Function at 0x436b03
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x4e22e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov word [ebp - 0x11c], ax
lea edi, [ebp - 0x11a]
xor ebx, ebx
push 0x103
stosw word es:[edi], ax
lea eax, [ebp - 0x10f]
push ebx
push eax
mov esi, ecx
mov byte [ebp - 0x110], bl
call fcn.00401f80
add esp, 0xc
mov edx, esi
call fcn.00439e45
test eax, eax
jne 0x436e06
push esi
mov ecx, 0x104
lea eax, [ebp - 0x110]
call fcn.00438c78
pop ecx
mov esi, 0x4c0778
push esi
push eax
mov dword [ebp - 0x120], ebx
call fcn.00401b10
pop ecx
pop ecx
test eax, eax
je 0x436bbf
push esi
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x114], ebx
call fcn.004392be
pop ecx
cmp eax, ebx
je 0x436bbf
push esi
lea eax, [ebp - 0x114]
xor ecx, ecx
call fcn.004392be
pop ecx
cmp eax, ebx
je 0x436bbf
push eax
call fcn.00403367
pop ecx
mov dword [ebp - 0x120], eax
mov eax, 0x5f2c40
call fcn.00438cf2
push dword [ebp + 8]
lea ecx, [ebp - 0x110]
push dword [ebp - 0x120]
call fcn.004335c0
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x118], edi
cmp edi, 0xffffffff
jne 0x436c04
call fcn.004957af
test eax, eax
je 0x436e06
inc dword [0x5f2d60]
jmp 0x436e06
push ebx
push 1
push ebx
push 3
push 0xc0000000
call dword [sym.imp.KERNEL32.dll_CreateConsoleScreenBuffer]
mov ebx, eax
mov dword [ebp - 0x114], ebx
cmp ebx, 0xffffffff
jne 0x436c34
push edi
call dword [sym.imp.WSOCK32.dll_closesocket]
call dword [sym.imp.WSOCK32.dll_WSACleanup]
jmp 0x436e06
push 0x50
pop esi
mov eax, esi
mov word [ebp - 0x11c], ax
mov eax, 0xfb
mov word [ebp - 0x11a], ax
push dword [ebp - 0x11c]
call fcn.00495071
pop ecx
test eax, eax
jne 0x436c6c
push edi
call dword [sym.imp.WSOCK32.dll_closesocket]
mov esi, ebx
call fcn.0048d2af
jmp 0x436c29
push 3
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
push 1
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 1
mov ebx, 0x1050
push ebx
call fcn.00401a3a
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x436ca8
push dword [ebp - 0x118]
call dword [sym.imp.WSOCK32.dll_closesocket]
mov esi, dword [ebp - 0x114]
jmp 0x436c65
push ebx
push 0
push edi
call fcn.00401f80
mov eax, dword [ebp - 0x114]
and dword [edi + 0xaa8], 0
and dword [edi + 0xd2c], 0
add esp, 0xc
mov dword [edi + 0x104], eax
mov eax, dword [ebp - 0x118]
push 7
mov dword [edi + 0xacc], eax
pop eax
mov word [edi + 0x100], ax
mov ebx, str.TelNet.c
lea eax, [edi + 0xb20]
push ebx
push eax
mov dword [edi + 0xe8], esi
mov dword [edi + 0xec], 0xfb
mov dword [edi + 0xd8], esi
mov dword [edi + 0xdc], 0x19
call fcn.0048a998
mov esi, str.A_TelNet_handle_had_to_be_forced_to_unlock___
lea eax, [edi + 0xb20]
call fcn.0048a823
mov eax, 0xfa0
lea ecx, [edi + 0xb20]
call fcn.0048a810
lea eax, [edi + 0xd44]
push ebx
push eax
call fcn.0048a998
mov esi, str.A_TelNet_handles_CONSOLE_had_to_be_forced_to_unlock___
lea eax, [edi + 0xd44]
call fcn.0048a823
mov eax, 0xbb8
lea ecx, [edi + 0xd44]
call fcn.0048a810
lea eax, [ebp - 0x110]
push eax
push 0x50
pop ecx
mov eax, edi
call fcn.00438c78
mov eax, dword [ebp - 0x120]
add esp, 0x14
xor esi, esi
mov dword [edi + 0x54], eax
mov ebx, 0x61a80
mov dword [edi + 0xa80], esi
mov dword [edi + 0xa84], esi
lea eax, [ebx + 1]
push eax
push 1
call fcn.00401a3a
pop ecx
pop ecx
mov dword [ebp - 0x118], eax
mov dword [edi + 0xa80], eax
cmp eax, esi
je 0x436dcd
lea eax, [ebx + 1]
push eax
push 4
call fcn.00401a3a
pop ecx
pop ecx
mov dword [edi + 0xa84], eax
cmp eax, esi
jne 0x436e17
mov eax, dword [ebp - 0x118]
shr ebx, 1
cmp eax, esi
je 0x436de0
push eax
call fcn.00401a00
pop ecx
mov dword [edi + 0xa80], esi
mov eax, dword [edi + 0xa84]
cmp eax, esi
je 0x436df7
push eax
call fcn.00401a00
pop ecx
mov dword [edi + 0xa84], esi
cmp ebx, 0x9c40
jae 0x436d93
mov eax, edi
call fcn.004368d6
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret
mov dword [edi + 0xa88], ebx
mov dword [edi + 0xa8c], esi
mov dword [eax + ebx*4 - 4], esi
mov ebx, dword [0x5f2c30]
mov dword [edi + 0xd0], esi
mov dword [edi + 0xd4], esi
cmp ebx, esi
jne 0x436e4a
call fcn.00444592
mov ebx, eax
mov dword [0x5f2c30], ebx
push edi
call fcn.00444541
pop ecx
mov eax, edi
call fcn.00436a5f
test eax, eax
jne 0x436e96
mov eax, edi
call fcn.004368d6
mov ebx, edi
mov edi, dword [0x5f2c30]
call fcn.00444845
mov edi, dword [0x5f2c30]
call fcn.00444406
test eax, eax
jg 0x436e06
mov esi, dword [0x5f2c30]
call fcn.00444555
and dword [0x5f2c30], 0
jmp 0x436e06
mov esi, edi
call fcn.00433ad1
call fcn.00433dae
mov eax, edi
jmp 0x436e08