joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10038150
Capabilities:
Print debug messages

Disassembly:
sub esp, 0x504
mov eax, dword [0x101c3584]
xor eax, esp
mov dword [esp + 0x500], eax
cmp byte [esi + 0x8c], 0
jne 0x10038191
mov eax, dword [esi + 0x90]
test eax, eax
je 0x1003835f
cmp eax, 0xffffffff
je 0x1003835f
cmp byte [esi + 0x94], 0
je 0x1003835f
xor al, al
mov byte [esp + 0x100], 0
cmp byte [esi + 0x88], al
je 0x100381f0
lea eax, [esp]
push eax
call fcn.10036d70
push 2
lea ecx, [esp + 0x108]
push str.___n
push ecx
call fcn.1013e8a0
push 0x100
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x118]
push eax
call fcn.1013e8a0
push 2
lea ecx, [esp + 0x120]
push 0x101a7354
push ecx
call fcn.1013e8a0
add esp, 0x28
mov al, 1
cmp byte [esi + 0x89], 0
je 0x1003822f
test al, al
je 0x10038214
push 2
lea edx, [esp + 0x104]
push 0x101a6458
push edx
call fcn.1013e8a0
add esp, 0xc
push 0x80
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x108]
push ecx
call fcn.1013e8a0
add esp, 0xc
mov al, 1
cmp byte [esi + 0x8a], 0
je 0x100382ad
test al, al
je 0x10038253
push 2
lea edx, [esp + 0x104]
push 0x101a6458
push edx
call fcn.1013e8a0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
lea eax, [esp + 4]
push 0x101a706c
push eax
call fcn.1013deee
push 2
lea ecx, [esp + 0x110]
push 0x101a7358
push ecx
call fcn.1013e8a0
push 0x80
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x120]
push eax
call fcn.1013e8a0
push 2
lea ecx, [esp + 0x128]
push 0x101a735c
push ecx
call fcn.1013e8a0
add esp, 0x30
jmp 0x100382b1
test al, al
je 0x100382c8
push 3
lea edx, [esp + 0x104]
push 0x101a5d20
push edx
call fcn.1013e8a0
add esp, 0xc
mov eax, edi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100382d0
sub eax, edx
mov ecx, 0x3fd
sub ecx, eax
push ecx
lea edx, [esp + 0x104]
push edi
push edx
call fcn.1013e8a0
push 3
lea eax, [esp + 0x110]
push 0x101a70e0
push eax
call fcn.1013e8a0
add esp, 0x18
cmp byte [esi + 0x8c], 0
jne 0x1003833e
mov eax, dword [esi + 0x90]
test eax, eax
je 0x10038327
cmp eax, 0xffffffff
je 0x10038327
cmp byte [esi + 0x94], 0
jne 0x1003834c
xor al, al
mov ecx, dword [esp + 0x500]
xor ecx, esp
call fcn.1013d581
add esp, 0x504
ret
lea ecx, [esp + 0x100]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea edx, [esp + 0x100]
push edx
lea ecx, [esi + 0x90]
call fcn.10037350
mov ecx, dword [esp + 0x500]
xor ecx, esp
mov al, 1
call fcn.1013d581
add esp, 0x504
ret
Function at 0x1005a170
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x18
mov eax, dword [0x101c3584]
xor eax, esp
mov dword [esp + 0x14], eax
push ebp
mov ebp, dword [esp + 0x20]
push edi
mov edi, ecx
test edi, edi
je 0x1005a283
test bl, bl
je 0x1005a283
cmp bl, 0x10
ja 0x1005a283
jne 0x1005a1b4
cmp byte [edi], 0x30
jne 0x1005a1b4
mov al, byte [edi + 1]
cmp al, 0x78
je 0x1005a1b1
cmp al, 0x58
jne 0x1005a1b4
add edi, 2
push esi
xor esi, esi
mov byte [esp + 0xc], 0x30
mov byte [esp + 0xd], 0x31
mov byte [esp + 0xe], 0x32
mov byte [esp + 0xf], 0x33
mov byte [esp + 0x10], 0x34
mov byte [esp + 0x11], 0x35
mov byte [esp + 0x12], 0x36
mov byte [esp + 0x13], 0x37
mov byte [esp + 0x14], 0x38
mov byte [esp + 0x15], 0x39
mov byte [esp + 0x16], 0x41
mov byte [esp + 0x17], 0x42
mov byte [esp + 0x18], 0x43
mov byte [esp + 0x19], 0x44
mov byte [esp + 0x1a], 0x45
mov byte [esp + 0x1b], 0x46
mov byte [esp + 0x1c], 0
test ebp, ebp
jne 0x1005a215
mov ebp, 0x3e8
mov al, byte [edi]
dec ebp
test al, al
je 0x1005a25b
movsx eax, al
push eax
call fcn.10140daa
movsx ecx, al
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.10140bb0
add esp, 0xc
test eax, eax
je 0x1005a26f
lea ecx, [esp + 0xc]
sub eax, ecx
mov ecx, eax
movzx eax, bl
mov edx, esi
cmp ecx, eax
jae 0x1005a26f
imul eax, esi
add eax, ecx
mov esi, eax
cmp edx, esi
jg 0x1005a26f
inc edi
test ebp, ebp
jne 0x1005a215
mov eax, esi
pop esi
pop edi
pop ebp
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.1013d581
add esp, 0x18
ret
pop esi
pop edi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.1013d581
add esp, 0x18
ret
mov ecx, dword [esp + 0x1c]
pop edi
pop ebp
xor ecx, esp
xor eax, eax
call fcn.1013d581
add esp, 0x18
ret
Function at 0x10067280
Capabilities:
Get process heap force flags

Disassembly:
mov ecx, dword [ecx]
test ecx, ecx
je 0x1005ec3b
jmp 0x10067280
mov eax, 1
ret 0x10
push 0xffffffffffffffff
push 0x1015d1d8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0x10]
call fcn.10070e60
mov edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x38]
push edi
push ebx
mov dword [esp + 0x38], 0
call fcn.100664d0
mov ecx, dword [esp + 0x48]
add esp, 8
push eax
mov eax, dword [esp + 0x48]
push 0
push eax
push ecx
push edi
push ebx
lea edx, [esp + 0x28]
push edx
mov ecx, esi
call fcn.10066af0
lea ecx, [esp + 0x10]
mov esi, eax
mov dword [esp + 0x30], 0xffffffff
call fcn.10117cb0
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x24
ret 0x10

Function at 0x100674c0
Capabilities:
Initialize winsock library

Disassembly:
push 0xffffffffffffffff
push 0x1015d23b
mov eax, dword fs:[0]
push eax
sub esp, 0x198
mov eax, dword [0x101c3584]
xor eax, esp
mov dword [esp + 0x194], eax
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x1a0]
mov dword fs:[0], eax
lea eax, [esp + 0xc]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov esi, eax
test esi, esi
je 0x10067573
lea ecx, [esp + 8]
push str.SF_NET_SDK
push ecx
call fcn.1005e920
add esp, 8
push 5
lea ecx, [esp + 0xc]
mov dword [esp + 0x1ac], 0
call fcn.1005d580
test al, al
je 0x1006755b
push esi
push str.Socket_system_initialization_failed__WSAStartup___error:__d
push 0x2e
push str.SamsungFramework::NetSDK::SSocketSystem::DoInitialize
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkWinNetSDKSSocketSystem.cpp
lea edx, [esp + 0x1c]
push 5
push edx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 8]
mov dword [esp + 0x1a8], 0xffffffff
call fcn.10117cb0
xor al, al
jmp 0x10067575
mov al, 1
mov ecx, dword [esp + 0x1a0]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [esp + 0x194]
xor ecx, esp
call fcn.1013d581
add esp, 0x1a4
ret
Function at 0x1006c990
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x1015d949
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
xor ecx, ecx
mov dword [esp + 8], ecx
mov esi, dword [esp + 0x64]
lea eax, [esi + 4]
mov dword [esp + 0xc], str.75x75
mov dword [esp + 0x10], str.100x100
mov dword [esp + 0x14], str.150x150
mov dword [esp + 0x18], str.200x200
mov dword [esp + 0x1c], str.300x300
mov dword [esp + 0x20], str.300x600
mov dword [esp + 0x24], str.600x300
mov dword [esp + 0x28], str.600x600
mov dword [esp + 0x2c], str.600x1200
mov dword [esp + 0x30], str.600x2400
mov dword [esp + 0x34], str.1200x600
mov dword [esp + 0x38], str.1200x1200
mov dword [esp + 0x3c], str.1200x2400
mov dword [esp + 0x40], str.2400x2400
mov dword [esp + 0x44], str.2400x4800
mov dword [esp + 0x48], str.4800x4800
mov dword [esp + 0x4c], str.4800x9600
mov dword [esp + 0x50], str.9600x9600
mov dword [eax], ecx
mov dword [esi], eax
push esi
push 0x12
lea eax, [esp + 0x14]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x70]
push eax
push ecx
mov dword [esp + 0x18], 1
call fcn.1006c7e0
add esp, 0x10
mov eax, esi
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x58
ret
Function at 0x10070cc0
Capabilities:
Create thread

Disassembly:
push ecx
push esi
push edi
push 8
mov esi, ecx
call fcn.1013d60d
add esp, 4
test eax, eax
je 0x10070ce4
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov edi, eax
jmp 0x10070ce6
xor edi, edi
lea eax, [esp + 8]
push eax
push 0
push edi
push 0x10070c80
push 0
push 0
call fcn.10141985
mov ecx, dword [esi]
mov dword [ecx], eax
mov edx, dword [esi]
mov eax, dword [esp + 0x20]
mov dword [edx + 4], eax
mov ecx, dword [esi]
add esp, 0x18
cmp dword [ecx], 0
jne 0x10070d1c
push edi
call fcn.1013d576
add esp, 4
pop edi
pop esi
pop ecx
ret 8
Function at 0x100740b0
Capabilities:
Get socket status

Disassembly:
push 0xffffffffffffffff
push 0x1015e2d6
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov esi, dword [ecx + 8]
cmp esi, 0xffffffff
jne 0x100740ec
mov eax, 2
jmp 0x10074220
mov ecx, dword [esp + 0x12c]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [esp + 0x10], edx
imul edx, edx, 0x3e8
sub ecx, edx
imul ecx, ecx, 0x3e8
lea eax, [esp + 0x10]
push eax
push 0
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x28], esi
push 0
inc esi
push esi
mov dword [esp + 0x2c], 1
call dword [sym.imp.WS2_32.dll_select]
cmp eax, 0xffffffff
jne 0x100741b0
call sub.WS2_32.dll_WSAGetLastError
lea edx, [esp + 0xc]
push str.SF_NET_SDK
push edx
mov esi, eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x10]
mov dword [esp + 0x128], 0
call fcn.1005d580
test al, al
je 0x10074191
push esi
push str._ERROR__NET_SSocket::canSend:_select_error:__d
push 0x9c
push str.SamsungFramework::NetSDK::SSocket::canSend
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea eax, [esp + 0x20]
push 0
push eax
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0xc]
mov dword [esp + 0x124], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
jmp 0x10074220
test eax, eax
jne 0x1007421e
lea ecx, [esp + 8]
push str.SF_NET_SDK
push ecx
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x128], 1
call fcn.1005d580
test al, al
je 0x10074203
push str._ERROR__NET_SSocket::canSend:_timeout
push 0xa1
push str.SamsungFramework::NetSDK::SSocket::canSend
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea edx, [esp + 0x18]
push 0
push edx
call fcn.1005e520
add esp, 0x18
lea ecx, [esp + 8]
mov dword [esp + 0x124], 0xffffffff
call fcn.10117cb0
mov eax, 6
jmp 0x10074220
xor eax, eax
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x120
ret 4
Function at 0x10074240
Capabilities:
Send data
Send data on socket

Disassembly:
push 0xffffffffffffffff
push 0x1015e308
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
push eax
mov dword [edi], 0
call fcn.100740b0
test eax, eax
jne 0x10074323
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov esi, dword [esi + 8]
push eax
push ecx
push edx
push esi
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
jge 0x1007431f
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
lea eax, [esp + 0x28]
push str.SF_NET_SDK
push eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0
call fcn.1005d580
test al, al
je 0x100742f1
push esi
push str._ERROR__NET_SSocket::sendData:_send_error:__d
push 0xb8
push str.SamsungFramework::NetSDK::SSocket::sendData
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0x10
mov dword [edi], eax
xor eax, eax
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0x10
jmp 0x10074240
Function at 0x10074340
Capabilities:
Get socket status

Disassembly:
push 0xffffffffffffffff
push 0x1015e2d6
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x11c]
mov dword fs:[0], eax
mov esi, dword [ecx + 8]
cmp esi, 0xffffffff
jne 0x1007437c
mov eax, 2
jmp 0x100744b0
mov ecx, dword [esp + 0x12c]
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [esp + 0x10], edx
imul edx, edx, 0x3e8
sub ecx, edx
imul ecx, ecx, 0x3e8
lea eax, [esp + 0x10]
push eax
push 0
mov dword [esp + 0x1c], ecx
push 0
lea ecx, [esp + 0x24]
mov dword [esp + 0x28], esi
push ecx
inc esi
push esi
mov dword [esp + 0x2c], 1
call dword [sym.imp.WS2_32.dll_select]
cmp eax, 0xffffffff
jne 0x10074440
call sub.WS2_32.dll_WSAGetLastError
lea edx, [esp + 0xc]
push str.SF_NET_SDK
push edx
mov esi, eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x10]
mov dword [esp + 0x128], 0
call fcn.1005d580
test al, al
je 0x10074421
push esi
push str._ERROR__NET_SSocket::canReceive:_select_error:__d
push 0xd7
push str.SamsungFramework::NetSDK::SSocket::canReceive
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea eax, [esp + 0x20]
push 0
push eax
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0xc]
mov dword [esp + 0x124], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
jmp 0x100744b0
test eax, eax
jne 0x100744ae
lea ecx, [esp + 8]
push str.SF_NET_SDK
push ecx
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x128], 1
call fcn.1005d580
test al, al
je 0x10074493
push str._ERROR__NET_SSocket::canReceive:_timeout
push 0xdc
push str.SamsungFramework::NetSDK::SSocket::canReceive
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea edx, [esp + 0x18]
push 0
push edx
call fcn.1005e520
add esp, 0x18
lea ecx, [esp + 8]
mov dword [esp + 0x124], 0xffffffff
call fcn.10117cb0
mov eax, 6
jmp 0x100744b0
xor eax, eax
mov ecx, dword [esp + 0x11c]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x120
ret 4
Function at 0x100744d0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push 0xffffffffffffffff
push 0x1015e308
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
push eax
mov dword [edi], 0
call fcn.10074340
test eax, eax
jne 0x100745b3
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov esi, dword [esi + 8]
push eax
push ecx
push edx
push esi
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jge 0x100745af
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
lea eax, [esp + 0x28]
push str.SF_NET_SDK
push eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], 0
call fcn.1005d580
test al, al
je 0x10074581
push esi
push str._ERROR__NET_SSocket::receiveData:_recv_error:__d
push 0xf3
push str.SamsungFramework::NetSDK::SSocket::receiveData
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea ecx, [esp + 0x3c]
push 0
push ecx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0x10
mov dword [edi], eax
xor eax, eax
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0x10
jmp 0x100744d0

Function at 0x100745d0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push 0xffffffffffffffff
push 0x1015e338
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x101c3584]
xor eax, esp
mov dword [esp + 0x24], eax
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov eax, dword [ecx + 8]
mov esi, dword [esp + 0x40]
cmp eax, 0xffffffff
jne 0x10074615
mov eax, 2
jmp 0x100746c3
lea ecx, [esp + 0xc]
push ecx
lea edx, [esp + 0x14]
push edx
push eax
mov dword [esp + 0x18], 0x1c
call dword [sym.imp.WS2_32.dll_getsockname]
cmp eax, 0xffffffff
jne 0x100746a3
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
lea eax, [esp + 8]
push str.SF_NET_SDK
push eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x3c], 0
call fcn.1005d580
test al, al
je 0x10074687
push esi
push str._ERROR__NET_SSocket::getLocalEndpoint:_getsockname_error:__d
push 0x10e
push str.SamsungFramework::NetSDK::SSocket::getLocalEndpoint
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea ecx, [esp + 0x1c]
push 0
push ecx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 8]
mov dword [esp + 0x38], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
jmp 0x100746c3
mov edx, dword [esp + 0xc]
push esi
push edx
lea eax, [esp + 0x18]
push eax
call fcn.10073ce0
movzx eax, al
add esp, 0xc
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 4
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [esp + 0x24]
xor ecx, esp
call fcn.1013d581
add esp, 0x34
ret 4
Function at 0x100747e0
Capabilities:
Set socket configuration

Disassembly:
push 0xffffffffffffffff
push 0x1015e368
mov eax, dword fs:[0]
push eax
push esi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 8]
mov dword fs:[0], eax
mov eax, dword [ecx + 8]
cmp eax, 0xffffffff
jne 0x10074821
mov eax, 2
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret 8
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push ecx
push edx
push eax
call dword [sym.imp.WS2_32.dll_ioctlsocket]
cmp eax, 0xffffffff
jne 0x100748bc
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
lea eax, [esp + 0x1c]
push str.SF_NET_SDK
push eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x20]
mov dword [esp + 0x14], 0
call fcn.1005d580
test al, al
je 0x1007488f
push esi
push str._ERROR__NET_SSocket::ioControl:_ioctl_error:__d
push 0x1cf
push str.SamsungFramework::NetSDK::SSocket::ioControl
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea ecx, [esp + 0x30]
push 0
push ecx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x10], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret 8
xor eax, eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc
ret 8

Function at 0x10074a40
Capabilities:
Create udp socket

Disassembly:
push 0xffffffffffffffff
push 0x1015d128
mov eax, dword fs:[0]
push eax
push esi
push edi
mov eax, dword [0x101c3584]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
neg eax
sbb eax, eax
push ecx
and eax, 0x15
add eax, 2
push edx
push eax
call dword [sym.imp.WS2_32.dll_socket]
mov edi, eax
cmp edi, 0xffffffff
jne 0x10074b10
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
lea eax, [esp + 0x1c]
push str.SF_NET_SDK
push eax
call fcn.1005e920
add esp, 8
push 0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0
call fcn.1005d580
test al, al
je 0x10074ae2
push esi
push str._ERROR__NET_SSocket::createSocket:_socket_creation_error:__d
push 0x17e
push str.SamsungFramework::NetSDK::SSocket::createSocket
push str.D:P4VSRC_COMMON_SFHostCommonSamsungFrameworkSourcesMAINSamsungFrameworkCmnNetSDKSSocket.cpp
lea ecx, [esp + 0x30]
push 0
push ecx
call fcn.1005e520
add esp, 0x1c
lea ecx, [esp + 0x1c]
mov dword [esp + 0x14], 0xffffffff
call fcn.10117cb0
push esi
call fcn.10073fe0
add esp, 4
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0xc
mov eax, dword [esi + 8]
cmp eax, 0xffffffff
je 0x10074b28
push eax
call fcn.1007fa30
add esp, 4
mov dword [esi + 8], 0xffffffff
mov dword [esi + 8], edi
xor eax, eax
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0xc
ret 0xc
Function at 0x10074d40
Capabilities:
Resolve dns

Disassembly:
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x14]
push esi
mov esi, dword [esp + 0x1c]
mov dword [esi], 0
push ecx
mov byte [eax], 0
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ecx, eax
mov dword [esp + 0x1c], ecx
test ecx, ecx
je 0x10074de4
cmp word [ecx + 8], 2
push ebx
push ebp
push edi
jne 0x10074db5
cmp word [ecx + 0xa], 4
jne 0x10074db5
mov edi, dword [ecx + 0xc]
mov eax, dword [edi]
test eax, eax
je 0x10074db5
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
lea esp, [esp]
mov edx, dword [eax]
mov eax, dword [esp + 0x20]
push edx
push eax
push ebx
push ebp
call fcn.10074cd0
mov dword [esi], eax
test eax, eax
je 0x10074dd8
add edi, 4
lea esi, [eax + 0x1c]
mov eax, dword [edi]
test eax, eax
jne 0x10074d90
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x24]
push 0x400
push ecx
push 0x401
push edx
call fcn.10141add
add esp, 0x10
pop edi
pop ebp
pop ebx
xor eax, eax
pop esi
ret 0x18
pop edi
pop ebp
pop ebx
mov eax, 8
pop esi
ret 0x18
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
add eax, 0xffffd507
cmp eax, 3
ja case.0x10074df4.11001
jmp dword [eax*4 + 0x10074e18]
mov eax, 0x2af9
pop esi
ret 0x18
mov eax, 0x2afa
pop esi
ret 0x18
mov eax, 0x2afb
pop esi
ret 0x18
Function at 0x10075650
Capabilities:
Get common file path

Disassembly:
sub esp, 0x230
mov eax, dword [0x101c3584]
xor eax, esp
mov dword [esp + 0x22c], eax
cmp dword [0x101e8fa4], 0
mov dword [esp], str.getaddrinfo
mov dword [esp + 4], 0x100750b0
mov dword [esp + 8], str.getnameinfo
mov dword [esp + 0xc], 0x100753a0
mov dword [esp + 0x10], str.freeaddrinfo
mov dword [esp + 0x14], fcn.10075060
je 0x100756c2
movzx eax, word [esp + 0x234]
mov eax, dword [eax*8 + 0x101ba944]
mov ecx, dword [esp + 0x22c]
xor ecx, esp
call fcn.1013d581
add esp, 0x230
ret 4
push 0x104
lea ecx, [esp + 0x128]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x100757bd
push ebx
push ebp
push esi
push edi
lea edx, [esp + 0x134]
push edx
lea eax, [esp + 0x2c]
push 0x10c
push eax
call fcn.10141a35
push str.ws2_32
lea ecx, [esp + 0x38]
push 0x10c
push ecx
call fcn.10141e18
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
add esp, 0x18
lea edx, [esp + 0x28]
push edx
call edi
mov ebp, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x1007573d
push str.getaddrinfo
push esi
call ebx
test eax, eax
jne 0x10075784
push esi
call ebp
lea eax, [esp + 0x134]
push eax
lea ecx, [esp + 0x2c]
push 0x10c
push ecx
call fcn.10141a35
push str.wship6
lea edx, [esp + 0x38]
push 0x10c
push edx
call fcn.10141e18
add esp, 0x18
lea eax, [esp + 0x28]
push eax
call edi
mov esi, eax
test esi, esi
je 0x100757b9
push str.getaddrinfo
push esi
call ebx
test eax, eax
je 0x100757ed
xor edi, edi
mov ecx, dword [esp + edi*8 + 0x10]
push ecx
push esi
call ebx
mov dword [esp + edi*8 + 0x14], eax
test eax, eax
je 0x100757ed
inc edi
cmp edi, 3
jl 0x10075786
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov dword [0x101ba944], edx
mov dword [0x101ba94c], eax
mov dword [fcn.10075060], ecx
pop edi
pop esi
pop ebp
pop ebx
movzx edx, word [esp + 0x234]
mov ecx, dword [esp + 0x22c]
mov eax, dword [edx*8 + 0x101ba944]
xor ecx, esp
mov dword [0x101e8fa4], 1
call fcn.1013d581
add esp, 0x230
ret 4
push esi
call ebp
jmp 0x100757b9