Function at 0x41ac40
Capabilities:
Print debug messages
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x426076
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1110
call fcn.00424750
mov eax, dword [0x43000c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14c], ecx
push 0x19000
call fcn.0042379e
add esp, 4
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x150], eax
mov ecx, 1
test ecx, ecx
je 0x41bb51
push 0x19000
push 0
mov edx, dword [ebp - 0x150]
push edx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x19000
mov ecx, dword [ebp - 0x150]
push ecx
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x14c]
movzx edx, byte [ecx + 0xc]
test edx, edx
je 0x41ad66
push 0xa6
push 0x428e54
push 0x428e70
push 0
lea ecx, [ebp - 0x558]
call fcn.00411ad0
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
push edx
push str.pipe_process_data_exit_with_disconnect__handle:
mov ecx, dword [ebp - 0x29c]
call fcn.00411f30
mov ecx, eax
call fcn.0041bef0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x558]
call fcn.00411bc0
jmp 0x41bb51
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x160], 0
jne 0x41ae15
cmp dword [ebp - 0x15c], 0xe8
je 0x41ae15
push 0xac
push 0x428ee0
push 0x428efc
push 0
lea ecx, [ebp - 0x640]
call fcn.00411ad0
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x15c]
push ecx
push str.__errorCode
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
push str.pipe_read_data_failed_and_exit_but_errorcode_is_not_ERROR_NO_DATA__handle:
mov ecx, dword [ebp - 0x2a4]
call fcn.00411f30
mov ecx, eax
call fcn.0041bef0
mov ecx, eax
call fcn.00411e50
mov ecx, eax
call fcn.0041bf10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x640]
call fcn.00411bc0
jmp 0x41bb51
cmp dword [ebp - 0x160], 0
je 0x41ae24
cmp dword [ebp - 0x1c], 0
jne 0x41ae31
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41ac9b
mov dword [ebp - 4], 2
push 0xb6
push 0x428fb0
push 0x428fcc
push 0
lea ecx, [ebp - 0x728]
call fcn.00411ad0
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov byte [ebp - 4], 3
push str.pipe_read_data_suc__data:
mov ecx, dword [ebp - 0x2ac]
call fcn.00411f30
mov dword [ebp - 0x2b0], eax
mov edx, dword [ebp - 0x150]
push edx
mov ecx, dword [ebp - 0x2b0]
call fcn.0041bf30
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x728]
call fcn.00411bc0
mov eax, dword [ebp - 0x150]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.004123a0
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0xd4]
push edx
call fcn.0041ab30
add esp, 8
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f0]
call fcn.004121e0
push 0xc
lea ecx, [ebp - 0x2c]
call fcn.004020d0
lea ecx, [ebp - 0x2c]
call fcn.0040c510
mov byte [ebp - 4], 7
lea eax, [ebp - 0xd4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004100e0
push str.UAC_RUN_Srv...
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call fcn.0041a3d0
mov byte [ebp - 0x151], al
movzx ecx, byte [ebp - 0x151]
test ecx, ecx
je 0x41af3b
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x164], eax
push 4
lea ecx, [ebp - 0x18]
call fcn.004020d0
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp - 0x164]
call fcn.004102b0
push 4
lea ecx, [ebp - 0x20]
call fcn.004020d0
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x164]
call fcn.00410250
jmp 0x41af80
lea ecx, [ebp - 0x18]
call fcn.004100c0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
call fcn.00410080
mov byte [ebp - 0x152], al
movzx ecx, byte [ebp - 0x152]
test ecx, ecx
je 0x41bac8
lea ecx, [ebp - 0x18]
call fcn.00408bb0
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x170], edx
push 0x18
lea ecx, [ebp - 0x74]
call fcn.004020d0
push 0
lea ecx, [ebp - 0x74]
call fcn.0040a500
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 8
push 0x74
lea ecx, [ebp - 0x148]
call fcn.004020d0
lea ecx, [ebp - 0x148]
call fcn.004018c0
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 9
push 1
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0x170]
push ecx
lea ecx, [ebp - 0x148]
call fcn.004019b0
mov byte [ebp - 0x153], al
movzx edx, byte [ebp - 0x153]
test edx, edx
jne 0x41b044
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41af78
push 0x429030
lea ecx, [ebp - 0x74]
call fcn.0040b7c0
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0x174]
call fcn.0040ae90
mov dword [ebp - 0x2c8], eax
mov byte [ebp - 4], 0xa
push 0x18
lea ecx, [ebp - 0x5c]
call fcn.004020d0
push str.params
lea ecx, [ebp - 0x74]
call fcn.0040b7c0
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040a710
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0x470]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x188], ecx
mov byte [ebp - 4], 0xc
push 0xca
push 0x42903c
push 0x429058
push 0
lea ecx, [ebp - 0x810]
call fcn.00411ad0
mov dword [ebp - 0x180], eax
mov edx, dword [ebp - 0x180]
mov dword [ebp - 0x184], edx
mov byte [ebp - 4], 0xd
push str.pipe_handle_msd_msdId:
mov ecx, dword [ebp - 0x184]
call fcn.00411f30
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x188]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x18c]
call fcn.00411f30
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x810]
call fcn.00411bc0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x470]
call fcn.004121e0
push str.LoadModule
lea eax, [ebp - 0xbc]
push eax
call fcn.0040d9b0
add esp, 8
mov byte [ebp - 0x154], al
movzx ecx, byte [ebp - 0x154]
test ecx, ecx
je 0x41ba8d
push str.path
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x190], eax
lea edx, [ebp - 0x44]
push edx
mov ecx, dword [ebp - 0x190]
call fcn.0040ae90
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 4], 0xe
push 0x4290ac
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x320]
push eax
mov ecx, dword [ebp - 0x194]
call fcn.0040ae90
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x19c]
push edx
lea eax, [ebp - 0x308]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x1a0], eax
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x1a4]
push edx
lea eax, [ebp - 0xa4]
push eax
call fcn.0041a900
add esp, 8
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x308]
call fcn.004121e0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x320]
call fcn.00404690
push 0x4290b4
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x350]
push ecx
mov ecx, dword [ebp - 0x1a8]
call fcn.0040ae90
mov dword [ebp - 0x1ac], eax
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b0], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x1b0]
push eax
lea ecx, [ebp - 0x338]
push ecx
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x1b4], eax
mov edx, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b8], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x8c]
push ecx
call fcn.0041a900
add esp, 8
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x338]
call fcn.004121e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x350]
call fcn.00404690
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x368]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c8], ecx
mov byte [ebp - 4], 0x19
push 0xd1
push 0x4290c0
push 0x4290dc
push 0
lea ecx, [ebp - 0x8f8]
call fcn.00411ad0
mov dword [ebp - 0x1c0], eax
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c4], edx
mov byte [ebp - 4], 0x1a
push str.handdle_LoadModule_msd__path:
mov ecx, dword [ebp - 0x1c4]
call fcn.00411f30
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1c8]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x1cc]
call fcn.00411f30
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8f8]
call fcn.00411bc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x368]
call fcn.004121e0
push str.cmdline
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1d0], eax
lea eax, [ebp - 0x398]
push eax
mov ecx, dword [ebp - 0x1d0]
call fcn.0040ae90
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x1d8]
push edx
lea eax, [ebp - 0x380]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e8], ecx
mov byte [ebp - 4], 0x1c
push 0xd2
push 0x429128
push 0x429144
push 0
lea ecx, [ebp - 0x9e0]
call fcn.00411ad0
mov dword [ebp - 0x1e0], eax
mov edx, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e4], edx
mov byte [ebp - 4], 0x1d
push str.handdle_LoadModule_msd__cmdline:
mov ecx, dword [ebp - 0x1e4]
call fcn.00411f30
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x1e8]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x1ec]
call fcn.00411f30
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x9e0]
call fcn.00411bc0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x380]
call fcn.004121e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x398]
call fcn.00404690
push str.cmdParams
lea ecx, [ebp - 0x5c]
call fcn.0040b7c0
mov dword [ebp - 0x1f0], eax
lea eax, [ebp - 0x3c8]
push eax
mov ecx, dword [ebp - 0x1f0]
call fcn.0040ae90
mov dword [ebp - 0x1f4], eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x1f8]
push edx
lea eax, [ebp - 0x3b0]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x208], ecx
mov byte [ebp - 4], 0x1f
push 0xd3
push 0x429154
push 0x4291bc
push 0
lea ecx, [ebp - 0xac8]
call fcn.00411ad0
mov dword [ebp - 0x200], eax
mov edx, dword [ebp - 0x200]
mov dword [ebp - 0x204], edx
mov byte [ebp - 4], 0x20
push str.handdle_LoadModule_msd__cmdParams:
mov ecx, dword [ebp - 0x204]
call fcn.00411f30
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x208]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x20c]
call fcn.00411f30
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xac8]
call fcn.00411bc0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x3b0]
call fcn.004121e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3c8]
call fcn.00404690
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x210], eax
mov ecx, dword [ebp - 0x210]
call fcn.00411fd0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x3e0]
call fcn.004121e0
cmp dword [ebp - 0x158], 0
jne 0x41b6bb
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x3f8]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x220], ecx
mov byte [ebp - 4], 0x21
push 0xd7
push 0x429220
push 0x42923c
push 0
lea ecx, [ebp - 0xbb0]
call fcn.00411ad0
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x218]
mov dword [ebp - 0x21c], edx
mov byte [ebp - 4], 0x22
push 0x42924c
mov ecx, dword [ebp - 0x21c]
call fcn.00411f30
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x220]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x224]
call fcn.00411f30
mov dword [ebp - 0x228], eax
push str.is_not_load_right__call_loadlibrary
mov ecx, dword [ebp - 0x228]
call fcn.00411f30
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xbb0]
call fcn.00411bc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3f8]
call fcn.004121e0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x410]
push ecx
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
call fcn.00411fd0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x410]
call fcn.004121e0
jmp 0x41b777
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x428]
push eax
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x23c], ecx
mov byte [ebp - 4], 0x23
push 0xdb
push 0x4292a0
push 0x4292bc
push 0
lea ecx, [ebp - 0xc98]
call fcn.00411ad0
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x238], edx
mov byte [ebp - 4], 0x24
push 0x4292cc
mov ecx, dword [ebp - 0x238]
call fcn.00411f30
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x23c]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x240]
call fcn.00411f30
mov dword [ebp - 0x244], eax
push str.is_loaded_
mov ecx, dword [ebp - 0x244]
call fcn.00411f30
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc98]
call fcn.00411bc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x428]
call fcn.004121e0
cmp dword [ebp - 0x158], 0
jne 0x41b8a5
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x440]
push ecx
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x254], edx
mov byte [ebp - 4], 0x25
push 0xde
push 0x4292f0
push 0x42930c
push 0
lea ecx, [ebp - 0xd80]
call fcn.00411ad0
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x26
push 0x42931c
mov ecx, dword [ebp - 0x250]
call fcn.00411f30
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x254]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x258]
call fcn.00411f30
mov dword [ebp - 0x25c], eax
push str.load_failed_
mov ecx, dword [ebp - 0x25c]
call fcn.00411f30
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xd80]
call fcn.00411bc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x440]
call fcn.004121e0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8c]
call fcn.00404690
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
call fcn.00404690
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x44]
call fcn.00404690
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.0040aa70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbc]
call fcn.00404690
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41af78
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x458]
push edx
call fcn.0041aa00
add esp, 8
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 0x27
push 0xe2
push 0x429344
push 0x429360
push 0
lea ecx, [ebp - 0xe68]
call fcn.00411ad0
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x268], ecx
mov byte [ebp - 4], 0x28
push str.path:
mov ecx, dword [ebp - 0x268]
call fcn.00411f30
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x26c]
call fcn.00411fd0
push eax
mov ecx, dword [ebp - 0x270]
call fcn.00411f30
mov dword [ebp - 0x274], eax
push str.load_suc_
mov ecx, dword [ebp - 0x274]
call fcn.00411f30
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xe68]
call fcn.00411bc0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x458]
call fcn.004121e0
push 0x429390
mov edx, dword [ebp - 0x158]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x41ba12
push 0xe5
push 0x429394
push 0x4293b0
push 0
lea ecx, [ebp - 0xf50]
call fcn.00411ad0
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 4], 0x29
push str.call_the_entry_function_of_the_module_with_params
mov ecx, dword [ebp - 0x27c]
call fcn.00411f30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xf50]
call fcn.00411bc0
lea ecx, [ebp - 0x8c]
call fcn.00404280
push eax
lea ecx, [ebp - 0x8c]
call fcn.00404500
push eax
lea ecx, [ebp - 0xa4]
call fcn.00404280
push eax
lea ecx, [ebp - 0xa4]
call fcn.00404500
push eax
call dword [ebp - 0x168]
add esp, 0x10
jmp 0x41ba63
push 0xe9
push 0x429424
push 0x429440
push 0
lea ecx, [ebp - 0x1038]
call fcn.00411ad0
mov dword [ebp - 0x280], eax
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x284], ecx
mov byte [ebp - 4], 0x2a
push str.the_entry_function_of_the_module_is_not_found
mov ecx, dword [ebp - 0x284]
call fcn.00411f30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1038]
call fcn.00411bc0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8c]
call fcn.00404690
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
call fcn.00404690
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x44]
call fcn.00404690
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5c]
call fcn.0040aa70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbc]
call fcn.00404690
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x148]
call fcn.0041bc00
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x74]
call fcn.0040aa70
jmp 0x41af78
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c]
call fcn.00404380
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.00404690
jmp 0x41bb3c
mov dword [ebp - 4], 0xffffffff
jmp 0x41bb4c
jmp 0x41ac9b
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x16c], ecx
mov edx, dword [ebp - 0x16c]
push edx
call fcn.00423810
add esp, 4
cmp dword [ebp - 0x16c], 0
jne 0x41bb9f
mov dword [ebp - 0x290], 0
jmp 0x41bbb5
mov dword [ebp - 0x150], 0x8123
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x14c]
cmp dword [ecx + 8], 0
je 0x41bbd8
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x14c]
mov ecx, dword [ecx + 8]
call fcn.0041c730
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423430
mov esp, ebp
pop ebp
ret