joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1401433c0
Capabilities:
Resolve dns

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x78
vzeroupper
lea rbp, [rsp + 0xb0]
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x48], rax
mov rbx, r8
mov rsi, r9
test rdx, rdx
jne 0x1401433f4
xor edi, edi
jmp 0x1401433f8
lea rdi, [rdx + 0xc]
mov qword [rbp - 0x40], rdi
test rcx, rcx
jne 0x140143406
xor r14d, r14d
jmp 0x14014340a
lea r14, [rcx + 0xc]
mov qword [rbp - 0x48], r14
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov qword [rbp - 0x78], rcx
mov rdx, rdi
mov qword [rbp - 0x80], rdx
mov r8, rbx
mov qword [rbp - 0x88], r8
mov r9, rsi
mov qword [rbp - 0x90], r9
lea rcx, [rbp - 0x70]
call fcn.14000a380
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x88]
mov r9, qword [rbp - 0x90]
call sub.WS2_32.dll_GetAddrInfoW
mov ebx, eax
lea rcx, [rbp - 0x70]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x1401434b0
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x140143497

Function at 0x1401435d0
Capabilities:
Initialize winsock library

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x1f8
vzeroupper
lea rbp, [rsp + 0x230]
lea rdx, [rbp - 0x1d0]
mov qword [rbp - 0x204], rdx
mov ecx, 0x202
mov dword [rbp - 0x1fc], ecx
lea rcx, [rbp - 0x1f8]
call fcn.14000a380
mov rdx, qword [rbp - 0x204]
mov ecx, dword [rbp - 0x1fc]
call sub.WS2_32.dll_WSAStartup
mov ebx, eax
lea rcx, [rbp - 0x1f8]
call fcn.14000a3d0
test ebx, ebx
jne 0x14014367f
lea rcx, [0x1405d2704]
mov edx, 1
xor eax, eax
lock cmpxchg dword [rcx], edx
test eax, eax
je 0x14014366a
lea rcx, [rbp - 0x1f8]
call fcn.14000a380
call sub.WS2_32.dll_WSACleanup
lea rcx, [rbp - 0x1f8]
call fcn.14000a3d0
nop
add rsp, 0x1f8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1403c1960]
call fcn.1400086f0
mov rsi, rax
mov rcx, rsi
mov edx, ebx
call fcn.140150a90
mov rcx, rsi
call fcn.140008c60
int3
Function at 0x140143ac0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push rbp
push r14
push rdi
push rsi
push rbx
sub rsp, 0xa0
vzeroupper
lea rbp, [rsp + 0xc0]
vxorps xmm4, xmm4, xmm4
vmovdqu xmmword [rbp - 0x48], xmm4
xor eax, eax
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x10], rcx
mov ebx, edx
mov esi, r8d
movzx eax, byte [r9]
mov byte [rbp - 0x64], al
mov rax, qword [r9 + 8]
mov qword [rbp - 0x70], rax
cmp byte [rbp - 0x64], 0
jne 0x140143b52
lea rax, [0x1403a8730]
cmp qword [rax - 8], 0
jne 0x140143ca5
mov rax, qword [0x1405ceed8]
mov rax, qword [rax + 0x10]
mov rax, qword [rax + 8]
cmp qword [rax + 8], 0
je 0x140143b48
lea rcx, [rbp - 0x58]
call sub.KERNEL32.dll_QueryPerformanceCounter
mov rdi, qword [rbp - 0x58]
cmp dword [0x1405e1b18], 0
je 0x140143b4a
jmp 0x140143caf
xor edi, edi
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x64], 1
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x28]
mov rcx, qword [rbp + 0x10]
call fcn.140144f20
mov qword [rbp - 0x88], rax
cmp dword [rbp - 0x28], 0
je 0x140143b84
mov ecx, dword [rbp - 0x28]
mov edx, dword [rbp - 0x30]
call fcn.1401443c0
mov rcx, rax
call fcn.140008c60
int3
movzx r8d, byte [rbp - 0x64]
mov byte [rbp - 0x80], r8b
mov r8, qword [rbp - 0x70]
mov qword [rbp - 0x78], r8
lea r8, [rbp - 0x80]
mov rdx, qword [rbp + 0x10]
lea rcx, [0x14039e608]
xor r9d, r9d
call fcn.140144a20
lea rcx, [0x1403a8730]
cmp qword [rcx - 8], 0
jne 0x140143cb9
mov rcx, qword [0x1405ceed8]
mov rcx, qword [rcx + 0x10]
mov rcx, qword [rcx + 8]
cmp qword [rcx + 8], 0
je 0x140143bef
lea rcx, [rbp - 0x60]
call sub.KERNEL32.dll_QueryPerformanceCounter
mov r14, qword [rbp - 0x60]
cmp dword [0x1405e1b18], 0
je 0x140143bf2
jmp 0x140143cc3
xor r14d, r14d
mov qword [rbp - 0x70], r14
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], rdx
lea rdx, [rbp - 0x48]
mov qword [rsp + 0x28], rdx
lea rdx, [rbp - 0x50]
mov qword [rsp + 0x30], rdx
movzx edi, bl
mov edx, edi
lea r9, [rbp - 0x38]
mov rcx, qword [rbp - 0x88]
mov r8d, esi
call fcn.140144e00
mov dword [rbp - 0x28], eax
test edi, edi
je 0x140143c37
mov rbx, qword [rbp - 0x48]
jmp 0x140143c6e
lea rcx, [0x1403c0550]
call fcn.1400086f0
mov rbx, rax
mov rdx, qword [rbp - 0x38]
lea rcx, [rbx + 8]
call fcn.140008900
mov rdx, qword [rbp - 0x40]
lea rcx, [rbx + 0x10]
call fcn.140008900
mov rdx, qword [rbp - 0x48]
lea rcx, [rbx + 0x18]
call fcn.140008900
nop
mov byte [rbp - 0x80], 1
mov r8, qword [rbp - 0x70]
mov qword [rbp - 0x78], r8
lea r8, [rbp - 0x80]
mov rdx, qword [rbp - 0x88]
lea rcx, [0x14039e608]
xor r9d, r9d
call fcn.140144a20
mov rax, rbx
add rsp, 0xa0
pop rbx
pop rsi
pop rdi
pop r14
pop rbp
ret
call fcn.140001e32
jmp 0x140143b17
call fcn.1400094a0
jmp 0x140143b4a
call fcn.140001e32
jmp 0x140143bbe
call fcn.1400094a0
jmp 0x140143bf2
Function at 0x140145120
Capabilities:
Resolve dns

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xf8
vzeroupper
lea rbp, [rsp + 0x130]
xor eax, eax
mov qword [rbp - 0x88], rax
mov qword [rbp + 0x28], r9
mov rbx, rcx
mov esi, edx
mov edi, r8d
cmp dword [0x1405d2704], 0
jne 0x140145161
call fcn.1401435d0
xor ecx, ecx
mov qword [rbp - 0xb8], rcx
lea rcx, [0x1403c0620]
call fcn.140008730
mov r15, rax
mov qword [rbp - 0xc0], r15
movzx esi, sil
mov r8d, esi
mov rcx, r15
mov rdx, rbx
call fcn.140145a80
mov qword [rbp - 0xb8], r15
vxorps ymm0, ymm0, ymm0
vmovdqu ymmword [rbp - 0x80], ymm0
vmovdqu ymmword [rbp - 0x60], ymm0
vmovdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x7c], edi
test esi, esi
jne 0x1401451ba
mov dword [rbp - 0x80], 2
mov rsi, qword [r15 + 8]
lea rdi, [rsi + 0x20]
cmp byte [rsi], sil
lea r13, [rsi + 0x28]
xor r12d, r12d
test rbx, rbx
jne 0x1401451d5
xor ebx, ebx
jmp 0x1401451d9
add rbx, 0xc
mov qword [rbp - 0x88], rbx
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdi
xor ecx, ecx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rsi
lea rcx, [0x140145370]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], r13
mov rcx, rbx
mov qword [rbp - 0xcc], rcx
mov rdx, r12
mov qword [rbp - 0xd4], rdx
xor r8d, r8d
mov dword [rbp - 0xc4], r8d
xor r9d, r9d
mov qword [rbp - 0xdc], r9
lea rcx, [rbp - 0xb0]
call fcn.14000a380
mov rcx, qword [rbp - 0xcc]
mov rdx, qword [rbp - 0xd4]
mov r8d, dword [rbp - 0xc4]
mov r9, qword [rbp - 0xdc]
call sub.WS2_32.dll_GetAddrInfoExW
mov ebx, eax
lea rcx, [rbp - 0xb0]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov edi, eax
xor ecx, ecx
mov qword [rbp - 0x88], rcx
mov rcx, qword gs:[0x58]
mov edx, dword [0x1405ebc0c]
mov eax, reloc.WS2_32.dll_recv
add rax, qword [rcx + rdx*8]
mov r14, qword [rax]
test r14, r14
je 0x140145327
mov dword [r14 + 0xd8], edi
cmp ebx, 0x3e5
je 0x1401452f6
cmp ebx, 0x2afa
je 0x1401452d4
cmp ebx, 0x277f
je 0x1401452d4
mov ecx, ebx
mov rdx, rsi
call fcn.1401453b0
jmp 0x140145306
mov rcx, qword [rbp - 0xc0]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rcx, qword [rbp - 0xc0]
call fcn.140184690
xor eax, eax
jmp 0x140145312
mov rcx, qword [rbp - 0xc0]
mov rdx, qword [rbp + 0x28]
call fcn.140145bd0
mov rcx, qword [rbp - 0xc0]
call fcn.140145b90
nop
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rax
lea rax, [0x140205b10]
call rax
mov r14, rax
jmp 0x1401452a9
Function at 0x140172dc0
Capabilities:
Set socket configuration

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x68
vzeroupper
lea rbp, [rsp + 0xa0]
mov rbx, rcx
mov esi, edx
mov qword [rbp - 0x40], r8
mov rdi, r8
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rbx
mov qword [rbp - 0x74], rcx
mov edx, esi
mov dword [rbp - 0x6c], edx
mov r8, rdi
mov qword [rbp - 0x7c], r8
lea rcx, [rbp - 0x68]
call fcn.14000a380
mov rcx, qword [rbp - 0x74]
mov edx, dword [rbp - 0x6c]
mov r8, qword [rbp - 0x7c]
call sub.WS2_32.dll_ioctlsocket
mov ebx, eax
lea rcx, [rbp - 0x68]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
xor eax, eax
mov qword [rbp - 0x40], rax
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x140172e6b
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x140172e52

Function at 0x140172e80
Capabilities:
Set socket configuration

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x78
vzeroupper
lea rbp, [rsp + 0xb0]
vxorps xmm4, xmm4, xmm4
vmovdqa xmmword [rbp - 0x50], xmm4
xor eax, eax
mov qword [rbp - 0x40], rax
mov esi, edx
mov rbx, r8
vxorps xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x40]
cmp dword [rcx], ecx
call fcn.140202300
nop
mov qword [rbp - 0x50], rbx
mov rcx, qword [rbp - 0x48]
mov rdi, qword [rcx + 8]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, rdi
mov qword [rbp - 0x84], rcx
mov edx, esi
mov dword [rbp - 0x7c], edx
mov r8, rbx
mov qword [rbp - 0x8c], r8
lea rcx, [rbp - 0x78]
call fcn.14000a380
mov rcx, qword [rbp - 0x84]
mov edx, dword [rbp - 0x7c]
mov r8, qword [rbp - 0x8c]
call sub.WS2_32.dll_ioctlsocket
mov ebx, eax
lea rcx, [rbp - 0x78]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
xor ecx, ecx
mov qword [rbp - 0x50], rcx
cmp byte [rbp - 0x40], 0
je 0x140172f3e
mov rcx, qword [rbp - 0x48]
cmp byte [rcx], cl
xor edx, edx
call fcn.140202340
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x140172f77
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x140172f5e
Function at 0x140172ff0
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x78
vzeroupper
lea rbp, [rsp + 0xb0]
xor eax, eax
mov qword [rbp - 0x48], rax
mov rbx, rdx
mov esi, r8d
mov edi, r9d
vxorps xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x40]
cmp dword [rcx], ecx
call fcn.140202300
mov rcx, qword [rbp - 0x48]
mov r14, qword [rcx + 8]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov rcx, r14
mov qword [rbp - 0x80], rcx
mov rdx, rbx
mov qword [rbp - 0x88], rdx
mov r8d, esi
mov dword [rbp - 0x74], r8d
mov r9d, edi
mov dword [rbp - 0x78], r9d
lea rcx, [rbp - 0x70]
call fcn.14000a380
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x88]
mov r8d, dword [rbp - 0x74]
mov r9d, dword [rbp - 0x78]
call sub.WS2_32.dll_recv
mov ebx, eax
lea rcx, [rbp - 0x70]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
cmp byte [rbp - 0x40], 0
je 0x1401730a6
mov rcx, qword [rbp - 0x48]
cmp byte [rcx], cl
xor edx, edx
call fcn.140202340
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x1401730df
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x1401730c6

Function at 0x140173270
Capabilities:
Set socket configuration

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x88
vzeroupper
lea rbp, [rsp + 0xc0]
vxorps xmm4, xmm4, xmm4
vmovdqa xmmword [rbp - 0x50], xmm4
xor eax, eax
mov qword [rbp - 0x40], rax
mov esi, edx
mov edi, r8d
mov rbx, r9
vxorps xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x40]
cmp dword [rcx], ecx
call fcn.140202300
nop
mov qword [rbp - 0x50], rbx
mov rcx, qword [rbp - 0x48]
mov r14, qword [rcx + 8]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov r15d, dword [rbp + 0x30]
mov dword [rsp + 0x20], r15d
mov rcx, r14
mov qword [rbp - 0x88], rcx
mov edx, esi
mov dword [rbp - 0x7c], edx
mov r8d, edi
mov dword [rbp - 0x80], r8d
mov r9, rbx
mov qword [rbp - 0x90], r9
lea rcx, [rbp - 0x78]
call fcn.14000a380
mov rcx, qword [rbp - 0x88]
mov edx, dword [rbp - 0x7c]
mov r8d, dword [rbp - 0x80]
mov r9, qword [rbp - 0x90]
call sub.WS2_32.dll_setsockopt
mov ebx, eax
lea rcx, [rbp - 0x78]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
xor ecx, ecx
mov qword [rbp - 0x50], rcx
cmp byte [rbp - 0x40], 0
je 0x140173348
mov rcx, qword [rbp - 0x48]
cmp byte [rcx], cl
xor edx, edx
call fcn.140202340
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x140173384
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x140173368
Function at 0x1401737f0
Capabilities:
Connect socket

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x98
vzeroupper
lea rbp, [rsp + 0xd0]
vxorps xmm4, xmm4, xmm4
vmovdqa xmmword [rbp - 0x50], xmm4
xor eax, eax
mov qword [rbp - 0x40], rax
mov rbx, rdx
mov esi, r8d
mov rdi, r9
vxorps xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x48], rcx
lea rdx, [rbp - 0x40]
cmp dword [rcx], ecx
call fcn.140202300
nop
mov rbx, qword [rbx]
mov qword [rbp - 0x50], rbx
mov rcx, qword [rbp - 0x48]
mov r14, qword [rcx + 8]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov r15, qword [rbp + 0x30]
mov qword [rsp + 0x20], r15
mov r15, qword [rbp + 0x38]
mov qword [rsp + 0x28], r15
mov r15, qword [rbp + 0x40]
mov qword [rsp + 0x30], r15
mov rcx, r14
mov qword [rbp - 0x84], rcx
mov rdx, rbx
mov qword [rbp - 0x8c], rdx
mov r8d, esi
mov dword [rbp - 0x7c], r8d
mov r9, rdi
mov qword [rbp - 0x94], r9
lea rcx, [rbp - 0x78]
call fcn.14000a380
mov rcx, qword [rbp - 0x84]
mov rdx, qword [rbp - 0x8c]
mov r8d, dword [rbp - 0x7c]
mov r9, qword [rbp - 0x94]
call sub.WS2_32.dll_WSAConnect
mov ebx, eax
lea rcx, [rbp - 0x78]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
xor ecx, ecx
mov qword [rbp - 0x50], rcx
cmp byte [rbp - 0x40], 0
je 0x1401738e7
mov rcx, qword [rbp - 0x48]
cmp byte [rcx], cl
xor edx, edx
call fcn.140202340
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x140173923
mov dword [rdi + 0xd8], esi
mov eax, ebx
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x140173907

Function at 0x1401743b0
Capabilities:
Initialize winsock library

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x1f8
vzeroupper
lea rbp, [rsp + 0x230]
lea rdx, [rbp - 0x1d0]
mov qword [rbp - 0x204], rdx
mov ecx, 0x202
mov dword [rbp - 0x1fc], ecx
lea rcx, [rbp - 0x1f8]
call fcn.14000a380
mov rdx, qword [rbp - 0x204]
mov ecx, dword [rbp - 0x1fc]
call sub.WS2_32.dll_WSAStartup
mov ebx, eax
lea rcx, [rbp - 0x1f8]
call fcn.14000a3d0
test ebx, ebx
jne 0x14017445f
lea rcx, [0x1405d2710]
mov edx, 1
xor eax, eax
lock cmpxchg dword [rcx], edx
test eax, eax
je 0x14017444a
lea rcx, [rbp - 0x1f8]
call fcn.14000a380
call sub.WS2_32.dll_WSACleanup
lea rcx, [rbp - 0x1f8]
call fcn.14000a3d0
nop
add rsp, 0x1f8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1403c1960]
call fcn.1400086f0
mov rsi, rax
mov rcx, rsi
mov edx, ebx
call fcn.140150a90
mov rcx, rsi
call fcn.140008c60
int3
Function at 0x140176200
Capabilities:
Set socket configuration

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x78
vzeroupper
lea rbp, [rsp + 0xb0]
mov rbx, rcx
test dl, dl
jne 0x140176300
mov rcx, qword [rbx + 8]
call fcn.140143320
cmp eax, 0xffffffff
jne 0x140176262
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov r8d, reloc.WS2_32.dll_recv
add r8, qword [rax + rcx*8]
mov rsi, qword [r8]
test rsi, rsi
je 0x1401763eb
mov rax, rsi
mov eax, dword [rax + 0xd8]
cmp eax, 0x2733
jne 0x1401763da
xor ecx, ecx
mov dword [rbp - 0x48], ecx
mov rcx, qword [rbx + 8]
lea r8, [rbp - 0x48]
mov edx, 0x8004667e
call fcn.140172dc0
cmp eax, 0xffffffff
jne 0x1401762b6
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x1401763ff
mov rax, rdi
mov eax, dword [rax + 0xd8]
test eax, eax
jne 0x140176300
mov rcx, qword [rbx + 8]
call fcn.140143320
cmp eax, 0xffffffff
jne 0x1401762f5
mov rax, qword gs:[0x58]
mov ecx, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov r14, qword [rdx]
test r14, r14
je 0x140176413
mov rax, r14
mov eax, dword [rax + 0xd8]
cmp eax, 0x2733
jne 0x1401763da
mov word [rbp - 0x40], 1
mov word [rbp - 0x3e], 0
mov qword [rbp + 0x10], rbx
mov rsi, qword [rbx + 8]
lea rdi, [rbp - 0x40]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov dword [rsp + 0x20], 4
mov rcx, rsi
mov qword [rbp - 0x80], rcx
mov r9, rdi
mov qword [rbp - 0x88], r9
mov edx, 0xffff
mov dword [rbp - 0x74], edx
mov r8d, 0x80
mov dword [rbp - 0x78], r8d
lea rcx, [rbp - 0x70]
call fcn.14000a380
mov rcx, qword [rbp - 0x80]
mov r9, qword [rbp - 0x88]
mov edx, dword [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
call sub.WS2_32.dll_setsockopt
mov ebx, eax
lea rcx, [rbp - 0x70]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov esi, eax
mov rcx, qword gs:[0x58]
mov eax, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rcx + rax*8]
mov rdi, qword [rdx]
test rdi, rdi
je 0x140176427
mov rax, rdi
mov dword [rax + 0xd8], esi
cmp ebx, 0xffffffff
cmove ebx, dword [rax + 0xd8]
test ebx, ebx
je 0x1401763c9
cmp ebx, 0x2726
je 0x1401763c9
cmp ebx, 0x273a
mov eax, ebx
jne 0x1401763da
mov rbx, qword [rbp + 0x10]
mov rcx, qword [rbx + 8]
call fcn.140143320
mov ebx, eax
mov eax, ebx
add rsp, 0x78
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, r8
lea rax, [0x140205b10]
call rax
mov rsi, rax
jmp 0x140176259
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x1401762ad
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov r14, rax
jmp 0x1401762ec
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rdi, rax
jmp 0x1401763a0
Function at 0x14017eae0
Capabilities:
Get socket status

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x98
vzeroupper
lea rbp, [rsp + 0x30]
mov rax, qword [0x1405d2580]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rdx
xor edx, edx
mov dword [rbp + 0x60], edx
lea rdx, [rbp + 0x60]
cmp dword [rcx], ecx
call fcn.140202300
mov rcx, qword [rbp + 0xb0]
mov rsi, qword [rcx + 8]
test dword [rsp], esp
sub rsp, 0x10
lea rdi, [rsp + 0x30]
mov qword [rdi], 1
mov qword [rdi + 8], rsi
test dword [rsp], esp
sub rsp, 0x10
lea r14, [rsp + 0x30]
mov qword [r14], 1
mov qword [r14 + 8], rsi
xor edx, edx
mov qword [rbp + 0x58], rdx
lea rdx, [rbp + 0x58]
xor ecx, ecx
call fcn.14017ddb0
lea r15, [rbp + 0x58]
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov qword [rsp + 0x20], r15
mov r9, r14
mov qword [rbp + 0x1c], r9
mov r8, rdi
mov qword [rbp + 0x14], r8
xor ecx, ecx
mov dword [rbp + 0x24], ecx
xor edx, edx
mov qword [rbp + 0xc], rdx
lea rcx, [rbp + 0x30]
call fcn.14000a380
mov r9, qword [rbp + 0x1c]
mov r8, qword [rbp + 0x14]
mov ecx, dword [rbp + 0x24]
mov rdx, qword [rbp + 0xc]
call sub.WS2_32.dll_select
mov ebx, eax
lea rcx, [rbp + 0x30]
call fcn.14000a3d0
call sub.KERNEL32.dll_GetLastError
mov r15d, eax
mov rcx, qword gs:[0x58]
mov edx, dword [0x1405ebc0c]
mov eax, reloc.WS2_32.dll_recv
add rax, qword [rcx + rdx*8]
mov r13, qword [rax]
test r13, r13
je 0x14017ec40
mov dword [r13 + 0xd8], r15d
cmp ebx, 0xffffffff
je 0x14017ec51
cmp dword [r14], 0
je 0x14017ebff
cmp qword [r14 + 8], rsi
je 0x14017ec2e
cmp dword [rdi], 0
je 0x14017ec0a
cmp qword [rdi + 8], rsi
je 0x14017ec1c
mov rbx, qword [rbp + 0xb8]
mov byte [rbx], 0
xor r13d, r13d
jmp 0x14017eca8
mov rbx, qword [rbp + 0xb8]
mov byte [rbx], 1
mov r13d, 1
jmp 0x14017eca8
mov rbx, qword [rbp + 0xb8]
mov byte [rbx], 0
mov r13d, 1
jmp 0x14017eca8
mov rcx, rax
lea rax, [0x140205b10]
call rax
mov r13, rax
jmp 0x14017ebe7
lea rcx, [0x1403c1960]
call fcn.1400086f0
mov rbx, rax
mov rcx, qword gs:[0x58]
mov eax, dword [0x1405ebc0c]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rcx + rax*8]
mov rsi, qword [rdx]
test rsi, rsi
je 0x14017ec82
jmp 0x14017ec91
mov rcx, rdx
lea rax, [0x140205b10]
call rax
mov rsi, rax
mov edx, dword [rsi + 0xd8]
mov rcx, rbx
call fcn.140150a90
mov rcx, rbx
call fcn.140008c60
int3
cmp byte [rbp + 0x60], 0
je 0x14017ecbc
mov rcx, qword [rbp + 0xb0]
xor edx, edx
call fcn.140202340
movzx eax, r13b
lea rcx, [0x1405d2580]
mov rcx, qword [rcx]
cmp qword [rbp + 0x28], rcx
je 0x14017ecd5
call fcn.140008270
nop
lea rsp, [rbp + 0x68]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret