Function at 0x411105
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x30
mov eax, dword [0x456d10]
xor eax, esp
mov dword [esp + 0x2c], eax
push esi
push edi
push str.Entering_telrcv_n
push 1
xor edi, edi
call fcn.0041a380
add esp, 8
cmp dword [0x46b324], edi
jle 0x41170d
mov eax, 0x46bb30
mov esi, 1
sub eax, dword [0x47b500]
cmp eax, 2
jl 0x41170d
mov eax, dword [0x45afa0]
inc dword [0x45afa0]
push 0
push dword [0x45af78]
movzx eax, byte [eax]
dec dword [0x46b324]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0x45a94c]
test eax, eax
je 0x4116b2
cmp ecx, 3
je 0x4116b7
mov eax, dword [0x47b77c]
cmp eax, 0xd
ja case.0x410d27.5
jmp dword [eax*4 + 0x411734]
mov eax, dword [esp + 0xc]
cmp eax, 0xa
je 0x411701
test eax, eax
je 0x411701
mov dword [0x47b77c], 0
jmp 0x410d53
mov eax, dword [esp + 0xc]
push eax
push str.TS_DATA_with__d_n
push 4
call fcn.0041a380
mov eax, dword [esp + 0x18]
add esp, 0xc
test eax, eax
je 0x411701
cmp eax, 0xff
jne 0x410d8c
cmp dword [0x46b324], 0
mov dword [0x47b77c], 1
jmp 0x410cbd
push dword [0x457e5c]
push str.AltKey___d_n
push 4
call fcn.0041a380
mov ecx, dword [esp + 0x18]
add esp, 0xc
mov edx, dword [0x45a94c]
cmp dword [0x457e5c], ecx
jne 0x41116c
test edx, edx
je 0x410dc4
cmp edx, 2
jne 0x41116c
mov esi, dword [0x457dcc]
cmp esi, 6
je 0x411172
cmp dword [0x46b324], 0
mov dword [0x47b77c], 0xd
jmp 0x410cbd
push str.TS_ESC_n
push 4
call fcn.0041a380
mov eax, dword [0x457dcc]
add esp, 8
cmp eax, 6
jne 0x410e68
mov eax, dword [esp + 0xc]
cmp eax, 0x5b
jne 0x410e57
mov word [esp + 0x20], si
mov eax, dword [0x45afa0]
lea ecx, [esp + 0x20]
movdqu xmm0, xmmword [eax]
sub dword [0x46b324], 0x11
add eax, 0x11
mov dword [0x45afa0], eax
movdqu xmmword [esp + 0x24], xmm0
call fcn.00418860
push 1
mov dword [0x47b77c], 0
call fcn.0041f1f0
add esp, 4
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp eax, 0x7b
jne 0x410e87
mov eax, 2
mov word [esp + 0x20], ax
jmp 0x410e10
cmp eax, 3
je 0x41104a
cmp eax, 4
je 0x41104a
cmp eax, 5
je 0x410f8e
mov eax, dword [esp + 0xc]
cmp dword [0x457e5c], 0x1b
jne 0x410f07
cmp eax, 0x1b
jne 0x410eae
push dword [0x47b500]
push 0
push 0
call fcn.0041f830
add esp, 0xc
mov dword [0x47b500], eax
jmp 0x410e37
cmp eax, 0x5b
je 0x410ed3
cmp eax, 0x4f
je 0x410ed3
push dword [0x47b500]
push eax
push 1
call fcn.0041f7f0
add esp, 0xc
mov dword [0x47b500], eax
jmp 0x410e37
push str.Found___char_n
push 4
call fcn.0041a380
mov ecx, dword [esp + 0x14]
push 0x47b500
push ecx
mov dword [0x47b77c], 0xa
call fcn.0041f220
add esp, 0x10
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp eax, 0x1b
jne 0x410f2f
push dword [0x47b500]
push 0
push 0
call fcn.0041f830
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp eax, 0x5b
je 0x410f6a
cmp eax, 0x4f
je 0x410f6a
push dword [0x47b500]
push 0
push 0
call fcn.0041f830
mov ecx, dword [esp + 0x18]
add esp, 0xc
mov dword [0x47b500], eax
push eax
push ecx
push 0
call fcn.0041f7f0
add esp, 0xc
mov dword [0x47b500], eax
jmp 0x410e37
push 0x47b500
push eax
mov dword [0x47b77c], 0xa
call fcn.0041f220
add esp, 8
cmp dword [0x46b324], 0
jmp 0x410cbd
mov ecx, dword [esp + 0xc]
push 0x47b500
push ecx
call fcn.0041f460
add esp, 8
test eax, eax
je 0x4114f6
cmp eax, 2
jne 0x411035
cmp dword [0x45ac14], 0
jne 0x411022
push str.Sequence_doesnt_match_n
push 3
call fcn.0041a380
mov eax, dword [0x47b500]
add esp, 8
xor esi, esi
mov byte [eax], 0x1b
mov ecx, dword [0x47b500]
inc ecx
mov dword [0x47b500], ecx
test edi, edi
jle 0x411016
movsx eax, byte [esp + esi + 0x14]
push eax
push str.Write__d_n
push 4
call fcn.0041a380
mov eax, dword [0x47b500]
add esp, 0xc
mov cl, byte [esp + esi + 0x14]
inc esi
mov byte [eax], cl
mov ecx, dword [0x47b500]
inc ecx
mov dword [0x47b500], ecx
cmp esi, edi
jl 0x410fe4
mov eax, dword [esp + 0xc]
mov byte [ecx], al
inc dword [0x47b500]
xor edi, edi
cmp dword [0x46b324], edi
mov dword [0x47b77c], edi
jmp 0x410cbd
mov eax, dword [esp + 0xc]
mov byte [esp + edi + 0x14], al
inc edi
cmp dword [0x46b324], 0
jmp 0x410cbd
push 0x47b500
push dword [esp + 0x10]
call fcn.0041f680
add esp, 8
test eax, eax
je 0x4114f6
mov ecx, dword [esp + 0xc]
cmp ecx, 0x1b
jne 0x411082
cmp dword [0x46b324], 0
mov dword [0x47b77c], 0xc
jmp 0x410cbd
mov eax, dword [0x47b500]
mov byte [eax], 0x1b
mov eax, dword [0x47b500]
inc eax
mov dword [0x47b500], eax
mov byte [eax], cl
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
mov eax, dword [esp + 0xc]
push dword [0x47b500]
cmp eax, 0x1b
jne 0x4110ce
push 0
push 0
call fcn.0041f830
mov dword [0x47b500], eax
add esp, 0xc
jmp 0x410e37
push eax
push 1
call fcn.0041f7f0
mov dword [0x47b500], eax
add esp, 0xc
jmp 0x410e37
push str.TS_ANSI_n
push 4
call fcn.0041a380
push 0x47b500
push dword [esp + 0x18]
call fcn.0041f220
add esp, 0x10
jmp 0x4114ee
push dword [esp + 0xc]
push str.TS_WYSE_with__d_n
push 4
call fcn.0041a380
add esp, 0xc
cmp dword [0x457dcc], 5
push 0x47b500
push dword [esp + 0x10]
jne 0x4114e6
call fcn.0041f460
jmp 0x4114eb
push dword [esp + 0xc]
mov dword [0x47b77c], 0
push str.TS_ALTKEY_with_0x_02x_n
push 4
call fcn.0041a380
mov eax, dword [0x457e5c]
add esp, 0xc
mov ecx, dword [esp + 0xc]
cmp ecx, eax
jne 0x41150c
mov edx, dword [0x45a94c]
mov esi, dword [0x457dcc]
cmp esi, 2
je 0x41118a
cmp esi, 6
je 0x41118a
mov al, byte [0x46b220]
and al, 0xfb
mov byte [0x46b220], al
jmp 0x41118f
mov al, byte [0x46b220]
cmp ecx, 3
jne 0x411267
test al, 4
jne 0x4111cc
cmp dword [0x457e58], 0
je 0x4111cc
call fcn.00409990
cmp dword [0x45ac04], 0
je 0x411701
mov edx, dword [0x45a94c]
mov esi, dword [0x457dcc]
mov al, byte [0x46b220]
mov ecx, dword [esp + 0xc]
test edx, edx
je 0x4111d9
cmp edx, 2
jne 0x4116f4
cmp ecx, 0x1b
jne 0x411324
test al, 4
jne 0x4114b7
push str.set_to_TS_ESC_n
push 4
call fcn.0041a380
mov eax, dword [0x457dcc]
add esp, 8
cmp dword [0x457e50], 0
mov dword [0x47b77c], 9
je 0x4112ff
cmp eax, 6
je 0x411701
cmp dword [0x46b324], 0
jne 0x4112ff
push dword [0x47b500]
push 0
push 0
call fcn.0041f830
add esp, 0xc
mov dword [0x47b500], eax
mov dword [0x47b77c], 0
push str.reset_to_data_n
push 4
call fcn.0041a380
add esp, 8
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 7
jne 0x41128d
test al, 4
jne 0x4111cc
cmp dword [0x45ad34], 0
jne 0x4111cc
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 0xd
jne 0x4111cc
test al, 4
jne 0x4111cc
mov eax, dword [0x47b500]
mov edx, dword [0x45ac18]
mov byte [eax], cl
mov ecx, dword [0x47b500]
mov eax, dword [0x45a94c]
inc ecx
mov dword [0x47b500], ecx
cmp eax, 1
jne 0x4112d8
test edx, edx
jne 0x411701
mov byte [ecx], 0xa
inc dword [0x47b500]
mov eax, dword [0x45a94c]
test eax, eax
je 0x4112e9
cmp eax, 2
je 0x4112e9
test edx, edx
jne 0x411701
cmp dword [0x46b324], 0
mov dword [0x47b77c], 2
jmp 0x410cbd
cmp eax, 6
je 0x411701
push 0x47b500
push 0x1b
push eax
call fcn.0041f7b0
add esp, 0xc
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 8
jne 0x41137a
test edx, edx
jne 0x411357
test al, 4
jne 0x4114b7
push dword [0x47b500]
push 0xd
push edx
call fcn.0041f830
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp edx, 2
jne 0x411425
mov eax, dword [0x47b500]
mov byte [eax], 8
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 0x7f
jne 0x4113d0
test edx, edx
jne 0x4113ad
test al, 4
jne 0x4114b7
push dword [0x47b500]
push 9
push edx
call fcn.0041f830
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp edx, 2
jne 0x4114b7
mov eax, dword [0x47b500]
mov byte [eax], 0x7f
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 9
jne 0x4113f6
test al, 4
jne 0x4114b7
mov eax, dword [0x47b500]
mov byte [eax], cl
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 0xa
jne 0x41141c
test al, 4
jne 0x4114b7
mov eax, dword [0x47b500]
mov byte [eax], cl
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp ecx, 0x1b
jge 0x4114b7
test al, 4
jne 0x4114b7
cmp esi, 2
je 0x411495
mov dword [0x47b77c], 0xb
push 0x47b500
push ecx
cmp esi, 5
je 0x41144e
call fcn.0041f680
jmp 0x411453
call fcn.0041f460
add esp, 8
test eax, eax
je 0x4114f6
cmp eax, 2
jne 0x411701
push dword [0x47b500]
mov dword [0x47b77c], 0
push dword [esp + 0x10]
push eax
call fcn.0041f7f0
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
push dword [0x47b500]
push ecx
push 2
call fcn.0041f7f0
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
cmp esi, 3
je 0x4114c5
cmp esi, 4
jne 0x4116f4
cmp ecx, 0x1e
jne 0x4116f4
test al, 4
jne 0x4116f4
push 0x47b500
mov dword [0x47b77c], 0xb
push ecx
call fcn.0041f680
add esp, 8
test eax, eax
jne 0x411701
cmp dword [0x46b324], 0
mov dword [0x47b77c], 0
jmp 0x410cbd
cmp ecx, 0x5b
je 0x411538
cmp ecx, 0x4f
je 0x411538
push dword [0x47b500]
push ecx
push 1
call fcn.0041f7f0
add esp, 0xc
mov dword [0x47b500], eax
cmp dword [0x46b324], 0
jmp 0x410cbd
push 0x47b500
push eax
push dword [0x457dcc]
mov dword [0x47b77c], 9
call fcn.0041f7b0
dec dword [0x45afa0]
add esp, 0xc
inc dword [0x46b324]
cmp dword [0x46b324], 0
jmp 0x410cbd
mov eax, dword [esp + 0xc]
cmp eax, 0xf0
je 0x411626
cmp eax, 0xff
je 0x4115fb
mov ecx, dword [0x457f3c]
cmp ecx, 0x47b980
jae 0x4115a1
mov byte [ecx], 0xff
inc ecx
cmp ecx, 0x47b980
jae 0x4115a1
mov byte [ecx], al
inc ecx
lea eax, [ecx - 2]
mov dword [0x457f3c], 0x47b780
mov dword [0x457ebc], eax
call fcn.00411770
mov dword [0x47b77c], 1
mov eax, dword [esp + 0xc]
cmp eax, 0xfa
jne 0x411672
cmp dword [0x46b324], 0
mov dword [0x47b77c], 3
mov dword [0x457f3c], 0x47b780
mov dword [0x47b778], 1
jmp 0x410cbd
mov eax, dword [0x457f3c]
cmp eax, 0x47b980
jae 0x411610
mov byte [eax], 0xff
inc eax
mov dword [0x457f3c], eax
cmp dword [0x46b324], 0
mov dword [0x47b77c], 3
jmp 0x410cbd
mov eax, dword [0x457f3c]
cmp eax, 0x47b980
jae 0x411641
mov byte [eax], 0xff
inc eax
cmp eax, 0x47b980
jae 0x411641
mov byte [eax], 0xf0
inc eax
add eax, 0xfffffffe
mov dword [0x457f3c], 0x47b780
mov dword [0x457ebc], eax
call fcn.00411770
cmp dword [0x46b324], 0
mov dword [0x47b77c], 0
jmp 0x410cbd
mov eax, dword [esp + 0xc]
cmp eax, 0xff
jne 0x41168f
cmp dword [0x46b324], 0
mov dword [0x47b77c], 4
jmp 0x410cbd
mov ecx, dword [0x457f3c]
cmp ecx, 0x47b980
jae 0x411701
mov byte [ecx], al
inc ecx
cmp dword [0x46b324], 0
mov dword [0x457f3c], ecx
jmp 0x410cbd
cmp ecx, 3
jne 0x4116f0
mov edx, dword [0x45ac0c]
mov eax, dword [esp + 0xc]
cmp edx, 1
jne 0x4116cb
cmp eax, 0xd
je 0x4116e8
cmp ecx, 3
jne 0x4116f0
cmp edx, 2
jne 0x4116f0
cmp eax, 0xd
jne 0x4116f0
mov eax, dword [0x47b500]
mov byte [eax], 0xd
inc dword [0x47b500]
mov dword [esp + 0xc], 0xa
mov ecx, dword [esp + 0xc]
mov eax, dword [0x47b500]
mov byte [eax], cl
inc dword [0x47b500]
cmp dword [0x46b324], 0
jmp 0x410cbd
mov ecx, dword [esp + 0x34]
pop edi
pop esi
xor ecx, esp
call fcn.004265fb
mov esp, ebp
pop ebp
ret
push eax
push str.telnetd:_panic_state_d_n
call fcn.00427a67
add esp, 8
push 1
call fcn.00429500
nop
dec edi
or eax, 365035585
inc ecx
add byte [esi], ch
or eax, 0x166e0041
inc ecx
add byte [esi + 0x15], ch
inc ecx
add byte [esi], bl
pop ss
inc ecx
add byte [esi], bl
pop ss
inc ecx
add byte [esi], bl
pop ss
inc ecx
add byte [esi], bl
pop ss
inc ecx
add cl, ch
or eax, 0x10e30041
inc ecx
add byte [0xa9004111], al
adc byte [ecx], al
cmp byte [ecx], dl
inc ecx
add ah, cl
int3