Function at 0x405950
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x924
mov eax, dword [0x418a28]
xor eax, esp
mov dword [esp + 0x920], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
xor ebx, ebx
push 0x101
lea eax, [esp + 0x1c]
push ebx
push eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ebx
mov byte [esp + 0x12c], bl
mov byte [0x41ad00], bl
mov byte [0x425dc0], bl
call fcn.0040bf00
add esp, 0xc
lea esi, [esp + 0x18]
call fcn.00406360
cmp eax, 0xffffffff
jne 0x4059b4
push eax
call fcn.00408bdd
push 0x800
push 0x41549c
push 0x425580
call fcn.00407a90
add esp, 0xc
push 0x800
push str.2002
push 0x4357e0
call fcn.00407a90
xor eax, eax
mov dword [0x425da4], eax
mov dword [0x425da4], ebx
mov ebx, 1
mov esi, edi
mov edi, dword [ebp + 8]
mov dword [0x425da0], eax
mov dword [0x425da8], eax
add esp, 0xc
mov dword [0x425dac], eax
mov dword [0x425db0], eax
mov dword [0x425db4], eax
mov dword [0x425db8], eax
mov dword [0x425dbc], eax
mov dword [0x425da0], ebx
mov dword [0x425da8], ebx
call fcn.00406c70
cmp eax, 0xffffffff
je 0x405b9a
jmp 0x405a40
add eax, 0xffffffcc
cmp eax, 0x42
ja case.0x405a53.53
movzx ecx, byte [eax + 0x405ca0]
jmp dword [ecx*4 + 0x405c70]
mov edx, dword [0x41ace4]
push 0x800
push edx
push 0x425580
call fcn.00407a90
add esp, 0xc
jmp case.0x405a53.53
mov eax, dword [0x41ace4]
push 0x800
push eax
push 0x4357e0
call fcn.00407a90
add esp, 0xc
jmp case.0x405a53.53
mov dword [0x425da4], 2
jmp case.0x405a53.53
mov dword [esp + 0xc], ebx
jmp case.0x405a53.53
mov dword [0x4357c4], ebx
jmp case.0x405a53.53
mov dword [0x4190a8], 0
jmp case.0x405a53.53
mov ecx, dword [0x41ace4]
push 0xfa01
push ecx
push 0x425dc0
call fcn.00407a90
add esp, 0xc
jmp case.0x405a53.53
mov edx, dword [0x41ace4]
push str.____n_r
push edx
call fcn.00407d3b
mov edi, eax
add esp, 8
test edi, edi
je case.0x405a53.53
mov ebx, 0x41bd21
cmp ebx, 0x425d71
jge 0x405b80
push str.____n_r
push 0
call fcn.00407d3b
mov esi, eax
push edi
lea eax, [ebx - 0x801]
push 0x800
push eax
mov dword [esp + 0x28], esi
call fcn.0040722a
add esp, 0x14
test esi, esi
je 0x405b52
mov edi, str.DEFAULT
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x405b52
mov eax, dword [esp + 0x14]
push eax
jmp 0x405b57
push str.2003
push 0x800
push ebx
call fcn.0040722a
add esp, 0xc
push str.____n_r
push 0
call fcn.00407d3b
mov edi, eax
add esp, 8
add ebx, 0x1008
test edi, edi
jne 0x405b08
mov ebx, 1
mov esi, dword [esp + 0x10]
mov edi, dword [ebp + 8]
call fcn.00406c70
cmp eax, 0xffffffff
jne 0x405a40
cmp byte [esp + 0x120], 0
je 0x405bb4
lea ecx, [esp + 0x120]
push ecx
call fcn.00403dc0
add esp, 4
cmp byte [0x41ad00], 0
je 0x405bda
push 0x415808
push 0x41ad00
call fcn.00407ebe
add esp, 8
test eax, eax
je 0x405bda
mov ecx, eax
call fcn.00403b70
cmp dword [esp + 0xc], 0
push 0x405ee0
je 0x405c4f
push 0x16
call fcn.0040849b
add esp, 8
call fcn.00406dd0
push 0
call fcn.00408bdd
mov ecx, dword [0x41ace4]
push 0x800
push ecx
push 0x41ad00
call fcn.00407a90
add esp, 0xc
jmp case.0x405a53.53
mov edx, dword [0x41ace4]
push 0x800
push edx
lea eax, [esp + 0x128]
push eax
call fcn.00407a90
add esp, 0xc
jmp case.0x405a53.53
push str.USAGE:_n_rpcapd___b__address_____p__port_____6____l__host_list_____a__host_port___n__________n____v____d____s__file_____f__file___n___b__address_:_the_address_to_bind_to__either_numeric_or_literal_._n______Default:_it_binds_to_all_local_IPv4_addresses_n___p__port_:_the_port_to_bind_to._Default:_it_binds_to_port_2002_n___4:_use_only_IPv4__default_both_IPv4_and_IPv6_waiting_sockets_are_used__n___l__host_list_:_a_file_that_keeps_the_list_of_the_hosts_which_are_allowed_n______to_connect_to_this_server__if_more_than_one__list_them_one_per_line_._n______We_suggest_to_use_literal_names__instead_of_numeric_ones__in_order_to_n______avoid_problems_with_different_address_families_n___n:_permit_NULL_authentication__usually_used_with__l__n___a__host_port_:_run_in_active_mode_when_connecting_to_host_on_port_port_n______In_case_port_is_omitted__the_default_port__2003__is_used_n___v:_run_in_active_mode_only__default:_if__a_is_specified__it_accepts_n______passive_connections_as_well_n___d:_run_in_daemon_mode__UNIX_only__or_as_a_service__Win32_only__n______Warning__Win32_:_this_switch_is_provided_automatically_when_the_service_n______is_started_from_the_control_panel_n___s__file_:_save_the_current_configuration_to_file_n___f__file_:_load_the_current_configuration_from_file__all_the_switches_n______specified_from_the_command_line_are_ignored_n___h:_print_this_help_screen_n_n
call fcn.00408888
add esp, 4
push 0
call fcn.00408bdd
push 2
call fcn.0040849b
push str.Press_CTRL__C_to_stop_the_server..._n
call fcn.00408888
add esp, 0xc
call fcn.00405cf0
push 0
call fcn.00408bdd
nop
xchg ebp, eax
pop edx
inc eax
add ch, ah
pop edx
inc eax
add byte [edx + 0x5a], bl
inc eax
add byte [edx + ebx*2 + 0x5bfc0040], ah
inc eax
add byte [ebx], bh
pop esp
inc eax
add bh, al
pop edx
inc eax
add byte [ebp + 0x7800405a], ch
pop edx
inc eax
add byte [edx], bl
pop esp
inc eax
add byte [eax - 0x7affbfa6], bh
pop ebx
inc eax
add byte [eax], al
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
add dword [edx], eax
or eax, dword [ebx]
or eax, dword [ebx + ecx]
add eax, 101387019
or eax, dword [edi]
or ecx, dword [eax]
or ecx, dword [ebx]
or dword [ebx], ecx
or ecx, dword [edx]
int3