Function at 0x14016de00
Capabilities:
Terminate process

Disassembly:
xchg rbx, rdx
mov qword [rsp + 0x10], rdx
xchg rbx, rdx
xchg rsi, r8
mov qword [rsp + 0x18], r8
xchg r8, rsi
mov qword [rsp + 0x20], rdi
push rbp
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
nop
push 0x7efb11e1
mov qword [rsp], r14
nop
mov qword [rsp - 8], r15
sub rsp, 8
mov rbp, rsp
sub rsp, 0x60
xchg r15, r9
mov r9, r15
xchg r9, r15
xchg r12, r8
mov r8, r12
xchg r12, r8
mov r13d, edx
xchg r14, rcx
mov rcx, r14
xchg rcx, r14
mov rsi, qword [rcx + 0x2f8]
xchg rbx, r8
mov r8, qword [rcx + 0x2f0]
xchg r8, rbx
cmp rbx, rsi
je 0x14016dedc
nop
mov rdi, qword [rbx]
mov edx, 0x374f1874
add edx, 0x1e37abc5
add edx, 0x397848f
xor edx, 0x74dd52e4
add edx, 0x15fc9efa
xor edx, 0x43bfb942
xor ecx, ecx
call fcn.1401afd90
cmp eax, 0x1e
jge 0x14016decf
xchg r11, rax
mov r11, qword [rdi]
xchg r11, rax
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
call qword [rax + 8]
add rbx, 8
cmp rbx, rsi
jne 0x14016de86
cmp dword [r14 + 0xe8], 0
je 0x14016e29e
mov rcx, qword [0x140216fe0]
call fcn.14002da10
mov ebx, eax
test eax, eax
jle 0x14016e0aa
mov byte [rbp - 0x38], 0x39
xor byte [rbp - 0x38], 0x2b
sub byte [rbp - 0x38], 3
add byte [rbp - 0x38], 0x35
sub byte [rbp - 0x38], 0x44
add byte [rbp - 0x38], 0x7b
sub byte [rbp - 0x38], 0x69
xor byte [rbp - 0x38], 0x43
xor byte [rbp - 0x38], 0x51
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004b9d0
nop
mov byte [rbp - 0x28], 0x4b
add byte [rbp - 0x28], 4
sub byte [rbp - 0x28], 0x14
xor byte [rbp - 0x28], 0xe
add byte [rbp - 0x28], 0x16
xor byte [rbp - 0x28], 0x4b
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004b9d0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x6aeadb2
xor edx, 0x6a5421d7
xor edx, 0x7483ce38
xor edx, 0x1845b945
add edx, 0x4f6af6fc
sub edx, 0x4fa7f20f
xchg r9, rcx
mov r9, qword [rdi]
xchg rcx, r9
call fcn.14004f370
test al, al
je 0x14016e089
lea rax, [rbp - 0x18]
xchg rdi, rax
mov qword [rbp - 0x40], rdi
xchg rdi, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b710
xchg r13, rbx
mov r13, rax
xchg r13, rbx
mov edx, 0x2b052b77
xor edx, 0x4cf210c6
xor edx, 0x46afdf65
add edx, 0x56d96bfe
sub edx, 0x3b47d422
xor edx, 0xc2e5b35
add edx, 0x190ede58
sub edx, 0xf3cbb02
xor edx, 0x3a964ada
lea rcx, [rbp - 0x38]
call fcn.14004e040
mov rcx, rax
xchg rcx, rbx
mov rdx, rcx
xchg rbx, rcx
call fcn.14004d980
xchg r11, rcx
mov r11, rdi
xchg r11, rcx
call fcn.14007e7b0
mov r9b, 0x3a
sub r9b, 0x29
xor r9b, 0x4c
xor r9b, 0x61
sub r9b, 0x22
add r9b, 0x52
sub r9b, 6
add r9b, 0xe
sub r9b, 0x73
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
mov rcx, rax
call fcn.14004fd50
mov ecx, 0xa9633de
add ecx, 0x17fa8523
add ecx, 0x2e5d5724
sub ecx, 0x27e6b3dc
sub ecx, 0x12297b13
add ecx, 0x35bb34b4
add ecx, 0x2675d2f9
xor ecx, 0x8cf1171c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400541f0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400541f0
nop
jmp 0x14016e0b1
lea rdi, [r14 + 0x308]
mov edx, 0xd8d8a2a
add edx, 0x277d2db6
xor edx, 0x46a03539
sub edx, 0x6245086b
add edx, 0x1e936a1e
xor edx, 0x533ab6ba
sub edx, 0x7cc251d2
xor ecx, ecx
call fcn.1401afd90
cmp eax, 0x1e
jge 0x14016e29e
mov rcx, qword [0x140216fe0]
call fcn.14002ca40
mov ebx, eax
test eax, eax
jle 0x14016e29e
mov byte [rbp - 0x38], 0x78
add byte [rbp - 0x38], 3
sub byte [rbp - 0x38], 0x52
add byte [rbp - 0x38], 0x1d
sub byte [rbp - 0x38], 0x42
add byte [rbp - 0x38], 8
add byte [rbp - 0x38], 0x2e
sub byte [rbp - 0x38], 0x1f
sub byte [rbp - 0x38], 0x1b
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004b9d0
nop
mov byte [rbp - 0x28], 0x12
add byte [rbp - 0x28], 0xb
add byte [rbp - 0x28], 0x26
sub byte [rbp - 0x28], 0x1c
add byte [rbp - 0x28], 0x41
add byte [rbp - 0x28], 4
sub byte [rbp - 0x28], 0x6c
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004b9d0
nop
lea r8, [rbp - 0x38]
mov edx, 0x79cae019
sub edx, 0x2c9e6e0e
sub edx, 0x2a3f2b41
add edx, 0x240d6fa4
xor edx, 0x10a081f7
xor edx, 0x1e3d2fe
sub edx, 0xb99586e
sub edx, 0x4c208cf4
xchg rcx, r15
mov r15, qword [rdi]
xchg rcx, r15
call fcn.14004f370
test al, al
je 0x14016e282
lea rax, [rbp - 0x18]
xchg r11, rax
mov qword [rbp - 0x40], r11
xchg r11, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b710
mov rbx, rax
mov edx, 0x5c905604
sub edx, 0x17d483b1
add edx, 0x1bd1a32
xor edx, 0x2468fad7
xor edx, 0x78f63e5c
add edx, 0x2ebf0b9d
xor edx, 0x561fb58b
xor edx, 0x30d68f7d
xor edx, 0x2f6c095c
lea rcx, [rbp - 0x38]
call fcn.14004e040
xchg r10, rax
mov rcx, r10
xchg r10, rax
xchg rdx, rbx
mov rbx, rdx
xchg rdx, rbx
call fcn.14004d980
xchg rdi, rcx
mov rdi, rcx
xchg rdi, rcx
call fcn.14007e7b0
mov r9b, 0x3b
add r9b, 0x32
sub r9b, 0x64
add r9b, 0x20
xor r9b, 0x11
xor r9b, 0x39
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.14004fd50
mov ecx, 0x3b3422d8
add ecx, 0x417d0119
sub ecx, 0x74b3041e
add ecx, 0x571f645d
add ecx, 0xe6b2756
sub ecx, 0x6a370108
add ecx, 0xfcae5581
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.1400541f0
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1400541f0
nop
mov r9d, r13d
mov r8, r12
xchg rdi, r15
mov rdx, rdi
xchg rdi, r15
mov rcx, qword [r14 + 0x5b8]
lea r11, [rsp + 0x60]
xchg rbp, rbx
mov rbp, qword [r11 + 0x38]
xchg rbx, rbp
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
nop
xchg qword [rsp], r15
add rsp, 8
push rbx
push rdx
push rcx
push rbx
push rdx
push rcx
push rbx
xchg qword [rsp + 0x38], r14
pop rbx
pop rcx
pop rdx
pop rbx
pop rcx
pop rdx
pop rbx
add rsp, 8
push rcx
push rdx
push rbx
push rcx
push rbx
xchg qword [rsp + 0x28], r13
pop rbx
pop rcx
pop rbx
pop rdx
pop rcx
add rsp, 8
nop
xchg qword [rsp], r12
add rsp, 8
nop
mov rbp, qword [rsp]
add rsp, 8
jmp qword [sym.imp.USER32.dll_MessageBoxW]