Function at 0x140122e70
Capabilities:
Execute command

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0xc8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x30], xmm9
movaps xmmword [rbp + 0x20], xmm8
movaps xmmword [rbp + 0x10], xmm7
movaps xmmword [rbp], xmm6
mov qword [rbp - 8], 0xfffffffffffffffe
cmp dword [0x1406f15f0], 0xa
movabs rbx, 0x6f646e6168636546
jl 0x140122ec5
mov eax, dword [0x1406f15f4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140122f77
mov qword [rbp - 0x60], rbx
mov dword [rbp - 0x58], 0xa2e2e2e
mov byte [rbp - 0x54], 0
lea rdi, [rbp - 0x40]
mov rcx, rdi
call fcn.1400abec0
lea rsi, [rbp - 0x60]
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rdi
mov rdx, rsi
mov r8, rax
call fcn.14008d7b0
cmp qword [rbp - 0x28], 0x10
jb 0x140122f05
mov rdi, qword [rbp - 0x40]
mov rcx, rdi
call fcn.14002b9b0
mov r8, qword [rbp - 0x28]
cmp r8, 0x10
jb 0x140122f28
mov rdx, qword [rbp - 0x40]
add r8, 1
lea rcx, [rbp - 0x40]
call fcn.14017a700
movaps xmm0, xmmword [0x1402599c0]
movups xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
cmp dword [0x1406f0a30], 0xa
jl 0x140122f55
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140123020
cmp dword [0x1406f15f0], 0xa
jl 0x140123022
mov eax, dword [0x1406f15f4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140123022
mov qword [rbp - 0x60], rbx
mov dword [rbp - 0x58], 0xa2e2e2e
mov byte [rbp - 0x54], 0
lea rsi, [rbp - 0x40]
mov rcx, rsi
call fcn.1400abec0
lea rdi, [rbp - 0x60]
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.14008d7b0
cmp qword [rbp - 0x28], 0x10
jb 0x140122fb7
mov rsi, qword [rbp - 0x40]
mov rcx, rsi
call fcn.14002b9b0
mov r8, qword [rbp - 0x28]
cmp r8, 0x10
jb 0x140122fda
mov rdx, qword [rbp - 0x40]
add r8, 1
lea rcx, [rbp - 0x40]
call fcn.14017a700
movaps xmm0, xmmword [0x1402599c0]
movups xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
cmp dword [0x1406f0a30], 0xa
jl 0x140122ec5
mov eax, dword [0x1406f0a34]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140122ec5
nop dword [rax + rax]
jmp 0x140123010
jmp 0x140123020
lea rcx, str.taskkill__F__T__IM_Medal.exe__nul_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400c0fa0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x140264edd]
mov dword [rbp - 0x10], eax
movups xmm0, xmmword [0x140264ecd]
movaps xmmword [rbp - 0x20], xmm0
movups xmm0, xmmword [0x140264ebd]
movaps xmmword [rbp - 0x30], xmm0
movups xmm0, xmmword [0x140264ead]
movaps xmmword [rbp - 0x40], xmm0
mov eax, dword [0x1406f15f8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406f15fc], 0xa
setl al
or al, cl
mov ecx, dword [0x1406f1600]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete dl
cmp dword [0x1406f1604], 0xa
setl r8b
or r8b, dl
xor edx, edx
movaps xmm8, xmmword [str.0123456789:____]
movaps xmm9, xmmword [0x140259760]
movaps xmm2, xmmword [str._ABCDEFGHIJKLMNO]
movaps xmm3, xmmword [0x140259780]
movaps xmm4, xmmword [str.PQRSTUVWXYZ___]
movaps xmm5, xmmword [0x140259890]
nop word cs:[rax + rax]
nop
mov r9b, byte [rbp + rdx - 0x40]
nop word cs:[rax + rax]
nop
test al, al
je 0x1401230f0
lea edi, [rdx + 0x30]
mov ebx, r9d
not bl
and bl, dil
mov cl, 0xcf
sub cl, dl
and cl, r9b
or cl, bl
mov byte [rbp + rdx - 0x40], cl
add rdx, 1
cmp rdx, 0x34
jne 0x1401230e0
test r8b, r8b
jne 0x140123170
movaps xmm6, xmmword [rbp - 0x40]
movaps xmm7, xmmword [rbp - 0x30]
movaps xmm0, xmmword [rbp - 0x20]
movaps xmm1, xmm6
andnps xmm1, xmm8
andps xmm6, xmm9
orps xmm6, xmm1
movaps xmmword [rbp - 0x40], xmm6
movaps xmm1, xmm7
andnps xmm1, xmm2
andps xmm7, xmm3
orps xmm7, xmm1
movaps xmmword [rbp - 0x30], xmm7
movaps xmm1, xmm0
andnps xmm1, xmm4
andps xmm0, xmm5
orps xmm0, xmm1
movaps xmmword [rbp - 0x20], xmm0
xor byte [rbp - 0x10], 0x60
xor byte [rbp - 0xf], 0x61
xor byte [rbp - 0xe], 0x62
xor byte [rbp - 0xd], 0x63
xor edx, edx
jmp 0x1401230e0
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.1400b1580
cmp qword [rbp - 0x48], 0x10
mov rcx, rsi
jb 0x14012318a
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rsi
call fcn.1400abbb0
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140123290
int3