joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400c3c40
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rax, qword [rcx + 0x10]
mov rbx, rcx
test rax, rax
je 0x1400c3d10
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
ja 0x1400c3cc8
mov rdx, rcx
lea r8, fcn.1400bdca0
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rsi, qword [rbx + 0x10]
mov rax, qword [rsi + 8]
test rax, rax
je 0x1400c3cb2
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400c3cf0
sub rdx, 0x10
jo 0x1400c3d22
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rsi, qword [rbx + 0x10]
mov edx, 8
mov rcx, rsi
add rsp, 0x28
pop rbx
pop rsi
jmp sym.nimRawDispose
sub rdx, 0x10
jo 0x1400c3d17
mov qword [rax - 0x10], rdx
lea r8, fcn.1400bdca0
mov rdx, rcx
xor ecx, ecx
add rsp, 0x28
pop rbx
pop rsi
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rsi + 8]
call sym.nimDestroyAndDispose
mov rsi, qword [rbx + 0x10]
jmp 0x1400c3cb2
add rsp, 0x28
pop rbx
pop rsi
ret
add rsp, 0x28
pop rbx
pop rsi
jmp sym.raiseOverflow
call sym.raiseOverflow
mov rsi, qword [rbx + 0x10]
jmp 0x1400c3cb2

Function at 0x1400c3d30
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400c3d88
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400c3d68
sub rax, 0x10
jo 0x1400c3d8e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400c42f0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400c4348
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400c4328
sub rax, 0x10
jo 0x1400c434e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400c44b0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400c4508
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400c44e8
sub rax, 0x10
jo 0x1400c450e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400c47a0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 8]
mov rbx, rcx
test rax, rax
je 0x1400c4800
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400c47e0
sub rdx, 0x10
jo 0x1400c4806
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 8]
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400cab80
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
movdqu xmm0, xmmword [rcx + 0x38]
lea rsi, [rsp + 0x20]
mov rbx, rcx
movaps xmmword [rsp + 0x20], xmm0
mov rcx, rsi
call sym.eqdestroy___system_u3732
movdqu xmm1, xmmword [rbx + 0x48]
mov rcx, rsi
movaps xmmword [rsp + 0x20], xmm1
call sym.eqdestroy___system_u3732
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x1400cabc1
test byte [rcx + 7], 0x40
je 0x1400cabf0
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x1400cabd3
test byte [rcx + 7], 0x40
je 0x1400cabe0
add rsp, 0x38
pop rbx
pop rsi
ret
add rsp, 0x38
pop rbx
pop rsi
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400cabc1

Function at 0x1400cac00
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
movdqu xmm0, xmmword [rcx + 0x38]
lea rsi, [rsp + 0x20]
mov rbx, rcx
movaps xmmword [rsp + 0x20], xmm0
mov rcx, rsi
call sym.eqdestroy___system_u3732
movdqu xmm1, xmmword [rbx + 0x48]
mov rcx, rsi
movaps xmmword [rsp + 0x20], xmm1
call sym.eqdestroy___system_u3732
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x1400cac41
test byte [rcx + 7], 0x40
je 0x1400cac70
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x1400cac53
test byte [rcx + 7], 0x40
je 0x1400cac60
add rsp, 0x38
pop rbx
pop rsi
ret
add rsp, 0x38
pop rbx
pop rsi
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400cac41
Function at 0x1400cac80
Capabilities:
Terminate process

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rsi, qword [rsp + 0x90]
mov r12, qword [rcx]
mov r13, qword [rcx + 8]
mov r10, qword [r8]
lea rdi, [rsi + 0x10]
mov eax, esi
mov r11, qword [r8 + 8]
mov qword [rsi + 8], 0
mov qword [rsi + 0x80], 0
and rdi, 0xfffffffffffffff8
sub eax, edi
lea rbp, [rsp + 0x20]
mov ebx, r9d
lea ecx, [rax + 0x88]
xor eax, eax
shr ecx, 3
rep stosq qword [rdi], rax
lea rax, sym.rttiDestroy__pureZparseopt_u426
lea rcx, [rsi + 0x38]
mov qword [rsi], rax
movdqu xmm1, xmmword [rdx]
movups xmmword [rsi + 0x12], xmm1
movdqu xmm2, xmmword [rdx + 0x10]
mov rdx, rbp
movups xmmword [rsi + 0x22], xmm2
mov qword [rsp + 0x20], r10
mov qword [rsp + 0x28], r11
call sym.eqsink___system_u3741
mov byte [rsi + 0x11], bl
test r12, r12
je 0x1400cae00
js 0x1400cade0
mov rdx, r12
mov rcx, rbp
mov edi, 8
xor ebx, ebx
call sym.newSeq__stdZsyncio_u711
lea rcx, [rsi + 0x48]
mov rdx, rbp
call sym.eqsink___system_u3741
nop dword [rax + rax]
mov rdx, qword [rsi + 0x48]
cmp rdx, rbx
jle 0x1400cadc0
mov rax, rbx
mov rdx, rbp
add rbx, 1
shl rax, 4
movdqu xmm0, xmmword [rax + r13 + 8]
movaps xmmword [rsp + 0x20], xmm0
mov rcx, qword [rsi + 0x50]
add rcx, rdi
add rdi, 0x10
call sym.eqcopy___stdZassertions_u30
cmp rbx, r12
jne 0x1400cad40
mov byte [rsi + 0x60], 0
movdqa xmm3, xmmword [0x14011f580]
lea rcx, [rsi + 0x68]
mov rdx, rbp
movaps xmmword [rsp + 0x20], xmm3
call sym.eqsink___stdZassertions_u36
movdqa xmm4, xmmword [0x14011f580]
lea rcx, [rsi + 0x78]
mov rdx, rbp
movaps xmmword [rsp + 0x20], xmm4
call sym.eqsink___stdZassertions_u36
nop
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
sub rdx, 1
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseIndexError2
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, r12
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseRangeErrorI
call sym.nosparamCount
mov rcx, qword [0x140123df0]
mov rbx, rax
call dbg.__emutls_get_address
cmp byte [rax], 0
mov r12, rax
jne 0x1400cadaf
test rbx, rbx
js 0x1400caed2
mov rdx, rbx
mov rcx, rbp
call sym.newSeq__stdZsyncio_u711
lea rcx, [rsi + 0x48]
mov rdx, rbp
call sym.eqsink___system_u3741
call sym.nosparamCount
cmp byte [r12], 0
mov r13, rax
jne 0x1400cadaf
test rax, rax
jle 0x1400cad78
xor edi, edi
xor eax, eax
mov ebx, 1
jmp 0x1400caebc
mov rax, qword [rsi + 0x48]
test rdi, rdi
js 0x1400caee6
cmp rdi, rax
jge 0x1400caee6
mov rdx, rbx
mov rcx, rbp
call sym.nosparamStr
cmp byte [r12], 0
jne 0x1400cadaf
mov rax, qword [rsi + 0x50]
shl rdi, 4
mov rdx, rbp
lea rcx, [rax + rdi + 8]
call sym.eqsink___stdZassertions_u36
add rbx, 1
jo 0x1400caec1
cmp rbx, r13
jg 0x1400cad78
mov rdi, rbx
xor eax, eax
add rdi, 0xffffffffffffffff
seto al
test rax, rax
je 0x1400cae68
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseOverflow
movabs r8, 0x7fffffffffffffff
xor edx, edx
mov rcx, rbx
jmp 0x1400cadef
lea rdx, [rax - 1]
mov rcx, rdi
jmp 0x1400cadc7
Function at 0x1400cb7d0
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
test rcx, rcx
je 0x1400cb7f5
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400cb800
sub rax, 0x10
jo 0x1400cb84c
mov qword [rcx - 0x10], rax
add rsp, 0x38
pop rbx
pop rsi
ret
movdqu xmm0, xmmword [rcx]
lea rsi, [rsp + 0x20]
mov rcx, rsi
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___system_u3732
movdqu xmm1, xmmword [rbx + 0x10]
mov rcx, rsi
movaps xmmword [rsp + 0x20], xmm1
call sym.eqdestroy___OOZlibZargs_u195
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400cb7f5
mov edx, 8
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
jmp sym.nimRawDispose
add rsp, 0x38
pop rbx
pop rsi
jmp sym.raiseOverflow

Function at 0x1400cc100
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, rcx
test rcx, rcx
je 0x1400cc124
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400cc130
sub rax, 0x10
jo 0x1400cc166
mov qword [rcx - 0x10], rax
add rsp, 0x30
pop rbx
ret
movdqu xmm0, xmmword [rcx]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___OOZlibZargs_u195
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400cc124
mov edx, 8
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp sym.nimRawDispose
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x1400cc950
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x1400cc967
test byte [rcx + 7], 0x40
je 0x1400cc9e0
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x1400cc999
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400cc9c0
sub rdx, 0x10
jo 0x1400cca07
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x78]
test rcx, rcx
je 0x1400cc9a8
test byte [rcx + 7], 0x40
je 0x1400cca00
mov rcx, qword [rbx + 0x88]
test rcx, rcx
je 0x1400cc9ba
test byte [rcx + 7], 0x40
je 0x1400cc9f0
add rsp, 0x20
pop rbx
ret
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
call sym.nimDestroyAndDispose
jmp 0x1400cc999
call sym.deallocShared
jmp 0x1400cc967
add rsp, 0x20
pop rbx
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400cc9a8
call sym.raiseOverflow
jmp 0x1400cc999

Function at 0x1400cca10
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
movzx eax, byte [rcx + 8]
mov rbx, rcx
cmp al, 3
ja 0x1400cca70
cmp al, 1
ja 0x1400cca40
jne 0x1400cca35
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1400cca35
test byte [rcx + 7], 0x40
je 0x1400cca63
add rsp, 0x20
pop rbx
ret
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x1400cca54
test byte [rcx + 7], 0x40
jne 0x1400cca54
call sym.deallocShared
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x1400cca35
test byte [rcx + 7], 0x40
jne 0x1400cca35
add rsp, 0x20
pop rbx
jmp sym.deallocShared
cmp al, 4
je 0x1400cca26
add rsp, 0x20
pop rbx
ret
Function at 0x1400ce0d0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x1400ce0e7
test byte [rcx + 7], 0x40
je 0x1400ce160
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x1400ce119
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400ce140
sub rdx, 0x10
jo 0x1400ce187
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x78]
test rcx, rcx
je 0x1400ce128
test byte [rcx + 7], 0x40
je 0x1400ce180
mov rcx, qword [rbx + 0x88]
test rcx, rcx
je 0x1400ce13a
test byte [rcx + 7], 0x40
je 0x1400ce170
add rsp, 0x20
pop rbx
ret
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
call sym.nimDestroyAndDispose
jmp 0x1400ce119
call sym.deallocShared
jmp 0x1400ce0e7
add rsp, 0x20
pop rbx
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400ce128
call sym.raiseOverflow
jmp 0x1400ce119
Function at 0x1400ce330
Capabilities:
Terminate process

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rbx, qword [rcx + 8]
mov rsi, rdx
mov r12, rcx
mov rdx, qword [rcx + 0x10]
test rbx, rbx
js 0x1400ce3ef
lea rdi, [rsi + 8]
lea rbp, [0x14011fcc0]
jmp 0x1400ce3a0
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rax + 8], 0
mov rax, qword [rsi + 8]
add rax, 1
jo 0x1400ce3e0
mov qword [rsi + 8], rax
mov rdx, qword [r12 + 0x10]
cmp rdx, rbx
jle 0x1400ce3ef
mov rax, qword [r12 + 0x18]
movzx eax, byte [rax + rbx + 8]
mov ecx, eax
and eax, 7
shr cl, 3
movzx ecx, cl
movzx ecx, byte [rbp + rcx]
bt ecx, eax
jae 0x1400ce410
cmp rbx, rdx
jge 0x1400ce3ef
mov rax, qword [r12 + 0x18]
mov edx, 1
mov rcx, rdi
movzx r13d, byte [rax + rbx + 8]
call sym.prepareAdd
mov rdx, qword [rsi + 0x10]
mov rax, qword [rsi + 8]
mov byte [rdx + rax + 8], r13b
mov rax, qword [rsi + 8]
xor edx, edx
add rax, 1
seto dl
add rbx, 1
test rdx, rdx
je 0x1400ce360
call sym.raiseOverflow
mov rdx, qword [r12 + 0x10]
cmp rdx, rbx
jg 0x1400ce381
sub rdx, 1
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseIndexError2
mov rdx, qword [rsi + 8]
mov rbp, qword [0x140123df0]
test rdx, rdx
jle 0x1400ce492
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x1400ce43b
test byte [rax + 7], 0x40
je 0x1400ce43b
mov rcx, rdi
call sym.nimPrepareStrMutationImpl__system_u2390
mov rdx, qword [rsi + 8]
mov rcx, rdx
sub rcx, 1
jo 0x1400ce4ec
test rcx, rcx
js 0x1400ce4b0
cmp rcx, rdx
jge 0x1400ce4b0
mov rax, qword [rsi + 0x10]
lea r13, [rax + rcx + 8]
mov rcx, rbp
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400ce49a
cmp byte [r13], 0x20
jne 0x1400ce492
mov rcx, qword [rsi + 8]
sub rcx, 1
jo 0x1400ce4db
test rcx, rcx
js 0x1400ce4be
mov rdx, rcx
mov rcx, rdi
call sym.setLengthStrV2
mov rdx, qword [rsi + 8]
test rdx, rdx
jg 0x1400ce420
mov qword [r12 + 8], rbx
mov byte [rsi], 2
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
sub rdx, 1
call sym.raiseIndexError2
xor r13d, r13d
jmp 0x1400ce45b
movabs r8, 0x7fffffffffffffff
xor edx, edx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseRangeErrorI
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp sym.raiseOverflow
call sym.raiseOverflow
jmp 0x1400ce4b9
Function at 0x1400cef20
Capabilities:
Terminate process

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x30
mov byte [rdx], 0
lea rdi, [rdx + 8]
mov rbx, rcx
mov rsi, rdx
mov rcx, rdi
xor edx, edx
call sym.setLengthStrV2
mov rcx, rbx
call sym.skip__pureZparsecfg_u279
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400cf002
mov rcx, qword [rbx + 8]
mov rdx, qword [rbx + 0x10]
test rcx, rcx
js 0x1400cefb8
cmp rcx, rdx
jge 0x1400cefb8
mov r8, qword [rbx + 0x18]
movzx eax, byte [r8 + rcx + 8]
cmp al, 0x5d
jg 0x1400cefa0
cmp al, 0x39
jle 0x1400cefd0
sub eax, 0x3a
cmp al, 0x23
ja case.0x1400cef9b.1
lea r9, [0x14011f7fc]
movzx eax, al
movsxd rax, dword [r9 + rax*4]
add rax, r9
jmp rax
cmp al, 0x72
jne case.0x1400cef9b.1
add rcx, 1
cmp rdx, rcx
jg 0x1400cf160
nop dword [rax]
sub rdx, 1
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp sym.raiseIndexError2
cmp al, 0x22
je 0x1400cf148
cmp al, 0x2d
je 0x1400cf100
test al, al
jne case.0x1400cef9b.1
mov byte [rsi], 1
movdqa xmm4, xmmword [0x14011fb30]
lea rdx, [rsp + 0x20]
mov rcx, rdi
movaps xmmword [rsp + 0x20], xmm4
call sym.eqsink___stdZassertions_u36
nop
add rsp, 0x30
pop rbx
pop rsi
pop rdi
ret
mov qword [rbx + 8], rcx
mov rdx, rsi
mov rcx, rbx
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp sym.getSymbol__pureZparsecfg_u266
mov byte [rsi], 5
mov rax, qword [rbx + 8]
add rax, 1
jo 0x1400cf0eb
mov qword [rbx + 8], rax
movdqa xmm2, xmmword [0x14011fca0]
lea rdx, [rsp + 0x20]
mov rcx, rdi
movaps xmmword [rsp + 0x20], xmm2
call sym.eqsink___stdZassertions_u36
jmp 0x1400cf002
mov byte [rsi], 6
mov rax, qword [rbx + 8]
add rax, 1
jo 0x1400cf0eb
mov qword [rbx + 8], rax
movdqa xmm3, xmmword [0x14011fc80]
lea rdx, [rsp + 0x20]
mov rcx, rdi
movaps xmmword [rsp + 0x20], xmm3
call sym.eqsink___stdZassertions_u36
jmp 0x1400cf002
mov byte [rsi], 3
mov rax, qword [rbx + 8]
add rax, 1
jo 0x1400cf0eb
mov qword [rbx + 8], rax
movdqa xmm0, xmmword [0x14011fb80]
lea rdx, [rsp + 0x20]
mov rcx, rdi
movaps xmmword [rsp + 0x20], xmm0
call sym.eqsink___stdZassertions_u36
jmp 0x1400cf002
mov byte [rsi], 4
mov rax, qword [rbx + 8]
add rax, 1
jo 0x1400cf0eb
mov qword [rbx + 8], rax
movdqa xmm1, xmmword [0x14011fb50]
lea rdx, [rsp + 0x20]
mov rcx, rdi
movaps xmmword [rsp + 0x20], xmm1
call sym.eqsink___stdZassertions_u36
jmp 0x1400cf002
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp sym.raiseOverflow
lea rax, [rcx + 1]
mov qword [rbx + 8], rax
cmp rax, rdx
jge 0x1400cf180
cmp byte [r8 + rax + 8], 0x2d
jne 0x1400cf010
add rcx, 2
movdqa xmm5, xmmword [0x14011fb60]
lea rdx, [rsp + 0x20]
mov qword [rbx + 8], rcx
mov rcx, rdi
mov byte [rsi], 7
movaps xmmword [rsp + 0x20], xmm5
call sym.eqsink___stdZassertions_u36
jmp 0x1400cf002
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp sym.getString__pureZparsecfg_u231
cmp byte [r8 + rcx + 8], 0x22
jne case.0x1400cef9b.1
mov qword [rbx + 8], rcx
mov r8d, 1
jmp 0x1400cf14b
sub rdx, 1
mov rcx, rax
jmp 0x1400cefbc
Function at 0x1400cf260
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
movzx eax, byte [rcx + 8]
mov rbx, rcx
cmp al, 3
ja 0x1400cf2c0
cmp al, 1
ja 0x1400cf290
jne 0x1400cf285
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1400cf285
test byte [rcx + 7], 0x40
je 0x1400cf2b3
add rsp, 0x20
pop rbx
ret
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x1400cf2a4
test byte [rcx + 7], 0x40
jne 0x1400cf2a4
call sym.deallocShared
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x1400cf285
test byte [rcx + 7], 0x40
jne 0x1400cf285
add rsp, 0x20
pop rbx
jmp sym.deallocShared
cmp al, 4
je 0x1400cf276
add rsp, 0x20
pop rbx
ret
Function at 0x1400d0fe0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x1400d0ff7
test byte [rcx + 7], 0x40
je 0x1400d1050
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400d1017
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400d1020
sub rax, 0x10
jo 0x1400d1057
mov qword [rcx - 0x10], rax
add rsp, 0x20
pop rbx
ret
call sym.eqdestroy___pureZparsecfg_u738
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400d1017
mov rcx, qword [rbx + 0x10]
mov edx, 8
add rsp, 0x20
pop rbx
jmp sym.nimRawDispose
call sym.deallocShared
jmp 0x1400d0ff7
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400d1070
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400d1094
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400d10a0
sub rax, 0x10
jo 0x1400d10c8
mov qword [rcx - 0x10], rax
add rsp, 0x20
pop rbx
ret
call sym.eqdestroy___OOZlibZrcs_u18
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400d1094
mov edx, 8
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimRawDispose
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400d3120
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
movdqa xmm0, xmmword [0x140120260]
movdqa xmm1, xmmword [0x140120290]
movdqa xmm2, xmmword [0x140120220]
mov rax, qword [rdx + 8]
mov r12, qword [rdx]
mov qword [rsp + 0x38], rax
mov rax, qword [0x140123f80]
lea rsi, [rsp + 0x40]
mov r15, rcx
lea rbp, [rsp + 0x70]
lea r14, [rsp + 0x50]
mov rdx, qword [rax]
mov qword [rsp + 0x20], rsi
lea rax, [rsp + 0x60]
mov r9, r14
mov r8, rax
mov rcx, rbp
mov qword [rsp + 0x30], rax
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm2
call sym.get__OOZlibZrcs_u72
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
mov rbx, rax
jne 0x1400d3221
test r13, r13
je 0x1400d3221
test r12, r12
je 0x1400d3260
mov r15, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov r9, rsi
mov r8, r14
mov rcx, rbp
movdqa xmm3, xmmword [0x1401201f0]
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
movaps xmmword [rsp + 0x50], xmm3
call sym.nsuReplaceStr
cmp byte [rbx], 0
mov rsi, qword [rsp + 0x78]
jne 0x1400d3216
mov rcx, rbp
call sym.nosexecShellCmd
test rsi, rsi
je 0x1400d3221
test byte [rsi + 7], 0x40
je 0x1400d3278
test rdi, rdi
je 0x1400d322c
test byte [rdi + 7], 0x40
je 0x1400d3240
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp sym.deallocShared
mov r12, qword [r15 + 0xa8]
mov r15, qword [r15 + 0xb0]
jmp 0x1400d31d0
mov rcx, rsi
call sym.deallocShared
jmp 0x1400d3221
Function at 0x1400d3b00
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x10]
mov rbx, rcx
test rax, rax
je 0x1400d3b42
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400d3bd0
sub rdx, 0x10
jo 0x1400d3c84
mov qword [rax - 0x10], rdx
mov r8, qword [0x140123d20]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400d3b55
test byte [rcx + 7], 0x40
je 0x1400d3c70
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x1400d3b8b
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400d3c40
sub rdx, 0x10
jo 0x1400d3c7a
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rax, qword [rbx + 0x40]
test rax, rax
je 0x1400d3c66
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400d3c18
sub rdx, 0x10
jo 0x1400d3c8e
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [0x140123d20]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x10]
call fcn.1400a5dd0
mov rcx, qword [0x140123df0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400d3c66
mov rcx, qword [rbx + 0x10]
mov edx, 8
call sym.nimRawDispose
jmp 0x1400d3b42
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x40]
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x30]
call sym.nimDestroyAndDispose
mov rax, qword [rbx + 0x40]
test rax, rax
jne 0x1400d3b98
add rsp, 0x20
pop rbx
ret
call sym.deallocShared
jmp 0x1400d3b55
call sym.raiseOverflow
jmp 0x1400d3b8b
call sym.raiseOverflow
jmp 0x1400d3b42
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow