Function at 0x14016de10
Capabilities:
Terminate process

Disassembly:
xchg r10, rbx
mov qword [rsp + 0x10], r10
xchg rbx, r10
mov qword [rsp + 0x18], rsi
xchg rdi, rcx
mov qword [rsp + 0x20], rcx
xchg rcx, rdi
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], r12
sub rsp, 8
push rax
mov qword [rsp], r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xchg r15, r9
mov r9, r15
xchg r15, r9
xchg r8, r12
mov r8, r12
xchg r12, r8
mov r13d, edx
xchg r14, rbx
mov rbx, rcx
xchg r14, rbx
mov rsi, qword [rcx + 0x2f8]
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016dedd
nop
mov rdi, qword [rbx]
mov edx, 0x20dc3b0b
xor edx, 0x31915380
add edx, 0x48a2e5a
add edx, 0x101ac95e
xor edx, 0x75efd320
xor edx, 0x7859e55e
sub edx, 0x24ccdb56
sub edx, 0x3777a83
xor ecx, ecx
call fcn.1401afc10
cmp eax, 0x1e
jge 0x14016ded0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
add rbx, 8
cmp rbx, rsi
jne 0x14016de85
cmp dword [r14 + 0xe8], 0
je 0x14016e2bd
mov rcx, qword [0x140216fe0]
call fcn.14002da30
mov ebx, eax
test eax, eax
jle 0x14016e0af
mov byte [rbp - 0x38], 4
add byte [rbp - 0x38], 0x3d
add byte [rbp - 0x38], 0x22
sub byte [rbp - 0x38], 0x62
add byte [rbp - 0x38], 0x78
sub byte [rbp - 0x38], 8
sub byte [rbp - 0x38], 0x1d
sub byte [rbp - 0x38], 0x19
sub byte [rbp - 0x38], 0x3b
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bcf0
nop
mov byte [rbp - 0x28], 0x1a
add byte [rbp - 0x28], 0x11
add byte [rbp - 0x28], 0x26
sub byte [rbp - 0x28], 0x42
add byte [rbp - 0x28], 0x1f
add byte [rbp - 0x28], 0x3b
xor byte [rbp - 0x28], 0x5f
sub byte [rbp - 0x28], 0x36
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bcf0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0xf765858
xor edx, 0x5525cc82
sub edx, 0xc852090
xor edx, 0x2d0496a4
sub edx, 0xc38e9a7
sub edx, 0x15d701b8
sub edx, 0x3ebaf78a
mov rcx, qword [rdi]
call fcn.14004f630
test al, al
je 0x14016e08e
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007bbd0
xchg rbx, r10
mov r10, rax
xchg r10, rbx
mov edx, 0x61f53a09
xor edx, 0xde9e881
xor edx, 0x29f61cd0
add edx, 0x15678c52
sub edx, 0x52ac9e2
sub edx, 0x46e8450d
add edx, 0x2f72add0
sub edx, 0x3eb1f98a
lea rcx, [rbp - 0x38]
call fcn.14004e340
xchg rcx, rbx
mov rbx, rax
xchg rcx, rbx
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14004dc90
mov rcx, rdi
call fcn.14007ec60
mov r9b, 0x75
sub r9b, 8
sub r9b, 2
sub r9b, 0x52
sub r9b, 2
add r9b, 0x19
add r9b, 0x3a
xor r9b, 0x4b
sub r9b, 0x20
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.140050070
mov ecx, 0x64dd8846
sub ecx, 0x564d5d25
xor ecx, 0x2301a657
add ecx, 0x33c17d64
sub ecx, 0x1e86432d
add ecx, 0x245fb2b8
sub ecx, 0x46d538a4
xor ecx, 0x126105e
add ecx, 0xde8eae60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054520
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054520
nop
jmp 0x14016e0b6
lea rdi, [r14 + 0x308]
mov edx, 0x417c020f
add edx, 0x16f5804e
sub edx, 0xb9888c6
xor edx, 0x52ff3b09
add edx, 0x12be0fa8
add edx, 0x45e1050c
add edx, 0x2732c4f
sub edx, 0x78ed3b89
sub edx, 0x4cc7b4
xor ecx, ecx
call fcn.1401afc10
cmp eax, 0x1e
jge 0x14016e2bd
mov rcx, qword [0x140216fe0]
call fcn.14002ca50
mov ebx, eax
test eax, eax
jle 0x14016e2bd
mov byte [rbp - 0x38], 0x6a
sub byte [rbp - 0x38], 0x15
xor byte [rbp - 0x38], 0x64
xor byte [rbp - 0x38], 0x7e
xor byte [rbp - 0x38], 0x69
sub byte [rbp - 0x38], 0x1b
xor byte [rbp - 0x38], 0xb
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bcf0
nop
mov byte [rbp - 0x28], 5
add byte [rbp - 0x28], 0x34
xor byte [rbp - 0x28], 0x10
xor byte [rbp - 0x28], 0x38
xor byte [rbp - 0x28], 0x3c
add byte [rbp - 0x28], 0x10
sub byte [rbp - 0x28], 0x25
sub byte [rbp - 0x28], 0x18
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bcf0
nop
lea r8, [rbp - 0x38]
mov edx, 0x3e202651
xor edx, 0x714ee027
sub edx, 0x1ceb40ad
xor edx, 0x7122a56
add edx, 0x7d54d86
add edx, 0x20cebba7
xor edx, 0x5e35b8c9
xchg r8, rcx
mov r8, qword [rdi]
xchg r8, rcx
call fcn.14004f630
test al, al
je 0x14016e2a1
lea rax, [rbp - 0x18]
xchg r11, rax
mov qword [rbp - 0x40], r11
xchg r11, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007bbd0
xchg rdx, rax
mov rbx, rdx
xchg rdx, rax
mov edx, 0x3decea61
add edx, 0x1cdb2b40
xor edx, 0x69bc426b
add edx, 0x2141b16
sub edx, 0x2cf1b5ce
add edx, 0x7343de4e
sub edx, 0x38fa3c3b
xor edx, 0xc4e7441
sub edx, 0x4eae2b63
lea rcx, [rbp - 0x38]
call fcn.14004e340
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg rbx, r15
mov rdx, r15
xchg r15, rbx
call fcn.14004dc90
xchg rdi, r10
mov rcx, r10
xchg rdi, r10
call fcn.14007ec60
mov r9b, 0x33
add r9b, 0x22
sub r9b, 0x3c
add r9b, 0x20
add r9b, 3
sub r9b, 0x23
xor r9b, 0x5e
sub r9b, 0x46
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.140050070
mov ecx, 0x64d14333
sub ecx, 0x3b6178d3
add ecx, 0x5235c8d7
xor ecx, 0x2ce2e125
add ecx, 0xde5afd9
xor ecx, 0x6acb0602
add ecx, 0x4364c767
xor ecx, 0x6c6ce5fc
xor ecx, 0xc0d9f553
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054520
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054520
nop
mov r9d, r13d
xchg r12, r8
mov r12, r8
xchg r8, r12
xchg r15, r9
mov rdx, r9
xchg r9, r15
xchg rcx, r10
mov r10, qword [r14 + 0x5b8]
xchg rcx, r10
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
xchg r10, rdi
mov r10, qword [r11 + 0x48]
xchg rdi, r10
mov rsp, r11
nop
mov r15, qword [rsp]
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
xchg qword [rsp], r13
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
push rdx
xchg qword [rsp + 8], rbp
add rsp, 0x10
jmp qword [sym.imp.USER32.dll_MessageBoxW]