Function at 0x140013b30
Capabilities:
Create thread
Execute command
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140023040]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rdi, rdx
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rsi - 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, eax
btr ebx, 0x12
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r8d, ebx
lea edx, [rsi - 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rsi - 0x10]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov ebx, eax
btr ebx, 0x10
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov r8d, ebx
lea edx, [rsi - 0x10]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea rdx, [0x1400263b0]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov ebx, dword [0x1400263b0]
and ebx, 0xffffff9f
mov dword [0x1400263b0], ebx
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140013050]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x60], rax
test rax, rax
je 0x14001428a
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140013620]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14001427b
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140013960]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14001426c
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x1400139f0]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14001425d
lea ecx, [rsi + 0x10]
call fcn.1400176d0
lea rbx, [0x1400263a0]
mov qword [rax], rbx
lea rcx, [0x14000e010]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x20], rax
test rax, rax
je 0x14001424e
lea ecx, [rsi + 0x10]
call fcn.1400176d0
mov qword [rax], rbx
lea rcx, [0x14000dd70]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14001423f
lea ecx, [rsi + 0x10]
call fcn.1400176d0
mov qword [rax], rbx
lea rcx, [0x14000e2b0]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp], rax
test rax, rax
je 0x140014230
lea ecx, [rsi + 0x10]
call fcn.1400176d0
mov qword [rax], rbx
lea rcx, [0x14000e4f0]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140014221
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140013a70]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x20], rax
test rax, rax
je 0x140014212
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140013ad0]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x30], rax
test rax, rax
je 0x140014203
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x14000f850]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x40], rax
test rax, rax
je 0x1400141f4
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x140011350]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400141e5
lea ecx, [rsi + 0x10]
call fcn.1400176d0
lea rcx, [0x140026488]
mov qword [rax], rcx
lea rcx, [0x14000e730]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x58]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x60], rax
test rax, rax
je 0x1400141d6
lea ecx, [rsi + 0x10]
call fcn.1400176d0
lea rcx, [0x140026470]
mov qword [rax], rcx
lea rcx, [0x14000e9d0]
mov qword [rax + 8], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400141c7
lea ecx, [rsi + 8]
call fcn.1400176d0
lea rcx, [0x14000eb90]
mov qword [rax], rcx
mov qword [rsp + 0x78], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140016a20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x1400141b8
lea rcx, [0x14001bc68]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov rax, qword [0x1400252e8]
cmp rax, 5
jb 0x140014082
lea rbx, [0x1400252d0]
cmp rax, 0xf
cmova rbx, qword [0x1400252d0]
mov qword [0x1400252e0], 5
lea r8d, [rsi + 5]
lea rdx, str.0.9.3
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 5], sil
jmp 0x14001409a
lea r9, str.0.9.3
mov edx, 5
lea rcx, [0x1400252d0]
call fcn.140015d80
mov rax, qword [rdi]
mov qword [0x140026230], rax
lea rcx, str.color_2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x78], rax
mov rdx, qword [0x140026230]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400140e3
lea rcx, [rsp + 0x30]
call fcn.140006130
nop
lea rdx, [0x1400252d0]
lea rcx, [rsp + 0x58]
call fcn.140003520
nop
mov r8d, ebx
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.140006350
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
lea rdi, str.sutrix
nop word [rax + rax]
lea rdx, [0x14000d770]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_signal]
mov rdx, rdi
cmp qword [0x1400253c8], 0xf
cmova rdx, qword [str.sutrix]
mov r8, qword [0x1400253c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140016280
mov rcx, rax
lea rdx, [0x14001bc80]
call fcn.140003a60
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
mov rcx, rbx
call fcn.140016610
call fcn.14000d7b0
call fcn.14000d960
jmp 0x140014140
mov dword [rbp - 0x78], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x68], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x58], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x48], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x38], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x28], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 0x18], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp - 8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 8], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x18], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x28], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x38], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x68], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3