Function at 0x484fb9
Capabilities:
Terminate process

Disassembly:
jne 0x484fcb
test edi, edi
and eax, ecx
jle 0x484fc9
pop edi
arpl word [ecx + 0x4e], bp
pop esi
mov ecx, edi
push eax
mul ecx
mov dword [ebp - 0x28], edi
pop ecx
cmp eax, ecx
mov eax, dword [ebp + 0x14]
test al, al
jne 0x484ff4
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jne 0x484ff0
cmp dword [esi], 1
pop ebx
cmp dword [ecx], 0xc0000093
and eax, ecx
add dword [ebx - 0x7f], ebx
cmp dword [ebx + 0x23c00000], edx
rol dword [eax + eax*8 + 0x60446744], 0x59
pop ecx
xchg ebx, eax
add byte [eax], al
shl byte [ebx], 0xc1
test al, al
inc esp
inc esp
pushal
dec ebp
jns 0x4850b1
js 0x4850c6
push eax
inc eax
dec esp
push esp
pop ebp
pop ebx
pop edx
pop eax
dec edi
push ebx
inc esi
push edx
imul ebp, dword [edi + 0x5a], 0x44
inc esp
inc edx
inc ecx
insd dword es:[edi], dx
push edx
push edi
imul ebx, dword [ebx + edx*2 + 0x79], 0x6a5f6d4e
inc ecx
pop esp
dec ebp
inc edx
dec ebp
outsd dx, dword [esi]
push esi
push ecx
push eax
push ecx
pop edx
inc edi
pop ebp
dec ebx
imul edx, dword [edi + eax*2 + 0x45], 0x6b626160
pop esp
inc ebp
popal
popal
insd dword es:[edi], dx
bound ebp, qword [edx + 0x55]
push esp
inc edx
cmp ebp, 0x51db4429
jne 0x4850e1
pmovmskb ecx, xmm2
movzx edx, byte [ecx]
push 0x422238
push 4
inc edx
add byte [edx + 4], ch
jmp 0x48506d
add esp, 0x10
push dword [ebp - 0x20]
mov edx, 9
call fcn.0048578e
pop ecx
mov dword [esi + 0x28], ebx
and ecx, eax
cmp dword [ebp + 8], 0
push dword [di + 0xc]
push dword [ebp + 0xc]
cmp dword [esp + 0x10], 0xa6d95d27
cmove edx, ecx
movzx eax, byte [ecx + 0x308]
and al, 0x10
daa
pop ebp
fldenv [esi + 0xfd1440f]
mov dh, 0x81
or byte [ebx], al
add byte [eax], al
push dword [ebp - 4]
cmp dword [esp - 0xc], 0x39390f97
jne 0x48512d
dec ebp
inc ecx
jns 0x48516e
push 0x44
dec ebx
pop esi
pop edi
pop eax
push ebp
pop ecx
popal
dec ecx
dec eax
push ebx
push esp
popal
jnp 0x485170
dec ebx
js 0x485175
dec ecx
pop ebp
insb byte es:[edi], dx
pushal
inc esi
popal
inc ecx
dec ecx
js 0x485173
inc esp
push eax
cmp dword [esp - 0x1c], 0xa3b68a63
cmove ebx, esi
push ebx
cmp ebx, 0x8c18f2bb
cmove esi, eax
push edx
cmp ecx, 0xefaa303d
je 0x4b247f
push edi
cmp dword [esp + 0x64], 0x87a81863
je 0x4850e6
call fcn.004851a5
jnp 0x4851cc
dec esi
dec esi
push ebx
inc ebp
dec ecx
outsb dx, byte [esi]
inc edx
push ebx
dec bx
insd dword es:[edi], dx
insd dword es:[edi], dx
inc ebx
dec esp
pop ecx
push 0x54
dec edi
imul ebp, dword [si + 0x52], 0x55
push ecx
imul ebp, dword [edx + edx*2 + 0x55], 0x51
outsb dx, byte fs:[esi]
pop edi
pop esi
pop ecx
push ebp
push ebp
dec esi
dec ebp
outsb dx, byte [esi]
pop esi
pop edi
push edi
push edi
pop ecx
push 0x6f
inc ebp
insb byte es:[edi], dx
inc ebp
inc ebp
jns 0x4851fd
dec esi
push eax
inc ebx
pop edi
bound eax, qword [ebx + 0x4b]
inc edx
dec ebp
push 0x60
pushal
inc ebp
pop edx
inc ebp
bound ebx, qword [edx - 1]
push dword [esp]
push ebx
push esi
pop esi
pop ecx
push ecx
insd dword es:[edi], dx
arpl word [edx + 0x65], dx
dec esp
outsd dx, dword [esi]
push ebx
bound edi, qword [ecx + 0x48]
insd dword es:[edi], dx
push esp
push ecx
inc esp
dec edx
dec esp
jns 0x485238
dec ecx
dec ebp
pop eax
jns 0x485232
push ebx
pop edx
pop eax
dec dx
imul edi, dword fs:[ecx + 0x78], 0x465d5c52
insd dword es:[edi], dx
pop edx
pop esi
push edi
dec esi
insb byte es:[edi], dx
push edi
pop eax
inc esp
arpl word [ecx + 0x56], bx
pop ebp
dec esp
dec edi
jnp 0x485265
inc ebp
pop edx
arpl word [ebx + ebp*2 + 0x6e], dx
dec edx
pop ecx
inc ebp
pushaw
inc ecx
push edx
dec ecx
outsd dx, dword [esi]
dec edx
js 0x48526c
pushal
pushal
jnp 0x4851a0
jl 0x485245
sub byte [ecx + 0xff24d43], 0x85
cmp byte [eax], al
add byte [eax], al
pop edi
push esi
pop esp
dec ebp
push 0x6c
push esp
pop esp
insd dword es:[edi], dx
pop edx
outsd dx, dword [esi]
dec edi
insb byte es:[edi], dx
push ebx
bound eax, qword [ecx + 0x50]
push esi
push esi
inc ecx
popal
jns 0x4852b0
arpl word [edx + 0x4a], sp
insd dword es:[edi], dx
inc ebp
inc edi
pop esi
insb byte es:[edi], dx
les ebx, [eax]
dec ebp
add al, 0x79
mov al, byte [0xe91f7c52]
wait
add byte [eax], al
add byte [ebx - 0x7ea13c01], cl
invalid
cmove edx, ecx
pop ebx
cmp ebx, 0xcf8ce9b5
je 0x470c2b
leave
cmp dword [esp + 0x18], 0xc56335d
cmove ebx, esi
ret
pop ecx
pop esp
push ebx
dec eax
push ecx
pop edx
insd dword es:[edi], dx
js 0x4b24e4
arpl word [eax + edi*2 + 0x5b], ax
pop edx
push esi
pushal
insb byte es:[edi], dx
invalid
dec esi