joyce8/EMBER2024-capa huggingface dataset:
Function at 0x437ce0
Capabilities:
Get socket status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x437d16
push 2
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x437e7b
mov ecx, dword [ebp - 0x120]
mov byte [ecx + 0x24], 0
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0x10]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x10]
xor edx, edx
mov ecx, 0x3e8
div ecx
imul edx, edx, 0x3e8
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x11c], 0
jmp 0x437d77
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x118]
jae 0x437da1
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp + ecx*4 - 0x114]
cmp eax, dword [edx + 4]
jne 0x437d9f
jmp 0x437da1
jmp 0x437d68
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [ebp - 0x118]
jne 0x437ddd
cmp dword [ebp - 0x118], 0x40
jae 0x437ddd
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 4]
mov dword [ebp + edx*4 - 0x114], ecx
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
xor eax, eax
jne 0x437d5c
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0
lea edx, [ebp - 0x118]
push edx
push 0x40
call dword [0x4b0a28]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x437e24
call dword [0x4b07c0]
cmp dword [eax], 4
je 0x437e22
push 1
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x437e7b
jmp 0x437e78
cmp dword [ebp - 4], 0
jle 0x437e78
lea eax, [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x120]
mov edx, dword [ecx + 4]
push edx
call fcn.004a3920
test eax, eax
je 0x437e78
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x120]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x120]
call dword [eax + 0x14]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x437e78
push 4
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x437e7b
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret 0xc
Function at 0x437e90
Capabilities:
Get socket status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x437ec6
push 2
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x438028
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov eax, dword [ebp + 0x10]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0x10]
xor edx, edx
mov ecx, 0x3e8
div ecx
imul edx, edx, 0x3e8
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x11c], 0
jmp 0x437f29
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x108]
jae 0x437f53
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp + ecx*4 - 0x104]
cmp eax, dword [edx + 4]
jne 0x437f51
jmp 0x437f53
jmp 0x437f1a
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [ebp - 0x108]
jne 0x437f8f
cmp dword [ebp - 0x108], 0x40
jae 0x437f8f
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 4]
mov dword [ebp + edx*4 - 0x104], ecx
mov edx, dword [ebp - 0x108]
add edx, 1
mov dword [ebp - 0x108], edx
xor eax, eax
jne 0x437f0e
lea ecx, [ebp - 0x118]
push ecx
push 0
lea edx, [ebp - 0x108]
push edx
push 0
push 0x40
call dword [0x4b0a28]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffff
jne 0x437fdf
call dword [0x4b07c0]
cmp dword [eax], 4
je 0x437fdd
push 1
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x438028
jmp 0x438022
cmp dword [ebp - 0x110], 0
jle 0x438022
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x120]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x120]
call dword [eax + 4]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jne 0x438022
push 4
mov ecx, dword [ebp - 0x120]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x438028
mov eax, dword [ebp - 0x10c]
mov esp, ebp
pop ebp
ret 0xc
Function at 0x438380
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 8]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x4383a6
push 2
mov ecx, dword [ebp - 8]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
xor eax, eax
jmp 0x4383ed
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 4]
push ecx
call dword [0x4b090c]
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x4383ea
call dword [0x4b07c0]
cmp dword [eax], 4
je 0x4383e8
push 1
mov ecx, dword [ebp - 8]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x4383ed
jmp 0x4383ad
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 8
Function at 0x438400
Capabilities:
Get socket status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov dword [ebp - 0x128], ecx
mov ecx, dword [ebp - 0x128]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x438436
push 2
mov ecx, dword [ebp - 0x128]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x4385f2
mov ecx, dword [ebp - 0x128]
mov byte [ecx + 0x24], 0
mov dword [ebp - 4], 0
mov edx, dword [ebp - 4]
cmp edx, dword [ebp + 0xc]
jae 0x4385ef
mov dword [ebp - 8], 0
cmp dword [ebp - 8], 0
jne 0x43855c
mov eax, dword [ebp - 0x128]
movzx ecx, byte [eax + 0x24]
test ecx, ecx
jne 0x43855c
mov dword [ebp - 0x10], 1
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x11c], 0
jmp 0x4384a9
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x118]
jae 0x4384d3
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp + ecx*4 - 0x114]
cmp eax, dword [edx + 4]
jne 0x4384d1
jmp 0x4384d3
jmp 0x43849a
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [ebp - 0x118]
jne 0x43850f
cmp dword [ebp - 0x118], 0x40
jae 0x43850f
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax + 4]
mov dword [ebp + edx*4 - 0x114], ecx
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
xor eax, eax
jne 0x43848e
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0
lea edx, [ebp - 0x118]
push edx
push 0x40
call dword [0x4b0a28]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jge 0x438557
call dword [0x4b07c0]
cmp dword [eax], 4
je 0x438557
push 1
mov ecx, dword [ebp - 0x128]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x4385f2
jmp 0x43845a
cmp dword [ebp - 8], 0
jle 0x4385ca
mov eax, dword [ebp + 8]
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp + 0xc]
sub ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x120]
add edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x128]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x128]
call dword [edx + 0x14]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffff
jne 0x4385a1
or eax, 0xffffffff
jmp 0x4385f2
cmp dword [ebp - 0x124], 0
jne 0x4385bc
push 4
mov ecx, dword [ebp - 0x128]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x4385f2
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x124]
mov dword [ebp - 4], eax
jmp 0x4385ea
mov ecx, dword [ebp - 0x128]
movzx edx, byte [ecx + 0x24]
test edx, edx
je 0x4385ea
push 3
mov ecx, dword [ebp - 0x128]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
or eax, 0xffffffff
jmp 0x4385f2
jmp 0x438447
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 8
Function at 0x4386d0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a68fe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov dword [ebp - 0x18], ecx
push 4
lea eax, [ebp + 8]
push eax
push 0x1001
push 0xffff
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b09b4]
test eax, eax
jge 0x43876b
push 0x22a
push 0x4b75ec
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::setModule_char_const___int_
add esp, 8
push sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::postDebug_char_const___char_const___char__
lea ecx, [ebp - 0x14]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoMsgBuilder_0_::constructor_void____cdecl___char_const___char_const___char___
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
push 1
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
push eax
push 0x4b7618
mov edx, dword [ebp - 0x20]
push edx
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoMsgBuilder_0_::operator___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoMsgBuilder_0_::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4

Function at 0x438780
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6910
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov dword [ebp - 0x18], ecx
push 4
lea eax, [ebp + 8]
push eax
push 0x1002
push 0xffff
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b09b4]
test eax, eax
jge 0x43881b
push 0x233
push str.common_src_base_tcp_srcCoIoDescriptor.cpp
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::setModule_char_const___int_
add esp, 8
push sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::postDebug_char_const___char_const___char__
lea ecx, [ebp - 0x14]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoMsgBuilder_0_::constructor_void____cdecl___char_const___char_const___char___
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
push 1
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
push eax
push 0x4b7664
mov edx, dword [ebp - 0x20]
push edx
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoMsgBuilder_0_::operator___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoMsgBuilder_0_::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x438f10
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a698c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov dword [ebp - 0x1c], ecx
movzx eax, byte [ebp + 8]
mov dword [ebp - 0x10], eax
push 4
lea ecx, [ebp - 0x10]
push ecx
push 1
push 6
mov ecx, dword [ebp - 0x1c]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b09b4]
test eax, eax
jge 0x438fac
push 0xc4
push 0x4b7864
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::setModule_char_const___int_
add esp, 8
push sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::postDebug_char_const___char_const___char__
lea ecx, [ebp - 0x18]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoMsgBuilder_0_::constructor_void____cdecl___char_const___char_const___char___
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov dword [ebp - 4], 0
push 1
mov ecx, dword [ebp - 0x1c]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
push eax
push str.Unable_to_set_socket_option:__s
mov eax, dword [ebp - 0x24]
push eax
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoMsgBuilder_0_::operator___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoMsgBuilder_0_::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4

Function at 0x438fc0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
cmp dword [ebp + 0xc], 0
jbe 0x439073
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x439008
push 0xd0
push 0x4b78b8
push 0x4b78ec
call dword [0x4b07d8]
add esp, 0xc
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
push 0
push 0
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 4]
push edx
push 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b0a10]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x439063
cmp dword [ebp - 0x14], 0xffffffff
jne 0x439061
call dword [0x4b0a24]
cmp eax, 0x2733
jne 0x439053
jmp 0x439014
push 1
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
xor eax, eax
jmp 0x439076
jmp 0x439014
cmp dword [ebp - 4], 0
jne 0x439073
push 4
mov ecx, dword [ebp - 0x18]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 8
Function at 0x439080
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
call sym.MANAGER.exe_public:_bool___thiscall_WireTap::CoIoDescriptor::isValid_void_const
movzx eax, al
test eax, eax
jne 0x4390b0
push 0xf2
push 0x4b78f8
push str.isValid__
call dword [0x4b07d8]
add esp, 0xc
mov edx, dword [ebp + 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
lea ecx, [ebp - 4]
push ecx
push 1
lea edx, [ebp - 0xc]
push edx
mov ecx, dword [ebp - 0x10]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b0a0c]
cmp eax, 0xffffffff
jne 0x4390fd
call dword [0x4b0a24]
cmp eax, 0x2733
jne 0x4390ef
jmp 0x4390bc
push 1
mov ecx, dword [ebp - 0x10]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
xor eax, eax
jmp 0x439100
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 8

Function at 0x439110
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a699e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov dword [ebp - 0x20], ecx
movzx eax, byte [ebp + 8]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x10]
push ecx
push 0x8004667e
mov ecx, dword [ebp - 0x20]
call sym.MANAGER.exe_public:_int___thiscall_WireTap::CoIoDescriptor::id_void_const
push eax
call dword [0x4b0a08]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4391ba
push 0x109
push 0x4b7938
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::setModule_char_const___int_
add esp, 8
push sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::postDebug_char_const___char_const___char__
lea ecx, [ebp - 0x1c]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoMsgBuilder_0_::constructor_void____cdecl___char_const___char_const___char___
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], 0
push 1
mov ecx, dword [ebp - 0x20]
call sym.MANAGER.exe_protected:_char_const____thiscall_WireTap::CoIoDescriptor::setLastError_enum_WireTap::CoIoDescriptor::IoError_
push eax
push str.Couldnt_set_socket_as_nonblocking:__s
mov eax, dword [ebp - 0x28]
push eax
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoMsgBuilder_0_::operator___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoMsgBuilder_0_::destructor_void_
xor al, al
jmp 0x4391bc
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x4391d0
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a69b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x974
mov eax, dword [0x5015f0]
mov dword [ebp - 0x10], eax
movzx eax, byte [0x501cc1]
test eax, eax
je 0x439290
lea ecx, [ebp - 0x1a4]
push ecx
push 2
call dword [0x4b0a04]
test eax, eax
je 0x439289
push 0x100
lea edx, [ebp - 0x2a4]
push edx
push 1
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoIoDescriptor::getIoError_enum_WireTap::CoIoDescriptor::IoError__char___int_
add esp, 0xc
push 0x4b7994
push 0x119
lea ecx, [ebp - 0x978]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoException::constructor_int__char_const__
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x980], eax
mov dword [ebp - 4], 0
push str.WSAStartup_failed
lea ecx, [ebp - 0x2a4]
push ecx
mov edx, dword [ebp - 0x980]
push edx
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoException::fire_char_const___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x978]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoException::destructor_void_
mov byte [0x501cc1], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.0041c9ce
mov esp, ebp
pop ebp
ret
Function at 0x439960
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6a5b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74
mov eax, dword [0x5015f0]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0
movzx eax, byte [0x50420c]
test eax, eax
je 0x4399e8
push 0x198
push 0x4b7b98
call sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::setModule_char_const___int_
add esp, 8
push sym.MANAGER.exe_public:_static_void___cdecl_WireTap::CoMsg::postDebug_char_const___char_const___char__
lea ecx, [ebp - 0x78]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoMsgBuilder_0_::constructor_void____cdecl___char_const___char_const___char___
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x80], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp + 8]
push edx
push 0x4b7bcc
mov eax, dword [ebp - 0x80]
push eax
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoMsgBuilder_0_::operator___char_const__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoMsgBuilder_0_::destructor_void_
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call dword [0x4b0a14]
test eax, eax
je 0x439a05
xor al, al
jmp 0x439b17
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
jmp 0x439a16
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
je 0x439b04
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
movzx edx, word [ecx]
cmp edx, 0x17
jne 0x439a97
push 2
push 0
push 0
push 0x41
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
push ecx
call dword [0x4b09fc]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x439a95
push 4
push str.fe80
lea edx, [ebp - 0x64]
push edx
call dword [0x4b07a0]
add esp, 0xc
test eax, eax
jne 0x439a71
jmp 0x439a0d
push 0x4b7bf0
lea eax, [ebp - 0x64]
push eax
call fcn.004a3a58
add esp, 8
test eax, eax
je 0x439a95
lea ecx, [ebp - 0x64]
push ecx
mov ecx, dword [ebp + 0xc]
call dword [0x4b06b4]
jmp 0x439b04
jmp 0x439aff
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
movzx ecx, word [eax]
cmp ecx, 2
jne 0x439aff
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ecx + 4]
push edx
call dword [0x4b09f0]
cmp eax, 0x7f000001
jne 0x439ac7
jmp 0x439a0d
push 2
push 0
push 0
push 0x41
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x18]
push ecx
call dword [0x4b09fc]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x439aff
lea edx, [ebp - 0x64]
push edx
mov ecx, dword [ebp + 0xc]
call dword [0x4b06b4]
jmp 0x439b04
jmp 0x439a0d
mov eax, dword [ebp - 0x10]
push eax
call dword [0x4b0a20]
xor eax, eax
cmp dword [ebp - 0x14], 0
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x18]
call fcn.0041c9ce
mov esp, ebp
pop ebp
ret