Function at 0x405080
Capabilities:
Acquire debug privileges
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41880c
mov eax, dword fs:[0]
push eax
sub esp, 0x3c4
mov eax, dword [0x421004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3b4], 0
xor eax, eax
mov byte [ebp - 0x281], al
lea ecx, [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x281]
call fcn.00402610
mov dword [ebp - 4], 0
xor edx, edx
mov byte [ebp - 0x282], dl
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x282]
call fcn.00402a60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.00403640
mov dword [ebp - 0x340], eax
mov ecx, dword [ebp - 0x340]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0xe0]
call fcn.00403640
mov dword [ebp - 0x2d0], eax
mov edx, dword [ebp - 0x2d0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2a0], eax
xor eax, eax
mov byte [ebp - 0x283], al
lea ecx, [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0x283]
call fcn.00402bb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf8]
call fcn.00403640
mov dword [ebp - 0x3a0], eax
mov edx, dword [ebp - 0x3a0]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421988], eax
xor ecx, ecx
mov byte [ebp - 0x284], cl
lea edx, [ebp - 0x110]
push edx
lea ecx, [ebp - 0x284]
call fcn.00402d20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x110]
call fcn.00403640
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42198c], eax
xor edx, edx
mov byte [ebp - 0x285], dl
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x285]
call fcn.00402df0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x128]
call fcn.00403640
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421990], eax
xor eax, eax
mov byte [ebp - 0x286], al
lea ecx, [ebp - 0x140]
push ecx
lea ecx, [ebp - 0x286]
call fcn.00402eb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x140]
call fcn.00403640
mov dword [ebp - 0x394], eax
mov edx, dword [ebp - 0x394]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421994], eax
xor ecx, ecx
mov byte [ebp - 0x287], cl
lea edx, [ebp - 0x158]
push edx
lea ecx, [ebp - 0x287]
call fcn.00402f70
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x158]
call fcn.00403640
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421998], eax
xor edx, edx
mov byte [ebp - 0x288], dl
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x288]
call fcn.00403030
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x170]
call fcn.00403640
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x42199c], eax
xor eax, eax
mov byte [ebp - 0x289], al
lea ecx, [ebp - 0x1a0]
push ecx
lea ecx, [ebp - 0x289]
call fcn.004030e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1a0]
call fcn.00403640
mov dword [ebp - 0x388], eax
mov edx, dword [ebp - 0x388]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219a0], eax
xor ecx, ecx
mov byte [ebp - 0x28a], cl
lea edx, [ebp - 0x1b8]
push edx
lea ecx, [ebp - 0x28a]
call fcn.00401e10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1b8]
call fcn.00403640
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219a4], eax
xor edx, edx
mov byte [ebp - 0x28b], dl
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x28b]
call fcn.00401ed0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1d0]
call fcn.00403640
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x380]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219a8], eax
xor eax, eax
mov byte [ebp - 0x28c], al
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x28c]
call fcn.00401fa0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1e8]
call fcn.00403640
mov dword [ebp - 0x37c], eax
mov edx, dword [ebp - 0x37c]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219ac], eax
xor ecx, ecx
mov byte [ebp - 0x28d], cl
lea edx, [ebp - 0x200]
push edx
lea ecx, [ebp - 0x28d]
call fcn.00402060
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x200]
call fcn.00403640
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219b0], eax
xor edx, edx
mov byte [ebp - 0x28e], dl
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x28e]
call fcn.00402140
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x218]
call fcn.00403640
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219b4], eax
xor eax, eax
mov byte [ebp - 0x28f], al
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x28f]
call fcn.00402210
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x230]
call fcn.00403640
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219b8], eax
xor ecx, ecx
mov byte [ebp - 0x297], cl
lea edx, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0x297]
call fcn.004022f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc8]
call fcn.00403640
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219bc], eax
xor edx, edx
mov byte [ebp - 0x290], dl
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x290]
call fcn.004023b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x248]
call fcn.00403640
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x364]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219c0], eax
xor eax, eax
mov byte [ebp - 0x291], al
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x291]
call fcn.00402470
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x260]
call fcn.00403640
mov dword [ebp - 0x360], eax
mov edx, dword [ebp - 0x360]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219c4], eax
xor ecx, ecx
mov byte [ebp - 0x292], cl
lea edx, [ebp - 0x278]
push edx
lea ecx, [ebp - 0x292]
call fcn.00402540
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x278]
call fcn.00403640
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219c8], eax
xor edx, edx
mov byte [ebp - 0x293], dl
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x293]
call fcn.00402760
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x68]
call fcn.00403640
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
push ecx
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219cc], eax
xor eax, eax
mov byte [ebp - 0x294], al
lea ecx, [ebp - 0x80]
push ecx
lea ecx, [ebp - 0x294]
call fcn.00402830
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x80]
call fcn.00403640
mov dword [ebp - 0x354], eax
mov edx, dword [ebp - 0x354]
push edx
mov eax, dword [ebp - 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d0], eax
xor ecx, ecx
mov byte [ebp - 0x295], cl
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x295]
call fcn.00402900
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x298]
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x3a8]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00403c20
mov edx, dword [eax]
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x344], eax
lea ecx, [ebp - 0x3ac]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00403b60
mov edx, dword [eax]
mov dword [ebp - 0x34c], edx
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x348]
push ecx
mov edx, dword [ebp - 0x344]
push edx
mov eax, dword [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x98]
call section..text
mov byte [ebp - 4], 0x16
xor ecx, ecx
mov byte [ebp - 0x296], cl
lea edx, [ebp - 0x50]
push edx
lea ecx, [ebp - 0x296]
call fcn.004029b0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x299]
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x3b0]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00403c20
mov edx, dword [eax]
mov dword [ebp - 0x338], edx
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x2d8], eax
lea ecx, [ebp - 0x3bc]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00403b60
mov edx, dword [eax]
mov dword [ebp - 0x368], edx
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2d4]
push ecx
mov edx, dword [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0xb0]
call section..text
mov byte [ebp - 4], 0x18
cmp dword [ebp + 8], 1
jle 0x4057c6
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x2a4], eax
jmp 0x4057e3
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x2a4], ecx
lea ecx, [ebp - 0x98]
call fcn.00403690
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2b4], edx
mov eax, dword [ebp - 0x2b4]
push eax
call fcn.00403cd0
add esp, 4
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jne 0x4059a8
mov ecx, dword [ebp - 0x2b4]
push ecx
push str.ERROR:_Failed_to_get_process_id:_launch__S_first__n
call fcn.00405050
add esp, 8
mov dword [ebp - 0x2e0], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x2e0]
jmp 0x406689
xor edx, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x2a8], 0
mov eax, dword [0x4219c8]
mov dword [ebp - 0x2e4], eax
lea ecx, [ebp - 0x2a8]
push ecx
push 0x28
call dword [0x4219c4]
push eax
call dword [ebp - 0x2e4]
test eax, eax
je 0x405a64
mov dword [ebp - 0x20], 1
mov edx, 0xc
imul eax, edx, 0
mov dword [ebp + eax - 0x14], 2
mov ecx, dword [0x4219cc]
mov dword [ebp - 0x2e8], ecx
mov edx, 0xc
imul eax, edx, 0
lea ecx, [ebp + eax - 0x1c]
push ecx
push str.SeDebugPrivilege
push 0
call dword [ebp - 0x2e8]
test eax, eax
je 0x405a4b
mov edx, dword [0x4219d0]
mov dword [ebp - 0x2ec], edx
push 0
push 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 0x2a8]
push ecx
call dword [ebp - 0x2ec]
mov edx, dword [0x42199c]
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [ebp - 0x2f0]
mov ecx, dword [0x4219a0]
mov dword [ebp - 0x2f4], ecx
mov edx, dword [ebp - 0x2b8]
push edx
push 0
push 0x1fffff
call dword [ebp - 0x2f4]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x405c2e
call dword [0x421990]
push eax
push str.ERROR:_Couldnt_open_process:_0x_X_n
call fcn.00405050
add esp, 8
mov dword [ebp - 0x2f8], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x2f8]
jmp 0x406689
mov eax, dword [ebp - 0x280]
push eax
call fcn.00403dd0
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x405df8
call dword [0x421990]
push eax
push str.ERROR:_Couldnt_confirm_target_process_architecture:_0x_X_n
call fcn.00405050
add esp, 8
mov edx, dword [0x42199c]
mov dword [ebp - 0x2fc], edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x300]
jmp 0x406689
cmp dword [ebp + 8], 2
jle 0x405e13
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x2ac], eax
jmp 0x405e30
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp - 0x2ac], ecx
lea ecx, [ebp - 0xb0]
call fcn.00403690
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x304], edx
mov eax, dword [0x42198c]
mov dword [ebp - 0x308], eax
push 0
push 0x4219e0
push 0x208
mov ecx, dword [ebp - 0x304]
push ecx
call dword [ebp - 0x308]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x406023
call dword [0x421990]
push eax
push str.ERROR:_Failed_to_retrieve_the_full_path_and_file_name_of_the_dll.__0x_X__n
call fcn.00405050
add esp, 8
mov edx, dword [0x42199c]
mov dword [ebp - 0x310], edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x310]
mov dword [ebp - 0x314], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x314]
jmp 0x406689
push 0x4219e0
call fcn.00403cb0
add esp, 4
test eax, eax
jne 0x4061e6
push 0x4219e0
push str.ERROR:_File__S_doesnt_exist_n
call fcn.00405050
add esp, 8
mov ecx, dword [0x42199c]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x318]
mov dword [ebp - 0x31c], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x31c]
jmp 0x406689
push 1
push 0x4219e0
lea eax, [ebp - 0x3d0]
push eax
call fcn.00404ec0
add esp, 0xc
mov ecx, dword [eax]
mov dword [ebp - 0x2cc], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2c8], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c4], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x2c0], edx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.00404cd0
add esp, 4
test eax, eax
jne 0x4063f6
push str.ERROR:_Couldnt_map_module_file_n
call fcn.00405050
add esp, 4
mov edx, dword [ebp - 0x2c8]
push edx
call fcn.00403bf0
add esp, 4
mov eax, dword [0x42199c]
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [ebp - 0x320]
mov dword [ebp - 0x324], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x324]
jmp 0x406689
mov edx, dword [0x4219a4]
mov dword [ebp - 0x328], edx
push 4
push 0x3000
push 0x410
push 0
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x328]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jne 0x406442
call dword [0x421990]
push eax
push str.WARN:_Couldnt_allocate_config_path_0x_X_n
call fcn.00405050
add esp, 8
jmp 0x406486
mov ecx, dword [0x4219b0]
mov dword [ebp - 0x32c], ecx
push 0
push 0x410
push 0x4219e0
mov edx, dword [ebp - 0x2b0]
push edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x32c]
test eax, eax
jne 0x406486
call dword [0x421990]
push eax
push str.WARN:_Couldnt_write_config_path_0x_X_n
call fcn.00405050
add esp, 8
mov ecx, dword [ebp - 0x2b0]
push ecx
push 1
push 1
push 1
push 1
push 1
mov edx, dword [ebp - 0x2bc]
push edx
mov eax, dword [ebp - 0x280]
push eax
call fcn.00403e40
add esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x2cc]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c8]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2c4]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2c0]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x2bc]
mov dword [ecx + 0x10], edx
call fcn.00404fd0
add esp, 0x14
mov eax, dword [ebp - 0x2c8]
push eax
call fcn.00403bf0
add esp, 4
mov ecx, dword [0x42199c]
mov dword [ebp - 0x330], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x330]
mov dword [ebp - 0x334], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb0]
call fcn.004038a0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.004037f0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
call fcn.004038a0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.004037f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x80]
call fcn.004037f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x68]
call fcn.004037f0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x278]
call fcn.004037f0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.004037f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x248]
call fcn.004037f0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xc8]
call fcn.004037f0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x230]
call fcn.004037f0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x218]
call fcn.004037f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.004037f0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1e8]
call fcn.004037f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.004037f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1b8]
call fcn.004037f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1a0]
call fcn.004037f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x170]
call fcn.004037f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x158]
call fcn.004037f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x140]
call fcn.004037f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x128]
call fcn.004037f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x110]
call fcn.004037f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf8]
call fcn.004037f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe0]
call fcn.004037f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004037f0
mov eax, dword [ebp - 0x334]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004067d4
mov esp, ebp
pop ebp
ret