Function at 0x1400b9ba0
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x60], rbx
mov r15, r9
mov rbx, rcx
mov r14, r8
mov rdi, rdx
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
mov dword [rbp], eax
lea rcx, str._n_nPress_OK_to_exit_nPress_Cancel_to_break_to_debugger
lea rsi, str._n_nPress_OK_to_exit_nPress_Cancel_to_ignore
cmovne rsi, rcx
xor r8d, r8d
xor edx, edx
mov qword [rbp + 0x10], rsi
mov rcx, rbx
call fcn.1400ba5a0
movabs rdx, 0xffffffffffffff0
lea r8, [rax + 1]
lea rcx, [r8 + r8]
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1400b9c1f
mov rax, rdx
and rax, 0xfffffffffffffff0
call fcn.1400bd490
sub rsp, rax
mov rcx, rbx
lea rax, [rsp + 0x30]
mov rdx, rax
mov qword [rbp + 0x18], rax
call fcn.1400ba5a0
xor ebx, ebx
mov r8, rdi
mov dword [rsp + 0x28], ebx
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rbx
lea r9d, [rbx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9c66
dec eax
jmp 0x1400b9c68
mov eax, ebx
mov edx, dword [rbp + 0x80]
xor r9d, r9d
cdqe
xor r8d, r8d
mov rcx, r15
mov qword [rbp + 8], rax
call fcn.1400ba390
mov r9d, 0xffffffff
mov dword [rsp + 0x28], ebx
mov r8, r14
mov qword [rsp + 0x20], rbx
xor edx, edx
mov ecx, 0xfde9
mov r13, rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [rax - 1]
test eax, eax
jg 0x1400b9cad
mov ecx, ebx
movsxd rdi, ecx
mov r9d, 0xffffffff
mov ecx, 0xfde9
mov dword [rsp + 0x28], ebx
mov r8, rsi
mov qword [rsp + 0x20], rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9cd7
dec eax
jmp 0x1400b9cd9
mov eax, ebx
movsxd r14, eax
lea r12, [0x1400de310]
lea rax, [0x1400dfae4]
mov dword [rsp + 0x28], ebx
test r13, r13
mov qword [rsp + 0x20], rbx
mov r15, r12
mov r9d, 0xffffffff
cmovne r15, rax
mov ecx, 0xfde9
mov r8, r15
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9d1b
dec eax
jmp 0x1400b9d1d
mov eax, ebx
movsxd rsi, eax
test rdi, rdi
lea rax, [0x1400dfae4]
mov dword [rsp + 0x28], ebx
cmovne r12, rax
mov qword [rsp + 0x20], rbx
mov r8, r12
mov r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9d55
dec eax
jmp 0x1400b9d57
mov eax, ebx
cdqe
add rax, rsi
mov rsi, qword [rbp + 8]
add rax, r14
inc rsi
add rax, rdi
add rax, r13
add rsi, rax
lea rax, [rsi + rsi]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x1400b9d86
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.1400bd490
mov r8, qword [rbp + 0x68]
sub rsp, rcx
mov r9d, 0xffffffff
xor edx, edx
mov ecx, 0xfde9
lea r14, [rsp + 0x30]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9dc2
dec eax
jmp 0x1400b9dc4
mov eax, ebx
movsxd rdi, eax
mov ecx, esi
sub ecx, eax
mov r9d, 0xffffffff
mov dword [rsp + 0x28], ecx
mov r8, r15
xor edx, edx
mov ecx, 0xfde9
lea rax, [r14 + rdi*2]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9df6
dec eax
jmp 0x1400b9df8
mov eax, ebx
mov edx, dword [rbp + 0x80]
mov r9, rsi
mov rcx, qword [rbp + 0x78]
cdqe
add rdi, rax
sub r9, rdi
lea r8, [r14 + rdi*2]
call fcn.1400ba390
add rdi, rax
mov ecx, esi
sub ecx, edi
mov r9d, 0xffffffff
mov dword [rsp + 0x28], ecx
mov r8, r12
xor edx, edx
mov ecx, 0xfde9
lea rax, [r14 + rdi*2]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9e48
dec eax
jmp 0x1400b9e4a
mov eax, ebx
mov r8, qword [rbp + 0x70]
mov ecx, esi
cdqe
mov r9d, 0xffffffff
add rdi, rax
xor edx, edx
sub ecx, edi
mov dword [rsp + 0x28], ecx
mov ecx, 0xfde9
lea rax, [r14 + rdi*2]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400b9e7e
lea ebx, [rax - 1]
mov r8, qword [rbp + 0x10]
mov r9d, 0xffffffff
movsxd rax, ebx
xor edx, edx
add rdi, rax
mov ecx, 0xfde9
sub esi, edi
mov dword [rsp + 0x28], esi
lea rax, [r14 + rdi*2]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r8, qword [rbp + 0x18]
mov r9d, setsockopt
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x1400b9ed8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [rbp], 0
jne 0x1400b9ee8
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400b9eea
mov al, 1
mov rbx, qword [rbp + 0x60]
lea rsp, [rbp + 0x20]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret