joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180004f40
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0xc0
mov rax, qword [0x18001e040]
xor rax, rsp
mov qword [rsp + 0xb0], rax
movzx edi, dl
mov rbx, rcx
mov qword [rsp + 0x28], rcx
xor edx, edx
mov ecx, edi
xor ebp, ebp
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov r9d, eax
cmp dil, 1
jne 0x180004f9f
xorps xmm0, xmm0
lea r8d, [rbp + 6]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
lea rdx, str.MOUSE0
mov qword [rbx + 0x18], rbp
jmp 0x1800050a0
cmp dil, 2
jne 0x180004fc5
xorps xmm0, xmm0
lea rdx, str.MOUSE1
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
mov r8d, 6
mov qword [rbx + 0x18], rbp
jmp 0x1800050a0
cmp dil, 4
jne 0x180004feb
xorps xmm0, xmm0
lea rdx, str.MBUTTON
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
mov r8d, 7
mov qword [rbx + 0x18], rbp
jmp 0x1800050a0
cmp dil, 5
jne 0x180005011
xorps xmm0, xmm0
lea rdx, str.XBUTTON1
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
mov r8d, 8
mov qword [rbx + 0x18], rbp
jmp 0x1800050a0
cmp dil, 6
jne 0x180005034
xorps xmm0, xmm0
lea rdx, str.XBUTTON2
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
mov r8d, 8
mov qword [rbx + 0x18], rbp
jmp 0x1800050a0
lea eax, [rdi - 0x21]
cmp eax, 0x84
ja case.0x180005059.41
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0x50d8]
mov ecx, dword [rdx + rax*4 + 0x50d0]
add rcx, rdx
jmp rcx
bts r9d, 8
shl r9d, 0x10
lea rdx, [rsp + 0x30]
mov ecx, r9d
mov r8d, 0x80
call qword [sym.imp.USER32.dll_GetKeyNameTextA]
xorps xmm0, xmm0
lea rax, [rsp + 0x30]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rbp
mov r8, 0xffffffffffffffff
mov qword [rbx + 0x18], rbp
inc r8
cmp byte [rax + r8], bpl
jne 0x180005092
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.180014380
mov rax, rbx
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.1800144f0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xc0
pop rdi
pop rsi
pop rbp
ret
Function at 0x140011154
Capabilities:
Extract resource via kernel32 functions

Disassembly:
jmp 0x1400119e0
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x168
lea rbp, [rsp + 0x20]
lea rcx, [0x14002605c]
call fcn.14001146a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rbp + 0x68], rax
movzx eax, word [rbp + 0x160]
mov r8, qword [rbp + 0x168]
mov edx, eax
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rbp + 0x28], rax
cmp qword [rbp + 0x28], 0
je 0x140011a84
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x140011a84
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
je 0x140011a84
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov rcx, qword [rbp + 0x170]
mov dword [rcx], eax
mov rax, qword [rbp + 0x48]
jmp 0x140011a93
mov rax, qword [rbp + 0x170]
mov dword [rax], 0
xor eax, eax
lea rsp, [rbp + 0x148]
pop rdi
pop rbp
ret

Function at 0x14001127b
Capabilities:
Terminate process

Disassembly:
jmp 0x1400139b0
mov qword [rsp + 8], rcx
sub rsp, 0x28
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, 0xc0000409
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
add rsp, 0x28
ret
Function at 0x140011320
Capabilities:
Parse pe header

Disassembly:
jmp 0x140014d00
sub rsp, 0x38
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
jne 0x140014d20
xor al, al
jmp 0x140014da1
mov rax, qword [rsp + 0x20]
movzx eax, word [rax]
cmp eax, 0x5a4d
je 0x140014d33
xor al, al
jmp 0x140014da1
mov rax, qword [rsp + 0x20]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
cmp dword [rax], 0x4550
je 0x140014d5d
xor al, al
jmp 0x140014da1
mov rax, qword [rsp + 0x28]
movzx eax, word [rax + 0x18]
cmp eax, 0x20b
je 0x140014d71
xor al, al
jmp 0x140014da1
mov rax, qword [rsp + 0x28]
cmp dword [rax + 0x84], 0xe
ja 0x140014d83
xor al, al
jmp 0x140014da1
mov eax, 8
imul rax, rax, 0xe
mov rcx, qword [rsp + 0x28]
cmp dword [rcx + rax + 0x88], 0
jne 0x140014d9f
xor al, al
jmp 0x140014da1
mov al, 1
add rsp, 0x38
ret
Function at 0x140f592d0
Capabilities:
Encode data using xor

Disassembly:
jmp 0x140f592da
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
pushfq
sub rsp, 8
stmxcsr dword [rsp]
call 0x140f59303
pop rbp
sub rbp, 0x33
sub rbp, 0xf592d0
sub rsp, 0x20
jmp 0x140f59322
mov rax, 0xf592d0
add rax, rbp
add rax, 0x84
mov rcx, 0x60b
mov rdx, 0xffffffffdc0ea9ea
xor byte [rax], dl
inc rax
dec rcx
jne 0x140f59341
jmp 0x140f59358
movabs byte [0xeaeaead663610363], al
movabs byte [0xeba2eaeaebe22b6b], al
add esp, dword [rdx - 0x1512d5d3]
invalid
Function at 0x46dda0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rax, qword [0x00d62c20]
mov rcx, qword [rsp + 8]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x10]
lea rax, [rdx + rax*8]
xor rcx, rax
movabs rax, 0xea38ec9079f01541
imul rax, rcx
rol rax, 0x1f
movabs rcx, 0x2723a30d96da1399
imul rcx, rax
mov rax, rcx
shr rcx, 0x1d
xor rax, rcx
movabs rcx, 0x83cf8eadf876d2d7
imul rcx, rax
mov rax, rcx
shr rcx, 0x20
xor rax, rcx
mov qword [rsp + 0x18], rax
ret
cmp byte [0x00d62732], 0
je 0x46dddd
mov rax, qword [rsp + 8]
movq xmm0, qword [rsp + 0x10]
pinsrq xmm0, qword [rax], 1
aesenc xmm0, xmmword [0x00d62ee0]
aesenc xmm0, xmmword [0x00d62ef0]
aesenc xmm0, xmmword [0x00d62f00]
movq qword [rsp + 0x18], xmm0
ret
jmp 0x40aa20

Function at 0x4b0cc0
Capabilities:
Encode data using base64

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rdx + 8]
lea rsi, [rbx + 0x2e]
imul rsi, rsi, 0xffffffffffffffe4
movabs rax, 0x5816058160581606
mov rcx, rdx
imul rsi
sar rdx, 5
sar rsi, 0x3f
sub rdx, rsi
lea rsi, [rdx + 0x15c]
sar rsi, 0x3f
shr rsi, 0x3d
lea rdx, [rsi + rdx]
lea rdx, [rdx + 0x15c]
sar rdx, 3
cmp rdx, 0x57
jae 0x4b0d99
lea rsi, [rdx + rdx*2]
lea rdi, [0x00cd1cc0]
mov r8, qword [rdi + rsi*8 + 8]
lea r9, [r8 + rbx]
lea r9, [r9 + 0x40]
cmp r9, 0xffffffffffffffc4
jge 0x4b0d42
inc rdx
nop
jmp 0x4b0d18
cmp r9, 0xffffffffffffffe0
jle 0x4b0d4d
dec rdx
jmp 0x4b0d18
mov rbx, qword [rdi + rsi*8]
mov rax, qword [rcx]
mov rsi, rdx
mul rbx
shr rax, 0x3f
add rdx, rax
mov qword [rcx], rdx
mov rdx, qword [rcx + 8]
lea rdx, [rdx + r8]
lea rdx, [rdx + 0x40]
mov qword [rcx + 8], rdx
mov rcx, rsi
shl rsi, 3
lea rdx, [rsi - 0x15c]
neg rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rax, rdx
mov ecx, 0x57
call fcn.0046e300
nop
int3
Function at 0x14000a490
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
sub rsp, 0x20
mov ecx, dword [0x140305a80]
test ecx, ecx
je 0x14000a4bd
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
jbe 0x14000a4d6
cmp qword [rax + 8], 0
je 0x14000a4d6
add rax, 0x10
add rsp, 0x20
pop rsi
ret
lea rcx, [0x140305a68]
call fcn.14028f0b0
mov ecx, eax
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
ja 0x14000a4ac
mov ecx, dword [0x140305a80]
test ecx, ecx
je 0x14000a58c
dec ecx
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
je 0x14000a5a9
mov rsi, rax
test rax, rax
jne 0x14000a567
movzx eax, byte [0x1403f6a90]
mov rcx, qword [0x1403f6548]
test rcx, rcx
jne 0x14000a528
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14000a5c1
mov rcx, rax
mov qword [0x1403f6548], rax
mov r8d, 0x38
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x14000a5c1
mov rsi, rax
lea rax, [0x140305a68]
mov qword [rsi], rax
mov qword [rsi + 8], 0
mov ecx, dword [0x140305a80]
test ecx, ecx
je 0x14000a5b1
dec ecx
mov rdx, rsi
call sub.kernel32.dll_TlsSetValue
mov qword [rsi + 8], 1
lea rax, [rsi + 0x10]
xorps xmm0, xmm0
movups xmmword [rsi + 0x10], xmm0
movups xmmword [rsi + 0x20], xmm0
mov qword [rsi + 0x30], 0
add rsp, 0x20
pop rsi
ret
lea rcx, [0x140305a68]
call fcn.14028f0b0
mov ecx, eax
call sub.kernel32.dll_TlsGetValue
cmp rax, 1
jne 0x14000a4f5
xor eax, eax
add rsp, 0x20
pop rsi
ret
lea rcx, [0x140305a68]
call fcn.14028f0b0
mov ecx, eax
jmp 0x14000a55f
mov ecx, 8
mov edx, 0x38
call fcn.1400eb190
ud2

Function at 0x140029c90
Capabilities:
Receive data
Receive data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
mov rbx, r8
mov rsi, rdx
movzx eax, byte [rdx + 0xe0]
test eax, eax
mov qword [rsp + 0x80], rcx
je 0x140029cea
cmp eax, 3
jne 0x140029d4b
lea rax, [rsi + 0xd8]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsi + 0xd8]
test eax, eax
je 0x140029d21
cmp eax, 3
jne 0x140029d65
jmp 0x140029d8e
mov rax, qword [rsi]
movdqu xmm0, xmmword [rsi + 8]
mov qword [rsi + 0x18], rax
mov qword [rsi + 0x20], rax
movdqu xmmword [rsi + 0x28], xmm0
mov qword [rsi + 0x38], 1
lea rcx, [rsi + 0xd8]
mov qword [rsp + 0x38], rcx
mov byte [rsi + 0xd8], 0
mov ecx, 1
jmp 0x140029d29
mov rax, qword [rsi + 0x18]
mov rcx, qword [rsi + 0x38]
mov qword [rsi + 0x40], rax
mov qword [rsi + 0x48], rcx
mov rdx, qword [rsi + 0x20]
mov qword [rsi + 0x50], rdx
mov rdx, qword [rsi + 0x28]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rsi + 0x30]
mov qword [rsi + 0x60], rdx
jmp 0x140029d7f
lea rcx, str._async_fn__resumed_after_completion_Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_fs_mod.rs
lea r8, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_net_udp.rs
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str._async_fn__resumed_after_completion_Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_fs_mod.rs
lea r8, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_io_registration.rs
mov edx, 0x23
call fcn.140137ef0
ud2
Function at 0x14004f890
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xc20
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14004f8a0
test al, 1
je 0x14004f94a
test al, 2
jne 0x14004f964
test al, 8
jne 0x14004f8db
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x58], 4
lea rdx, [rsp + 0x58]
call fcn.14004c4b0
jmp 0x14004f8f9
test al, 0x10
je 0x14004f8f9
mov rax, qword [rsi + 0xc08]
test rax, rax
je 0x14004f9e1
mov rcx, qword [rsi + 0xc10]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cb990
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x28], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14004f97e
jne 0x14004f940
mov rcx, rsi
add rsp, 0xc20
pop rsi
jmp fcn.14004d550
nop
add rsp, 0xc20
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x58]
lea r9, [rsp + 0x38]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x58]
call fcn.140136bd0
ud2
Function at 0x14004fa20
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x870
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14004fa30
test al, 1
je 0x14004fada
test al, 2
jne 0x14004faf4
test al, 8
jne 0x14004fa6b
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x60], 4
lea rdx, [rsp + 0x60]
call fcn.14004c580
jmp 0x14004fa89
test al, 0x10
je 0x14004fa89
mov rax, qword [rsi + 0x850]
test rax, rax
je 0x14004fb71
mov rcx, qword [rsi + 0x858]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cd260
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x30]
jb 0x14004fb0e
jne 0x14004fad0
mov rcx, rsi
add rsp, 0x870
pop rsi
jmp fcn.14004e4b0
nop
add rsp, 0x870
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x60]
call fcn.140136bd0
ud2
Function at 0x14004fbb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
sub rsp, 0xa8
movaps xmmword [rsp + 0x90], xmm6
mov rsi, rcx
mov rax, qword [rcx]
nop word [rax + rax]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14004fbd0
test al, 1
je 0x14004fcf8
test al, 2
jne 0x14004fd12
test al, 8
jne 0x14004fc12
mov rdi, qword [rsi + 0x28]
call fcn.1402c40a0
test rax, rax
je 0x14004fc32
movups xmm6, xmmword [rax + 0x20]
mov qword [rax + 0x20], 1
mov qword [rax + 0x28], rdi
jmp 0x14004fc35
test al, 0x10
je 0x14004fc54
mov rax, qword [rsi + 0x130]
test rax, rax
je 0x14004fd8f
mov rcx, qword [rsi + 0x138]
call qword [rax + 0x10]
jmp 0x14004fc54
xorps xmm6, xmm6
lea rcx, [rsi + 0x30]
call fcn.14001bf20
mov qword [rsi + 0x30], 3
call fcn.1402c40a0
test rax, rax
je 0x14004fc54
movups xmmword [rax + 0x20], xmm6
lea rdi, [rsi + 0x20]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cb990
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x30]
jb 0x14004fd2c
jne 0x14004fce6
mov rax, qword [rdi]
lock dec qword [rax]
jne 0x14004fca4
mov rcx, rdi
call fcn.140023420
lea rcx, [rsi + 0x30]
call fcn.14001bf20
mov rax, qword [rsi + 0x130]
test rax, rax
je 0x14004fcc3
mov rcx, qword [rsi + 0x138]
call qword [rax + 0x18]
mov r8, qword [rsi - 8]
mov rcx, qword [0x1403f6548]
xor edx, edx
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa8
pop rdi
pop rsi
jmp fcn.140302ad4
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa8
pop rdi
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x60]
call fcn.140136bd0
ud2
Function at 0x14004fdd0
Capabilities:
Encode data using xor

Disassembly:
push rsi
mov eax, 0x11e0
call fcn.140302830
sub rsp, rax
mov rsi, rcx
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14004fdf0
test al, 1
je 0x14004fe9a
test al, 2
jne 0x14004feb4
test al, 8
jne 0x14004fe2b
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x60], 4
lea rdx, [rsp + 0x60]
call fcn.14004d120
jmp 0x14004fe49
test al, 0x10
je 0x14004fe49
mov rax, qword [rsi + 0x11c0]
test rax, rax
je 0x14004ff31
mov rcx, qword [rsi + 0x11c8]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cb990
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x30]
jb 0x14004fece
jne 0x14004fe90
mov rcx, rsi
add rsp, 0x11e0
pop rsi
jmp fcn.14004f060
nop
add rsp, 0x11e0
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x60]
call fcn.140136bd0
ud2
Function at 0x14004ff70
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x500
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x14004ff80
test al, 1
je 0x14005002a
test al, 2
jne 0x140050044
test al, 8
jne 0x14004ffbb
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x58], 3
lea rdx, [rsp + 0x58]
call fcn.14004c240
jmp 0x14004ffd9
test al, 0x10
je 0x14004ffd9
mov rax, qword [rsi + 0x4e8]
test rax, rax
je 0x1400500c1
mov rcx, qword [rsi + 0x4f0]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cb990
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x28], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x14005005e
jne 0x140050020
mov rcx, rsi
add rsp, 0x500
pop rsi
jmp fcn.14004d9d0
nop
add rsp, 0x500
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x58]
lea r9, [rsp + 0x38]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x58]
call fcn.140136bd0
ud2
Function at 0x140050100
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x9d0
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x140050110
test al, 1
je 0x1400501ba
test al, 2
jne 0x1400501d4
test al, 8
jne 0x14005014b
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x60], 3
lea rdx, [rsp + 0x60]
call fcn.14004c820
jmp 0x140050169
test al, 0x10
je 0x140050169
mov rax, qword [rsi + 0x9b0]
test rax, rax
je 0x140050251
mov rcx, qword [rsi + 0x9b8]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cb990
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x30]
jb 0x1400501ee
jne 0x1400501b0
mov rcx, rsi
add rsp, 0x9d0
pop rsi
jmp fcn.14004e580
nop
add rsp, 0x9d0
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x60]
call fcn.140136bd0
ud2
Function at 0x140050290
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x380
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400502a0
test al, 1
je 0x14005034a
test al, 2
jne 0x140050364
test al, 8
jne 0x1400502db
lea rcx, [rsi + 0x20]
mov qword [rsp + 0x60], 3
lea rdx, [rsp + 0x60]
call fcn.14004d050
jmp 0x1400502f9
test al, 0x10
je 0x1400502f9
mov rax, qword [rsi + 0x360]
test rax, rax
je 0x1400503e1
mov rcx, qword [rsi + 0x368]
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1402cd260
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x30], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x30]
jb 0x14005037e
jne 0x140050340
mov rcx, rsi
add rsp, 0x380
pop rsi
jmp fcn.14004e7a0
nop
add rsp, 0x380
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1403ad4c8]
mov edx, 0x23
call fcn.140137ef0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1403ad488]
mov edx, 0x25
call fcn.140137ef0
ud2
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea rax, [fcn.140136f40]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], 2
lea rdx, str.current:___sub:
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 2
mov rcx, rsi
call fcn.14000ce70
lea rdx, [0x1403ad510]
mov rcx, rsi
call fcn.140136bd0
ud2
lea rax, str.waker_missing
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rax, [0x1403d7910]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
lea rdx, str._Users_sh1n_.cargo_registry_src_rsproxy.cn_8f6827c7555bfaf8_tokio_1.32.0_src_runtime_task_core.rs
lea rcx, [rsp + 0x60]
call fcn.140136bd0
ud2