Function at 0x41ad30
Capabilities:
Terminate process

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0x100001
push str.arr_proxy.exe
call fcn.0042233e
mov edi, eax
mov eax, dword [0x441ff4]
add esp, 8
mov dword [esp + 0x10], edi
test edi, edi
jne 0x41add5
test eax, eax
je 0x41b149
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x41ad82
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x41b149
cmp eax, 3
jle 0x41b149
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41ada7
mov edx, dword [0x441fa0]
mov dword [0x439d90], edx
call fcn.0041c4b1
test eax, eax
je 0x41b13b
mov eax, dword [0x439d90]
push 3
push eax
push 0x74c
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_not_found._n
jmp 0x41b12e
mov ebx, dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ebp, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x41ae62
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 3
je 0x41ae02
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x41ae62
cmp eax, 3
jle 0x41ae62
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41ae1d
mov eax, dword [0x441fa0]
mov dword [0x439d90], eax
call fcn.0041c4b1
test eax, eax
je 0x41ae50
mov ecx, dword [0x439d90]
push 3
push ecx
push 0x750
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_is_still_running__please_wait_a_moment._n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [esp + 0x10]
push 0x4e20
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x41aefa
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x441ff4]
test eax, eax
je 0x41b149
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 3
je 0x41aeaf
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x41b149
cmp eax, 3
jle 0x41b149
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41aecc
mov edx, dword [0x441fa0]
mov dword [0x439d90], edx
call fcn.0041c4b1
test eax, eax
je 0x41b13b
mov eax, dword [0x439d90]
push 3
push eax
push 0x757
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_exit._n
jmp 0x41b12e
mov eax, dword [0x441ff4]
test eax, eax
je 0x41af80
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 2
je 0x41af20
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x41af80
cmp eax, 2
jle 0x41af80
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41af3b
mov eax, dword [0x441fa0]
mov dword [0x439d90], eax
call fcn.0041c4b1
test eax, eax
je 0x41af6e
mov ecx, dword [0x439d90]
push 2
push ecx
push 0x75c
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_is_still_running__kill_it._n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [esp + 0x10]
push 1
push edi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
jne 0x41b0bf
mov eax, dword [0x441ff4]
test eax, eax
je 0x41b018
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 2
je 0x41afb7
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x41b018
cmp eax, 2
jle 0x41b018
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41afd4
mov edx, dword [0x441fa0]
mov dword [0x439d90], edx
call fcn.0041c4b1
test eax, eax
je 0x41b006
mov eax, dword [0x439d90]
push 2
push eax
push 0x762
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_cannot_be_killed__please_wait_20_seconds._n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [esp + 0x10]
push 0x4e20
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x41b0c6
mov eax, dword [0x441ff4]
test eax, eax
je 0x41b0b7
mov ecx, dword [0x441fd4]
mov eax, dword [ecx]
cmp eax, 1
je 0x41b05b
mov edx, dword [0x441fdc]
cmp dword [edx], 0
jne 0x41b0b7
cmp eax, 1
jle 0x41b0b7
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41b076
mov eax, dword [0x441fa0]
mov dword [0x439d90], eax
call fcn.0041c4b1
test eax, eax
je 0x41b0a9
mov ecx, dword [0x439d90]
push 1
push ecx
push 0x769
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____we_cannot_stop_arr_proxy.exe__please_reboot_now._n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x441ff4]
test eax, eax
je 0x41b149
mov edx, dword [0x441fd4]
mov eax, dword [edx]
cmp eax, 3
je 0x41b0ec
mov ecx, dword [0x441fdc]
cmp dword [ecx], 0
jne 0x41b149
cmp eax, 3
jle 0x41b149
call ebx
mov esi, eax
call ebp
mov edi, eax
mov eax, dword [0x439d90]
test eax, eax
jge 0x41b109
mov edx, dword [0x441fa0]
mov dword [0x439d90], edx
call fcn.0041c4b1
test eax, eax
je 0x41b13b
mov eax, dword [0x439d90]
push 3
push eax
push 0x772
push str.C:_build_rel_sp_8_4_6_2_srcwindows_atpclient_arr_srvs_body.cpp
call fcn.0041c4e1
push str.StopProxyProcess____arr_proxy.exe_has_been_terminated._n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push edi
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
pop ecx
ret