joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140048e20
Capabilities:
Set socket configuration

Disassembly:
push rbp
push rsi
push rdi
push r12
push r15
mov rbp, rsp
sub rsp, 0x80
xor r12d, r12d
mov r15, r9
mov rsi, rdx
mov rdi, rcx
cmp rcx, 0xffffffffffffffff
je 0x140048ffc
mov qword [rsp + 0xb8], rbx
test r8b, r8b
je 0x140048e8f
movzx eax, byte [rdx]
test al, 8
je 0x140048e8f
or al, 8
mov dword [rbp + 0x30], r12d
mov byte [rdx], al
lea r9, [rbp + 0x30]
mov edx, 0xffff
mov dword [rsp + 0x20], 4
mov r8d, 0x80
call qword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
lea rcx, [rbp - 0x20]
setne dl
call fcn.140048d60
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_closesocket]
test eax, eax
mov rcx, r15
mov ebx, eax
setne dl
call fcn.140048d60
test ebx, ebx
je 0x140048ff8
mov qword [rsp + 0xc0], r13
movabs rcx, 0x4d54ee85da812030
mov qword [rsp + 0xc8], r14
lea r13, [0x1400f9108]
mov r14, qword [0x1400f9110]
add rcx, r14
mov dword [rbp - 0x4c], r12d
cmp rcx, 1
jbe 0x140048eff
mov rax, qword [0x1400f9108]
mov edx, 0x2733
mov rcx, r13
call qword [rax + 0x30]
mov r14, qword [0x1400f9110]
jmp 0x140048f01
mov al, 1
movzx eax, al
lea rdx, [rbp - 0x38]
add rax, 2
mov dword [rbp - 0x50], 0x2733
mov qword [rbp - 0x40], rax
mov rcx, r15
movsd xmm1, qword [rbp - 0x40]
mov qword [rbp - 0x48], r13
movups xmm0, xmmword [rbp - 0x50]
movsd qword [rbp - 0x28], xmm1
movups xmmword [rbp - 0x38], xmm0
call fcn.1400468c0
test al, al
jne 0x140048f9e
movabs rax, 0x4d54ee85da812030
mov dword [rbp - 0x4c], r12d
add rax, r14
cmp rax, 1
jbe 0x140048f64
mov rax, qword [0x1400f9108]
mov edx, 0x4d5
mov rcx, r13
call qword [rax + 0x30]
jmp 0x140048f66
mov al, 1
movzx eax, al
lea rdx, [rbp - 0x20]
add rax, 2
mov dword [rbp - 0x50], 0x4d5
mov qword [rbp - 0x40], rax
mov rcx, r15
movsd xmm1, qword [rbp - 0x40]
mov qword [rbp - 0x48], r13
movups xmm0, xmmword [rbp - 0x50]
movsd qword [rbp - 0x10], xmm1
movups xmmword [rbp - 0x20], xmm0
call fcn.1400468c0
test al, al
je 0x140048fcf
lea r8, [rbp + 0x30]
mov dword [rbp + 0x30], r12d
mov edx, 0x8004667e
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_ioctlsocket]
and byte [rsi], 0xfc
mov rcx, rdi
call qword [sym.imp.WS2_32.dll_closesocket]
test eax, eax
mov rcx, r15
mov ebx, eax
setne dl
call fcn.140048d60
mov r13, qword [rsp + 0xc0]
mov eax, ebx
mov r14, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, ebx
jmp 0x140048fe1
mov eax, r12d
add rsp, 0x80
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140049930
Capabilities:
Send data
Send data on socket

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov dword [rax + 0x20], r9d
push rdi
push r14
push r15
sub rsp, 0x60
mov rbx, qword [rsp + 0xa0]
lea r9, [rax + 0x20]
xor r14d, r14d
mov qword [rax - 0x48], r14
mov qword [rax - 0x50], r14
mov dword [rax - 0x58], r14d
mov dword [rax + 0x20], r14d
call qword [sym.imp.WS2_32.dll_WSASend]
mov esi, eax
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov rdx, qword [0x1400f9110]
lea rbp, [0x1400f9108]
movabs r15, 0x4d54ee85da812030
mov dword [rsp + 0x44], r14d
add rdx, r15
mov edi, eax
cmp rdx, 1
jbe 0x1400499b6
mov rcx, qword [0x1400f9108]
mov edx, eax
mov r8, qword [rcx + 0x30]
mov rcx, rbp
call r8
jmp 0x1400499bb
test edi, edi
setne al
movzx eax, al
movabs r10, 0x4800144005b3
add rax, 2
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x48], rbp
movups xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movsd xmm1, qword [rsp + 0x50]
movups xmmword [rbx], xmm0
movsd qword [rbx + 0x10], xmm1
mov r9, qword [rbx + 0x10]
cmp r9, 1
je 0x1400499fe
mov eax, dword [rbx]
mov r8d, eax
jmp 0x140049a2e
mov rcx, qword [rbx + 8]
mov rax, r10
mov r8d, dword [rbx]
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0x14
imul rax, rax, 0x1ffff7
sub rcx, rax
imul eax, ecx, 0x3e8
add eax, r8d
cmp eax, 0x40
jne 0x140049a70
mov rcx, qword [0x1400f9110]
add rcx, r15
mov dword [rsp + 0x44], r14d
cmp rcx, 1
jbe 0x140049a64
mov rax, qword [0x1400f9108]
mov edx, 0x2746
mov rcx, rbp
call qword [rax + 0x30]
mov dword [rsp + 0x40], 0x2746
jmp 0x140049adf
mov al, 1
mov dword [rsp + 0x40], 0x2746
jmp 0x140049adf
cmp r9, 1
jne 0x140049aa3
mov rcx, qword [rbx + 8]
mov rax, r10
mul rcx
mov rax, rcx
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0x14
imul rax, rax, 0x1ffff7
sub rcx, rax
imul eax, ecx, 0x3e8
add r8d, eax
cmp r8d, 0x4d2
jne 0x140049b03
mov rcx, qword [0x1400f9110]
add rcx, r15
mov dword [rsp + 0x44], r14d
cmp rcx, 1
jbe 0x140049ad5
mov rax, qword [0x1400f9108]
mov edx, 0x274d
mov rcx, rbp
call qword [rax + 0x30]
jmp 0x140049ad7
mov al, 1
mov dword [rsp + 0x40], 0x274d
movzx eax, al
mov qword [rsp + 0x48], rbp
add rax, 2
movups xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movsd xmm1, qword [rsp + 0x50]
movups xmmword [rbx], xmm0
movsd qword [rbx + 0x10], xmm1
test esi, esi
je 0x140049b0e
mov eax, 0xffffffff
jmp 0x140049b2b
mov eax, dword [rsp + 0x98]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rsp + 0x50], r14
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbx + 0x10], xmm0
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
Function at 0x140051e00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x140051e23
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x140051e10
mov byte [rcx + 5], 0
mov rax, rcx
ret

Function at 0x140051fd0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x90
mov rbx, rcx
xor edi, edi
mov dword [rbp - 0x29], edi
movdqa xmm0, xmmword [0x1400e7070]
movdqu xmmword [rbp - 1], xmm0
movdqa xmm1, xmmword [0x1400e6fb0]
movdqu xmmword [rbp + 0xf], xmm1
movdqa xmm0, xmmword [0x1400e6fc0]
movdqu xmmword [rbp + 0x1f], xmm0
mov dword [rbp + 0x2f], 0xd9dbd9d7
mov dword [rbp + 0x33], 0xb4b4b4b4
mov dword [rbp + 0x37], 0xbcbcbcbc
mov dword [rbp + 0x3b], 0x100b4b4
mov eax, edi
nop dword [rax]
nop word [rax + rax]
lea ecx, [rax + 0x50]
xor byte [rbp + rax - 1], cl
inc rax
cmp rax, 0x3e
jb 0x140052050
mov byte [rbp + 0x3e], dil
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], rdi
lea rax, [rbp - 1]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], dil
jne 0x140052080
lea rdx, [rbp - 1]
lea rcx, [rbp - 0x21]
call fcn.14005b320
nop
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], select
mov byte [rbx], 0
mov dword [rbp - 0x29], 1
mov edi, select
mov edx, edi
mov rcx, rbx
call fcn.140056590
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
mov r14, qword [rbp - 9]
mov r15, qword [rbp - 0x11]
mov rsi, qword [rbp - 0x21]
nop
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdqe
xor edx, edx
div r15
lea rax, [rbp - 0x21]
cmp r14, 0xf
cmova rax, rsi
movzx r9d, byte [rax + rdx]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x14005212a
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x14005211f
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140052132
mov rcx, rbx
call fcn.14005b190
sub rdi, 1
jne 0x1400520e0
cmp r14, 0xf
jbe 0x140052172
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14005216a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005216a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rsi
call fcn.140099b9c
mov rax, rbx
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
Function at 0x1400524a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 8], 0
je 0x1400524c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 7
jb 0x1400524b0
mov byte [rcx + 8], 0
mov rax, rcx
ret
Function at 0x140054d60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x140054d83
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x140054d70
mov byte [rcx + 9], 0
mov rax, rcx
ret

Function at 0x140054d90
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x140054db3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x140054da0
mov byte [rcx + 4], 0
mov rax, rcx
ret

Function at 0x140054dc0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x140054de3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x140054dd0
mov byte [rcx + 6], 0
mov rax, rcx
ret

Function at 0x140054df0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x140054e13
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x140054e00
mov byte [rcx + 0x10], 0
mov rax, rcx
ret

Function at 0x140054e20
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x140054e43
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x140054e30
mov byte [rcx + 0xd], 0
mov rax, rcx
ret

Function at 0x140054e50
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x140054e73
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x140054e60
mov byte [rcx + 0xf], 0
mov rax, rcx
ret

Function at 0x140054e80
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x140054ea3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x140054e90
mov byte [rcx + 0x1b], 0
mov rax, rcx
ret

Function at 0x140055100
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1b], 0
je 0x140055123
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1a
jb 0x140055110
mov byte [rcx + 0x1b], 0
ret

Function at 0x140055130
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xf], 0
je 0x140055153
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xe
jb 0x140055140
mov byte [rcx + 0xf], 0
ret

Function at 0x140055160
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x1e], 0
je 0x140055183
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x1d
jb 0x140055170
mov byte [rcx + 0x1e], 0
ret

Function at 0x140055190
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xd], 0
je 0x1400551b3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xc
jb 0x1400551a0
mov byte [rcx + 0xd], 0
ret
Function at 0x1400551c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x1400551e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x15
jb 0x1400551d0
mov byte [rcx + 0x16], 0
ret

Function at 0x1400551f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x19], 0
je 0x140055213
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18
jb 0x140055200
mov byte [rcx + 0x19], 0
ret

Function at 0x140055220
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x99], 0
je 0x140055248
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x98
jb 0x140055230
mov byte [rcx + 0x99], 0
ret

Function at 0x140055250
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x10], 0
je 0x140055273
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xf
jb 0x140055260
mov byte [rcx + 0x10], 0
ret

Function at 0x140055280
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x48], 0
je 0x1400552a3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x47
jb 0x140055290
mov byte [rcx + 0x48], 0
ret

Function at 0x1400552b0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xc], 0
je 0x1400552d3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xb
jb 0x1400552c0
mov byte [rcx + 0xc], 0
ret

Function at 0x1400552e0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 6], 0
je 0x140055303
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 5
jb 0x1400552f0
mov byte [rcx + 6], 0
ret

Function at 0x140055310
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 7], 0
je 0x140055333
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 6
jb 0x140055320
mov byte [rcx + 7], 0
ret

Function at 0x140055340
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18b], 0
je 0x140055368
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x18a
jb 0x140055350
mov byte [rcx + 0x18b], 0
ret

Function at 0x140055370
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x18], 0
je 0x140055393
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x17
jb 0x140055380
mov byte [rcx + 0x18], 0
ret

Function at 0x1400553a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 4], 0
je 0x1400553c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 3
jb 0x1400553b0
mov byte [rcx + 4], 0
ret

Function at 0x1400553d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 9], 0
je 0x1400553f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 8
jb 0x1400553e0
mov byte [rcx + 9], 0
ret
Function at 0x140055400
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 3], 0
je 0x140055423
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 2
jb 0x140055410
mov byte [rcx + 3], 0
ret

Function at 0x140055430
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x2f], 0
je 0x140055453
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x2e
jb 0x140055440
mov byte [rcx + 0x2f], 0
ret

Function at 0x140055470
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x23], 0
je 0x140055493
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x22
jb 0x140055480
mov byte [rcx + 0x23], 0
ret

Function at 0x1400554a0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xa], 0
je 0x1400554c3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 9
jb 0x1400554b0
mov byte [rcx + 0xa], 0
ret

Function at 0x1400554d0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xb], 0
je 0x1400554f3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xa
jb 0x1400554e0
mov byte [rcx + 0xb], 0
ret

Function at 0x140055500
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x16], 0
je 0x140055525
xor eax, eax
mov r8d, 0x5650
nop
lea edx, [r8 + rax]
xor word [rcx + rax*2], dx
inc rax
cmp rax, 0xa
jb 0x140055510
mov byte [rcx + 0x16], 0
ret

Function at 0x140055530
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 8], 0
je 0x140055553
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 7
jb 0x140055540
mov byte [rcx + 8], 0
ret

Function at 0x1400555c0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 5], 0
je 0x1400555e3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 4
jb 0x1400555d0
mov byte [rcx + 5], 0
ret

Function at 0x1400555f0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0xe], 0
je 0x140055613
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x50]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0xd
jb 0x140055600
mov byte [rcx + 0xe], 0
ret
Function at 0x140055ad0
Capabilities:
Initialize winsock library

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x1f0
movzx ebx, dl
mov rdi, rcx
mov eax, 1
lock xadd dword [0x1401cce10], eax
inc eax
cmp eax, 1
jne 0x140055b0b
lea ecx, [rax + 1]
lea rdx, [rsp + 0x50]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xchg dword [0x1401cce14], eax
test bl, bl
je 0x140055baf
xor ebx, ebx
lock xadd dword [0x1401cce14], ebx
test ebx, ebx
je 0x140055baf
movabs rcx, 0x4d54ee85da812030
mov qword [rsp + 0x200], rsi
add rcx, qword [0x1400f9110]
lea rsi, [0x1400f9108]
mov dword [rsp + 0x3c], 0
cmp rcx, 1
jbe 0x140055b64
mov rax, qword [0x1400f9108]
mov edx, ebx
mov rcx, rsi
call qword [rax + 0x30]
jmp 0x140055b66
mov al, 1
lea rcx, str.C:UsersStein_vcpkginstalledx64_windowsinclude_boost_asiodetailimplwinsock_init.ipp
movzx eax, al
add rax, 2
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], rsi
lea rcx, str.throw_on_error
mov rsi, qword [rsp + 0x200]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], 0x48
mov dword [rsp + 0x34], 0x1a
test al, 1
jne 0x140055bc3
mov rbx, qword [rsp + 0x208]
mov rax, rdi
add rsp, 0x1f0
pop rdi
ret
lea r8, [rsp + 0x20]
lea rdx, str.winsock
lea rcx, [rsp + 0x38]
call fcn.1400471c0
int3
Function at 0x14006d290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r12, r9
mov rdi, r8
mov rbx, rdx
mov r14, rcx
xor eax, eax
lock xadd dword [rcx + 0x3c], eax
test eax, eax
je 0x14006d2cc
xor eax, eax
jmp 0x14006d494
lea r13, [rcx + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor edx, edx
mov r15d, edx
mov esi, edx
mov ebp, edx
cmp qword [rdi + 0x20], rdx
jne 0x14006d2f2
cmp rdi, qword [rbx + 0x10]
jne 0x14006d3d5
movabs r14, 0x4d54ee85da812030
lea r13, [0x1400f9108]
cmp rbp, r12
je 0x14006d3b3
mov rbx, qword [rdi]
test rbx, rbx
je 0x14006d3b3
mov dword [rsp + 0x24], edx
mov rcx, qword [0x1400f9110]
add rcx, r14
cmp rcx, 1
jbe 0x14006d342
mov rax, qword [0x1400f9108]
mov edx, 0x3e3
mov rcx, r13
call qword [rax + 0x30]
xor edx, edx
jmp 0x14006d344
mov al, 1
movzx eax, al
add rax, 2
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], 0x3e3
mov qword [rsp + 0x28], r13
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rbx + 0x38], xmm0
movsd xmm1, qword [rsp + 0x30]
movsd qword [rbx + 0x48], xmm1
mov rcx, qword [rdi]
test rcx, rcx
je 0x14006d38d
mov rax, qword [rcx + 0x20]
mov qword [rdi], rax
test rax, rax
jne 0x14006d389
mov qword [rdi + 8], rdx
mov qword [rcx + 0x20], rdx
mov qword [rbx + 0x20], rdx
test rsi, rsi
je 0x14006d3a5
mov qword [rsi + 0x20], rbx
inc rbp
mov rsi, rbx
jmp 0x14006d303
mov r15, rbx
inc rbp
mov rsi, rbx
jmp 0x14006d303
cmp qword [rdi], 0
mov r14, qword [rsp + 0x80]
lea r13, [r14 + 0x60]
jne 0x14006d3d5
mov rdx, rdi
mov rcx, qword [rsp + 0x88]
call fcn.140057b20
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rbx, r15
test r15, r15
je 0x14006d491
mov rdi, r15
mov r12d, 1
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r15 + 0x20]
mov r15, rcx
mov qword [rdi + 0x20], 0
mov rdi, rcx
xor eax, eax
test rcx, rcx
cmovne rax, rsi
mov rsi, rax
mov dword [rbx + 0x30], r12d
mov r9, rbx
xor r8d, r8d
xor edx, edx
mov rcx, qword [r14 + 0x28]
call qword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
test eax, eax
je 0x14006d442
mov rbx, rdi
test rdi, rdi
jne 0x14006d400
jmp 0x14006d491
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov qword [rbx + 0x20], 0
mov rax, qword [r14 + 0x98]
test rax, rax
je 0x14006d465
mov qword [rax + 0x20], rbx
jmp 0x14006d46c
mov qword [r14 + 0x90], rbx
mov qword [r14 + 0x98], rbx
test r15, r15
je 0x14006d483
mov qword [rbx + 0x20], r15
mov qword [r14 + 0x98], rsi
xchg dword [r14 + 0x58], r12d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
mov rax, rbp
mov rbx, qword [rsp + 0x90]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x140082b40
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x2e], 0
je 0x140082b63
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x2d
jb 0x140082b50
mov byte [rcx + 0x2e], 0
ret

Function at 0x140082b70
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x39], 0
je 0x140082b93
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x38
jb 0x140082b80
mov byte [rcx + 0x39], 0
ret

Function at 0x140082ba0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x27], 0
je 0x140082bc3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x26
jb 0x140082bb0
mov byte [rcx + 0x27], 0
ret

Function at 0x140082bd0
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x31], 0
je 0x140082bf3
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x30
jb 0x140082be0
mov byte [rcx + 0x31], 0
ret

Function at 0x140082c00
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x30], 0
je 0x140082c23
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x2f
jb 0x140082c10
mov byte [rcx + 0x30], 0
ret

Function at 0x140082c30
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x12], 0
je 0x140082c53
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x11
jb 0x140082c40
mov byte [rcx + 0x12], 0
ret

Function at 0x140082c60
Capabilities:
Encode data using xor

Disassembly:
cmp byte [rcx + 0x11], 0
je 0x140082c83
xor eax, eax
nop dword [rax + rax]
lea edx, [rax + 0x54]
xor byte [rax + rcx], dl
inc rax
cmp rax, 0x10
jb 0x140082c70
mov byte [rcx + 0x11], 0
ret