Function at 0x1400021c4
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbp
push rbx
sub rsp, 0x118
mov rax, qword [0x140079508]
mov qword [rsp + 0xf0], r8
mov qword [rsp + 0xe8], rdx
xor r9d, r9d
xor r10d, r10d
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0x108], rax
mov r15d, dword [0x14007957c]
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], r9
mov dword [rsp + 0xb0], r10d
mov dword [rsp + 0xfc], r10d
mov dword [rsp + 0x100], r10d
xor edi, edi
mov dword [rsp + 0xd0], edi
xor eax, eax
mov dword [rsp + 0xa8], eax
mov dword [rsp + 0xa0], eax
xor esi, esi
xor ebp, ebp
xor ebx, ebx
mov dword [rsp + 0xb8], eax
mov eax, 1
mov dword [rsp + 0xc8], eax
mov eax, dword [0x140079570]
mov dword [rsp + 0xc0], eax
xor r12d, r12d
xor r14d, r14d
call fcn.140006c40
mov r13, rax
test r13, r13
je 0x140002eb9
lea rcx, [rsp + 0x160]
call fcn.14001658c
test rax, rax
je 0x140002974
mov qword [rsp + 0x88], r12
mov r12d, esi
mov qword [rsp + 0x80], r13
mov esi, ebx
mov rbx, rax
mov r13d, edi
mov edi, ebp
mov ebp, r9d
add dword [rsp + 0x100], 1
test edi, edi
je 0x1400022f1
xor ecx, ecx
mov rdx, rbx
lea r8, [0x140060e08]
call fcn.14000aa9c
test eax, eax
jne 0x1400022f1
xor edi, edi
mov r12d, 1
jmp 0x140002948
lea rdx, [rsp + 0x90]
lea r8, [rsp + 0x98]
lea r9, [rsp + 0xf8]
mov rcx, rbx
call fcn.140016704
test eax, eax
jl 0x140002de7
test r14, r14
je 0x140002cdf
test r12d, r12d
je 0x140002501
mov eax, dword [rsp + 0xc0]
xor r12d, r12d
test eax, eax
jne 0x140002348
mov eax, dword [rsp + 0xa8]
test eax, eax
jne 0x140002afa
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.changetype
call fcn.14000aa9c
test eax, eax
je 0x14000237d
mov eax, dword [0x14007957c]
test eax, eax
je 0x14000250a
mov r15d, 1
xor ebp, ebp
jmp 0x140002501
mov rdx, qword [rsp + 0x98]
mov r8, qword [rsp + 0x98]
xor ecx, ecx
mov r9d, 1
call fcn.140017338
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
lea r8, str.modify
call fcn.14000aa9c
test eax, eax
jne 0x1400023c2
xor r15d, r15d
mov r13d, 1
jmp 0x140002948
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
lea r8, [0x140060e48]
call fcn.14000aa9c
test eax, eax
jne 0x1400023e9
mov r15d, 1
xor ebp, ebp
jmp 0x140002948
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
lea r8, str.modrdn
call fcn.14000aa9c
test eax, eax
jne 0x14000240d
mov esi, 1
jmp 0x140002948
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
lea r8, str.moddn
call fcn.14000aa9c
test eax, eax
jne 0x140002431
mov esi, 1
jmp 0x140002948
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
lea r8, str.delete
call fcn.14000aa9c
test eax, eax
jne 0x140002463
mov eax, 1
mov dword [rsp + 0xd0], eax
mov dword [rsp + 0xa0], eax
jmp 0x140002948
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22c8
call fcn.140009ef8
mov rax, qword [0x140079540]
mov rbp, qword [rsp + 0x98]
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edi, 0x19
mov dword [rsp + 0x48], 5
mov dword [rsp + 0x28], edi
lea rbx, str.changetype
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x30], rbx
xor ecx, ecx
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x40], rbp
mov edx, 3
mov r9d, 0x19
lea rsi, [rsp + 0x100]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], edi
mov qword [rsp + 0x60], r14
call fcn.140006264
jmp 0x140002a88
test r13d, r13d
je 0x1400025b5
mov rdx, qword [rsp + 0x90]
xor r13d, r13d
mov edi, 1
xor ecx, ecx
lea r8, [0x140060e48]
call fcn.14000aa9c
test eax, eax
jne 0x140002533
xor ebp, ebp
jmp 0x140002948
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.replace
call fcn.14000aa9c
test eax, eax
jne 0x140002557
mov ebp, 2
jmp 0x140002948
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.delete
call fcn.14000aa9c
test eax, eax
je 0x140002586
mov eax, dword [0x140079578]
mov edx, 2
xor ebp, ebp
cmp eax, 0
cmovne ebp, edx
jmp 0x1400025b5
mov r8, qword [rsp + 0x98]
mov dword [rsp + 0x20], 0
mov ebp, 1
mov edx, 1
lea rcx, [rsp + 0xd8]
xor r9d, r9d
call fcn.140003614
jmp 0x140002948
test esi, esi
jne 0x14000288b
mov eax, dword [rsp + 0xb8]
test eax, eax
jne 0x14000278b
mov eax, dword [rsp + 0xb0]
test eax, eax
jne 0x140002691
mov eax, dword [rsp + 0xa0]
test eax, eax
je 0x140002662
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22cb
call fcn.140009ef8
mov rax, qword [0x140079540]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], 5
xor ecx, ecx
mov dword [rsp + 0x38], 0x19
mov qword [rsp + 0x20], rax
mov edx, 3
mov qword [rsp + 0x48], 0
lea rbx, [rsp + 0x100]
mov r9d, 0x19
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], r14
call fcn.140006264
jmp 0x140002a88
mov eax, dword [rsp + 0xf8]
mov r8, qword [rsp + 0x90]
mov r9, qword [rsp + 0x98]
mov dword [rsp + 0x20], eax
mov edx, ebp
lea rcx, [rsp + 0xd8]
call fcn.140003614
jmp 0x140002948
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.newsuperior
call fcn.14000aa9c
test eax, eax
jne 0x1400026ed
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x140002b82
xor eax, eax
mov dword [rsp + 0xb0], eax
mov edx, 1
mov dword [rsp + 0xa0], edx
jmp 0x140002948
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22ca
call fcn.140009ef8
mov rax, qword [0x140079540]
mov rbp, qword [rsp + 0x90]
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edi, 0x19
mov dword [rsp + 0x48], 5
mov dword [rsp + 0x28], edi
lea rbx, str.newsuperior
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x30], rbx
xor ecx, ecx
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x40], rbp
mov edx, 3
mov r9d, 0x19
lea rsi, [rsp + 0x100]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], edi
mov qword [rsp + 0x60], r14
call fcn.140006264
jmp 0x140002a88
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.deleteoldrdn
call fcn.14000aa9c
test eax, eax
jne 0x1400027ed
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
mov r8d, gethostbyname
call fcn.1400095aa
mov edx, 1
cmp eax, 0
mov eax, 0
cmove eax, edx
mov dword [rsp + 0xc8], eax
xor ecx, ecx
mov dword [rsp + 0xb8], ecx
mov dword [rsp + 0xb0], edx
mov dword [rsp + 0xa0], edx
jmp 0x140002948
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22ca
call fcn.140009ef8
mov rax, qword [0x140079540]
mov rbp, qword [rsp + 0x90]
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edi, 0x19
mov dword [rsp + 0x48], 5
mov dword [rsp + 0x28], edi
lea rbx, str.deleteoldrdn
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x30], rbx
xor ecx, ecx
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x40], rbp
mov edx, 3
mov r9d, 0x19
lea rsi, [rsp + 0x100]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], edi
mov qword [rsp + 0x60], r14
call fcn.140006264
jmp 0x140002a88
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.newrdn
call fcn.14000aa9c
test eax, eax
jne 0x1400028e4
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x140002b9f
mov eax, 1
mov dword [rsp + 0xb8], eax
xor esi, esi
mov dword [rsp + 0xb0], esi
jmp 0x140002948
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.newsuperior
call fcn.14000aa9c
test eax, eax
jne 0x1400029ef
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
call fcn.140008de0
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x140002cc2
xor eax, eax
mov dword [rsp + 0xb0], eax
xor esi, esi
mov ecx, 1
mov dword [rsp + 0xb8], eax
mov dword [rsp + 0xa0], ecx
lea rcx, [rsp + 0x160]
call fcn.14001658c
mov rbx, rax
test rbx, rbx
jne 0x1400022c3
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
mov r9d, ebp
test r14, r14
je 0x140002c41
mov eax, dword [rsp + 0xd0]
test eax, eax
jne 0x1400029c8
test r12, r12
je 0x140002bbc
mov rax, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xf0]
mov r8d, dword [rsp + 0xc8]
mov r9, qword [rsp + 0xe0]
mov rcx, r14
mov rdx, r12
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
call fcn.1400030e4
jmp 0x1400029e0
mov rdx, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov rcx, r14
call fcn.140002fcc
mov esi, eax
xor eax, eax
cmp esi, 0
cmove esi, eax
jmp 0x140002a8d
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22c9
call fcn.140009ef8
mov rax, qword [0x140079540]
mov rbp, qword [rsp + 0x90]
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov edi, 0x19
mov dword [rsp + 0x48], 5
mov dword [rsp + 0x28], edi
lea rbx, str.newrdn
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x30], rbx
xor ecx, ecx
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x40], rbp
mov edx, 2
mov r9d, 0x19
lea rsi, [rsp + 0x100]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], edi
mov qword [rsp + 0x60], r14
call fcn.140006264
mov esi, 0x59
mov rcx, r13
mov rdx, r14
call fcn.14000adf4
test r12, r12
je 0x140002aa8
mov rcx, r13
mov rdx, r12
call fcn.14000adf4
mov rax, qword [rsp + 0xe0]
test rax, rax
je 0x140002ac5
mov rdx, qword [rsp + 0xe0]
mov rcx, r13
call fcn.14000adf4
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x140002ad7
call fcn.140002ef6
mov rcx, qword [rsp + 0x108]
call fcn.14005fbf0
mov eax, esi
add rsp, 0x118
pop rbx
pop rbp
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22c7
call fcn.140009ef8
mov rax, qword [0x140079540]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], 0x19
xor ecx, ecx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x20], rax
mov edx, 2
mov qword [rsp + 0x30], r14
mov r9d, 0x19
call fcn.140006264
mov rcx, r13
mov rdx, r14
call fcn.14000adf4
mov rcx, qword [rsp + 0x108]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x118
pop rbx
pop rbp
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str.NLSSTRDUP
call qword [sym.imp.MSVCR80.dll_perror]
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x1400026d3
lea rcx, str.NLSSTRDUP
call qword [sym.imp.MSVCR80.dll_perror]
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x1400028cd
mov rax, qword [rsp + 0xe0]
test rax, rax
jne 0x140002991
mov rdx, qword [rsp + 0x90]
mov dword [rsp + 0x78], r9d
xor ecx, ecx
lea r8, str.replace
call fcn.14000aa9c
mov r9d, dword [rsp + 0x78]
test eax, eax
jne 0x140002c14
mov r8, qword [rsp + 0x98]
mov dword [rsp + 0x20], 0
mov edx, r9d
xor r9d, r9d
lea rcx, [rsp + 0xd8]
call fcn.140003614
mov rax, qword [rsp + 0xf0]
mov rdx, qword [rsp + 0xd8]
mov r9, qword [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov rcx, r14
mov r8d, r15d
call fcn.140003278
jmp 0x1400029e0
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0xbd5
call fcn.140009ef8
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x28], 0
lea rax, [0x140060e18]
xor ecx, ecx
mov qword [rsp + 0x20], rax
mov edx, 3
mov r9d, 0x19
call fcn.140006264
xor ecx, ecx
mov edx, 3
lea r8, [0x140060e80]
xor r9d, r9d
call fcn.140006264
mov rcx, qword [rsp + 0x108]
call fcn.14005fbf0
mov eax, 0x59
add rsp, 0x118
pop rbx
pop rbp
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str.NLSSTRDUP
call qword [sym.imp.MSVCR80.dll_perror]
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x14000292a
mov eax, dword [rsp + 0xc0]
test eax, eax
jne 0x140002d8d
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, str.replica
call fcn.14000aa9c
test eax, eax
jne 0x140002d8d
mov rdx, qword [rsp + 0x98]
add dword [rsp + 0xa8], 1
xor ecx, ecx
mov r8d, 0x3a
call fcn.14000a3ec
test rax, rax
jne 0x140002d39
mov eax, 0x185
mov dword [rsp + 0x78], eax
jmp 0x140002d4a
mov byte [rax], 0
xor ecx, ecx
mov rdx, rax
call fcn.140008d44
mov dword [rsp + 0x78], eax
mov rdx, qword [rsp + 0x98]
mov r8, qword [0x140079558]
xor ecx, ecx
call fcn.14000aa9c
test eax, eax
jne 0x140002948
mov eax, dword [rsp + 0x78]
cmp eax, dword [0x140078030]
mov ecx, dword [rsp + 0xc0]
mov edx, 1
cmove ecx, edx
mov dword [rsp + 0xc0], ecx
jmp 0x140002948
mov rdx, qword [rsp + 0x90]
xor ecx, ecx
lea r8, [0x140060e18]
call fcn.14000aa9c
test eax, eax
jne 0x140002948
mov rdx, qword [rsp + 0x98]
xor ecx, ecx
call fcn.140008de0
mov r14, rax
test r14, r14
je 0x140002dcd
mov r12d, 1
jmp 0x140002948
lea rcx, str.NLSSTRDUP
call qword [sym.imp.MSVCR80.dll_perror]
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x140002dc2
cmp ebp, 2
jne 0x140002e20
lea rbx, [rsp + 0x70]
xor ecx, ecx
mov rdx, rbx
lea r8, [0x140060dac]
call fcn.14000a580
mov qword [rsp + 0x98], rbx
xor ecx, ecx
mov rdx, rbx
call fcn.1400081f4
mov dword [rsp + 0xf8], eax
jmp 0x140002319
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x80]
lea r8, [rsp + 0x78]
lea r9, [rsp + 0xfc]
xor ecx, ecx
mov edx, 0x22c6
call fcn.140009ef8
mov rax, qword [0x140079540]
mov r8, qword [rsp + 0x78]
mov dword [rsp + 0x28], 5
lea rbp, [0x140060dac]
mov dword [rsp + 0x38], 0x19
mov qword [rsp + 0x20], rax
cmp r14, 0
cmovne rbp, r14
lea rbx, [rsp + 0x100]
xor ecx, ecx
mov edx, 3
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x30], rbx
mov r9d, 0x19
mov qword [rsp + 0x40], rbp
call fcn.140006264
mov esi, 0x59
test r14, r14
jne 0x140002a8d
jmp 0x140002a98
mov eax, dword [0x140078044]
test eax, 0x7fffffff
je 0x140002ee5
xor eax, eax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rax
xor ecx, ecx
xor edx, edx
lea r8, str.Error_getting_core_context._n
xor r9d, r9d
call fcn.1400053e4
mov ecx, 1
call qword [sym.imp.MSVCR80.dll_exit]
jmp 0x14000228d