Function at 0x14000e7d0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
cmp dword [rsp + 0x70], 0
mov rax, r9
mov rsi, rcx
jne 0x14000ea92
cmp r8d, 0x110
jne 0x14000e835
mov r9, qword [rsp + 0x60]
lea rcx, [rsp + 0x70]
mov r8, rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
mov edx, 0x110
call fcn.14000ebf0
mov rcx, qword [rsp + 0x68]
mov qword [rcx], rax
mov eax, 1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x10
jne 0x14000e864
mov rcx, qword [rcx + 8]
xor edx, edx
call qword [sym.imp.USER32.dll_EndDialog]
mov rax, qword [rsp + 0x68]
xor ebx, ebx
mov qword [rax], rbx
lea eax, [rbx + 1]
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x113
jne 0x14000e8c4
mov edi, 1
cmp rax, 0x105
jne 0x14000e8aa
cmp dword [rcx + 0xa4], 0
je 0x14000e8aa
mov rcx, qword [rcx + 8]
mov rdx, rax
call qword [sym.imp.USER32.dll_KillTimer]
mov rcx, qword [rsi + 8]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ebx, ebx
mov dword [rsi + 0xa0], edi
mov dword [rsi + 0xa4], ebx
mov rax, qword [rsp + 0x68]
mov qword [rax], rdi
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x83
je 0x14000e847
cmp r8d, 0x100
jne 0x14000e90d
mov edi, 1
xor ebx, ebx
mov ecx, edi
cmp rax, 7
je 0x14000e8eb
mov ecx, ebx
mov rax, qword [rsp + 0x68]
mov qword [rax], rbx
test ecx, ecx
je 0x14000ea92
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0xff
jne 0x14000e952
mov r9, qword [rsp + 0x60]
lea rcx, [rsp + 0x70]
mov r8, rax
mov qword [rsp + 0x20], rcx
mov rcx, rsi
mov edx, 0xff
call fcn.14000eef0
mov rcx, qword [rsp + 0x68]
mov qword [rcx], rax
mov eax, 1
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x40a
jne 0x14000ea05
xor ebx, ebx
mov dword [rcx + 0xac], ebx
call fcn.1400109b0
lea edi, [rbx + 1]
test al, al
je 0x14000e9be
mov ecx, dword [rsi + 0xe0]
mov edx, ebx
mov eax, ecx
and eax, 0xf
cmp eax, 3
cmovbe edx, eax
shr ecx, 4
and ecx, edi
cmp ecx, edi
ja 0x14000e997
test ecx, ecx
je 0x14000e997
mov eax, ebx
jmp 0x14000e9a1
mov eax, edi
mov edx, edi
mov dword [rsi + 0xac], edi
shl eax, 4
mov rcx, rsi
add eax, edx
mov dword [rsi + 0xe0], eax
call fcn.140010a70
test al, al
jne 0x14000e9e0
mov dword [rsi + 0xac], ebx
mov rax, qword [rsp + 0x68]
mov ebx, 0x80004005
movsxd rcx, ebx
mov qword [rax], rcx
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rcx, rsi
call fcn.14000edb0
mov rax, qword [rsp + 0x68]
movsxd rcx, ebx
mov qword [rax], rcx
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x11
jne 0x14000ea32
mov rax, qword [rsp + 0x68]
xor ebx, ebx
cmp qword [rsp + 0x60], 1
sete bl
mov qword [rax], rbx
lea eax, [r8 - 0x10]
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
cmp r8d, 0x16
jne 0x14000ea56
cmp qword [rsp + 0x60], 1
jne 0x14000e847
test rax, rax
je 0x14000e847
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
cmp r8d, 0x111
jne 0x14000ea92
mov edi, 1
cmp di, ax
jne 0x14000ea92
mov rcx, qword [rcx + 8]
mov rdx, rdi
call qword [sym.imp.USER32.dll_EndDialog]
mov rax, qword [rsp + 0x68]
xor ebx, ebx
mov qword [rax], rbx
mov eax, edi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
xor eax, eax
add rsp, 0x30
pop rdi
ret