Function at 0x4bf2c0
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
sub esp, 0x14
push ebx
mov eax, edx
mov dword [esp + 4], ecx
push ebp
mov ebp, dword [esp + 0x34]
push esi
mov esi, dword [ecx + eax*4 + 0x170]
mov dword [esp + 0x10], eax
push edi
mov eax, dword [esi + 0x5c]
mov dword [esp + 0x18], eax
inc eax
mov dword [esi + 0x5c], eax
lea eax, [ebp + 0x2e]
push eax
call fcn.0058db11
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4bf63b
xor eax, eax
mov dword [ebx + 0xe], 0
mov dword [ebx + 6], eax
mov dword [ebx], eax
lea eax, [ebp + 0x1c]
mov word [ebx + 4], ax
call fcn.004b48f0
mov ecx, dword [esp + 0x10]
mov dword [ebx + 0xa], eax
mov eax, dword [esp + 0x2c]
movzx edi, ax
mov eax, dword [esp + 0x14]
push edi
mov dword [esp + 0x40], edi
mov eax, dword [ecx + eax*4 + 0x170]
mov esi, dword [eax + 0x78]
mov eax, dword [esi + 8]
call eax
mov ecx, dword [esi]
add esp, 4
lea ecx, [ecx + eax*8]
mov eax, dword [ecx]
cmp eax, dword [esp + 0x3c]
jne 0x4bf356
mov eax, dword [ecx + 4]
mov dword [esp + 0x1c], eax
jmp 0x4bf386
test eax, eax
jns 0x4bf37e
mov ecx, dword [ecx + 4]
lea eax, [esp + 0x3c]
push eax
mov edx, 0x4b3e60
call fcn.004b3530
add esp, 4
test eax, eax
je 0x4bf37e
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x1c], eax
jmp 0x4bf386
mov dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
push edi
mov dword [esp + 0x40], edi
mov eax, dword [ecx + eax*4 + 0x170]
mov esi, dword [eax + 0x7c]
mov eax, dword [esi + 8]
call eax
mov ecx, dword [esi]
add esp, 4
mov edx, dword [ecx + eax*8]
cmp edx, dword [esp + 0x3c]
jne 0x4bf3b6
mov edx, dword [ecx + eax*8 + 4]
jmp 0x4bf3dd
test edx, edx
jns 0x4bf3db
mov ecx, dword [ecx + eax*8 + 4]
lea esi, [esp + 0x3c]
push esi
mov edx, 0x4b3e60
call fcn.004b3530
add esp, 4
test eax, eax
je 0x4bf3db
mov eax, dword [eax]
mov edx, dword [eax + 4]
jmp 0x4bf3dd
xor edx, edx
mov eax, dword [esp + 0x1e]
lea edi, [ebx + 0x1e]
mov esi, dword [sym.imp.WS2_32.dll_htons]
mov ecx, eax
shl ecx, 5
and eax, 0xff80
or ecx, eax
shr edx, 0x10
mov al, byte [esp + 0x28]
and edx, 0x1fff
shl ecx, 8
or ecx, edx
mov dword [esp + 0x3c], edi
or word [ebx + 8], cx
mov byte [edi], 0
mov byte [edi + 1], al
lea eax, [ebp + 0x10]
push eax
call esi
push dword [esp + 0x18]
mov word [edi + 2], ax
mov edi, dword [sym.imp.WS2_32.dll_htonl]
call edi
push dword [esp + 0x2c]
mov dword [ebx + 0x22], eax
call esi
push dword [esp + 0x30]
mov word [ebx + 0x26], ax
call esi
push dword [esp + 0x34]
mov word [ebx + 0x28], ax
call edi
push ebp
push dword [esp + 0x3c]
lea esi, [ebp + 0x10]
mov dword [ebx + 0x2a], eax
lea ecx, [ebx + 0x2e]
mov edx, esi
call fcn.00401000
mov edi, dword [esp + 0x1c]
add esp, 8
mov edx, dword [esp + 0x10]
mov eax, dword [edx + edi*4 + 0x170]
cmp dword [eax + 0x50], ebp
jl 0x4bf5f5
cmp ebp, dword [eax + 0x54]
jg 0x4bf5f5
cmp word [eax + 0xc8], 0
jne 0x4bf5f5
mov eax, dword [ebx + 0xa]
mov dword [ebx + 0xe], eax
mov ecx, dword [edx + edi*4 + 0x170]
cmp dword [ecx + 0x114], 0
jne 0x4bf4ac
mov dword [ecx + 0x114], eax
mov eax, dword [edx + edi*4 + 0x170]
sub dword [eax + 0x50], ebp
mov eax, dword [edx + edi*4 + 0x170]
sub dword [eax + 0x54], ebp
mov eax, dword [edx + edi*4 + 0x170]
mov ecx, dword [eax + 0xc4]
test ecx, ecx
jne 0x4bf4d9
mov dword [eax + 0xc0], ebx
jmp 0x4bf4db
mov dword [ecx], ebx
mov eax, dword [edx + edi*4 + 0x170]
mov dword [eax + 0xc4], ebx
mov eax, dword [edx + edi*4 + 0x170]
inc word [eax + 0xb8]
mov ecx, dword [edx + edi*4 + 0x170]
movzx eax, word [ebx + 4]
sub eax, 0x1c
add dword [ecx + 0xbc], eax
mov al, byte [esp + 0x28]
and al, 3
cmp al, 3
jne 0x4bf5d7
mov ecx, dword [edx + edi*4 + 0x170]
mov edx, dword [ecx + 0xe8]
test edx, edx
jle 0x4bf5d7
lea eax, [ebp + 0x14]
add eax, edx
cmp dword [ecx + 0xec], eax
jle 0x4bf5d7
cmp eax, 0x578
jge 0x4bf5d7
mov ecx, dword [ecx + 0xe4]
call fcn.004bbb00
mov ebx, dword [esp + 0x10]
mov edx, esi
push esi
push dword [esp + 0x40]
mov ecx, dword [ebx + edi*4 + 0x170]
mov dword [ecx + 0xe8], eax
mov eax, dword [ebx + edi*4 + 0x170]
mov ecx, dword [eax + 0xe8]
add ecx, dword [eax + 0xe4]
call fcn.00401000
mov ecx, dword [ebx + edi*4 + 0x170]
add esp, 8
and esi, reloc.WS2_32.dll_closesocket
jns 0x4bf59b
dec esi
or esi, 0xfffffffc
inc esi
mov eax, 4
sub eax, esi
and eax, reloc.WS2_32.dll_closesocket
jns 0x4bf5ae
dec eax
or eax, 0xfffffffc
inc eax
add eax, 0x10
add eax, ebp
add dword [ecx + 0xe8], eax
mov eax, dword [ebx + edi*4 + 0x170]
mov eax, dword [eax + 0xe4]
or dword [eax + 8], 1
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov ecx, dword [esp + 0x10]
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebx + 0x12]
mov edx, edi
push eax
call fcn.004bf010
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
mov ecx, dword [eax + 0xd4]
test ecx, ecx
jne 0x4bf607
mov dword [eax + 0xd0], ebx
jmp 0x4bf609
mov dword [ecx], ebx
mov eax, dword [edx + edi*4 + 0x170]
mov dword [eax + 0xd4], ebx
mov eax, dword [edx + edi*4 + 0x170]
inc word [eax + 0xc8]
mov eax, dword [edx + edi*4 + 0x170]
pop edi
pop esi
add dword [eax + 0xcc], ebp
xor eax, eax
pop ebp
pop ebx
add esp, 0x14
ret
push 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xc9b
mov edx, 0x62720c
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0xfe
call fcn.005885bd
int3