joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4318b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call fcn.004317a0
mov byte [esp + 0xc4], 2
push 0x475bf0
push ecx
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x431959
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc

Function at 0x4319c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call fcn.004317a0
mov byte [esp + 0xc4], 2
push str._net
push ecx
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x431a69
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x431ad0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call fcn.004317a0
mov byte [esp + 0xc4], 2
push str._port
push ecx
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x431b79
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc

Function at 0x431cd0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00431be0
mov byte [esp + 0xc4], 2
push str._signal
push ecx
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x431d79
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x431de0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00431be0
mov byte [esp + 0xc4], 2
push str._pri_nodetype
push ecx
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x431e89
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc

Function at 0x431ef0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46cb75
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc0], 1
mov eax, dword [esp + 0xcc]
sub eax, 1
je 0x431f77
sub eax, 1
je 0x431f63
lea ecx, [esp + 0x34]
push 0x4757b4
push ecx
call fcn.00408c70
add esp, 8
jmp 0x431fc8
lea edx, [esp + 0x34]
push 0x475bdc
push edx
call fcn.00408c70
add esp, 8
jmp 0x431fc8
lea eax, [esp + 0x10]
push eax
call fcn.00430e70
mov byte [esp + 0xc0], 2
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.004188f0
add esp, 8
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x28], 0x10
jb 0x431fb3
mov edx, dword [esp + 0x14]
push edx
call fcn.0044afbb
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], 0
mov byte [esp + 0x14], 0
lea eax, [esp + 0x34]
push str._ss7
push eax
call fcn.00408c70
add esp, 8
push esi
lea ecx, [esp + 0x30]
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc0], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xbc
ret 8
Function at 0x432030
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push ebx
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
xor ebx, ebx
push eax
mov dword [esp + 0x10], ebx
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 1
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
push 0x475bbc
push ecx
push eax
lea edx, [esp + 0x40]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x4320ca
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], bl
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0xbc
ret 4

Function at 0x432130
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
mov ecx, dword [esp + 0xd0]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov ecx, dword [esp + 0xd4]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x48]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x4321e0
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x432250
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46cb75
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc0], 1
mov ecx, dword [esp + 0xcc]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00431ef0
mov byte [esp + 0xc0], 2
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd0]
push ecx
push ecx
push str._port
push ecx
push edx
push ecx
push str._net
push ecx
push eax
lea eax, [esp + 0x58]
push eax
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x28], 0x10
jb 0x432321
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc0], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xbc
ret 0x10

Function at 0x432390
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46cb75
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc0], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc0], 2
mov edx, dword [esp + 0xcc]
push str._opc
push ecx
push edx
push ecx
push str._net
push ecx
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x28], 0x10
jb 0x43244c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc0], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xbc
ret 8
Function at 0x4324b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46cb75
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc0], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc0], 2
mov edx, dword [esp + 0xcc]
push str._dpc
push ecx
push edx
push ecx
push str._net
push ecx
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x28], 0x10
jb 0x43256c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc0], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xbc
ret 8

Function at 0x4325d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._dev
push ecx
push edx
push ecx
push 0x475c30
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x4326ad
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x432710
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._pcm
push ecx
push edx
push ecx
push 0x475c30
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x4327ed
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc

Function at 0x432850
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._slc
push ecx
push edx
push ecx
push 0x475c30
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x43292d
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x432990
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46cb75
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xb8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xc8]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc0], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc0], 2
mov edx, dword [esp + 0xcc]
push str._portnum
push ecx
push edx
push ecx
push str._net
push ecx
push eax
lea eax, [esp + 0x50]
push eax
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc0], 1
cmp dword [esp + 0x28], 0x10
jb 0x432a4c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc0], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xb8]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xbc
ret 8

Function at 0x432ab0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._dpc
push ecx
push edx
push ecx
push str._port
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x432b8d
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc
Function at 0x432bf0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._cic
push ecx
push edx
push ecx
push str._port
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x432ccd
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc

Function at 0x432d30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46c975
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x481524]
xor eax, esp
push eax
lea eax, [esp + 0xbc]
mov dword fs:[0], eax
mov esi, dword [esp + 0xcc]
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x10], 0
call fcn.00402ed0
mov dword [esp + 0xc4], 1
push 2
lea ecx, [esp + 0x14]
push ecx
call fcn.00431ef0
mov byte [esp + 0xc4], 2
mov edx, dword [esp + 0xd4]
push str._type
push ecx
push edx
push ecx
push str._port
push ecx
mov ecx, dword [esp + 0xe8]
push ecx
push ecx
push str._net
push ecx
push eax
lea edx, [esp + 0x60]
push edx
call fcn.004188f0
add esp, 0xc
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 0xc
push eax
call fcn.004116b0
add esp, 4
push eax
call fcn.00408c70
add esp, 8
mov byte [esp + 0xc4], 1
cmp dword [esp + 0x28], 0x10
jb 0x432e0d
mov eax, dword [esp + 0x14]
push eax
call fcn.0044afbb
add esp, 4
push esi
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
call fcn.00402fe0
mov dword [esp + 0xc], 1
mov byte [esp + 0xc4], 0
lea ecx, [esp + 0x80]
call fcn.00402f70
lea ecx, [esp + 0x80]
call fcn.00402910
mov eax, esi
mov ecx, dword [esp + 0xbc]
mov dword fs:[0], ecx
pop ecx
pop esi
add esp, 0xc0
ret 0xc