Function at 0x14001142e
Capabilities:
Execute command

Disassembly:
jmp 0x140012190
mov dword [rsp + 8], ecx
push rbp
push rsi
push rdi
sub rsp, 0x3e0
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x8c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov ecx, dword [rsp + 0x408]
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x3a8], rax
lea rcx, [0x1400240a6]
call fcn.1400113c5
mov dword [rbp + 0x114], 0
mov eax, dword [rbp + 0x3d0]
mov dword [rbp + 0x3a4], eax
cmp dword [rbp + 0x3a4], 1
je 0x14001220b
cmp dword [rbp + 0x3a4], 2
je 0x140012221
cmp dword [rbp + 0x3a4], 3
je 0x140012237
jmp 0x14001224d
mov dword [rbp + 0x134], 1
mov dword [rbp + 0x154], 9
jmp 0x14001225e
mov dword [rbp + 0x134], 2
mov dword [rbp + 0x154], 8
jmp 0x14001225e
mov dword [rbp + 0x134], 3
mov dword [rbp + 0x154], 7
jmp 0x14001225e
lea rcx, [0x14001b018]
call fcn.1400111c7
jmp 0x14001247b
mov r9d, dword [rbp + 0x154]
mov r8d, dword [rbp + 0x134]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 8]
call fcn.1400110eb
call qword [sym.imp.ucrtbased.dll_rand]
cdq
mov ecx, 0x30
idiv ecx
mov eax, edx
inc eax
mov dword [rbp + 0xd8], eax
call qword [sym.imp.ucrtbased.dll_rand]
cdq
mov ecx, 0x17
idiv ecx
mov eax, edx
inc eax
mov dword [rbp + 0xdc], eax
lea rcx, [0x14001ac10]
call qword [sym.imp.ucrtbased.dll_system]
call fcn.140011087
lea rcx, [rbp + 0x178]
call fcn.140012750
mov dword [rbp + 0x1b4], 0x3c
cmp dword [rbp + 0x114], 0
jne 0x140012443
cmp dword [rbp + 0x1b4], 0
jle 0x140012443
mov eax, dword [rbp + 0x154]
mov ecx, dword [rbp + 0x134]
add ecx, eax
mov eax, ecx
lea rcx, [rbp + 0x360]
lea rdx, [rbp + 8]
mov rdi, rcx
mov rsi, rdx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov ecx, dword [rbp + 0x1b4]
mov dword [rsp + 0x20], ecx
mov r9d, eax
mov r8, qword [rbp + 0xd8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x360]
call fcn.140011055
call qword [sym.imp.ucrtbased.dll__kbhit]
test eax, eax
je 0x1400123a4
call qword [sym.imp.ucrtbased.dll__getch]
mov dword [rbp + 0xf4], eax
cmp dword [rbp + 0xf4], 0xe0
jne 0x140012396
call qword [sym.imp.ucrtbased.dll__getch]
mov dword [rbp + 0xf4], eax
mov edx, dword [rbp + 0xf4]
lea rcx, [rbp + 8]
call fcn.140011352
mov eax, dword [rbp + 0x154]
mov ecx, dword [rbp + 0x134]
add ecx, eax
mov eax, ecx
mov r8d, eax
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 8]
call fcn.140011370
jmp 0x1400123a4
cmp dword [rbp + 0xf4], 0x1b
jne 0x1400123a4
jmp 0x14001247b
lea rax, [rbp + 0x390]
lea rcx, [rbp + 8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
mov rdx, qword [rbp + 0xd8]
lea rcx, [rbp + 0x390]
call fcn.14001139d
test eax, eax
je 0x14001240d
cmp dword [rbp + 0x10], 0x4e20
jl 0x140012403
lea rcx, [0x14001b050]
call fcn.1400111c7
lea rcx, [0x14001b088]
call fcn.1400111c7
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001247b
mov dword [rbp + 0x114], 1
lea rcx, [rbp + 0x198]
call fcn.140012750
mov rax, qword [rbp + 0x178]
mov rcx, qword [rbp + 0x198]
sub rcx, rax
mov rax, rcx
mov ecx, 0x3c
sub rcx, rax
mov rax, rcx
mov dword [rbp + 0x1b4], eax
jmp 0x1400122d1
cmp dword [rbp + 0x1b4], 0
jg 0x140012462
lea rcx, [0x14001b0a8]
call fcn.1400111c7
mov dword [rbp + 0x114], 1
cmp dword [rbp + 0x114], 0
je 0x14001247b
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14001143d
lea rcx, [rbp - 0x30]
lea rdx, [0x14001aeb0]
call fcn.14001134d
mov rcx, qword [rbp + 0x3a8]
xor rcx, rbp
call fcn.1400111e0
lea rsp, [rbp + 0x3b0]
pop rdi
pop rsi
pop rbp
ret