Function at 0x41ff20
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x118
mov eax, dword [0x458004]
xor eax, esp
mov dword [esp + 0x114], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov esi, edx
mov dword [esp + 0x18], ecx
push 0x5b
push esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], eax
call dword [sym.imp.VCRUNTIME140.dll_strchr]
add esp, 8
test eax, eax
jne 0x420002
mov dword [esp + 0xa8], eax
mov eax, dword [str.resume_index]
xor edi, edi
test eax, eax
je 0x41ffea
xor esi, esi
mov dword [esp + 0xa0], 0x459cec
mov edx, dword [esp + 0x10]
mov ecx, eax
call fcn.0041c340
test eax, eax
jne 0x420041
cmp dword [esi + 0x459cec], eax
lea esi, [esi + 0x459cec]
je 0x41ffcd
mov eax, dword [esp + 0xa0]
mov eax, dword [eax]
nop word [eax + eax]
mov edx, dword [esp + 0x10]
mov ecx, eax
call fcn.0041c340
test eax, eax
jne 0x420041
mov eax, dword [esi + 4]
add esi, 4
test eax, eax
jne 0x41ffb0
add dword [esp + 0xa0], 0x24
inc edi
lea esi, [edi + edi*8]
shl esi, 2
mov eax, dword [esi + 0x459ce0]
test eax, eax
jne 0x41ff80
mov esi, dword [esp + 0x10]
mov edx, esi
mov edi, str.conf
mov al, byte [edi]
cmp al, 0x2d
je 0x41ffff
cmp al, 0x2e
je 0x41ffff
cmp al, 0x5f
jne 0x420071
inc edi
jmp 0x41fff1
lea ecx, [eax + 1]
call fcn.0041be90
mov ecx, eax
mov dword [esp + 0xa8], ecx
cmp ecx, 0x10000
jb 0x41ff68
push esi
push str._s:_bad_index_n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401010
add esp, 0xc
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push dword [esp + 0x1c]
mov edx, dword [esp + 0x1c]
lea eax, [edi + edi*8]
push dword [esp + 0x14]
mov eax, dword [eax*4 + 0x459ce4]
push edx
call eax
add esp, 0xc
pop edi
pop esi
mov ecx, dword [esp + 0x114]
xor ecx, esp
call fcn.00443732
mov esp, ebp
pop ebp
ret
mov cl, byte [edx]
cmp cl, 0x2d
je 0x420082
cmp cl, 0x2e
je 0x420082
cmp cl, 0x5f
jne 0x420085
inc edx
jmp 0x420071
mov dword [esp + 0xa0], edx
test al, al
jne 0x420099
cmp cl, 0x5b
je 0x42014c
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x4200d7
cmp byte [edi], 0
je 0x42014c
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x41fff1
mov edx, dword [esp + 0x10]
mov edi, str.config
mov al, byte [edi]
cmp al, 0x2d
je 0x4200ee
cmp al, 0x2e
je 0x4200ee
cmp al, 0x5f
jne 0x4200f1
inc edi
jmp 0x4200e0
mov cl, byte [edx]
cmp cl, 0x2d
je 0x420102
cmp cl, 0x2e
je 0x420102
cmp cl, 0x5f
jne 0x420105
inc edx
jmp 0x4200f1
mov dword [esp + 0xa0], edx
test al, al
jne 0x420115
cmp cl, 0x5b
je 0x42014c
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x42016d
cmp byte [edi], 0
je 0x42014c
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x4200e0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
call fcn.00427800
pop edi
pop esi
mov ecx, dword [esp + 0x114]
xor ecx, esp
call fcn.00443732
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x10]
mov edi, str.adapter
mov cl, byte [edi]
cmp cl, 0x2d
je 0x420187
cmp cl, 0x2e
je 0x420187
cmp cl, 0x5f
jne 0x420190
inc edi
jmp 0x420176
mov al, byte [edx]
cmp al, 0x2d
je 0x42019e
cmp al, 0x2e
je 0x42019e
cmp al, 0x5f
jne 0x4201a1
inc edx
jmp 0x420190
mov dword [esp + 0xa0], edx
test cl, cl
jne 0x4201b4
cmp al, 0x5b
je 0x4202d6
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movzx ecx, byte [edi]
add esp, 4
mov esi, eax
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp eax, esi
jne 0x4201e8
cmp byte [edi], 0
je 0x4202d6
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x420176
mov edx, dword [esp + 0x10]
mov edi, 0x4505d4
mov cl, byte [edi]
cmp cl, 0x2d
je 0x420202
cmp cl, 0x2e
je 0x420202
cmp cl, 0x5f
jne 0x420205
inc edi
jmp 0x4201f1
mov al, byte [edx]
cmp al, 0x2d
je 0x420213
cmp al, 0x2e
je 0x420213
cmp al, 0x5f
jne 0x420216
inc edx
jmp 0x420205
mov dword [esp + 0xa0], edx
test cl, cl
jne 0x420229
cmp al, 0x5b
je 0x4202d6
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
movzx ecx, byte [edi]
add esp, 4
mov esi, eax
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp eax, esi
jne 0x42025d
cmp byte [edi], 0
je 0x4202d6
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x4201f1
mov edx, dword [esp + 0x10]
mov edi, str.interface
mov al, byte [edi]
cmp al, 0x2d
je 0x420274
cmp al, 0x2e
je 0x420274
cmp al, 0x5f
jne 0x420277
inc edi
jmp 0x420266
mov cl, byte [edx]
cmp cl, 0x2d
je 0x420288
cmp cl, 0x2e
je 0x420288
cmp cl, 0x5f
jne 0x42028b
inc edx
jmp 0x420277
mov dword [esp + 0xa0], edx
test al, al
jne 0x42029b
cmp cl, 0x5b
je 0x4202d6
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x42034a
cmp byte [edi], 0
je 0x4202d6
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x420266
imul eax, dword [esp + 0xa8], 0x170
mov edi, dword [esp + 0x18]
lea esi, [edi + 0x18]
add esi, eax
cmp byte [esi], 0
je 0x420309
push esi
push str.CONF:_overwriting__adapter_s__n
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
call fcn.00401010
add esp, 0xc
mov eax, dword [esp + 0xa8]
inc eax
cmp dword [edi + 0xb98], eax
jae 0x42031f
mov dword [edi + 0xb98], eax
push dword [esp + 0x1c]
push 0x44af14
push 0x100
push esi
call fcn.00404800
add esp, 0x10
pop edi
pop esi
mov ecx, dword [esp + 0x114]
xor ecx, esp
call fcn.00443732
mov esp, ebp
pop ebp
ret
mov edx, dword [esp + 0x10]
mov edi, str.adapter_ip
mov al, byte [edi]
cmp al, 0x2d
je 0x420361
cmp al, 0x2e
je 0x420361
cmp al, 0x5f
jne 0x420364
inc edi
jmp 0x420353
mov cl, byte [edx]
cmp cl, 0x2d
je 0x420375
cmp cl, 0x2e
je 0x420375
cmp cl, 0x5f
jne 0x420378
inc edx
jmp 0x420364
mov dword [esp + 0xa0], edx
test al, al
jne 0x42038c
cmp cl, 0x5b
je 0x420632
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x4203c7
cmp byte [edi], 0
je 0x420632
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x420353
mov edx, dword [esp + 0x10]
mov edi, str.source_ip
mov al, byte [edi]
cmp al, 0x2d
je 0x4203de
cmp al, 0x2e
je 0x4203de
cmp al, 0x5f
jne 0x4203e1
inc edi
jmp 0x4203d0
mov cl, byte [edx]
cmp cl, 0x2d
je 0x4203f2
cmp cl, 0x2e
je 0x4203f2
cmp cl, 0x5f
jne 0x4203f5
inc edx
jmp 0x4203e1
mov dword [esp + 0xa0], edx
test al, al
jne 0x420409
cmp cl, 0x5b
je 0x420632
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x420444
cmp byte [edi], 0
je 0x420632
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x4203d0
mov edx, dword [esp + 0x10]
mov edi, str.source_address
nop dword [eax]
mov al, byte [edi]
cmp al, 0x2d
je 0x42045e
cmp al, 0x2e
je 0x42045e
cmp al, 0x5f
jne 0x420461
inc edi
jmp 0x420450
mov cl, byte [edx]
cmp cl, 0x2d
je 0x420472
cmp cl, 0x2e
je 0x420472
cmp cl, 0x5f
jne 0x420475
inc edx
jmp 0x420461
mov dword [esp + 0xa0], edx
test al, al
jne 0x420489
cmp cl, 0x5b
je 0x420632
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov esi, eax
add esp, 4
mov eax, dword [esp + 0xa0]
movzx ecx, byte [eax]
push ecx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
add esp, 4
cmp esi, eax
jne 0x4204c4
cmp byte [edi], 0
je 0x420632
mov edx, dword [esp + 0xa0]
inc edi
inc edx
jmp 0x420450
mov edx, dword [esp + 0x10]
mov edi, str.spoof_ip
nop dword [eax]