Function at 0x14016e3b0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r12, rsi
mov qword [rsp + 0x18], r12
xchg r12, rsi
xchg rdi, rcx
mov qword [rsp + 0x20], rcx
xchg rcx, rdi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r13
push r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
xchg rbp, r15
mov rbp, r9
xchg r15, rbp
xchg r8, rbp
mov r12, rbp
xchg r8, rbp
mov r13d, edx
mov r14, rcx
mov rsi, qword [rcx + 0x2f8]
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016e48a
nop
mov rdi, qword [rbx]
mov edx, 0x14e79a3
xor edx, 0x1a3e77f0
xor edx, 0x529fb271
add edx, 0x2fb1633b
sub edx, 0x171157c
xor edx, 0x55b02072
add edx, 0xf9254dd
sub edx, 0x3d127e0c
xor ecx, ecx
call fcn.1401afee0
cmp eax, 0x1e
jge 0x14016e47d
mov rax, qword [rdi]
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call qword [rax + 8]
sub rbx, 0xfffffffffffffff8
cmp rbx, rsi
jne 0x14016e42c
cmp dword [r14 + 0xe8], 0
je 0x14016e864
mov rcx, qword [0x140216fe0]
call fcn.14002db00
mov ebx, eax
test eax, eax
jle 0x14016e666
mov byte [rbp - 0x38], 0x59
sub byte [rbp - 0x38], 0x1f
sub byte [rbp - 0x38], 0x1f
add byte [rbp - 0x38], 0x34
xor byte [rbp - 0x38], 0x42
xor byte [rbp - 0x38], 0x4d
sub byte [rbp - 0x38], 0x40
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bac0
nop
mov byte [rbp - 0x28], 7
add byte [rbp - 0x28], 0x5d
xor byte [rbp - 0x28], 0x28
sub byte [rbp - 0x28], 0x3f
xor byte [rbp - 0x28], 0x25
xor byte [rbp - 0x28], 0x23
xor byte [rbp - 0x28], 0x5b
xor byte [rbp - 0x28], 0x64
sub byte [rbp - 0x28], 0x34
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bac0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x2ebdb2f7
add edx, 0x134b8819
xor edx, 0x3b6513e2
xor edx, 0x3afeaba
sub edx, 0x524e827
sub edx, 0x6fd940b5
xor edx, 0x701fce1e
sub edx, 0x5f3fbdf8
xor edx, 0x169a997f
xchg rdx, rcx
mov rdx, qword [rdi]
xchg rcx, rdx
call fcn.14004f500
test al, al
je 0x14016e645
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b960
xchg r8, rax
mov rbx, r8
xchg r8, rax
mov edx, 0x6bb851d5
sub edx, 0x5834a5c0
add edx, 0x3959a3c0
add edx, 0x10f943bc
xor edx, 0x313eaf20
sub edx, 0x122edb11
add edx, 0xd70aa4f
sub edx, 0x682a0bee
lea rcx, [rbp - 0x38]
call fcn.14004e1f0
xchg r8, rax
mov rcx, r8
xchg r8, rax
xchg rbx, r9
mov rdx, r9
xchg r9, rbx
call fcn.14004db50
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call fcn.14007eb10
mov r9b, 0xf
add r9b, 0x67
add r9b, 3
xor r9b, 0x5f
add r9b, 0x1f
xor r9b, 0x23
xor r9b, 0xf
xor r9b, 0x55
sub r9b, 0x3b
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rbp, rcx
mov rbp, rax
xchg rcx, rbp
call fcn.14004ff50
mov ecx, 0x68dc0b36
add ecx, 0xe9cd312
sub ecx, 0x62e70ab3
sub ecx, 0x2964f93
add ecx, 0x7bc639e
add ecx, 0x4dbc11d0
add ecx, 0x988c068f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054390
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054390
nop
jmp 0x14016e66d
lea rdi, [r14 + 0x308]
mov edx, 0x275f9f9
add edx, 0x71cb8ce2
xor edx, 0x6285993
sub edx, 0x6257902
xor edx, 0x16cb7afd
xor edx, 0x1639c20b
sub edx, 0x51caee3c
add edx, 0x22d63381
xor edx, 0x3dc22391
xor ecx, ecx
call fcn.1401afee0
cmp eax, 0x1e
jge 0x14016e864
mov rcx, qword [0x140216fe0]
call fcn.14002cb10
mov ebx, eax
test eax, eax
jle 0x14016e864
mov byte [rbp - 0x38], 0x5a
sub byte [rbp - 0x38], 0x44
xor byte [rbp - 0x38], 0x46
sub byte [rbp - 0x38], 0xc
sub byte [rbp - 0x38], 0x3f
sub byte [rbp - 0x38], 5
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bac0
nop
mov byte [rbp - 0x28], 0x61
sub byte [rbp - 0x28], 0x2e
add byte [rbp - 0x28], 0x29
sub byte [rbp - 0x28], 0x16
xor byte [rbp - 0x28], 0x4d
xor byte [rbp - 0x28], 6
xor byte [rbp - 0x28], 0x26
sub byte [rbp - 0x28], 0x2b
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bac0
nop
lea r8, [rbp - 0x38]
mov edx, 0xbeb0f8d
xor edx, 0x2ea6b977
xor edx, 0xa6ca69e
add edx, 0x105dff2e
add edx, 0x9027c76
add edx, 0x304b22da
sub edx, 0x78ccaedd
xchg r12, rcx
mov r12, qword [rdi]
xchg r12, rcx
call fcn.14004f500
test al, al
je 0x14016e848
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b960
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x6a1bfb04
xor edx, 0x6955d67d
xor edx, 0x376b78ab
xor edx, 0x47d2d1ac
sub edx, 0x73e5f820
xor edx, 0xbe2554c
add edx, 0xa00f121
add edx, 0x5861ac99
sub edx, 0x6e5676cb
lea rcx, [rbp - 0x38]
call fcn.14004e1f0
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov rdx, rbx
call fcn.14004db50
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call fcn.14007eb10
mov r9b, 0x44
xor r9b, 0x17
xor r9b, 0x6a
add r9b, 0x12
add r9b, 0x17
xor r9b, 3
sub r9b, 0x13
xor r9b, 0x10
xor r9b, 0x5f
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.14004ff50
mov ecx, 0x51fc9871
sub ecx, 0x48c0eca4
xor ecx, 0x6185cc31
sub ecx, 0x63590778
xor ecx, 0x46feecc0
sub ecx, 0x196c65ed
add ecx, 0x40f5778
add ecx, 0xd1c18230
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054390
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054390
nop
mov r9d, r13d
xchg r12, r8
mov r12, r8
xchg r8, r12
mov rdx, r15
xchg rcx, r10
mov r10, qword [r14 + 0x5b8]
xchg r10, rcx
lea r11, [rsp + 0x60]
xchg rbx, rbp
mov rbp, qword [r11 + 0x38]
xchg rbp, rbx
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
push rbx
push rdx
push rcx
xchg qword [rsp + 0x18], r15
add rsp, 0x20
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
xchg qword [rsp - 8], r13
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
xchg qword [rsp], rbp
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]