Function at 0x4a5e15
Capabilities:
Terminate process

Disassembly:
sub esp, 0x2d0
mov eax, dword [0x6dad44]
xor eax, esp
mov dword [esp + 0x2cc], eax
push ebx
push ebp
push esi
push edi
mov ebx, ecx
mov eax, dword [esp + 0x2e4]
push 0x35
pop ecx
mov esi, str.v0_r_noMeshAgent__u_0_IN_IP4_0.0.0.0_r_nsSIP_Call_r_nt0_0_r_naice_ufrag:_s_r_naice_pwd:_s_r_nafingerprint:sha_256__s_r_nmapplication_1_DTLS_SCTP_5000_r_ncIN_IP4_0.0.0.0_r_nasctpmap:5000_webrtc_datachannel_16_r_nasetup:_s_r_n
mov dword [esp + 0x14], eax
lea edi, [esp + 0x204]
mov eax, dword [esp + 0x2e8]
rep movsd dword es:[edi], dword [esi]
push 0x10
pop ecx
push 0xc
movsw word es:[edi], word [esi]
xor ebp, ebp
mov esi, str.acandidate:_d__d_UDP__d__s__d_typ_relay_raddr__u._u._u._u__d_r_n
and dword [esp + 0x2c], ebp
lea edi, [esp + 0x80]
mov dword [esp + 0x14], eax
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, str.acandidate:_d__d_UDP__d__u._u._u._u__u_typ_host_r_n
mov eax, dword [esp + 0x2ec]
lea edi, [esp + 0x48]
mov dword [esp + 0x38], edx
rep movsd dword es:[edi], dword [esi]
push 0x11
pop ecx
push dword [ebx + 2]
movsw word es:[edi], word [esi]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ebp
movsb byte es:[edi], byte [esi]
mov esi, str.acandidate:_d__d_UDP__d__s__u_typ_srflx_raddr__u._u._u._u_rport__u_r_n
lea edi, [esp + 0x1c0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call dword [sym.imp.WS2_32.dll_ntohl]
movsx esi, byte [ebx + 6]
xor ecx, ecx
shr eax, 1
inc ecx
not eax
mov dword [esp + 0x2c], ecx
and eax, ecx
mov dword [esp + 0x44], esi
movsx edi, byte [ebx + esi + 7]
mov dword [esp + 0x3c], eax
lea eax, [ebx + edi]
movsx edx, byte [eax + esi + 8]
mov dword [esp + 0x1c], edx
lea eax, [ebx + edx]
add eax, edi
mov dword [esp + 0x30], eax
movsx eax, byte [eax + esi + 9]
mov dword [esp + 0x20], eax
imul eax, eax, 6
add eax, 0xa
add eax, edx
add eax, edi
add eax, esi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4a5f2f
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
push esi
push eax
mov edx, esi
call section..text
mov ecx, dword [esp + 0x18]
lea eax, [ebx + 8]
add eax, esi
mov edx, edi
push edi
push eax
call section..text
add esp, 0x10
xor eax, eax
jmp 0x4a617e
cmp eax, ecx
jne 0x4a5f55
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
mov edx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [ebx + 8]
add eax, esi
mov dword [edx], eax
mov eax, dword [ecx]
mov byte [esi + eax], 0
mov eax, dword [edx]
mov byte [edi + eax], 0
jmp 0x4a5f28
push esi
push 7
pop edx
mov ecx, ebx
call fcn.004a5785
mov ecx, dword [esp + 0x18]
lea edx, [esi + 8]
push edi
mov dword [ecx], eax
mov ecx, ebx
call fcn.004a5785
mov edx, dword [esp + 0x24]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [esp + 0xbc]
push eax
lea eax, [ebx + edi]
lea ecx, [esi + 9]
add ecx, eax
call fcn.00485c6f
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x38]
jge 0x4a5fe2
lea ebp, [eax + 1]
add ebp, ebx
lea edx, [esp + 0x13c]
push 0x80
mov ecx, ebp
mov dword [esp + 0x28], ebp
call fcn.0048f4f8
movzx eax, word [ebp]
dec eax
pop ecx
sub eax, 1
je 0x4a5fd0
sub eax, 0x15
je 0x4a5fd0
xor ebp, ebp
mov dword [esp + 0x24], ebp
jmp 0x4a5fe2
movzx eax, word [ebp + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov dword [esp + 0x28], eax
imul eax, dword [esp + 0x20], 0x38
add edi, 0xe6
push 0x18e
push 0x761f08
add eax, dword [esp + 0x24]
imul eax, eax, 3
add eax, edi
add eax, esi
test ebp, ebp
lea edi, [eax + 0xc2]
cmove edi, eax
xor ebx, ebx
inc ebx
mov dword [esp + 0x24], edi
push ebx
push edi
call fcn.005f5c60
mov ecx, dword [esp + 0x28]
add esp, 0x10
mov dword [ecx], eax
test eax, eax
je 0x4a6197
lea eax, [esp + 0x40]
push 4
push eax
call fcn.004c7680
cmp dword [esp + 0x44], 0
mov ecx, str.actpass
mov eax, str.passive
cmovne eax, ecx
xor edx, edx
push eax
lea eax, [esp + 0xc8]
mov ecx, 0xf4240
push eax
mov eax, dword [esp + 0x20]
push dword [eax]
mov eax, dword [esp + 0x28]
push dword [eax]
mov eax, dword [esp + 0x58]
div ecx
lea eax, [esp + 0x21c]
push edx
push eax
mov eax, dword [esp + 0x38]
push edi
push dword [eax]
call fcn.0040117f
add esp, 0x28
mov edi, eax
xor ecx, ecx
cmp dword [esp + 0x20], ecx
jle 0x4a6112
mov ebx, dword [esp + 0x30]
mov ebp, ecx
add ebx, 0xd
mov dword [esp + 0x14], 0x7ee000ff
add ebx, esi
mov esi, dword [esp + 0x2c]
movzx eax, word [ebx + 1]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebx]
push eax
movzx eax, byte [ebx - 1]
push eax
movzx eax, byte [ebx - 2]
push eax
movzx eax, byte [ebx - 3]
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x60]
push esi
push ebp
push eax
mov eax, dword [esp + 0x40]
sub eax, edi
push eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040117f
add esp, 0x2c
lea ebx, [ebx + 6]
add edi, eax
inc ebp
dec dword [esp + 0x14]
cmp ebp, dword [esp + 0x20]
jl 0x4a60a9
mov esi, dword [esp + 0x44]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
test ebp, ebp
je 0x4a616e
mov edx, dword [esp + 0x30]
movzx eax, byte [edx + esi + 0xd]
push eax
movzx eax, byte [edx + esi + 0xc]
push eax
movzx eax, byte [edx + esi + 0xb]
push eax
movzx eax, byte [edx + esi + 0xa]
push eax
mov eax, dword [esp + 0x38]
movzx eax, ax
push eax
lea eax, [esp + 0x150]
push eax
mov eax, 0x7ee000ff
sub eax, ecx
push eax
push ebx
push ecx
lea eax, [esp + 0xa0]
push eax
mov eax, dword [esp + 0x44]
sub eax, edi
push eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040117f
add esp, 0x30
add edi, eax
inc ebx
mov dword [esp + 0x2c], ebx
cmp ebx, 2
jle 0x4a6086
mov eax, edi
mov ecx, dword [esp + 0x2dc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005c0e20
add esp, 0x2d0
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x18e
push esi
push edi
mov edx, 0x761f2c
xor ecx, ecx
call fcn.0048f95e
push edi
push 0x761f50
push 0x761f74
call fcn.00401109
add esp, 0x18
push esi
call fcn.005d08b0
int3