Function at 0x436d50
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x4b7014]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x114
lea eax, [ebp - 0x220]
mov esi, edx
push 0
push eax
mov dword [ebp - 0x238], esi
mov ebx, ecx
call fcn.004581b0
push 0x100
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.004581b0
add esp, 0x18
test esi, esi
jne 0x436e0b
test ebx, ebx
je 0x436dc0
xor ecx, ecx
mov edx, 1
mov eax, 0x428
mov dword [0x4b9abc], ecx
mov dword [0x4b9ac0], edx
mov dword [0x4b9ac4], eax
jmp 0x436e1c
push 0
push 0x4364a0
push dword [0x4b9a44]
push 0xa7
push dword [0x4b9a40]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp eax, 2
je 0x436e0b
cmp eax, 1
je 0x4370bb
push 0x30
push str.Error
test eax, eax
jns 0x436e01
call fcn.00435420
jmp 0x4370b2
push str.DialogBox_Error
jmp 0x4370b3
mov eax, dword [0x4b9ac4]
mov edx, dword [0x4b9ac0]
mov ecx, dword [0x4b9abc]
mov dword [ebp - 0x114], ecx
mov ecx, dword [0x4b9ac8]
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x118], ecx
cmp eax, 0x43c
jne 0x436e60
push 0x10
lea eax, [ebp - 0x220]
mov dword [ebp - 0x11c], 2
push 0x4b9acc
push eax
call fcn.0045d990
add esp, 0xc
jmp 0x436ee9
cmp eax, 0x43d
jne 0x436e86
mov esi, dword [0x4b9adc]
lea edi, [ebp - 0x220]
mov ecx, 0x40
mov dword [ebp - 0x11c], 3
rep movsd dword es:[edi], dword [esi]
jmp 0x436ee9
cmp eax, 0x428
jne 0x436f42
lea eax, [ebp - 0x234]
mov dword [ebp - 0x11c], 1
push eax
lea eax, [ebp - 0x230]
mov dword [ebp - 0x234], 0x10
push eax
push ebx
call dword [sym.imp.WS2_32.dll_getpeername]
test eax, eax
jne 0x436edf
push 0x100
push dword [ebp - 0x22c]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.0045d990
add esp, 0xc
mov dword [0x4b9ac4], 0x43c
mov edi, dword [0x4ba84c]
xor esi, esi
lea edx, [edi + 0xac]
nop word [eax + eax]
mov ecx, dword [edx]
cmp dword [ecx + 0x138], 0
jne 0x436f28
cmp dword [ecx + 0x134], 0
jne 0x436f28
mov eax, dword [ecx + 0x158]
mov eax, dword [eax + 4]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x437008
inc esi
add edx, 4
cmp esi, 3
jl 0x436f00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004555d3
mov esp, ebp
pop ebp
ret
cmp eax, 0x30
jne 0x436f69
mov esi, dword [0x4b9adc]
lea edi, [ebp - 0x220]
mov ecx, 0x40
mov dword [ebp - 0x11c], 4
rep movsd dword es:[edi], dword [esi]
jmp 0x436edf
cmp eax, 0x43e
jne 0x436ee9
mov esi, dword [0x4ba84c]
cmp dword [esi], 0
jne 0x436fd9
cmp dword [esi + 0xa4], 0
jne 0x436fd9
push 0
push 0
push esi
push 0x4323f0
push 0
push 0
mov dword [esi + 0xa8], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 5
push 0x428
push dword [0x4b9a44]
mov dword [esi], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [0x4b9ac4], 0x43c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004555d3
mov esp, ebp
pop ebp
ret
push 0x30
push str.Error
push str.Error_starting_local_server.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x4b9ac4], 0x43c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004555d3
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x220]
push eax
push ebx
call fcn.0042ee40
test eax, eax
jne 0x437087
mov eax, dword [edi + esi*4 + 0xac]
push 0
push dword [0x4ba150]
mov eax, dword [eax + 0x158]
mov esi, dword [eax + 0x688]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
push 0x405
push dword [0x4b9f20]
call dword [sym.imp.USER32.dll_PostMessageA]
cmp esi, 3
jge 0x4370bb
cmp dword [ebp - 0x238], 2
je 0x4370bb
imul edi, esi, 0x114
mov ecx, 0x45
lea esi, [ebp - 0x220]
add edi, 0x4b9ae0
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004555d3
mov esp, ebp
pop ebp
ret
cmp eax, 0xffffffff
je 0x4370bb
push 0x100
lea ecx, [ebp - 0x108]
push ecx
push eax
push dword [0x4b9a40]
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x30
push str.Error
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004555d3
mov esp, ebp
pop ebp
ret