Function at 0x140056760
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov rax, qword [0x140134380]
mov r14, rcx
xor ecx, ecx
mov rdx, r14
mov ebx, ecx
mov qword [rbp - 0x71], rcx
mov r15d, ecx
mov qword [rbp - 0x61], rcx
mov esi, ecx
mov qword [rbp - 0x69], rcx
mov r13d, ecx
mov qword [rbp - 0x79], rcx
mov r12d, ecx
mov rcx, qword [rax + 0xe8]
mov rax, qword [rcx]
lea rcx, [rbp - 0x49]
mov qword [rsp + 0x30], rax
call fcn.140031018
mov rdi, qword [0x140134380]
lea r9d, [r12 + 1]
xor r8d, r8d
mov qword [rbp - 0x21], 0x10001
mov qword [rbp - 0x19], r8
mov dword [rbp - 0x11], r8d
movzx eax, word [rdi + 0x66]
mov word [rbp - 0xd], ax
mov qword [rbp - 9], r8
mov dword [rsp + 0x24], r8d
mov dword [rbp + 0x7f], r8d
mov dword [rsp + 0x38], r8d
mov dword [rbp + 0x77], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r8d
cmp word [r14 + 0xa8], r8w
jle 0x140056837
lea rcx, [rbp - 0x49]
call fcn.14005668c
xor eax, eax
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rdx, qword [rbp - 0x31]
mov eax, r8d
mov ecx, r8d
or eax, dword [rdx]
add ecx, r9d
lea rdx, [rdx + 4]
cmp ecx, 5
jb 0x140056841
test eax, eax
jne 0x1400572a5
mov r14, qword [r14 + 0x98]
test r14, r14
je 0x140056968
mov esi, ebx
mov r15d, ebx
mov r13d, r9d
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x49]
call fcn.140016410
mov rax, qword [r14]
lea rdx, [rbp - 0x49]
mov rcx, r14
mov rax, qword [rax + 0xb8]
call qword [case.0x1400cd70e.0]
xor edi, edi
test rax, rax
je 0x14005693e
test rbx, rbx
je 0x1400568a9
mov qword [rbx + 0x10], rax
jmp 0x1400568ad
mov qword [rbp - 0x79], rax
mov rcx, qword [rax + 0x10]
mov rbx, rax
jmp 0x1400568bd
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
jne 0x1400568b6
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x32
je 0x14005698c
jle 0x14005693e
cmp eax, 0x34
jle 0x14005691a
cmp eax, 0x3c
je 0x1400568f7
cmp eax, 0x47
jne 0x14005693e
mov dword [rsp + 0x20], r13d
mov dword [rbp + 0x77], r13d
jmp 0x14005693e
mov rdi, qword [0x140134380]
mov r9d, 1
mov dword [rsp + 0x28], r9d
mov r13d, r9d
test dword [rdi], 0x10000
je 0x140056945
mov dword [rbp + 0x77], r9d
jmp 0x140056945
mov r9d, 1
mov r15d, r9d
mov dword [rbp + 0x77], r9d
cmp qword [rbx + 8], rdi
jne 0x140056936
cmp qword [rbx + 0x158], rdi
je 0x14005693b
mov dword [rsp + 0x38], r9d
mov r13d, r9d
mov rdi, qword [0x140134380]
mov r14, qword [r14 + 0x58]
test r14, r14
jne 0x14005686f
mov dword [rsp + 0x24], r15d
test r15d, r15d
mov dword [rbp + 0x7f], esi
mov r15, r12
mov rsi, r12
mov r13, r12
jne 0x140056999
test dword [rdi + 0xc], 0x20000
je 0x140056999
mov rcx, qword [rbp + 0x67]
lea rdx, [rbp - 0x49]
xor r9d, r9d
mov r8d, 0x401
call fcn.14003b748
jmp 0x140056817
cmp qword [rbx + 8], rdi
cmovne esi, r13d
jmp 0x1400568f1
mov ecx, 0x18
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor r8d, r8d
mov r14, rax
test rax, rax
jne 0x1400569d8
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
add dword [0x140134854], 0x18
mov qword [rax + 0x10], r8
mov qword [rax], r8
mov qword [rax + 8], r8
mov rax, qword [rbp + 0x6f]
mov rax, qword [rax]
mov rbx, qword [rax + 0x40]
mov rax, r8
test rbx, rbx
je 0x140056a32
mov edi, 1
cmp byte [rbx + 0x18], 0x20
jne 0x140056a1f
cmp word [rbx + 0xa8], di
jne 0x140056a1f
mov rdx, rbx
mov rcx, r14
call fcn.140027d7c
xor r8d, r8d
mov rbx, qword [rbx + 0x58]
test rbx, rbx
jne 0x140056a02
mov rax, qword [r14]
mov rdi, qword [0x140134380]
lea rbx, vtable.CG_CLASS.0
mov qword [r14 + 8], rax
cmp dword [rbp + 0x77], r8d
je 0x140056b00
mov ecx, 0xa8
call fcn.1400ca61c
xor r8d, r8d
mov qword [rbp - 0x69], rax
test rax, rax
je 0x140056ae8
mov qword [rax], rbx
lea rcx, vtable.CG_FILE.0
and dword [rax + 0x24], 0xffffff80
xorps xmm0, xmm0
mov qword [rax], rcx
lea rcx, vtable.NdrVersionControl.0
and dword [rax + 0x78], 0x800000
and dword [rax + 0x7c], 0xfffffff0
mov qword [rax + 0x70], rcx
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x30], rcx
mov rcx, qword [rbp + 0x67]
mov dword [rax + 0x80], r8d
mov qword [rax + 0x88], r8
mov qword [rax + 0x40], rcx
xor ecx, ecx
mov qword [rax + 0x10], r8
mov qword [rax + 8], r8
mov qword [rax + 0x18], r8
mov dword [rax + 0x20], r8d
mov qword [rax + 0x38], r8
mov qword [rax + 0x98], r8
movups xmmword [rax + 0x48], xmm0
mov dword [rax + 0x58], ecx
lea rcx, vtable.CG_HDR_FILE.0
and dword [rax + 0x90], 0xfffffffe
mov qword [rax], rcx
mov qword [rax + 0xa0], r14
jmp 0x140056aef
mov rax, r8
mov qword [rbp - 0x69], rax
mov rbx, qword [rbp - 0x79]
mov rdi, qword [0x140134380]
mov qword [rax + 8], rbx
jmp 0x140056b04
mov rbx, qword [rbp - 0x79]
cmp dword [rbp + 0x7f], r8d
je 0x140056cbe
test rbx, rbx
je 0x140056cbe
mov ecx, 0xa0
call fcn.1400ca61c
xor edx, edx
mov r13, rax
test rax, rax
je 0x140056be3
mov rax, qword [0x140134380]
cmp byte [rax + 0x15], dl
jne 0x140056b50
test dword [rax + 4], 0x800
jne 0x140056b50
mov rax, qword [rax + 0xe0]
mov rcx, qword [rax]
jmp 0x140056b53
mov rcx, rdx
mov r14, qword [rbp + 0x67]
lea rax, vtable.CG_CLASS.0
mov qword [r13], rax
xorps xmm0, xmm0
and dword [r13 + 0x24], 0xffffff80
lea rax, vtable.CG_FILE.0
mov qword [r13], rax
lea rax, vtable.NdrVersionControl.0
and dword [r13 + 0x78], 0x800000
and dword [r13 + 0x7c], 0xfffffff0
mov qword [r13 + 0x70], rax
mov rax, qword [rsp + 0x30]
mov qword [r13 + 0x38], rax
xor eax, eax
mov dword [r13 + 0x80], edx
mov qword [r13 + 0x88], rdx
mov qword [r13 + 0x10], rdx
mov qword [r13 + 8], rdx
mov qword [r13 + 0x18], rdx
mov dword [r13 + 0x20], edx
mov qword [r13 + 0x30], rcx
mov qword [r13 + 0x40], r14
mov qword [r13 + 0x98], rdx
movups xmmword [r13 + 0x48], xmm0
mov dword [r13 + 0x58], eax
lea rax, vtable.CG_SSTUB_FILE.0
and dword [r13 + 0x90], 0xfffffffe
mov qword [r13], rax
jmp 0x140056bea
mov r14, qword [rbp + 0x67]
mov r13, rdx
mov ecx, 0xa0
mov qword [r13 + 8], rbx
call fcn.1400ca61c
mov rdi, qword [0x140134380]
xor r8d, r8d
mov qword [rbp - 0x61], rax
mov rdx, rax
test rax, rax
je 0x140056cb3
cmp byte [rdi + 0x14], r8b
jne 0x140056c2d
test dword [rdi + 4], 0x200
jne 0x140056c2d
mov rax, qword [rdi + 0xd8]
mov rcx, qword [rax]
jmp 0x140056c30
mov rcx, r8
lea rax, vtable.CG_CLASS.0
mov qword [rdx + 0x10], r8
mov qword [rdx], rax
xorps xmm0, xmm0
and dword [rdx + 0x24], 0xffffff80
lea rax, vtable.CG_FILE.0
mov qword [rdx], rax
lea rax, vtable.NdrVersionControl.0
and dword [rdx + 0x78], 0x800000
and dword [rdx + 0x7c], 0xfffffff0
mov qword [rdx + 0x70], rax
mov rax, qword [rsp + 0x30]
mov qword [rdx + 0x38], rax
xor eax, eax
mov dword [rdx + 0x80], r8d
mov qword [rdx + 0x88], r8
mov qword [rdx + 8], r8
mov qword [rdx + 0x18], r8
mov dword [rdx + 0x20], r8d
mov qword [rdx + 0x30], rcx
mov qword [rdx + 0x40], r14
mov qword [rdx + 0x98], r8
movups xmmword [rdx + 0x48], xmm0
mov dword [rdx + 0x58], eax
lea rax, vtable.CG_CSTUB_FILE.0
and dword [rdx + 0x90], 0xfffffffe
mov qword [rdx], rax
jmp 0x140056cba
mov rdx, r8
mov qword [rbp - 0x61], rdx
mov qword [rdx + 8], rbx
cmp dword [rsp + 0x38], r8d
je 0x140056e4d
test rbx, rbx
je 0x140056e4d
mov ecx, 0xc0
call fcn.1400ca61c
mov rdi, qword [0x140134380]
xor r8d, r8d
mov qword [rbp - 0x71], rax
test rax, rax
je 0x140056dae
test dword [rdi + 4], 0x20000000
jne 0x140056d08
mov rcx, qword [rdi + 0x108]
mov rdx, qword [rcx]
jmp 0x140056d0b
mov rdx, r8
mov qword [rax + 0x10], r8
lea rcx, vtable.CG_CLASS.0
mov qword [rax], rcx
xorps xmm0, xmm0
and dword [rax + 0x24], 0xffffff80
lea rcx, vtable.CG_FILE.0
mov qword [rax], rcx
lea rcx, vtable.NdrVersionControl.0
and dword [rax + 0x78], 0x800000
and dword [rax + 0x7c], 0xfffffff0
mov qword [rax + 0x70], rcx
mov rcx, qword [rbp + 0x67]
mov qword [rax + 0x40], rcx
mov rcx, qword [rsp + 0x30]
mov dword [rax + 0x80], r8d
mov qword [rax + 0x88], r8
mov qword [rax + 0x38], rcx
xor ecx, ecx
mov qword [rax + 8], r8
mov qword [rax + 0x18], r8
mov dword [rax + 0x20], r8d
mov qword [rax + 0x30], rdx
mov qword [rax + 0x98], r8
movups xmmword [rax + 0x48], xmm0
mov dword [rax + 0x58], ecx
lea rcx, vtable.CG_PROXY_FILE.0
and dword [rax + 0x90], 0xfffffffe
mov qword [rax], rcx
mov qword [rax + 0xb0], r8
mov qword [rax + 0xa0], r8
mov qword [rax + 0xa8], r8
mov qword [rax + 0xb8], r8
jmp 0x140056db5
mov rax, r8
mov qword [rbp - 0x71], rax
mov r14, qword [rbp + 0x67]
add r14, 0xb0
mov qword [rax + 8], rbx
mov rbx, qword [r14 + 8]
cmp rbx, r14
cmove rbx, r8
test rbx, rbx
je 0x140056e4d
mov rcx, qword [rbx]
lea rdx, [rbp - 0x49]
mov rax, qword [rcx]
mov rax, qword [rax + 0xb8]
call qword [case.0x1400cd70e.0]
mov rbx, qword [rbx + 8]
mov r8, r12
cmp rbx, r14
mov rdi, rax
cmove rbx, r12
test rbx, rbx
je 0x140056e3b
mov rsi, rax
mov rcx, qword [rbx]
lea rdx, [rbp - 0x49]
mov rax, qword [rcx]
mov rax, qword [rax + 0xb8]
call qword [case.0x1400cd70e.0]
mov qword [rsi + 0x10], rax
mov r8, r12
mov rsi, rax
mov rax, qword [rbx + 8]
cmp rax, r14
mov rbx, rax
cmove rbx, r12
test rbx, rbx
jne 0x140056e04
mov rsi, r12
mov rax, qword [rbp - 0x71]
mov qword [rax + 0xb8], rdi
mov rdi, qword [0x140134380]
mov eax, dword [rsp + 0x20]
mov rbx, qword [rbp - 0x79]
test eax, eax
je 0x140057028
test rbx, rbx
je 0x140057028
mov ecx, 0xa0
call fcn.1400ca61c
xor r8d, r8d
mov r12, rax
test rax, rax
je 0x140056f3c
mov rcx, qword [0x140134380]
cmp byte [rcx + 0x16], r8b
jne 0x140056e98
mov rcx, qword [rcx + 0x140]
mov rdx, qword [rcx]
jmp 0x140056e9b
mov rdx, r8
lea rax, vtable.CG_CLASS.0
mov qword [r12 + 0x10], r8
mov qword [r12], rax
xorps xmm0, xmm0
and dword [r12 + 0x24], 0xffffff80
lea rax, vtable.CG_FILE.0
mov qword [r12], rax
lea rax, vtable.NdrVersionControl.0
and dword [r12 + 0x78], 0x800000
and dword [r12 + 0x7c], 0xfffffff0
mov qword [r12 + 0x70], rax
mov rax, qword [rbp + 0x67]
mov qword [r12 + 0x40], rax
mov rax, qword [rsp + 0x30]
mov qword [r12 + 0x38], rax
xor eax, eax
mov dword [r12 + 0x80], r8d
mov qword [r12 + 0x88], r8
mov qword [r12 + 8], r8
mov qword [r12 + 0x18], r8
mov dword [r12 + 0x20], r8d
mov qword [r12 + 0x30], rdx
mov qword [r12 + 0x98], r8
movups xmmword [r12 + 0x48], xmm0
mov dword [r12 + 0x58], eax
lea rax, vtable.CG_HOST_FILE.0
and dword [r12 + 0x90], 0xfffffffe
mov qword [r12], rax
jmp 0x140056f3f
mov r12, r8
mov ecx, 0xb8
mov qword [r12 + 8], rbx
call fcn.1400ca61c
mov rdi, qword [0x140134380]
xor r8d, r8d
mov r14, rax
test rax, rax
je 0x14005701b
cmp byte [rdi + 0x17], r8b
jne 0x140056f76
mov rcx, qword [rdi + 0x148]
mov rdx, qword [rcx]
jmp 0x140056f79
mov rdx, r8
mov qword [r14 + 0x10], r8
lea rax, vtable.CG_CLASS.0
mov qword [r14], rax
xorps xmm0, xmm0
and dword [r14 + 0x24], 0xffffff80
lea rax, vtable.CG_FILE.0
mov qword [r14], rax
lea rax, vtable.NdrVersionControl.0
and dword [r14 + 0x78], 0x800000
and dword [r14 + 0x7c], 0xfffffff0
mov qword [r14 + 0x70], rax
mov rax, qword [rbp + 0x67]
mov qword [r14 + 0x40], rax
mov rax, qword [rsp + 0x30]
mov qword [r14 + 0x38], rax
xor eax, eax
mov dword [r14 + 0x80], r8d
mov qword [r14 + 0x88], r8
mov qword [r14 + 8], r8
mov qword [r14 + 0x18], r8
mov dword [r14 + 0x20], r8d
mov qword [r14 + 0x30], rdx
mov qword [r14 + 0x98], r8
movups xmmword [r14 + 0x48], xmm0
mov dword [r14 + 0x58], eax
lea rax, vtable.CG_EXTENSION_FILE.0
and dword [r14 + 0x90], 0xfffffffe
mov qword [r14], rax
mov qword [r14 + 0xb0], r8
mov qword [r14 + 0xa0], r8
mov qword [r14 + 0xa8], r8
jmp 0x14005701e
mov r14, r8
mov eax, dword [rsp + 0x20]
mov qword [r14 + 8], rbx
jmp 0x14005702b
mov r14, r12
cmp dword [rsp + 0x24], r8d
jne 0x140057047
cmp dword [rsp + 0x28], r8d
je 0x14005703f
cmp dword [rbp + 0x77], r8d
jne 0x140057047
test eax, eax
je 0x140057117
test rbx, rbx
je 0x140057117
mov ecx, 0xa0
call fcn.1400ca61c
mov rdi, qword [0x140134380]
xor r8d, r8d
mov r15, rax
test rax, rax
je 0x140057110
test dword [rdi + 4], 0x8000000
jne 0x140057085
mov rcx, qword [rdi + 0xf8]
mov rax, qword [rcx]
jmp 0x140057088
mov rax, r8
mov qword [r15 + 0x30], rax
lea rcx, vtable.CG_CLASS.0
mov rax, qword [rbp + 0x67]
xorps xmm0, xmm0
mov qword [r15], rcx
lea rcx, vtable.CG_FILE.0
and dword [r15 + 0x24], 0xffffff80
mov qword [r15], rcx
lea rcx, vtable.NdrVersionControl.0
and dword [r15 + 0x78], 0x800000
and dword [r15 + 0x7c], 0xfffffff0
mov qword [r15 + 0x40], rax
xor eax, eax
mov qword [r15 + 0x70], rcx
mov dword [r15 + 0x80], r8d
mov qword [r15 + 0x88], r8
mov qword [r15 + 0x10], r8
mov qword [r15 + 8], r8
mov qword [r15 + 0x18], r8
mov dword [r15 + 0x20], r8d
mov qword [r15 + 0x38], r8
mov qword [r15 + 0x98], r8
movups xmmword [r15 + 0x48], xmm0
mov dword [r15 + 0x58], eax
lea rax, vtable.CG_IID_FILE.0
and dword [r15 + 0x90], 0xfffffffe
mov qword [r15], rax
jmp 0x140057113
mov r15, r8
mov qword [r15 + 8], rbx
cmp dword [rsp + 0x28], r8d
je 0x140057207
test rbx, rbx
je 0x140057207
test byte [rdi + 0x1a], 0x20
jne 0x140057147
test byte [rdi + 0x1a], 4
je 0x140057207
test dword [rdi], 0x1000
je 0x140057207
test dword [rdi + 8], 0x20000000
jne 0x140057207
mov ecx, 0xa0
call fcn.1400ca61c
mov rdi, qword [0x140134380]
xor r8d, r8d
mov rsi, rax
test rax, rax
je 0x140057200
mov rcx, qword [rdi + 0x118]
lea rax, vtable.CG_CLASS.0
xorps xmm0, xmm0
mov rdx, qword [rcx]
mov qword [rsi], rax
lea rax, vtable.CG_FILE.0
and dword [rsi + 0x24], 0xffffff80
mov qword [rsi], rax
lea rax, vtable.NdrVersionControl.0
and dword [rsi + 0x78], 0x800000
and dword [rsi + 0x7c], 0xfffffff0
mov qword [rsi + 0x70], rax
mov rax, qword [rbp + 0x67]
mov qword [rsi + 0x40], rax
xor eax, eax
mov dword [rsi + 0x80], r8d
mov qword [rsi + 0x88], r8
mov qword [rsi + 0x10], r8
mov qword [rsi + 8], r8
mov qword [rsi + 0x18], r8
mov dword [rsi + 0x20], r8d
mov qword [rsi + 0x30], rdx
mov qword [rsi + 0x38], r8
mov qword [rsi + 0x98], r8
movups xmmword [rsi + 0x48], xmm0
mov dword [rsi + 0x58], eax
lea rax, vtable.CG_TYPELIBRARY_FILE.0
and dword [rsi + 0x90], 0xfffffffe
mov qword [rsi], rax
jmp 0x140057203
mov rsi, r8
mov qword [rsi + 8], rbx
mov eax, dword [rdi + 0x80]
mov rbx, r8
test eax, eax
jne 0x14005723a
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x14005722a
mov qword [rcx + 0x10], r8
mov rbx, rcx
mov eax, dword [rdi + 0x80]
test eax, eax
jne 0x14005723a
test r15, r15
je 0x14005723a
mov qword [r15 + 0x10], rbx
mov rbx, r15
mov rax, qword [rbp - 0x71]
test rax, rax
je 0x14005724a
mov qword [rax + 0x10], rbx
mov rbx, rax
test r13, r13
je 0x140057256
mov qword [r13 + 0x10], rbx
mov rbx, r13
mov rax, qword [rbp - 0x61]
test rax, rax
je 0x140057266
mov qword [rax + 0x10], rbx
mov rbx, rax
test r12, r12
je 0x140057273
mov qword [r12 + 0x10], rbx
mov rbx, r12
test r14, r14
je 0x14005727f
mov qword [r14 + 0x10], rbx
mov rbx, r14
cmp dword [rdi + 0x80], r8d
jne 0x140057294
test rsi, rsi
je 0x140057294
mov qword [rsi + 0x10], rbx
mov rbx, rsi
lea rcx, [rbp - 0x49]
call fcn.14005668c
mov rax, rbx
jmp 0x140056822
lea r8, str._MyContext.HasAttributes__
mov edx, 0xdc
lea rcx, str.com_rpcmidlcodegenilxlat.cxx
call fcn.1400c7a2c
int3