joyce8/EMBER2024-capa huggingface dataset:
Function at 0x673421c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ecx + ebp*4]
mov edi, ebx
add eax, esi
push eax
mov dword [esp + 0x28], eax
call fcn.673420f9
pop ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x28], ecx
test ecx, ecx
je 0x673421ec
mov edx, dword [esp + 0x24]
mov esi, ecx
imul edi, dword [esp + 0x10]
movzx ecx, byte [eax + edx]
add edi, ecx
inc eax
cmp eax, esi
jb 0x673421d8
mov esi, dword [esp + 0x20]
cmp edi, dword [esp + 0x14]
je 0x673421fd
mov ecx, dword [esp + 0x1c]
inc ebp
cmp ebp, dword [esp + 0x18]
jb 0x673421b4
mov eax, dword [0x67394065]
mov edi, ebx
mov dword [esp + 0x14], eax
mov eax, dword [0x6739402d]
mov ecx, dword [0x67394035]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x3c]
lea eax, [eax + ecx*8]
mov eax, dword [eax + esi + 0x78]
add eax, esi
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
add ecx, esi
mov dword [esp + 0x30], ecx
add edx, esi
mov ecx, dword [eax + 0x24]
mov eax, dword [eax + 0x18]
add ecx, esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x24], eax
test eax, eax
je 0x67342296
mov eax, dword [edx + edi*4]
mov ebp, ebx
add eax, esi
push eax
mov dword [esp + 0x20], eax
call fcn.673420f9
pop ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x18], ecx
test ecx, ecx
je 0x67342281
mov edx, dword [esp + 0x1c]
mov esi, ecx
imul ebp, dword [esp + 0x14]
movzx ecx, byte [eax + edx]
add ebp, ecx
inc eax
cmp eax, esi
jb 0x6734226d
mov esi, dword [esp + 0x20]
cmp ebp, dword [esp + 0x10]
je 0x67342741
mov edx, dword [esp + 0x28]
inc edi
cmp edi, dword [esp + 0x24]
jb 0x67342249
mov eax, ebx
push 0x104
lea ecx, [esp + 0x60]
push ecx
push ebx
call eax
mov edi, dword [str.qfeao]
mov edx, eax
mov ecx, dword [0x6739405d]
cmp word [esp + edx*2 + 0x5a], cx
je 0x673422ce
xor eax, eax
mov word [esp + edx*2 + 0x5c], ax
dec edx
mov eax, dword [0x6739405d]
cmp word [esp + edx*2 + 0x5a], ax
jne 0x673422ba
cmp byte [edi], bl
je 0x673422ea
mov al, byte [edi]
lea ecx, [esp + 0x5c]
lea ecx, [ecx + edx*2]
inc edi
cbw
mov word [ecx], ax
lea ecx, [ecx + 2]
mov al, byte [edi]
test al, al
jne 0x673422db
mov eax, dword [0x67394065]
mov edi, ebx
mov dword [esp + 0x1c], eax
mov eax, dword [0x67394071]
mov ecx, dword [0x67394035]
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x3c]
lea eax, [eax + ecx*8]
mov eax, dword [eax + esi + 0x78]
add eax, esi
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x67342298

Function at 0x67342310
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [eax + 0x1c]
mov edx, dword [eax + 0x20]
add ecx, esi
mov dword [esp + 0x28], ecx
add edx, esi
mov ecx, dword [eax + 0x24]
mov eax, dword [eax + 0x18]
add ecx, esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], eax
test eax, eax
je 0x67342383
Function at 0x67343558
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a8
lea eax, [ebp - 0x198]
mov dword [esp + 4], eax
mov dword [esp], 0x202
call sub.WS2_32.dll_WSAStartup
sub esp, 8
test eax, eax
jne 0x67343594
mov eax, dword [ebp - 0x198]
cmp al, 2
je 0x6734359c
call sub.WS2_32.dll_WSACleanup
mov eax, 2
leave
ret
mov eax, 2
leave
ret
shr ax, 8
cmp al, 2
jne 0x67343588
xor eax, eax
leave
ret

Function at 0x673459ec
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x13c
mov ebx, dword [ebp + 8]
mov esi, dword [ebx]
cmp byte [ebx + 0x12d], 0
je 0x67345a10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [ebp - 0x1c], pe_nt_image_headers32
lea edi, [ebp - 0xa0]
lea edx, [ebp - 0x1c]
mov dword [esp + 8], edx
mov dword [esp + 4], edi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov dword [ebp - 0x12c], edx
call sub.WS2_32.dll_getpeername
sub esp, 0xc
test eax, eax
mov edx, dword [ebp - 0x12c]
jne 0x67345b0c
mov dword [ebp - 0x1c], pe_nt_image_headers32
mov dword [esp + 8], edx
lea eax, [ebp - 0x120]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.WS2_32.dll_getsockname
sub esp, 0xc
test eax, eax
jne 0x67345adc
lea ecx, [esi + 0x8664]
lea edx, [esi + 0x8634]
mov eax, edi
call fcn.67345790
test al, al
je 0x67345b40
lea ecx, [esi + 0x8698]
lea edx, [esi + 0x8668]
lea eax, [ebp - 0x120]
call fcn.67345790
test al, al
jne 0x67345a06
call sub.KERNEL32.dll_GetLastError
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.673534dc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], str.ssloc_inet_ntop___failed_with_errno__d:__s
mov dword [esp], esi
call fcn.67346d80
jmp 0x67345a06
call sub.WS2_32.dll_WSAGetLastError
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.673534dc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], str.getsockname___failed_with_errno__d:__s
mov dword [esp], esi
call fcn.67346d80
jmp 0x67345a06
call sub.WS2_32.dll_WSAGetLastError
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.673534dc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], str.getpeername___failed_with_errno__d:__s
mov dword [esp], esi
call fcn.67346d80
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
call sub.KERNEL32.dll_GetLastError
mov edi, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.673534dc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], str.ssrem_inet_ntop___failed_with_errno__d:__s
mov dword [esp], esi
call fcn.67346d80
jmp 0x67345a06
Function at 0x67345b70
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x34
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xc], 0x4020
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1001
mov dword [esp + 4], 0xffff
mov dword [esp], ebx
call sub.WS2_32.dll_getsockopt
sub esp, 0x14
test eax, eax
jne 0x67345bc4
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x10], eax
jg 0x67345bee
mov dword [esp + 0x10], 4
lea eax, [ebp - 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1001
mov dword [esp + 4], 0xffff
mov dword [esp], ebx
call sub.WS2_32.dll_setsockopt
sub esp, 0x14
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x67346874
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov edx, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov eax, dword [edx + 0x4c8]
cmp eax, 0xffffffff
je 0x673468b5
mov edx, dword [edx + 0x4bc]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x673468b5
test ecx, ecx
je 0x673468a4
mov dword [ecx], eax
mov edx, dword [eax + 0xc8]
mov dword [ebx], edx
cmp byte [eax + 0xe0], 0
je 0x673468c4
mov dword [ebx], 0xffffffff
xor eax, eax
mov ebx, dword [ebp - 4]
leave
ret
mov dword [esp + 0xc], 2
mov dword [esp + 8], 1
lea eax, [ebp - 9]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.WS2_32.dll_recv
sub esp, 0x10
test eax, eax
je 0x673468b5
xor eax, eax
mov ebx, dword [ebp - 4]
leave
ret

Function at 0x673468f4
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, eax
mov esi, dword [ebp + 8]
mov eax, dword [eax + 0x184]
test eax, eax
je 0x67346930
mov edi, dword [ebx + 0x11c]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], ebx
call eax
add esp, 0x3c
pop ebx
pop esi
pop edi
leave
ret
cmp edx, 2
ja 0x6734698c
mov eax, dword [ebx + 0x118]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 2
lea eax, [edx + edx*2 + 0x67396c95]
mov dword [esp], eax
mov dword [ebp - 0x1c], ecx
call sub.msvcrt.dll_fwrite
mov eax, dword [ebx + 0x118]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], esi
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
call sub.msvcrt.dll_fwrite
xor eax, eax
add esp, 0x3c
pop ebx
pop esi
pop edi
leave
ret
xor eax, eax
add esp, 0x3c
pop ebx
pop esi
pop edi
leave
ret

Function at 0x67346a18
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.WS2_32.dll_recv
sub esp, 0x10
cmp eax, 0xffffffff
je 0x67346a50
mov edx, dword [ebp + 0x14]
mov dword [edx], eax
xor eax, eax
leave
ret
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x67346a64
mov eax, 0x38
leave
ret
mov ax, 0x51
leave
ret
Function at 0x673470fc
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x1c
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0x18]
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [esi + eax*4 + 0xc8]
mov dword [esp], eax
call sub.WS2_32.dll_send
sub esp, 0x10
mov ebx, eax
mov dword [edi], 0
cmp eax, 0xffffffff
je 0x67347150
mov eax, ebx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x67347190
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.673534dc
mov dword [esp + 8], eax
mov dword [esp + 4], str.Send_failure:__s
mov eax, dword [esi]
mov dword [esp], eax
call fcn.67346d80
mov dword [edi], 0x37
mov eax, ebx
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [edi], 0x51
xor ebx, ebx
jmp 0x67347143
Function at 0x67351708
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
test ebx, ebx
je 0x67351722
mov edi, dword [ebx + 0xc]
test edi, edi
jne 0x6735172c
xor eax, eax
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret
mov dword [esp + 4], esi
mov dword [esp], 0x673979cd
call fcn.67343d64
test eax, eax
je 0x673517e8
mov edi, dword [sym.imp.msvcrt.dll__iob]
add edi, 0x20
mov byte [ebp - 0x19], 1
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x85
mov dword [esp + 4], 1
mov dword [esp], str._Netscape_HTTP_Cookie_File_n_http:__curl.haxx.se_rfc_cookie_spec.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n_n
call sub.msvcrt.dll_fwrite
mov ebx, dword [ebx]
test ebx, ebx
jne 0x6735179f
jmp 0x673517cc
mov dword [esp + 8], eax
mov dword [esp + 4], 0x67397a7f
mov dword [esp], edi
call fcn.6734563c
mov dword [esp], esi
call dword [0x67391008]
mov ebx, dword [ebx]
test ebx, ebx
je 0x673517cc
mov eax, ebx
call fcn.673503cc
mov esi, eax
test eax, eax
jne 0x6735177c
mov dword [esp + 4], str._n_Fatal_libcurl_error_n
mov dword [esp], edi
call fcn.6734563c
cmp byte [ebp - 0x19], 0
je 0x67351808
mov eax, 1
jmp 0x67351724
cmp byte [ebp - 0x19], 0
jne 0x67351722
mov dword [esp], edi
call sub.msvcrt.dll_fclose
xor eax, eax
jmp 0x67351724
mov dword [esp + 4], 0x673979dd
mov dword [esp], esi
call sub.msvcrt.dll_fopen
mov edi, eax
test eax, eax
je 0x673517c2
mov byte [ebp - 0x19], 0
jmp 0x67351751
mov dword [esp], edi
call sub.msvcrt.dll_fclose
mov eax, 1
jmp 0x67351724
Function at 0x67356754
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
lea esi, [ebp - 0x1c]
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], 2
call fcn.67353a7c
test eax, eax
jle 0x673567a0
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], 2
call fcn.6735638c
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [esp], ebx
call sub.WS2_32.dll_gethostbyname
push edx
test eax, eax
je 0x673567c4
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.67356230
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
Function at 0x6735c850
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, eax
mov esi, dword [eax]
lea eax, [edx - 0xc8]
cmp eax, 0x63
ja 0x6735c8b0
cmp edx, 0xc8
je 0x6735c88a
mov dword [esp + 8], edx
mov dword [esp + 4], str.Got_a__03d_response_code_instead_of_the_assumed_200_n
mov dword [esp], esi
mov dword [ebp - 0x20], ecx
call fcn.673471e0
mov ecx, dword [ebp - 0x20]
cmp ecx, 0x13
je 0x6735c8d0
cmp ecx, 0x14
je 0x6735c8e0
cmp ecx, 0x15
je 0x6735c984
cmp ecx, 0x16
je 0x6735ca3c
xor eax, eax
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret
mov dword [esp + 4], str.Couldnt_set_desired_mode
mov dword [esp], esi
call fcn.67346d80
mov eax, 0x11
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.6735cf50
mov esi, dword [ebx]
cmp dword [esi + 0x288], 2
je 0x6735c9c0
mov ecx, 0x673999e0
mov dword [ebp - 0x1c], 0
mov edx, ecx
mov eax, dword [esi + 0x2f0]
test eax, eax
je 0x6735ca43
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], 0x67399c65
call fcn.673454ec
mov esi, eax
test eax, eax
je 0x6735c99c
mov dword [esp + 8], eax
mov dword [esp + 4], 0x67399b32
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
call fcn.6736df08
test eax, eax
jne 0x6735c8a8
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x6735c964
mov edx, dword [ebp - 0x1c]
mov dword [esp], edx
mov dword [ebp - 0x20], eax
call dword [0x67391008]
mov eax, dword [ebp - 0x20]
mov dword [esp], esi
mov dword [ebp - 0x20], eax
call dword [0x67391008]
mov dword [ebx + 0x33c], 0x1f
mov eax, dword [ebp - 0x20]
jmp 0x6735c8a8
mov cl, 0xd
mov edx, 1
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.6735cba0
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x6735ca56
mov edx, dword [ebp - 0x1c]
mov dword [esp], edx
call dword [0x67391008]
mov eax, 0x1b
jmp 0x6735c8a8
mov edi, dword [esi + 0x85b8]
test edi, edi
je 0x6735c8ef
cmp byte [edi], 0
je 0x6735c8ef
mov dword [esp + 4], 0x2f
mov dword [esp], edi
call sub.msvcrt.dll_strchr
test eax, eax
je 0x6735c8ef
mov dword [esp], edi
call dword [0x67391010]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x6735ca56
xor eax, eax
mov ecx, 0xffffffff
mov edi, dword [ebp - 0x1c]
repne scasb al, byte es:[edi]
not ecx
mov eax, dword [ebp - 0x1c]
cmp byte [eax + ecx - 2], 0x2f
je 0x6735ca2f
mov dword [esp + 4], 0x2f
mov dword [esp], eax
call sub.msvcrt.dll_strrchr
test eax, eax
je 0x6735ca2f
mov byte [eax + 1], 0
mov ecx, dword [ebp - 0x1c]
mov edx, 0x67399c08
jmp 0x6735c8fd
mov cl, 0xe
jmp 0x6735c986
cmp byte [esi + 0x29d], 0
je 0x6735ca60
mov eax, str.NLST
jmp 0x6735c90b
mov eax, 0x1b
jmp 0x6735c8a8
mov eax, str.LIST
jmp 0x6735c90b
Function at 0x6735ca6c
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, eax
cmp dl, 1
sbb edx, edx
and edx, 8
add edx, 0x41
cmp dl, byte [eax + 0x32c]
je 0x6735cac8
movsx eax, dl
mov dword [esp + 8], eax
mov dword [esp + 4], str.TYPE__c
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
mov byte [ebp - 0xc], dl
mov dword [ebp - 0x10], ecx
call fcn.6736df08
test eax, eax
mov dl, byte [ebp - 0xc]
mov ecx, dword [ebp - 0x10]
jne 0x6735cac1
mov dword [ebx + 0x33c], ecx
mov byte [ebx + 0x32c], dl
add esp, 0x24
pop ebx
leave
ret
mov dword [eax + 0x33c], ecx
mov edx, 0xc8
add esp, 0x24
pop ebx
leave
jmp fcn.6735c850

Function at 0x6735cae0
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
mov edx, dword [eax]
mov ebx, dword [edx + 0x85dc]
cmp byte [edx + 0x2a6], 0
je 0x6735cb34
mov esi, dword [eax + 0x320]
test esi, esi
je 0x6735cb34
mov dl, byte [edx + 0x29b]
movsx esi, byte [eax + 0x32c]
cmp dl, 1
sbb ecx, ecx
and ecx, 8
add ecx, 0x41
cmp esi, ecx
je 0x6735cb34
mov dword [ebx + 0xc], 1
movzx edx, dl
mov ecx, 0x13
pop ebx
pop esi
leave
jmp fcn.6735ca6c
pop ebx
pop esi
leave
jmp fcn.6735cf50

Function at 0x6735cb3c
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x14
mov ebx, eax
mov eax, dword [eax]
cmp byte [eax + 0x299], 0
jne 0x6735cb5a
mov eax, dword [eax + 0x218]
test eax, eax
je 0x6735cb94
mov eax, dword [ebx + 0x320]
test eax, eax
je 0x6735cb94
mov dword [esp + 8], eax
mov dword [esp + 4], str.MDTM__s
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
call fcn.6736df08
test eax, eax
jne 0x6735cb8c
mov dword [ebx + 0x33c], 0x12
add esp, 0x14
pop ebx
leave
ret
mov eax, ebx
add esp, 0x14
pop ebx
leave
jmp fcn.6735cae0
Function at 0x6735cba0
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, eax
mov edi, dword [eax]
mov eax, dword [edi + 0x85dc]
mov dword [ebp - 0x1c], eax
cmp ecx, 0xd
jae 0x6735ccf0
mov eax, dword [edi + 0x1fc]
test dl, dl
je 0x6735cc40
mov dword [ebx + 0x330], 0
test eax, eax
je 0x6735cc4c
mov esi, dword [ebx + 0x330]
test esi, esi
jle 0x6735cbf8
xor edx, edx
jmp 0x6735cbec
test eax, eax
je 0x6735cc4c
mov eax, dword [eax + 4]
inc edx
cmp edx, esi
jl 0x6735cbe8
test eax, eax
je 0x6735cc4c
mov eax, dword [eax]
cmp byte [eax], 0x2a
je 0x6735cd14
mov dword [ebx + 0x334], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0x67399b32
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
mov dword [ebp - 0x20], ecx
call fcn.6736df08
test eax, eax
mov ecx, dword [ebp - 0x20]
jne 0x6735cc37
mov dword [ebx + 0x33c], ecx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret
inc dword [ebx + 0x330]
test eax, eax
jne 0x6735cbd7
nop
cmp ecx, 0xe
je 0x6735cd24
cmp ecx, 0xf
je 0x6735cdb7
cmp ecx, 0xd
je 0x6735cd34
cmp byte [ebx + 0x326], 0
jne 0x6735cda9
mov dword [ebx + 0x334], 0
xor eax, eax
cmp dword [edi + 0x28c], 2
sete al
mov dword [ebx + 0x338], eax
cmp byte [ebx + 0x12d], 0
jne 0x6735cd8c
mov ecx, dword [ebx + 0x318]
test ecx, ecx
je 0x6735cda9
mov dword [ebx + 0x330], 1
mov eax, dword [ebx + 0x314]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov dword [esp + 4], str.CWD__s
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
call fcn.6736df08
test eax, eax
jne 0x6735cc37
mov dword [ebx + 0x33c], 0x10
jmp 0x6735cc37
cmp ecx, 0xe
ja 0x6735cd00
mov eax, dword [edi + 0x204]
jmp 0x6735cbc5
cmp ecx, 0xf
jne 0x6735cbbf
mov eax, dword [edi + 0x200]
jmp 0x6735cbc5
inc eax
mov dword [ebx + 0x334], 1
jmp 0x6735cc0d
xor edx, edx
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.6735bc94
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0xc]
test edx, edx
jne 0x6735cd7b
mov edx, dword [ebx + 0x348]
mov eax, dword [ebx + 0x34c]
mov ecx, edx
and ecx, eax
inc ecx
je 0x6735cdbe
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.673527e4
mov edx, dword [ebx + 0x348]
mov ecx, dword [ebx + 0x34c]
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.6735b9f8
mov dword [ebx + 0x33c], 0
xor eax, eax
jmp 0x6735cc37
mov eax, dword [ebx + 0x310]
test eax, eax
je 0x6735cc9d
mov dword [ebx + 0x330], 0
jmp 0x6735ccbd
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.6735cb3c
xor eax, eax
jmp 0x6735cc37
mov eax, dword [ebx + 0x320]
mov dword [esp + 8], eax
mov dword [esp + 4], str.SIZE__s
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
call fcn.6736df08
test eax, eax
jne 0x6735cc37
mov dword [ebx + 0x33c], 0x18
jmp 0x6735cc37
Function at 0x6735cef0
Capabilities:
Check http status code
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x14
mov ebx, eax
mov eax, dword [eax]
mov eax, dword [eax + 0x85dc]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x6735cf44
mov ecx, dword [ebx + 0x320]
test ecx, ecx
je 0x6735cf44
mov dword [esp + 8], 0
mov dword [esp + 4], str.REST__d
lea eax, [ebx + 0x2d8]
mov dword [esp], eax
call fcn.6736df08
test eax, eax
jne 0x6735cf3e
mov dword [ebx + 0x33c], 0x1a
add esp, 0x14
pop ebx
leave
ret
mov eax, ebx
add esp, 0x14
pop ebx
leave
jmp fcn.6735cdf8

Function at 0x6735d750
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov ebx, eax
mov edi, dword [eax]
mov esi, dword [eax + 0xcc]
mov dword [ebp - 0x1c], 0x10
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.67345920
test eax, eax
jle 0x6735d884
cmp eax, 0x3e7
jle 0x6735d796
mov eax, 0x3e8
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call fcn.6735199c
cmp eax, 0xffffffff
je 0x6735d804
test eax, eax
je 0x6735d76a
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x1c]
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], ecx
call sub.WS2_32.dll_getsockname
sub esp, 0xc
test eax, eax
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
je 0x6735d824
mov dword [esp], esi
call sub.WS2_32.dll_closesocket
push ebx
mov dword [esp + 4], str.Error_accept__ing_server_connect
mov dword [esp], edi
call fcn.67346d80
mov eax, 0x1e
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [esp + 4], str.Error_while_waiting_for_server_connect
mov dword [esp], edi
call fcn.67346d80
mov eax, 0x1e
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [ebp - 0x1c], 0x10
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], esi
call sub.WS2_32.dll_accept
sub esp, 0xc
mov dword [ebp - 0x3c], eax
mov dword [esp], esi
call sub.WS2_32.dll_closesocket
push esi
cmp dword [ebp - 0x3c], 0xffffffff
je 0x6735d7e5
mov dword [esp + 4], str.Connection_accepted_from_server_n
mov dword [esp], edi
call fcn.673471e0
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 0xcc], eax
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.67353a48
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
mov dword [esp + 4], 0x67399e68
mov dword [esp], edi
call fcn.67346d80
mov eax, 0x1c
jmp 0x6735d7fa
Function at 0x6736091c
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, eax
mov esi, dword [ebp + 8]
mov edi, dword [eax]
mov byte [ebp - 0x1b], 0xff
mov byte [ebp - 0x1a], cl
mov eax, esi
mov byte [ebp - 0x19], al
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
lea eax, [ebp - 0x1b]
mov dword [esp + 4], eax
mov dword [esp], edx
mov dword [ebp - 0x2c], ecx
call sub.WS2_32.dll_send
sub esp, 0x10
test eax, eax
mov ecx, dword [ebp - 0x2c]
js 0x6736097c
mov dword [esp], esi
mov edx, str.SENT
mov eax, dword [ebx]
call fcn.673602d0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
leave
ret
call sub.WS2_32.dll_WSAGetLastError
mov dword [esp + 8], eax
mov dword [esp + 4], str.Sending_data_failed___d_
mov dword [esp], edi
call fcn.67346d80
mov ecx, dword [ebp - 0x2c]
jmp 0x67360964
Function at 0x673643e8
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, eax
mov dword [esp + 8], str.Connected_for_receive
mov dword [esp + 4], 0x6739b448
mov eax, dword [eax + 0x10]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [ebp - 0xc], edx
call fcn.673471e0
mov dword [ebx], 1
mov eax, ebx
call fcn.67364204
test eax, eax
mov edx, dword [ebp - 0xc]
je 0x6736442c
add esp, 0x24
pop ebx
leave
ret
mov eax, ebx
add esp, 0x24
pop ebx
leave
jmp fcn.67363eb0
Function at 0x673647f4
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x24
mov ebx, eax
mov dword [esp + 8], str.Connected_for_transmit
mov dword [esp + 4], 0x6739b448
mov eax, dword [eax + 0x10]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [ebp - 0xc], edx
call fcn.673471e0
mov dword [ebx], 2
mov eax, ebx
call fcn.67364204
test eax, eax
mov edx, dword [ebp - 0xc]
je 0x67364838
add esp, 0x24
pop ebx
leave
ret
mov eax, ebx
add esp, 0x24
pop ebx
leave
jmp fcn.67364438