Function at 0x404f90
Capabilities:
Acquire debug privileges
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41893c
mov eax, dword fs:[0]
push eax
sub esp, 0x3cc
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c0], 0
xor eax, eax
mov byte [ebp - 0x281], al
lea ecx, [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x281]
call fcn.004027d0
mov dword [ebp - 4], 0
xor edx, edx
mov byte [ebp - 0x282], dl
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x282]
call fcn.00402c20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.004037e0
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x350]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0xf8]
call fcn.004037e0
mov dword [ebp - 0x2d0], eax
mov edx, dword [ebp - 0x2d0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2a0], eax
xor eax, eax
mov byte [ebp - 0x283], al
lea ecx, [ebp - 0x110]
push ecx
lea ecx, [ebp - 0x283]
call fcn.00402d70
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037e0
mov dword [ebp - 0x2d4], eax
mov edx, dword [ebp - 0x2d4]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219c8], eax
xor ecx, ecx
mov byte [ebp - 0x284], cl
lea edx, [ebp - 0x128]
push edx
lea ecx, [ebp - 0x284]
call fcn.00402ee0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037e0
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219cc], eax
xor edx, edx
mov byte [ebp - 0x285], dl
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x285]
call fcn.00402fb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037e0
mov dword [ebp - 0x3ac], eax
mov ecx, dword [ebp - 0x3ac]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d0], eax
xor eax, eax
mov byte [ebp - 0x286], al
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x286]
call fcn.00403070
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037e0
mov dword [ebp - 0x3a8], eax
mov edx, dword [ebp - 0x3a8]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d4], eax
xor ecx, ecx
mov byte [ebp - 0x287], cl
lea edx, [ebp - 0x170]
push edx
lea ecx, [ebp - 0x287]
call fcn.00403130
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037e0
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d8], eax
xor edx, edx
mov byte [ebp - 0x288], dl
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x288]
call fcn.004031f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037e0
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x3a0]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219dc], eax
xor eax, eax
mov byte [ebp - 0x289], al
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0x289]
call fcn.004032a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037e0
mov dword [ebp - 0x39c], eax
mov edx, dword [ebp - 0x39c]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e0], eax
xor ecx, ecx
mov byte [ebp - 0x28a], cl
lea edx, [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x28a]
call fcn.00401fd0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037e0
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e4], eax
xor edx, edx
mov byte [ebp - 0x28b], dl
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x28b]
call fcn.00402090
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037e0
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e8], eax
xor eax, eax
mov byte [ebp - 0x28c], al
lea ecx, [ebp - 0x200]
push ecx
lea ecx, [ebp - 0x28c]
call fcn.00402160
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037e0
mov dword [ebp - 0x390], eax
mov edx, dword [ebp - 0x390]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219ec], eax
xor ecx, ecx
mov byte [ebp - 0x28d], cl
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x28d]
call fcn.00402220
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037e0
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f0], eax
xor edx, edx
mov byte [ebp - 0x28e], dl
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x28e]
call fcn.00402300
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037e0
mov dword [ebp - 0x388], eax
mov ecx, dword [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f4], eax
xor eax, eax
mov byte [ebp - 0x28f], al
lea ecx, [ebp - 0x248]
push ecx
lea ecx, [ebp - 0x28f]
call fcn.004023d0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x248]
call fcn.004037e0
mov dword [ebp - 0x384], eax
mov edx, dword [ebp - 0x384]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f8], eax
xor ecx, ecx
mov byte [ebp - 0x297], cl
lea edx, [ebp - 0xe0]
push edx
lea ecx, [ebp - 0x297]
call fcn.004024b0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
call fcn.004037e0
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219fc], eax
xor edx, edx
mov byte [ebp - 0x290], dl
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x290]
call fcn.00402570
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037e0
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a00], eax
xor eax, eax
mov byte [ebp - 0x291], al
lea ecx, [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x291]
call fcn.00402630
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037e0
mov dword [ebp - 0x374], eax
mov edx, dword [ebp - 0x374]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a04], eax
xor ecx, ecx
mov byte [ebp - 0x292], cl
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x292]
call fcn.00402700
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037e0
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a08], eax
xor edx, edx
mov byte [ebp - 0x293], dl
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x293]
call fcn.00402920
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037e0
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
push ecx
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a0c], eax
xor eax, eax
mov byte [ebp - 0x294], al
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x294]
call fcn.004029f0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x98]
call fcn.004037e0
mov dword [ebp - 0x368], eax
mov edx, dword [ebp - 0x368]
push edx
mov eax, dword [ebp - 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a10], eax
xor ecx, ecx
mov byte [ebp - 0x295], cl
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x295]
call fcn.00402ac0
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x298]
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x358], ecx
lea edx, [ebp - 0x3bc]
push edx
lea ecx, [ebp - 0x38]
call fcn.00403c90
mov eax, dword [eax]
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
mov dword [ebp - 0x354], ecx
lea edx, [ebp - 0x3c4]
push edx
lea ecx, [ebp - 0x38]
call fcn.00403b70
mov eax, dword [eax]
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x34c], ecx
mov edx, dword [ebp - 0x358]
push edx
mov eax, dword [ebp - 0x354]
push eax
mov ecx, dword [ebp - 0x34c]
push ecx
lea ecx, [ebp - 0xb0]
call section..text
mov byte [ebp - 4], 0x16
xor edx, edx
mov byte [ebp - 0x296], dl
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x296]
call fcn.00402b70
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x299]
mov dword [ebp - 0x348], ecx
mov edx, dword [ebp - 0x348]
mov dword [ebp - 0x2dc], edx
lea eax, [ebp - 0x3b4]
push eax
lea ecx, [ebp - 0x50]
call fcn.00403c90
mov ecx, dword [eax]
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x378]
mov dword [ebp - 0x2e0], edx
lea eax, [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x50]
call fcn.00403b70
mov ecx, dword [eax]
mov dword [ebp - 0x2d8], ecx
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2e4], edx
mov eax, dword [ebp - 0x2dc]
push eax
mov ecx, dword [ebp - 0x2e0]
push ecx
mov edx, dword [ebp - 0x2e4]
push edx
lea ecx, [ebp - 0xc8]
call section..text
mov byte [ebp - 4], 0x18
cmp dword [ebp + 8], 1
jle 0x4056ee
mov eax, 4
shl eax, 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x2ac], edx
jmp 0x40570b
lea ecx, [ebp - 0xb0]
call fcn.00403840
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x2b0]
push edx
call fcn.00403d50
add esp, 4
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x4058e9
mov eax, dword [ebp - 0x2b0]
push eax
push str.ERROR:_Failed_to_get_process_id:_launch__S_first__n
call fcn.00404f60
add esp, 8
mov dword [ebp - 0x2ec], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x2ec]
jmp 0x40666a
xor ecx, ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2a4], 0
mov edx, dword [0x421a08]
mov dword [ebp - 0x2f0], edx
lea eax, [ebp - 0x2a4]
push eax
push 0x28
call dword [0x421a04]
push eax
call dword [ebp - 0x2f0]
test eax, eax
je 0x4059ab
mov dword [ebp - 0x20], 1
mov ecx, 0xc
imul edx, ecx, 0
mov dword [ebp + edx - 0x14], 2
mov eax, dword [0x421a0c]
mov dword [ebp - 0x2f4], eax
mov ecx, 0xc
imul edx, ecx, 0
lea eax, [ebp + edx - 0x1c]
push eax
push str.SeDebugPrivilege
push 0
call dword [ebp - 0x2f4]
test eax, eax
je 0x405991
mov ecx, dword [0x421a10]
mov dword [ebp - 0x2f8], ecx
push 0
push 0
push 0
lea edx, [ebp - 0x20]
push edx
push 0
mov eax, dword [ebp - 0x2a4]
push eax
call dword [ebp - 0x2f8]
nop
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x2fc], ecx
mov edx, dword [ebp - 0x2a4]
push edx
call dword [ebp - 0x2fc]
nop
mov eax, dword [0x4219e0]
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x2b4]
push ecx
push 0
push 0x1fffff
call dword [ebp - 0x300]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x405b8d
call dword [0x4219d0]
push eax
push str.ERROR:_Couldnt_open_process:_0x_X_n
call fcn.00404f60
add esp, 8
mov dword [ebp - 0x304], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x304]
jmp 0x40666a
mov edx, dword [ebp - 0x280]
push edx
call fcn.00403e50
add esp, 4
movzx eax, al
test eax, eax
jne 0x405d71
call dword [0x4219d0]
push eax
push str.ERROR:_Couldnt_confirm_target_process_architecture:_0x_X_n
call fcn.00404f60
add esp, 8
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x308], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x308]
nop
mov dword [ebp - 0x30c], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x30c]
jmp 0x40666a
cmp dword [ebp + 8], 2
jle 0x405d8c
mov eax, 4
shl eax, 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax]
mov dword [ebp - 0x2b8], edx
jmp 0x405da9
lea ecx, [ebp - 0xc8]
call fcn.00403840
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x314], ecx
mov edx, dword [0x4219cc]
mov dword [ebp - 0x318], edx
push 0
push 0x421a20
push 0x208
mov eax, dword [ebp - 0x314]
push eax
call dword [ebp - 0x318]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jne 0x405fb7
call dword [0x4219d0]
push eax
push str.ERROR:_Failed_to_retrieve_the_full_path_and_file_name_of_the_dll.__0x_X__n
call fcn.00404f60
add esp, 8
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x320], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x320]
nop
mov dword [ebp - 0x324], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x324]
jmp 0x40666a
push 0x421a20
call fcn.00403d30
add esp, 4
test eax, eax
jne 0x406193
push 0x421a20
push str.ERROR:_File__S_doesnt_exist_n
call fcn.00404f60
add esp, 8
mov eax, dword [0x4219dc]
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [ebp - 0x328]
nop
mov dword [ebp - 0x32c], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x32c]
jmp 0x40666a
push 1
push 0x421a20
lea edx, [ebp - 0x3d8]
push edx
call fcn.00404dd0
add esp, 0xc
mov ecx, dword [eax]
mov dword [ebp - 0x2cc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2c8], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c4], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x2c0], edx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00404be0
add esp, 4
test eax, eax
jne 0x4063bd
push str.ERROR:_Couldnt_map_module_file_n
call fcn.00404f60
add esp, 4
mov edx, dword [ebp - 0x2c8]
push edx
call fcn.00403c60
add esp, 4
mov eax, dword [0x4219dc]
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [ebp - 0x330]
nop
mov dword [ebp - 0x334], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x334]
jmp 0x40666a
mov edx, dword [0x4219e4]
mov dword [ebp - 0x338], edx
push 4
push 0x3000
push 0x410
push 0
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x338]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jne 0x406409
call dword [0x4219d0]
push eax
push str.WARN:_Couldnt_allocate_config_path_0x_X_n
call fcn.00404f60
add esp, 8
jmp 0x40644d
mov ecx, dword [0x4219f0]
mov dword [ebp - 0x33c], ecx
push 0
push 0x410
push 0x421a20
mov edx, dword [ebp - 0x2a8]
push edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x33c]
test eax, eax
jne 0x40644d
call dword [0x4219d0]
push eax
push str.WARN:_Couldnt_write_config_path_0x_X_n
call fcn.00404f60
add esp, 8
mov ecx, dword [ebp - 0x2a8]
push ecx
push 1
push 1
push 1
push 1
push 1
mov edx, dword [ebp - 0x2bc]
push edx
mov eax, dword [ebp - 0x280]
push eax
call fcn.00403ec0
add esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x2cc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2c4]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2c0]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x2bc]
mov dword [ecx + 0x10], edx
call fcn.00404ee0
add esp, 0x14
mov eax, dword [ebp - 0x2c8]
push eax
call fcn.00403c60
add esp, 4
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x340]
nop
mov dword [ebp - 0x344], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb0]
call fcn.004039b0
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x98]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x80]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call fcn.004038d0
nop
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x278]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x260]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe0]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x248]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x230]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x218]
call fcn.004038d0
nop
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x200]
call fcn.004038d0
nop
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1e8]
call fcn.004038d0
nop
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1d0]
call fcn.004038d0
nop
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.004038d0
nop
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.004038d0
nop
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x170]
call fcn.004038d0
nop
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x158]
call fcn.004038d0
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x140]
call fcn.004038d0
nop
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x128]
call fcn.004038d0
nop
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.004038d0
nop
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf8]
call fcn.004038d0
nop
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004038d0
nop
mov eax, dword [ebp - 0x344]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004067b5
mov esp, ebp
pop ebp
ret