joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400aa6b1
Capabilities:
Receive data
Receive data on socket

Disassembly:
cmp dword [rcx], 2
jne 0x1400aa931
add rcx, 8
jmp fcn.1400aa6c3
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x70
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
mov rcx, r8
call fcn.1400aab48
lea rcx, [rsp + 0x50]
mov qword [rcx], rax
mov qword [rcx + 8], rdx
xorps xmm0, xmm0
movups xmmword [rcx + 0x10], xmm0
mov qword [rdi + 0x38], rbx
call fcn.140089155
mov rbx, rax
mov r14, rdx
lea r15, [rsp + 0x28]
mov rcx, rdi
call fcn.14006402c
test rdx, rdx
jne 0x1400aa9ef
mov rcx, r15
mov rdx, rdi
call fcn.140064047
mov eax, dword [rsp + 0x28]
cmp eax, 2
je 0x1400aaa84
test eax, eax
je 0x1400aa9ef
cmp qword [rdi + 0x110], 0
je 0x1400aa9d2
mov rcx, r15
mov rdx, rdi
call fcn.140064d44
cmp qword [rsp + 0x28], 0
jne 0x1400aaa84
cmp qword [rsp + 0x30], 0
je 0x1400aa9ef
and qword [rdi + 0x110], 0
mov rcx, r15
mov rdx, rdi
call fcn.140064f48
cmp byte [rsp + 0x28], 0
jne 0x1400aaa84
cmp byte [rsp + 0x29], 0
je 0x1400aa978
mov rcx, rdi
call fcn.14006402c
mov r13, rax
mov r15, rdx
test rax, rax
je 0x1400aaa89
cmp r14, r15
mov r12, r15
cmovb r12, r14
lea r9, str._home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rs
mov rcx, r12
mov rdx, rbx
mov r8, r14
call fcn.14006202f
mov rbx, rax
mov r14, rdx
lea r9, str._home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rs
mov rcx, r13
mov rdx, r15
mov r8, r12
call fcn.140062630
mov r9, rdx
lea rcx, str._home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rs
mov qword [rsp + 0x20], rcx
mov rcx, rbx
mov rdx, r14
mov r8, rax
call fcn.140013b9d
mov rax, qword [rdi + 0x58]
add rax, r12
cmp rax, qword [rdi + 0x50]
ja 0x1400aab07
mov qword [rdi + 0x58], rax
lea rcx, [rsp + 0x50]
mov rdx, r12
call fcn.1400891ab
xor r15d, r15d
jmp 0x1400aaaab
mov r15, qword [rsp + 0x30]
mov rcx, r15
call fcn.14006212a
cmp al, 0xd
jne 0x1400aaaab
and qword [rdi + 0x38], 0
mov rcx, r15
call fcn.1400890fe
mov edi, 1
xor eax, eax
jmp 0x1400aaab4
and qword [rdi + 0x38], 0
mov al, 1
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r15
test al, al
je 0x1400aaaf1
test r15, r15
jne 0x1400aaaf1
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
call fcn.1400aab62
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.1400aab77
mov rcx, rsi
mov rdx, rbx
call fcn.1400aab8e
xor r15d, r15d
mov rax, rdi
mov rdx, r15
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str.assertion_failed:_pos___self.dec_in.get_ref__.len___as_u64
lea r8, str._home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_schannel_0.1.23_src_tls_stream.rs
mov edx, 0x3b
call fcn.14000c520
ud2
Function at 0x1400aa6c3
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r12, rdx
mov r13, rcx
mov qword [rsp + 0x58], r8
mov rcx, r8
call fcn.1400aab48
mov rbx, rax
lea rsi, [rsp + 0x42]
lea rdi, [rsp + 0x52]
mov rbp, qword [r13 + 0x10]
mov r14, qword [r13 + 0x18]
mov eax, 0x7fffffff
cmp rdx, rax
mov qword [rsp + 0x60], rdx
cmovb rax, rdx
mov qword [rsp + 0x70], rax
mov rax, qword [r13 + 0x20]
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbp
lea rcx, [rsp + 0x38]
mov rdx, rbp
mov r8, r12
xor r9d, r9d
call fcn.1400e4710
mov al, byte [rsp + 0x41]
cmp al, 3
je 0x1400aa853
mov r15, qword [rsp + 0x38]
cmp al, 2
je 0x1400aa85a
mov cl, byte [rsp + 0x40]
movzx edx, word [rsi + 4]
mov word [rdi + 4], dx
mov edx, dword [rsi]
mov dword [rdi], edx
mov qword [rsp + 0x48], r15
mov byte [rsp + 0x50], cl
mov byte [rsp + 0x51], al
cmp r14, 0xffffffffffffffff
je 0x1400aa8ce
mov rcx, r14
mov rdx, rbx
mov r8, qword [rsp + 0x70]
xor r9d, r9d
call sub.ws2_32.dll_recv
cmp eax, 0xffffffff
jne 0x1400aa865
call sub.ws2_32.dll_WSAGetLastError
cmp eax, 0x274a
je 0x1400aa86c
mov r15d, eax
shl r15, 0x20
or r15, 2
mov rcx, r15
call fcn.14004863b
cmp al, 0xd
jne 0x1400aa82d
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x1400aa82d
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
lock inc qword [rdx]
jle 0x1400aa8da
mov rbp, r14
mov r14, r13
mov r13, rsi
mov rsi, r12
mov r12, rbx
add rcx, 0x10
mov r8, qword [rax + 0x10]
mov r9b, byte [rax + 0x18]
call fcn.14004849a
mov rbx, rax
xor ecx, ecx
call fcn.140047095
test rbx, rbx
je 0x1400aa819
mov ecx, 1
mov rdx, r15
call fcn.1400488b4
mov r15, rbx
mov rbx, r12
mov r12, rsi
mov rsi, r13
mov r13, r14
mov r14, rbp
mov rbp, qword [rsp + 0x30]
mov rcx, r15
call fcn.14006212a
cmp al, 0xd
jne 0x1400aa86f
mov rcx, r13
lea rdx, [rsp + 0x48]
call fcn.1400e46ad
mov rcx, r15
call fcn.140062051
jmp 0x1400aa729
mov edi, 1
jmp 0x1400aa85c
xor edi, edi
xor eax, eax
mov qword [rsp + 0x28], rax
jmp 0x1400aa871
cdqe
mov qword [rsp + 0x28], rax
xor r15d, r15d
xor edi, edi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], r15
test rdi, rdi
jne 0x1400aa8b4
test r15, r15
jne 0x1400aa8b4
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x28]
call fcn.1400aab62
mov rsi, rax
lea rcx, [rsp + 0x78]
call fcn.1400aab77
mov rcx, qword [rsp + 0x58]
mov rdx, rsi
call fcn.1400aab8e
xor r15d, r15d
mov rax, rdi
mov rdx, r15
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, str._home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.37.0_src_io_poll_evented.rs
call fcn.14000f700
ud2

Function at 0x1400aabe0
Capabilities:
Encrypt data via sspi

Disassembly:
sub rsp, 0x28
cmp dword [rdx], 2
jne 0x1400aac02
mov rax, qword [rsp + 0x50]
add rdx, 8
mov qword [rsp + 0x20], rax
call fcn.1400eaf5c
nop
add rsp, 0x28
ret
add rsp, 0x28
jmp fcn.14008a537
Function at 0x1400af810
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
sub rdx, rcx
cmp rdx, 0x20
jae fcn.14000bc00
cmp rax, rcx
je 0x1400af835
cmp rdx, 4
jae 0x1400af838
xor eax, eax
xor r8d, r8d
jmp 0x1400af8d0
xor eax, eax
ret
mov r8, rdx
and r8, 0xfffffffffffffffc
pxor xmm0, xmm0
xor eax, eax
movdqa xmm2, xmmword [0x14012d280]
movdqa xmm3, xmmword [0x14012d290]
pxor xmm1, xmm1
nop dword [rax]
movzx r9d, word [rcx + rax]
movd xmm4, r9d
movzx r9d, word [rcx + rax + 2]
movd xmm5, r9d
pcmpgtb xmm4, xmm2
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm0, xmm4
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
add rax, 4
cmp r8, rax
jne 0x1400af860
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
paddq xmm0, xmm1
movq rax, xmm0
cmp r8, rdx
je 0x1400af8e7
nop dword [rax]
xor r9d, r9d
cmp byte [rcx + r8], 0xc0
setge r9b
add rax, r9
inc r8
cmp rdx, r8
jne 0x1400af8d0
ret
Function at 0x1400b0790
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x48
mov rsi, rcx
mov r8, qword [rcx]
test r8, r8
je 0x1400b07eb
mov r10, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
cmp rcx, r10
jae 0x1400b07eb
movzx eax, byte [r8 + rcx]
cmp eax, 0x49
je 0x1400b0806
cmp eax, 0x42
jne 0x1400b07eb
lea r11, [rcx + 1]
mov qword [rsi + 0x10], r11
cmp r11, r10
jae 0x1400b08b6
cmp byte [r8 + r11], 0x5f
jne 0x1400b08b6
lea rax, [rcx + 2]
mov qword [rsi + 0x10], rax
xor eax, eax
jmp 0x1400b091e
mov rcx, rsi
xor edx, edx
call fcn.1400ac270
mov edi, eax
add dil, dil
mov eax, edi
add rsp, 0x48
pop rbx
pop rdi
pop rsi
pop r14
ret
inc rcx
mov qword [rsi + 0x10], rcx
mov rcx, rsi
xor edx, edx
call fcn.1400ac270
test al, al
jne 0x1400b09b1
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x1400b0842
lea rdx, [0x1401c189b]
mov r8d, 1
call fcn.14000c200
test al, al
jne 0x1400b09b1
mov rax, qword [rsi]
mov dil, 1
test rax, rax
je 0x1400b07fa
xor r14d, r14d
lea rbx, [0x1401c1c09]
nop word [rax + rax]
mov rcx, qword [rsi + 0x10]
cmp rcx, qword [rsi + 8]
jae 0x1400b0874
cmp byte [rax + rcx], 0x45
je 0x1400b09d3
sub r14, 1
jb 0x1400b0899
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x1400b0899
mov r8d, 2
mov rdx, rbx
call fcn.14000c200
test al, al
jne 0x1400b09b1
mov rcx, rsi
call fcn.1400ada90
test al, al
jne 0x1400b09b1
mov rax, qword [rsi]
test rax, rax
jne 0x1400b0860
jmp 0x1400b07fa
xor eax, eax
mov edi, 0x3e
nop dword [rax]
mov r9b, 1
cmp r11, r10
jae 0x1400b0978
movzx edx, byte [r8 + r11]
cmp dl, 0x5f
je 0x1400b0912
lea ebx, [rdx - 0x30]
cmp bl, 0xa
jb 0x1400b08fc
lea ebx, [rdx - 0x61]
cmp bl, 0x1a
jae 0x1400b08eb
add dl, 0xa9
jmp 0x1400b08fa
lea ebx, [rdx - 0x41]
cmp bl, 0x1a
jae 0x1400b0978
add dl, 0xe3
mov ebx, edx
inc r11
mov qword [rsi + 0x10], r11
mul rdi
jo 0x1400b0978
movzx edx, bl
add rax, rdx
jae 0x1400b08c0
jmp 0x1400b0978
inc r11
mov qword [rsi + 0x10], r11
inc rax
je 0x1400b0978
cmp rax, rcx
jae 0x1400b0975
mov ecx, dword [rsi + 0x18]
inc ecx
cmp ecx, 0x1f4
ja 0x1400b09cb
cmp qword [rsi + 0x20], 0
je 0x1400b09c4
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x30], xmm1
movaps xmmword [rsp + 0x20], xmm0
mov qword [rsi + 0x10], rax
mov dword [rsi + 0x18], ecx
mov rcx, rsi
call fcn.1400b0790
movaps xmm0, xmmword [rsp + 0x20]
movaps xmm1, xmmword [rsp + 0x30]
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm1
jmp 0x1400b07fc
mov r9b, 1
xor edi, edi
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x1400b09b9
mov eax, r9d
xor al, 1
movzx eax, al
lea r8, [rax + rax*8]
add r8, 0x10
lea rax, str.invalid_syntaxrecursion_limit_reached_for_____::closureshim_as_mut_const___dyn___unsafe_extern__
lea rdx, [0x1401c1be8]
test r9b, r9b
cmovne rdx, rax
call fcn.14000c200
test al, al
je 0x1400b09b9
mov dil, 2
jmp 0x1400b07fa
mov qword [rsi], 0
mov byte [rsi + 8], dil
xor edi, edi
jmp 0x1400b07fa
mov dil, 1
xor r9d, r9d
jmp 0x1400b097a
inc rcx
mov qword [rsi + 0x10], rcx
jmp 0x1400b07fa
Function at 0x1400b3643
Capabilities:
Get remote cert context via schannel

Disassembly:
sub rsp, 0x28
lea r8, [rsp + 0x20]
and qword [r8], 0
mov edx, 0x53
call sub.secur32.dll_QueryContextAttributesW
mov edx, eax
xor eax, eax
test edx, edx
setne cl
jne 0x1400b366c
mov rdx, qword [rsp + 0x20]
jmp 0x1400b3674
shl rdx, 0x20
or rdx, 2
mov al, cl
add rsp, 0x28
ret

Function at 0x1400b38d8
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xd8
movabs rax, 0x8000000000000000
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0xc8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0x98], xmm0
mov dword [rsp + 0x88], 4
mov dword [rsp + 0xd0], 0x400010
cmp qword [rcx + 0x18], rax
je 0x1400b3948
mov edx, dword [rcx + 0x28]
mov dword [rsp + 0xb0], edx
mov rdx, qword [rcx + 0x20]
mov qword [rsp + 0xb8], rdx
cmp qword [rcx + 0x30], rax
je 0x1400b3983
mov rax, qword [rcx + 0x40]
test rax, rax
je 0x1400b397a
mov r8, qword [rcx + 0x38]
xor edx, edx
lea r9, [0x1401f1208]
xor r10d, r10d
movzx r11d, byte [r8 + r10]
or edx, dword [r9 + r11*4]
inc r10
cmp rax, r10
jne 0x1400b3967
jmp 0x1400b397c
xor edx, edx
mov dword [rsp + 0xc0], edx
mov rsi, qword [rcx + 0x10]
test rsi, rsi
je 0x1400b39d2
mov rax, rsi
shr rax, 0x3c
jne 0x1400b3a97
mov r14, qword [rcx + 8]
lea rbx, [rsi*8]
mov ecx, 8
mov rdx, rbx
call fcn.14004536d
test rax, rax
je 0x1400b3a9c
mov rdi, rax
xor eax, eax
mov rcx, qword [r14 + rax*8]
mov qword [rdi + rax*8], rcx
inc rax
cmp rsi, rax
jne 0x1400b39c0
jmp 0x1400b39d9
mov edi, 8
xor esi, esi
lea rax, [rsp + 0x88]
mov dword [rax + 4], esi
mov qword [rax + 8], rdi
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x38], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rax
and qword [rsp + 0x40], 0
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call sub.secur32.dll_AcquireCredentialsHandleA
mov ebx, eax
test eax, eax
je 0x1400b3a32
shl rbx, 0x20
or rbx, 2
mov r14d, 1
jmp 0x1400b3a79
movaps xmm0, xmmword [rsp + 0x50]
mov eax, 1
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
movups xmmword [rsp + 0x78], xmm0
mov al, byte [0x14021d218]
mov edx, 0x20
xor ecx, ecx
call fcn.1400defd0
test rax, rax
je 0x1400b3aa9
mov rbx, rax
movups xmm0, xmmword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
xor r14d, r14d
mov rcx, rsi
mov rdx, rdi
call fcn.1400b2b0e
mov rax, r14
mov rdx, rbx
add rsp, 0xd8
pop rbx
pop rdi
pop rsi
pop r14
ret
call fcn.1400084a0
mov ecx, 8
mov rdx, rbx
call fcn.1400084e0
lea r14, [rsp + 0x78]
mov ecx, 8
mov edx, 0x20
call fcn.1400084e0
ud2
Function at 0x1400b8be0
Capabilities:
Set socket configuration

Disassembly:
sub rsp, 0x38
mov eax, edx
lea r9, [rsp + 0x34]
mov dword [r9], r8d
mov dword [rsp + 0x20], 4
mov edx, 0xffff
mov r8d, eax
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
je 0x1400b8c0c
xor eax, eax
jmp 0x1400b8c11
call fcn.140048fb7
nop
add rsp, 0x38
ret

Function at 0x1400b8c3b
Capabilities:
Connect socket

Disassembly:
sub rsp, 0x28
mov r8d, dword [rdx + 0x80]
call sub.ws2_32.dll_connect
test eax, eax
je 0x1400b8c58
add rsp, 0x28
jmp fcn.140048fb7
xor eax, eax
add rsp, 0x28
ret
Function at 0x1400ba2c0
Capabilities:
Allocate thread local storage

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x60
mov rsi, rcx
cmp qword [rcx], 0
je 0x1400ba345
mov dword [rsp + 0x2c], 0
lea rbx, [rsi + 0x10]
lea r8, [rsp + 0x2c]
mov rcx, rbx
xor edx, edx
xor r9d, r9d
call sub.kernel32.dll_InitOnceBeginInitialize
mov dword [rsp + 0x28], eax
cmp eax, 1
jne 0x1400ba386
cmp dword [rsp + 0x2c], 0
je 0x1400ba36a
call sub.kernel32.dll_TlsAlloc
cmp eax, 0xffffffff
je 0x1400ba3ac
mov edi, eax
inc eax
mov dword [rsi + 0x18], eax
mov rax, qword [0x14021d1c0]
nop
mov qword [rsi + 8], rax
lock cmpxchg qword [0x14021d1c0], rsi
jne 0x1400ba320
mov byte [0x14021d1b8], 1
mov rcx, rbx
xor edx, edx
xor r8d, r8d
call sub.kernel32.dll_InitOnceComplete
jmp 0x1400ba37c
call sub.kernel32.dll_TlsAlloc
mov dword [rsp + 0x28], eax
cmp eax, 0xffffffff
je 0x1400ba3f6
mov ecx, eax
inc ecx
xor eax, eax
lock cmpxchg dword [rsi + 0x18], ecx
jne 0x1400ba36f
mov edi, dword [rsp + 0x28]
jmp 0x1400ba37c
mov edi, dword [rsi + 0x18]
jmp 0x1400ba37a
mov edi, eax
mov ecx, dword [rsp + 0x28]
call sub.kernel32.dll_TlsFree
dec edi
mov eax, edi
add rsp, 0x60
pop rbx
pop rdi
pop rsi
ret
mov qword [rsp + 0x30], 0
lea rdx, [0x1401c5c18]
lea r9, str.library_std_src_syspalwindows_thread_local_key.rs
lea rcx, [rsp + 0x28]
lea r8, [rsp + 0x30]
call fcn.1400ba9c0
mov rcx, rbx
mov edx, 4
xor r8d, r8d
call sub.kernel32.dll_InitOnceComplete
lea rax, str.out_of_TLS_indexes
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rax, str._rustc_11f32b73e0dc9287e305b5b9980d24aecdc8c17flibrarycore_srccharmethods.rs
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
lea rdx, str.library_std_src_syspalwindows_thread_local_key.rs
lea rcx, [rsp + 0x30]
call fcn.14000b6b0
lea rax, str.out_of_TLS_indexes
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
lea rax, str._rustc_11f32b73e0dc9287e305b5b9980d24aecdc8c17flibrarycore_srccharmethods.rs
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
lea rcx, [rsp + 0x28]
lea rdx, [rsp + 0x30]
call fcn.1400baa00
int3
Function at 0x1400ba8a0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rdi
sub rsp, 0x28
mov ecx, dword [0x140129370]
test ecx, ecx
je 0x1400ba979
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x1400ba8d4
mov rdi, rax
cmp qword [rax + 8], 0
je 0x1400ba8d4
add rdi, 0x10
jmp 0x1400ba96f
mov ecx, dword [0x140129370]
test ecx, ecx
je 0x1400ba98c
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x1400ba96d
mov rsi, rax
test rax, rax
jne 0x1400ba93c
movzx eax, byte [0x14021d218]
mov edx, 0x18
xor ecx, ecx
call fcn.1400defd0
test rax, rax
je 0x1400ba9af
mov rsi, rax
lea rax, [0x140129358]
mov qword [rsi], rax
mov qword [rsi + 8], 0
mov ecx, dword [0x140129370]
test ecx, ecx
je 0x1400ba99f
dec ecx
mov rdx, rsi
call sub.kernel32.dll_TlsSetValue
lea rdi, [rsi + 0x10]
mov rcx, qword [rsi + 0x10]
cmp qword [rsi + 8], 0
mov qword [rsi + 8], 1
mov qword [rsi + 0x10], 0
je 0x1400ba96f
test rcx, rcx
je 0x1400ba96f
lock dec qword [rcx]
jne 0x1400ba96f
call fcn.1400ba270
jmp 0x1400ba96f
xor edi, edi
mov rax, rdi
add rsp, 0x28
pop rdi
pop rsi
ret
lea rcx, [0x140129358]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400ba8b6
lea rcx, [0x140129358]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400ba8e4
lea rcx, [0x140129358]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400ba934
mov ecx, 8
mov edx, 0x18
call fcn.1400084e0
int3

Function at 0x1400baff0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x20
mov ecx, dword [0x140129390]
test ecx, ecx
je 0x1400bb08c
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x1400bb019
mov rsi, rax
cmp byte [rax + 8], 0
jne 0x1400bb07b
mov ecx, dword [0x140129390]
test ecx, ecx
je 0x1400bb09f
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x1400bb081
mov rsi, rax
test rax, rax
jne 0x1400bb075
movzx eax, byte [0x14021d218]
mov edx, 0x10
xor ecx, ecx
call fcn.1400defd0
test rax, rax
je 0x1400bb0c2
mov rsi, rax
lea rax, [0x140129378]
mov qword [rsi], rax
mov byte [rsi + 8], 0
mov ecx, dword [0x140129390]
test ecx, ecx
je 0x1400bb0b2
dec ecx
mov rdx, rsi
call sub.kernel32.dll_TlsSetValue
mov word [rsi + 8], 1
add rsi, 9
jmp 0x1400bb083
xor esi, esi
mov rax, rsi
add rsp, 0x20
pop rsi
ret
lea rcx, [0x140129378]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bb005
lea rcx, [0x140129378]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bb025
lea rcx, [0x140129378]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bb06d
mov ecx, 8
mov edx, 0x10
call fcn.1400084e0
int3
Function at 0x1400bb680
Capabilities:
Write file on windows

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
mov rdi, rdx
mov rsi, rcx
movups xmm0, xmmword [0x1401c5910]
movaps xmmword [rsp + 0x60], xmm0
mov eax, 0xffffffff
cmp r9, rax
cmovb rax, r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r8
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov rcx, rdx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtWriteFile
cmp eax, 0x103
jne 0x1400bb6f1
mov rcx, rdi
mov edx, 0xffffffff
call sub.kernel32.dll_WaitForSingleObject
mov eax, dword [rsp + 0x60]
cmp eax, 0x103
je 0x1400bb727
test eax, eax
js 0x1400bb702
mov rax, qword [rsp + 0x68]
mov qword [rsi + 8], rax
xor eax, eax
jmp 0x1400bb71a
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
add rsp, 0xa8
pop rdi
pop rsi
ret
mov dword [rsp + 0x58], 0
mov byte [rsp + 0x5c], 0
lea rax, [0x1401c5978]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 1
lea rax, [rsp + 0x50]
mov qword [rsp + 0x88], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
lea rcx, [rsp + 0x58]
lea rdx, [rsp + 0x78]
call fcn.1400ba820
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1400b9a50
mov ecx, 7
int 0x29
ud2

Function at 0x1400bbc80
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x20
mov ecx, dword [0x140129350]
test ecx, ecx
je 0x1400bbd3a
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 2
jb 0x1400bbcb0
cmp qword [rax + 8], 0
je 0x1400bbcb0
add rax, 0x10
jmp 0x1400bbd34
mov ecx, dword [0x140129350]
test ecx, ecx
je 0x1400bbd4d
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x1400bbd32
mov rsi, rax
test rax, rax
jne 0x1400bbd18
movzx eax, byte [0x14021d218]
mov edx, 0x20
xor ecx, ecx
call fcn.1400defd0
test rax, rax
je 0x1400bbd70
mov rsi, rax
lea rax, [0x140129338]
mov qword [rsi], rax
mov qword [rsi + 8], 0
mov ecx, dword [0x140129350]
test ecx, ecx
je 0x1400bbd60
dec ecx
mov rdx, rsi
call sub.kernel32.dll_TlsSetValue
mov qword [rsi + 8], 1
lea rax, [rsi + 0x10]
mov qword [rsi + 0x10], 0
mov byte [rsi + 0x18], 0
jmp 0x1400bbd34
xor eax, eax
add rsp, 0x20
pop rsi
ret
lea rcx, [0x140129338]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bbc95
lea rcx, [0x140129338]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bbcc0
lea rcx, [0x140129338]
call fcn.1400ba2c0
mov ecx, eax
jmp 0x1400bbd10
mov ecx, 8
mov edx, 0x20
call fcn.1400084e0
int3
Function at 0x1400bdd80
Capabilities:
Get common file path

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x468
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 2
mov qword [rsp + 0x40], 0
mov r8d, 0x200
mov eax, 2
mov qword [rsp + 0x20], rax
xor edi, edi
mov ebx, 0xffffffff
xor esi, esi
xor r14d, r14d
cmp r8, 0x201
jae 0x1400bde00
jmp 0x1400bddef
jae 0x1400bdea5
cmp r8, 0x201
jae 0x1400bde00
mov r15d, 0x200
lea r12, [rsp + 0x68]
mov r13, r8
jmp 0x1400bde47
sub r8, r14
sub rsi, r14
cmp rsi, r8
jae 0x1400bde27
lea rcx, [rsp + 0x30]
mov rdx, r14
call fcn.1400bc6a0
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], rax
cmp rdi, rbx
mov r14d, 0xffffffff
cmovb r14, rdi
mov qword [rsp + 0x40], r14
mov rsi, rdi
mov r15, r14
mov r12, qword [rsp + 0x20]
mov r13, r14
xor ecx, ecx
call sub.kernel32.dll_SetLastError
mov ecx, r13d
mov rdx, r12
call sub.kernel32.dll_GetCurrentDirectoryW
mov ebp, eax
test eax, eax
jne 0x1400bde6c
call sub.kernel32.dll_GetLastError
test eax, eax
jne 0x1400bdefa
mov r8d, ebp
cmp r13, r8
jne 0x1400bdde0
call sub.kernel32.dll_GetLastError
cmp eax, 0x7a
jne 0x1400bdf24
add r13, r13
cmp r13, rbx
cmovae r13, rbx
mov r8, r13
cmp r8, 0x201
jb 0x1400bddef
jmp 0x1400bde00
cmp r15, r8
jb 0x1400bdf3e
lea rcx, [rsp + 0x48]
mov rdx, r12
call fcn.1400be5a0
movups xmm0, xmmword [rsp + 0x48]
movups xmm1, xmmword [rsp + 0x58]
mov rax, qword [rsp + 0x28]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
test rdi, rdi
je 0x1400bdee5
mov edx, 2
mov rcx, qword [rsp + 0x20]
call fcn.140008000
nop
add rsp, 0x468
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 8], rax
movabs rax, 0x8000000000000000
mov qword [rcx], rax
test rdi, rdi
jne 0x1400bded6
jmp 0x1400bdee5
lea rcx, str.internal_error:_entered_unreachable_code_home_wav_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.37.0_src_sync_notify.rs
lea r8, str.library_std_src_syspalwindowsmod.rs
mov edx, 0x28
call fcn.14000c520
jmp 0x1400bdf53
lea rax, str.library_std_src_syspalwindowsmod.rs
mov rcx, r8
mov rdx, r15
mov r8, rax
call fcn.14000c180
ud2