Function at 0x14016e680
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
xchg rsi, r8
mov qword [rsp + 0x18], r8
xchg rsi, r8
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], r12
push rsi
mov qword [rsp], r13
push r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
xchg rdi, r9
mov r15, rdi
xchg rdi, r9
xchg r8, r12
mov r8, r12
xchg r8, r12
mov r13d, edx
mov r14, rcx
mov rsi, qword [rcx + 0x2f8]
xchg rbx, r10
mov r10, qword [rcx + 0x2f0]
xchg rbx, r10
cmp rbx, rsi
je 0x14016e75d
nop
mov rdi, qword [rbx]
mov edx, 0x55c21146
xor edx, 0x3040331e
sub edx, 0x2ff2c13e
xor edx, 0x1609cb86
sub edx, 0x17779dc5
add edx, 0x41ca5caf
sub edx, 0x4dd96922
xor ecx, ecx
call fcn.1401affc0
cmp eax, 0x1e
jge 0x14016e745
xchg r8, rax
mov r8, qword [rdi]
xchg r8, rax
xchg rdi, rbx
mov rcx, rbx
xchg rbx, rdi
call qword [rax + 8]
nop
add rbx, 0x3553d5df
sub rbx, 0x3553d5d7
cmp rbx, rsi
jne 0x14016e6f6
cmp dword [r14 + 0xe8], 0
je 0x14016eb13
mov rcx, qword [0x140216fe0]
call fcn.14002db80
mov ebx, eax
test eax, eax
jle 0x14016e935
mov byte [rbp - 0x38], 0x5e
xor byte [rbp - 0x38], 0x45
add byte [rbp - 0x38], 0x2a
add byte [rbp - 0x38], 0x2d
xor byte [rbp - 0x38], 0x7e
sub byte [rbp - 0x38], 0xc
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bba0
nop
mov byte [rbp - 0x28], 0x25
sub byte [rbp - 0x28], 0x23
add byte [rbp - 0x28], 0x37
add byte [rbp - 0x28], 0x45
sub byte [rbp - 0x28], 0x1a
xor byte [rbp - 0x28], 0x43
sub byte [rbp - 0x28], 0x1c
sub byte [rbp - 0x28], 0xb
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bba0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x223984cb
add edx, 0xf83b9cb
add edx, 0x3e1cdfa0
sub edx, 0x5858a2ab
add edx, 0x385a262b
xor edx, 0x177665b0
xor edx, 0x7de16f99
add edx, 0x4b856f50
sub edx, 0x70d21aea
mov rcx, qword [rdi]
call fcn.14004f560
test al, al
je 0x14016e914
lea rax, [rbp - 0x18]
xchg rcx, rax
mov qword [rbp - 0x40], rcx
xchg rcx, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b800
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x39f3f3c3
sub edx, 0x21c1710f
xor edx, 0x2601b542
xor edx, 0x33e88eda
xor edx, 0x7f7a5c9
add edx, 0x246286c9
xor edx, 0x64e21c9f
sub edx, 0x2651889f
sub edx, 0x241b3691
lea rcx, [rbp - 0x38]
call fcn.14004e250
xchg rbp, rcx
mov rbp, rax
xchg rcx, rbp
xchg rbx, rdx
mov rbx, rdx
xchg rdx, rbx
call fcn.14004db80
xchg rcx, rbp
mov rbp, rdi
xchg rbp, rcx
call fcn.14007e930
mov r9b, 0x54
sub r9b, 0x2b
add r9b, 0x42
sub r9b, 0xa
sub r9b, 0x49
add r9b, 0x38
xor r9b, 0x51
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rdi, rcx
mov rdi, rax
xchg rdi, rcx
call fcn.14004ff80
mov ecx, 0x711eca6a
xor ecx, 0x7f429488
sub ecx, 0x20b3e44
add ecx, 0x1e4c35b4
xor ecx, 0x20b13f30
add ecx, 0x3a61f
xor ecx, 0x404f50e4
xor ecx, 0xb580a09a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054400
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054400
nop
jmp 0x14016e93c
lea rdi, [r14 + 0x308]
mov edx, 0x1380075c
add edx, 0x31356019
add edx, 0x2ea90703
xor edx, 0x9469f4b
sub edx, 0x1b0131eb
xor edx, 0x5f17bf2c
xor ecx, ecx
call fcn.1401affc0
cmp eax, 0x1e
jge 0x14016eb13
mov rcx, qword [0x140216fe0]
call fcn.14002cb80
mov ebx, eax
test eax, eax
jle 0x14016eb13
mov byte [rbp - 0x38], 0x5c
xor byte [rbp - 0x38], 0x3e
xor byte [rbp - 0x38], 0x53
add byte [rbp - 0x38], 0x4c
xor byte [rbp - 0x38], 0x1e
sub byte [rbp - 0x38], 0x5f
xor byte [rbp - 0x38], 0xd
sub byte [rbp - 0x38], 9
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bba0
nop
mov byte [rbp - 0x28], 0x3c
xor byte [rbp - 0x28], 0x67
sub byte [rbp - 0x28], 0x51
add byte [rbp - 0x28], 0xd
add byte [rbp - 0x28], 0x65
sub byte [rbp - 0x28], 0x5f
xor byte [rbp - 0x28], 0x21
add byte [rbp - 0x28], 0x37
sub byte [rbp - 0x28], 0x73
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bba0
nop
lea r8, [rbp - 0x38]
mov edx, 0x66f47090
sub edx, 0x4dfb51a9
xor edx, 0x4d66b8ea
xor edx, 0x7e272014
add edx, 0xc21c94a
add edx, 0x2bdc50c8
xor edx, 0x63b6a02e
xchg r14, rcx
mov r14, qword [rdi]
xchg r14, rcx
call fcn.14004f560
test al, al
je 0x14016eaf7
lea rax, [rbp - 0x18]
xchg rdi, rax
mov qword [rbp - 0x40], rdi
xchg rdi, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b800
xchg r13, rax
mov rbx, r13
xchg r13, rax
mov edx, 0x7de27688
sub edx, 0x6e50166c
add edx, 0x4bd9e8b8
sub edx, 0x199d09ec
add edx, 0x107d2695
xor edx, 0x524c657c
lea rcx, [rbp - 0x38]
call fcn.14004e250
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov rdx, rbx
call fcn.14004db80
xchg r15, rdi
mov rcx, r15
xchg r15, rdi
call fcn.14007e930
mov r9b, 0x4d
add r9b, 0x1b
xor r9b, 0x1a
xor r9b, 0x7f
xor r9b, 0x21
add r9b, 0
sub r9b, 0x2b
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14004ff80
mov ecx, 0x6ef82049
sub ecx, 0x1f5abc10
xor ecx, 0x7a6f684d
add ecx, 0x3a86b956
sub ecx, 0x324359b4
add ecx, 0x2ff1295d
sub ecx, 0xa030901
xor ecx, 0x9bdc738d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054400
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054400
nop
mov r9d, r13d
xchg r12, r15
mov r8, r15
xchg r12, r15
xchg r15, r12
mov rdx, r12
xchg r12, r15
xchg rcx, r8
mov r8, qword [r14 + 0x5b8]
xchg r8, rcx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
xchg rdi, r10
mov r10, qword [r11 + 0x48]
xchg rdi, r10
mov rsp, r11
nop
xchg qword [rsp], r15
add rsp, 8
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
push rax
push rdx
push rbx
push rbx
push rax
push rdx
push rcx
push rax
xchg qword [rsp + 0x40], r12
pop rax
pop rcx
pop rdx
pop rax
pop rbx
pop rbx
pop rdx
pop rax
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], rbp
jmp qword [sym.imp.USER32.dll_MessageBoxW]