Function at 0x1400b2c38
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13, rcx
mov r14, r8
mov ecx, 0x58
mov rbp, rdx
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor r12d, r12d
mov rbx, rax
test rax, rax
je 0x1400b2ec4
add dword [0x140134854], 0x58
lea r15d, [r12 + 1]
mov qword [rax + 8], r12
mov edx, 0xfe
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
xor eax, eax
mov qword [rbx + 0x50], rax
lea rax, vtable.MIDL_NDR64_UNION_ARM_SELECTOR.0
mov qword [rbx], rax
mov byte [rbx + 0x50], r12b
movzx ecx, word [rbp + 0x30]
movzx eax, cx
sub ax, r15w
cmp ax, dx
ja 0x1400b2f19
sub cl, r15b
mov word [rbx + 0x52], r12w
mov byte [rbx + 0x51], cl
mov esi, r12d
mov rdi, qword [rbp + 8]
test rdi, rdi
je 0x1400b2d0c
mov rcx, rdi
mov rdi, qword [rdi + 0x10]
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x25
je 0x1400b2ce9
add esi, r15d
jmp 0x1400b2ce9
mov rdx, rbx
mov dword [rbx + 0x54], esi
mov rcx, r14
call fcn.1400ad4f4
mov rsi, qword [rbp + 8]
mov r15, r12
xor ebp, ebp
test rsi, rsi
je 0x1400b2e18
mov r14, rsi
mov rsi, qword [rsi + 0x10]
mov rcx, r14
mov rax, qword [r14]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x25
jne 0x1400b2d52
mov r15, r14
mov r14, qword [rsp + 0x70]
jmp 0x1400b2d23
mov ecx, 0x68
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x1400b2ec4
add dword [0x140134854], 0x68
xorps xmm0, xmm0
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], rbp
xor eax, eax
movups xmmword [rdi + 0x50], xmm0
mov qword [rdi + 0x60], rax
lea rax, vtable.MIDL_NDR64_UNION_ARM.0
mov qword [rdi], rax
mov rcx, qword [r14 + 0xa0]
test rcx, rcx
je 0x1400b2ee7
mov rax, qword [rcx]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov qword [rdi + 0x50], rax
mov rdx, qword [r14 + 8]
test rdx, rdx
je 0x1400b2df5
mov rdx, qword [rdx + 8]
test rdx, rdx
je 0x1400b2df5
mov r8, qword [r13 + 8]
mov rcx, r13
call fcn.1400b23f0
jmp 0x1400b2df8
mov rax, rbp
mov qword [rdi + 0x58], rax
mov rdx, rdi
mov r14, qword [rsp + 0x70]
mov rcx, r14
mov dword [rdi + 0x60], ebp
call fcn.1400ad4f4
inc r12w
jmp 0x1400b2d23
movzx eax, r12w
cmp eax, dword [rbx + 0x54]
jne 0x1400b2f00
test r15, r15
jne 0x1400b2e30
or rbx, 0xffffffffffffffff
jmp 0x1400b2e56
mov rax, qword [r15 + 8]
test rax, rax
je 0x1400b2e53
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x1400b2e53
mov r8, qword [r13 + 8]
mov rcx, r13
call fcn.1400b23f0
mov rbx, rax
jmp 0x1400b2e56
mov rbx, rbp
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x1400b2ec4
add dword [0x140134854], 0x58
lea rcx, vtable.MIDL_NDR64_DEFAULT_CASE.0
mov qword [rax], rcx
mov rdx, rax
mov rcx, r14
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], rbp
mov qword [rax + 0x50], rbx
mov rbx, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.1400ad4f4
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.NULL___pCase__GetExpr__
mov edx, 0xf33
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.ArmCount__header__Arms
mov edx, 0xf44
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.Alignment___0xFF__Alignment___0
mov edx, 0x8d
lea rcx, str.com_rpcmidlincmidl64types.h
call fcn.1400c7a2c
int3