Function at 0x18000a590
Capabilities:
Execute command

Disassembly:
push rsi
push rdi
push r15
sub rsp, 0xd0
mov rax, qword [0x18006f730]
xor rax, rsp
mov qword [rsp + 0xa8], rax
imul esi, edx, 0xb8b
mov r11, r8
mov qword [rsp + 0x48], r9
mov edi, edx
mov qword [rsp + 0x78], r8
mov r15, rcx
mov dword [rsp + 0x40], edx
mov dword [rsp + 0x5c], esi
cmp edx, esi
ja 0x18000abbc
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0xc8], rbp
mov qword [rsp + 0xc0], r12
imul ebp, edi, 0xc5
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0xb0], r14
mov dword [rsp + 0x60], ebp
nop dword [rax + rax]
cmp edi, 0x231f0
ja 0x18000a98e
je 0x18000a975
cmp edi, 0x503c
ja 0x18000a6cd
je 0x18000a6ad
cmp edi, 0x34
je 0x18000a67e
cmp edi, 0xf3
je 0x18000a66f
cmp edi, 0x2838
jne 0x18000ab81
mov rax, qword [rsp + 0x120]
movsxd rax, dword [rax]
mov ecx, dword [rsp + rax*4 + 0x90]
mov eax, dword [rsp + rax*4 + 0x94]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x58], ecx
jmp 0x18000ab81
mov dword [0x18006f840], 0
jmp 0x18000ab81
mov rax, qword [rsp + 0x118]
movdqa xmm0, xmmword [0x180056060]
movups xmmword [rsp + 0x90], xmm0
mov dword [rsp + 0xa0], 0x1e
mov eax, dword [rax + 0xc]
mov dword [rsp + 0x54], eax
jmp 0x18000ab81
mov rax, qword [rsp + 0x118]
mov eax, dword [rax + 0x501c]
cmp dword [rsp + 0x50], eax
cmovle eax, dword [rsp + 0x50]
mov dword [rsp + 0x50], eax
jmp 0x18000ab81
cmp edi, 0x7840
je 0x18000a707
cmp edi, 0xbbf2
je 0x18000a6f8
cmp edi, 0x176f1
jne 0x18000ab81
mov dword [0x18005b018], 1
jmp 0x18000ab81
mov dword [0x18006f8bc], 0
jmp 0x18000ab81
movsxd rax, dword [rsp + 0x58]
movsxd rdx, dword [rsp + 0x50]
movsxd r8, dword [rsp + 0x54]
mov dword [r15], 0
mov qword [rsp + 0x80], r8
cmp rax, rdx
jge 0x18000ab81
mov r10, qword [rsp + 0x110]
sub r9, r10
sub rdx, rax
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x70], rdx
lea rcx, [r10 + rax*4]
mov qword [rsp + 0x68], rcx
test r8, r8
jle 0x18000a94c
mov r12, r11
lea r14, [r9 + rcx]
sub r12, r10
mov rbp, rcx
mov r13, r8
nop dword [rax + rax]
cmp dword [rbp], 0
je 0x18000a90a
mov eax, 0x69
nop
cmp eax, 0x69
je 0x18000a79e
cmp eax, 0x17ca
jne 0x18000a8f4
mov edi, 0x7840
mov dword [rsp + 0x40], edi
jmp 0x18000a8f8
mov ecx, dword [r12 + rbp]
test ecx, ecx
je 0x18000a7c2
sub ecx, 1
je 0x18000a82b
sub ecx, 1
je 0x18000a8a6
cmp ecx, 1
je 0x18000a82b
jmp 0x18000a8ef
mov esi, 0x6b
cmp esi, 0x6b
je 0x18000a7da
cmp esi, 0xff
je 0x18000a8ef
jmp 0x18000a81d
mov dword [rsp + 0x38], 3
mov rbx, r14
mov edi, 3
nop word [rax + rax]
mov eax, dword [rbx]
lea r9, [rsp + 0x30]
shr eax, 3
lea rdx, [rsp + 0x38]
mov r8, r15
mov dword [rsp + 0x30], eax
mov ecx, 0x72
call fcn.18001ced0
lea rbx, [rbx + 0x80]
sub rdi, 1
jne 0x18000a7f0
add esi, 0x94
cmp esi, 0x193
jb 0x18000a7c7
mov ebx, 0x105
mov eax, ebx
sub eax, 0x105
je 0x18000a89b
sub eax, 0xa
je 0x18000a872
cmp eax, 0xa
jne 0x18000a89b
mov eax, dword [r14 + 0x100]
lea r9, [rsp + 0x38]
shr eax, 3
lea rdx, [rsp + 0x30]
mov r8, r15
mov dword [rsp + 0x38], eax
mov ecx, 0x72
mov dword [rsp + 0x30], 3
call fcn.18001ced0
jmp 0x18000a8ef
mov eax, dword [r14]
lea r9, [rsp + 0x38]
shr eax, 3
lea rdx, [rsp + 0x30]
mov r8, r15
mov dword [rsp + 0x38], eax
mov ecx, 0x72
mov dword [rsp + 0x30], 3
call fcn.18001ced0
add ebx, 0xa
cmp ebx, 0x123
jb 0x18000a830
mov ebx, 0x54
nop dword [rax + rax]
cmp ebx, 0x2d48
jne 0x18000a8e1
mov eax, dword [r14]
lea r9, [rsp + 0x38]
shr eax, 3
lea rdx, [rsp + 0x30]
mov r8, r15
mov dword [rsp + 0x38], eax
mov ecx, 0x72
mov dword [rsp + 0x30], 3
call fcn.18001ced0
add ebx, 0x2cf4
cmp ebx, 0x59e8
jbe 0x18000a8b0
mov eax, 0x69
mov edi, dword [rsp + 0x40]
add eax, 0x1761
cmp eax, 0x2ec2
jbe 0x18000a780
jmp 0x18000a90e
mov edi, dword [rsp + 0x40]
sub rbp, 0xffffffffffffff80
add r14, 0x180
sub r13, 1
jne 0x18000a770
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x88]
mov r10, qword [rsp + 0x110]
mov r11, qword [rsp + 0x78]
jmp 0x18000a950
mov edi, dword [rsp + 0x40]
add rcx, 4
sub rdx, 1
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rdx
jne 0x18000a752
mov esi, dword [rsp + 0x5c]
mov ebp, dword [rsp + 0x60]
jmp 0x18000ab7c
xor edx, edx
lea rcx, [0x18006f8d0]
mov r8d, 0x480
call sub.VCRUNTIME140.dll_memset
jmp 0x18000ab7c
cmp edi, 0x51dec
ja 0x18000aa2d
je 0x18000aa04
cmp edi, 0x2ecef
je 0x18000a9f2
cmp edi, 0x3a7ee
je 0x18000a9e1
cmp edi, 0x462ed
jne 0x18000ab81
mov rcx, qword [0x18006f8a8]
mov edx, 0xf
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov r9d, 0xf4
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180024980
jmp 0x18000ab7c
mov edx, 0xe7
xor ecx, ecx
call fcn.180024770
jmp 0x18000ab7c
lea rcx, [0x1800535e8]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x18000ab7c
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv dword [0x18005b014]
mov dword [0x18006f89c], edx
jmp 0x18000ab7c
cmp edi, 0x5d8eb
je 0x18000ab40
cmp edi, 0x693ea
je 0x18000ab23
cmp edi, 0x74ee9
jne 0x18000ab81
cmp dword [0x18006f840], 0
jne 0x18000ab81
nop
mov ebx, 0xb2
cmp ebx, 0x8a5e
ja 0x18000aad8
je 0x18000aab0
cmp ebx, 0xb2
je 0x18000aaa2
cmp ebx, 0x2e96
je 0x18000aaca
cmp ebx, 0x5c7a
jne 0x18000ab02
mov ecx, dword [0x18005b008]
call qword [sym.imp.KERNEL32.dll_Sleep]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 0x40]
call fcn.180015370
jmp 0x18000ab02
xor edx, edx
mov ecx, 0xda
call fcn.180014d70
jmp 0x18000ab02
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x4d]
call fcn.180008a40
xor edx, edx
mov ecx, 0xf3
call fcn.180035700
jmp 0x18000ab02
cmp ebx, 0xb842
je 0x18000aaf6
cmp ebx, 0xe626
jne 0x18000ab02
mov edx, 0x3d
xor ecx, ecx
call fcn.180011290
jmp 0x18000ab02
mov ecx, dword [0x18005b00c]
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, 0x2de4
cmp ebx, 0x11358
jbe 0x18000aa65
cmp dword [0x18006f840], 0
je 0x18000aa60
jmp 0x18000ab7c
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
mov ecx, 0xda
call fcn.18000abe0
jmp 0x18000ab7c
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
xor r9d, r9d
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 7
lea edx, [r9 + 0xe]
sub r8d, ecx
xor ecx, ecx
mov dword [0x18006f84c], r8d
xor r8d, r8d
call fcn.180039e30
mov r9, qword [rsp + 0x48]
mov r11, qword [rsp + 0x78]
add edi, ebp
mov dword [rsp + 0x40], edi
cmp edi, esi
jbe 0x18000a610
mov r14, qword [rsp + 0xb0]
mov r13, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc0]
mov rbp, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.18003c900
add rsp, 0xd0
pop r15
pop rdi
pop rsi
ret