Function at 0x140089920
Capabilities:
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x90
mov r12, rcx
xor r13d, r13d
mov rcx, qword [rdx + 0x98]
xorps xmm0, xmm0
mov r14, rdx
mov qword [rbp + 0x27], r13
xorps xmm1, xmm1
mov qword [rbp + 0xf], r13
add rcx, 0x90
mov qword [rbp - 9], r13
lea rdx, [rbp + 0x17]
movdqu xmmword [rbp + 0x17], xmm0
movdqu xmmword [rbp - 1], xmm1
movdqu xmmword [rbp - 0x19], xmm0
call fcn.1400acab0
mov rcx, qword [r14 + 0x98]
lea rdx, [rbp - 1]
add rcx, 0x48
call fcn.1400acab0
mov rcx, qword [r14 + 0x98]
lea rdx, [rbp - 0x19]
add rcx, 0xd8
call fcn.1400acab0
mov rax, qword [r12]
mov rcx, r12
mov rax, qword [rax + 0x38]
call qword [case.0x1400cd70e.0]
mov edi, 0x200
mov dword [rbp - 0x29], 0x10
mov ecx, edi
mov dword [rbp - 0x25], edi
mov rbx, rax
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
jne 0x140089a08
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.void___RPC_STUB_n
mov qword [rbp - 0x21], rax
mov rdx, rdi
mov rcx, rax
call fcn.1400011d4
mov rdx, qword [r14 + 0x58]
lea rcx, [rbp - 0x29]
add dword [0x140134854], edi
call fcn.1400abaf0
lea rdx, [0x140100968]
lea rcx, [rbp - 0x29]
call fcn.1400abaf0
lea r9, [0x14012cf68]
mov dword [rsp + 0x20], r13d
lea r8, [0x14012d4f8]
xor edx, edx
mov rcx, rbx
call fcn.1400cbdc8
test rax, rax
je 0x140089a69
mov rdx, qword [rbx + 0x40]
jmp 0x140089a70
lea rdx, [0x1400f48cb]
lea rcx, [rbp - 0x29]
call fcn.1400abaf0
lea rdx, [0x1400fae00]
lea rcx, [rbp - 0x29]
call fcn.1400abaf0
mov rbx, qword [rbp - 0x21]
lea rax, [rbp - 0x19]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x17]
lea rax, [rbp - 1]
mov rdx, rbx
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.14005c40c
test rbx, rbx
je 0x140089ac2
mov rcx, rbx
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
test byte [r14 + 0x30], 2
jne 0x140089efc
mov rdi, qword [r14 + 0x20]
mov rbx, qword [r12 + 8]
test rbx, rbx
je 0x140089b34
mov r15, rbx
mov rbx, qword [rbx + 0x10]
mov rsi, qword [r15 + 8]
mov rcx, rsi
mov rax, qword [rsi]
mov rax, qword [rax + 0x40]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x140089b06
mov rcx, rsi
call fcn.140097a18
test eax, eax
jne 0x140089b27
mov rax, qword [rsi]
mov rcx, rsi
mov rax, qword [rax + 0x48]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x140089ad6
mov rcx, rsi
call fcn.140093658
cmp eax, 1
jle 0x140089ad6
mov rdx, r15
mov rcx, r14
call fcn.140066560
jmp 0x140089ad6
mov rcx, rdi
call fcn.1400ca48c
lea rdx, str.__void___Status___
mov rcx, rdi
call fcn.1400c9f64
mov rcx, rdi
call fcn.1400ca48c
test dword [r12 + 0x98], 0x200
lea rsi, vtable.expr_variable.0
mov r15d, 0x40
je 0x140089c90
mov ecx, r15d
call fcn.1400ca61c
mov rbx, rax
test rax, rax
je 0x140089baa
and dword [rbx + 0x10], 0xfffffffc
mov qword [rax + 0x18], r13
mov qword [rax], rsi
lea rax, str.__MIDL_NotifyFlag
mov qword [rbx + 0x20], rax
mov qword [rbx + 8], r13
mov qword [rbx + 0x28], r13
mov qword [rbx + 0x38], r13
mov dword [rbx + 0x30], r13d
jmp 0x140089bad
mov rbx, r13
mov ecx, 0x48
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140089c1d
mov rcx, r15
call fcn.1400ca61c
test rax, rax
je 0x140089bfb
and dword [rax + 0x10], 0xfffffffc
lea rcx, vtable.expr_variable.0
mov qword [rax], rcx
lea rcx, str.FALSE
mov qword [rax + 0x20], rcx
mov qword [rax + 0x18], r13
mov qword [rax + 8], r13
mov qword [rax + 0x28], r13
mov qword [rax + 0x38], r13
mov dword [rax + 0x30], r13d
jmp 0x140089bfe
mov rax, r13
mov r9, rax
mov r8, rbx
mov edx, 0x2a
mov rcx, rsi
call fcn.1400017b8
lea rax, vtable.expr_assign.0
mov qword [rsi], rax
jmp 0x140089c20
mov rsi, r13
mov rcx, rdi
call fcn.1400ca48c
mov rax, qword [rsi]
mov rdx, rdi
mov rcx, rsi
mov rax, qword [rax + 0xc0]
call qword [case.0x1400cd70e.0]
cmp byte [rdi], 2
je 0x140089c88
cmp byte [rdi + 3], r13b
jne 0x140089c88
cmp byte [rdi + 4], r13b
jne 0x140089c88
cmp byte [rdi], 1
jne 0x140089c6b
mov rdx, qword [rdi + 0x10]
mov ecx, 0x3b
call qword [sym.imp.msvcrt.dll_putc]
nop dword [rax + rax]
jmp 0x140089c88
mov rax, qword [rdi + 0x18]
cmp rax, qword [rdi + 0x28]
jb 0x140089c81
mov rcx, rdi
call fcn.1400ca274
mov rax, qword [rdi + 0x18]
mov byte [rax], 0x3b
inc qword [rdi + 0x18]
mov rcx, rdi
call fcn.1400ca48c
mov esi, 0x50
mov ecx, esi
call fcn.1400ca61c
mov rbx, rax
test rax, rax
je 0x140089ce7
mov qword [rax + 8], r13
mov eax, dword [rax + 0x10]
and eax, 0xfffffffd
mov qword [rbx + 0x18], r13
or eax, 1
mov dword [rbx + 0x20], 0x23
mov dword [rbx + 0x10], eax
lea rax, vtable.expr_proc_call.0
mov qword [rbx], rax
lea rax, str.NdrServerInitializeNew
mov qword [rbx + 0x40], rax
mov qword [rbx + 0x28], r13
mov qword [rbx + 0x30], r13
mov qword [rbx + 0x38], r13
mov word [rbx + 0x48], r13w
jmp 0x140089cea
mov rbx, r13
mov rcx, rsi
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140089d5b
mov rcx, r15
call fcn.1400ca61c
test rax, rax
je 0x140089d36
and dword [rax + 0x10], 0xfffffffc
lea rcx, vtable.expr_variable.0
mov qword [rax], rcx
lea rcx, str._pRpcMessage
mov qword [rax + 0x20], rcx
mov qword [rax + 0x18], r13
mov qword [rax + 8], r13
mov qword [rax + 0x28], r13
mov qword [rax + 0x38], r13
mov dword [rax + 0x30], r13d
jmp 0x140089d39
mov rax, r13
xor r9d, r9d
mov r8, rax
mov rcx, rsi
lea edx, [r9 + 0x24]
call fcn.1400017b8
lea rax, vtable.expr_param.0
mov qword [rsi + 0x48], r13
mov qword [rsi], rax
jmp 0x140089d5e
mov rsi, r13
mov rdx, rsi
mov rcx, rbx
call fcn.1400c2d9c
mov ecx, 0x50
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140089e08
mov rcx, r15
call fcn.1400ca61c
mov r15, rax
test rax, rax
je 0x140089ddd
mov ecx, 0x40
call fcn.1400ca61c
test rax, rax
je 0x140089dcd
and dword [rax + 0x10], 0xfffffffc
lea rcx, vtable.expr_variable.0
mov qword [rax], rcx
lea rcx, str._StubMsg
mov qword [rax + 0x20], rcx
mov qword [rax + 0x18], r13
mov qword [rax + 8], r13
mov qword [rax + 0x28], r13
mov qword [rax + 0x38], r13
mov dword [rax + 0x30], r13d
jmp 0x140089dd0
mov rax, r13
mov rdx, rax
mov rcx, r15
call fcn.1400681b0
jmp 0x140089de0
mov rax, r13
xor r9d, r9d
mov r8, rax
mov rcx, rsi
lea edx, [r9 + 0x24]
call fcn.1400017b8
lea rax, vtable.expr_param.0
mov qword [rsi + 0x48], r13
mov qword [rsi], rax
mov r15d, 0x40
jmp 0x140089e0b
mov rsi, r13
mov rdx, rsi
mov rcx, rbx
call fcn.1400c2d9c
mov ecx, 0x50
call fcn.1400ca61c
mov rsi, rax
test rax, rax
je 0x140089eb3
mov rcx, r15
call fcn.1400ca61c
mov r15, rax
test rax, rax
je 0x140089e8e
mov ecx, 0x40
call fcn.1400ca61c
test rax, rax
je 0x140089e7e
mov rcx, qword [r14 + 0x38]
mov rdx, qword [rcx + 0xf8]
lea rcx, vtable.expr_variable.0
and dword [rax + 0x10], 0xfffffffc
mov qword [rax], rcx
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], rdx
mov qword [rax + 8], r13
mov qword [rax + 0x28], r13
mov qword [rax + 0x38], r13
mov dword [rax + 0x30], r13d
jmp 0x140089e81
mov rax, r13
mov rdx, rax
mov rcx, r15
call fcn.1400681b0
jmp 0x140089e91
mov rax, r13
xor r9d, r9d
mov r8, rax
mov rcx, rsi
lea edx, [r9 + 0x24]
call fcn.1400017b8
lea rax, vtable.expr_param.0
mov qword [rsi + 0x48], r13
mov qword [rsi], rax
jmp 0x140089eb6
mov rsi, r13
mov rdx, rsi
mov rcx, rbx
call fcn.1400c2d9c
mov rax, qword [rbx]
xor r8d, r8d
mov rdx, qword [r14 + 0x20]
xor r9d, r9d
mov rcx, rbx
mov rax, qword [rax + 0xc8]
call qword [case.0x1400cd70e.0]
mov rcx, rdi
call fcn.1400ca48c
test dword [r12 + 0x98], 0x800
je 0x140089efc
mov rcx, r14
call fcn.14006532c
lea rcx, [rbp - 0x19]
call fcn.140027d04
lea rcx, [rbp - 1]
call fcn.140027d04
lea rcx, [rbp + 0x17]
call fcn.140027d04
lea r11, [rsp + 0x90]
xor eax, eax
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret