joyce8/EMBER2024-capa huggingface dataset:
Function at 0x439390
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push eax
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
lea edi, [ebp - 0xc]
mov edx, dword [edx]
mov edx, dword [edx]
mov dword [ebp - 0xc], 0
push 0
push 0
push 0
push edi
push ecx
push eax
push edx
call sub.WS2_32.dll_WSASend
cmp eax, 0xffffffff
je 0x4393cf
mov eax, dword [ebp - 0xc]
mov dword [esi + 4], eax
mov byte [esi], 4
jmp 0x4393dd
call sub.WS2_32.dll_WSAGetLastError
mov dword [esi + 4], eax
mov dword [esi], 0
mov eax, esi
add esp, 4
pop esi
pop edi
pop ebp
ret

Function at 0x439400
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.__LT_std..sys_common..net..TcpStream_u20_as_u20_core..fmt..Debug_GT_::fmt::h833c000e3f88efb8

Function at 0x439410
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
push esi
and esp, 0xfffffff0
sub esp, 0xa0
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
xorps xmm0, xmm0
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], pe_nt_image_headers32
lea edx, [esp + 0x10]
movaps xmmword [esp + 0x80], xmm0
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
movaps xmmword [esp + 0x20], xmm0
movaps xmmword [esp + 0x10], xmm0
mov eax, dword [eax]
push ecx
push edx
push eax
call sub.WS2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x439484
lea edx, [esp + 0x10]
mov ecx, esi
push dword [esp + 0xc]
call sym.std::sys_common::net::sockaddr_to_addr::hb2870764fd89eba6
add esp, 4
jmp 0x43949f
call sub.WS2_32.dll_WSAGetLastError
mov byte [esi + 4], 0
mov byte [esi + 7], 0
mov word [esi + 5], 0
mov dword [esi + 8], eax
mov word [esi], 2
mov eax, esi
lea esp, [ebp - 4]
pop esi
pop ebp
ret

Function at 0x439710
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 4
push 0
push ecx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x43974e
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret

Function at 0x4397c0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
push 4
push ecx
push 0x1b
push 0x29
push eax
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x4397ff
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret
Function at 0x4398f0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
push ecx
push 0x8004667e
push eax
call sub.WS2_32.dll_ioctlsocket
cmp eax, 0xffffffff
je 0x43991d
mov byte [esi], 4
jmp 0x43992b
call sub.WS2_32.dll_WSAGetLastError
mov dword [esi + 4], eax
mov dword [esi], 0
mov eax, esi
add esp, 4
pop esi
pop ebp
ret

Function at 0x439a00
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.__LT_std..sys_common..net..TcpListener_u20_as_u20_core..fmt..Debug_GT_::fmt::h66f000e9438f98ac

Function at 0x439a70
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
push 4
push ecx
push 0x20
push 0xffff
push eax
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439ab2
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret

Function at 0x439b30
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
push 4
push ecx
push 0xb
push 0
push eax
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439b6f
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret

Function at 0x439be0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx]
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push 4
push eax
push 0xa
push 0
push ecx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439c1e
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret

Function at 0x439c90
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
push eax
mov eax, dword [ebp + 0xc]
movzx ecx, byte [ebp + 0x10]
mov esi, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
push 4
push ecx
push 0xb
push 0x29
push eax
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439ccf
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 4
pop esi
pop ebp
ret
Function at 0x439d40
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx]
mov eax, dword [eax]
mov edx, dword [edx]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push 8
push eax
push 0xc
push 0
push edx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439d8a
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 8
pop esi
pop ebp
ret

Function at 0x439da0
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x14
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
mov edx, dword [edx]
movsd qword [ebp - 0x10], xmm1
movsd qword [ebp - 0x18], xmm0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x18]
push 0x14
push eax
push 0xc
push 0x29
push edx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439df6
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 0x14
pop esi
pop ebp
ret

Function at 0x439e00
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 8
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov ecx, dword [ecx]
mov eax, dword [eax]
mov edx, dword [edx]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push 8
push eax
push 0xd
push 0
push edx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439e4a
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 8
pop esi
pop ebp
ret

Function at 0x439e60
Capabilities:
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x14
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
mov edx, dword [edx]
movsd qword [ebp - 0x10], xmm1
movsd qword [ebp - 0x18], xmm0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x18]
push 0x14
push eax
push 0xd
push 0x29
push edx
call sub.WS2_32.dll_setsockopt
mov cl, 4
cmp eax, 0xffffffff
jne 0x439eb6
call sub.WS2_32.dll_WSAGetLastError
xor ecx, ecx
mov byte [esi + 3], 0
mov word [esi + 1], 0
mov dword [esi + 4], eax
mov byte [esi], cl
mov eax, esi
add esp, 0x14
pop esi
pop ebp
ret

Function at 0x439f90
Capabilities:
Get local ipv4 addresses
Get socket information

Disassembly:
push ebp
mov ebp, esp
pop ebp
jmp sym.__LT_std..sys_common..net..UdpSocket_u20_as_u20_core..fmt..Debug_GT_::fmt::h0cf780c7ea52d8a0
Function at 0x43b180
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
movzx ebx, byte [edx + 0x1c]
mov dword [ebp - 0x20], ecx
xor eax, eax
mov ecx, 0
mov edi, edx
call 0x43b19e
pop esi
cmp bl, 1
setne dl
sbb ecx, ecx
or cl, dl
cmp cl, 0xff
movzx edx, cl
je 0x43b1b5
test edx, edx
jne 0x43b1de
mov byte [ebp - 0x14], bl
movzx ebx, byte [edi + 0x1e]
cmp cl, 0xff
mov dword [ebp - 0x18], ebx
je 0x43b1c8
test edx, edx
jne 0x43b1d2
mov ecx, edi
call sym.std::path::Components::include_cur_dir::ha706f806ba6a5c4d
movzx eax, al
movzx ebx, byte [ebp - 0x14]
xor ecx, ecx
test bl, bl
jne 0x43b23f
jmp 0x43b1eb
mov dword [ebp - 0x18], 0
xor ecx, ecx
test bl, bl
jne 0x43b23f
xor ecx, ecx
cmp byte [edi + 8], 6
lea edx, [edi + 8]
cmove edx, ecx
je 0x43b23f
movzx ebx, byte [edx]
mov ecx, 6
add esi, dword [ebx*4 + 0x43b358]
jmp esi
add eax, ecx
movzx ecx, byte [ebp - 0x18]
mov esi, dword [edi + 4]
lea ebx, [eax + ecx]
mov dword [ebp - 0x1c], ecx
cmp esi, ebx
jb 0x43b33e
mov ecx, edi
mov edi, dword [edi]
cmp esi, ebx
mov edx, edi
lea edx, [edi + ebx]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edx
mov edx, esi
jne 0x43b27b
movzx eax, byte [ecx + 8]
mov edi, dword [ebp - 0x18]
mov ecx, edx
mov byte [ebp - 0xd], al
xor eax, eax
jmp 0x43b2ec
movzx ecx, byte [ecx + 8]
cmp cl, 3
mov byte [ebp - 0xd], cl
jae 0x43b2ad
add eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
mov ecx, edx
sub eax, edx
lea esi, [edx + esi - 1]
nop dword [eax + eax]
cmp byte [esi], 0x5c
je 0x43b2d8
dec esi
inc eax
jne 0x43b2a0
xor eax, eax
jmp 0x43b2ec
add eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
mov ecx, edx
sub eax, edx
lea edi, [edx + esi - 1]
nop dword [eax + eax]
movzx esi, byte [edi]
cmp esi, 0x2f
je 0x43b2d8
cmp esi, 0x5c
je 0x43b2d8
dec edi
inc eax
jne 0x43b2c0
mov edi, dword [ebp - 0x18]
xor eax, eax
jmp 0x43b2ec
not eax
lea ebx, [ebx + eax + 1]
cmp ecx, ebx
jb 0x43b346
mov edi, dword [ebp - 0x14]
mov eax, 1
add edi, ebx
sub ecx, ebx
je 0x43b313
movzx ebx, byte [ebp - 0xd]
mov dl, 9
cmp ecx, 2
je 0x43b317
cmp ecx, 1
jne 0x43b326
cmp byte [edi], 0x2e
jne 0x43b326
xor edx, edx
cmp bl, 3
setae dl
lea edx, [edx + edx*2 + 7]
jmp 0x43b326
mov dl, 0xa
jmp 0x43b326
cmp byte [edi], 0x2e
jne 0x43b326
cmp byte [edi + 1], 0x2e
sete dl
xor dl, 9
mov esi, dword [ebp - 0x20]
add eax, ecx
mov dword [esi], eax
mov dword [esi + 4], edi
mov dword [esi + 8], ecx
mov byte [esi + 0xc], dl
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x4c2120
push esi
jmp 0x43b34c
push 0x4c2130
push ecx
push ebx
call sym.core::slice::index::slice_start_index_len_fail::h66d26830f9e36ca4
add esp, 0xc
ud2
Function at 0x43e700
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x20
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
xorps xmm0, xmm0
lea edi, [ebp - 0x14]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], edi
lea edi, [ebp - 0x28]
mov edx, dword [edx]
push sym.__ZN3std3sys7windows4pipe8AnonPipe21alertable_io_internal8callback17h0a1bc856fd537a7aE_12
push edi
push ecx
push eax
push edx
call sub.KERNEL32.dll_WriteFileEx
test eax, eax
je 0x43e761
nop
push 1
push 0xffffffffffffffff
call sub.KERNEL32.dll_SleepEx
cmp dword [ebp - 0x14], 0
je 0x43e740
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x43e766
mov eax, dword [ebp - 0xc]
mov dword [esi + 4], eax
mov byte [esi], 4
jmp 0x43e76f
call sub.KERNEL32.dll_GetLastError
mov dword [esi + 4], eax
mov dword [esi], 0
mov eax, esi
add esp, 0x20
pop esi
pop edi
pop ebp
ret

Function at 0x43e800
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x20
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
xorps xmm0, xmm0
lea edi, [ebp - 0x14]
mov edx, dword [edx]
mov edx, dword [edx]
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 0
lea edi, [ebp - 0x28]
push sym.__ZN3std3sys7windows4pipe8AnonPipe21alertable_io_internal8callback17h0a1bc856fd537a7aE_12
push edi
push ecx
push eax
push edx
call sub.KERNEL32.dll_WriteFileEx
test eax, eax
je 0x43e871
nop word cs:[eax + eax]
nop dword [eax + eax]
push 1
push 0xffffffffffffffff
call sub.KERNEL32.dll_SleepEx
cmp dword [ebp - 0x14], 0
je 0x43e850
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x43e876
mov eax, dword [ebp - 0xc]
mov dword [esi + 4], eax
mov byte [esi], 4
jmp 0x43e87f
call sub.KERNEL32.dll_GetLastError
mov dword [esi + 4], eax
mov dword [esi], 0
mov eax, esi
add esp, 0x20
pop esi
pop edi
pop ebp
ret

Function at 0x43e930
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x20
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
xorps xmm0, xmm0
lea edi, [ebp - 0x14]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], edi
lea edi, [ebp - 0x28]
mov edx, dword [edx]
push sym.__ZN3std3sys7windows4pipe8AnonPipe21alertable_io_internal8callback17h0a1bc856fd537a7aE_12
push edi
push ecx
push eax
push edx
call sub.KERNEL32.dll_ReadFileEx
test eax, eax
je 0x43e990
nop
push 1
push 0xffffffffffffffff
call sub.KERNEL32.dll_SleepEx
cmp dword [ebp - 0x14], 0
je 0x43e970
mov edi, dword [ebp - 0x10]
test edi, edi
jne 0x43e997
mov edi, dword [ebp - 0xc]
mov ecx, 4
jmp 0x43e9b2
call sub.KERNEL32.dll_GetLastError
mov edi, eax
push edi
call sym.std::sys::windows::decode_error_kind::ha748574a25ec667c
add esp, 4
xor ecx, ecx
cmp al, 0xb
jne 0x43e9b2
mov dword [esi + 4], 0
mov byte [esi], 4
jmp 0x43e9b7
mov dword [esi], ecx
mov dword [esi + 4], edi
mov eax, esi
add esp, 0x20
pop esi
pop edi
pop ebp
ret
Function at 0x440160
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov esi, dword [eax]
mov dword [eax], 0
test esi, esi
je 0x4401b4
lea edi, [ebp - 0x1b4]
push 0x190
push 0
push edi
call sub.msvcrt.dll_memset
add esp, 0xc
push edi
push 0x202
call sub.WS2_32.dll_WSAStartup
test eax, eax
mov dword [ebp - 0xc], eax
jne 0x4401ca
mov dword [esi], 0x4b4a70
add esp, 0x1ac
pop esi
pop edi
pop ebp
ret
push 0x4c24f8
push 0x2b
push 0x4c01b8
call sym.core::panicking::panic::h77c9b6f606fdbf34
add esp, 0xc
ud2
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0xc]
mov edx, 0x4c1bdc
push 0x4c3a3c
push eax
call sym.core::panicking::assert_failed::he065a1a15e1b7263
add esp, 8
ud2

Function at 0x4412e0
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov esi, ecx
lea eax, [ebp - 0x20]
push dword [ebp + 8]
push edx
push eax
call sym.__LT__RF_str_u20_as_u20_alloc..ffi..c_str..CString..new..SpecNewImpl_GT_::spec_new_impl::h76e49d266fb12c14
add esp, 0xc
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x44132f
mov ecx, dword [0x4c26c0]
mov edx, dword [0x4c26c4]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [esi + 8], edx
mov dword [esi], 1
test ecx, ecx
je 0x44138b
push 1
push ecx
push eax
call sym.___rust_dealloc
add esp, 0x40
jmp 0x44138e
mov edi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
xorps xmm0, xmm0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x40]
movups xmmword [ebp - 0x40], xmm0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x38], 1
push eax
push ecx
push 0
push edi
call sub.WS2_32.dll_getaddrinfo
test eax, eax
je 0x441393
call sub.WS2_32.dll_WSAGetLastError
mov dword [esi + 8], eax
mov dword [esi + 4], 0
mov eax, 1
test ebx, ebx
mov dword [esi], eax
mov byte [edi], 0
je 0x44138b
push 1
push ebx
push edi
call sym.___rust_dealloc
add esp, 0xc
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x10]
movzx eax, word [ebp + 0xc]
mov dword [esi + 4], ecx
mov dword [esi + 8], ecx
mov word [esi + 0xc], ax
xor eax, eax
test ebx, ebx
mov dword [esi], eax
mov byte [edi], 0
jne 0x44137f
jmp 0x44138b
Function at 0x4413c0
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov esi, dword [eax + 8]
mov eax, dword [esi]
test eax, eax
je 0x4413da
dec eax
jmp 0x4413e3
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
mov edi, dword [ebp - 0xc]
cmp dword [edi], 0
je 0x441404
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x441404
lock dec dword [ecx]
jne 0x441404
call sym.alloc::sync::Arc_LT_T_GT_::drop_slow::hfa8090586ff41757
push 4
push 0xc
push edi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [esi]
test ecx, ecx
je 0x44141a
dec ecx
jmp 0x441425
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x4c
pop esi
pop edi
pop ebp
ret

Function at 0x4414f0
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x48
mov esi, dword [ebp + 8]
mov edi, dword [esi + 0x18]
mov eax, dword [edi]
test eax, eax
je 0x441507
dec eax
jmp 0x441510
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
push 8
push 0x20
push esi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [edi]
test ecx, ecx
je 0x44152e
dec ecx
jmp 0x441539
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x48
pop esi
pop edi
pop ebp
ret

Function at 0x441600
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x48
mov esi, dword [ebp + 8]
mov edi, dword [esi]
mov eax, dword [edi]
test eax, eax
je 0x441616
dec eax
jmp 0x44161f
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
push 4
push 8
push esi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [edi]
test ecx, ecx
je 0x44163d
dec ecx
jmp 0x441648
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x48
pop esi
pop edi
pop ebp
ret
Function at 0x441710
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov esi, dword [eax + 8]
mov eax, dword [esi]
test eax, eax
je 0x44172a
dec eax
jmp 0x441733
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
mov edi, dword [ebp - 0xc]
cmp dword [edi], 0
je 0x441754
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x441754
lock dec dword [ecx]
jne 0x441754
call sym.alloc::sync::Arc_LT_T_GT_::drop_slow::h46374280ed8f60bc
push 4
push 0xc
push edi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [esi]
test ecx, ecx
je 0x44176a
dec ecx
jmp 0x441775
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x4c
pop esi
pop edi
pop ebp
ret

Function at 0x441840
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov esi, dword [eax + 0xc]
mov eax, dword [esi]
test eax, eax
je 0x44185a
dec eax
jmp 0x441863
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
mov edi, dword [ebp - 0xc]
cmp dword [edi], 0
je 0x441884
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x441884
lock dec dword [ecx]
jne 0x441884
call sym.alloc::sync::Arc_LT_T_GT_::drop_slow::he4a7ffeee74a66a7
push 4
push 0x10
push edi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [esi]
test ecx, ecx
je 0x44189a
dec ecx
jmp 0x4418a5
push esi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x4c
pop esi
pop edi
pop ebp
ret

Function at 0x441970
Capabilities:
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x48
mov esi, dword [ebp + 8]
mov edi, dword [esi + 8]
mov eax, dword [edi]
test eax, eax
je 0x441987
dec eax
jmp 0x441990
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
push 1
push eax
call sub.KERNEL32.dll_TlsSetValue
push 4
push 0xc
push esi
call sym.___rust_dealloc
add esp, 0xc
mov ecx, dword [edi]
test ecx, ecx
je 0x4419ae
dec ecx
jmp 0x4419b9
push edi
call sym.std::sys::windows::thread_local_key::StaticKey::init::hc7a5c627984b4d1c
add esp, 4
mov ecx, eax
push 0
push ecx
call sub.KERNEL32.dll_TlsSetValue
add esp, 0x48
pop esi
pop edi
pop ebp
ret