Function at 0x4daaa0
Capabilities:
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 4], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x108]
cmp edx, dword [ecx + 0x360]
jne 0x4dab28
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 8
je 0x4daae1
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 9
je 0x4daae1
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 0xa
jne 0x4daae3
jmp 0x4dab14
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4daafb
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4dab14
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
jmp 0x4dad03
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x35c]
jne 0x4dab5a
push 0
push 0xf020
push 0x112
mov ecx, dword [ebp - 4]
call fcn.004fff30
jmp 0x4dad03
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x364]
jne 0x4dac5d
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 2
je 0x4dab8a
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 1
jne 0x4dabe1
push 1
push 0
mov ecx, dword [ebp - 4]
call fcn.005000b5
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x358]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.004da4e0
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
push 1
push 0x676506
push str.Close
push str.CrashRate
call fcn.004dc890
mov ecx, eax
call fcn.004dc930
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 8
je 0x4dac05
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 9
je 0x4dac05
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 0xa
jne 0x4dac11
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
jmp 0x4dac58
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4dac29
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4dac4e
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
jmp 0x4dac58
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
jmp 0x4dad03
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 4]
mov eax, dword [ecx + 0x108]
cmp eax, dword [edx + 0x368]
jne 0x4dad03
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 8
je 0x4dac99
mov edx, dword [ebp - 4]
cmp dword [edx + 0x370], 9
je 0x4dac99
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 0xa
jne 0x4dacbe
push 0
push 0
push 0x403
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x358]
push edx
call dword [sym.imp.USER32.dll_PostMessageW]
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
jmp 0x4dacf9
mov eax, dword [ebp - 4]
cmp dword [eax + 0x370], 7
je 0x4dacd6
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x370], 6
jne 0x4dacf9
push 0
push 0
push 0x404
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x358]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 1
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
push 2
mov ecx, dword [ebp - 4]
call fcn.004ffb4b
mov esp, ebp
pop ebp
ret 4