Function at 0x5cf780
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x7ec06c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov edi, dword [ebp + 8]
test eax, eax
push 0
mov ecx, str._n_nPress_OK_to_exit_nPress_Cancel_to_ignore
mov dword [ebp - 0x28], eax
mov ebx, str._n_nPress_OK_to_exit_nPress_Cancel_to_break_to_debugger
cmove ebx, ecx
push 0
push edi
mov dword [ebp - 0x18], ebx
call fcn.005cfe90
add esp, 0xc
lea esi, [eax + 1]
lea eax, [esi + esi]
call fcn.0053bfc0
mov eax, esp
push esi
push eax
push edi
mov dword [ebp - 0x24], eax
call fcn.005cfe90
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
add esp, 0xc
push 0
push 0
push 0xffffffffffffffff
push dword [ebp + 0xc]
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf800
lea ebx, [eax - 1]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x18]
jmp 0x5cf807
mov dword [ebp - 0x14], 0
push 0
push 0
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.005cfda0
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0
push 0
push 0xffffffffffffffff
push dword [ebp + 0x10]
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf837
lea esi, [eax - 1]
jmp 0x5cf839
xor esi, esi
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf853
dec eax
mov dword [ebp - 0xc], eax
jmp 0x5cf85a
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0x10], 0
mov ebx, 0x6ea0b4
push 0
push 0
mov ecx, 0x7347ca
mov eax, ebx
push 0xffffffffffffffff
cmovbe eax, ecx
push eax
push 0
push 0xfde9
mov dword [ebp - 0x1c], eax
call edi
test eax, eax
jle 0x5cf88a
dec eax
mov dword [ebp - 8], eax
jmp 0x5cf891
mov dword [ebp - 8], 0
push 0
push 0
test esi, esi
mov eax, 0x7347ca
push 0xffffffffffffffff
cmove ebx, eax
push ebx
push 0
push 0xfde9
mov dword [ebp - 0x20], ebx
call edi
test eax, eax
jle 0x5cf8b5
dec eax
jmp 0x5cf8b7
xor eax, eax
add eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x14]
add eax, esi
add eax, dword [ebp - 0x10]
inc ebx
add ebx, eax
lea eax, [ebx + ebx]
call fcn.0053bfc0
mov eax, esp
push ebx
push eax
push 0xffffffffffffffff
push dword [ebp + 0xc]
mov dword [ebp - 8], eax
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf8ee
lea esi, [eax - 1]
jmp 0x5cf8f0
xor esi, esi
mov eax, ebx
sub eax, esi
push eax
mov eax, dword [ebp - 8]
lea eax, [eax + esi*2]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x1c]
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf911
dec eax
jmp 0x5cf913
xor eax, eax
add esi, eax
mov eax, ebx
sub eax, esi
push eax
mov eax, dword [ebp - 8]
lea eax, [eax + esi*2]
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.005cfda0
add esp, 0x10
add esi, eax
mov eax, ebx
sub eax, esi
push eax
mov eax, dword [ebp - 8]
lea eax, [eax + esi*2]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x20]
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf952
dec esi
add esi, eax
mov eax, ebx
sub eax, esi
push eax
mov eax, dword [ebp - 8]
lea eax, [eax + esi*2]
push eax
push 0xffffffffffffffff
push dword [ebp + 0x10]
push 0
push 0xfde9
call edi
test eax, eax
jle 0x5cf973
dec eax
jmp 0x5cf975
xor eax, eax
add eax, esi
sub ebx, eax
push ebx
mov ebx, dword [ebp - 8]
lea eax, [ebx + eax*2]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x18]
push 0
push 0xfde9
call edi
push 0x11
push dword [ebp - 0x24]
push ebx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x5cf9b1
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
cmp dword [ebp - 0x28], 0
jne 0x5cf9d7
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x5cf9d7
xor al, al
lea esp, [ebp - 0x34]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053bd3e
mov esp, ebp
pop ebp
ret
mov al, 1
lea esp, [ebp - 0x34]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0053bd3e
mov esp, ebp
pop ebp
ret