Function at 0x4826fb
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 0xa0], 0x4dfa9e
mov dword [ebp - 0x9c], 0
mov dword [esp], 0
lea eax, [ebp - 0x9c]
mov dword [esp + 4], eax
call fcn.00482639
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x90], eax
add esp, 0xfffffff8
mov eax, dword [ebp - 0x90]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00482639
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
test eax, eax
je 0x482851
push eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call fcn.004823c6
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov byte [ebp - 0xa4], al
movzx eax, byte [ebp - 0xa4]
movzx eax, al
mov edx, dword [ebp - 0x7c]
movzx edx, byte [edx]
movzx edx, dl
cmp eax, edx
je 0x482802
movzx eax, byte [ebp - 0xa4]
movzx eax, al
mov edx, 1
add edx, dword [ebp - 0x7c]
movzx edx, byte [edx]
movzx edx, dl
cmp eax, edx
je 0x482802
push eax
mov dword [esp], 0
mov eax, dword [sym.imp.kernel32.dll_ExitProcess]
call eax
push eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call fcn.00482588
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
mov eax, 4
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x7c]
mov edx, dword [edx]
cmp eax, edx
je 0x482851
mov eax, dword [ebp - 0x44]
mov edx, 4
add edx, dword [ebp - 0x7c]
mov edx, dword [edx]
cmp eax, edx
je 0x482851
push eax
mov dword [esp], 0
mov eax, dword [sym.imp.kernel32.dll_ExitProcess]
call eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 4
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x60], eax
add esp, 0xfffffff0
mov dword [esp], 0
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
mov eax, dword [sym.imp.kernel32.dll_VirtualAlloc]
call eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x48]
cmp eax, edx
jae 0x482918
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x50]
add edx, dword [eax]
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x74]
mov dword [eax], edx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], eax
jmp 0x4828cc
add esp, 0xfffffff8
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
call fcn.0048245e
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x482a94
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x54]
add esp, 0xfffffff0
mov edx, dword [ebp - 0x68]
mov dword [esp], edx
mov edx, dword [ebp - 0x30]
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 8], edx
lea edx, [ebp - 0x64]
mov dword [esp + 0xc], edx
call eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x94]
mov dword [ebp - 0x58], eax
mov eax, 4
add eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x6c], 8
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x20]
cmp eax, edx
jae 0x482a00
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x50]
add edx, dword [eax]
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x68]
mov dword [eax], edx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], eax
jmp 0x4829c0
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov edx, 8
add edx, dword [ebp - 0x68]
mov dword [edx], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x54]
add esp, 0xfffffff0
mov edx, dword [ebp - 0x68]
mov dword [esp], edx
mov edx, dword [ebp - 0x14]
mov dword [esp + 4], edx
mov edx, dword [ebp - 0x64]
mov dword [esp + 8], edx
lea edx, [ebp - 0x64]
mov dword [esp + 0xc], edx
call eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x68]
mov edx, 0xc
add edx, dword [ebp - 0x68]
add eax, dword [edx]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov edx, dword [ebp - 0x68]
mov dword [esp], edx
call eax
add esp, 4
push eax
mov dword [esp], 0
mov eax, dword [sym.imp.kernel32.dll_ExitProcess]
call eax
nop
outsd dx, dword [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
dec eax
outsd dx, dword [esi]
je 0x482abd
je 0x482b24
push esi
jb 0x482b25
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
push eax
jne 0x482b2d
push 0x74146465
adc al, 0x74
ja 0x482b17
jb 0x482b38
push ebx
arpl word [edx + 0x6f], si
insb byte es:[edi], dx
insb byte es:[edi], dx
inc esp
imul esi, dword [ebx + 0x61], 0x64656c62
adc dword [edi + esi*2 + 0x56], esi
jb 0x482b4d
push esp
push 0x4e626d75
outsd dx, dword [esi]
jb 0x482b4f
popal
insb byte es:[edi], dx
push cs
je 0x482b5e
push esi
jb 0x482b5f
push esp
push 0x48626d75
outsd dx, dword [esi]
je 0x482b05
je 0x482b6d
push esi
jb 0x482b6e
push esp
push 0x50626d75
jne 0x482b75
push 0x74136465
ja 0x482b5f
adc esi, dword [edi + esi*2 + 0x56]
jb 0x482b80
push esp
push 0x44626d75
imul esi, dword [ebx + 0x61], 0x64656c62
or byte [edi + esi*2 + 0x44], dh
or byte fs:[edi + esi*2 + 0x44], dh
imul esp, dword [ecx + 0x6c], 0x7417676f
ja 0x482b69
inc ebx
popal
jo 0x482b9d
imul ebp, dword [edi + 0x6e], 0x697a6953
outsb dx, byte [esi]
push esp
insd dword es:[edi], dx
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
jo 0x482ba3
popal
je 0x482b9f
sbb al, 0x74
ja 0x482b91
insd dword es:[edi], dx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc ebx
popal
jo 0x482bba
imul ebp, dword [edi + 0x6e], 0x697a6953
outsb dx, byte [esi]
push esp
push esp
insd dword es:[edi], dx
jo 0x482bc0
popal
je 0x482bbc
sbb dword [edi + esi*2 + 0x46], esi
jb 0x482bbe
insd dword es:[edi], dx
dec esp
dec esp
je 0x482bb7
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
push esp
insd dword es:[edi], dx
jo 0x482bda
insb byte es:[edi], dx
popal
je 0x482bd6
push ds
je 0x482beb
push ebx
insd dword es:[edi], dx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc esi
jb 0x482bdd
insd dword es:[edi], dx
dec esp
je 0x482bd6
je 0x482bd6
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
jo 0x482bf9
popal
je 0x482bf5
sbb dh, byte [edi + esi*2 + 0x46]
je 0x482c0a
inc esi
jb 0x482bf7
insd dword es:[edi], dx
push edx
imul esp, dword [edi + 0x68], 0x7a695374
imul ebp, dword [esi + 0x67], 0x706d6554
insb byte es:[edi], dx
push ebx
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
jp 0x482c0a
outsb dx, byte [esi]
push esp
push esp
insd dword es:[edi], dx
jo 0x482c14
popal
je 0x482c10
pop ds
je 0x482c25
push ebx
insd dword es:[edi], dx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc esi
jb 0x482c17
insd dword es:[edi], dx
push edx
imul esp, dword [edi + 0x68], 0x7a695374
push 0x7a695374
je 0x482c11
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
jo 0x482c34
imul ebp, dword [esi + 0x67], 0x706d6554
insb byte es:[edi], dx
popal
je 0x482c30
sbb esi, dword [edi + esi*2 + 0x46]
jb 0x482c32
insd dword es:[edi], dx
inc edx
outsd dx, dword [esi]
je 0x482c4b
je 0x482c47
outsd dx, dword [esi]
insd dword es:[edi], dx
push ebx
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
outsb dx, byte [esi]
push esp
insd dword es:[edi], dx
jo 0x482c50
popal
je 0x482c4c
and byte [edi + esi*2 + 0x53], dh
insd dword es:[edi], dx
popal
insb byte es:[edi], dx
insb byte es:[edi], dx
inc esi
jb 0x482c53
insd dword es:[edi], dx
inc edx
outsd dx, dword [esi]
je 0x482c6c
je 0x482c68
outsd dx, dword [esi]
insd dword es:[edi], dx
push ebx
imul edi, dword [edx + 0x69], 0x6554676e
insd dword es:[edi], dx
jo 0x482c71
popal
je 0x482c6d
push es
push esp
push 0x73656d65
add al, byte [eax]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], bl
sub al, 0x48
sbb byte [eax + ecx*2], ch
add byte [0x6854540a], cl
insd dword es:[edi], dx
inc esp
popal
je 0x482c85
pushal
add byte [eax], al
add byte [eax], bl
add byte [eax], al
add al, bh
adc byte [eax], al
add dword [edi + edi*8 + 0x47], ebp
inc dword [edi]
add al, byte [eax]
add byte [esp + ebp], bh
add byte [edx], al
add byte [eax], al
cmp al, 0x2c
dec eax
add byte [edx + 0x65685450], dl
insd dword es:[edi], dx
inc ebp
insb byte es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x482c91
inc esp
je 0x482cb1
imul ebp, dword [ebx + esi*2 + 0x5c], 0x200482c
pop esp
sub al, 0x48
add byte [edx], al
add byte [eax], al
add byte [eax], al
pushal
sub al, 0x48
add byte [esi], cl
adc eax, 0x65685454
insd dword es:[edi], dx
inc ebp
inc ebp
insb byte es:[edi], dx
insd dword es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x482cb5
je 0x482cd5
imul ebp, dword [ebx + esi*2 + 0xc], 0
add byte [eax], al
add byte [eax], al
add eax, dword [eax]
add byte [eax], al
insb byte es:[edi], dx
inc dword [edi]
add byte [eax], al
add byte [eax], al
add al, byte [edi]
inc ebp
insb byte es:[edi], dx
insd dword es:[edi], dx
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x482c98
add byte [eax + edx + 0x40040], bl
adc byte [eax], al
add al, 0
add byte [eax], al
add al, byte [eax + edx*2]
popal
jb 0x482d19
add al, byte [eax]
pushfd
adc byte [eax], al
or byte [eax], al
add byte [eax], al
add al, byte [0x74617453]
push ebx
je 0x482d15
je 0x482d1b
add al, byte gs:[eax]
add al, byte [eax]
add al, byte [eax]
add byte [eax], al
adc al, 0x2d
dec eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add ah, bh
cmp al, 0x48
add byte [ebp + 0x2d9e0048], bl
dec eax
add byte [eax], al
add byte [eax], al
add dl, bh
sub eax, 0x48
add byte [eax], al
cli
dec eax
add byte [eax + eax], dh
add byte [eax + 0x14], bl
inc eax
add byte [eax + 0x4f], cl
inc eax
add byte [eax + 0x4f], dl
inc eax
add byte [eax + 0x51], dl
inc eax
add byte [eax + 0x51], cl
inc eax
add byte [eax + 0x51], ch
inc eax
add byte [ecx + edx*2 + 0x40], ch
add byte [eax + 0x51], dh
inc eax
add byte [ecx + edx*2 + 0x40], ah
add byte [esi + ecx*2], ah
inc eax
add byte [eax + 0x4e], al
inc eax
add byte [eax + eax*2 + 0x41340048], dh
inc ecx
dec eax
add byte [eax], dh
inc eax
dec eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [0x10000000], al
inc eax
add byte [eax + eax], al
add byte [eax], al
or al, 0x46
dec esi
ja 0x482d76
outsd dx, dword [esi]
insd dword es:[edi], dx
inc ebx
je 0x482daa
insb byte es:[edi], dx
jae 0x482d3d
add byte [eax], al
add byte [eax], dl
inc eax
add byte [0x10000000], al
inc esi
push esp
push 0x73656d65
inc ecx
jbe 0x482db1
imul ebp, dword [ecx + 0x62], 0x2656c
add byte [eax], al
adc byte [eax], al
push es
add byte [eax], al
add byte [edx], cl
inc esi
push ebp
jae 0x482dcb
push esp
push 0x73656d65
add al, byte [eax]
add byte [esp + ebp], dl
dec eax
add byte [eax], cl
add byte [eax], al
add byte [edx], cl
inc esi
push esp
push 0x44656d65
popal
je 0x482de3
add al, byte [eax]
add byte [esp + ebp*8], al
inc edx
add byte [eax], ch
add byte [eax], al
push cs
inc esi
dec edi
outsb dx, byte [esi]
push esp
push 0x43656d65
push 0x65676e61
add al, byte [eax]
add byte [eax], al
sub eax, dword [eax]
or dword [edi], ebp
dec eax
add byte [eax + eax + 1], cl
add byte [edi], ch
das
das
dec eax
add byte [ebp], cl
invalid
call dword [esi + 0x2f]
dec eax
add byte [edx], al
hlt
xor byte [eax], cl
inc edx
add ah, dh
call dword [ebp + 0x42004830]
add ah, dh
invalid
xor dword [eax], ecx
inc edx
add ah, dh
invalid