Function at 0x1400112c6
Capabilities:
Execute command
Terminate process

Disassembly:
jmp 0x140012a00
push rbp
push rdi
sub rsp, 0x478
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xb6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x448], rax
lea rcx, [0x1400250a7]
call fcn.1400113d4
lea rdx, str.ko_KR
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_setlocale]
mov dword [rbp + 4], 1
call fcn.140011348
xor eax, eax
cmp eax, 1
je 0x140012bc5
call qword [sym.imp.ucrtbased.dll__getch]
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0xe0
jne 0x140012ac7
call qword [sym.imp.ucrtbased.dll__getch]
mov dword [rbp + 0x24], eax
mov eax, dword [rbp + 0x24]
mov dword [rbp + 0x444], eax
cmp dword [rbp + 0x444], 0x48
je 0x140012ab2
cmp dword [rbp + 0x444], 0x50
je 0x140012a9b
jmp 0x140012ac7
mov eax, dword [rbp + 4]
inc eax
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 5
jle 0x140012ab0
mov dword [rbp + 4], 5
jmp 0x140012ac7
mov eax, dword [rbp + 4]
dec eax
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 1
jge 0x140012ac7
mov dword [rbp + 4], 1
mov eax, dword [rbp + 4]
mov dword [rbp + 0x444], eax
cmp dword [rbp + 0x444], 1
je 0x140012aff
cmp dword [rbp + 0x444], 2
je 0x140012b06
cmp dword [rbp + 0x444], 3
je 0x140012b0d
cmp dword [rbp + 0x444], 4
je 0x140012b14
cmp dword [rbp + 0x444], 5
je 0x140012b1b
jmp 0x140012b22
call fcn.140011348
jmp 0x140012b2e
call fcn.14001119a
jmp 0x140012b2e
call fcn.140011104
jmp 0x140012b2e
call fcn.14001115e
jmp 0x140012b2e
call fcn.140011208
jmp 0x140012b2e
lea rcx, [0x14001bfa8]
call fcn.1400111cc
cmp dword [rbp + 0x24], 0xd
jne 0x140012bc0
mov eax, dword [rbp + 4]
mov dword [rbp + 0x444], eax
cmp dword [rbp + 0x444], 1
je 0x140012b70
cmp dword [rbp + 0x444], 2
je 0x140012b7e
cmp dword [rbp + 0x444], 3
je 0x140012b8c
cmp dword [rbp + 0x444], 4
je 0x140012b9a
cmp dword [rbp + 0x444], 5
je 0x140012ba8
jmp 0x140012bb0
lea rcx, [0x14001bfc0]
call fcn.1400111cc
jmp 0x140012bbc
lea rcx, [0x14001bfd0]
call fcn.1400111cc
jmp 0x140012bbc
lea rcx, [0x14001bfe0]
call fcn.1400111cc
jmp 0x140012bbc
lea rcx, [0x14001bff0]
call fcn.1400111cc
jmp 0x140012bbc
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_exit]
lea rcx, [0x14001c000]
call fcn.1400111cc
jmp 0x140012bc5
jmp 0x140012a58
mov dword [rbp + 0x164], 0
mov dword [rbp + 0x1a4], 0
mov dword [rbp + 0x1c4], 0
mov dword [rbp + 0x224], 0
xor ecx, ecx
call fcn.1400133c0
mov ecx, eax
call qword [sym.imp.ucrtbased.dll_srand]
lea rcx, [rbp + 0x50]
call fcn.14001138e
lea rcx, [rbp + 0xe0]
call fcn.14001118b
xor eax, eax
cmp eax, 1
je 0x14001301b
lea rcx, [0x14001c014]
call qword [sym.imp.ucrtbased.dll_system]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.1400111fe
lea rcx, [0x14001c018]
call fcn.1400111cc
mov r8d, dword [rbp + 0x1a4]
mov edx, dword [rbp + 0x1c4]
lea rcx, [0x14001c050]
call fcn.1400111cc
lea rcx, [0x14001c080]
call fcn.1400111cc
mov ecx, 1
call fcn.1400112a8
lea rdx, [rbp + 0x184]
lea rcx, [0x14001c0ac]
call fcn.140011244
movsxd rax, dword [rbp + 0x224]
mov ecx, dword [rbp + 0x184]
mov dword [rbp + rax*4 + 0x250], ecx
mov eax, dword [rbp + 0x224]
inc eax
mov dword [rbp + 0x224], eax
mov dword [rbp + 0x1e4], 0
jmp 0x140012cc3
mov eax, dword [rbp + 0x1e4]
inc eax
mov dword [rbp + 0x1e4], eax
cmp dword [rbp + 0x1e4], 1
jge 0x140012d47
call qword [sym.imp.ucrtbased.dll_rand]
cdq
mov ecx, 0x19
idiv ecx
mov eax, edx
inc eax
movsxd rcx, dword [rbp + 0x224]
mov dword [rbp + rcx*4 + 0x250], eax
mov dword [rbp + 0x204], 0
jmp 0x140012d06
mov eax, dword [rbp + 0x204]
inc eax
mov dword [rbp + 0x204], eax
mov eax, dword [rbp + 0x224]
cmp dword [rbp + 0x204], eax
jge 0x140012d42
movsxd rax, dword [rbp + 0x224]
movsxd rcx, dword [rbp + 0x204]
mov ecx, dword [rbp + rcx*4 + 0x250]
cmp dword [rbp + rax*4 + 0x250], ecx
jne 0x140012d40
mov eax, dword [rbp + 0x1e4]
dec eax
mov dword [rbp + 0x1e4], eax
jmp 0x140012cf8
jmp 0x140012cb5
movsxd rax, dword [rbp + 0x224]
mov edx, dword [rbp + rax*4 + 0x250]
lea rcx, [0x14001c0b0]
call fcn.1400111cc
mov eax, dword [rbp + 0x164]
mov dword [rbp + 0x444], eax
cmp dword [rbp + 0x444], 1
je 0x140012d7b
jmp 0x140012e0f
mov r8d, dword [rbp + 0x184]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.140011078
lea rcx, [rbp + 0x50]
call fcn.14001142e
mov dword [rbp + 0x1c4], eax
lea rcx, [rbp + 0xe0]
call fcn.14001142e
mov dword [rbp + 0x1a4], eax
cmp dword [rbp + 0x1c4], 5
jge 0x140012dc5
cmp dword [rbp + 0x1a4], 5
jl 0x140012dca
jmp 0x140012e9b
movsxd rax, dword [rbp + 0x224]
mov r8d, dword [rbp + rax*4 + 0x250]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xe0]
call fcn.140011078
lea rcx, [rbp + 0x50]
call fcn.14001142e
mov dword [rbp + 0x1c4], eax
lea rcx, [rbp + 0xe0]
call fcn.14001142e
mov dword [rbp + 0x1a4], eax
jmp 0x140012e9b
mov r8d, dword [rbp + 0x184]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.140011078
lea rcx, [rbp + 0xe0]
call fcn.14001142e
mov dword [rbp + 0x1a4], eax
lea rcx, [rbp + 0x50]
call fcn.14001142e
mov dword [rbp + 0x1c4], eax
cmp dword [rbp + 0x1c4], 5
jge 0x140012e59
cmp dword [rbp + 0x1a4], 5
jl 0x140012e5b
jmp 0x140012e9b
movsxd rax, dword [rbp + 0x224]
mov r8d, dword [rbp + rax*4 + 0x250]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xe0]
call fcn.140011078
lea rcx, [rbp + 0xe0]
call fcn.14001142e
mov dword [rbp + 0x1a4], eax
lea rcx, [rbp + 0x50]
call fcn.14001142e
mov dword [rbp + 0x1c4], eax
cmp dword [rbp + 0x1c4], 5
jl 0x140012f3a
lea rcx, [0x14001c014]
call qword [sym.imp.ucrtbased.dll_system]
mov edx, dword [rbp + 0x1c4]
lea rcx, str.USER
call fcn.1400111cc
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.1400111fe
mov edx, dword [rbp + 0x1a4]
lea rcx, str.COM
call fcn.1400111cc
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.1400111fe
lea rcx, [0x14001c120]
call fcn.1400111cc
lea rcx, [0x14001c140]
call fcn.1400111cc
lea rcx, [0x14001c168]
call fcn.1400111cc
xor ecx, ecx
call fcn.1400112a8
call qword [sym.imp.ucrtbased.dll__getch]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
jmp 0x140012fef
cmp dword [rbp + 0x1a4], 5
jl 0x140012fca
lea rcx, [0x14001c014]
call qword [sym.imp.ucrtbased.dll_system]
lea rcx, str.USER_n
call fcn.1400111cc
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.1400111fe
lea rcx, str.COM_n
call fcn.1400111cc
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x50]
call fcn.1400111fe
lea rcx, [0x14001c198]
call fcn.1400111cc
lea rcx, [0x14001c1c8]
call fcn.1400111cc
lea rcx, [0x14001c168]
call fcn.1400111cc
xor ecx, ecx
call fcn.1400112a8
call qword [sym.imp.ucrtbased.dll__getch]
mov ecx, 1
call qword [sym.imp.ucrtbased.dll_exit]
jmp 0x140012fef
lea rcx, [0x14001c018]
call fcn.1400111cc
mov r8d, dword [rbp + 0x1a4]
mov edx, dword [rbp + 0x1c4]
lea rcx, [0x14001c050]
call fcn.1400111cc
mov eax, dword [rbp + 0x224]
inc eax
mov dword [rbp + 0x224], eax
lea rcx, [0x14001c1f0]
call fcn.1400111cc
xor ecx, ecx
call fcn.1400112a8
call qword [sym.imp.ucrtbased.dll__getch]
jmp 0x140012c11
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14001bf50]
call fcn.14001136b
mov rax, rdi
mov rcx, qword [rbp + 0x448]
xor rcx, rbp
call fcn.1400111e5
lea rsp, [rbp + 0x458]
pop rdi
pop rbp
ret