Function at 0x180004f60
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push r14
push r15
sub rsp, 0x30
lea ebp, [rcx + 0x2b2]
mov r15, r9
mov r14, r8
mov rbx, rdx
mov esi, ecx
cmp ecx, ebp
jae 0x18000514b
mov qword [rsp + 0x50], rdi
mov eax, esi
sub eax, 0x5d
je 0x18000508d
sub eax, 0x1c
je 0x18000515f
sub eax, 0x6e
je 0x180005034
sub eax, 0x8a
je 0x180005003
cmp eax, 0x8a
jne 0x180005138
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180004fec
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180004fe1
mov rax, qword [rbx]
mov word [rax + rcx], 0x5f
jmp 0x180005138
mov r9b, 0x5f
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.1800022f0
jmp 0x180005138
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18000502f
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180005024
mov rax, qword [rbx]
mov word [rax + rcx], 0x2d
jmp 0x180005138
mov r9b, 0x2d
jmp 0x180004fef
mov dil, 0x30
nop word [rax + rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18000506c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180005061
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x18000507f
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.1800022f0
inc dil
cmp dil, 0x39
jbe 0x180005040
jmp 0x180005138
mov edx, 0x40
mov rcx, rbx
call fcn.180045720
mov dil, 0x61
nop dword [rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x1800050cc
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x1800050c1
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x1800050df
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.1800022f0
inc dil
cmp dil, 0x7a
jbe 0x1800050a0
mov dil, 0x41
nop dword [rax + rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18000511c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180005111
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x18000512f
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.1800022f0
inc dil
cmp dil, 0x5a
jbe 0x1800050f0
add esi, 0x8a
cmp esi, ebp
jb 0x180004f91
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rsi
ret
mov eax, dword [r14]
cmp dword [rbx], eax
je 0x1800051f2
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
mov ecx, 1
mov edi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test edi, edi
jne 0x18000519c
test eax, eax
je 0x1800051f2
mov ecx, dword [r14]
mov dword [rbx], ecx
cmp dword [r15], 0
je 0x1800051f2
test eax, eax
je 0x1800051be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
mov rdi, rax
jmp 0x1800051c5
lea rdi, str.dnsNameServer
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, qword [0x1800c1f78]
lea r9, str.NativeObjectNotifierPerformChange
mov rcx, rax
mov qword [rsp + 0x20], rdi
lea rdx, str.texRefField
call fcn.18004c9c0
mov eax, dword [r14]
cmp dword [rbx], eax
je 0x180005230
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ferror]
mov ecx, 2
mov edi, eax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
test eax, eax
jne 0x18000522b
test edi, edi
je 0x180005230
mov eax, dword [r14]
mov dword [rbx], eax
mov ecx, dword [rbx]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3