Function at 0x4050b0
Capabilities:
Acquire debug privileges
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41879c
mov eax, dword fs:[0]
push eax
sub esp, 0x3b8
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x398], 0
xor eax, eax
mov byte [ebp - 0x281], al
lea ecx, [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x281]
call fcn.00402720
mov dword [ebp - 4], 0
xor edx, edx
mov byte [ebp - 0x282], dl
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x282]
call fcn.00402b70
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x170]
call fcn.00403750
mov dword [ebp - 0x2cc], eax
mov ecx, dword [ebp - 0x2cc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x27c], eax
lea ecx, [ebp - 0xb0]
call fcn.00403750
mov dword [ebp - 0x394], eax
mov edx, dword [ebp - 0x394]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2a0], eax
xor eax, eax
mov byte [ebp - 0x283], al
lea ecx, [ebp - 0xc8]
push ecx
lea ecx, [ebp - 0x283]
call fcn.00402cc0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc8]
call fcn.00403750
mov dword [ebp - 0x390], eax
mov edx, dword [ebp - 0x390]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219c8], eax
xor ecx, ecx
mov byte [ebp - 0x284], cl
lea edx, [ebp - 0xe0]
push edx
lea ecx, [ebp - 0x284]
call fcn.00402e30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xe0]
call fcn.00403750
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219cc], eax
xor edx, edx
mov byte [ebp - 0x285], dl
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x285]
call fcn.00402f00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf8]
call fcn.00403750
mov dword [ebp - 0x388], eax
mov ecx, dword [ebp - 0x388]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d0], eax
xor eax, eax
mov byte [ebp - 0x286], al
lea ecx, [ebp - 0x110]
push ecx
lea ecx, [ebp - 0x286]
call fcn.00402fc0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x110]
call fcn.00403750
mov dword [ebp - 0x384], eax
mov edx, dword [ebp - 0x384]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d4], eax
xor ecx, ecx
mov byte [ebp - 0x287], cl
lea edx, [ebp - 0x128]
push edx
lea ecx, [ebp - 0x287]
call fcn.00403080
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x128]
call fcn.00403750
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219d8], eax
xor edx, edx
mov byte [ebp - 0x288], dl
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x288]
call fcn.00403140
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x140]
call fcn.00403750
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219dc], eax
xor eax, eax
mov byte [ebp - 0x289], al
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x289]
call fcn.004031f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x158]
call fcn.00403750
mov dword [ebp - 0x330], eax
mov edx, dword [ebp - 0x330]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e0], eax
xor ecx, ecx
mov byte [ebp - 0x28a], cl
lea edx, [ebp - 0x188]
push edx
lea ecx, [ebp - 0x28a]
call fcn.00401f20
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x188]
call fcn.00403750
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e4], eax
xor edx, edx
mov byte [ebp - 0x28b], dl
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x28b]
call fcn.00401fe0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1a0]
call fcn.00403750
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219e8], eax
xor eax, eax
mov byte [ebp - 0x28c], al
lea ecx, [ebp - 0x1b8]
push ecx
lea ecx, [ebp - 0x28c]
call fcn.004020b0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1b8]
call fcn.00403750
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219ec], eax
xor ecx, ecx
mov byte [ebp - 0x28d], cl
lea edx, [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x28d]
call fcn.00402170
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1d0]
call fcn.00403750
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f0], eax
xor edx, edx
mov byte [ebp - 0x28e], dl
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x28e]
call fcn.00402250
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1e8]
call fcn.00403750
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f4], eax
xor eax, eax
mov byte [ebp - 0x297], al
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x297]
call fcn.00402320
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x98]
call fcn.00403750
mov dword [ebp - 0x360], eax
mov edx, dword [ebp - 0x360]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219f8], eax
xor ecx, ecx
mov byte [ebp - 0x28f], cl
lea edx, [ebp - 0x200]
push edx
lea ecx, [ebp - 0x28f]
call fcn.00402400
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x200]
call fcn.00403750
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4219fc], eax
xor edx, edx
mov byte [ebp - 0x290], dl
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x290]
call fcn.004024c0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x218]
call fcn.00403750
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a00], eax
xor eax, eax
mov byte [ebp - 0x291], al
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x291]
call fcn.00402580
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x230]
call fcn.00403750
mov dword [ebp - 0x354], eax
mov edx, dword [ebp - 0x354]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a04], eax
xor ecx, ecx
mov byte [ebp - 0x292], cl
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x292]
call fcn.00402650
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x248]
call fcn.00403750
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a08], eax
xor edx, edx
mov byte [ebp - 0x293], dl
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x293]
call fcn.00402870
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x260]
call fcn.00403750
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
push ecx
mov edx, dword [ebp - 0x2a0]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a0c], eax
xor eax, eax
mov byte [ebp - 0x294], al
lea ecx, [ebp - 0x278]
push ecx
lea ecx, [ebp - 0x294]
call fcn.00402940
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x278]
call fcn.00403750
mov dword [ebp - 0x348], eax
mov edx, dword [ebp - 0x348]
push edx
mov eax, dword [ebp - 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x421a10], eax
xor ecx, ecx
mov byte [ebp - 0x295], cl
lea edx, [ebp - 0x38]
push edx
lea ecx, [ebp - 0x295]
call fcn.00402a10
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x298]
mov dword [ebp - 0x33c], eax
lea ecx, [ebp - 0x3ac]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00403c50
mov edx, dword [eax]
mov dword [ebp - 0x344], edx
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x338], eax
lea ecx, [ebp - 0x3a4]
push ecx
lea ecx, [ebp - 0x38]
call fcn.00403b90
mov edx, dword [eax]
mov dword [ebp - 0x340], edx
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x33c]
push ecx
mov edx, dword [ebp - 0x338]
push edx
mov eax, dword [ebp - 0x334]
push eax
lea ecx, [ebp - 0x68]
call section..text
mov byte [ebp - 4], 0x16
xor ecx, ecx
mov byte [ebp - 0x296], cl
lea edx, [ebp - 0x50]
push edx
lea ecx, [ebp - 0x296]
call fcn.00402ac0
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x299]
mov dword [ebp - 0x2d4], eax
lea ecx, [ebp - 0x3a8]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00403c50
mov edx, dword [eax]
mov dword [ebp - 0x364], edx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x2d8], eax
lea ecx, [ebp - 0x39c]
push ecx
lea ecx, [ebp - 0x50]
call fcn.00403b90
mov edx, dword [eax]
mov dword [ebp - 0x2d0], edx
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x2d4]
push ecx
mov edx, dword [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x80]
call section..text
mov byte [ebp - 4], 0x18
cmp dword [ebp + 8], 1
jle 0x4057fc
mov ecx, 4
shl ecx, 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x2a4], eax
jmp 0x405816
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x2a4], ecx
lea ecx, [ebp - 0x68]
call fcn.004037a0
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2b0], edx
mov eax, dword [ebp - 0x2b0]
push eax
call fcn.00403d00
add esp, 4
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x4059db
mov ecx, dword [ebp - 0x2b0]
push ecx
push str.ERROR:_Failed_to_get_process_id:_launch__S_first__n
call fcn.00405080
add esp, 8
mov dword [ebp - 0x2e0], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x2e0]
jmp 0x406624
xor edx, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x2a8], 0
mov eax, dword [0x421a08]
mov dword [ebp - 0x2e4], eax
lea ecx, [ebp - 0x2a8]
push ecx
push 0x28
call dword [0x421a04]
push eax
call dword [ebp - 0x2e4]
test eax, eax
je 0x405a97
mov dword [ebp - 0x20], 1
mov edx, 0xc
imul eax, edx, 0
mov dword [ebp + eax - 0x14], 2
mov ecx, dword [0x421a0c]
mov dword [ebp - 0x2e8], ecx
mov edx, 0xc
imul eax, edx, 0
lea ecx, [ebp + eax - 0x1c]
push ecx
push str.SeDebugPrivilege
push 0
call dword [ebp - 0x2e8]
test eax, eax
je 0x405a7e
mov edx, dword [0x421a10]
mov dword [ebp - 0x2ec], edx
push 0
push 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 0x2a8]
push ecx
call dword [ebp - 0x2ec]
mov edx, dword [0x4219dc]
mov dword [ebp - 0x2f0], edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [ebp - 0x2f0]
mov ecx, dword [0x4219e0]
mov dword [ebp - 0x2f4], ecx
mov edx, dword [ebp - 0x2b4]
push edx
push 0
push 0x1fffff
call dword [ebp - 0x2f4]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x405c61
call dword [0x4219d0]
push eax
push str.ERROR:_Couldnt_open_process:_0x_X_n
call fcn.00405080
add esp, 8
mov dword [ebp - 0x2f8], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x2f8]
jmp 0x406624
mov eax, dword [ebp - 0x280]
push eax
call fcn.00403e00
add esp, 4
movzx ecx, al
test ecx, ecx
jne 0x405e2b
call dword [0x4219d0]
push eax
push str.ERROR:_Couldnt_confirm_target_process_architecture:_0x_X_n
call fcn.00405080
add esp, 8
mov edx, dword [0x4219dc]
mov dword [ebp - 0x2fc], edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x2fc]
mov dword [ebp - 0x300], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x300]
jmp 0x406624
cmp dword [ebp + 8], 2
jle 0x405e46
mov ecx, 4
shl ecx, 1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx]
mov dword [ebp - 0x2ac], eax
jmp 0x405e60
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x2ac], ecx
lea ecx, [ebp - 0x80]
call fcn.004037a0
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x304], edx
mov eax, dword [0x4219cc]
mov dword [ebp - 0x308], eax
push 0
push 0x421a20
push 0x208
mov ecx, dword [ebp - 0x304]
push ecx
call dword [ebp - 0x308]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x406053
call dword [0x4219d0]
push eax
push str.ERROR:_Failed_to_retrieve_the_full_path_and_file_name_of_the_dll.__0x_X__n
call fcn.00405080
add esp, 8
mov edx, dword [0x4219dc]
mov dword [ebp - 0x310], edx
mov eax, dword [ebp - 0x280]
push eax
call dword [ebp - 0x310]
mov dword [ebp - 0x314], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x314]
jmp 0x406624
push 0x421a20
call fcn.00403ce0
add esp, 4
test eax, eax
jne 0x406216
push 0x421a20
push str.ERROR:_File__S_doesnt_exist_n
call fcn.00405080
add esp, 8
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x318], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x318]
mov dword [ebp - 0x31c], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x31c]
jmp 0x406624
push 1
push 0x421a20
lea eax, [ebp - 0x3c4]
push eax
call fcn.00404ef0
add esp, 0xc
mov ecx, dword [eax]
mov dword [ebp - 0x2c8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x2c4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x2bc], edx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x2c8]
push ecx
call fcn.00404d00
add esp, 4
test eax, eax
jne 0x406426
push str.ERROR:_Couldnt_map_module_file_n
call fcn.00405080
add esp, 4
mov edx, dword [ebp - 0x2c4]
push edx
call fcn.00403c20
add esp, 4
mov eax, dword [0x4219dc]
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [ebp - 0x320]
mov dword [ebp - 0x324], 1
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x324]
jmp 0x406624
push 0
push 1
push 1
push 1
push 1
push 1
mov edx, dword [ebp - 0x2b8]
push edx
mov eax, dword [ebp - 0x280]
push eax
call fcn.00403e70
add esp, 0xc
mov ecx, esp
mov edx, dword [ebp - 0x2c8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2c4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2c0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2bc]
mov dword [ecx + 0xc], eax
mov edx, dword [ebp - 0x2b8]
mov dword [ecx + 0x10], edx
call fcn.00405000
add esp, 0x14
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.00403c20
add esp, 4
mov ecx, dword [0x4219dc]
mov dword [ebp - 0x328], ecx
mov edx, dword [ebp - 0x280]
push edx
call dword [ebp - 0x328]
mov dword [ebp - 0x32c], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x80]
call fcn.004038d0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x50]
call fcn.00403820
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x68]
call fcn.004038d0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x38]
call fcn.00403820
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x278]
call fcn.00403820
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x260]
call fcn.00403820
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.00403820
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.00403820
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x218]
call fcn.00403820
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x200]
call fcn.00403820
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
call fcn.00403820
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.00403820
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1d0]
call fcn.00403820
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1b8]
call fcn.00403820
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a0]
call fcn.00403820
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x188]
call fcn.00403820
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x158]
call fcn.00403820
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x140]
call fcn.00403820
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x128]
call fcn.00403820
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x110]
call fcn.00403820
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf8]
call fcn.00403820
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe0]
call fcn.00403820
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xc8]
call fcn.00403820
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.00403820
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.00403820
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040676f
mov esp, ebp
pop ebp
ret