Function at 0x14016ddc0
Capabilities:
Terminate process

Disassembly:
xchg rbx, rdx
mov qword [rsp + 0x10], rdx
xchg rdx, rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push rax
mov qword [rsp], r12
nop
mov qword [rsp - 8], r13
sub rsp, 8
nop
mov qword [rsp - 8], r14
sub rsp, 8
push r15
mov rbp, rsp
sub rsp, 0x60
xchg rdx, r9
mov r15, rdx
xchg rdx, r9
xchg r14, r8
mov r12, r14
xchg r8, r14
mov r13d, edx
mov r14, rcx
xchg rsi, r15
mov r15, qword [rcx + 0x2f8]
xchg rsi, r15
xchg rbx, rbp
mov rbp, qword [rcx + 0x2f0]
xchg rbp, rbx
cmp rbx, rsi
je 0x14016de8d
nop
mov rdi, qword [rbx]
mov edx, 0x5d1579f5
xor edx, 0x2129ca89
xor edx, 0x118afafc
sub edx, 0x5262a523
add edx, 0x10d8f5d8
add edx, 0x355eca6d
sub edx, 0x618b643e
xor ecx, ecx
call fcn.1401af9f0
cmp eax, 0x1e
jge 0x14016de80
mov rax, qword [rdi]
xchg rcx, rsi
mov rsi, rdi
xchg rcx, rsi
call qword [rax + 8]
add rbx, 8
cmp rbx, rsi
jne 0x14016de35
cmp dword [r14 + 0xe8], 0
je 0x14016e227
mov rcx, qword [0x140216fe0]
call fcn.14002db60
mov ebx, eax
test eax, eax
jle 0x14016e049
mov byte [rbp - 0x38], 0x26
add byte [rbp - 0x38], 0x4a
sub byte [rbp - 0x38], 0x5d
add byte [rbp - 0x38], 6
xor byte [rbp - 0x38], 0x18
xor byte [rbp - 0x38], 0x20
xor byte [rbp - 0x38], 0x21
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004b9c0
nop
mov byte [rbp - 0x28], 0x41
sub byte [rbp - 0x28], 0x3b
add byte [rbp - 0x28], 0x1a
add byte [rbp - 0x28], 0x35
sub byte [rbp - 0x28], 0x48
add byte [rbp - 0x28], 0x10
xor byte [rbp - 0x28], 0x1d
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004b9c0
nop
lea rdi, [r14 + 0x308]
lea r8, [rbp - 0x38]
mov edx, 0x3fef38c1
xor edx, 0x96632d9
add edx, 0x39affcdc
sub edx, 0x4d1f2051
xor edx, 0x69a9f4b5
sub edx, 0x4ab01211
xchg rbp, rcx
mov rbp, qword [rdi]
xchg rcx, rbp
call fcn.14004f310
test al, al
je 0x14016e028
lea rax, [rbp - 0x18]
xchg rdi, rax
mov qword [rbp - 0x40], rdi
xchg rdi, rax
lea eax, [rbx + 0x277d]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b7b0
xchg rbx, r10
mov r10, rax
xchg rbx, r10
mov edx, 0x15e204e2
add edx, 0x198a8f24
sub edx, 0x13474a8e
xor edx, 0x2ff5aa33
sub edx, 0x22393ea6
add edx, 0x1527b024
sub edx, 0x26bf54c8
lea rcx, [rbp - 0x38]
call fcn.14004e040
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
xchg rdx, r8
mov r8, rbx
xchg rdx, r8
call fcn.14004d960
xchg rdx, rdi
mov rcx, rdx
xchg rdi, rdx
call fcn.14007e900
mov r9b, 0x31
xor r9b, 0x5b
sub r9b, 0x13
sub r9b, 3
sub r9b, 0x1b
sub r9b, 0x2e
xor r9b, 0x3f
add r9b, 6
sub r9b, 0x39
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rcx, r10
mov r10, rax
xchg rcx, r10
call fcn.14004fd20
mov ecx, 0x284cafe4
add ecx, 0xf8a1e14
xor ecx, 0x64b0bb16
add ecx, 0x8923307
add ecx, 0x201132a6
add ecx, 0x83f62364
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054110
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054110
nop
jmp 0x14016e050
lea rdi, [r14 + 0x308]
mov edx, 0x5271148
xor edx, 0x78d9b316
sub edx, 0x351af9cc
add edx, 0x697ecfc
xor edx, 0x3c9d21bc
xor edx, 0x73e6b456
xor ecx, ecx
call fcn.1401af9f0
cmp eax, 0x1e
jge 0x14016e227
mov rcx, qword [0x140216fe0]
call fcn.14002cb70
mov ebx, eax
test eax, eax
jle 0x14016e227
mov byte [rbp - 0x38], 0x69
xor byte [rbp - 0x38], 0x51
add byte [rbp - 0x38], 0x20
sub byte [rbp - 0x38], 0x1a
add byte [rbp - 0x38], 0x1d
xor byte [rbp - 0x38], 0x5b
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14004b9c0
nop
mov byte [rbp - 0x28], 0x60
sub byte [rbp - 0x28], 0x2d
xor byte [rbp - 0x28], 0x2f
add byte [rbp - 0x28], 0x19
sub byte [rbp - 0x28], 0x13
sub byte [rbp - 0x28], 0x1e
add byte [rbp - 0x28], 0x75
sub byte [rbp - 0x28], 0x5f
sub byte [rbp - 0x28], 0x1a
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14004b9c0
nop
lea r8, [rbp - 0x38]
mov edx, 0x206c8421
xor edx, 0x7750a296
sub edx, 0x1f544edc
add edx, 0x47f137d2
sub edx, 0x7a6f25e3
xor edx, 0x74f65920
sub edx, 0x1702605f
sub edx, 0x5a9d5086
mov rcx, qword [rdi]
call fcn.14004f310
test al, al
je 0x14016e20b
lea rax, [rbp - 0x18]
xchg rdi, rax
mov qword [rbp - 0x40], rdi
xchg rdi, rax
lea eax, [rbx + 0x27e1]
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x18]
call fcn.14007b7b0
xchg rbx, rcx
mov rcx, rax
xchg rcx, rbx
mov edx, 0x688dbd28
sub edx, 0xce680de
sub edx, 0x534eff02
xor edx, 0x2b1d7b33
add edx, 0x21e27ca8
sub edx, 0x1fca7fb2
sub edx, 0x255d4370
lea rcx, [rbp - 0x38]
call fcn.14004e040
mov rcx, rax
xchg rbx, r11
mov rdx, r11
xchg rbx, r11
call fcn.14004d960
xchg rcx, rbp
mov rbp, rdi
xchg rcx, rbp
call fcn.14007e900
mov r9b, 9
add r9b, 0x74
sub r9b, 0x79
xor r9b, 0x13
sub r9b, 0x12
add r9b, 0x51
sub r9b, 0x55
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x38]
xchg rdi, rax
mov rcx, rdi
xchg rdi, rax
call fcn.14004fd20
mov ecx, 0x15fec49d
add ecx, 0x5b16745d
sub ecx, 0x3b08ded2
add ecx, 0x1736ed29
xor ecx, 0x31afe70a
sub ecx, 0x2946f8ec
xor ecx, 0xac5a5890
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
movzx edx, byte [rbp - 0x28]
lea rcx, [rbp - 0x20]
call fcn.140054110
nop
movzx edx, byte [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140054110
nop
mov r9d, r13d
xchg r12, r8
mov r12, r8
xchg r8, r12
mov rdx, r15
mov rcx, qword [r14 + 0x5b8]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
xchg rsi, rdi
mov rdi, qword [r11 + 0x40]
xchg rsi, rdi
xchg r14, rdi
mov r14, qword [r11 + 0x48]
xchg r14, rdi
mov rsp, r11
nop
xchg qword [rsp], r15
add rsp, 8
push rbx
xchg qword [rsp + 8], r14
pop rbx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r13
nop
add rsp, 8
mov r12, qword [rsp - 8]
push rdx
push rax
push rdx
push rbx
push rbx
push rdx
xchg qword [rsp + 0x30], rbp
add rsp, 0x38
jmp qword [sym.imp.USER32.dll_MessageBoxW]