Function at 0x1400b7604
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor r12d, r12d
mov r14, r8
mov rbp, rdx
mov r15, rcx
test rdx, rdx
jne 0x1400b7641
xor eax, eax
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r13d, 4
mov dword [rsp + 0x88], r12d
mov dword [rsp + 0x78], r13d
lea ecx, [r13 + 0x6c]
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rbx, rax
test rax, rax
je 0x1400b7837
mov esi, dword [0x140134854]
lea ecx, [r13 + 0x54]
mov qword [rax + 8], r12
add esi, 0x70
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
lea rax, vtable.CompositeFormatFragment.0
mov dword [0x140134854], esi
mov qword [rbx], rax
mov qword [rbx + 0x50], r12
mov qword [rbx + 0x58], r12
mov qword [rbx + 0x68], r12
mov qword [rbx + 0x60], 1
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x1400b7837
lea ecx, [rsi + 0x58]
mov qword [rax + 8], r12
mov dword [0x140134854], ecx
mov ecx, r13d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
mov eax, r12d
inc eax
sar ecx, 1
jne 0x1400b7710
mov dword [rdi + 0x54], eax
mov rdx, rdi
lea rax, vtable.MIDL_NDR_FORMAT_UINT32.0
mov rcx, rbx
mov qword [rdi], rax
mov dword [rdi + 0x50], r12d
call fcn.1400ad4f4
mov rax, qword [0x140134380]
test dword [rax + 0x38], 0x4000000
je 0x1400b7801
test r14, r14
je 0x1400b7801
mov ecx, 0x68
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x1400b7837
add dword [0x140134854], 0x68
xorps xmm0, xmm0
mov qword [rax + 8], r12
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r12
mov qword [rax + 0x20], r12
mov qword [rax + 0x28], r12
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r12
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
xor eax, eax
movups xmmword [rsi + 0x50], xmm0
mov qword [rsi + 0x60], rax
lea rax, vtable.MIDL_NDR64_RANGE_FORMAT.0
mov qword [rsi], rax
mov word [rsi + 0x50], 0x5a4
mov rcx, qword [r14 + 0x20]
mov rax, qword [rcx]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov qword [rsi + 0x58], rax
mov rcx, qword [r14 + 0x28]
mov rax, qword [rcx]
mov rax, qword [rax + 0x98]
call qword [case.0x1400cd70e.0]
mov rdx, rsi
mov rcx, rbx
mov qword [rsi + 0x60], rax
call fcn.1400ad4f4
lea eax, [r13 + 7]
and eax, 0xfffffff8
add eax, 0x18
or dword [rdi + 0x50], r13d
mov dword [rsp + 0x78], eax
lea rax, [rsp + 0x78]
mov r8, rbx
lea r9, [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov rdx, rbp
mov rcx, r15
call fcn.1400b7cd4
cmp dword [rsp + 0x88], r12d
je 0x1400b782f
or dword [rdi + 0x50], 1
mov rax, rbx
jmp 0x1400b762b
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3