joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140286970
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov rbx, rcx
mov rdi, rdx
mov rsi, r9
cmp rcx, 0xffffffffffffffff
je 0x140286a78
test r8b, r8b
je 0x1402869e1
test byte [rdx], 8
je 0x1402869e1
lea rax, [rsp + 0x68]
xor edx, edx
xor ecx, ecx
mov r9d, pe_nt_image_headers64
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov r8d, 0xffff
mov qword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x68], edx
mov rdx, rdi
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
mov rcx, rbx
call fcn.140285190
mov rcx, rbx
mov r12, qword [sym.imp.WSOCK32.dll_closesocket]
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
mov ebp, eax
setne dl
call fcn.140285ad0
test ebp, ebp
je 0x140286a78
lea rbp, [rsp + 0x68]
mov edx, 0x2733
mov rcx, rbp
call fcn.1402c59f0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
je 0x140286a57
xor eax, eax
lea r8, [rsp + 0x4c]
mov edx, 0x8004667e
mov rcx, rbx
mov dword [rsp + 0x4c], eax
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
and byte [rdi], 0xfc
mov rcx, rbx
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
setne dl
call fcn.140285ad0
jmp 0x140286a78
lea rbp, [rsp + 0x50]
mov edx, 0x4d5
mov rcx, rbp
call fcn.1402c59f0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
jne 0x140286a24
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret

Function at 0x140286cd0
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov rbx, rcx
mov rdi, rdx
mov rsi, r9
cmp rcx, 0xffffffffffffffff
je 0x140286dd8
test r8b, r8b
je 0x140286d41
test byte [rdx], 8
je 0x140286d41
lea rax, [rsp + 0x68]
xor edx, edx
xor ecx, ecx
mov r9d, pe_nt_image_headers64
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov r8d, 0xffff
mov qword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x68], edx
mov rdx, rdi
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
mov rcx, rbx
call fcn.140285310
mov rcx, rbx
mov r12, qword [sym.imp.WSOCK32.dll_closesocket]
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
mov ebp, eax
setne dl
call fcn.140285ad0
test ebp, ebp
je 0x140286dd8
lea rbp, [rsp + 0x68]
mov edx, 0x2733
mov rcx, rbp
call fcn.1402c5ab0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
je 0x140286db7
xor eax, eax
lea r8, [rsp + 0x4c]
mov edx, 0x8004667e
mov rcx, rbx
mov dword [rsp + 0x4c], eax
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
and byte [rdi], 0xfc
mov rcx, rbx
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
setne dl
call fcn.140285ad0
jmp 0x140286dd8
lea rbp, [rsp + 0x50]
mov edx, 0x4d5
mov rcx, rbp
call fcn.1402c5ab0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
jne 0x140286d84
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
Function at 0x140287030
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov rbx, rcx
mov rdi, rdx
mov rsi, r9
cmp rcx, 0xffffffffffffffff
je 0x140287138
test r8b, r8b
je 0x1402870a1
test byte [rdx], 8
je 0x1402870a1
lea rax, [rsp + 0x68]
xor edx, edx
xor ecx, ecx
mov r9d, pe_nt_image_headers64
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x50]
mov r8d, 0xffff
mov qword [rsp + 0x28], 4
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x68], edx
mov rdx, rdi
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rcx
mov rcx, rbx
call fcn.140285550
mov rcx, rbx
mov r12, qword [sym.imp.WSOCK32.dll_closesocket]
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
mov ebp, eax
setne dl
call fcn.140285ad0
test ebp, ebp
je 0x140287138
lea rbp, [rsp + 0x68]
mov edx, 0x2733
mov rcx, rbp
call fcn.1402c5b70
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
je 0x140287117
xor eax, eax
lea r8, [rsp + 0x4c]
mov edx, 0x8004667e
mov rcx, rbx
mov dword [rsp + 0x4c], eax
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
and byte [rdi], 0xfc
mov rcx, rbx
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
setne dl
call fcn.140285ad0
jmp 0x140287138
lea rbp, [rsp + 0x50]
mov edx, 0x4d5
mov rcx, rbp
call fcn.1402c5b70
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
jne 0x1402870e4
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret

Function at 0x140287270
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x70
mov rbx, rcx
mov rdi, rdx
mov rsi, r9
cmp rcx, 0xffffffffffffffff
je 0x14028737c
test r8b, r8b
je 0x1402872e5
mov al, byte [rdx]
test al, 8
je 0x1402872e5
xor edx, edx
xor ecx, ecx
or eax, 8
mov r8d, pe_nt_image_headers64
mov dword [rsp + 0x40], edx
lea r9, [rsp + 0x40]
mov dword [rsp + 0x58], edx
mov edx, 0xffff
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rcx
mov rcx, rbx
mov byte [rdi], al
mov dword [rsp + 0x20], 4
call qword [sym.imp.WSOCK32.dll_setsockopt]
xor edx, edx
lea rcx, [rsp + 0x58]
test eax, eax
setne dl
call fcn.140285ad0
mov rcx, rbx
mov r12, qword [sym.imp.WSOCK32.dll_closesocket]
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
mov ebp, eax
setne dl
call fcn.140285ad0
test ebp, ebp
je 0x14028737c
lea rbp, [rsp + 0x58]
mov edx, 0x2733
mov rcx, rbp
call fcn.1402c5bf0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
je 0x14028735b
xor eax, eax
lea r8, [rsp + 0x3c]
mov edx, 0x8004667e
mov rcx, rbx
mov dword [rsp + 0x3c], eax
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
and byte [rdi], 0xfc
mov rcx, rbx
call r12
xor edx, edx
mov rcx, rsi
test eax, eax
setne dl
call fcn.140285ad0
jmp 0x14028737c
lea rbp, [rsp + 0x40]
mov edx, 0x4d5
mov rcx, rbp
call fcn.1402c5bf0
mov rdx, rbp
mov rcx, rsi
call fcn.1402c7400
test al, al
jne 0x140287328
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
Function at 0x140287390
Capabilities:
Set socket configuration

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rsi, rdx
mov ebp, r8d
mov rdi, r9
cmp rcx, 0xffffffffffffffff
jne 0x1402873bb
mov rcx, qword [rsp + 0x70]
mov edx, 0x2719
or ebx, 0xffffffff
call fcn.1402c61d0
jmp 0x1402873f5
mov edx, ebp
mov r8, r9
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
mov rcx, qword [rsp + 0x70]
mov edx, eax
mov ebx, eax
shr edx, 0x1f
call fcn.140285ad0
test ebx, ebx
js 0x1402873f5
cmp ebp, 0x8004667e
jne 0x1402873f5
mov al, byte [rsi]
mov edx, eax
or eax, 1
and edx, 0xfffffffc
cmp dword [rdi], 0
cmove eax, edx
mov byte [rsi], al
mov eax, ebx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret

Function at 0x140287510
Capabilities:
Set socket configuration

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x40
mov esi, ecx
xor ecx, ecx
mov rdi, r9
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], ecx
xor r9d, r9d
mov ecx, esi
call qword [sym.imp.WS2_32.dll_WSASocketW]
xor edx, edx
mov rcx, rdi
cmp rax, 0xffffffffffffffff
mov rbx, rax
sete dl
call fcn.140285ad0
cmp esi, 0x17
jne 0x14028757b
cmp rbx, 0xffffffffffffffff
je 0x14028757b
xor eax, eax
lea r9, [rsp + 0x3c]
mov r8d, 0x1b
mov rcx, rbx
mov dword [rsp + 0x3c], eax
mov edx, 0x29
mov dword [rsp + 0x20], 4
call qword [sym.imp.WSOCK32.dll_setsockopt]
mov rax, rbx
add rsp, 0x40
pop rbx
pop rsi
pop rdi
ret

Function at 0x140287590
Capabilities:
Connect socket

Disassembly:
push rsi
sub rsp, 0x30
mov rsi, r9
cmp rcx, 0xffffffffffffffff
jne 0x1402875b0
mov edx, 0x2719
mov rcx, r9
call fcn.1402c61d0
or eax, 0xffffffff
jmp 0x1402875ce
call qword [sym.imp.WSOCK32.dll_connect]
mov rcx, rsi
test eax, eax
mov dword [rsp + 0x2c], eax
setne dl
movzx edx, dl
call fcn.140285ad0
mov eax, dword [rsp + 0x2c]
add rsp, 0x30
pop rsi
ret

Function at 0x1402875e0
Capabilities:
Set socket configuration

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rdx
cmp rcx, 0xffffffffffffffff
jne 0x1402875fd
mov edx, 0x2719
mov rcx, rbx
call fcn.1402c61d0
jmp 0x140287646
xor eax, eax
lea r8, [rsp + 0x2c]
mov edx, 0x4004667f
mov dword [rsp + 0x2c], eax
call qword [sym.imp.WSOCK32.dll_ioctlsocket]
mov rcx, rbx
shr eax, 0x1f
mov edx, eax
call fcn.140285ad0
mov rcx, rbx
call fcn.1402ee400
cmp eax, 0x19
jne 0x14028763a
mov edx, 0x2736
mov rcx, rbx
call fcn.1402c61d0
mov rcx, rbx
call fcn.1402ee430
test al, al
je 0x14028764a
xor eax, eax
jmp 0x14028764e
mov eax, dword [rsp + 0x2c]
add rsp, 0x30
pop rbx
ret
Function at 0x140287860
Capabilities:
Get socket status

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x240
mov esi, edx
mov eax, r8d
mov rdi, r9
cmp rcx, 0xffffffffffffffff
jne 0x14028788a
mov edx, 0x2719
mov rcx, r9
or ebx, 0xffffffff
call fcn.1402c6050
jmp 0x140287907
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], 1
and sil, 1
jne 0x1402878b6
xor edx, edx
test r8d, r8d
js 0x1402878c7
mov r8d, 0x3e8
cdq
idiv r8d
imul edx, edx, 0x3e8
jmp 0x1402878ba
xor eax, eax
xor edx, edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x34], edx
lea rdx, [rsp + 0x30]
lea rax, [rsp + 0x38]
inc ecx
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
call qword [sym.imp.WSOCK32.dll_select]
mov rcx, rdi
mov edx, eax
mov ebx, eax
shr edx, 0x1f
call fcn.140285ad0
test ebx, ebx
jne 0x140287907
test sil, sil
je 0x140287907
mov edx, 0x2733
mov rcx, rdi
call fcn.1402c6050
mov eax, ebx
add rsp, 0x240
pop rbx
pop rsi
pop rdi
ret

Function at 0x140287920
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
mov eax, dword [rsp + 0xf8]
mov rbx, qword [rsp + 0x100]
mov qword [rsp + 0xe0], r8
mov rdi, rcx
mov esi, edx
mov rbp, r9
mov r14d, edx
cmp rcx, 0xffffffffffffffff
jne 0x14028796d
mov edx, 0x2719
mov rcx, rbx
call fcn.1402c60b0
jmp 0x140287ab3
and esi, 0x10
test al, al
je 0x14028798f
test sil, sil
je 0x14028798f
xor r10d, r10d
xor r9d, r9d
mov dword [rbx], r9d
mov qword [rbx + 8], r10
mov qword [rbx + 0x10], r10
jmp 0x140287ab3
lea rax, [rsp + 0x50]
mov r15, qword [sym.imp.WS2_32.dll_WSARecv]
lea r12, [rsp + 0x68]
mov qword [rsp + 0x48], rax
xor r8d, r8d
xor ecx, ecx
mov r9, qword [rsp + 0x48]
mov qword [rsp + 0x20], r12
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x50], ecx
mov rcx, rdi
mov qword [rsp + 0x30], r8
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 0x28], r8
mov r8d, ebp
mov dword [rsp + 0x68], eax
call r15
mov edx, 1
mov rcx, rbx
mov r13d, eax
call fcn.140285ad0
mov rcx, rbx
call fcn.1402ee400
mov edx, 0x2746
cmp eax, 0x40
je 0x140287a0c
cmp eax, 0x4d2
jne 0x140287a16
mov edx, 0x274d
mov rcx, rbx
call fcn.1402c60b0
jmp 0x140287a24
cmp eax, 0xea
je 0x140287a29
cmp eax, 0x2738
je 0x140287a29
test r13d, r13d
jne 0x140287a58
xor eax, eax
xor edx, edx
mov dword [rbx], eax
movsxd rax, dword [rsp + 0x50]
mov qword [rbx + 8], rdx
mov qword [rbx + 0x10], rdx
test sil, sil
je 0x140287a54
test eax, eax
jne 0x140287a54
mov edx, 2
mov rcx, rbx
call fcn.1402c5ea0
jmp 0x140287ab3
test eax, eax
jns 0x140287ab5
test r14b, 1
jne 0x140287ab3
mov rcx, qword [rsp + 0x48]
mov edx, 0x2733
call fcn.1402c5870
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1402c7480
test al, al
je 0x140287a9a
mov edx, 0x4d5
mov rcx, r12
call fcn.1402c5870
mov rdx, r12
mov rcx, rbx
call fcn.1402c7480
test al, al
jne 0x140287ab3
or r8d, 0xffffffff
xor edx, edx
mov r9, rbx
mov rcx, rdi
call fcn.140287860
test eax, eax
jns 0x1402879a5
xor eax, eax
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x14028d5c0
Capabilities:
Send data
Send data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
xor ebx, ebx
xor edi, edi
mov qword [rsp + 0x48], rbx
mov rbp, rcx
mov r12, rdx
mov r13, r8
mov qword [rsp + 0x50], rbx
lea rsi, [rcx + 0x78]
lea r14, [rcx + 0x1b8]
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x14028d693
mov rax, r12
xor edx, edx
div rcx
shl rdx, 4
add rdx, qword [rsi + 0x30]
mov rbx, qword [rdx]
cmp rbx, rsi
je 0x14028d693
mov rax, qword [rdx + 8]
mov rax, qword [rax]
cmp rax, rbx
je 0x14028d693
cmp r12, qword [rbx + 0x10]
je 0x14028d631
mov rbx, qword [rbx]
jmp 0x14028d621
lea r15, [rbx + 0x18]
cmp rbx, rsi
je 0x14028d693
mov rdi, qword [rbx + 0x18]
test rdi, rdi
je 0x14028d684
movups xmm0, xmmword [r13]
mov rcx, r15
movups xmmword [rdi + 0x38], xmm0
mov rax, qword [r13 + 0x10]
mov qword [rdi + 0x48], rax
call fcn.1402be0c0
mov rax, qword [rsp + 0x50]
xor r11d, r11d
mov qword [rdi + 0x20], r11
test rax, rax
je 0x14028d678
mov qword [rax + 0x20], rdi
mov qword [rsp + 0x50], rdi
jmp 0x14028d63a
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rdi
jmp 0x14028d63a
lea rcx, [rsi - 8]
mov rdx, rbx
call fcn.1402bded0
mov dil, 1
add rsi, 0x50
cmp r14, rsi
jne 0x14028d5f5
lea rsi, [rsp + 0x48]
mov rcx, qword [rbp + 0x28]
mov rdx, rsi
call fcn.1402a1a10
test dil, dil
je 0x14028d752
lea rax, [rsp + 0x43]
xor edx, edx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x60], rax
xor r10d, r10d
xor eax, eax
mov rcx, qword [rbp + 0x60]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rdx
lea rdx, [rsp + 0x58]
mov dword [rsp + 0x44], r8d
mov r8d, 1
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r9
lea r9, [rsp + 0x44]
mov byte [rsp + 0x43], 0
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x20], r10d
call qword [sym.imp.WS2_32.dll_WSASend]
lea rbx, [rsp + 0x68]
mov edx, 1
mov rcx, rbx
call fcn.140285ad0
mov rcx, rbx
call fcn.1402ee400
mov edx, 0x2746
cmp eax, 0x40
je 0x14028d74a
cmp eax, 0x4d2
jne 0x14028d752
mov edx, 0x274d
mov rcx, rbx
call fcn.1402c6020
mov rcx, rsi
call fcn.1402be1b0
nop
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x140290160
Capabilities:
Resolve dns

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xa8
mov rbp, rdx
lea rax, [rsp + 0x80]
xor edx, edx
mov rbx, rcx
lea r15, [rbp + 0x50]
mov qword [rsp + 0x58], rdx
mov rcx, rax
lea r14, [rbp + 0x30]
mov rdx, r15
lea rsi, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rdi, r8
call fcn.1403939d0
mov rdx, r14
mov rcx, rsi
mov r13, qword [rsp + 0x80]
call fcn.1403939d0
mov r12, qword [rsp + 0x60]
test r12, r12
je 0x1402901cf
cmp byte [r12], 0
jne 0x1402901cf
xor r12d, r12d
test r13, r13
je 0x1402901de
cmp byte [r13], 0
jne 0x1402901de
xor r13d, r13d
xor ecx, ecx
call qword [sym.imp.WSOCK32.dll_WSASetLastError]
lea r9, [rsp + 0x58]
mov r8, rbp
mov rdx, r13
mov rcx, r12
call qword [sym.imp.WS2_32.dll_getaddrinfo]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.140286120
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rsi
movups xmmword [rdi], xmm0
mov rax, qword [rsp + 0x40]
mov qword [rdi + 0x10], rax
call fcn.1403907e0
mov rcx, qword [rsp + 0x28]
call fcn.1403907e0
mov rcx, rdi
mov rdx, rdi
mov rbp, qword [rsp + 0x58]
lea r8, [0x14050af60]
call fcn.1402c4e30
mov rcx, rdi
call fcn.1402ee430
test al, al
je 0x14029025b
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
jmp 0x14029029a
mov rcx, qword [rsp + 0x28]
mov rdx, r15
call fcn.1403939d0
mov rdx, r14
mov rcx, rsi
call fcn.1403939d0
mov r9, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x58]
mov r8, rsi
mov rcx, rbx
call fcn.140280b40
mov rcx, rsi
call fcn.1403907e0
mov rcx, qword [rsp + 0x28]
call fcn.1403907e0
test rbp, rbp
je 0x1402902fb
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_freeaddrinfo]
jmp 0x1402902fb
mov rax, rbx
add rsp, 0xa8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret

Function at 0x14029b730
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b770
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b7b0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b7f0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret
Function at 0x14029b830
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b870
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b8b0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b8f0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b930
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b970
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b9b0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029b9f0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029ba30
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029ba70
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret
Function at 0x14029bab0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029baf0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bb30
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bb70
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bbb0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bbf0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bc30
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bc70
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bcb0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret

Function at 0x14029bcf0
Capabilities:
Initialize winsock library

Disassembly:
push rbx
sub rsp, 0x1c0
shl r8d, 8
movzx edx, dl
lea rax, [rsp + 0x28]
mov rbx, rcx
or r8d, edx
mov rdx, rax
movzx ecx, r8w
call qword [sym.imp.WSOCK32.dll_WSAStartup]
xchg dword [rbx + 4], eax
add rsp, 0x1c0
pop rbx
ret