joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4618a0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0x88], 0x80
push eax
push dword [ebp + 8]
call dword [sym.imp.WS2_32.dll_getsockname]
cmp eax, 0xffffffff
jne 0x4618ee
or eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov ax, word [ebp - 0x84]
cmp ax, 2
je 0x461901
cmp ax, 0x17
jne 0x461910
push dword [ebp - 0x82]
call dword [sym.imp.WS2_32.dll_ntohs]
mov word [esi], ax
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop esi
call fcn.005091c5
mov esp, ebp
pop ebp
ret

Function at 0x461a40
Capabilities:
Convert ip address from string
Create tcp socket
Create udp socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
push 0x98
push 0
push esi
mov dword [ebp - 0x108], 1
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp + 0x10]
lea ecx, [esi + 8]
add esp, 0xc
mov dword [esi], eax
mov dword [esi + 0x8c], 0xffffffff
mov dword [esi + 4], edi
mov dword [esi + 0x88], ecx
sub eax, 4
je 0x461acf
sub eax, 2
je 0x461ba9
mov eax, dword [esi + 0x8c]
cmp eax, 0xffffffff
je 0x461ab0
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
pop edi
mov dword [esi + 0x8c], 0xffffffff
mov eax, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov eax, 2
mov word [ecx], ax
lea eax, [ecx + 4]
push eax
push edi
push 2
mov dword [esi + 0x94], 0x10
call dword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
jle 0x461a9e
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [esi + 0x8c], eax
cmp eax, 0xffffffff
jne 0x461b4c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
lea eax, [ebp - 0x104]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror_s]
lea eax, [ebp - 0x104]
push eax
push 4
push str.init_socket_suff__:_IPv_c_socket_not_available:__s_n
push 0x309
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_srcgenlibminiserverminiserver.c
push 4
push 2
call fcn.0040d4d0
add esp, 0x28
jmp 0x461a9e
push 4
lea ecx, [ebp - 0x108]
push ecx
push 4
push 0xffff
push eax
call dword [sym.imp.WS2_32.dll_setsockopt]
cmp eax, 0xffffffff
jne 0x461ba9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
lea eax, [ebp - 0x104]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror_s]
lea eax, [ebp - 0x104]
push eax
push str.init_socket_suff__:_unable_to_set_SO_REUSEADDR:__s_n
push 0x333
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_srcgenlibminiserverminiserver.c
push 4
push 2
call fcn.0040d4d0
add esp, 0x24
jmp 0x461a9e
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
xor ecx, ebp
pop esi
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x462a60
Capabilities:
Create udp socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov edi, dword [ebp + 8]
mov ecx, 0x55f364
mov dword [edi + 0x24], 0xffffffff
lea edx, [ecx + 1]
mov dword [edi + 0x28], 0xffffffff
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x462a90
sub ecx, edx
je 0x462b0e
push 0
push 2
push 2
mov byte [ebp - 0x105], 4
call dword [sym.imp.WS2_32.dll_socket]
mov dword [edi + 0x24], eax
cmp eax, 0xffffffff
jne 0x462ae7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
lea eax, [ebp - 0x104]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror_s]
add esp, 0xc
mov eax, 0xffffff33
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
push 1
lea ecx, [ebp - 0x105]
push ecx
push 0xa
push 0
push eax
call dword [sym.imp.WS2_32.dll_setsockopt]
push dword [edi + 0x24]
call fcn.0046a060
mov eax, dword [edi + 0x24]
add esp, 4
mov dword [0x55c274], eax
mov ecx, 0x55f364
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x462b16
lea eax, [edi + 0x10]
push ebx
sub ecx, edx
je 0x462b58
push eax
call fcn.00462710
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x462b5e
push dword [edi + 0x24]
call dword [sym.imp.WS2_32.dll_closesocket]
push dword [edi + 0x28]
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, ebx
pop ebx
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov dword [eax], 0xffffffff
mov ecx, dword [ebp - 4]
xor eax, eax
pop ebx
xor ecx, ebp
pop edi
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x462b70
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xab0
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xorps xmm0, xmm0
mov dword [ebp - 0xa90], 0x80
push edi
push 0x1d0
movups xmmword [ebp - 0xab0], xmm0
lea esi, [ebp - 0xa0c]
mov dword [ebp - 0xa98], 0
movq qword [ebp - 0xaa0], xmm0
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x462c15
mov eax, dword [ebp + 8]
cmp eax, dword [0x55c274]
jne 0x462be4
push 9
push ebx
call fcn.004691e0
add esp, 8
jmp 0x462bed
push ebx
call fcn.004691b0
add esp, 4
lea eax, [ebx + 0x114]
push 0x9c4
push eax
call fcn.0045d690
add esp, 8
test eax, eax
jne 0x462c0d
mov esi, dword [ebx + 0x114]
jmp 0x462c15
push ebx
call edi
add esp, 4
xor ebx, ebx
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0xa8c]
push eax
push 0
push 0x9c3
push esi
push dword [ebp + 8]
call dword [sym.imp.WS2_32.dll_recvfrom]
mov dword [ebp - 0xa94], eax
test eax, eax
jle 0x462d41
mov byte [eax + esi], 0
lea eax, [ebp - 0x48]
movzx ecx, word [ebp - 0xa8c]
push 0x41
sub ecx, 2
je 0x462c75
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x40
lea eax, [ebp - 0x48]
push str._Invalid_address_family_
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
add esp, 0x18
jmp 0x462c84
push eax
lea eax, [ebp - 0xa88]
push eax
push 2
call sub.WS2_32.dll_inet_ntop
lea eax, [ebp - 0x48]
push eax
push esi
push str.Start_of_received_response______________________________________________________n_s_nEnd_of_received_response________________________________________________________nFrom_host__s_n
push 0x36e
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_src_ssdp_ssdp_server.c
push 0
push 2
call fcn.0040d4d0
add esp, 0x1c
test ebx, ebx
je 0x462d51
mov ecx, dword [ebp - 0xa94]
lea edi, [ebx + 0x150]
mov eax, dword [ebx + 0x114]
lea esi, [ebp - 0xa8c]
add dword [ebx + 0x118], ecx
push ebx
push 0x462d70
mov byte [ecx + eax], 0
lea eax, [ebp - 0xab0]
mov ecx, 0x20
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0045bb80
lea eax, [ebp - 0xab0]
push 0x462a40
push eax
call fcn.0045bb60
lea eax, [ebp - 0xab0]
push 1
push eax
call fcn.0045bbc0
push 0
lea eax, [ebp - 0xab0]
push eax
push 0x563440
call fcn.0045bbf0
add esp, 0x28
test eax, eax
je 0x462d51
push ebx
call fcn.00468130
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x462d51
push ebx
call fcn.00468130
push ebx
call edi
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x4685c0
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x144]
mov ecx, dword [esi + 0x148]
add ecx, dword [eax]
mov eax, dword [esi + 0x148]
mov dword [esi + 0x10c], ecx
mov dword [esi + 0x110], 0
mov dword [esi + 0x140], eax
cmp dword [esi + 0xcc], 0
je 0x468616
mov eax, dword [esi + 4]
add eax, 0xfffffffe
cmp eax, 7
ja case.0x46860f.4
movzx eax, byte [eax + 0x4687f0]
jmp dword [eax*4 + 0x4687e8]
mov eax, dword [esi + 0xb4]
cmp eax, 0xcc
je case.0x46860f.2
cmp eax, 0x130
je case.0x46860f.2
cmp eax, 0x64
jl 0x468642
cmp eax, 0xc7
jle case.0x46860f.2
mov eax, dword [esi + 0xb0]
cmp eax, 3
je case.0x46860f.2
cmp eax, 9
je case.0x46860f.2
cmp eax, 6
je case.0x46860f.2
cmp eax, 7
je case.0x46860f.2
cmp eax, 8
je case.0x46860f.2
push ebx
push edi
lea eax, [ebp - 0x30]
mov dword [ebp - 0x28], 0x16
push eax
lea edi, [esi + 0xd8]
push 0
push edi
call fcn.0045b350
add esp, 0xc
test eax, eax
je 0x46870a
mov eax, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
add eax, ebx
mov dword [ebp - 4], eax
mov al, byte [eax]
mov byte [ebp + 0xb], al
mov al, byte [ebx]
test al, al
je 0x4686d0
mov edi, ebx
movsx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi], al
lea edi, [edi + 1]
mov al, byte [edi]
add esp, 4
test al, al
jne 0x4686b2
lea edi, [esi + 0xd8]
mov eax, dword [ebp - 4]
push str.chunked
push ebx
mov byte [eax], 0
call sub.VCRUNTIME140.dll_strstr
mov ecx, dword [ebp - 4]
add esp, 8
mov dl, byte [ebp + 0xb]
mov byte [ecx], dl
test eax, eax
je 0x46870a
sub eax, ebx
js 0x46870a
pop edi
pop ebx
mov dword [esi + 0x134], 3
mov eax, 6
pop esi
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x54], 3
push eax
push 0
push edi
call fcn.0045b350
add esp, 0xc
test eax, eax
je 0x468792
mov eax, dword [eax + 8]
mov ebx, dword [eax + 0x10]
mov edi, dword [eax + 0xc]
mov dword [ebp + 8], edi
test ebx, ebx
je 0x468773
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push 0xa
mov dword [eax], 0
lea eax, [ebp - 4]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov edi, eax
add esp, 0xc
test edi, edi
js 0x468773
mov ecx, dword [ebp + 8]
add ecx, ebx
cmp dword [ebp - 4], ecx
jne 0x468773
cmp edi, 0x7fffffff
jne 0x468776
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [eax], 0x22
jne 0x468776
or edi, 0xffffffff
mov dword [esi + 0x138], edi
mov eax, 6
pop edi
pop ebx
mov dword [esi + 0x134], 2
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0xcc], 0
je 0x4687c1
cmp dword [esi + 4], 8
jne 0x4687ab
mov dword [esi + 0x12c], 1
pop edi
pop ebx
mov dword [esi + 0x128], 0x19b
mov eax, 3
pop esi
mov esp, ebp
pop ebp
ret
pop edi
pop ebx
mov dword [esi + 0x134], 4
mov eax, 6
pop esi
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x130], 4
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x46a0b0
Capabilities:
Get socket status
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
push edi
push 0
mov dword [ebp - 0x210], eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov esi, dword [esi]
add esp, 4
cmp dword [ebp + 0x18], 0
mov dword [ebp - 0x220], edx
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x108], 0
je 0x46a120
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x20c], 1
jmp 0x46a130
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x108], 1
mov eax, dword [ebx]
lea edi, [esi + 1]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], 0
cmp dword [ebx], 0
mov eax, dword [sym.imp.WS2_32.dll_select]
jge 0x46a153
push 0
jmp 0x46a15a
lea ecx, [ebp - 0x21c]
push ecx
push 0
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
push edi
call eax
test eax, eax
je 0x46a22a
cmp eax, 0xffffffff
jne 0x46a187
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [eax], 4
jne 0x46a1a5
jmp 0x46a145
cmp dword [ebp + 0x18], 0
je 0x46a1bb
push 0
push dword [ebp + 0x10]
push dword [ebp - 0x210]
push esi
call dword [sym.imp.WS2_32.dll_recv]
mov edi, eax
test edi, edi
jns 0x46a1fd
pop edi
pop esi
mov eax, 0xffffff30
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 0x10]
xor edi, edi
test esi, esi
je 0x46a1a1
mov eax, dword [ebp - 0x210]
push 4
push esi
add eax, edi
push eax
push dword [ebp - 0x220]
call dword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x46a1e9
add edi, eax
sub esi, eax
jne 0x46a1c4
jmp 0x46a1a1
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
cmp dword [ebx], 0
je 0x46a217
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov ecx, dword [ebp - 0x214]
add esp, 4
sub ecx, eax
add dword [ebx], ecx
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 0xffffff31
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x46ab80
Capabilities:
Convert ip address from string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x150], eax
mov edi, 0xffffff98
mov eax, dword [ebp + 0x10]
push 0x80
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x144]
push 0
push eax
mov dword [ebp - 0x14c], esi
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [ebp + 0x1c]
add esp, 0xc
mov eax, ebx
sub eax, 2
je 0x46ac32
sub eax, 0x15
jne 0x46ac64
mov eax, 0x17
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x13c]
push eax
push esi
call fcn.0046ba70
add esp, 4
mov edx, str.FF02::C
test eax, eax
mov ecx, str.FF05::C
cmove ecx, edx
push ecx
push 0x17
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x142], ax
mov eax, dword [0x55bcd4]
mov dword [ebp - 0x12c], eax
jmp 0x46ac64
mov eax, 2
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x140]
push eax
push str.239.255.255.250
push 2
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x142], ax
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
test esi, esi
je 0x46acef
push dword [ebp - 0x148]
lea eax, [ebp - 0xb8]
push str._s::upnp:rootdevice
push 0xb4
push eax
call fcn.0040f470
add esp, 0x10
test eax, eax
js 0x46adc9
cmp eax, 0xb4
jae 0x46adc9
mov eax, dword [ebp + 0x28]
push eax
mov eax, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push eax
push ebx
lea eax, [ebp - 0xc4]
push eax
mov eax, dword [ebp + 0x18]
push eax
push dword [ebp - 0x14c]
lea eax, [ebp - 0xb8]
push eax
push str.upnp:rootdevice
push 1
call fcn.0046a910
add esp, 0x28
push dword [ebp + 0x28]
lea eax, [ebp - 0xc0]
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push ebx
push eax
push dword [ebp + 0x18]
mov eax, dword [ebp - 0x148]
push dword [ebp - 0x14c]
push eax
push eax
push 1
call fcn.0046a910
push dword [ebp - 0x150]
lea eax, [ebp - 0xb8]
push dword [ebp - 0x148]
push str._s::_s
push 0xb4
push eax
call fcn.0040f470
add esp, 0x3c
test eax, eax
js 0x46adc9
cmp eax, 0xb4
jae 0x46adc9
mov eax, dword [ebp + 0x28]
push eax
mov eax, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push eax
push ebx
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp + 0x18]
push eax
push dword [ebp - 0x14c]
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x150]
push 1
call fcn.0046a910
add esp, 0x28
test esi, esi
je 0x46ad8e
cmp dword [ebp - 0xc4], 0
je 0x46adc9
cmp dword [ebp - 0xc0], 0
je 0x46adc9
cmp dword [ebp - 0xbc], 0
je 0x46adc9
test esi, esi
je 0x46adaf
lea eax, [ebp - 0xc4]
push eax
push 3
jmp 0x46adb8
lea eax, [ebp - 0xc0]
push eax
push 2
lea eax, [ebp - 0x144]
push eax
call fcn.0046b310
mov edi, eax
add esp, 0xc
push dword [ebp - 0xc4]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
push dword [ebp - 0xc0]
call esi
push dword [ebp - 0xbc]
call esi
mov ecx, dword [ebp - 4]
add esp, 0xc
mov eax, edi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x46b090
Capabilities:
Convert ip address from string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0x14]
push edi
mov dword [ebp - 0x150], eax
mov edi, 0xffffff98
mov eax, dword [ebp + 0x10]
push 0x80
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x144]
push 0
push eax
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
call sub.VCRUNTIME140.dll_memset
mov ebx, dword [ebp + 0x1c]
add esp, 0xc
mov eax, ebx
sub eax, 2
je 0x46b160
sub eax, 0x15
jne 0x46b192
mov eax, 0x17
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x13c]
push eax
push esi
call fcn.0046ba70
add esp, 4
mov edx, str.FF02::C
test eax, eax
mov ecx, str.FF05::C
cmove ecx, edx
push ecx
push 0x17
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x142], ax
mov eax, dword [0x55bcd4]
mov dword [ebp - 0x12c], eax
jmp 0x46b192
mov eax, 2
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x140]
push eax
push str.239.255.255.250
push 2
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x142], ax
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x46b1ff
push dword [ebp - 0x148]
lea eax, [ebp - 0xb8]
push str._s::upnp:rootdevice
push 0xb4
push eax
call fcn.0040f470
add esp, 0x10
test eax, eax
js 0x46b2d9
cmp eax, 0xb4
jae 0x46b2d9
mov eax, dword [ebp + 0x28]
push eax
mov eax, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push eax
push ebx
lea eax, [ebp - 0xc4]
push eax
mov eax, dword [ebp + 0x18]
push eax
push dword [ebp - 0x14c]
lea eax, [ebp - 0xb8]
push eax
push str.upnp:rootdevice
push 0
call fcn.0046a910
add esp, 0x28
push dword [ebp + 0x28]
lea eax, [ebp - 0xc0]
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push ebx
push eax
push dword [ebp + 0x18]
mov eax, dword [ebp - 0x148]
push dword [ebp - 0x14c]
push eax
push eax
push 0
call fcn.0046a910
push dword [ebp - 0x150]
lea eax, [ebp - 0xb8]
push dword [ebp - 0x148]
push str._s::_s
push 0xb4
push eax
call fcn.0040f470
add esp, 0x3c
test eax, eax
js 0x46b2d9
cmp eax, 0xb4
jae 0x46b2d9
mov eax, dword [ebp + 0x28]
push eax
mov eax, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x20]
push eax
push ebx
lea eax, [ebp - 0xbc]
push eax
mov eax, dword [ebp + 0x18]
push eax
push dword [ebp - 0x14c]
lea eax, [ebp - 0xb8]
push eax
push dword [ebp - 0x150]
push 0
call fcn.0046a910
add esp, 0x28
test esi, esi
je 0x46b29e
cmp dword [ebp - 0xc4], 0
je 0x46b2d9
cmp dword [ebp - 0xc0], 0
je 0x46b2d9
cmp dword [ebp - 0xbc], 0
je 0x46b2d9
test esi, esi
je 0x46b2bf
lea eax, [ebp - 0xc4]
push eax
push 3
jmp 0x46b2c8
lea eax, [ebp - 0xc0]
push eax
push 2
lea eax, [ebp - 0x144]
push eax
call fcn.0046b310
mov edi, eax
add esp, 0xc
push dword [ebp - 0xc4]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
push dword [ebp - 0xc0]
call esi
push dword [ebp - 0xbc]
call esi
mov ecx, dword [ebp - 4]
add esp, 0xc
mov eax, edi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x46b310
Capabilities:
Convert ip address from string
Create udp socket
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov ecx, 0x55f364
push ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], 4
lea edx, [ecx + 1]
mov dword [ebp - 0x14c], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x46b350
sub ecx, edx
je 0x46b387
lea eax, [ebp - 0x150]
push eax
push 0x55f364
push 2
call dword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
jne 0x46b387
mov eax, 0xffffff9b
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx]
push edi
push 0
push 2
push eax
call dword [sym.imp.WS2_32.dll_socket]
mov edi, eax
cmp edi, 0xffffffff
jne 0x46b3cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
lea eax, [ebp - 0x148]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror_s]
add esp, 0xc
mov eax, 0xffffff33
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005091c5
mov esp, ebp
pop ebp
ret
movzx eax, word [ebx]
sub eax, 2
je 0x46b3e6
mov dword [ebp - 0x14c], 0xffffff38
jmp 0x46b4d5
push esi
push 0x41
lea eax, [ebp - 0x48]
push eax
lea eax, [ebx + 4]
push eax
push 2
call sub.WS2_32.dll_inet_ntop
mov esi, dword [sym.imp.WS2_32.dll_setsockopt]
lea eax, [ebp - 0x150]
push 4
push eax
push 9
push 0
push edi
call esi
push 4
lea eax, [ebp - 0x154]
push eax
push 0xa
push 0
push edi
call esi
xor esi, esi
cmp dword [ebp + 0xc], esi
jle 0x46b4d4
nop dword [eax]
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x48]
push dword [eax + esi*4]
push ecx
push str.____SSDP_SEND_to__s_____n_s_n
push 0x127
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_src_ssdp_ssdp_device.c
push 0
push 2
call fcn.0040d4d0
mov edx, dword [eax + esi*4]
add esp, 0x1c
mov eax, edx
lea ecx, [eax + 1]
mov dword [ebp - 0x15c], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x46b466
sub eax, dword [ebp - 0x15c]
push 0x10
push ebx
push 0
push eax
push edx
push edi
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, 0xffffffff
je 0x46b48e
inc esi
cmp esi, dword [ebp + 0xc]
jl 0x46b430
jmp 0x46b4d4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
lea eax, [ebp - 0x148]
push 0x100
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror_s]
lea eax, [ebp - 0x148]
push eax
push str.SSDP_LIB:_New_Request_Handler:Error_in_socket__:__s_n
push 0x136
push str.D:UsersphiliDropboxDevelopmentlibpupnppupnpupnp_src_ssdp_ssdp_device.c
push 0
push 2
call fcn.0040d4d0
add esp, 0x24
mov dword [ebp - 0x14c], 0xffffff37
pop esi
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x14c]
xor ecx, ebp
pop edi
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret
Function at 0x46b630
Capabilities:
Convert ip address from string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x55ca98]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - 0x144], eax
mov edi, 0xffffff98
mov eax, dword [ebp + 0x10]
push 0x80
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x138]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp + 0x18]
xor esi, esi
add esp, 0xc
mov dword [ebp - 0x13c], esi
sub eax, 2
je 0x46b6e7
sub eax, 0x15
jne 0x46b719
mov eax, 0x17
mov word [ebp - 0x138], ax
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x140]
call fcn.0046ba70
add esp, 4
mov edx, str.FF02::C
test eax, eax
mov ecx, str.FF05::C
cmove ecx, edx
push ecx
push 0x17
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x136], ax
mov eax, dword [0x55bcd4]
mov dword [ebp - 0x120], eax
jmp 0x46b719
mov eax, 2
mov word [ebp - 0x138], ax
lea eax, [ebp - 0x134]
push eax
push str.239.255.255.250
push 2
call dword [sym.imp.WS2_32.dll_inet_pton]
push 0x76c
call dword [sym.imp.WS2_32.dll_htons]
mov word [ebp - 0x136], ax
push ebx
push dword [ebp - 0x144]
lea eax, [ebp - 0xb8]
push str._s::_s
push 0xb4
push eax
call fcn.0040f470
add esp, 0x14
test eax, eax
js 0x46b79c
cmp eax, 0xb4
jae 0x46b79c
push dword [ebp + 0x24]
lea eax, [ebp - 0x13c]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push eax
push dword [ebp + 0x14]
lea eax, [ebp - 0xb8]
push dword [ebp - 0x140]
push eax
push ebx
push 1
call fcn.0046a910
mov esi, dword [ebp - 0x13c]
add esp, 0x28
test esi, esi
je 0x46b79c
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x138]
push 1
push eax
call fcn.0046b310
mov esi, dword [ebp - 0x13c]
add esp, 0xc
mov edi, eax
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [ebp - 4]
add esp, 4
mov eax, edi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.005091c5
mov esp, ebp
pop ebp
ret