Function at 0x180001e90
Capabilities:
Set console window title

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push r12
sub rsp, 0x3f0
mov rax, qword [0x180015228]
xor rax, rsp
mov qword [rsp + 0x3e0], rax
lea rcx, [rsp + 0x90]
xor r12d, r12d
xor edx, edx
mov r8d, 0x11c
mov ebx, r12d
call fcn.180003920
mov rax, qword [str.ntdll.dll]
lea r11, [rsp + 0x1b0]
mov qword [r11], rax
movzx eax, word [0x180011ee8]
lea edx, [r12 + 0xd]
lea rcx, [0x180015010]
mov dword [rsp + 0x90], 0x11c
mov word [r11 + 8], ax
call section..text
lea rcx, [rsp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [0x180015010]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x18000218f
lea rax, [rsp + 0x70]
lea rcx, [rsp + 0x7c]
xor r9d, r9d
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
xor r8d, r8d
mov dl, 1
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x400], rbp
mov dword [rsp + 0x20], r12d
mov qword [rsp + 0x408], rdi
mov byte [rsp + 0x7c], bl
mov byte [rsp + 0x7d], bl
mov byte [rsp + 0x7e], bl
mov byte [rsp + 0x7f], bl
mov byte [rsp + 0x80], bl
mov byte [rsp + 0x81], 1
mov qword [rsp + 0x70], r12
mov dword [rsp + 0x60], r12d
mov qword [rsp + 0x68], r12
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
lea ebp, [r12 + 1]
test eax, eax
je 0x180002033
lea r8, [rsp + 0x68]
lea edx, [rbp + 7]
or rcx, 0xffffffffffffffff
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x180002033
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov edx, ebp
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov r11d, dword [rsp + 0x60]
cmp r11d, 0x400
ja 0x180002033
lea ecx, [rbp + 0x3f]
mov rdx, r11
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
je 0x180002033
mov r9d, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
lea rax, [rsp + 0x78]
mov r8, rdi
mov edx, ebp
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x180002043
call qword [sym.imp.ADVAPI32.dll_FreeSid]
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x180002053
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x90]
call rsi
test eax, eax
jne 0x180002151
mov eax, dword [rsp + 0x94]
cmp eax, 6
jb 0x1800020ee
lea rcx, [rsp + 0x2d0]
mov edx, 0x104
call qword [sym.imp.KERNEL32.dll_GetConsoleTitleA]
test eax, eax
je 0x1800020cf
lea r9, [rsp + 0x2d0]
lea r8, [0x180011ed8]
lea rcx, [rsp + 0x1c0]
mov edx, 0x104
call fcn.1800018e0
lea rcx, [rsp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
test eax, eax
jne 0x1800020cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.SetConsoleTitle_failed___d__n
mov edx, eax
call fcn.180003134
mov eax, dword [0x18001674c]
mov ebx, ebp
cmp dword [rsp + 0x98], ebx
cmova eax, ebp
mov dword [0x18001674c], eax
mov eax, dword [rsp + 0x94]
cmp eax, 6
jbe 0x180002151
lea rcx, str.menu
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
movzx edi, ax
test ax, ax
je 0x18000213e
movzx r8d, ax
mov rdx, rbp
mov ecx, 0x3e6
call sub.USER32.dll_PackDDElParam
xor r8d, r8d
mov edx, 0x3e6
mov r9, rax
mov ecx, 0xffff
call qword [sym.imp.USER32.dll_PostMessageA]
test eax, eax
jne 0x180002145
movzx ecx, di
call qword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
jmp 0x180002145
mov dword [0x180016b90], r12d
mov dword [0x18001674c], ebp
mov dword [0x180016854], ebp
mov rbp, qword [rsp + 0x400]
mov rdi, qword [rsp + 0x408]
mov dword [0x180016858], ebx
mov eax, ebx
mov rcx, qword [rsp + 0x3e0]
xor rcx, rsp
call fcn.180002dd0
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret
mov dword [0x180016858], ebx
mov eax, ebx
jmp 0x180002169