joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140068620
Capabilities:
Send data
Send data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rcx, qword [rcx]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
xor r9d, r9d
call sub.WS2_32.dll_send
cmp eax, 0xffffffff
je 0x140068655
movsxd rdx, eax
xor eax, eax
add rsp, 0x20
pop rbp
ret
call sub.WS2_32.dll_WSAGetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x20
pop rbp
ret

Function at 0x140068670
Capabilities:
Receive data
Receive data on socket

Disassembly:
push rbp
sub rsp, 0x20
lea rbp, [rsp + 0x20]
mov rcx, qword [rcx]
cmp r8, 0x7fffffff
mov eax, 0x7fffffff
cmovae r8, rax
xor r9d, r9d
call sub.WS2_32.dll_recv
cmp eax, 0xffffffff
je 0x1400686a1
movsxd rdx, eax
xor ecx, ecx
jmp 0x1400686c4
call sub.WS2_32.dll_WSAGetLastError
xor edx, edx
mov ecx, 0
cmp eax, 0x274a
je 0x1400686c4
shl rax, 0x20
or rax, 2
mov ecx, 1
mov rdx, rax
mov rax, rcx
add rsp, 0x20
pop rbp
ret

Function at 0x14006d1b0
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov rcx, qword [rcx]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp - 0xc], 0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
lea rax, [rbp - 0xc]
mov qword [rbp - 0x18], rax
lea rax, [sym.std::sys::pal::windows::pipe::AnonPipe::alertable_io_internal::callback::h5da267c70eb56f29]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
call sub.KERNEL32.dll_WriteFileEx
test eax, eax
je 0x14006d237
mov ecx, 0xffffffff
mov edx, 1
call sub.KERNEL32.dll_SleepEx
cmp dword [rbp - 0xc], 0
je 0x14006d200
mov ecx, dword [rbp - 8]
mov edx, dword [rbp - 4]
mov r8, rcx
shl r8, 0x20
or r8, 2
xor eax, eax
test ecx, ecx
setne al
cmovne rdx, r8
add rsp, 0x60
pop rbp
ret
call sub.KERNEL32.dll_GetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x60
pop rbp
ret

Function at 0x14006d260
Capabilities:
Write file on windows

Disassembly:
push rbp
sub rsp, 0x60
lea rbp, [rsp + 0x60]
mov rax, qword [rcx]
mov rcx, qword [rax]
mov eax, 0xffffffff
cmp r8, rax
cmovae r8, rax
mov dword [rbp - 0xc], 0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
lea rax, [rbp - 0xc]
mov qword [rbp - 0x18], rax
lea rax, [sym.std::sys::pal::windows::pipe::AnonPipe::alertable_io_internal::callback::h5da267c70eb56f29]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x30]
call sub.KERNEL32.dll_WriteFileEx
test eax, eax
je 0x14006d2f7
nop word cs:[rax + rax]
mov ecx, 0xffffffff
mov edx, 1
call sub.KERNEL32.dll_SleepEx
cmp dword [rbp - 0xc], 0
je 0x14006d2c0
mov ecx, dword [rbp - 8]
mov edx, dword [rbp - 4]
mov r8, rcx
shl r8, 0x20
or r8, 2
xor eax, eax
test ecx, ecx
setne al
cmovne rdx, r8
add rsp, 0x60
pop rbp
ret
call sub.KERNEL32.dll_GetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0x60
pop rbp
ret

Function at 0x14006d3a0
Capabilities:
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
mov rcx, qword [rcx]
pop rbp
jmp sym.std::sys::pal::windows::pipe::AnonPipe::read::hbad66137b363bf36

Function at 0x14006d3b0
Capabilities:
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
mov rcx, qword [rcx]
pop rbp
jmp fcn.14007af60
Function at 0x14006dda0
Capabilities:
Terminate process

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x40
lea rbp, [rsp + 0x40]
mov rsi, qword [rcx + 0x30]
mov rcx, rsi
mov edx, 1
call sub.KERNEL32.dll_TerminateProcess
test eax, eax
je 0x14006ddc5
xor eax, eax
jmp 0x14006de2c
call sub.KERNEL32.dll_GetLastError
cmp eax, 5
jne 0x14006de24
mov rdi, rax
mov rcx, rsi
xor edx, edx
call sub.KERNEL32.dll_WaitForSingleObject
test eax, eax
je 0x14006dde9
cmp eax, 0x102
je 0x14006ddc1
jmp 0x14006de00
mov dword [rbp - 4], 0
lea rdx, [rbp - 4]
mov rcx, rsi
call sub.KERNEL32.dll_GetExitCodeProcess
test eax, eax
jne 0x14006ddc1
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x18], 1
lea rcx, [rbp - 0x10]
call sym.core::ptr::drop_in_place_std::io::error::Error_::h3466fc80fe41233f
mov rax, rdi
shl rax, 0x20
or rax, 2
add rsp, 0x40
pop rdi
pop rsi
pop rbp
ret

Function at 0x14006f720
Capabilities:
Resolve dns

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x80
lea rbp, [rsp + 0x80]
mov r14, r9
mov rsi, rcx
lea rcx, [rbp - 0x28]
call sym.__str_as_alloc::ffi::c_str::CString::new::SpecNewImpl_::spec_new_impl::h35ff5c462c0ae14b
mov rdx, qword [rbp - 0x28]
movabs rax, 0x8000000000000000
cmp rdx, rax
jne 0x14006f7a7
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x18]
xorps xmm0, xmm0
movaps xmmword [rbp - 0x60], xmm0
movaps xmmword [rbp - 0x40], xmm0
movaps xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x58], 1
mov qword [rbp - 8], 0
lea r8, [rbp - 0x60]
lea r9, [rbp - 8]
mov rcx, rdi
xor edx, edx
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x14006f7da
call sub.WS2_32.dll_WSAGetLastError
shl rax, 0x20
or rax, 2
mov ecx, 1
jmp 0x14006f7ee
lea rax, str.X.e_
mov qword [rsi + 8], rax
mov qword [rsi], 1
test rdx, rdx
je 0x14006f80e
mov rcx, qword [rbp - 0x20]
mov r8d, 1
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
jmp sym.__rust_dealloc
mov rcx, qword [r14]
mov rax, qword [rbp - 8]
movzx ecx, word [rcx]
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], cx
xor ecx, ecx
mov qword [rsi + 8], rax
mov qword [rsi], rcx
mov byte [rdi], 0
test rbx, rbx
je 0x14006f80e
mov r8d, 1
mov rcx, rdi
mov rdx, rbx
call sym.__rust_dealloc
nop
add rsp, 0x80
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
Function at 0x14006ff80
Capabilities:
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x10a8
call sym.___chkstk_ms
sub rsp, rax
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x1010], xmm6
mov rsi, rdx
mov rdi, rcx
lea r15, [rbp - 0x50]
mov r8d, 0x1000
mov rcx, r15
xor edx, edx
call sub.msvcrt.dll_memset
xorps xmm6, xmm6
lea rbx, [rbp + 0xffc]
lea r14, [sym.std::sys::pal::windows::pipe::AnonPipe::alertable_io_internal::callback::h5da267c70eb56f29]
lea r12, [rbp + 0xfb0]
mov qword [rbp + 0x1008], rdi
mov r8d, 0x1000
mov rcx, rdi
mov rdx, r15
call sym.std::sys::pal::windows::pipe::AnonPipe::read::hbad66137b363bf36
mov r13, rdx
mov qword [rbp + 0xfd8], rax
mov qword [rbp + 0xfe0], rdx
test rax, rax
jne 0x14007014c
test r13, r13
je 0x140070121
cmp r13, 0x1000
ja 0x14007016e
mov rdi, r15
xor r15d, r15d
nop dword [rax + rax]
mov r8d, r13d
sub r8d, r15d
lea rdx, [r15 + rbp]
add rdx, 0xffffffffffffffb0
mov dword [rbp + 0xffc], 0
movaps xmmword [rbp + 0xfb0], xmm6
mov qword [rbp + 0xfc0], 0
mov qword [rbp + 0xfc8], rbx
mov qword [rsp + 0x20], r14
mov rcx, rsi
mov r9, r12
call sub.KERNEL32.dll_WriteFileEx
test eax, eax
je 0x1400700ef
nop word cs:[rax + rax]
mov ecx, 0xffffffff
mov edx, 1
call sub.KERNEL32.dll_SleepEx
cmp dword [rbp + 0xffc], 0
je 0x140070080
mov ecx, dword [rbp + 0x1000]
mov eax, dword [rbp + 0x1004]
mov rdx, rcx
shl rdx, 0x20
or rdx, 2
xor r8d, r8d
test ecx, ecx
setne r8b
cmove rdx, rax
mov qword [rbp + 0xfe8], r8
mov qword [rbp + 0xff0], rdx
jne 0x14007010e
add r15, rax
cmp r15, r13
je 0x1400700e0
jbe 0x140070030
jmp 0x14007015a
mov r15, rdi
mov rdi, qword [rbp + 0x1008]
jmp 0x14006ffe1
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0xfe8], 1
mov qword [rbp + 0xff0], rax
lea rcx, [rbp + 0xff0]
call sym.core::ptr::drop_in_place_std::io::error::Error_::h3466fc80fe41233f
mov rdi, qword [rbp + 0x1008]
mov rcx, rdi
call fcn.1400cd924
mov rcx, rsi
call fcn.1400cd924
movaps xmm6, xmmword [rbp + 0x1010]
add rsp, 0x10a8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [rbp + 0xfe0]
call sym.core::ptr::drop_in_place_std::io::error::Error_::h3466fc80fe41233f
jmp 0x140070121
lea r8, str.library_std_src_syspalwindowspipe.rs
mov rcx, r15
mov rdx, r13
call sym.core::slice::index::slice_index_order_fail::h786748ba81f41b02
jmp 0x140070182
lea r8, str.library_std_src_syspalwindowspipe.rs
mov edx, 0x1000
mov rcx, r13
call sym.core::slice::index::slice_end_index_len_fail::hdaa9bbd2fcad4cbb
ud2

Function at 0x140071000
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rbp
push r15
push r14
push r13
push rbp
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
in al, dx
push 0x246c8d48
invalid
mov rsi, r8
mov esi, eax
Function at 0x140075110
Capabilities:
Create directory

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov r8, rdx
mov rdx, rcx
movabs rbx, 0x8000000000000000
lea rcx, [rbp - 0x10]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x10]
mov rsi, qword [rbp - 8]
cmp rax, rbx
je 0x140075170
mov rcx, qword [rbp]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x28]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
cmp rdi, rbx
jne 0x14007517c
mov rax, rsi
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop rbp
ret
mov rcx, rsi
xor edx, edx
call sub.KERNEL32.dll_CreateDirectoryW
test eax, eax
je 0x1400751a7
test rdi, rdi
je 0x1400751d2
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call sym.__rust_dealloc
xor eax, eax
jmp 0x140075173
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
test rdi, rdi
je 0x140075173
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call sym.__rust_dealloc
jmp 0x140075170
xor eax, eax
jmp 0x140075173
Function at 0x140075650
Capabilities:
Delete file

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov r8, rdx
mov rdx, rcx
movabs rbx, 0x8000000000000000
lea rcx, [rbp - 0x10]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x10]
mov rsi, qword [rbp - 8]
cmp rax, rbx
je 0x1400756b0
mov rcx, qword [rbp]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x28]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
cmp rdi, rbx
jne 0x1400756bc
mov rax, rsi
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop rbp
ret
mov rcx, rsi
call sub.KERNEL32.dll_DeleteFileW
test eax, eax
je 0x1400756e5
test rdi, rdi
je 0x140075710
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call sym.__rust_dealloc
xor eax, eax
jmp 0x1400756b3
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
test rdi, rdi
je 0x1400756b3
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call sym.__rust_dealloc
jmp 0x1400756b0
xor eax, eax
jmp 0x1400756b3

Function at 0x140075720
Capabilities:
Move file

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov rbx, r9
mov r14, r8
mov r8, rdx
mov rdx, rcx
movabs r15, 0x8000000000000000
lea rcx, [rbp - 0x10]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x10]
mov rsi, qword [rbp - 8]
cmp rax, r15
je 0x1400757f6
mov rcx, qword [rbp]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x28]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
cmp rdi, r15
je 0x1400757f6
lea rcx, [rbp - 0x10]
mov rdx, r14
mov r8, rbx
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x10]
mov rbx, qword [rbp - 8]
cmp rax, r15
je 0x1400757d7
mov rcx, qword [rbp]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x28]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov r14, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x38]
cmp r14, r15
jne 0x140075806
mov rax, rbx
test rdi, rdi
je 0x1400757f9
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call sym.__rust_dealloc
mov rax, rsi
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov rcx, rsi
mov rdx, rbx
mov r8d, 1
call sub.KERNEL32.dll_MoveFileExW
test eax, eax
je 0x140075851
test r14, r14
je 0x140075834
add r14, r14
mov r8d, 2
mov rcx, rbx
mov rdx, r14
call sym.__rust_dealloc
test rdi, rdi
je 0x14007584d
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call sym.__rust_dealloc
xor eax, eax
jmp 0x1400757f9
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
test r14, r14
je 0x1400757da
add r14, r14
mov r8d, 2
mov rcx, rbx
mov rdx, r14
mov rbx, rax
call sym.__rust_dealloc
jmp 0x1400757d7
Function at 0x1400758b0
Capabilities:
Delete directory

Disassembly:
push rbp
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov r8, rdx
mov rdx, rcx
movabs rbx, 0x8000000000000000
lea rcx, [rbp - 0x10]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x10]
mov rsi, qword [rbp - 8]
cmp rax, rbx
je 0x140075910
mov rcx, qword [rbp]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x28]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
cmp rdi, rbx
jne 0x14007591c
mov rax, rsi
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop rbp
ret
mov rcx, rsi
call sub.KERNEL32.dll_RemoveDirectoryW
test eax, eax
je 0x140075945
test rdi, rdi
je 0x140075970
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call sym.__rust_dealloc
xor eax, eax
jmp 0x140075913
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
test rdi, rdi
je 0x140075913
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call sym.__rust_dealloc
jmp 0x140075910
xor eax, eax
jmp 0x140075913

Function at 0x140076cc0
Capabilities:
Set file attributes

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x70
lea rbp, [rsp + 0x70]
mov ebx, r8d
mov r8, rdx
mov rdx, rcx
movabs r14, 0x8000000000000000
lea rcx, [rbp - 0x18]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x10]
cmp rax, r14
je 0x140076d25
mov rcx, qword [rbp - 8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rcx
lea rcx, [rbp - 0x48]
lea rdx, [rbp - 0x30]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x48]
mov rsi, qword [rbp - 0x40]
cmp rdi, r14
jne 0x140076d33
mov rax, rsi
add rsp, 0x70
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
mov rcx, rsi
mov edx, ebx
call sub.KERNEL32.dll_SetFileAttributesW
test eax, eax
je 0x140076d5e
test rdi, rdi
je 0x140076d89
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
call sym.__rust_dealloc
xor eax, eax
jmp 0x140076d28
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
test rdi, rdi
je 0x140076d28
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rdx, rdi
mov rsi, rax
call sym.__rust_dealloc
jmp 0x140076d25
xor eax, eax
jmp 0x140076d28
Function at 0x140077090
Capabilities:
Copy file

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x78
lea rbp, [rsp + 0x70]
mov rbx, r9
mov r14, r8
mov r8, rdx
mov rdx, rcx
movabs r15, 0x8000000000000000
lea rcx, [rbp - 0x28]
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x28]
mov rsi, qword [rbp - 0x20]
cmp rax, r15
je 0x140077168
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rsi
mov qword [rbp], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x10]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rdi, qword [rbp - 0x40]
mov rsi, qword [rbp - 0x38]
cmp rdi, r15
je 0x140077168
lea rcx, [rbp - 0x28]
mov rdx, r14
mov r8, rbx
call sym.std::sys::pal::windows::to_u16s::inner::hbb51883a1ae0978b
mov rax, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
cmp rax, r15
je 0x140077147
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rdx
mov qword [rbp], rcx
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x10]
mov r8b, 1
call sym.std::sys::path::windows::get_long_path::h6c6075bbfe19ba5e
mov rbx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
cmp rbx, r15
jne 0x14007717d
mov eax, 1
test rdi, rdi
je 0x140077170
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rsi, rdx
mov rdx, rdi
call sym.__rust_dealloc
mov eax, 1
mov rdx, rsi
add rsp, 0x78
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov qword [rbp - 0x10], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea r8, [sym.std::sys::pal::windows::fs::copy::callback::h2b03de776ed70d58]
lea r9, [rbp - 0x10]
mov rcx, rsi
mov r14, rdx
call sub.KERNEL32.dll_CopyFileExW
test eax, eax
je 0x1400771f9
mov rdx, qword [rbp - 0x10]
test rbx, rbx
je 0x1400771d3
add rbx, rbx
mov r8d, 2
mov rcx, r14
mov r14, rdx
mov rdx, rbx
call sym.__rust_dealloc
mov rdx, r14
test rdi, rdi
je 0x1400771f2
add rdi, rdi
mov r8d, 2
mov rcx, rsi
mov rsi, rdx
mov rdx, rdi
call sym.__rust_dealloc
mov rdx, rsi
xor eax, eax
jmp 0x140077170
call sub.KERNEL32.dll_GetLastError
mov edx, eax
shl rdx, 0x20
or rdx, 2
test rbx, rbx
je 0x140077147
add rbx, rbx
mov r8d, 2
mov rcx, r14
mov r14, rdx
mov rdx, rbx
call sym.__rust_dealloc
mov rdx, r14
jmp 0x140077147
Function at 0x140077ca0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov rax, r8
mov rsi, rcx
mov r10, qword [rbp + 0x40]
mov r8d, 0xffffffff
cmp r9, r8
cmovb r8, r9
mov dword [rbp + 4], 0
mov rcx, qword [rdx]
mov qword [rsp + 0x20], r10
lea r9, [rbp + 4]
mov rdx, rax
call sub.KERNEL32.dll_ReadFile
test eax, eax
je 0x140077cf1
mov eax, dword [rbp + 4]
mov qword [rsi], 1
mov qword [rsi + 8], rax
jmp 0x140077d5d
call sub.KERNEL32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp - 8], rax
movabs rcx, 0xffffffff00000000
and rcx, rax
movabs rdx, 0x6d00000000
cmp rcx, rdx
je 0x140077d32
movabs rdx, 0x3e500000000
cmp rcx, rdx
jne 0x140077d52
mov rax, rsi
jmp 0x140077d40
mov qword [rsi], 1
mov rax, rsi
add rax, 8
mov qword [rax], 0
lea rcx, [rbp - 8]
call sym.core::ptr::drop_in_place_std::io::error::Error_::h3466fc80fe41233f
jmp 0x140077d5d
mov qword [rsi + 8], rax
mov qword [rsi], 2
mov rax, rsi
add rsp, 0x38
pop rsi
pop rbp
ret

Function at 0x140077fd0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rsi
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov rsi, rcx
movups xmm0, xmmword [0x1401b4090]
movaps xmmword [rbp], xmm0
mov eax, 0xffffffff
cmp r8, rax
cmovb rax, r8
test r9, r9
je 0x140078008
mov rcx, qword [rbp + 0x60]
mov qword [rbp - 0x30], rcx
test r9, r9
mov qword [rbp - 0x38], r9
lea rcx, [rbp - 0x30]
cmove rcx, r9
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdx
mov rax, rbp
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
mov rcx, rsi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtReadFile
cmp eax, 0x103
jne 0x14007805d
mov rcx, rsi
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov eax, dword [rbp]
cmp eax, 0xc0000011
jne 0x14007806a
xor edx, edx
xor eax, eax
jmp 0x140078093
cmp eax, 0x103
je 0x14007809d
test eax, eax
js 0x14007807d
mov rdx, qword [rbp + 8]
xor eax, eax
jmp 0x140078093
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0xa8
pop rsi
pop rbp
ret
mov dword [rbp + 0x18], 0
mov byte [rbp + 0x1c], 0
lea rax, str._Ae_
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], 1
lea rax, [rbp + 0x20]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rcx, [rbp + 0x18]
lea rdx, [rbp - 0x38]
call sym.std::io::Write::write_fmt::hdc620d2dd22aa030
mov qword [rbp - 8], rax
lea rcx, [rbp - 8]
call sym.core::ptr::drop_in_place_core::result::Result____std::io::error::Error__::hfcc0b544997c6b8c
mov ecx, 7
int 0x29
ud2
Function at 0x1400780f0
Capabilities:
Write file on windows

Disassembly:
push rbp
push rsi
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov rsi, rcx
movups xmm0, xmmword [0x1401b4090]
movaps xmmword [rbp], xmm0
mov eax, 0xffffffff
cmp r8, rax
cmovb rax, r8
test r9, r9
je 0x140078128
mov rcx, qword [rbp + 0x60]
mov qword [rbp - 0x30], rcx
test r9, r9
mov qword [rbp - 0x38], r9
lea rcx, [rbp - 0x30]
cmove rcx, r9
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdx
mov rax, rbp
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], 0
mov rcx, rsi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtWriteFile
cmp eax, 0x103
jne 0x140078184
mov rcx, rsi
mov edx, 0xffffffff
call sub.KERNEL32.dll_WaitForSingleObject
mov eax, dword [rbp]
cmp eax, 0x103
je 0x1400781b0
test eax, eax
js 0x140078190
mov rdx, qword [rbp + 8]
xor eax, eax
jmp 0x1400781a6
mov ecx, eax
call sub.ntdll.dll_RtlNtStatusToDosError
mov edx, eax
shl rdx, 0x20
or rdx, 2
mov eax, 1
add rsp, 0xa8
pop rsi
pop rbp
ret
mov dword [rbp + 0x18], 0
mov byte [rbp + 0x1c], 0
lea rax, str._Ae_
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], 1
lea rax, [rbp + 0x20]
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rcx, [rbp + 0x18]
lea rdx, [rbp - 0x38]
call sym.std::io::Write::write_fmt::hdc620d2dd22aa030
mov qword [rbp - 8], rax
lea rcx, [rbp - 8]
call sym.core::ptr::drop_in_place_core::result::Result____std::io::error::Error__::hfcc0b544997c6b8c
mov ecx, 7
int 0x29
ud2

Function at 0x1400787a0
Capabilities:
Create udp socket

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x30
lea rbp, [rsp + 0x30]
mov edi, edx
cmp word [rcx], 0
mov eax, 2
mov r14d, 0x17
cmove r14d, eax
mov dword [rsp + 0x28], 0x81
mov dword [rsp + 0x20], 0
xor ebx, ebx
mov ecx, r14d
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14007887a
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x2739
je 0x140078806
mov esi, eax
cmp eax, 0x2726
jne 0x14007886d
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov ecx, r14d
mov edx, edi
xor r8d, r8d
xor r9d, r9d
call sub.WS2_32.dll_WSASocketW
cmp rax, 0xffffffffffffffff
je 0x140078866
mov rsi, rax
xor ebx, ebx
mov rcx, rax
mov edx, 1
xor r8d, r8d
call sub.KERNEL32.dll_SetHandleInformation
test eax, eax
jne 0x14007887a
call sub.KERNEL32.dll_GetLastError
mov edi, eax
shl rdi, 0x20
or rdi, 2
mov rcx, rsi
call sub.WS2_32.dll_closesocket
mov ebx, 1
mov rsi, rdi
jmp 0x14007887a
call sub.WS2_32.dll_WSAGetLastError
mov esi, eax
shl rsi, 0x20
or rsi, 2
mov ebx, 1
mov rax, rbx
mov rdx, rsi
add rsp, 0x30
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret