Function at 0x140142680
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x210
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rsi, rcx
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_125]
xor ebx, ebx
lea rcx, [rbp + 0xe0]
mov dword [rbp + 0xe0], ebx
lea edx, [rbx + 0x75]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_17]
cmp dword [rbp + 0xe0], 0x75
movabs rax, 0xf325fd0838f83ae0
movabs rcx, 0xf3259e614a8c5fad
movabs rdx, 0x944ada0929f83efa
movabs rdi, 0x4ba2b4c539ad7361
movabs r13, 0x7683bec8ae2de74a
movabs r8, 0x56aa96a6db5fdd70
movabs r11, 0x801385cd70da68e
movabs r9, 0x8cd80d3b269ba09f
movabs r10, 0x1c89944a1d4f33dc
je 0x1401428b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp], r13
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0xf8], rax
xorps xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp], rdx
lea rdx, [rbp + 0xa0]
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
mov qword [rbp], r8
lea r8, [rbp + 0x10]
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xacb969524bfec8cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x75fdf72f692041ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x4ba2b4c539ad1d0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r9
xor r9d, r9d
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], r11
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0xc0]
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmmword [rbp + 0xc0], xmm2
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xdeadc0de
lea rcx, [rbx - 1]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, 0x64
mov dword [rbp + 0xe4], ebx
lea rcx, [rbp + 0xe4]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_18]
cmp dword [rbp + 0xe4], 0x64
je 0x1401428e5
mov edx, 0xdeadc0de
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movabs r14, 0xb2f4fc0794908cf3
movabs r15, 0x4e94914f0000
movabs r12, 0x431bde82d7b634db
mov rcx, rsi
call fcn.14013fd20
mov rcx, rsi
call fcn.14013cf20
mov rcx, rsi
call fcn.14013e220
mov rcx, rsi
movzx ebx, al
call fcn.14013d380
test bl, bl
movzx edi, al
movabs rbx, 0xf3259e614a8c5fad
je 0x140142ad4
movabs rax, 0xf325fd0838f83ae0
lea r8, [rbp + 0x20]
mov qword [rbp], rax
lea rdx, [rbp + 0x40]
mov rcx, qword [rbp]
xor r9d, r9d
mov qword [rbp + 0x20], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rcx, 0x801385cd70da68e
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp], r13
mov qword [rbp + 0x100], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x56aa96a6db5fdd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xfebd6a5c53f9c5db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x6ffaf129723d43fc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x4bc7c2ac4dce1241
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x8cd80d3b269ba09f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x1c89944a1d4f33dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x4ba2b4c539ad7361
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rcx
xor ecx, ecx
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
mov qword [rbp + 0x188], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmmword [rbp + 0x60], xmm2
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xfa6607
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test dil, dil
je 0x140142c10
movabs rax, 0xf325fd0838f83ae0
lea r8, [rbp + 0x30]
mov qword [rbp], rax
lea rdx, [rbp + 0x40]
mov rax, qword [rbp]
xor r9d, r9d
mov qword [rbp + 0x30], rax
xor ecx, ecx
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp], r13
mov qword [rbp + 0x110], rax
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x30]
mov qword [rbp + 0x118], rax
movabs rax, 0x944ada0929f83efa
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x56aa96a6db5fdd70
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xe9bc2d5c48f2c5dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x1c89f02f7a2846be
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x8cd80d3b269ba09f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x1c89944a1d4f33dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov edx, 0xfe47
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, [rbp + 0x80]
call fcn.140088f90
mov rax, qword [rbp + 0x80]
movabs rcx, 0x7ffffffdabf41bff
cmp rax, rcx
jge 0x140142c41
movabs rdi, 0x2540be400
add rdi, rax
jmp 0x140142c50
movabs rdi, 0x7fffffffffffffff
nop dword [rax + rax]
call sub.MSVCP140.dll__Query_perf_frequency
mov rbx, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp rbx, 0x989680
jne 0x140142c6f
imul rax, rcx, 0x64
jmp 0x140142ce0
cmp rbx, 0x16e3600
jne 0x140142cc2
mov rax, r14
imul rcx
lea r9, [rcx + rdx]
sar r9, 0x18
mov rax, r9
shr rax, 0x3f
add r9, rax
imul rax, r9, 0x16e3600
sub rcx, rax
mov rax, r14
imul r8, rcx, 0x3b9aca00
imul r8
lea rax, [r8 + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r9, 0x3b9aca00
jmp 0x140142cdd
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rax, rdi
jge 0x140142903
mov rcx, rdi
sub rcx, rax
cmp rcx, r15
jl 0x140142d03
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140142c50
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140142d26
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140142c50