Function at 0x4dc04d
Capabilities:
Terminate process

Disassembly:
push eax
mov eax, dword fs:[0x20]
je 0x4dc013
pop eax
jmp 0x4dc014
pop eax
jmp 0x4dc017
mov eax, fcn.004de680
jmp 0x4dc01d
call eax
cmp dword [0x4df5a0], 0
jne 0x4dc0e3
cmp dword [0x4df5c4], 0
je 0x4dc0e3
mov dword [0x4df5c4], 0
mov eax, dword [0x4df084]
mov dword [0x4e0a4c], eax
push 0x1e
push 0x4df170
call fcn.004de477
add esp, 8
push 0x64
push 0x4df190
call fcn.004de477
add esp, 8
push 0x64
push 0x4df1f8
call fcn.004de477
add esp, 8
push 0x64
push 0x4df260
call fcn.004de477
add esp, 8
push 0x64
push 0x4df2c8
call fcn.004de477
add esp, 8
push 0x64
push 0x4df330
call fcn.004de477
add esp, 8
push 0x64
push 0x4df398
call fcn.004de477
add esp, 8
push 0x64
push 0x4df400
call fcn.004de477
add esp, 8
push 0x64
push 0x4df468
call fcn.004de477
add esp, 8
push 0x64
push 0x4df4d0
call fcn.004de477
add esp, 8
call fcn.004de285
test byte [0x4df048], 0x20
je 0x4dc154
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
mov dword [0x4df598], eax
pop ebp
cmp dword [0x4df598], 1
je 0x4dc11b
cmp dword [0x4df598], 2
jne 0x4dc12a
mov dword [0x4df59c], 1
jmp 0x4dc134
mov dword [0x4df59c], 0
cmp dword [0x4df598], 0
jne 0x4dc14f
mov eax, dword [0x4dfa04]
push eax
push 0
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4dc15e
mov dword [0x4df59c], 1
mov dword [0x4df5a4], 0
mov eax, entry0
sub eax, dword [0x4df018]
mov dword [0x4df53c], eax
mov eax, dword [0x4df53c]
add eax, dword [0x4df034]
mov dword [0x4df544], eax
mov eax, dword [0x4df53c]
add eax, dword [0x4df044]
mov dword [0x4df548], eax
cmp dword [0x4df59c], 0
je 0x4dc370
cmp dword [0x4df5a0], 0
jne 0x4dc370
mov dword [0x4df5a0], 1
mov dword [0x4df5a4], 1
call fcn.004de112
test eax, eax
je 0x4dc370
call fcn.004ddaaf
test eax, eax
je 0x4dc370
mov eax, dword [0x4df070]
xor dword [0x4df078], eax
mov eax, dword [0x4df068]
xor dword [0x4df07c], eax
call fcn.004ddc64
test eax, eax
je 0x4dc35e
call fcn.004dcd81
push 0x4e0a78
call fcn.004dce62
add esp, 4
call fcn.004ddc7c
mov dword [0x4df540], eax
cmp dword [0x4df540], 0
je 0x4dc32e
call fcn.004ddd9a
test eax, eax
je 0x4dc32e
test byte [0x4df048], 0x20
je 0x4dc258
push 0x4e0a8c
call fcn.004dce62
add esp, 4
jmp 0x4dc265
push 0x4e0a9c
call fcn.004dce62
add esp, 4
call fcn.004dd6a2
test eax, eax
je 0x4dc324
mov eax, dword [0x4df070]
xor dword [0x4df078], eax
mov eax, dword [0x4df068]
xor dword [0x4df07c], eax
call fcn.004dd891
mov dword [0x4dfa00], eax
cmp dword [0x4dfa00], 0
je 0x4dc311
mov eax, dword [0x4df014]
add eax, dword [0x4df53c]
push eax
call fcn.004dca92
add esp, 4
test eax, eax
je 0x4dc311
mov eax, dword [0x4df010]
add eax, dword [0x4df53c]
push eax
call fcn.004dc540
add esp, 4
test eax, eax
je 0x4dc311
call fcn.004dc944
test eax, eax
je 0x4dc311
call fcn.004dcb99
test eax, eax
je 0x4dc311
mov dword [0x4df5a4], 0
mov eax, dword [0x4dfa00]
xor dword [0x4df078], eax
mov eax, dword [0x4df068]
xor dword [0x4df07c], eax
push 0x8000
push 0
mov eax, dword [0x4df590]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.004dd1e8
jmp 0x4dc359
call fcn.004dd1e8
push 0x64
push 0x4dfd20
push 0x4df190
call fcn.004ddc35
add esp, 0xc
push 0x4df170
push 0x4dfd20
call fcn.004dd281
add esp, 8
jmp 0x4dc370
push 0x4df170
push 0x4df260
call fcn.004dd281
add esp, 8
mov dword [0x4df9f8], 0
cmp dword [0x4df9f8], 0
je 0x4dc3a5
push 0x10
push 0x4df170
push 0x4e0ab0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x4df5a4], 1
cmp dword [0x4df5a4], 0
je 0x4dc3d2
test byte [0x4df048], 0x20
je 0x4dc3ca
mov eax, 0
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x4df9f4], 1
test byte [0x4df541], 0x80
je 0x4dc40a
mov eax, dword [0x4df050]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
shl eax, 5
mov dword [0x4dfa0c], eax
jmp 0x4dc420
mov eax, dword [0x4df054]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [0x4dfa0c], eax
mov ecx, 0x3e8
mov eax, dword [0x4dfa0c]
sub edx, edx
div ecx
mov dword [0x4df5c0], eax
push 0x4df5b0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [0x4df53c]
add eax, dword [0x4df008]
mov dword [0x4df538], eax
mov eax, dword [0x4df070]
cmp dword [0x4dfa00], eax
je 0x4dc469
mov eax, dword [0x4dfa00]
mov dword [0x4df070], eax
mov eax, dword [0x4df538]
jmp 0x4dc46f
call eax
jmp 0x4dc471