joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400f80a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
mov eax, 0x1028
call fcn.140196170
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xf98], 0xfffffffffffffffe
mov rax, qword [rcx]
nop word cs:[rax + rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f80d0
test al, 1
je 0x1400f8189
test al, 2
jne 0x1400f81a1
test al, 8
mov qword [rbp + 0xf80], rcx
jne 0x1400f8110
add rcx, 0x20
mov qword [rbp - 0x60], 4
lea rdx, [rbp - 0x60]
call fcn.1400e25d0
jmp 0x1400f8135
test al, 0x10
je 0x1400f8135
mov rcx, qword [rbp + 0xf80]
mov rax, qword [rcx + 0xfc0]
test rax, rax
je 0x1400f8241
mov rcx, qword [rcx + 0xfc8]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0xf80]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178670
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xf78], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0xf78]
jb 0x1400f81b9
jne 0x1400f817e
mov rcx, rsi
call fcn.1400f6220
nop
add rsp, 0x1028
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0xf70], rax
lea rax, [rbp + 0xf70]
mov qword [rbp + 0xf50], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0xf58], rax
lea rcx, [rbp + 0xf78]
mov qword [rbp + 0xf60], rcx
mov qword [rbp + 0xf68], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0xf20], rax
mov qword [rbp + 0xf28], 2
mov qword [rbp + 0xf40], 0
lea rax, [rbp + 0xf50]
mov qword [rbp + 0xf30], rax
mov qword [rbp + 0xf38], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0xf20]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x60]
call fcn.140198250
ud2
Function at 0x1400f83b0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x158
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc8], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f83d0
test al, 1
je 0x1400f8489
test al, 2
jne 0x1400f84a1
test al, 8
mov qword [rbp + 0xb0], rcx
jne 0x1400f8410
add rcx, 0x20
mov qword [rbp - 0x58], 3
lea rdx, [rbp - 0x58]
call fcn.1400e46d0
jmp 0x1400f8435
test al, 0x10
je 0x1400f8435
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx + 0xe8]
test rax, rax
je 0x1400f852f
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0xb0]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178ae0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xa8], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0xa8]
jb 0x1400f84b9
jne 0x1400f847e
mov rcx, rsi
call fcn.1400f3dd0
nop
add rsp, 0x158
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x80], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x88], rax
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x90], rcx
mov qword [rbp + 0x98], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], 2
mov qword [rbp + 0x70], 0
lea rax, [rbp + 0x80]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x50]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x58]
call fcn.140198250
ud2
Function at 0x1400f8690
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x348
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2b8], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f86b0
test al, 1
je 0x1400f8769
test al, 2
jne 0x1400f8781
test al, 8
mov qword [rbp + 0x2a0], rcx
jne 0x1400f86f0
add rcx, 0x20
mov qword [rbp - 0x60], 4
lea rdx, [rbp - 0x60]
call fcn.1400e3540
jmp 0x1400f8715
test al, 0x10
je 0x1400f8715
mov rcx, qword [rbp + 0x2a0]
mov rax, qword [rcx + 0x2e0]
test rax, rax
je 0x1400f8821
mov rcx, qword [rcx + 0x2e8]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0x2a0]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178670
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x298], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0x298]
jb 0x1400f8799
jne 0x1400f875e
mov rcx, rsi
call fcn.1400f4080
nop
add rsp, 0x348
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0x290], rax
lea rax, [rbp + 0x290]
mov qword [rbp + 0x270], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0x298]
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x288], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], 2
mov qword [rbp + 0x260], 0
lea rax, [rbp + 0x270]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x240]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x60]
call fcn.140198250
ud2
Function at 0x1400f8990
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x298
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x208], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f89b0
test al, 1
je 0x1400f8a69
test al, 2
jne 0x1400f8a81
test al, 8
mov qword [rbp + 0x1f0], rcx
jne 0x1400f89f0
add rcx, 0x20
mov qword [rbp - 0x58], 7
lea rdx, [rbp - 0x58]
call fcn.1400e3a60
jmp 0x1400f8a15
test al, 0x10
je 0x1400f8a15
mov rcx, qword [rbp + 0x1f0]
mov rax, qword [rcx + 0x228]
test rax, rax
je 0x1400f8b21
mov rcx, qword [rcx + 0x230]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0x1f0]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178ae0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x1e8], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0x1e8]
jb 0x1400f8a99
jne 0x1400f8a5e
mov rcx, rsi
call fcn.1400f6560
nop
add rsp, 0x298
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0x1e0], rax
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x1c0], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x1c8], rax
lea rcx, [rbp + 0x1e8]
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1d8], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 2
mov qword [rbp + 0x1b0], 0
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x190]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x58]
call fcn.140198250
ud2
Function at 0x1400f8c90
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0xd8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x48], 0xfffffffffffffffe
mov rax, qword [rcx]
nop dword [rax]
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f8cb0
test al, 1
je 0x1400f8d50
test al, 2
jne 0x1400f8d68
test al, 8
mov qword [rbp + 0x30], rcx
jne 0x1400f8ce9
add rcx, 0x20
mov byte [rbp - 0x10], 5
lea rdx, [rbp - 0x30]
call fcn.1400e4110
jmp 0x1400f8d05
test al, 0x10
je 0x1400f8d05
mov rcx, qword [rbp + 0x30]
mov rax, qword [rcx + 0x68]
test rax, rax
je 0x1400f8ddd
mov rcx, qword [rcx + 0x70]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0x30]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178670
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x28], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0x28]
jb 0x1400f8d80
jne 0x1400f8d45
mov rcx, rsi
call fcn.1400f3ad0
nop
add rsp, 0xd8
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x20]
mov qword [rbp], rax
lea rax, [fcn.140023700]
mov qword [rbp + 8], rax
lea rcx, [rbp + 0x28]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rax
lea rax, str.current:___sub:_X_
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 2
mov qword [rbp - 0x40], 0
mov rax, rbp
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp - 0x60]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x20], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x30]
call fcn.140198250
ud2
Function at 0x1400f8f20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x348
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2b8], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f8f40
test al, 1
je 0x1400f8ff9
test al, 2
jne 0x1400f9011
test al, 8
mov qword [rbp + 0x2a0], rcx
jne 0x1400f8f80
add rcx, 0x20
mov qword [rbp - 0x60], 4
lea rdx, [rbp - 0x60]
call fcn.1400e3540
jmp 0x1400f8fa5
test al, 0x10
je 0x1400f8fa5
mov rcx, qword [rbp + 0x2a0]
mov rax, qword [rcx + 0x2e0]
test rax, rax
je 0x1400f90b1
mov rcx, qword [rcx + 0x2e8]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0x2a0]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178ae0
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x298], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0x298]
jb 0x1400f9029
jne 0x1400f8fee
mov rcx, rsi
call fcn.1400f5860
nop
add rsp, 0x348
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0x290], rax
lea rax, [rbp + 0x290]
mov qword [rbp + 0x270], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0x298]
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x288], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], 2
mov qword [rbp + 0x260], 0
lea rax, [rbp + 0x270]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x240]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x60]
call fcn.140198250
ud2
Function at 0x1400f9220
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x158
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xc8], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f9240
test al, 1
je 0x1400f92f9
test al, 2
jne 0x1400f9311
test al, 8
mov qword [rbp + 0xb0], rcx
jne 0x1400f9280
add rcx, 0x20
mov qword [rbp - 0x58], 3
lea rdx, [rbp - 0x58]
call fcn.1400e46d0
jmp 0x1400f92a5
test al, 0x10
je 0x1400f92a5
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx + 0xe8]
test rax, rax
je 0x1400f939f
mov rcx, qword [rcx + 0xf0]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0xb0]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178670
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0xa8], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0xa8]
jb 0x1400f9329
jne 0x1400f92ee
mov rcx, rsi
call fcn.1400f6680
nop
add rsp, 0x158
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0xa0], rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x80], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x88], rax
lea rcx, [rbp + 0xa8]
mov qword [rbp + 0x90], rcx
mov qword [rbp + 0x98], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], 2
mov qword [rbp + 0x70], 0
lea rax, [rbp + 0x80]
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x50]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x58]
call fcn.140198250
ud2
Function at 0x1400f9500
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
sub rsp, 0x128
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x98], 0xfffffffffffffffe
mov rax, qword [rcx]
nop
mov rdx, rax
xor rdx, 3
lock cmpxchg qword [rcx], rdx
jne 0x1400f9520
test al, 1
je 0x1400f95cf
test al, 2
jne 0x1400f95e7
test al, 8
mov qword [rbp + 0x80], rcx
jne 0x1400f955c
add rcx, 0x20
mov byte [rbp + 0x18], 4
lea rdx, [rbp - 0x58]
call fcn.1400e49c0
jmp 0x1400f9581
test al, 0x10
je 0x1400f9581
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx + 0xb8]
test rax, rax
je 0x1400f965d
mov rcx, qword [rcx + 0xc0]
call qword [rax + 0x10]
mov rsi, qword [rbp + 0x80]
mov rcx, qword [rsi + 0x20]
mov rdx, rsi
call fcn.140178670
cmp rax, 1
mov eax, 2
sbb rax, 0
mov qword [rbp + 0x78], rax
shl eax, 6
neg rax
lock xadd qword [rsi], rax
shr rax, 6
cmp rax, qword [rbp + 0x78]
jb 0x1400f95ff
jne 0x1400f95c4
mov rcx, rsi
call fcn.1400f4e10
nop
add rsp, 0x128
pop rsi
pop rbp
ret
lea rcx, str.assertion_failed:_prev.is_running__
lea r8, [0x1401e2400]
mov edx, 0x23
call fcn.140198330
lea rcx, str.assertion_failed:__prev.is_complete__
lea r8, [0x1401e2440]
mov edx, 0x25
call fcn.140198330
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x70]
mov qword [rbp + 0x50], rax
lea rax, [fcn.140023700]
mov qword [rbp + 0x58], rax
lea rcx, [rbp + 0x78]
mov qword [rbp + 0x60], rcx
mov qword [rbp + 0x68], rax
lea rax, str.current:___sub:_X_
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], 2
mov qword [rbp + 0x40], 0
lea rax, [rbp + 0x50]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 2
lea rdx, [0x1401e2488]
lea rcx, [rbp + 0x20]
call fcn.140198250
lea rax, str.waker_missing
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
lea rax, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001fwidestring_1.0.2_srcucstring.rs
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
lea rdx, str.C:Users_fhnir.cargo_registry_srcindex.crates.io_6f17d22bba15001f_tokio_1.36.0_src_runtime_taskcore.rs
lea rcx, [rbp - 0x58]
call fcn.140198250
ud2
Function at 0x1401288f0
Capabilities:
Get remote cert context via schannel

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov qword [rbp], 0xfffffffffffffffe
mov rsi, rcx
lea rcx, [rdx + 0xf0]
mov qword [rbp - 8], 0
lea r8, [rbp - 8]
mov edx, 0x53
call qword [sym.imp.secur32.dll_QueryContextAttributesW]
test eax, eax
je 0x14012894f
mov rcx, rax
shl rcx, 0x20
or rcx, 2
cmp eax, 0x8009030e
call fcn.1400893f0
movabs rdi, 0x8000000000000000
jmp 0x1401289a8
mov r15, qword [rbp - 8]
mov r14, qword [r15 + 8]
mov edi, dword [r15 + 0x10]
test rdi, rdi
je 0x14012898c
movzx eax, byte [0x140262330]
xor ecx, ecx
mov rdx, rdi
call fcn.140162ad0
mov rbx, rax
test rax, rax
jne 0x140128991
mov qword [rbp - 0x10], r15
mov ecx, 1
mov rdx, rdi
call fcn.140197e40
ud2
mov ebx, 1
mov rcx, rbx
mov rdx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r15
call qword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov qword [rsi], rdi
mov qword [rsi + 8], rbx
mov qword [rsi + 0x10], rdi
add rsp, 0x38
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
Function at 0x14014fa70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rdx
sub rdx, rcx
cmp rdx, 0x20
jae fcn.140023b30
cmp rax, rcx
je 0x14014fa95
cmp rdx, 4
jae 0x14014fa98
xor eax, eax
xor r8d, r8d
jmp 0x14014fb30
xor eax, eax
ret
mov r8d, edx
and r8d, 0x1c
pxor xmm0, xmm0
xor eax, eax
movdqa xmm2, xmmword [0x1401a37e0]
movdqa xmm3, xmmword [0x1401a37f0]
pxor xmm1, xmm1
nop dword [rax]
movzx r9d, word [rcx + rax]
movd xmm4, r9d
movzx r9d, word [rcx + rax + 2]
movd xmm5, r9d
pcmpgtb xmm4, xmm2
punpcklbw xmm4, xmm4
pshuflw xmm4, xmm4, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm0, xmm4
pcmpgtb xmm5, xmm2
punpcklbw xmm5, xmm5
pshuflw xmm4, xmm5, 0xd4
pshufd xmm4, xmm4, 0xd4
pand xmm4, xmm3
paddq xmm1, xmm4
add rax, 4
cmp r8, rax
jne 0x14014fac0
paddq xmm1, xmm0
pshufd xmm0, xmm1, 0xee
paddq xmm0, xmm1
movq rax, xmm0
cmp r8, rdx
je 0x14014fb47
nop dword [rax]
xor r9d, r9d
cmp byte [rcx + r8], 0xc0
setge r9b
add rax, r9
inc r8
cmp rdx, r8
jne 0x14014fb30
ret
Function at 0x140156e40
Capabilities:
Create tcp socket
Create udp socket

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x90], 0xfffffffffffffffe
mov r15, rcx
lea rdi, str.127.0.0.1:34254could_not_resolve_to_any_addresses
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], 0xf
lea rcx, [rbp + 0x70]
call fcn.1400261b0
test al, 1
je 0x1401571af
mov rsi, qword [rbp + 0x78]
test rsi, rsi
je 0x1401571a0
mov rcx, qword [rbp + 0x70]
lea rdx, [rsi - 1]
movzx r8d, byte [rcx]
inc rcx
mov qword [rbp + 0x70], rcx
mov qword [rbp + 0x78], rdx
cmp r8b, 0x3a
jne 0x1401571a0
mov dword [rbp + 0x38], 0xa
mov qword [rbp + 0x28], 0
mov byte [rbp + 0x3c], 1
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x28]
mov rbx, rax
call fcn.140026ce0
mov ecx, eax
mov rax, rbx
cmp cx, 1
je 0x140156ef6
mov qword [rbp + 0x78], rsi
test cx, cx
je 0x1401571af
movabs rcx, 0xffffffff00
and rax, rcx
shr rax, 8
movzx ecx, dx
shl rcx, 0x30
shl rax, 0x10
or rax, rcx
mov ecx, 1
or rcx, rax
cmp cx, 1
jne 0x1401571c0
cmp qword [rbp + 0x78], 0
jne 0x1401571d3
mov rsi, rax
mov eax, dword [rbp - 0x24]
mov dword [rbp + 0x10], eax
mov rax, qword [rbp - 0x2c]
mov qword [rbp + 8], rax
movzx eax, byte [0x140262330]
mov edx, 0x20
xor ecx, ecx
call fcn.140162ad0
test rax, rax
je 0x1401573f2
mov word [rax], 0
mov rdx, rsi
shr rdx, 0x10
and rdx, 0xffffffffffffff00
mov ecx, esi
shr ecx, 0x10
movzx ecx, cl
or rcx, rdx
shr rsi, 0x30
mov word [rax + 6], si
mov dword [rax + 2], ecx
mov rcx, qword [rbp + 8]
mov qword [rax + 8], rcx
mov ecx, dword [rbp + 0x10]
mov dword [rax + 0x10], ecx
mov dword [rax + 0x14], 0
mov rcx, rax
add rcx, 0x20
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], 1
mov qword [rbp], rcx
xor ecx, ecx
mov qword [rbp + 0x78], rsi
test cx, cx
jne 0x140156ef6
xor eax, eax
xor ecx, ecx
or rcx, rax
cmp cx, 1
je 0x140156f27
movzx eax, cx
test eax, eax
jne 0x1401571d3
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], 0xf
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], 0xf
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x48], 1
movabs rax, 0x3a0000003a
mov ecx, 4
mov edx, 0x20
call fcn.140197e40
int3

Function at 0x14015ce90
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
movzx r9d, byte [rdx + 0x38]
movzx eax, byte [rdx + 0x3a]
test al, al
setne r8b
Function at 0x1401619b0
Capabilities:
Resolve dns

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x1e8
mov rax, rdx
mov rsi, rcx
mov rdx, qword [rdx]
mov rbx, qword [rax + 8]
movzx edi, word [rax + 0x10]
mov rax, qword [0x140262278]
cmp rax, 3
jne 0x140161b7b
cmp rbx, 0x17f
ja 0x140161b93
lea r14, [rsp + 0x68]
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x68], 0
lea rax, [rbx + 1]
cmp rbx, 0xe
ja 0x140161a28
xor edx, edx
nop dword [rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x140161ae4
inc rdx
cmp rax, rdx
jne 0x140161a10
jmp 0x140161b44
lea rcx, [rsp + 0x6f]
and rcx, 0xfffffffffffffff8
sub rcx, r14
je 0x140161a5e
xor edx, edx
nop dword [rax + rax]
cmp byte [rsp + rdx + 0x68], 0
je 0x140161ae4
inc rdx
cmp rcx, rdx
jne 0x140161a40
lea rdx, [rbx - 0xf]
cmp rcx, rdx
jbe 0x140161a62
jmp 0x140161aae
lea rdx, [rbx - 0xf]
movdqa xmm0, xmmword [0x1401a36c0]
movabs r8, 0x8080808080808080
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rsp + rcx + 0x68]
movdqa xmm2, xmm1
paddq xmm2, xmm0
pandn xmm1, xmm2
pshufd xmm2, xmm1, 0xee
por xmm2, xmm1
movq r9, xmm2
test r9, r8
jne 0x140161aae
add rcx, 0x10
cmp rcx, rdx
jbe 0x140161a80
sub rax, rcx
je 0x140161b44
lea r8, [rsp + rcx]
add r8, 0x68
xor edx, edx
nop word cs:[rax + rax]
cmp byte [r8 + rdx], 0
je 0x140161ae1
inc rdx
cmp rax, rdx
jne 0x140161ad0
jmp 0x140161b44
add rdx, rcx
cmp rdx, rbx
jne 0x140161b44
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x68]
lea r8, [rsp + 0x30]
lea r9, [rsp + 0x28]
xor edx, edx
call qword [sym.imp.ws2_32.dll_getaddrinfo]
test eax, eax
je 0x140161b58
call qword [sym.imp.ws2_32.dll_WSAGetLastError]
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov eax, 1
jmp 0x140161b6b
lea rax, str.file_name_contained_an_unexpected_NUL_byte
mov qword [rsi + 8], rax
mov qword [rsi], 1
jmp 0x140161b6e
mov rax, qword [rsp + 0x28]
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rax
mov word [rsi + 0x18], di
xor eax, eax
mov qword [rsi], rax
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
ret
mov r14, rdx
call fcn.1401a0c40
mov rdx, r14
cmp rbx, 0x17f
jbe 0x1401619eb
mov rcx, rsi
mov r8, rbx
mov r9d, edi
add rsp, 0x1e8
pop rbx
pop rdi
pop rsi
pop r14
jmp fcn.1401a0cb0