Function at 0x47ebda
Capabilities:
Terminate process

Disassembly:
sub esp, 0x230
mov eax, dword [0x6b0d44]
xor eax, esp
mov dword [esp + 0x22c], eax
push ebx
mov ebx, dword [esp + 0x238]
push ebp
mov ebp, edx
mov dword [esp + 0x1c], ebx
push esi
push edi
mov edi, ecx
movzx eax, word [ebx + ebp]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx esi, ax
mov edx, 0x110
mov ecx, esi
lea eax, [ebx + 8]
add eax, ebp
and ecx, edx
mov dword [esp + 0x18], eax
cmp ecx, 0x10
je 0x47ec44
cmp ecx, edx
je 0x47ec44
push ecx
push ebx
mov edx, ebp
mov ecx, edi
call fcn.0047ea4f
pop ecx
pop ecx
test eax, eax
je 0x47f357
lea eax, [ebx + 8]
add eax, ebp
mov ecx, 0x109
cmp esi, ecx
ja 0x47eece
je 0x47ee78
sub esi, 0x17
je 0x47ede9
sub esi, 0xec
je 0x47ed65
sub esi, 1
je 0x47ece0
sub esi, 4
jne 0x47f357
lea ecx, [esp + 0x14]
mov edx, eax
push ecx
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046dabe
add esp, 0xc
cmp dword [esp + 0x14], esi
jne 0x47ecac
cmp dword [esp + 0x10], esi
je 0x47eccc
push esi
push 1
push edi
call dword [esp + 0x1c]
add esp, 0xc
jmp 0x47eccc
mov esi, dword [esp + 0x10]
xor ebx, ebx
inc ebx
mov eax, dword [esi]
test eax, eax
je 0x47ecc3
push dword [esi + 4]
push ebx
push edi
call eax
add esp, 0xc
push ebx
push esi
call fcn.005cdee0
pop ecx
pop ecx
mov edx, dword [esp + 0x18]
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046daee
pop ecx
jmp 0x47f357
lea ecx, [esp + 0x10]
mov edx, eax
push ecx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046dabe
add esp, 0xc
lea eax, [esp + 0x20]
mov edx, ebx
push eax
push ecx
push 0xd
push ecx
mov ecx, ebp
call fcn.0047e835
mov esi, dword [esp + 0x24]
add esp, 0x10
test esi, esi
je 0x47f357
cmp dword [esp + 0x10], 0
jne 0x47ed38
mov eax, dword [esp + 0x20]
push 0
push dword [eax]
call dword [sym.imp.WS2_32.dll_ntohl]
push eax
push edi
call esi
jmp 0x47f354
cmp dword [esp + 0x10], 2
jne 0x47f357
cmp dword [esi], 0
je 0x47ed5e
mov eax, dword [esp + 0x20]
push dword [esi + 4]
push dword [eax]
call dword [sym.imp.WS2_32.dll_ntohl]
push eax
push edi
call dword [esi]
add esp, 0xc
push 1
jmp 0x47f091
lea eax, [esp + 0x28]
mov edx, ebx
push eax
push ecx
push 0xd
push ecx
mov ecx, ebp
call fcn.0047e835
add esp, 0x10
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x14]
mov edx, ebx
push eax
push ecx
push 0x16
push ecx
mov ecx, ebp
call fcn.0047e835
mov esi, eax
add esp, 0x10
test esi, esi
jle 0x47edb2
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x8c]
lea edx, [ebx + 8]
push eax
add edx, ebp
push edx
call fcn.0047f650
pop ecx
pop ecx
cmp dword [esp + 0x1c], 0
jle 0x47f357
test esi, esi
jle 0x47f357
mov eax, dword [esp + 0x28]
push dword [eax]
call dword [sym.imp.WS2_32.dll_ntohl]
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x47f357
lea edx, [esp + 0x8c]
push edx
jmp 0x47f350
lea eax, [esp + 0x14]
mov edx, ebx
push eax
push ecx
push 0x12
push ecx
mov ecx, ebp
call fcn.0047e835
add esp, 0x10
mov esi, eax
lea eax, [esp + 0x1c]
mov edx, ebx
push eax
push ecx
push 0x13
push ecx
mov ecx, ebp
call fcn.0047e835
add esp, 0x10
mov ebp, eax
test esi, esi
jle 0x47f357
test ebp, ebp
jle 0x47f357
xor ebx, ebx
cmp dword [edi + 0x24], ebx
je 0x47f357
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x8c]
mov ecx, dword [esp + 0x14]
push eax
push edx
mov dword [esp + 0xb0], 4
mov dword [esp + 0xb4], 0x10000
call fcn.0047f650
push ebp
push ebx
push dword [esp + 0x2c]
lea eax, [esp + 0xa0]
push eax
push edi
call dword [edi + 0x24]
add esp, 0x1c
jmp 0x47f357
lea ecx, [esp + 0x1c]
mov edx, eax
push ecx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046dabe
mov esi, dword [esp + 0x20]
add esp, 0xc
test esi, esi
je 0x47f357
mov eax, dword [esi]
xor ebx, ebx
inc ebx
test eax, eax
je 0x47eeb4
push dword [esi + 4]
push ebx
push dword [esp + 0x24]
push edi
call eax
add esp, 0x10
push ebx
push esi
call fcn.005cdee0
mov edx, dword [esp + 0x20]
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046daee
jmp 0x47f354
sub esi, 0x113
je 0x47f09d
sub esi, 1
je 0x47ef7d
sub esi, 4
je 0x47ef2d
sub esi, 1
jne 0x47f357
lea ecx, [esp + 0x1c]
mov edx, eax
push ecx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046dabe
mov esi, dword [esp + 0x20]
add esp, 0xc
test esi, esi
je 0x47eccc
mov eax, dword [esi]
test eax, eax
je 0x47ef76
push dword [esi + 4]
push 0
push dword [esp + 0x24]
push edi
call eax
add esp, 0x10
jmp 0x47ef76
lea ecx, [esp + 0x14]
mov edx, eax
push ecx
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046dabe
add esp, 0xc
cmp dword [esp + 0x14], 0
jne 0x47ef61
cmp dword [esp + 0x10], 0
je 0x47eccc
xor eax, eax
push eax
push eax
jmp 0x47eca2
mov esi, dword [esp + 0x10]
mov eax, dword [esi]
test eax, eax
je 0x47ef76
push dword [esi + 4]
push 0
push edi
call eax
add esp, 0xc
push 1
jmp 0x47ecc4
lea eax, [esp + 0x10]
mov edx, ebx
push eax
push ecx
push 9
push ecx
mov ecx, ebp
call fcn.0047e835
mov ecx, eax
add esp, 0x10
xor eax, eax
mov dword [esp + 0x1c], ecx
cmp ecx, 4
mov ecx, dword [esp + 0x10]
jge 0x47efa7
mov esi, eax
jmp 0x47efc6
movsx eax, byte [ecx + 2]
and eax, 7
mov dword [esp + 0x14], 0x64
imul esi, eax, 0x64
movsx eax, byte [ecx + 3]
cdq
idiv dword [esp + 0x14]
add esi, edx
xor eax, eax
cmp dword [esp + 0x1c], 4
jle 0x47efd0
lea eax, [ecx + 4]
mov ecx, dword [edi + 0x44]
lea edx, [ebx + 8]
mov dword [esp + 0x10], eax
add edx, ebp
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
push eax
push 0xc
call fcn.0046dabe
add esp, 0xc
sub esi, 0x191
je 0x47f357
sub esi, 0x25
je 0x47f014
cmp dword [esp + 0x20], 2
jne 0x47f357
push 1
push dword [esp + 0x1c]
jmp 0x47f092
push 0x15
push ecx
mov edx, ebx
mov ecx, ebp
call fcn.0047e8e7
xor ebx, ebx
inc ebx
pop ecx
pop ecx
cmp eax, ebx
jne 0x47f081
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x10]
push eax
push ecx
push 0x15
push ecx
mov ecx, ebp
call fcn.0047e835
push ebx
push dword [edi + 0x4c]
mov esi, eax
call fcn.005cdee0
mov ecx, dword [esp + 0x28]
add esp, 0x18
mov edx, esi
mov dword [edi + 0x50], esi
call fcn.00470c3a
cmp dword [esp + 0x20], 0
mov esi, dword [esp + 0x18]
mov dword [edi + 0x4c], eax
jne 0x47f06d
mov edx, esi
xor eax, eax
jmp 0x47f076
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 4]
mov edx, dword [ecx]
push eax
mov ecx, edi
call fcn.0047f8e3
pop ecx
jmp 0x47f085
mov esi, dword [esp + 0x18]
cmp dword [esp + 0x20], 2
jne 0x47f357
push ebx
push esi
call fcn.005cdee0
pop ecx
jmp 0x47ecda
push 0x14
push ecx
mov edx, ebx
mov ecx, ebp
call fcn.0047e8e7
xor ebx, ebx
inc ebx
pop ecx
pop ecx
cmp eax, ebx
jne 0x47f357
mov esi, dword [esp + 0x24]
mov edx, esi
push 0x15
push ecx
mov ecx, ebp
call fcn.0047e8e7
pop ecx
pop ecx
cmp eax, ebx
jne 0x47f357
mov ecx, dword [edi + 0x44]
lea edx, [esi + 8]
push 0
push 0xc
add edx, ebp
call fcn.0046d8d3
pop ecx
pop ecx
test eax, eax
je 0x47f346
lea eax, [esp + 0x28]
mov edx, esi
push eax
push ecx
push 0x15
push ecx
mov ecx, ebp
call fcn.0047e835
add esp, 0x10
mov dword [esp + 0x10], eax
lea eax, [esp + 0x14]
mov edx, esi
push eax
push ecx
push 0x14
push ecx
mov ecx, ebp
call fcn.0047e835
add esp, 0x10
mov dword [esp + 0x1c], eax
cmp dword [edi + 0x4c], 0
je 0x47f12e
push ebx
push dword [edi + 0x4c]
call fcn.005cdee0
pop ecx
pop ecx
mov esi, dword [esp + 0x10]
push 0x1af3
push 0x764c8c
push ebx
lea ebp, [esi + 1]
push ebp
call fcn.005ce020
add esp, 0x10
mov dword [edi + 0x4c], eax
test eax, eax
je 0x47f370
push esi
push dword [esp + 0x2c]
mov edx, ebp
mov ecx, eax
call section..text
mov eax, dword [edi + 0x4c]
pop ecx
pop ecx
mov byte [esi + eax], 0
cmp dword [edi + 0x54], 0
mov dword [edi + 0x50], esi
je 0x47f17f
push ebx
push dword [edi + 0x54]
call fcn.005cdee0
pop ecx
pop ecx
mov ebp, dword [esp + 0x1c]
push 0x1af9
push 0x764d04
push ebx
lea esi, [ebp + 1]
push esi
call fcn.005ce020
add esp, 0x10
mov dword [edi + 0x54], eax
test eax, eax
jne 0x47f1d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1af9
push esi
push edi
mov edx, 0x764d20
xor ecx, ecx
call fcn.0047145c
push edi
push 0x764d3c
push 0x764d58
jmp 0x47f39a
push ebp
push dword [esp + 0x18]
mov edx, esi
mov ecx, eax
call section..text
mov eax, dword [edi + 0x54]
mov byte [eax + ebp], 0
lea eax, [esp + 0x1c4]
push dword [edi + 0x3c]
mov dword [edi + 0x58], ebp
push dword [edi + 0x54]
push dword [edi + 0x34]
push str._s:_s:_s
push 0x80
push eax
call fcn.0040112a
mov esi, eax
lea eax, [esp + 0x50]
push eax
call fcn.00494670
push esi
lea eax, [esp + 0x1e4]
push eax
lea eax, [esp + 0x5c]
push eax
call fcn.004946d0
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.00494550
lea eax, [esp + 0xe8]
push 0xc
push eax
call fcn.004a39d0
mov edx, dword [esp + 0x58]
lea eax, [esp + 0x6c]
mov ecx, dword [edi + 0x44]
add esp, 0x40
push eax
lea eax, [esp + 0x24]
push eax
push 0xc
call fcn.0046dabe
mov edx, dword [esp + 0x24]
mov ecx, dword [edi + 0x44]
push 0xc
call fcn.0046daee
mov al, byte [esp + 0x3c]
lea ecx, [esp + 0xcc]
and dword [esp + 0x34], 0
mov byte [esp + 0x34], al
lea eax, [esp + 0xc0]
push eax
push 3
pop edx
call fcn.0047f5dc
mov esi, eax
lea ecx, [esp + 0xd0]
push 4
lea eax, [esp + 0x3c]
mov edx, esi
push eax
push 0x19
call fcn.0047f60e
add esi, eax
lea ecx, [esp + 0xdc]
mov eax, dword [esp + 0x30]
mov edx, esi
push eax
push dword [esp + 0x4c]
push 0x15
call fcn.0047f60e
add esi, eax
lea ecx, [esp + 0xe8]
mov eax, dword [esp + 0x48]
mov edx, esi
push eax
push dword [esp + 0x44]
push 0x14
call fcn.0047f60e
push dword [edi + 0x38]
add esi, eax
lea ecx, [esp + 0xf8]
push dword [edi + 0x34]
mov edx, esi
push 6
call fcn.0047f60e
add esp, 0x44
lea ecx, [esp + 0xbc]
add esi, eax
lea eax, [esp + 0x8c]
mov edx, esi
push 0x10
push eax
call fcn.00477aa1
add esi, eax
lea ecx, [esp + 0xc4]
mov edx, esi
call fcn.00477b1a
push 2
add esi, eax
lea eax, [esp + 0xc8]
push esi
push eax
push ebx
push 0
push dword [edi + 0x30]
call fcn.00467d91
add esp, 0x20
jmp 0x47f357
mov ecx, dword [edi + 0x20]
test ecx, ecx
je 0x47f357
xor eax, eax
push eax
push eax
push edi
call ecx
add esp, 0xc
mov ecx, dword [esp + 0x23c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0059b3f0
add esp, 0x230
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x1af3
push esi
push edi
mov edx, 0x764ca8
xor ecx, ecx
call fcn.0047145c
push edi
push 0x764cc4
push 0x764ce0
call fcn.004010b4
add esp, 0x18
push esi
call fcn.005aae60
int3