Function at 0x14000fe1c
Capabilities:
Listen for remote procedure calls

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x140039f60]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, r9
mov r12, rdx
mov rsi, rcx
mov r14, qword [rbp + 0x58]
xor ebx, ebx
mov r15d, ebx
lea rax, vtable.ATL::CSecurityDesc.0
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rbx
mov rcx, r9
call fcn.140011248
test al, al
jne 0x14000fe91
lea rcx, [rbp - 0x40]
call fcn.14000fa28
test al, al
je 0x1400100c8
mov r15, qword [rbp - 0x38]
mov rcx, rsi
call fcn.1400101b4
mov rdx, rax
shr rax, 0x27
not eax
test al, 1
jne 0x14000fecf
mov qword [rsi], r12
mov dword [rsi + 8], 1
mov dword [rsi + 0xc], 0x4d2
mov qword [rsp + 0x30], r15
mov byte [rsp + 0x28], bl
mov rdx, r12
mov rcx, qword [rsi + 0x10]
call fcn.140010480
mov rdx, rax
mov rcx, rdx
shr rcx, 0x27
not ecx
test cl, 1
je 0x14000fee5
mov rbx, rdx
jmp 0x1400100c8
cmp qword [rdi + 0x18], 8
jb 0x14000feef
mov rdi, qword [rdi]
cmp qword [r14 + 0x18], 8
jb 0x14000fef9
mov r14, qword [r14]
mov qword [rsp + 0x20], r15
mov r9, r14
mov rdx, rdi
call fcn.1400103f4
mov edi, eax
test eax, eax
je 0x14000ff60
mov edx, 0x5c
lea rcx, str.admin_appman_appv_sharedipc_swrpcserver.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
nop dword [rax + rax]
test rax, rax
je 0x14000ff31
inc rax
jmp 0x14000ff38
lea rax, str.admin_appman_appv_sharedipc_swrpcserver.cpp
mov rdx, rax
lea rcx, [0x14003a788]
call fcn.140001c78
shl rax, 0x34
mov rbx, rdi
or rbx, rax
movabs rax, 0xf2500000000
jmp 0x1400100b9
lea r14, [0x1400305ec]
mov rdx, r14
lea rcx, [rbp - 0x28]
call fcn.140002fc4
mov r8d, 0x10
lea rdx, [rbp - 0x28]
call fcn.140010110
mov rdi, rax
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14000ffa0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.1400034b0
mov rcx, rdi
shr rcx, 0x27
not ecx
test cl, 1
jne 0x140010040
mov rdx, r14
lea rcx, [rbp - 0x28]
call fcn.140002fc4
mov r8d, 9
lea rdx, [rbp - 0x28]
call fcn.140010110
mov rdi, rax
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14000ffeb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.1400034b0
mov rcx, rdi
shr rcx, 0x27
not ecx
test cl, 1
jne 0x140010040
mov rdx, r14
lea rcx, [rbp - 0x28]
call fcn.140002fc4
mov r8d, 0xa
lea rdx, [rbp - 0x28]
call fcn.140010110
mov rdi, rax
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140010032
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.1400034b0
mov rcx, rdi
shr rcx, 0x27
not ecx
test cl, 1
je 0x140010048
mov rbx, rdi
jmp 0x1400100c8
mov r8d, 1
mov edx, dword [rsi + 0xc]
mov ecx, dword [rsi + 8]
call qword [sym.imp.RPCRT4.dll_RpcServerListen]
nop dword [rax + rax]
mov edi, eax
cmp eax, 0x6b1
je 0x1400100be
test eax, eax
je 0x1400100be
mov edx, 0x5c
lea rcx, str.admin_appman_appv_sharedipc_swrpcserver.cpp
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll_strrchr]
nop dword [rax + rax]
test rax, rax
je 0x14001008f
inc rax
jmp 0x140010096
lea rax, str.admin_appman_appv_sharedipc_swrpcserver.cpp
mov rdx, rax
lea rcx, [0x14003a788]
call fcn.140001c78
shl rax, 0x34
mov rbx, rdi
or rbx, rax
movabs rax, 0x222500000000
or rbx, rax
jmp 0x1400100c8
movabs rbx, 0x8000000000
lea rax, vtable.ATL::CSecurityDesc.0
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x40]
call fcn.14000f410
mov rax, rbx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140014360
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret