Function at 0x411be0
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1158
call fcn.0058c720
mov eax, dword [0x6c6060]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1158], ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x1158]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0
lea edx, [ebp - 0x11c]
push edx
mov ecx, dword [ebp - 0x1158]
call fcn.00411a90
movzx eax, al
test eax, eax
jne 0x411c4d
push 0
push 0x5a8b63
push str.getImpersonationToken
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x411f47
mov dword [ebp - 8], 0
push 0x104
mov ecx, dword [ebp - 0x1158]
add ecx, 0x108
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x411d04
push 0x5c
mov edx, dword [ebp - 0x1158]
add edx, 0x108
push edx
call fcn.0058c660
add esp, 8
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x411cc5
mov eax, dword [ebp - 0x120]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1158]
add ecx, 0x20c
push ecx
call fcn.0058ae60
add esp, 8
mov edx, dword [ebp - 0x120]
mov byte [edx + 1], 0
mov eax, dword [ebp - 0x1158]
add eax, 0x108
push eax
lea ecx, [ebp - 0x118]
push ecx
call fcn.0058ae60
add esp, 8
push str.DBGHELP.DLL
lea edx, [ebp - 0x118]
push edx
call fcn.0058ae70
add esp, 8
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x411d18
push str.DBGHELP.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
cmp dword [ebp - 8], 0
je 0x411f07
push str.MiniDumpWriteDump
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x411efe
mov ecx, dword [ebp - 0x1158]
call fcn.00411a40
mov edx, dword [ebp - 0x1158]
add edx, 4
push edx
push str.There_was_an_unexpected_error:_n_nWould_you_like_to_create_a_mini_dump_file__n_n_s
lea eax, [ebp - 0x1128]
push eax
call fcn.0058a9be
add esp, 0xc
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
mov ecx, dword [ebp - 0x1158]
add ecx, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x112c], eax
cmp dword [ebp - 0x112c], 0xffffffff
je 0x411ece
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x1140], eax
mov edx, dword [ebp + 8]
mov dword [ebp - 0x113c], edx
mov dword [ebp - 0x1138], 0
lea eax, [ebp - 0x1154]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
push str.SeDebugPrivilege
mov ecx, dword [ebp - 0x1158]
call fcn.00411af0
mov dword [ebp - 0x1130], eax
push 0
push str.Error_
push str.The_game_encountered_a_problem_and_exited_abnormally__Creating_dmp
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x1134], 0x227
mov edx, dword [0x6c7cf4]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
lea eax, [ebp - 0x1140]
push eax
mov ecx, dword [ebp - 0x1134]
push ecx
mov edx, dword [ebp - 0x112c]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x124]
mov dword [ebp - 0x1144], eax
mov eax, dword [0x6c7cf4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x1130], 0
je 0x411e78
lea ecx, [ebp - 0x1154]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
mov ecx, dword [ebp - 0x1158]
call fcn.00411b90
cmp dword [ebp - 0x1144], 0
je 0x411e91
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
jmp 0x411ebf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x1158]
add eax, 4
push eax
push str.Failed_to_save_the_mini_dump_file_to__s__error__d_
lea ecx, [ebp - 0x1128]
push ecx
call fcn.0058a9be
add esp, 0x10
lea edx, [ebp - 0x1128]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x411efc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, dword [ebp - 0x1158]
add ecx, 4
push ecx
push str.Failed_to_create_the_mini_dump_file__s__error__d_
lea edx, [ebp - 0x1128]
push edx
call fcn.0058a9be
add esp, 0x10
lea eax, [ebp - 0x1128]
mov dword [ebp - 0xc], eax
jmp 0x411f05
mov dword [ebp - 0xc], str.Call_to_GetProcAddress_failed_to_find_MiniDumpWriteDump._The_DBGHELP.DLL_is_possibly_outdated.
jmp 0x411f0e
mov dword [ebp - 0xc], str.Call_to_LoadLibrary_failed_to_find_DBGHELP.DLL.
cmp dword [ebp - 0xc], 0
je 0x411f35
mov ecx, dword [ebp - 0x1158]
movzx edx, byte [ecx + 0x310]
test edx, edx
je 0x411f35
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058a4a9
mov esp, ebp
pop ebp
ret 4