joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400069e0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
mov r9, rcx
add qword [rcx + 0x10], r8
mov r11, qword [rcx + 0x40]
test r11, r11
je 0x140006a27
mov r15d, 8
sub r15, r11
cmp r15, r8
mov rax, r8
cmovb rax, r15
cmp rax, 4
jb 0x140006a2f
mov r14d, dword [rdx]
mov r10d, 4
mov rcx, r10
or rcx, 1
cmp rcx, rax
jb 0x140006a41
jmp 0x140006a58
xor r15d, r15d
jmp 0x140006aed
xor r10d, r10d
xor r14d, r14d
mov rcx, r10
or rcx, 1
cmp rcx, rax
jae 0x140006a58
movzx edi, word [rdx + r10]
lea ecx, [r10*8]
shl rdi, cl
or r14, rdi
or r10, 2
cmp r10, rax
jae 0x140006a6f
movzx eax, byte [rdx + r10]
shl r10d, 3
mov ecx, r10d
shl rax, cl
or r14, rax
lea ecx, [r11*8]
shl r14, cl
or r14, qword [r9 + 0x38]
mov qword [r9 + 0x38], r14
cmp r15, r8
jbe 0x140006a8f
add r11, r8
jmp 0x140006bca
mov rcx, qword [r9 + 0x30]
xor rcx, r14
mov rdi, qword [r9 + 0x28]
mov rax, qword [r9 + 0x18]
add rax, rdi
rol rdi, 0xd
xor rdi, rax
rol rax, 0x20
mov rsi, qword [r9 + 0x20]
add rsi, rcx
rol rcx, 0x10
xor rcx, rsi
add rax, rcx
rol rcx, 0x15
xor rcx, rax
mov qword [r9 + 0x30], rcx
add rsi, rdi
rol rdi, 0x11
xor rdi, rsi
mov qword [r9 + 0x28], rdi
rol rsi, 0x20
mov qword [r9 + 0x20], rsi
xor rax, r14
mov qword [r9 + 0x18], rax
mov qword [r9 + 0x40], 0
sub r8, r15
mov r11d, r8d
and r11d, 7
and r8, 0xfffffffffffffff8
cmp r15, r8
jae 0x140006b63
mov rax, qword [r9 + 0x30]
mov rsi, qword [r9 + 0x18]
mov rcx, qword [r9 + 0x20]
mov rdi, qword [r9 + 0x28]
add rsi, rdi
rol rdi, 0xd
mov rbx, qword [rdx + r15]
xor rdi, rsi
rol rsi, 0x20
xor rax, rbx
add rcx, rax
rol rax, 0x10
xor rax, rcx
add rsi, rax
rol rax, 0x15
add rcx, rdi
rol rdi, 0x11
xor rdi, rcx
rol rcx, 0x20
xor rax, rsi
xor rsi, rbx
add r15, 8
cmp r15, r8
jb 0x140006b10
mov qword [r9 + 0x30], rax
mov qword [r9 + 0x18], rsi
mov qword [r9 + 0x28], rdi
mov qword [r9 + 0x20], rcx
cmp r11d, 4
jb 0x140006b81
mov eax, dword [rdx + r15]
mov r8d, 4
mov rcx, r8
or rcx, 1
cmp rcx, r11
jb 0x140006b92
jmp 0x140006bac
xor r8d, r8d
xor eax, eax
mov rcx, r8
or rcx, 1
cmp rcx, r11
jae 0x140006bac
lea rcx, [r8 + r15]
movzx edi, word [rdx + rcx]
lea ecx, [r8*8]
shl rdi, cl
or rax, rdi
or r8, 2
cmp r8, r11
jae 0x140006bc6
add r15, r8
movzx edx, byte [rdx + r15]
shl r8d, 3
mov ecx, r8d
shl rdx, cl
or rax, rdx
mov qword [r9 + 0x38], rax
mov qword [r9 + 0x40], r11
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
Function at 0x1400395a0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, r9
cmp rcx, 2
jne 0x140039637
movq xmm0, rdx
pshufd xmm0, xmm0, 0x44
pxor xmm0, xmmword [str.uespemosarenegylmodnarodsetybdet]
movq xmm1, r8
pshufd xmm1, xmm1, 0x44
pxor xmm1, xmmword [0x1402209e0]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x40], 0
movdqu xmmword [rsp + 0x48], xmm0
movdqu xmmword [rsp + 0x58], xmm1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
cmp byte [rsi], 1
jne 0x14003970c
mov qword [rsp + 0x28], 1
lea rdi, [rsp + 0x30]
lea rdx, [rsp + 0x28]
mov r8d, 8
mov rcx, rdi
call fcn.1400069e0
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
jmp 0x140039741
cmp byte [rsi], 1
jne 0x140039836
movabs rdi, 0x89cd31291d2aefa4
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x140039857
movabs rcx, 0x100000001b3
mov rdx, qword [rsi + 8]
lea rsi, [rax - 1]
mov r8d, eax
and r8d, 7
cmp rsi, 7
jb 0x1400396e1
and rax, 0xfffffffffffffff8
neg rax
nop dword [rax]
movzx esi, byte [rdx]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 1]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 2]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 3]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 4]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 5]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 6]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 7]
add rdx, 8
xor rdi, rsi
imul rdi, rcx
add rax, 8
jne 0x140039680
mov rax, rdi
test r8, r8
je 0x14003985a
xor esi, esi
nop
movzx eax, byte [rdx + rsi]
xor rax, rdi
imul rax, rcx
add rsi, 1
mov rdi, rax
cmp r8, rsi
jne 0x1400396f0
jmp 0x14003985a
mov qword [rsp + 0x28], 0
lea rdi, [rsp + 0x30]
lea rdx, [rsp + 0x28]
mov r8d, 8
mov rcx, rdi
call fcn.1400069e0
movzx eax, byte [rsi + 1]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x28]
mov r8d, 8
mov rcx, rdi
call fcn.1400069e0
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x58]
shl rsi, 0x38
or rsi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x48]
add rdi, rax
rol rax, 0xd
xor rcx, rsi
xor rax, rdi
rol rdi, 0x20
mov rdx, qword [rsp + 0x50]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, rdi
xor rax, rdx
rol rdx, 0x20
xor rdi, rsi
add rdi, rax
rol rax, 0xd
xor rax, rdi
rol rdi, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rdi
add rdi, rax
rol rax, 0xd
xor rax, rdi
rol rdi, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rdi
add rdi, rax
rol rax, 0xd
xor rax, rdi
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rdx
shr rdx, 0x20
xor rax, rcx
xor rax, rdx
jmp 0x14003985a
movzx eax, byte [rsi + 1]
movabs rcx, 0xa8c7f832281a39c5
xor rcx, rax
movabs rax, 0x1efac7090aef4a21
imul rax, rcx
jmp 0x14003985a
mov rax, rdi
and eax, 0x7fff
add rsp, 0x78
pop rdi
pop rsi
ret
Function at 0x14005a2e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
test rdx, rdx
je 0x14005a38e
mov rax, rdx
xor r12d, r12d
lea r14, [0x140248f64]
lea r15, [0x14005a3fc]
xor esi, esi
xor r11d, r11d
xor r10d, r10d
xor r8d, r8d
xor edx, edx
jmp 0x14005a329
add r12d, 1
nop word [rax + rax]
add rdx, 1
cmp rax, rdx
je 0x14005a3a8
movzx ebx, byte [rcx + rdx]
movzx edi, byte [rbx + r14]
lea ebp, [rdi - 0x23]
cmp bpl, 0x3a
ja case.default.0x14005a346
movzx edi, bpl
movsxd rdi, dword [r15 + rdi*4]
add rdi, r15
jmp rdi
xor r10d, r10d
mov r8d, 1
mov r9, rdx
xor r12d, r12d
jmp case.0x14005a346.1
test dil, dil
jne case.0x14005a346.1
mov r10b, 1
cmp bl, 0x25
je case.0x14005a346.1
jmp 0x14005a3de
or sil, r10b
test sil, 1
mov sil, 1
je case.0x14005a346.1
jmp 0x14005a3da
test r11b, 1
jne 0x14005a3da
xor r10d, r10d
mov r11b, 1
xor r12d, r12d
jmp case.0x14005a346.1
xor r8d, r8d
xor r10d, r10d
xor r11d, r11d
xor esi, esi
xor r12d, r12d
xor edx, edx
mov al, 2
cmp r12d, 1
jle 0x14005a3b3
jmp 0x14005a3e0
mov rdx, rax
mov al, 2
cmp r12d, 1
jg 0x14005a3e0
xor r11b, sil
and r11b, 1
jne 0x14005a3e0
test rdx, rdx
je 0x14005a3d0
cmp r8, 1
jne 0x14005a3d0
lea rcx, [rdx - 1]
cmp r9, rcx
je 0x14005a3e0
test r10b, 1
jne 0x14005a3e0
xor ecx, ecx
jmp 0x14005a3e2
mov al, 2
jmp 0x14005a3e0
xor eax, eax
mov cl, 1
movzx ebp, al
shl rbp, 8
movzx eax, cl
or rax, rbp
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
Function at 0x14005dbd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rax
mov qword [rsp], rcx
add qword [rdx + 0x10], 8
mov r9, qword [rdx + 0x40]
test r9, r9
je 0x14005dc70
mov eax, 8
mov r11d, 8
sub r11, r9
cmovae rax, r11
xor r10d, r10d
xor r8d, r8d
cmp rax, 3
seta r8b
mov ecx, ecx
cmova r10, rcx
lea rcx, [r8*4 + 1]
shl r8, 2
cmp rcx, rax
jae 0x14005dc37
movzx esi, word [rsp + r8]
lea ecx, [r8*8]
shl rsi, cl
or r10, rsi
or r8, 2
cmp r8, rax
jae 0x14005dc4e
movzx eax, byte [rsp + r8]
shl r8d, 3
mov ecx, r8d
shl rax, cl
or r10, rax
lea ecx, [r9*8]
shl r10, cl
or r10, qword [rdx + 0x38]
mov qword [rdx + 0x38], r10
cmp r9, 8
jbe 0x14005dc75
add r9, 8
jmp 0x14005ddba
xor r11d, r11d
jmp 0x14005dcd3
mov rcx, qword [rdx + 0x30]
xor rcx, r10
mov rsi, qword [rdx + 0x28]
mov r8, qword [rdx + 0x18]
add r8, rsi
rol rsi, 0xd
xor rsi, r8
rol r8, 0x20
mov rax, qword [rdx + 0x20]
add rax, rcx
rol rcx, 0x10
xor rcx, rax
add r8, rcx
rol rcx, 0x15
xor rcx, r8
mov qword [rdx + 0x30], rcx
add rax, rsi
rol rsi, 0x11
xor rsi, rax
mov qword [rdx + 0x28], rsi
rol rax, 0x20
mov qword [rdx + 0x20], rax
xor r8, r10
mov qword [rdx + 0x18], r8
mov qword [rdx + 0x40], 0
mov r8d, 8
sub r8, r11
mov r9d, r8d
and r9d, 7
and r8, 0xfffffffffffffff8
cmp r11, r8
jae 0x14005dd53
mov rcx, qword [rdx + 0x30]
mov rax, qword [rdx + 0x18]
mov r10, qword [rdx + 0x20]
mov rsi, qword [rdx + 0x28]
add rax, rsi
rol rsi, 0xd
mov rdi, qword [rsp + r11]
xor rsi, rax
rol rax, 0x20
xor rcx, rdi
add r10, rcx
rol rcx, 0x10
xor rcx, r10
add rax, rcx
rol rcx, 0x15
add r10, rsi
rol rsi, 0x11
xor rsi, r10
rol r10, 0x20
xor rcx, rax
xor rax, rdi
add r11, 8
cmp r11, r8
jb 0x14005dd00
mov qword [rdx + 0x30], rcx
mov qword [rdx + 0x18], rax
mov qword [rdx + 0x28], rsi
mov qword [rdx + 0x20], r10
cmp r9d, 4
jb 0x14005dd71
mov eax, dword [rsp + r11]
mov r8d, 4
mov rcx, r8
or rcx, 1
cmp rcx, r9
jb 0x14005dd82
jmp 0x14005dd9c
xor r8d, r8d
xor eax, eax
mov rcx, r8
or rcx, 1
cmp rcx, r9
jae 0x14005dd9c
lea rcx, [r8 + r11]
movzx esi, word [rsp + rcx]
lea ecx, [r8*8]
shl rsi, cl
or rax, rsi
or r8, 2
cmp r8, r9
jae 0x14005ddb6
add r11, r8
movzx esi, byte [rsp + r11]
shl r8d, 3
mov ecx, r8d
shl rsi, cl
or rax, rsi
mov qword [rdx + 0x38], rax
mov qword [rdx + 0x40], r9
add rsp, 8
pop rdi
pop rsi
ret
Function at 0x14006aa20
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x68
mov rsi, r9
cmp rcx, 2
jne 0x14006aaac
movq xmm0, rdx
pshufd xmm0, xmm0, 0x44
pxor xmm0, xmmword [str.uespemosarenegylmodnarodsetybdet]
movq xmm1, r8
pshufd xmm1, xmm1, 0x44
pxor xmm1, xmmword [0x1402209e0]
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], 0
movdqu xmmword [rsp + 0x38], xmm0
movdqu xmmword [rsp + 0x48], xmm1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
cmp byte [rsi], 1
jne 0x14006ab8c
lea rdi, [rsp + 0x20]
mov ecx, 1
mov rdx, rdi
call fcn.14005dbd0
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
mov rcx, rdi
call fcn.1400069e0
jmp 0x14006aba7
cmp byte [rsi], 1
jne 0x14006ac94
movabs rdi, 0x89cd31291d2aefa4
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x14006acb5
movabs rcx, 0x100000001b3
mov rdx, qword [rsi + 8]
lea rsi, [rax - 1]
mov r8d, eax
and r8d, 7
cmp rsi, 7
jb 0x14006ab61
and rax, 0xfffffffffffffff8
neg rax
nop word cs:[rax + rax]
movzx esi, byte [rdx]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 1]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 2]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 3]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 4]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 5]
xor rdi, rsi
imul rdi, rcx
movzx esi, byte [rdx + 6]
xor rsi, rdi
imul rsi, rcx
movzx edi, byte [rdx + 7]
add rdx, 8
xor rdi, rsi
imul rdi, rcx
add rax, 8
jne 0x14006ab00
mov rax, rdi
test r8, r8
je 0x14006acb8
xor esi, esi
nop
movzx eax, byte [rdx + rsi]
xor rax, rdi
imul rax, rcx
add rsi, 1
mov rdi, rax
cmp r8, rsi
jne 0x14006ab70
jmp 0x14006acb8
lea rdi, [rsp + 0x20]
xor ecx, ecx
mov rdx, rdi
call fcn.14005dbd0
movzx ecx, byte [rsi + 1]
mov rdx, rdi
call fcn.14005dbd0
mov rsi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x48]
shl rsi, 0x38
or rsi, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x38]
add rdi, rax
rol rax, 0xd
xor rcx, rsi
xor rax, rdi
rol rdi, 0x20
mov rdx, qword [rsp + 0x40]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, rdi
xor rax, rdx
rol rdx, 0x20
xor rdi, rsi
add rdi, rax
rol rax, 0xd
xor rax, rdi
rol rdi, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rdi
add rdi, rax
rol rax, 0xd
xor rax, rdi
rol rdi, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rdi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rdi
add rdi, rax
rol rax, 0xd
xor rax, rdi
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rdx
shr rdx, 0x20
xor rax, rcx
xor rax, rdx
jmp 0x14006acb8
movzx eax, byte [rsi + 1]
movabs rcx, 0xa8c7f832281a39c5
xor rcx, rax
movabs rax, 0x1efac7090aef4a21
imul rax, rcx
jmp 0x14006acb8
mov rax, rdi
and eax, 0x7fff
add rsp, 0x68
pop rdi
pop rsi
ret
Function at 0x1400b7e10
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400b7eb3
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b28a0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400b7e60
test al, 1
je 0x1400b7fe4
test al, 2
jne 0x1400b7ffe
test al, 8
jne 0x1400b7e93
mov rcx, rsi
call fcn.1400b28a0
mov qword [rsi], 2
jmp 0x1400b7eb1
test al, 0x10
je 0x1400b7eb1
mov rax, qword [rdi + 0x11e0]
test rax, rax
je 0x1400b8018
mov rcx, qword [rdi + 0x11d8]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400b7ed2
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400b7ed5
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400b7f34
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400b7f04
lock sub qword [rax], 1
jne 0x1400b7f04
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b28a0
mov rax, qword [rdi + 0x11e0]
test rax, rax
je 0x1400b7f22
mov rcx, qword [rdi + 0x11d8]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400b7f44
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400b7f4f
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400b7fd1
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400b7f8a
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400b7f8a
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b7f44
cmp qword [rdi + 0x10], 0x11
jae 0x1400b7fb4
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400b7fc2
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400b7f67
jmp 0x1400b7f8a
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400b8780
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400b8823
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b28a0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400b87d0
test al, 1
je 0x1400b8954
test al, 2
jne 0x1400b896e
test al, 8
jne 0x1400b8803
mov rcx, rsi
call fcn.1400b28a0
mov qword [rsi], 2
jmp 0x1400b8821
test al, 0x10
je 0x1400b8821
mov rax, qword [rdi + 0x11e0]
test rax, rax
je 0x1400b8988
mov rcx, qword [rdi + 0x11d8]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400b8842
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400b8845
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400b88a4
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400b8874
lock sub qword [rax], 1
jne 0x1400b8874
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b28a0
mov rax, qword [rdi + 0x11e0]
test rax, rax
je 0x1400b8892
mov rcx, qword [rdi + 0x11d8]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400b88b4
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400b88bf
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400b8941
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400b88fa
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400b88fa
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b88b4
cmp qword [rdi + 0x10], 0x11
jae 0x1400b8924
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400b8932
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400b88d7
jmp 0x1400b88fa
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400b8b40
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb0
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400b8bfa
lea rsi, [rdi + 0x38]
mov qword [rsp + 0x28], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1400b2bd0
mov rax, qword [rdi]
nop dword [rax + rax]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400b8ba0
test al, 1
je 0x1400b8d31
test al, 2
jne 0x1400b8d4b
test al, 8
jne 0x1400b8bda
mov qword [rsp + 0x28], 2
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1400b2bd0
jmp 0x1400b8bf8
test al, 0x10
je 0x1400b8bf8
mov rax, qword [rdi + 0xc8]
test rax, rax
je 0x1400b8d65
mov rcx, qword [rdi + 0xc0]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400b8c19
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400b8c1c
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400b8c7b
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400b8c4b
lock sub qword [rax], 1
jne 0x1400b8c4b
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b7790
mov rax, qword [rdi + 0xc8]
test rax, rax
je 0x1400b8c69
mov rcx, qword [rdi + 0xc0]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400b8c8b
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400b8c99
add rsp, 0xb0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400b8d1e
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400b8cd4
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400b8cd4
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b8c8b
cmp qword [rdi + 0x10], 0x11
jae 0x1400b8cfe
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400b8d0c
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0xb0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400b8cb1
jmp 0x1400b8cd4
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400b9640
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400b96dd
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b5f10
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400b9690
test al, 1
je 0x1400b9808
test al, 2
jne 0x1400b9822
test al, 8
jne 0x1400b96c3
mov rcx, rsi
call fcn.1400b5f10
mov qword [rsi], 2
jmp 0x1400b96db
test al, 0x10
je 0x1400b96db
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400b983c
mov rcx, qword [rdi + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400b96fc
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400b96ff
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400b9758
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400b972e
lock sub qword [rax], 1
jne 0x1400b972e
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b5f10
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400b9746
mov rcx, qword [rdi + 0x68]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400b9768
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400b9773
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400b97f5
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400b97ae
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400b97ae
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b9768
cmp qword [rdi + 0x10], 0x11
jae 0x1400b97d8
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400b97e6
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400b978b
jmp 0x1400b97ae
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2