Function at 0x485acc
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1a
push 0
push 0
dec ecx
jne 0x485ad4
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x48621a
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 1
jb 0x485afd
cmp dword [ebp + 8], 3
jbe 0x485b0f
mov edx, 0x486238
mov eax, dword [ebp + 0x14]
call fcn.004097c4
jmp 0x4861fc
cmp dword [0x48afe8], 0
jbe 0x485b2c
mov eax, dword [ebp + 8]
mov dword [0x48afe8], eax
mov dword [ebp - 4], 0xffffffff
jmp 0x4861fc
lea eax, [ebp - 8]
mov edx, dword [ebp + 0x10]
call fcn.0040479c
cmp dword [ebp - 8], 0
jne 0x485b4f
mov edx, 0x48624c
mov eax, dword [ebp + 0x14]
call fcn.004097c4
jmp 0x4861fc
lea ecx, [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0047d9dc
mov eax, dword [ebp - 0xc]
call fcn.00404864
cmp eax, 5
jne 0x485bb3
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00404ac4
mov eax, dword [ebp - 0x10]
mov edx, 0x486260
call fcn.004049b0
jne 0x485bb3
lea eax, [ebp - 0x14]
push eax
mov ecx, 1
mov edx, 3
mov eax, dword [ebp - 0xc]
call fcn.00404ac4
mov eax, dword [ebp - 0x14]
mov edx, 0x48626c
call fcn.004049b0
je 0x485bc5
mov edx, 0x486278
mov eax, dword [ebp + 0x14]
call fcn.004097c4
jmp 0x4861fc
lea ecx, [ebp - 0x18]
xor edx, edx
mov eax, 0x48628c
call fcn.0047d9dc
mov edx, dword [ebp - 0x18]
mov eax, 0x48af2c
call fcn.004045f8
lea ecx, [ebp - 0x1c]
xor edx, edx
mov eax, 0x4862b0
call fcn.0047d9dc
mov edx, dword [ebp - 0x1c]
mov eax, 0x48af30
call fcn.004045f8
lea ecx, [ebp - 0x20]
xor edx, edx
mov eax, 0x4862d0
call fcn.0047d9dc
mov edx, dword [ebp - 0x20]
mov eax, 0x48af34
call fcn.004045f8
lea ecx, [ebp - 0x24]
xor edx, edx
mov eax, 0x4862f0
call fcn.0047d9dc
mov edx, dword [ebp - 0x24]
mov eax, 0x48af38
call fcn.004045f8
lea ecx, [ebp - 0x28]
xor edx, edx
mov eax, 0x486320
call fcn.0047d9dc
mov edx, dword [ebp - 0x28]
mov eax, 0x48af3c
call fcn.004045f8
lea ecx, [ebp - 0x2c]
xor edx, edx
mov eax, 0x48634c
call fcn.0047d9dc
mov edx, dword [ebp - 0x2c]
mov eax, 0x48af40
call fcn.004045f8
lea ecx, [ebp - 0x30]
xor edx, edx
mov eax, 0x48636c
call fcn.0047d9dc
mov edx, dword [ebp - 0x30]
mov eax, 0x48af44
call fcn.004045f8
lea ecx, [ebp - 0x34]
xor edx, edx
mov eax, 0x48638c
call fcn.0047d9dc
mov edx, dword [ebp - 0x34]
mov eax, 0x48af48
call fcn.004045f8
lea ecx, [ebp - 0x38]
xor edx, edx
mov eax, 0x4863b0
call fcn.0047d9dc
mov edx, dword [ebp - 0x38]
mov eax, 0x48af4c
call fcn.004045f8
lea ecx, [ebp - 0x3c]
xor edx, edx
mov eax, 0x4863d4
call fcn.0047d9dc
mov edx, dword [ebp - 0x3c]
mov eax, 0x48af50
call fcn.004045f8
lea ecx, [ebp - 0x40]
xor edx, edx
mov eax, 0x4863fc
call fcn.0047d9dc
mov edx, dword [ebp - 0x40]
mov eax, 0x48af54
call fcn.004045f8
lea ecx, [ebp - 0x44]
xor edx, edx
mov eax, 0x486420
call fcn.0047d9dc
mov edx, dword [ebp - 0x44]
mov eax, 0x48af58
call fcn.004045f8
lea ecx, [ebp - 0x48]
xor edx, edx
mov eax, 0x486448
call fcn.0047d9dc
mov edx, dword [ebp - 0x48]
mov eax, 0x48af5c
call fcn.004045f8
lea ecx, [ebp - 0x4c]
xor edx, edx
mov eax, 0x48647c
call fcn.0047d9dc
mov edx, dword [ebp - 0x4c]
mov eax, 0x48af60
call fcn.004045f8
lea ecx, [ebp - 0x50]
xor edx, edx
mov eax, 0x4864a8
call fcn.0047d9dc
mov edx, dword [ebp - 0x50]
mov eax, 0x48af64
call fcn.004045f8
lea ecx, [ebp - 0x54]
xor edx, edx
mov eax, 0x4864fc
call fcn.0047d9dc
mov edx, dword [ebp - 0x54]
mov eax, 0x48af68
call fcn.004045f8
lea ecx, [ebp - 0x58]
xor edx, edx
mov eax, 0x486528
call fcn.0047d9dc
mov edx, dword [ebp - 0x58]
mov eax, 0x48af6c
call fcn.004045f8
lea ecx, [ebp - 0x5c]
xor edx, edx
mov eax, 0x486558
call fcn.0047d9dc
mov edx, dword [ebp - 0x5c]
mov eax, 0x48af70
call fcn.004045f8
lea ecx, [ebp - 0x60]
xor edx, edx
mov eax, 0x48657c
call fcn.0047d9dc
mov edx, dword [ebp - 0x60]
mov eax, 0x48af74
call fcn.004045f8
lea ecx, [ebp - 0x64]
xor edx, edx
mov eax, 0x4865a0
call fcn.0047d9dc
mov edx, dword [ebp - 0x64]
mov eax, 0x48af78
call fcn.004045f8
lea ecx, [ebp - 0x68]
xor edx, edx
mov eax, 0x4865c8
call fcn.0047d9dc
mov edx, dword [ebp - 0x68]
mov eax, 0x48af7c
call fcn.004045f8
lea ecx, [ebp - 0x6c]
xor edx, edx
mov eax, 0x4865ec
call fcn.0047d9dc
mov edx, dword [ebp - 0x6c]
mov eax, 0x48af80
call fcn.004045f8
lea ecx, [ebp - 0x70]
xor edx, edx
mov eax, 0x486620
call fcn.0047d9dc
mov edx, dword [ebp - 0x70]
mov eax, 0x48af84
call fcn.004045f8
lea ecx, [ebp - 0x74]
xor edx, edx
mov eax, 0x486640
call fcn.0047d9dc
mov edx, dword [ebp - 0x74]
mov eax, 0x48af88
call fcn.004045f8
lea ecx, [ebp - 0x78]
xor edx, edx
mov eax, 0x486660
call fcn.0047d9dc
mov edx, dword [ebp - 0x78]
mov eax, 0x48af8c
call fcn.004045f8
lea ecx, [ebp - 0x7c]
xor edx, edx
mov eax, 0x486680
call fcn.0047d9dc
mov edx, dword [ebp - 0x7c]
mov eax, 0x48af90
call fcn.004045f8
lea ecx, [ebp - 0x80]
xor edx, edx
mov eax, 0x486694
call fcn.0047d9dc
mov edx, dword [ebp - 0x80]
mov eax, 0x48af94
call fcn.004045f8
lea ecx, [ebp - 0x84]
xor edx, edx
mov eax, 0x4866d0
call fcn.0047d9dc
mov edx, dword [ebp - 0x84]
mov eax, 0x48af98
call fcn.004045f8
lea ecx, [ebp - 0x88]
xor edx, edx
mov eax, 0x48670c
call fcn.0047d9dc
mov edx, dword [ebp - 0x88]
mov eax, 0x48af9c
call fcn.004045f8
lea ecx, [ebp - 0x8c]
xor edx, edx
mov eax, 0x486744
call fcn.0047d9dc
mov edx, dword [ebp - 0x8c]
mov eax, 0x48afa8
call fcn.004045f8
lea ecx, [ebp - 0x90]
xor edx, edx
mov eax, 0x486764
call fcn.0047d9dc
mov edx, dword [ebp - 0x90]
mov eax, 0x48afac
call fcn.004045f8
lea ecx, [ebp - 0x94]
xor edx, edx
mov eax, 0x486790
call fcn.0047d9dc
mov edx, dword [ebp - 0x94]
mov eax, 0x48afb0
call fcn.004045f8
lea ecx, [ebp - 0x98]
xor edx, edx
mov eax, 0x4867b0
call fcn.0047d9dc
mov edx, dword [ebp - 0x98]
mov eax, 0x48afb4
call fcn.004045f8
lea ecx, [ebp - 0x9c]
xor edx, edx
mov eax, 0x4867c4
call fcn.0047d9dc
mov edx, dword [ebp - 0x9c]
mov eax, 0x48afb8
call fcn.004045f8
lea ecx, [ebp - 0xa0]
xor edx, edx
mov eax, 0x4867e8
call fcn.0047d9dc
mov edx, dword [ebp - 0xa0]
mov eax, 0x48afbc
call fcn.004045f8
lea ecx, [ebp - 0xa4]
xor edx, edx
mov eax, 0x486818
call fcn.0047d9dc
mov edx, dword [ebp - 0xa4]
mov eax, 0x48afc0
call fcn.004045f8
lea ecx, [ebp - 0xa8]
xor edx, edx
mov eax, 0x486834
call fcn.0047d9dc
mov edx, dword [ebp - 0xa8]
mov eax, 0x48afc4
call fcn.004045f8
lea ecx, [ebp - 0xac]
xor edx, edx
mov eax, 0x486850
call fcn.0047d9dc
mov edx, dword [ebp - 0xac]
mov eax, 0x48afc8
call fcn.004045f8
lea ecx, [ebp - 0xb0]
xor edx, edx
mov eax, 0x486870
call fcn.0047d9dc
mov edx, dword [ebp - 0xb0]
mov eax, 0x48afcc
call fcn.004045f8
lea ecx, [ebp - 0xb4]
xor edx, edx
mov eax, 0x486884
call fcn.0047d9dc
mov edx, dword [ebp - 0xb4]
mov eax, 0x48afd0
call fcn.004045f8
lea ecx, [ebp - 0xb8]
xor edx, edx
mov eax, 0x4868a8
call fcn.0047d9dc
mov edx, dword [ebp - 0xb8]
mov eax, 0x48afd4
call fcn.004045f8
lea ecx, [ebp - 0xbc]
xor edx, edx
mov eax, 0x4868c8
call fcn.0047d9dc
mov edx, dword [ebp - 0xbc]
mov eax, 0x48afd8
call fcn.004045f8
lea ecx, [ebp - 0xc0]
xor edx, edx
mov eax, 0x4868ec
call fcn.0047d9dc
mov edx, dword [ebp - 0xc0]
mov eax, 0x48afdc
call fcn.004045f8
lea ecx, [ebp - 0xc4]
xor edx, edx
mov eax, 0x48628c
call fcn.0047d9dc
mov edx, dword [ebp - 0xc4]
mov eax, 0x48afe0
call fcn.004045f8
lea ecx, [ebp - 0xc8]
xor edx, edx
mov eax, 0x48628c
call fcn.0047d9dc
mov edx, dword [ebp - 0xc8]
mov eax, 0x48afe4
call fcn.004045f8
lea ecx, [ebp - 0xcc]
xor edx, edx
mov eax, 0x486910
call fcn.0047d9dc
mov edx, dword [ebp - 0xcc]
mov eax, 0x48afa0
call fcn.004045f8
lea ecx, [ebp - 0xd0]
xor edx, edx
mov eax, 0x486924
call fcn.0047d9dc
mov edx, dword [ebp - 0xd0]
mov eax, 0x48afa4
call fcn.004045f8
mov dl, 1
mov eax, dword [0x42f340]
call fcn.0042f3c0
mov dword [0x48b010], eax
xor eax, eax
push ebp
push 0x4861a9
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetCurrentProcess
mov edx, 0x486934
call fcn.0047dbd0
test al, al
jne 0x48619f
xor edx, edx
mov eax, 0x486950
call fcn.0047ddd8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4861b3
xor eax, eax
push ebp
push 0x4861db
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x80
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_SetPriorityClass
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4861e5
mov eax, dword [ebp + 8]
mov dword [0x48afe8], eax
mov eax, dword [ebp + 0xc]
mov dword [0x48afec], eax
mov dword [ebp - 4], 0xffffffff
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486221
lea eax, [ebp - 0xd0]
mov edx, 0x33
call fcn.004045c8
ret