Function at 0x140073fe0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov rax, qword [rcx + 0x148]
xor r14d, r14d
mov rsi, rcx
mov r15d, 1
test rax, rax
je 0x140074021
mov rax, qword [rax]
cmp dword [rax], 0x46
jg 0x140074697
jmp 0x140074653
mov ebx, 0x108
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x140074674
add dword [0x140134854], ebx
mov r8d, ebx
xor edx, edx
mov qword [rsi + 0x148], rax
mov rcx, rax
call sub.msvcrt.dll_memset
mov rcx, qword [rsi + 0x80]
test rcx, rcx
jne 0x140074072
mov rcx, rsi
call fcn.140073190
mov rcx, qword [rsi + 0x80]
mov rax, qword [rsi + 0x148]
mov qword [rax], rcx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
and ecx, r15d
mov dword [rax + 8], ecx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr ecx, 1
and ecx, r15d
mov dword [rax + 0xc], ecx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr ecx, 2
and ecx, r15d
mov dword [rax + 0x10], ecx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr ecx, 3
and ecx, r15d
mov dword [rax + 0x14], ecx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr ecx, 4
and ecx, r15d
mov dword [rax + 0x18], ecx
mov ecx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr ecx, 5
and ecx, r15d
mov dword [rax + 0x1c], ecx
mov ecx, 7
lea r8d, [rcx + 0x19]
mov edx, dword [rsi + 0x98]
mov rax, qword [rsi + 0x148]
shr edx, cl
add ecx, r15d
and edx, r15d
mov dword [r8 + rax], edx
add r8, 4
cmp r8, 0x60
jl 0x140074105
mov eax, dword [rsi + 0x9c]
mov ebp, 0x10
mov rcx, qword [rsi + 0x148]
mov dword [rcx + 0x60], eax
mov rcx, qword [rsi + 0x148]
mov eax, dword [rsi + 0xa0]
mov dword [rcx + 0x64], eax
mov ecx, dword [rsi + 0xa4]
mov rax, qword [rsi + 0x148]
and ecx, r15d
mov dword [rax + 0x68], ecx
mov rcx, qword [rsi + 0x148]
mov eax, dword [rsi + 0xb8]
mov dword [rcx + 0x80], eax
cmp qword [rsi + 0xa8], r14
je 0x1400741ec
mov ecx, ebp
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140074674
mov rax, qword [rsi + 0x148]
add dword [0x140134854], ebp
mov qword [rax + 0x70], rcx
mov rax, qword [rsi + 0xa8]
mov rdi, rax
mov rcx, rax
mov rdx, qword [rax]
mov rax, qword [rdx + 0x88]
call qword [case.0x1400cd70e.0]
mov rbx, rax
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rsi + 0x148]
mov r8, rbx
mov edx, eax
mov rcx, qword [rcx + 0x70]
call fcn.140073058
mov rcx, qword [rsi + 0xb0]
test rcx, rcx
je 0x140074216
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x1400cd70e.0]
mov rcx, rax
mov rax, qword [rsi + 0x148]
mov qword [rax + 0x78], rcx
mov rcx, qword [rsi + 0xc0]
test rcx, rcx
je 0x140074243
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x1400cd70e.0]
mov rcx, rax
mov rax, qword [rsi + 0x148]
mov qword [rax + 0x88], rcx
mov rcx, qword [rsi + 0x148]
movzx eax, word [rsi + 0xc8]
mov word [rcx + 0x90], ax
mov rcx, qword [rsi + 0xd0]
test rcx, rcx
je 0x140074285
mov rax, qword [rcx]
mov rax, qword [rax + 0xe8]
call qword [case.0x1400cd70e.0]
mov rcx, rax
mov rax, qword [rsi + 0x148]
mov qword [rax + 0x98], rcx
mov rdx, qword [rsi + 0xe8]
test rdx, rdx
je 0x1400742c3
mov rax, qword [rsi + 0x148]
mov rcx, qword [rax + 0xb0]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
mov rax, qword [rdx + 0x18]
mov qword [rcx + 0x18], rax
mov al, byte [rdx + 0x20]
mov byte [rcx + 0x20], al
mov rdx, qword [rsi + 0xf0]
test rdx, rdx
je 0x140074301
mov rax, qword [rsi + 0x148]
mov rcx, qword [rax + 0xb8]
mov rax, qword [rdx]
mov qword [rcx], rax
mov rax, qword [rdx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
mov rax, qword [rdx + 0x18]
mov qword [rcx + 0x18], rax
mov al, byte [rdx + 0x20]
mov byte [rcx + 0x20], al
mov eax, dword [rsi + 0xf8]
mov rcx, qword [rsi + 0x148]
mov dword [rcx + 0xc0], eax
mov rcx, qword [rsi + 0x148]
mov eax, dword [rsi + 0xfc]
mov dword [rcx + 0xc4], eax
mov rcx, qword [rsi + 0x148]
mov rax, qword [rsi + 0x100]
mov qword [rcx + 0xc8], rax
cmp qword [rsi + 0x108], r14
je 0x1400743bc
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rcx, rax
test rax, rax
je 0x140074674
mov rax, qword [rsi + 0x148]
add dword [0x140134854], ebp
mov qword [rax + 0xd0], rcx
mov rax, qword [rsi + 0x108]
mov rdi, rax
mov rcx, rax
mov rdx, qword [rax]
mov rax, qword [rdx + 0x88]
call qword [case.0x1400cd70e.0]
mov rbx, rax
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rsi + 0x148]
mov r8, rbx
mov edx, eax
mov rcx, qword [rcx + 0xd0]
call fcn.140073058
movzx eax, word [rsi + 0x110]
mov rcx, qword [rsi + 0x148]
mov word [rcx + 0xd8], ax
movzx eax, word [rsi + 0x128]
mov rcx, qword [rsi + 0x148]
mov word [rcx + 0xda], ax
mov rcx, qword [rsi + 0x148]
movzx eax, word [rsi + 0x12a]
mov word [rcx + 0xdc], ax
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x278]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xde], cl
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x280]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xdf], cl
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x2a8]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xe0], cl
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x2b8]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xe1], cl
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x2b0]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xe2], cl
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x2c0]
call qword [case.0x1400cd70e.0]
lea r9, [0x14012e6a0]
mov dword [rsp + 0x20], r14d
mov ecx, eax
lea r8, [0x14012dac8]
mov rax, qword [rsi + 0x148]
xor edx, edx
mov byte [rax + 0xe3], cl
mov rcx, rsi
call fcn.1400cbdc8
mov rbx, rax
test rax, rax
je 0x14007452d
mov rax, qword [rax]
mov rcx, rbx
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xe4], cl
mov rcx, rbx
mov rax, qword [rbx]
mov rax, qword [rax + 0x358]
call qword [case.0x1400cd70e.0]
mov ecx, eax
mov rax, qword [rsi + 0x148]
mov byte [rax + 0xe5], cl
mov rcx, qword [rsi + 0x130]
test rcx, rcx
je 0x14007455a
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x1400cd70e.0]
mov rcx, rax
mov rax, qword [rsi + 0x148]
mov qword [rax + 0xe8], rcx
mov rcx, qword [rsi + 0x138]
test rcx, rcx
je 0x140074587
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x1400cd70e.0]
mov rcx, rax
mov rax, qword [rsi + 0x148]
mov qword [rax + 0xf0], rcx
mov rbx, qword [rsi + 8]
movzx ecx, r14w
test rbx, rbx
je 0x140074670
mov rax, rbx
mov rax, qword [rax + 0x10]
add cx, r15w
test rax, rax
jne 0x14007459b
test cx, cx
je 0x140074670
mov rax, rbx
movzx ecx, r14w
mov rax, qword [rax + 0x10]
add cx, r15w
test rax, rax
jne 0x1400745b8
mov rax, qword [rsi + 0x148]
movsx ecx, cx
mov dword [rax + 0xf8], ecx
mov eax, 8
mov rbp, qword [rsi + 0x148]
mov ecx, dword [rbp + 0xf8]
mul rcx
mov rdi, rax
mov rax, 0xffffffffffffffff
cmovo rdi, rax
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x140074674
add dword [0x140134854], edi
mov rdi, r14
mov qword [rbp + 0x100], rax
test rbx, rbx
je 0x140074653
mov rcx, rbx
mov rbx, qword [rbx + 0x10]
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x1400cd70e.0]
mov rdx, rax
mov rax, qword [rsi + 0x148]
mov rcx, qword [rax + 0x100]
mov qword [rdi + rcx], rdx
add rdi, 8
jmp 0x14007461c
mov eax, r15d
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret
xor eax, eax
jmp 0x140074656
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.pDump__pThis__cgid___ID_CG_RANGE_STRING_PTR
mov edx, 0x28c
lea rcx, str.com_rpcmidlcodegendumpinfo.cxx
call fcn.1400c7a2c
int3