Function at 0x14016e030
Capabilities:
Terminate process

Disassembly:
xchg rbx, r9
mov qword [rsp + 0x10], r9
xchg r9, rbx
xchg rbx, rsi
mov qword [rsp + 0x18], rbx
xchg rsi, rbx
xchg r11, rdi
mov qword [rsp + 0x20], r11
xchg r11, rdi
push rbp
nop
mov qword [rsp - 8], r12
sub rsp, 8
push r13
push rcx
mov qword [rsp], r14
push rcx
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
mov r15, r9
mov r12, r8
mov r13d, edx
xchg r15, rcx
mov r14, r15
xchg rcx, r15
xchg rdx, rsi
mov rdx, qword [rcx + 0x2f8]
xchg rdx, rsi
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016e108
nop
xchg rsi, rdi
mov rsi, qword [rbx]
xchg rdi, rsi
mov edx, 0x3aa678e5
add edx, 0x24c38266
sub edx, 0x20c61276
add edx, 0x414c2ec8
xor edx, 0x4aeff3b1
xor edx, 0x4853b51d
sub edx, 0x39b3ee2e
xor edx, 0x43986367
xor ecx, ecx
call fcn.1401aff20
cmp eax, 0x1e
jge 0x14016e0fb
xchg rcx, rax
mov rcx, qword [rdi]
xchg rcx, rax
xchg r9, rdi
mov rcx, r9
xchg rdi, r9
call qword [rax + 8]
sub rbx, 0xfffffffffffffff8
cmp rbx, rsi
jne 0x14016e0a0
cmp dword [r14 + 0xe8], 0
je 0x14016e4c6
mov rcx, qword [0x140216fe0]
call fcn.14002daa0
mov ebx, eax
test eax, eax
jle 0x14016e2de
mov byte [rbp - 0x38], 7
add byte [rbp - 0x38], 0x56
add byte [rbp - 0x38], 0x10
sub byte [rbp - 0x38], 0x2b
xor byte [rbp - 0x38], 1
sub byte [rbp - 0x38], 4
sub byte [rbp - 0x38], 0x1f
xor byte [rbp - 0x38], 0x53
sub byte [rbp - 0x38], 0x73
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bb40
nop
mov byte [rbp - 0x28], 0xa
xor byte [rbp - 0x28], 0x4f
xor byte [rbp - 0x28], 0x1a
xor byte [rbp - 0x28], 0x2c
xor byte [rbp - 0x28], 0xd
sub byte [rbp - 0x28], 4
xor byte [rbp - 0x28], 0x7a
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bb40
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x32974600
xor edx, 0x1a3dff96
sub edx, 0xa0842e5
xor edx, 0x66f33c06
xor edx, 0x744f86b7
add edx, 0x127b2959
xor edx, 0x5d1e272b
xor edx, 0x725e8369
sub edx, 0x31d95116
mov rcx, qword [rdi]
call fcn.14004f3c0
test al, al
je 0x14016e2bd
lea rax, [rbp - 0x18]
xchg rbx, rax
mov qword [rbp - 0x40], rbx
xchg rbx, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b670
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x1ff15207
add edx, 0x113c7b44
add edx, 0xb05e8d8
sub edx, 0x1c00b7f
add edx, 0x45541831
sub edx, 0x26b30dd6
sub edx, 0x5914b4fe
lea rcx, [rbp - 0x38]
call fcn.14004e120
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg rdx, r9
mov r9, rbx
xchg r9, rdx
call fcn.14004da60
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call fcn.14007e760
mov r9b, 0x6d
add r9b, 0xb
xor r9b, 0x44
sub r9b, 0x38
add r9b, 0x22
sub r9b, 0xa
sub r9b, 4
xor r9b, 0x19
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14004fdf0
mov ecx, 0x2356c7c7
xor ecx, 0xc81611f
sub ecx, 0x24249952
add ecx, 0x5ce1e06d
xor ecx, 0x5d232b3b
xor ecx, 0x37e3a002
add ecx, 0x39097009
add ecx, 0x15b761ff
xor ecx, 0xaeeac72d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054260
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054260
nop
jmp 0x14016e2e5
lea rdi, [r14 + 0x308]
mov edx, 0x3f601fde
sub edx, 0x1888c83e
xor edx, 0x6a7f43a9
sub edx, 0x3bd9ce81
add edx, 0x624385a7
sub edx, 0x7311cacb
xor ecx, ecx
call fcn.1401aff20
cmp eax, 0x1e
jge 0x14016e4c6
mov rcx, qword [0x140216fe0]
call fcn.14002cab0
mov ebx, eax
test eax, eax
jle 0x14016e4c6
mov byte [rbp - 0x38], 0x55
add byte [rbp - 0x38], 0x10
sub byte [rbp - 0x38], 0x14
xor byte [rbp - 0x38], 7
add byte [rbp - 0x38], 0x1c
sub byte [rbp - 0x38], 0x36
sub byte [rbp - 0x38], 0x27
add byte [rbp - 0x38], 7
sub byte [rbp - 0x38], 0x1c
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bb40
nop
mov byte [rbp - 0x28], 0x7a
sub byte [rbp - 0x28], 0x27
xor byte [rbp - 0x28], 0x4e
add byte [rbp - 0x28], 5
xor byte [rbp - 0x28], 7
add byte [rbp - 0x28], 0x44
sub byte [rbp - 0x28], 0x69
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bb40
nop
lea r8, [rbp - 0x38]
mov edx, 0x585a1b03
sub edx, 0x274a48ce
xor edx, 0x55238bce
sub edx, 0x157c304b
sub edx, 0x2cd9d9e6
add edx, 0x8beca5e
xor edx, 0x6659de5b
add edx, 0x219d672d
xor edx, 0x6e6a2ba5
mov rcx, qword [rdi]
call fcn.14004f3c0
test al, al
je 0x14016e4aa
lea rax, [rbp - 0x18]
xchg rdx, rax
mov qword [rbp - 0x40], rdx
xchg rdx, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b670
xchg rbp, rax
mov rbx, rbp
xchg rbp, rax
mov edx, 0x4ebbb233
add edx, 0x289d149c
xor edx, 0x3e172331
sub edx, 0x2393b999
add edx, 0x14871559
sub edx, 0x3a4341bd
lea rcx, [rbp - 0x38]
call fcn.14004e120
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14004da60
xchg rdi, r15
mov rcx, r15
xchg rdi, r15
call fcn.14007e760
mov r9b, 0x6a
add r9b, 0x14
sub r9b, 0x20
sub r9b, 0x22
add r9b, 0x1b
sub r9b, 0x29
sub r9b, 0x1e
add r9b, 0x16
sub r9b, 0x25
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14004fdf0
mov ecx, 0x31a659d5
add ecx, 0x3d6228df
sub ecx, 0x187aa107
sub ecx, 0x4abd051c
add ecx, 0x25bd1a53
xor ecx, 0x114bfef3
add ecx, 0xdf39f7e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054260
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054260
nop
mov r9d, r13d
xchg r12, r14
mov r8, r14
xchg r12, r14
mov rdx, r15
xchg rdx, rcx
mov rdx, qword [r14 + 0x5b8]
xchg rdx, rcx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
xchg rsi, r9
mov r9, qword [r11 + 0x40]
xchg rsi, r9
xchg r10, rdi
mov r10, qword [r11 + 0x48]
xchg rdi, r10
mov rsp, r11
push rdx
push rcx
push rax
push rcx
push rbx
push rbx
push rax
xchg qword [rsp + 0x38], r15
add rsp, 0x40
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
push rax
push rbx
push rcx
push rbx
push rdx
push rdx
push rcx
xchg qword [rsp + 0x38], rbp
add rsp, 0x40
jmp qword [sym.imp.USER32.dll_MessageBoxW]