Function at 0x14016ea10
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
xchg r13, rdi
mov qword [rsp + 0x20], r13
xchg r13, rdi
push rbp
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
push r14
nop
push 0x32e306f7
mov qword [rsp], r15
mov rbp, rsp
sub rsp, 0x60
xchg r15, rdi
mov rdi, r9
xchg r15, rdi
xchg r12, r8
mov r8, r12
xchg r12, r8
mov r13d, edx
xchg r14, r11
mov r11, rcx
xchg r14, r11
mov rsi, qword [rcx + 0x2f8]
mov rbx, qword [rcx + 0x2f0]
cmp rbx, rsi
je 0x14016eae6
nop
xchg r12, rdi
mov r12, qword [rbx]
xchg rdi, r12
mov edx, 0x557b90d2
xor edx, 0x61b3d5d8
add edx, 0x2938180e
sub edx, 0x3b87553b
xor edx, 0x57db6ed0
xor edx, 0x5a893ba0
add edx, 0xd857f23
xor edx, 0x1e25e229
sub edx, 0x22953395
xor ecx, ecx
call fcn.1401b0730
cmp eax, 0x1e
jge 0x14016ead9
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
add rbx, 8
cmp rbx, rsi
jne 0x14016ea82
cmp dword [r14 + 0xe8], 0
je 0x14016ee86
mov rcx, qword [0x140217fe0]
call fcn.14002dae0
mov ebx, eax
test eax, eax
jle 0x14016ecaa
mov byte [rbp - 0x38], 0x37
xor byte [rbp - 0x38], 0x41
sub byte [rbp - 0x38], 0x5d
add byte [rbp - 0x38], 0x15
add byte [rbp - 0x38], 0x4a
sub byte [rbp - 0x38], 0x4f
xor byte [rbp - 0x38], 0x27
xor byte [rbp - 0x38], 0xe
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bdc0
nop
mov byte [rbp - 0x28], 0x12
add byte [rbp - 0x28], 5
xor byte [rbp - 0x28], 4
add byte [rbp - 0x28], 0x65
xor byte [rbp - 0x28], 0x21
add byte [rbp - 0x28], 8
xor byte [rbp - 0x28], 0x61
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bdc0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0xbd75b34
xor edx, 0x5e641078
xor edx, 0x3347753c
sub edx, 0x11d195b5
xor edx, 0x52139288
add edx, 0x579844b2
sub edx, 0x5ec97ee0
xchg r12, rcx
mov r12, qword [rdi]
xchg rcx, r12
call fcn.14004f730
test al, al
je 0x14016ec89
lea rax, [rbp - 0x18]
xchg r9, rax
mov qword [rbp - 0x40], r9
xchg r9, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007ba90
xchg rbx, rax
mov rax, rbx
xchg rbx, rax
mov edx, 0x489f277
add edx, 0x482f6714
xor edx, 0x1cd9503c
xor edx, 0x4fc1a896
xor edx, 0x724584f5
sub edx, 0x1d0f4c7b
sub edx, 0xfb4e558
add edx, 0x154bb712
sub edx, 0x566bab12
lea rcx, [rbp - 0x38]
call fcn.14004e400
xchg r10, rax
mov rcx, r10
xchg r10, rax
mov rdx, rbx
call fcn.14004dce0
xchg rcx, rdi
mov rdi, rcx
xchg rdi, rcx
call fcn.14007eb20
mov r9b, 0x44
xor r9b, 0x65
xor r9b, 0x51
sub r9b, 0x4c
add r9b, 8
add r9b, 0x21
add r9b, 0xb
xor r9b, 0x1a
xor r9b, 0x43
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.140050140
mov ecx, 0x12f90c5e
sub ecx, 0x26ceeae
add ecx, 0x2ebaa428
sub ecx, 0x3a3ca676
xor ecx, 0x43e9f96d
add ecx, 0xb91c1df0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054540
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054540
nop
jmp 0x14016ecb1
lea rdi, [r14 + 0x308]
mov edx, 0x397856fe
sub edx, 0x2e76cc5
add edx, 0x30a20a9
add edx, 0x397b089a
sub edx, 0x5644e24b
xor edx, 0x635c976e
sub edx, 0x7f8da5fb
xor ecx, ecx
call fcn.1401b0730
cmp eax, 0x1e
jge 0x14016ee86
mov rcx, qword [0x140217fe0]
call fcn.14002cb10
mov ebx, eax
test eax, eax
jle 0x14016ee86
mov byte [rbp - 0x38], 3
xor byte [rbp - 0x38], 0x33
xor byte [rbp - 0x38], 8
xor byte [rbp - 0x38], 0x75
xor byte [rbp - 0x38], 0x79
xor byte [rbp - 0x38], 0x34
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004bdc0
nop
mov byte [rbp - 0x28], 6
add byte [rbp - 0x28], 0x3f
sub byte [rbp - 0x28], 0x2b
add byte [rbp - 0x28], 0x2f
add byte [rbp - 0x28], 0x20
sub byte [rbp - 0x28], 0x43
add byte [rbp - 0x28], 0x33
sub byte [rbp - 0x28], 0x59
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004bdc0
nop
lea r8, [rbp - 0x38]
mov edx, 0x3da1007
add edx, 0x18c65738
xor edx, 0x5e0ee8b7
xor edx, 0x1e3bde5c
sub edx, 0x3de89529
sub edx, 0x133a4bf
sub edx, 0x1d7917e7
mov rcx, qword [rdi]
call fcn.14004f730
test al, al
je 0x14016ee6a
lea rax, [rbp - 0x18]
mov qword [rbp - 0x40], rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007ba90
mov rbx, rax
mov edx, 0x45badd11
xor edx, 0x2dd34b80
xor edx, 0x2a923ea9
sub edx, 0x345bb5ef
xor edx, 0x670784d8
xor edx, 0x159c13c4
sub edx, 0x37c1d90
xor edx, 0x788847c4
lea rcx, [rbp - 0x38]
call fcn.14004e400
xchg r11, rax
mov rcx, r11
xchg r11, rax
xchg rdx, r10
mov r10, rbx
xchg r10, rdx
call fcn.14004dce0
xchg rcx, r14
mov r14, rdi
xchg r14, rcx
call fcn.14007eb20
mov r9b, 0x79
add r9b, 4
xor r9b, 0x79
add r9b, 4
add r9b, 0x19
sub r9b, 0x1a
sub r9b, 6
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.140050140
mov ecx, 0x5aafab74
sub ecx, 0x4e966638
add ecx, 0x737ce257
xor ecx, 0x21e2ee1c
add ecx, 0x94e5c00
xor ecx, 0x11b9bff9
sub ecx, 0x1841f8b3
add ecx, 0xa1c75e3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054540
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054540
nop
mov r9d, r13d
xchg r8, r12
mov r12, r8
xchg r8, r12
xchg rdx, r15
mov r15, rdx
xchg rdx, r15
mov rcx, qword [r14 + 0x5b8]
lea r11, [rsp + 0x60]
xchg rbp, rbx
mov rbp, qword [r11 + 0x38]
xchg rbp, rbx
xchg rsi, r8
mov r8, qword [r11 + 0x40]
xchg r8, rsi
xchg rcx, rdi
mov rcx, qword [r11 + 0x48]
xchg rdi, rcx
mov rsp, r11
nop
add rsp, 8
xchg qword [rsp - 8], r15
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov r13, qword [rsp]
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
nop
mov rbp, qword [rsp]
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]