Function at 0x436947
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x4e22e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor eax, eax
mov word [ebp - 0x11c], ax
lea edi, [ebp - 0x11a]
xor ebx, ebx
push 0x103
stosw word es:[edi], ax
lea eax, [ebp - 0x10f]
push ebx
push eax
mov esi, ecx
mov byte [ebp - 0x110], bl
call fcn.00401f80
add esp, 0xc
mov edx, esi
call fcn.00439c75
test eax, eax
jne 0x436c36
push esi
mov ecx, 0x104
lea eax, [ebp - 0x110]
call fcn.00438aa8
pop ecx
mov esi, 0x4c0830
push esi
push eax
mov dword [ebp - 0x120], ebx
call fcn.00401b10
pop ecx
pop ecx
test eax, eax
je 0x436a03
push esi
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x114], ebx
call fcn.004390ee
pop ecx
cmp eax, ebx
je 0x436a03
push esi
lea eax, [ebp - 0x114]
xor ecx, ecx
call fcn.004390ee
pop ecx
cmp eax, ebx
je 0x436a03
push eax
call fcn.00403367
pop ecx
mov dword [ebp - 0x120], eax
mov eax, 0x5f2c30
call fcn.00438b22
push dword [ebp + 8]
lea ecx, [ebp - 0x110]
push dword [ebp - 0x120]
call fcn.00433404
mov edi, eax
pop ecx
pop ecx
mov dword [ebp - 0x118], edi
cmp edi, 0xffffffff
je 0x436c36
push ebx
push 1
push ebx
push 3
push 0xc0000000
call dword [sym.imp.KERNEL32.dll_CreateConsoleScreenBuffer]
mov ebx, eax
mov dword [ebp - 0x114], ebx
cmp ebx, 0xffffffff
jne 0x436a64
push edi
call dword [sym.imp.WSOCK32.dll_closesocket]
call dword [sym.imp.WSOCK32.dll_WSACleanup]
jmp 0x436c36
push 0x50
pop esi
mov eax, esi
mov word [ebp - 0x11c], ax
mov eax, 0xfb
mov word [ebp - 0x11a], ax
push dword [ebp - 0x11c]
call fcn.00494fc4
pop ecx
test eax, eax
jne 0x436a9c
push edi
call dword [sym.imp.WSOCK32.dll_closesocket]
mov esi, ebx
call fcn.0048d33e
jmp 0x436a59
push 3
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
push 1
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 1
mov ebx, 0x1050
push ebx
call fcn.00401a3a
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x436ad8
push dword [ebp - 0x118]
call dword [sym.imp.WSOCK32.dll_closesocket]
mov esi, dword [ebp - 0x114]
jmp 0x436a95
push ebx
push 0
push edi
call fcn.00401f80
mov eax, dword [ebp - 0x114]
and dword [edi + 0xaa8], 0
and dword [edi + 0xd2c], 0
add esp, 0xc
mov dword [edi + 0x104], eax
mov eax, dword [ebp - 0x118]
push 7
mov dword [edi + 0xacc], eax
pop eax
mov word [edi + 0x100], ax
mov ebx, str.TelNet.c
lea eax, [edi + 0xb20]
push ebx
push eax
mov dword [edi + 0xe8], esi
mov dword [edi + 0xec], 0xfb
mov dword [edi + 0xd8], esi
mov dword [edi + 0xdc], 0x19
call fcn.0048ac23
mov esi, str.A_TelNet_handle_had_to_be_forced_to_unlock___
lea eax, [edi + 0xb20]
call fcn.0048aaae
mov eax, 0xfa0
lea ecx, [edi + 0xb20]
call fcn.0048aa9b
lea eax, [edi + 0xd44]
push ebx
push eax
call fcn.0048ac23
mov esi, str.A_TelNet_handles_CONSOLE_had_to_be_forced_to_unlock___
lea eax, [edi + 0xd44]
call fcn.0048aaae
mov eax, 0xbb8
lea ecx, [edi + 0xd44]
call fcn.0048aa9b
lea eax, [ebp - 0x110]
push eax
push 0x50
pop ecx
mov eax, edi
call fcn.00438aa8
mov eax, dword [ebp - 0x120]
add esp, 0x14
xor esi, esi
mov dword [edi + 0x54], eax
mov ebx, 0x61a80
mov dword [edi + 0xa80], esi
mov dword [edi + 0xa84], esi
lea eax, [ebx + 1]
push eax
push 1
call fcn.00401a3a
pop ecx
pop ecx
mov dword [ebp - 0x118], eax
mov dword [edi + 0xa80], eax
cmp eax, esi
je 0x436bfd
lea eax, [ebx + 1]
push eax
push 4
call fcn.00401a3a
pop ecx
pop ecx
mov dword [edi + 0xa84], eax
cmp eax, esi
jne 0x436c47
mov eax, dword [ebp - 0x118]
shr ebx, 1
cmp eax, esi
je 0x436c10
push eax
call fcn.00401a00
pop ecx
mov dword [edi + 0xa80], esi
mov eax, dword [edi + 0xa84]
cmp eax, esi
je 0x436c27
push eax
call fcn.00401a00
pop ecx
mov dword [edi + 0xa84], esi
cmp ebx, 0x9c40
jae 0x436bc3
mov eax, edi
call fcn.0043671a
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret
mov dword [edi + 0xa88], ebx
mov dword [edi + 0xa8c], esi
mov dword [eax + ebx*4 - 4], esi
mov ebx, dword [0x5f2c20]
mov dword [edi + 0xd0], esi
mov dword [edi + 0xd4], esi
cmp ebx, esi
jne 0x436c7a
call fcn.00444328
mov ebx, eax
mov dword [0x5f2c20], ebx
push edi
call fcn.004442d7
pop ecx
mov eax, edi
call fcn.004368a3
test eax, eax
jne 0x436cc6
mov eax, edi
call fcn.0043671a
mov ebx, edi
mov edi, dword [0x5f2c20]
call fcn.004445db
mov edi, dword [0x5f2c20]
call fcn.0044419c
test eax, eax
jg 0x436c36
mov esi, dword [0x5f2c20]
call fcn.004442eb
and dword [0x5f2c20], 0
jmp 0x436c36
mov esi, edi
call fcn.00433915
call fcn.00433bf2
mov eax, edi
jmp 0x436c38