Function at 0x4998bf
Capabilities:
Terminate process

Disassembly:
sub esp, 0x2d0
mov eax, dword [0x6ccd44]
xor eax, esp
mov dword [esp + 0x2cc], eax
push ebx
push ebp
push esi
push edi
mov ebx, ecx
mov eax, dword [esp + 0x2e4]
push 0x35
pop ecx
mov esi, str.v0_r_noMeshAgent__u_0_IN_IP4_0.0.0.0_r_nsSIP_Call_r_nt0_0_r_naice_ufrag:_s_r_naice_pwd:_s_r_nafingerprint:sha_256__s_r_nmapplication_1_DTLS_SCTP_5000_r_ncIN_IP4_0.0.0.0_r_nasctpmap:5000_webrtc_datachannel_16_r_nasetup:_s_r_n
mov dword [esp + 0x14], eax
lea edi, [esp + 0x204]
mov eax, dword [esp + 0x2e8]
rep movsd dword es:[edi], dword [esi]
push 0x10
pop ecx
push 0xc
movsw word es:[edi], word [esi]
xor ebp, ebp
mov esi, str.acandidate:_d__d_UDP__d__s__d_typ_relay_raddr__u._u._u._u__d_r_n
and dword [esp + 0x2c], ebp
lea edi, [esp + 0x80]
mov dword [esp + 0x14], eax
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, str.acandidate:_d__d_UDP__d__u._u._u._u__u_typ_host_r_n
mov eax, dword [esp + 0x2ec]
lea edi, [esp + 0x48]
mov dword [esp + 0x38], edx
rep movsd dword es:[edi], dword [esi]
push 0x11
pop ecx
push dword [ebx + 2]
movsw word es:[edi], word [esi]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ebp
movsb byte es:[edi], byte [esi]
mov esi, str.acandidate:_d__d_UDP__d__s__u_typ_srflx_raddr__u._u._u._u_rport__u_r_n
lea edi, [esp + 0x1c0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call dword [sym.imp.WS2_32.dll_ntohl]
movsx esi, byte [ebx + 6]
xor ecx, ecx
shr eax, 1
inc ecx
not eax
mov dword [esp + 0x2c], ecx
and eax, ecx
mov dword [esp + 0x44], esi
movsx edi, byte [ebx + esi + 7]
mov dword [esp + 0x3c], eax
lea eax, [ebx + edi]
movsx edx, byte [eax + esi + 8]
mov dword [esp + 0x1c], edx
lea eax, [ebx + edx]
add eax, edi
mov dword [esp + 0x30], eax
movsx eax, byte [eax + esi + 9]
mov dword [esp + 0x20], eax
imul eax, eax, 6
add eax, 0xa
add eax, edx
add eax, edi
add eax, esi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4999d9
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
push esi
push eax
mov edx, esi
call section..text
mov ecx, dword [esp + 0x18]
lea eax, [ebx + 8]
add eax, esi
mov edx, edi
push edi
push eax
call section..text
add esp, 0x10
xor eax, eax
jmp 0x499c28
cmp eax, ecx
jne 0x4999ff
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
mov edx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [ebx + 8]
add eax, esi
mov dword [edx], eax
mov eax, dword [ecx]
mov byte [esi + eax], 0
mov eax, dword [edx]
mov byte [edi + eax], 0
jmp 0x4999d2
push esi
push 7
pop edx
mov ecx, ebx
call fcn.0049922f
mov ecx, dword [esp + 0x18]
lea edx, [esi + 8]
push edi
mov dword [ecx], eax
mov ecx, ebx
call fcn.0049922f
mov edx, dword [esp + 0x24]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [esp + 0xbc]
push eax
lea eax, [ebx + edi]
lea ecx, [esi + 9]
add ecx, eax
call fcn.0047f888
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x38]
jge 0x499a8c
lea ebp, [eax + 1]
add ebp, ebx
lea edx, [esp + 0x13c]
push 0x80
mov ecx, ebp
mov dword [esp + 0x28], ebp
call fcn.00488630
movzx eax, word [ebp]
dec eax
pop ecx
sub eax, 1
je 0x499a7a
sub eax, 0x15
je 0x499a7a
xor ebp, ebp
mov dword [esp + 0x24], ebp
jmp 0x499a8c
movzx eax, word [ebp + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov dword [esp + 0x28], eax
imul eax, dword [esp + 0x20], 0x38
add edi, 0xe6
push 0x18e
push 0x725934
add eax, dword [esp + 0x24]
imul eax, eax, 3
add eax, edi
add eax, esi
test ebp, ebp
lea edi, [eax + 0xc2]
cmove edi, eax
xor ebx, ebx
inc ebx
mov dword [esp + 0x24], edi
push ebx
push edi
call fcn.005e7f10
mov ecx, dword [esp + 0x28]
add esp, 0x10
mov dword [ecx], eax
test eax, eax
je 0x499c41
lea eax, [esp + 0x40]
push 4
push eax
call fcn.004baa80
cmp dword [esp + 0x44], 0
mov ecx, str.actpass
mov eax, str.passive
cmovne eax, ecx
xor edx, edx
push eax
lea eax, [esp + 0xc8]
mov ecx, 0xf4240
push eax
mov eax, dword [esp + 0x20]
push dword [eax]
mov eax, dword [esp + 0x28]
push dword [eax]
mov eax, dword [esp + 0x58]
div ecx
lea eax, [esp + 0x21c]
push edx
push eax
mov eax, dword [esp + 0x38]
push edi
push dword [eax]
call fcn.0040117f
add esp, 0x28
mov edi, eax
xor ecx, ecx
cmp dword [esp + 0x20], ecx
jle 0x499bbc
mov ebx, dword [esp + 0x30]
mov ebp, ecx
add ebx, 0xd
mov dword [esp + 0x14], 0x7ee000ff
add ebx, esi
mov esi, dword [esp + 0x2c]
movzx eax, word [ebx + 1]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebx]
push eax
movzx eax, byte [ebx - 1]
push eax
movzx eax, byte [ebx - 2]
push eax
movzx eax, byte [ebx - 3]
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x60]
push esi
push ebp
push eax
mov eax, dword [esp + 0x40]
sub eax, edi
push eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040117f
add esp, 0x2c
lea ebx, [ebx + 6]
add edi, eax
inc ebp
dec dword [esp + 0x14]
cmp ebp, dword [esp + 0x20]
jl 0x499b53
mov esi, dword [esp + 0x44]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
test ebp, ebp
je 0x499c18
mov edx, dword [esp + 0x30]
movzx eax, byte [edx + esi + 0xd]
push eax
movzx eax, byte [edx + esi + 0xc]
push eax
movzx eax, byte [edx + esi + 0xb]
push eax
movzx eax, byte [edx + esi + 0xa]
push eax
mov eax, dword [esp + 0x38]
movzx eax, ax
push eax
lea eax, [esp + 0x150]
push eax
mov eax, 0x7ee000ff
sub eax, ecx
push eax
push ebx
push ecx
lea eax, [esp + 0xa0]
push eax
mov eax, dword [esp + 0x44]
sub eax, edi
push eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040117f
add esp, 0x30
add edi, eax
inc ebx
mov dword [esp + 0x2c], ebx
cmp ebx, 2
jle 0x499b30
mov eax, edi
mov ecx, dword [esp + 0x2dc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.005b35b0
add esp, 0x2d0
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x18e
push esi
push edi
mov edx, 0x7259a0
xor ecx, ecx
call fcn.00488a50
push edi
push 0x7259c4
push 0x7259e8
call fcn.00401109
add esp, 0x18
push esi
call fcn.005c3000
int3