joyce8/EMBER2024-capa huggingface dataset:
Function at 0x47a7e0
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd0
mov byte [ebp - 9], cl
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
call sym.LookAtLan.exe__Tb2anim_TBEndAnimation_qqrxui
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x10], eax
call fcn.0047a500
mov eax, 0x5aeb70
xor ecx, ecx
mov edx, 0x4c
call fcn.0055cba0
mov eax, dword [ebp - 4]
mov dword [0x5aeb70], eax
mov eax, dword [ebp - 8]
mov dword [0x5aeb74], eax
cmp byte [ebp - 9], 0
je 0x47a835
cmp dword [0x5aebc4], 0
jne 0x47a839
xor eax, eax
jmp 0x47a83b
mov al, 1
mov byte [0x5aeb78], al
mov al, byte [ebp + 8]
mov byte [0x5aebac], al
push 0x5aeba4
call sub.USER32.DLL_GetCursorPos
push 0x5aeb8c
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_GetClientRect
push 2
push 0x5aeb8c
push 0
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_MapWindowPoints
lea eax, [ebp - 0x30]
push eax
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_GetWindowRect
push 3
push 0
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_GetDCEx
mov dword [0x5aeb80], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
mov dword [0x5aeb9c], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
mov dword [0x5aeba0], eax
mov eax, dword [0x5aeba0]
push eax
mov eax, dword [0x5aeb9c]
push eax
mov eax, dword [0x5aeb80]
push eax
call sub.GDI32.DLL_CreateCompatibleBitmap
mov dword [0x5aeb88], eax
mov eax, dword [0x5aeb80]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [0x5aeb84], eax
mov eax, dword [0x5aeb88]
push eax
mov eax, dword [0x5aeb84]
push eax
call sub.GDI32.DLL_SelectObject
push 0x1e
mov eax, dword [0x5aeb84]
push eax
push 0x317
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_SendMessageA
cmp byte [0x5aeb78], 0
je 0x47a973
push 0xffffffffffffffec
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_GetWindowLongA
or eax, 0x80000
push eax
push 0xffffffffffffffec
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_SetWindowLongA
mov dword [0x5aeb7c], 0x20
xor eax, eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x1c], 0
mov al, byte [0x5aeb7c]
mov byte [ebp - 0x1a], al
push 2
lea eax, [ebp - 0x1c]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x5aeb84]
push eax
push 0x5aeb9c
lea eax, [ebp - 0x30]
push eax
push 0
mov eax, dword [0x5aeb70]
push eax
call dword [0x5aebc4]
jmp 0x47a9a8
xor eax, eax
mov dword [0x5aeb7c], eax
push 0
push 0
push 0
push 0
call sub.GDI32.DLL_CreateRectRgn
mov dword [ebp - 0x20], eax
push 0
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_SetWindowRgn
test eax, eax
jne 0x47a9a8
mov eax, dword [ebp - 0x20]
push eax
call sub.GDI32.DLL_DeleteObject
push 0x425f
push 0
push 0
push 0
push 0
push 0
mov eax, dword [0x5aeb70]
push eax
call sub.USER32.DLL_SetWindowPos
push 0
push 4
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x47a550
xor edx, edx
xor eax, eax
call fcn.0055db70
mov dword [0x5aeb6c], eax
cmp dword [0x5aeb6c], 0
jne 0x47a9ed
call fcn.0047a6e8
jmp 0x47a9fe
inc dword [0x5aebbc]
mov eax, dword [0x5aeb6c]
push eax
call sub.KERNEL32.DLL_ResumeThread
mov esp, ebp
pop ebp
ret 4
Function at 0x485bb4
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0055e000
push eax
call sub.KERNEL32.DLL_GetFileAttributesA
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
je 0x485bda
test byte [ebp - 0xc], 0x10
jne 0x485bde
xor eax, eax
jmp 0x485be0
mov al, 1
mov byte [ebp - 5], al
mov al, byte [ebp - 5]
mov esp, ebp
pop ebp
ret
Function at 0x485bec
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe6c
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x20]
call fcn.0055dff0
xor eax, eax
push ebp
push 0x485df3
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebp + 0x20]
call fcn.0055cbd8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x184]
xor ecx, ecx
mov edx, 0x160
call fcn.0055cba0
cmp dword [ebp + 0x20], 0
je 0x485ca5
cmp dword [ebp - 0x14], 0
je 0x485ca5
mov eax, dword [ebp + 0x20]
call fcn.005555f0
test al, al
jne 0x485c58
mov eax, dword [ebp + 0x20]
call fcn.00485bb4
test al, al
je 0x485c7b
push 0x4000
push 0x160
lea eax, [ebp - 0x184]
push eax
push 0
mov eax, dword [ebp + 0x20]
call fcn.0055e000
push eax
call sub.SHELL32.DLL_SHGetFileInfoA
jmp 0x485c9c
push 0x4010
push 0x160
lea eax, [ebp - 0x184]
push eax
push 0
mov eax, dword [ebp + 0x20]
call fcn.0055e000
push eax
call sub.SHELL32.DLL_SHGetFileInfoA
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x10], eax
cmp byte [ebp + 0x1c], 0
je 0x485ccd
push 0x4000
push 0x160
lea eax, [ebp - 0x184]
push eax
push 0
push 0x485e00
call sub.SHELL32.DLL_SHGetFileInfoA
mov dword [ebp - 0x18], eax
jmp 0x485ced
push 0x4001
push 0x160
lea eax, [ebp - 0x184]
push eax
push 0
push 0x485e00
call sub.SHELL32.DLL_SHGetFileInfoA
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.COMCTL32.DLL_ImageList_GetIconSize
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.005444e4
cmp byte [ebp + 0x18], 0
je 0x485d38
cmp byte [ebp + 0x14], 0
jne 0x485d38
push 1
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
call fcn.004fd1fc
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.COMCTL32.DLL_ImageList_Draw
mov al, byte [ebp + 0x18]
and al, byte [ebp + 0x14]
je 0x485ddd
mov dl, 1
mov eax, dword [0x4fae58]
call fcn.005016bc
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx + 0x34]
push 0
push 0
push 0
mov eax, dword [ebp - 0x24]
call fcn.00501c28
call fcn.004fd1fc
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x18]
push eax
call sub.COMCTL32.DLL_ImageList_Draw
mov eax, dword [ebp - 8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x190], eax
fild dword [ebp - 0x1c]
fmul qword [ebp + 0xc]
call fcn.0055c9ec
add eax, dword [ebp - 8]
mov dword [ebp - 0x18c], eax
fild dword [ebp - 0x20]
fmul qword [ebp + 0xc]
call fcn.0055c9ec
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 4]
call fcn.00485acc
mov eax, dword [ebp - 0x24]
call fcn.0055cf20
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x485dfa
lea eax, [ebp + 0x20]
call fcn.0055dbbc
ret
Function at 0x48aba8
Capabilities:
Get file version info

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbe4
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.0055dff0
xor eax, eax
push ebp
push 0x48ac67
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 8], 0xffffffff
lea eax, [ebp - 0x41c]
mov edx, dword [ebp - 4]
call fcn.00555a10
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x41c]
push eax
call sub.VERSION.DLL_GetFileVersionInfoSizeA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x48ac51
mov eax, dword [ebp - 0x10]
call fcn.0055c6d4
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x41c]
push eax
call sub.VERSION.DLL_GetFileVersionInfoA
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x48ac78
mov eax, dword [ebp - 0x1c]
push eax
call sub.VERSION.DLL_VerQueryValueA
test eax, eax
je 0x48ac49
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0xfeef04bd
jne 0x48ac49
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
call fcn.0055c6ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48ac6e
lea eax, [ebp - 4]
call fcn.0055dbbc
ret
Function at 0x499b80
Capabilities:
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
push ebx
xor edx, edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x499e06
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00542d24
mov dx, 1
call fcn.00542cec
test al, al
je 0x499de8
call fcn.00542d24
call fcn.00542734
push 1
call sub.USER32.DLL_GetClipboardData
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x499c18
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0xc], 0
je 0x499bec
mov eax, dword [ebp - 0xc]
push eax
call sub.KERNEL32.DLL_GlobalLock
mov dword [ebp - 8], eax
jmp 0x499bf1
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x499c1f
cmp dword [ebp - 0xc], 0
je 0x499c0d
mov eax, dword [ebp - 0xc]
push eax
call sub.KERNEL32.DLL_GlobalUnlock
call fcn.00542d24
call fcn.00542708
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x499e0d
lea eax, [ebp - 0x2c]
call fcn.0055dbbc
lea eax, [ebp - 0x1c]
call fcn.0055dbbc
ret
Function at 0x49cf68
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov esi, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x49d0a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49d0bc
mov dl, 4
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOn_qqrv
xor edx, edx
push ebp
push 0x49d087
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
jne 0x49d026
test si, si
jne 0x49cfd8
mov eax, dword [ebp - 8]
call fcn.0055594c
mov esi, eax
cmp esi, 0xffff
jbe 0x49cfd8
call fcn.0055ce5c
movzx ebx, si
push 0
push ebx
movzx eax, si
sub eax, ebx
mov edx, dword [ebp - 8]
lea eax, [edx + eax]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x10288]
push eax
call sub.WS2_32.DLL_send
test eax, eax
je 0x49d026
cmp eax, 0xffffffff
jle 0x49d007
sub ebx, eax
jmp 0x49d016
lea ecx, [ebp - 0xc]
mov dx, 0x2733
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
test ebx, ebx
je 0x49d026
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49cfdb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49d071
mov eax, dword [ebp - 4]
mov byte [eax + 0x10088], 0
mov ecx, 0x49d0d4
mov dl, 1
mov eax, dword [sym.LookAtLan.exe__Psock_EAbortError_]
call fcn.00558568
call fcn.0055d6b8
mov eax, dword [ebp - 4]
cmp word [eax + 0x10282], 0
je 0x49d071
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x10284]
call dword [ebx + 0x10280]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d08e
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOff_qqrv
ret
Function at 0x49d1e8
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push 0
push 0
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x49d37e
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x49d394
lea edx, [ebp - 0xc]
movzx eax, si
call fcn.005553b4
push dword [ebp - 0xc]
push 0x49d3a4
lea eax, [ebp - 8]
mov edx, 3
call fcn.0055defc
mov ecx, dword [ebp - 8]
mov dl, 8
mov eax, ebx
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
test si, si
jne 0x49d289
push 2
push 0x10000
lea eax, [ebx + 0x24]
push eax
movzx eax, word [ebx + 0x10288]
push eax
call sub.WS2_32.DLL_recv
cmp eax, 0xffffffff
jne 0x49d278
lea ecx, [ebp - 0x10]
mov dx, 0x2733
mov eax, ebx
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [ebp - 4]
call fcn.0055dbbc
jmp 0x49d2df
mov esi, eax
cmp esi, 0xffff
jbe 0x49d2df
call fcn.0055ce5c
jmp 0x49d2df
push 2
push 0x10000
lea eax, [ebx + 0x24]
push eax
movzx eax, word [ebx + 0x10288]
push eax
call sub.WS2_32.DLL_recv
movzx edx, si
cmp eax, edx
jge 0x49d2df
test eax, eax
jne 0x49d2b9
mov eax, dword [ebp - 4]
call fcn.0055dbbc
jmp 0x49d363
inc eax
jne 0x49d2ca
lea ecx, [ebp - 0x14]
mov dx, 0x2733
mov eax, ebx
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
cmp byte [ebx + 0x10088], 0
je 0x49d289
cmp byte [ebx + 0x10088], 0
jne 0x49d32e
movzx edi, si
mov edx, edi
mov eax, dword [ebp - 4]
call fcn.0055e170
push 0
push edi
mov eax, dword [ebp - 4]
call fcn.0055e00c
mov edx, 1
dec edx
cmp edx, dword [eax - 4]
jb 0x49d310
call fcn.0055ce5c
inc edx
lea eax, [eax + edx - 1]
push eax
movzx eax, word [ebx + 0x10288]
push eax
call sub.WS2_32.DLL_recv
mov edx, dword [ebp - 4]
xchg edx, eax
call fcn.0055e170
jmp 0x49d363
mov byte [ebx + 0x10088], 0
mov ecx, 0x49d3b0
mov dl, 1
mov eax, dword [sym.LookAtLan.exe__Psock_EAbortError_]
call fcn.00558568
call fcn.0055d6b8
cmp word [ebx + 0x10282], 0
je 0x49d363
mov edx, ebx
mov eax, dword [ebx + 0x10284]
call dword [ebx + 0x10280]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d385
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.0055dbe0
ret
Function at 0x49d79c
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.0055dff0
xor eax, eax
push ebp
push 0x49d959
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49d970
mov dl, 8
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
push 0
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x543c6c]
call fcn.00547700
mov dword [ebp - 0xc], eax
xor edx, edx
push ebp
push 0x49d8e9
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
jne 0x49d8ad
mov eax, dword [ebp - 4]
lea edx, [eax + 0x24]
mov ecx, 0x10000
mov eax, dword [ebp - 0xc]
mov ebx, dword [eax]
call dword [ebx + 4]
mov esi, eax
mov ebx, esi
push 0
push ebx
mov eax, esi
sub eax, ebx
cmp eax, 0x10000
jbe 0x49d831
call fcn.0055ce5c
mov edx, dword [ebp - 4]
lea eax, [edx + eax + 0x24]
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x10288]
push eax
call sub.WS2_32.DLL_send
test eax, eax
je 0x49d8ad
cmp eax, 0xffffffff
jle 0x49d87e
sub ebx, eax
mov edx, dword [ebp - 4]
add dword [edx + 0x10084], eax
mov eax, dword [ebp - 4]
cmp word [eax + 0x100c2], 0
je 0x49d88d
mov edi, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [edi + 0x100c4]
call dword [edi + 0x100c0]
jmp 0x49d88d
lea ecx, [ebp - 0x10]
mov dx, 0x2733
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
test ebx, ebx
je 0x49d8ad
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49d81e
mov eax, dword [ebp - 0xc]
call fcn.00547478
mov ebx, eax
mov eax, dword [ebp - 0xc]
call fcn.00547494
cmp ebx, eax
je 0x49d8d3
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49d7f7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d8f0
mov eax, dword [ebp - 0xc]
call fcn.0055cf20
ret
Function at 0x49d998
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x49db19
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49db30
mov dl, 8
mov eax, ebx
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00547488
cmp byte [ebx + 0x10088], 0
jne 0x49dac5
xor eax, eax
mov dword [ebx + 0x10084], eax
mov eax, dword [ebp - 4]
call fcn.00547494
mov dword [ebx + 0x100b0], eax
mov eax, dword [ebp - 4]
call fcn.00547494
push eax
mov eax, dword [ebp - 4]
call fcn.00547478
pop edx
xchg edx, eax
sub eax, edx
cmp eax, 0x10000
jle 0x49da14
mov eax, 0x10000
lea edx, [ebx + 0x24]
mov ecx, eax
mov eax, dword [ebp - 4]
mov esi, dword [eax]
call dword [esi + 4]
mov dword [ebp - 8], eax
mov esi, dword [ebp - 8]
push 0
push esi
mov eax, dword [ebp - 8]
sub eax, esi
cmp eax, 0x10000
jbe 0x49da3b
call fcn.0055ce5c
lea eax, [ebx + eax + 0x24]
push eax
movzx eax, word [ebx + 0x10288]
push eax
call sub.WS2_32.DLL_send
test eax, eax
je 0x49db03
test eax, eax
jle 0x49da7b
sub esi, eax
add dword [ebx + 0x10084], eax
cmp word [ebx + 0x100c2], 0
je 0x49da89
mov edx, ebx
mov eax, dword [ebx + 0x100c4]
call dword [ebx + 0x100c0]
jmp 0x49da89
lea ecx, [ebp - 0xc]
mov dx, 0x2733
mov eax, ebx
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
test esi, esi
je 0x49daa2
cmp byte [ebx + 0x10088], 0
je 0x49da27
mov eax, dword [ebp - 4]
call fcn.00547494
mov esi, eax
mov eax, dword [ebp - 4]
call fcn.00547478
cmp esi, eax
je 0x49dac5
cmp byte [ebx + 0x10088], 0
je 0x49d9f3
cmp byte [ebx + 0x10088], 0
je 0x49db03
mov byte [ebx + 0x10088], 0
mov ecx, 0x49db44
mov dl, 1
mov eax, dword [sym.LookAtLan.exe__Psock_EAbortError_]
call fcn.00558568
call fcn.0055d6b8
cmp word [ebx + 0x10282], 0
je 0x49db03
mov edx, ebx
mov eax, dword [ebx + 0x10284]
call dword [ebx + 0x10280]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49db20
lea eax, [ebp - 0xc]
call fcn.0055dbbc
ret
Function at 0x49db58
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.0055dff0
xor eax, eax
push ebp
push 0x49dcee
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49dd04
mov dl, 8
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x100b4], edx
push 1
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x543c6c]
call fcn.00547700
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x49dc7e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.00547494
mov edx, eax
mov eax, dword [ebp - 0xc]
call fcn.00547488
jmp 0x49dc4c
push 0
push 0x10000
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x10288]
push eax
call sub.WS2_32.DLL_recv
mov ebx, eax
test ebx, ebx
jle 0x49dc2e
mov eax, dword [ebp - 4]
lea edx, [eax + 0x24]
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00547504
mov eax, dword [ebp - 4]
add dword [eax + 0x100b4], ebx
mov eax, dword [ebp - 4]
cmp word [eax + 0x100ba], 0
je 0x49dc40
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x100bc]
call dword [ebx + 0x100b8]
jmp 0x49dc40
inc ebx
jne 0x49dc40
lea ecx, [ebp - 0x10]
mov dx, 0x2733
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10290], 0
je 0x49dc68
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49dbd0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49dc85
mov eax, dword [ebp - 0xc]
call fcn.0055cf20
ret
Function at 0x49dd2c
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.0055dff0
xor eax, eax
push ebp
push 0x49df02
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49df18
mov dl, 8
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x100b4], edx
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOn_qqrv
xor eax, eax
push ebp
push 0x49dedd
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xffff
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x543c6c]
call fcn.00547700
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x49de75
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x49de4f
push 0
push 0x10000
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x10288]
push eax
call sub.WS2_32.DLL_recv
mov ebx, eax
test ebx, ebx
jle 0x49de13
mov eax, dword [ebp - 4]
lea edx, [eax + 0x24]
mov ecx, ebx
mov eax, dword [ebp - 0xc]
call fcn.00547504
mov eax, dword [ebp - 4]
add dword [eax + 0x100b4], ebx
mov eax, dword [ebp - 4]
cmp word [eax + 0x100ba], 0
je 0x49de0b
mov esi, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x100bc]
call dword [esi + 0x100b8]
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOn_qqrv
cmp ebx, 0xffffffff
jne 0x49de3f
call sub.WS2_32.DLL_WSAGetLastError
mov esi, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1008c], esi
cmp esi, 0x2749
je 0x49de5f
lea ecx, [ebp - 0x10]
mov dx, 0x2733
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
test ebx, ebx
je 0x49de5f
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49ddaf
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49de7c
mov eax, dword [ebp - 0xc]
call fcn.0055cf20
ret
Function at 0x49df40
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
mov esi, ecx
mov edi, edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x49e0e2
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, 0x49e0f8
mov dl, 8
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_StatusMessage_qqruc17System_AnsiString
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x100b4], edx
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOn_qqrv
xor eax, eax
push ebp
push 0x49e0c5
push dword fs:[eax]
mov dword fs:[eax], esp
jmp 0x49e040
push 0
push 0x10000
mov eax, dword [ebp - 4]
add eax, 0x24
push eax
mov eax, dword [ebp - 4]
movzx eax, word [eax + 0x10288]
push eax
call sub.WS2_32.DLL_recv
mov ebx, eax
test ebx, ebx
je 0x49e064
test ebx, ebx
jle 0x49e005
mov eax, dword [ebp - 4]
lea edx, [eax + 0x24]
mov ecx, ebx
mov eax, edi
call fcn.00547504
mov eax, dword [ebp - 4]
add dword [eax + 0x100b4], ebx
mov eax, dword [ebp - 4]
cmp word [eax + 0x100ba], 0
je 0x49dffb
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x100bc]
call dword [ebx + 0x100b8]
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOn_qqrv
jmp 0x49e02f
inc ebx
jne 0x49e02f
call sub.WS2_32.DLL_WSAGetLastError
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x1008c], ebx
cmp ebx, 0x2749
je 0x49e064
lea ecx, [ebp - 8]
mov dx, 0x2733
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_ErrorManager_qqrus
mov eax, dword [0x5ae3ec]
mov eax, dword [eax]
call fcn.0050f7c8
cmp esi, 0xffffffff
je 0x49e064
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
jne 0x49e064
cmp esi, 0xffffffff
je 0x49df98
mov eax, edi
call fcn.00547494
cmp esi, eax
jg 0x49df98
mov eax, dword [ebp - 4]
cmp byte [eax + 0x10088], 0
je 0x49e0af
mov eax, dword [ebp - 4]
mov byte [eax + 0x10088], 0
mov ecx, 0x49e110
mov dl, 1
mov eax, dword [sym.LookAtLan.exe__Psock_EAbortError_]
call fcn.00558568
call fcn.0055d6b8
mov eax, dword [ebp - 4]
cmp word [eax + 0x10282], 0
je 0x49e0af
mov ebx, dword [ebp - 4]
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x10284]
call dword [ebx + 0x10280]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49e0cc
mov eax, dword [ebp - 4]
call sym.LookAtLan.exe__Psock_TPowersock_TimerOff_qqrv
ret