Function at 0x7ff74ae50a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov dword [rax + 0x20], r9d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x110
mov r14d, dword [0x7ff74b5829c]
xor ebp, ebp
mov rsi, r8
mov r13d, r14d
shr r14d, 3
mov qword [rax - 0xc0], rbp
shr r13d, 2
lea eax, [rbp + 1]
mov r9, rdx
not r13d
and r14d, eax
mov r10, rcx
and r13d, eax
mov r12, rbp
mov ebx, ebp
mov dword [rsp + 0x98], ebp
mov dword [rsp + 0x5c], ebp
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0x64], ebp
mov dword [rsp + 0x60], ebp
cmp rdx, rbp
je 0x7ff74b1396e
cmp r8, rbp
je 0x7ff74b1396e
mov r15, qword [rsp + 0x180]
cmp r15, rbp
je 0x7ff74b1396e
cmp qword [rsp + 0x188], rbp
je 0x7ff74b1396e
cmp qword [rsp + 0x1c8], rbp
je 0x7ff74b1396e
mov rcx, r8
call fcn.7ff74ae3aec
cmp eax, ebp
je 0x7ff74b1396e
lea rax, [0x7ff74b58350]
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74ae5191
mov rcx, qword [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74ae5191
test byte [rcx + 0x1c], 8
jne 0x7ff74b12c75
mov ax, word [rsp + 0x170]
mov ecx, 0x1f
mov dword [rsp + 0x54], eax
cmp ax, cx
je 0x7ff74b12cb3
cmp ax, bp
jne 0x7ff74ae51c2
lea rax, [rsi + 4]
cmp rax, rbp
je 0x7ff74ae51c2
cmp word [rax], cx
je 0x7ff74b12cb3
mov rcx, qword [0x7ff74b58420]
call fcn.7ff74ae3010
mov rcx, qword [0x7ff74b58490]
lea r11, [0x7ff74b4d8a0]
lea rdx, [rsp + 0xe0]
mov qword [rsp + 0xe0], r11
mov qword [rsp + 0xe8], rsi
call fcn.7ff74ae3770
mov rdi, rax
cmp rax, rbp
je 0x7ff74b12ccf
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74ae522a
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74ae522a
test byte [rcx + 0x1c], 8
jne 0x7ff74b12e05
xor esi, esi
cmp ebx, esi
jne 0x7ff74b13916
mov rsi, qword [rsp + 0x158]
mov r8, qword [rdi + 0x18]
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsi]
call fcn.7ff74ae3b64
mov rcx, qword [0x7ff74b58440]
lea rdx, [rsp + 0xf0]
call fcn.7ff74ae3770
mov r12, rax
xor eax, eax
cmp r12, rax
je 0x7ff74af1ad4
xor r14d, r14d
cmp dword [0x7ff74b582c8], r14d
je 0x7ff74ae529b
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74ae529b
test byte [rcx + 0x1c], 8
jne 0x7ff74b13897
mov r8, qword [r15 + 0x28]
mov esi, 1
mov r13d, esi
cmp r8, r14
jne 0x7ff74b138e5
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 8]
cmp ebp, eax
jne 0x7ff74af1ae1
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 8]
mov rcx, qword [0x7ff74b58420]
or rax, 0xffffffffffffffff
lock add dword [rcx + 0x3c], eax
xor ebp, ebp
mov dword [rcx + 0x40], ebp
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test byte [rdi + 0x2c], 2
je 0x7ff74b12efe
mov rcx, qword [0x7ff74b58418]
call fcn.7ff74ae3060
mov r11, qword [rsi]
lea rax, [0x7ff74b48970]
mov qword [rsp + 0xd8], r11
mov qword [rsp + 0xd0], rax
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b12e73
mov rcx, qword [0x7ff74b58350]
lea rbx, [0x7ff74b58350]
cmp rcx, rbx
je 0x7ff74af1b54
test byte [rcx + 0x1c], 0x20
jne 0x7ff74b12e4e
mov rcx, qword [0x7ff74b58438]
lea rdx, [rsp + 0xd0]
call fcn.7ff74ae3770
mov rsi, rax
cmp rax, rbp
je 0x7ff74b12ea9
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74af1b92
mov rcx, qword [0x7ff74b58350]
cmp rcx, rbx
je 0x7ff74af1b92
test byte [rcx + 0x1c], 8
jne 0x7ff74b12e7f
mov r8d, 1
mov rdx, r15
mov rcx, rsi
call fcn.7ff74af1910
xor r9d, r9d
mov ebx, eax
mov eax, dword [rsi + 0x68]
mov qword [rsp + 0x178], r9
shl eax, 0x1f
sar eax, 0x1f
mov dword [rsp + 0x98], eax
cmp ebx, r9d
jne 0x7ff74af1bd7
mov rcx, qword [r15 + 0x28]
call fcn.7ff74ae3aec
cmp eax, r9d
je 0x7ff74b12ea7
mov rcx, qword [0x7ff74b58418]
or rdx, 0xffffffffffffffff
mov eax, edx
lock xadd dword [rcx + 0x38], eax
add eax, edx
jne 0x7ff74af1bf7
cmp dword [rcx + 0x3c], r9d
jne 0x7ff74b12eef
mov r13d, dword [rsp + 0x5c]
mov esi, 1
mov rcx, qword [0x7ff74b58420]
call fcn.7ff74ae3010
xor r14d, r14d
cmp ebx, r14d
jne 0x7ff74b13889
cmp word [rdi + 0x28], r14w
jne 0x7ff74b13729
cmp dword [0x7ff74b582c8], r14d
je 0x7ff74af1c4a
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74af1c4a
test byte [rcx + 0x1c], 8
jne 0x7ff74b1373b
and dword [rdi + 0x2c], 0xfffffffe
mov rcx, qword [0x7ff74b58440]
lea rdx, [rsp + 0xf0]
call fcn.7ff74ae3770
mov r12, rax
cmp rax, r14
jne 0x7ff74b13808
mov rcx, qword [r15 + 0x28]
call fcn.7ff74ae3aec
cmp eax, r14d
je 0x7ff74b137f5
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
mov r8d, 0x88
call qword [0x7ff74b58358]
mov rsi, qword [rsp + 0x178]
cmp rax, r14
je 0x7ff74b1377e
mov ecx, dword [rsp + 0x98]
mov rdx, qword [rsp + 0x158]
movzx r9d, bp
mov dword [rsp + 0x28], ecx
mov rcx, rax
mov r8, rdi
mov qword [rsp + 0x20], rsi
call fcn.7ff74af19e4
mov r12, rax
jmp 0x7ff74af1cd2
cmp r12, r14
je 0x7ff74b137e1
mov rdx, r15
mov rcx, r12
call fcn.7ff74af1d60
mov ebx, eax
cmp eax, r14d
jne 0x7ff74b137c9
cmp dword [0x7ff74b582c8], r14d
je 0x7ff74af1d17
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74af1d17
test byte [rcx + 0x1c], 8
jne 0x7ff74b13786
mov rcx, qword [0x7ff74b58440]
mov rdx, r12
call fcn.7ff74ae3cf4
jmp 0x7ff74af1d28
mov esi, 1
jmp 0x7ff74af1d2f
mov rdx, qword [rsp + 0x178]
mov r9, qword [r9]
mov rcx, qword [rcx + 0x10]
cmp rdx, rbp
lea rax, [0x7ff74b48980]
lea r8, [0x7ff74b51050]
cmovne rax, rdx
lea edx, [rbp + 0x17]
mov qword [rsp + 0x20], rax
call fcn.7ff74b265d0
mov r10, qword [rsp + 0x150]
jmp 0x7ff74ae5191
mov rcx, r10
call qword [sym.imp.RPCRT4.dll_RpcImpersonateClient]
xor ecx, ecx
cmp eax, ecx
sete bpl
mov dword [rsp + 0x64], ebp
xor ebp, ebp
jmp 0x7ff74ae51c2
movzx eax, word [rsi]
mov ebx, ebp
mov ebp, 1
lea r8, [rax + rax + 0x50]
mov dword [rsp + 0x9c], ebx
cmp r8, 0x50
jb 0x7ff74b12d2d
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [0x7ff74b58358]
xor ecx, ecx
cmp rax, rcx
je 0x7ff74b12d2d
lea rcx, [rsp + 0x9c]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov rdx, rsi
call fcn.7ff74afd39c
mov ebx, dword [rsp + 0x9c]
xor esi, esi
mov rdi, rax
jmp 0x7ff74b12d32
xor esi, esi
mov rdi, rsi
cmp rdi, rsi
je 0x7ff74b12dfb
cmp ebx, esi
je 0x7ff74b12dee
mov rcx, qword [0x7ff74b58490]
mov rdx, rdi
call fcn.7ff74ae3cf4
movzx r11d, word [rsp + 0x198]
mov r8, qword [rsp + 0x1a8]
mov edx, dword [rsp + 0x1a0]
mov rcx, rdi
mov word [rdi + 0x28], r11w
call fcn.7ff74b2af58
mov ebx, eax
cmp dword [0x7ff74b582c8], esi
je 0x7ff74ae522c
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74ae522c
test byte [rcx + 0x1c], 8
je 0x7ff74ae522c
test byte [rdi + 0x2c], 2
je 0x7ff74b12db5
lea rax, str.LOCAL
jmp 0x7ff74b12dcb
mov rax, qword [rdi + 0x20]
cmp rax, rsi
je 0x7ff74b12dc4
add rax, 2
jmp 0x7ff74b12dcb
lea rax, str.REMOTE__no_bindings_
mov r9, qword [rdi + 0x18]
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x18
mov qword [rsp + 0x20], rax
call fcn.7ff74b265d0
jmp 0x7ff74ae522c
mov rax, qword [rdi]
mov edx, ebp
mov rcx, rdi
call qword [rax]
mov rdi, rsi
mov ebx, 0xe
jmp 0x7ff74ae522c
test byte [rdi + 0x2c], 2
je 0x7ff74b12e14
lea rax, str.LOCAL
jmp 0x7ff74b12e2a
mov rax, qword [rdi + 0x20]
cmp rax, rbp
je 0x7ff74b12e23
add rax, 2
jmp 0x7ff74b12e2a
lea rax, str.REMOTE__no_bindings_
mov r9, qword [rdi + 0x18]
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x19
mov qword [rsp + 0x20], rax
call fcn.7ff74b265d0
nop
jmp 0x7ff74ae522a
mov rcx, qword [rcx + 0x10]
lea edx, [rbp + 0xa]
lea r9, [rsp + 0xd0]
lea r8, [0x7ff74b51c50]
mov qword [rsp + 0x20], r11
call fcn.7ff74b26260
jmp 0x7ff74af1b54
lea rbx, [0x7ff74b58350]
jmp 0x7ff74af1b54
mov rax, qword [rax + 0x18]
mov r9, qword [rdi + 0x18]
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x1a
mov qword [rsp + 0x20], rax
call fcn.7ff74b26260
nop
jmp 0x7ff74af1b92
jmp 0x7ff74b12ee5
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b12ede
mov rcx, qword [0x7ff74b58350]
cmp rcx, rbx
je 0x7ff74b12ede
mov eax, 1
test byte [rcx + 0x1c], al
je 0x7ff74b12ede
mov r9, qword [rdi + 0x18]
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x1a]
lea r8, [0x7ff74b51050]
call fcn.7ff74b263d0
mov ebp, dword [rsp + 0x54]
xor r9d, r9d
mov ebx, 0x776
jmp 0x7ff74af1bd7
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x7ff74af1bf7
lea rax, [r15 + 0x28]
mov qword [rsp + 0xb0], rax
cmp qword [rax], rbp
jne 0x7ff74b1370f
lea rdx, [rsp + 0x68]
mov rcx, rdi
mov qword [rax], rbp
call fcn.7ff74b2ab28
mov ebx, eax
cmp eax, ebp
jne 0x7ff74b13720
cmp r13d, ebp
jne 0x7ff74b12fdc
test byte [rdi + 0x2c], 2
jne 0x7ff74b12f4e
mov eax, 1
test byte [rdi + 0x2c], al
je 0x7ff74b12f4e
mov r15d, ebp
jmp 0x7ff74b12fe2
mov r15d, dword [0x7ff74b582f4]
inc r15d
mov dword [rsp + 0x58], r15d
mov rcx, qword [0x7ff74b58350]
mov r10d, 1
mov eax, dword [0x7ff74b582f4]
movzx edx, word [rdi + 0x28]
movsxd rsi, r15d
add eax, 2
mov word [rsp + 0x50], dx
cmp r15d, eax
jae 0x7ff74b136dc
movsxd r9, r14d
mov r14d, dword [rsp + 0x58]
shl rsi, 4
movsxd r8, r13d
sub rsi, 0x10
mov r11d, 9
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x78], r9
mov eax, dword [0x7ff74b582f4]
mov r15d, ebp
inc eax
cmp r14d, eax
jae 0x7ff74b132e2
cmp r14d, ebp
jne 0x7ff74b130f7
mov r14w, dx
jmp 0x7ff74b1311f
mov r15d, 1
mov rcx, qword [rdi + 0x20]
mov dword [rsp + 0x58], r15d
call fcn.7ff74b2a0bc
mov rsi, rax
cmp rax, rbp
je 0x7ff74b13075
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rcx, 0xffffffffffffffff
movsxd rbp, eax
mov eax, 2
add rbp, 8
mul rbp
cmovo rax, rcx
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
mov r8, rax
call qword [0x7ff74b58358]
xor ecx, ecx
mov qword [rsp + 0xa8], rax
cmp rax, rcx
je 0x7ff74b13061
lea r8, str.RPCSS_
mov rdx, rbp
mov rcx, rax
call fcn.7ff74af051c
mov rcx, qword [rsp + 0xa8]
mov r8, rsi
mov rdx, rbp
call fcn.7ff74af91bc
mov rcx, qword [0x7ff74b584e0]
mov r8, rsi
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
xor ebp, ebp
cmp dword [rsp + 0x64], ebp
jne 0x7ff74b12f5d
mov rcx, qword [rsp + 0x150]
call qword [sym.imp.RPCRT4.dll_RpcImpersonateClient]
cmp eax, ebp
je 0x7ff74b130e0
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b12f5d
mov rcx, qword [0x7ff74b58350]
lea rdx, [0x7ff74b58350]
cmp rcx, rdx
je 0x7ff74b12f64
mov r8d, 1
test byte [rcx + 0x1c], r8b
je 0x7ff74b12f64
mov rcx, qword [rcx + 0x10]
lea edx, [r8 + 0x1b]
lea r8, [0x7ff74b51050]
mov r9d, eax
call fcn.7ff74b25ec4
jmp 0x7ff74b12f5d
mov rcx, qword [0x7ff74b58350]
mov r10d, 1
mov dword [rsp + 0x64], r10d
jmp 0x7ff74b12f6a
mov rax, qword [0x7ff74b584d8]
mov r14w, word [rsi + rax + 8]
cmp r8, rbp
je 0x7ff74b13115
cmp r14w, r11w
jne 0x7ff74b1357d
jmp 0x7ff74b1311f
cmp r14w, dx
je 0x7ff74b1357d
cmp r8, rbp
jne 0x7ff74b13154
movzx eax, word [rdi + 0x4a]
lea rdx, [rdi + rax*2 + 0x4c]
jmp 0x7ff74b13147
cmp ax, r14w
je 0x7ff74b13154
cmp ax, bp
je 0x7ff74b13143
add rdx, 2
cmp word [rdx], bp
jne 0x7ff74b1313a
add rdx, 2
movzx eax, word [rdx]
cmp ax, bp
jne 0x7ff74b1312f
jmp 0x7ff74b13578
mov dword [rsp + 0xc0], r10d
mov dword [rsp + 0xc4], r10d
mov dword [rsp + 0xc8], r10d
mov dword [rsp + 0xcc], 3
cmp r14w, r11w
jne 0x7ff74b131a3
mov rdx, qword [rsp + 0x68]
mov rcx, qword [0x7ff74b58388]
call fcn.7ff74b286d0
mov rcx, qword [0x7ff74b58350]
mov r13d, 1
cmp eax, ebp
cmovne r15d, r13d
jmp 0x7ff74b131a9
mov r13d, 1
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b131e9
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b131e9
test byte [rcx + 0x1c], 8
je 0x7ff74b131e9
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
movzx r9d, r14w
mov edx, 0x1d
mov qword [rsp + 0x20], rax
call fcn.7ff74b278ac
mov rdx, qword [rsp + 0xa8]
or r9d, 0xffffffff
mov ecx, 0xffff
cmp r14w, cx
mov rcx, qword [rsp + 0x68]
movzx eax, r14w
cmovne r9d, eax
lea rax, [rsp + 0xc0]
mov r8d, 2
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
call qword [sym.imp.RPCRT4.dll_RpcBindingSetAuthInfoExW]
cmp eax, ebp
je 0x7ff74b1333a
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b1326e
mov rcx, qword [0x7ff74b58350]
lea rdx, [0x7ff74b58350]
cmp rcx, rdx
je 0x7ff74b13275
test byte [rcx + 0x1c], r13b
je 0x7ff74b13275
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x1e
mov r9d, eax
call fcn.7ff74b25ec4
mov rcx, qword [0x7ff74b58350]
cmp r15d, ebp
je 0x7ff74b13561
mov rdx, qword [rsp + 0x68]
mov rcx, qword [0x7ff74b58388]
lea rax, [rsp + 0xb8]
lea r9, [rsp + 0xa0]
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov dword [rsp + 0xa0], ebp
mov qword [rsp + 0xb8], rbp
call fcn.7ff74b28884
cmp dword [rsp + 0xa0], ebp
je 0x7ff74b132d6
mov r8, qword [rsp + 0xb8]
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov rcx, qword [0x7ff74b58350]
jmp 0x7ff74b13561
cmp r9, rbp
jne 0x7ff74b136dc
mov r14d, ebp
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b1331d
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b1331d
test byte [rcx + 0x1c], 8
je 0x7ff74b1331d
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x1f
call fcn.7ff74b25da0
mov rcx, qword [rsp + 0x68]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
call qword [sym.imp.RPCRT4.dll_RpcBindingSetAuthInfoW]
mov rax, qword [rsp + 0x180]
movzx ecx, word [0x7ff74b582d8]
mov r9, qword [rsp + 0x158]
mov r8, qword [rsp + 0x68]
lea r13, [rax + 0xc]
lea rsi, [rax + 8]
mov qword [rsp + 0x48], r13
lea rbp, [rax + 0x10]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rax
mov rax, qword [0x7ff74b58410]
lea rdx, [0x7ff74b515a6]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [0x7ff74b4b0b0]
call sub.RPCRT4.dll_NdrClientCall2
xor edx, edx
mov rbx, rax
cmp dword [0x7ff74b582c8], edx
je 0x7ff74b133e1
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b133e8
test byte [rcx + 0x1c], 8
je 0x7ff74b133e8
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x20
mov r9d, ebx
call fcn.7ff74b25ec4
xor edx, edx
mov rcx, qword [0x7ff74b58350]
cmp ebx, 0x6d1
jne 0x7ff74b134a6
movzx ecx, word [0x7ff74b582d8]
mov r9, qword [rsp + 0x158]
mov qword [rsp + 0x40], rsi
mov rsi, qword [rsp + 0xb0]
mov qword [rsp + 0x38], rbp
mov eax, 5
mov word [r13], ax
mov rax, qword [rsp + 0x180]
mov r8d, 1
mov word [rax + 0xe], r8w
mov r8, qword [rsp + 0x68]
mov dword [rax + 0x20], edx
mov rax, qword [0x7ff74b58410]
mov qword [rsp + 0x30], rsi
lea rdx, [0x7ff74b514c2]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [0x7ff74b4b0b0]
call sub.RPCRT4.dll_NdrClientCall2
xor ebp, ebp
mov ebx, eax
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b1349d
mov rcx, qword [0x7ff74b58350]
lea rdx, [0x7ff74b58350]
cmp rcx, rdx
je 0x7ff74b134b0
test byte [rcx + 0x1c], 8
je 0x7ff74b134b0
mov rcx, qword [rcx + 0x10]
lea edx, [rbp + 0x21]
lea r8, [0x7ff74b51050]
mov r9d, eax
call fcn.7ff74b25ec4
mov rcx, qword [0x7ff74b58350]
jmp 0x7ff74b134b0
mov rsi, qword [rsp + 0xb0]
xor ebp, ebp
cmp r15d, ebp
je 0x7ff74b134fc
mov rdx, qword [rsp + 0x68]
mov rcx, qword [0x7ff74b58388]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
cmp ebx, ebp
jne 0x7ff74b134ea
lea r8, [rsp + 0x70]
call fcn.7ff74b28884
cmp eax, ebp
jne 0x7ff74b13500
mov r15d, ebp
jmp 0x7ff74b13500
xor r8d, r8d
call fcn.7ff74b28884
mov rcx, qword [0x7ff74b58350]
mov r15d, ebp
cmp ebx, ebp
jne 0x7ff74b1350c
mov rcx, r13
call fcn.7ff74b284bc
mov ebx, eax
jmp 0x7ff74b13529
cmp dword [rsp + 0x60], ebp
je 0x7ff74b13530
mov r8, qword [rsp + 0x88]
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov rcx, qword [0x7ff74b58350]
cmp ebx, ebp
je 0x7ff74b135f2
mov eax, 5
cmp ebx, eax
je 0x7ff74b13559
cmp ebx, 0x6d3
je 0x7ff74b13559
cmp ebx, 0x6d6
je 0x7ff74b13559
cmp ebx, 0x721
jne 0x7ff74b135ad
mov rsi, qword [rsp + 0x90]
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x78]
mov r10d, 1
lea r11d, [r10 + 8]
mov dx, word [rsp + 0x50]
mov r14d, dword [rsp + 0x58]
mov eax, dword [0x7ff74b582f4]
add rsi, 0x10
add r14d, r10d
add eax, 2
mov qword [rsp + 0x90], rsi
mov dword [rsp + 0x58], r14d
cmp r14d, eax
jae 0x7ff74b136dc
jmp 0x7ff74b12fb6
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b136dc
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b136dc
mov eax, 1
test byte [rcx + 0x1c], al
je 0x7ff74b136dc
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0x22]
lea r8, [0x7ff74b51050]
mov r9d, ebx
call fcn.7ff74b25ec4
jmp 0x7ff74b136dc
cmp r15d, ebp
je 0x7ff74b13623
movzx eax, word [rsp + 0x70]
mov ecx, 0x10
cmp ax, cx
jne 0x7ff74b13609
lea eax, [rcx - 7]
mov r8, qword [rsp + 0x88]
mov edx, dword [rsp + 0x60]
mov rcx, rdi
mov word [rdi + 0x28], ax
call fcn.7ff74b2af58
jmp 0x7ff74b13645
mov word [rdi + 0x28], r14w
cmp dword [rsp + 0x60], ebp
je 0x7ff74b13645
mov r8, qword [rsp + 0x88]
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov r9, qword [rsi]
mov rcx, r9
call fcn.7ff74ae3aec
cmp eax, ebp
je 0x7ff74b1365e
mov bp, word [r9 + 4]
jmp 0x7ff74b136e0
cmp r9, rbp
je 0x7ff74b13678
mov rcx, qword [0x7ff74b584e0]
mov r8, r9
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov qword [rsi], rbp
cmp dword [0x7ff74b582c8], ebp
je 0x7ff74b136d7
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b136d7
mov eax, 1
test byte [rcx + 0x1c], al
je 0x7ff74b136d7
test byte [rdi + 0x2c], 2
je 0x7ff74b136ac
lea r9, str.LOCAL
jmp 0x7ff74b136c2
mov r9, qword [rdi + 0x20]
cmp r9, rbp
je 0x7ff74b136bb
add r9, 2
jmp 0x7ff74b136c2
lea r9, str.REMOTE__no_bindings_
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x22
call fcn.7ff74b25f00
mov ebx, 0x776
mov ebp, dword [rsp + 0x54]
lea rcx, [rsp + 0x68]
call qword [sym.imp.RPCRT4.dll_RpcBindingFree]
mov r8, qword [rsp + 0xa8]
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov r15, qword [rsp + 0x180]
jmp 0x7ff74af1bf7
mov ebp, dword [rsp + 0x54]
mov esi, 1
mov r13d, esi
jmp 0x7ff74af1c01
mov ebp, dword [rsp + 0x54]
jmp 0x7ff74af1bf7
cmp dword [rsp + 0x190], esi
je 0x7ff74af1c24
jmp 0x7ff74af1c4e
test byte [rdi + 0x2c], 2
je 0x7ff74b1374a
lea rax, str.LOCAL
jmp 0x7ff74b13760
mov rax, qword [rdi + 0x20]
cmp rax, r14
je 0x7ff74b13759
add rax, 2
jmp 0x7ff74b13760
lea rax, str.REMOTE__no_bindings_
mov rcx, qword [rcx + 0x10]
lea r8, [0x7ff74b51050]
mov edx, 0x24
mov r9, rax
call fcn.7ff74b25f00
nop
jmp 0x7ff74af1c4a
mov r12, r14
jmp 0x7ff74af1cd2
mov rcx, qword [rcx + 0x10]
cmp rsi, r14
movzx eax, bp
lea r9, [0x7ff74b48980]
lea r8, [0x7ff74b51050]
mov edx, 0x25
cmovne r9, rsi
mov qword [rsp + 0x30], r9
mov r9, qword [r12 + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x20], rax
call fcn.7ff74b27ac8
nop
jmp 0x7ff74af1d17
mov rax, qword [r12]
mov esi, 1
mov rcx, r12
mov edx, esi
call qword [rax]
mov r12, r14
jmp 0x7ff74af1d2f
mov rax, qword [rdi]
mov rcx, rdi
mov ebx, 0xe
call qword [rax + 0x10]
nop
jmp 0x7ff74af1d28
mov rax, qword [rdi]
mov rcx, rdi
mov ebx, 0x776
call qword [rax + 0x10]
jmp 0x7ff74af1d2f
cmp dword [0x7ff74b582c8], r14d
je 0x7ff74b1386f
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
jmp 0x7ff74ae52ba
mov rax, qword [rsp + 0x178]
mov ebp, dword [rsp + 0x54]
mov rcx, qword [rcx + 0x10]
cmp rax, r14
lea r9, [0x7ff74b48980]
lea edx, [r14 + 0x27]
cmovne r9, rax
movzx eax, bp
lea r8, [0x7ff74b51050]
mov qword [rsp + 0x30], r9
mov r9, qword [r12 + 0x18]
mov dword [rsp + 0x28], eax
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x20], rax
call fcn.7ff74b27ac8
nop
jmp 0x7ff74ae529b
mov rcx, qword [0x7ff74b584e0]
xor edx, edx
call qword [case.0x7ff74b3e5fd.0]
mov qword [r15 + 0x28], r14
jmp 0x7ff74ae52b0
xor r14d, r14d
lea esi, [r14 + 1]
jmp 0x7ff74ae52cb
mov eax, 0x57
jmp 0x7ff74ae536f