Function at 0x140069260
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov rax, qword [0x140131c10]
xor rax, rsp
mov qword [rbp + 0x5c0], rax
mov rsi, qword [rcx + 8]
xor r12d, r12d
mov rdi, rcx
mov rbx, rdx
mov r14, rsi
movzx ecx, r12w
test rsi, rsi
je 0x1400696e6
mov rax, rsi
lea r13d, [r12 + 1]
mov rax, qword [rax + 0x10]
add cx, r13w
test rax, rax
jne 0x1400692b5
test cx, cx
je 0x1400696e6
mov rdx, qword [rdi + 0x30]
lea rcx, [rsp + 0x58]
call fcn.1400c9cd8
lea rax, [rsp + 0x58]
mov dword [rbp - 0x78], 0x40000
mov rcx, rdi
mov qword [rbx + 0x20], rax
mov r15d, 4
mov qword [rbx + 0x28], rdi
call fcn.14006a120
xor r9d, r9d
mov byte [rsp + 0x20], r13b
lea r8, str.the_RPC_client_stubs
mov rdx, rbx
mov rcx, rdi
call fcn.140068498
mov rax, qword [0x140134380]
cmp dword [rax + 0x80], r12d
je 0x14006932d
mov rax, qword [rbx + 0x20]
mov byte [rax + 4], r13b
mov r8d, r13d
lea rdx, str.string.h
mov rcx, rbx
call fcn.14005f22c
lea rcx, [rsp + 0x58]
call fcn.1400ca48c
test r14, r14
je 0x140069379
mov rax, r14
mov r14, qword [r14 + 0x10]
test byte [rax + 0xa4], r15b
jne 0x140069367
test dword [rbx + 0x18], 0x600
jne 0x140069349
mov r8d, r13d
lea rdx, str.malloc.h
mov rcx, rbx
call fcn.14005f22c
mov ecx, 0x100
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x40], rcx
lea r9, [rbp + 0x4c0]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
mov r8d, 3
mov qword [rsp + 0x20], rcx
mov rcx, qword [rdi + 0x38]
call fcn.1400cb4ec
test eax, eax
jne 0x14006972c
mov r9d, 0x304
lea r8, [rbp - 0x50]
lea rax, [rbp + 0x1b0]
mov edx, r9d
sub r8, rax
lea rcx, [rbp + 0x1b0]
lea rax, [rdx + 0x7ffffcfa]
test rax, rax
je 0x140069401
mov al, byte [r8 + rcx]
test al, al
je 0x140069401
mov byte [rcx], al
add rcx, r13
sub rdx, r13
jne 0x1400693e3
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], r12b
je 0x140069713
lea r8, [rbp + 0xb0]
mov rdx, r9
lea rcx, [rbp + 0x1b0]
call fcn.140001250
test eax, eax
js 0x14006975e
xor r8d, r8d
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call fcn.14005f22c
mov rdx, rbx
mov rcx, rdi
call fcn.140068be0
mov rdx, rbx
call fcn.140068a28
lea rcx, [rsp + 0x58]
call fcn.1400ca48c
mov rcx, rbx
call fcn.140061008
mov r14, qword [rbx + 0x20]
mov edx, 2
mov rcx, r14
call fcn.1400ca538
lea rdx, str.define_GENERIC_BINDING_TABLE_SIZE
mov rcx, r14
call fcn.1400c9f64
mov eax, r12d
cmp byte [r14], r13b
jne 0x1400694a2
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.msvcrt.dll_ftell]
nop dword [rax + rax]
lea rdx, [0x1401049a0]
mov dword [rdi + 0x50], eax
mov rcx, r14
call fcn.1400c9f64
mov rcx, r14
call fcn.1400ca48c
and dword [rbx + 0x18], 0xfd07ffff
mov rax, qword [0x140134380]
mov qword [rbx + 0x40], rdi
mov ecx, dword [rax + 0x78]
test ecx, ecx
jne 0x1400694e3
cmp dword [rax + 0x7c], r12d
je 0x140069745
test ecx, ecx
je 0x140069505
mov rcx, rbx
mov qword [rbx + 0x168], r12
mov qword [rbx + 0x170], r12
call fcn.1400b21d8
mov qword [rbx + 0x318], rax
jmp 0x14006959e
mov r14d, 0x148
cmp qword [rbx + 0x168], r12
jne 0x140069548
mov ecx, r14d
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x140069565
add dword [0x140134854], r14d
mov rcx, rax
call fcn.140079aa4
xor edx, edx
mov qword [rbx + 0x168], rax
mov rcx, rax
call fcn.140067ee8
cmp qword [rbx + 0x170], r12
jne 0x14006959e
mov rcx, r14
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
jne 0x140069588
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
add dword [0x140134854], r14d
mov rcx, rax
call fcn.140079aa4
mov qword [rbx + 0x170], rax
mov r14, rsi
test r14, r14
je 0x1400695e5
mov r15, r14
mov r14, qword [r14 + 0x10]
mov rcx, r15
mov rax, qword [r15]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x32
jne 0x1400695a1
mov rdx, rbx
mov rcx, r15
call fcn.14006ffa4
mov rax, qword [r15]
mov rdx, rbx
mov rcx, r15
mov rax, qword [rax + 0x270]
call qword [case.0x1400cd70e.0]
jmp 0x1400695a1
mov r14, qword [rbx + 0x20]
mov r15d, r12d
cmp byte [r14], r13b
jne 0x140069604
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.msvcrt.dll_ftell]
nop dword [rax + rax]
mov r15d, eax
mov edx, dword [rdi + 0x50]
mov rcx, r14
call fcn.1400ca444
mov rcx, qword [rbx + 0x240]
lea r8, [0x1401043f4]
mov edx, 0x14
mov r9d, dword [rcx + 0x800]
lea rcx, [rbp - 0x70]
sub r9d, r13d
call fcn.140001318
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.1400c9f64
mov edx, r15d
mov rcx, r14
call fcn.1400ca444
mov rax, qword [0x140134380]
cmp dword [rax + 0x80], r12d
je 0x140069664
mov rax, qword [rbx + 0x20]
mov byte [rax + 4], r12b
mov rdx, rbx
mov rcx, rdi
call fcn.14006904c
mov rcx, rbx
call fcn.1400a6a2c
mov rcx, rbx
call fcn.1400a7264
mov rdx, rbx
call fcn.140069780
test rsi, rsi
je 0x1400696c0
mov r14, rsi
mov rsi, qword [rsi + 0x10]
mov rcx, r14
mov rax, qword [r14]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x32
jne 0x140069687
mov rax, qword [r14]
mov rdx, rbx
mov rcx, r14
mov rax, qword [rax + 0x278]
call qword [case.0x1400cd70e.0]
jmp 0x140069687
mov r8b, r13b
mov rdx, rbx
mov rcx, rdi
call fcn.140068874
cmp byte [rsp + 0x58], r13b
jne 0x1400696e6
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.msvcrt.dll_fclose]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rbp + 0x5c0]
xor rcx, rsp
call fcn.1400caef0
mov rbx, qword [rsp + 0x720]
add rsp, 0x6d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, str.SUCCEEDED_hr_
mov edx, 0x2d7
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, str.SplitError__0
mov edx, 0x2d5
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, str.pCommand__IsNDR64Run____pCommand__IsNDRRun__
mov edx, 0x2f1
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, str.SUCCEEDED_hr_
mov edx, 0x2d9
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3