Function at 0x4e9dc4
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xa
push 0
push 0
dec ecx
jne 0x4e9dcc
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4efef8]
mov byte [eax], 1
mov eax, 0x4e334c
call fcn.00412070
mov ebx, dword [0x4efd08]
xor eax, eax
push ebp
push 0x4ea68a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, 0x4ea6a8
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea6ec
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea738
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
xor edx, edx
call fcn.00408668
call main
call fcn.00406f90
call fcn.00407524
dec eax
jl 0x4e9efe
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x14]
mov edx, 0x4ea76c
call fcn.0040b978
je 0x4ea008
lea edx, [ebp - 0x18]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x18]
mov edx, 0x4ea780
call fcn.0040b978
je 0x4ea008
lea edx, [ebp - 0x1c]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x1c]
mov edx, 0x4ea794
call fcn.0040b978
je 0x4ea008
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x20]
mov edx, 0x4ea7a8
call fcn.0040b978
je 0x4ea008
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x24]
mov edx, 0x4ea7bc
call fcn.0040b978
je 0x4ea008
mov eax, ebx
mov edx, 0x4ea7d0
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea7ec
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
xor edx, edx
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea858
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea8b8
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea940
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4ea9ac
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eaa28
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eaa8c
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eab14
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eab5c
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eabc8
call fcn.00408668
call main
call fcn.00406f90
jmp 0x4ea66d
lea edx, [ebp - 0x28]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x28]
mov edx, 0x4ea76c
call fcn.0040b978
jne 0x4ea04a
lea edx, [ebp - 0x2c]
mov eax, 0x4eac2c
call fcn.004df568
mov edx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.00408668
call main
call fcn.00406f90
jmp 0x4ea66d
xor edx, edx
mov eax, 6
call fcn.0042b3b0
test al, al
jne 0x4ea08b
mov eax, ebx
mov edx, 0x4eac48
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eac98
call fcn.00408668
call main
call fcn.00406f90
jmp 0x4ea66d
call fcn.004dc88c
test al, al
jne 0x4ea0af
mov eax, ebx
mov edx, 0x4ead1c
call fcn.00408668
call main
call fcn.00406f90
jmp 0x4ea66d
call fcn.004dca10
lea edx, [ebp - 0x30]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x30]
mov edx, 0x4ea780
call fcn.0040b978
jne 0x4ea366
cmp byte [0x4f78d0], 0
je 0x4ea0fd
mov eax, ebx
mov edx, 0x4ead78
call fcn.00408668
call main
call fcn.00406f90
mov eax, 1
call fcn.0040a994
mov eax, ebx
mov edx, 0x4eade0
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eae14
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eaea8
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eaf44
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eafe0
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eb06c
call fcn.00408668
call main
call fcn.00406f90
mov eax, ebx
mov edx, 0x4eb0b0
call fcn.00408668
call main
call fcn.00406f90
lea edx, [ebp - 0x34]
mov eax, 2
call fcn.00407588
mov eax, dword [ebp - 0x34]
mov edx, 0x4eb0e0
call fcn.0040b978
jne 0x4ea1c4
mov eax, 0x4f78d4
mov edx, 0x4eb0f4
call fcn.0040af24
jmp 0x4ea1d3
mov eax, 0x4f78d4
mov edx, 0x4eb144
call fcn.0040af24
cmp byte [0x4f78d8], 0x40
jne 0x4ea1e1
call fcn.004dc8dc
call fcn.004e0d60
call fcn.004ddb60
mov eax, ebx
mov edx, 0x4eb1a0
call fcn.00408668
call main
call fcn.00406f90
lea edx, [ebp - 0x38]
mov eax, 2
call fcn.00407588
mov eax, dword [ebp - 0x38]
mov edx, 0x4eb1dc
call fcn.0040b978
je 0x4ea23d
lea edx, [ebp - 0x3c]
mov eax, 3
call fcn.00407588
mov eax, dword [ebp - 0x3c]
mov edx, 0x4eb1dc
call fcn.0040b978
je 0x4ea23d
xor eax, eax
jmp 0x4ea23f
mov al, 1
mov byte [0x4f78d1], al
call fcn.004e0528
mov eax, ebx
mov edx, 0x4eb1f0
call fcn.00408668
call main
call fcn.00406f90
call fcn.004deb94
mov eax, ebx
mov edx, 0x4eb244
call fcn.00408668
call main
call fcn.00406f90
call fcn.004e16c8
mov eax, ebx
mov edx, 0x4eb28c
call fcn.00408668
call main
call fcn.00406f90
mov eax, 0x4eb2d0
call fcn.004de384
mov eax, dword [0x4f78f4]
call fcn.004de7c4
push 0x3e8
call sub.kernel32.dll_Sleep
mov edx, dword [0x4f78f8]
mov eax, edx
test eax, eax
je 0x4ea2c2
mov eax, dword [eax - 4]
test eax, eax
jle 0x4ea2ea
mov eax, edx
test eax, eax
je 0x4ea2cf
mov eax, dword [eax - 4]
mov esi, eax
dec esi
test esi, esi
jl 0x4ea2ea
inc esi
xor edi, edi
mov eax, dword [0x4f78f8]
mov eax, dword [eax + edi*4]
call fcn.004dd708
inc edi
dec esi
jne 0x4ea2d9
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4eb300
call fcn.004dd708
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, ebx
mov edx, 0x4eb324
call fcn.00408668
call main
call fcn.00406f90
mov al, 1
call fcn.004e1750
mov eax, ebx
mov edx, 0x4eb368
call fcn.00408668
call main
call fcn.00406f90
mov al, 1
call fcn.004e21fc
mov eax, ebx
mov edx, 0x4eb3ac
call fcn.00408668
call main
call fcn.00406f90
cmp byte [0x4f78d8], 0x40
jne 0x4ea366
call fcn.004dc978
lea edx, [ebp - 0x40]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x40]
mov edx, 0x4ea7a8
call fcn.0040b978
jne 0x4ea511
cmp byte [0x4f78d0], 0
jne 0x4ea3af
mov eax, ebx
mov edx, 0x4eb3f0
call fcn.00408668
call main
call fcn.00406f90
mov eax, 1
call fcn.0040a994
mov eax, ebx
mov edx, 0x4eb450
call fcn.00408668
call main
call fcn.00406f90
cmp byte [0x4f78d8], 0x40
jne 0x4ea3d3
call fcn.004dc8dc
call fcn.004ddb60
mov eax, ebx
mov edx, 0x4eb484
call fcn.00408668
call main
call fcn.00406f90
call fcn.004defb4
mov eax, ebx
mov edx, 0x4eb28c
call fcn.00408668
call main
call fcn.00406f90
mov eax, 0x4eb2d0
call fcn.004de384
mov eax, dword [0x4f78f4]
call fcn.004de7c4
push 0x3e8
call sub.kernel32.dll_Sleep
mov eax, ebx
mov edx, 0x4eb4d4
call fcn.00408668
call main
call fcn.00406f90
call fcn.004e0588
mov edx, dword [0x4f78f8]
mov eax, edx
test eax, eax
je 0x4ea451
mov eax, dword [eax - 4]
test eax, eax
jle 0x4ea479
mov eax, edx
test eax, eax
je 0x4ea45e
mov eax, dword [eax - 4]
mov esi, eax
dec esi
test esi, esi
jl 0x4ea479
inc esi
xor edi, edi
mov eax, dword [0x4f78f8]
mov eax, dword [eax + edi*4]
call fcn.004dd708
inc edi
dec esi
jne 0x4ea468
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4eb300
call fcn.004dd708
push 0x1f4
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x44]
mov eax, 2
call fcn.00407588
mov eax, dword [ebp - 0x44]
mov edx, 0x4eb50c
call fcn.0040b978
je 0x4ea4ed
mov eax, ebx
mov edx, 0x4eb324
call fcn.00408668
call main
call fcn.00406f90
xor eax, eax
call fcn.004e1750
mov eax, ebx
mov edx, 0x4eb368
call fcn.00408668
call main
call fcn.00406f90
xor eax, eax
call fcn.004e21fc
cmp byte [0x4f78d8], 0x40
jne 0x4ea4fb
call fcn.004dc978
mov eax, ebx
mov edx, 0x4eb520
call fcn.00408668
call main
call fcn.00406f90
lea edx, [ebp - 0x48]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x48]
mov edx, 0x4ea794
call fcn.0040b978
jne 0x4ea59d
cmp byte [0x4f78d0], 0
jne 0x4ea556
mov eax, ebx
mov edx, 0x4eb3f0
call fcn.00408668
call main
call fcn.00406f90
mov eax, 1
call fcn.0040a994
mov eax, ebx
mov edx, 0x4eb568
call fcn.00408668
call main
call fcn.00406f90
lea edx, [ebp - 0x4c]
mov eax, 2
call fcn.00407588
cmp dword [ebp - 0x4c], 0
jne 0x4ea588
xor eax, eax
call fcn.004e28b0
jmp 0x4ea59d
lea edx, [ebp - 0x50]
mov eax, 2
call fcn.00407588
mov eax, dword [ebp - 0x50]
call fcn.004e28b0
lea edx, [ebp - 0x54]
mov eax, 1
call fcn.00407588
mov eax, dword [ebp - 0x54]
mov edx, 0x4ea7bc
call fcn.0040b978
jne 0x4ea66d
mov eax, ebx
mov edx, 0x4eb5ac
call fcn.00408668
call main
call fcn.00406f90
call fcn.004ddb60
mov eax, ebx
mov edx, 0x4eb28c
call fcn.00408668
call main
call fcn.00406f90
mov eax, 0x4eb2d0
call fcn.004de384
mov eax, dword [0x4f78f4]
call fcn.004de7c4
push 0x3e8
call sub.kernel32.dll_Sleep
mov edx, dword [0x4f78f8]
mov eax, edx
test eax, eax
je 0x4ea61b
mov eax, dword [eax - 4]
test eax, eax
jle 0x4ea643
mov eax, edx
test eax, eax
je 0x4ea628
mov eax, dword [eax - 4]
mov esi, eax
dec esi
test esi, esi
jl 0x4ea643
inc esi
xor edi, edi
mov eax, dword [0x4f78f8]
mov eax, dword [eax + edi*4]
call fcn.004dd708
inc edi
dec esi
jne 0x4ea632
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4eb300
call fcn.004dd708
mov eax, ebx
mov edx, 0x4eb5dc
call fcn.00408668
call main
call fcn.00406f90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ea691
lea eax, [ebp - 0x54]
mov edx, 0x11
call fcn.0040ab94
pop eax
jmp eax