Function at 0x426aa0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x288
mov eax, dword [0x465024]
xor eax, esp
mov dword [esp + 0x284], eax
push esi
mov esi, ecx
push edi
cmp dword [esi + 0x3c], 0
je 0x426d16
mov ecx, 3
call fcn.004291c0
test eax, eax
je 0x42748f
cmp dword [0x465bd4], 1
jg 0x426c1d
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
test eax, eax
je 0x426b0e
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
lea edi, [eax + 1]
jmp 0x426b13
mov edi, str.E:_srcdragent_test_srcif_capturer.cpp
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426b90
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
push str.PcapCapturer::Start
cmovae eax, dword [esp + 0x14]
push 0xc1
push edi
push dword [0x45e964]
push eax
push str._s___s___s:_d__s:
lea eax, [esp + 0xa0]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x44]
add esp, 0x20
mov edi, eax
cmp ecx, 0x10
jb 0x42746b
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427461
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274a5
jmp 0x427461
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426c94
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
push dword [0x45e964]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
cmovae eax, dword [esp + 0x14]
push eax
push str._s___s_
lea eax, [esp + 0x94]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x38]
add esp, 0x14
mov edi, eax
cmp ecx, 0x10
jb 0x42746b
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427461
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274aa
jmp 0x427461
cmp byte [esi + 0x40], 0
je 0x427224
mov ecx, 2
mov byte [esi + 0x40], 0
call fcn.004291c0
test eax, eax
je 0x426f93
cmp dword [0x465bd4], 1
jg 0x426e73
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
test eax, eax
je 0x426d6a
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
lea edi, [eax + 1]
jmp 0x426d6f
mov edi, str.E:_srcdragent_test_srcif_capturer.cpp
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426de6
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
push str.PcapCapturer::Start
cmovae eax, dword [esp + 0x14]
push 0xcb
push edi
push dword [0x45e960]
push eax
push str._s___s___s:_d__s:
lea eax, [esp + 0xa0]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x44]
add esp, 0x20
mov edi, eax
cmp ecx, 0x10
jb 0x426f6f
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426f65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274af
jmp 0x426f65
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426ef0
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
push dword [0x45e960]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
cmovae eax, dword [esp + 0x14]
push eax
push str._s___s_
lea eax, [esp + 0x94]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x38]
add esp, 0x14
mov edi, eax
cmp ecx, 0x10
jb 0x426f6f
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426f65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274b4
push ecx
push edx
call fcn.0042f231
add esp, 8
cmp dword [esi + 0x24], 0x10
lea eax, [esi + 0x10]
jb 0x426f7a
mov eax, dword [eax]
push eax
push str.capture_use_pcap_loop_thread__net_device_name:_s
push edi
lea eax, [esp + 0x94]
push eax
push 2
call fcn.004291f0
add esp, 0x14
push 0
push 0
push esi
push 0x426a80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 2
mov dword [esi + 0x3c], eax
call fcn.004291c0
test eax, eax
je 0x42720e
cmp dword [0x465bd4], 1
jg 0x4270fd
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
test eax, eax
je 0x426ff0
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
lea edi, [eax + 1]
jmp 0x426ff5
mov edi, str.E:_srcdragent_test_srcif_capturer.cpp
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x427070
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
push str.PcapCapturer::Start
cmovae eax, dword [esp + 0x14]
push 0xd1
push edi
push dword [0x45e960]
push eax
push str._s___s___s:_d__s:
lea eax, [esp + 0xa0]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x44]
add esp, 0x20
mov edi, eax
cmp ecx, 0x10
jb 0x4271f3
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4271e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274b9
jmp 0x4271e9
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x427174
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
push dword [0x45e960]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
cmovae eax, dword [esp + 0x14]
push eax
push str._s___s_
lea eax, [esp + 0x94]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x38]
add esp, 0x14
mov edi, eax
cmp ecx, 0x10
jb 0x4271f3
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4271e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274be
push ecx
push edx
call fcn.0042f231
add esp, 8
push dword [esi + 0x3c]
lea eax, [esp + 0x8c]
push str.loop_thread_id:_x
push edi
push eax
push 2
call fcn.004291f0
add esp, 0x14
mov al, 1
pop edi
pop esi
mov ecx, dword [esp + 0x284]
xor ecx, esp
call fcn.0042f1f3
mov esp, ebp
pop ebp
ret
mov ecx, 3
call fcn.004291c0
test eax, eax
je 0x42748f
cmp dword [0x465bd4], 1
jg 0x427373
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
test eax, eax
je 0x42726a
push 0x5c
push str.E:_srcdragent_test_srcif_capturer.cpp
call fcn.00430780
add esp, 8
lea edi, [eax + 1]
jmp 0x42726f
mov edi, str.E:_srcdragent_test_srcif_capturer.cpp
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4272e6
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
push str.PcapCapturer::Start
cmovae eax, dword [esp + 0x14]
push 0xc8
push edi
push dword [0x45e964]
push eax
push str._s___s___s:_d__s:
lea eax, [esp + 0xa0]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x44]
add esp, 0x20
mov edi, eax
cmp ecx, 0x10
jb 0x42746b
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427461
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274c3
jmp 0x427461
push 0x50
lea eax, [esp + 0x3c]
push 0
push eax
call fcn.004311e0
add esp, 0xc
lea eax, [esp + 8]
push eax
call fcn.00437d64
add esp, 4
lea eax, [esp + 8]
push eax
call fcn.0043805d
add esp, 4
mov ecx, dword [eax + 0x10]
push dword [eax]
inc ecx
push dword [eax + 4]
push dword [eax + 8]
push dword [eax + 0xc]
mov eax, dword [eax + 0x14]
push ecx
add eax, 0x76c
push eax
push str._4d__02d__02d__2d:_2d:_2d
lea eax, [esp + 0x54]
push 0x50
push eax
call fcn.00408bc0
xorps xmm0, xmm0
mov dword [esp + 0x44], 0
lea ecx, [esp + 0x5c]
movaps xmmword [esp + 0x34], xmm0
add esp, 0x24
mov dword [esp + 0x24], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4273f0
sub ecx, edx
lea eax, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004195d0
push dword [0x45e964]
cmp dword [esp + 0x28], 0x10
lea eax, [esp + 0x14]
cmovae eax, dword [esp + 0x14]
push eax
push str._s___s_
lea eax, [esp + 0x94]
push 0x1ff
push eax
call fcn.00408bc0
mov ecx, dword [esp + 0x38]
add esp, 0x14
mov edi, eax
cmp ecx, 0x10
jb 0x42746b
mov edx, dword [esp + 0x10]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x427461
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4274c8
push ecx
push edx
call fcn.0042f231
add esp, 8
cmp dword [esi + 0x24], 0x10
lea eax, [esi + 0x10]
jb 0x427476
mov eax, dword [eax]
push eax
push str.captureer_is_running_name:_s
push edi
lea eax, [esp + 0x94]
push eax
push 3
call fcn.004291f0
add esp, 0x14
mov ecx, dword [esp + 0x28c]
xor al, al
pop edi
pop esi
xor ecx, esp
call fcn.0042f1f3
mov esp, ebp
pop ebp
ret
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
call fcn.00436a90
int3