Function at 0x1400b5f48
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rax, qword [rcx]
mov r15, rdx
mov rsi, rcx
mov r14, qword [rax]
mov rbp, qword [r14 + 0x198]
mov rbx, qword [r14 + 0xb8]
mov qword [rsp + 0x60], rbp
xor ebp, ebp
test rbx, rbx
je 0x1400b61b0
mov rcx, rbx
call fcn.1400c9bb8
mov rdi, qword [r15 + 8]
mov eax, ebp
test rdi, rdi
je 0x1400b6067
mov rbp, rdi
mov rdi, qword [rdi + 0x10]
mov r13d, dword [rbp + 0xa0]
mov r12d, r13d
sub r12d, eax
je 0x1400b6031
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor edx, edx
test rax, rax
je 0x1400b6103
add dword [0x140134854], 0x58
xor ecx, ecx
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rdx
mov qword [rax + 0x28], rdx
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rdx
mov qword [rax + 0x40], rdx
mov qword [rax + 0x48], rdx
mov qword [rax + 0x50], rcx
lea rcx, vtable.MIDL_NDR64_MEMPAD_FORMAT.0
mov qword [rax], rcx
cmp r12d, 0xffff
ja 0x1400b61e2
mov dword [rax + 0x54], edx
mov rdx, rax
mov word [rax + 0x50], 0x90
mov word [rax + 0x52], r12w
mov rcx, qword [rsi + 8]
call fcn.1400ad4f4
mov qword [r14 + 0x198], rbp
test byte [rbp + 0xbc], 8
mov rcx, qword [rbp + 8]
jne 0x1400b61c9
mov rax, qword [rcx]
mov rdx, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
call qword [case.0x1400cd70e.0]
mov eax, dword [rbp + 0x34]
add eax, r13d
xor ebp, ebp
jmp 0x1400b5f94
mov edi, dword [r15 + 0x34]
cmp edi, eax
jb 0x1400b6197
sub edi, eax
je 0x1400b60ed
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
je 0x1400b6103
add dword [0x140134854], 0x58
xor ecx, ecx
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], rbp
mov qword [rax + 0x50], rcx
lea rcx, vtable.MIDL_NDR64_MEMPAD_FORMAT.0
mov qword [rax], rcx
cmp edi, 0xffff
ja 0x1400b61e2
mov word [rax + 0x50], 0x90
mov rdx, rax
mov word [rax + 0x52], di
mov dword [rax + 0x54], ebp
mov rcx, qword [rsi + 8]
call fcn.1400ad4f4
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
test rax, rax
jne 0x1400b6126
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
add dword [0x140134854], 0x58
lea rcx, vtable.MIDL_NDR64_SIMPLE_MEMBER_FORMAT.0
mov qword [rax], rcx
mov rdx, rax
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], rbp
mov qword [rax + 0x40], rbp
mov qword [rax + 0x48], rbp
mov qword [rax + 0x50], 0x93
mov rcx, qword [rsi + 8]
call fcn.1400ad4f4
mov rax, qword [rsp + 0x60]
mov rcx, rbx
mov qword [r14 + 0x198], rax
mov rbx, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.1400c9c94
lea r8, str.pStruct__GetMemorySize_____BufferOffset
mov edx, 0x1565
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.pGenFormatState___NULL
mov edx, 0x7c5
lea rcx, str.com_rpcmidlcodegenccb.hxx
call fcn.1400c7a2c
int3
lea r8, str.__pField__HasEmbeddedUnknownRepAs__
mov edx, 0x155b
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.NewMemPad___0xFFFF
mov edx, 0x940
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3