mov rbx, qword [0x14006c490]
sub rax, rbx
mov qword [0x140067340], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
mov r8d, 0x2c
lea rdx, str.48_8B_0D_____________48_85_C9_74_65_83_FF_FF
lea rcx, [rbp - 0x48]
call fcn.140051390
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400414a0
mov rbx, qword [0x14006c490]
sub rax, rbx
mov qword [0x140067348], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
mov r8d, 0x20
lea rdx, str.48_8D_0D_____________48_C1_E0_06
lea rcx, [rbp - 0x48]
call fcn.140051390
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400414a0
sub rax, qword [0x14006c490]
mov qword [0x140067350], rax
lea rdx, str.deadlock
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
mov ecx, 0x10
call fcn.1400521ec
mov qword [rax], rbx
lea rcx, [0x14004faf0]
mov qword [rax + 8], rcx
mov qword [rbp - 0x28], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140051a10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400503f3
nop dword [rax]
nop dword [rax + rax]
lea rdx, str.deadlock
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
test rax, rax
jne 0x1400503b0
cmp dword [rbp - 0x18], eax
je 0x1400503d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor eax, eax
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140051a50
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
mov dword [rbp - 0x18], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3