Function at 0x140084ed0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rdi, rcx
mov esi, 0x80
mov ecx, esi
mov r14, rdx
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor r15d, r15d
mov rbx, rax
test rax, rax
je 0x140085324
add dword [0x140134854], esi
xorps xmm0, xmm0
mov byte [rax], r15b
mov rcx, rdi
mov dword [rax + 4], r15d
movups xmmword [rax + 8], xmm0
movups xmmword [rax + 0x18], xmm0
movups xmmword [rax + 0x28], xmm0
movups xmmword [rax + 0x38], xmm0
mov qword [rax + 0x48], r15
mov qword [rax + 0x50], r15
mov qword [rax + 0x58], r15
mov dword [rax + 0x60], r15d
mov qword [rax + 0x68], r15
mov qword [rax + 0x70], r15
mov r12, qword [r14 + 0x188]
mov qword [r14 + 0x188], rdi
mov rax, qword [rdi]
mov qword [rsp + 0x70], r12
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
lea r12d, [rsi - 0x7c]
test eax, eax
je 0x140084f99
mov rax, qword [0x140134380]
mov cl, byte [rax + 0x1a]
and cl, 0x20
neg cl
mov rcx, rbx
sbb edx, edx
xor r9d, r9d
and edx, r12d
add edx, r12d
mov r8d, edx
call fcn.1400bcd84
mov r13, qword [rdi + 8]
jmp 0x140084fa4
mov r14, qword [rsp + 0x68]
test r13, r13
je 0x1400851fa
mov rbp, r13
mov edx, 0xa
mov r13, qword [r13 + 0x10]
mov rdi, qword [rbp + 8]
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0xe0]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rdi]
mov edx, 0xc
mov r12b, al
mov rax, qword [rcx + 0xe0]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
mov rcx, rbp
mov r15b, al
call fcn.140084b6c
mov rcx, qword [rdi]
movsxd rsi, eax
mov rax, qword [rcx + 0x40]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400850a3
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x48]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400850a3
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x50]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400850a3
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0xd8]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400850a3
test byte [rbp + 0x98], 0x40
jne 0x1400850a3
test r12b, r12b
je 0x140085063
lea edi, [rax + 4]
jmp 0x1400850c0
test r15b, r15b
je 0x14008506f
mov edi, 8
jmp 0x1400850c0
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x40
jne 0x14008509d
mov rax, qword [0x140134380]
mov cl, byte [rax + 0x1a]
and cl, 0x20
neg cl
sbb edi, edi
and edi, 4
add edi, 4
jmp 0x1400850c0
movzx edi, word [rbp + 0x32]
jmp 0x1400850c0
mov rax, qword [0x140134380]
mov dl, byte [rax + 0x1a]
and dl, 0x20
neg dl
sbb edi, edi
xor r12b, r12b
and edi, 4
add edi, 4
xor r15b, r15b
mov r8d, 2
mov rdx, r14
mov rcx, rbp
call fcn.1400845c8
cdq
and edx, 3
lea r14d, [rdx + rax]
mov rax, rsi
sar r14d, 2
test r12b, r12b
je 0x1400850eb
cmp rax, 0x10
jbe 0x1400850fe
test r15b, r15b
je 0x1400851de
cmp rax, 0x20
ja 0x1400851de
mov r12d, 4
cmp esi, r12d
cmovb esi, r12d
cmp edi, r12d
cmovb edi, r12d
shr esi, 2
xor r15d, r15d
cmp dword [rbx + 0x4c], r15d
jne 0x1400851a5
lea r8d, [r12 + 0xc]
mov ebp, r15d
sub r8d, esi
js 0x14008516a
mov edx, esi
test esi, esi
je 0x140085148
lea eax, [rdx + rbp]
movsxd rcx, eax
cmp dword [rbx + rcx*4 + 4], 1
je 0x140085148
dec edx
test edx, edx
jg 0x140085135
test edx, edx
jle 0x14008516a
add ebp, edx
cmp edi, 8
jne 0x140085165
mov eax, ebp
and eax, 0x80000001
jge 0x140085163
dec eax
or eax, 0xfffffffe
inc eax
add ebp, eax
cmp ebp, r8d
jle 0x14008512f
cmp ebp, r8d
jg 0x14008519e
test esi, esi
je 0x140084f9f
lea r8d, [r12 + rbp]
mov edx, r14d
mov rcx, rbx
call fcn.1400bcc94
movsxd rax, ebp
dec esi
inc ebp
inc r14d
mov dword [rbx + rax*4 + 8], 1
test esi, esi
jg 0x140085177
jmp 0x1400851a5
mov dword [rbx + 0x4c], 1
test esi, esi
jle 0x140084f9f
cmp edi, 8
jne 0x1400851be
mov eax, dword [rbx + 4]
test al, 1
je 0x1400851be
inc eax
mov dword [rbx + 4], eax
mov r8d, dword [rbx + 4]
mov edx, r14d
mov rcx, rbx
call fcn.1400bcaac
inc dword [rbx + 4]
inc r14d
dec esi
test esi, esi
jg 0x1400851be
jmp 0x140084f9f
mov r9d, r14d
mov r8d, edi
mov edx, esi
mov rcx, rbx
call fcn.1400bcd84
xor r15d, r15d
lea r12d, [r15 + 4]
jmp 0x140084f9f
mov eax, dword [rbx + 0x60]
mov r14d, r15d
mov rdi, qword [rbx + 0x68]
mov ebp, r15d
cmp eax, 0xdc
jge 0x140085379
cmp eax, 1
lea r15d, [rax + 3]
cmovle r15d, r12d
movsxd rcx, r15d
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x140085324
movzx eax, word [rbx + 0x50]
add dword [0x140134854], r15d
mov word [rsi], ax
mov al, byte [rbx + 0x60]
mov byte [rsi + 2], al
cmp dword [rbx + 0x50], 0
jle 0x1400852b2
test rdi, rdi
je 0x140085360
xor ecx, ecx
cmp dword [rdi + 4], 1
jne 0x14008528b
lea eax, [rbp + 3]
cmp eax, dword [rbx + 0x60]
jge 0x1400852b2
mov byte [rsi + rcx + 3], 0x9d
mov r8d, r12d
mov al, byte [rdi]
mov byte [rsi + rcx + 4], al
movzx eax, word [rdi + 8]
mov word [rsi + rcx + 5], ax
mov rax, r12
movzx edx, word [rdi + 8]
jmp 0x1400852a0
cmp ebp, dword [rbx + 0x60]
jge 0x1400852b5
mov al, byte [rdi]
mov byte [rsi + rcx + 3], al
mov eax, 1
mov edx, eax
mov r8d, eax
mov rdi, qword [rdi + 0x10]
add ebp, r8d
add r14d, edx
add rcx, rax
test rdi, rdi
jne 0x14008525d
cmp ebp, dword [rbx + 0x60]
jne 0x140085347
cmp r14d, dword [rbx + 0x50]
jne 0x140085347
jmp 0x1400852de
mov rdx, qword [rax + 0x10]
mov rcx, rax
mov qword [rbx + 0x68], rdx
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov rax, qword [rbx + 0x68]
test rax, rax
jne 0x1400852c7
and qword [rbx + 0x70], rax
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov qword [rax + 0x188], rcx
mov rax, rsi
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str._Slot__TotalSlots____CheckEntries__Entries_
mov edx, 0x11a
lea rcx, str.com_rpcmidlcodegen_armstack.cxx
call fcn.1400c7a2c
int3
lea r8, str.CurrentItem___NULL
mov edx, 0xfa
lea rcx, str.com_rpcmidlcodegen_armstack.cxx
call fcn.1400c7a2c
int3
lea r8, str.TotalSlots___MAX_ARM_PARAMETERS
mov edx, 0xee
lea rcx, str.com_rpcmidlcodegen_armstack.cxx
call fcn.1400c7a2c
int3