Function at 0x436520
Capabilities:
Acquire debug privileges
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1158
call fcn.00639e60
mov eax, dword [0x7ce4f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1158], ecx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x1158]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0
lea edx, [ebp - 0x11c]
push edx
mov ecx, dword [ebp - 0x1158]
call fcn.0040a727
movzx eax, al
test eax, eax
jne 0x43658d
push 0
push 0x6720a6
push str.getImpersonationToken
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x436887
mov dword [ebp - 8], 0
push 0x104
mov ecx, dword [ebp - 0x1158]
add ecx, 0x108
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x436644
push 0x5c
mov edx, dword [ebp - 0x1158]
add edx, 0x108
push edx
call fcn.00639da0
add esp, 8
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x436605
mov eax, dword [ebp - 0x120]
add eax, 1
push eax
mov ecx, dword [ebp - 0x1158]
add ecx, 0x20c
push ecx
call fcn.00638270
add esp, 8
mov edx, dword [ebp - 0x120]
mov byte [edx + 1], 0
mov eax, dword [ebp - 0x1158]
add eax, 0x108
push eax
lea ecx, [ebp - 0x118]
push ecx
call fcn.00638270
add esp, 8
push str.DBGHELP.DLL
lea edx, [ebp - 0x118]
push edx
call fcn.00638280
add esp, 8
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x436658
push str.DBGHELP.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
cmp dword [ebp - 8], 0
je 0x436847
push str.MiniDumpWriteDump
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
je 0x43683e
mov ecx, dword [ebp - 0x1158]
call fcn.00409502
mov edx, dword [ebp - 0x1158]
add edx, 4
push edx
push str.There_was_an_unexpected_error:_n_nWould_you_like_to_create_a_mini_dump_file__n_n_s
lea eax, [ebp - 0x1128]
push eax
call fcn.00637c09
add esp, 0xc
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
mov ecx, dword [ebp - 0x1158]
add ecx, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x112c], eax
cmp dword [ebp - 0x112c], 0xffffffff
je 0x43680e
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x1140], eax
mov edx, dword [ebp + 8]
mov dword [ebp - 0x113c], edx
mov dword [ebp - 0x1138], 0
lea eax, [ebp - 0x1154]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
push str.SeDebugPrivilege
mov ecx, dword [ebp - 0x1158]
call fcn.0040e129
mov dword [ebp - 0x1130], eax
push 0
push str.Error_
push str.The_game_encountered_a_problem_and_exited_abnormally__Creating_dmp
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [ebp - 0x1134], 0x227
mov edx, dword [0x7d0b14]
push edx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
lea eax, [ebp - 0x1140]
push eax
mov ecx, dword [ebp - 0x1134]
push ecx
mov edx, dword [ebp - 0x112c]
push edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x124]
mov dword [ebp - 0x1144], eax
mov eax, dword [0x7d0b14]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x1130], 0
je 0x4367b8
lea ecx, [ebp - 0x1154]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
mov ecx, dword [ebp - 0x1158]
call fcn.00404a3e
cmp dword [ebp - 0x1144], 0
je 0x4367d1
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
jmp 0x4367ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x1158]
add eax, 4
push eax
push str.Failed_to_save_the_mini_dump_file_to__s__error__d_
lea ecx, [ebp - 0x1128]
push ecx
call fcn.00637c09
add esp, 0x10
lea edx, [ebp - 0x1128]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x112c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x43683c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, dword [ebp - 0x1158]
add ecx, 4
push ecx
push str.Failed_to_create_the_mini_dump_file__s__error__d_
lea edx, [ebp - 0x1128]
push edx
call fcn.00637c09
add esp, 0x10
lea eax, [ebp - 0x1128]
mov dword [ebp - 0xc], eax
jmp 0x436845
mov dword [ebp - 0xc], str.Call_to_GetProcAddress_failed_to_find_MiniDumpWriteDump._The_DBGHELP.DLL_is_possibly_outdated.
jmp 0x43684e
mov dword [ebp - 0xc], str.Call_to_LoadLibrary_failed_to_find_DBGHELP.DLL.
cmp dword [ebp - 0xc], 0
je 0x436875
mov ecx, dword [ebp - 0x1158]
movzx edx, byte [ecx + 0x310]
test edx, edx
je 0x436875
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006376f4
mov esp, ebp
pop ebp
ret 4