joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400d75c0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
je 0x1400d75d7
test byte [rcx + 7], 0x40
je 0x1400d7630
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400d75f7
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400d7600
sub rax, 0x10
jo 0x1400d7637
mov qword [rcx - 0x10], rax
add rsp, 0x20
pop rbx
ret
call sym.eqdestroy___pureZparsecfg_u738
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400d75f7
mov rcx, qword [rbx + 0x10]
mov edx, 8
add rsp, 0x20
pop rbx
jmp sym.nimRawDispose
call sym.deallocShared
jmp 0x1400d75d7
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400d7650
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400d7674
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400d7680
sub rax, 0x10
jo 0x1400d76a8
mov qword [rcx - 0x10], rax
add rsp, 0x20
pop rbx
ret
call sym.eqdestroy___OOZlibZrcs_u18
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400d7674
mov edx, 8
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimRawDispose
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400d9700
Capabilities:
Terminate process

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
movdqa xmm0, xmmword [0x1401286b0]
movdqa xmm1, xmmword [0x1401286e0]
movdqa xmm2, xmmword [0x140128660]
mov rax, qword [rdx + 8]
mov r12, qword [rdx]
mov qword [rsp + 0x38], rax
mov rax, qword [0x14012c780]
lea rsi, [rsp + 0x40]
mov r15, rcx
lea rbp, [rsp + 0x70]
lea r14, [rsp + 0x50]
mov rdx, qword [rax]
mov qword [rsp + 0x20], rsi
lea rax, [rsp + 0x60]
mov r9, r14
mov r8, rax
mov rcx, rbp
mov qword [rsp + 0x30], rax
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm2
call sym.get__OOZlibZrcs_u72
mov r13, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
mov rbx, rax
jne 0x1400d9801
test r13, r13
je 0x1400d9801
test r12, r12
je 0x1400d9840
mov r15, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov r9, rsi
mov r8, r14
mov rcx, rbp
movdqa xmm3, xmmword [0x140128630]
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r15
movaps xmmword [rsp + 0x50], xmm3
call sym.nsuReplaceStr
cmp byte [rbx], 0
mov rsi, qword [rsp + 0x78]
jne 0x1400d97f6
mov rcx, rbp
call sym.nosexecShellCmd
test rsi, rsi
je 0x1400d9801
test byte [rsi + 7], 0x40
je 0x1400d9858
test rdi, rdi
je 0x1400d980c
test byte [rdi + 7], 0x40
je 0x1400d9820
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rdi
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp sym.deallocShared
mov r12, qword [r15 + 0xa8]
mov r15, qword [r15 + 0xb0]
jmp 0x1400d97b0
mov rcx, rsi
call sym.deallocShared
jmp 0x1400d9801
Function at 0x1400da0e0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x10]
mov rbx, rcx
test rax, rax
je 0x1400da122
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da1b0
sub rdx, 0x10
jo 0x1400da264
mov qword [rax - 0x10], rdx
mov r8, qword [0x14012c520]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400da135
test byte [rcx + 7], 0x40
je 0x1400da250
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x1400da16b
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da220
sub rdx, 0x10
jo 0x1400da25a
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rax, qword [rbx + 0x40]
test rax, rax
je 0x1400da246
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da1f8
sub rdx, 0x10
jo 0x1400da26e
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [0x14012c520]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x10]
call fcn.1400ac3b0
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400da246
mov rcx, qword [rbx + 0x10]
mov edx, 8
call sym.nimRawDispose
jmp 0x1400da122
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x40]
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x30]
call sym.nimDestroyAndDispose
mov rax, qword [rbx + 0x40]
test rax, rax
jne 0x1400da178
add rsp, 0x20
pop rbx
ret
call sym.deallocShared
jmp 0x1400da135
call sym.raiseOverflow
jmp 0x1400da16b
call sym.raiseOverflow
jmp 0x1400da122
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400da290
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400da2ee
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x1400da428
cmp qword [rdx + 8], 0
jle 0x1400da2c6
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rbx + 0x10]
call sym.eqdestroy___pureZjson_u67
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400da4b6
mov rcx, qword [rbx + 0x10]
mov edx, 8
call sym.nimRawDispose
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x1400da324
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da480
sub rdx, 0x10
jo 0x1400da4fc
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rax, qword [rbx + 0x28]
test rax, rax
je 0x1400da35a
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da460
sub rdx, 0x10
jo 0x1400da4f2
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rax, qword [rbx + 0x30]
test rax, rax
je 0x1400da390
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da440
sub rdx, 0x10
jo 0x1400da506
mov qword [rax - 0x10], rdx
mov r8, qword [rax]
mov rdx, rcx
xor ecx, ecx
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400da3e6
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x1400da4a0
cmp qword [rdx + 8], 0
jle 0x1400da3be
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rbx + 0x38]
call sym.eqdestroy___pureZjson_u67
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400da4b6
mov rcx, qword [rbx + 0x38]
mov edx, 8
call sym.nimRawDispose
mov rax, qword [rbx + 0x40]
test rax, rax
je 0x1400da4b6
mov rdx, qword [rax - 0x10]
lea rcx, [rax - 0x10]
cmp rdx, 0xf
jbe 0x1400da4c0
sub rdx, 0x10
jo 0x1400da4de
mov r8, qword [rax]
mov qword [rax - 0x10], rdx
mov rdx, rcx
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
sub rax, 0x10
jo 0x1400da4e8
mov qword [rdx], rax
jmp 0x1400da2ee
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x30]
call sym.nimDestroyAndDispose
jmp 0x1400da390
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x28]
call sym.nimDestroyAndDispose
jmp 0x1400da35a
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x20]
call sym.nimDestroyAndDispose
jmp 0x1400da324
sub rax, 0x10
jo 0x1400da510
mov qword [rdx], rax
mov rax, qword [rbx + 0x40]
test rax, rax
jne 0x1400da3f3
add rsp, 0x20
pop rbx
ret
mov r8, qword [rax]
mov rdx, rcx
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, qword [rbx + 0x40]
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
call sym.raiseOverflow
jmp 0x1400da2ee
call sym.raiseOverflow
jmp 0x1400da35a
call sym.raiseOverflow
jmp 0x1400da324
call sym.raiseOverflow
jmp 0x1400da390
call sym.raiseOverflow
jmp 0x1400da3e6
Function at 0x1400da530
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x30
mov rbx, qword [rcx]
test rdx, rdx
je 0x1400da54b
mov rax, qword [rdx - 0x10]
add rax, 0x10
jo 0x1400da5a6
mov qword [rdx - 0x10], rax
mov qword [rcx], rdx
test rbx, rbx
je 0x1400da5a0
mov rax, qword [rbx - 0x10]
lea rdx, [rbx - 0x10]
cmp rax, 0xf
jbe 0x1400da580
sub rax, 0x10
jo 0x1400da5c1
mov r8, qword [rbx]
xor ecx, ecx
mov qword [rbx - 0x10], rax
add rsp, 0x30
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rbx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x30
pop rbx
ret
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
call sym.raiseOverflow
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
jmp 0x1400da54b
add rsp, 0x30
pop rbx
jmp sym.raiseOverflow

Function at 0x1400daa30
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400daa88
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400daa68
sub rax, 0x10
jo 0x1400daa8e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400daaa0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400daaf8
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400daad8
sub rax, 0x10
jo 0x1400daafe
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400dc060
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400dc0b8
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400dc098
sub rax, 0x10
jo 0x1400dc0be
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow

Function at 0x1400dec10
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400dec68
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400dec48
sub rax, 0x10
jo 0x1400dec6e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400dec80
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400dec9c
test byte [rcx + 7], 0x40
je 0x1400dee08
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400decaf
test byte [rcx + 7], 0x40
je 0x1400dedf8
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x1400decc2
test byte [rcx + 7], 0x40
je 0x1400dede8
mov rcx, qword [rbx + 0x48]
test rcx, rcx
je 0x1400dedbd
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x1400dedb0
cmp qword [rdx + 8], 0
jle 0x1400decf4
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rbx + 0x48]
call sym.eqdestroy___pureZjson_u67
mov rsi, qword [0x14012c5f0]
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400deda5
mov rcx, qword [rbx + 0x48]
mov edx, 8
call sym.nimRawDispose
mov rcx, qword [rbx + 0x58]
test rcx, rcx
jne 0x1400dedd1
nop dword [rax]
movdqu xmm0, xmmword [rbx + 0x60]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___OOZlibZargs_u195
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400deda5
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x1400ded67
test byte [rcx + 7], 0x40
je 0x1400dee48
mov rcx, qword [rbx + 0x90]
test rcx, rcx
je 0x1400ded7d
test byte [rcx + 7], 0x40
je 0x1400dee28
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x1400ded93
test byte [rcx + 7], 0x40
je 0x1400dee38
mov rcx, qword [rbx + 0xb0]
test rcx, rcx
je 0x1400deda5
test byte [rcx + 7], 0x40
je 0x1400dee18
add rsp, 0x38
pop rbx
pop rsi
ret
sub rax, 0x10
jo 0x1400dee52
mov qword [rdx], rax
mov rsi, qword [0x14012c5f0]
mov rcx, qword [rbx + 0x58]
test rcx, rcx
je 0x1400ded30
test byte [rcx + 7], 0x40
jne 0x1400ded30
call sym.deallocShared
jmp 0x1400ded30
call sym.deallocShared
jmp 0x1400decc2
call sym.deallocShared
jmp 0x1400decaf
call sym.deallocShared
jmp 0x1400dec9c
add rsp, 0x38
pop rbx
pop rsi
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400ded7d
call sym.deallocShared
jmp 0x1400ded93
call sym.deallocShared
jmp 0x1400ded67
call sym.raiseOverflow
mov rsi, qword [0x14012c5f0]
jmp 0x1400dedc4

Function at 0x1400e0d60
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400e0db8
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400e0d98
sub rax, 0x10
jo 0x1400e0dbe
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400e0dd0
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400e0dec
test byte [rcx + 7], 0x40
je 0x1400e0f58
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400e0dff
test byte [rcx + 7], 0x40
je 0x1400e0f48
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x1400e0e12
test byte [rcx + 7], 0x40
je 0x1400e0f38
mov rcx, qword [rbx + 0x48]
test rcx, rcx
je 0x1400e0f0d
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x1400e0f00
cmp qword [rdx + 8], 0
jle 0x1400e0e44
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rbx + 0x48]
call sym.eqdestroy___pureZjson_u67
mov rsi, qword [0x14012c5f0]
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400e0ef5
mov rcx, qword [rbx + 0x48]
mov edx, 8
call sym.nimRawDispose
mov rcx, qword [rbx + 0x58]
test rcx, rcx
jne 0x1400e0f21
nop dword [rax]
movdqu xmm0, xmmword [rbx + 0x60]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___OOZlibZargs_u195
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400e0ef5
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x1400e0eb7
test byte [rcx + 7], 0x40
je 0x1400e0f98
mov rcx, qword [rbx + 0x90]
test rcx, rcx
je 0x1400e0ecd
test byte [rcx + 7], 0x40
je 0x1400e0f78
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x1400e0ee3
test byte [rcx + 7], 0x40
je 0x1400e0f88
mov rcx, qword [rbx + 0xb0]
test rcx, rcx
je 0x1400e0ef5
test byte [rcx + 7], 0x40
je 0x1400e0f68
add rsp, 0x38
pop rbx
pop rsi
ret
sub rax, 0x10
jo 0x1400e0fa2
mov qword [rdx], rax
mov rsi, qword [0x14012c5f0]
mov rcx, qword [rbx + 0x58]
test rcx, rcx
je 0x1400e0e80
test byte [rcx + 7], 0x40
jne 0x1400e0e80
call sym.deallocShared
jmp 0x1400e0e80
call sym.deallocShared
jmp 0x1400e0e12
call sym.deallocShared
jmp 0x1400e0dff
call sym.deallocShared
jmp 0x1400e0dec
add rsp, 0x38
pop rbx
pop rsi
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400e0ecd
call sym.deallocShared
jmp 0x1400e0ee3
call sym.deallocShared
jmp 0x1400e0eb7
call sym.raiseOverflow
mov rsi, qword [0x14012c5f0]
jmp 0x1400e0f14

Function at 0x1400e4a00
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
je 0x1400e4a58
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
jbe 0x1400e4a38
sub rax, 0x10
jo 0x1400e4a5e
mov r8, qword [rcx]
mov qword [rcx - 0x10], rax
xor ecx, ecx
add rsp, 0x20
pop rbx
jmp sym.rememberCycle__system_u3375
mov r8, qword [rcx]
mov ecx, 1
call sym.rememberCycle__system_u3375
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp sym.nimDestroyAndDispose
add rsp, 0x20
pop rbx
ret
add rsp, 0x20
pop rbx
jmp sym.raiseOverflow
Function at 0x1400e4a70
Capabilities:
Terminate process

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov rcx, qword [rcx + 0x10]
test rcx, rcx
je 0x1400e4a8c
test byte [rcx + 7], 0x40
je 0x1400e4bf8
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400e4a9f
test byte [rcx + 7], 0x40
je 0x1400e4be8
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x1400e4ab2
test byte [rcx + 7], 0x40
je 0x1400e4bd8
mov rcx, qword [rbx + 0x48]
test rcx, rcx
je 0x1400e4bad
mov rax, qword [rcx - 0x10]
lea rdx, [rcx - 0x10]
cmp rax, 0xf
ja 0x1400e4ba0
cmp qword [rdx + 8], 0
jle 0x1400e4ae4
mov rcx, rdx
call sym.unregisterCycle__system_u2958
mov rcx, qword [rbx + 0x48]
call sym.eqdestroy___pureZjson_u67
mov rsi, qword [0x14012c5f0]
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400e4b95
mov rcx, qword [rbx + 0x48]
mov edx, 8
call sym.nimRawDispose
mov rcx, qword [rbx + 0x58]
test rcx, rcx
jne 0x1400e4bc1
nop dword [rax]
movdqu xmm0, xmmword [rbx + 0x60]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
call sym.eqdestroy___OOZlibZargs_u195
mov rcx, rsi
call dbg.__emutls_get_address
cmp byte [rax], 0
jne 0x1400e4b95
mov rcx, qword [rbx + 0x80]
test rcx, rcx
je 0x1400e4b57
test byte [rcx + 7], 0x40
je 0x1400e4c38
mov rcx, qword [rbx + 0x90]
test rcx, rcx
je 0x1400e4b6d
test byte [rcx + 7], 0x40
je 0x1400e4c18
mov rcx, qword [rbx + 0xa0]
test rcx, rcx
je 0x1400e4b83
test byte [rcx + 7], 0x40
je 0x1400e4c28
mov rcx, qword [rbx + 0xb0]
test rcx, rcx
je 0x1400e4b95
test byte [rcx + 7], 0x40
je 0x1400e4c08
add rsp, 0x38
pop rbx
pop rsi
ret
sub rax, 0x10
jo 0x1400e4c42
mov qword [rdx], rax
mov rsi, qword [0x14012c5f0]
mov rcx, qword [rbx + 0x58]
test rcx, rcx
je 0x1400e4b20
test byte [rcx + 7], 0x40
jne 0x1400e4b20
call sym.deallocShared
jmp 0x1400e4b20
call sym.deallocShared
jmp 0x1400e4ab2
call sym.deallocShared
jmp 0x1400e4a9f
call sym.deallocShared
jmp 0x1400e4a8c
add rsp, 0x38
pop rbx
pop rsi
jmp sym.deallocShared
call sym.deallocShared
jmp 0x1400e4b6d
call sym.deallocShared
jmp 0x1400e4b83
call sym.deallocShared
jmp 0x1400e4b57
call sym.raiseOverflow
mov rsi, qword [0x14012c5f0]
jmp 0x1400e4bb4

Function at 0x1400e5020
Capabilities:
Terminate process

Disassembly:
test rcx, rcx
je 0x1400e503c
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400e5040
sub rax, 0x10
jo 0x1400e504a
mov qword [rcx - 0x10], rax
ret
mov edx, 8
jmp sym.nimRawDispose
jmp sym.raiseOverflow
Function at 0x1400e5270
Capabilities:
Terminate process

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x40
mov r14, rcx
lea rcx, [0x140109860]
mov esi, edx
mov r13d, r8d
call dbg.__emutls_get_address
mov rdi, qword [rax]
mov rbx, rax
test rdi, rdi
je 0x1400e53d0
mov rax, qword [rdi - 0x10]
lea rbx, [rdi - 0x10]
add rax, 0x10
jo 0x1400e5497
mov qword [rbx], rax
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
mov r12, rax
movzx eax, byte [rax]
test al, al
jne 0x1400e538b
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rbp, qword [rdi + 0x10]
pxor xmm0, xmm0
lea rdx, [rsp + 0x20]
cmp r14, rax
cmovne rbp, qword [rdi + 8]
movaps xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x2e], 0
mov rcx, rbp
call qword [0x14013e6f8]
mov edx, eax
mov eax, 0x70
test edx, edx
je 0x1400e5317
movzx eax, word [rsp + 0x28]
cmp byte [r12], 0
jne 0x1400e538b
movzx ecx, word [0x140109882]
mov edx, eax
and edx, 0xfffffff8
cmp cx, 0xffff
je 0x1400e53a0
and eax, 0xfffffff0
or edx, 8
test r13b, r13b
cmove edx, eax
cmp sil, 0x27
je 0x1400e5440
lea eax, [rsi - 0x1e]
cmp al, 9
ja 0x1400e5458
movzx esi, sil
lea rax, [0x140129520]
mov rcx, rbp
sub esi, 0x1e
movsxd rsi, esi
or dx, word [rax + rsi*8]
movsx edx, dx
call qword [0x14013e6f0]
mov rax, qword [rbx]
mov rsi, rax
shr rsi, 4
je 0x1400e53b0
sub rax, 0x10
jo 0x1400e54bd
mov qword [rbx], rax
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov word [0x140109882], dx
mov ecx, edx
jmp 0x1400e5330
mov edx, 8
mov rcx, rdi
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.nimRawDispose
mov edx, 8
mov ecx, 0x20
call sym.nimNewObj
mov rcx, rax
mov rdi, rax
call sym.initTerminal__pureZterminal_u274
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
mov r12, rax
jne 0x1400e538b
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400e5421
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400e5480
sub rax, 0x10
jo 0x1400e54b3
mov qword [rcx - 0x10], rax
mov qword [rbx], rdi
test rdi, rdi
jne 0x1400e52a1
movzx eax, byte [r12]
mov rbx, 0xfffffffffffffff0
jmp 0x1400e52c8
or edx, ecx
mov rcx, rbp
movsx edx, dx
call qword [0x14013e6f0]
jmp 0x1400e5372
movzx ecx, sil
mov r8d, 0x27
mov edx, 0x1e
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.raiseIndexError3
mov edx, 8
call sym.nimRawDispose
mov qword [rbx], rdi
test rdi, rdi
je 0x1400e542d
jmp 0x1400e52a1
call sym.raiseOverflow
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
mov r12, rax
movzx eax, byte [rax]
jmp 0x1400e52c8
call sym.raiseOverflow
jmp 0x1400e5421
add rsp, 0x40
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp sym.raiseOverflow
Function at 0x1400e54d0
Capabilities:
Terminate process

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rdi, rcx
lea rcx, [0x140109860]
call dbg.__emutls_get_address
mov rbx, qword [rax]
mov rsi, rax
test rbx, rbx
je 0x1400e5588
mov rax, qword [rbx - 0x10]
lea rsi, [rbx - 0x10]
add rax, 0x10
jo 0x1400e5627
mov qword [rsi], rax
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
movzx eax, byte [rax]
test al, al
jne 0x1400e555f
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rdx, rax
mov rax, qword [0x14013e6f0]
cmp rdi, rdx
je 0x1400e55f8
movsx edx, word [rbx + 0x18]
mov rcx, qword [rbx + 8]
call rax
mov rax, qword [rsi]
mov rdi, rax
shr rdi, 4
je 0x1400e5570
sub rax, 0x10
jo 0x1400e5640
mov qword [rsi], rax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov edx, 8
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.nimRawDispose
mov edx, 8
mov ecx, 0x20
call sym.nimNewObj
mov rcx, rax
mov rbx, rax
call sym.initTerminal__pureZterminal_u274
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
cmp byte [rax], 0
mov rbp, rax
jne 0x1400e555f
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400e55d5
mov rax, qword [rcx - 0x10]
mov rdx, rax
shr rdx, 4
je 0x1400e5610
sub rax, 0x10
jo 0x1400e564d
mov qword [rcx - 0x10], rax
mov qword [rsi], rbx
test rbx, rbx
jne 0x1400e54f6
movzx eax, byte [rbp]
mov rsi, 0xfffffffffffffff0
jmp 0x1400e551a
movsx edx, word [rbx + 0x1a]
mov rcx, qword [rbx + 0x10]
call rax
jmp 0x1400e5546
mov edx, 8
call sym.nimRawDispose
mov qword [rsi], rbx
test rbx, rbx
je 0x1400e55e1
jmp 0x1400e54f6
call sym.raiseOverflow
mov rcx, qword [0x14012c5f0]
call dbg.__emutls_get_address
movzx eax, byte [rax]
jmp 0x1400e551a
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp sym.raiseOverflow
call sym.raiseOverflow
jmp 0x1400e55d5