Function at 0x1400b545c
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rbx, qword [rcx]
xor r13d, r13d
mov r14b, r8b
mov rbp, rdx
mov rsi, rcx
mov rbx, qword [rbx + 0xb8]
test rbx, rbx
je 0x1400b58d3
mov rcx, rbx
call fcn.1400c9bb8
lea ecx, [r13 + 0x70]
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x1400b5897
add dword [0x140134854], 0x70
lea r12d, [r13 + 1]
mov qword [rax + 8], r13
mov rdx, rdi
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r13
mov qword [rax + 0x40], r13
mov qword [rax + 0x48], r13
lea rax, vtable.CompositeFormatFragment.0
mov qword [rdi], rax
mov qword [rdi + 0x50], r13
mov qword [rdi + 0x58], r13
mov qword [rdi + 0x60], r12
mov qword [rdi + 0x68], r13
mov rcx, qword [rsi + 0x10]
call fcn.1400ad4f4
lea r9, [0x14012efa8]
mov qword [rsp + 0x98], r13
lea r8, [0x14012e0e8]
mov dword [rsp + 0x20], r13d
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
mov rcx, qword [rsi]
test rax, rax
je 0x1400b5557
mov r13, qword [rcx + 0x190]
mov rax, qword [rcx + 0x198]
mov qword [rsp + 0x80], r13
xor r13d, r13d
mov qword [rcx + 0x190], rax
jmp 0x1400b5586
mov rax, qword [rcx + 0x190]
mov qword [rcx + 0x190], r13
mov qword [rsp + 0x80], rax
mov rax, qword [rsi]
mov rcx, qword [rax + 0x188]
mov qword [rsp + 0x98], rcx
mov qword [rax + 0x188], rbp
xor r9d, r9d
mov r8b, r12b
mov rdx, rbp
mov rcx, rsi
mov r15, r13
call fcn.1400b4a18
mov rcx, qword [0x140134380]
mov r12, rax
mov eax, 1
test byte [rcx + 0xc], al
je 0x1400b55bf
mov r8b, al
mov rdx, rbp
mov rcx, rsi
call fcn.1400b6204
mov r15, rax
test r14b, r14b
je 0x1400b5750
lea r9, [0x14012e0b8]
mov dword [rsp + 0x20], r13d
lea r8, [0x14012e0e8]
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
lea r9, [0x14012e228]
mov qword [rsp + 0x30], rax
lea r8, [0x14012da78]
mov dword [rsp + 0x20], r13d
xor edx, edx
mov rcx, qword [rax + 0xd8]
call fcn.1400cbdc8
mov r14, rax
test rax, rax
je 0x1400b5905
mov rcx, qword [rax + 8]
lea r9, [0x14012dc00]
lea r8, [0x14012da78]
mov dword [rsp + 0x20], r13d
xor edx, edx
call fcn.1400cbdc8
mov r13, rax
test rax, rax
je 0x1400b58ec
mov rcx, qword [rsi]
mov rax, qword [rcx + 0x198]
mov qword [rcx + 0x198], r14
mov ecx, 0x60
mov qword [rsp + 0x38], rax
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r14, rax
test rax, rax
je 0x1400b5897
mov r8, qword [rsi + 8]
mov rdx, r13
add dword [0x140134854], 0x60
mov rcx, rsi
call fcn.1400b23f0
mov r8, qword [rsp + 0x30]
xor r13d, r13d
mov r10, rax
mov qword [r14 + 8], r13
test r12, r12
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], r13
lea rax, vtable.MIDL_NDR64_CONF_STRUCTURE_HEADER_FORMAT.0
setne dl
mov qword [r14 + 0x20], r13
mov qword [r14 + 0x28], r8
lea r11d, [r13 + 1]
mov qword [r14 + 0x30], r14
xorps xmm0, xmm0
mov qword [r14 + 0x38], r13
mov r9d, 0xfe
mov qword [r14 + 0x40], r13
mov qword [r14 + 0x48], r13
movups xmmword [r14 + 0x50], xmm0
mov qword [r14], rax
lea eax, [rdx + 0x32]
mov byte [r14 + 0x50], al
movzx ecx, word [r8 + 0x30]
movzx eax, cx
sub ax, r11w
cmp ax, r9w
ja 0x1400b58ba
sub cl, r11b
xor eax, eax
mov byte [r14 + 0x51], cl
mov word [r14 + 0x52], ax
sub rax, r15
and byte [r14 + 0x52], r9b
or dl, byte [r14 + 0x52]
and dl, 0xfd
neg rax
sbb cl, cl
and cl, 2
or dl, cl
mov rcx, rdi
or dl, 4
mov byte [r14 + 0x52], dl
mov rdx, r14
mov eax, dword [r8 + 0x34]
mov dword [r14 + 0x54], eax
mov qword [r14 + 0x58], r10
call fcn.1400ad4f4
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x198], rcx
jmp 0x1400b5812
mov ecx, 0x58
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov rdx, rax
test rax, rax
je 0x1400b5897
add dword [0x140134854], 0x58
mov r11d, 1
mov qword [rax + 8], r13
test r12, r12
mov qword [rax + 0x10], r13
mov r9d, 0xfe
mov qword [rax + 0x18], r13
setne r8b
mov qword [rax + 0x20], r13
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], rax
mov qword [rax + 0x38], r13
mov qword [rax + 0x40], r13
mov qword [rax + 0x48], r13
xor eax, eax
mov qword [rdx + 0x50], rax
lea rax, vtable.MIDL_NDR64_STRUCTURE_HEADER_FORMAT.0
mov qword [rdx], rax
lea eax, [r8 + 0x30]
mov byte [rdx + 0x50], al
movzx ecx, word [rbp + 0x30]
movzx eax, cx
sub ax, r11w
cmp ax, r9w
ja 0x1400b58ba
sub cl, r11b
xor eax, eax
mov byte [rdx + 0x51], cl
mov word [rdx + 0x52], ax
mov rax, r13
and byte [rdx + 0x52], r9b
sub rax, r15
or r8b, byte [rdx + 0x52]
and r8b, 0xfd
neg rax
sbb cl, cl
and cl, 2
or r8b, cl
mov rcx, rdi
mov byte [rdx + 0x52], r8b
mov eax, dword [rbp + 0x34]
mov dword [rdx + 0x54], eax
call fcn.1400ad4f4
test r12, r12
je 0x1400b5822
mov rdx, r12
mov rcx, rdi
call fcn.1400ad4f4
test r15, r15
je 0x1400b5832
mov rdx, r15
mov rcx, rdi
call fcn.1400ad4f4
lea r9, [0x14012efa8]
mov dword [rsp + 0x20], r13d
lea r8, [0x14012e0e8]
xor edx, edx
mov rcx, rbp
call fcn.1400cbdc8
mov rcx, qword [rsi]
mov rdx, qword [rsp + 0x80]
mov qword [rcx + 0x190], rdx
test rax, rax
jne 0x1400b5878
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x98]
mov qword [rax + 0x188], rcx
mov rcx, rbx
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.1400c9c94
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, str.Alignment___0xFF__Alignment___0
mov edx, 0x18d
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.pGenFormatState___NULL
mov edx, 0x7c5
lea rcx, str.com_rpcmidlcodegenccb.hxx
call fcn.1400c7a2c
int3
lea r8, str.NULL___pConfArray
mov edx, 0x143b
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
lea r8, str.NULL___pConfField
mov edx, 0x1439
lea rcx, str.com_rpcmidlcodegen_ndr64.cxx
call fcn.1400c7a2c
int3
add rcx, 8
xor r8d, r8d
jmp 0x1400b545c