joyce8/EMBER2024-capa huggingface dataset:
Function at 0x443c60
Capabilities:
Access peb ldr_data

Disassembly:
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], 0
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
inc dword [rax + 0x2c8]
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rcx, qword [rax + 0x30]
lea rdx, [rcx + 0x138]
test byte [rdx], al
mov rdx, rax
mov qword [rcx + 0x138], rax
lea rax, [rdx + 0xe0]
test byte [rax], al
mov rax, qword [rdx + 0x30]
mov qword [rdx + 0xe0], rax
mov dword [rsp], 0
lea rax, fcn.00433b40
mov qword [rsp + 8], rax
call dbg.runtime.deferproc
test eax, eax
jne 0x443d92
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x18], rax
lea rcx, [rax + 0x358]
test byte [rcx], al
mov rdx, qword [rsp + 0x30]
mov qword [rax + 0x358], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rax + 0x360], rdx
lea rdx, [rsp + 0x40]
mov qword [rax + 0x368], rdx
mov rdx, qword [0x0060aa60]
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
call dbg.runtime.cgocall
mov rax, qword [rsp + 0x18]
mov rcx, qword [rax + 0x370]
mov rdx, qword [rax + 0x378]
mov rax, qword [rax + 0x380]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
nop
call dbg.runtime.deferreturn
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
nop
call dbg.runtime.deferreturn
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret

Function at 0x449ba0
Capabilities:
Access peb ldr_data

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x449c80
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov rax, qword gs:[0x28]
mov rax, qword [rax]
mov qword [rsp + 8], 0
mov qword [rsp + 0x10], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x18], xmm0
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
lea rcx, [0x0044fe30]
mov qword [rsp + 0x10], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x18], rcx
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x10]
mov qword [rsp], rax
call dbg.runtime.systemstack
mov rax, qword [rsp + 8]
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
call dbg.runtime.morestack_noctxt
jmp dbg.runtime.callers
Function at 0x4657d0
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4658da
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx + 8]
lea rbx, [rdx + 0x2e]
neg rbx
imul rbx, rbx, 0x1c
movabs rax, 0x5816058160581606
mov rsi, rdx
imul rbx
sar rbx, 0x3f
sar rdx, 5
sub rdx, rbx
lea rbx, [rdx + 0x15c]
sar rbx, 0x3f
shr rbx, 0x3d
lea rdx, [rbx + rdx + 0x15c]
sar rdx, 3
jmp 0x465847
mov rdx, rax
cmp rdx, 0x57
jae 0x4658d3
lea rax, [rdx + rdx*2]
lea rbx, [0x005fcd60]
mov rdi, qword [rbx + rax*8 + 8]
mov r8, rax
shl rax, 3
lea r9, [rsi + rdi + 0x40]
cmp r9, 0xffffffffffffffc4
jge 0x465879
lea rax, [rdx + 1]
jmp 0x465844
cmp r9, 0xffffffffffffffe0
jle 0x465885
lea rax, [rdx - 1]
jmp 0x465844
mov qword [rsp + 0x20], rdx
mov rdx, qword [rbx + r8*8]
movzx eax, byte [rbx + rax + 0x10]
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rdi
mov byte [rsp + 0x18], al
mov qword [rsp], rcx
call dbg.strconv.(*extFloat).Multiply
mov rax, qword [rsp + 0x20]
mov rcx, rax
shl rax, 3
add rax, 0xfffffffffffffea4
neg rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call dbg.runtime.panicindex
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.strconv.(*extFloat).frexp10
Function at 0x4962c0
Capabilities:
Hash data using fnv

Disassembly:
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov edx, dword [rsp + 8]
xor ebx, ebx
jmp 0x4962e5
lea rsi, [rbx + 1]
imul edx, edx, 0x1000193
movzx edi, byte [rcx + rbx]
xor edx, edi
mov rbx, rsi
cmp rbx, rax
jl 0x4962d2
mov dword [rsp + 0x28], edx
ret
Function at 0x4b1990
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4b1c03
sub rsp, 0x80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax]
mov rdx, qword [rsp + 0x88]
add rcx, qword [rdx]
mov rbx, rcx
sar rcx, 0x3f
shr rcx, 0x3d
add rcx, rbx
sar rcx, 3
mov rsi, rcx
shl rcx, 3
sub rbx, rcx
test rbx, rbx
je 0x4b1bed
lea rcx, [rsi + 1]
mov rbx, qword [rdx + 0x10]
lea rsi, [rdx + 8]
cmp rbx, rcx
jl 0x4b1ac8
xor ecx, ecx
jmp 0x4b1a2b
inc qword [rax]
mov rbx, qword [rsp + 0x40]
lea rcx, [rbx + 1]
mov rax, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rax]
cmp rcx, rbx
jge 0x4b1abb
mov qword [rsp + 0x40], rcx
mov qword [rsp], rax
mov qword [rsp + 8], rcx
call dbg.github.com/skip2/go-qrcode/bitset.(*Bitset).At
movzx eax, byte [rsp + 0x10]
test al, al
je 0x4b1aae
mov rax, qword [rsp + 0x88]
mov rdx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
mov rcx, qword [rax]
mov rsi, rcx
sar rcx, 0x3f
shr rcx, 0x3d
lea rdi, [rcx + rsi]
sar rdi, 3
cmp rdi, rdx
jae 0x4b1bf5
movzx edx, byte [rbx + rdi]
mov r8, rdi
shl rdi, 3
sub rsi, rdi
mov rcx, rsi
mov edi, 0xffffff80
shr dil, cl
cmp rcx, 8
sbb esi, esi
and edi, esi
or edx, edi
mov byte [rbx + r8], dl
jmp 0x4b1a0f
mov rax, qword [rsp + 0x88]
jmp 0x4b1a0f
mov rbp, qword [rsp + 0x78]
add rsp, 0x80
ret
mov qword [rsp + 0x70], rsi
lea rax, [0x00513c00]
mov qword [rsp], rax
lea rcx, [rcx + rbx*2]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rcx
call dbg.runtime.makeslice
mov rax, qword [rsp + 0x88]
mov rcx, qword [rax + 0x10]
mov rdx, qword [rsp + 0x20]
lea rbx, [rdx + rcx]
mov qword [rsp + 0x58], rbx
mov rsi, qword [rax + 0x18]
mov rdi, qword [rax + 8]
mov r8, qword [rsp + 0x18]
cmp rbx, rsi
ja 0x4b1b8f
cmp rbx, rsi
ja 0x4b1bfc
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x68], rdi
lea rax, [rdi + rcx]
mov qword [rsp], rax
mov qword [rsp + 8], r8
mov qword [rsp + 0x10], rdx
call dbg.runtime.memmove
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x88]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x50]
mov qword [rcx + 0x18], rax
mov eax, dword [0x006265e0]
test eax, eax
jne 0x4b1b7e
mov rax, qword [rsp + 0x68]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x90]
mov rdx, rcx
jmp 0x4b1a0b
mov rdi, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
call dbg.runtime.gcWriteBarrier
jmp 0x4b1b6e
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x48], rdx
lea rax, [0x00513c00]
mov qword [rsp], rax
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rbx
call dbg.runtime.growslice
mov rdi, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x38]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
jmp 0x4b1b17
mov rcx, rsi
jmp 0x4b19fa
call dbg.runtime.panicindex
ud2
call dbg.runtime.panicslice
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode/bitset.(*Bitset).Append
Function at 0x4b1c10
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4b1e4a
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
mov rax, qword [rsp + 0x80]
mov rdx, qword [rax]
mov rbx, qword [rsp + 0x90]
add rdx, rbx
mov rsi, rdx
sar rdx, 0x3f
shr rdx, 0x3d
add rdx, rsi
sar rdx, 3
mov rdi, rdx
shl rdx, 3
sub rsi, rdx
test rsi, rsi
je 0x4b1e34
lea rdx, [rdi + 1]
mov rsi, qword [rax + 0x10]
lea rdi, [rax + 8]
cmp rsi, rdx
jl 0x4b1d0f
mov rdx, qword [rsp + 0x88]
xor ecx, ecx
jmp 0x4b1c9b
inc qword [rax]
lea rcx, [r8 + 1]
cmp rcx, rbx
jge 0x4b1d05
movzx esi, byte [rdx + rcx]
test sil, sil
je 0x4b1d00
mov rsi, qword [rax + 0x10]
mov rdi, qword [rax + 8]
mov r8, qword [rax]
mov r9, r8
sar r8, 0x3f
shr r8, 0x3d
add r8, r9
sar r8, 3
cmp r8, rsi
jae 0x4b1e3c
movzx esi, byte [rdi + r8]
mov r10, r8
shl r8, 3
sub r9, r8
mov r8, rcx
mov rcx, r9
mov r11d, 0xffffff80
shr r11b, cl
cmp rcx, 8
sbb r9d, r9d
and r11d, r9d
or esi, r11d
mov byte [rdi + r10], sil
jmp 0x4b1c94
mov r8, rcx
jmp 0x4b1c94
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov qword [rsp + 0x68], rdi
lea rax, [0x00513c00]
mov qword [rsp], rax
lea rcx, [rdx + rsi*2]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rcx
call dbg.runtime.makeslice
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax + 0x10]
mov rdx, qword [rsp + 0x20]
lea rbx, [rdx + rcx]
mov qword [rsp + 0x50], rbx
mov rsi, qword [rax + 0x18]
mov rdi, qword [rax + 8]
mov r8, qword [rsp + 0x18]
cmp rbx, rsi
ja 0x4b1dd6
cmp rbx, rsi
ja 0x4b1e43
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x60], rdi
lea rax, [rdi + rcx]
mov qword [rsp], rax
mov qword [rsp + 8], r8
mov qword [rsp + 0x10], rdx
call dbg.runtime.memmove
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x80]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x48]
mov qword [rcx + 0x18], rax
mov eax, dword [0x006265e0]
test eax, eax
jne 0x4b1dc5
mov rax, qword [rsp + 0x60]
mov qword [rcx + 8], rax
mov rax, rcx
mov rbx, qword [rsp + 0x90]
jmp 0x4b1c88
mov rdi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
call dbg.runtime.gcWriteBarrier
jmp 0x4b1db5
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rdx
lea rax, [0x00513c00]
mov qword [rsp], rax
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rbx
call dbg.runtime.growslice
mov rdi, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x38]
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
jmp 0x4b1d5e
mov rdx, rdi
jmp 0x4b1c77
call dbg.runtime.panicindex
ud2
call dbg.runtime.panicslice
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode/bitset.(*Bitset).AppendBools
Function at 0x4b2170
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4b2284
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov rdx, qword [rax]
mov rcx, qword [rsp + 0x58]
cmp rcx, rdx
jge 0x4b21fe
mov rdx, qword [rax + 0x10]
mov rax, qword [rax + 8]
mov rbx, rcx
sar rcx, 0x3f
shr rcx, 0x3d
lea rsi, [rbx + rcx]
sar rsi, 3
cmp rsi, rdx
jae 0x4b227d
movzx eax, byte [rax + rsi]
shl rsi, 3
sub rbx, rsi
mov rcx, rbx
mov edx, 0xffffff80
shr dl, cl
cmp cl, 8
sbb ebx, ebx
and edx, ebx
test al, dl
lea rax, [rsp + 0x60]
setne byte [rax]
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 0x28], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
lea rax, [0x00513440]
mov qword [rsp], rax
lea rax, [rsp + 0x28]
mov qword [rsp + 8], rax
call dbg.runtime.convT2E64
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
lea rax, [0x0054c16c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call dbg.log.Panicf
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
jmp 0x4b21aa
call dbg.runtime.panicindex
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode/bitset.(*Bitset).At
Function at 0x4d7ff0
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4d811b
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax]
mov rdx, rcx
sar rcx, 0x3f
shr rcx, 0x3d
add rcx, rdx
sar rcx, 3
mov rbx, rcx
shl rcx, 3
sub rdx, rcx
test rdx, rdx
je 0x4d810c
lea rcx, [rbx + 1]
mov qword [rsp + 0x40], rcx
lea rax, [0x00513380]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rcx
call dbg.runtime.makeslice
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x58], rcx
mov rdx, qword [rsp + 0x28]
mov qword [rsp + 0x38], rdx
mov rbx, qword [rsp + 0x40]
dec rbx
xor esi, esi
jmp 0x4d80b2
mov rdi, qword [rsp + 0x58]
mov byte [rdi + rcx], al
mov r8, qword [rsp + 0x48]
lea rsi, [r8 + 8]
lea rbx, [rcx - 1]
mov rax, rdx
mov rcx, rdi
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x70]
mov r8, qword [rdi]
cmp rsi, r8
jge 0x4d80ed
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp], rdi
mov qword [rsp + 8], rsi
call dbg.github.com/skip2/go-qrcode/bitset.(*Bitset).ByteAt
movzx eax, byte [rsp + 0x10]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x30]
cmp rcx, rdx
jb 0x4d8092
jmp 0x4d8114
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rdx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, rbx
jmp 0x4d8049
call dbg.runtime.panicindex
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode/reedsolomon.newGFPolyFromData
Function at 0x4d8740
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4d8894
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x50]
cmp rax, rcx
jle 0x4d8877
mov qword [rsp + 0x30], rax
lea rcx, [0x00513380]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rax
call dbg.runtime.makeslice
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x60]
mov r9, qword [rsp + 0x68]
xor r10d, r10d
jmp 0x4d87ca
inc r10
cmp r10, rbx
jge 0x4d8836
cmp rsi, r10
jle 0x4d880a
cmp r9, r10
jle 0x4d8807
cmp r10, r9
jae 0x4d888d
movzx r11d, byte [r8 + r10]
cmp r10, rsi
jae 0x4d888d
movzx r12d, byte [rdi + r10]
xor r12d, r11d
cmp r10, rax
jae 0x4d888d
mov byte [rcx + r10], r12b
jmp 0x4d87c7
cmp rsi, r10
jle 0x4d8821
cmp r10, rsi
jae 0x4d8886
movzx r11d, byte [rdi + r10]
cmp r10, rax
jae 0x4d8886
mov byte [rcx + r10], r11b
jmp 0x4d87c7
cmp r10, r9
jae 0x4d887f
movzx r11d, byte [r8 + r10]
cmp r10, rax
jae 0x4d887f
mov byte [rcx + r10], r11b
jmp 0x4d87c7
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
call dbg.github.com/skip2/go-qrcode/reedsolomon.gfPoly.normalised
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rax, rcx
jmp 0x4d877b
call dbg.runtime.panicindex
ud2
call dbg.runtime.panicindex
ud2
call dbg.runtime.panicindex
ud2
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode/reedsolomon.gfPolyAdd
Function at 0x4de540
Capabilities:
Encode data using base64

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4de60a
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov rax, qword [rsp + 0x50]
mov qword [rsp], rax
lea rdi, [rsp + 8]
lea rsi, [rsp + 0x58]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00453576
mov rbp, qword [rbp]
call dbg.github.com/skip2/go-qrcode.qrCodeVersion.numDataBits
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
jne 0x4de5bb
mov qword [rsp + 0x90], 0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rax, rcx
sar rcx, 0x3f
shr rcx, 0x3d
add rcx, rax
sar rcx, 3
shl rcx, 3
sub rax, rcx
lea rcx, [rax - 8]
neg rcx
mov rdx, rcx
sar rcx, 0x3f
shr rcx, 0x3d
sub rcx, rax
lea rax, [rcx + 8]
sar rax, 3
shl rax, 3
sub rdx, rax
mov qword [rsp + 0x90], rdx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
call dbg.runtime.morestack_noctxt
jmp dbg.github.com/skip2/go-qrcode.qrCodeVersion.numBitsToPadToCodeword
Function at 0x414c60
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x414deb
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.00432220
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
jne 0x414cc5
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
jmp 0x414cd4
add rsp, 0x48
pop rbp
ret
sub rcx, rbx
add rax, rbx
mov rbx, rcx
test rbx, rbx
jbe 0x414cf3
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
mov rcx, rbx
jmp 0x414d03
cmp rbx, 0x1000
jae 0x414ccb
jmp 0x414d6d
add rsp, 0x48
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
cmp rbx, 0x1000
jae 0x414d15
xor edx, edx
jmp 0x414d64
mov rcx, qword [sym.imp.kernel32.dll_VirtualFree]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.00432220
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
sete al
mov rcx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov edx, eax
mov rax, qword [rsp + 0x40]
test dl, dl
jne 0x414cf9
jmp 0x414ce8
call fcn.00462b60
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x30], rax
call fcn.00436620
lea rax, [0x004e224b]
mov ebx, 0x18
nop dword [rax]
call fcn.00436ea0
mov rax, qword [rsp + 0x38]
call fcn.00436be0
lea rax, [0x004e28f4]
mov ebx, 0x19
nop dword [rax + rax]
call fcn.00436ea0
mov rax, qword [rsp + 0x30]
call fcn.00436be0
call fcn.00436860
call fcn.00436680
lea rax, [0x004e51b4]
mov ebx, 0x21
call fcn.00434c80
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045f4a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00414c60
Function at 0x414e20
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x415046
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [sym.imp.kernel32.dll_VirtualAlloc]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.004322a0
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, rax
cmp qword [rsp + 0x28], rax
je 0x414e93
mov rbx, qword [rsp + 0x68]
mov rax, rbx
jmp 0x414ea2
add rsp, 0x50
pop rbp
ret
sub rdx, rbx
add rcx, rbx
mov rbx, rdx
test rbx, rbx
jbe 0x414ec5
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov rdx, rbx
jmp 0x414ed5
cmp rbx, 0x1000
jae 0x414e99
nop
jmp 0x414f58
add rsp, 0x50
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
cmp rbx, 0x1000
jae 0x414eed
xor esi, esi
jmp 0x414f4a
mov rax, qword [sym.imp.kernel32.dll_VirtualAlloc]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.004322a0
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x28], 0
sete al
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov esi, eax
mov rax, qword [rsp + 0x68]
test sil, sil
jne 0x414ecb
jmp 0x414eb6
call fcn.00462b60
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x34], eax
cmp eax, 8
jne 0x414fe0
nop dword [rax + rax]
call fcn.00436620
lea rax, [0x004e290d]
mov ebx, 0x19
call fcn.00436ea0
mov rax, qword [rsp + 0x68]
nop dword [rax + rax]
call fcn.00436be0
lea rax, [0x004e28f4]
mov ebx, 0x19
call fcn.00436ea0
mov eax, dword [rsp + 0x34]
call fcn.00436be0
nop
call fcn.00436860
call fcn.00436680
lea rax, [0x004de6ef]
mov ebx, 0xd
call fcn.00434c80
nop dword [rax + rax]
cmp eax, 0x5af
je 0x414f80
call fcn.00436620
lea rax, [0x004e290d]
mov ebx, 0x19
call fcn.00436ea0
mov rax, qword [rsp + 0x38]
call fcn.00436be0
lea rax, [0x004e28f4]
mov ebx, 0x19
call fcn.00436ea0
mov eax, dword [rsp + 0x34]
nop dword [rax]
call fcn.00436be0
call fcn.00436860
call fcn.00436680
lea rax, [0x004e492d]
mov ebx, 0x1f
nop dword [rax + rax]
call fcn.00434c80
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.0045f4a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.00414e20
Function at 0x41e520
Capabilities:
Hash data using murmur3

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp byte [0x005f1df5], 0
jne 0x41e607
sub rbx, qword [rax + 0x18]
mov rdx, qword [rax + 0x50]
test byte [rdx], al
mov esi, dword [rax + 0x64]
imul rbx, rsi
mov rsi, rbx
shr rbx, 0x20
shr rsi, 0x23
and ebx, 7
mov rdi, rcx
mov rcx, rbx
mov r8d, 1
shl r8d, cl
add rdx, rsi
nop
nop
nop
nop
lock or byte [rdx], r8b
mov rcx, qword [rax + 0x18]
movabs rdx, 0x800000000000
lea rax, [rdx + rcx]
mov rdx, rax
shr rdx, 0x2a
nop
nop
nop
cmp rdx, 0x40
jae 0x41e5fa
lea rbx, [0x005c41d8]
mov rdx, qword [rbx + rdx*8]
test byte [rdx], al
mov rbx, rcx
shr rbx, 0x10
and ebx, 0x3f
shr rcx, 0xd
and ecx, 7
mov esi, 1
shl esi, cl
shr rax, 0x16
and eax, 0xfffff
mov rax, qword [rdx + rax*8]
test byte [rax], al
movzx edx, byte [rax + rbx + 0x11440]
lea rax, [rax + rbx]
lea rax, [rax + 0x11440]
test sil, dl
jne 0x41e5e0
lock or byte [rax], sil
mov rax, qword [r14 + 0x30]
mov rax, qword [rax + 0xa0]
test byte [rax], al
add qword [rax + 0x1250], rdi
add rsp, 0x10
pop rbp
ret
mov rax, rdx
mov ecx, 0x40
call fcn.00461740
lea rax, [0x004e7428]
mov ebx, 0x2c
call fcn.00434c80
nop
int3

Function at 0x4208e0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4209e6
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x70], rcx
mov byte [rsp + 0x17], dil
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x18], 0
jmp 0x420923
mov rax, qword [rsp + 0x60]
mov rcx, rdx
mov rbx, qword [rsp + 0x68]
movzx edi, byte [rsp + 0x17]
cmp qword [rsp + 0x18], rbx
jae 0x4209db
test byte [rax], al
lea rcx, [rax + 0x100b8]
mov ebx, edi
mov rax, rcx
nop dword [rax]
call fcn.004216c0
test rax, rax
je 0x4209db
movups xmmword [rsp + 0x20], xmm15
movups xmmword [rsp + 0x30], xmm15
movups xmmword [rsp + 0x40], xmm15
lea rcx, [0x00420a20]
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0x18]
mov qword [rsp + 0x28], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x20]
mov qword [rsp], rbx
nop dword [rax]
call fcn.0045f360
xorps xmm15, xmm15
mov r14, qword [0x005f2030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x70]
nop dword [rax]
test rdx, rdx
jne 0x4209c9
xor eax, eax
jmp 0x4209d3
mov rax, qword [rdx]
call rax
mov rdx, qword [rsp + 0x70]
test al, al
je 0x420911
mov rax, qword [rsp + 0x18]
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call fcn.0045f4a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
jmp fcn.004208e0