Function at 0x1400b6710
Capabilities:
Execute command
Hide graphical window
Set console window title

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x250
lea rbp, [rsp + 0x20]
mov rax, qword [0x1401a2980]
xor rax, rbp
mov qword [rbp + 0x228], rax
lea rcx, [0x1401b750c]
call fcn.14012b7a0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_AttachConsole]
mov edx, reloc.WS2_32.dll_sendto
mov ecx, 5
call fcn.1400bb440
cdqe
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400bb4e0
mov qword [rbp + 0x220], rax
mov rcx, qword [rbp + 0x220]
call fcn.140004170
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [rbp + 0x1d0]
call fcn.1400032e0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x140185cb8]
lea rdx, str.CONOUT_
lea rcx, [rbp]
call qword [sym.imp.ucrtbased.dll_freopen_s]
mov ecx, 2
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x140185cb8]
lea rdx, str.CONOUT_
lea rcx, [rbp]
call qword [sym.imp.ucrtbased.dll_freopen_s]
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x140185cc8]
lea rdx, str.CONIN_
lea rcx, [rbp]
call qword [sym.imp.ucrtbased.dll_freopen_s]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp + 8], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x18], 0
lea rdx, [rbp + 0x18]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, 0xfffffff0
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongA]
btr eax, 0x10
btr eax, 0x12
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [rbp + 0x1c], eax
mov eax, dword [rbp + 0x1c]
bts eax, 0x13
mov r8d, eax
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov r9d, 2
mov r8b, 0xcc
xor edx, edx
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
mov edx, 1
lea rcx, [0x1400b3ae0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rcx, str.color_0b__mode_con:_cols90_lines26
call qword [sym.imp.ucrtbased.dll_system]
mov dword [rbp + 0x20], 0x54
mov dword [rbp + 0x24], 0
xor eax, eax
mov word [rbp + 0x28], ax
mov eax, recv
mov word [rbp + 0x2a], ax
mov dword [rbp + 0x2c], 0
mov dword [rbp + 0x30], 0x2bc
lea rax, [rbp + 0x34]
lea rcx, str.Cascadia_Code
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_32
rep movsb byte [rdi], byte [rsi]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r8, [rbp + 0x20]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
mov r8d, 0x104
lea rdx, [rbp + 0x80]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x1f8]
call fcn.140002d50
mov qword [rbp + 0x220], rax
mov rdx, qword [rbp + 0x220]
lea rcx, [0x1401a8b28]
call fcn.1400ae570
lea rcx, [rbp + 0x1f8]
call fcn.1400032e0
call fcn.1400bb180
mov rcx, qword [rbp + 0x228]
xor rcx, rbp
call fcn.14012b9e0
lea rsp, [rbp + 0x230]
pop rdi
pop rsi
pop rbp
ret