Function at 0x14016def0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
push 0x24d9e621
mov qword [rsp], r13
push r14
nop
sub rsp, 8
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
xchg r9, rcx
mov r15, rcx
xchg rcx, r9
xchg r8, r13
mov r12, r13
xchg r13, r8
mov r13d, edx
xchg r14, r11
mov r11, rcx
xchg r14, r11
xchg rsi, rbx
mov rbx, qword [rcx + 0x2f8]
xchg rbx, rsi
xchg rbx, r13
mov r13, qword [rcx + 0x2f0]
xchg r13, rbx
cmp rbx, rsi
je 0x14016dfe1
nop
xchg rdi, rcx
mov rcx, qword [rbx]
xchg rcx, rdi
mov edx, 0x51af9d38
sub edx, 0x959933
xor edx, 0x70e7d8ff
xor edx, 0x3eee4efb
xor edx, 0x64339d5d
sub edx, 0x11673dfb
sub edx, 0x2bac6c97
xor edx, 0x358f49d0
xor edx, 0xb832d7e
xor ecx, ecx
call fcn.1401af700
cmp eax, 0x1e
jge 0x14016dfce
mov rax, qword [rdi]
xchg rdi, r13
mov rcx, r13
xchg rdi, r13
call qword [rax + 8]
neg rbx
add rbx, 0xfffffffffffffff8
neg rbx
cmp rbx, rsi
jne 0x14016df71
cmp dword [r14 + 0xe8], 0
je 0x14016e38f
mov rcx, qword [0x140216fe0]
call fcn.14002da60
mov ebx, eax
test eax, eax
jle 0x14016e1a3
mov byte [rbp - 0x38], 0x7c
sub byte [rbp - 0x38], 0x4c
add byte [rbp - 0x38], 0x21
xor byte [rbp - 0x38], 0xa
sub byte [rbp - 0x38], 0x34
sub byte [rbp - 0x38], 0x27
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bbe0
nop
mov byte [rbp - 0x28], 0x2f
xor byte [rbp - 0x28], 0x2e
xor byte [rbp - 0x28], 0x77
xor byte [rbp - 0x28], 0x60
add byte [rbp - 0x28], 0x51
xor byte [rbp - 0x28], 0x13
sub byte [rbp - 0x28], 0x51
add byte [rbp - 0x28], 0x24
sub byte [rbp - 0x28], 0x47
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bbe0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x4eaf968a
sub edx, 0x9492431
xor edx, 0x5e04c69d
sub edx, 0x4d6798a
add edx, 0x348d1622
add edx, 0x2d1b232b
sub edx, 0x10b3430c
xor edx, 0x6781317e
mov rcx, qword [rdi]
call fcn.14004f5c0
test al, al
je 0x14016e182
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007ba80
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x3c948bfb
xor edx, 0x76e8134d
add edx, 0x194321b0
sub edx, 0x274f0fbc
xor edx, 0x6c6ad56b
sub edx, 0x77d66f7
xor edx, 0x5172c66f
add edx, 0x5daa1962
xor edx, 0x7799f806
lea rcx, [rbp - 0x38]
call fcn.14004e250
xchg r15, rax
mov rcx, r15
xchg r15, rax
xchg rbp, rbx
mov rdx, rbp
xchg rbp, rbx
call fcn.14004db30
xchg rcx, r9
mov r9, rdi
xchg rcx, r9
call fcn.14007ebf0
mov r9b, 0x1f
add r9b, 0x2b
xor r9b, 0x56
add r9b, 0x4b
sub r9b, 0x56
add r9b, 0x45
sub r9b, 0x55
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rsi, rax
mov rcx, rsi
xchg rsi, rax
call fcn.14004ff90
mov ecx, 0x67388d95
sub ecx, 0x580fe0ef
add ecx, 0x5bb5db2d
sub ecx, 0x3543fe76
xor ecx, 0xa1b46d9
add ecx, 0xc07e307b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400543d0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400543d0
nop
jmp 0x14016e1aa
lea rdi, [r14 + 0x308]
mov edx, 0x558bbd3b
sub edx, 0x557f54
sub edx, 0x30c7ed1a
add edx, 0x4b9b1630
sub edx, 0x1d2e80ee
add edx, 0x1965ccbc
xor edx, 0xa79ff68
xor edx, 0x66394dc7
xor ecx, ecx
call fcn.1401af700
cmp eax, 0x1e
jge 0x14016e38f
mov rcx, qword [0x140216fe0]
call fcn.14002ca80
mov ebx, eax
test eax, eax
jle 0x14016e38f
mov byte [rbp - 0x38], 0xe
xor byte [rbp - 0x38], 0x21
add byte [rbp - 0x38], 4
sub byte [rbp - 0x38], 0x2a
add byte [rbp - 0x38], 0x71
xor byte [rbp - 0x38], 0x23
xor byte [rbp - 0x38], 0x1b
add byte [rbp - 0x38], 0x32
sub byte [rbp - 0x38], 0x74
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bbe0
nop
mov byte [rbp - 0x28], 0x54
add byte [rbp - 0x28], 0x1d
xor byte [rbp - 0x28], 0x68
xor byte [rbp - 0x28], 0x74
add byte [rbp - 0x28], 0xb
sub byte [rbp - 0x28], 0x32
xor byte [rbp - 0x28], 0x75
sub byte [rbp - 0x28], 0x33
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bbe0
nop
lea r8, [rbp - 0x38]
mov edx, 0x40f92d4d
add edx, 0x3b0c69e3
xor edx, 0x941eb9d
xor edx, 0x4d6572e8
add edx, 0x29c37de0
sub edx, 0x491c7c85
sub edx, 0x18c80f9b
xchg rcx, rsi
mov rsi, qword [rdi]
xchg rsi, rcx
call fcn.14004f5c0
test al, al
je 0x14016e373
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007ba80
xchg rsi, rbx
mov rsi, rax
xchg rsi, rbx
mov edx, 0x5e523a29
sub edx, 0x41914d1d
xor edx, 0x6d29028
xor edx, 0x14c719dc
add edx, 0x629140a
add edx, 0x399559ca
sub edx, 0x4e93d2cb
lea rcx, [rbp - 0x38]
call fcn.14004e250
xchg r9, rcx
mov r9, rax
xchg r9, rcx
xchg r13, rbx
mov rdx, r13
xchg rbx, r13
call fcn.14004db30
xchg rsi, rcx
mov rsi, rdi
xchg rsi, rcx
call fcn.14007ebf0
mov r9b, 0x63
xor r9b, 0x1b
sub r9b, 0x4b
sub r9b, 0x10
xor r9b, 0x7f
xor r9b, 0x63
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg r14, rcx
mov r14, rax
xchg r14, rcx
call fcn.14004ff90
mov ecx, 0x6df703d4
sub ecx, 0x1dd95060
sub ecx, 0x28ecf828
sub ecx, 0x23e0a15a
xor ecx, 0x221f4a3
add ecx, 0xfe8e12ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400543d0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400543d0
nop
mov r9d, r13d
mov r8, r12
xchg r15, rcx
mov rdx, rcx
xchg r15, rcx
xchg rcx, r12
mov r12, qword [r14 + 0x5b8]
xchg rcx, r12
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
xchg rsi, rbx
mov rbx, qword [r11 + 0x40]
xchg rbx, rsi
xchg rbp, rdi
mov rbp, qword [r11 + 0x48]
xchg rbp, rdi
mov rsp, r11
nop
xchg qword [rsp], r15
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
nop
mov rbp, qword [rsp]
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]