Function at 0x140033550
Capabilities:
Accept command line arguments
Create process on windows
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1402fe080]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor edi, edi
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x80]
lea edx, [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14003366e
mov rcx, qword [rbp - 0x80]
lea rax, [rbp - 0x68]
lea r9d, [rdi + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x70]
lea edx, [rdi + 0x1a]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x1400335be
lea ebx, [rdi + 1]
jmp 0x1400335c4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140033674
cmp dword [rbp - 0x70], edi
jne 0x140033674
lea rcx, [rbp - 0x78]
call fcn.1400331e0
test eax, eax
jne 0x140033674
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rcx, [rbp - 0x60]
xor r9d, r9d
mov qword [rsp + 0x50], rcx
mov r8, rax
lea rcx, [rbp - 0x40]
xor edx, edx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rbp - 0x78]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x14003365c
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140033674
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x1403054e0]
call fcn.140089ca0
call qword [sym.imp.KERNEL32.dll_AllocConsole]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [0x1400f65f8]
mov rcx, rax
lea rdx, str.CONIN_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov ecx, 1
mov rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea r8, [0x1400f6608]
mov rcx, rax
lea rdx, str.CONOUT_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
lea rcx, str.License_Console
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea rdx, str.BIENVENIDO_A_TRUST_CHEAT__INICIANDO_
call fcn.140013440
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_FreeConsole]
test rbx, rbx
je 0x1400337a8
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.1400024e0
cmp byte [0x140303dbc], dil
jne 0x140033804
movabs rdi, 0x7fffffffc46535fe
movabs rbx, 0x7fffffffffffffff
nop word [rax + rax]
lea rcx, [rbp - 0x68]
call fcn.140001e70
mov rax, qword [rbp - 0x68]
cmp rax, rdi
jg 0x1400337ee
add rax, 0x3b9aca00
mov qword [rbp - 0x80], rax
jmp 0x1400337f2
mov qword [rbp - 0x80], rbx
lea rcx, [rbp - 0x80]
call fcn.140004cb0
cmp byte [0x140303dbc], 0
je 0x1400337d0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140033842
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003383d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003383d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df384
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1400df0e0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret