joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10030140
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015a160
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebx, ecx
push str.CPortListMng::ReadAvailable
lea eax, [esp + 0x10]
call fcn.10018050
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0
call fcn.1002ee70
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x30], 0xffffffff
call fcn.10018140
test esi, esi
jne 0x100301b8
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 8
cmp byte [esi + 0xa0], 0
jne 0x100301ce
mov edx, dword [esi]
mov eax, dword [edx + 0x34]
mov ecx, esi
call eax
mov esi, eax
jmp 0x100301e4
mov ecx, dword [esi + 0xb8]
mov edx, dword [ecx + 0x2910]
mov eax, dword [esp + 0x3c]
mov eax, dword [edx + eax*4]
mov esi, dword [eax + 8]
push str.CPortListMng::ReadAvailable
lea eax, [esp + 0x10]
call fcn.10018050
push esi
push ebx
push str.__portId_:__d__Available_:__d_
lea ecx, [esp + 0x18]
push 0x2df
push ecx
mov ecx, ebx
mov dword [esp + 0x44], 1
call fcn.1001cf40
add esp, 0x14
lea ecx, [esp + 0xc]
call fcn.10018140
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 8

Function at 0x10030240
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015a160
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebx, ecx
push str.CPortListMng::Write
lea eax, [esp + 0x10]
call fcn.10018050
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0
call fcn.1002ee70
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x30], 0xffffffff
call fcn.10018140
test esi, esi
jne 0x100302b8
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 8
mov ecx, dword [esp + 0x3c]
push edi
push ecx
call fcn.10031270
mov esi, eax
cmp edi, esi
je 0x10030304
push str.CPortListMng::Write
lea eax, [esp + 0x10]
call fcn.10018050
push edi
push esi
push ebx
push str.__portId_:__d____d__d__
lea edx, [esp + 0x1c]
push 0x311
push edx
mov ecx, ebx
mov dword [esp + 0x48], 1
call fcn.1001d480
add esp, 0x18
lea ecx, [esp + 0xc]
call fcn.10018140
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 8
Function at 0x10030320
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015a160
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
push str.CPortListMng::WriteLock
lea eax, [esp + 0x10]
call fcn.10018050
mov eax, dword [esp + 0x38]
push eax
lea ecx, [esp + 0x10]
mov ebx, edi
mov dword [esp + 0x34], 0
call fcn.1002ee70
lea ecx, [esp + 0xc]
mov esi, eax
mov dword [esp + 0x30], 0xffffffff
call fcn.10018140
test esi, esi
je 0x100303c8
mov bl, byte [esp + 0x3c]
call fcn.10031930
push str.CPortListMng::WriteLock
lea eax, [esp + 0x10]
call fcn.10018050
push edi
movzx ecx, bl
push ecx
push str.__isWriteLock_:__d__portId_:__d_
lea edx, [esp + 0x18]
push 0x332
push edx
mov ecx, edi
mov dword [esp + 0x44], 1
call fcn.1001cf40
add esp, 0x14
lea ecx, [esp + 0xc]
call fcn.10018140
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x28
ret 8
Function at 0x10031460
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x1015a396
mov eax, dword fs:[0]
push eax
mov eax, 0x1030
call fcn.10059010
mov eax, dword [0x101b0cd0]
xor eax, esp
mov dword [esp + 0x102c], eax
push ebp
push esi
push edi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x1040]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1050]
mov esi, edx
push str.CPortInterface::Read
lea eax, [esp + 0x24]
mov edi, ecx
mov dword [esp + 0x20], esi
call fcn.10018050
push ebx
push ebp
push str._reqReadLen_:__d__timeout:__d_
lea eax, [esp + 0x2c]
mov dword [esp + 0x1054], 0
mov ecx, dword [edi + 0x44]
push 0x10c
push eax
call fcn.1001cf40
add esp, 0x14
lea ecx, [esp + 0x20]
mov dword [esp + 0x1048], 0xffffffff
call fcn.10018140
cmp byte [edi + 0x90], 0
je 0x100315e6
test ebp, ebp
je 0x100315e6
cmp byte [edi + 0xa0], 0
jne 0x100315d4
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x14], 0
call esi
mov dword [esp + 0x18], eax
call esi
sub eax, dword [esp + 0x18]
cmp eax, ebx
jae 0x10031622
push 0x1000
lea ecx, [esp + 0x40]
push 0
push ecx
call fcn.10057070
mov edx, dword [edi]
mov edx, dword [edx + 0x30]
add esp, 0xc
push ebp
lea eax, [esp + 0x40]
push eax
mov ecx, edi
call edx
mov esi, eax
test esi, esi
jbe 0x10031584
mov ecx, dword [edi + 0xb8]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
push esi
lea edx, [esp + 0x40]
push edx
call eax
mov eax, dword [esp + 0x14]
add eax, esi
mov dword [esp + 0x14], eax
cmp eax, ebp
jae 0x100315ba
cmp ebx, 0x3e8
jle 0x10031590
push 0x64
jmp 0x100315a2
mov eax, 0x66666667
imul ebx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x18]
cmp eax, ebx
jb 0x1003153a
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10031622
mov edx, dword [esp + 0x1054]
push edx
push ebx
push eax
mov eax, dword [esp + 0x28]
push eax
call fcn.10031730
jmp 0x10031624
mov ecx, dword [esp + 0x1054]
push ecx
push ebx
push ebp
push esi
call fcn.10031730
jmp 0x10031624
push str.CPortInterface::Read
lea eax, [esp + 0x24]
call fcn.10018050
push str._fail_to_invalid_parameters
lea edx, [esp + 0x24]
mov dword [esp + 0x104c], 1
mov ecx, dword [edi + 0x44]
push 0x10f
push edx
call fcn.1001d480
add esp, 0xc
lea ecx, [esp + 0x20]
call fcn.10018140
xor eax, eax
mov ecx, dword [esp + 0x1040]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x102c]
xor ecx, esp
call fcn.1005392f
add esp, 0x103c
ret 8
Function at 0x10031730
Capabilities:
Check for time delay via gettickcount
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x1015a360
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push ebp
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x4c]
mov eax, dword [edi + 0xb8]
mov ecx, dword [eax + 0x2910]
mov esi, dword [esp + 0x44]
mov eax, dword [ecx + ebp*4]
mov ebx, esi
cmp dword [eax + 8], esi
jae 0x1003177c
push 0x1e
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x4c], eax
test esi, esi
jle 0x10031837
mov edx, dword [edi + 0xb8]
mov eax, dword [edx + 0x2910]
mov eax, dword [eax + ebp*4]
cmp dword [eax + 8], 0
jbe 0x100317f5
test ebx, ebx
jle 0x100317f5
mov esi, dword [edi + 0xb4]
push 0x2710
push esi
mov dword [esp + 0x18], esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [esp + 0x40]
mov dword [esp + 0x38], 0
mov ecx, dword [edi + 0xb8]
mov edx, dword [ecx + 0x2910]
mov ecx, dword [edx + ebp*4]
push ebx
call fcn.1001eea0
push esi
sub ebx, eax
mov dword [esp + 0x3c], 0xffffffff
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov esi, dword [esp + 0x48]
jmp 0x1003181d
mov esi, dword [esp + 0x48]
cmp esi, 0x3e8
jle 0x10031805
push 0x64
jmp 0x10031817
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x4c]
cmp eax, esi
jae 0x10031833
test ebx, ebx
jg 0x1003178e
mov esi, dword [esp + 0x44]
mov ebp, esi
sub ebp, ebx
cmp ebp, esi
je 0x1003187a
push str.CPortInterface::ReadQueue
lea eax, [esp + 0x18]
call fcn.10018050
push esi
push ebp
push str._fail___d__d_
lea ecx, [esp + 0x20]
push 0x162
mov dword [esp + 0x48], 1
push ecx
mov ecx, dword [edi + 0x44]
call fcn.1001d480
add esp, 0x14
lea ecx, [esp + 0x14]
call fcn.10018140
mov eax, ebp
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret 0x10

Function at 0x10031c40
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x10159ff0
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov dword [esi], vtable.CPortCom.0
push str.CPortCom::CPortCom
lea eax, [esp + 0x10]
mov dword [esp + 0x34], 0
call fcn.10018050
push 0x1019bc42
lea eax, [esp + 0x10]
mov byte [esp + 0x34], 1
mov ecx, dword [esi + 0x44]
push 0x32
push eax
call fcn.1001cc00
add esp, 0xc
lea ecx, [esp + 0xc]
call fcn.10018140
mov ecx, esi
mov dword [esp + 0x30], 0xffffffff
call fcn.10030ea0
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret
Function at 0x10033170
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
xor bl, bl
call edi
mov ebp, eax
call edi
sub eax, ebp
cmp eax, 0x1388
jae 0x100331ae
lea ecx, [ecx]
call fcn.10033010
mov bl, al
test bl, bl
jne 0x100331ae
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call edi
sub eax, ebp
cmp eax, 0x1388
jb 0x10033190
pop edi
pop esi
pop ebp
mov al, bl
pop ebx
ret

Function at 0x10033ef0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015b528
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
xor ebx, ebx
cmp dword [esi + 0xbc], ebx
je 0x10033f70
push str.CPortUsb::OpenPortUSB
lea eax, [esp + 0xc]
call fcn.10018050
push str.port_handle_is_not_NULL._close_and_reopen.
lea eax, [esp + 0xc]
mov dword [esp + 0x30], ebx
mov ecx, dword [esi + 0x44]
push 0x13f
push eax
call fcn.1001cc00
add esp, 0xc
lea ecx, [esp + 8]
call fcn.10018140
mov eax, dword [esi + 0xbc]
cmp eax, ebx
je 0x10033f70
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0xbc], ebx
mov byte [esi + 0xc0], bl
mov eax, dword [esi + 0x54]
push ebx
cmp byte [esi + 0xa1], bl
je 0x10033f88
push 0x40000000
push 3
push ebx
push 3
jmp 0x10033f91
push 0x80
push 3
push ebx
push ebx
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [esi + 0xbc], eax
cmp dword [esi + 0xbc], 0xffffffff
push str.CPortUsb::OpenPortUSB
lea eax, [esp + 0xc]
jne 0x10034005
call fcn.10018050
mov dword [esp + 0x2c], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._port_is_INVALID_HANDLE_VALUE__GetLastError__d_
lea ecx, [esp + 0x10]
push 0x15a
push ecx
mov ecx, dword [esi + 0x44]
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 8]
call fcn.10018140
mov dword [esi + 0xbc], ebx
xor al, al
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop ebx
add esp, 0x28
ret
call fcn.10018050
push str._success
lea edx, [esp + 0xc]
mov dword [esp + 0x30], 2
mov ecx, dword [esi + 0x44]
push 0x15f
push edx
call fcn.1001cc00
add esp, 0xc
lea ecx, [esp + 8]
call fcn.10018140
mov al, 1
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop ebx
add esp, 0x28
ret
Function at 0x100341b0
Capabilities:
Initialize winsock library

Disassembly:
push 0xffffffffffffffff
push 0x1015aef7
mov eax, dword fs:[0]
push eax
sub esp, 0x1b4
mov eax, dword [0x101b0cd0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x1bc]
mov dword fs:[0], eax
mov ecx, esi
mov dword [esp + 8], esi
call fcn.10030e00
lea eax, [esi + 0xd0]
xor ebx, ebx
mov dword [esp + 0x1c4], ebx
push eax
mov dword [esi], vtable.CPortNet.0
call fcn.100455e0
mov al, 1
mov byte [esp + 0x1c4], al
mov ecx, 0x7d0
mov dword [esi + 0x170], ecx
mov dword [esi + 0x190], ecx
lea ecx, [esp + 0x28]
mov edx, 0x64
mov byte [esi + 0x164], al
mov eax, 0x1f4
push ecx
push 0x202
mov byte [esi + 0xc8], bl
mov byte [esi + 0xc9], bl
mov dword [esi + 0xc4], 0x238c
mov dword [esi + 0x9c], edx
mov byte [esi + 0x165], bl
mov dword [esi + 0x168], 3
mov dword [esi + 0x16c], 0x320
mov dword [esi + 0x174], 0xc8
mov dword [esi + 0x17c], ebx
mov dword [esi + 0x184], ebx
mov dword [esi + 0x178], eax
mov dword [esi + 0x180], eax
mov byte [esi + 0x188], bl
mov dword [esi + 0x18c], edx
mov dword [esi + 0xcc], ebx
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x100342ec
push str.CPortNet::CPortNet
lea eax, [esp + 0x10]
call fcn.10018050
push str._fail_to_WSAStartup
lea edx, [esp + 0x10]
mov byte [esp + 0x1c8], 2
mov ecx, dword [esi + 0x44]
push 0x38
push edx
call fcn.1001d480
add esp, 0xc
lea ecx, [esp + 0xc]
call fcn.10018140
mov eax, esi
mov ecx, dword [esp + 0x1bc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.1005392f
add esp, 0x1c0
ret
Function at 0x10034a40
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Get number of processors
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x1015ae70
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x101b0cd0]
xor eax, esp
mov dword [esp + 0x30], eax
push esi
push edi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
push 6
push 1
mov esi, ecx
push 2
mov byte [esi + 0x188], 0
call dword [sym.imp.WS2_32.dll_socket]
mov dword [esi + 0xc0], eax
cmp eax, 0xffffffff
jne 0x10034ad9
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
push str.CPortNet::ConnectSocket
lea eax, [esp + 0x14]
call fcn.10018050
push edi
push str._SOCKET_ERROR_d
lea eax, [esp + 0x18]
mov dword [esp + 0x50], 0
mov ecx, dword [esi + 0x44]
push 0x19d
push eax
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 0x10]
call fcn.10018140
xor al, al
jmp 0x10034bd1
call fcn.10034ee0
test al, al
je 0x10034ad2
mov edx, dword [esi + 0xc0]
push 4
lea ecx, [esp + 0x10]
push ecx
push 1
push 6
push edx
mov dword [esp + 0x20], 1
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x10034b0d
push esi
call fcn.10035060
mov eax, 2
mov word [esp + 0x2c], ax
movzx eax, word [esi + 0xc4]
push eax
call dword [sym.imp.WS2_32.dll_htons]
mov word [esp + 0x2e], ax
lea eax, [esi + 0x50]
call fcn.10045580
mov edx, dword [esi + 0xc0]
push 0x10
lea ecx, [esp + 0x30]
push ecx
push edx
mov dword [esp + 0x3c], eax
call dword [sym.imp.WS2_32.dll_connect]
cmp eax, 0xffffffff
jne 0x10034b9f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
cmp edi, 0x2733
je 0x10034b9f
push str.CPortNet::ConnectSocket
lea eax, [esp + 0x14]
call fcn.10018050
push edi
push 0
push str.__blocking_mode_d__:_WSAGetLastError_d
lea eax, [esp + 0x1c]
mov dword [esp + 0x54], 1
mov ecx, dword [esi + 0x44]
push 0x1bf
push eax
call fcn.1001d480
add esp, 0x14
lea ecx, [esp + 0x10]
call fcn.10018140
xor al, al
jmp 0x10034bd1
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.100350e0
test al, al
je 0x10034ad2
mov ecx, dword [esi + 0x170]
call fcn.10035190
test al, al
je 0x10034ad2
call fcn.10034f90
test al, al
setne al
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.1005392f
add esp, 0x40
ret
Function at 0x10034e10
Capabilities:
Access peb ldr_data
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x1015c538
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
xor eax, eax
push 4
mov word [esp + 0xe], ax
lea eax, [esp + 0xc]
push eax
mov ecx, 1
push 0x80
mov word [esp + 0x14], cx
mov ecx, dword [esi + 0xc0]
push 0xffff
mov edx, 5
push ecx
mov word [esp + 0x1e], dx
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x10034ec3
push str.CPortNet::SetSOLinger
lea eax, [esp + 0x10]
call fcn.10018050
mov dword [esp + 0x30], 0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, dword [esi + 0x44]
push eax
push str.setsockopt_SO_LINGER__failed_with_error_code__d
lea edx, [esp + 0x14]
push 0x228
push edx
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 0xc]
call fcn.10018140
xor al, al
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
add esp, 0x30
ret
mov al, 1
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
add esp, 0x30
ret

Function at 0x10034ee0
Capabilities:
Access peb ldr_data
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x1015c538
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ecx, dword [esi + 0xc0]
lea eax, [esp + 8]
push eax
push 0x8004667e
push ecx
mov dword [esp + 0x14], 1
call dword [sym.imp.WS2_32.dll_ioctlsocket]
cmp eax, 0xffffffff
jne 0x10034f79
push str.CPortNet::SetNonBlockingSocket
lea eax, [esp + 0x10]
call fcn.10018050
mov dword [esp + 0x30], 0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, dword [esi + 0x44]
push eax
push str.ioctlsocket_FIONBIO_mode_1_error_d
lea edx, [esp + 0x14]
push 0x234
push edx
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 0xc]
call fcn.10018140
xor al, al
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
add esp, 0x30
ret
mov al, 1
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
add esp, 0x30
ret
Function at 0x10034f90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x1015a8b8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov edx, dword [esi + 0xc0]
push 0
push 0
mov eax, 0x3e8
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0xc]
push eax
push 0
push 0
push 0xc
lea ecx, [esp + 0x20]
push ecx
push 0x98000004
push edx
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 0
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
jne 0x1003504d
push str.CPortNet::SetKeepAlive
lea eax, [esp + 0x18]
call fcn.10018050
mov dword [esp + 0x38], 0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, dword [esi + 0x44]
push eax
push str.WSAIotcl_SIO_KEEPALIVE_VALS__failed_with_error_code__d
lea eax, [esp + 0x1c]
push 0x246
push eax
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.10018140
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
add esp, 0x38
ret
mov al, 1
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
add esp, 0x38
ret
Function at 0x10035190
Capabilities:
Get socket status

Disassembly:
push 0xffffffffffffffff
push 0x1015ae36
mov eax, dword fs:[0]
push eax
sub esp, 0x238
push edi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x240]
mov dword fs:[0], eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x24], eax
imul eax, eax, 0x3e8
sub ecx, eax
mov eax, dword [esi + 0xc0]
imul ecx, ecx, 0x3e8
mov dword [esp + 0x30], eax
mov dword [esp + 0x138], eax
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x138]
push ecx
lea edx, [esp + 0x34]
push edx
push 0
push 0
mov dword [esp + 0x40], 1
mov dword [esp + 0x148], 1
call dword [sym.imp.WS2_32.dll_select]
cmp eax, 0xffffffff
jne 0x100352de
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
push str.CPortNet::CheckWriteFD
lea eax, [esp + 0xc]
call fcn.10018050
push edi
push str.select_error:GLE__d_
lea eax, [esp + 0x10]
mov dword [esp + 0x250], 0
mov ecx, dword [esi + 0x44]
push 0x274
push eax
call fcn.1001d480
mov dword [esp + 0x258], 0xffffffff
mov edi, dword [esp + 0x1c]
add esp, 0x10
test edi, edi
je 0x10035298
mov ecx, dword [esp + 0x10]
inc ecx
imul ecx, dword [esp + 0x18]
push ecx
push 0
push edi
call fcn.10057070
add esp, 0xc
push edi
call fcn.10054ff5
add esp, 4
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x100352bc
mov edx, dword [esp + 0x20]
lea eax, [edx + edx]
push eax
push 0
push edi
call fcn.10057070
add esp, 0xc
push edi
call fcn.1004698d
add esp, 4
push 0
mov ecx, esi
call fcn.10034bf0
xor al, al
mov ecx, dword [esp + 0x240]
mov dword fs:[0], ecx
pop ecx
pop edi
add esp, 0x244
ret
mov edx, dword [esi + 0xc0]
lea ecx, [esp + 0x2c]
push ecx
push edx
call sub.WS2_32.dll___WSAFDIsSet
test eax, eax
jne 0x100353a2
push str.CPortNet::CheckWriteFD
lea eax, [esp + 0xc]
call fcn.10018050
push str.FD_ISSET_return_fail
lea eax, [esp + 0xc]
mov dword [esp + 0x24c], 1
mov ecx, dword [esi + 0x44]
push 0x27c
push eax
call fcn.1001d480
mov dword [esp + 0x254], 0xffffffff
mov edi, dword [esp + 0x18]
add esp, 0xc
test edi, edi
je 0x1003535c
mov ecx, dword [esp + 0x10]
inc ecx
imul ecx, dword [esp + 0x18]
push ecx
push 0
push edi
call fcn.10057070
add esp, 0xc
push edi
call fcn.10054ff5
add esp, 4
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x10035380
mov edx, dword [esp + 0x20]
lea eax, [edx + edx]
push eax
push 0
push edi
call fcn.10057070
add esp, 0xc
push edi
call fcn.1004698d
add esp, 4
push 0
mov ecx, esi
call fcn.10034bf0
xor al, al
mov ecx, dword [esp + 0x240]
mov dword fs:[0], ecx
pop ecx
pop edi
add esp, 0x244
ret
mov al, 1
mov ecx, dword [esp + 0x240]
mov dword fs:[0], ecx
pop ecx
pop edi
add esp, 0x244
ret
Function at 0x10035e80
Capabilities:
Send data
Send data on socket

Disassembly:
push 0xffffffffffffffff
push 0x1015adf8
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push edi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
xor ebx, ebx
cmp byte [esi + 0x90], bl
je 0x10036012
cmp byte [esi + 0xc8], bl
je 0x10036012
cmp byte [esi + 0xa2], bl
jne 0x10035edb
mov al, 1
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
add esp, 0x30
ret
push str.CPortNet::WriteNullByte
lea eax, [esp + 0x18]
mov byte [esp + 0x17], bl
call fcn.10018050
push str.NULL_byte_write
lea eax, [esp + 0x18]
mov dword [esp + 0x3c], ebx
mov ecx, dword [esi + 0x44]
push 0x3c6
push eax
call fcn.1001cc00
add esp, 0xc
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
call fcn.10018140
mov edx, dword [esi + 0xc0]
push ebx
push 1
lea ecx, [esp + 0x1b]
push ecx
push edx
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x10035fd0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
cmp edi, 0x2733
je 0x10035ec7
push str.CPortNet::WriteNullByte
lea eax, [esp + 0x18]
call fcn.10018050
push edi
push str.NULL_Write_Fail._power_status_off_line._GLE_d
lea eax, [esp + 0x1c]
mov dword [esp + 0x40], 1
mov ecx, dword [esi + 0x44]
push 0x3ce
push eax
call fcn.1001d480
add esp, 0x10
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
call fcn.10018140
push 0x32
mov byte [esi + 0x90], bl
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [esi + 0xb8]
xor bl, bl
mov dword [esi + 0x94], 0x7d3
mov byte [esi + 0xc9], 1
call fcn.10038030
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
add esp, 0x30
ret
cmp eax, 1
je 0x10035ec7
push str.CPortNet::WriteNullByte
lea eax, [esp + 0x18]
call fcn.10018050
push str.NULL_byte_writing_is_fail
lea ecx, [esp + 0x18]
push 0x3da
mov dword [esp + 0x40], 2
push ecx
mov ecx, dword [esi + 0x44]
call fcn.1001d480
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.10018140
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
add esp, 0x30
ret

Function at 0x100360a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x10159ff0
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
mov eax, dword [0x101b0cd0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 8], esi
mov dword [esi], vtable.CPortLpt.0
push str.CPortLpt::CPortLpt
lea eax, [esp + 0x10]
mov dword [esp + 0x34], 0
call fcn.10018050
push 0x1019bc42
lea eax, [esp + 0x10]
mov byte [esp + 0x34], 1
mov ecx, dword [esi + 0x44]
push 0x32
push eax
call fcn.1001cc00
add esp, 0xc
lea ecx, [esp + 0xc]
call fcn.10018140
mov ecx, esi
mov dword [esp + 0x30], 0xffffffff
call fcn.10030ea0
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret