Function at 0x140062b0c
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, qword [rcx + 0x20]
mov r13, rcx
mov rcx, rbx
mov r15d, r9d
mov r12d, r8d
mov rbp, rdx
call fcn.1400ca48c
xor r14d, r14d
test r12d, r12d
je 0x140062ba5
cmp byte [rbx], 2
je 0x140062b91
cmp byte [rbx + 3], r14b
jne 0x140062b91
cmp byte [rbx + 4], r14b
jne 0x140062b91
cmp byte [rbx], 1
jne 0x140062b74
mov rdx, qword [rbx + 0x10]
lea ecx, [r14 + 0x2a]
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x140062b91
mov rax, qword [rbx + 0x18]
cmp rax, qword [rbx + 0x28]
jb 0x140062b8a
mov rcx, rbx
call fcn.1400ca274
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x2a
inc qword [rbx + 0x18]
mov rdx, rbp
mov rcx, rbx
call fcn.1400c9f64
lea rdx, str.___void__0_
jmp 0x140062bbc
test r15d, r15d
je 0x140062bcc
mov rdx, rbp
mov rcx, rbx
call fcn.1400c9f64
lea rdx, [0x140103818]
mov rcx, rbx
call fcn.1400c9f64
mov rcx, rbx
call fcn.1400ca48c
mov ecx, 0x50
call fcn.1400ca61c
mov rdi, rax
test rax, rax
je 0x140062c21
mov qword [rax + 8], r14
mov eax, dword [rax + 0x10]
and eax, 0xfffffffd
mov qword [rdi + 0x18], r14
or eax, 1
mov dword [rdi + 0x20], 0x23
mov dword [rdi + 0x10], eax
lea rax, vtable.expr_proc_call.0
mov qword [rdi], rax
lea rax, str.NdrClientContextUnmarshall
mov qword [rdi + 0x40], rax
mov qword [rdi + 0x28], r14
mov qword [rdi + 0x30], r14
mov qword [rdi + 0x38], r14
mov word [rdi + 0x48], r14w
jmp 0x140062c24
mov rdi, r14
mov ecx, 0x40
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140062c84
mov ecx, 0x40
call fcn.1400ca61c
test rax, rax
je 0x140062c74
and dword [rax + 0x10], 0xfffffffc
lea rcx, vtable.expr_variable.0
mov qword [rax], rcx
lea rcx, str._StubMsg
mov qword [rax + 0x20], rcx
mov qword [rax + 0x18], r14
mov qword [rax + 8], r14
mov qword [rax + 0x28], r14
mov qword [rax + 0x38], r14
mov dword [rax + 0x30], r14d
jmp 0x140062c77
mov rax, r14
mov rdx, rax
mov rcx, rsi
call fcn.1400681b0
jmp 0x140062c87
mov rax, r14
mov rdx, rax
lea rcx, str.PMIDL_STUB_MESSAGE
call fcn.1400c74b8
mov ecx, 0x50
mov r14, rax
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140062cce
xor r9d, r9d
mov r8, r14
mov rcx, rax
lea edx, [r9 + 0x24]
call fcn.1400017b8
and qword [rsi + 0x48], 0
lea rax, vtable.expr_param.0
mov qword [rsi], rax
jmp 0x140062cd0
xor esi, esi
mov rdx, rsi
mov rcx, rdi
call fcn.1400c2d9c
mov r14d, 0x40
mov ecx, r14d
call fcn.1400ca61c
mov rsi, rax
xor eax, eax
test rsi, rsi
je 0x140062d1a
and dword [rsi + 0x10], 0xfffffffc
lea rcx, vtable.expr_variable.0
mov qword [rsi], rcx
mov qword [rsi + 0x18], rax
mov qword [rsi + 0x20], rbp
mov qword [rsi + 8], rax
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x38], rax
mov dword [rsi + 0x30], eax
jmp 0x140062d1d
mov rsi, rax
test r12d, r12d
jne 0x140062d4c
xor r12d, r12d
test r15d, r15d
je 0x140062d4f
mov rcx, r14
call fcn.1400ca61c
test rax, rax
je 0x140062d47
mov rdx, rsi
mov rcx, rax
call fcn.1400681b0
mov rsi, rax
jmp 0x140062d4f
mov rsi, r12
jmp 0x140062d4f
xor r12d, r12d
mov ecx, 0xa8
call fcn.1400ca61c
mov rcx, rax
test rax, rax
je 0x140062de8
and dword [rax + 0x90], 0xfffffffe
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1e
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
lea rax, str.NDR_CCONTEXT
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x50], rax
lea rax, vtable.node_def.0
mov qword [rcx], rax
mov eax, dword [rcx + 0x18]
shr eax, 8
and al, 0xf8
mov qword [rcx + 0x48], r12
mov byte [rcx + 0x19], al
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x70], r12
mov qword [rcx + 0x78], r12
mov qword [rcx + 0x80], r12
mov dword [rcx + 0x68], r12d
mov qword [rcx + 0x88], r12
mov qword [rcx + 0x98], r12
mov dword [rcx + 0xa0], r12d
jmp 0x140062deb
mov rcx, r12
mov rdx, rsi
call fcn.1400c7404
mov ecx, 0x50
mov rbp, rax
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140062e2a
xor r9d, r9d
mov r8, rbp
mov rcx, rax
lea edx, [r9 + 0x24]
call fcn.1400017b8
lea rax, vtable.expr_param.0
mov qword [rsi + 0x48], r12
mov qword [rsi], rax
jmp 0x140062e2d
mov rsi, r12
mov rdx, rsi
mov rcx, rdi
call fcn.1400c2d9c
mov r15, qword [r13 + 0x188]
mov rbp, r12
mov rcx, r15
mov rax, qword [r15]
mov rax, qword [rax + 0x2a8]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x140062ece
mov r14, qword [r13 + 0x58]
or rsi, 0xffffffffffffffff
inc rsi
cmp byte [r14 + rsi], r12b
jne 0x140062e61
add rsi, 0x16
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x140062ea8
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
add dword [0x140134854], esi
mov r8, r14
mov rdx, rsi
mov rcx, rbp
call fcn.1400011d4
lea r8, str.__MIDL_AutoBindHandle
mov rdx, rsi
mov rcx, rbp
call fcn.140001250
mov ecx, 0x50
call fcn.1400ca61c
mov r14, rax
test rax, rax
je 0x140062f5f
mov ecx, 0x40
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140062f3a
mov rdx, qword [r15]
mov rcx, r15
mov rax, qword [rdx + 0x2a8]
call qword [case.0x1400cd70e.0]
lea rcx, str._Handle
mov qword [rsi + 0x18], r12
test eax, eax
mov qword [rsi + 8], r12
lea rax, vtable.expr_variable.0
mov qword [rsi + 0x28], r12
cmovne rcx, rbp
mov qword [rsi], rax
and dword [rsi + 0x10], 0xfffffffc
mov qword [rsi + 0x20], rcx
mov qword [rsi + 0x38], r12
mov dword [rsi + 0x30], r12d
jmp 0x140062f3d
mov rsi, r12
xor r9d, r9d
mov r8, rsi
mov rcx, r14
lea edx, [r9 + 0x24]
call fcn.1400017b8
lea rax, vtable.expr_param.0
mov qword [r14 + 0x48], r12
mov qword [r14], rax
jmp 0x140062f62
mov r14, r12
mov rdx, r14
mov rcx, rdi
call fcn.1400c2d9c
mov rax, qword [rdi]
xor r8d, r8d
xor r9d, r9d
mov rdx, rbx
mov rcx, rdi
mov rax, qword [rax + 0xc8]
call qword [case.0x1400cd70e.0]
mov rcx, rbx
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp fcn.1400ca48c