joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140158810
Capabilities:
Read file via mapping

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc8
mov rax, r8
mov rsi, rcx
mov dword [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 7
mov qword [rsp + 0x54], 0
mov word [rsp + 0x5c], 0
mov byte [rsp + 0x58], 1
lea r8, [rsp + 0x38]
mov rcx, rdx
mov rdx, rax
call dbg.open
mov rdi, rdx
test rax, rax
je 0x1401588a0
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x88], rdi
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rcx, [rsp + 0x38]
mov rdx, rdi
call dbg.file_attr
cmp dword [rsp + 0x38], 2
jne 0x1401588cf
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x80], 2
jmp 0x14015891b
movups xmm0, xmmword [rsp + 0x38]
movups xmm1, xmmword [rsp + 0x48]
movups xmm2, xmmword [rsp + 0x58]
movups xmm3, xmmword [rsp + 0x68]
movaps xmmword [rsp + 0x80], xmm0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xc0], rax
movaps xmmword [rsp + 0xb0], xmm3
movaps xmmword [rsp + 0xa0], xmm2
movaps xmmword [rsp + 0x90], xmm1
cmp qword [rsp + 0x80], 2
jne 0x140158947
lea rcx, [rsp + 0x88]
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
mov rcx, rdi
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
jmp fcn.1401a7e14
mov r12, qword [rsp + 0xb8]
test rdi, rdi
je 0x1401589a5
mov qword [rsp + 0x80], 0
call sub.kernel32.dll_GetCurrentProcess
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [rsp + 0x80]
mov rcx, rax
mov rdx, rdi
mov r8, rax
call sub.kernel32.dll_DuplicateHandle
test eax, eax
je 0x140158a21
mov rbx, qword [rsp + 0x80]
jmp 0x1401589a7
xor ebx, ebx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
mov r8d, 2
xor r9d, r9d
call sub.kernel32.dll_CreateFileMappingA
test rax, rax
je 0x140158a10
mov r14, rax
mov qword [rsp + 0x20], r12
mov rcx, rax
mov edx, 4
xor r8d, r8d
xor r9d, r9d
call sub.kernel32.dll_MapViewOfFile
mov r15, rax
mov rcx, r14
call fcn.1401a7e14
test r15, r15
je 0x140158a10
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], r12
mov qword [rsi], 1
jmp 0x140158a4d
mov qword [rsi], 0
mov rcx, rbx
call fcn.1401a7e14
jmp 0x140158a4d
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x38], 1
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], rax
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], 0
mov rcx, rdi
call fcn.1401a7e14
jmp 0x14015888f
Function at 0x140174240
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0xa8

Function at 0x140175ba0
Capabilities:
Create directory

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov r8, rdx
mov rdx, rcx
movabs rsi, 0x8000000000000000
lea rcx, [rsp + 0x38]
call sym.std::sys::pal::windows::to_u16s::inner::hf18d8ce8b4f1b2ad
mov rax, qword [rsp + 0x38]
cmp rax, rsi
cmp eax, esi

Function at 0x1401777f0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x40
mov ecx, dword [0x140214588]
test ecx, ecx
je 0x1401778e2
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x140177820
cmp qword [rax + 8], 0
je 0x140177820
add rax, 0x10
jmp 0x1401778dc
mov ecx, dword [0x140214588]
test ecx, ecx
je 0x1401778f5
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x1401778da
test rax, rax
jne 0x1401778a0
mov qword [rsp + 0x30], 0
lea rax, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
mov qword [rsp + 0x28], rax
movzx eax, byte [0x14030f1a8]
mov edx, 0x18
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x140177921
mov rcx, qword [rsp + 0x38]
mov qword [rax + 0x10], rcx
movups xmm0, xmmword [rsp + 0x28]
movups xmmword [rax], xmm0
mov ecx, dword [0x140214588]
test ecx, ecx
je 0x140177908
dec ecx
mov rdx, rax
mov rsi, rax
call fcn.1401a808c
mov rax, rsi
mov rdx, rax
add rax, 0x10
mov rcx, qword [rdx + 0x10]
cmp qword [rdx + 8], 0
mov qword [rdx + 8], 1
mov qword [rdx + 0x10], 0
je 0x1401778dc
test rcx, rcx
je 0x1401778dc
lock dec qword [rcx]
jne 0x1401778dc
mov rsi, rax
call dbg.drop_slow<std::sync::mutex::Mutex<alloc::vec::Vec<u8, alloc::alloc::Global>>, alloc::alloc::Global>
mov rax, rsi
jmp 0x1401778dc
xor eax, eax
add rsp, 0x40
pop rsi
ret
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
call dbg.init
mov ecx, eax
jmp 0x140177805
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
call dbg.init
mov ecx, eax
jmp 0x140177830
lea rcx, dbg.destroy_value_core::cell::Cell_core::option::Option_alloc::sync::Arc_std::sync::mutex::Mutex_alloc::vec::Vec_u8__alloc::alloc::Global____alloc::alloc::Global____
mov rsi, rax
call dbg.init
mov ecx, eax
mov rax, rsi
jmp 0x140177892
mov ecx, 8
mov edx, 0x18
call dbg.handle_alloc_error
ud2
Function at 0x1401779c0
Capabilities:
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov rdi, rcx
mov rsi, qword [rcx]
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x1401779d7
dec ecx
jmp 0x1401779e1
mov rcx, rsi
call dbg.init
mov ecx, eax
mov edx, 1
call fcn.1401a808c
cmp qword [rdi + 8], 0
je 0x140177a0a
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x140177a0a
lock dec qword [rax]
jne 0x140177a0a
mov rcx, qword [rdi + 0x10]
call dbg.drop_slow<std::sync::mutex::Mutex<alloc::vec::Vec<u8, alloc::alloc::Global>>, alloc::alloc::Global>
mov rcx, qword [0x14030f110]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov ecx, dword [rsi + 0x18]
test ecx, ecx
je 0x140177a26
dec ecx
jmp 0x140177a30
mov rcx, rsi
call dbg.init
mov ecx, eax
xor edx, edx
add rsp, 0x68
pop rdi
pop rsi
jmp fcn.1401a808c
Function at 0x140178270
Capabilities:
Resolve dns

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x1f0
mov rax, rdx
mov rsi, rcx
mov rdx, qword [rdx]
mov rdi, qword [rax + 8]
movzx eax, word [rax + 0x10]
mov word [rsp + 0x2e], ax
mov rax, qword [0x14030f118]
cmp rax, 3
jne 0x14017844f
lea rax, [rsp + 0x2e]
mov qword [rsp + 0x38], rax
cmp rdi, 0x17f
ja 0x14017845f
lea rbx, [rsp + 0x70]
mov rcx, rbx
mov r8, rdi
call sym.memcpy
mov byte [rsp + rdi + 0x70], 0
lea rax, [rdi + 1]
cmp rdi, 0xe
ja 0x1401782f8
xor edx, edx
nop dword [rax]
cmp byte [rsp + rdx + 0x70], 0
je 0x1401783b4
inc rdx
cmp rax, rdx
jne 0x1401782e0
jmp 0x140178415
lea rcx, [rsp + 0x77]
and rcx, 0xfffffffffffffff8
sub rcx, rbx
je 0x14017832e
xor edx, edx
nop dword [rax + rax]
cmp byte [rsp + rdx + 0x70], 0
je 0x1401783b4
inc rdx
cmp rcx, rdx
jne 0x140178310
lea rdx, [rdi - 0xf]
cmp rcx, rdx
jbe 0x140178332
jmp 0x14017837e
lea rdx, [rdi - 0xf]
movdqa xmm0, xmmword [0x14021c590]
movabs r8, 0x8080808080808080
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rsp + rcx + 0x70]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r9, xmm2
test r9, r8
jne 0x14017837e
add rcx, 0x10
cmp rcx, rdx
jbe 0x140178350
sub rax, rcx
je 0x140178415
lea r8, [rsp + rcx]
add r8, 0x70
xor edx, edx
nop word cs:[rax + rax]
cmp byte [r8 + rdx], 0
je 0x1401783b1
inc rdx
cmp rax, rdx
jne 0x1401783a0
jmp 0x140178415
add rdx, rcx
cmp rdx, rdi
jne 0x140178415
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x48], 1
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x70]
lea r8, [rsp + 0x40]
lea r9, [rsp + 0x30]
xor edx, edx
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x140178432
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
jmp 0x140178427
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rax
mov qword [rsi], 1
add rsp, 0x1f0
pop rbx
pop rdi
pop rsi
ret
mov rax, qword [rsp + 0x30]
movzx ecx, word [rsp + 0x2e]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], cx
xor eax, eax
mov qword [rsi], rax
jmp 0x140178427
mov rbx, rdx
call dbg.initialize<unsafe extern "system" fn() -> i32, std::sync::once_lock::{impl#0}::get_or_init::{closure_env#0}<unsafe extern "system" fn() -> i32, std::sys::pal::windows::net::init::{closure_env#0}>, !>
mov rdx, rbx
jmp 0x1401782a1
lea r9, [rsp + 0x38]
mov rcx, rsi
mov r8, rdi
call dbg.run_with_cstr_allocating<std::sys_common::net::LookupHost>
jmp 0x140178427
Function at 0x1401789c0
Capabilities:
Resolve dns

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x88
mov rbx, r9
mov rsi, rcx
lea rcx, [rsp + 0x30]
call dbg.spec_new_impl
mov rax, qword [rsp + 0x30]
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x140178a4d
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x58], 1
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x50]
lea r9, [rsp + 0x28]
mov rcx, rdi
xor edx, edx
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x140178a83
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x140178a9c
lea rcx, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rcx
mov qword [rsi], 1
test rax, rax
je 0x140178ab8
mov r8, qword [rsp + 0x38]
mov rcx, qword [0x14030f110]
xor edx, edx
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
jmp sub.kernel32.dll_HeapFree
mov rax, qword [rbx]
mov rcx, qword [rsp + 0x28]
movzx eax, word [rax]
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rcx
mov word [rsi + 0x18], ax
xor eax, eax
mov qword [rsi], rax
mov byte [rdi], 0
test r14, r14
je 0x140178ab8
mov rcx, qword [0x14030f110]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
nop
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r14
ret

Function at 0x140178ad0
Capabilities:
Initialize winsock library

Disassembly:
push rsi
push rdi
sub rsp, 0x1f8
mov rax, qword [rcx]
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x140178b28
lea rsi, [rsp + 0x60]
mov r8d, 0x198
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov cx, 0x202
mov rdx, rsi
call sub.WS2_32.dll_WSAStartup
mov dword [rsp + 0x2c], eax
test eax, eax
jne 0x140178b34
lea rax, [0x1401a7cec]
mov qword [rdi], rax
add rsp, 0x1f8
pop rdi
pop rsi
ret
lea rcx, str.library_std_src_synconce.rs
call dbg.unwrap_failed
mov qword [rsp + 0x30], 0
lea rdx, [0x140286920]
lea r9, str._i__
lea rcx, [rsp + 0x2c]
lea r8, [rsp + 0x30]
call dbg.assert_failed<i32, i32>
int3

Function at 0x140178b60
Capabilities:
Initialize winsock library

Disassembly:
push rsi
push rdi
sub rsp, 0x1f8
mov rax, qword [rcx]
mov rdi, qword [rax]
mov qword [rax], 0
test rdi, rdi
je 0x140178bb8
lea rsi, [rsp + 0x60]
mov r8d, 0x198
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov cx, 0x202
mov rdx, rsi
call sub.WS2_32.dll_WSAStartup
mov dword [rsp + 0x2c], eax
test eax, eax
jne 0x140178bc4
lea rax, [0x1401a7cec]
mov qword [rdi], rax
add rsp, 0x1f8
pop rdi
pop rsi
ret
lea rcx, str.library_std_src_synconce.rs
call dbg.unwrap_failed
mov qword [rsp + 0x30], 0
lea rdx, [0x140286920]
lea r9, str._i__
lea rcx, [rsp + 0x2c]
lea r8, [rsp + 0x30]
call dbg.assert_failed<i32, i32>
int3
Function at 0x140179050
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rsi
sub rsp, 0xb0
mov rax, rdx
mov rsi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x2c], pe_nt_image_headers64
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x2c]
mov rcx, rax
call sub.WS2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x1401790f4
mov eax, dword [rsp + 0x2c]
movzx ecx, word [rsp + 0x30]
cmp ecx, 2
je 0x140179103
cmp ecx, 0x17
jne 0x140179123
cmp eax, 0x1b
jbe 0x14017913c
movzx eax, word [rsp + 0x32]
rol ax, 8
movups xmm0, xmmword [rsp + 0x38]
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x48]
mov word [rsi], 1
movups xmmword [rsi + 4], xmm0
mov dword [rsi + 0x14], ecx
mov dword [rsi + 0x18], edx
mov word [rsi + 0x1c], ax
jmp 0x140179133
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
jmp 0x14017912a
cmp eax, 0xf
jbe 0x140179154
movzx eax, word [rsp + 0x32]
rol ax, 8
mov ecx, dword [rsp + 0x34]
mov word [rsi], 0
mov word [rsi + 6], ax
mov dword [rsi + 2], ecx
jmp 0x140179133
lea rax, str.invalid_argument
mov qword [rsi + 8], rax
mov word [rsi], 2
add rsp, 0xb0
pop rsi
ret
lea rcx, str.assertion_failed:_len_as_usize___mem::size_of::_c::sockaddr_in6___
lea r8, str._x__
mov edx, 0x43
call dbg.panic
lea rcx, str.assertion_failed:_len_as_usize___mem::size_of::_c::sockaddr_in___library_std_src_sys_common_net.rs
lea r8, [0x140287848]
mov edx, 0x42
call dbg.panic
int3
Function at 0x14017f610
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rsi, rcx
movabs rbx, 0x8000000000000000
lea rcx, [rsp + 0x40]
call sym.std::sys::pal::windows::to_u16s::inner::hf18d8ce8b4f1b2ad
mov rax, qword [rsp + 0x40]
cmp rax, rbx
jne 0x14017f64d
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
jmp 0x14017f675
movups xmm0, xmmword [rsp + 0x48]
mov qword [rsp + 0x58], rax
movups xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x28]
lea rdx, [rsp + 0x58]
call dbg.from_wide_to_user_path
mov r14, qword [rsp + 0x28]
cmp r14, rbx
jne 0x14017f68e
lea rcx, [rsp + 0x30]
call dbg.drop_in_place<std::io::error::Error>
mov qword [rsi], rbx
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov rdi, qword [rsp + 0x30]
mov r15, qword [rsp + 0x38]
mov rcx, rdi
call sub.kernel32.dll_GetFileAttributesW
cmp eax, 0xffffffff
je 0x14017f6b2
mov qword [rsi], r14
mov qword [rsi + 8], rdi
mov qword [rsi + 0x10], r15
jmp 0x14017f682
mov qword [rsi], rbx
test r14, r14
je 0x14017f682
mov rcx, qword [0x14030f110]
xor edx, edx
mov r8, rdi
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop r15
jmp sub.kernel32.dll_HeapFree
Function at 0x140181c10
Capabilities:
Create thread

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
mov rdi, r8
mov r14, rdx
mov rbx, rcx
movzx eax, byte [0x14030f1a8]
mov edx, 0x10
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x140181cd9
mov rsi, rax
mov qword [rax], r14
mov qword [rax + 8], rdi
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10000
lea r8, [dbg.thread_start]
xor edi, edi
xor ecx, ecx
mov rdx, rbx
mov r9, rax
call sub.kernel32.dll_CreateThread
mov rdx, rax
test rax, rax
jne 0x140181ccc
mov rdi, qword [rsi]
mov r14, qword [rsi + 8]
mov rcx, rdi
call qword [r14]
cmp qword [r14 + 8], 0
je 0x140181ca7
cmp qword [r14 + 0x10], 0x11
jb 0x140181c96
mov rdi, qword [rdi - 8]
mov rcx, qword [0x14030f110]
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapFree
mov rcx, qword [0x14030f110]
xor edx, edx
mov r8, rsi
call sub.kernel32.dll_HeapFree
call sub.kernel32.dll_GetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov edi, 1
mov rax, rdi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
ret
mov ecx, 8
mov edx, 0x10
call dbg.handle_alloc_error
ud2

Function at 0x140181ff0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1098
call dbg.___chkstk_ms
sub rsp, rax
movaps xmmword [rsp + 0x1080], xmm6
mov rsi, rdx
mov rdi, rcx
lea r14, [rsp + 0x80]
mov r8d, 0x1000
mov rcx, r14
xor edx, edx
call sub.msvcrt.dll_memset
xorps xmm6, xmm6
lea r15, [rsp + 0x3c]
lea rbx, [dbg.callback]
lea r13, [rsp + 0x60]
lea r12, [0x14021c6a8]
mov qword [rsp + 0x48], rdi

Function at 0x140182590
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push rsi
sub rsp, 0x80
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
mov edx, 0x10
call sub.ADVAPI32.dll_SystemFunction036
test al, al
je 0x1401825c6
mov rax, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x38]
add rsp, 0x80
pop rsi
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x28]
mov qword [rsp + 0x40], rax
lea rax, [sym.__std::io::error::Error_as_core::fmt::Display_::fmt::hf40e1c7e24acfc96]
mov qword [rsp + 0x48], rax
lea rax, str._m__
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 1
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rdx, str.hm__
lea rcx, [rsp + 0x50]
call dbg.panic_fmt
ud2
Function at 0x140184a70
Capabilities:
Read file on windows

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rdi, rdx
cmp qword [rdx], 0
jne 0x140184bbd
mov rsi, rcx
mov rbx, qword [rdi + 0x18]
mov rax, qword [rbx]
test rax, rax
jne 0x140184aa7
mov rdx, qword [rbx + 0x10]
lea rax, [rdx + 0xf]
cmp rax, 0xf
jbe 0x140184ba7
xor eax, eax
mov rdx, qword [rbx + 0x10]
cmp rax, rdx
je 0x140184b8a
sub rax, rdx
add rdx, qword [rbx + 8]
mov r8, qword [rdi + 0x10]
mov ecx, 0xffffffff
cmp rax, rcx
cmovae rax, rcx
mov dword [rsp + 0x2c], 0
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0x20], r8
lea r9, [rsp + 0x2c]
mov r8d, eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x140184b08
mov ecx, dword [rsp + 0x2c]
mov eax, 2
test rcx, rcx
je 0x140184b30
mov qword [rdi], rax
mov qword [rdi + 8], rcx
mov byte [rsi + 1], 1
jmp 0x140184b34
call sub.kernel32.dll_GetLastError
mov rcx, rax
shl rcx, 0x20
or rcx, 2
mov qword [rsp + 0x40], rcx
cmp eax, 0x6d
je 0x140184b38
cmp eax, 0x3e5
jne 0x140184b67
lea rax, [rsp + 0x30]
jmp 0x140184b46
mov byte [rsi + 1], 0
xor eax, eax
jmp 0x140184b6d
mov qword [rsp + 0x30], 1
lea rax, [rsp + 0x38]
mov qword [rax], 0
lea rcx, [rsp + 0x40]
call dbg.drop_in_place<std::io::error::Error>
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
cmp rax, 2
jne 0x140184b77
mov qword [rsi + 8], rcx
mov al, 1
mov byte [rsi], al
add rsp, 0x70
pop rbx
pop rdi
pop rsi
ret
test rax, rax
jne 0x140184af1
mov eax, 1
jmp 0x140184afb
mov r8d, 1
mov rcx, rbx
mov rdx, rax
call dbg.do_reserve_and_handle<u8, alloc::alloc::Global>
mov rax, qword [rbx]
mov rdx, qword [rbx + 0x10]
jmp 0x140184ab4
mov r8d, 0x10
mov rcx, rbx
call dbg.do_reserve_and_handle<u8, alloc::alloc::Global>
mov rax, qword [rbx]
jmp 0x140184aa7
mov qword [rsp + 0x40], 0
lea rdx, [rsp + 0x40]
mov rcx, rdi
call dbg.assert_failed<std::sys::pal::windows::pipe::State, std::sys::pal::windows::pipe::State>
int3
Function at 0x140187ac0
Capabilities:
Create tcp socket
Create udp socket

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rcx
test rdx, rdx
je 0x140187aea
mov qword [rsi + 8], r8
mov qword [rsi], 1
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
mov rax, qword [0x14030f118]
cmp rax, 3
jne 0x140187c71
mov r15, r8
cmp word [r8], 0
mov eax, 2
mov ebx, 0x17
cmove ebx, eax
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
mov ecx, ebx
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140187b68
cmp word [r15], 0
je 0x140187bde
movups xmm0, xmmword [r15 + 4]
mov eax, dword [r15 + 0x14]
mov edx, dword [r15 + 0x18]
movzx ecx, word [r15 + 0x1c]
mov r8d, 0x1c
mov r9w, 0x17
jmp 0x140187bf5
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x2739
je 0x140187b82
mov r14d, eax
cmp eax, 0x2726
jne 0x140187c60
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov ecx, ebx
mov edx, 2
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
cmp rax, 0xffffffffffffffff
je 0x140187c58
mov rdi, rax
mov rcx, rax
mov edx, 1
xor r8d, r8d
call sub.kernel32.dll_SetHandleInformation
test eax, eax
jne 0x140187b3b
call sub.kernel32.dll_GetLastError
mov r14d, eax
mov rcx, rdi
call fcn.1401a7cac
jmp 0x140187c60
mov eax, dword [r15 + 2]
movzx ecx, word [r15 + 6]
mov r8d, 0x10
mov r9w, 2
xorps xmm0, xmm0
rol cx, 8
mov word [rsp + 0x34], r9w
mov word [rsp + 0x36], cx
mov dword [rsp + 0x38], eax
movups xmmword [rsp + 0x3c], xmm0
mov dword [rsp + 0x4c], edx
lea rdx, [rsp + 0x34]
mov rcx, rdi
call sub.WS2_32.dll_bind
cmp eax, 0xffffffff
je 0x140187c33
mov qword [rsi + 8], rdi
mov qword [rsi], 0
jmp 0x140187ade
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov qword [rsi], 1
mov rcx, rdi
call fcn.1401a7cac
jmp 0x140187ade
call sub.WS2_32.dll_WSAGetLastError
mov r14d, eax
shl r14, 0x20
or r14, 2
mov qword [rsi + 8], r14
jmp 0x140187ad7
mov rdi, r8
call dbg.initialize<unsafe extern "system" fn() -> i32, std::sync::once_lock::{impl#0}::get_or_init::{closure_env#0}<unsafe extern "system" fn() -> i32, std::sys::pal::windows::net::init::{closure_env#0}>, !>
mov r8, rdi
jmp 0x140187afb
Function at 0x140187cd0
Capabilities:
Generate random numbers via winapi
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x30
mov ecx, dword [0x1402145a8]
test ecx, ecx
je 0x140187dc6
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x140187d00
cmp qword [rax + 8], 0
je 0x140187d00
add rax, 0x10
jmp 0x140187dc0
mov ecx, dword [0x1402145a8]
test ecx, ecx
je 0x140187dd9
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x140187da0
mov rsi, rax
test rax, rax
jne 0x140187d70
movzx eax, byte [0x14030f1a8]
mov edx, 0x20
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x140187dff
mov rsi, rax
lea rax, dbg.destroy_value_core::cell::Cell__usize__bool___
mov qword [rsi], rax
mov qword [rsi + 8], 0
mov ecx, dword [0x1402145a8]
test ecx, ecx
je 0x140187dec
dec ecx
mov rdx, rsi
call fcn.1401a808c
xorps xmm0, xmm0
movaps xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
xor ecx, ecx
mov r8d, 0x10
mov r9d, 2
call sub.bcrypt.dll_BCryptGenRandom
test eax, eax
js 0x140187da4
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
jmp 0x140187dac
xor eax, eax
jmp 0x140187dc0
call dbg.fallback_rng
mov rcx, rax
mov qword [rsi + 8], 1
lea rax, [rsi + 0x10]
mov qword [rsi + 0x10], rcx
mov qword [rsi + 0x18], rdx
add rsp, 0x30
pop rsi
ret
lea rcx, dbg.destroy_value_core::cell::Cell__usize__bool___
call dbg.init
mov ecx, eax
jmp 0x140187ce5
lea rcx, dbg.destroy_value_core::cell::Cell__usize__bool___
call dbg.init
mov ecx, eax
jmp 0x140187d10
lea rcx, dbg.destroy_value_core::cell::Cell__usize__bool___
call dbg.init
mov ecx, eax
jmp 0x140187d68
mov ecx, 8
mov edx, 0x20
call dbg.handle_alloc_error
int3
Function at 0x1401944d7
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov ecx, dword [0x1402145f0]
test ecx, ecx
je 0x1401945a1
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x14019450b
mov rdi, rax
cmp qword [rax + 8], 0
je 0x14019450b
add rdi, 8
jmp 0x140194597
mov ecx, dword [0x1402145f0]
test ecx, ecx
je 0x1401945b4
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x140194595
mov rsi, rax
test rax, rax
jne 0x140194572
mov al, byte [0x14030f1a8]
mov edx, 0x10
xor ecx, ecx
call dbg.process_heap_alloc
test rax, rax
je 0x1401945d7
mov rsi, rax
lea rax, sym.std::sys::pal::common::thread_local::os_local::destroy_value::heda6f4dc6d5bb3cb
mov qword [rsi], rax
mov qword [rsi + 8], 0
mov ecx, dword [0x1402145f0]
test ecx, ecx
je 0x1401945c7
dec ecx
mov rdx, rsi
call fcn.1401a808c
lea rdi, [rsi + 8]
call sym.tokio::runtime::park::ParkThread::new::h45a9d3c679adb769
mov rcx, qword [rsi + 8]
mov qword [rsi + 8], rax
test rcx, rcx
je 0x140194597
lock dec qword [rcx]
jne 0x140194597
call sym.alloc::sync::Arc_T_A_::drop_slow::h273abdc65f47055e
jmp 0x140194597
xor edi, edi
mov rax, rdi
add rsp, 0x28
pop rdi
pop rsi
ret
lea rcx, sym.std::sys::pal::common::thread_local::os_local::destroy_value::heda6f4dc6d5bb3cb
call dbg.init
mov ecx, eax
jmp 0x1401944ed
lea rcx, sym.std::sys::pal::common::thread_local::os_local::destroy_value::heda6f4dc6d5bb3cb
call dbg.init
mov ecx, eax
jmp 0x14019451b
lea rcx, sym.std::sys::pal::common::thread_local::os_local::destroy_value::heda6f4dc6d5bb3cb
call dbg.init
mov ecx, eax
jmp 0x14019456a
mov ecx, 8
mov edx, 0x10
call dbg.handle_alloc_error
int3