Function at 0x41ac50
Capabilities:
Print debug messages
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4260d6
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1118
call fcn.00424780
mov eax, dword [0x43000c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14c], ecx
push 0x19000
call fcn.004237ce
add esp, 4
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x150], eax
mov ecx, 1
test ecx, ecx
je 0x41bb86
push 0x19000
push 0
mov edx, dword [ebp - 0x150]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x19000
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x14c]
movzx edx, byte [ecx + 0xc]
test edx, edx
je 0x41ad76
push 0xa6
push 0x428e64
push 0x428e80
push 0
lea ecx, [ebp - 0x560]
call fcn.00411a10
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
push edx
push str.pipe_process_data_exit_with_disconnect__handle:
mov ecx, dword [ebp - 0x29c]
call fcn.00411e70
mov ecx, eax
call fcn.0041bf20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x560]
call fcn.00411b00
jmp 0x41bb86
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x160], 0
jne 0x41ae25
cmp dword [ebp - 0x15c], 0xe8
je 0x41ae25
push 0xac
push 0x428ef0
push 0x428f0c
push 0
lea ecx, [ebp - 0x648]
call fcn.00411a10
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x15c]
push ecx
push str.__errorCode
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
push str.pipe_read_data_failed_and_exit_but_errorcode_is_not_ERROR_NO_DATA__handle:
mov ecx, dword [ebp - 0x2a4]
call fcn.00411e70
mov ecx, eax
call fcn.0041bf20
mov ecx, eax
call fcn.00411d90
mov ecx, eax
call fcn.0041bf40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x648]
call fcn.00411b00
jmp 0x41bb86
cmp dword [ebp - 0x160], 0
je 0x41ae34
cmp dword [ebp - 0x1c], 0
jne 0x41ae41
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41acab
mov dword [ebp - 4], 2
push 0xb6
push 0x428fc0
push 0x428fdc
push 0
lea ecx, [ebp - 0x730]
call fcn.00411a10
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov byte [ebp - 4], 3
push str.pipe_read_data_suc__data:
mov ecx, dword [ebp - 0x2ac]
call fcn.00411e70
mov dword [ebp - 0x2b0], eax
mov edx, dword [ebp - 0x150]
push edx
mov ecx, dword [ebp - 0x2b0]
call fcn.0041bf60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x730]
call fcn.00411b00
mov eax, dword [ebp - 0x150]
push eax
lea ecx, [ebp - 0x2f8]
call fcn.004122e0
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f8]
push ecx
lea edx, [ebp - 0xd4]
push edx
call fcn.0041ab40
add esp, 8
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f8]
call fcn.00412120
push 0xc
lea ecx, [ebp - 0x2c]
call fcn.004020d0
lea ecx, [ebp - 0x2c]
call fcn.0040c6a0
mov byte [ebp - 4], 7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2c8], esp
mov eax, dword [str.____]
push eax
call fcn.00404850
mov dword [ebp - 0x2cc], eax
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00404500
push eax
call fcn.0041a850
add esp, 0x20
push str.UAC_RUN_Srv...
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call fcn.0041a320
mov byte [ebp - 0x151], al
movzx edx, byte [ebp - 0x151]
test edx, edx
je 0x41af70
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x164], ecx
push 4
lea ecx, [ebp - 0x18]
call fcn.004020d0
lea edx, [ebp - 0x18]
push edx
mov ecx, dword [ebp - 0x164]
call fcn.004102d0
push 4
lea ecx, [ebp - 0x20]
call fcn.004020d0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x164]
call fcn.00410270
jmp 0x41afb5
lea ecx, [ebp - 0x18]
call fcn.00410250
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x18]
call fcn.00410210
mov byte [ebp - 0x152], al
movzx edx, byte [ebp - 0x152]
test edx, edx
je 0x41bafd
lea ecx, [ebp - 0x18]
call fcn.00408bb0
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x170], eax
push 0x18
lea ecx, [ebp - 0x74]
call fcn.004020d0
push 0
lea ecx, [ebp - 0x74]
call fcn.0040a500
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 4], 8
push 0x74
lea ecx, [ebp - 0x148]
call fcn.004020d0
lea ecx, [ebp - 0x148]
call fcn.004018c0
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 9
push 1
lea ecx, [ebp - 0x74]
push ecx
mov edx, dword [ebp - 0x170]
push edx
lea ecx, [ebp - 0x148]
call fcn.004019b0
mov byte [ebp - 0x153], al
movzx eax, byte [ebp - 0x153]
test eax, eax
jne 0x41b079
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41afad
push 0x429040
lea ecx, [ebp - 0x74]
call fcn.0040b7c0
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp - 0x174]
call fcn.0040ae90
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 4], 0xa
push 0x18
lea ecx, [ebp - 0x5c]
call fcn.004020d0
push str.params
lea ecx, [ebp - 0x74]
call fcn.0040b7c0
mov dword [ebp - 0x178], eax
mov edx, dword [ebp - 0x178]
push edx
lea ecx, [ebp - 0x5c]
call fcn.0040a710
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x478]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x17c], eax
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x188], edx
mov byte [ebp - 4], 0xc
push 0xc9
push 0x42904c
push 0x429068
push 0
lea ecx, [ebp - 0x818]
call fcn.00411a10
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x184], eax
mov byte [ebp - 4], 0xd
push str.pipe_handle_msd_msdId:
mov ecx, dword [ebp - 0x184]
call fcn.00411e70
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x188]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x18c]
call fcn.00411e70
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x818]
call fcn.00411b00
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x478]
call fcn.00412120
push str.LoadModule
lea ecx, [ebp - 0xbc]
push ecx
call fcn.0040db40
add esp, 8
mov byte [ebp - 0x154], al
movzx edx, byte [ebp - 0x154]
test edx, edx
je 0x41bac2
push str.path
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x190]
call fcn.0040ae90
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 0xe
push 0x4290bc
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x194], eax
lea ecx, [ebp - 0x328]
push ecx
mov ecx, dword [ebp - 0x194]
call fcn.0040ae90
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x310]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x1a0], eax
mov edx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call fcn.0041a910
add esp, 8
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x310]
call fcn.00412120
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x328]
call fcn.00404690
push 0x4290c4
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1a8], eax
lea edx, [ebp - 0x358]
push edx
mov ecx, dword [ebp - 0x1a8]
call fcn.0040ae90
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1b0]
push ecx
lea edx, [ebp - 0x340]
push edx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x1b8]
push ecx
lea edx, [ebp - 0x8c]
push edx
call fcn.0041a910
add esp, 8
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x340]
call fcn.00412120
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x358]
call fcn.00404690
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x370]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x1bc], eax
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 4], 0x19
push 0xd0
push 0x4290d0
push 0x4290ec
push 0
lea ecx, [ebp - 0x900]
call fcn.00411a10
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 0x1a
push str.handdle_LoadModule_msd__path:
mov ecx, dword [ebp - 0x1c4]
call fcn.00411e70
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1c8]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x1cc]
call fcn.00411e70
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x900]
call fcn.00411b00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x370]
call fcn.00412120
push str.cmdline
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0x3a0]
push ecx
mov ecx, dword [ebp - 0x1d0]
call fcn.0040ae90
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x388]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x1dc], eax
mov edx, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e8], edx
mov byte [ebp - 4], 0x1c
push 0xd1
push 0x429138
push 0x429154
push 0
lea ecx, [ebp - 0x9e8]
call fcn.00411a10
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 0x1d
push str.handdle_LoadModule_msd__cmdline:
mov ecx, dword [ebp - 0x1e4]
call fcn.00411e70
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1e8]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x1ec]
call fcn.00411e70
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x9e8]
call fcn.00411b00
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x388]
call fcn.00412120
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a0]
call fcn.00404690
push str.cmdParams
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1f0], eax
lea ecx, [ebp - 0x3d0]
push ecx
mov ecx, dword [ebp - 0x1f0]
call fcn.0040ae90
mov dword [ebp - 0x1f4], eax
mov edx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x3b8]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x1fc]
mov dword [ebp - 0x208], edx
mov byte [ebp - 4], 0x1f
push 0xd2
push 0x429164
push 0x4291cc
push 0
lea ecx, [ebp - 0xad0]
call fcn.00411a10
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 0x20
push str.handdle_LoadModule_msd__cmdParams:
mov ecx, dword [ebp - 0x204]
call fcn.00411e70
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x208]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x20c]
call fcn.00411e70
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xad0]
call fcn.00411b00
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3b8]
call fcn.00412120
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3d0]
call fcn.00404690
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x3e8]
push edx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x210]
call fcn.00411f10
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x3e8]
call fcn.00412120
cmp dword [ebp - 0x158], 0
jne 0x41b6f0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x400]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x214], eax
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x220], edx
mov byte [ebp - 4], 0x21
push 0xd6
push 0x429230
push 0x42924c
push 0
lea ecx, [ebp - 0xbb8]
call fcn.00411a10
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0x22
push 0x42925c
mov ecx, dword [ebp - 0x21c]
call fcn.00411e70
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x220]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x224]
call fcn.00411e70
mov dword [ebp - 0x228], eax
push str.is_not_load_right__call_loadlibrary
mov ecx, dword [ebp - 0x228]
call fcn.00411e70
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xbb8]
call fcn.00411b00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x400]
call fcn.00412120
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x418]
push edx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
call fcn.00411f10
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x418]
call fcn.00412120
jmp 0x41b7ac
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x430]
push ecx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x23c], edx
mov byte [ebp - 4], 0x23
push 0xda
push 0x4292b0
push 0x4292cc
push 0
lea ecx, [ebp - 0xca0]
call fcn.00411a10
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0x24
push 0x4292dc
mov ecx, dword [ebp - 0x238]
call fcn.00411e70
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x23c]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x240]
call fcn.00411e70
mov dword [ebp - 0x244], eax
push str.is_loaded_
mov ecx, dword [ebp - 0x244]
call fcn.00411e70
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xca0]
call fcn.00411b00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x430]
call fcn.00412120
cmp dword [ebp - 0x158], 0
jne 0x41b8da
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x448]
push edx
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 0x25
push 0xdd
push 0x429300
push 0x42931c
push 0
lea ecx, [ebp - 0xd88]
call fcn.00411a10
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x250], ecx
mov byte [ebp - 4], 0x26
push 0x42932c
mov ecx, dword [ebp - 0x250]
call fcn.00411e70
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x254]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x258]
call fcn.00411e70
mov dword [ebp - 0x25c], eax
push str.load_failed_
mov ecx, dword [ebp - 0x25c]
call fcn.00411e70
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xd88]
call fcn.00411b00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x448]
call fcn.00412120
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8c]
call fcn.00404690
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
call fcn.00404690
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x44]
call fcn.00404690
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.0040aa70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbc]
call fcn.00404690
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41afad
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x460]
push eax
call fcn.0041aa10
add esp, 8
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x26c], ecx
mov byte [ebp - 4], 0x27
push 0xe1
push 0x429354
push 0x429370
push 0
lea ecx, [ebp - 0xe70]
call fcn.00411a10
mov dword [ebp - 0x264], eax
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x268], edx
mov byte [ebp - 4], 0x28
push str.path:
mov ecx, dword [ebp - 0x268]
call fcn.00411e70
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x26c]
call fcn.00411f10
push eax
mov ecx, dword [ebp - 0x270]
call fcn.00411e70
mov dword [ebp - 0x274], eax
push str.load_suc_
mov ecx, dword [ebp - 0x274]
call fcn.00411e70
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xe70]
call fcn.00411b00
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x460]
call fcn.00412120
push 0x4293a0
mov eax, dword [ebp - 0x158]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x41ba47
push 0xe4
push 0x4293a4
push 0x4293c0
push 0
lea ecx, [ebp - 0xf58]
call fcn.00411a10
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x27c], ecx
mov byte [ebp - 4], 0x29
push str.call_the_entry_function_of_the_module_with_params
mov ecx, dword [ebp - 0x27c]
call fcn.00411e70
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xf58]
call fcn.00411b00
lea ecx, [ebp - 0x8c]
call fcn.00404280
push eax
lea ecx, [ebp - 0x8c]
call fcn.00404500
push eax
lea ecx, [ebp - 0xa4]
call fcn.00404280
push eax
lea ecx, [ebp - 0xa4]
call fcn.00404500
push eax
call dword [ebp - 0x168]
add esp, 0x10
jmp 0x41ba98
push 0xe8
push 0x429434
push 0x429450
push 0
lea ecx, [ebp - 0x1040]
call fcn.00411a10
mov dword [ebp - 0x280], eax
mov edx, dword [ebp - 0x280]
mov dword [ebp - 0x284], edx
mov byte [ebp - 4], 0x2a
push str.the_entry_function_of_the_module_is_not_found
mov ecx, dword [ebp - 0x284]
call fcn.00411e70
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1040]
call fcn.00411b00
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8c]
call fcn.00404690
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
call fcn.00404690
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x44]
call fcn.00404690
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.0040aa70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbc]
call fcn.00404690
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41afad
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.00404380
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.00404690
jmp 0x41bb71
mov dword [ebp - 4], 0xffffffff
jmp 0x41bb81
jmp 0x41acab
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x16c], edx
mov eax, dword [ebp - 0x16c]
push eax
call fcn.00423840
add esp, 4
cmp dword [ebp - 0x16c], 0
jne 0x41bbd4
mov dword [ebp - 0x290], 0
jmp 0x41bbea
mov dword [ebp - 0x150], 0x8123
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x14c]
cmp dword [edx + 8], 0
je 0x41bc0d
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x14c]
mov ecx, dword [edx + 8]
call fcn.0041c760
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423460
mov esp, ebp
pop ebp
ret