Function at 0x4e0d7c
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4e0d84
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4e6e30]
mov byte [eax], 1
mov eax, 0x4dac1c
call fcn.00411de4
mov ebx, dword [0x4e6c5c]
xor eax, eax
push ebp
push 0x4e160c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
mov edx, 0x4e1628
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e166c
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1698
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
xor edx, edx
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004076b4
dec eax
jl 0x4e0eb6
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x14]
mov edx, 0x4e16e4
call fcn.0040bba0
je 0x4e0faa
lea edx, [ebp - 0x18]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x18]
mov edx, 0x4e16f8
call fcn.0040bba0
je 0x4e0faa
lea edx, [ebp - 0x1c]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x1c]
mov edx, 0x4e170c
call fcn.0040bba0
je 0x4e0faa
lea edx, [ebp - 0x20]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x20]
mov edx, 0x4e1720
call fcn.0040bba0
je 0x4e0faa
lea edx, [ebp - 0x24]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x24]
mov edx, 0x4e1734
call fcn.0040bba0
je 0x4e0faa
mov eax, ebx
mov edx, 0x4e1748
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1764
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
xor edx, edx
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e17c4
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1824
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e18ac
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1918
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1994
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e19f8
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1a40
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1aac
call fcn.004088c0
call main
call fcn.0040711c
jmp 0x4e15ef
lea edx, [ebp - 0x28]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x28]
mov edx, 0x4e16e4
call fcn.0040bba0
jne 0x4e0fec
lea edx, [ebp - 0x2c]
mov eax, 0x4e1b10
call fcn.004d7688
mov edx, dword [ebp - 0x2c]
mov eax, ebx
call fcn.004088c0
call main
call fcn.0040711c
jmp 0x4e15ef
xor edx, edx
mov eax, 6
call fcn.00429b38
test al, al
jne 0x4e102d
mov eax, ebx
mov edx, 0x4e1b2c
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1b7c
call fcn.004088c0
call main
call fcn.0040711c
jmp 0x4e15ef
call fcn.004d4cb0
test al, al
jne 0x4e1051
mov eax, ebx
mov edx, 0x4e1c00
call fcn.004088c0
call main
call fcn.0040711c
jmp 0x4e15ef
call fcn.004d4e28
lea edx, [ebp - 0x30]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x30]
mov edx, 0x4e16f8
call fcn.0040bba0
jne 0x4e130c
cmp byte [0x4ed8a0], 0
je 0x4e109f
mov eax, ebx
mov edx, 0x4e1c5c
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 1
call fcn.0040abbc
mov eax, ebx
mov edx, 0x4e1cc4
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1cf8
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1d8c
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1e28
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1ec4
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1f50
call fcn.004088c0
call main
call fcn.0040711c
mov eax, ebx
mov edx, 0x4e1f94
call fcn.004088c0
call main
call fcn.0040711c
lea edx, [ebp - 0x34]
mov eax, 2
call fcn.00407718
mov eax, dword [ebp - 0x34]
mov edx, 0x4e1fc4
call fcn.0040bba0
jne 0x4e1166
mov eax, 0x4ed8a4
mov edx, 0x4e1fd8
call fcn.0040b14c
jmp 0x4e1175
mov eax, 0x4ed8a4
mov edx, 0x4e2028
call fcn.0040b14c
cmp byte [0x4ed8a8], 0x40
jne 0x4e1183
call fcn.004d4cf4
call fcn.004d8a5c
call fcn.004d5f50
mov eax, ebx
mov edx, 0x4e2084
call fcn.004088c0
call main
call fcn.0040711c
lea edx, [ebp - 0x38]
mov eax, 2
call fcn.00407718
mov eax, dword [ebp - 0x38]
mov edx, 0x4e20c0
call fcn.0040bba0
je 0x4e11df
lea edx, [ebp - 0x3c]
mov eax, 3
call fcn.00407718
mov eax, dword [ebp - 0x3c]
mov edx, 0x4e20c0
call fcn.0040bba0
je 0x4e11df
xor eax, eax
jmp 0x4e11e1
mov al, 1
mov byte [0x4ed8a1], al
call fcn.004d7c78
mov eax, ebx
mov edx, 0x4e20d4
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004d6d74
mov eax, ebx
mov edx, 0x4e2128
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004d93ec
mov eax, ebx
mov edx, 0x4e2170
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 0x4e21b4
call fcn.004d66dc
mov eax, dword [0x4ed8c0]
call fcn.004d69a4
push 0x3e8
call sub.kernel32.dll_Sleep
mov edx, dword [0x4ed8c4]
mov eax, edx
test eax, eax
je 0x4e1266
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4e1290
mov eax, edx
test eax, eax
je 0x4e1275
sub eax, 4
mov eax, dword [eax]
mov esi, eax
dec esi
test esi, esi
jl 0x4e1290
inc esi
xor edi, edi
mov eax, dword [0x4ed8c4]
mov eax, dword [eax + edi*4]
call fcn.004d5d08
inc edi
dec esi
jne 0x4e127f
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4e21e4
call fcn.004d5d08
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, ebx
mov edx, 0x4e2208
call fcn.004088c0
call main
call fcn.0040711c
mov al, 1
call fcn.004d9474
mov eax, ebx
mov edx, 0x4e224c
call fcn.004088c0
call main
call fcn.0040711c
mov al, 1
call fcn.004d9f20
mov eax, ebx
mov edx, 0x4e2290
call fcn.004088c0
call main
call fcn.0040711c
cmp byte [0x4ed8a8], 0x40
jne 0x4e130c
call fcn.004d4d90
lea edx, [ebp - 0x40]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x40]
mov edx, 0x4e1720
call fcn.0040bba0
jne 0x4e14bb
cmp byte [0x4ed8a0], 0
jne 0x4e1355
mov eax, ebx
mov edx, 0x4e22d4
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 1
call fcn.0040abbc
mov eax, ebx
mov edx, 0x4e2334
call fcn.004088c0
call main
call fcn.0040711c
cmp byte [0x4ed8a8], 0x40
jne 0x4e1379
call fcn.004d4cf4
call fcn.004d5f50
mov eax, ebx
mov edx, 0x4e2368
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004d7194
mov eax, ebx
mov edx, 0x4e2170
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 0x4e21b4
call fcn.004d66dc
mov eax, dword [0x4ed8c0]
call fcn.004d69a4
push 0x3e8
call sub.kernel32.dll_Sleep
mov eax, ebx
mov edx, 0x4e23b8
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004d8518
mov edx, dword [0x4ed8c4]
mov eax, edx
test eax, eax
je 0x4e13f9
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4e1423
mov eax, edx
test eax, eax
je 0x4e1408
sub eax, 4
mov eax, dword [eax]
mov esi, eax
dec esi
test esi, esi
jl 0x4e1423
inc esi
xor edi, edi
mov eax, dword [0x4ed8c4]
mov eax, dword [eax + edi*4]
call fcn.004d5d08
inc edi
dec esi
jne 0x4e1412
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4e21e4
call fcn.004d5d08
push 0x1f4
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x44]
mov eax, 2
call fcn.00407718
mov eax, dword [ebp - 0x44]
mov edx, 0x4e23f0
call fcn.0040bba0
je 0x4e1497
mov eax, ebx
mov edx, 0x4e2208
call fcn.004088c0
call main
call fcn.0040711c
xor eax, eax
call fcn.004d9474
mov eax, ebx
mov edx, 0x4e224c
call fcn.004088c0
call main
call fcn.0040711c
xor eax, eax
call fcn.004d9f20
cmp byte [0x4ed8a8], 0x40
jne 0x4e14a5
call fcn.004d4d90
mov eax, ebx
mov edx, 0x4e2404
call fcn.004088c0
call main
call fcn.0040711c
lea edx, [ebp - 0x48]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x48]
mov edx, 0x4e170c
call fcn.0040bba0
jne 0x4e151b
cmp byte [0x4ed8a0], 0
jne 0x4e1500
mov eax, ebx
mov edx, 0x4e22d4
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 1
call fcn.0040abbc
mov eax, ebx
mov edx, 0x4e244c
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004da4c0
lea edx, [ebp - 0x4c]
mov eax, 1
call fcn.00407718
mov eax, dword [ebp - 0x4c]
mov edx, 0x4e1734
call fcn.0040bba0
jne 0x4e15ef
mov eax, ebx
mov edx, 0x4e2490
call fcn.004088c0
call main
call fcn.0040711c
call fcn.004d5f50
mov eax, ebx
mov edx, 0x4e2170
call fcn.004088c0
call main
call fcn.0040711c
mov eax, 0x4e21b4
call fcn.004d66dc
mov eax, dword [0x4ed8c0]
call fcn.004d69a4
push 0x3e8
call sub.kernel32.dll_Sleep
mov edx, dword [0x4ed8c4]
mov eax, edx
test eax, eax
je 0x4e159b
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x4e15c5
mov eax, edx
test eax, eax
je 0x4e15aa
sub eax, 4
mov eax, dword [eax]
mov esi, eax
dec esi
test esi, esi
jl 0x4e15c5
inc esi
xor edi, edi
mov eax, dword [0x4ed8c4]
mov eax, dword [eax + edi*4]
call fcn.004d5d08
inc edi
dec esi
jne 0x4e15b4
push 0x1f4
call sub.kernel32.dll_Sleep
mov eax, 0x4e21e4
call fcn.004d5d08
mov eax, ebx
mov edx, 0x4e24c0
call fcn.004088c0
call main
call fcn.0040711c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e1613
lea eax, [ebp - 0x4c]
mov edx, 0xf
call fcn.0040adbc
pop eax
jmp eax