Function at 0x4ceeb0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push 0x567fbc
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_InterlockedExchangeAdd]
test eax, eax
jle 0x4cef1e
mov eax, dword [0x896a94]
mov dword [ebp - 0x18], eax
mov eax, dword [0x896a88]
push 6
mov dword [ebp - 0x10], eax
pop esi
push dword [0x896a84]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x38], 0x40
call fcn.00477c73
pop ecx
pop ecx
cmp eax, esi
je 0x4cf17b
call fcn.0044dbe1
test al, al
jne 0x4cf17b
call fcn.0044dbd9
mov ecx, edi
cmp byte [0x8901f9], bl
je 0x4cef49
push 4
call fcn.004cc088
mov byte [0x8901f9], bl
jmp 0x4cef53
push 0x200
call fcn.004cc088
call fcn.0046a05b
movzx eax, ax
cmp eax, dword [0x88f870]
jne 0x4cef6a
xor cl, cl
call fcn.0046a0ab
call fcn.004941ab
call fcn.004781bb
mov ecx, edi
call fcn.004cd148
call fcn.004c81a8
lea ecx, [edi + 0x48]
call fcn.00430fbb
mov ecx, edi
call fcn.004ced3e
mov cl, 1
call fcn.00498a8a
call fcn.0047cfd9
call fcn.0043fbb9
xor edx, edx
xor cl, cl
call fcn.0043dc1f
mov eax, dword [0x88e088]
or byte [eax + 0x24], 1
mov eax, dword [0x88e07c]
cmp eax, ebx
je 0x4cefbf
or byte [eax + 0x24], 1
mov eax, dword [0x88e08c]
or byte [eax + 0x1c], 1
mov eax, dword [0x88e078]
cmp eax, ebx
je 0x4cefd5
or byte [eax + 0x1c], 1
mov ecx, dword [0x567dd8]
cmp ecx, ebx
je 0x4cefe5
push ebx
call fcn.0047dc20
mov ecx, dword [0x567ddc]
cmp ecx, ebx
je 0x4ceff5
push ebx
call fcn.0047dc20
call fcn.0047cff8
push ebx
push dword [edi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x88f7f0]
cmp ecx, ebx
je 0x4cf022
mov esi, ecx
call fcn.00408109
push esi
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov dword [0x88f7f0], ebx
mov ecx, dword [edi + 0x40]
cmp ecx, ebx
je 0x4cf033
mov dword [edi + 0x40], ebx
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
mov ecx, 0x89049c
call fcn.004a0bd2
push ebx
push ebx
xor edx, edx
mov cl, 0xa
call fcn.00443195
push ebx
xor dl, dl
mov ecx, eax
call fcn.004443b8
mov dword [ebp - 8], ebx
mov byte [ebp - 1], bl
call fcn.004a65da
inc dword [ebp - 8]
mov esi, eax
mov eax, dword [0x5599bc]
mov dword [ebp - 0xc], esi
cmp eax, ebx
je 0x4cf082
imul eax, eax, 0x3e8
push 0x32
cdq
pop ecx
idiv ecx
cmp dword [ebp - 8], eax
jl 0x4cf082
and esi, 0xfffffff7
cmp byte [0x5599b5], bl
je 0x4cf09a
cmp dword [ebp - 8], 0xc8
jl 0x4cf0a5
cmp esi, 1
jne 0x4cf0a5
jmp 0x4cf0a3
cmp dword [ebp - 8], 0xc8
jl 0x4cf0a5
xor esi, esi
push dword [ebp - 8]
call fcn.00466ca2
add esp, 4
test byte [ebp - 0xc], 2
jne 0x4cf0ce
cmp byte [ebp - 1], bl
jne 0x4cf0ce
mov cl, 1
call fcn.004ca08c
push dword [edi + 4]
mov byte [ebp - 1], al
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp esi, ebx
je 0x4cf0df
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4cf058
cmp byte [ebp - 1], bl
jne 0x4cf0fd
xor cl, cl
call fcn.004ca08c
xor dl, dl
mov cl, 1
call fcn.004a3afc
xor dl, dl
mov cl, 1
call fcn.004a3cf5
call fcn.0047cfd9
mov ecx, dword [0x88e088]
push ebx
call fcn.0047dc20
mov ecx, dword [0x88e07c]
cmp ecx, ebx
je 0x4cf11e
push ebx
call fcn.0047dc20
mov ecx, dword [0x88e08c]
push ebx
call fcn.0047dc20
mov ecx, dword [0x88e078]
cmp ecx, ebx
je 0x4cf13a
push ebx
call fcn.0047dc20
call fcn.0047cff8
xor cl, cl
call fcn.004cb8c2
cmp byte [ebp + 8], bl
je 0x4cf168
push dword [0x88f6a4]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [0x88f6a4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00435a53
xor edx, edx
mov ecx, 0x107
call fcn.004c9f62
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
pop edi
pop esi
pop ebx
leave
ret 4