Function at 0x140064950
Capabilities:
Accept command line arguments
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x1400a6010]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov r13, rcx
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x20], 0
xor r12d, r12d
mov qword [rsp + 0x30], r12
call qword [sym.imp.KERNEL32.dll_AllocConsole]
lea ecx, [r12 + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x140099698]
lea rdx, str.CONOUT_
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
cmp qword [rsp + 0x30], r12
jne 0x1400649e3
lea rdx, str.WinMain
lea rcx, str._s:_Failed_to_openCONOUT__n
call fcn.140064ca0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
jmp 0x140064c6d
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x38]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rdi, rax
test rax, rax
jne 0x140064a17
lea rdx, str.WinMain
lea rcx, str._s:_Failed_to_get_command_line_arguments__n
call fcn.140064ca0
jmp 0x140064c6d
mov r15d, 1
mov eax, dword [rsp + 0x38]
cmp eax, r15d
jle 0x140064a8a
mov r14d, 2
lea rsi, [rdi + 8]
add rdi, 0x10
xor ebx, ebx
cmp eax, r14d
jle 0x140064a3e
mov rbx, qword [rdi]
mov r8d, 0x100
lea rdx, [0x140099748]
mov rcx, qword [rsi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncmp]
test eax, eax
jne 0x140064be0
test rbx, rbx
je 0x140064be0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov r12d, eax
add r15d, 2
add r14d, 2
add rsi, 0x10
add rdi, 0x10
mov eax, dword [rsp + 0x38]
cmp r15d, eax
jl 0x140064a34
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
nop
nop dword [rax]
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_AllocConsole]
lea ecx, [rbx + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rax
lea r8, [0x140099698]
lea rdx, str.CONOUT_
lea rcx, [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
cmp qword [rsp + 0x30], rbx
jne 0x140064af5
lea rdx, str.WinMain
lea rcx, str._s:_Failed_To_OpenCONOUT__n
call fcn.140064ca0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
lea eax, [rbx - 1]
jmp 0x140064c72
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov edx, 6
call qword [sym.imp.USER32.dll_ShowWindow]
lea r8, str.Pixel_Gun_3D
lea rdx, str.Pixel_Gun_3D.exe
lea rcx, str.Process_Name:_t__s__nWindow_Name:_t__s__n_nWaiting_For_Target_Process...
call fcn.140015300
lea rdx, [rsp + 0x20]
call fcn.1400141e0
test eax, eax
jne 0x140064c5b
test ebx, ebx
jle 0x140064b55
mov edx, 0x1b58
lea rcx, str._n_nProcess_Found__Waiting_For__dms_For_Windows_To_Initialize...
call fcn.140015300
mov ecx, 0x1b58
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str._n_nStarting_Main_Logic..._n_n_n
call fcn.140015300
mov ecx, 0x668
call fcn.14007678c
mov rbx, rax
mov qword [rsp + 0x28], rax
xor edx, edx
mov r8d, 0x668
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rdx, r13
mov rcx, rbx
call fcn.140064d00
mov rbx, rax
mov rcx, rax
call fcn.140065460
mov edi, eax
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
test rbx, rbx
je 0x140064bc6
mov rcx, rbx
call fcn.140065280
mov edx, 0x668
mov rcx, rbx
call fcn.1400767c8
cmp edi, 0xffffffff
je 0x140064c54
cmp edi, 1
jbe 0x140064c50
test r12d, r12d
jne 0x140064c40
xor eax, eax
jmp 0x140064c72
lea rcx, str._nInvalid_parameters__usage:
call fcn.140064ca0
lea rcx, str._n_n
call fcn.140064ca0
lea r8, str.Whether_The_Hack_Is_Persistent_And_Keeps_Running_Even_If_The_Target_Process_Is_Closed__Waiting_For_It_To_Start_Again__Optional__default_0_
lea rdx, [0x140099748]
lea rcx, str._n_s...__s
call fcn.140064ca0
lea rdx, str._program_name___p_0
lea rcx, str._n_nExample:__s
call fcn.140064ca0
lea rcx, str._n_n_n
call fcn.140064ca0
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140064c6d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140064aa0
xor eax, eax
jmp 0x140064c72
mov eax, 0xffffffff
jmp 0x140064c72
inc ebx
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140064b23
mov eax, 0xffffffff
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140076740
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret