Function at 0x47b509
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x5065d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x116]
push 0x103
mov word [ebp - 0x118], bx
stosw word es:[edi], ax
lea eax, [ebp - 0x10f]
push ebx
push eax
mov esi, ecx
mov byte [ebp - 0x110], bl
call fcn.004ab5d0
add esp, 0xc
mov edx, esi
call fcn.00476b3a
test eax, eax
jne 0x47b80e
push esi
mov ecx, 0x104
lea eax, [ebp - 0x110]
call fcn.00476b6c
pop ecx
mov esi, 0x4ddce8
push esi
push eax
mov dword [ebp - 0x11c], ebx
call fcn.004aa910
test eax, eax
pop ecx
pop ecx
je 0x47b5c5
push esi
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x114], ebx
call fcn.004785ce
cmp eax, ebx
pop ecx
je 0x47b5c5
push esi
lea eax, [ebp - 0x114]
xor ecx, ecx
call fcn.004785ce
cmp eax, ebx
pop ecx
je 0x47b5c5
push eax
call fcn.004ac55e
pop ecx
mov dword [ebp - 0x11c], eax
mov eax, 0x614fa0
call fcn.00476abd
push dword [ebp + 8]
lea ecx, [ebp - 0x110]
push dword [ebp - 0x11c]
call fcn.0047d1ad
mov edi, eax
cmp edi, 0xffffffff
pop ecx
pop ecx
mov dword [ebp - 0x120], edi
jne 0x47b60a
call fcn.0040ef45
test eax, eax
je 0x47b80e
inc dword [0x6150c0]
jmp 0x47b80e
push ebx
push 1
push ebx
push 3
push 0xc0000000
call dword [sym.imp.KERNEL32.dll_CreateConsoleScreenBuffer]
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [ebp - 0x114], ebx
jne 0x47b638
push edi
call sub.WSOCK32.dll_closesocket
call sub.WSOCK32.dll_WSACleanup
jmp 0x47b80e
push 0x50
pop esi
mov word [ebp - 0x118], si
mov word [ebp - 0x116], 0xfb
push dword [ebp - 0x118]
call fcn.0040c425
test eax, eax
pop ecx
jne 0x47b66a
push edi
call sub.WSOCK32.dll_closesocket
mov esi, ebx
call fcn.0041cef3
jmp 0x47b62e
push 3
push ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
push 1
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 1
mov ebx, 0x1050
push ebx
call fcn.004aa454
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x47b6a5
push dword [ebp - 0x120]
call sub.WSOCK32.dll_closesocket
mov esi, dword [ebp - 0x114]
jmp 0x47b663
push ebx
push 0
push edi
call fcn.004ab5d0
mov eax, dword [ebp - 0x114]
and dword [edi + 0xaa8], 0
and dword [edi + 0xd2c], 0
mov dword [edi + 0x104], eax
mov eax, dword [ebp - 0x120]
add esp, 0xc
mov dword [edi + 0xacc], eax
mov ebx, str..TelNet.c
lea eax, [edi + 0xb20]
push ebx
push eax
mov dword [edi + 0xe8], esi
mov dword [edi + 0xec], 0xfb
mov dword [edi + 0xd8], esi
mov dword [edi + 0xdc], 0x19
mov word [edi + 0x100], 7
call fcn.0041ebbf
mov esi, str.A_TelNet_handle_had_to_be_forced_to_unlock___
lea eax, [edi + 0xb20]
call fcn.0041edba
mov eax, 0xfa0
lea ecx, [edi + 0xb20]
call fcn.0041ede3
lea eax, [edi + 0xd44]
push ebx
push eax
call fcn.0041ebbf
lea ebx, [edi + 0xd44]
mov esi, str.A_TelNet_handles_CONSOLE_had_to_be_forced_to_unlock___
mov eax, ebx
call fcn.0041edba
mov eax, 0xbb8
mov ecx, ebx
call fcn.0041ede3
push 0x50
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00440d3c
add esp, 0x1c
test eax, eax
jne 0x47b785
lea eax, [ebp - 0x110]
push eax
push 0x50
pop ecx
mov eax, edi
call fcn.00476b6c
pop ecx
mov eax, dword [ebp - 0x11c]
xor ebx, ebx
mov dword [edi + 0x54], eax
mov esi, 0x61a80
mov dword [edi + 0xa80], ebx
mov dword [edi + 0xa84], ebx
lea eax, [esi + 1]
push eax
push 1
call fcn.004aa454
cmp eax, ebx
pop ecx
pop ecx
mov dword [edi + 0xa80], eax
je 0x47b7cf
lea eax, [esi + 1]
push eax
push 4
call fcn.004aa454
cmp eax, ebx
pop ecx
pop ecx
mov dword [edi + 0xa84], eax
jne 0x47b81f
mov eax, dword [edi + 0xa80]
shr esi, 1
cmp eax, ebx
je 0x47b7e8
push eax
call fcn.004aa2a8
pop ecx
mov dword [edi + 0xa80], ebx
mov eax, dword [edi + 0xa84]
cmp eax, ebx
je 0x47b7ff
push eax
call fcn.004aa2a8
pop ecx
mov dword [edi + 0xa84], ebx
cmp esi, 0x9c40
jae 0x47b7a1
mov eax, edi
call fcn.0047b90d
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004aaeb5
leave
ret
mov dword [edi + 0xa8c], ebx
mov dword [edi + 0xa88], esi
mov dword [eax + esi*4 - 4], ebx
mov dword [edi + 0xd0], ebx
mov dword [edi + 0xd4], ebx
mov ebx, dword [0x614f90]
test ebx, ebx
jne 0x47b852
call fcn.0046aaee
mov ebx, eax
mov dword [0x614f90], ebx
push edi
call fcn.0046aba0
pop ecx
mov eax, edi
call fcn.0047d033
test eax, eax
jne 0x47b89e
mov eax, edi
call fcn.0047b90d
mov ebx, edi
mov edi, dword [0x614f90]
call fcn.0046acbd
mov edi, dword [0x614f90]
call fcn.0046aebe
test eax, eax
jg 0x47b80e
mov esi, dword [0x614f90]
call fcn.0046ab63
and dword [0x614f90], 0
jmp 0x47b80e
mov esi, edi
call fcn.0047b8d9
call fcn.0047b1b6
mov eax, edi
jmp 0x47b810