joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18003a840
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp r8, r9
jae 0x18003a9f6
mov r10, r9
sub r10, r8
cmp r10, 0xf
ja 0x18003a87b
mov eax, 1
nop word [rax + rax]
cmp r9, r8
jbe 0x18003a8e0
movzx r10d, byte [r9 - 1]
dec r9
cmp r10b, cl
je 0x18003a877
cmp r10b, dl
jne 0x18003a860
mov rdx, r9
ret
movzx eax, cl
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
movzx eax, dl
movd xmm1, eax
punpcklbw xmm1, xmm1
pshuflw xmm1, xmm1, 0
pshufd xmm1, xmm1, 0
movdqu xmm2, xmmword [r9 - 0x10]
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pcmpeqb xmm2, xmm1
por xmm2, xmm3
pmovmskb eax, xmm2
test eax, eax
je 0x18003a8e6
add r9, 0xfffffffffffffff0
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r9 + rax]
dec rdx
mov eax, 1
ret
xor eax, eax
mov rdx, r9
ret
mov rax, r9
and rax, 0xfffffffffffffff0
cmp r10, 0x20
setae dl
lea rcx, [r8 + 0x20]
cmp rax, rcx
setae r10b
and r10b, dl
cmp r10b, 1
jne 0x18003a973
mov eax, r9d
and eax, 0xf
sub r9, rax
add r9, 0xffffffffffffffdf
nop word cs:[rax + rax]
movdqa xmm2, xmmword [r9 + 1]
movdqa xmm3, xmmword [r9 + 0x11]
movdqa xmm4, xmm0
pcmpeqb xmm4, xmm2
movdqa xmm5, xmm0
pcmpeqb xmm5, xmm3
pcmpeqb xmm2, xmm1
por xmm2, xmm4
pcmpeqb xmm3, xmm1
por xmm3, xmm5
movdqa xmm4, xmm3
por xmm4, xmm2
pmovmskb eax, xmm4
test eax, eax
jne 0x18003a9fc
lea rax, [r9 - 0x20]
inc r9
cmp r9, rcx
mov r9, rax
jae 0x18003a920
add rax, 0x21
lea rcx, [r8 + 0x10]
nop word [rax + rax]
cmp rax, rcx
jb 0x18003a9bf
movdqu xmm2, xmmword [rax - 0x10]
add rax, 0xfffffffffffffff0
movdqa xmm3, xmm0
pcmpeqb xmm3, xmm2
pcmpeqb xmm2, xmm1
por xmm2, xmm3
pmovmskb edx, xmm2
test edx, edx
je 0x18003a980
movzx ecx, dx
bsr ecx, ecx
xor ecx, 0xffffffe0
add ecx, 0x21
lea rdx, [rax + rcx]
dec rdx
mov eax, 1
ret
cmp rax, r8
jbe 0x18003a9f6
movdqu xmm2, xmmword [r8]
pcmpeqb xmm0, xmm2
pcmpeqb xmm1, xmm2
por xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
je 0x18003a9f6
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r8 + rax]
dec rdx
mov eax, 1
ret
xor eax, eax
mov rdx, r9
ret
pmovmskb eax, xmm3
test eax, eax
je 0x18003aa1e
movzx eax, ax
bsr eax, eax
xor eax, 0xffffffe0
add eax, 0x21
lea rdx, [r9 + rax]
add rdx, 0x10
mov eax, 1
ret
psllw xmm2, 7
pmovmskb edx, xmm2
mov eax, 0x20
mov ecx, 0x20
test edx, edx
je 0x18003aa3b
bsr ecx, edx
xor ecx, 0x1f
sub eax, ecx
add r9, rax
mov eax, 1
mov rdx, r9
ret
Function at 0x18005a450
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov rdi, rcx
movups xmm0, xmmword [rdx + 0x38]
movups xmm1, xmmword [rdx + 0x48]
movaps xmmword [rsp + 0x40], xmm1
movaps xmmword [rsp + 0x30], xmm0
mov rax, qword [rdx + 0x28]
movzx ebp, byte [rdx + 0x30]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x58], rax
mov byte [rsp + 0x60], bpl
mov rax, qword [0x180143fe8]
movzx eax, byte [rax]
mov ecx, 0x5f0
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x18005a6b9
mov rbx, rax
movabs r15, 0x800000000000000
mov r8d, 0x5f0
mov rcx, rax
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsi + 0x60]
mov qword [rsp + 0x28], rax
movabs rcx, 0x7465646279746573
movabs rdx, 0x6c7967656e657261
movabs r8, 0xded7d4e2d7dedfc6
movabs r9, 0xa60c596fc19fead0
movabs r10, 0xe414a674f0de7325
nop dword [rax]
mov eax, 1
lock xadd qword [0x180165090], rax
mov r11, rax
xor r11, rcx
mov r14, r11
rol r14, 0x10
lea r12, [r11 + rdx]
xor r14, r12
lea r13, [r14 + r8]
xor rax, r13
add r11, r9
mov r12, r11
rol r12, 0x20
rol r14, 0x15
xor r11, r10
xor r13, r15
xor r13, r14
add rax, r11
rol r11, 0xd
add r12, r13
xor r11, rax
rol r13, 0x10
xor r13, r12
rol rax, 0x20
add r12, r11
add rax, r13
rol r11, 0x11
xor r11, r12
rol r13, 0x15
rol r12, 0x20
xor r13, rax
xor rax, r15
xor r12, 0xff
add rax, r11
add r12, r13
rol r11, 0xd
xor r11, rax
rol r13, 0x10
rol rax, 0x20
xor r13, r12
add r12, r11
rol r11, 0x11
add rax, r13
xor r11, r12
rol r13, 0x15
xor r13, rax
rol r12, 0x20
add rax, r11
add r12, r13
rol r11, 0xd
xor r11, rax
rol r13, 0x10
rol rax, 0x20
xor r13, r12
add r12, r11
rol r11, 0x11
add rax, r13
xor r11, r12
rol r13, 0x15
xor r13, rax
rol r12, 0x20
add rax, r11
add r12, r13
rol r11, 0xd
xor r11, rax
rol r13, 0x10
xor r13, r12
add r12, r11
rol r11, 0x11
rol r13, 0x15
mov rax, r12
rol rax, 0x20
xor rax, r11
xor rax, r13
cmp rax, r12
je 0x18005a510
xor rax, r12
mov rcx, qword [rsi + 0x58]
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movups xmmword [rdi + 0x128], xmm1
movups xmmword [rdi + 0x118], xmm0
mov rdx, qword [rsp + 0x20]
mov qword [rdi + 0x138], rdx
mov byte [rdi + 0x140], bpl
mov qword [rdi], 0
mov qword [rdi + 8], rbx
mov qword [rdi + 0x80], 0
mov qword [rdi + 0x88], rbx
mov rdx, qword [rsp + 0x28]
mov qword [rdi + 0x100], rdx
mov qword [rdi + 0x108], rax
mov qword [rdi + 0x110], rcx
mov rdx, qword [rsi + 0x10]
mov rax, rdx
neg rax
jo 0x18005a6a5
jae 0x18005a6a5
mov rcx, qword [rsi + 0x18]
mov r8d, 1
call sym.__rust_dealloc
mov rax, rdi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 8
mov edx, 0x5f0
call sym.alloc::alloc::handle_alloc_error::hcd217d9ce9262906
ud2

Function at 0x18005ad10
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov rdx, rcx
lea rcx, sym.std::sys::thread_local::os::destroy_value::h124d254f8e893550
jmp sym.std::sys::thread_local::os::Storage_T_::get::h920c4f4755a9d29d
Function at 0x18005bbb0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov rcx, qword [0x180104178]
xor edx, edx
jmp sym.std::sys::thread_local::os::Storage_T_::get::hd3169c35af35fa4f

Function at 0x18005cb80
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov edi, dword [rcx + 8]
mov edx, 1
mov ecx, edi
call fcn.1801024ec
mov edx, 0x10
mov r8d, 8
mov rcx, rsi
call sym.__rust_dealloc
mov ecx, edi
xor edx, edx
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1801024ec

Function at 0x18005cbc0
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov edi, dword [rcx + 8]
mov edx, 1
mov ecx, edi
call fcn.1801024ec
mov edx, 0xc
mov r8d, 4
mov rcx, rsi
call sym.__rust_dealloc
mov ecx, edi
xor edx, edx
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1801024ec

Function at 0x18005cc00
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov esi, dword [rcx + 0x18]
test esi, esi
je 0x18005cca7
dec esi
mov ecx, esi
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
ja 0x18005cc9f
je 0x18005cc40
test rdi, rdi
je 0x18005cc44
mov rbx, qword [rdi]
mov qword [rdi], 0
test rbx, rbx
je 0x18005cc46
mov rbx, qword [rdi + 8]
jmp 0x18005cc46
xor eax, eax
jmp 0x18005cc9f
xor ebx, ebx
mov rax, qword [0x180143fe8]
movzx eax, byte [rax]
mov ecx, 0x10
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x18005ccc1
mov qword [rax], rbx
mov dword [rax + 8], esi
mov ecx, esi
mov rbx, rax
call sub.kernel32.dll_TlsGetValue
mov rdi, rax
mov ecx, esi
mov rsi, rbx
mov rdx, rbx
call fcn.1801024ec
test rdi, rdi
je 0x18005cc9c
mov edx, 0x10
mov r8d, 8
mov rcx, rdi
call sym.__rust_dealloc
mov rax, rsi
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
call sym.std::sys::thread_local::key::windows::LazyKey::init::h9918f0af148d1982
mov esi, eax
mov ecx, esi
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
jbe 0x18005cc24
jmp 0x18005cc9f
mov ecx, 8
mov edx, 0x10
call sym.alloc::alloc::handle_alloc_error::hcd217d9ce9262906
int3
Function at 0x18005cce0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rbx, rdx
mov esi, dword [rcx + 0x18]
test esi, esi
je 0x18005cdc3
dec esi
mov ecx, esi
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
ja 0x18005cdbb
je 0x18005cdb9
test rbx, rbx
je 0x18005cd23
mov rdi, qword [rbx + 8]
test byte [rbx], 1
mov qword [rbx], 0
jne 0x18005cd33
call sym.crossbeam_epoch::default::default_collector::he00c0d08484bd91b
mov rcx, rax
call sym.crossbeam_epoch::collector::Collector::register::hcb6cf69c9f6b52b7
mov rdi, rax
mov rax, qword [0x180143fe8]
movzx eax, byte [rax]
mov ecx, 0x10
mov edx, 8
call sym.__rust_alloc
test rax, rax
je 0x18005cddd
mov qword [rax], rdi
mov dword [rax + 8], esi
mov ecx, esi
mov rbx, rax
call sub.kernel32.dll_TlsGetValue
mov rdi, rax
mov ecx, esi
mov rsi, rbx
mov rdx, rbx
call fcn.1801024ec
test rdi, rdi
je 0x18005cdb4
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x820]
lea rdx, [rax - 1]
mov qword [rcx + 0x820], rdx
xor rax, 1
or rax, qword [rcx + 0x818]
jne 0x18005cda1
call sym.crossbeam_epoch::internal::Local::finalize::hb37e9439305fd40a
mov edx, 0x10
mov r8d, 8
mov rcx, rdi
call sym.__rust_dealloc
mov rax, rsi
jmp 0x18005cdbb
xor eax, eax
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret
call sym.std::sys::thread_local::key::windows::LazyKey::init::h9918f0af148d1982
mov esi, eax
mov ecx, esi
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
jbe 0x18005cd08
jmp 0x18005cdbb
mov ecx, 8
mov edx, 0x10
call sym.alloc::alloc::handle_alloc_error::hcd217d9ce9262906
ud2

Function at 0x18005f440
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov rcx, qword [0x180143f30]
xor edx, edx
jmp sym.std::sys::thread_local::os::Storage_T_::get::h920c4f4755a9d29d

Function at 0x1800647f0
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rsi, rcx
mov edi, dword [rcx + 8]
mov edx, 1
mov ecx, edi
call fcn.1801024ec
mov rcx, qword [rsi]
mov rax, qword [rcx + 0x820]
lea rdx, [rax - 1]
mov qword [rcx + 0x820], rdx
xor rax, 1
or rax, qword [rcx + 0x818]
jne 0x18006482f
call sym.crossbeam_epoch::internal::Local::finalize::hb37e9439305fd40a
mov edx, 0x10
mov r8d, 8
mov rcx, rsi
call sym.__rust_dealloc
mov ecx, edi
xor edx, edx
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1801024ec

Function at 0x180065be0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
lea rcx, sym.std::sys::thread_local::os::destroy_value::h7210aa15242b63ca
xor edx, edx
jmp sym.std::sys::thread_local::os::Storage_T_::get::h9f193d8c582f645d

Function at 0x180065bf0
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov rdi, rcx
mov esi, dword [rcx + 8]
mov edx, 1
mov ecx, esi
call fcn.1801024ec
mov rax, qword [rdi]
dec qword [rax]
jne 0x180065c29
dec qword [rax + 8]
jne 0x180065c29
mov edx, 0x170
mov r8d, 0x10
mov rcx, rax
call sym.__rust_dealloc
mov edx, 0x10
mov r8d, 8
mov rcx, rdi
call sym.__rust_dealloc
mov ecx, esi
xor edx, edx
add rsp, 0x28
pop rdi
pop rsi
jmp fcn.1801024ec
Function at 0x1800695e0
Capabilities:
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
test rdx, rdx
je 0x180069646
mov rsi, rdx
mov rdi, rcx
mov r14d, 0xffffffff
jmp 0x180069608
add rdi, rbx
sub rsi, rbx
je 0x180069646
cmp rsi, r14
mov ebx, 0xffffffff
cmovb rbx, rsi
xor ecx, ecx
mov rdx, rdi
mov r8d, ebx
mov r9d, 2
call sub.bcrypt.dll_BCryptGenRandom
cmp eax, 0xbfffffff
jbe 0x180069600
mov ebp, eax
mov rcx, rdi
mov edx, ebx
call sub.advapi32.dll_SystemFunction036
test al, al
jne 0x180069600
and ebp, 0x7fffffff
jmp 0x180069648
xor ebp, ebp
mov eax, ebp
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret

Function at 0x18006aff0
Capabilities:
Initialize winsock library

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x1f0
lea rbp, [rsp + 0x80]
mov rax, qword [rcx]
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x18006b053
lea rsi, [rbp - 0x60]
mov r8d, 0x198
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov cx, 0x202
mov rdx, rsi
call sub.ws2_32.dll_WSAStartup
mov dword [rbp + 0x16c], eax
test eax, eax
jne 0x18006b05f
lea rax, [0x180101e24]
mov qword [rdi], rax
add rsp, 0x1f0
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.std_src_synconce.rs
call sym.core::option::unwrap_failed::h22f609bf42d299c8
mov qword [rbp + 0x138], 0
lea rdx, [0x180125bc8]
lea r9, str.std_src_syspalwindows_net.rs
lea rcx, [rbp + 0x16c]
lea r8, [rbp + 0x138]
call sym.core::panicking::assert_failed::hb0418c30de215991
int3
Function at 0x18008cb20
Capabilities:
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
xorps xmm0, xmm0
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp - 0x20], xmm0
movaps xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
call sub.kernel32.dll_GetSystemInfo
mov ecx, dword [rbp - 0x10]
xor eax, eax
test rcx, rcx
sete al
lea rdx, str.The_number_of_hardware_threads_is_not_known_for_the_target_platform
cmovne rdx, rcx
add rsp, 0x50
pop rbp
ret

Function at 0x18008df80
Capabilities:
Get common file path

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x478
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x3d8], rcx
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x3e8], 2
mov qword [rbp + 0x3f0], 0
mov r8d, 0x200
mov eax, 2
mov qword [rbp + 0x3d0], rax
xor esi, esi
xor edi, edi
xor ebx, ebx
cmp r8, 0x201
jae 0x18008e010
jmp 0x18008dfff
jae 0x18008e0da
cmp r8, 0x201
jae 0x18008e010
mov r14d, 0x200
lea r15, [rbp - 0x50]
mov r12, r8
jmp 0x18008e076
sub r8, rbx
sub rdi, rbx
cmp rdi, r8
jae 0x18008e04e
mov qword [rsp + 0x20], 2
mov r9d, 2
lea rcx, [rbp + 0x3e0]
mov rdx, rbx
call sym.alloc::raw_vec::RawVecInner_A_::reserve::do_reserve_and_handle::h314566584a244f3b
mov rsi, qword [rbp + 0x3e0]
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x3d0], rax
mov eax, 0xffffffff
cmp rsi, rax
mov ebx, 0xffffffff
cmovb rbx, rsi
mov qword [rbp + 0x3f0], rbx
mov rdi, rsi
mov r14, rbx
mov r15, qword [rbp + 0x3d0]
mov r12, rbx
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov ecx, r12d
mov rdx, r15
call sub.kernel32.dll_GetCurrentDirectoryW
mov r13d, eax
test eax, eax
jne 0x18008e09c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x18008e146
mov r8d, r13d
cmp r12, r8
jne 0x18008dff0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x18008e179
add r12, r12
mov eax, 0xffffffff
cmp r12, rax
cmovae r12, rax
mov r8, r12
cmp r8, 0x201
jb 0x18008dfff
jmp 0x18008e010
cmp r14, r8
jb 0x18008e193
lea rcx, [rbp + 0x3b0]
mov rdx, r15
call sym.__std::ffi::os_str::OsString_as_std::os::windows::ffi::OsStringExt_::from_wide::h41c25f2af65ae5e0
movups xmm0, xmmword [rbp + 0x3b0]
movups xmm1, xmmword [rbp + 0x3c0]
mov rsi, qword [rbp + 0x3d8]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov rdx, qword [rbp + 0x3e0]
test rdx, rdx
je 0x18008e12f
mov rcx, qword [rbp + 0x3e8]
add rdx, rdx
mov r8d, 2
call sym.__rust_dealloc
mov rax, rsi
add rsp, 0x478
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rsi, qword [rbp + 0x3d8]
mov qword [rsi + 8], rax
movabs rax, 0x8000000000000000
mov qword [rsi], rax
mov rdx, qword [rbp + 0x3e0]
test rdx, rdx
jne 0x18008e11a
jmp 0x18008e12f
lea rcx, str.internal_error:_entered_unreachable_code_
lea r8, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov edx, 0x28
call sym.core::panicking::panic::hbd6cd6a2d9022e85
jmp 0x18008e1a8
lea rax, str.std_src_syspalwindowsmod.rsstrings_passed_to_WinAPI_cannot_contain_NULs
mov rcx, r8
mov rdx, r14
mov r8, rax
call sym.core::slice::index::slice_end_index_len_fail::hca289dda450e409b
ud2
Function at 0x18008e1e0
Capabilities:
Query environment variable

Disassembly:
push rbp
push rsi
sub rsp, 0x68
lea rbp, [rsp + 0x60]
call sub.kernel32.dll_GetEnvironmentStringsW
test rax, rax
je 0x18008e1ff
mov rdx, rax
add rsp, 0x68
pop rsi
pop rbp
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp], rax
mov rax, rbp
mov qword [rbp - 0x10], rax
lea rax, [sym.__std::io::error::Error_as_core::fmt::Display_::fmt::hfe4f7777120f8419]
mov qword [rbp - 8], rax
lea rax, str.failure_getting_env_string_from_OS:
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 1
mov qword [rbp - 0x20], 0
lea rax, [rbp - 0x10]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
lea rdx, str.std_src_syspalwindowsos.rs
lea rcx, [rbp - 0x40]
call sym.core::panicking::panic_fmt::h892a8564dcc06a8f
ud2
Function at 0x180090330
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
lea rbp, [rsp + 0x40]
movdqa xmmword [rbp - 0x10], xmm7
movdqa xmmword [rbp - 0x20], xmm6
mov rsi, r8
test r8, r8
js 0x180090506
mov rdi, rcx
je 0x1800903bc
mov r15, rdx
mov rax, qword [0x180143fe8]
movzx eax, byte [rax]
mov ebx, 1
mov edx, 1
mov rcx, rsi
call sym.__rust_alloc
test rax, rax
je 0x180090508
mov r14, rax
mov rbx, rax
mov rcx, r14
mov rdx, r15
mov r8, rsi
call fcn.180102e60
mov rdx, r14
cmp rsi, 8
jb 0x1800904bc
movabs rax, 0x7fffffffffffffe0
cmp rsi, 0x20
jae 0x1800903c6
xor ecx, ecx
jmp 0x180090456
mov ebx, 1
jmp 0x1800904df
mov rcx, rsi
and rcx, rax
xor edx, edx
movdqa xmm0, xmmword [0x180120820]
movdqa xmm1, xmmword [0x180120830]
movdqa xmm2, xmmword [0x180120840]
nop word cs:[rax + rax]
movdqu xmm3, xmmword [rbx + rdx]
movdqu xmm4, xmmword [rbx + rdx + 0x10]
movdqa xmm5, xmm3
paddb xmm5, xmm0
movdqa xmm6, xmm4
paddb xmm6, xmm0
movdqa xmm7, xmm5
pminub xmm7, xmm1
pcmpeqb xmm7, xmm5
pand xmm7, xmm2
movdqa xmm5, xmm6
pminub xmm5, xmm1
pcmpeqb xmm5, xmm6
pand xmm5, xmm2
pxor xmm7, xmm3
pxor xmm5, xmm4
movdqu xmmword [rbx + rdx], xmm7
movdqu xmmword [rbx + rdx + 0x10], xmm5
add rdx, 0x20
cmp rcx, rdx
jne 0x1800903f0
cmp rcx, rsi
je 0x1800904df
test sil, 0x18
je 0x1800904b6
add rax, 0x18
and rax, rsi
lea rdx, [r14 + rax]
movdqa xmm0, xmmword [0x180120850]
movdqa xmm1, xmmword [0x180120860]
movdqa xmm2, xmmword [0x180120870]
nop dword [rax]
movq xmm3, qword [rbx + rcx]
movdqa xmm4, xmm3
paddb xmm4, xmm0
movdqa xmm5, xmm4
pmaxub xmm5, xmm1
pcmpeqb xmm5, xmm4
pandn xmm5, xmm2
pxor xmm5, xmm3
movq qword [rbx + rcx], xmm5
add rcx, 8
cmp rax, rcx
jne 0x180090480
cmp rax, rsi
jne 0x1800904bc
jmp 0x1800904df
add rcx, r14
mov rdx, rcx
add r14, rsi
nop
movzx eax, byte [rdx]
lea ecx, [rax - 0x61]
cmp cl, 0x1a
setb cl
shl cl, 5
xor cl, al
mov byte [rdx], cl
lea rax, [rdx + 1]
mov rdx, rax
cmp rax, r14
jne 0x1800904c0
mov qword [rdi], rsi
mov qword [rdi + 8], rbx
mov qword [rdi + 0x10], rsi
mov byte [rdi + 0x18], 0
mov rax, rdi
movaps xmm6, xmmword [rbp - 0x20]
movaps xmm7, xmmword [rbp - 0x10]
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
xor ebx, ebx
mov rcx, rbx
mov rdx, rsi
call sym.alloc::raw_vec::handle_error::hcf880acc1984e8dc
int3

Function at 0x180091d50
Capabilities:
Create directory

Disassembly:
push rbp
mov rbp, rsp
cmp byte [rcx], 0
je 0x180091d65
mov rcx, rdx
mov rdx, r8
pop rbp
jmp sym.std::fs::DirBuilder::create_dir_all::he69e21d25f4b4805
mov rcx, rdx
mov rdx, r8
pop rbp
jmp sym.std::sys::pal::windows::fs::DirBuilder::mkdir::h2f2b7048962a32f6
Function at 0x18009a780
Capabilities:
Set socket configuration

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor r9d, r9d
cmp r8d, 0x3b9aca00
je 0x18009a7e7
mov r9d, 0x3e8
mov rax, rdx
mul r9
mov r9d, 0xffffffff
jo 0x18009a7e7
mov edx, r8d
imul rdx, rdx, 0x431bde83
shr rdx, 0x32
add rax, rdx
jb 0x18009a7e7
imul edx, edx, 0xf4240
xor r10d, r10d
sub r8d, edx
setne r10b
add rax, r10
jb 0x18009a7e7
mov r9d, 0xffffffff
cmp rax, r9
cmovb r9, rax
test rax, rax
je 0x18009a827
mov dword [rbp - 4], r9d
mov dword [rsp + 0x20], 4
lea r9, [rbp - 4]
mov edx, 0xffff
mov r8d, 0x1006
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x18009a814
xor eax, eax
add rsp, 0x30
pop rbp
ret
call sub.ws2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
add rsp, 0x30
pop rbp
ret
lea rax, str.cannot_set_a_0_duration_timeout
add rsp, 0x30
pop rbp
ret

Function at 0x18009a840
Capabilities:
Set socket configuration

Disassembly:
push rbp
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor r9d, r9d
cmp r8d, 0x3b9aca00
je 0x18009a8a7
mov r9d, 0x3e8
mov rax, rdx
mul r9
mov r9d, 0xffffffff
jo 0x18009a8a7
mov edx, r8d
imul rdx, rdx, 0x431bde83
shr rdx, 0x32
add rax, rdx
jb 0x18009a8a7
imul edx, edx, 0xf4240
xor r10d, r10d
sub r8d, edx
setne r10b
add rax, r10
jb 0x18009a8a7
mov r9d, 0xffffffff
cmp rax, r9
cmovb r9, rax
test rax, rax
je 0x18009a8e7
mov dword [rbp - 4], r9d
mov dword [rsp + 0x20], 4
lea r9, [rbp - 4]
mov edx, 0xffff
mov r8d, 0x1005
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x18009a8d4
xor eax, eax
add rsp, 0x30
pop rbp
ret
call sub.ws2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
add rsp, 0x30
pop rbp
ret
lea rax, str.cannot_set_a_0_duration_timeout
add rsp, 0x30
pop rbp
ret

Function at 0x18009aa20
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rcx, qword [rcx]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
mov r9d, 2
call sub.ws2_32.dll_recv
cmp eax, 0xffffffff
je 0x18009aa54
movsxd rdx, eax
xor ecx, ecx
jmp 0x18009aa77
call sub.ws2_32.dll_WSAGetLastError
xor edx, edx
mov ecx, 0
cmp eax, 0x274a
je 0x18009aa77
shl rax, 0x20
or rax, 2
mov ecx, 1
mov rdx, rax
mov rax, rcx
add rsp, 0x20
pop rbp
ret

Function at 0x18009aa80
Capabilities:
Set socket configuration

Disassembly:
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rcx, qword [rcx]
xor esi, esi
xor eax, eax
cmp r8d, 0x3b9aca00
setne al
cmove edx, esi
mov word [rbp + 4], ax
mov word [rbp + 6], dx
mov dword [rsp + 0x20], 4
lea r9, [rbp + 4]
mov edx, 0xffff
mov r8d, pe_nt_image_headers64
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x18009aad7
call sub.ws2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret