Function at 0x14013d380
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x450
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x3e0], rax
mov rbx, rcx
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_157]
movabs rax, 0x9f41b00d26e82bc3
lea rcx, [rbp + 0x20]
mov qword [rbp], rax
movabs r14, 0xf3259e614a8c5fad
mov rax, qword [rbp]
movabs rsi, 0x7683bec8ae2de74a
mov qword [rbp + 0x20], rax
movabs rax, 0x7683bec8ae2de726
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x268], rax
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x20], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
movabs rax, 0xc116f20424fe3ac6
mov qword [rbp], rax
movabs rax, 0x7683bec8c2418364
mov rcx, qword [rbp]
mov qword [rbp + 0x30], rcx
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x38], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x270], rcx
lea rcx, [rbp + 0x30]
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x278], rax
xorps xmm0, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x30], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rbx
call fcn.14013fd20
test rdi, rdi
je 0x14013e1cc
movabs rax, 0x8740f93e2fe236da
lea rdx, [rbp + 0x80]
mov qword [rbp], rax
movabs r13, 0x8cd80d3b269ba09f
mov rax, qword [rbp]
movabs r12, 0x1c89944a1d4f33dc
mov qword [rbp + 0x80], rax
mov rcx, rdi
movabs rax, 0x18ecd7bbdc489115
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x300]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
vzeroupper
call fcn.14013c500
test rax, rax
jne 0x14013e1cc
mov rcx, rbx
call fcn.14013fd20
mov rcx, rbx
call fcn.14013fd20
mov rdi, qword gs:[0x60]
mov eax, 0x66666667
mov ecx, dword [0x1401eadf0]
xor r15d, r15d
inc ecx
movabs r9, 0x944ada0929f83efa
imul ecx
mov dword [0x1401eadf0], ecx
movabs r10, 0x29e8ddadc64edd70
sar edx, 1
movabs r11, 0xfebd6a5c53f9c5fb
mov eax, edx
movabs r8, 0x801385cd70da68e
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
movabs rdx, 0xf325fd0838f83ae0
cmp ecx, eax
je 0x14013d863
lea edx, [r15 + 0x48]
mov dword [rbp + 0x1f0], r15d
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_17]
cmp dword [rbp + 0x1f0], 0x48
je 0x14013d82a
movabs rax, 0xf325fd0838f83ae0
movabs rcx, 0x3e8e7c5ee847f670
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rsi
mov qword [rbp + 0x280], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x288], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x29e8ddadc64edd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xfebd6a5c53f9c5fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x75e4f122496f1af4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x2ed6dbb7498d1205
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x69671832b864d2ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x45f3414fc7cbe1da
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
movabs rax, 0x801385cd70da68e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movabs rax, 0x45f3414fc7cb8db3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x320]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xa0], ymm1
mov qword [rbp + 0x358], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0xc0], ymm1
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0xa0]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xdeadc0de
lea rcx, [r15 - 1]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [0x1401eadf0], r15d
movabs rdx, 0xf325fd0838f83ae0
movabs r8, 0x801385cd70da68e
movabs r9, 0x944ada0929f83efa
movabs r10, 0x29e8ddadc64edd70
movabs r11, 0xfebd6a5c53f9c5fb
cmp byte [rdi + 2], r15b
je 0x14013d9eb
mov qword [rbp], rdx
xor ecx, ecx
mov rax, qword [rbp]
lea rdx, [rbp + 0x160]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rsi
mov qword [rbp + 0x290], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x298], rax
xorps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rbp], r9
xor r9d, r9d
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x5ea9f62f6d6f1af4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x29c7d0e55ec31a04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x8013838b26ac1fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r8
lea r8, [rbp + 0x50]
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x180]
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
mov qword [rbp + 0x2e8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqa xmmword [rbp + 0x180], xmm2
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xff
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
rdtsc
mov rcx, qword [rbx]
lea r8, [rbp + 0x1e8]
shl rdx, 0x20
xor r9d, r9d
or rax, rdx
mov qword [rbp + 0x1e8], 1
mov rdi, rax
movabs rax, 0xffffffffff
mov edx, dword [rcx + 0x38]
and rdi, rax
and edi, 0xfff
xor ecx, ecx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rdx
lea edx, [r9 + 0x1e]
call fcn.140142e40
movabs rcx, 0x7bfcf62f596f1af4
movabs rdx, 0x6bd6d7a053cf1c41
movabs r8, 0x6c68702eb27ddfe6
cmp eax, 0xc0000005
je 0x14013dc54
movabs rax, 0xf325fd0838f83ae0
xor r9d, r9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rsi
mov qword [rbp + 0x2a0], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x29e8ddadc64edd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xfebd6a5c53f9c5fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rcx
movabs rcx, 0x3e8e7c5ee847f670
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], rdx
lea rdx, [rbp + 0xe0]
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], r8
lea r8, [rbp + 0x60]
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x45f3414fc7cb8dd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x801385cd70da68e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0x45f3414fc7cb8db3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x360]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xe0], ymm1
mov qword [rbp + 0x398], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x100], ymm1
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xfa6607
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rax, qword [rbx]
lea r8, [rbp + 0x1e8]
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r15
mov ecx, dword [rax + 0x18]
mov qword [rsp + 0x20], rcx
lea edx, [r9 + 0x1e]
xor ecx, ecx
call fcn.140142e40
movabs rdi, 0xf325fd0838f83ae0
cmp eax, 0xc0000005
je 0x14013de93
mov qword [rbp], rdi
movabs rcx, 0x3e8e7c5ee847f670
mov rax, qword [rbp]
xor r9d, r9d
mov qword [rbp + 0x70], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp], rsi
mov qword [rbp + 0x2b0], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x2b8], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x70], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x29e8ddadc64edd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xfebd6a5c53f9c5fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x7bfcf62f596f1af4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0x6bd6d7a053cf1c41
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x6c68702eb27ddfe6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0x45f3414fc7f9add6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x801385cd70da68e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x45f3414fc7cb8db3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0x3a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqu ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x120], ymm1
mov qword [rbp + 0x3d8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x140], ymm1
lea r8, [rbp + 0x70]
xor ecx, ecx
lea rdx, [rbp + 0x120]
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xfa6607
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call fcn.14013fd20
mov rax, qword [rbx]
mov ecx, dword [rax + 0x18]
test ecx, ecx
je 0x14013e064
mov r9d, 8
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
lea r8, [rbp + 0x1e0]
mov qword [rsp + 0x20], rcx
lea edx, [r9 - 1]
lea rcx, [r9 - 9]
call fcn.140142e40
test eax, eax
je 0x14013e1cc
cmp qword [rbp + 0x1e0], r15
je 0x14013e1cc
mov qword [rbp], rdi
lea rdx, [rbp + 0x1a0]
mov rax, qword [rbp]
movabs rcx, 0x801385cd70da68e
mov qword [rbp + 0x10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x208], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x29e8ddadc64edd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xfebd6a5c53f9c5fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x7bfcf62f596f1af4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x4ba2b4b14bc20341
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x1c0]
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
mov qword [rbp + 0x248], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqa xmmword [rbp + 0x1c0], xmm2
jmp 0x14013e1a8
mov qword [rbp + 0x1e0], rdi
lea rdx, [rbp + 0x220]
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x1e0], rsi
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x1e0], r14
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x1e0], rsi
mov rax, qword [rbp + 0x1e0]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x208], rax
movabs rax, 0x9a49ff083ee531e4
xorps xmm0, xmmword [rbp + 0x200]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x220], rax
movabs rax, 0x10a3d0a7c7598630
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x228], rax
movabs rax, 0x8cd80d3b08f7c9fe
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x1e0], r12
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x1e0], r14
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x1e0], rsi
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x208], rax
mov qword [rbp + 0x1e0], r13
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x210], rax
mov qword [rbp + 0x1e0], r12
mov rax, qword [rbp + 0x1e0]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
xor ecx, ecx
lea r8, [rbp + 0x10]
xor r9d, r9d
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xfa6607
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_157]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rbx + 0x28], rax
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_557]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_557]
xor al, al
mov rcx, qword [rbp + 0x3e0]
xor rcx, rsp
call fcn.14014b190
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret