Function at 0x14008c210
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
mov rbx, qword [rdx + 0xb8]
xor r15d, r15d
mov qword [rsp + 0x98], rbx
mov rbp, rdx
mov r14, rcx
test rbx, rbx
je 0x14008ce80
mov rdx, rcx
mov rcx, rbx
call fcn.1400c9bb8
mov rax, qword [0x140134380]
cmp dword [rax + 0x78], r15d
jne 0x14008ce67
mov rcx, qword [r14 + 0x130]
test rcx, rcx
je 0x14008c281
mov rax, qword [rcx]
mov rdx, rbp
mov rax, qword [rax + 0x138]
call qword [case.0x1400cd70e.0]
mov rdx, rbp
mov rcx, r14
call fcn.140092d0c
test byte [r14 + 0xc8], 0x80
jne 0x14008c2be
call fcn.140092d94
mov rcx, r14
mov rdx, rbp
call fcn.140092d54
mov rcx, rbx
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.1400c9c94
mov rax, qword [r14]
mov rax, qword [rax + 0x1c0]
call qword [case.0x1400cd70e.0]
mov rcx, r14
cmp eax, 0xffffffff
jne 0x14008c29e
mov rax, qword [r14]
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
btr dword [rbp + 0x18], 0x11
mov r9d, 1
and eax, r9d
shl eax, 0x11
or dword [rbp + 0x18], eax
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x188], r14
mov qword [rsp + 0x28], rax
cmp qword [r14 + 0xb0], r15
je 0x14008c343
mov rdi, qword [r14 + 0xa8]
mov rcx, rdi
mov rax, qword [rdi]
mov dword [rdi + 0xa8], r15d
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
mov r9d, 1
cmp eax, 0x2e
jne 0x14008c343
mov byte [rdi + 0xbb], r9b
mov rax, qword [r14 + 8]
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov rbx, rax
mov dword [rsp + 0x90], ecx
movzx r14d, r15w
mov dword [rbp + 0x2d8], ecx
mov r13d, r15d
mov word [rsp + 0x88], r15w
mov r12d, r15d
test rbx, rbx
je 0x14008c4e6
mov rsi, rbx
mov rbx, qword [rbx + 0x10]
mov rdi, qword [rsi + 8]
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
mov ecx, 0
lea r9d, [rcx + 1]
cmp eax, 0x2c
je 0x14008c371
test byte [rsi + 0x98], 0x40
jne 0x14008c371
mov word [rsi + 0x9e], r14w
mov rdx, rbp
mov rax, qword [rbp + 0x198]
mov rcx, rdi
mov qword [rsp + 0x88], rax
inc r14w
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x198], rsi
mov rax, qword [rdi]
mov rax, qword [rax + 0x140]
call qword [case.0x1400cd70e.0]
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x190]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14008c436
mov rcx, qword [rdi + 8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x78]
call qword [case.0x1400cd70e.0]
mov ecx, dword [rsi + 0x98]
test eax, eax
je 0x14008c422
and ecx, 0xffffffef
jmp 0x14008c425
or ecx, 0x10
mov dword [rsi + 0x98], ecx
mov r9d, 1
jmp 0x14008c4c9
mov rax, qword [rdi]
mov rdx, rbp
mov rcx, rdi
mov rax, qword [rax + 0x178]
call qword [case.0x1400cd70e.0]
mov ecx, dword [rsi + 0x98]
mov r9d, 1
mov r8d, ecx
and r8d, r9d
cmp eax, 0xffffffff
je 0x14008c4ad
lea edx, [r12 + rax]
test r8d, r8d
je 0x14008c474
cmp edx, 0xff4c
jge 0x14008c483
add eax, r13d
test cl, 2
je 0x14008c490
cmp eax, 0xff4c
jl 0x14008c490
mov dword [rsp + 0x90], r9d
mov r15d, r9d
jmp 0x14008c4c9
and ecx, 0xffffffef
test r9b, cl
mov dword [rsi + 0x98], ecx
cmove edx, r12d
mov r12d, edx
test cl, 2
je 0x14008c4c9
mov r13d, eax
jmp 0x14008c4c9
mov eax, dword [rsp + 0x90]
test r8d, r8d
cmovne eax, r9d
test cl, 2
mov dword [rsp + 0x90], eax
cmovne r15d, r9d
mov rax, qword [rsp + 0x88]
xor ecx, ecx
mov qword [rbp + 0x1a0], rcx
mov qword [rbp + 0x198], rax
jmp 0x14008c371
mov rbx, qword [rsp + 0x98]
mov word [rsp + 0x88], r14w
mov r14, qword [rsp + 0x80]
mov rax, qword [r14 + 0xc0]
test rax, rax
je 0x14008c5ae
movzx ecx, word [rsp + 0x88]
mov rdx, rbp
mov word [rax + 0x9e], cx
add cx, r9w
mov rax, qword [r14 + 0xc0]
mov rsi, qword [rbp + 0x198]
mov word [rsp + 0x88], cx
mov rdi, qword [rax + 8]
mov qword [rbp + 0x1a0], rax
mov rcx, rdi
mov rax, qword [r14 + 0xc0]
mov qword [rbp + 0x198], rax
mov rax, qword [rdi]
mov rax, qword [rax + 0x140]
call qword [case.0x1400cd70e.0]
mov rax, qword [rdi]
mov rdx, rbp
mov rcx, rdi
mov rax, qword [rax + 0x178]
call qword [case.0x1400cd70e.0]
cmp eax, 0xffffffff
je 0x14008c59f
add eax, r13d
cmp eax, 0x10000
jge 0x14008c59f
mov r13d, eax
mov rax, qword [r14 + 0xc0]
and dword [rax + 0x98], 0xffffffef
jmp 0x14008c5a5
mov r15d, 1
mov qword [rbp + 0x198], rsi
xor ecx, ecx
mov rsi, qword [rbp + 0x170]
mov qword [rbp + 0x1a0], rcx
mov rcx, r14
mov rax, qword [r14]
mov edx, dword [rsi + 0x14]
mov rax, qword [rax + 0x1b8]
call qword [case.0x1400cd70e.0]
test byte [rbp + 0x30], 2
jne 0x14008c5ef
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x2a0]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14008c610
mov rdx, rbp
mov rcx, r14
call fcn.14008cea0
mov edx, r12d
mov rcx, rsi
call fcn.140079a30
mov edx, r13d
mov rcx, rsi
call fcn.140079a30
mov edx, dword [r14 + 0x98]
mov r8d, 1
mov eax, edx
mov edi, edx
shr edi, 0x11
shr eax, 0xf
and dil, r8b
shl al, 2
or dil, al
mov eax, edx
shr eax, 0xd
and al, r8b
shl dil, 2
or dil, al
mov rax, qword [r14 + 0xc0]
shl dil, 2
neg rax
mov eax, dword [rsp + 0x90]
sbb cl, cl
and al, r8b
and cl, 2
and edx, 0x410300
or dil, cl
or dil, al
add dil, dil
neg edx
sbb al, al
and r15b, r8b
and al, 0x40
or dil, al
mov rax, qword [0x140134380]
or dil, r15b
xor r15d, r15d
movzx r12d, r15w
mov dword [rsp + 0x90], r15d
mov r13d, r15d
test byte [rax + 0x1a], 0x20
je 0x14008c6c7
mov rdx, rbp
mov rcx, r14
call fcn.140084d50
movzx r12d, ax
test dil, 0x40
jne 0x14008c6b7
mov cl, r15b
cmp r15w, ax
je 0x14008c6b9
mov cl, 0x40
mov rax, qword [0x140134380]
and dil, 0xbf
or dil, cl
test byte [rax + 0x1a], 0x40
je 0x14008c6e6
or dil, 0x40
mov rdx, rbp
mov rcx, r14
call fcn.140084ed0
mov r13, rax
mov rax, qword [0x140134380]
test byte [rax + 0x1a], 0x80
je 0x14008c6fe
or dil, 0x40
mov rdx, rbp
mov rcx, r14
call fcn.140085398
mov r13, rax
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 0xd
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dil
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x14008c731
test byte [rax + 0x26], 0x80
je 0x14008c744
mov edx, 1
add dword [rsi + 0x14], edx
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008c744
mov dword [rsi + 0x18], eax
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov r9, qword [0x140134380]
movzx edx, word [rsp + 0x88]
mov byte [rcx + rax], 2
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi]
mov byte [rcx + rax], dl
test dword [r9 + 4], 0x20000000
je 0x14008c780
test byte [r9 + 0x26], 0x80
je 0x14008c797
mov r10d, 1
add dword [rsi + 0x14], r10d
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008c79d
mov dword [rsi + 0x18], eax
jmp 0x14008c79d
mov r10d, 1
test dil, 0x40
je 0x14008cbb3
mov al, byte [rsp + 0x88]
mov r8d, dword [r14 + 0x98]
mov ecx, r8d
shr ecx, 0x10
xor cl, al
and cl, r10b
xor al, cl
mov dl, al
and dl, 0xf9
test r10b, al
je 0x14008c7e8
mov ecx, r8d
mov eax, r8d
shr ecx, 0x12
and cl, r10b
shr eax, 0x13
add cl, cl
and al, r10b
or cl, al
add cl, cl
or cl, dl
jmp 0x14008c7ea
mov cl, dl
mov edi, dword [r9 + 0x38]
mov eax, r8d
shr edi, 0x1a
and cl, 7
and dil, r10b
shr eax, 0x17
add al, al
or dil, al
mov eax, r8d
add dil, dil
shr eax, 0x16
and al, r10b
or dil, al
mov eax, r8d
add dil, dil
shr eax, 9
and al, r10b
shr r8d, 8
or dil, al
and r8b, r10b
add dil, dil
or dil, r8b
shl dil, 3
or dil, cl
test byte [r9 + 0x1a], 0xc0
jne 0x14008c8ae
test byte [r9 + 0x1a], 0x20
mov rcx, rsi
je 0x14008c861
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi]
mov byte [rcx + rax], 0xa
jmp 0x14008c87b
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi]
mov byte [rcx + rax], 8
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x14008c895
test byte [rax + 0x26], 0x80
je 0x14008c92b
mov eax, 1
add dword [rsi + 0x14], eax
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008c92b
mov dword [rsi + 0x18], eax
jmp 0x14008c92b
cmp byte [r13 + 2], r10b
jle 0x14008c8bf
movsx r15d, byte [r13 + 2]
add r15d, 0xb
jmp 0x14008c8c5
mov r15d, 0xc
mov rcx, rsi
mov dword [rsp + 0x90], r15d
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov edx, r15d
mov rax, qword [rsi + 8]
mov r8d, 1
mov byte [rcx + rax], 2
and edx, 0x80000001
jge 0x14008c8fa
sub edx, r8d
or edx, 0xfffffffe
add edx, r8d
mov rax, qword [rsi]
add dl, r15b
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dl
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x14008c91c
test byte [rax + 0x26], 0x80
je 0x14008c928
add dword [rsi + 0x14], r8d
xor r15d, r15d
jmp 0x14008c89d
xor r15d, r15d
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 0xe
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dil
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x14008c95e
test byte [rax + 0x26], 0x80
je 0x14008c971
mov eax, 1
add dword [rsi + 0x14], eax
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008c971
mov dword [rsi + 0x18], eax
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x38]
call qword [case.0x1400cd70e.0]
mov rdi, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x108]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
mov edx, eax
mov rcx, rsi
call fcn.140067ee8
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x100]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
mov edx, eax
mov rcx, rsi
call fcn.140067ee8
test dword [r14 + 0x98], 0x300
je 0x14008ca06
lea rcx, [rbp + 0x300]
movzx edi, r15w
mov rax, qword [rcx]
test rax, rax
je 0x14008c9f4
mov edx, 1
cmp qword [rax + 8], r14
je 0x14008c9fc
mov rax, qword [rax]
add di, dx
test rax, rax
jne 0x14008c9e3
mov rdx, r14
call fcn.140027d7c
mov word [r14 + 0x12a], di
jmp 0x14008ca0e
movzx edi, word [r14 + 0x12a]
movzx edx, di
mov rcx, rsi
call fcn.140067ee8
mov rax, qword [0x140134380]
test byte [rax + 0x1a], 0xc0
jne 0x14008ca41
test byte [rax + 0x1a], 0x20
je 0x14008cbb3
movzx edx, r12w
mov rcx, rsi
call fcn.140067ee8
jmp 0x14008cbb3
movzx edx, word [r13]
mov rcx, rsi
call fcn.140067ee8
mov dil, byte [r13 + 2]
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov r12d, 0x20000000
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dil
mov rax, qword [0x140134380]
test dword [rax + 4], r12d
je 0x14008ca88
test byte [rax + 0x26], 0x80
je 0x14008ca9d
mov edi, 1
add dword [rsi + 0x14], edi
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008caa2
mov dword [rsi + 0x18], eax
jmp 0x14008caa2
mov edi, 1
cmp byte [r13 + 2], r15b
jle 0x14008cb19
lea r12, [r13 + 3]
mov ebx, 1
mov dil, byte [r12]
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dil
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x14008cae8
test byte [rax + 0x26], 0x80
je 0x14008caf6
add dword [rsi + 0x14], ebx
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008caf6
mov dword [rsi + 0x18], eax
movsx eax, byte [r13 + 2]
add r15d, ebx
add r12, rbx
cmp r15d, eax
jl 0x14008cab1
mov rbx, qword [rsp + 0x98]
xor r15d, r15d
mov r12d, 0x20000000
jmp 0x14008cb57
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], r15b
mov rax, qword [0x140134380]
test dword [rax + 4], r12d
je 0x14008cb49
test byte [rax + 0x26], 0x80
je 0x14008cb57
add dword [rsi + 0x14], edi
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008cb57
mov dword [rsi + 0x18], eax
mov edi, 1
test byte [rsp + 0x90], dil
je 0x14008cba4
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], r15b
mov rax, qword [0x140134380]
test dword [rax + 4], r12d
je 0x14008cb96
test byte [rax + 0x26], 0x80
je 0x14008cba4
add dword [rsi + 0x14], edi
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x14008cba4
mov dword [rsi + 0x18], eax
mov rcx, r13
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov eax, dword [rsi + 0x14]
mov r12, qword [rsp + 0x20]
mov dword [r14 + 0xf8], eax
mov dword [rbp + 0x2d8], r15d
test r12, r12
je 0x14008cc2d
mov r13, r12
mov r12, qword [r12 + 0x10]
test byte [r13 + 0x98], 0x40
jne 0x14008cbc9
mov r15, qword [r13 + 8]
mov rcx, r15
mov rax, qword [r15]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x2d
jne 0x14008cbfd
mov r15, qword [r15 + 8]
mov rdi, qword [rbp + 0x198]
mov rdx, rbp
mov qword [rbp + 0x198], r13
mov rcx, r15
mov rax, qword [r15]
mov rax, qword [rax + 0x148]
call qword [case.0x1400cd70e.0]
xor r15d, r15d
mov qword [rbp + 0x198], rdi
jmp 0x14008cbc9
mov r15, qword [r14 + 0xc0]
xor r13d, r13d
test r15, r15
je 0x14008cc8b
mov r15, qword [r15 + 8]
mov rcx, r15
mov rax, qword [r15]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x2d
jne 0x14008cc59
mov r15, qword [r15 + 8]
mov rax, qword [r14 + 0xc0]
mov rdx, rbp
mov rdi, qword [rbp + 0x198]
mov rcx, r15
mov qword [rbp + 0x198], rax
mov rax, qword [r15]
mov rax, qword [rax + 0x148]
call qword [case.0x1400cd70e.0]
mov qword [rbp + 0x198], rdi
btr dword [rbp + 0x18], 0x11
mov rcx, r14
mov rax, qword [rsp + 0x28]
mov qword [rbp + 0x188], rax
mov rax, qword [r14]
mov edx, dword [rsi + 0x14]
mov rax, qword [rax + 0x1c8]
call qword [case.0x1400cd70e.0]
mov rax, qword [r14]
mov rcx, r14
mov edi, dword [r14 + 0xf8]
mov rax, qword [rax + 0x1c0]
call qword [case.0x1400cd70e.0]
mov rdx, r14
mov rcx, rsi
sub di, ax
call fcn.14007bde0
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x1c0]
call qword [case.0x1400cd70e.0]
movsx ecx, di
add eax, ecx
mov dword [r14 + 0xf8], eax
test byte [rbp + 0x30], 2
je 0x14008c2a6
mov r12, qword [r14 + 0x48]
or rax, 0xffffffffffffffff
inc rax
cmp byte [r12 + rax], r13b
jne 0x14008cd0b
add ax, 0x20
movsx rdi, ax
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r15, rax
test rax, rax
je 0x14008ce44
add dword [0x140134854], edi
lea r8, str._n_t__Procedure__s___n_n
mov r9, r12
mov rdx, rdi
mov rcx, rax
call fcn.140001318
mov rcx, qword [r14]
mov rax, qword [rcx + 0x1c0]
mov rcx, r14
call qword [case.0x1400cd70e.0]
mov r8, r15
mov rcx, rsi
mov edx, eax
call fcn.1400729f4
mov rdi, qword [r14 + 8]
mov r15d, dword [r14 + 0xf8]
xor r12d, r12d
test rdi, rdi
je 0x14008ce20
mov r13, rdi
mov rdi, qword [rdi + 0x10]
mov rcx, qword [r13 + 8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x2c
je 0x14008cd80
test byte [r13 + 0x98], 0x40
jne 0x14008cd80
mov rcx, qword [r13 + 0x48]
or rax, 0xffffffffffffffff
mov qword [rsp + 0x88], rcx
inc rax
cmp byte [rcx + rax], r12b
jne 0x14008cdc0
add ax, 0x20
movsx r12, ax
mov rcx, r12
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r13, rax
test rax, rax
je 0x14008ce44
mov r9, qword [rsp + 0x88]
lea r8, str._n_t__Parameter__s___n_n
add dword [0x140134854], r12d
mov rdx, r12
mov rcx, rax
call fcn.140001318
mov r8, r13
mov edx, r15d
mov rcx, rsi
call fcn.1400729f4
add r15d, 6
jmp 0x14008cd7d
cmp qword [r14 + 0xc0], r12
je 0x14008c29b
lea r8, str._n_t__Return_value___n_n
mov edx, r15d
mov rcx, rsi
call fcn.1400729f4
jmp 0x14008c29b
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str._pCommand__IsNDR64Run__
mov edx, 0x3c
lea rcx, str.com_rpcmidlcodegenprocndr.cxx
call fcn.1400c7a2c
int3
lea r8, str.pGenFormatState___NULL
mov edx, 0x7c5
lea rcx, str.com_rpcmidlcodegenccb.hxx
call fcn.1400c7a2c
int3