Function at 0x140005ebc
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x60
mov dword [rsp + 0x50], 0
xor eax, eax
mov edi, eax
mov rdx, qword [0x14004be00]
lea r10, [rsp + 0x40]
mov rcx, qword [rdx + 0xdd0]
mov qword [rsp + 0x30], r10
mov esi, edi
mov dword [rsp + 0x28], esi
lea r11, [rsp + 0x48]
mov qword [rsp + 0x38], r11
add edi, 1
lea rbx, str.exclude
mov qword [rsp + 0x20], rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.oracore11.dll_lrmgsp
test eax, eax
jne 0x1400060c9
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
lea rdx, [0x1400331ac]
call qword [sym.imp.MSVCR80.dll_strpbrk]
mov rbx, rax
test rbx, rbx
je 0x140006443
mov byte [rbx], 0
add rbx, 1
mov rcx, rsi
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x140005f61
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140005f48
add rax, 0xffffffffffffffff
mov r8, rax
mov rcx, rbx
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x140005f82
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140005f69
add rax, 0xffffffffffffffff
mov r10, qword [0x14004be00]
mov rcx, qword [r10 + 0x38]
mov dword [rsp + 0x20], r8d
mov edx, 4
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], eax
mov r9, rsi
lea r8, [rsp + 0x50]
call fcn.14000d694
test eax, eax
jl 0x14000631d
cmp eax, 1
jne 0x140005fd6
mov ecx, 0x7e
lea rdx, str.CSS_00126:_table__s._s_not_found_n
mov r8, rsi
mov r9, rbx
call fcn.14000bad2
jmp 0x140005ecf
test eax, eax
jne 0x140005ecf
mov rcx, rsi
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x140005ffc
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140005fe3
add rax, 0xffffffffffffffff
mov r8, rax
mov rcx, rbx
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x14000601d
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140006004
add rax, 0xffffffffffffffff
mov r10, qword [0x14004be00]
mov rcx, qword [r10 + 0x38]
mov dword [rsp + 0x20], r8d
mov edx, 0xa
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], eax
mov r9, rsi
lea r8, [rsp + 0x50]
call fcn.14000d694
test eax, eax
jl 0x1400061f7
je 0x140005ecf
cmp eax, 1
jne 0x140005ecf
mov rcx, rsi
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x14000607d
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140006064
add rax, 0xffffffffffffffff
mov r9, rax
mov rcx, rbx
xor eax, eax
movzx edx, byte [rcx + rax]
test edx, edx
je 0x14000609e
movzx edx, byte [rcx + rax + 1]
add rax, 2
test edx, edx
jne 0x140006085
add rax, 0xffffffffffffffff
mov r10, qword [0x14004be00]
mov rcx, qword [r10 + 0x38]
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x28], eax
mov edx, 0xb
mov r8, rsi
call fcn.14000f028
test eax, eax
jge 0x140005ecf
jmp 0x1400060d1
add rsp, 0x60
pop rbx
pop rsi
pop rdi
ret
mov ecx, 0x7d
lea rdx, str.CSS_00125:_failed_to_check_if_table__s._s_exists_n
mov r8, rsi
mov r9, rbx
call fcn.14000bad2
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
movsx rdx, byte [rcx + 0x1a0]
test edx, edx
je 0x14000610b
call fcn.14000be68
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x140006120
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x620]
test rcx, rcx
je 0x140006138
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14000614d
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14000615b
call fcn.14000b43c
mov ecx, 0x270f
lea rdx, str._nScanner_terminated_unsuccessfully._n
call fcn.14000ba0a
call fcn.14000b7c0
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdd0]
call sub.oracore11.dll_lrmtrm
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0xdc0]
mov rdx, qword [rbx + 0xdc8]
xor r8d, r8d
call sub.oracore11.dll_lmmhpfree
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdb8]
call sub.oracore11.dll_lpmterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x1490]
call sub.oranls11.dll_lmsatrm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x2e8]
call sub.oranls11.dll_lxlterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x48]
call sub.oracore11.dll_sltster
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140005ecf
mov ecx, 0x7d
lea rdx, str.CSS_00125:_failed_to_check_if_table__s._s_exists_n
mov r8, rsi
mov r9, rbx
call fcn.14000bad2
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
movsx rdx, byte [rcx + 0x1a0]
test edx, edx
je 0x140006231
call fcn.14000be68
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x140006246
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x620]
test rcx, rcx
je 0x14000625e
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x140006273
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x140006281
call fcn.14000b43c
mov ecx, 0x270f
lea rdx, str._nScanner_terminated_unsuccessfully._n
call fcn.14000ba0a
call fcn.14000b7c0
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdd0]
call sub.oracore11.dll_lrmtrm
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0xdc0]
mov rdx, qword [rbx + 0xdc8]
xor r8d, r8d
call sub.oracore11.dll_lmmhpfree
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdb8]
call sub.oracore11.dll_lpmterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x1490]
call sub.oranls11.dll_lmsatrm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x2e8]
call sub.oranls11.dll_lxlterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x48]
call sub.oracore11.dll_sltster
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140005ecf
mov ecx, 0x7d
lea rdx, str.CSS_00125:_failed_to_check_if_table__s._s_exists_n
mov r8, rsi
mov r9, rbx
call fcn.14000bad2
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
movsx rdx, byte [rcx + 0x1a0]
test edx, edx
je 0x140006357
call fcn.14000be68
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x14000636c
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x620]
test rcx, rcx
je 0x140006384
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x140006399
call fcn.14000b43c
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400063a7
call fcn.14000b43c
mov ecx, 0x270f
lea rdx, str._nScanner_terminated_unsuccessfully._n
call fcn.14000ba0a
call fcn.14000b7c0
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdd0]
call sub.oracore11.dll_lrmtrm
mov rbx, qword [0x14004be00]
mov rcx, qword [rbx + 0xdc0]
mov rdx, qword [rbx + 0xdc8]
xor r8d, r8d
call sub.oracore11.dll_lmmhpfree
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdb8]
call sub.oracore11.dll_lpmterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x1490]
call sub.oranls11.dll_lmsatrm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x2e8]
call sub.oranls11.dll_lxlterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x48]
call sub.oracore11.dll_sltster
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140005ecf
mov r8, qword [rsp + 0x40]
mov ecx, 0x270f
lea rdx, str.failed_to_parse__s_as_a_valid_table_n
call fcn.14000bad2
mov r8, qword [0x14004be00]
mov rcx, qword [r8 + 0x38]
movsx rdx, byte [rcx + 0x1a0]
test edx, edx
je 0x14000647c
call fcn.14000be68
mov r8, qword [0x14004be00]
mov rcx, qword [r8 + 0x40]
test rcx, rcx
je 0x140006491
call fcn.14000b43c
mov r8, qword [0x14004be00]
mov rcx, qword [r8 + 0x620]
test rcx, rcx
je 0x1400064a9
call fcn.14000b43c
mov r8, qword [0x14004be00]
mov rcx, qword [r8 + 0x30]
test rcx, rcx
je 0x1400064be
call fcn.14000b43c
mov r8, qword [0x14004be00]
mov rcx, qword [r8 + 0x38]
test rcx, rcx
je 0x1400064cc
call fcn.14000b43c
mov ecx, 0x270f
lea rdx, str._nScanner_terminated_unsuccessfully._n
call fcn.14000ba0a
call fcn.14000b7c0
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdd0]
call sub.oracore11.dll_lrmtrm
mov r9, qword [0x14004be00]
mov rcx, qword [r9 + 0xdc0]
mov rdx, qword [r9 + 0xdc8]
xor r8d, r8d
call sub.oracore11.dll_lmmhpfree
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0xdb8]
call sub.oracore11.dll_lpmterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x1490]
call sub.oranls11.dll_lmsatrm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x2e8]
call sub.oranls11.dll_lxlterm
mov rdx, qword [0x14004be00]
mov rcx, qword [rdx + 0x48]
call sub.oracore11.dll_sltster
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140005f3c