Function at 0x140086130
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov r14, rdx
mov r15, rcx
mov ebp, 0xa8
lea rcx, [0x140132328]
mov edx, ebp
call fcn.1400ca6a8
mov rbx, rax
lea rcx, vtable.node_id.0
xor r12d, r12d
lea rax, str._StubMsg
mov r13d, 0xfffffffe
test rbx, rbx
je 0x1400861ee
and dword [rbx + 0x90], r13d
mov qword [rbx + 0x20], r12
mov word [rbx + 0x28], r12w
mov qword [rbx + 0x30], r12
mov byte [rbx + 0x18], 0x1f
mov qword [rbx + 8], r12
mov word [rbx + 0x1a], r12w
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x38], r12
mov qword [rbx + 0x40], rax
mov qword [rbx + 0x50], rax
mov qword [rbx + 0x48], r12
mov qword [rbx + 0x58], r12
mov qword [rbx + 0x60], r12
mov qword [rbx + 0x70], r12
mov qword [rbx + 0x78], r12
mov qword [rbx + 0x80], r12
mov dword [rbx + 0x68], r12d
mov qword [rbx + 0x88], r12
mov qword [rbx], rcx
mov qword [rbx + 0xa0], r12
mov qword [rbx + 0x98], r12
jmp 0x1400861f1
mov rbx, r12
mov edi, 0xc8
mov ecx, edi
call fcn.1400ca61c
lea rcx, vtable.node_param.0
mov rsi, rax
test rax, rax
je 0x14008629b
and dword [rsi + 0x90], r13d
and dword [rsi + 0x98], 0xffffe000
and dword [rsi + 0xc0], 0xfffffe00
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1c
mov qword [rax + 8], r12
movzx eax, word [0x140134370]
mov word [rsi + 0x1a], ax
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x38], r12
mov qword [rsi + 0x40], r12
mov qword [rsi + 0x50], r12
mov qword [rsi + 0x48], r12
mov qword [rsi + 0x58], r12
mov qword [rsi + 0x60], r12
mov qword [rsi + 0x70], r12
mov qword [rsi + 0x78], r12
mov qword [rsi + 0x80], r12
mov dword [rsi + 0x68], r12d
mov qword [rsi + 0x88], r12
mov qword [rsi], rcx
mov qword [rsi + 0xa0], r12
mov qword [rsi + 0xa8], r12
mov qword [rsi + 0xb8], r12
jmp 0x14008629e
mov rsi, r12
mov rcx, rdi
call fcn.1400ca61c
mov rdi, rax
test rax, rax
je 0x140086344
and dword [rdi + 0x90], r13d
and dword [rdi + 0x98], 0xffffe000
and dword [rdi + 0xc0], 0xfffffe00
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1c
mov qword [rax + 8], r12
movzx eax, word [0x140134370]
mov word [rdi + 0x1a], ax
lea rax, vtable.node_param.0
mov qword [rdi], rax
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x38], r12
mov qword [rdi + 0x40], r12
mov qword [rdi + 0x50], r12
mov qword [rdi + 0x48], r12
mov qword [rdi + 0x58], r12
mov qword [rdi + 0x60], r12
mov qword [rdi + 0x70], r12
mov qword [rdi + 0x78], r12
mov qword [rdi + 0x80], r12
mov dword [rdi + 0x68], r12d
mov qword [rdi + 0x88], r12
mov qword [rdi + 0xa0], r12
mov qword [rdi + 0xa8], r12
mov qword [rdi + 0xb8], r12
jmp 0x140086347
mov rdi, r12
lea rax, str._pRpcMessage
mov rcx, rbp
mov qword [rsi + 0x40], rax
call fcn.1400ca61c
lea rdx, vtable.node_def.0
mov rcx, rax
test rax, rax
je 0x1400863e5
and dword [rax + 0x90], r13d
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1e
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
lea rax, str.PRPC_MESSAGE
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x50], rax
mov eax, dword [rcx + 0x18]
shr eax, 8
and al, 0xf8
mov qword [rcx + 0x48], r12
mov byte [rcx + 0x19], al
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x70], r12
mov qword [rcx + 0x78], r12
mov qword [rcx + 0x80], r12
mov dword [rcx + 0x68], r12d
mov qword [rcx + 0x88], r12
mov qword [rcx], rdx
mov qword [rcx + 0x98], r12
mov dword [rcx + 0xa0], r12d
jmp 0x1400863e8
mov rcx, r12
bts qword [rsi + 0x20], 0x1b
lea r8, str._pRpcMessage
mov qword [rsi + 8], rcx
mov r9, rsi
mov rdx, qword [r14 + 0x10]
add rdx, 0x48
call fcn.1400be634
mov rax, qword [r15]
mov rcx, r15
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x1400864e3
lea rsi, str._pdwStubPhase
mov rcx, rbp
mov qword [rdi + 0x40], rsi
call fcn.1400ca61c
mov rcx, rax
test rax, rax
je 0x1400864c3
and dword [rax + 0x90], r13d
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1e
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
lea rax, str.DWORD_
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x50], rax
lea rax, vtable.node_def.0
mov qword [rcx], rax
mov eax, dword [rcx + 0x18]
shr eax, 8
and al, 0xf8
mov qword [rcx + 0x48], r12
mov byte [rcx + 0x19], al
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x70], r12
mov qword [rcx + 0x78], r12
mov qword [rcx + 0x80], r12
mov dword [rcx + 0x68], r12d
mov qword [rcx + 0x88], r12
mov qword [rcx + 0x98], r12
mov dword [rcx + 0xa0], r12d
jmp 0x1400864c6
mov rcx, r12
bts qword [rdi + 0x20], 0x1b
mov r9, rdi
mov qword [rdi + 8], rcx
mov r8, rsi
mov rdx, qword [r14 + 0x10]
add rdx, 0x48
call fcn.1400be634
mov rcx, rbp
call fcn.1400ca61c
mov rcx, rax
test rax, rax
je 0x14008657a
and dword [rax + 0x90], r13d
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1e
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
lea rax, str.MIDL_STUB_MESSAGE
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x50], rax
lea rax, vtable.node_def.0
mov qword [rcx], rax
mov eax, dword [rcx + 0x18]
shr eax, 8
and al, 0xf8
mov qword [rcx + 0x48], r12
mov byte [rcx + 0x19], al
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x70], r12
mov qword [rcx + 0x78], r12
mov qword [rcx + 0x80], r12
mov dword [rcx + 0x68], r12d
mov qword [rcx + 0x88], r12
mov qword [rcx + 0x98], r12
mov dword [rcx + 0xa0], r12d
jmp 0x14008657d
mov rcx, r12
mov qword [rbx + 8], rcx
lea r8, str._StubMsg
mov esi, 0x8000000
mov r9, rbx
or qword [rbx + 0x20], rsi
mov rdx, qword [r14 + 0x10]
add rdx, 0x90
call fcn.1400be634
mov eax, dword [r15 + 0x98]
bt eax, 9
jae 0x140086706
mov rdx, rbp
lea rcx, [0x140132328]
call fcn.1400ca6a8
lea rdi, str.__MIDL_NotifyFlag
mov rbx, rax
test rax, rax
je 0x140086644
and dword [rax + 0x90], r13d
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1f
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], rdi
mov qword [rax + 0x50], rdi
mov qword [rax + 0x48], r12
mov qword [rax + 0x58], r12
mov qword [rax + 0x60], r12
mov qword [rax + 0x70], r12
mov qword [rax + 0x78], r12
mov qword [rax + 0x80], r12
mov dword [rax + 0x68], r12d
mov qword [rax + 0x88], r12
lea rax, vtable.node_id.0
mov qword [rbx], rax
mov qword [rbx + 0xa0], r12
mov qword [rbx + 0x98], r12
jmp 0x140086647
mov rbx, r12
mov rcx, rbp
call fcn.1400ca61c
mov rcx, rax
test rax, rax
je 0x1400866de
and dword [rax + 0x90], r13d
mov qword [rax + 0x20], r12
mov word [rax + 0x28], r12w
mov qword [rax + 0x30], r12
mov byte [rax + 0x18], 0x1e
mov qword [rax + 8], r12
mov word [rax + 0x1a], r12w
mov qword [rax + 0x10], r12
mov qword [rax + 0x38], r12
lea rax, str.boolean
mov qword [rcx + 0x40], rax
mov qword [rcx + 0x50], rax
lea rax, vtable.node_def.0
mov qword [rcx], rax
mov eax, dword [rcx + 0x18]
shr eax, 8
and al, 0xf8
mov qword [rcx + 0x48], r12
mov byte [rcx + 0x19], al
mov qword [rcx + 0x58], r12
mov qword [rcx + 0x60], r12
mov qword [rcx + 0x70], r12
mov qword [rcx + 0x78], r12
mov qword [rcx + 0x80], r12
mov dword [rcx + 0x68], r12d
mov qword [rcx + 0x88], r12
mov qword [rcx + 0x98], r12
mov dword [rcx + 0xa0], r12d
jmp 0x1400866e1
mov rcx, r12
or qword [rbx + 0x20], rsi
mov r9, rbx
mov qword [rbx + 8], rcx
mov r8, rdi
mov rdx, qword [r14 + 0x10]
add rdx, 0x90
call fcn.1400be634
mov eax, dword [r15 + 0x98]
bt eax, 0x10
jae 0x140086714
mov rcx, r14
call fcn.140087124
mov rdi, qword [r15 + 8]
movzx ecx, r12w
test rdi, rdi
je 0x140086897
mov rax, rdi
mov rax, qword [rax + 0x10]
inc cx
test rax, rax
jne 0x140086728
test cx, cx
je 0x140086897
test rdi, rdi
je 0x140086897
mov rbx, rdi
mov rdi, qword [rdi + 0x10]
mov rcx, rbx
mov rax, qword [rbx]
mov rax, qword [rax + 0x38]
call qword [case.0x1400cd70e.0]
mov rbx, qword [rbx + 8]
mov rbp, rax
mov rcx, qword [rbx]
mov rax, qword [rcx + 0x28]
mov rcx, rbx
call qword [case.0x1400cd70e.0]
cmp eax, 0x2d
jne 0x14008678d
mov rbx, qword [rbx + 8]
mov rcx, qword [rbx]
mov rax, qword [rcx + 0x28]
mov rcx, rbx
call qword [case.0x1400cd70e.0]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x58]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400867cd
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x60]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400867cd
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x68]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14008673d
lea r9, [0x14012cf68]
mov dword [rsp + 0x20], r12d
lea r8, [0x14012d4f8]
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
test rax, rax
je 0x1400867f5
mov rbp, qword [rbp + 0x40]
jmp 0x1400867fc
lea rbp, [0x1400f48cb]
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rbx + rbp], r12b
jne 0x140086800
add rbx, 0xa
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x140086874
add dword [0x140134854], ebx
lea r8, [0x140108288]
mov rdx, rbx
mov rcx, rax
call fcn.1400011d4
mov r8, rbp
mov rdx, rbx
mov rcx, rsi
call fcn.140001250
lea rdx, [0x1400f4b58]
mov rcx, rsi
call fcn.140086d74
mov rdx, qword [r14 + 0x10]
mov r9, rax
add rdx, 0x90
mov r8, rsi
call fcn.1400be634
jmp 0x14008673d
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret