Function at 0x100013c0
Capabilities:
Enumerate files on windows
Get common file path
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1f78
call fcn.10016ca0
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1f88]
push edi
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
xor ebx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], ebx
cmp ecx, 0x400
mov dword [esp + 0x2c], ebx
jbe 0x1000141b
mov eax, dword [esp + 0x1f98]
push str.The_source_string_is_too_long._Cannot_handle_it_correctly.
push 0x100
push eax
call fcn.10016898
add esp, 0xc
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1f78
ret
mov ebp, dword [esp + 0x1f98]
lea ecx, [esp + 0x28]
push ebp
push ebx
push ebx
push ebx
push ecx
push esi
call sym.wpcap.dll_pcap_parsesrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10001a29
mov eax, dword [esp + 0x28]
cmp eax, 3
jne 0x1000161e
push ebp
push ebx
lea edx, [esp + 0xb8c]
push ebx
lea eax, [esp + 0x34]
push edx
push eax
push esi
call sym.wpcap.dll_pcap_parsesrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10001a29
mov esi, dword [esp + 0x1f94]
push ebp
push esi
mov byte [esp + 0x680], 0
call sym.wpcap.dll_pcap_findalldevs
add esp, 8
cmp eax, 0xffffffff
je 0x10001a29
cmp esi, ebx
je 0x100015fd
mov esi, dword [esi]
cmp esi, ebx
je 0x100015fd
mov ecx, dword [esi + 4]
push ebp
push ecx
push ebx
push ebx
lea edx, [esp + 0x288]
push 3
push edx
call sym.wpcap.dll_pcap_createsrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10002187
mov eax, dword [esi + 4]
push eax
call fcn.100168e9
lea edi, [esp + 0x27c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.100169d2
mov edx, eax
add esp, 8
cmp edx, ebx
mov dword [esi + 4], edx
je 0x100015ce
lea edi, [esp + 0x278]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
lea ecx, [esp + 0x27c]
push ecx
push edx
call fcn.10016ba0
mov eax, dword [esi + 8]
add esp, 0xc
cmp eax, ebx
je 0x1000153e
cmp byte [eax], 0
je 0x1000153e
push str.on_local_host
push eax
push str.Network_adapter
push str._s__s__s
lea edx, [esp + 0x288]
push 0x400
push edx
jmp 0x1000155e
mov eax, dword [esi + 4]
push str.on_local_host
push eax
push str.Network_adapter
push str._s__s__s
lea ecx, [esp + 0x288]
push 0x400
push ecx
call fcn.10016898
mov edx, dword [esi + 8]
add esp, 0x18
push edx
call fcn.100168e9
lea edi, [esp + 0x27c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
call fcn.100169d2
mov edx, eax
add esp, 8
cmp edx, ebx
mov dword [esi + 8], edx
je 0x1000187c
lea edi, [esp + 0x278]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [esp + 0x278]
push ecx
push eax
push edx
call fcn.10016ba0
mov esi, dword [esi]
add esp, 0xc
cmp esi, ebx
jne 0x100014a0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1f78
ret
call fcn.10016b7f
mov ecx, dword [eax]
push ecx
call sym.wpcap.dll_pcap_strerror
push eax
push str.malloc___failed:__s
push 0x100
push ebp
call fcn.10016898
add esp, 0x14
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1f78
ret
push str.No_interfaces_found__Make_sure_libpcap_WinPcap_is_properly_installed_on_the_local_machine.
push 0x100
push ebp
call fcn.10016898
add esp, 0xc
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1f78
ret
mov ecx, dword [esp + 0x1f94]
cmp eax, 2
push ebp
mov dword [ecx], ebx
jne 0x100018aa
lea edx, [esp + 0x788]
lea eax, [esp + 0x138c]
push edx
lea ecx, [esp + 0xb8c]
push eax
lea edx, [esp + 0x34]
push ecx
push edx
push esi
call sym.wpcap.dll_pcap_parsesrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10001a29
lea edi, [esp + 0x784]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov esi, ecx
cmp byte [esp + esi + 0x783], 0x5c
je 0x1000168e
mov byte [esp + esi + 0x784], 0x5c
mov byte [esp + esi + 0x785], 0
inc esi
lea eax, [esp + 0x784]
lea ecx, [esp + 0x1b88]
push eax
push 0x1002d2e4
push 0x400
push ecx
call fcn.10016898
mov al, byte [esp + esi + 0x793]
add esp, 0x10
cmp al, 0x2a
je 0x100016cb
mov byte [esp + esi + 0x784], 0x2a
mov byte [esp + esi + 0x785], 0
lea edx, [esp + 0x78]
lea eax, [esp + 0x784]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x18], eax
jne 0x10001710
lea ecx, [esp + 0x1b88]
push ecx
push str.Error_when_listing_files:_does_folder__s_exist_
push 0x100
push ebp
call fcn.10016898
add esp, 0x10
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1f78
ret
mov esi, dword [esp + 0x24]
lea edx, [esp + 0xa4]
lea eax, [esp + 0x1b88]
push edx
push eax
push str._s_s
lea ecx, [esp + 0x1794]
push 0x400
push ecx
call fcn.10016898
lea edx, [esp + 0x179c]
push ebp
push edx
call sym.wpcap.dll_pcap_open_offline
mov ebx, eax
add esp, 0x1c
test ebx, ebx
je 0x10001863
mov edi, dword [esp + 0x1f94]
push 0x14
cmp dword [edi], 0
jne 0x10001770
call fcn.100169d2
add esp, 4
mov dword [edi], eax
jmp 0x1000177a
call fcn.100169d2
add esp, 4
mov dword [esi], eax
mov esi, eax
test esi, esi
je 0x100015ce
mov ecx, esi
xor eax, eax
lea edx, [esp + 0x1788]
push ebp
mov dword [ecx], eax
push edx
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
push eax
push eax
mov dword [ecx + 0x10], eax
lea eax, [esp + 0x288]
push 2
push eax
call sym.wpcap.dll_pcap_createsrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10002187
lea edi, [esp + 0x278]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
lea ecx, [edi + 1]
push ecx
call fcn.100169d2
add esp, 4
mov dword [esi + 4], eax
test eax, eax
je 0x1000187c
lea edx, [esp + 0x278]
push edi
push edx
push eax
call fcn.10016ba0
mov ecx, dword [esi + 4]
lea edx, [esp + 0x1794]
push str.on_local_host
push edx
push str.File
push str._s__s__s
lea eax, [esp + 0x294]
push 0x400
push eax
mov byte [ecx + edi], 0
call fcn.10016898
lea edi, [esp + 0x29c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [ecx + 1]
push edi
call fcn.100169d2
add esp, 0x28
mov dword [esi + 8], eax
test eax, eax
je 0x10001889
lea ecx, [esp + 0x278]
push edi
mov edx, eax
push ecx
push edx
call fcn.10016ba0
push ebx
call sym.wpcap.dll_pcap_close
add esp, 0x10
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x78]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x10001896
jmp 0x10001714
call fcn.10016b7f
mov edx, dword [eax]
push edx
jmp 0x100015d6
call fcn.10016b7f
mov eax, dword [eax]
push eax
jmp 0x100015d6
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1f78
ret
lea ecx, [esp + 0x138c]
push ebx
lea edx, [esp + 0xb8c]
push ecx
lea eax, [esp + 0x34]
push edx
push eax
push esi
call sym.wpcap.dll_pcap_parsesrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10001a29
push 0x100
push ebp
call fcn.10007300
add esp, 8
cmp eax, 0xffffffff
je 0x10001a29
lea ecx, [esp + 0xb84]
push ebp
push ecx
call fcn.10006f20
add esp, 8
cmp eax, 0xffffffff
je 0x10001a29
cmp eax, ebx
je 0x100019c9
mov esi, eax
mov dword [esp + 0x2c], 1
mov dword [esp + 0x14], esi
push ebx
push ebx
lea eax, [esp + 0x38]
push 2
push eax
call fcn.10006d80
push 0x100
push ebp
lea ecx, [esp + 0x48]
push 8
push ecx
push esi
call fcn.10007890
add esp, 0x24
cmp eax, 0xffffffff
je 0x10002126
push 0x100
push ebp
push 1
lea edx, [esp + 0x3c]
push 8
push edx
push esi
call fcn.10007960
add esp, 0x18
cmp eax, 0xffffffff
je 0x10002126
push ebx
push 1
lea eax, [esp + 0x38]
push 0x82
push eax
push esi
push ebp
call fcn.10008980
add esp, 0x18
cmp eax, 0x82
je 0x10001c83
cmp eax, 0xfffffffd
jl 0x10001997
cmp eax, ebx
jl 0x100019aa
cmp eax, 1
je 0x100019aa
push str.Internal_error
push 0x100
push ebp
call fcn.10016898
add esp, 0xc
cmp dword [esp + 0x2c], ebx
jne 0x100019bb
push ebx
push ebx
push esi
call fcn.100075b0
add esp, 0xc
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x58]
lea edx, [esp + 0x1388]
rep stosd dword es:[edi], eax
test edx, edx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], 1
je 0x10001a37
mov al, byte [esp + 0x1388]
test al, al
je 0x10001a37
push 0x100
lea eax, [esp + 0x24]
push ebp
lea ecx, [esp + 0x60]
push eax
lea edx, [esp + 0x1394]
push ecx
push edx
lea eax, [esp + 0xb98]
push eax
call fcn.100075f0
add esp, 0x18
cmp eax, 0xffffffff
jne 0x10001a4e
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
push 0x100
lea ecx, [esp + 0x24]
push ebp
lea edx, [esp + 0x60]
push ecx
push edx
push str.2002
jmp 0x10001a14
mov ecx, dword [esp + 0x20]
push 0x100
push ebp
push ebx
push ebx
push ecx
call fcn.100073d0
mov esi, eax
add esp, 0x14
cmp esi, 0xffffffff
mov dword [esp + 0x14], esi
je 0x10002126
mov eax, dword [0x10032c2c]
mov edx, dword [esp + 0x20]
cmp eax, ebx
mov dword [esp + 0x18], edx
jne 0x10001c44
mov eax, dword [0x10032c28]
mov dword [esp + 0x3c], str.getaddrinfo
cmp eax, ebx
mov dword [esp + 0x40], 0x100026b0
mov dword [esp + 0x44], str.getnameinfo
mov dword [esp + 0x48], 0x100033f0
mov dword [esp + 0x4c], str.freeaddrinfo
mov dword [esp + 0x50], 0x10002660
je 0x10001aca
mov eax, dword [0x1002d25c]
jmp 0x10001c3f
lea eax, [esp + 0x67c]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x10001c2a
lea edi, [esp + 0x67c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x78]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x78]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.ws2_32
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
and ecx, 3
lea eax, [esp + 0x78]
rep movsb byte es:[edi], byte [esi]
push eax
call ebx
mov esi, eax
test esi, esi
je 0x10001b69
push str.getaddrinfo
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x10001be5
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edi, [esp + 0x67c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x78]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x78]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str.wship6
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [esp + 0x78]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call ebx
mov esi, eax
test esi, esi
je 0x10001c2a
push str.getaddrinfo
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x10001be5
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x10001c2a
mov ecx, dword [0x100201f0]
xor ebx, ebx
test ecx, ecx
jle 0x10001c14
lea edi, [esp + 0x40]
mov ecx, dword [edi - 4]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [edi], eax
je 0x10001bdc
mov ecx, dword [0x100201f0]
inc ebx
add edi, 8
cmp ebx, ecx
jl 0x10001bf5
xor eax, eax
test ecx, ecx
jle 0x10001c2a
mov edx, dword [esp + eax*8 + 0x40]
mov dword [eax*8 + 0x1002d24c], edx
inc eax
cmp eax, ecx
jl 0x10001c1a
mov eax, dword [0x1002d25c]
mov esi, dword [esp + 0x14]
mov dword [0x10032c28], 1
xor ebx, ebx
mov dword [0x10032c2c], eax
mov ecx, dword [esp + 0x18]
push ecx
call eax
mov edx, dword [esp + 0x1f90]
push ebp
push edx
push esi
mov dword [esp + 0x2c], ebx
call fcn.10006a90
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10001919
push ebx
push ebx
push esi
call fcn.100075b0
add esp, 0xc
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1f78
ret
mov ecx, dword [esp + 0x32]
push ecx
call dword [sym.imp.WS2_32.dll_ntohs]
and eax, 0xffff
mov dword [esp + 0x38], ebx
mov dword [esp + 0x54], eax
jle 0x1000207c
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x54]
mov eax, dword [esp + 0x14]
push 0x100
push ebp
push 1
lea edx, [esp + 0x48]
push 0xc
push edx
push eax
mov byte [esp + 0x139c], 0
call fcn.10007960
mov ecx, dword [esp + 0x28]
add esp, 0x18
add ecx, eax
cmp ecx, 0xffffffff
mov dword [esp + 0x10], ecx
je 0x10002126
mov ecx, dword [esp + 0x3c]
mov edi, dword [sym.imp.WS2_32.dll_ntohs]
push ecx
call edi
mov edx, dword [esp + 0x3e]
mov word [esp + 0x3c], ax
push edx
call edi
mov word [esp + 0x3e], ax
mov eax, dword [esp + 0x44]
push eax
call edi
mov word [esp + 0x44], ax
mov eax, dword [esp + 0x38]
test eax, eax
push 0x14
jne 0x10001d27
call fcn.100169d2
mov ecx, dword [esp + 0x1f98]
add esp, 4
mov dword [ecx], eax
jmp 0x10001d31
call fcn.100169d2
add esp, 4
mov dword [ebx], eax
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10002105
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov ax, word [esp + 0x3c]
test ax, ax
je 0x10001e22
cmp ax, 0x401
jae 0x100020c7
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x14]
push 0x100
push ebp
and ecx, 0xffff
push 1
lea edx, [esp + 0x284]
push ecx
push edx
push eax
call fcn.10007960
mov ecx, dword [esp + 0x28]
add esp, 0x18
add ecx, eax
cmp ecx, 0xffffffff
mov dword [esp + 0x10], ecx
je 0x10002126
mov ecx, dword [esp + 0x3c]
lea edx, [esp + 0x278]
and ecx, 0xffff
push ebp
lea eax, [esp + 0x138c]
push edx
mov byte [esp + ecx + 0x280], 0
lea ecx, [esp + 0xb8c]
push eax
push ecx
lea edx, [esp + 0xf94]
push 4
push edx
call sym.wpcap.dll_pcap_createsrcstr
add esp, 0x18
cmp eax, 0xffffffff
je 0x10002187
lea edi, [esp + 0xf84]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [ecx + 1]
push edi
call fcn.100169d2
add esp, 4
mov dword [ebx + 4], eax
test eax, eax
je 0x100020dc
lea ecx, [esp + 0xf84]
push edi
push ecx
push eax
call fcn.10016ba0
add esp, 0xc
mov ax, word [esp + 0x3e]
test ax, ax
je 0x10001ef2
cmp ax, 0x401
jae 0x100020e6
mov edx, dword [esp + 0x3e]
mov ecx, dword [esp + 0x14]
push 0x100
push ebp
and edx, 0xffff
push 1
lea eax, [esp + 0x284]
push edx
push eax
push ecx
call fcn.10007960
mov ecx, dword [esp + 0x28]
add esp, 0x18
add ecx, eax
cmp ecx, 0xffffffff
mov dword [esp + 0x10], ecx
je 0x10002126
mov edx, dword [esp + 0x3e]
lea eax, [esp + 0xb84]
and edx, 0xffff
push eax
lea ecx, [esp + 0x27c]
push str.on_remote_node
push ecx
mov byte [esp + edx + 0x284], 0
push str.Network_adapter
push str._s__s__s__s
lea edx, [esp + 0xf98]
push 0x400
push edx
call fcn.10008980
lea edi, [esp + 0xfa0]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edi, [ecx + 1]
push edi
call fcn.100169d2
add esp, 0x20
mov dword [ebx + 8], eax
test eax, eax
je 0x100020fb
lea ecx, [esp + 0xf84]
push edi
push ecx
push eax
call fcn.10016ba0
add esp, 0xc
mov edx, dword [esp + 0x40]
push edx
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [ebx + 0x10], eax
xor eax, eax
cmp word [esp + 0x44], ax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
jbe 0x10002061
mov ecx, dword [esp + 0x14]
push 0x100
push ebp
push 1
lea eax, [esp + 0x84]
push 0x200
push eax
push ecx
call fcn.10007960
mov ecx, dword [esp + 0x28]
add esp, 0x18
add ecx, eax
cmp ecx, 0xffffffff
mov dword [esp + 0x10], ecx
je 0x10002126
mov edx, dword [esp + 0x78]
push edx
call dword [sym.imp.WS2_32.dll_ntohs]
cmp ax, 2
jne 0x10002042
mov eax, dword [esp + 0x1c]
push 0x14
test eax, eax
jne 0x10001f7a
call fcn.100169d2
mov ecx, dword [esp + 0x28]
add esp, 4
mov dword [ecx + 0xc], eax
jmp 0x10001f84
call fcn.100169d2
add esp, 4
mov dword [esi], eax
mov ecx, dword [esp + 0x1c]
mov esi, eax
inc ecx
test esi, esi
mov dword [esp + 0x1c], ecx
je 0x10002105
lea eax, [esi + 4]
push ebp
lea edx, [esp + 0x7c]
push eax
push edx
mov dword [esi], 0
call fcn.10003e80
add esp, 0xc
cmp eax, 0xffffffff
je 0x10002126
lea eax, [esi + 8]
push ebp
push eax
lea eax, [esp + 0x100]
push eax
call fcn.10003e80
add esp, 0xc
cmp eax, 0xffffffff
je 0x10002126
lea ebx, [esi + 0xc]
push ebp
lea ecx, [esp + 0x17c]
push ebx
push ecx
call fcn.10003e80
add esp, 0xc
cmp eax, 0xffffffff
je 0x10002126
lea edi, [esi + 0x10]
push ebp
lea edx, [esp + 0x1fc]
push edi
push edx
call fcn.10003e80
add esp, 0xc
cmp eax, 0xffffffff
je 0x10002126
mov eax, dword [esi + 4]
test eax, eax
jne 0x10002042
mov eax, dword [esi + 8]
test eax, eax
jne 0x10002042
cmp dword [ebx], 0
jne 0x10002042
cmp dword [edi], 0
jne 0x10002042
push esi
call fcn.100168e9
mov eax, dword [esp + 0x20]
add esp, 4
xor esi, esi
cmp eax, 1
jne 0x10002042
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x44]
inc eax
and ecx, 0xffff
cmp eax, ecx
mov dword [esp + 0x18], eax
jl 0x10001f15
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x54]
inc eax
cmp eax, ecx
mov dword [esp + 0x38], eax
jl 0x10001ca9
mov esi, dword [esp + 0x14]
xor ebx, ebx
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.WS2_32.dll_ntohl]
mov edi, dword [esp + 0x10]
cmp edi, eax
je 0x10002195
mov edx, dword [esp + 0x34]
push 0x100
push ebp
push edx
call dword [sym.imp.WS2_32.dll_ntohl]
sub eax, edi
push eax
push esi
call fcn.10007a10
add esp, 0x10
cmp eax, 1
jne 0x10002195
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
push str.Interface_name_too_long
push 0x100
push ebp
call fcn.10016898
add esp, 0xc
jmp 0x10002126
call fcn.10016b7f
mov eax, dword [eax]
push eax
jmp 0x1000210d
push str.Interface_description_too_long
push 0x100
push ebp
call fcn.10016898
add esp, 0xc
jmp 0x10002126
call fcn.10016b7f
mov ecx, dword [eax]
push ecx
jmp 0x1000210d
call fcn.10016b7f
mov edx, dword [eax]
push edx
call sym.wpcap.dll_pcap_strerror
push eax
push str.malloc___failed:__s
push 0x100
push ebp
call fcn.10016898
add esp, 0x14
mov eax, dword [esp + 0x34]
mov esi, dword [sym.imp.WS2_32.dll_ntohl]
push eax
call esi
mov edi, dword [esp + 0x10]
cmp edi, eax
je 0x10002169
mov ecx, dword [esp + 0x34]
push 0
push 0
push ecx
call esi
mov edx, dword [esp + 0x1c]
sub eax, edi
push eax
push edx
call fcn.10007a10
add esp, 0x10
cmp eax, 1
jne 0x10002169
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x10002182
mov eax, dword [esp + 0x14]
push 0
push 0
push eax
call fcn.100075b0
add esp, 0xc
call fcn.10007380
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
cmp dword [esp + 0x2c], ebx
jne 0x100021bc
push 0x100
push ebp
push esi
call fcn.100075b0
add esp, 0xc
test eax, eax
je 0x100021bc
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x1f78
ret
call fcn.10007380
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1f78
ret