joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140003190
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x1400031ce
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003250
sub rdx, 0x10
jo 0x140003286
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400031e1
test byte [rcx + 7], 0x40
je 0x140003270
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003280
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003230
sub rdx, 0x10
jo 0x140003290
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x1400031ce
call sym.deallocShared
jmp 0x1400031e1
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x1400031ce
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x1400032a0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x1400032de
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003360
sub rdx, 0x10
jo 0x140003396
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400032f1
test byte [rcx + 7], 0x40
je 0x140003380
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003390
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003340
sub rdx, 0x10
jo 0x1400033a0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x1400032de
call sym.deallocShared
jmp 0x1400032f1
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x1400032de
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x1400033b0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x1400033ee
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003470
sub rdx, 0x10
jo 0x1400034a6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003401
test byte [rcx + 7], 0x40
je 0x140003490
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400034a0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003450
sub rdx, 0x10
jo 0x1400034b0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x1400033ee
call sym.deallocShared
jmp 0x140003401
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x1400033ee
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x1400034c0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x1400034fe
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003580
sub rdx, 0x10
jo 0x1400035b6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003511
test byte [rcx + 7], 0x40
je 0x1400035a0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400035b0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003560
sub rdx, 0x10
jo 0x1400035c0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x1400034fe
call sym.deallocShared
jmp 0x140003511
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x1400034fe
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x1400035d0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x14000360e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003690
sub rdx, 0x10
jo 0x1400036c6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003621
test byte [rcx + 7], 0x40
je 0x1400036b0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400036c0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003670
sub rdx, 0x10
jo 0x1400036d0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x14000360e
call sym.deallocShared
jmp 0x140003621
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x14000360e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x1400036e0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x14000371e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400037a0
sub rdx, 0x10
jo 0x1400037d6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003731
test byte [rcx + 7], 0x40
je 0x1400037c0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400037d0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003780
sub rdx, 0x10
jo 0x1400037e0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x14000371e
call sym.deallocShared
jmp 0x140003731
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x14000371e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x1400037f0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x14000382e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400038b0
sub rdx, 0x10
jo 0x1400038e6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003841
test byte [rcx + 7], 0x40
je 0x1400038d0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400038e0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003890
sub rdx, 0x10
jo 0x1400038f0
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x14000382e
call sym.deallocShared
jmp 0x140003841
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x14000382e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x140003900
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x14000393e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400039c0
sub rdx, 0x10
jo 0x1400039f6
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003951
test byte [rcx + 7], 0x40
je 0x1400039e0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x1400039f0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400039a0
sub rdx, 0x10
jo 0x140003a00
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x14000393e
call sym.deallocShared
jmp 0x140003951
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x14000393e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x140003a10
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x140003a4e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003ad0
sub rdx, 0x10
jo 0x140003b06
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003a61
test byte [rcx + 7], 0x40
je 0x140003af0
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003b00
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003ab0
sub rdx, 0x10
jo 0x140003b10
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x140003a4e
call sym.deallocShared
jmp 0x140003a61
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x140003a4e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x140003b20
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x140003b5e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003be0
sub rdx, 0x10
jo 0x140003c16
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003b71
test byte [rcx + 7], 0x40
je 0x140003c00
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003c10
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003bc0
sub rdx, 0x10
jo 0x140003c20
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x140003b5e
call sym.deallocShared
jmp 0x140003b71
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x140003b5e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x140003c30
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x140003c6e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003cf0
sub rdx, 0x10
jo 0x140003d26
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003c81
test byte [rcx + 7], 0x40
je 0x140003d10
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003d20
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003cd0
sub rdx, 0x10
jo 0x140003d30
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x140003c6e
call sym.deallocShared
jmp 0x140003c81
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x140003c6e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x140003d40
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x140003d7e
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003e00
sub rdx, 0x10
jo 0x140003e36
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140003d91
test byte [rcx + 7], 0x40
je 0x140003e20
movdqu xmm0, xmmword [rbx + 0x28]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___stdZassertions_u91
mov rax, qword [rbx + 0x38]
test rax, rax
je 0x140003e30
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140003de0
sub rdx, 0x10
jo 0x140003e40
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
call sym.nimDestroyAndDispose
jmp 0x140003d7e
call sym.deallocShared
jmp 0x140003d91
add rsp, 0x30
pop rbx
ret
call sym.raiseOverflow
jmp 0x140003d7e
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow
Function at 0x140004c00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push rsi
push rbx
sub rsp, 0x28
lea rdx, str._.16g
movq r8, xmm1
movapd xmm2, xmm1
mov rbx, rcx
call sym.sprintf.constprop.0
mov rdx, rbx
xor r9d, r9d
cdqe
lea r10, [rbx + rax]
test rax, rax
jg 0x140004c61
jmp 0x140004cf0
mov ecx, r8d
and ecx, 0xffffffdf
sub ecx, 0x41
cmp cl, 0x19
seta cl
cmp r8b, 0x2e
setne r8b
add rdx, 1
and ecx, r8d
xor ecx, 1
or r9d, ecx
cmp r10, rdx
je 0x140004c7d
movzx r8d, byte [rdx]
cmp r8b, 0x2c
jne 0x140004c38
mov byte [rdx], 0x2e
add rdx, 1
mov r9d, 1
cmp r10, rdx
jne 0x140004c61
mov rsi, rax
test r9b, r9b
je 0x140004cf0
movzx ecx, byte [rbx + rax - 1]
mov eax, ecx
and eax, 0xffffffdf
cmp al, 0x4e
je 0x140004d10
lea r8d, [rcx - 0x29]
cmp r8b, 0x3b
ja 0x140004ce5
movabs r9, 0x800000008000001
xor eax, eax
mov edx, 0x6e
bt r9, r8
jae 0x140004d20
lea rcx, [0x140102236]
nop dword [rax + rax]
mov byte [rbx + rax], dl
add rax, 1
movzx edx, byte [rcx + rax]
test dl, dl
jne 0x140004cc0
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x140004ce5
mov esi, 3
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
ret
movzx ecx, byte [rbx + rax - 1]
mov edx, 0x302e
mov byte [rbx + rax + 2], 0
lea rsi, [rax + 2]
mov word [rbx + rax], dx
mov eax, ecx
and eax, 0xffffffdf
cmp al, 0x4e
jne 0x140004c93
mov edx, 0x6e
xor eax, eax
jmp 0x140004cb4
cmp cl, 0x46
jne 0x140004ce5
movzx ecx, byte [rbx]
mov edx, 0x69
xor eax, eax
lea r8, [0x14010223a]
cmp cl, 0x2d
je 0x140004d55
nop dword [rax + rax]
mov byte [rbx + rax], dl
add rax, 1
movzx edx, byte [r8 + rax]
test dl, dl
jne 0x140004d40
jmp 0x140004ccf
lea rdx, str._inf
nop dword [rax]
mov byte [rbx + rax], cl
add rax, 1
movzx ecx, byte [rdx + rax]
test cl, cl
jne 0x140004d60
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
mov eax, 4
cmove rsi, rax
jmp 0x140004ce5

Function at 0x140004fe0
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rbp, qword [0x140123df0]
xor ebx, ebx
mov rdi, qword [rcx]
mov rsi, qword [rcx + 8]
test rdi, rdi
jg 0x14000501f
jmp 0x14000509d
sub rax, 0x10
jo 0x1400050ab
mov qword [rcx - 0x10], rax
add rbx, 1
cmp rdi, rbx
je 0x140005075
mov rcx, qword [rsi + rbx*8 + 8]
test rcx, rcx
je 0x140005016
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x140005008
cmp qword [rdx + 8], 0
jle 0x14000504b
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rsi + rbx*8 + 8]
call fcn.1400befa0
mov rcx, rbp
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x14000507b
mov rcx, qword [rsi + rbx*8 + 8]
mov edx, 8
add rbx, 1
call sym.nimRawDispose
cmp rdi, rbx
jne 0x14000501f
test byte [rsi + 7], 0x40
je 0x140005088
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.alignedDealloc
test rsi, rsi
jne 0x140005075
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
call sym.raiseOverflow
jmp 0x140005016
Function at 0x140005ad0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, rdx
mov qword [rbx], rdx
test rdx, rdx
js 0x140005af8
call sym.allocShared0Impl__system_u1776
mov qword [rbx + 8], rax
add rsp, 0x20
pop rbx
ret
movabs r8, 0x7fffffffffffffff
xor edx, edx
add rsp, 0x20
pop rbx
jmp sym.raiseRangeErrorI

Function at 0x140005e00
Capabilities:
Terminate process

Disassembly:
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x140005e10
jmp sym.deallocShared
ret

Function at 0x140006140
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
pxor xmm0, xmm0
movzx eax, byte [rdx]
mov rbx, qword [rcx + 0x10]
movzx edi, byte [rcx]
mov rbp, qword [rdx + 8]
mov rsi, qword [rdx + 0x10]
movups xmmword [rcx + 1], xmm0
mov byte [rcx], al
mov qword [rcx + 0x10], 0
test al, al
je 0x1400061c0
cmp al, 1
je 0x140006188
test dil, dil
je 0x140006191
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov qword [rcx + 8], rbp
test dil, dil
jne 0x140006179
test rbx, rbx
je 0x140006179
mov rax, qword [rbx - 0x10]
lea rdx, [rbx - 0x10]
cmp rax, 0xf
jbe 0x1400061e0
sub rax, 0x10
jo 0x1400061fd
mov r8, qword [rbx]
xor ecx, ecx
mov qword [rbx - 0x10], rax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.rememberCycle__system_u3375
test rsi, rsi
je 0x1400061d3
mov rax, qword [rsi - 0x10]
add rax, 0x10
jo 0x14000620a
mov qword [rsi - 0x10], rax
mov qword [rcx + 0x10], rsi
mov qword [rcx + 8], rbp
jmp 0x140006174
mov r8, qword [rbx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.nimDestroyAndDispose
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.raiseOverflow
mov qword [rsp + 0x28], rcx
call sym.raiseOverflow
mov rcx, qword [rsp + 0x28]
jmp 0x1400061d3

Function at 0x140006260
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
cmp byte [rcx], 0
mov rbx, rcx
je 0x140006278
add rsp, 0x20
pop rbx
ret
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000626d
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400062b0
sub rdx, 0x10
jo 0x1400062ce
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x10]
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x140006490
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
xor esi, esi
mov rbp, qword [rcx + 8]
mov rdi, qword [rcx]
lea rbx, [rbp + 0x18]
test rdi, rdi
jg 0x1400064bd
jmp 0x140006500
add rsi, 1
add rbx, 0x18
cmp rdi, rsi
je 0x140006500
cmp byte [rbx - 0x10], 0
jne 0x1400064b0
mov rax, qword [rbx]
test rax, rax
je 0x1400064b0
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x140006518
sub rdx, 0x10
jo 0x14000654d
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
add rsi, 1
xor ecx, ecx
add rbx, 0x18
call sym.rememberCycle__system_u3375
cmp rdi, rsi
jne 0x1400064bd
nop dword [rax]
test rbp, rbp
je 0x14000650b
test byte [rbp + 7], 0x40
je 0x140006538
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx]
call sym.nimDestroyAndDispose
jmp 0x1400064b0
mov edx, 8
mov rcx, rbp
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.alignedDealloc
call sym.raiseOverflow
jmp 0x1400064b0

Function at 0x140006d40
Capabilities:
Read file on windows

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x20
mov rdi, rcx
mov rcx, rdx
mov edx, 1
mov rsi, r8
mov r9, rdi
call sym.fread
mov rbx, rax
cmp rsi, rax
je 0x140006d71
mov rcx, rdi
call sym.ferror
test eax, eax
jne 0x140006d80
mov rax, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
ret
mov rcx, rdi
call sym.checkErr__stdZsyncio_u165.part.0
mov rax, rbx
add rsp, 0x20
pop rbx
pop rsi
pop rdi
ret

Function at 0x1400077d0
Capabilities:
Write file on windows

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
mov rcx, rdx
mov edx, 1
mov r9, rbx
call sym.fwrite
mov rcx, rbx
mov rsi, rax
call sym.ferror
test eax, eax
je 0x140007800
mov rcx, rbx
call sym.checkErr__stdZsyncio_u165.part.0
mov rax, rsi
add rsp, 0x28
pop rbx
pop rsi
ret