Function at 0x1400786d0
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm8
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1401dedc0]
xor rax, rsp
mov qword [rbp + 0x238], rax
mov rsi, rcx
mov qword [rbp + 0x18], rcx
xor edi, edi
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_218]
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov qword [rbp + 0x130], rdi
mov r15, qword [rsi + 0x48]
movdqu xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], rdi
mov rbx, qword [r15 + 0x160]
sub rbx, qword [r15 + 0x158]
sar rbx, 2
mov r14d, edi
test rbx, rbx
je 0x140078801
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x140079091
lea rbx, [rbx*4]
cmp rbx, 0x1000
jb 0x1400787b4
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140079097
call fcn.14014ac08
test rax, rax
je 0x140078f07
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400787c4
test rbx, rbx
je 0x1400787c4
mov rcx, rbx
call fcn.14014ac08
mov rdi, rax
mov qword [rbp + 0x138], rdi
lea rax, [rdi + rbx]
mov qword [rbp + 0x148], rax
mov rbx, qword [r15 + 0x160]
mov rdx, qword [r15 + 0x158]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea r14, [rdi + rbx*4]
mov qword [rbp + 0x140], r14
movabs rcx, 0xed14fbb32c791c45
movabs rbx, 0x488c07660355dcb8
movabs r12, 0xd5b7b6e3cc2b0f5f
movabs r13, 0xfe4330b5c77fdf85
movabs r15, 0xdf349ed8450b6816
cmp rdi, r14
je 0x140078a65
movabs rdx, 0x980efbb32c791c45
movabs rsi, 0xd33155c1a90ab0c6
movabs r8, 0xd5b7b6e3cc2b0f10
nop word [rax + rax]
cmp dword [rdi], 1
jne 0x140078955
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x90], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x98], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rax, [rbp + 0x80]
mov qword [rbp + 8], rax
mov rdx, qword [rbp + 0x128]
cmp rdx, qword [rbp + 0x130]
je 0x14007892e
lea rax, [rbp + 0x80]
mov qword [rdx], rax
add rdx, 8
mov qword [rbp + 0x128], rdx
vzeroupper
jmp 0x14007894b
lea r8, [rbp + 8]
lea rcx, [rbp + 0x120]
vzeroupper
call fcn.140077990
movabs r8, 0xd5b7b6e3cc2b0f10
movabs rdx, 0x980efbb32c791c45
cmp dword [rdi], 2
jne 0x140078a36
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x10], r8
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x10], rax
mov rdx, qword [rbp + 0x128]
cmp rdx, qword [rbp + 0x130]
je 0x140078a23
lea rax, [rbp + 0xa0]
mov qword [rdx], rax
add rdx, 8
mov qword [rbp + 0x128], rdx
vzeroupper
jmp 0x140078a36
lea r8, [rbp + 0x10]
lea rcx, [rbp + 0x120]
vzeroupper
call fcn.140077990
add rdi, 4
cmp rdi, r14
movabs rcx, 0xed14fbb32c791c45
movabs rdx, 0x980efbb32c791c45
movabs r8, 0xd5b7b6e3cc2b0f10
jne 0x140078860
mov rsi, qword [rbp + 0x18]
lea rcx, [rbp + 0x170]
call fcn.1400b1aa0
movabs rax, 0x9b2e51dbb51aacf0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x30], xmm0
movss xmm6, dword [rbp + 0x174]
mulss xmm6, dword [0x1401608e4]
movss xmm8, dword [0x1401608f8]
movss dword [rsp + 0x20], xmm8
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x100]
call fcn.140097960
addss xmm6, dword [0x1401608ec]
movaps xmm0, xmm6
call fcn.1400c36b0
lea rcx, [rbp + 0x108]
call fcn.1400b1aa0
movss xmm6, dword [rax]
mov ecx, dword [0x1401eae68]
mov rax, qword gs:[0x58]
mov edx, 0x18
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1401e429c], ecx
jg 0x140078f95
subss xmm6, dword [0x1401e4298]
mulss xmm6, dword [0x1401608e4]
subss xmm6, dword [0x1401608f0]
movaps xmm0, xmm6
call fcn.1400c3660
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_618]
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_151]
mov r9, qword [rbp + 0x128]
mov r8, qword [rbp + 0x120]
sub r9, r8
sar r9, 3
mov dword [rsp + 0x20], 0xffffffff
lea rdx, [0x1401e422c]
lea rcx, [0x14015b4b4]
call fcn.1401302f0
movabs rbx, 0xfe4330b5b316a7c0
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x118]
call fcn.1400af070
movss xmm6, dword [rax]
movss dword [rsp + 0x20], xmm8
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x60]
call fcn.140097960
subss xmm6, dword [rax]
mulss xmm6, dword [0x1401608e4]
subss xmm6, dword [0x1401608f0]
movaps xmm0, xmm6
call fcn.1400c3660
mov dword [rbp + 0x20], 0x42c80000
mov dword [rbp + 0x24], 0x42480000
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.140122d70
test al, al
je 0x140078ca4
mov ecx, 0xffffffff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
cmp dword [0x1401e422c], 0
jl 0x140078ebd
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.1400c23c0
mov dword [rbp + 0x18], 0x42c80000
mov dword [rbp + 0x1c], 0x42480000
movabs rax, 0xfe4330b5a31eb0c9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0xc0]
call fcn.140122d70
test al, al
je 0x140078e8a
mov r8d, dword [0x1401e422c]
add r8d, 1
mov rax, qword [rsi + 0x48]
mov dword [rax + 0x150], r8d
lea r9, [rbp + reloc.SecureEngineSDK64.dll_Ordinal_565]
jns 0x140078da0
neg r8d
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140078d62
dec r9
mov byte [r9], 0x2d
jmp 0x140078dca
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140078da0
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x160], xmm1
lea rax, [rbp + reloc.SecureEngineSDK64.dll_Ordinal_565]
cmp r9, rax
jne 0x140078e04
movdqa xmm0, xmmword [0x14015a970]
movdqu xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], 0
jmp 0x140078e1e
lea r8, [rbp + reloc.SecureEngineSDK64.dll_Ordinal_565]
sub r8, r9
mov rdx, r9
lea rcx, [rbp + 0x150]
call fcn.14000b470
nop
mov rbx, qword [rsi + 0x48]
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xc0]
call fcn.14001f070
mov r8, rax
mov edx, 4
mov rcx, rbx
call fcn.1400700f0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x140078e8a
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078e85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078e85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
mov rcx, qword [rsi + 0x48]
call fcn.14005e9e0
test al, al
je 0x140078ea0
mov rcx, qword [rsi + 0x48]
call fcn.14006d320
mov rcx, qword [rsi + 0x48]
call fcn.14005ea10
test al, al
je 0x140078ebd
mov dword [rsi + 0x40], 4
mov rcx, qword [rsi + 0x48]
call fcn.1400520c0
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_551]
nop
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x140078f14
mov rax, qword [rbp + 0x148]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078f0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078f0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
nop
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x140078f5b
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078f56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140078f56
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14014ac44
mov rcx, qword [rbp + 0x238]
xor rcx, rsp
call fcn.14014b190
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x1401e429c]
call fcn.14014ab0c
cmp dword [0x1401e429c], 0xffffffff
jne 0x140078b3f
movabs rax, 0xd33155c1a90ab0c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0xed14fbb32c791c45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovss dword [rsp + 0x20], xmm8
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x110]
vzeroupper
call fcn.140097960
movss xmm1, dword [rax]
movss dword [0x1401e4298], xmm1
lea rcx, [0x1401e429c]
call fcn.14014aaa0
jmp 0x140078b3f
call fcn.14003e880
int3
call fcn.1400034d0
int3