joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400b9dc0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400b9e5d
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b26c0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400b9e10
test al, 1
je 0x1400b9f88
test al, 2
jne 0x1400b9fa2
test al, 8
jne 0x1400b9e43
mov rcx, rsi
call fcn.1400b26c0
mov qword [rsi], 2
jmp 0x1400b9e5b
test al, 0x10
je 0x1400b9e5b
mov rax, qword [rdi + 0x78]
test rax, rax
je 0x1400b9fbc
mov rcx, qword [rdi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400b9e7c
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400b9e7f
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400b9ed8
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400b9eae
lock sub qword [rax], 1
jne 0x1400b9eae
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b26c0
mov rax, qword [rdi + 0x78]
test rax, rax
je 0x1400b9ec6
mov rcx, qword [rdi + 0x70]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400b9ee8
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400b9ef3
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400b9f75
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400b9f2e
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400b9f2e
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400b9ee8
cmp qword [rdi + 0x10], 0x11
jae 0x1400b9f58
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400b9f66
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400b9f0b
jmp 0x1400b9f2e
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400ba160
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400ba1fd
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b36c0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400ba1b0
test al, 1
je 0x1400ba328
test al, 2
jne 0x1400ba342
test al, 8
jne 0x1400ba1e3
mov rcx, rsi
call fcn.1400b36c0
mov qword [rsi], 2
jmp 0x1400ba1fb
test al, 0x10
je 0x1400ba1fb
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400ba35c
mov rcx, qword [rdi + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400ba21c
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400ba21f
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400ba278
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400ba24e
lock sub qword [rax], 1
jne 0x1400ba24e
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b36c0
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400ba266
mov rcx, qword [rdi + 0x68]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400ba288
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400ba293
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400ba315
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400ba2ce
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400ba2ce
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400ba288
cmp qword [rdi + 0x10], 0x11
jae 0x1400ba2f8
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400ba306
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400ba2ab
jmp 0x1400ba2ce
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400baba0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bac3d
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b5f10
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400babf0
test al, 1
je 0x1400bad68
test al, 2
jne 0x1400bad82
test al, 8
jne 0x1400bac23
mov rcx, rsi
call fcn.1400b5f10
mov qword [rsi], 2
jmp 0x1400bac3b
test al, 0x10
je 0x1400bac3b
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400bad9c
mov rcx, qword [rdi + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bac5c
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400bac5f
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bacb8
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bac8e
lock sub qword [rax], 1
jne 0x1400bac8e
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b5f10
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400baca6
mov rcx, qword [rdi + 0x68]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bacc8
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bacd3
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bad55
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bad0e
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bad0e
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bacc8
cmp qword [rdi + 0x10], 0x11
jae 0x1400bad38
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bad46
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400baceb
jmp 0x1400bad0e
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400bb730
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bb7d3
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b38a0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400bb780
test al, 1
je 0x1400bb904
test al, 2
jne 0x1400bb91e
test al, 8
jne 0x1400bb7b3
mov rcx, rsi
call fcn.1400b38a0
mov qword [rsi], 2
jmp 0x1400bb7d1
test al, 0x10
je 0x1400bb7d1
mov rax, qword [rdi + 0x2e8]
test rax, rax
je 0x1400bb938
mov rcx, qword [rdi + 0x2e0]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bb7f2
mov rcx, rsi
mov rdx, rdi
call fcn.14011bc60
test rax, rax
setne r8b
jmp 0x1400bb7f5
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bb854
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bb824
lock sub qword [rax], 1
jne 0x1400bb824
mov rcx, rsi
call fcn.1400b0390
mov rcx, rbx
call fcn.1400b38a0
mov rax, qword [rdi + 0x2e8]
test rax, rax
je 0x1400bb842
mov rcx, qword [rdi + 0x2e0]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bb864
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bb86f
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bb8f1
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bb8aa
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bb8aa
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bb864
cmp qword [rdi + 0x10], 0x11
jae 0x1400bb8d4
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bb8e2
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400bb887
jmp 0x1400bb8aa
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400bb960
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb0
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bba1a
lea rsi, [rdi + 0x38]
mov qword [rsp + 0x28], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1400b2bd0
mov rax, qword [rdi]
nop dword [rax + rax]
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400bb9c0
test al, 1
je 0x1400bbb51
test al, 2
jne 0x1400bbb6b
test al, 8
jne 0x1400bb9fa
mov qword [rsp + 0x28], 2
lea rdx, [rsp + 0x28]
mov rcx, rsi
call fcn.1400b2bd0
jmp 0x1400bba18
test al, 0x10
je 0x1400bba18
mov rax, qword [rdi + 0xc8]
test rax, rax
je 0x1400bbb85
mov rcx, qword [rdi + 0xc0]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bba39
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400bba3c
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bba9b
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bba6b
lock sub qword [rax], 1
jne 0x1400bba6b
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b7790
mov rax, qword [rdi + 0xc8]
test rax, rax
je 0x1400bba89
mov rcx, qword [rdi + 0xc0]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bbaab
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bbab9
add rsp, 0xb0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bbb3e
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bbaf4
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bbaf4
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bbaab
cmp qword [rdi + 0x10], 0x11
jae 0x1400bbb1e
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bbb2c
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0xb0
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400bbad1
jmp 0x1400bbaf4
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400bc3c0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bc45d
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b36c0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400bc410
test al, 1
je 0x1400bc588
test al, 2
jne 0x1400bc5a2
test al, 8
jne 0x1400bc443
mov rcx, rsi
call fcn.1400b36c0
mov qword [rsi], 2
jmp 0x1400bc45b
test al, 0x10
je 0x1400bc45b
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400bc5bc
mov rcx, qword [rdi + 0x68]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bc47c
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400bc47f
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bc4d8
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bc4ae
lock sub qword [rax], 1
jne 0x1400bc4ae
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b36c0
mov rax, qword [rdi + 0x70]
test rax, rax
je 0x1400bc4c6
mov rcx, qword [rdi + 0x68]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bc4e8
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bc4f3
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bc575
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bc52e
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bc52e
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bc4e8
cmp qword [rdi + 0x10], 0x11
jae 0x1400bc558
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bc566
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400bc50b
jmp 0x1400bc52e
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400bc5e0
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bc67d
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b26c0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400bc630
test al, 1
je 0x1400bc7a8
test al, 2
jne 0x1400bc7c2
test al, 8
jne 0x1400bc663
mov rcx, rsi
call fcn.1400b26c0
mov qword [rsi], 2
jmp 0x1400bc67b
test al, 0x10
je 0x1400bc67b
mov rax, qword [rdi + 0x78]
test rax, rax
je 0x1400bc7dc
mov rcx, qword [rdi + 0x70]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bc69c
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400bc69f
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bc6f8
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bc6ce
lock sub qword [rax], 1
jne 0x1400bc6ce
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b26c0
mov rax, qword [rdi + 0x78]
test rax, rax
je 0x1400bc6e6
mov rcx, qword [rdi + 0x70]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bc708
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bc713
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bc795
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bc74e
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bc74e
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bc708
cmp qword [rdi + 0x10], 0x11
jae 0x1400bc778
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bc786
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400bc72b
jmp 0x1400bc74e
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2
Function at 0x1400bc800
Capabilities:
Encode data using xor

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov ebx, r8d
mov r14, rdx
mov rdi, rcx
mov bpl, 1
test r8b, r8b
je 0x1400bc8a3
lea rsi, [rdi + 0x38]
mov rcx, rsi
call fcn.1400b38a0
mov qword [rdi + 0x38], 1
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm1
mov rax, qword [r14 + 0x20]
mov qword [rdi + 0x60], rax
mov rax, qword [rdi]
nop
mov rcx, rax
xor rcx, 3
lock cmpxchg qword [rdi], rcx
jne 0x1400bc850
test al, 1
je 0x1400bc9d4
test al, 2
jne 0x1400bc9ee
test al, 8
jne 0x1400bc883
mov rcx, rsi
call fcn.1400b38a0
mov qword [rsi], 2
jmp 0x1400bc8a1
test al, 0x10
je 0x1400bc8a1
mov rax, qword [rdi + 0x2e8]
test rax, rax
je 0x1400bca08
mov rcx, qword [rdi + 0x2e0]
call qword [rax + reloc.WS2_32.dll_recv]
xor ebp, ebp
lea rsi, [rdi + 0x30]
cmp qword [rdi + 0x30], 0
je 0x1400bc8c2
mov rcx, rsi
mov rdx, rdi
call fcn.14011bf10
test rax, rax
setne r8b
jmp 0x1400bc8c5
xor r8d, r8d
xor bl, 1
mov rcx, rdi
mov edx, ebx
call fcn.140157490
cmp rax, 0x3f
ja 0x1400bc924
lea rbx, [rdi + 0x38]
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x1400bc8f4
lock sub qword [rax], 1
jne 0x1400bc8f4
mov rcx, rsi
call fcn.1400a4f70
mov rcx, rbx
call fcn.1400b38a0
mov rax, qword [rdi + 0x2e8]
test rax, rax
je 0x1400bc912
mov rcx, qword [rdi + 0x2e0]
call qword [rax + 0x18]
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rdi
call fcn.14021dfcd
test bpl, bpl
je 0x1400bc934
mov eax, dword [r14]
or eax, 2
cmp eax, 2
jne 0x1400bc93f
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret
mov rax, qword [0x1402cee10]
test rax, rax
je 0x1400bc9c1
lea rcx, [0x140142370]
cmp rax, rcx
jne 0x1400bc97a
mov rsi, qword [r14 + 8]
test rsi, rsi
je 0x1400bc97a
mov rcx, rsi
call sub.KERNEL32.dll_DeleteCriticalSection
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
call fcn.14021dfcd
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x20]
mov rcx, rsi
call qword [rdi]
cmp qword [rdi + 8], 0
je 0x1400bc934
cmp qword [rdi + 0x10], 0x11
jae 0x1400bc9a4
call sub.KERNEL32.dll_GetProcessHeap
mov rcx, rax
xor edx, edx
mov r8, rsi
jmp 0x1400bc9b2
call sub.KERNEL32.dll_GetProcessHeap
mov r8, qword [rsi - 8]
mov rcx, rax
xor edx, edx
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
jmp fcn.14021dfcd
call fcn.140142330
lea rcx, [0x140142370]
cmp rax, rcx
je 0x1400bc957
jmp 0x1400bc97a
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x140275c70]
mov edx, 0x23
call fcn.14001f9d0
ud2
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x140275cb0]
mov edx, 0x25
call fcn.14001f9d0
ud2
lea rcx, str.waker_missing
lea r8, str.C:Usersdarkarp.cargo_registry_srcgithub.com_1ecc6299db9ec823_tokio_1.4.0_src_runtime_taskcore.rsunexpected_stage
mov edx, recv
call fcn.140154a10
ud2