Function at 0x1400a4be0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [rcx + 0x278]
mov rsi, rcx
mov rcx, qword [rcx + 0x20]
movzx ebp, word [rax + 0x48]
call fcn.1400ca48c
mov rcx, qword [rsi + 0x20]
lea rdx, str.static_const_USER_MARSHAL_ROUTINE_QUADRUPLE
call fcn.1400c9f64
mov rax, qword [0x140134380]
lea rcx, [0x14010b2c0]
xor edi, edi
lea rdx, [0x14010b280]
cmp dword [rax + 0x78], edi
cmove rdx, rcx
mov rcx, qword [rsi + 0x20]
call fcn.1400c9f64
mov rcx, qword [rsi + 0x20]
movzx eax, word [rcx + 0x32]
add word [rcx + 0x30], ax
mov rcx, qword [rsi + 0x20]
movzx eax, word [rcx + 0x32]
add word [rcx + 0x30], ax
mov rcx, qword [rsi + 0x20]
call fcn.1400ca48c
mov rbx, qword [rsi + 0x20]
cmp byte [rbx], 2
je 0x1400a4cb7
cmp byte [rbx + 3], dil
jne 0x1400a4cb7
cmp byte [rbx + 4], dil
jne 0x1400a4cb7
cmp byte [rbx], 1
jne 0x1400a4c9a
mov rdx, qword [rbx + 0x10]
lea ecx, [rdi + 0x7b]
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x1400a4cb7
mov rax, qword [rbx + 0x18]
cmp rax, qword [rbx + 0x28]
jb 0x1400a4cb0
mov rcx, rbx
call fcn.1400ca274
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x7b
inc qword [rbx + 0x18]
mov rcx, qword [rsi + 0x20]
movzx eax, word [rcx + 0x32]
add word [rcx + 0x30], ax
mov rcx, qword [rsi + 0x20]
call fcn.1400ca48c
mov eax, 8
mov qword [rsp + 0x70], rbp
mul rbp
mov r12, rbp
mov rbx, rax
mov rax, 0xffffffffffffffff
cmovo rbx, rax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r13, rax
test rax, rax
je 0x1400a503f
add dword [0x140134854], ebx
lea rdx, [rsp + 0x20]
mov rcx, qword [rsi + 0x278]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rdi
call fcn.1400acab0
mov rcx, qword [rsp + 0x28]
mov edx, edi
test rcx, rcx
je 0x1400a4d58
mov r8, qword [rcx + 8]
mov rcx, qword [rcx]
mov qword [rsp + 0x28], rcx
movzx eax, word [r8 + 0x10]
cmp eax, ebp
jae 0x1400a507b
mov qword [r13 + rax*8], r8
inc edx
jmp 0x1400a4d31
cmp edx, ebp
jne 0x1400a5062
mov rbx, qword [rsi + 0x20]
test ebp, ebp
je 0x1400a4f9e
mov r14, rdi
lea rbp, [0x140000000]
mov r15, qword [r13 + r14*8]
test r14, r14
je 0x1400a4dca
cmp byte [rbx], 2
je 0x1400a4dca
cmp byte [rbx + 3], dil
jne 0x1400a4dca
cmp byte [rbx + 4], dil
jne 0x1400a4dca
cmp byte [rbx], 1
jne 0x1400a4dad
mov rdx, qword [rbx + 0x10]
mov ecx, 0x2c
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x1400a4dca
mov rax, qword [rbx + 0x18]
cmp rax, qword [rbx + 0x28]
jb 0x1400a4dc3
mov rcx, rbx
call fcn.1400ca274
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x2c
inc qword [rbx + 0x18]
mov rcx, rbx
call fcn.1400ca48c
cmp byte [rbx], 2
je 0x1400a4e1c
cmp byte [rbx + 3], dil
jne 0x1400a4e1c
cmp byte [rbx + 4], dil
jne 0x1400a4e1c
cmp byte [rbx], 1
jne 0x1400a4dff
mov rdx, qword [rbx + 0x10]
mov ecx, 0x7b
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x1400a4e1c
mov rax, qword [rbx + 0x18]
cmp rax, qword [rbx + 0x28]
jb 0x1400a4e15
mov rcx, rbx
call fcn.1400ca274
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x7b
inc qword [rbx + 0x18]
mov rcx, rbx
call fcn.1400ca48c
mov rsi, rdi
test rsi, rsi
je 0x1400a4e76
cmp byte [rbx], 2
je 0x1400a4e76
cmp byte [rbx + 3], dil
jne 0x1400a4e76
cmp byte [rbx + 4], dil
jne 0x1400a4e76
cmp byte [rbx], 1
jne 0x1400a4e59
mov rdx, qword [rbx + 0x10]
mov ecx, 0x2c
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x1400a4e76
mov rax, qword [rbx + 0x18]
cmp rax, qword [rbx + 0x28]
jb 0x1400a4e6f
mov rcx, rbx
call fcn.1400ca274
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x2c
inc qword [rbx + 0x18]
mov rdx, qword [r15]
mov rcx, rbx
call fcn.1400c9f64
mov rax, qword [0x140134380]
cmp dword [rax + 0x78], edi
je 0x1400a4e97
mov rdx, qword [rbp + rsi*8 + 0xef1b0]
jmp 0x1400a4e9f
mov rdx, qword [rbp + rsi*8 + 0xef190]
mov rcx, rbx
call fcn.1400c9f64
mov rcx, rbx
call fcn.1400ca48c
inc rsi
cmp rsi, 4
jl 0x1400a4e27
cmp byte [rbx], 2
je 0x1400a4f92
cmp byte [rbx + 3], dil
jne 0x1400a4f92
cmp byte [rbx + 4], dil
jne 0x1400a4f92
cmp byte [rbx], 1
jne 0x1400a4ef8
mov rdx, qword [rbx + 0x10]
mov ecx, 0x7d
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x1400a4f92
mov rax, qword [rbx + 0x28]
cmp qword [rbx + 0x18], rax
jb 0x1400a4f87
cmp byte [rbx], dil
jne 0x1400a4f87
movsxd r15, dword [rbx + 0x10]
mov ebp, dword [rbx + 0x14]
mov rsi, qword [rbx + 0x20]
add ebp, r15d
movsxd r12, ebp
mov rcx, r12
mov dword [rbx + 0x10], ebp
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x1400a503f
add dword [0x140134854], ebp
lea rcx, [r12 + rax]
mov qword [rbx + 0x28], rcx
mov r8, r15
mov rcx, rax
mov qword [rbx + 0x20], rax
mov rdx, rsi
call sub.msvcrt.dll_memcpy
cmp byte [rbx], dil
jne 0x1400a4f67
mov rdx, qword [rbx + 0x20]
add rdx, r15
mov qword [rbx + 0x18], rdx
test rsi, rsi
je 0x1400a4f7b
mov rcx, rsi
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov r12, qword [rsp + 0x70]
lea rbp, [0x140000000]
mov rax, qword [rbx + 0x18]
mov byte [rax], 0x7d
inc qword [rbx + 0x18]
inc r14
cmp r14, r12
jl 0x1400a4d76
movsx edx, word [rbx + 0x30]
movsx eax, word [rbx + 0x32]
cmp edx, eax
jns 0x1400a4faf
movzx edx, di
jmp 0x1400a4fb3
sub dx, word [rbx + 0x32]
mov word [rbx + 0x30], dx
mov rcx, rbx
mov edx, 2
call fcn.1400ca538
lea rdx, [0x140100cc8]
mov rcx, rbx
call fcn.1400c9f64
movsx edx, word [rbx + 0x32]
movsx ecx, word [rbx + 0x30]
cmp ecx, edx
jns 0x1400a4fe4
movzx ecx, di
jmp 0x1400a4fe8
sub cx, word [rbx + 0x32]
movsx eax, cx
cmp eax, edx
js 0x1400a4ff6
sub cx, word [rbx + 0x32]
movzx edi, cx
mov edx, 2
mov word [rbx + 0x30], di
mov rcx, rbx
call fcn.1400ca538
mov rcx, r13
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
lea rcx, [rsp + 0x20]
call fcn.140027d04
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.i__NoOfEntries
mov edx, 0x2f4
lea rcx, str.com_rpcmidlcodegenccb.cxx
call fcn.1400c7a2c
int3
lea r8, str.pQContext__Index___NoOfEntries___look_up_index_violation_
mov edx, 0x2f0
lea rcx, str.com_rpcmidlcodegenccb.cxx
call fcn.1400c7a2c
int3