Function at 0x4ed810
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x4ea8ac]
test eax, eax
jne case.0x4eddbb.0
push ebp
push esi
mov dword [0x4ea8ac], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add dword [0x4ebb78], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, dword [0x4ebb78]
and eax, 0x3fdffffe
or eax, 0x200001
mov dword [0x4ebb78], eax
xor eax, eax
push eax
mov dword [eax*4 + 0x4ebba0], 0
call fcn.004ee630
add esp, 4
cmp eax, 0x64
jl 0x4ed852
push 0x4ebb60
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x4e07e4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov eax, dword [0x4e0778]
mov ebp, dword [0x4e077c]
mov cx, word [ebp]
add ebp, 8
mov word [0x4eae60], cx
mov si, word [ebp - 6]
mov ecx, dword [0x4eae60]
mov word [0x4eae62], si
mov edx, dword [ebp - 4]
and ecx, 0xffff
cmp ecx, 0x5910
mov dword [0x4eae58], edx
mov dword [0x4e077c], ebp
jg 0x4edb09
je 0x4edd3f
cmp ecx, 0x1992
jg 0x4eda3c
je 0x4eda1d
cmp ecx, 0x704
jg 0x4ed9c5
je 0x4ed9a1
cmp ecx, 0xe4
je 0x4ed96d
cmp ecx, 0x342
je 0x4ed960
cmp ecx, 0x611
jne 0x4ed886
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x4ed92e
cmp ecx, 0x28e
jne 0x4ed943
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x4ed936
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x4eae58]
mov eax, dword [0x4e0778]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x4e0778], eax
je 0x4ed886
mov dword [0x4e077c], edx
jmp 0x4ed886
xor ecx, ecx
mov cx, si
mov dword [eax + ecx*4], edx
jmp 0x4ed881
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
push ecx
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx + 0x14], eax
mov eax, dword [0x4e0778]
add eax, 0x14
mov dword [0x4e0778], eax
jmp 0x4ed886
push esi
push edx
call fcn.004ed760
mov dx, word [0x4eae62]
inc eax
push eax
mov eax, dword [0x4eae58]
push edx
push eax
call fcn.004ed700
add esp, 0x14
jmp 0x4ed881
sub ecx, 0x96f
je 0x4edda2
sub ecx, 0x723
je 0x4eda06
sub ecx, 0x77
jne 0x4ed886
mov ecx, dword [eax]
mov eax, dword [eax + 4]
push ecx
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx + 4], eax
mov eax, dword [0x4e0778]
add eax, 4
mov dword [0x4e0778], eax
jmp 0x4ed886
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
add dword [ecx], eax
jmp 0x4ed881
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.004ed700
mov eax, dword [0x4e0778]
add esp, 0xc
add eax, 4
mov dword [0x4e0778], eax
jmp 0x4ed886
cmp ecx, 0x3345
jg 0x4edabe
je 0x4edaa7
sub ecx, 0x1a44
je 0x4eda90
sub ecx, 0x801
je 0x4eda76
sub ecx, 0x72
jne 0x4ed886
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
sub dword [ecx], eax
jmp 0x4ed881
mov ecx, dword [eax]
xor edx, edx
mov dx, si
mov dword [0x4e077c], ecx
lea eax, [eax + edx*4]
mov dword [0x4e0778], eax
jmp 0x4ed886
sub eax, 4
mov dword [0x4e0778], eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx], eax
jmp 0x4ed881
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
and dword [ecx], eax
jmp 0x4ed881
cmp ecx, 0x3dc8
je 0x4edae4
cmp ecx, 0x5211
jne 0x4ed886
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.004ed700
add esp, 0xc
jmp 0x4ed881
push esi
push edx
call fcn.004ed760
mov cx, word [0x4eae62]
mov edx, dword [0x4eae58]
dec eax
push eax
push ecx
push edx
call fcn.004ed700
add esp, 0x14
jmp 0x4ed881
cmp ecx, 0x9b73
jg 0x4edc96
je 0x4edc66
cmp ecx, 0x7123
jg 0x4edbe8
je 0x4edb9a
sub ecx, 0x654d
je 0x4edb83
sub ecx, 0x5e
je 0x4edb53
sub ecx, 0x3df
jne 0x4ed886
push 0
push esi
push edx
call fcn.004ed700
add esp, 0xc
jmp 0x4ed881
mov edx, dword [eax]
xor ecx, ecx
mov cx, si
add eax, 4
cmp edx, ecx
mov dword [0x4e0778], eax
je 0x4ed886
sub eax, 4
mov dword [0x4e0778], eax
mov dword [eax], ebp
mov eax, dword [0x4eae58]
mov dword [0x4e077c], eax
jmp 0x4ed881
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
or dword [ecx], eax
jmp 0x4ed881
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x4edbb6
cmp ecx, 0x28e
jne 0x4edbcb
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x4edbbe
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x4eae58]
mov eax, dword [0x4e0778]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x4e0778], eax
jne 0x4ed886
mov dword [0x4e077c], edx
jmp 0x4ed886
cmp ecx, 0x74bb
je 0x4edc4f
cmp ecx, 0x8109
je 0x4edc1f
cmp ecx, 0x9104
jne 0x4ed886
push esi
push edx
call fcn.004ed760
mov edx, eax
mov eax, dword [0x4e0778]
add esp, 8
imul edx, dword [eax]
mov dword [eax], edx
jmp 0x4ed881
mov edx, dword [eax]
xor ecx, ecx
mov cx, si
add eax, 4
cmp edx, ecx
mov dword [0x4e0778], eax
jne 0x4ed886
sub eax, 4
mov dword [0x4e0778], eax
mov dword [eax], ebp
mov eax, dword [0x4eae58]
mov dword [0x4e077c], eax
jmp 0x4ed881
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
xor dword [ecx], eax
jmp 0x4ed881
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ecx
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx + 0x10], eax
mov eax, dword [0x4e0778]
add eax, 0x10
mov dword [0x4e0778], eax
jmp 0x4ed886
cmp ecx, 0xbed7
jg 0x4edd4a
je 0x4edd2a
cmp ecx, 0xaa61
je 0x4edcfe
cmp ecx, 0xb323
je 0x4edcd6
cmp ecx, 0xba51
jne 0x4ed886
mov eax, dword [eax]
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx], eax
jmp 0x4ed881
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
push ecx
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx + 8], eax
mov eax, dword [0x4e0778]
add eax, 8
mov dword [0x4e0778], eax
jmp 0x4ed886
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push ecx
push eax
call edx
mov ecx, dword [0x4e0778]
mov dword [ecx + 0xc], eax
mov eax, dword [0x4e0778]
add eax, 0xc
mov dword [0x4e0778], eax
jmp 0x4ed886
sub eax, 4
mov dword [0x4e0778], eax
mov dword [eax], ebp
mov edx, dword [0x4eae58]
mov eax, dword [0x4e0778]
mov dword [0x4e077c], edx
jmp 0x4ed886
cmp ecx, 0xcd03
je 0x4edd7d
cmp ecx, 0xfb52
jne 0x4ed886
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
mov esi, eax
xor edx, edx
add esp, 8
mov eax, dword [ecx]
div esi
mov dword [ecx], eax
jmp 0x4ed881
push esi
push edx
call fcn.004ed760
mov ecx, dword [0x4e0778]
add esp, 8
sub ecx, 4
mov dword [0x4eae58], eax
mov dword [0x4e0778], ecx
mov dword [ecx], eax
jmp 0x4ed881
xor eax, eax
mov ax, si
pop esi
cmp eax, 0xb
mov dword [0x4ea994], eax
pop ebp
ja case.default.0x4eddbb
xor edx, edx
mov dl, byte [eax + 0x4ede40]
jmp dword [edx*4 + 0x4ede30]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
push eax
push ecx
push edx
call dword [0x4dfba0]
ret 0xc
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov dword [0x4ea994], 2
and word [0x4dd004], 0xfffe
push 0
push 0
push 0x4ea9cc
call fcn.004f0220
push 0x2010
call fcn.004ed060
push eax
call fcn.004eeb20
mov al, byte [0x4dd004]
add esp, 8
test al, 1
jne 0x4ede2b
mov eax, dword [0x4ea994]
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
ret 0xc