Function at 0x441280
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c
push ebx
push esi
push edi
push 0x48
mov esi, ecx
mov edi, edx
push 0
push esi
mov dword [ebp - 0x1c], esi
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp + 0x20]
add esp, 0xc
mov dword [esi], eax
mov ecx, 1
add eax, 0x800
cmove eax, ecx
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
test eax, eax
jne 0x4412df
push str.____out_of_memory__aborting_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401010
add esp, 8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
push dword [esi]
mov dword [esi + 0x10], eax
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edi, dword [esi + 0x10]
lea eax, [ebp - 0x98]
mov edx, dword [esi]
add esp, 0xc
mov ecx, edi
mov dword [ebp - 0x18], edi
push eax
push 1
call fcn.004318f0
add esp, 8
test eax, eax
je 0x4416f8
mov edx, dword [ebp - 0x28]
test edx, edx
je 0x4416f8
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x8c]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [esi + 4], ecx
mov dword [esi + 0xc], eax
cmp edx, 0x11
jne 0x44133b
add ecx, 0x1c
jmp 0x44133e
add ecx, dword [ebp - 0x80]
mov dword [esi], ecx
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 8]
mov dx, word [ebp + 0xc]
mov dword [edi], eax
mov ax, word [ebp + 0x14]
mov dword [edi + 6], ecx
mov word [edi + 4], ax
mov word [edi + 0xa], dx
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
mov eax, dword [ebp - 0x74]
mov dword [eax], 0
cmp dword [ebp - 0x28], 0x11
jne 0x44138b
mov eax, dword [ebp - 0x78]
mov dword [eax - 6], ecx
mov word [eax - 2], dx
mov dword [esi + 0x40], 5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 4]
xor ecx, ecx
xorps xmm0, xmm0
mov word [edi + eax + 4], cx
mov eax, dword [esi + 4]
mov word [edi + eax + 0xa], cx
mov eax, dword [esi + 4]
movq qword [edi + eax + 0xc], xmm0
mov eax, dword [esi + 0x10]
mov ecx, eax
mov ebx, dword [esi]
mov edx, dword [esi + 4]
push ebx
mov dword [ebp + 0x20], eax
call fcn.0043fd90
mov dword [esi + 0x14], eax
add esp, 4
mov eax, dword [ebp - 0x84]
dec eax
cmp eax, 0x83
ja case.0x4413db.2
movzx eax, byte [eax + 0x441724]
jmp dword [eax*4 + 0x441710]
mov eax, dword [esi + 8]
mov ecx, 0
mov dword [esi + 0xc], ebx
sub ebx, eax
mov dword [ebp - 4], ebx
movlpd qword [ebp - 0x10], xmm0
je 0x44144d
mov esi, dword [ebp + 0x20]
dec ebx
add esi, eax
shr ebx, 1
inc ebx
lea eax, [ebx + ebx]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x20], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
movzx eax, byte [esi]
lea esi, [esi + 2]
cdq
mov edi, edx
mov ecx, eax
movzx eax, byte [esi - 1]
shld edi, ecx, 8
cdq
shl ecx, 8
or edi, edx
mov edx, dword [ebp - 0xc]
or ecx, eax
add edx, ecx
mov dword [ebp - 0xc], edx
adc dword [ebp + 0x20], edi
sub ebx, 1
jne 0x441414
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp + 0x20]
mov ecx, dword [ebp - 0x14]
jmp 0x441453
mov ebx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
mov eax, dword [esi + 0x10]
add eax, ecx
mov ecx, dword [esi + 8]
movzx eax, byte [eax + ecx - 1]
mov ecx, dword [ebp - 4]
and ecx, 1
imul eax, ecx
sub edx, eax
mov ecx, edx
movzx eax, dx
sbb ebx, 0
shrd ecx, ebx, 0x10
shr ebx, 0x10
add ecx, eax
mov edx, ecx
movzx eax, cx
adc ebx, 0
shrd edx, ebx, 0x10
shr ebx, 0x10
add edx, eax
mov ecx, edx
movzx eax, dx
adc ebx, 0
shrd ecx, ebx, 0x10
add ecx, eax
mov eax, dword [esi + 8]
mov dword [esi + 0x18], ecx
mov al, byte [eax + edi]
cmp al, 8
je 0x4414bc
cmp al, 0xd
jne case.0x4413db.2
mov dword [esi + 0x40], 4
jmp case.0x4413db.2
mov dword [esi + 0x40], 3
jmp case.0x4413db.2
mov eax, dword [esi + 8]
xor ecx, ecx
xor ebx, ebx
mov dword [ebp - 0x18], ebx
movq qword [eax + edi], xmm0
mov eax, dword [esi + 8]
mov word [eax + edi + 0x10], cx
mov edi, dword [esi + 0x10]
mov eax, dword [esi + 4]
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [ebp - 4], edi
mov dword [ebp - 0xc], ecx
movzx ecx, byte [eax + edi + 0x10]
mov dword [ebp + 0x20], edx
lea edx, [eax + edi]
movzx edi, byte [edx + 0x12]
movzx eax, byte [edx + 0x13]
shl edi, 8
or edi, eax
shl ecx, 8
movzx eax, byte [edx + 0x11]
or ecx, eax
movzx eax, byte [edx + 0xf]
add edi, ecx
movzx ecx, byte [edx + 0xe]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx + 0xd]
add edi, ecx
movzx ecx, byte [edx + 0xc]
shl ecx, 8
or ecx, eax
mov eax, dword [esi + 0xc]
add edi, ecx
mov ecx, dword [esi + 8]
sub edi, ecx
add edi, 6
add edi, eax
mov dword [ebp - 0x14], edi
cmp ecx, eax
jae 0x4415c5
sub eax, ecx
inc eax
and eax, 0xfffffffe
cmp eax, 4
jb 0x4415a8
mov edi, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
sub edi, ecx
sub edi, 3
add edx, 2
shr edi, 2
add edx, ecx
inc edi
xor esi, esi
lea ecx, [ecx + edi*4]
mov dword [ebp + 0x20], ecx
movzx ecx, byte [edx - 2]
lea edx, [edx + 4]
movzx eax, byte [edx - 5]
shl ecx, 8
or ecx, eax
movzx eax, byte [edx - 4]
add ebx, ecx
shl eax, 8
movzx ecx, byte [edx - 3]
or ecx, eax
add esi, ecx
sub edi, 1
jne 0x441571
mov ecx, dword [ebp + 0x20]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0xc]
jae 0x4415be
mov eax, dword [esi + 0x10]
mov edx, dword [ebp + 0x20]
movzx ecx, byte [ecx + eax + 1]
movzx eax, byte [edx + eax]
shl eax, 8
or ecx, eax
add edi, ecx
mov eax, dword [ebp - 0x18]
add eax, ebx
add edi, eax
mov ecx, edi
movzx eax, di
shr ecx, 0x10
add ecx, eax
mov dword [esi + 0x40], 0
mov edx, ecx
movzx eax, cx
shr edx, 0x10
add edx, eax
mov ecx, edx
movzx eax, dx
shr ecx, 0x10
add ecx, eax
mov dword [esi + 0x18], ecx
jmp case.0x4413db.2
mov eax, dword [esi + 8]
xor ecx, ecx
mov word [eax + edi + 6], cx
mov ecx, dword [esi + 8]
mov eax, dword [esi]
mov edx, dword [esi + 4]
sub eax, ecx
push eax
push ecx
mov ecx, dword [esi + 0x10]
call fcn.0043ffa0
add esp, 8
mov dword [esi + 0x40], 1
jmp 0x441630
sub ebx, dword [esi + 8]
mov ecx, dword [esi + 0x10]
mov edx, ebx
add ecx, dword [esi + 8]
call fcn.004144b0
mov dword [esi + 0x40], 2
mov dword [esi + 0x18], eax
mov ebx, dword [ebp + 0x24]
test ebx, ebx
jne 0x44167d
mov edi, dword [esi + 4]
mov ecx, 4
mov edx, dword [esi]
mov eax, ecx
sub ecx, edi
sub eax, edi
add dword [esi + 0xc], ecx
sub edx, edi
mov ecx, dword [esi + 0x10]
add edx, 4
add dword [esi + 8], eax
push edx
mov dword [esi], edx
lea eax, [edi + ecx]
push eax
lea eax, [ecx + 4]
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esi + 0x10]
add esp, 0xc
mov dword [esi + 4], 4
mov dword [eax], 2
jmp 0x4416b0
cmp ebx, 0xc
jne 0x4416ab
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov ecx, dword [esi + 0x10]
sub eax, edx
sub dword [esi + 8], edx
sub dword [esi + 0xc], edx
push eax
mov dword [esi], eax
lea eax, [edx + ecx]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [esi + 4], 0
jmp 0x4416b0
cmp ebx, 1
jne 0x4416d5
mov eax, dword [ebp + 0x18]
sub esp, 8
mov ecx, esp
mov edx, ebx
mov dword [ecx], eax
mov ax, word [ebp + 0x1c]
mov word [ecx + 4], ax
mov ecx, esi
call fcn.004410b0
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.____FAILED:_bad_packet_template__unknown_data_link_type_n
push 0
call fcn.0041b440
push str._____hint__segscan_doesnt_know_how_to_format_packets_for_this_interface_n
push 0
call fcn.0041b440
add esp, 0x10
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push str.ERROR:_bad_packet_template_n
push 0
call fcn.0041b440
add esp, 8
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
loop 0x441725
inc esp
add al, cl
adc al, 0x44
add bh, ch
adc eax, 0x16190044
inc esp
add byte [ebx], dh
push ss
inc esp
add byte [eax], al
add al, 4
add al, 4
add dword [esp + eax], eax
add al, 4
add al, 4
add al, 4
add al, 4
add al, byte [esp + eax]
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add ecx, esp
int3