Function at 0x14016e440
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
xchg r14, rsi
mov qword [rsp + 0x18], r14
xchg rsi, r14
xchg rdi, r13
mov qword [rsp + 0x20], r13
xchg rdi, r13
nop
sub rsp, 8
mov qword [rsp], rbp
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
xchg r15, rbp
mov rbp, r9
xchg rbp, r15
mov r12, r8
mov r13d, edx
xchg r14, rbx
mov rbx, rcx
xchg rbx, r14
mov rsi, qword [rcx + 0x2f8]
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016e524
nop
xchg r9, rdi
mov r9, qword [rbx]
xchg rdi, r9
mov edx, 0x76fb2fe
add edx, 0x995755b
add edx, 0x44038851
xor edx, 0x33151920
sub edx, 0x180b3273
sub edx, 0x32be9c67
sub edx, 0x1b53da4c
xor ecx, ecx
call fcn.1401b0190
cmp eax, 0x1e
jge 0x14016e517
xchg rbx, rax
mov rbx, qword [rdi]
xchg rbx, rax
xchg rdi, rbp
mov rcx, rbp
xchg rbp, rdi
call qword [rax + 8]
add rbx, 8
cmp rbx, rsi
jne 0x14016e4c2
cmp dword [r14 + 0xe8], 0
je 0x14016e8a2
mov rcx, qword [0x140216fe0]
call fcn.14002db10
mov ebx, eax
test eax, eax
jle 0x14016e6d2
mov byte [rbp - 0x38], 0x6d
xor byte [rbp - 0x38], 0x67
add byte [rbp - 0x38], 0x63
sub byte [rbp - 0x38], 0x64
xor byte [rbp - 0x38], 0x22
xor byte [rbp - 0x38], 0x2b
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bb00
nop
mov byte [rbp - 0x28], 0x52
add byte [rbp - 0x28], 0x24
sub byte [rbp - 0x28], 0x6b
add byte [rbp - 0x28], 0x15
add byte [rbp - 0x28], 0
sub byte [rbp - 0x28], 0x20
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bb00
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x4a6cfa57
sub edx, 0x3b38bcb7
add edx, 0x4cd016b1
add edx, 0x5b4f453
sub edx, 0x451ca256
sub edx, 0x4b0e922
sub edx, 0x17ebbd27
mov rcx, qword [rdi]
call fcn.14004f3e0
test al, al
je 0x14016e6b1
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b750
xchg r11, rbx
mov r11, rax
xchg rbx, r11
mov edx, 0x58a8bbfe
sub edx, 0x13bbff0b
xor edx, 0x19b44cee
sub edx, 0x2ec0c193
add edx, 0x28722d1e
xor edx, 0x22898b4b
add edx, 0x7c457b6
sub edx, 0xd7916fd
sub edx, 0x6fcf119b
lea rcx, [rbp - 0x38]
call fcn.14004e0e0
xchg r11, rax
mov rcx, r11
xchg r11, rax
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14004da00
mov rcx, rdi
call fcn.14007e860
mov r9b, 0x41
xor r9b, 7
sub r9b, 0x44
add r9b, 0x69
add r9b, 0x12
xor r9b, 0x69
sub r9b, 0x13
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg r8, rcx
mov r8, rax
xchg r8, rcx
call fcn.14004fe20
mov ecx, 0x76e7abfe
sub ecx, 0x5e29fd0d
add ecx, 0x357c79c3
sub ecx, 0x3af575c6
add ecx, 0x1e197a46
add ecx, 0xcea1d2cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400541a0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400541a0
nop
jmp 0x14016e6d9
lea rdi, [r14 + 0x308]
mov edx, 0x1e90c2fe
sub edx, 0x1bfcd595
xor edx, 0x2aca5041
add edx, 0x1e5a2071
add edx, 0x35c99d0
add edx, 0x237b5e1c
xor edx, 0x6d8bd5e1
xor ecx, ecx
call fcn.1401b0190
cmp eax, 0x1e
jge 0x14016e8a2
mov rcx, qword [0x140216fe0]
call fcn.14002cb20
mov ebx, eax
test eax, eax
jle 0x14016e8a2
mov byte [rbp - 0x38], 0x2d
xor byte [rbp - 0x38], 0x77
add byte [rbp - 0x38], 0x14
xor byte [rbp - 0x38], 0x2a
xor byte [rbp - 0x38], 0x64
xor byte [rbp - 0x38], 7
add byte [rbp - 0x38], 0x2b
sub byte [rbp - 0x38], 0x46
xor byte [rbp - 0x38], 0xc
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bb00
nop
mov byte [rbp - 0x28], 0x1f
add byte [rbp - 0x28], 0x42
xor byte [rbp - 0x28], 0x3a
xor byte [rbp - 0x28], 0x52
xor byte [rbp - 0x28], 0x73
sub byte [rbp - 0x28], 0x4d
sub byte [rbp - 0x28], 0x2d
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bb00
nop
lea r8, [rbp - 0x38]
mov edx, 0x5292c699
xor edx, 0x777590f1
add edx, 0x4b59b1ab
sub edx, 0x549b35ff
add edx, 0x62227251
sub edx, 0x7ec84460
mov rcx, qword [rdi]
call fcn.14004f3e0
test al, al
je 0x14016e886
lea rax, [rbp - 0x18]
xchg r9, rax
mov qword [rbp - 0x40], r9
xchg r9, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b750
xchg r10, rbx
mov r10, rax
xchg r10, rbx
mov edx, 0x529f4c0a
xor edx, 0x51a4f44b
add edx, 0x6aa522a2
add edx, 0x6c92df8
sub edx, 0x470f537f
xor edx, 0x2d9ab55d
lea rcx, [rbp - 0x38]
call fcn.14004e0e0
mov rcx, rax
mov rdx, rbx
call fcn.14004da00
xchg rdi, rbx
mov rcx, rbx
xchg rdi, rbx
call fcn.14007e860
mov r9b, 0x69
sub r9b, 0x3a
xor r9b, 0x58
xor r9b, 0x70
xor r9b, 0x59
sub r9b, 0x2e
xor r9b, 0x31
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg r13, rax
mov rcx, r13
xchg r13, rax
call fcn.14004fe20
mov ecx, 0x1296875f
add ecx, 0x1b6ed89c
add ecx, 0x4c9e26a6
sub ecx, 0x12b7d922
sub ecx, 0x165b52c8
sub ecx, 0x1668ede1
xor ecx, 0xc4d89329
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400541a0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400541a0
nop
mov r9d, r13d
mov r8, r12
xchg rdx, r15
mov r15, rdx
xchg rdx, r15
xchg rcx, rbp
mov rbp, qword [r14 + 0x5b8]
xchg rcx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
push rdx
push rbx
push rcx
push rbx
push rcx
push rcx
xchg qword [rsp + 0x30], r15
add rsp, 0x38
push rcx
push rbx
xchg qword [rsp + 0x10], r14
pop rbx
pop rcx
add rsp, 8
push rbx
push rax
push rax
push rbx
push rdx
push rax
xchg qword [rsp + 0x30], r13
pop rax
pop rdx
pop rbx
pop rax
pop rax
pop rbx
add rsp, 8
push rax
push rax
push rdx
push rdx
push rax
push rcx
xchg qword [rsp + 0x30], r12
add rsp, 0x38
nop
xchg qword [rsp], rbp
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]