joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400140b0
Capabilities:
Set console window title
Write file on windows

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, qword [0x1402840b0]
mov qword [rsp + 0x50], r8
lea r8, [rsp + 0x50]
mov qword [rsp + 0x58], r9
mov rax, qword [rbx]
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x20], r8
call fcn.14015d1b0
mov rdx, qword [rsp + 0x28]
xor rdx, qword [rbx]
jne 0x140013d3f
add rsp, 0x30
pop rbx
ret
call fcn.1400c4db0
nop
nop
nop word cs:[rax + rax]
push rsi
push rbx
sub rsp, 0x28
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea rcx, str.VLC_media_player_version_3.0.18
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov rbx, qword [sym.imp.msvcrt.dll___iob_func]
call rbx
lea rdx, [0x14017d3e0]
lea r8, [rax + 0x60]
lea rcx, [0x14017d3e2]
call sub.msvcrt.dll_freopen
call rbx
lea rdx, [0x14017d3ea]
lea rcx, str.CONIN_
mov r8, rax
call sub.msvcrt.dll_freopen
call rbx
lea rdx, [0x14017d3f3]
lea r8, [rax + 0x30]
lea rcx, str.vlc_help.txt
call sub.msvcrt.dll_freopen
test rax, rax
je 0x140014170
call rbx
lea rcx, [0x14017d403]
lea r9, [rax + 0x30]
mov r8d, 3
mov edx, 1
call sub.msvcrt.dll_fwrite
lea rcx, str._nDumped_content_to_vlc_help.txt_file._n
call sym.libvlccore.dll_vlc_gettext
mov rsi, rax
call rbx
lea rcx, [rax + 0x60]
mov rdx, rsi
add rsp, 0x28
pop rbx
pop rsi
jmp 0x140013d00
call rbx
lea rdx, [0x14017d3e0]
lea r8, [rax + 0x30]
lea rcx, [0x14017d3e2]
add rsp, 0x28
pop rbx
pop rsi
jmp sub.msvcrt.dll_freopen
Function at 0x140015610
Capabilities:
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov rax, qword [0x1402840b0]
mov byte [rsp + 0x2f], cl
lea rcx, [0x14017d63a]
mov rdi, qword [rax]
mov qword [rsp + 0x38], rdi
xor edi, edi
call sub.msvcrt.dll_getenv
test rax, rax
je 0x14001575b
lea rcx, [rsp + 0x30]
xor r13d, r13d
lea r14, str.___s__s_n
call sym.libvlccore.dll_module_list_get
cmp qword [rsp + 0x30], 0
mov qword [rsp + 0x20], rax
je 0x14001571e
nop
mov rdx, qword [rsp + 0x20]
mov rdi, qword [rdx + r13*8]
mov rcx, rdi
call sym.libvlccore.dll_module_get_object
mov rdx, qword [rdi + 0x28]
mov rcx, rdi
mov rbp, rax
call sym.libvlccore.dll_module_gettext
lea rcx, str.____22s__s_n
mov r8, rax
mov rdx, rbp
call fcn.140013d50
cmp byte [rsp + 0x2f], 0
je 0x14001570f
mov esi, dword [rdi + 0x10]
xor r15d, r15d
mov r12, qword [rdi + 0x18]
test esi, esi
jne 0x1400156c9
jmp 0x1400156f6
add r15d, 1
cmp r15d, esi
jae 0x1400156f6
mov ecx, r15d
mov rdx, rbp
mov rbx, qword [r12 + rcx*8]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x1400156c0
mov rdx, rbx
mov rcx, r14
add r15d, 1
call fcn.140013d50
mov esi, dword [rdi + 0x10]
cmp r15d, esi
jb 0x1400156c9
mov rdx, qword [rdi + 0x38]
test rdx, rdx
je 0x14001570f
mov r8d, dword [rdi + 0x40]
lea rcx, str.___c__s___d__n
call fcn.140013d50
add r13, 1
cmp r13, qword [rsp + 0x30]
jb 0x140015670
mov rcx, qword [rsp + 0x20]
call sym.libvlccore.dll_module_list_free
lea rcx, [0x14017d63a]
call sub.msvcrt.dll_getenv
test rax, rax
je 0x140015773
mov r8, qword [0x1402840b0]
mov rdi, qword [rsp + 0x38]
xor rdi, qword [r8]
jne 0x1400157ab
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x14001564a
call fcn.1400140b0
jmp 0x14001564a
lea rcx, str._nPress_the_RETURN_key_to_continue..._n
call sym.libvlccore.dll_vlc_gettext
mov r14, qword [sym.imp.msvcrt.dll___iob_func]
mov r13, rax
call r14
lea rcx, [rax + 0x60]
mov rdx, r13
call sym.libvlccore.dll_utf8_fprintf
call sub.msvcrt.dll_getchar
call r14
lea rcx, [rax + 0x30]
call sub.msvcrt.dll_fclose
jmp 0x140015739
call fcn.1400c4db0
nop
nop dword [rax + rax]
nop word cs:[rax + rax]
Function at 0x140017f60
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x50
mov rsi, qword [0x1402840b0]
mov r12, qword [rsp + 0xb0]
mov rdi, rdx
mov rax, qword [rsi]
mov qword [rsp + 0x48], rax
xor eax, eax
lea rax, [rcx + 3]
cmp rax, 1
ja 0x1400180c0
test r9, r9
je 0x140018151
mov rbx, qword [r9]
lea rbp, [0x14017e620]
lea r10, [0x14017e820]
cmp rcx, 0xfffffffffffffffe
cmovne r10, rbp
test rdi, rdi
je 0x1400181e0
mov rdx, qword [rdi]
test rdx, rdx
je 0x1400181e0
mov rcx, rdx
add rcx, qword [r8]
mov r11, rbx
add r11, qword [r12]
cmp rdx, rcx
jae 0x1400181b3
lea rbp, [0x14017dea0]
jmp 0x140018059
lea r13, [rdx + 1]
cmp rcx, r13
jbe 0x1400181e4
movzx r13d, byte [rdx + 1]
lea r14d, [r13 - 0x40]
cmp r14b, 0x3f
ja 0x140018174
sub eax, 0xc1
sub r13d, 0x40
cdqe
movsxd r13, r13d
shl rax, 6
add rax, r13
movzx r13d, word [rbp + rax*2]
test r13w, r13w
je 0x140018174
add rdx, 2
cmp r13w, 0x7f
ja 0x140018084
cmp r11, rbx
jbe 0x1400181d0
mov byte [rbx], r13b
add rbx, 1
cmp rcx, rdx
jbe 0x1400181b3
movzx r13d, byte [rdx]
mov rax, r13
movzx r13d, word [r10 + r13*2]
lea r14d, [rax + 0x3f]
cmp r14b, 0xe
jbe 0x140017ff0
test r13w, r13w
je 0x140018174
add rdx, 1
cmp r13w, 0x7f
jbe 0x140018040
cmp r13w, 0x7ff
ja 0x140018110
lea r14, [rbx + 1]
cmp r11, r14
jbe 0x1400181d0
mov eax, r13d
shr r13w, 6
add rbx, 2
and eax, 0x3f
or r13d, 0xffffffc0
or eax, 0xffffff80
mov byte [rbx - 2], r13b
mov byte [rbx - 1], al
jmp 0x140018050
test rdx, rdx
mov qword [rsp + 0x40], 0
je 0x140018160
mov rdx, qword [rdx]
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x40], rdx
lea rdx, [rsp + 0x40]
call fcn.1400e6db0
mov rcx, qword [rsp + 0x40]
mov qword [rdi], rcx
mov rdi, qword [rsp + 0x48]
xor rdi, qword [rsi]
jne 0x1400181eb
add rsp, 0x50
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
lea rax, [rbx + 2]
cmp r11, rax
jbe 0x1400181d0
mov eax, r13d
mov r14d, r13d
shr r13w, 0xc
shr ax, 6
and r14d, 0x3f
or r13d, 0xffffffe0
and eax, 0x3f
or r14d, 0xffffff80
mov byte [rbx], r13b
or eax, 0xffffff80
mov byte [rbx + 2], r14b
add rbx, 3
mov byte [rbx - 2], al
jmp 0x140018050
xor ebx, ebx
jmp 0x140017fa4
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x20], r12
call fcn.1400e6db0
jmp 0x1400180f1
mov ebp, 0x2a
sub rcx, rdx
sub r11, rbx
mov qword [rdi], rdx
mov qword [rsp + 0x38], r9
mov qword [r8], rcx
mov qword [r12], r11
call qword [sym.imp.msvcrt.dll__errno]
mov r9, qword [rsp + 0x38]
mov dword [rax], ebp
mov rax, 0xffffffffffffffff
test r9, r9
je 0x1400180f1
mov qword [r9], rbx
jmp 0x1400180f1
sub rcx, rdx
sub r11, rbx
mov qword [rdi], rdx
xor eax, eax
mov qword [r8], rcx
mov qword [r12], r11
jmp 0x1400181a2
mov ebp, 7
jmp 0x140018179
xor eax, eax
jmp 0x1400181a2
mov ebp, 0x16
jmp 0x140018179
call fcn.1400c4db0
nop
nop dword [rax + rax]
nop word cs:[rax + rax]
Function at 0x140021240
Capabilities:
Get thread local storage value

Disassembly:
push rbx
sub rsp, 0x40
mov rbx, rcx
call sym.libvlccore.dll_playlist_Lock
cmp byte [rbx + 0x12c], 0
jne 0x1400212c0
lea rax, str.deactivating_the_playlist
mov r8, qword [str.main]
lea rdx, str.playlist_Deactivate
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_playlist_thread.c
mov rcx, rbx
mov dword [rsp + 0x20], 0x53
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
mov edx, 3
call sym.libvlccore.dll_vlc_Log
lea rcx, [rbx + 0x128]
mov byte [rbx + 0x12c], 1
call sym.libvlccore.dll_vlc_cond_signal
mov rcx, rbx
call sym.libvlccore.dll_playlist_Unlock
mov rcx, qword [rbx + 0xf0]
xor edx, edx
add rsp, 0x40
pop rbx
jmp sym.libvlccore.dll_vlc_join
mov rcx, rbx
add rsp, 0x40
pop rbx
jmp sym.libvlccore.dll_playlist_Unlock
Function at 0x14004ade0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
mov rbx, qword [0x1402840b0]
mov rdi, rcx
mov rsi, rdx
mov rax, qword [rbx]
mov qword [rsp + 0x78], rax
xor eax, eax
test r8b, r8b
jne 0x14004ae1a
mov edx, dword [rdx + 0x20]
mov rcx, qword [rcx + 0x28]
xor r8d, r8d
call sub.msvcrt.dll_fseek
test eax, eax
je 0x14004ae42
mov ecx, 1
call sym.libvlccore.dll_block_Alloc
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x78]
xor rax, qword [rbx]
jne 0x14004aec2
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov r9, qword [rdi + 0x28]
lea rcx, [rsp + 0x20]
mov r8d, 1
mov edx, 0x50
call sub.msvcrt.dll_fread
cmp rax, 1
jne 0x14004ae1a
mov rcx, qword [rsp + 0x30]
call sym.libvlccore.dll_block_Alloc
test rax, rax
mov rbp, rax
je 0x14004aeb9
mov ecx, dword [rsp + 0x48]
mov r8, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x4c]
mov rdx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov dword [rbp + 0x28], ecx
mov qword [rbp + 0x40], r8
mov dword [rbp + 0x2c], r9d
mov rcx, qword [rbp + 8]
mov r9, qword [rdi + 0x28]
mov r8, qword [rsp + 0x30]
mov qword [rbp + 0x30], rdx
mov qword [rbp + 0x38], rax
mov edx, 1
call sub.msvcrt.dll_fread
mov qword [rbp + 0x10], rax
mov qword [rsi + 0x18], rbp
jmp 0x14004ae28
call fcn.1400c4db0
nop
nop dword [rax + rax]
Function at 0x140057f80
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov r9, qword [rcx + 0xe0]
mov r10d, dword [rcx + 0xd8]
mov rbx, rdx
test r9, r9
je 0x140058013
test rdx, rdx
je 0x140058020
movsx rsi, byte [rdx]
test sil, sil
je 0x140058020
mov r8, rdx
xor eax, eax
nop
add rax, rsi
add r8, 1
movsx rsi, byte [r8]
mov rcx, rax
shl rcx, 0xa
add rax, rcx
mov rdx, rax
shr rdx, 8
xor rax, rdx
test sil, sil
jne 0x140057fb0
movsxd r11, r10d
xor edx, edx
div r11
movsxd rax, edx
shl rax, 3
mov rsi, qword [r9 + rax]
test rsi, rsi
jne 0x140057ff9
jmp 0x140058013
mov rsi, qword [rsi + 0x10]
test rsi, rsi
je 0x140058013
mov rdx, qword [rsi]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140057ff0
mov rax, qword [rsi + 8]
add rsp, 0x28
pop rbx
pop rsi
ret
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
ret
xor eax, eax
jmp 0x140057fe3
Function at 0x140072260
Capabilities:
Check if file exists
Get common file path

Disassembly:
mov ecx, 0x86
jmp sym.libvlccore.dll_config_GetUserDir
Function at 0x1400745f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x28]
test rdx, rdx
mov rbx, rcx
mov r12, rdx
sete bpl
mov r13, qword [rax + 0x200]
movzx r14d, byte [rax + 0x220]
test r13, r13
je 0x140074830
mov esi, r14d
xor esi, 1
or sil, bpl
jne 0x140074730
call sym.libvlccore.dll_mdate
mov rcx, qword [rbx + 0x28]
xor r10d, r10d
mov r8, qword [rcx + 0x3b0]
mov rdx, qword [rcx + 0x398]
lea r9, [rdx + r8*2 + 0xfa0]
mov r11, qword [rcx + 0x1e0]
test r11, r11
jle 0x1400747b7
add r11, 0x13880
sub r11, r9
mov r9d, esi
cmp r11, rax
setle dil
xor r9d, 1
and edi, r9d
test r12, r12
je 0x140074810
test r11, r11
je 0x140074695
mov qword [r12], r11
cmp r11, rax
setg al
test r10, r10
je 0x1400746aa
cmp r10, qword [r12]
jge 0x1400746aa
mov qword [r12], r10
test r13, r13
je 0x1400747d0
test al, al
je 0x1400747d0
test sil, sil
je 0x140074850
mov rcx, qword [rcx + 0x200]
call sym.libvlccore.dll_picture_Release
mov r12, qword [rbx + 0x28]
mov r13, qword [r12 + 0x208]
mov qword [r12 + 0x208], 0
mov qword [r12 + 0x200], r13
test r13, r13
je 0x140074850
test bpl, bpl
jne 0x1400747e5
test dil, dil
jne 0x1400747e5
movzx edx, byte [r13 + 0x160]
mov rcx, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp fcn.1400727a0
movzx edi, bpl
jmp 0x140074751
xor edx, edx
mov r8d, edi
mov rcx, rbx
call fcn.1400742b0
test eax, eax
jne 0x14007475f
mov r11, qword [rbx + 0x28]
cmp qword [r11 + 0x208], 0
je 0x140074740
call sym.libvlccore.dll_mdate
mov rcx, qword [rbx + 0x28]
test r14b, r14b
mov r8, qword [rcx + 0x3b0]
mov rdx, qword [rcx + 0x398]
lea r9, [rdx + r8*2 + 0xfa0]
jne 0x140074820
mov r14, qword [rcx + 0x208]
test r14, r14
je 0x140074820
mov r10, qword [r14 + 0x158]
mov r11, qword [rcx + 0x1e0]
sub r10, r9
cmp rax, r10
cmovl esi, ebp
test r11, r11
jg 0x140074668
xor edi, edi
test r12, r12
mov eax, 1
jne 0x14007469b
jmp 0x1400746aa
test sil, sil
jne 0x1400746c4
mov r13, qword [rcx + 0x200]
jmp 0x1400746f0
mov edx, 1
mov rcx, rbx
call fcn.1400727a0
test dil, dil
jne 0x140074850
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
cmp r11, rax
setg al
jmp 0x1400746aa
mov esi, ebp
xor r10d, r10d
jmp 0x140074658
mov r8d, ebp
mov edx, 1
and r8d, 1
call fcn.1400742b0
test eax, eax
je 0x140074627
nop dword [rax]
mov eax, 0xffffffff
jmp 0x1400747f7
Function at 0x140080f30
Capabilities:
Resolve dns

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rbx, qword [0x1402840b0]
mov rsi, qword [rsp + 0xa0]
mov rax, qword [rbx]
mov qword [rsp + 0x48], rax
xor eax, eax
mov eax, dword [rsp + 0xa8]
or eax, 8
test rsi, rsi
mov dword [rsp + 0x30], eax
je 0x140080fa0
lea rdi, [rsp + 0x42]
mov dword [rsp + 0x28], 6
mov qword [rsp + 0x20], rdi
call qword [sym.imp.WS2_32.dll_getnameinfo]
mov rcx, rdi
mov ebp, eax
call sub.msvcrt.dll_atoi
mov dword [rsi], eax
mov rdi, qword [rsp + 0x48]
xor rdi, qword [rbx]
mov eax, ebp
jne 0x140080fbb
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.WS2_32.dll_getnameinfo]
mov ebp, eax
jmp 0x140080f88
call fcn.1400c4db0
nop
nop dword [rax + rax]
nop word cs:[rax + rax]

Function at 0x140080fd0
Capabilities:
Resolve dns

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x458
mov rbp, qword [0x1402840b0]
mov rbx, rcx
mov r12, r8
mov r13, r9
mov rax, qword [rbp]
mov qword [rsp + 0x448], rax
xor eax, eax
test edx, edx
je 0x140081030
cmp edx, 0xffff
mov eax, 0x277d
jbe 0x140081055
mov rdi, qword [rsp + 0x448]
xor rdi, qword [rbp]
jne 0x140081101
add rsp, 0x458
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
xor edx, edx
test rbx, rbx
je 0x140081042
movzx eax, byte [rbx]
cmp al, 0x5b
je 0x140081080
test al, al
jne 0x140081044
xor ebx, ebx
mov r9, r13
mov r8, r12
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_getaddrinfo]
jmp 0x14008100e
lea rsi, [rsp + 0x3a]
lea r8, [0x140188e20]
mov r9d, edx
mov edx, 6
mov rcx, rsi
call fcn.14015d190
mov rdx, rsi
jmp 0x140081032
lea rsi, [rbx + 1]
mov qword [rsp + 0x28], rdx
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmp rax, 0x401
mov rdx, qword [rsp + 0x28]
ja 0x140081044
cmp byte [rbx + rax], 0x5d
jne 0x140081044
sub rax, 1
lea rbx, [rsp + 0x40]
cmp rax, 8
mov rdi, rbx
jb 0x1400810c0
mov rcx, rax
shr rcx, 3
rep movsq qword [rdi], qword [rsi]
xor r10d, r10d
test al, 4
je 0x1400810d3
mov r8d, dword [rsi]
mov r10d, 4
mov dword [rdi], r8d
test al, 2
je 0x1400810e5
movzx r9d, word [rsi + r10]
mov word [rdi + r10], r9w
add r10, 2
test al, 1
je 0x1400810f2
movzx r11d, byte [rsi + r10]
mov byte [rdi + r10], r11b
mov byte [rsp + rax + 0x40], 0
movzx eax, byte [rsp + 0x40]
jmp 0x14008103e
call fcn.1400c4db0
nop
nop word [rax + rax]
Function at 0x1400887d0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
mov rsi, qword [0x1402840b0]
lea rdi, [rsp + 0x40]
mov rbx, rdx
mov rbp, r8
mov rax, qword [rsi]
mov qword [rsp + 0xc8], rax
xor eax, eax
mov rax, qword [rcx + 8]
mov rcx, rax
call qword [rax]
mov dword [rsp + 0x3c], pe_nt_image_headers64
movsxd rcx, eax
lea r8, [rsp + 0x3c]
mov rdx, rdi
call qword [sym.imp.WS2_32.dll_getsockname]
test eax, eax
jne 0x140088862
mov edx, dword [rsp + 0x3c]
mov dword [rsp + 0x28], 2
mov r9d, 0x40
mov qword [rsp + 0x20], rbp
mov r8, rbx
mov rcx, rdi
call sym.libvlccore.dll_vlc_getnameinfo
test eax, eax
jne 0x140088862
mov rax, rbx
mov rbx, qword [rsp + 0xc8]
xor rbx, qword [rsi]
jne 0x140088866
add rsp, 0xd8
pop rbx
pop rsi
pop rdi
pop rbp
ret
xor eax, eax
jmp 0x140088849
call fcn.1400c4db0
nop
nop dword [rax]

Function at 0x140088b10
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov rsi, qword [0x1402840b0]
mov edi, edx
mov rbp, rcx
mov edx, r8d
mov ecx, edi
mov r8d, r9d
mov r9d, 1
mov rax, qword [rsi]
mov qword [rsp + 0x58], rax
xor eax, eax
call sym.libvlccore.dll_vlc_socket
cmp eax, 0xffffffff
mov ebx, eax
je 0x140088ba0
movsxd r12, eax
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x4c]
mov r8d, 4
mov edx, 0xffff
mov rcx, r12
mov rbp, qword [sym.imp.WS2_32.dll_setsockopt]
call rbp
cmp edi, 0x17
je 0x140088c00
mov rcx, qword [rsp + 0x58]
xor rcx, qword [rsi]
mov eax, ebx
jne 0x140088c4f
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rdi, qword [sym.imp.WS2_32.dll_WSAGetLastError]
call rdi
cmp eax, 0x66
je 0x140088b82
call rdi
mov ecx, eax
call sym.libvlccore.dll_vlc_strerror_c
lea rdx, str.net_Socket
mov qword [rsp + 0x38], rax
mov r8, qword [str.main]
lea rax, str.cannot_create_socket:__s
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_network_io.c
mov dword [rsp + 0x20], 0x3f
mov qword [rsp + 0x28], rdx
mov rcx, rbp
mov edx, 1
mov qword [rsp + 0x30], rax
call sym.libvlccore.dll_vlc_Log
jmp 0x140088b82
lea r9, [rsp + 0x50]
mov rcx, r12
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x20], 4
mov r8d, 0x1b
mov edx, 0x29
call rbp
mov dword [rsp + 0x54], 0xa
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x54]
mov r8d, 0x17
mov edx, 0x29
mov rcx, r12
call rbp
jmp 0x140088b82
call fcn.1400c4db0
nop
nop
nop word cs:[rax + rax]
Function at 0x140089550
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
xor ebp, ebp
xor ebx, ebx
xor r12d, r12d
movsxd r14, edx
mov r13, rcx
mov rdi, r14
cmp rbx, rbp
jne 0x1400895a0
cmp rbx, 0xffff
ja 0x1400896b1
add rbx, 0x400
mov rcx, r12
mov rdx, rbx
call sub.msvcrt.dll_realloc
test rax, rax
je 0x1400896a5
mov r12, rax
lea rsi, [r12 + rbp]
mov r8, rbx
mov qword [rsp + 0x28], 0
sub r8, rbp
mov qword [rsp + 0x20], 0
mov r9d, 2
mov rdx, rsi
mov ecx, edi
call sym.libvlccore.dll_vlc_recvfrom_i11e
test rax, rax
mov r15, rax
jle 0x1400896a5
mov r8, rax
mov edx, 0xa
mov rcx, rsi
call sub.msvcrt.dll_memchr
test rax, rax
je 0x140089684
lea r15, [rax + 1]
xor r9d, r9d
mov rdx, rsi
movsxd rcx, edi
sub r15, rsi
mov r8d, r15d
call qword [sym.imp.WS2_32.dll_recv]
cdqe
mov rsi, qword [sym.imp.msvcrt.dll__errno]
cmp r15, rax
je 0x1400896c5
call rsi
mov ecx, dword [rax]
call sym.libvlccore.dll_vlc_strerror_c
lea rdx, str.read_error:__s
lea rcx, str.net_Gets
mov r8, qword [str.main]
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_network_io.c
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x20], 0x17b
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
mov edx, 1
mov rcx, r13
call sym.libvlccore.dll_vlc_Log
mov rcx, r12
xor r12d, r12d
call fcn.14016b5d8
mov rax, r12
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor r9d, r9d
mov r8d, r15d
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.WS2_32.dll_recv]
cdqe
cmp r15, rax
jne 0x1400896a5
add rbp, r15
jmp 0x140089570
mov rsi, qword [sym.imp.msvcrt.dll__errno]
jmp 0x14008961c
mov rsi, qword [sym.imp.msvcrt.dll__errno]
call rsi
mov dword [rax], 0x73
jmp 0x14008961c
add r15, rbp
cmp r15, 1
mov byte [r12 + r15 - 1], 0
je 0x140089670
lea rax, [r12 + r15 - 2]
cmp byte [rax], 0xd
jne 0x140089670
mov byte [rax], 0
jmp 0x140089670
Function at 0x14008a6c0
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x60
mov rsi, qword [0x1402840b0]
xor r8d, r8d
mov r9d, 1
mov edi, edx
mov rbp, rcx
xor edx, edx
mov ecx, edi
mov rax, qword [rsi]
mov qword [rsp + 0x58], rax
xor eax, eax
call sym.libvlccore.dll_vlc_accept
cmp eax, 0xffffffff
mov ebx, eax
je 0x14008a780
mov dword [rsp + 0x38], eax
lea rdx, str.net_AcceptSingle
lea rax, str.accepted_socket__d__from_socket__d_
mov r8, qword [str.main]
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_network_tcp.c
mov rcx, rbp
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x40], edi
mov edx, 3
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x20], 0x100
call sym.libvlccore.dll_vlc_Log
mov dword [rsp + 0x54], 1
movsxd rcx, ebx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x54]
mov r8d, 4
mov edx, 0xffff
call qword [sym.imp.WS2_32.dll_setsockopt]
mov rdi, qword [rsp + 0x58]
xor rdi, qword [rsi]
mov eax, ebx
jne 0x14008a7e1
add rsp, 0x60
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov r12, qword [sym.imp.WS2_32.dll_WSAGetLastError]
call r12
cmp eax, 0x2733
je 0x14008a769
call r12
mov ecx, eax
call sym.libvlccore.dll_vlc_strerror_c
lea r8, str.net_AcceptSingle
lea rcx, str.accept_failed__from_socket__d_:__s
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_network_tcp.c
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], edi
mov edx, 1
mov qword [rsp + 0x28], r8
mov r8, qword [str.main]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x20], 0xfc
mov rcx, rbp
call sym.libvlccore.dll_vlc_Log
jmp 0x14008a769
call fcn.1400c4db0
nop
nop word [rax + rax]
Function at 0x14008af90
Capabilities:
Set socket configuration

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
add rsp, 0xffffffffffffff80
mov rdi, qword [0x1402840b0]
mov r14, rcx
mov esi, edx
mov r12, r8
mov r13, r9
lea rcx, str.Windows.Networking.dll
mov rax, qword [rdi]
mov qword [rsp + 0x78], rax
xor eax, eax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
mov rbx, rax
je 0x14008b0e0
lea rdx, str.SetSocketMediaStreamingMode
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008b111
movsxd rbp, esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rdx, qword [r13]
mov r8, qword [r12]
movzx eax, word [rdx]
cmp ax, 2
je 0x14008b060
cmp ax, 0x17
jne 0x14008b029
cmp r8d, 0x1b
jbe 0x14008b029
cmp byte [rdx + 8], 0xff
sete cl
test cl, cl
je 0x14008b029
cmp r8, 0x80
jbe 0x14008b090
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_bind]
test eax, eax
jne 0x14008b142
mov eax, esi
mov rsi, qword [rsp + 0x78]
xor rsi, qword [rdi]
jne 0x14008b1a2
sub rsp, 0xffffffffffffff80
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
cmp r8d, 0xf
jbe 0x14008b029
mov ecx, dword [rdx + 4]
call qword [sym.imp.WS2_32.dll_ntohl]
and eax, 0xf0000000
mov r8, qword [r12]
mov rdx, qword [r13]
cmp eax, 0xe0000000
sete cl
jmp 0x14008b01c
movzx r9d, word [rdx]
movzx edx, word [rdx + 2]
mov rcx, rbp
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x68], 0
mov word [rsp + 0x52], dx
mov word [rsp + 0x50], r9w
lea rdx, [rsp + 0x50]
call qword [sym.imp.WS2_32.dll_bind]
jmp 0x14008b03a
movsxd rbp, esi
mov dword [rsp + 0x4c], 0x80000
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x4c]
mov r8d, 0x1002
mov edx, 0xffff
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_setsockopt]
jmp 0x14008aff8
movsxd rbp, esi
mov dword [rsp + 0x4c], 0x80000
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x4c]
mov r8d, 0x1002
mov edx, 0xffff
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_setsockopt]
jmp 0x14008afef
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
lea rsi, str.socket_bind_error:__s
call sym.libvlccore.dll_vlc_strerror_c
lea r8, str.net_SetupDgramSocket
lea r9, str._builds_videolan_vlc_extras_package_win32_.._.._.._src_network_udp.c
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov edx, 1
mov rcx, r14
mov qword [rsp + 0x28], r8
mov r8, qword [str.main]
mov esi, 0xffffffff
mov dword [rsp + 0x20], 0x88
call sym.libvlccore.dll_vlc_Log
mov rcx, rbp
call qword [sym.imp.WS2_32.dll_closesocket]
jmp 0x14008b03a
call fcn.1400c4db0
nop
nop dword [rax + rax]