Function at 0x1400b4e70
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x20], r9d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbp, qword [rdx + 8]
mov r15, rcx
xor edi, edi
mov rcx, rbp
mov r13b, r8b
mov dword [rsp + 0x78], edi
mov rbx, rdx
mov esi, edi
mov rax, qword [rbp]
mov rax, qword [rax + 0x40]
call qword [case.0x1400cd70e.0]
test eax, eax
jne 0x1400b52da
mov rax, qword [rbp]
mov rcx, rbp
mov rax, qword [rax + 0x48]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x1400b4fb3
lea ecx, [rdi + 0x70]
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x1400b52b7
mov edi, dword [0x140134854]
lea ecx, [rsi + 0x58]
xor r12d, r12d
mov qword [rax + 0x30], rax
mov qword [rax + 8], r12
add edi, 0x70
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
lea rax, vtable.CompositeFormatFragment.0
mov qword [r14], rax
mov dword [0x140134854], edi
mov qword [r14 + 0x50], r12
mov qword [r14 + 0x58], r12
mov qword [r14 + 0x68], r12
mov qword [r14 + 0x60], 1
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
je 0x1400b52b7
lea eax, [rdi + 0x58]
mov qword [rdx + 0x30], rdx
xor edi, edi
mov dword [0x140134854], eax
lea rax, vtable.MIDL_NDR64_POINTER_INSTANCE_HEADER_FORMAT.0
mov qword [rdx + 8], rdi
mov rcx, r14
mov qword [rdx], rax
mov qword [rdx + 0x10], rdi
mov qword [rdx + 0x18], rdi
mov qword [rdx + 0x20], rdi
mov qword [rdx + 0x28], rdi
mov qword [rdx + 0x38], rdi
mov qword [rdx + 0x40], rdi
mov qword [rdx + 0x48], rdi
mov qword [rdx + 0x50], rdi
call fcn.1400ad4f4
mov r8, r14
mov rdx, rbp
mov rcx, r15
call fcn.1400b23f0
lea r12d, [rsi + 1]
jmp 0x1400b5003
mov rax, qword [rbp]
mov rcx, rbp
mov rax, qword [rax + 0x58]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x1400b529e
lea r9, [0x14012e0e8]
mov dword [rsp + 0x20], edi
lea r8, [0x14012da78]
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
mov rdx, rax
lea r9, [rsp + 0x78]
xor r8d, r8d
mov rcx, r15
call fcn.1400b4a18
mov r12d, dword [rsp + 0x78]
mov r14, rax
test r14, r14
je 0x1400b529e
mov ecx, 0x70
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x1400b52b7
add dword [0x140134854], 0x70
lea r9, [0x14012dbd8]
mov qword [rax + 8], rdi
lea r8, [0x14012e290]
mov qword [rax + 0x10], rdi
xor edx, edx
mov qword [rax + 0x18], rdi
mov rcx, rbx
mov qword [rax + 0x20], rdi
mov qword [rax + 0x28], rdi
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov qword [rax + 0x48], rdi
lea rax, vtable.CompositeFormatFragment.0
mov qword [rsi], rax
mov qword [rsi + 0x50], rdi
mov qword [rsi + 0x58], rdi
mov qword [rsi + 0x68], rdi
mov qword [rsi + 0x60], 1
mov dword [rsp + 0x20], edi
call fcn.1400cbdc8
test rax, rax
je 0x1400b5166
mov ecx, 0x68
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r15, rax
test rax, rax
je 0x1400b52b7
add dword [0x140134854], 0x68
lea r9, [0x14012e290]
lea r8, [0x14012da78]
mov dword [rsp + 0x20], edi
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
mov rcx, qword [rbx + 0xa8]
mov qword [rsp + 0x78], rax
mov rax, qword [rcx]
mov rax, qword [rax + 0x30]
call qword [case.0x1400cd70e.0]
test eax, eax
je 0x1400b52f3
mov rcx, qword [rbx + 0xa8]
mov rax, qword [rcx]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
and dword [rsp + 0x20], 0
lea r9, [0x14012e290]
lea r8, [0x14012da78]
xor edx, edx
mov rcx, rbp
mov rdi, rax
call fcn.1400cbdc8
mov rcx, qword [rsp + 0x78]
mov ebx, dword [rax + 0x34]
mov rax, qword [rcx]
mov rax, qword [rax + 0x58]
call qword [case.0x1400cd70e.0]
xor ebp, ebp
mov dword [r15 + 0x50], 0x81
mov dword [r15 + 0x64], ebp
lea rcx, vtable.MIDL_NDR64_FIXED_REPEAT_FORMAT.0
mov dword [r15 + 0x54], ebx
mov dword [r15 + 0x60], edi
jmp 0x1400b51ed
mov ecx, 0x60
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r15, rax
test rax, rax
je 0x1400b52b7
add dword [0x140134854], 0x60
lea r9, [0x14012e290]
lea r8, [0x14012da78]
mov dword [rsp + 0x20], edi
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
lea r9, [0x14012e290]
mov dword [rsp + 0x20], edi
lea r8, [0x14012da78]
xor edx, edx
mov rcx, rbp
mov rbx, rax
call fcn.1400cbdc8
mov rcx, rbx
mov edi, dword [rax + 0x34]
mov rax, qword [rbx]
mov rax, qword [rax + 0x58]
call qword [case.0x1400cd70e.0]
xor ebp, ebp
mov dword [r15 + 0x50], 0x82
lea rcx, vtable.MIDL_NDR64_REPEAT_FORMAT.0
mov dword [r15 + 0x54], edi
and al, 1
mov rdx, r15
mov byte [r15 + 0x51], al
mov eax, dword [rsp + 0x88]
mov dword [r15 + 0x5c], r12d
mov dword [r15 + 0x58], eax
mov qword [r15], rcx
mov rcx, rsi
mov qword [r15 + 0x48], rbp
mov qword [r15 + 0x40], rbp
mov qword [r15 + 0x38], rbp
mov qword [r15 + 0x30], r15
mov qword [r15 + 0x28], rbp
mov qword [r15 + 0x20], rbp
mov qword [r15 + 0x18], rbp
mov qword [r15 + 0x10], rbp
mov qword [r15 + 8], rbp
call fcn.1400ad4f4
mov rdx, r14
mov rcx, rsi
call fcn.1400ad4f4
test r13b, r13b
je 0x1400b529e
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x1400b52b7
add dword [0x140134854], 0x58
lea rcx, vtable.MIDL_NDR64_FORMAT_CHAR.0
mov qword [rax], rcx
mov rdx, rax
mov rcx, rsi
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], rbp
mov byte [rax + 0x50], 0x93
call fcn.1400ad4f4
mov rbx, qword [rsp + 0x70]
mov rax, rsi
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str._pChild__IsArray__
mov edx, 0x139a
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.GetSizeIsExpr____IsConstant__
mov edx, 0x2b8
lea rcx, [0x140101820]
call fcn.1400c7a2c
int3