joyce8/EMBER2024-capa huggingface dataset:
Function at 0x64066a30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408e612
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov eax, dword [ecx + 4]
mov ecx, dword [eax + 0x80]
test ecx, ecx
je 0x64066b01
mov eax, dword [esp + 0x38]
cmp eax, 7
jne 0x64066ab5
push 0
lea eax, [esp + 0xc]
push eax
call sym.QtNetwork4.dll_public:_class_QVariant___thiscall_QAbstractSocket::socketOption_enum_QAbstractSocket::SocketOption_
push 0
mov ecx, eax
mov dword [esp + 0x34], 0
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QVariant::toInt_bool__const]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
cmp eax, 8
jne 0x64066b01
push 1
lea eax, [esp + 0x1c]
push eax
call sym.QtNetwork4.dll_public:_class_QVariant___thiscall_QAbstractSocket::socketOption_enum_QAbstractSocket::SocketOption_
push 0
mov ecx, eax
mov dword [esp + 0x34], 1
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QVariant::toInt_bool__const]
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xffffffff
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
or eax, 0xffffffff
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
Function at 0x64069350
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push 0xffffffffffffffff
push 0x6408e23b
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [esp + 0x2c]
lea ecx, [edi + 4]
mov esi, dword [sym.imp.QtCore4.dll_public:_class_QByteArray___thiscall_QString::toLatin1_void_]
mov byte [eax], 0
lea eax, [esp + 0x2c]
push eax
call esi
lea eax, [esp + 0x10]
mov dword [esp + 0x20], 0
push eax
lea ecx, [edi + 8]
call esi
push 0
lea ecx, [esp + 0x14]
mov byte [esp + 0x24], 1
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
lea ecx, [esp + 0x30]
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
add esi, 3
lea ecx, [esp + 0x18]
add eax, esi
push eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QByteArray::constructor_int__char_]
lea ecx, [esp + 0x14]
mov byte [esp + 0x20], 2
call dword [sym.imp.QtCore4.dll_public:_char____thiscall_QByteArray::data_void_]
mov edi, eax
lea ecx, [esp + 0x2c]
mov byte [edi], 1
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
lea ecx, [esp + 0x2c]
mov byte [edi + 1], al
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
push eax
lea ecx, [esp + 0x30]
call dword [sym.imp.QtCore4.dll_public:_char____thiscall_QByteArray::data_void_]
push eax
lea eax, [edi + 2]
push eax
call sub.MSVCR120.dll_memcpy
add esp, 0xc
lea ecx, [esp + 0x2c]
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
lea ecx, [esp + 0x10]
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
mov byte [esi + edi + 2], al
lea ecx, [esp + 0x10]
add esi, 3
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.QtCore4.dll_public:_char____thiscall_QByteArray::data_void_]
push eax
lea eax, [esi + edi]
push eax
call sub.MSVCR120.dll_memcpy
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x20]
add esp, 0xc
push eax
call dword [sym.imp.QtCore4.dll_public:_long_long___int64____thiscall_QIODevice::write_class_QByteArray_const__]
lea ecx, [esp + 0x14]
mov esi, eax
mov edi, edx
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QByteArray::size_void_const]
cdq
cmp esi, eax
jne 0x6406947a
cmp edi, edx
jne 0x6406947a
mov bl, 1
jmp 0x6406947c
xor bl, bl
lea ecx, [esp + 0x14]
mov byte [esp + 0x20], 1
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QByteArray::destructor_void_]
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QByteArray::destructor_void_]
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QByteArray::destructor_void_]
mov al, bl
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret 8
Function at 0x6406b260
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6408e612
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
mov eax, dword [0x640ca240]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov eax, dword [ecx + 4]
mov eax, dword [eax + 0x8c]
test eax, eax
je 0x6406b33b
mov ecx, dword [eax]
test ecx, ecx
je 0x6406b33b
mov eax, dword [esp + 0x38]
cmp eax, 7
jne 0x6406b2ef
push 0
lea eax, [esp + 0xc]
push eax
call sym.QtNetwork4.dll_public:_class_QVariant___thiscall_QAbstractSocket::socketOption_enum_QAbstractSocket::SocketOption_
push 0
mov ecx, eax
mov dword [esp + 0x34], 0
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QVariant::toInt_bool__const]
lea ecx, [esp + 8]
mov dword [esp + 0x30], 0xffffffff
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
cmp eax, 8
jne 0x6406b33b
push 1
lea eax, [esp + 0x1c]
push eax
call sym.QtNetwork4.dll_public:_class_QVariant___thiscall_QAbstractSocket::socketOption_enum_QAbstractSocket::SocketOption_
push 0
mov ecx, eax
mov dword [esp + 0x34], 1
call dword [sym.imp.QtCore4.dll_public:_int___thiscall_QVariant::toInt_bool__const]
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], 0xffffffff
mov esi, eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::destructor_void_]
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
or eax, 0xffffffff
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0x2c
ret 4
Function at 0x640759e0
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, dword [ecx]
push esi
mov esi, dword [ecx + 4]
mov eax, dword [eax + 0x38]
call eax
test al, al
jne 0x64075a04
push str.QNativeSocketEngine::bytesAvailable___was_called_on_an_uninitialized_socket_device
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
or eax, 0xffffffff
or edx, eax
pop esi
ret
cmp dword [esi + 0x58], 0
jne 0x64075a1e
push str.QNativeSocketEngine::bytesAvailable___was_called_in_QAbstractSocket::UnconnectedState
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor eax, eax
xor edx, edx
pop esi
ret
mov ecx, esi
pop esi
jmp 0x64077d90
sub esp, 0x1c
push esi
push 0
push 0
lea eax, [esp + 0x14]
mov dword [esp + 0x10], 0
push eax
push 4
lea eax, [esp + 0x18]
mov dword [esp + 0x20], 0
push eax
push 4
lea eax, [esp + 0x28]
mov dword [esp + 0x24], 0
mov esi, ecx
push eax
push 0x4004667f
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
jne 0x64077de8
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
or eax, 0xffffffff
or edx, eax
pop esi
add esp, 0x1c
ret
mov eax, dword [esp + 8]
cmp eax, 1
jne 0x64077e3f
cmp dword [esi + 0x5c], eax
jne 0x64077e3f
push 0
push 0
push 0
push 0
lea eax, [esp + 0x17]
mov dword [esp + 0x28], 1
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x24]
push eax
push 0
push 1
lea eax, [esp + 0x34]
mov dword [esp + 0x30], 2
push eax
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
cmp eax, 0xffffffff
jne 0x64077e3b
xor eax, eax
xor edx, edx
pop esi
add esp, 0x1c
ret
mov eax, dword [esp + 8]
xor edx, edx
pop esi
add esp, 0x1c
ret
Function at 0x64075f00
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, dword [ecx]
push esi
mov esi, dword [ecx + 4]
mov eax, dword [eax + 0x38]
call eax
test al, al
jne 0x64075f21
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_on_an_uninitialized_socket_device
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
cmp dword [esi + 0x58], 0
jne 0x64075f39
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_in_QAbstractSocket::UnconnectedState
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
cmp dword [esi + 0x5c], 1
je 0x64075f51
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_by_a_socket_other_than_QAbstractSocket::UdpSocket
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
mov ecx, esi
pop esi
jmp 0x64078060
sub esp, 0x9c
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x98], eax
push esi
push edi
push 0x80
lea eax, [esp + 0x24]
mov dword [esp + 0x14], 0x80
push 0
push eax
mov edi, ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov byte [esp + 0xa], 0
lea eax, [esp + 0xb]
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push 0
push 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], 2
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
push 1
lea eax, [esp + 0x34]
push eax
push dword [edi + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
mov esi, eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp esi, 0xffffffff
jne 0x64078147
cmp eax, 0x2738
je 0x64078147
cmp eax, 0x2746
jne 0x6407812c
push 0
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x14], 0
push eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
push ecx
push 1
lea ecx, [esp + 0x34]
push ecx
push dword [edi + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
mov al, byte [esp + 0xa]
pop edi
pop esi
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.6407f184
add esp, 0x9c
ret
mov ecx, dword [esp + 0xa0]
mov al, 1
pop edi
pop esi
xor ecx, esp
call fcn.6407f184
add esp, 0x9c
ret
Function at 0x640764a0
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, dword [ecx]
push esi
mov esi, dword [ecx + 4]
mov eax, dword [eax + 0x38]
call eax
test al, al
jne 0x640764c4
push str.QNativeSocketEngine::pendingDatagramSize___was_called_on_an_uninitialized_socket_device
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
or eax, 0xffffffff
or edx, eax
pop esi
ret
cmp dword [esi + 0x5c], 1
je 0x640764de
push str.QNativeSocketEngine::pendingDatagramSize___was_called_by_a_socket_other_than_QAbstractSocket::UdpSocket
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor eax, eax
xor edx, edx
pop esi
ret
mov ecx, esi
pop esi
jmp 0x64078460
sub esp, 8
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov ebx, 5
xor ecx, ecx
mov edx, 8
mov eax, ebx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.6407f09c
add esp, 4
xor ecx, ecx
mov edi, eax
test ebx, ebx
je 0x640784b4
jmp 0x640784a0
mov dword [edi + ecx*8 + 4], 0x640cb718
mov dword [edi + ecx*8], 0x2000
inc ecx
cmp ecx, ebx
jb 0x640784a0
push 0
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 2
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0
push eax
push ebx
push edi
push dword [ebp + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecv]
mov esi, eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp esi, 0xffffffff
jne 0x64078509
cmp eax, 0x2738
jne 0x64078502
push edi
add ebx, 5
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
add esp, 4
jmp 0x6407846e
or esi, 0xffffffff
or ebx, esi
jmp 0x6407850f
mov esi, dword [esp + 0x10]
xor ebx, ebx
test edi, edi
je 0x6407851c
push edi
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
add esp, 4
pop edi
mov eax, esi
mov edx, ebx
pop esi
pop ebp
pop ebx
add esp, 8
ret
Function at 0x64076d80
Capabilities:
Set socket configuration

Disassembly:
mov ecx, dword [ecx + 4]
jmp 0x64079270
sub esp, 8
push esi
mov esi, ecx
mov ecx, dword [esi + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
test al, al
je 0x64079368
mov edx, dword [esp + 0x10]
xor eax, eax
mov ecx, 0xffff
cmp edx, 0xa
ja case.default.0x6407929c
jmp dword [edx*4 + 0x64079374]
mov eax, 0x1002
jmp case.default.0x6407929c
mov eax, 0x1001
jmp case.default.0x6407929c
mov eax, 0x20
jmp case.default.0x6407929c
mov eax, dword [esp + 0x14]
push 0
push 0
mov dword [esp + 0xc], eax
lea eax, [esp + 0x18]
push eax
push 4
lea eax, [esp + 0x18]
mov dword [esp + 0x20], 0
push eax
push 4
lea eax, [esp + 0x1c]
push eax
push 0x8004667e
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
je 0x64079362
mov al, 1
pop esi
add esp, 8
ret 8
mov eax, 4
jmp case.default.0x6407929c
mov eax, 0xfffffffb
jmp case.default.0x6407929c
mov eax, 0x100
jmp case.default.0x6407929c
mov ecx, 6
lea eax, [ecx - 5]
jmp case.default.0x6407929c
mov eax, 8
jmp case.default.0x6407929c
cmp dword [esi + 0x60], 1
mov eax, 0xa
jne 0x6407934a
lea ecx, [eax + 0x1f]
jmp case.default.0x6407929c
cmp dword [esi + 0x60], 1
mov eax, 0xb
jne 0x6407934a
lea ecx, [eax + 0x1e]
jmp case.default.0x6407929c
xor ecx, ecx
push 4
lea edx, [esp + 0x18]
push edx
push eax
push ecx
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_setsockopt]
test eax, eax
je 0x640792fb
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
xor al, al
pop esi
add esp, 8
ret 8
Function at 0x640775f0
Capabilities:
Initialize winsock library

Disassembly:
sub esp, 0x194
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x190], eax
push esi
mov esi, ecx
lea eax, [esp + 4]
push eax
push 2
mov dword [esi], 0
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x64077644
push 0x6409b664
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
mov eax, esi
pop esi
mov ecx, dword [esp + 0x190]
xor ecx, esp
call fcn.6407f184
add esp, 0x194
ret
mov ecx, dword [esp + 0x194]
mov eax, esi
mov dword [esi], 0x20
pop esi
xor ecx, esp
call fcn.6407f184
add esp, 0x194
ret

Function at 0x64077680
Capabilities:
Create tcp socket
Create udp socket

Disassembly:
mov eax, dword [esp + 4]
push esi
push edi
dec eax
mov esi, ecx
push 1
neg eax
mov ecx, 0x17
push 0
sbb eax, eax
push 0
add eax, 2
cmp dword [esp + 0x1c], 1
push 0
push eax
mov eax, 2
cmove eax, ecx
push eax
call dword [sym.imp.WS2_32.dll_WSASocketW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x640776fb
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
add eax, 0xffffd8da
cmp eax, 0x21
ja case.0x640776d0.10023
movzx eax, byte [eax + 0x64077754]
jmp dword [eax*4 + 0x64077748]
push 7
push 0xa
mov ecx, esi
call fcn.640766e0
pop edi
xor al, al
pop esi
ret 8
push 5
push 4
mov ecx, esi
call fcn.640766e0
pop edi
xor al, al
pop esi
ret 8
cmp dword [esp + 0xc], 1
jne 0x6407773d
push 0
push 0
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 0
push 0
push 4
lea eax, [esp + 0x28]
mov dword [esp + 0x28], 1
push eax
push 0x9800000c
push edi
call dword [sym.imp.WS2_32.dll_WSAIoctl]
cmp eax, 0xffffffff
jne 0x6407773d
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x78], edi
mov al, 1
pop edi
pop esi
ret 8
Function at 0x64077780
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
sub esp, 0x88
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x84], eax
push ebx
push ebp
push esi
mov esi, ecx
xor eax, eax
lea ebx, [esi + 0x68]
mov word [ebx], ax
push edi
lea ebp, [esi + 0x64]
mov ecx, ebp
call sym.QtNetwork4.dll_public:_void___thiscall_QHostAddress::clear_void_
xor ecx, ecx
lea eax, [esi + 0x6c]
mov word [esi + 0x70], cx
mov ecx, eax
call sym.QtNetwork4.dll_public:_void___thiscall_QHostAddress::clear_void_
mov edi, dword [esi + 0x78]
cmp edi, 0xffffffff
je 0x64077892
push 0x80
lea eax, [esp + 0x18]
mov dword [esp + 0x14], 0x80
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x18]
push eax
push edi
call dword [sym.imp.WS2_32.dll_getsockname]
mov edi, dword [sym.imp.WS2_32.dll_WSAGetLastError]
test eax, eax
jne 0x6407787e
push ebp
push ebx
lea eax, [esp + 0x1c]
push eax
push dword [esi + 0x78]
call fcn.64078f20
movzx eax, word [esp + 0x24]
add esp, 0x10
sub eax, 2
je 0x64077875
sub eax, 0x15
je 0x6407786c
mov dword [esi + 0x60], 0xffffffff
push 0x80
lea eax, [esp + 0x18]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x18]
push eax
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_getpeername]
test eax, eax
jne 0x64077896
lea eax, [esi + 0x6c]
push eax
lea eax, [esi + 0x70]
push eax
lea eax, [esp + 0x1c]
push eax
push dword [esi + 0x78]
call fcn.64078f20
add esp, 0x10
jmp 0x64077898
mov dword [esi + 0x60], 1
jmp 0x64077827
mov dword [esi + 0x60], 0
jmp 0x64077827
call edi
cmp eax, 0x2736
jne 0x64077827
push 8
push 0xa
mov ecx, esi
call fcn.640766e0
xor al, al
jmp 0x640778a8
call edi
push dword [esi + 0x78]
call fcn.64079090
mov dword [esi + 0x5c], eax
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x94]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.6407f184
add esp, 0x88
ret
Function at 0x64077e60
Capabilities:
Connect socket

Disassembly:
sub esp, 0x38
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x3c]
push esi
mov esi, ecx
mov dword [esp + 4], 0
lea ecx, [esp + 8]
mov dword [esp + 8], 0
push ecx
lea ecx, [esp + 8]
push ecx
push eax
push dword [esp + 0x50]
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x20]
push eax
push dword [esi + 0x78]
call fcn.640790f0
add esp, 0x1c
push 0
push 0
push 0
push 0
push dword [esp + 0x18]
push dword [esp + 0x18]
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_WSAConnect]
cmp eax, 0xffffffff
jne 0x64077fd7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
add eax, 0xffffd8e3
cmp eax, 0x34
ja case.0x64077ee6.10014
movzx eax, byte [eax + 0x64078020]
jmp dword [eax*4 + 0x64077ff4]
mov dword [esi + 0x58], 3
jmp case.0x64077ee6.10014
lea eax, [esp + 8]
mov dword [esp + 4], 0
push eax
lea eax, [esp + 8]
mov dword [esp + 0xc], 4
push eax
push 0x1007
push 0xffff
push dword [esi + 0x78]
call dword [sym.imp.WS2_32.dll_getsockopt]
test eax, eax
jne case.0x64077ee6.10036
mov eax, dword [esp + 4]
cmp eax, 0x274d
jne 0x64077f49
push 0xd
push 0
mov ecx, esi
call fcn.640766e0
mov dword [esi + 0x58], 0
jmp case.0x64077ee6.10014
cmp eax, 0x274c
jne 0x64077f64
push 0xc
push 7
mov ecx, esi
call fcn.640766e0
mov dword [esi + 0x58], 0
jmp case.0x64077ee6.10014
cmp eax, 0x2751
jne 0x64077f6f
push 9
jmp 0x64077f52
cmp eax, 0x2741
jne case.0x64077ee6.10036
push 0xf
jmp 0x64077f52
push 8
push 0xb
mov ecx, esi
call fcn.640766e0
mov dword [esi + 0x58], 2
jmp case.0x64077ee6.10014
push 0xe
push 7
jmp 0x64077fb6
push 0xc
push 7
jmp 0x64077fb6
push 0xb
push 3
mov ecx, esi
call fcn.640766e0
mov dword [esi + 0x58], 0
jmp case.0x64077ee6.10014
push 0xa
jmp 0x64077f52
push 8
push 0xb
mov ecx, esi
call fcn.640766e0
cmp dword [esi + 0x58], 3
je 0x64077fd7
xor al, al
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.6407f184
add esp, 0x38
ret 8
mov ecx, dword [esp + 0x38]
mov al, 1
mov dword [esi + 0x58], 3
pop esi
xor ecx, esp
call fcn.6407f184
add esp, 0x38
ret 8
Function at 0x64078060
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, dword [ecx]
push esi
mov esi, dword [ecx + 4]
mov eax, dword [eax + 0x38]
call eax
test al, al
jne 0x64075f21
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_on_an_uninitialized_socket_device
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
cmp dword [esi + 0x58], 0
jne 0x64075f39
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_in_QAbstractSocket::UnconnectedState
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
cmp dword [esi + 0x5c], 1
je 0x64075f51
push str.QNativeSocketEngine::hasPendingDatagrams___was_called_by_a_socket_other_than_QAbstractSocket::UdpSocket
call dword [sym.imp.QtCore4.dll_void___cdecl_qWarning_char_const__]
add esp, 4
xor al, al
pop esi
ret
mov ecx, esi
pop esi
jmp 0x64078060
sub esp, 0x9c
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x98], eax
push esi
push edi
push 0x80
lea eax, [esp + 0x24]
mov dword [esp + 0x14], 0x80
push 0
push eax
mov edi, ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov byte [esp + 0xa], 0
lea eax, [esp + 0xb]
mov dword [esp + 0x18], 1
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x14], 0
push 0
push 0
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], 2
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
push 1
lea eax, [esp + 0x34]
push eax
push dword [edi + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
mov esi, eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp esi, 0xffffffff
jne 0x64078147
cmp eax, 0x2738
je 0x64078147
cmp eax, 0x2746
jne 0x6407812c
push 0
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x14], 0
push eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x28]
push ecx
push 1
lea ecx, [esp + 0x34]
push ecx
push dword [edi + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
mov al, byte [esp + 0xa]
pop edi
pop esi
mov ecx, dword [esp + 0x98]
xor ecx, esp
call fcn.6407f184
add esp, 0x9c
ret
mov ecx, dword [esp + 0xa0]
mov al, 1
pop edi
pop esi
xor ecx, esp
call fcn.6407f184
add esp, 0x9c
ret
Function at 0x64078530
Capabilities:
Receive data
Receive data on socket

Disassembly:
sub esp, 8
mov eax, dword [esp + 0xc]
push esi
push edi
push 0
mov dword [esp + 0x10], eax
or esi, 0xffffffff
mov eax, dword [esp + 0x1c]
or edi, esi
push 0
mov dword [esp + 0x10], eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0
push eax
push 1
lea eax, [esp + 0x1c]
mov dword [esp + 0x28], 0
push eax
push dword [ecx + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecv]
cmp eax, esi
jne 0x640785b0
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
je 0x640785bd
add eax, 0xffffd8bb
cmp eax, 1
ja 0x640785d7
xorps xmm0, xmm0
movlpd qword [esp + 0x18], xmm0
mov edi, dword [esp + 0x1c]
mov edx, edi
mov esi, dword [esp + 0x18]
mov eax, esi
pop edi
pop esi
add esp, 8
ret 0xc
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x640785d1
or edi, 0xffffffff
mov esi, 0xfffffffe
mov edx, edi
mov eax, esi
pop edi
pop esi
add esp, 8
ret 0xc
mov esi, dword [esp + 0x14]
xor edi, edi
mov edx, edi
mov eax, esi
pop edi
pop esi
add esp, 8
ret 0xc

Function at 0x640785f0
Capabilities:
Receive data
Receive data on socket

Disassembly:
sub esp, 0x9c
mov eax, dword [0x640ca240]
xor eax, esp
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xb0]
push ebx
push ebp
mov ebp, dword [esp + 0xb4]
mov ebx, ecx
push esi
mov esi, dword [esp + 0xac]
push edi
push 0x80
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x2c]
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov edi, dword [esp + 0xb4]
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 0x80
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
push 0
push 0
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0x20], 0
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x20], 0
push eax
lea eax, [esp + 0x24]
push eax
push 1
lea eax, [esp + 0x3c]
push eax
push dword [ebx + 0x78]
call dword [sym.imp.WS2_32.dll_WSARecvFrom]
cmp eax, 0xffffffff
jne 0x640786c7
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2738
jne 0x640786b5
mov esi, dword [esp + 0xb8]
xor ecx, ecx
mov eax, dword [esp + 0x10]
cmp ecx, esi
jl 0x640786af
jg 0x640786cd
cmp eax, edi
ja 0x640786cd
mov edi, eax
mov esi, ecx
jmp 0x640786cd
push 0x13
push 7
mov ecx, ebx
call fcn.640766e0
or edi, 0xffffffff
or esi, edi
jmp 0x640786cd
mov edi, dword [esp + 0x10]
xor esi, esi
push ebp
push dword [esp + 0x1c]
lea eax, [esp + 0x30]
push eax
push dword [ebx + 0x78]
call fcn.64078f20
mov ecx, dword [esp + 0xb8]
add esp, 0x10
mov eax, edi
mov edx, esi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.6407f184
add esp, 0x9c
ret 0x14