Function at 0x140085398
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rdi, rcx
mov r13, rdx
mov ecx, 0x38
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor r14d, r14d
mov rbx, rax
test rax, rax
jne 0x1400853f1
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
add dword [0x140134854], 0x38
mov rcx, rdi
mov word [rax], r14w
mov qword [rax + 4], r14
mov qword [rax + 0xc], r14
mov qword [rax + 0x14], r14
mov qword [rax + 0x20], r14
mov qword [rax + 0x28], r14
mov rsi, qword [r13 + 0x188]
mov qword [r13 + 0x188], rdi
mov rax, qword [rdi]
mov qword [rsp + 0x30], rsi
mov rax, qword [rax + 0x70]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14008545c
mov rax, qword [0x140134380]
mov cl, byte [rax + 0x1a]
and cl, 0x20
neg cl
mov rcx, rbx
sbb edx, edx
xor r9d, r9d
and edx, 4
add edx, 4
mov r8d, edx
call fcn.1400bd1fc
mov rbp, qword [rdi + 8]
test rbp, rbp
je 0x14008568b
mov r12, rbp
mov edx, 0xa
mov rbp, qword [rbp + 0x10]
mov rdi, qword [r12 + 8]
mov rcx, rdi
mov rax, qword [rdi]
mov rax, qword [rax + 0xe0]
call qword [case.0x1400cd70e.0]
mov rcx, qword [rdi]
mov edx, 0xc
mov byte [rsp + 0x90], al
mov rax, qword [rcx + 0xe0]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
mov rcx, r12
mov r15b, al
call fcn.140084b6c
mov rcx, qword [rdi]
mov esi, eax
mov rax, qword [rcx + 0x38]
mov rcx, rdi
call qword [case.0x1400cd70e.0]
and dword [rsp + 0x20], 0
lea r9, [0x14012d4d0]
mov rcx, rax
lea r8, [0x14012d4f8]
xor edx, edx
call fcn.1400cbdc8
mov rdx, rax
test rax, rax
je 0x140085549
mov rcx, qword [rax]
mov rax, qword [rcx + 0xe8]
mov rcx, rdx
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x140085549
mov r14, qword [rdi + 8]
mov edx, 0xc
mov rcx, r14
mov byte [rsp + 0x98], 1
mov rax, qword [r14]
mov rax, qword [rax + 0xe0]
call qword [case.0x1400cd70e.0]
mov r15b, al
test al, al
je 0x1400855c6
mov esi, dword [r14 + 0x34]
cmp esi, 0x10
jle 0x1400856f0
mov r14b, byte [rsp + 0x98]
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x40]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x140085610
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x48]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x14008557e
test r14b, r14b
je 0x140085610
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x50]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x140085610
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0xd8]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x140085610
test byte [r12 + 0x98], 0x40
jne 0x140085610
mov r14b, byte [rsp + 0x90]
test r14b, r14b
je 0x1400855ce
lea edi, [rax + 4]
jmp 0x14008562d
mov r14b, 1
jmp 0x140085549
test r15b, r15b
je 0x1400855da
mov edi, 8
jmp 0x14008562d
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
cmp eax, 0x40
jne 0x140085608
mov rax, qword [0x140134380]
mov cl, byte [rax + 0x1a]
and cl, 0x20
neg cl
sbb edi, edi
and edi, 4
add edi, 4
jmp 0x14008562d
movzx edi, word [r12 + 0x32]
jmp 0x14008562d
mov rax, qword [0x140134380]
mov dl, byte [rax + 0x1a]
and dl, 0x20
neg dl
sbb edi, edi
and edi, 4
add edi, 4
xor r15b, r15b
mov r14b, r15b
mov r8d, 4
mov rdx, r13
mov rcx, r12
call fcn.1400845c8
cdq
and edx, 7
add eax, edx
sar eax, 3
test r14b, r14b
je 0x140085651
cmp esi, 0x10
jbe 0x140085673
xor r14d, r14d
test r15b, r15b
je 0x14008565e
cmp esi, 0x20
jbe 0x140085676
mov r9d, eax
mov r8d, edi
mov edx, esi
mov rcx, rbx
call fcn.1400bd1fc
jmp 0x140085460
xor r14d, r14d
mov r9d, eax
mov r8d, edi
mov edx, esi
mov rcx, rbx
call fcn.1400bd300
jmp 0x140085460
mov rcx, rbx
call fcn.1400bd4f0
mov rdi, rax
jmp 0x1400856ac
mov rdx, qword [rcx + 0x10]
mov qword [rbx + 0x20], rdx
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov rcx, qword [rbx + 0x20]
test rcx, rcx
jne 0x140085698
mov rcx, rbx
mov qword [rbx + 0x28], r14
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x80]
mov qword [r13 + 0x188], rax
mov rax, rdi
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, str.Size___16
mov edx, 0x578
lea rcx, str.com_rpcmidlcodegenproccls.cxx
call fcn.1400c7a2c
int3