Function at 0x14006bee0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x610]
sub rsp, 0x710
mov rax, qword [0x140131c10]
xor rax, rsp
mov qword [rbp + 0x600], rax
mov r14, qword [rcx + 8]
xor r12d, r12d
mov r15, rcx
mov rdi, rdx
movzx ecx, r12w
test r14, r14
je 0x14006c27c
mov rax, r14
lea r13d, [r12 + 1]
mov rax, qword [rax + 0x10]
add cx, r13w
test rax, rax
jne 0x14006bf32
test cx, cx
je 0x14006c27c
mov rdx, qword [r15 + 0x30]
lea rcx, [rbp - 0x50]
call fcn.1400c9cd8
lea rax, [rbp - 0x50]
mov dword [rbp - 0x20], 0x40000
lea r9, [0x1401004d0]
mov qword [rdi + 0x20], rax
lea r8, str.BEM_Extension
mov qword [rdi + 0x28], r15
mov rdx, rdi
mov byte [rsp + 0x20], r12b
mov rcx, r15
call fcn.140068498
mov rax, qword [0x140134380]
cmp dword [rax + 0x80], r12d
je 0x14006bf9e
mov rax, qword [rdi + 0x20]
mov byte [rax + 4], r13b
xor r8d, r8d
lea rdx, str.windows.h
mov rcx, rdi
call fcn.14005f22c
xor r8d, r8d
lea rdx, str.bem.h
mov rcx, rdi
call fcn.14005f22c
mov ecx, 0x100
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rcx
lea r9, [rbp + 0x500]
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x30], rcx
lea rax, [rbp - 0x10]
mov qword [rsp + 0x28], rax
mov r8d, 3
mov qword [rsp + 0x20], rcx
mov rcx, qword [r15 + 0x38]
call fcn.1400cb4ec
test eax, eax
jne 0x14006c2db
mov r9d, 0x304
lea r8, [rbp - 0x10]
lea rax, [rbp + 0x1f0]
mov edx, r9d
sub r8, rax
lea rcx, [rbp + 0x1f0]
lea rax, [rdx + 0x7ffffcfa]
test rax, rax
je 0x14006c04a
mov al, byte [r8 + rcx]
test al, al
je 0x14006c04a
mov byte [rcx], al
add rcx, r13
sub rdx, r13
jne 0x14006c02c
test rdx, rdx
lea rax, [rcx - 1]
cmovne rax, rcx
mov byte [rax], r12b
je 0x14006c2a9
lea r8, [rbp + 0xf0]
mov rdx, r9
lea rcx, [rbp + 0x1f0]
call fcn.140001250
test eax, eax
js 0x14006c2f4
xor r8d, r8d
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.14005f22c
lea rcx, [rbp - 0x50]
call fcn.1400ca48c
xorps xmm0, xmm0
mov qword [rdi + 0x40], r15
lea rax, [rbp - 0x78]
mov qword [rsp + 0x68], r12
mov qword [rbp - 0x60], rax
lea rcx, [rsp + 0x60]
lea rax, vtable.STRING_DICT.0
movdqa xmmword [rsp + 0x70], xmm0
xor edx, edx
mov qword [rsp + 0x60], rax
mov dword [rbp - 0x80], r12d
mov qword [rbp - 0x78], r12
movdqa xmmword [rbp - 0x70], xmm0
call fcn.14002b964
test r14, r14
je 0x14006c245
mov rbx, r14
mov r14, qword [r14 + 0x10]
mov rcx, rbx
mov rax, qword [rbx]
mov rax, qword [rax + 0x28]
call qword [case.0x1400cd70e.0]
sub eax, 0x32
je 0x14006c0d6
sub eax, 5
je 0x14006c0d6
sub eax, 0x10
je 0x14006c110
cmp eax, 1
jne 0x14006c2c2
jmp 0x14006c0d6
lea r9, [0x14012e338]
mov dword [rsp + 0x20], r12d
lea r8, [0x14012e290]
xor edx, edx
mov rcx, rbx
call fcn.1400cbdc8
mov rsi, rax
cmp dword [rax + 0xa0], r12d
jne 0x14006c1b1
mov rcx, qword [rax]
mov rax, qword [rcx + 0x38]
mov rcx, rsi
call qword [case.0x1400cd70e.0]
mov rcx, rax
call fcn.14002eccc
mov qword [rsp + 0x58], rax
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], r12b
jne 0x14006c15a
add ebx, r13d
lea r13d, [rbx + rbx]
movsxd rcx, r13d
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov r12, rax
test rax, rax
je 0x14006c222
mov rcx, qword [rsp + 0x58]
mov r8d, ebx
add dword [0x140134854], r13d
mov rdx, rax
call fcn.14006b0c0
mov rdx, r12
lea rcx, [rsp + 0x60]
call fcn.14002b9f8
xor r12d, r12d
lea r13d, [r12 + 1]
mov rbx, qword [rsi + 8]
movzx ecx, r12w
test rbx, rbx
je 0x14006c0d6
mov rax, rbx
mov rax, qword [rax + 0x10]
add cx, r13w
test rax, rax
jne 0x14006c1c5
test cx, cx
je 0x14006c0d6
test rbx, rbx
je 0x14006c204
mov rcx, qword [rbx + 8]
lea r9, [0x14012da98]
mov rbx, qword [rbx + 0x10]
lea r8, [0x14012da78]
xor edx, edx
mov dword [rsp + 0x20], r12d
call fcn.1400cbdc8
jmp 0x14006c1db
mov rdx, rdi
mov rcx, rsi
call fcn.1400a1c94
mov r8d, r13d
mov rdx, rdi
mov rcx, rsi
call fcn.1400a18f0
jmp 0x14006c0d6
mov ebx, 0x7d5
xor edx, edx
mov r8d, ebx
xor r9d, r9d
xor ecx, ecx
call fcn.1400c9744
mov ecx, ebx
call qword [sym.imp.msvcrt.dll_exit]
nop dword [rax + rax]
int3
lea r8, [rsp + 0x60]
call fcn.1400a3164
lea rcx, [rbp - 0x50]
call fcn.1400ca48c
xor r8d, r8d
mov rdx, rdi
mov rcx, r15
call fcn.140068874
cmp byte [rbp - 0x50], r13b
jne 0x14006c27c
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.msvcrt.dll_fclose]
nop dword [rax + rax]
xor eax, eax
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.1400caef0
mov rbx, qword [rsp + 0x760]
add rsp, 0x710
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, str.SUCCEEDED_hr_
mov edx, 0x97b
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, [0x1400f48cc]
mov edx, 0x9ae
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, str.SplitError__0
mov edx, 0x979
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3
lea r8, str.SUCCEEDED_hr_
mov edx, 0x97d
lea rcx, str.com_rpcmidlcodegen_filecls.cxx
call fcn.1400c7a2c
int3