joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14008c3f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008c400
test al, 1
je 0x14008c4d2
test al, 2
jne 0x14008c4ea
test al, 8
jne 0x14008c440
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400916e0
jmp 0x14008c45e
test al, 0x10
je 0x14008c45e
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x14008c574
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x14008c495
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14008c502
jne 0x14008c4c6
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.140083500
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x40]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.1401332b0
ud2
Function at 0x14008c670
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x320
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008c680
test al, 1
je 0x14008c752
test al, 2
jne 0x14008c76a
test al, 8
jne 0x14008c6c0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x88], 2
lea rdx, [rsp + 0x88]
call fcn.1400917d0
jmp 0x14008c6de
test al, 0x10
je 0x14008c6de
mov rax, qword [rsi + 0x2e0]
test rax, rax
je 0x14008c7f1
mov rcx, qword [rsi + 0x2e8]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x2f0]
test rax, rax
je 0x14008c715
mov r8, qword [rsi + 0x2f8]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x28]
call qword [r8 + 0x28]
mov qword [rsp + 0x20], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x20]
jb 0x14008c782
jne 0x14008c746
mov qword [rsp + 0x38], rsi
lea rcx, [rsp + 0x38]
call fcn.140082e60
nop
add rsp, 0x320
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x68], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x38]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], 1
mov qword [rsp + 0x98], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x88]
call fcn.1401332b0
ud2
Function at 0x14008c8f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008c900
test al, 1
je 0x14008c9d2
test al, 2
jne 0x14008c9ea
test al, 8
jne 0x14008c940
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.140091a50
jmp 0x14008c95e
test al, 0x10
je 0x14008c95e
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x14008ca74
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x14008c995
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14008ca02
jne 0x14008c9c6
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.140083290
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x40]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.1401332b0
ud2
Function at 0x14008cb70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008cb80
test al, 1
je 0x14008cc52
test al, 2
jne 0x14008cc6a
test al, 8
jne 0x14008cbc0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400916e0
jmp 0x14008cbde
test al, 0x10
je 0x14008cbde
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x14008ccf4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x14008cc15
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14008cc82
jne 0x14008cc46
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.140083500
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x40]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.1401332b0
ud2
Function at 0x14008cdf0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008ce00
test al, 1
je 0x14008ced2
test al, 2
jne 0x14008ceea
test al, 8
jne 0x14008ce40
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400915d0
jmp 0x14008ce5e
test al, 0x10
je 0x14008ce5e
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x14008cf74
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x14008ce95
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14008cf02
jne 0x14008cec6
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.140083750
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x40]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.1401332b0
ud2
Function at 0x14008d070
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14008d080
test al, 1
je 0x14008d152
test al, 2
jne 0x14008d16a
test al, 8
jne 0x14008d0c0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.140091960
jmp 0x14008d0de
test al, 0x10
je 0x14008d0de
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x14008d1f4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x14008d115
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14008d182
jne 0x14008d146
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400833c0
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140154b00]
mov edx, 0x23
call fcn.140133330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140154b40]
mov edx, 0x25
call fcn.140133330
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.140146710]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:_XK
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140154b88]
lea rcx, [rsp + 0x40]
call fcn.1401332b0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.1401332b0
ud2
Function at 0x140093e80
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rsi
sub rsp, 0xb0
mov rsi, rcx
mov rcx, qword [rdx]
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x2c], pe_nt_image_headers64
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x2c]
call sub.ws2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x140093f3d
mov eax, dword [rsp + 0x2c]
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsi + 0x78], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rsi + 0x68], xmm0
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [rsi + 0x58], xmm0
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rsi + 0x48], xmm0
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
movaps xmm3, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x38], xmm3
movups xmmword [rsi + 0x28], xmm2
movups xmmword [rsi + 0x18], xmm1
movups xmmword [rsi + 8], xmm0
mov dword [rsi + 0x88], eax
xor eax, eax
jmp 0x140093f53
call fcn.1400f5a00
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
mov rax, rsi
add rsp, 0xb0
pop rsi
ret

Function at 0x1400940e0
Capabilities:
Set socket configuration

Disassembly:
sub rsp, 0x28
mov rcx, qword [rcx]
movzx eax, dl
mov dword [rsp + 0x24], eax
lea r8, [rsp + 0x24]
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x140094109
xor eax, eax
add rsp, 0x28
ret
call fcn.1400f5a00
shl rax, 0x20
or rax, 2
add rsp, 0x28
ret
Function at 0x140094c30
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rsi
sub rsp, 0xc0
mov rsi, rcx
mov rcx, qword [rdx]
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x3c], pe_nt_image_headers64
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor edx, edx
xor r8d, r8d
mov r9d, 2
call sub.ws2_32.dll_recvfrom
cmp eax, 0xffffffff
je 0x140094d21
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb8]
mov qword [rsi + 0x80], rcx
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsi + 0x70], xmm0
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rsi + 0x60], xmm0
movups xmm0, xmmword [rsp + 0x88]
movups xmmword [rsi + 0x50], xmm0
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rsi + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rsi + 0x30], xmm0
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rsi + 0x20], xmm0
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi + 0x10], xmm0
mov ecx, dword [rsp + 0x3c]
mov dword [rsi + 0x88], ecx
xor ecx, ecx
mov qword [rsi + 8], rax
mov qword [rsi], rcx
mov rax, rsi
add rsp, 0xc0
pop rsi
ret
call fcn.1400f5a00
cmp eax, 0x274a
je 0x140094ca6
cmp eax, 0x2738
je 0x140094ca6
shl rax, 0x20
or rax, 2
mov ecx, 1
jmp 0x140094d0e

Function at 0x140095360
Capabilities:
Set socket configuration

Disassembly:
push rsi
sub rsp, 0x30
xor esi, esi
xor eax, eax
cmp r8d, 0x3b9aca00
cmove edx, esi
setne al
mov rcx, qword [rcx]
mov word [rsp + 0x2c], ax
mov word [rsp + 0x2e], dx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x2c]
mov edx, 0xffff
mov r8d, pe_nt_image_headers64
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x1400953b4
call fcn.1400f5a00
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x30
pop rsi
ret

Function at 0x140095ed0
Capabilities:
Set socket configuration

Disassembly:
push rsi
sub rsp, 0x30
mov rcx, qword [rcx]
mov dword [rsp + 0x2c], edx
mov dword [rsp + 0x20], 4
xor esi, esi
lea r9, [rsp + 0x2c]
xor edx, edx
mov r8d, 3
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x140095f0c
call fcn.1400f5a00
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x30
pop rsi
ret
Function at 0x1400a0430
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov bl, 1
cmp qword [rdx + 0x10], 0
jne 0x1400a05ae
mov r15, r8
mov r14, rdx
mov r12, rcx
lea r13, [rdx + 0x10]
lea rdx, [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400a09d0
lea rdi, [r12 + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov r8d, 0xffffffff
cmp rsi, r8
cmovb r8, rsi
mov rcx, qword [r12 + 0xb0]
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x38], rdx
xor r9d, r9d
call sub.kernel32.dll_ReadFile
test eax, eax
jne 0x1400a04b0
call fcn.1400f5a00
mov ebp, eax
cmp eax, 0x3e5
jne 0x1400a051a
mov dword [rsp + 0x34], 0
mov rcx, qword [r12 + 0xb0]
lea r8, [rsp + 0x34]
mov rdx, rdi
xor r9d, r9d
call sub.kernel32.dll_GetOverlappedResult
test eax, eax
jne 0x1400a04e2
call fcn.1400f5a00
mov ebp, eax
cmp eax, 0x3e4
jne 0x1400a051a
mov rcx, r13
call fcn.14009ea50
mov qword [r14 + 0x10], 1
mov qword [r14 + 0x18], 0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [r14 + 0x20], xmm0
mov rax, qword [rsp + 0x50]
mov qword [r14 + 0x30], rax
lock inc qword [r12]
jg 0x1400a05ae
ud2
cmp ebp, 0x218
setne bl
je 0x1400a0596
shl rbp, 0x20
or rbp, 2
mov rcx, r13
call fcn.14009ea50
mov qword [r14 + 0x10], 3
mov qword [r14 + 0x18], rbp
cmp dword [r14], 1
jne 0x1400a0596
mov rdi, qword [r14 + 8]
test r15, r15
je 0x1400a0581
mov r14, qword [r15 + 0x10]
cmp r14, qword [r15]
jne 0x1400a0561
mov rcx, r15
call fcn.1400a76a0
mov rax, qword [r15 + 8]
mov rcx, r14
shl rcx, 4
mov qword [rax + rcx], rdi
mov dword [rax + rcx + 8], 1
inc r14
mov qword [r15 + 0x10], r14
jmp 0x1400a0596
mov rcx, qword [r14 + 0x60]
mov rdx, r12
mov r8, rdi
mov r9d, 1
call fcn.1400a1bb0
test rsi, rsi
je 0x1400a05ae
mov r8d, 1
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.140014000
mov eax, ebx
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1400a0630
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rbx, r9
mov rsi, r8
mov r14, rdx
mov rdx, qword [r8 + 0x10]
mov rax, rdx
sub rax, r9
jb 0x1400a0788
mov rdi, rcx
mov r15, qword [rsi + 8]
lea r12, [r14 + 0x60]
lea rdx, [r15 + rbx]
mov r8d, 0xffffffff
cmp rax, r8
cmovb r8, rax
mov rcx, qword [r14 + 0xb0]
mov qword [rsp + 0x20], r12
xor r9d, r9d
call sub.kernel32.dll_WriteFile
test eax, eax
jne 0x1400a069c
call fcn.1400f5a00
cmp eax, 0x3e5
jne 0x1400a074e
mov r13, qword [rsp + 0x90]
mov dword [rsp + 0x2c], 0
mov rcx, qword [r14 + 0xb0]
lea r8, [rsp + 0x2c]
mov rdx, r12
xor r9d, r9d
call sub.kernel32.dll_GetOverlappedResult
test eax, eax
je 0x1400a070b
mov r12d, dword [rsp + 0x2c]
lea r15, [r13 + 0x38]
mov rcx, r15
call fcn.14009ea50
mov qword [r13 + 0x38], 2
mov qword [r13 + 0x40], rbx
movups xmm0, xmmword [rsi]
movups xmmword [r13 + 0x48], xmm0
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x58], rax
lock inc qword [r14]
jle 0x1400a0797
mov qword [rdi], 1
mov qword [rdi + 8], r12
jmp 0x1400a0777
call fcn.1400f5a00
cmp eax, 0x3e4
jne 0x1400a074e
lea r15, [r13 + 0x38]
mov rcx, r15
call fcn.14009ea50
mov qword [r13 + 0x38], 1
mov qword [r13 + 0x40], rbx
movups xmm0, xmmword [rsi]
movups xmmword [r13 + 0x48], xmm0
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x58], rax
lock inc qword [r14]
jle 0x1400a0797
mov qword [rdi], 0
jmp 0x1400a0777
shl rax, 0x20
or rax, 2
mov qword [rdi + 8], rax
mov qword [rdi], 2
mov rdx, qword [rsi]
test rdx, rdx
je 0x1400a0777
mov r8d, 1
mov rcx, r15
call fcn.140014000
nop
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_mio_1.0.2_src_sys_windows_named_pipe.rs
mov rcx, rbx
call fcn.140139be0
ud2

Function at 0x1400a6810
Capabilities:
Set socket configuration

Disassembly:
push rsi
push rdi
sub rsp, 0x38
cmp byte [rcx], 0
mov eax, 0x17
mov ecx, 2
cmovne ecx, eax
mov eax, dword [0x1401b30b8]
cmp eax, 3
jne 0x1400a6889
xor r8d, r8d
call sub.ws2_32.dll_socket
cmp rax, 0xffffffffffffffff
je 0x1400a68db
mov rsi, rax
mov dword [rsp + 0x2c], 1
lea r8, [rsp + 0x2c]
mov rcx, rax
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
test eax, eax
je 0x1400a6885
call fcn.1400f5a00
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov rcx, rsi
call fcn.140149ef0
mov eax, 1
mov rsi, rdi
jmp 0x1400a68ef
xor eax, eax
jmp 0x1400a68ef
mov byte [rsp + 0x2b], 1
lea rax, [rsp + 0x2b]
mov qword [rsp + 0x30], rax
lea rax, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_mio_1.0.2_src_sys_windows_net.rs
mov qword [rsp + 0x20], rax
lea rax, [0x1401b30b8]
lea r9, [0x14015f7e8]
lea r8, [rsp + 0x30]
mov esi, ecx
mov rcx, rax
mov edi, edx
xor edx, edx
call fcn.140101ed0
mov ecx, esi
mov edx, edi
xor r8d, r8d
call sub.ws2_32.dll_socket
cmp rax, 0xffffffffffffffff
jne 0x1400a6843
call fcn.1400f5a00
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov eax, 1
mov rdx, rsi
add rsp, 0x38
pop rdi
pop rsi
ret
Function at 0x1400a8610
Capabilities:
Connect socket

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x40
mov rbx, rdx
mov rsi, rcx
mov rcx, rdx
mov edx, 1
call fcn.1400a6810
mov rdi, rdx
test rax, rax
je 0x1400a8642
mov qword [rsi + 8], rdi
mov qword [rsi], 0xffffffffffffffff
jmp 0x1400a86c3
test byte [rbx], 1
je 0x1400a8666
movups xmm0, xmmword [rbx + 4]
movzx eax, word [rbx + 0x1c]
rol ax, 8
mov ecx, dword [rbx + 0x18]
add rbx, 0x14
mov r8d, 0x1c
mov dx, 0x17
jmp 0x1400a867f
movzx eax, word [rbx + 6]
rol ax, 8
add rbx, 2
xorps xmm0, xmm0
mov r8d, 0x10
mov dx, 2
mov r9d, dword [rbx]
mov word [rsp + 0x24], dx
mov word [rsp + 0x26], ax
mov dword [rsp + 0x28], r9d
movups xmmword [rsp + 0x2c], xmm0
mov dword [rsp + 0x3c], ecx
lea rdx, [rsp + 0x24]
mov rcx, rdi
call sub.ws2_32.dll_connect
cmp eax, 0xffffffff
jne 0x1400a86b8
call fcn.1400f5a00
cmp eax, 0x2733
jne 0x1400a86ce
mov qword [rsi], rdi
mov qword [rsi + 8], 0
mov rax, rsi
add rsp, 0x40
pop rbx
pop rdi
pop rsi
ret
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 0xffffffffffffffff
mov rcx, rdi
call fcn.140149ef0
jmp 0x1400a86c3

Function at 0x1400a9100
Capabilities:
Set socket configuration

Disassembly:
jmp 0x1400e3db0
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
mov eax, dword [rdx]
mov edx, dword [r8]
shl rdx, 0x20
or rdx, rax
mov qword [rbp], rdx
mov dword [rsp + 0x20], 8
xor esi, esi
mov r9, rbp
xor edx, edx
mov r8d, 0xc
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x1400e3dfc
call sub.ws2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret

Function at 0x1400a9120
Capabilities:
Set socket configuration

Disassembly:
jmp 0x1400e3e70
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
mov eax, dword [rdx]
mov edx, dword [r8]
shl rdx, 0x20
or rdx, rax
mov qword [rbp], rdx
mov dword [rsp + 0x20], 8
xor esi, esi
mov r9, rbp
xor edx, edx
mov r8d, 0xd
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x1400e3ebc
call sub.ws2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret