joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401359a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov r13, rdx
mov rsi, rcx
mov rbp, qword [rdx + 0x30]
mov eax, dword [rdx + 0x38]
mov dword [rsp + 0x44], eax
movabs rdi, 0x8000000000000000
cmp qword [rdx], rdi
jne 0x1401359db
mov r12, rdi
jmp 0x140135a6f
mov rbx, qword [r13 + 8]
mov r12, qword [r13 + 0x10]
mov r15d, 1
mov ecx, 1
test r12, r12
je 0x140135a16
js 0x140135e16
movzx eax, byte [0x140214210]
xor ecx, ecx
mov rdx, r12
call fcn.140157b20
mov rcx, rax
test rax, rax
je 0x140135e28
mov qword [rsp + 0x80], rcx
mov rdx, rbx
mov r8, r12
call fcn.1401af560
mov rbx, qword [r13 + 0x20]
mov r8, qword [r13 + 0x28]
test r8, r8
je 0x140135a5f
js 0x140135e16
movzx eax, byte [0x140214210]
xor ecx, ecx
mov r14, r8
mov rdx, r8
call fcn.140157b20
mov r15, rax
mov r8, r14
test rax, rax
je 0x140135e1b
mov rcx, r15
mov rdx, rbx
mov qword [rsp + 0x78], r8
call fcn.1401af560
mov qword [rsp + 0x50], rbp
mov r14, qword [r13 + 0x70]
mov eax, dword [r13 + 0x78]
mov dword [rsp + 0x40], eax
cmp qword [r13 + 0x40], rdi
jne 0x140135a8e
mov rbp, rdi
jmp 0x140135b3f
mov rbx, qword [r13 + 0x48]
mov r8, qword [r13 + 0x50]
mov eax, 1
test r8, r8
je 0x140135ac6
js 0x140135e16
movzx eax, byte [0x140214210]
xor ecx, ecx
mov rdx, r8
mov rbp, r8
call fcn.140157b20
mov r8, rbp
test rax, rax
je 0x140135e1b
mov qword [rsp + 0x70], rax
mov rcx, rax
mov rdx, rbx
mov qword [rsp + 0x30], r8
call fcn.1401af560
mov rbx, qword [r13 + 0x60]
mov r8, qword [r13 + 0x68]
test r8, r8
test eax, eax

Function at 0x140135e60
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov r15, rdx
mov rdx, r9
mov rdi, rcx
mov rbx, r8
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r11d, ebx
shr r11d, 0x10
mov r10d, ebx

Function at 0x140136140
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, r9
mov rbx, r8
mov r15, rdx
mov rdi, rcx
mov r11d, ebx
shr r11d, 0x10
mov r10d, ebx
shr r10d, 0x18
mov r9, r8
shr r9, 0x20
shr r8, 0x28
mov rcx, rbx
shr rcx, 0x30
xor byte [rax - 0x77], cl
fmul dword [rax - 0x3f]
call 0x113c970be
movabs r14, 0xcbf29ce484222325
xor r14, rdx
movabs rdx, 0x100000001b3
add byte [rcx], al
add byte [rax], al
imul r14, rdx
movzx ebp, bh
xor rbp, r14
imul rbp, rdx
movzx r11d, r11b
xor r11, rbp
imul r11, rdx
xor r11, r10
imul r11, rdx
movzx r9d, r9b
xor r9, r11
imul r9, rdx
movzx r8d, r8b
xor r8, r9
imul r8, rdx
movzx r12d, cl
xor r12, r8
imul r12, rdx
xor r12, rax
imul r12, rdx
cmp qword [r15 + 0x10], 0
je 0x1401362ed
mov r14, qword [r15]
mov rax, qword [r15 + 8]
mov rcx, r12
shr rcx, 0x39
movd xmm0, ecx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r8d, r8d
mov rcx, r15
call fcn.1401b3330
jmp 0x1401361f0
Function at 0x140136a70
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rbx, rdx
mov rdx, r8
mov rsi, rcx
mov r11d, ebx
shr r11d, 0x10
mov r10d, ebx
shr r10d, 0x18
mov r9, rbx
shr r9, 0x20
mov r8, rbx
shr r8, 0x28
mov r14, rbx
shr r14, 0x30
mov rcx, rbx
shr rcx, 0x38
movzx eax, bl
movabs rdi, 0xcbf29ce484222325
xor rdi, rax
movabs rax, 0x100000001b3
imul rdi, rax
movzx ebp, bh
xor rbp, rdi
imul rbp, rax
movzx r11d, r11b
xor r11, rbp
imul r11, rax
xor r11, r10
imul r11, rax
movzx r9d, r9b
xor r9, r11
imul r9, rax
enter 0xf45, 0xffffffffffffffb6
ror byte [rbp + 0x31], 0xc8
imul r8, rax
rol byte [rbp + 0xf], 0xb6
fimul word [rbp + 0x31]
ret
imul r11, rax
xor r11, rcx
imul r11, rax
mov edi, edx
shr edi, 0x10
mov r10d, edx
shr r10d, 0x18
mov r9, rdx
shr r9, 0x20
mov r8, rdx
shr r8, 0x28
mov r15, rdx
shr r15, 0x30
mov rcx, rdx
shr rcx, 0x38
movzx r14d, dl
xor r14, r11
imul r14, rax
mov r12, rdx
movzx ebp, dh
xor rbp, r14
imul rbp, rax
movzx r11d, dil
xor r11, rbp
imul r11, rax
xor r11, r10
imul r11, rax
movzx r9d, r9b
xor r9, r11
imul r9, rax
movzx r8d, r8b
xor r8, r9
imul r8, rax
movzx edi, r15b
xor rdi, r8
imul rdi, rax
xor rdi, rcx
imul rdi, rax
cmp qword [rsi + 0x10], 0
je 0x140136c64
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
shr rdx, 0x39
movd xmm0, edx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
xor r9d, r9d
pcmpeqd xmm1, xmm1
xor r10d, r10d
mov rcx, rsi
call fcn.1401b4bd0
jmp 0x140136b9a
Function at 0x140136cf0
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rbx, rdx
mov rsi, rcx
mov r11d, ebx
shr r11d, 0x10
mov r10d, ebx
shr r10d, 0x18
mov r9, rdx
shr r9, 0x20
mov r8, rdx
shr r8, 0x28
mov rcx, rdx
shr rcx, 0x30
mov rax, rdx
shr rax, 0x38
movzx edx, bl
movabs rdi, 0xcbf29ce484222325
xor rdi, rdx
movabs rdx, 0x100000001b3
imul rdi, rdx
movzx ebp, bh
xor rbp, rdi
imul rbp, rdx
movzx r11d, r11b
xor r11, rbp
imul r11, rdx
xor r11, r10
imul r11, rdx
movzx r9d, r9b
xor r9, r11
imul r9, rdx
movzx r8d, r8b
xor r8, r9
imul r8, rdx
movzx edi, cl
xor rdi, r8
imul rdi, rdx
xor rdi, rax
imul rdi, rdx
cmp qword [rsi + 0x10], 0
je 0x140136e76
mov rax, qword [rsi]
mov rcx, qword [rsi + 8]
mov rdx, rdi
shr rdx, 0x39
movd xmm0, edx
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
lea r9, [rax - 0x10]
xor r10d, r10d
pcmpeqd xmm1, xmm1
xor r11d, r11d
and rdi, rcx
movdqu xmm2, xmmword [rax + rdi]
movdqa xmm3, xmm2
pcmpeqb xmm3, xmm0
pmovmskb r15d, xmm3
nop dword [rax]
test r15w, r15w
je 0x140136e10
tzcnt r14d, r15d
lea ebp, [r15 - 1]
and ebp, r15d
add r14, rdi
and r14, rcx
mov r15, r14
shl r15, 4
mov r12, r9
sub r12, r15
mov r15d, ebp
cmp qword [r12], rbx
jne 0x140136de0
jmp 0x140136e52
cmp r11, 1
mov r11d, 1
je 0x140136e36
pmovmskb r8d, xmm2
xor r11d, r11d
test r8d, r8d
setne r11b
tzcnt r8d, r8d
add r8, rdi
and r8, rcx
pcmpeqb xmm2, xmm1
pmovmskb ebp, xmm2
test ebp, ebp
jne 0x140136e83
add rdi, r10
add rdi, 0x10
add r10, 0x10
jmp 0x140136dc8
neg r14
shl r14, 4
mov byte [rax + r14 - 6], 0
mov word [rax + r14 - 8], 0
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov rcx, rsi
call fcn.1401b4570
jmp 0x140136d9a
movzx r9d, byte [rax + r8]
test r9b, r9b
js 0x140136ea0
movdqa xmm0, xmmword [rax]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
movzx r9d, byte [rax + r8]
and r9b, 1
movzx r9d, r9b
sub qword [rsi + 0x10], r9
lea r9, [r8 - 0x10]
and rcx, r9
mov byte [rax + r8], dl
mov byte [rcx + rax + 0x10], dl
inc qword [rsi + 0x18]
mov r14, r8
neg r14
shl r8, 4
neg r8
mov qword [rax + r8 - 0x10], rbx
jmp 0x140136e55
Function at 0x140141110
Capabilities:
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push rsi
push rdi
sub rsp, 0xf8
movdqa xmmword [rsp + 0xe0], xmm7
movdqa xmmword [rsp + 0xd0], xmm6
mov eax, dword [0x140214214]
mov rcx, qword gs:[0x58]

Function at 0x140141550
Capabilities:
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push rsi
push rdi
sub rsp, 0x118
movaps xmmword [rsp + 0x100], xmm15
movaps xmmword [rsp + 0xf0], xmm14
movaps xmmword [rsp + 0xe0], xmm13
movaps xmmword [rsp + 0xd0], xmm12
movaps xmmword [rsp + 0xc0], xmm11
movaps xmmword [rsp + 0xb0], xmm10
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0x90], xmm8
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x70], xmm6
mov rsi, rdx
mov rdi, rcx
Function at 0x140001010
Capabilities:
Parse pe header

Disassembly:
sub rsp, 0x28
mov rax, qword [0x1400ca280]
xor ecx, ecx
mov dword [rax], 1
mov rax, qword [0x1400ca290]
mov dword [rax], 1
mov rax, qword [0x1400ca2a0]
mov dword [rax], 1
mov rax, qword [0x1400ca220]
cmp word [rax], 0x5a4d
jne 0x14000105a
movsxd rdx, dword [rax + 0x3c]
add rax, rdx
cmp dword [rax], 0x4550
je 0x1400010c0
mov rax, qword [0x1400ca270]
mov dword [0x1400dd00c], ecx
mov eax, dword [rax]
test eax, eax
jne 0x1400010b0
mov ecx, 1
call sym.__set_app_type
call sym.__p__fmode
mov rdx, qword [0x1400ca350]
mov edx, dword [rdx]
mov dword [rax], edx
call sym.__p__commode
mov rdx, qword [0x1400ca330]
mov edx, dword [rdx]
mov dword [rax], edx
call sym._setargv
mov rax, qword [0x1400ca1d0]
cmp dword [rax], 1
je 0x1400010f1
xor eax, eax
add rsp, 0x28
ret
mov ecx, 2
call sym.__set_app_type
jmp 0x140001077
movzx edx, word [rax + 0x18]
cmp dx, 0x10b
je 0x140001104
cmp dx, 0x20b
jne 0x14000105a
cmp dword [rax + 0x84], 0xe
jbe 0x14000105a
mov edx, dword [rax + 0xf8]
xor ecx, ecx
test edx, edx
setne cl
jmp 0x14000105a
lea rcx, [sym._matherr]
call sym.__mingw_setusermatherr
xor eax, eax
add rsp, 0x28
ret
cmp dword [rax + 0x74], 0xe
jbe 0x14000105a
mov r8d, dword [rax + 0xe8]
xor ecx, ecx
test r8d, r8d
setne cl
jmp 0x14000105a
Function at 0x14002be60
Capabilities:
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
xorps xmm0, xmm0
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp - 0x20], xmm0
movaps xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
call sub.KERNEL32.dll_GetSystemInfo
mov ecx, dword [rbp - 0x10]
xor eax, eax
test rcx, rcx
sete al
lea rdx, str.The_number_of_hardware_threads_is_not_known_for_the_target_platform
cmovne rdx, rcx
add rsp, 0x50
pop rbp
ret

Function at 0x14002d170
Capabilities:
Get common file path

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x468
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x3c8], rcx
mov qword [rbp + 0x3d0], 0
mov qword [rbp + 0x3d8], 2
mov qword [rbp + 0x3e0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x3c0], rax
xor esi, esi
xor edi, edi
xor ebx, ebx
cmp r8, 0x201
jae 0x14002d200
jmp 0x14002d1ef
jae 0x14002d2bb
cmp r8, 0x201
jae 0x14002d200
mov r14d, 0x200
lea r15, [rbp - 0x60]
mov r12, r8
jmp 0x14002d257
sub r8, rbx
sub rdi, rbx
cmp r8, rdi
jbe 0x14002d22f
lea rcx, [rbp + 0x3d0]
mov rdx, rbx
call sym.alloc::raw_vec::RawVec_T_A_::reserve::do_reserve_and_handle::h498cd2a0878ddf3d
mov rsi, qword [rbp + 0x3d0]
mov rax, qword [rbp + 0x3d8]
mov qword [rbp + 0x3c0], rax
mov eax, 0xffffffff
cmp rsi, rax
mov ebx, 0xffffffff
cmovb rbx, rsi
mov qword [rbp + 0x3e0], rbx
mov rdi, rsi
mov r14, rbx
mov r15, qword [rbp + 0x3c0]
mov r12, rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov ecx, r12d
mov rdx, r15
call sub.KERNEL32.dll_GetCurrentDirectoryW
mov r13d, eax
test eax, eax
jne 0x14002d27d
call sub.KERNEL32.dll_GetLastError
test eax, eax
jne 0x14002d327
mov r8d, r13d
cmp r12, r8
jne 0x14002d1e0
call sub.KERNEL32.dll_GetLastError
cmp eax, 0x7a
jne 0x14002d35a
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jb 0x14002d1ef
jmp 0x14002d200
cmp r14, r8
jb 0x14002d374
lea rcx, [rbp + 0x3a0]
mov rdx, r15
call dbg.from_wide
movups xmm0, xmmword [rbp + 0x3a0]
movups xmm1, xmmword [rbp + 0x3b0]
mov rsi, qword [rbp + 0x3c8]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rdx, qword [rbp + 0x3d0]
test rdx, rdx
je 0x14002d310
mov rcx, qword [rbp + 0x3d8]
add rdx, rdx
mov r8d, 2
call sym.__rust_dealloc
mov rax, rsi
add rsp, 0x468
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rsi, qword [rbp + 0x3c8]
mov qword [rsi + 8], rax
movabs rax, 0x8000000000000000
mov qword [rsi], rax
mov rdx, qword [rbp + 0x3d0]
test rdx, rdx
jne 0x14002d2fb
jmp 0x14002d310
lea rcx, str.internal_error:_entered_unreachable_code
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call dbg.panic
jmp 0x14002d389
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r14
mov r8, rax
call dbg.slice_end_index_len_fail
ud2
Function at 0x14002d3c0
Capabilities:
Query environment variable

Disassembly:
push rbp
push rsi
sub rsp, 0x68
lea rbp, [rsp + 0x60]
call sub.KERNEL32.dll_GetEnvironmentStringsW
test rax, rax
je 0x14002d3df
mov rdx, rax
add rsp, 0x68
pop rsi
pop rbp
ret
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp], rax
mov rax, rbp
mov qword [rbp - 0x10], rax
lea rax, [sym.__std::io::error::Error_as_core::fmt::Display_::fmt::hab0355a4f2b8b8d2]
mov qword [rbp - 8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 1
mov qword [rbp - 0x20], 0
lea rax, [rbp - 0x10]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
lea rdx, str.library_std_src_syspalwindowsos.rs
lea rcx, [rbp - 0x40]
call dbg.panic_fmt
ud2
Function at 0x14002f320
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
movdqa xmmword [rbp - 0x10], xmm7
movdqa xmmword [rbp - 0x20], xmm6
mov rsi, r8
mov rdi, rcx
test r8, r8
je 0x14002f3ac
js 0x14002f4f6
mov r15, rdx
mov rax, qword [0x1400ca2e8]
movzx eax, byte [rax]
mov ebx, 1
mov edx, 1
mov rcx, rsi
call sym.__rust_alloc
test rax, rax
je 0x14002f4f8
mov r14, rax
mov rbx, rax
mov rcx, r14
mov rdx, r15
mov r8, rsi
call sym.memcpy
mov rdx, r14
cmp rsi, 8
jb 0x14002f4ac
movabs rax, 0x7fffffffffffffe0
cmp rsi, 0x20
jae 0x14002f3b6
xor ecx, ecx
jmp 0x14002f446
mov ebx, 1
jmp 0x14002f4cf
mov rcx, rsi
and rcx, rax
xor edx, edx
movdqa xmm0, xmmword [0x1400a5560]
movdqa xmm1, xmmword [0x1400a5570]
movdqa xmm2, xmmword [0x1400a5580]
nop word cs:[rax + rax]
movdqu xmm3, xmmword [rbx + rdx]
movdqu xmm4, xmmword [rbx + rdx + 0x10]
movdqa xmm5, xmm3
paddb xmm5, xmm0
movdqa xmm6, xmm4
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
pand xmm7, xmm2
movdqa xmm5, xmm6
pminub xmm5, xmm1
pcmpeqb xmm5, xmm6
pand xmm5, xmm2
pxor xmm7, xmm3
pxor xmm5, xmm4
movdqu xmmword [rbx + rdx], xmm7
movdqu xmmword [rbx + rdx + 0x10], xmm5
add rdx, 0x20
cmp rcx, rdx
jne 0x14002f3e0
cmp rcx, rsi
je 0x14002f4cf
test sil, 0x18
je 0x14002f4a6
add rax, 0x18
and rax, rsi
lea rdx, [r14 + rax]
movdqa xmm0, xmmword [0x1400a5590]
movdqa xmm1, xmmword [0x1400a55a0]
movdqa xmm2, xmmword [0x1400a55b0]
nop dword [rax]
movq xmm3, qword [rbx + rcx]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
pxor xmm5, xmm3
movq qword [rbx + rcx], xmm5
add rcx, 8
cmp rax, rcx
jne 0x14002f470
cmp rax, rsi
jne 0x14002f4ac
jmp 0x14002f4cf
add rcx, r14
mov rdx, rcx
add r14, rsi
nop
movzx eax, byte [rdx]
lea ecx, [rax - 0x61]
cmp cl, 0x1a
setb cl
shl cl, 5
xor cl, al
mov byte [rdx], cl
lea rax, [rdx + 1]
mov rdx, rax
cmp rax, r14
jne 0x14002f4b0
mov qword [rdi], rsi
mov qword [rdi + 8], rbx
mov qword [rdi + 0x10], rsi
mov byte [rdi + 0x18], 0
mov rax, rdi
movaps xmm6, xmmword [rbp - 0x20]
movaps xmm7, xmmword [rbp - 0x10]
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
xor ebx, ebx
mov rcx, rbx
mov rdx, rsi
call dbg.handle_error
int3

Function at 0x140030b50
Capabilities:
Create directory

Disassembly:
push rbp
mov rbp, rsp
cmp byte [rcx], 0
je 0x140030b65
mov rcx, rdx
mov rdx, r8
Function at 0x140039fb0
Capabilities:
Set socket configuration

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor r9d, r9d
cmp r8d, 0x3b9aca00
je 0x14003a017
mov r9d, 0x3e8
mov rax, rdx
mul r9
mov r9d, 0xffffffff
jo 0x14003a017
mov edx, r8d
imul rdx, rdx, 0x431bde83
shr rdx, 0x32
add rax, rdx
jb 0x14003a017
imul edx, edx, 0xf4240
xor r10d, r10d
sub r8d, edx
setne r10b
add rax, r10
jb 0x14003a017
mov r9d, 0xffffffff
cmp rax, r9
cmovb r9, rax
test r9, r9
je 0x14003a057
mov dword [rbp - 4], r9d
mov dword [rsp + 0x20], 4
lea r9, [rbp - 4]
mov edx, 0xffff
mov r8d, 0x1006
call sub.WS2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x14003a044
xor eax, eax
add rsp, 0x30
pop rbp
ret
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
add rsp, 0x30
pop rbp
ret
lea rax, str.cannot_set_a_0_duration_timeout
add rsp, 0x30
pop rbp
ret

Function at 0x14003a070
Capabilities:
Set socket configuration

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor r9d, r9d
cmp r8d, 0x3b9aca00
je 0x14003a0d7
mov r9d, 0x3e8
mov rax, rdx
mul r9
mov r9d, 0xffffffff
jo 0x14003a0d7
mov edx, r8d
imul rdx, rdx, 0x431bde83
shr rdx, 0x32
add rax, rdx
jb 0x14003a0d7
imul edx, edx, 0xf4240
xor r10d, r10d
sub r8d, edx
setne r10b
add rax, r10
jb 0x14003a0d7
mov r9d, 0xffffffff
cmp rax, r9
cmovb r9, rax
test r9, r9
je 0x14003a117
mov dword [rbp - 4], r9d
mov dword [rsp + 0x20], 4
lea r9, [rbp - 4]
mov edx, 0xffff
mov r8d, 0x1005
call sub.WS2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x14003a104
xor eax, eax
add rsp, 0x30
pop rbp
ret
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
add rsp, 0x30
pop rbp
ret
lea rax, str.cannot_set_a_0_duration_timeout
add rsp, 0x30
pop rbp
ret

Function at 0x14003a250
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rcx, qword [rcx]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
mov r9d, 2
call sub.WS2_32.dll_recv
cmp eax, 0xffffffff
je 0x14003a284
movsxd rdx, eax
xor ecx, ecx
jmp 0x14003a2a7
call sub.WS2_32.dll_WSAGetLastError
xor edx, edx
mov ecx, 0
cmp eax, 0x274a
je 0x14003a2a7
shl rax, 0x20
or rax, 2
mov ecx, 1
mov rdx, rax
mov rax, rcx
add rsp, 0x20
pop rbp
ret

Function at 0x14003a2b0
Capabilities:
Set socket configuration

Disassembly:
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor esi, esi
xor eax, eax
cmp r8d, 0x3b9aca00
setne al
cmove edx, esi
mov word [rbp + 4], ax
mov word [rbp + 6], dx
mov dword [rsp + 0x20], 4
lea r9, [rbp + 4]
mov edx, 0xffff
mov r8d, pe_nt_image_headers64
call sub.WS2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x14003a307
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret
Function at 0x14003a3a0
Capabilities:
Set socket configuration

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
movzx eax, dl
mov dword [rbp - 4], eax
mov dword [rsp + 0x20], 4
lea r9, [rbp - 4]
mov edx, 6
mov r8d, 1
call sub.WS2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x14003a3dc
xor eax, eax
add rsp, 0x30
pop rbp
ret
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
add rsp, 0x30
pop rbp
ret

Function at 0x14003a460
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rsi, rdx
mov rcx, qword [rcx]
mov rax, qword [rdx + 8]
mov rdi, qword [rdx + 0x10]
sub rax, rdi
cmp rax, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rax
mov rdx, qword [rdx]
add rdx, rdi
xor r9d, r9d
call sub.WS2_32.dll_recv
cmp eax, 0xffffffff
je 0x14003a4bc
cdqe
add rdi, rax
mov qword [rsi + 0x10], rdi
mov rax, qword [rsi + 0x18]
cmp rax, rdi
cmova rdi, rax
mov qword [rsi + 0x18], rdi
xor eax, eax
jmp 0x14003a4d4
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x274a
jne 0x14003a4cc
xor eax, eax
jmp 0x14003a4d4
shl rax, 0x20
or rax, 2
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret

Function at 0x14003a4e0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov rcx, qword [rcx]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp - 4], 0
mov dword [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 4]
call sub.WS2_32.dll_WSARecv
test eax, eax
je 0x14003a535
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x274a
jne 0x14003a540
xor edx, edx
jmp 0x14003a538
mov edx, dword [rbp - 4]
xor eax, eax
add rsp, 0x40
pop rbp
ret
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x40
pop rbp
ret

Function at 0x14003a560
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rcx, qword [rcx]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp + 4], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
lea r9, [rbp + 4]
call sub.WS2_32.dll_WSASend
mov esi, eax
cmp esi, 0xffffffff
jne 0x14003a5ae
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
xor ecx, ecx
cmp esi, 0xffffffff
sete cl
mov edx, dword [rbp + 4]
cmove rdx, rax
mov rax, rcx
add rsp, 0x48
pop rsi
pop rbp
ret

Function at 0x14003a5d0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rax, qword [rcx]
mov rcx, qword [rax]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
xor r9d, r9d
call sub.WS2_32.dll_recv
cmp eax, 0xffffffff
je 0x14003a604
movsxd rdx, eax
xor ecx, ecx
jmp 0x14003a627
call sub.WS2_32.dll_WSAGetLastError
xor edx, edx
mov ecx, 0
cmp eax, 0x274a
je 0x14003a627
shl rax, 0x20
or rax, 2
mov ecx, 1
mov rdx, rax
mov rax, rcx
add rsp, 0x20
pop rbp
ret
Function at 0x14003a630
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rsi, rdx
mov rax, qword [rcx]
mov rcx, qword [rax]
mov rax, qword [rdx + 8]
mov rdi, qword [rdx + 0x10]
sub rax, rdi
cmp rax, 0x7fffffff
mov r8d, 0x7fffffff
cmovb r8, rax
mov rdx, qword [rdx]
add rdx, rdi
xor r9d, r9d
call sub.WS2_32.dll_recv
cmp eax, 0xffffffff
je 0x14003a68f
cdqe
add rdi, rax
mov qword [rsi + 0x10], rdi
mov rax, qword [rsi + 0x18]
cmp rax, rdi
cmova rdi, rax
mov qword [rsi + 0x18], rdi
xor eax, eax
jmp 0x14003a6a7
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x274a
jne 0x14003a69f
xor eax, eax
jmp 0x14003a6a7
shl rax, 0x20
or rax, 2
add rsp, 0x20
pop rdi
pop rsi
pop rbp
ret

Function at 0x14003a6b0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov rax, qword [rcx]
mov rcx, qword [rax]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp - 4], 0
mov dword [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 4]
call sub.WS2_32.dll_WSARecv
test eax, eax
je 0x14003a708
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x274a
jne 0x14003a713
xor edx, edx
jmp 0x14003a70b
mov edx, dword [rbp - 4]
xor eax, eax
add rsp, 0x40
pop rbp
ret
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x40
pop rbp
ret

Function at 0x14003a730
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rax, qword [rcx]
mov rcx, qword [rax]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
xor r9d, r9d
call sub.WS2_32.dll_send
cmp eax, 0xffffffff
je 0x14003a768
movsxd rdx, eax
xor eax, eax
add rsp, 0x20
pop rbp
ret
call sub.WS2_32.dll_WSAGetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x20
pop rbp
ret

Function at 0x14003a790
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
push rsi
sub rsp, 0x48
lea rbp, [rsp + 0x40]
mov rax, qword [rcx]
mov rcx, qword [rax]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp + 4], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
lea r9, [rbp + 4]
call sub.WS2_32.dll_WSASend
mov esi, eax
cmp esi, 0xffffffff
jne 0x14003a7e1
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
xor ecx, ecx
cmp esi, 0xffffffff
sete cl
mov edx, dword [rbp + 4]
cmove rdx, rax
mov rax, rcx
add rsp, 0x48
pop rsi
pop rbp
ret

Function at 0x14003a9d0
Capabilities:
Set socket configuration

Disassembly:
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
mov dword [rbp + 4], edx
mov dword [rsp + 0x20], 4
xor esi, esi
lea r9, [rbp + 4]
xor edx, edx
mov r8d, 4
call sub.WS2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x14003aa10
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret