Function at 0x1400b46e0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, qword [rcx]
xor edi, edi
mov r15, rdx
mov rbp, rcx
mov rbx, qword [rbx + 0xb8]
test rbx, rbx
je 0x1400b49f8
mov rcx, rbx
call fcn.1400c9bb8
mov rax, qword [rbp]
lea r9, [0x14012cf20]
mov rcx, qword [r15 + 0x98]
lea r8, [0x14012d4f8]
xor edx, edx
mov dword [rsp + 0x20], edi
mov r14d, edi
mov r13, qword [rax + 0x198]
mov r12, qword [rax + 0x188]
call fcn.1400cbdc8
test rax, rax
je 0x1400b4761
mov eax, dword [rax + 0xa0]
jmp 0x1400b4763
mov eax, edi
mov ecx, 1
test eax, eax
je 0x1400b4791
mov r14d, ecx
lea ecx, [r14 + 0x57]
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x1400b49d5
mov qword [rax + 0x28], rdi
jmp 0x1400b47b2
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x1400b49d5
mov qword [rax + 0x28], r15
add dword [0x140134854], 0x58
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x30], rsi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rdi
xor eax, eax
mov dword [rsi + 0x50], eax
lea rax, vtable.MIDL_NDR64_CONTEXT_HANDLE_FORMAT.0
mov qword [rsi], rax
mov byte [rsi + 0x50], 0x70
mov rdx, qword [r15 + 0x98]
cmp byte [rdx + 0x18], 0x1e
jne 0x1400b4809
mov rcx, qword [rbp]
mov rcx, qword [rcx + 0xc8]
call fcn.14005bee0
mov rax, qword [r15]
mov rcx, r15
mov rdx, qword [rbp]
mov rax, qword [rax + 0x278]
call qword [case.0x1400cd70e.0]
mov r9b, al
mov byte [rsp + 0x60], al
cmp byte [r15 + 0xbb], dil
jne 0x1400b484c
mov ecx, dword [r13 + 0x98]
mov r13d, 1
test r13b, cl
je 0x1400b4847
test cl, 2
je 0x1400b4852
mov r8b, dil
jmp 0x1400b4855
mov r13d, 1
mov r8b, r13b
mov al, byte [r15 + 0xb8]
neg al
mov al, byte [r15 + 0xb9]
sbb dl, dl
and dl, 8
neg al
mov al, byte [r15 + 0xba]
sbb cl, cl
and cl, 4
or dl, cl
neg al
mov al, r9b
sbb cl, cl
and al, 0xf0
and cl, 2
or dl, cl
mov rcx, r15
or dl, al
or dl, r8b
mov byte [rsi + 0x51], dl
call fcn.14007d384
cmp byte [rax], dil
jne 0x1400b48a4
mov eax, 0xff
jmp 0x1400b48b7
mov rcx, qword [rbp]
mov rdx, rax
mov rcx, qword [rcx + 0x248]
call fcn.1400a760c
sub al, r13b
mov byte [rsi + 0x52], al
cmp dword [r15 + 0xbc], edi
je 0x1400b48cc
mov byte [rsi + 0x53], 0x80
jmp 0x1400b48e5
movzx eax, byte [r12 + 0x110]
mov byte [rsi + 0x53], al
lea ecx, [rax + r13]
mov word [r12 + 0x110], cx
mov rcx, qword [rbp + 0x10]
mov rdx, rsi
call fcn.1400ad4f4
test r14d, r14d
je 0x1400b49b1
mov ecx, 0x68
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x1400b49d5
add dword [0x140134854], 0x68
lea r9, [0x14012cf20]
mov qword [rax + 8], rdi
lea r8, [0x14012d4f8]
mov qword [rax + 0x10], rdi
xorps xmm0, xmm0
mov qword [rax + 0x18], rdi
xor edx, edx
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], r15
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rdi
xor eax, eax
movups xmmword [r14 + 0x50], xmm0
mov qword [r14 + 0x60], rax
lea rax, vtable.MIDL_NDR64_TYPE_STRICT_CONTEXT_HANDLE.0
mov qword [r14], rax
mov dword [r14 + 0x50], 0x7075
mov rax, qword [rsi + 0x20]
mov qword [r14 + 0x58], rax
movzx eax, byte [rsp + 0x60]
or eax, 0x10
mov dword [rsp + 0x20], edi
mov dword [r14 + 0x60], eax
mov rcx, qword [r15 + 0x98]
call fcn.1400cbdc8
test rax, rax
je 0x1400b49a1
mov edi, dword [rax + 0xa0]
mov dword [r14 + 0x64], edi
mov rdx, r14
mov rcx, qword [rbp + 0x10]
call fcn.1400ad4f4
mov rcx, rbx
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp fcn.1400c9c94
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.pGenFormatState___NULL
mov edx, 0x7c5
lea rcx, str.com_rpcmidlcodegenccb.hxx
call fcn.1400c7a2c
int3
add rcx, 8
jmp 0x1400b46e0