Function at 0x1400101b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6a30]
mov eax, 0x6b30
call fcn.1400406f0
sub rsp, rax
mov rax, qword [0x14005f180]
xor rax, rsp
mov qword [rbp + 0x6a20], rax
and dword [rdx + 8], 0xfffffffd
movzx eax, byte [rcx]
xor r12d, r12d
cmp al, byte [0x14004519c]
mov r14d, 1
mov rsi, rdx
mov r13, rcx
mov ebx, r12d
mov r15d, r12d
mov edi, r14d
jne 0x14001021d
movzx eax, byte [rcx + 1]
cmp al, byte [0x14004519d]
je 0x14001032e
mov edx, 0x2f
call qword [sym.imp.MSVCR120.dll_strchr]
test rax, rax
je 0x140010246
nop dword [rax]
lea rcx, [rax + 1]
mov edx, 0x2f
call qword [sym.imp.MSVCR120.dll_strchr]
inc edi
test rax, rax
jne 0x140010230
cmp edi, r14d
je 0x14001032e
jle 0x14001025f
cmp edi, 3
jle 0x1400102c9
cmp edi, 4
je 0x14001036b
lea rdx, [rbp + 0x3620]
mov rcx, r13
call qword [0x1400ad8f8]
mov edx, 2
lea r9, str.Lookup_of_invalidate_entry:__s_n
mov qword [rsp + 0x28], rax
mov ecx, 0x3f6b
mov r8d, edx
mov dword [rsp + 0x20], 0x17
call sub.liblocal.dll_msg_print
mov rcx, rsi
call fcn.140011d00
xor eax, eax
mov rcx, qword [rbp + 0x6a20]
xor rcx, rsp
call fcn.1400403f0
mov rbx, qword [rsp + 0x6b80]
add rsp, 0x6b30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
or rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [r13 + rax + 1], bl
lea rax, [rax + 1]
jne 0x1400102d0
cmp byte [rax + r13 - 1], 0x2f
jne 0x14001036b
lea rcx, [rbp + 0x220]
mov r8d, 0x3400
mov rdx, r13
call sub.liblocal.dll_lg_strlcpy
lea rcx, [rbp + 0x220]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x140010307
dec rax
cmp rax, 0x3400
jae 0x140010b56
mov byte [rbp + rax + 0x220], bl
lea r13, [rbp + 0x220]
jmp 0x14001036b
mov edx, r14d
mov rcx, rsi
call fcn.140018ee0
or dword [rsi + 8], 0x20000
mov rcx, rsi
call fcn.140018ad0
mov rcx, rsi
bts eax, 0x1c
mov edx, eax
call fcn.140018f50
mov rcx, rsi
call fcn.140018b50
mov rcx, rsi
or eax, 0x10
mov edx, eax
call fcn.140018ff0
mov rax, qword [sym.imp.liblocal.dll_Quit]
lea rdx, [rbp + 0x3620]
mov rcx, r13
mov dword [rax], r12d
call qword [0x1400ad8f8]
mov rdx, qword [0x1400b4388]
lea r8, [rbp + 0x90]
mov rcx, rax
call sub.LIBNSR.DLL_getlr
mov rcx, qword [rbp + 0x1e8]
test rcx, rcx
je 0x1400103e3
mov rdx, rsi
mov rcx, r13
call fcn.1400089a0
test eax, eax
je 0x1400103dc
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rbp + 0x90]
mov dword [0x1400b1360], r14d
call sub.LIBNSR.DLL_xdr_mlookup_reply
mov rcx, r12
mov qword [rbp + 0x1e8], rcx
jmp 0x1400103e3
mov rcx, qword [rbp + 0x1e8]
mov rax, qword [sym.imp.liblocal.dll_Quit]
cmp dword [rax], ebx
je 0x14001040d
mov dword [rax], r12d
call fcn.140016640
test rax, rax
je 0x14001029d
mov rcx, qword [rbp + 0x1e8]
mov dword [0x1400b1360], r14d
test rcx, rcx
je 0x140010457
cmp dword [rcx + 0x40], 0x8081966
jne 0x140010432
lea rdx, [rbp + 0x1f0]
call sub.LIBNSR.DLL_get_app_meta
test eax, eax
je 0x140010444
mov rcx, qword [rbp + 0x1e8]
lea rdx, [rsp + 0x50]
call sub.LIBNSR.DLL_get_bsaattr
test eax, eax
jne 0x1400104fa
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rbp + 0x90]
call sub.LIBNSR.DLL_xdr_mlookup_reply
cmp dword [0x1400b1360], ebx
je 0x14001046b
or dword [rsi + 8], 2
mov rax, rsi
jmp 0x14001029f
mov rcx, rsi
call fcn.140018d30
test eax, eax
je 0x14001047d
cmp qword [rsi + 0x38], rbx
jne 0x140010463
mov ecx, edi
call fcn.14000ff50
test eax, eax
jne 0x140010295
cmp edi, r14d
je 0x140010295
jle 0x1400104fa
cmp edi, 3
jle 0x1400104a7
cmp edi, 4
je 0x140010295
jmp 0x1400104fa
xor edx, edx
lea rax, [rbp + 0x30]
lea rcx, [rbp + 0x30]
lea r8d, [rdx + 0x58]
mov r15d, r14d
mov qword [rbp + 0x1e8], rax
call sub.MSVCR120.dll_memset
lea rdx, [rbp + 0x3620]
mov rcx, r13
call qword [0x1400ad8f8]
mov rcx, rax
call qword [sym.imp.MSVCR120.dll__strdup]
mov rcx, qword [rbp + 0x1e8]
xor edx, edx
mov qword [rcx + 0x20], rax
lea rcx, [rsp + 0x50]
mov r8d, 0x88
call sub.MSVCR120.dll_memset
mov rdx, qword [rsi + 0x50]
test rdx, rdx
je 0x14001054e
cmp qword [rsi + 0x38], rbx
jne 0x14001054e
mov rdx, qword [rdx]
mov rcx, qword [rsi]
call qword [sym.imp.MSVCR120.dll__stricmp]
test eax, eax
jne 0x14001054e
mov rax, qword [rsi + 0x48]
test rax, rax
je 0x14001054e
cmp qword [rax + 0x58], rbx
je 0x14001054e
lea rbx, [rax + 0x58]
mov rax, qword [rax + 0x58]
cmp rax, rsi
je 0x140010547
test rax, rax
je 0x140010547
lea rbx, [rax + 0x50]
mov rax, qword [rax + 0x50]
cmp rax, rsi
jne 0x140010535
mov rax, qword [rsi + 0x50]
mov qword [rbx], rax
test byte [rsi + 8], r14b
je 0x14001055a
cmp qword [rsi + 0x38], r12
jne 0x14001059e
mov rcx, qword [rbp + 0x1e8]
lea rdx, [rsp + 0x50]
mov r8, rsi
call qword [0x1400ad8e8]
mov rax, qword [rsi + 0x78]
mov edx, edi
movups xmm0, xmmword [rbp + 0x1f0]
mov rcx, rsi
movups xmmword [rax + 0x30], xmm0
movups xmm1, xmmword [rbp + 0x200]
movups xmmword [rax + 0x40], xmm1
movups xmm0, xmmword [rbp + 0x210]
movups xmmword [rax + 0x50], xmm0
call fcn.140010b60
test r15d, r15d
jne 0x1400105b8
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rbp + 0x90]
call sub.LIBNSR.DLL_xdr_mlookup_reply
jmp 0x1400105e0
mov rax, qword [rbp + 0x1e8]
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x1400105d9
call qword [sym.imp.MSVCR120.dll_free]
mov rax, qword [rbp + 0x1e8]
mov qword [rax + 0x20], r12
mov qword [rbp + 0x1e8], r12
test rbx, rbx
je 0x140010636
mov r9, qword [rbx]
test r9, r9
je 0x14001062c
mov r10, qword [rsi + 0x38]
cmp qword [r9 + 0x38], r10
jle 0x1400106a3
mov rax, qword [r9]
mov r8, qword [rsi]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140010617
inc rax
test ecx, ecx
jne 0x140010604
test edx, edx
jne 0x1400106a3
lea rbx, [r9 + 0x50]
mov r9, qword [r9 + 0x50]
test r9, r9
jne 0x1400105f1
mov rax, qword [rbx]
mov qword [rsi + 0x50], rax
mov qword [rbx], rsi
cmp qword [rsi + 0x48], r12
jne 0x1400106eb
mov rcx, rsi
call fcn.140018ad0
bt eax, 0x1c
jb 0x1400106eb
mov rdx, rsi
mov rcx, r13
mov rbx, rsi
call fcn.14001b750
mov rsi, rax
test rax, rax
jne 0x1400106eb
call qword [sym.imp.MSVCR120.dll__errno]
mov edx, dword [0x1400b1360]
mov rcx, rbx
cmp dword [rax], 0xc
cmove edx, r14d
mov dword [0x1400b1360], edx
call fcn.14001b370
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rsp + 0x50]
call sub.LIBNSR.DLL_xdr_nwbsa_objectdescriptor_t
jmp 0x14001029d
mov rax, qword [rbx]
test rax, rax
je 0x14001062c
cmp qword [rax + 0x38], r10
jne 0x14001062c
mov rax, qword [rax]
mov r8, qword [rsi]
sub r8, rax
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400106d3
inc rax
test ecx, ecx
jne 0x1400106c0
test edx, edx
jne 0x14001062c
mov rcx, rsi
call fcn.14001b370
mov rsi, qword [rbx]
jmp 0x140010636
cmp qword [rsi + 0x58], r12
mov ecx, edi
mov r14d, r12d
setne r14b
call fcn.14000ff50
test eax, eax
jne 0x140010816
lea eax, [rdi - 2]
cmp eax, 1
ja 0x140010816
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rsp + 0x50]
call sub.LIBNSR.DLL_xdr_nwbsa_objectdescriptor_t
or rax, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [r13 + rax + 1], r12b
lea rax, [rax + 1]
jne 0x140010730
cmp byte [rax + r13 - 1], 0x2f
je 0x14001074a
mov word [rax + r13], 0x2f
mov rax, qword [sym.imp.liblocal.dll_Quit]
lea rdx, [rbp + 0x3620]
mov rcx, r13
mov dword [rax], r12d
call qword [0x1400ad8f8]
mov rdx, qword [0x1400b4388]
lea r8, [rbp + 0x90]
mov rcx, rax
call sub.LIBNSR.DLL_getlr
mov rax, qword [sym.imp.liblocal.dll_Quit]
cmp dword [rax], r12d
je 0x1400107a2
mov dword [rax], r12d
call fcn.140016640
test rax, rax
je 0x14001029d
mov eax, 1
mov dword [0x1400b1360], eax
mov rcx, qword [rbp + 0x1e8]
test rcx, rcx
je 0x14001080d
lea rdx, [rsp + 0x50]
call sub.LIBNSR.DLL_get_bsaattr
test eax, eax
je 0x1400107f1
test r15d, r15d
je 0x1400107ca
or dword [rsi + 8], 0x40000
jmp 0x1400107dc
cmp edi, 2
jne 0x1400107dc
mov rax, qword [rsi + 0x48]
mov ecx, dword [rax + 8]
and ecx, 1
or dword [rsi + 8], ecx
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rbp + 0x90]
call sub.LIBNSR.DLL_xdr_mlookup_reply
jmp 0x140010816
cmp qword [rbp + 0x1e8], r12
je 0x14001080d
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rbp + 0x90]
call sub.LIBNSR.DLL_xdr_mlookup_reply
test r15d, r15d
jne 0x140010295
mov ebx, dword [rbp - 0x38]
test ebx, ebx
je 0x140010b3d
mov edi, 1
mov edx, 0x10
mov ecx, edi
call qword [sym.imp.MSVCR120.dll_calloc]
mov r12, rax
test rax, rax
jne 0x14001085d
mov edx, 2
lea r9, str.malloc_of_directory_list_failed_n
mov ecx, 0x3f65
mov r8d, edx
call sub.liblocal.dll_msg_print
or dword [rsi + 8], 2
jmp 0x140010b3d
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x20]
mov r9d, edi
mov r8d, ebx
call sub.LIBRPC.DLL___lgto_xdrmem_create
lea rcx, [rbp - 0x20]
mov rdx, r12
call sub.LIBNSR.DLL_xdr_dosdirentry
mov rdx, qword [rbp - 0x18]
lea rcx, [rbp - 0x20]
mov ebx, eax
call qword [rdx + 0x38]
test ebx, ebx
jne 0x140010899
mov dword [rsi + 8], 2
jmp 0x140010b3d
mov r15, r12
movsxd r14, r14d
lea rbx, str.TRUE
nop word [rax + rax]
mov rax, qword [r15]
movzx edx, byte [rax]
cmp dl, 0x2e
jne 0x1400108d5
movzx ecx, byte [rax + 1]
test cl, cl
je 0x140010ab2
cmp cl, dl
jne 0x1400108d5
cmp byte [rax + 2], 0
je 0x140010ab2
cmp dl, 0x2f
jne 0x1400109f7
cmp byte [rax + 1], dl
je 0x1400109f7
mov rax, qword [sym.imp.liblocal.dll_Debug]
cmp dword [rax], 5
jge 0x140010908
mov rax, qword [sym.imp.liblocal.dll_LgTrace]
mov ecx, dword [rax]
test ecx, ecx
je 0x140010929
shr ecx, 4
and ecx, 1
je 0x140010929
mov rax, qword [sym.imp.liblocal.dll_Quit]
lea rdx, str.FALSE
lea rcx, str.bsa_lookupname_3___set_Quit_s_n
cmp dword [rax], 0
cmovne rdx, rbx
call sub.liblocal.dll_debugprintf
mov r8, qword [0x1400b4388]
mov rdx, qword [r15]
mov rcx, r13
call fcn.140012190
mov r15, rax
mov rax, qword [sym.imp.liblocal.dll_Quit]
cmp dword [rax], 0
je 0x1400109ce
mov dword [rax], 0
mov rax, qword [sym.imp.liblocal.dll_Debug]
cmp dword [rax], 5
jge 0x140010975
mov rax, qword [sym.imp.liblocal.dll_LgTrace]
mov ecx, dword [rax]
test ecx, ecx
je 0x140010996
shr ecx, 4
and ecx, 1
je 0x140010996
mov rax, qword [sym.imp.liblocal.dll_Quit]
lea rdx, str.FALSE
lea rcx, str.bsa_lookupname_4___set_Quit_s_n
cmp dword [rax], 0
cmovne rdx, rbx
call sub.liblocal.dll_debugprintf
call fcn.140016640
test rax, rax
je 0x140010b08
mov dword [0x1400b1360], edi
test r15, r15
je 0x1400109ca
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
mov rdx, r15
call sub.LIBNSR.DLL_xdr_dosdirentry
mov rcx, r15
call qword [sym.imp.MSVCR120.dll_free]
xor r15d, r15d
or dword [rsi + 8], 2
test r15, r15
je 0x140010b20
test r12, r12
je 0x1400109f4
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
mov rdx, r12
call sub.LIBNSR.DLL_xdr_dosdirentry
mov rcx, r12
call qword [sym.imp.MSVCR120.dll_free]
mov r12, r15
mov r10, qword [r15]
or rdi, 0xffffffffffffffff
nop
cmp byte [r10 + rdi + 1], 0
lea rdi, [rdi + 1]
jne 0x140010a00
cmp byte [r10 + rdi - 1], 0x2f
je 0x140010aad
test r14, r14
je 0x140010a60
mov r9, qword [rsi + 0x58]
test r9, r9
je 0x140010a60
nop word [rax + rax]
mov rax, qword [r9]
mov r8, r10
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140010a53
inc rax
test ecx, ecx
jne 0x140010a40
test edx, edx
je 0x140010ac1
mov r9, qword [r9 + 0x50]
test r9, r9
jne 0x140010a30
call qword [0x1400ad8c8]
mov rbx, rax
test rax, rax
je 0x140010b1c
lea rcx, [rdi + 1]
call qword [sym.imp.MSVCR120.dll_malloc]
mov qword [rbx], rax
test rax, rax
je 0x140010b12
mov rdx, qword [r15]
lea r8, [rdi + 1]
mov rcx, rax
call sub.liblocal.dll_lg_strlcpy
or dword [rbx + 8], 2
mov rdx, rbx
mov rcx, rsi
call fcn.14001a440
lea rbx, str.TRUE
mov edi, 1
mov r15, qword [r15 + 8]
test r15, r15
jne 0x1400108b0
jmp 0x140010b20
cmp qword [r9 + 0x38], 0
jne 0x140010a60
mov rax, qword [sym.imp.liblocal.dll_Vflag]
cmp dword [rax], 2
jl 0x140010aad
mov rax, qword [r9]
mov edx, 2
lea r9, str.Found_existing_non_expanded_entry_for__s_s_n
mov qword [rsp + 0x38], rax
xor eax, eax
mov ecx, 0x3f66
mov qword [rsp + 0x30], rax
mov r8d, edx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call sub.liblocal.dll_msg_print
jmp 0x140010aad
or ecx, 0xffffffff
call qword [sym.imp.MSVCR120.dll_exit]
int3
mov rcx, rbx
call fcn.14001b370
jmp 0x140010b20
or dword [rsi + 8], 2
call qword [sym.imp.MSVCR120.dll__errno]
mov ecx, dword [0x1400b1360]
cmp dword [rax], 0xc
mov eax, 1
cmove ecx, eax
mov dword [0x1400b1360], ecx
mov rcx, qword [sym.imp.LIBRPC.DLL___xdr]
lea rdx, [rsp + 0x50]
call sub.LIBNSR.DLL_xdr_nwbsa_objectdescriptor_t
mov rax, rsi
jmp 0x14001029f
call fcn.140040860
int3