Function at 0x4818ac
Capabilities:
Terminate process

Disassembly:
sub esp, 0x2d0
mov eax, dword [0x6b0d44]
xor eax, esp
mov dword [esp + 0x2cc], eax
push ebx
push ebp
push esi
push edi
mov ebx, ecx
mov eax, dword [esp + 0x2e4]
push 0x35
pop ecx
mov esi, str.v0_r_noMeshAgent__u_0_IN_IP4_0.0.0.0_r_nsSIP_Call_r_nt0_0_r_naice_ufrag:_s_r_naice_pwd:_s_r_nafingerprint:sha_256__s_r_nmapplication_1_DTLS_SCTP_5000_r_ncIN_IP4_0.0.0.0_r_nasctpmap:5000_webrtc_datachannel_16_r_nasetup:_s_r_n
mov dword [esp + 0x14], eax
lea edi, [esp + 0x204]
mov eax, dword [esp + 0x2e8]
rep movsd dword es:[edi], dword [esi]
push 0x10
pop ecx
push 0xc
movsw word es:[edi], word [esi]
xor ebp, ebp
mov esi, str.acandidate:_d__d_UDP__d__s__d_typ_relay_raddr__u._u._u._u__d_r_n
and dword [esp + 0x2c], ebp
lea edi, [esp + 0x80]
mov dword [esp + 0x14], eax
rep movsd dword es:[edi], dword [esi]
pop ecx
mov esi, str.acandidate:_d__d_UDP__d__u._u._u._u__u_typ_host_r_n
mov eax, dword [esp + 0x2ec]
lea edi, [esp + 0x48]
mov dword [esp + 0x38], edx
rep movsd dword es:[edi], dword [esi]
push 0x11
pop ecx
push dword [ebx + 2]
movsw word es:[edi], word [esi]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ebp
movsb byte es:[edi], byte [esi]
mov esi, str.acandidate:_d__d_UDP__d__s__u_typ_srflx_raddr__u._u._u._u_rport__u_r_n
lea edi, [esp + 0x1c0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call dword [sym.imp.WS2_32.dll_ntohl]
movsx esi, byte [ebx + 6]
xor ecx, ecx
shr eax, 1
inc ecx
not eax
mov dword [esp + 0x2c], ecx
and eax, ecx
mov dword [esp + 0x44], esi
movsx edi, byte [ebx + esi + 7]
mov dword [esp + 0x3c], eax
lea eax, [ebx + edi]
movsx edx, byte [eax + esi + 8]
mov dword [esp + 0x1c], edx
lea eax, [ebx + edx]
add eax, edi
mov dword [esp + 0x30], eax
movsx eax, byte [eax + esi + 9]
mov dword [esp + 0x20], eax
imul eax, eax, 6
add eax, 0xa
add eax, edx
add eax, edi
add eax, esi
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4819c6
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
push esi
push eax
mov edx, esi
call section..text
mov ecx, dword [esp + 0x18]
lea eax, [ebx + 8]
add eax, esi
mov edx, edi
push edi
push eax
call section..text
add esp, 0x10
xor eax, eax
jmp 0x481c15
cmp eax, ecx
jne 0x4819ec
mov ecx, dword [esp + 0x14]
lea eax, [ebx + 7]
mov edx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [ebx + 8]
add eax, esi
mov dword [edx], eax
mov eax, dword [ecx]
mov byte [esi + eax], 0
mov eax, dword [edx]
mov byte [edi + eax], 0
jmp 0x4819bf
push esi
push 7
pop edx
mov ecx, ebx
call fcn.004812b1
mov ecx, dword [esp + 0x18]
lea edx, [esi + 8]
push edi
mov dword [ecx], eax
mov ecx, ebx
call fcn.004812b1
mov edx, dword [esp + 0x24]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
lea eax, [esp + 0xbc]
push eax
lea eax, [ebx + edi]
lea ecx, [esi + 9]
add ecx, eax
call fcn.0046a848
mov eax, dword [esp + 0x34]
cmp eax, dword [esp + 0x38]
jge 0x481a79
lea ebp, [eax + 1]
add ebp, ebx
lea edx, [esp + 0x13c]
push 0x80
mov ecx, ebp
mov dword [esp + 0x28], ebp
call fcn.0047104a
movzx eax, word [ebp]
dec eax
pop ecx
sub eax, 1
je 0x481a67
sub eax, 0x15
je 0x481a67
xor ebp, ebp
mov dword [esp + 0x24], ebp
jmp 0x481a79
movzx eax, word [ebp + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov dword [esp + 0x28], eax
imul eax, dword [esp + 0x20], 0x38
add edi, 0xe6
push 0x18d
push 0x7659ac
add eax, dword [esp + 0x24]
imul eax, eax, 3
add eax, edi
add eax, esi
test ebp, ebp
lea edi, [eax + 0xc2]
cmove edi, eax
xor ebx, ebx
inc ebx
mov dword [esp + 0x24], edi
push ebx
push edi
call fcn.005ce020
mov ecx, dword [esp + 0x28]
add esp, 0x10
mov dword [ecx], eax
test eax, eax
je 0x481c2e
lea eax, [esp + 0x40]
push 4
push eax
call fcn.004a39d0
cmp dword [esp + 0x44], 0
mov ecx, str.actpass
mov eax, str.passive
cmovne eax, ecx
xor edx, edx
push eax
lea eax, [esp + 0xc8]
mov ecx, 0xf4240
push eax
mov eax, dword [esp + 0x20]
push dword [eax]
mov eax, dword [esp + 0x28]
push dword [eax]
mov eax, dword [esp + 0x58]
div ecx
lea eax, [esp + 0x21c]
push edx
push eax
mov eax, dword [esp + 0x38]
push edi
push dword [eax]
call fcn.0040112a
add esp, 0x28
mov edi, eax
xor ecx, ecx
cmp dword [esp + 0x20], ecx
jle 0x481ba9
mov ebx, dword [esp + 0x30]
mov ebp, ecx
add ebx, 0xd
mov dword [esp + 0x14], 0x7ee000ff
add ebx, esi
mov esi, dword [esp + 0x2c]
movzx eax, word [ebx + 1]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebx]
push eax
movzx eax, byte [ebx - 1]
push eax
movzx eax, byte [ebx - 2]
push eax
movzx eax, byte [ebx - 3]
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x60]
push esi
push ebp
push eax
mov eax, dword [esp + 0x40]
sub eax, edi
push eax
mov eax, dword [esp + 0x40]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040112a
add esp, 0x2c
lea ebx, [ebx + 6]
add edi, eax
inc ebp
dec dword [esp + 0x14]
cmp ebp, dword [esp + 0x20]
jl 0x481b40
mov esi, dword [esp + 0x44]
mov ebx, dword [esp + 0x2c]
mov dword [esp + 0x10], ebp
mov ebp, dword [esp + 0x24]
mov ecx, dword [esp + 0x10]
test ebp, ebp
je 0x481c05
mov edx, dword [esp + 0x30]
movzx eax, byte [edx + esi + 0xd]
push eax
movzx eax, byte [edx + esi + 0xc]
push eax
movzx eax, byte [edx + esi + 0xb]
push eax
movzx eax, byte [edx + esi + 0xa]
push eax
mov eax, dword [esp + 0x38]
movzx eax, ax
push eax
lea eax, [esp + 0x150]
push eax
mov eax, 0x7ee000ff
sub eax, ecx
push eax
push ebx
push ecx
lea eax, [esp + 0xa0]
push eax
mov eax, dword [esp + 0x44]
sub eax, edi
push eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
add eax, edi
push eax
call fcn.0040112a
add esp, 0x30
add edi, eax
inc ebx
mov dword [esp + 0x2c], ebx
cmp ebx, 2
jle 0x481b1d
mov eax, edi
mov ecx, dword [esp + 0x2dc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0059b3f0
add esp, 0x2d0
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x18d
push esi
push edi
mov edx, 0x765a18
xor ecx, ecx
call fcn.0047145c
push edi
push 0x765a3c
push 0x765a60
call fcn.004010b4
add esp, 0x18
push esi
call fcn.005aae60
int3