joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400c4770
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c4780
test al, 1
je 0x1400c4852
test al, 2
jne 0x1400c486a
test al, 8
jne 0x1400c47c0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c9ae0
jmp 0x1400c47de
test al, 0x10
je 0x1400c47de
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c48f4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c4815
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c4882
jne 0x1400c4846
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbb00
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c49f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c4a00
test al, 1
je 0x1400c4ad2
test al, 2
jne 0x1400c4aea
test al, 8
jne 0x1400c4a40
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c9cc0
jmp 0x1400c4a5e
test al, 0x10
je 0x1400c4a5e
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c4b74
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c4a95
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c4b02
jne 0x1400c4ac6
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbd50
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c4c70
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c4c80
test al, 1
je 0x1400c4d52
test al, 2
jne 0x1400c4d6a
test al, 8
jne 0x1400c4cc0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c9cc0
jmp 0x1400c4cde
test al, 0x10
je 0x1400c4cde
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c4df4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c4d15
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c4d82
jne 0x1400c4d46
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbd50
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c4ef0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xc0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c4f00
test al, 1
je 0x1400c4fcf
test al, 2
jne 0x1400c4fe7
test al, 8
jne 0x1400c4f40
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400ca080
jmp 0x1400c4f5b
test al, 0x10
je 0x1400c4f5b
mov rax, qword [rsi + 0x78]
test rax, rax
je 0x1400c5071
mov rcx, qword [rsi + 0x80]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c4f92
mov r8, qword [rsi + 0x90]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c4fff
jne 0x1400c4fc3
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbc40
nop
add rsp, 0xc0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c5170
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c5180
test al, 1
je 0x1400c5252
test al, 2
jne 0x1400c526a
test al, 8
jne 0x1400c51c0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c9cc0
jmp 0x1400c51de
test al, 0x10
je 0x1400c51de
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c52f4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c5215
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c5282
jne 0x1400c5246
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbd50
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c53f0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c5400
test al, 1
je 0x1400c54d2
test al, 2
jne 0x1400c54ea
test al, 8
jne 0x1400c5440
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c99f0
jmp 0x1400c545e
test al, 0x10
je 0x1400c545e
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c5574
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c5495
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c5502
jne 0x1400c54c6
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bb9c0
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400c5670
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c5680
test al, 1
je 0x1400c5752
test al, 2
jne 0x1400c576a
test al, 8
jne 0x1400c56c0
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x90], 2
lea rdx, [rsp + 0x90]
call fcn.1400c9dd0
jmp 0x1400c56de
test al, 0x10
je 0x1400c56de
mov rax, qword [rsi + 0x88]
test rax, rax
je 0x1400c57f4
mov rcx, qword [rsi + 0x90]
call qword [rax + 0x10]
mov rax, qword [rsi + 0x98]
test rax, rax
je 0x1400c5715
mov r8, qword [rsi + 0xa0]
mov rcx, qword [r8 + 0x10]
dec rcx
and rcx, 0xfffffffffffffff0
add rcx, rax
add rcx, 0x10
mov rax, qword [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
call qword [r8 + 0x28]
mov qword [rsp + 0x28], 1
mov rax, 0xffffffffffffffc0
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c5782
jne 0x1400c5746
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1400bbe60
nop
add rsp, 0xd0
pop rbx
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140198b60]
mov edx, 0x23
call fcn.14016c370
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140198ba0]
mov edx, 0x25
call fcn.14016c370
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x70], rax
lea rax, [fcn.14017f750]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, str.current:___sub:
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 2
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 2
lea rdx, [0x140198be8]
lea rcx, [rsp + 0x40]
call fcn.14016c2f0
lea rax, str.waker_missing
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 1
mov qword [rsp + 0xa0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
lea rdx, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_tokio_1.41.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x90]
call fcn.14016c2f0
ud2
Function at 0x1400cc480
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push rsi
sub rsp, 0xb0
mov rsi, rcx
mov rcx, qword [rdx]
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x2c], pe_nt_image_headers64
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x2c]
call sub.ws2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x1400cc53d
mov eax, dword [rsp + 0x2c]
movaps xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsi + 0x78], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rsi + 0x68], xmm0
movaps xmm0, xmmword [rsp + 0x80]
movups xmmword [rsi + 0x58], xmm0
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rsi + 0x48], xmm0
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
movaps xmm3, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x38], xmm3
movups xmmword [rsi + 0x28], xmm2
movups xmmword [rsi + 0x18], xmm1
movups xmmword [rsi + 8], xmm0
mov dword [rsi + 0x88], eax
xor eax, eax
jmp 0x1400cc553
call fcn.14012e000
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
mov qword [rsi], rax
mov rax, rsi
add rsp, 0xb0
pop rsi
ret

Function at 0x1400cc6e0
Capabilities:
Set socket configuration

Disassembly:
sub rsp, 0x28
mov rcx, qword [rcx]
movzx eax, dl
mov dword [rsp + 0x24], eax
lea r8, [rsp + 0x24]
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x1400cc709
xor eax, eax
add rsp, 0x28
ret
call fcn.14012e000
shl rax, 0x20
or rax, 2
add rsp, 0x28
ret
Function at 0x1400cd230
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rsi
sub rsp, 0xc0
mov rsi, rcx
mov rcx, qword [rdx]
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x3c], pe_nt_image_headers64
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor edx, edx
xor r8d, r8d
mov r9d, 2
call sub.ws2_32.dll_recvfrom
cmp eax, 0xffffffff
je 0x1400cd321
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xb8]
mov qword [rsi + 0x80], rcx
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsi + 0x70], xmm0
movups xmm0, xmmword [rsp + 0x98]
movups xmmword [rsi + 0x60], xmm0
movups xmm0, xmmword [rsp + 0x88]
movups xmmword [rsi + 0x50], xmm0
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rsi + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rsi + 0x30], xmm0
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rsi + 0x20], xmm0
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsi + 0x10], xmm0
mov ecx, dword [rsp + 0x3c]
mov dword [rsi + 0x88], ecx
xor ecx, ecx
mov qword [rsi + 8], rax
mov qword [rsi], rcx
mov rax, rsi
add rsp, 0xc0
pop rsi
ret
call fcn.14012e000
cmp eax, 0x274a
je 0x1400cd2a6
cmp eax, 0x2738
je 0x1400cd2a6
shl rax, 0x20
or rax, 2
mov ecx, 1
jmp 0x1400cd30e

Function at 0x1400cd960
Capabilities:
Set socket configuration

Disassembly:
push rsi
sub rsp, 0x30
xor esi, esi
xor eax, eax
cmp r8d, 0x3b9aca00
cmove edx, esi
setne al
mov rcx, qword [rcx]
mov word [rsp + 0x2c], ax
mov word [rsp + 0x2e], dx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x2c]
mov edx, 0xffff
mov r8d, pe_nt_image_headers64
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x1400cd9b4
call fcn.14012e000
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x30
pop rsi
ret

Function at 0x1400ce4d0
Capabilities:
Set socket configuration

Disassembly:
push rsi
sub rsp, 0x30
mov rcx, qword [rcx]
mov dword [rsp + 0x2c], edx
mov dword [rsp + 0x20], 4
xor esi, esi
lea r9, [rsp + 0x2c]
xor edx, edx
mov r8d, 3
call sub.ws2_32.dll_setsockopt
cmp eax, 0xffffffff
jne 0x1400ce50c
call fcn.14012e000
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov rax, rsi
add rsp, 0x30
pop rsi
ret
Function at 0x1400d8a30
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov bl, 1
cmp qword [rdx + 0x10], 0
jne 0x1400d8bae
mov r15, r8
mov r14, rdx
mov r12, rcx
lea r13, [rdx + 0x10]
lea rdx, [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400d8fd0
lea rdi, [r12 + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov r8d, 0xffffffff
cmp rsi, r8
cmovb r8, rsi
mov rcx, qword [r12 + 0xb0]
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x38], rdx
xor r9d, r9d
call sub.KERNEL32.dll_ReadFile
test eax, eax
jne 0x1400d8ab0
call fcn.14012e000
mov ebp, eax
cmp eax, 0x3e5
jne 0x1400d8b1a
mov dword [rsp + 0x34], 0
mov rcx, qword [r12 + 0xb0]
lea r8, [rsp + 0x34]
mov rdx, rdi
xor r9d, r9d
call sub.KERNEL32.dll_GetOverlappedResult
test eax, eax
jne 0x1400d8ae2
call fcn.14012e000
mov ebp, eax
cmp eax, 0x3e4
jne 0x1400d8b1a
mov rcx, r13
call fcn.1400d7050
mov qword [r14 + 0x10], 1
mov qword [r14 + 0x18], 0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [r14 + 0x20], xmm0
mov rax, qword [rsp + 0x50]
mov qword [r14 + 0x30], rax
lock inc qword [r12]
jg 0x1400d8bae
ud2
cmp ebp, 0x218
setne bl
je 0x1400d8b96
shl rbp, 0x20
or rbp, 2
mov rcx, r13
call fcn.1400d7050
mov qword [r14 + 0x10], 3
mov qword [r14 + 0x18], rbp
cmp dword [r14], 1
jne 0x1400d8b96
mov rdi, qword [r14 + 8]
test r15, r15
je 0x1400d8b81
mov r14, qword [r15 + 0x10]
cmp r14, qword [r15]
jne 0x1400d8b61
mov rcx, r15
call fcn.1400dfca0
mov rax, qword [r15 + 8]
mov rcx, r14
shl rcx, 4
mov qword [rax + rcx], rdi
mov dword [rax + rcx + 8], 1
inc r14
mov qword [r15 + 0x10], r14
jmp 0x1400d8b96
mov rcx, qword [r14 + 0x60]
mov rdx, r12
mov r8, rdi
mov r9d, 1
call fcn.1400da1b0
test rsi, rsi
je 0x1400d8bae
mov r8d, 1
mov rcx, qword [rsp + 0x38]
mov rdx, rsi
call fcn.14002d1a0
mov eax, ebx
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
Function at 0x1400d8c30
Capabilities:
Write file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rbx, r9
mov rsi, r8
mov r14, rdx
mov rdx, qword [r8 + 0x10]
mov rax, rdx
sub rax, r9
jb 0x1400d8d88
mov rdi, rcx
mov r15, qword [rsi + 8]
lea r12, [r14 + 0x60]
lea rdx, [r15 + rbx]
mov r8d, 0xffffffff
cmp rax, r8
cmovb r8, rax
mov rcx, qword [r14 + 0xb0]
mov qword [rsp + 0x20], r12
xor r9d, r9d
call sub.KERNEL32.dll_WriteFile
test eax, eax
jne 0x1400d8c9c
call fcn.14012e000
cmp eax, 0x3e5
jne 0x1400d8d4e
mov r13, qword [rsp + 0x90]
mov dword [rsp + 0x2c], 0
mov rcx, qword [r14 + 0xb0]
lea r8, [rsp + 0x2c]
mov rdx, r12
xor r9d, r9d
call sub.KERNEL32.dll_GetOverlappedResult
test eax, eax
je 0x1400d8d0b
mov r12d, dword [rsp + 0x2c]
lea r15, [r13 + 0x38]
mov rcx, r15
call fcn.1400d7050
mov qword [r13 + 0x38], 2
mov qword [r13 + 0x40], rbx
movups xmm0, xmmword [rsi]
movups xmmword [r13 + 0x48], xmm0
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x58], rax
lock inc qword [r14]
jle 0x1400d8d97
mov qword [rdi], 1
mov qword [rdi + 8], r12
jmp 0x1400d8d77
call fcn.14012e000
cmp eax, 0x3e4
jne 0x1400d8d4e
lea r15, [r13 + 0x38]
mov rcx, r15
call fcn.1400d7050
mov qword [r13 + 0x38], 1
mov qword [r13 + 0x40], rbx
movups xmm0, xmmword [rsi]
movups xmmword [r13 + 0x48], xmm0
mov rax, qword [rsi + 0x10]
mov qword [r13 + 0x58], rax
lock inc qword [r14]
jle 0x1400d8d97
mov qword [rdi], 0
jmp 0x1400d8d77
shl rax, 0x20
or rax, 2
mov qword [rdi + 8], rax
mov qword [rdi], 2
mov rdx, qword [rsi]
test rdx, rdx
je 0x1400d8d77
mov r8d, 1
mov rcx, r15
call fcn.14002d1a0
nop
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_mio_1.0.2_src_sys_windows_named_pipe.rs
mov rcx, rbx
call fcn.140172c20
ud2

Function at 0x1400dee10
Capabilities:
Set socket configuration

Disassembly:
push rsi
push rdi
sub rsp, 0x38
cmp byte [rcx], 0
mov eax, 0x17
mov ecx, 2
cmovne ecx, eax
mov eax, dword [0x1401fc0b8]
cmp eax, 3
jne 0x1400dee89
xor r8d, r8d
call sub.ws2_32.dll_socket
cmp rax, 0xffffffffffffffff
je 0x1400deedb
mov rsi, rax
mov dword [rsp + 0x2c], 1
lea r8, [rsp + 0x2c]
mov rcx, rax
mov edx, 0x8004667e
call sub.ws2_32.dll_ioctlsocket
test eax, eax
je 0x1400dee85
call fcn.14012e000
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov rcx, rsi
call fcn.140183300
mov eax, 1
mov rsi, rdi
jmp 0x1400deeef
xor eax, eax
jmp 0x1400deeef
mov byte [rsp + 0x2b], 1
lea rax, [rsp + 0x2b]
mov qword [rsp + 0x30], rax
lea rax, str._home_ghost_.cargo_registry_src_index.crates.io_6f17d22bba15001f_mio_1.0.2_src_sys_windows_net.rs
mov qword [rsp + 0x20], rax
lea rax, [0x1401fc0b8]
lea r9, [0x1401a3878]
lea r8, [rsp + 0x30]
mov esi, ecx
mov rcx, rax
mov edi, edx
xor edx, edx
call fcn.14013a4d0
mov ecx, esi
mov edx, edi
xor r8d, r8d
call sub.ws2_32.dll_socket
cmp rax, 0xffffffffffffffff
jne 0x1400dee43
call fcn.14012e000
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov eax, 1
mov rdx, rsi
add rsp, 0x38
pop rdi
pop rsi
ret