Function at 0x4dad90
Capabilities:
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x360]
jne 0x4dae18
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 8
je 0x4dadd1
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 9
je 0x4dadd1
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 0xa
jne 0x4dadd3
jmp 0x4dae04
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4dadeb
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4dae04
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
jmp 0x4daff3
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x35c]
jne 0x4dae4a
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 4]
call fcn.005001dc
jmp 0x4daff3
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x364]
jne 0x4daf4d
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 2
je 0x4dae7a
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 1
jne 0x4daed1
push 1
push 0
mov ecx, dword [ebp - 4]
call fcn.00500360
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x358]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.004da7d0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
push 1
push 0x676507
push str.Close
push str.CrashRate
call fcn.004dcb80
mov ecx, eax
call fcn.004dcc20
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 8
je 0x4daef5
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 9
je 0x4daef5
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 0xa
jne 0x4daf01
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
jmp 0x4daf48
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4daf19
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4daf3e
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
jmp 0x4daf48
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
jmp 0x4daff3
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x368]
jne 0x4daff3
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 8
je 0x4daf89
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 9
je 0x4daf89
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 0xa
jne 0x4dafae
push 0
push 0
push 0x403
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x358]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
jmp 0x4dafe9
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4dafc6
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4dafe9
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffdf7
mov esp, ebp
pop ebp
ret 4