joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56d920
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x660fc0
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x20], esi
mov dword [ebp - 4], 0
cmp dword [esi + 0x3244], 0
jne 0x56d970
cmp dword [esi + 0xa4], 1
jne 0x56d9fd
lea edi, [esi + 0x31f8]
lea eax, [ebp - 0x24]
push eax
mov ecx, edi
call fcn.005a9cd0
test eax, eax
jne 0x56d98b
cmp dword [ebp - 0x24], 0x12
je 0x56d9fd
mov ecx, dword [str.QUIT_r_n]
mov dword [ebp - 0x1c], ecx
mov dx, word [0x6aef30]
mov word [ebp - 0x18], dx
mov al, byte [0x6aef32]
mov byte [ebp - 0x16], al
push 1
mov ecx, dword [0x75eb08]
push ecx
mov ecx, esi
call fcn.00562560
lea eax, [ebp - 0x1c]
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x56d9c0
sub eax, edx
push str.send___QUIT
push 0
push eax
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [esi + 0x3204]
push eax
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
test eax, eax
jne 0x56da2b
push 0x12
mov ecx, edi
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
xor eax, eax
jmp 0x56da2b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0062023e
mov esp, ebp
pop ebp
ret

Function at 0x56df00
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
lea ebp, [esp - 0x118]
sub esp, 0x118
push 0xffffffffffffffff
push 0x661050
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x114], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
push 1
mov eax, dword [0x75eb2c]
push eax
call fcn.00562560
push 0x67b29c
push str.PASV_s
lea ecx, [ebp]
push ecx
call fcn.0062311b
add esp, 0xc
lea eax, [ebp]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x56df71
sub eax, edx
push str.send___PASV
push 0
push eax
lea edx, [ebp]
push edx
mov eax, dword [esi + 0x3204]
push eax
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
test eax, eax
je 0x56dfac
mov ecx, dword [esi + 0x3214]
mov dword [ecx + 0x14c], eax
jmp 0x56dff8
push 4
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
xor eax, eax
jmp 0x56dff8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x114]
xor ecx, ebp
call fcn.0062023e
add ebp, 0x118
mov esp, ebp
pop ebp
ret
Function at 0x56e2b0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6610b0
mov eax, dword fs:[0]
push eax
sub esp, 0x48
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x50], esi
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x54], 0x10
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [esi + 0x3240]
push edx
call sub.WS2_32.dll_accept
mov dword [esi + 0x3208], eax
or ebx, 0xffffffff
cmp eax, ebx
jne 0x56e3b8
call sub.WS2_32.dll_WSAGetLastError
mov edi, eax
mov dword [ebp - 0x4c], edi
cmp edi, 0x2733
je 0x56e394
mov eax, dword [esi + 0x3240]
push eax
call sub.WS2_32.dll_closesocket
mov dword [esi + 0x3240], ebx
mov dword [esi + 0x324c], 0
push edi
push str.Error_code___ld_n
lea ecx, [ebp - 0x34]
push ecx
call fcn.0062311b
add esp, 0xc
push 1
mov edx, dword [0x75ea90]
push edx
mov ecx, esi
call fcn.00562560
lea eax, [ebp - 0x34]
push eax
mov ecx, esi
call fcn.00561d40
mov ecx, dword [0x75ea90]
push ecx
mov ecx, dword [esi + 0xb4]
call fcn.0056ae40
mov edx, dword [esi + 0x3214]
mov dword [edx + 0x14c], edi
mov eax, edi
jmp 0x56e431
mov ecx, esi
call fcn.00561a00
cmp eax, 0x1e
jle 0x56e3b4
mov eax, dword [esi + 0x3214]
mov edi, 0x7533
mov dword [eax + 0x14c], edi
mov dword [ebp - 0x4c], edi
mov eax, edi
jmp 0x56e431
push 1
mov ecx, dword [0x75eb40]
push ecx
mov ecx, esi
call fcn.00562560
mov edx, dword [esi + 0x3240]
push edx
call sub.WS2_32.dll_closesocket
mov dword [esi + 0x3240], ebx
mov dword [esi + 0x324c], edi
mov eax, 1
mov dword [esi + 0x3248], eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push 0x8004667e
mov ecx, dword [esi + 0x3208]
push ecx
call sub.WS2_32.dll_ioctlsocket
xor eax, eax
jmp 0x56e431
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0062023e
mov esp, ebp
pop ebp
ret
Function at 0x56e450
Capabilities:
Get local ipv4 addresses
Get socket information
Send data
Send data on socket

Disassembly:
push ebp
lea ebp, [esp - 0x158]
sub esp, 0x158
push 0xffffffffffffffff
push 0x6610e0
mov eax, dword fs:[0]
push eax
sub esp, 0xc
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x154], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi + 0x3214]
cmp dword [eax + 0x24c], ebx
je 0x56e4cc
mov ecx, dword [0x75eaa0]
push ecx
mov ecx, dword [esi + 0xb4]
call fcn.0056ae40
mov edx, dword [esi + 0x3214]
mov eax, 0x755a
mov dword [edx + 0x14c], eax
jmp 0x56e677
mov dword [esi + 0x324c], ebx
lea edi, [esi + 0x3a50]
push edi
mov ecx, esi
call fcn.0056e020
cmp eax, ebx
jne 0x56e677
mov eax, dword [esi + 0x19c]
cmp eax, ebx
je 0x56e4fe
cmp byte [eax + 0x15c], bl
jne 0x56e649
mov ebx, 0x10
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp]
push ecx
mov edx, dword [edi]
push edx
call sub.WS2_32.dll_getsockname
test eax, eax
jge 0x56e587
call sub.WS2_32.dll_WSAGetLastError
mov ebx, eax
mov eax, dword [edi]
push eax
call sub.WS2_32.dll_closesocket
mov dword [edi], 0xffffffff
push ebx
push str.Error_code___ld_n
lea ecx, [ebp + 0x134]
push ecx
call fcn.0062311b
add esp, 0xc
push 1
mov edx, dword [0x75ea94]
push edx
mov ecx, esi
call fcn.00562560
lea eax, [ebp + 0x134]
push eax
mov ecx, esi
call fcn.00561d40
mov ecx, dword [0x75ea94]
push ecx
mov ecx, dword [esi + 0xb4]
call fcn.0056ae40
mov edx, dword [esi + 0x3214]
mov dword [edx + 0x14c], ebx
mov eax, ebx
jmp 0x56e677
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 0x10]
push ecx
mov edx, dword [esi + 0x3204]
push edx
call sub.WS2_32.dll_getsockname
test eax, eax
jl 0x56e51a
movzx eax, byte [ebp + 3]
push eax
movzx ecx, byte [ebp + 2]
push ecx
movzx edx, byte [ebp + 0x17]
push edx
movzx eax, byte [ebp + 0x16]
push eax
movzx ecx, byte [ebp + 0x15]
push ecx
movzx edx, byte [ebp + 0x14]
push edx
push str.PORT__d__d__d__d__d__d_r_n
lea eax, [ebp + 0x20]
push eax
call fcn.0062311b
add esp, 0x20
push 1
mov ecx, dword [0x75eb44]
push ecx
mov ecx, esi
call fcn.00562560
lea eax, [ebp + 0x20]
lea edx, [eax + 1]
jmp 0x56e5f0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x56e5f0
sub eax, edx
push str.send___PORT
push 0
push eax
lea edx, [ebp + 0x20]
push edx
mov eax, dword [esi + 0x3204]
push eax
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
test eax, eax
je 0x56e62b
mov ecx, dword [esi + 0x3214]
mov dword [ecx + 0x14c], eax
jmp 0x56e677
push 6
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
xor eax, eax
jmp 0x56e677
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x154]
xor ecx, ebp
call fcn.0062023e
add ebp, 0x158
mov esp, ebp
pop ebp
ret
Function at 0x56e6a0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661110
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0
lea edi, [esi + 0x3650]
push 0x3ff
push 0
push edi
call fcn.00620920
add esp, 0xc
push str.recv___PORT
push edi
mov ecx, esi
call fcn.0056d4f0
test eax, eax
jne 0x56e7e2
push str.Reply_on_PORT:_n
mov ecx, esi
call fcn.00561d40
push edi
mov ecx, esi
call fcn.00561d40
mov ecx, esi
cmp byte [edi], 0x32
je 0x56e76f
push 1
mov eax, dword [0x75ea98]
push eax
call fcn.00562560
mov ecx, dword [esi + 0x3a50]
push ecx
call sub.WS2_32.dll_closesocket
mov dword [esi + 0x3a50], 0xffffffff
push edi
mov ecx, dword [esi + 0xb4]
call fcn.0056ae40
mov edx, dword [esi + 0x3214]
mov eax, 0x7550
mov dword [edx + 0x14c], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, 1
push edi
mov eax, dword [0x75eb48]
push eax
call fcn.00562560
mov eax, dword [esi + 0x3a50]
mov dword [esi + 0x3240], eax
mov dword [esi + 0x324c], edi
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0x14]
push ecx
push 0x8004667e
push eax
call sub.WS2_32.dll_ioctlsocket
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x56e980
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661150
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x12c], esi
mov edi, dword [ebp + 8]
mov dword [ebp - 4], 0
push 1
mov eax, dword [0x75eb5c]
push eax
call fcn.00562560
push 0x67b29c
push edi
push str.TYPE__s_s
lea ecx, [ebp - 0x128]
push ecx
call fcn.0062311b
add esp, 0x10
lea eax, [ebp - 0x128]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x56e9f3
sub eax, edx
push str.send___TYPE
push 0
push eax
lea edx, [ebp - 0x128]
push edx
mov eax, dword [esi + 0x3204]
push eax
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
test eax, eax
je 0x56ea31
mov ecx, dword [esi + 0x3214]
mov dword [ecx + 0x14c], eax
jmp 0x56ea89
lea ecx, [esi + 0x31f8]
cmp byte [edi], 0x41
jne 0x56ea40
push 0x11
jmp 0x56ea42
push 7
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
xor eax, eax
jmp 0x56ea89
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0062023e
mov esp, ebp
pop ebp
ret 4
Function at 0x56ebd0
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
lea ebp, [esp - 0x118]
sub esp, 0x118
push 0xffffffffffffffff
push 0x6611a0
mov eax, dword fs:[0]
push eax
sub esp, 0x10
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x114], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
push 1
mov eax, dword [0x75eb68]
push eax
call fcn.00562560
mov edi, dword [ebp + 0x120]
mov ecx, dword [ebp + 0x124]
cmp byte [esi + 0xd8], bl
je 0x56ec3c
add edi, 0x30
adc ecx, ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], ecx
cmp byte [esi + 0xdf], bl
je 0x56ec6d
mov eax, dword [esi + 0x194]
cdq
cmp ecx, edx
jl 0x56ec67
jg 0x56ec5b
cmp edi, eax
jb 0x56ec67
sub edi, eax
mov dword [ebp - 0x18], edi
sbb ecx, edx
mov dword [ebp - 0x14], ecx
jmp 0x56ec6d
mov byte [esi + 0xdf], bl
mov dword [esi + 0x3a70], edi
mov dword [esi + 0x3a74], ecx
push 0x67b29c
push ecx
push edi
push str.REST__I64d_s
lea ecx, [ebp]
push ecx
call fcn.0062311b
add esp, 0x14
lea edx, [ebp]
push edx
mov ecx, esi
call fcn.00561d40
lea eax, [ebp]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x56eca2
sub eax, edx
push str.send___REST
push ebx
push eax
lea eax, [ebp]
push eax
mov ecx, dword [esi + 0x3204]
push ecx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
cmp eax, ebx
je 0x56ecdc
mov edx, dword [esi + 0x3214]
mov dword [edx + 0x14c], eax
jmp 0x56ed28
push 0xa
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
xor eax, eax
jmp 0x56ed28
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x114]
xor ecx, ebp
call fcn.0062023e
add ebp, 0x118
mov esp, ebp
pop ebp
ret 8
Function at 0x56efd0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
lea ebp, [esp - 0x2da4]
mov eax, 0x2da4
call fcn.00621970
push 0xffffffffffffffff
push 0x661210
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x758898]
xor eax, ebp
mov dword [ebp + 0x2da0], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ecx
mov ebx, dword [ebp + 0x2db0]
mov edi, dword [ebp + 0x2db4]
mov dword [ebp - 0x18], edi
xor esi, esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], esi
push 0x2da0
push esi
lea eax, [ebp]
push eax
call fcn.00620920
mov ecx, dword [edi]
push ecx
push esi
mov edx, dword [ebx]
push edx
call fcn.00620920
add esp, 0x18
jmp 0x56f050
push 0
push 0x2da0
lea eax, [ebp]
push eax
mov ecx, dword [ebp + 0x2dac]
push ecx
call sub.WS2_32.dll_recv
mov dword [ebp - 0x28], eax
test eax, eax
jle 0x56f100
mov edx, dword [ebp - 0x14]
lea esi, [eax + edx]
mov dword [ebp - 0x24], esi
cmp esi, dword [edi]
jle 0x56f0e5
mov eax, dword [ebx]
mov dword [ebp - 0x20], eax
lea edi, [esi + esi]
push edi
call fcn.005f4522
add esp, 4
mov esi, eax
test esi, esi
jne 0x56f0b1
push 1
mov ecx, dword [0x75e9d4]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.00562560
mov eax, 0x753b
jmp 0x56f134
push edi
push 0
push esi
call fcn.00620920
mov edx, dword [ebp - 0x18]
mov eax, dword [edx]
push eax
mov ecx, dword [ebx]
push ecx
push esi
call fcn.00621de0
mov dword [ebx], esi
mov edx, dword [ebp - 0x18]
mov dword [edx], edi
mov eax, dword [ebp - 0x20]
push eax
call fcn.005f4517
add esp, 0x1c
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x24]
push eax
lea ecx, [ebp]
push ecx
mov edx, dword [ebx]
add edx, dword [ebp - 0x14]
push edx
call fcn.00621de0
add esp, 0xc
mov dword [ebp - 0x14], esi
jmp 0x56f050
xor eax, eax
jmp 0x56f134
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x2da0]
xor ecx, ebp
call fcn.0062023e
add ebp, 0x2da4
mov esp, ebp
pop ebp
ret 0xc
Function at 0x5709f0
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6614b8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi + 0x19c]
cmp dword [eax], ebx
je 0x570b4a
cmp dword [eax + 0x168], ebx
je 0x570b4a
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
push 1
mov eax, dword [0x75eb14]
push eax
mov ecx, esi
call fcn.00562560
push 0x67b29c
mov ecx, dword [esi + 0x19c]
mov edx, dword [ecx + 0x168]
push edx
push str.USER__s_s
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0x10
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, esi
call fcn.00561d40
mov edx, dword [ebp - 0x14]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x570a90
sub eax, edi
push str.send___Proxy_USER_n
push ebx
push eax
push edx
mov edx, dword [esi + 0x3204]
push edx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
mov edi, eax
cmp edi, ebx
je 0x570ae6
mov eax, dword [esi + 0x3214]
mov dword [eax + 0x14c], edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x14
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x570b60
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6614e8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
push 1
mov eax, dword [0x75eb18]
push eax
mov ecx, esi
call fcn.00562560
push 0x67b29c
mov ecx, dword [esi + 0xc8]
mov edx, dword [ecx + 0x10]
push edx
push str.PASS__s_s
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0x10
mov edx, dword [ebp - 0x14]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x570bd8
sub eax, edi
push str.send___PASS_n
push ebx
push eax
push edx
mov ecx, dword [esi + 0x3204]
push ecx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
mov edi, eax
cmp edi, ebx
je 0x570c2e
mov edx, dword [esi + 0x3214]
mov dword [edx + 0x14c], edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 3
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x570cb0
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661518
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi + 0x19c]
cmp dword [eax], ebx
je 0x570dff
cmp dword [eax + 0x16c], ebx
je 0x570dff
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
push 1
mov eax, dword [0x75eb18]
push eax
mov ecx, esi
call fcn.00562560
push 0x67b29c
mov ecx, dword [esi + 0x19c]
mov edx, dword [ecx + 0x16c]
push edx
push str.PASS__s_s
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0x10
mov edx, dword [ebp - 0x14]
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x570d45
sub eax, edi
push str.send___proxy_PASS_n
push ebx
push eax
push edx
mov ecx, dword [esi + 0x3204]
push ecx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
mov edi, eax
cmp edi, ebx
je 0x570d9b
mov edx, dword [esi + 0x3214]
mov dword [edx + 0x14c], edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x15
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x571610
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6615d8
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
push 1
mov eax, dword [0x75eaf4]
push eax
mov ecx, esi
call fcn.00562560
mov ecx, dword [esi + 0xc8]
mov eax, dword [ecx + 4]
push 0x67b29c
push 0x67b29c
cmp eax, ebx
je 0x57168b
push eax
push str.CWD__s_sTYPE_I_s
lea edx, [ebp - 0x14]
push edx
call fcn.00402f80
add esp, 0x14
jmp 0x57169c
push str.TYPE_I_sNOOP_s
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0x10
mov dword [esi + 0xa4], 0xb
mov ecx, esi
call fcn.00561f60
push 0x3ff
push ebx
lea ecx, [esi + 0x3250]
push ecx
call fcn.00620920
add esp, 0xc
mov edx, dword [ebp - 0x14]
mov eax, edx
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x5716d0
sub eax, edi
push str.send___test_sequence
push ebx
push eax
push edx
mov edx, dword [esi + 0x3204]
push edx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
mov edi, eax
cmp edi, ebx
je 0x571707
mov eax, dword [esi + 0x3214]
mov dword [eax + 0x14c], edi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x571830
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x661631
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x28], esi
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x1c]
call fcn.00402510
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00402510
mov byte [ebp - 4], 2
mov eax, dword [esi + 0x19c]
cmp dword [eax], ebx
je 0x5718db
mov ecx, dword [esi + 0xc8]
mov eax, dword [ecx + 0x14]
cmp eax, 0x15
je 0x5718ac
push eax
push str.:_ld
lea edx, [ebp - 0x18]
push edx
call fcn.00402f80
add esp, 0xc
jmp 0x5718b9
push 0x67997c
lea ecx, [ebp - 0x18]
call fcn.0054f250
mov eax, dword [esi + 0xc8]
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [eax]
push edx
mov eax, dword [eax + 0xc]
push eax
push str._s__s_s
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00402f80
add esp, 0x14
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 3
push 1
mov edx, dword [0x75eb14]
push edx
mov ecx, esi
call fcn.00562560
mov eax, dword [esi + 0x19c]
cmp dword [eax], ebx
je 0x571906
mov eax, dword [ebp - 0x1c]
jmp 0x571926
mov ecx, dword [esi + 0xc8]
mov edx, dword [ecx + 0xc]
push edx
lea ecx, [ebp - 0x24]
call fcn.004030c0
mov byte [ebp - 4], 4
mov ebx, 1
mov dword [ebp - 0x20], ebx
mov eax, dword [eax]
push 0x67b29c
push eax
push str.USER__s_s
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0x10
mov dword [ebp - 4], 3
test bl, 1
je 0x571957
and ebx, 0xfffffffe
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x24]
call fcn.00402580
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, esi
call fcn.00561d40
mov edx, dword [ebp - 0x14]
mov eax, edx
lea edi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x571970
sub eax, edi
push str.send___USER_n
push 0
push eax
push edx
mov edx, dword [esi + 0x3204]
push edx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
mov edi, eax
test edi, edi
je 0x5719e0
mov eax, dword [esi + 0x3214]
mov dword [eax + 0x14c], edi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.00402580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00402580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00402580
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 2
lea ecx, [esi + 0x31f8]
call fcn.005a9ba0
mov ecx, esi
call fcn.00561f60
mov dword [esi + 0xa4], 4
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14]
call fcn.00402580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18]
call fcn.00402580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.00402580
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret