joyce8/EMBER2024-capa huggingface dataset:
Function at 0x44836f
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push edi
push 0x29
mov edi, ecx
call dword [sym.imp.WS2_32.dll_htons]
mov esi, dword [ebp + 8]
and dword [ebp - 0xa], 0
mov word [ebp - 0xc], ax
lea eax, [esi + 0xb]
imul eax, eax, 0x28
mov eax, dword [eax + edi]
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
mov al, byte [ecx + eax + 0x14]
push 0
and al, 1
pop eax
setne al
push eax
call dword [sym.imp.WS2_32.dll_htonl]
imul esi, esi, 0x28
mov esi, dword [esi + edi + 0x198]
push 0
mov dword [ebp - 6], eax
push 0xa
lea eax, [ebp - 0xc]
push eax
push esi
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xa
pop edi
pop esi
je 0x4483ef
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.gh_send_failed
call fcn.004470a9
pop ecx
pop ecx
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
xor al, al
jmp 0x4483f1
mov al, 1
leave
ret 4

Function at 0x4484f7
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
lea ebp, [esp - 0xac]
sub esp, 0x12c
mov eax, dword [0x493bd0]
xor eax, ebp
mov dword [ebp + 0xa8], eax
push esi
push edi
mov edi, ecx
lea eax, [ebp - 0x60]
push edi
push eax
call fcn.00453940
mov esi, dword [sym.imp.WS2_32.dll_htonl]
pop ecx
pop ecx
push dword [edi + 0x104]
call esi
push dword [edi + 0x108]
mov dword [ebp + 0xa0], eax
call esi
push 0x22
mov dword [ebp + 0xa4], eax
call dword [sym.imp.WS2_32.dll_htons]
push 0x108
mov word [ebp - 0x6c], ax
call esi
push dword [edi + 0x100]
mov dword [ebp - 0x6a], eax
call esi
mov dword [ebp - 0x66], eax
xor esi, esi
push esi
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x78], eax
push esi
lea eax, [ebp - 0x60]
mov dword [ebp - 0x70], eax
push esi
lea eax, [ebp - 0x80]
push eax
push 2
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp + 0xb4]
imul eax, eax, 0x28
push dword [eax + edi + 0x198]
mov dword [ebp - 0x7c], 0xa
mov dword [ebp - 0x74], 0x108
call dword [sym.imp.WS2_32.dll_WSASend]
cmp eax, 0xffffffff
jne 0x4485c7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.send_failed
call fcn.004470a9
pop ecx
pop ecx
push esi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
xor al, al
jmp 0x4485c9
mov al, 1
mov ecx, dword [ebp + 0xa8]
pop edi
xor ecx, ebp
pop esi
call fcn.004533e4
add ebp, 0xac
leave
ret 4
Function at 0x449cd2
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
mov eax, dword [0x493bd0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
mov esi, dword [ebp + 8]
mov byte [eax], 0
mov dword [ebp - 0x10c], eax
lea eax, [esi + 0xb]
imul eax, eax, 0x28
push edi
mov edi, ecx
lea ebx, [eax + edi]
cmp dword [ebx], 0
je 0x449d18
push esi
call fcn.00447ebb
test al, al
jne 0x449d18
xor al, al
jmp 0x449dca
lea eax, [ebp - 0x108]
push eax
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00447767
lea eax, [ebp - 0x108]
push eax
push dword [ebp + 0xc]
mov ecx, edi
call fcn.00449b12
test al, al
jne 0x449d4f
mov eax, dword [ebp - 0x10c]
mov byte [eax], 1
jmp 0x449d11
mov eax, dword [ebp + 0xc]
imul esi, esi, 0x28
mov eax, dword [edi + eax*4 + 0xa68]
add esi, edi
xor edi, edi
push 0x1a
mov dword [ebx], eax
mov dword [esi + 0x1b0], edi
mov dword [esi + 0x1b4], edi
call dword [sym.imp.WS2_32.dll_htons]
mov esi, dword [esi + 0x198]
push edi
mov word [ebp - 0x118], ax
push 0xa
lea eax, [ebp - 0x118]
push eax
push esi
mov dword [ebp - 0x116], edi
mov dword [ebp - 0x112], 1
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xa
je 0x449dc8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.gh_send_failed
call fcn.004470a9
pop ecx
pop ecx
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
jmp 0x449d11
mov al, 1
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004533e4
leave
ret 0x14
Function at 0x44a095
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
sub esp, 0x30
push ebx
push esi
mov byte [eax], 0
mov eax, dword [ebp + 8]
mov esi, eax
imul esi, esi, 0x28
push edi
mov ebx, ecx
lea ecx, [ebp - 0x30]
push ecx
push dword [ebx + eax*4 + 0x6c8]
lea edi, [esi + ebx]
push dword [edi + 0x198]
call dword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
cmp eax, 0xffffffff
jne 0x44a0ef
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.WSAEnumNetworkEvents_failed
call fcn.004470a9
pop ecx
pop ecx
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
xor al, al
jmp 0x44a1f0
test byte [ebp - 0x30], 1
je 0x44a1de
mov eax, dword [edi + 0x1a8]
mov edx, dword [edi + 0x198]
sub esi, eax
lea ecx, [esi + ebx + 0x1a6]
xor esi, esi
push esi
push eax
push ecx
push edx
call dword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
jne 0x44a149
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push esi
mov edi, eax
call dword [sym.imp.WS2_32.dll_WSASetLastError]
cmp edi, 0x2733
je 0x44a1de
push edi
push str.gh_recv_failed
call fcn.004470a9
pop ecx
pop ecx
jmp 0x44a0e8
sub dword [edi + 0x1a8], eax
jne 0x44a1de
push esi
push esi
push dword [edi + 0x198]
mov esi, dword [sym.imp.WS2_32.dll_WSAEventSelect]
call esi
cmp eax, 0xffffffff
jne 0x44a17b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.WSAEventSelect_failed
jmp 0x44a0d9
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
push dword [edi + 0x198]
call fcn.0045081a
cmp eax, 0xffffffff
pop ecx
pop ecx
jne 0x44a1a6
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.ioctlsocket_failed
jmp 0x44a0d9
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 8]
call fcn.00449ddb
test al, al
je 0x44a0e8
mov eax, dword [ebp + 8]
push 0x21
push dword [ebx + eax*4 + 0x6c8]
push dword [edi + 0x198]
call esi
cmp eax, 0xffffffff
je 0x44a16a
mov dword [edi + 0x1a8], 0xa
test byte [ebp - 0x30], 0x20
je 0x44a1ee
push dword [ebp + 8]
mov ecx, ebx
call fcn.00448dbc
mov al, 1
pop edi
pop esi
pop ebx
leave
ret 8
Function at 0x44b277
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
mov eax, dword [0x493bd0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0xff
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.WS2_32.dll_gethostname]
cmp eax, 0xffffffff
jne 0x44b2d7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push str.gethostname
push str...RMLStack.cpp:216
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
or eax, 0xffffffff
jmp 0x44b3bb
push edi
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov edi, eax
test edi, edi
jne 0x44b31e
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push str.gethostbyname
push str...RMLStack.cpp:226
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
jmp 0x44b3b3
cmp word [edi + 0xa], 4
je 0x44b338
push 0x2afb
call fcn.0044b267
mov dword [esp], 0x47ba38
jmp 0x44b39f
push esi
push str.rml_get_local_interfaces_found_these_IP_addresses:_n
push 0x14
call fcn.00451d25
pop ecx
pop ecx
xor esi, esi
mov eax, dword [edi + 0xc]
lea eax, [eax + esi*4]
cmp dword [eax], 0
je 0x44b383
mov eax, dword [eax]
push dword [eax]
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
push str.____s_n
push 0x14
call fcn.00451d25
mov eax, dword [edi + 0xc]
mov eax, dword [eax + esi*4]
mov eax, dword [eax]
add esp, 0xc
mov dword [esi*4 + 0x49a500], eax
inc esi
cmp esi, 0x10
jb 0x44b349
mov dword [0x49a544], esi
test esi, esi
pop esi
jne 0x44b3b8
push 0x2afb
call fcn.0044b267
mov dword [esp], str.No_IP_address_configured
push str.rml_get_local_interfaces
push str._s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x10
or eax, 0xffffffff
jmp 0x44b3ba
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004533e4
leave
ret
Function at 0x44c2d6
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
push ebx
push ebx
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
or esi, 0xffffffff
cmp eax, esi
jne 0x44c32b
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push 0x47c8c0
push str...RMLStack.cpp:1958
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
mov eax, esi
jmp 0x44c4a3
lea eax, [ebp + 8]
push eax
push dword [edi + 4]
mov dword [ebp + 8], ebx
call fcn.0045081a
cmp eax, esi
pop ecx
pop ecx
jne 0x44c361
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push str.ioctlsocket
push str...RMLStack.cpp:1970
jmp 0x44c315
push dword [ebp + 0xc]
mov esi, dword [sym.imp.WS2_32.dll_htonl]
call esi
push dword [ebp + 0x10]
mov dword [ebp - 0x14], eax
call esi
push dword [ebp + 0x14]
mov dword [ebp - 0x10], eax
call esi
mov dword [ebp - 0xc], eax
mov al, byte [ebp + 0x18]
mov byte [ebp - 8], al
lea eax, [ebp - 0x14]
xor esi, esi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x20]
inc esi
cmp eax, ebx
mov dword [ebp - 0x2c], 0xd
je 0x44c3b7
cmp dword [ebp + 0x24], ebx
jbe 0x44c3b7
mov dword [ebp - 0x20], eax
mov eax, 0x597
cmp dword [ebp + 0x24], eax
jae 0x44c3b1
mov eax, dword [ebp + 0x24]
push 2
mov dword [ebp - 0x24], eax
pop esi
cmp byte [edi + 0x15], bl
push ebx
lea eax, [ebp - 4]
push ebx
je 0x44c3d3
push ebx
push eax
push esi
lea eax, [ebp - 0x2c]
push eax
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_WSASend]
jmp 0x44c3e8
push 0x10
push dword [ebp + 0x1c]
push ebx
push eax
push esi
lea eax, [ebp - 0x2c]
push eax
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_WSASendTo]
cmp eax, 0xffffffff
jne 0x44c44a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
sub eax, 0x2714
je 0x44c435
sub eax, 0x1f
je 0x44c42c
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push 0x47c878
push str...RMLStack.cpp:2018
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
or eax, 0xffffffff
jmp 0x44c4a3
push str.Send_would_block_n
push 0xa
jmp 0x44c43c
push str.Send_interrupted_n
push 0x1e
call fcn.00451d25
pop ecx
pop ecx
push ebx
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push dword [ebp + 0x1c]
dec esi
dec esi
neg esi
sbb esi, esi
not esi
and esi, dword [ebp - 0x24]
lea eax, [ebp - 0x14]
push esi
push eax
push 0x53
call fcn.0044b3c7
add esp, 0x10
push 3
push dword [edi + 0x6d0]
push dword [edi + 4]
call dword [sym.imp.WS2_32.dll_WSAEventSelect]
cmp eax, 0xffffffff
jne 0x44c4a1
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push 0x47c8c0
push str...RMLStack.cpp:2033
jmp 0x44c418
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
Function at 0x44ca59
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push edi
push dword [esi + 0x658]
mov edi, dword [sym.imp.WS2_32.dll_htonl]
call edi
push dword [esi + 0x620]
mov dword [ebp - 0x10], eax
call edi
push dword [esi + 0x624]
mov dword [ebp - 0xc], eax
call edi
push 0
push 0xd
lea ecx, [ebp - 0x10]
mov dword [ebp - 8], eax
mov eax, dword [esi + 4]
push ecx
push eax
mov byte [ebp - 4], 0x82
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
pop edi
jne 0x44cb0f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
sub eax, 0x2714
je 0x44caf7
sub eax, 0x1f
je 0x44cae2
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push str.gh_send
push str...RMLStack.cpp:2648
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
or eax, 0xffffffff
leave
ret
push str.Send_would_block_n
push 0xa
call fcn.00451d25
mov byte [esi + 0x6d5], 0
jmp 0x44cb03
push str.Send_interrupted_n
push 0x1e
call fcn.00451d25
pop ecx
pop ecx
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
jmp 0x44cb35
lea eax, [esi + 0x754]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0x53
call fcn.0044b3c7
mov eax, dword [esi + 0x778]
mov ecx, dword [esi + 0x620]
add esp, 0x10
mov dword [eax + 0xc], ecx
xor eax, eax
leave
ret
Function at 0x44cd9e
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
push esi
mov esi, eax
cmp byte [esi + 0x6d4], 0
push edi
jne 0x44cf83
cmp byte [esi + 0x6d5], 0
je 0x44cddc
push 0
call fcn.0044b920
test eax, eax
pop ecx
ja 0x44cf83
cmp byte [esi + 0x6c5], 0
jne 0x44cf83
push dword [ebp + 8]
push dword [ebp + 0xc]
push esi
call fcn.0044bba2
mov ebx, eax
add esp, 0xc
test ebx, ebx
mov dword [ebp - 8], ebx
je 0x44ce04
push ebx
push str._nWait__ld_
push 0xa
call fcn.00451d25
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov dword [ebp - 4], eax
or eax, 0xffffffff
cmp ebx, eax
je 0x44ce18
mov eax, ebx
push 0
push eax
push 0
lea ebx, [esi + 0x6d0]
push ebx
push 1
call dword [sym.imp.WS2_32.dll_WSAWaitForMultipleEvents]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
jne 0x44ce6a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push 0x47ca00
push str...RMLStack.cpp:2926
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
add esp, 0x1c
or eax, 0xffffffff
jmp 0x44cf85
call edi
mov edi, eax
xor eax, eax
cmp dword [ebp - 0xc], eax
jne 0x44cf13
lea eax, [ebp - 0x38]
push eax
push dword [ebx]
push dword [esi + 4]
call dword [sym.imp.WS2_32.dll_WSAEnumNetworkEvents]
cmp eax, 0xffffffff
jne 0x44ceae
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push 0x47c9d0
push str...RMLStack.cpp:2940
jmp 0x44ce53
test byte [ebp - 0x38], 1
je 0x44cebb
mov byte [esi + 0x6d4], 1
test byte [ebp - 0x38], 2
je 0x44cec8
mov byte [esi + 0x6d5], 1
cmp dword [ebp - 8], 0
jne 0x44cedf
push 0
push str._nWait__ld_
push 0xa
call fcn.00451d25
add esp, 0xc
test byte [ebp - 0x38], 2
mov eax, 0x474ff1
mov ecx, 0x47c9b4
jne 0x44cef1
mov ecx, eax
test byte [ebp - 0x38], 1
je 0x44cefc
mov eax, 0x47c9b0
sub edi, dword [ebp - 4]
push edi
push ecx
push eax
push str.returned___s_s__after__ld_ticks_n
push 0xa
call fcn.00451d25
add esp, 0x14
jmp 0x44cf7e
mov ecx, dword [ebp + 0xc]
cmp dword [ecx], 9
jne 0x44cf49
cmp dword [ebp - 8], eax
jne 0x44cf30
push eax
push str._nWait__ld_
push 0xa
call fcn.00451d25
add esp, 0xc
sub edi, dword [ebp - 4]
push edi
push str.throttle_off_after__ld_ticks_n
push 0xa
call fcn.00451d25
add esp, 0xc
and dword [ebp - 0xc], 0
jmp 0x44cf7e
cmp dword [ebp - 8], eax
jne 0x44cf6b
mov esi, edi
sub esi, dword [ebp - 4]
je 0x44cf67
push eax
push str._nWait__ld_
push 0xa
call fcn.00451d25
add esp, 0xc
xor eax, eax
cmp esi, eax
je 0x44cf7e
sub edi, dword [ebp - 4]
push edi
push str.timed_out_after__ld_ticks_n
push 0xa
call fcn.00451d25
add esp, 0xc
mov eax, dword [ebp - 0xc]
jmp 0x44cf85
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
Function at 0x44cff5
Capabilities:
Set socket configuration

Disassembly:
push esi
mov esi, dword [esp + 8]
cmp dword [esi + 0x20], 2
je 0x44d068
push ebx
mov ebx, dword [sym.imp.WS2_32.dll_htonl]
push edi
mov edi, dword [esi + 0x778]
push 0
call ebx
cmp dword [edi], eax
je 0x44d066
mov eax, dword [esi + 4]
push 8
push edi
push 0xd
push 0
push eax
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x44d05a
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.00451df8
push eax
push str.gh_setsockopt
push str...RMLStack.cpp:3058
push str._s:__s_failed:__s_n
push 0x1e
call fcn.00451d25
add esp, 0x18
push 0
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push 0
call ebx
mov ecx, dword [esi + 0x778]
mov dword [ecx], eax
pop edi
pop ebx
pop esi
ret

Function at 0x44d3c1
Capabilities:
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
cmp byte [esi + 0x15], bl
push edi
je 0x44d3fa
push ebx
push ebx
push ebx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [esi + 4]
call dword [sym.imp.WS2_32.dll_WSASend]
cmp eax, 0xffffffff
jne 0x44d4ff
or eax, 0xffffffff
jmp 0x44d501
cmp byte [esi + 0x6bc], bl
jne 0x44d409
push esi
call fcn.0044d111
pop ecx
cmp dword [esi + 0x6b8], ebx
mov dword [ebp - 4], ebx
jle 0x44d4ff
mov edi, dword [sym.imp.WS2_32.dll_WSASendTo]
mov dword [ebp + 8], ebx
mov eax, dword [esi + 0x6c0]
mov ecx, dword [ebp + 8]
add eax, ecx
cmp dword [eax], ebx
jne 0x44d4c3
cmp dword [eax + 0x14], ebx
je 0x44d4c3
mov eax, dword [eax + 0x14]
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push dword [esi + 4]
call fcn.00450805
cmp eax, 0xffffffff
pop ecx
pop ecx
jne 0x44d4c3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.00451df8
push eax
push str.ws2SetMulticastInterface
push str...RMLStack.cpp:3301
push str._s:__s_failed:__s_n
push 0x1e
call fcn.00451d25
add esp, 0x18
jmp 0x44d4c3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x44d3f2
push str.switching_to_unbuffered_sends_n
push 0x1e
call fcn.00451d25
mov eax, dword [esi + 4]
pop ecx
pop ecx
push 4
lea ecx, [ebp - 0xc]
push ecx
push 0x1001
push 0xffff
push eax
mov dword [ebp - 0xc], ebx
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
je 0x44d3f2
mov eax, dword [esi + 0x6c0]
mov ecx, dword [ebp + 8]
push ebx
push ebx
push 0x10
lea eax, [ecx + eax + 4]
push eax
push ebx
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [esi + 4]
call edi
cmp eax, 0xffffffff
je 0x44d47e
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
add dword [ebp + 8], 0x18
cmp eax, dword [esi + 0x6b8]
jl 0x44d421
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
Function at 0x44dcd5
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x493bd0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, dword [esi + 0x4c]
lea eax, [edi + 0x10]
mov edx, esi
call fcn.0044dc88
test al, al
je 0x44de98
cmp dword [0x49a550], 0
jne 0x44dd0c
push esi
call fcn.0044cff5
pop ecx
cmp byte [edi + 0x28], 0
jne 0x44dd37
push 0x10
lea eax, [ebp - 0x14]
push edi
push eax
call fcn.004555f0
push dword [ebp - 0x10]
push esi
call fcn.0044cf8a
add esp, 0x14
cmp eax, 0xffffffff
jne 0x44dd37
or eax, 0xffffffff
jmp 0x44de9a
xor ebx, ebx
inc ebx
cmp byte [edi + 0x28], bl
jne 0x44dda2
push str.Setting_UDP_Socket_to_accept_broadcasts_n
push 0x14
call fcn.00451d25
mov eax, dword [esi + 4]
pop ecx
pop ecx
push 4
lea ecx, [ebp - 0x1c]
push ecx
push 0x20
push 0xffff
push eax
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x44dda2
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
push ecx
call fcn.0044b267
push ecx
call fcn.00451df8
push eax
push str.gh_setsockopt
push str...RMLStack.cpp:4044
push str._s:__s_failed:__s_n
push 0x32
call fcn.00451d25
push esi
call fcn.0044d7f8
add esp, 0x20
jmp 0x44dd2f
push dword [esi + 0x44]
mov dword [esi + 0x654], ebx
mov dword [esi + 0x658], ebx
mov dword [esi + 0x65c], ebx
mov dword [esi + 0x660], ebx
call dword [sym.imp.WS2_32.dll_ntohl]
cmp eax, dword [esi + 0x644]
mov dword [esi + 0x664], eax
jbe 0x44de03
push eax
push esi
call fcn.0044c7c6
test al, al
pop ecx
pop ecx
jne 0x44de03
push 0x2747
call fcn.0044b267
mov dword [esp], str...RMLStack.cpp:4063
push str._s:_malloc_failed_n
push 0x32
call fcn.00451d25
add esp, 0xc
jmp 0x44dd2f
test byte [esi + 0x48], 0x10
mov eax, dword [esi + 0x614]
mov dword [esi + 0x620], ebx
mov dword [esi + 0x624], eax
mov dword [esi + 0x628], 0xb2f
mov byte [ebp - 0x18], 2
je 0x44de30
mov dword [esi + 0x20], ebx
mov byte [ebp - 0x18], 0x42
mov ecx, dword [edi + 0x20]
push 4
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [esi + 0x754]
push ecx
push dword [ebp - 0x18]
push eax
push ebx
push dword [esi + 0x658]
push esi
call fcn.0044c2d6
add esp, 0x20
cmp eax, 0xffffffff
jne 0x44de6f
push 0
push esi
call fcn.0044c03f
and dword [esi + 0x20], 0
pop ecx
pop ecx
jmp 0x44dd2f
push 4
push esi
call fcn.0044c03f
pop ecx
pop ecx
push dword [edi + 0x24]
call dword [sym.imp.WS2_32.dll_ntohl]
mov ecx, dword [esi + 0x778]
mov dword [ecx + 8], eax
and dword [esi + 0x6f4], 0
mov byte [esi + 0x6d6], bl
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.004533e4
leave
ret
Function at 0x44e291
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, eax
lea eax, [ebp - 0xc]
push edi
push eax
call fcn.0044b920
mov edi, dword [ebp - 0xc]
pop ecx
mov dword [ebp - 8], eax
mov byte [ebp - 1], 1
mov ebx, 0x597
cmp dword [ebp - 8], ebx
jae 0x44e2eb
cmp dword [ebp - 8], 0
jbe 0x44e464
cmp byte [esi + 0x748], 0
je 0x44e2d6
cmp byte [esi + 0x749], 0
je 0x44e2e8
mov eax, dword [esi + 0x654]
cmp eax, dword [esi + 0x658]
jne 0x44e464
mov ebx, dword [ebp - 8]
cmp dword [esi + 0x20], 0
jne 0x44e30d
cmp byte [esi + 0x748], 0
je 0x44e3b4
lea eax, [ebx + edi]
cmp eax, dword [esi + 0x64c]
jne 0x44e3b4
lea eax, [ebp - 1]
push eax
push edi
mov eax, esi
call fcn.0044d506
cmp eax, 0xffffffff
pop ecx
pop ecx
je 0x44e45f
cmp byte [ebp - 1], 0
je 0x44e464
cmp byte [esi + 0x694], 0
mov byte [esi + 0x6c4], 0
mov byte [esi + 0x6c5], 0
je 0x44e371
mov eax, edi
sub eax, dword [esi + 0x65c]
jns 0x44e371
push dword [esi + 0x69c]
inc dword [esi + 0x698]
push str.Timing_of__lu_abandoned_n
push 0xa
mov byte [esi + 0x694], 0
call fcn.00451d25
add esp, 0xc
cmp byte [esi + 0x678], 0
jne 0x44e3b4
cmp byte [esi + 0x694], 0
jne 0x44e3b4
cmp edi, dword [esi + 0x65c]
jne 0x44e3b4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
push str.Timing_of__lu_commenced_n
push 0xa
mov dword [esi + 0x6a0], eax
mov dword [esi + 0x69c], edi
mov byte [esi + 0x694], 1
call fcn.00451d25
add esp, 0xc
cmp byte [ebp - 1], 0
je 0x44e464
sub dword [ebp - 8], ebx
add edi, ebx
cmp byte [esi + 0x678], 0
jne 0x44e3f3
lea eax, [esi + 0x658]
add dword [eax], ebx
mov eax, dword [eax]
sub eax, dword [esi + 0x65c]
test eax, eax
jle 0x44e3e7
mov eax, esi
call fcn.0044d95d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x6f0], eax
mov eax, edi
sub eax, dword [esi + 0x660]
test eax, eax
jle 0x44e405
mov dword [esi + 0x660], edi
lea eax, [esi + 0x749]
cmp byte [eax], 0
mov byte [esi + 0x678], 0
mov byte [esi + 0x680], 0
jne 0x44e2b0
cmp byte [esi + 0x748], 0
je 0x44e2b0
mov ecx, dword [esi + 0x660]
cmp ecx, dword [esi + 0x64c]
jne 0x44e2b0
cmp dword [esi + 0x654], ecx
mov byte [eax], 1
jne 0x44e453
mov byte [esi + 0x74a], 1
mov eax, esi
call fcn.0044c1ab
jmp 0x44e2b0
or eax, 0xffffffff
jmp 0x44e466
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret