joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140090f70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov r9, rdx
mov rax, qword [rcx + 0x20]
test rax, rax
je 0x14009109d
mov r13, rcx
add rcx, 0x40
mov rdx, r9
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], rax
call fcn.14006ee70
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
mov r10d, eax
movzx r15d, ax
movzx r12d, word [r13 + 0x58]
and r15d, r12d
mov rbp, qword [r13]
mov rdi, qword [r13 + 8]
mov r13, qword [r13 + 0x18]
xor r14d, r14d
jmp 0x140090fe6
movzx eax, byte [rax]
cmp al, byte [r9]
je 0x14009108f
nop
inc r14
inc r15
mov rax, r15
nop dword [rax]
mov r15, rax
mov eax, 0
cmp r15, rdi
jae 0x140090ff0
movzx ecx, word [rbp + r15*4]
cmp rcx, 0xffff
je 0x14009109d
movzx esi, word [rbp + r15*4 + 2]
mov eax, esi
and eax, r12d
mov ebx, r15d
sub ebx, eax
and ebx, r12d
cmp r14, rbx
ja 0x14009109d
cmp si, r10w
jne 0x140090fe0
cmp rdx, rcx
jbe 0x1400910c9
imul rax, rcx, 0x68
mov rsi, qword [r13 + rax + 0x18]
test rsi, rsi
sete cl
cmp qword [r9 + 0x18], 0
sete bl
xor bl, cl
jne 0x140090fe0
add rax, r13
test rsi, rsi
je 0x140090fd3
mov r8, qword [rax + 8]
cmp r8, qword [r9 + 8]
jne 0x140090fe0
mov rdx, qword [r9]
mov rcx, qword [rax]
mov esi, r10d
call sub.VCRUNTIME140.dll_memcmp
mov r10d, esi
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
test eax, eax
jne 0x140090fe0
mov dil, 1
mov rax, qword [r9 + 0x18]
test rax, rax
jne 0x1400910a8
jmp 0x1400910b6
xor edi, edi
mov rax, qword [r9 + 0x18]
test rax, rax
je 0x1400910b6
lea rcx, [r9 + 0x10]
mov rdx, qword [r9]
mov r8, qword [r9 + 8]
call qword [rax + reloc.WS2_32.dll_recv]
mov eax, edi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823http_0.2.9_srcheadermap.rs
call fcn.14016f330
ud2
Function at 0x1400a6520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x100
mov r9, r8
mov r8, rdx
mov rsi, rcx
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe8], 0
lea rcx, [rsp + 0x80]
lea rdx, [rsp + 0xd8]
call fcn.14015fed0
mov edi, dword [rsp + 0x98]
cmp edi, 2
jne 0x1400a6621
movzx ebx, byte [rsp + 0x80]
mov rcx, qword [0x140221370]
test rcx, rcx
jne 0x1400a65a9
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x1400a6778
mov rcx, rax
mov qword [0x140221370], rax
mov r8d, 1
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400a6778
mov rdi, rax
mov byte [rax], bl
mov rcx, qword [0x140221370]
test rcx, rcx
jne 0x1400a65ea
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x1400a6767
mov rcx, rax
mov qword [0x140221370], rax
mov r8d, WSAStartup
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400a6767
mov qword [rax], rdi
lea rcx, method..virtual_32
mov qword [rax + 8], rcx
mov dword [rax + 0x28], 2
mov word [rax + 0x68], 0
jmp 0x1400a6752
mov rbx, qword [rsp + 0x80]
movups xmm0, xmmword [rsp + 0x88]
movaps xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [rsp + 0x9c]
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rsp + 0xac]
movaps xmmword [rsp + 0x50], xmm0
mov eax, dword [rsp + 0xbc]
mov dword [rsp + 0x60], eax
movzx eax, byte [rsp + 0xc0]
movups xmm0, xmmword [rsp + 0xc1]
movaps xmmword [rsp + 0x20], xmm0
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x2f], rcx
test al, al
je 0x1400a66c3
mov qword [rsi], rbx
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rsi + 8], xmm0
mov dword [rsi + 0x18], edi
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movups xmmword [rsi + 0x1c], xmm0
movups xmmword [rsi + 0x2c], xmm1
mov ecx, dword [rsp + 0x60]
mov dword [rsi + 0x3c], ecx
mov byte [rsi + 0x40], al
movaps xmm0, xmmword [rsp + 0x20]
movups xmmword [rsi + 0x41], xmm0
mov rax, qword [rsp + 0x2f]
mov qword [rsi + 0x50], rax
jmp 0x1400a675c
mov rcx, qword [0x140221370]
test rcx, rcx
jne 0x1400a66e8
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x1400a6767
mov rcx, rax
mov qword [0x140221370], rax
mov r8d, WSAStartup
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400a6767
mov qword [rax], 1
lea rcx, method..virtual_32
mov qword [rax + 8], rcx
mov word [rax + 0x68], 0
mov qword [rax + 0x10], rbx
movaps xmm0, xmmword [rsp + 0x70]
movups xmmword [rax + 0x18], xmm0
mov dword [rax + 0x28], edi
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movups xmmword [rax + 0x2c], xmm0
movups xmmword [rax + 0x3c], xmm1
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x4c], ecx
mov byte [rax + 0x50], 0
movaps xmm0, xmmword [rsp + 0x20]
movups xmmword [rax + 0x51], xmm0
mov rcx, qword [rsp + 0x2f]
mov qword [rax + 0x60], rcx
mov qword [rsi], rax
mov dword [rsi + 0x18], 2
add rsp, 0x100
pop rbx
pop rdi
pop rsi
ret
mov ecx, WSAStartup
mov edx, 8
call fcn.14016c090
ud2
mov ecx, 1
mov edx, 1
call fcn.14016c090
ud2
Function at 0x1400a79b0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rsi
push rdi
sub rsp, 0x78
mov rsi, rdx
cmp dword [rcx], 2
jne 0x1400a7a46
movdqu xmm0, xmmword [rcx + 8]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmmword [str.uespemosarenegylmodnarodsetybdet]
movdqa xmmword [rsp + 0x30], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmmword [0x140176670]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmmword [rsp + 0x50], xmm0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
mov rdi, qword [rsi + 0x18]
xor eax, eax
test rdi, rdi
setne al
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x28]
mov r8d, 8
call fcn.14006f130
test rdi, rdi
je 0x1400a7ad4
mov rdx, qword [rsi]
mov r8, qword [rsi + 8]
lea rcx, [rsp + 0x30]
jmp 0x1400a7aec
mov rdx, qword [rsi + 0x18]
xor ecx, ecx
test rdx, rdx
setne cl
movabs rax, 0xcbf29ce484222325
xor rax, rcx
movabs rcx, 0x1efac7090aef4a21
imul rax, rcx
test rdx, rdx
je 0x1400a7be1
mov r8, qword [rsi + 8]
test r8, r8
je 0x1400a7c60
mov r10, qword [rsi]
movabs r11, 0x100000001b3
lea r9, [r8 - 1]
mov rsi, r8
and rsi, 7
je 0x1400a7bed
mov rdx, rax
mov rcx, r10
nop word [rax + rax]
movzx eax, byte [rcx]
inc rcx
xor rax, rdx
imul rax, r11
mov rdx, rax
dec rsi
jne 0x1400a7ab0
cmp r9, 7
jae 0x1400a7bf6
jmp 0x1400a7c60
movzx eax, byte [rsi]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0x28]
mov r8d, 8
call fcn.14006f130
mov rax, qword [rsp + 0x40]
mov r8, qword [rsp + 0x60]
shl r8, 0x38
or r8, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x30]
add rsi, rax
rol rax, 0xd
xor rcx, r8
xor rax, rsi
rol rsi, 0x20
mov rdx, qword [rsp + 0x38]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rsi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, rsi
xor rax, rdx
rol rdx, 0x20
xor rsi, r8
add rsi, rax
rol rax, 0xd
xor rax, rsi
rol rsi, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rsi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rsi
add rsi, rax
rol rax, 0xd
xor rax, rsi
rol rsi, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add rsi, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, rsi
add rsi, rax
rol rax, 0xd
xor rax, rsi
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rdx
shr rdx, 0x20
xor rax, rcx
xor rax, rdx
jmp 0x1400a7c60
movzx edx, byte [rsi]
xor rax, rdx
imul rax, rcx
jmp 0x1400a7c60
mov rcx, r10
cmp r9, 7
jb 0x1400a7c60
add r10, r8
nop dword [rax]
movzx edx, byte [rcx]
xor rdx, rax
imul rdx, r11
movzx eax, byte [rcx + 1]
xor rax, rdx
imul rax, r11
movzx edx, byte [rcx + 2]
xor rdx, rax
imul rdx, r11
movzx eax, byte [rcx + 3]
xor rax, rdx
imul rax, r11
movzx edx, byte [rcx + 4]
xor rdx, rax
imul rdx, r11
movzx eax, byte [rcx + 5]
xor rax, rdx
imul rax, r11
movzx edx, byte [rcx + 6]
xor rdx, rax
imul rdx, r11
movzx eax, byte [rcx + 7]
add rcx, 8
xor rax, rdx
imul rax, r11
cmp rcx, r10
jne 0x1400a7c00
and eax, 0x7fff
add rsp, 0x78
pop rdi
pop rsi
ret
Function at 0x1400a8a40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov r9, rdx
mov rax, qword [rcx + 0x20]
test rax, rax
je 0x1400a8b7d
mov rdi, rcx
add rcx, 0x40
mov rdx, r9
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], rax
call fcn.1400a79b0
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
mov r10d, eax
movzx r15d, ax
movzx r12d, word [rdi + 0x58]
and r15d, r12d
mov rbp, qword [rdi]
mov r13, qword [rdi + 8]
mov r11, qword [rdi + 0x18]
xor r14d, r14d
jmp 0x1400a8ab6
movzx eax, byte [rax]
cmp al, byte [r9]
je 0x1400a8b6a
nop
inc r14
inc r15
mov rax, r15
nop dword [rax]
mov r15, rax
mov eax, 0
cmp r15, r13
jae 0x1400a8ac0
movzx ecx, word [rbp + r15*4]
cmp rcx, 0xffff
je 0x1400a8b7d
movzx edi, word [rbp + r15*4 + 2]
mov eax, edi
and eax, r12d
mov esi, r15d
sub esi, eax
and esi, r12d
cmp r14, rsi
ja 0x1400a8b7d
cmp di, r10w
jne 0x1400a8ab0
cmp rdx, rcx
jbe 0x1400a8baa
imul rdi, rcx, 0x68
mov rcx, qword [r11 + rdi + 0x18]
test rcx, rcx
sete al
cmp qword [r9 + 0x18], 0
sete bl
xor bl, al
jne 0x1400a8ab0
lea rax, [r11 + rdi]
test rcx, rcx
je 0x1400a8aa2
mov r8, qword [rax + 8]
cmp r8, qword [r9 + 8]
jne 0x1400a8ab0
mov rdx, qword [r9]
mov rcx, qword [rax]
mov esi, r10d
mov rbx, r11
call sub.VCRUNTIME140.dll_memcmp
mov r11, rbx
mov r10d, esi
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x30]
test eax, eax
jne 0x1400a8ab0
lea rsi, [r11 + rdi]
add rsi, 0x20
mov rax, qword [r9 + 0x18]
test rax, rax
jne 0x1400a8b88
jmp 0x1400a8b96
xor esi, esi
mov rax, qword [r9 + 0x18]
test rax, rax
je 0x1400a8b96
lea rcx, [r9 + 0x10]
mov rdx, qword [r9]
mov r8, qword [r9 + 8]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, rsi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823http_0.2.9_srcheadermap.rs
call fcn.14016f330
ud2
Function at 0x1400ac570
Capabilities:
Query or enumerate registry value

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rax, r8
mov rbx, rdx
mov r14, rcx
lea rcx, [rsp + 0x50]
mov r8d, recv
mov rdx, rax
call fcn.1400ac240
mov dword [rsp + 0x30], 0x800
mov dword [rsp + 0x34], 0
mov rcx, qword [0x140221370]
test rcx, rcx
jne 0x1400ac5d1
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x1400ac70d
mov rcx, rax
mov qword [0x140221370], rax
mov r8d, 0x800
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400ac70d
mov rsi, rax
mov qword [rsp + 0x38], 0x800
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0
mov rdi, qword [rsp + 0x58]
lea r13, [rsp + 0x30]
lea r15, [rsp + 0x34]
mov rbp, qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea r12, [rsp + 0x38]
nop dword [rax]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rsi
mov rcx, rbx
mov rdx, rdi
xor r8d, r8d
mov r9, r15
call rbp
cmp eax, 0xea
jne 0x1400ac665
mov r8d, dword [rsp + 0x30]
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x48]
sub rax, rdx
cmp rax, r8
jae 0x1400ac620
mov rcx, r12
call fcn.1401726f0
mov rsi, qword [rsp + 0x40]
jmp 0x1400ac620
test eax, eax
jne 0x1400ac697
mov eax, dword [rsp + 0x30]
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x34]
cmp eax, 0xb
jbe 0x1400ac6ed
movabs rax, 0xde00000002
mov qword [r14], rax
mov byte [r14 + 0x18], recv
cmp qword [rsp + 0x38], 0
jne 0x1400ac6af
jmp 0x1400ac6c1
shl rax, 0x20
or rax, 2
mov qword [r14], rax
mov byte [r14 + 0x18], recv
cmp qword [rsp + 0x38], 0
je 0x1400ac6c1
mov rcx, qword [0x140221370]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rsp + 0x50], 0
je 0x1400ac6db
mov rcx, qword [0x140221370]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x48]
mov qword [r14 + 0x10], rcx
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [r14], xmm0
mov byte [r14 + 0x18], al
cmp qword [rsp + 0x50], 0
jne 0x1400ac6c9
jmp 0x1400ac6db
mov ecx, 0x800
mov edx, 1
call fcn.14016c090
ud2
Function at 0x1400c1160
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c1170
test al, 1
je 0x1400c1219
test al, 2
jne 0x1400c1233
test al, 8
jne 0x1400c11aa
lea rcx, [rsi + 0x20]
mov byte [rsp + 0xc8], 4
lea rdx, [rsp + 0x58]
call fcn.1400c0f80
jmp 0x1400c11c8
test al, 0x10
je 0x1400c11c8
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x1400c12b4
mov rcx, qword [rsi + 0xb8]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140158e00
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x28], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c124d
jne 0x1400c120f
mov rcx, rsi
add rsp, 0xd0
pop rsi
jmp fcn.1400c1300
nop
add rsp, 0xd0
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 2
lea rdx, [0x1401f1158]
jmp 0x1400c12f1
lea rax, str.waker_missing
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x58], 0
lea rax, method..virtual_32
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x58]
call fcn.14016f2f0
ud2
Function at 0x1400c1ac0
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0xd0
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c1ad0
test al, 1
je 0x1400c1b79
test al, 2
jne 0x1400c1b93
test al, 8
jne 0x1400c1b0a
lea rcx, [rsi + 0x20]
mov byte [rsp + 0xc8], 4
lea rdx, [rsp + 0x58]
call fcn.1400c0f80
jmp 0x1400c1b28
test al, 0x10
je 0x1400c1b28
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x1400c1c14
mov rcx, qword [rsi + 0xb8]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1401577f0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x28], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x28]
jb 0x1400c1bad
jne 0x1400c1b6f
mov rcx, rsi
add rsp, 0xd0
pop rsi
jmp fcn.1400c1c60
nop
add rsp, 0xd0
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x28]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 2
mov qword [rsp + 0x58], 0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 2
lea rdx, [0x1401f1158]
jmp 0x1400c1c51
lea rax, str.waker_missing
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 1
mov qword [rsp + 0x58], 0
lea rax, method..virtual_32
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x58]
call fcn.14016f2f0
ud2
Function at 0x1400c9020
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c9030
test al, 1
je 0x1400c90d3
test al, 2
jne 0x1400c90ed
test al, 8
jne 0x1400c906a
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
call fcn.1400c9880
jmp 0x1400c9082
test al, 0x10
je 0x1400c9082
mov rax, qword [rsi + 0x78]
test rax, rax
je 0x1400c916b
mov rcx, qword [rsi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140158e00
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x20], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x20]
jb 0x1400c9107
jne 0x1400c90c9
mov rcx, rsi
add rsp, 0x80
pop rsi
jmp fcn.1400c91c0
nop
add rsp, 0x80
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
lea rdx, [0x1401f1158]
jmp 0x1400c91a5
lea rax, str.waker_missing
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x28], 0
lea rax, method..virtual_32
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x28]
call fcn.14016f2f0
ud2
Function at 0x1400c9a20
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400c9a30
test al, 1
je 0x1400c9ad3
test al, 2
jne 0x1400c9aed
test al, 8
jne 0x1400c9a6a
lea rcx, [rsi + 0x20]
mov dword [rsp + 0x30], 0x3b9aca01
lea rdx, [rsp + 0x28]
call fcn.1400c9880
jmp 0x1400c9a82
test al, 0x10
je 0x1400c9a82
mov rax, qword [rsi + 0x78]
test rax, rax
je 0x1400c9b6b
mov rcx, qword [rsi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1401577f0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x20], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x20]
jb 0x1400c9b07
jne 0x1400c9ac9
mov rcx, rsi
add rsp, 0x80
pop rsi
jmp fcn.1400c9bc0
nop
add rsp, 0x80
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
lea rdx, [0x1401f1158]
jmp 0x1400c9ba5
lea rax, str.waker_missing
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x28], 0
lea rax, method..virtual_32
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x28]
call fcn.14016f2f0
ud2
Function at 0x1400ebfb0
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400ebfc0
test al, 1
je 0x1400ec056
test al, 2
jne 0x1400ec070
test al, 8
jne 0x1400ebfed
lea rcx, [rsi + 0x20]
call fcn.1400ec7a0
jmp 0x1400ec005
test al, 0x10
je 0x1400ec005
mov rax, qword [rsi + 0x78]
test rax, rax
je 0x1400ec0ee
mov rcx, qword [rsi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140158e00
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x20], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x20]
jb 0x1400ec08a
jne 0x1400ec04c
mov rcx, rsi
add rsp, 0x80
pop rsi
jmp fcn.1400ec140
nop
add rsp, 0x80
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
lea rdx, [0x1401f1158]
jmp 0x1400ec128
lea rax, str.waker_missing
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x28], 0
lea rax, method..virtual_32
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x28]
call fcn.14016f2f0
ud2
Function at 0x1400ec920
Capabilities:
Encode data using xor

Disassembly:
push rsi
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [rcx]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rsi], rcx
jne 0x1400ec930
test al, 1
je 0x1400ec9c6
test al, 2
jne 0x1400ec9e0
test al, 8
jne 0x1400ec95d
lea rcx, [rsi + 0x20]
call fcn.1400ec7a0
jmp 0x1400ec975
test al, 0x10
je 0x1400ec975
mov rax, qword [rsi + 0x78]
test rax, rax
je 0x1400eca5e
mov rcx, qword [rsi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.1401577f0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rsp + 0x20], rax
shl rax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rsp + 0x20]
jb 0x1400ec9fa
jne 0x1400ec9bc
mov rcx, rsi
add rsp, 0x80
pop rsi
jmp fcn.1400ecab0
nop
add rsp, 0x80
pop rsi
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401f10d0]
mov edx, 0x23
call fcn.14016f3d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401f1110]
mov edx, 0x25
call fcn.14016f3d0
ud2
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rax, [fcn.14005a1b0]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, str.current:___sub:__
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 2
lea rdx, [0x1401f1158]
jmp 0x1400eca98
lea rax, str.waker_missing
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], 1
mov qword [rsp + 0x28], 0
lea rax, method..virtual_32
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 0
lea rdx, str.C:UsersUser.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.32.0_src_runtime_taskcore.rs
lea rcx, [rsp + 0x28]
call fcn.14016f2f0
ud2