Function at 0x1400bf80e
Capabilities:
Lock the desktop

Disassembly:
jmp 0x1400e3d80
push rbp
push rdi
sub rsp, 0x298
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x6e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140297058]
xor rax, rbp
mov qword [rbp + 0x260], rax
lea rcx, [0x1402b30f3]
call fcn.1400c1438
mov qword [rbp + 0x48], 0
lea r9, [rbp + 0x28]
xor r8d, r8d
xor edx, edx
mov ecx, 2
call fcn.1400be4fe
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x1400e3e18
lea rdx, str.SCardEstablishContext_failed:
lea rcx, [0x140299cb0]
call fcn.1400bc929
mov edx, dword [rbp + 4]
mov rcx, rax
call fcn.1400beb5c
lea rdx, [0x1400bc34d]
mov rcx, rax
call fcn.1400beae4
mov eax, 1
jmp 0x1400e410c
lea r9, [rbp + 0x64]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x28]
call fcn.1400bcc35
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x1400e3e73
lea rdx, str.SCardListReaders_failed:
lea rcx, [0x140299cb0]
call fcn.1400bc929
mov edx, dword [rbp + 4]
mov rcx, rax
call fcn.1400beb5c
lea rdx, [0x1400bc34d]
mov rcx, rax
call fcn.1400beae4
mov rcx, qword [rbp + 0x28]
call fcn.1400c01aa
mov eax, 1
jmp 0x1400e410c
mov eax, dword [rbp + 0x64]
mov qword [rbp + 0x258], rax
mov eax, 2
mov rcx, qword [rbp + 0x258]
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400bf1bf
mov qword [rbp + 0x48], rax
lea r9, [rbp + 0x64]
mov r8, qword [rbp + 0x48]
xor edx, edx
mov rcx, qword [rbp + 0x28]
call fcn.1400bcc35
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x1400e3f08
lea rdx, str.SCardListReaders_failed:
lea rcx, [0x140299cb0]
call fcn.1400bc929
mov edx, dword [rbp + 4]
mov rcx, rax
call fcn.1400beb5c
lea rdx, [0x1400bc34d]
mov rcx, rax
call fcn.1400beae4
mov rcx, qword [rbp + 0x28]
call fcn.1400c01aa
mov rcx, qword [rbp + 0x48]
call fcn.1400bddd8
mov eax, 1
jmp 0x1400e410c
lea rax, str.Crayonic_KeyVault_0
mov qword [rbp + 0xc8], rax
mov byte [rbp + 0xe4], 0
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x108], rax
mov rax, qword [rbp + 0x108]
movzx eax, word [rax]
test eax, eax
je 0x1400e3f77
mov rdx, qword [rbp + 0xc8]
mov rcx, qword [rbp + 0x108]
call fcn.1400be922
test eax, eax
jne 0x1400e3f56
mov byte [rbp + 0xe4], 1
jmp 0x1400e3f77
mov rcx, qword [rbp + 0x108]
call fcn.1400bc591
mov rcx, qword [rbp + 0x108]
lea rax, [rcx + rax*2 + 2]
mov qword [rbp + 0x108], rax
jmp 0x1400e3f28
movzx eax, byte [rbp + 0xe4]
test eax, eax
jne 0x1400e3fde
lea rdx, str.Reader_
lea rcx, [0x140299fa0]
call fcn.1400beb2a
mov rdx, qword [rbp + 0xc8]
mov rcx, rax
call fcn.1400beb2a
lea rdx, str._not_found.
mov rcx, rax
call fcn.1400beb2a
lea rdx, [0x1400be8be]
mov rcx, rax
call fcn.1400c022c
mov rcx, qword [rbp + 0x28]
call fcn.1400c01aa
mov rcx, qword [rbp + 0x48]
call fcn.1400bddd8
mov eax, 1
jmp 0x1400e410c
mov rax, qword [rbp + 0x108]
mov qword [rbp + 0x130], rax
lea rdx, str.Waiting_for_card_removal_from_reader:
lea rcx, [0x140299e30]
call fcn.1400beb2a
mov rdx, qword [rbp + 0x108]
mov rcx, rax
call fcn.1400beb2a
lea rdx, [0x1400be8be]
mov rcx, rax
call fcn.1400c022c
mov byte [rbp + 0x184], 0
xor eax, eax
cmp eax, 1
je 0x1400e40f8
mov r9d, 1
lea r8, [rbp + 0x130]
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x28]
call fcn.1400c0376
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0
je 0x1400e4088
lea rdx, str.SCardGetStatusChange_failed:
lea rcx, [0x140299fa0]
call fcn.1400beb2a
mov edx, dword [rbp + 4]
mov rcx, rax
call fcn.1400bd3e2
lea rdx, [0x1400be8be]
mov rcx, rax
call fcn.1400c022c
call qword [sym.imp.USER32.dll_LockWorkStation]
jmp 0x1400e40f8
mov eax, dword [rbp + 0x140]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
and eax, 0x10
test eax, eax
je 0x1400e40ec
movzx eax, byte [rbp + 0x184]
test eax, eax
jne 0x1400e40ea
lea rdx, str.Card_removed_from_reader:
lea rcx, [0x140299e30]
call fcn.1400beb2a
mov rdx, qword [rbp + 0x108]
mov rcx, rax
call fcn.1400beb2a
lea rdx, [0x1400be8be]
mov rcx, rax
call fcn.1400c022c
call qword [sym.imp.USER32.dll_LockWorkStation]
mov byte [rbp + 0x184], 1
jmp 0x1400e40f3
mov byte [rbp + 0x184], 0
jmp 0x1400e4024
mov rcx, qword [rbp + 0x28]
call fcn.1400c01aa
mov rcx, qword [rbp + 0x48]
call fcn.1400bddd8
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14024a070]
call fcn.1400c059c
mov rax, rdi
mov rcx, qword [rbp + 0x260]
xor rcx, rbp
call fcn.1400be882
lea rsp, [rbp + 0x278]
pop rdi
pop rbp
ret