joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400f27d0
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov rdi, rcx
mov rsi, qword [rcx]
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x1400f27e7
dec ecx
jmp 0x1400f27f1
mov rcx, rsi
call dbg.init
mov ecx, eax
mov edx, 1
call fcn.14017ee1c
mov edx, 8
mov rcx, rdi
call sym.__rust_dealloc
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x1400f2813
dec ecx
jmp 0x1400f281d
mov rcx, rsi
call dbg.init
mov ecx, eax
xor edx, edx
add rsp, 0x68
pop rdi
pop rsi
jmp fcn.14017ee1c

Function at 0x1400f4550
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x498
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x38], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x48], rax
xor esi, esi
mov edi, 0xffffffff
xor r13d, r13d
xor ebx, ebx
cmp r8, 0x201
jae 0x1400f45e0
jmp 0x1400f45bf
jae 0x1400f468e
cmp r8, 0x201
jae 0x1400f45e0
mov r14d, 0x200
lea r15, [rsp + 0x98]
mov r12, r8
jmp 0x1400f4626
sub r8, rbx
sub r13, rbx
cmp r13, r8
jae 0x1400f4607
lea rcx, [rsp + 0x28]
mov rdx, rbx
call dbg.do_reserve_and_handle<core::mem::maybe_uninit::MaybeUninit<u16>, alloc::alloc::Global>
mov rsi, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x48], rax
cmp rsi, rdi
mov ebx, 0xffffffff
cmovb rbx, rsi
mov qword [rsp + 0x38], rbx
mov r13, rsi
mov r14, rbx
mov r15, qword [rsp + 0x48]
mov r12, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov ecx, r12d
mov rdx, r15
call sub.kernel32.dll_GetCurrentDirectoryW
mov ebp, eax
test eax, eax
jne 0x1400f464b
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x1400f46f3
mov r8d, ebp
cmp r12, r8
jne 0x1400f45b0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400f4720
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
mov edi, 0xffffffff
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jb 0x1400f45bf
jmp 0x1400f45e0
cmp r14, r8
jb 0x1400f473a
lea rcx, [rsp + 0x50]
mov rdx, r15
call dbg.from_wide
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x80], xmm1
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0x40]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
cmp qword [rsp + 0x28], 0
je 0x1400f46de
mov rcx, qword [rsp + 0x30]
mov edx, 2
call sym.__rust_dealloc
nop
add rsp, 0x498
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x40]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
cmp qword [rsp + 0x28], 0
jne 0x1400f46cf
jmp 0x1400f46de
lea rcx, [0x140282002]
lea r8, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call dbg.panic
jmp 0x1400f474f
lea rax, str.library_std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r14
mov r8, rax
call dbg.slice_end_index_len_fail
ud2
Function at 0x1400f81e0
Capabilities:
Read file via mapping

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc8
mov rax, r8
mov rsi, rcx
mov dword [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 7
mov qword [rsp + 0x54], 0
mov word [rsp + 0x5c], 0
mov byte [rsp + 0x58], 1
lea r8, [rsp + 0x38]
mov rcx, rdx
mov rdx, rax
call dbg.open
mov rdi, rdx
test rax, rax
je 0x1400f8270
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], rdi
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rcx, [rsp + 0x38]
mov rdx, rdi
call dbg.file_attr
cmp dword [rsp + 0x38], 2
jne 0x1400f829f
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], 2
jmp 0x1400f82eb
movups xmm0, xmmword [rsp + 0x38]
movups xmm1, xmmword [rsp + 0x48]
movups xmm2, xmmword [rsp + 0x58]
movups xmm3, xmmword [rsp + 0x68]
movaps xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xc0], rax
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
cmp qword [rsp + 0x80], 2
jne 0x1400f8317
lea rcx, [rsp + 0x88]
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
mov rcx, rdi
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.14017eba4
mov r12, qword [rsp + 0xb8]
test rdi, rdi
je 0x1400f8375
mov qword [rsp + 0x80], 0
call sub.kernel32.dll_GetCurrentProcess
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x80]
mov rcx, rax
mov rdx, rdi
mov r8, rax
call sub.kernel32.dll_DuplicateHandle
test eax, eax
je 0x1400f83f1
mov rbx, qword [rsp + 0x80]
jmp 0x1400f8377
xor ebx, ebx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
mov r8d, 2
xor r9d, r9d
call sub.kernel32.dll_CreateFileMappingA
test rax, rax
je 0x1400f83e0
mov r14, rax
mov qword [rsp + 0x20], r12
mov rcx, rax
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_MapViewOfFile
mov r15, rax
mov rcx, r14
call fcn.14017eba4
test r15, r15
je 0x1400f83e0
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r12
mov qword [rsi], 1
jmp 0x1400f841d
mov qword [rsi], 0
mov rcx, rbx
call fcn.14017eba4
jmp 0x1400f841d
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
mov rcx, rdi
call fcn.14017eba4
jmp 0x1400f825f
Function at 0x1401139e0
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0xa8

Function at 0x140116fb0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x40
mov ecx, dword [0x1401ea540]
test ecx, ecx
je 0x1401170a2
dec ecx
call fcn.14017ee14
cmp rax, 2
jb 0x140116fe0
cmp qword [rax + 8], 0
je 0x140116fe0
add rax, 0x10
jmp 0x14011709c
mov ecx, dword [0x1401ea540]
test ecx, ecx
je 0x1401170b5
dec ecx
call fcn.14017ee14
cmp rax, 1
je 0x14011709a
test rax, rax
jne 0x140117060
mov qword [rsp + 0x30], 0
lea rax, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
mov qword [rsp + 0x28], rax
movzx eax, byte [0x1402e61a8]
mov edx, 0x18
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x1401170e1
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rax], xmm0
mov ecx, dword [0x1401ea540]
test ecx, ecx
je 0x1401170c8
dec ecx
mov rdx, rax
mov rsi, rax
call fcn.14017ee1c
mov rax, rsi
mov rdx, rax
add rax, 0x10
mov rcx, qword [rdx + 0x10]
cmp qword [rdx + 8], 0
mov qword [rdx + 8], 1
mov qword [rdx + 0x10], 0
je 0x14011709c
test rcx, rcx
je 0x14011709c
lock dec qword [rcx]
jne 0x14011709c
mov rsi, rax
call dbg.drop_slow<std::sync::mutex::Mutex<alloc::vec::Vec<u8, alloc::alloc::Global>>, alloc::alloc::Global>
mov rax, rsi
jmp 0x14011709c
xor eax, eax
add rsp, 0x40
pop rsi
ret
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
call dbg.init
mov ecx, eax
jmp 0x140116fc5
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
call dbg.init
mov ecx, eax
jmp 0x140116ff0
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
mov rsi, rax
call dbg.init
mov ecx, eax
mov rax, rsi
jmp 0x140117052
mov ecx, 8
mov edx, 0x18
call dbg.handle_alloc_error
ud2

Function at 0x140117180
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov rdi, rcx
mov rsi, qword [rcx]
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x140117197
dec ecx
jmp 0x1401171a1
mov rcx, rsi
call dbg.init
mov ecx, eax
mov edx, 1
call fcn.14017ee1c
cmp qword [rdi + 8], 0
je 0x1401171ca
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x1401171ca
lock dec qword [rax]
jne 0x1401171ca
mov rcx, qword [rdi + 0x10]
call dbg.drop_slow<std::sync::mutex::Mutex<alloc::vec::Vec<u8, alloc::alloc::Global>>, alloc::alloc::Global>
mov edx, 8
mov rcx, rdi
call sym.__rust_dealloc
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x1401171e2
dec ecx
jmp 0x1401171ec
mov rcx, rsi
call dbg.init
mov ecx, eax
xor edx, edx
add rsp, 0x68
pop rdi
pop rsi
jmp fcn.14017ee1c
Function at 0x140117a30
Capabilities:
Resolve dns

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x1f0
mov rax, rdx
mov rsi, rcx
mov rdx, qword [rdx]
mov rdi, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov word [rsp + 0x2e], ax
mov rax, qword [0x1402e6118]
cmp rax, 3
jne 0x140117c0f
lea rax, [rsp + 0x2e]
mov qword [rsp + 0x38], rax
cmp rdi, 0x17f
ja 0x140117c1f
lea rbx, [rsp + 0x70]
mov rcx, rbx
mov r8, rdi
call sym.memcpy
mov byte [rsp + rdi + 0x70], 0
lea rax, [rdi + 1]
cmp rdi, 0xe
ja 0x140117ab8
xor edx, edx
nop dword [rax]
cmp byte [rsp + rdx + 0x70], 0
je 0x140117b74
inc rdx
cmp rax, rdx
jne 0x140117aa0
jmp 0x140117bd5
lea rcx, [rsp + 0x77]
and rcx, 0xfffffffffffffff8
sub rcx, rbx
je 0x140117aee
xor edx, edx
nop dword [rax + rax]
cmp byte [rsp + rdx + 0x70], 0
je 0x140117b74
inc rdx
cmp rcx, rdx
jne 0x140117ad0
lea rdx, [rdi - 0xf]
cmp rcx, rdx
jbe 0x140117af2
jmp 0x140117b3e
lea rdx, [rdi - 0xf]
movdqa xmm0, xmmword [0x1401f0e00]
movabs r8, 0x8080808080808080
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rsp + rcx + 0x70]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r9, xmm2
test r9, r8
jne 0x140117b3e
add rcx, 0x10
cmp rcx, rdx
jbe 0x140117b10
sub rax, rcx
je 0x140117bd5
lea r8, [rsp + rcx]
add r8, 0x70
xor edx, edx
nop word cs:[rax + rax]
cmp byte [r8 + rdx], 0
je 0x140117b71
inc rdx
cmp rax, rdx
jne 0x140117b60
jmp 0x140117bd5
add rdx, rcx
cmp rdx, rdi
jne 0x140117bd5
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x70]
lea r8, [rsp + 0x40]
lea r9, [rsp + 0x30]
xor edx, edx
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x140117bf2
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
jmp 0x140117be7
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rax
mov qword [rsi], 1
add rsp, 0x1f0
pop rbx
pop rdi
pop rsi
ret
mov rax, qword [rsp + 0x30]
movzx ecx, word [rsp + 0x2e]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], cx
xor eax, eax
mov qword [rsi], rax
jmp 0x140117be7
mov rbx, rdx
call dbg.initialize<unsafe extern "system" fn() -> i32, std::sync::once_lock::{impl#0}::get_or_init::{closure_env#0}<unsafe extern "system" fn() -> i32, std::sys::pal::windows::net::init::{closure_env#0}>, !>
mov rdx, rbx
jmp 0x140117a61
lea r9, [rsp + 0x38]
mov rcx, rsi
mov r8, rdi
call dbg.run_with_cstr_allocating<std::sys_common::net::LookupHost>
jmp 0x140117be7
Function at 0x140118170
Capabilities:
Resolve dns

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x88
mov rbx, r9
mov rsi, rcx
lea rcx, [rsp + 0x30]
call dbg.spec_new_impl
mov rax, qword [rsp + 0x30]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1401181fd
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x28]
mov rcx, rdi
xor edx, edx
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x14011822f
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x140118248
lea rcx, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rcx
mov qword [rsi], 1
test rax, rax
je 0x140118260
mov rcx, qword [rsp + 0x38]
mov edx, 1
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
jmp sym.__rust_dealloc
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x28]
movzx eax, word [rax]
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], ax
xor eax, eax
mov qword [rsi], rax
mov byte [rdi], 0
test r14, r14
je 0x140118260
mov edx, 1
mov rcx, rdi
call sym.__rust_dealloc
nop
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x140118270
Capabilities:
Initialize winsock library

Disassembly:
push rsi
push rdi
sub rsp, 0x1f8
mov rax, qword [rcx]
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x1401182c8
lea rsi, [rsp + 0x60]
mov r8d, 0x198
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov cx, 0x202
mov rdx, rsi
call sub.WS2_32.dll_WSAStartup
mov dword [rsp + 0x2c], eax
test eax, eax
jne 0x1401182d4
lea rax, [0x14017ea7c]
mov qword [rdi], rax
add rsp, 0x1f8
pop rdi
pop rsi
ret
lea rcx, str.library_std_src_synconce.rs
call dbg.unwrap_failed
mov qword [rsp + 0x30], 0
lea rdx, [0x140256958]
lea r9, str.library_std_src_syspalwindows_net.rs
lea rcx, [rsp + 0x2c]
lea r8, [rsp + 0x30]
call dbg.assert_failed<i32, i32>
int3

Function at 0x140118300
Capabilities:
Initialize winsock library

Disassembly:
push rsi
push rdi
sub rsp, 0x1f8
mov rax, qword [rcx]
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x140118358
lea rsi, [rsp + 0x60]
mov r8d, 0x198
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov cx, 0x202
mov rdx, rsi
call sub.WS2_32.dll_WSAStartup
mov dword [rsp + 0x2c], eax
test eax, eax
jne 0x140118364
lea rax, [0x14017ea7c]
mov qword [rdi], rax
add rsp, 0x1f8
pop rdi
pop rsi
ret
lea rcx, str.library_std_src_synconce.rs
call dbg.unwrap_failed
mov qword [rsp + 0x30], 0
lea rdx, [0x140256958]
lea r9, str.library_std_src_syspalwindows_net.rs
lea rcx, [rsp + 0x2c]
lea r8, [rsp + 0x30]
call dbg.assert_failed<i32, i32>
int3
Function at 0x1401187f0
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rsi
sub rsp, 0xb0
mov rax, rdx
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x2c], pe_nt_image_headers64
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x2c]
mov rcx, rax
call sub.WS2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x140118894
mov eax, dword [rsp + 0x2c]
movzx ecx, word [rsp + 0x30]
cmp ecx, 2
je 0x1401188a3
cmp ecx, 0x17
jne 0x1401188c3
cmp eax, 0x1b
jbe 0x1401188dc
movzx eax, word [rsp + 0x32]
rol ax, 8
movups xmm0, xmmword [rsp + 0x38]
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x48]
mov word [rsi], 1
movups xmmword [rsi + 4], xmm0
mov dword [rsi + 0x14], ecx
mov dword [rsi + 0x18], edx
mov word [rsi + 0x1c], ax
jmp 0x1401188d3
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
jmp 0x1401188ca
cmp eax, 0xf
jbe 0x1401188f4
movzx eax, word [rsp + 0x32]
rol ax, 8
mov ecx, dword [rsp + 0x34]
mov word [rsi], 0
mov word [rsi + 6], ax
mov dword [rsi + 2], ecx
jmp 0x1401188d3
lea rax, str.invalid_argument
mov qword [rsi + 8], rax
mov word [rsi], 2
add rsp, 0xb0
pop rsi
ret
lea rcx, str.assertion_failed:_len_as_usize___mem::size_of::_c::sockaddr_in6___
lea r8, str.Zx__
mov edx, 0x43
call dbg.panic
lea rcx, str.assertion_failed:_len_as_usize___mem::size_of::_c::sockaddr_in___library_std_src_sys_common_net.rs
lea r8, [0x140257880]
mov edx, 0x42
call dbg.panic
int3
Function at 0x14011ed20
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rsi, rcx
movabs rbx, 0x8000000000000000
lea rcx, [rsp + 0x40]
call sym.std::sys::pal::windows::to_u16s::inner::hf18d8ce8b4f1b2ad
mov rax, qword [rsp + 0x40]
cmp rax, rbx
jne 0x14011ed5d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
jmp 0x14011ed85
movups xmm0, xmmword [rsp + 0x48]
mov qword [rsp + 0x58], rax
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x28]
lea rdx, [rsp + 0x58]
call dbg.from_wide_to_user_path
mov r14, qword [rsp + 0x28]
cmp r14, rbx
jne 0x14011ed9e
lea rcx, [rsp + 0x30]
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], rbx
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov rdi, qword [rsp + 0x30]
mov r15, qword [rsp + 0x38]
mov rcx, rdi
call sub.kernel32.dll_GetFileAttributesW
cmp eax, 0xffffffff
je 0x14011edc2
mov qword [rsi], r14
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], r15
jmp 0x14011ed92
mov qword [rsi], rbx
test r14, r14
je 0x14011ed92
mov edx, 2
mov rcx, rdi
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp sym.__rust_dealloc
Function at 0x1401212b0
Capabilities:
Create thread

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rbx, r8
mov r14, rdx
mov rdi, rcx
movzx eax, byte [0x1402e61a8]
mov edx, 0x10
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x140121365
mov rsi, rax
mov qword [rax], r14
mov qword [rax + 8], rbx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [dbg.thread_start]
xor ebx, ebx
xor ecx, ecx
mov rdx, rdi
mov r9, rax
call sub.kernel32.dll_CreateThread
mov rdx, rax
test rax, rax
jne 0x140121358
mov rbx, qword [rsi]
mov r14, qword [rsi + 8]
mov rcx, rbx
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140121337
mov rdx, qword [r14 + 0x10]
mov rcx, rbx
call sym.__rust_dealloc
mov edx, 8
mov rcx, rsi
call sym.__rust_dealloc
call sub.kernel32.dll_GetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov ebx, 1
mov rax, rbx
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
mov ecx, 8
mov edx, 0x10
call dbg.handle_alloc_error
ud2

Function at 0x140121620
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1098
call dbg.___chkstk_ms
sub rsp, rax
movaps xmmword [rsp + 0x1080], xmm6
mov rsi, rdx
mov rdi, rcx
lea r14, [rsp + 0x80]
mov r8d, 0x1000
mov rcx, r14
xor edx, edx
call sub.msvcrt.dll_memset
xorps xmm6, xmm6
lea r15, [rsp + 0x3c]
lea rbx, [dbg.callback]
lea r13, [rsp + 0x60]
lea r12, [0x1401f0f18]
mov qword [rsp + 0x48], rdi

Function at 0x140121b80
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push rsi
sub rsp, 0x80
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
mov edx, 0x10
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x140121bb6
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
add rsp, 0x80
pop rsi
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x28]
mov qword [rsp + 0x40], rax
lea rax, [sym.__std::io::error::Error_as_core::fmt::Display_::fmt::hf40e1c7e24acfc96]
mov qword [rsp + 0x48], rax
lea rax, str.xm__
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 1
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rdx, str.library_std_src_syspalwindows_rand.rs
lea rcx, [rsp + 0x50]
call dbg.panic_fmt
ud2
Function at 0x140123ff0
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rdi, rdx
cmp qword [rdx], 0
jne 0x14012413d
mov rsi, rcx
mov rbx, qword [rdi + 0x18]
mov rax, qword [rbx]
test rax, rax
jne 0x140124027
mov rdx, qword [rbx + 0x10]
lea rax, [rdx + 0xf]
cmp rax, 0xf
jbe 0x140124127
xor eax, eax
mov rdx, qword [rbx + 0x10]
cmp rax, rdx
je 0x14012410a
sub rax, rdx
add rdx, qword [rbx + 8]
mov r8, qword [rdi + 0x10]
mov ecx, 0xffffffff
cmp rax, rcx
cmovae rax, rcx
mov dword [rsp + 0x2c], 0
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0x20], r8
lea r9, [rsp + 0x2c]
mov r8d, eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x140124088
mov ecx, dword [rsp + 0x2c]
mov eax, 2
test rcx, rcx
je 0x1401240b0
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov byte [rsi + 1], 1
jmp 0x1401240b4
call sub.kernel32.dll_GetLastError
mov rcx, rax
shl rcx, 0x20
or rcx, 2
mov qword [rsp + 0x40], rcx
cmp eax, 0x6d
je 0x1401240b8
cmp eax, 0x3e5
jne 0x1401240e7
lea rax, [rsp + 0x30]
jmp 0x1401240c6
mov byte [rsi + 1], 0
xor eax, eax
jmp 0x1401240ed
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x38]
mov qword [rax], 0
lea rcx, [rsp + 0x40]
call dbg.drop_in_place<std::io::error::Error>
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
cmp rax, 2
jne 0x1401240f7
mov qword [rsi + 8], rcx
mov al, 1
mov byte [rsi], al
add rsp, 0x70
pop rbx
pop rdi
pop rsi
ret
test rax, rax
jne 0x140124071
mov eax, 1
jmp 0x14012407b
mov r8d, 1
mov rcx, rbx
mov rdx, rax
call dbg.do_reserve_and_handle<u8, alloc::alloc::Global>
mov rax, qword [rbx]
mov rdx, qword [rbx + 0x10]
jmp 0x140124034
mov r8d, 0x10
mov rcx, rbx
call dbg.do_reserve_and_handle<u8, alloc::alloc::Global>
mov rax, qword [rbx]
jmp 0x140124027
mov qword [rsp + 0x40], 0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call dbg.assert_failed<std::sys::pal::windows::pipe::State, std::sys::pal::windows::pipe::State>
int3
Function at 0x1401270c0
Capabilities:
Create tcp socket
Create udp socket

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rcx
test rdx, rdx
je 0x1401270ea
mov qword [rsi + 8], r8
mov qword [rsi], 1
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov rax, qword [0x1402e6118]
cmp rax, 3
jne 0x140127271
mov r15, r8
cmp word [r8], 0
mov eax, 2
mov ebx, 0x17
cmove ebx, eax
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, ebx
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140127168
cmp word [r15], 0
je 0x1401271de
movups xmm0, xmmword [r15 + 4]
mov eax, dword [r15 + 0x14]
mov edx, dword [r15 + 0x18]
movzx ecx, word [r15 + 0x1c]
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x1401271f5
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x2739
je 0x140127182
mov r14d, eax
cmp eax, 0x2726
jne 0x140127260
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov ecx, ebx
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
cmp rax, 0xffffffffffffffff
je 0x140127258
mov rdi, rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
call sub.kernel32.dll_SetHandleInformation
test eax, eax
jne 0x14012713b
call sub.kernel32.dll_GetLastError
mov r14d, eax
mov rcx, rdi
call fcn.14017ea3c
jmp 0x140127260
mov eax, dword [r15 + 2]
movzx ecx, word [r15 + 6]
mov r8d, 0x10
mov r9w, 2
xorps xmm0, xmm0
rol cx, 8
mov word [rsp + 0x34], r9w
mov word [rsp + 0x36], cx
mov dword [rsp + 0x38], eax
movups xmmword [rsp + 0x3c], xmm0
mov dword [rsp + 0x4c], edx
lea rdx, [rsp + 0x34]
mov rcx, rdi
call sub.WS2_32.dll_bind
cmp eax, 0xffffffff
je 0x140127233
mov qword [rsi + 8], rdi
mov qword [rsi], 0
jmp 0x1401270de
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 1
mov rcx, rdi
call fcn.14017ea3c
jmp 0x1401270de
call sub.WS2_32.dll_WSAGetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
mov qword [rsi + 8], r14
jmp 0x1401270d7
mov rdi, r8
call dbg.initialize<unsafe extern "system" fn() -> i32, std::sync::once_lock::{impl#0}::get_or_init::{closure_env#0}<unsafe extern "system" fn() -> i32, std::sys::pal::windows::net::init::{closure_env#0}>, !>
mov r8, rdi
jmp 0x1401270fb