Function at 0x4326c0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x47990e
push eax
mov eax, 0x4630
mov dword fs:[0], esp
call fcn.00457d20
push ebx
push ebp
push esi
mov esi, dword [esp + 0x464c]
mov ebx, ecx
push edi
mov ecx, 0x400
xor eax, eax
mov dword [ebx + 8], 1
mov dword [ebx + 4], esi
mov dl, byte [0x493b50]
lea edi, [esp + 0x1235]
mov byte [esp + 0x1234], dl
mov byte [esp + 0x20], dl
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [esp + 0x21]
rep stosd dword es:[edi], eax
mov ebp, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ecx, 0x400
lea edi, [esp + 0x363d]
mov byte [esp + 0x363c], dl
mov dword [esp + 0x14], eax
rep stosd dword es:[edi], eax
mov eax, dword [esi + 0x44]
test eax, eax
je 0x432a21
push 0x35
mov ecx, ebx
call fcn.0041c5f0
test eax, eax
jne 0x432a21
mov al, byte [0x493b50]
mov ecx, 0x41
mov byte [esp + 0x128], al
xor eax, eax
lea edi, [esp + 0x129]
push 0x493f48
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x223c]
push 0x400
push ecx
push str.English
push 0x48d194
push str.System
call ebp
lea edx, [esp + 0x2238]
lea eax, [esp + 0x128]
push edx
push 0x493e40
push str._sLanguage_s.ini
push eax
call fcn.00457c43
mov cl, byte [0x493b50]
xor eax, eax
mov byte [esp + 0x240], cl
mov ecx, 0x400
lea edi, [esp + 0x241]
add esp, 0x10
rep stosd dword es:[edi], eax
call fcn.004744d9
mov eax, dword [eax + 8]
lea edx, [esp + 0x230]
push 0x1000
push edx
push 0x6c
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x48d174
lea eax, [esp + 0x234]
push 0x48d170
push eax
call fcn.004085c0
push 0x48d16c
lea ecx, [esp + 0x240]
push 0x48d168
push ecx
call fcn.004085c0
mov dl, byte [0x493b50]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2651]
mov byte [esp + 0x2650], dl
add esp, 0x18
rep stosd dword es:[edi], eax
lea eax, [esp + 0x128]
lea ecx, [esp + 0x2638]
push eax
push 0x1000
lea edx, [esp + 0x238]
push ecx
lea eax, [esp + 0x23c]
push edx
push eax
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x4328a9
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x30]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x3c]
push ecx
push edx
push 0x35
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x4329de
lea eax, [esp + 0x10]
push str.Do_you_want_to_stop_it_
push eax
call fcn.00408050
mov esi, eax
lea ecx, [esp + 0x20]
push str.is_using_port
push ecx
mov dword [esp + 0x4658], 0
call fcn.00408050
mov edx, dword [esi]
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
push edx
push 0x35
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
lea eax, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push eax
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x18]
call fcn.0046e162
lea ecx, [esp + 0x10]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea ecx, [esp + 0x1238]
push 0x44
lea edx, [esp + 0x3644]
push ecx
push edx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x432a21
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x20]
push eax
push ecx
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x4329f1
push 0x35
mov ecx, ebx
call fcn.0041c5f0
test eax, eax
je 0x43275d
jmp 0x432a21
push 0
lea edx, [esp + 0x1238]
push 0x40
push edx
call fcn.004722e6
jmp 0x432a21
lea eax, [esp + 0x10]
push str.Stop_failed_
push eax
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea ecx, [esp + 0x1234]
push 0x40
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x18]
test ecx, ecx
je 0x432d0f
mov edx, dword [eax + 0x20]
mov ecx, ebx
push edx
call fcn.0041bdc0
test eax, eax
jne 0x432d0f
mov al, byte [0x493b50]
mov ecx, 0x41
mov byte [esp + 0x128], al
xor eax, eax
lea edi, [esp + 0x129]
push 0x493f48
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x223c]
push 0x400
push ecx
push str.English
push 0x48d194
push str.System
call ebp
lea edx, [esp + 0x2238]
lea eax, [esp + 0x128]
push edx
push 0x493e40
push str._sLanguage_s.ini
push eax
call fcn.00457c43
mov cl, byte [0x493b50]
xor eax, eax
mov byte [esp + 0x240], cl
mov ecx, 0x400
lea edi, [esp + 0x241]
add esp, 0x10
rep stosd dword es:[edi], eax
call fcn.004744d9
mov eax, dword [eax + 8]
lea edx, [esp + 0x230]
push 0x1000
push edx
push 0x6e
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x48d174
lea eax, [esp + 0x234]
push 0x48d170
push eax
call fcn.004085c0
push 0x48d16c
lea ecx, [esp + 0x240]
push 0x48d168
push ecx
call fcn.004085c0
mov dl, byte [0x493b50]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2651]
mov byte [esp + 0x2650], dl
add esp, 0x18
rep stosd dword es:[edi], eax
lea eax, [esp + 0x128]
lea ecx, [esp + 0x2638]
push eax
push 0x1000
lea edx, [esp + 0x238]
push ecx
lea eax, [esp + 0x23c]
push edx
push eax
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x432b8e
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x3c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x30]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
push eax
mov esi, dword [ecx + 0x20]
push esi
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x432ccc
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov edi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 1
call fcn.00408050
mov ecx, dword [edi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push esi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x432d0f
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x432cdf
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x20]
mov ecx, ebx
push edx
call fcn.0041bdc0
test eax, eax
je 0x432a42
jmp 0x432d0f
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x432d0f
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x433001
mov eax, dword [eax + 0x30]
mov ecx, ebx
push eax
call fcn.00420cd0
test eax, eax
jne 0x433001
mov cl, byte [0x493b50]
push 0x493f48
lea edx, [esp + 0x223c]
push 0x400
mov byte [esp + 0x130], cl
push edx
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x135]
push str.English
push 0x48d194
push str.System
rep stosd dword es:[edi], eax
call ebp
lea eax, [esp + 0x2238]
lea ecx, [esp + 0x128]
push eax
push 0x493e40
push str._sLanguage_s.ini
push ecx
call fcn.00457c43
mov dl, byte [0x493b50]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x241]
mov byte [esp + 0x240], dl
add esp, 0x10
rep stosd dword es:[edi], eax
call fcn.004744d9
mov eax, dword [eax + 8]
lea ecx, [esp + 0x230]
push 0x1000
push ecx
push 0x8e
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x48d174
lea edx, [esp + 0x234]
push 0x48d170
push edx
call fcn.004085c0
push 0x48d16c
lea eax, [esp + 0x240]
push 0x48d168
push eax
call fcn.004085c0
mov cl, byte [0x493b50]
add esp, 0x18
mov byte [esp + 0x2638], cl
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2639]
lea edx, [esp + 0x128]
rep stosd dword es:[edi], eax
push edx
lea eax, [esp + 0x263c]
push 0x1000
lea ecx, [esp + 0x238]
push eax
lea edx, [esp + 0x23c]
push ecx
push edx
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x432e80
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x3c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x30]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
push eax
mov esi, dword [ecx + 0x30]
push esi
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x432fbe
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov edi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 2
call fcn.00408050
mov ecx, dword [edi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push esi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x433001
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x432fd1
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x30]
mov ecx, ebx
push edx
call fcn.00420cd0
test eax, eax
je 0x432d30
jmp 0x433001
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x433001
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x4c]
test ecx, ecx
je 0x4332f5
mov eax, dword [eax + 0x50]
mov ecx, ebx
push eax
call fcn.00422220
test eax, eax
jne 0x4332f5
mov cl, byte [0x493b50]
push 0x493f48
lea edx, [esp + 0x223c]
push 0x400
mov byte [esp + 0x130], cl
push edx
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x135]
push str.English
push 0x48d194
push str.System
rep stosd dword es:[edi], eax
call ebp
lea eax, [esp + 0x2238]
lea ecx, [esp + 0x128]
push eax
push 0x493e40
push str._sLanguage_s.ini
push ecx
call fcn.00457c43
mov dl, byte [0x493b50]
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x241]
mov byte [esp + 0x240], dl
lea edx, [esp + 0x240]
rep stosd dword es:[edi], eax
mov edi, str.Remote_Admin_service_startup_failed_
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x48d174
mov eax, ecx
mov esi, edi
mov edi, edx
push 0x48d170
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x248]
push ecx
call fcn.004085c0
push 0x48d16c
lea edx, [esp + 0x250]
push 0x48d168
push edx
call fcn.004085c0
mov al, byte [0x493b50]
mov ecx, 0x400
mov byte [esp + 0x2660], al
xor eax, eax
lea edi, [esp + 0x2661]
add esp, 0x28
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x128]
lea edx, [esp + 0x2638]
push ecx
push 0x1000
lea eax, [esp + 0x238]
push edx
lea ecx, [esp + 0x23c]
push eax
push ecx
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x433174
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x3c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x30]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
push eax
mov esi, dword [ecx + 0x50]
push esi
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x4332b2
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov edi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 3
call fcn.00408050
mov ecx, dword [edi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push esi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x4332f5
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x4332c5
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x50]
mov ecx, ebx
push edx
call fcn.00422220
test eax, eax
je 0x433022
jmp 0x4332f5
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x4332f5
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x433318
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x433318
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x433318
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x4335c3
mov eax, dword [eax + 0xc]
mov ecx, ebx
push eax
call fcn.00418e80
test eax, eax
jne 0x4335c3
mov cl, byte [0x493b50]
xor eax, eax
mov byte [esp + 0x128], cl
mov ecx, 0x41
lea edi, [esp + 0x129]
lea edx, [esp + 0x128]
rep stosd dword es:[edi], eax
push edx
call fcn.0040abd0
mov al, byte [0x493b50]
mov ecx, 0x400
mov byte [esp + 0x234], al
xor eax, eax
lea edi, [esp + 0x235]
add esp, 4
rep stosd dword es:[edi], eax
call fcn.004744d9
mov eax, dword [eax + 8]
lea ecx, [esp + 0x230]
push 0x1000
push ecx
push 0x6d
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x48d174
lea edx, [esp + 0x234]
push 0x48d170
push edx
call fcn.004085c0
push 0x48d16c
lea eax, [esp + 0x240]
push 0x48d168
push eax
call fcn.004085c0
mov cl, byte [0x493b50]
add esp, 0x18
mov byte [esp + 0x2638], cl
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2639]
lea edx, [esp + 0x128]
rep stosd dword es:[edi], eax
push edx
lea eax, [esp + 0x263c]
push 0x1000
lea ecx, [esp + 0x238]
push eax
lea edx, [esp + 0x23c]
push ecx
push edx
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x433442
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x3c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x30]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
push eax
mov esi, dword [ecx + 0xc]
push esi
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x433580
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov edi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 4
call fcn.00408050
mov ecx, dword [edi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push esi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x4335c3
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x433593
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0xc]
mov ecx, ebx
push edx
call fcn.00418e80
test eax, eax
je 0x43332b
jmp 0x4335c3
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x4335c3
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x40]
test ecx, ecx
je 0x4339e0
mov eax, dword [eax + 0x4104]
mov ecx, ebx
push eax
call fcn.0041f8e0
test eax, eax
jne 0x433888
mov cl, byte [0x493b50]
xor eax, eax
mov byte [esp + 0x128], cl
mov ecx, 0x41
lea edi, [esp + 0x129]
lea edx, [esp + 0x128]
rep stosd dword es:[edi], eax
push edx
call fcn.0040abd0
mov al, byte [0x493b50]
mov ecx, 0x400
mov byte [esp + 0x234], al
xor eax, eax
lea edi, [esp + 0x235]
add esp, 4
rep stosd dword es:[edi], eax
call fcn.004744d9
mov eax, dword [eax + 8]
lea ecx, [esp + 0x230]
push 0x1000
push ecx
push 0x86
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x48d174
lea edx, [esp + 0x234]
push 0x48d170
push edx
call fcn.004085c0
push 0x48d16c
lea eax, [esp + 0x240]
push 0x48d168
push eax
call fcn.004085c0
mov cl, byte [0x493b50]
add esp, 0x18
mov byte [esp + 0x2638], cl
mov ecx, 0x400
xor eax, eax
lea edi, [esp + 0x2639]
lea edx, [esp + 0x128]
rep stosd dword es:[edi], eax
push edx
lea eax, [esp + 0x263c]
push 0x1000
lea ecx, [esp + 0x238]
push eax
lea edx, [esp + 0x23c]
push ecx
push edx
push str.String
call ebp
mov al, byte [esp + 0x2638]
test al, al
je 0x433701
lea edi, [esp + 0x2638]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x230]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x48d170
lea ecx, [esp + 0x234]
push 0x48d174
push ecx
call fcn.004085c0
push 0x48d168
lea edx, [esp + 0x240]
push 0x48d16c
push edx
call fcn.004085c0
lea edi, [esp + 0x248]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x124c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x105
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x3c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x30]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 4]
push eax
mov esi, dword [ecx + 0x4104]
push esi
call fcn.0043df50
add esp, 0x28
test eax, eax
je 0x433845
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov edi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 5
call fcn.00408050
mov ecx, dword [edi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push esi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x433888
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x433858
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x4104]
mov ecx, ebx
push edx
call fcn.0041f8e0
test eax, eax
je 0x4335e7
jmp 0x433888
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x433888
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x4100]
push ecx
mov ecx, ebx
call fcn.0041fed0
test eax, eax
jne 0x4339e0
or ebp, 0xffffffff
lea edx, [esp + 0x1234]
push edx
push 0x86
call fcn.00432140
mov eax, dword [ebx + 4]
lea ecx, [esp + 0x28]
push 0x105
lea edx, [esp + 0x20]
mov edi, dword [eax + 0x4100]
push ecx
push edx
push edi
call fcn.0043df50
add esp, 0x18
test eax, eax
je 0x43399d
lea eax, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push eax
call fcn.00408050
mov esi, eax
lea ecx, [esp + 0x18]
push str.is_using_port
push ecx
mov dword [esp + 0x4658], 6
call fcn.00408050
mov edx, dword [esi]
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
push edx
push edi
push eax
lea edx, [esp + 0x3c]
push ecx
push edx
lea eax, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push eax
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], ebp
call fcn.0046e162
push 0xa
lea ecx, [esp + 0x1238]
push 0x44
lea edx, [esp + 0x3644]
push ecx
push edx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x4339e0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x20]
push eax
push ecx
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x4339b0
mov edx, dword [ebx + 4]
mov ecx, ebx
mov eax, dword [edx + 0x4100]
push eax
call fcn.0041fed0
test eax, eax
je 0x4338a4
jmp 0x4339e0
push 0
lea ecx, [esp + 0x1238]
push 0x40
push ecx
call fcn.004722e6
jmp 0x4339e0
lea edx, [esp + 0x10]
push str.Stop_failed_
push edx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea ecx, [esp + 0x1234]
push 0x40
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x433b3a
mov edx, dword [eax + 0x38]
mov ecx, ebx
push edx
call fcn.00421a00
test eax, eax
jne 0x433b3a
or ebp, 0xffffffff
lea eax, [esp + 0x1234]
push eax
push 0x8c
call fcn.00432140
mov ecx, dword [ebx + 4]
lea edx, [esp + 0x28]
push 0x105
lea eax, [esp + 0x20]
mov edi, dword [ecx + 0x38]
push edx
push eax
push edi
call fcn.0043df50
add esp, 0x18
test eax, eax
je 0x433af7
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov esi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], 7
call fcn.00408050
mov ecx, dword [esi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push edi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], ebp
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x433b3a
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x433b0a
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x38]
mov ecx, ebx
push edx
call fcn.00421a00
test eax, eax
je 0x433a04
jmp 0x433b3a
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x433b3a
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x433c96
mov eax, dword [eax + 0x28]
mov ecx, ebx
push eax
call fcn.004227a0
test eax, eax
jne 0x433c96
mov ebp, 8
lea ecx, [esp + 0x1234]
push ecx
push 0x8d
call fcn.00432140
mov edx, dword [ebx + 4]
lea eax, [esp + 0x28]
push 0x105
lea ecx, [esp + 0x20]
mov edi, dword [edx + 0x28]
push eax
push ecx
push edi
call fcn.0043df50
add esp, 0x18
test eax, eax
je 0x433c53
lea edx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push edx
call fcn.00408050
mov esi, eax
lea eax, [esp + 0x18]
push str.is_using_port
push eax
mov dword [esp + 0x4658], ebp
call fcn.00408050
mov ecx, dword [esi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push edi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x433c96
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x433c66
mov ecx, dword [ebx + 4]
mov edx, dword [ecx + 0x28]
mov ecx, ebx
push edx
call fcn.004227a0
test eax, eax
je 0x433b60
jmp 0x433c96
push 0
lea eax, [esp + 0x1238]
push 0x40
push eax
call fcn.004722e6
jmp 0x433c96
lea ecx, [esp + 0x10]
push str.Stop_failed_
push ecx
call fcn.00408050
mov eax, dword [eax]
add esp, 8
lea edx, [esp + 0x1234]
push 0x40
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
call fcn.0046e162
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x433de7
mov ecx, ebx
call fcn.0042a000
cmp eax, 1
je 0x433de7
mov ebp, 9
lea ecx, [esp + 0x1234]
neg eax
push ecx
push 0x81
mov edi, eax
call fcn.00432140
lea edx, [esp + 0x28]
push 0x105
lea eax, [esp + 0x20]
push edx
push eax
push edi
call fcn.0043df50
add esp, 0x18
test eax, eax
je 0x433da4
lea ecx, [esp + 0x18]
push str.Do_you_want_to_stop_it_
push ecx
call fcn.00408050
mov esi, eax
lea edx, [esp + 0x18]
push str.is_using_port
push edx
mov dword [esp + 0x4658], ebp
call fcn.00408050
mov ecx, dword [esi]
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
push ecx
push edi
push edx
lea ecx, [esp + 0x3c]
push eax
push ecx
lea edx, [esp + 0x3660]
push str._s_PID__ld___s__d.__s
push edx
call fcn.00457c43
add esp, 0x2c
lea ecx, [esp + 0x10]
call fcn.0046e162
lea ecx, [esp + 0x18]
mov dword [esp + 0x4648], 0xffffffff
call fcn.0046e162
push 0xa
lea eax, [esp + 0x1238]
push 0x44
lea ecx, [esp + 0x3644]
push eax
push ecx
push 0
call fcn.0043a7c0
add esp, 0x14
cmp eax, 7
je 0x433de7
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0043cb80
add esp, 8
test eax, eax
je 0x433db7
mov ecx, ebx
call fcn.0042a000
cmp eax, 1
jne 0x433cb9
jmp 0x433de7
push 0
lea ecx, [esp + 0x1238]
push 0x40
push ecx
call fcn.004722e6
jmp 0x433de7
lea edx, [esp + 0x1c]
push str.Stop_failed_
push edx
call fcn.00408050
mov edx, dword [eax]
add esp, 8
lea ecx, [esp + 0x1234]
push 0x40
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x1c]
call fcn.0046e162
mov ecx, dword [esp + 0x4640]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x463c
ret 4