Function at 0x14016e6a0
Capabilities:
Terminate process

Disassembly:
xchg rbx, r8
mov qword [rsp + 0x10], r8
xchg r8, rbx
xchg r10, rsi
mov qword [rsp + 0x18], r10
xchg r10, rsi
xchg r9, rdi
mov qword [rsp + 0x20], r9
xchg r9, rdi
nop
push 0x639d5a5b
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
mov r15, r9
xchg r12, r8
mov r8, r12
xchg r8, r12
mov r13d, edx
xchg r12, rcx
mov r14, r12
xchg r12, rcx
xchg rsi, rdx
mov rdx, qword [rcx + 0x2f8]
xchg rdx, rsi
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016e791
nop
xchg rdi, rcx
mov rcx, qword [rbx]
xchg rcx, rdi
mov edx, 0x7ea0f2b0
xor edx, 0x1524e3ad
sub edx, 0x575229e4
add edx, 0x697eaab4
sub edx, 0x57b3cc77
sub edx, 0x25fcc512
xor ecx, ecx
call fcn.1401aff80
cmp eax, 0x1e
jge 0x14016e779
mov rax, qword [rdi]
xchg rdi, rbx
mov rcx, rbx
xchg rbx, rdi
call qword [rax + 8]
nop
sub rbx, 0x25240469
add rbx, 0x25240471
cmp rbx, rsi
jne 0x14016e72e
cmp dword [r14 + 0xe8], 0
je 0x14016eb3f
mov rcx, qword [0x140216fe0]
call fcn.14002da30
mov ebx, eax
test eax, eax
jle 0x14016e951
mov byte [rbp - 0x38], 0x5b
sub byte [rbp - 0x38], 0x33
add byte [rbp - 0x38], 0x3a
xor byte [rbp - 0x38], 0x60
add byte [rbp - 0x38], 0x6e
sub byte [rbp - 0x38], 0x48
sub byte [rbp - 0x38], 0x10
xor byte [rbp - 0x38], 0x32
xor byte [rbp - 0x38], 0x2a
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004ba70
nop
mov byte [rbp - 0x28], 0x67
add byte [rbp - 0x28], 0xc
xor byte [rbp - 0x28], 0x69
add byte [rbp - 0x28], 0x31
sub byte [rbp - 0x28], 6
xor byte [rbp - 0x28], 0x6f
add byte [rbp - 0x28], 9
sub byte [rbp - 0x28], 0xd
sub byte [rbp - 0x28], 0x26
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004ba70
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x4e24d760
sub edx, 0x18c67094
sub edx, 0x85d8f76
xor edx, 0x6708aa7a
xor edx, 0x363b6d07
xor edx, 0x481f6b48
sub edx, 0x342c7b5e
mov rcx, qword [rdi]
call fcn.14004f500
test al, al
je 0x14016e930
lea rax, [rbp - 0x18]
xchg r14, rax
mov qword [rbp - 0x40], r14
xchg r14, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b980
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x246f4d03
add edx, 0x44989fa7
sub edx, 0xcaafe50
sub edx, 0x9dd2c04
sub edx, 0xee4c4d9
add edx, 0x2a70270f
xor edx, 0x6e0b248d
lea rcx, [rbp - 0x38]
call fcn.14004e1c0
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg r14, rbx
mov rdx, r14
xchg r14, rbx
call fcn.14004dab0
mov rcx, rdi
call fcn.14007eb10
mov r9b, 0x6d
sub r9b, 0xa
sub r9b, 0x44
add r9b, 0x4a
xor r9b, 0x7a
add r9b, 0x3f
xor r9b, 0x53
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.14004ff50
mov ecx, 0x1e36371b
add ecx, 0x31985cb0
xor ecx, 0x49b34010
add ecx, 0x1c53132b
xor ecx, 0x7a362740
xor ecx, 0xff1df45
add ecx, 0xa8e8e0fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054410
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054410
nop
jmp 0x14016e958
lea rdi, [r14 + 0x308]
mov edx, 0x1a197226
xor edx, 0x78f449bf
sub edx, 0x562e44ee
add edx, 0xd1963ed
xor edx, 0x5acef6fb
xor edx, 0x551af403
sub edx, 0x160c57fc
xor ecx, ecx
call fcn.1401aff80
cmp eax, 0x1e
jge 0x14016eb3f
mov rcx, qword [0x140216fe0]
call fcn.14002ca60
mov ebx, eax
test eax, eax
jle 0x14016eb3f
mov byte [rbp - 0x38], 0x47
add byte [rbp - 0x38], 0x1f
sub byte [rbp - 0x38], 0x1e
add byte [rbp - 0x38], 0x2d
add byte [rbp - 0x38], 2
xor byte [rbp - 0x38], 0x77
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004ba70
nop
mov byte [rbp - 0x28], 7
add byte [rbp - 0x28], 0x54
add byte [rbp - 0x28], 0
xor byte [rbp - 0x28], 0xa
sub byte [rbp - 0x28], 0x27
add byte [rbp - 0x28], 0x2c
sub byte [rbp - 0x28], 0x30
add byte [rbp - 0x28], 0xa
sub byte [rbp - 0x28], 0x30
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004ba70
nop
lea r8, [rbp - 0x38]
mov edx, 0x5df9edbf
add edx, 0x14f903bc
add edx, 0x57da6fb
xor edx, 0x72cb0d80
add edx, 0x4bee158c
xor edx, 0x4c26cc2c
add edx, 0x1cf47eb
sub edx, 0x1c5eaf94
mov rcx, qword [rdi]
call fcn.14004f500
test al, al
je 0x14016eb23
lea rax, [rbp - 0x18]
xchg r8, rax
mov qword [rbp - 0x40], r8
xchg r8, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b980
mov rbx, rax
mov edx, 0x8ef591d
add edx, 0x3ff7bbba
sub edx, 0x376ee37b
xor edx, 0x7bd785b1
sub edx, 0x20f4950d
sub edx, 0x34f0c871
xor edx, 0x14ca576e
lea rcx, [rbp - 0x38]
call fcn.14004e1c0
xchg rdi, rcx
mov rdi, rax
xchg rdi, rcx
xchg rdx, rbx
mov rbx, rdx
xchg rbx, rdx
call fcn.14004dab0
xchg r15, rcx
mov r15, rdi
xchg rcx, r15
call fcn.14007eb10
mov r9b, 0x75
sub r9b, 0x1a
xor r9b, 0x66
add r9b, 0x1b
add r9b, 0x1b
sub r9b, 0x38
xor r9b, 0x68
sub r9b, 0x52
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg r15, rax
mov rcx, r15
xchg r15, rax
call fcn.14004ff50
mov ecx, 0x2886bb3c
sub ecx, 0x1eeba3e3
xor ecx, 0x45470c0b
sub ecx, 0x3fc8a3c6
xor ecx, 0x6619002e
sub ecx, 0x4fc01484
xor ecx, 0x6b74ad22
add ecx, 0x8fc131c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054410
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054410
nop
mov r9d, r13d
xchg r12, r14
mov r8, r14
xchg r14, r12
mov rdx, r15
mov rcx, qword [r14 + 0x5b8]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
xchg rsi, r14
mov r14, qword [r11 + 0x40]
xchg rsi, r14
mov rdi, qword [r11 + 0x48]
mov rsp, r11
nop
xchg qword [rsp], r15
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
xchg qword [rsp], r13
add rsp, 8
push rcx
push rdx
push rdx
xchg qword [rsp + 0x18], r12
add rsp, 0x20
nop
mov rbp, qword [rsp]
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]