Function at 0x406db0
Capabilities:
Create thread
Terminate thread

Disassembly:
push ecx
mov eax, dword [esp + 0xc]
push ebx
push ebp
xor ebp, ebp
cmp eax, ebp
push esi
jne 0x406eea
mov eax, dword [0x41bc20]
mov esi, dword [sym.imp.USER32.dll_DeleteMenu]
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
cmp eax, ebp
jne 0x406e08
mov eax, dword [0x41b62c]
push ebp
push 0x143
push eax
call esi
mov ecx, dword [0x41b62c]
push ebp
push 0x38f
push ecx
call esi
mov edx, dword [0x41b648]
push ebp
push edx
call ebx
mov eax, dword [0x41b648]
push 5
push eax
call ebx
push edi
mov ecx, 0x10
xor eax, eax
mov edi, 0x416f88
rep stosd dword es:[edi], eax
mov ecx, 0x8c
mov edi, 0x416c98
push str.uidequsouip
push str.Para
rep stosd dword es:[edi], eax
call fcn.00405cf0
mov dword [0x41bc5c], eax
mov eax, dword [0x41bc4c]
add esp, 8
cmp eax, ebp
pop edi
jne 0x406e7d
mov ecx, dword [0x41b62c]
push ebp
push 0x13e
push ecx
call esi
mov edx, dword [0x41b62c]
push ebp
push 0x38e
push edx
call esi
mov eax, dword [0x41b648]
push ebp
push eax
call ebx
mov ecx, dword [0x41b648]
push 5
push ecx
call ebx
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret
push 0x100000
call dword [sym.imp.MSVCRT.dll_malloc]
mov edx, dword [0x41b62c]
add esp, 4
mov dword [0x41bc30], eax
push ebp
push 0x130
push edx
call esi
mov eax, dword [0x41b62c]
push ebp
push 0x13a
push eax
call esi
mov ecx, dword [0x41b648]
push ebp
push ecx
call ebx
mov edx, dword [0x41b648]
push 5
push edx
call ebx
call sub.packet.dll_PacketAllocatePacket
mov dword [0x41bccc], eax
call sub.packet.dll_PacketAllocatePacket
cmp eax, ebp
mov dword [0x41bcc8], eax
je 0x40707c
cmp dword [0x41bccc], ebp
je 0x407073
mov eax, dword [0x41bcc0]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp eax, ebp
mov dword [0x41bcf4], ebp
je 0x406f0a
push 1
push eax
call esi
mov dword [0x41bcc0], ebp
mov eax, dword [0x41bcd0]
cmp eax, ebp
je 0x406f1e
push 1
push eax
call esi
mov dword [0x41bcd0], ebp
mov eax, dword [0x41bcc4]
cmp eax, ebp
je 0x406f36
push eax
call sub.packet.dll_PacketCloseAdapter
add esp, 4
mov dword [0x41bcc4], ebp
push 3
push str.SOFTWAREDRCOMCLIENT
push reloc.WSOCK32.dll_bind
push 0x230
push 0x416c98
push str.DesAdapterName
call fcn.00404f50
add esp, 0x18
test al, al
jne 0x406f64
mov word [0x416c98], bp
push 0x416c98
call sub.packet.dll_PacketOpenAdapter
add esp, 4
cmp eax, ebp
mov dword [0x41bcc4], eax
jne 0x406fb7
mov eax, dword [esp + 0x18]
push ebp
cmp eax, ebp
jne 0x406f9b
push ebp
push ebp
call fcn.00408070
add esp, 0xc
test eax, eax
je 0x406fb2
pop esi
pop ebp
mov eax, 4
pop ebx
pop ecx
ret
push str.Error_opening_adapter
call fcn.004038a0
add esp, 8
mov eax, 4
pop esi
pop ebp
pop ebx
pop ecx
ret
mov eax, dword [0x41bcc4]
push 0x86
push eax
call sub.packet.dll_PacketSetHwFilter
add esp, 8
test al, al
jne 0x406ff8
mov eax, dword [0x41bcc4]
push 0x82
push eax
call sub.packet.dll_PacketSetHwFilter
add esp, 8
test al, al
jne 0x406ff8
push ebp
push str.Unable_to_PacketSetHwFilter_
call fcn.004038a0
add esp, 8
mov eax, 4
pop esi
pop ebp
pop ebx
pop ecx
ret
mov ecx, dword [0x41bcc4]
push 0x80000
push ecx
call sub.packet.dll_PacketSetBuff
add esp, 8
test al, al
jne 0x407028
push ebp
push str.Unable_to_PacketSetBuff_
call fcn.004038a0
add esp, 8
mov eax, 4
pop esi
pop ebp
pop ebx
pop ecx
ret
lea edx, [esp + 0xc]
push edx
push ebp
push 1
push 0x406c60
push ebp
push ebp
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebp
mov dword [0x41bcd0], eax
jne 0x406e76
mov eax, dword [0x41bcc4]
push eax
call sub.packet.dll_PacketCloseAdapter
push ebp
push str.Error_launching_the_capture_thread
mov dword [0x41bcc4], ebp
call fcn.004038a0
add esp, 0xc
mov eax, 5
pop esi
pop ebp
pop ebx
pop ecx
ret
push eax
call sub.packet.dll_PacketFreePacket
add esp, 4
mov eax, dword [0x41bccc]
cmp eax, ebp
je 0x40708e
push eax
call sub.packet.dll_PacketFreePacket
add esp, 4
mov ecx, dword [esp + 0x14]
push ebp
push str.Error
push str.Error:failed_to_allocate_the_LPPACKET_structure.
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
pop esi
pop ebp
mov eax, 2
pop ebx
pop ecx
ret