Function at 0x140080bb0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword [rcx]
mov r13, rdx
mov r15, rcx
mov rax, qword [rax + 0x1c0]
call qword [case.0x1400cd70e.0]
cmp eax, 0xffffffff
jne 0x140080f19
mov rbx, qword [r13 + 0xb8]
test rbx, rbx
je 0x140080f50
mov rdx, r15
mov rcx, rbx
call fcn.1400c9bb8
mov rax, qword [0x140134380]
or dword [rax + 0x38], 8
mov r14, qword [r15 + 8]
mov rsi, qword [r13 + 0x168]
test r14, r14
je 0x140080f37
mov rax, qword [r14]
mov rdx, r13
mov r12d, dword [rsi + 0x14]
mov rcx, r14
mov rax, qword [rax + 0x138]
call qword [case.0x1400cd70e.0]
mov ebp, 1
mov edi, 0x20000000
test byte [rsi + 0x14], bpl
je 0x140080c8c
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 0
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], 0x5c
mov rax, qword [0x140134380]
test dword [rax + 4], edi
je 0x140080c7e
test byte [rax + 0x26], 0x80
je 0x140080c8c
add dword [rsi + 0x14], ebp
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x140080c8c
mov dword [rsi + 0x18], eax
mov rax, qword [r15]
mov rcx, r15
mov edx, dword [rsi + 0x14]
mov rax, qword [rax + 0x1b8]
call qword [case.0x1400cd70e.0]
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 0
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], 0xb4
mov rax, qword [0x140134380]
test dword [rax + 4], edi
je 0x140080cd1
test byte [rax + 0x26], 0x80
je 0x140080cdf
add dword [rsi + 0x14], ebp
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x140080cdf
mov dword [rsi + 0x18], eax
mov rax, qword [r14]
mov rcx, r14
mov dil, byte [r14 + 0x30]
sub dil, bpl
mov rax, qword [rax + 0x48]
call qword [case.0x1400cd70e.0]
mov ecx, 2
test eax, eax
je 0x140080d1e
movzx eax, word [r14 + 0xa6]
cmp ax, 3
je 0x140080f69
cmp ax, cx
jne 0x140080d9b
or dil, 0x80
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], dil
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x140080d51
test byte [rax + 0x26], 0x80
je 0x140080d5f
add dword [rsi + 0x14], ebp
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x140080d5f
mov dword [rsi + 0x18], eax
mov ecx, 0x18
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rbp, rax
test rax, rax
jne 0x140080dad
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
cmp ax, bp
jne 0x140080d1e
or dil, 0x40
jmp 0x140080d1e
mov rax, qword [r15 + 0xa8]
mov rdx, rbp
add dword [0x140134854], 0x18
mov qword [rbp], rax
mov rax, qword [r15 + 0xb0]
mov qword [rbp + 8], rax
mov rcx, qword [r13 + 0x278]
call fcn.1400acf2c
movzx edx, word [rbp + 0x10]
mov rcx, rsi
mov edi, eax
call fcn.140067ee8
test edi, edi
jne 0x140080dfa
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov rcx, qword [r15 + 0xb0]
test rcx, rcx
je 0x140080e25
mov rax, qword [rcx]
lea rdx, [rsp + 0x20]
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
mov rcx, rsi
movzx edx, word [rax]
call fcn.140067ee8
jmp 0x140080e8a
mov r8, qword [r15 + 0xa8]
mov edx, dword [rsi + 0x14]
mov rcx, qword [r13 + 0x2b8]
call fcn.1400acd18
mov rcx, rsi
call fcn.140079cc4
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
mov byte [rcx + rax], 0xa
mov ecx, dword [rsi + 0x14]
mov rax, qword [rsi + 8]
inc ecx
mov byte [rcx + rax], 2
mov rax, qword [rsi]
mov ecx, dword [rsi + 0x14]
mov byte [rcx + rax], 0
mov rax, qword [0x140134380]
test dword [rax + 4], 0x20000000
je 0x140080e7b
test byte [rax + 0x26], 0x80
je 0x140080e8a
add dword [rsi + 0x14], 2
mov eax, dword [rsi + 0x14]
cmp eax, dword [rsi + 0x18]
jbe 0x140080e8a
mov dword [rsi + 0x18], eax
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x78]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x140080ea5
movzx eax, word [r14 + 0x38]
jmp 0x140080ea7
xor eax, eax
movzx edx, ax
mov rcx, rsi
call fcn.140067ee8
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x188]
call qword [case.0x1400cd70e.0]
mov edi, dword [rsi + 0x14]
test eax, eax
jne 0x140080ee2
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x1c0]
call qword [case.0x1400cd70e.0]
mov r12d, eax
sub r12d, edi
mov rcx, rsi
mov edx, r12d
call fcn.140079ecc
mov rax, qword [r15]
mov rcx, r15
mov edx, dword [rsi + 0x14]
mov rax, qword [rax + 0x1c8]
call qword [case.0x1400cd70e.0]
mov rdx, r15
mov rcx, rsi
call fcn.14007bde0
mov rcx, rbx
call fcn.1400c9c94
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea r8, str.pChild
mov edx, 0x14d
lea rcx, str.com_rpcmidlcodegen_typendr.cxx
call fcn.1400c7a2c
int3
lea r8, str.pGenFormatState___NULL
mov edx, 0x7c5
lea rcx, str.com_rpcmidlcodegenccb.hxx
call fcn.1400c7a2c
int3
lea r8, str.__pPtr__IsFull__
mov edx, 0x169
lea rcx, str.com_rpcmidlcodegen_typendr.cxx
call fcn.1400c7a2c
int3