Function at 0x4ad0b204
Capabilities:
Manipulate console buffer
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r13
push r15
sub rsp, 0x70
mov r12d, ecx
mov ecx, edx
mov rbx, r9
mov esi, r8d
mov r13d, edx
call fcn.4ad05f80
test eax, eax
jne 0x4ad0b8e1
mov edi, dword [rsp + 0x30]
xor ebp, ebp
and dword [rsp + 0x30], 0
lea rdx, [0x4ad29774]
mov r9, rbx
mov r8d, esi
mov ecx, r12d
call fcn.4ad0b2f8
lea rsi, [0x4ad46340]
mov r12d, eax
mov ebx, eax
test eax, eax
je 0x4ad1d6e9
mov r15d, 0xa0
test rbp, rbp
jne 0x4ad0b916
lea r8d, [rbx + rbx]
lea r9, [rsp + 0x38]
mov rdx, rsi
mov ecx, r13d
call fcn.4ad07694
test eax, eax
je 0x4ad1d6d7
mov eax, dword [rsp + 0x38]
mov ecx, ebx
add rcx, rcx
cmp rax, rcx
jne 0x4ad1d6d7
xor r11d, r11d
mov dword [rsp + 0x30], r11d
sub r12d, ebx
mov eax, ebx
lea rsi, [rsi + rax*2]
jne 0x4ad0ba26
test r11d, r11d
jne 0x4ad1d6f3
mov eax, r11d
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
ret
mov ecx, r13d
call qword [sym.imp.msvcrt.dll__get_osfhandle]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
je 0x4ad0b23c
movsx eax, word [rsp + 0x4c]
movsx edi, word [rsp + 0x50]
sub edi, eax
dec edi
jmp 0x4ad0b242
cmp byte [0x4ad3c2e0], 0
jne 0x4ad1d578
mov ebx, r12d
cmp r12d, r15d
cmova ebx, r15d
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x30]
mov r8d, ebx
mov rdx, rsi
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
jne 0x4ad0b2ad
jmp 0x4ad1d6b9
jmp 0x4ad0b276
mov ecx, dword [0x4ad4b380]
cmp ecx, edi
jb 0x4ad1d681
and dword [0x4ad4b380], 0
lea rdx, [rsp + 0x40]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
je 0x4ad1d67b
mov r8d, dword [0x4ad4b374]
mov rdx, qword [0x4ad4b378]
and qword [rsp + 0x20], 0
lea r9, [rsp + 0x30]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
test eax, eax
je 0x4ad1d67b
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
lea rdx, [rsp + 0x34]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
xor edx, edx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
call qword [sym.imp.msvcrt.dll__getch]
mov edx, dword [rsp + 0x34]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
lea rdx, [rsp + 0x58]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx ecx, word [rsp + 0x58]
movsx eax, word [rsp + 0x5c]
movsx r8d, word [rsp + 0x5e]
movsx edx, word [rsp + 0x40]
mov r9d, dword [rsp + 0x44]
imul r8d, ecx
movsx ecx, word [rsp + 0x46]
imul edx, ecx
mov rcx, rbp
sub r8d, edx
mov edx, 0x20
add r8d, eax
movsx eax, r9w
add r8d, eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterW]
mov edx, dword [rsp + 0x44]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
cmp bx, 3
je 0x4ad1d6cb
mov ecx, dword [0x4ad4b380]
mov eax, r12d
mov rbx, rsi
lea rdx, [rsi + rax*2]
cmp rsi, rdx
jae 0x4ad1d6ae
cmp ecx, edi
jae 0x4ad1d6a8
movzx eax, word [rbx]
add rbx, 2
cmp ax, 0xa
jne 0x4ad1d6a3
inc ecx
cmp rbx, rdx
jb 0x4ad1d690
mov dword [0x4ad4b380], ecx
sub rbx, rsi
sar rbx, 1
jmp 0x4ad0b92d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r11d, eax
mov dword [rsp + 0x30], eax
jmp 0x4ad0b2b5
call fcn.4ad23210
xor eax, eax
jmp 0x4ad0b2d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r11d, eax
mov dword [rsp + 0x30], eax
jmp 0x4ad0b2c4
mov r11d, dword [rsp + 0x30]
jmp 0x4ad0b2c4
cmp r13d, 2
jne 0x4ad0b2cd
xor ecx, ecx
call fcn.4ad078f4
test eax, eax
je 0x4ad1d6fd
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
int3