joyce8/EMBER2024-capa huggingface dataset:
Function at 0x556a20
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x556c10
push rbp
mov rbp, rsp
sub rsp, 0x68
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x90], rdi
cmp rcx, 2
jl 0x556a53
cmp byte [rbx], 0x5b
jne 0x556a53
cmp byte [rbx + 1], 0x3a
je 0x556a6b
xor eax, eax
xor ebx, ebx
mov rcx, rbx
xor edi, edi
mov rsi, rcx
xor r8d, r8d
mov r9, rdi
add rsp, 0x68
pop rbp
ret
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], rsi
lea rdx, [rcx - 2]
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and edx, 2
lea rax, [rbx + rdx]
mov edi, 2
mov rbx, rsi
lea rcx, [0x005dd12d]
nop dword [rax]
call sym.strings.Index
test rax, rax
jl 0x556bf2
lea rcx, [rax + 4]
mov rdx, qword [rsp + 0x88]
nop word [rax + rax]
cmp rdx, rcx
jb 0x556c0a
mov qword [rsp + 0x40], rcx
sub rdx, rax
add rdx, 0xfffffffffffffffc
mov qword [rsp + 0x50], rdx
neg rdx
sar rdx, 0x3f
and rdx, rcx
mov qword [rsp + 0x48], rdx
mov rbx, qword [0x007700e8]
lea rax, [0x005a1ae0]
mov rdi, rcx
mov rcx, qword [rsp + 0x80]
call sym.runtime.mapaccess1_faststr
mov rsi, qword [rax]
mov rdx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x48]
add r8, rdx
test rsi, rsi
jne 0x556ba9
lea rax, [0x005b4c20]
call sym.runtime.newobject
mov qword [rax + 8], 0x1d
lea rcx, [0x005e6e17]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rax + 0x18], rcx
cmp dword [0x007c4ac0], 0
jne 0x556b79
mov rdx, qword [rsp + 0x80]
jmp 0x556b89
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x80]
mov qword [r11], rdx
mov qword [rax + 0x10], rdx
xor ebx, ebx
mov rcx, rbx
xor edi, edi
mov rsi, rcx
lea r8, [0x00637c00]
mov r9, rax
xor eax, eax
add rsp, 0x68
pop rbp
ret
mov qword [rsp + 0x58], r8
mov r8, qword [rax + 8]
mov r9, qword [rax + 0x10]
mov r10, qword [rax + 0x18]
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
mov rdi, qword [rsp + 0xa0]
call sym.regexp_syntax._parser_.appendGroup
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
xor r8d, r8d
xor r9d, r9d
add rsp, 0x68
pop rbp
ret
xor eax, eax
xor ebx, ebx
mov rcx, rbx
xor edi, edi
mov rsi, rcx
xor r8d, r8d
mov r9, rdi
add rsp, 0x68
pop rbp
ret
call sym.runtime.panicSliceAlen
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp sym.regexp_syntax._parser_.parseNamedClass
Function at 0x55ede0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55ee96
push rbp
mov rbp, rsp
sub rsp, 0x10
lea rax, [0x005ed1e6]
mov ebx, 0x47
nop
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55ee21
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x007701a0]
mov qword [r11 + 8], rcx
mov qword [0x007701a0], rax
lea rax, [0x005eb6e7]
mov ebx, 0x2f
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55ee55
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x007701a8]
mov qword [r11 + 8], rcx
mov qword [0x007701a8], rax
lea rax, [0x005ed9bd]
mov ebx, 0xd1
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55ee89
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x007701b0]
mov qword [r11 + 8], rcx
mov qword [0x007701b0], rax
add rsp, 0x10
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
nop dword [rax + rax]
jmp sym.go.opentelemetry.io_otel_baggage.init

Function at 0x55fbc0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x55fc76
push rbp
mov rbp, rsp
sub rsp, 0x10
lea rax, [0x005ed60a]
mov ebx, 0x5d
nop
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55fc01
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x00770030]
mov qword [r11 + 8], rcx
mov qword [0x00770030], rax
lea rax, [0x005ecffa]
mov ebx, 0x45
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55fc35
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x00770038]
mov qword [r11 + 8], rcx
mov qword [0x00770038], rax
lea rax, [0x005ed79d]
mov ebx, 0xa7
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x55fc69
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x00770040]
mov qword [r11 + 8], rcx
mov qword [0x00770040], rax
add rsp, 0x10
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
nop dword [rax + rax]
jmp sym.go.opentelemetry.io_otel_trace.init

Function at 0x5605e0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x560628
push rbp
mov rbp, rsp
sub rsp, 0x10
lea rax, [0x005ed72c]
mov ebx, 0x71
call sym.regexp.MustCompile
cmp dword [0x007c4ac0], 0
je 0x56061b
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [0x00770118]
mov qword [r11 + 8], rcx
mov qword [0x00770118], rax
add rsp, 0x10
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.go.opentelemetry.io_otel_propagation.init
Function at 0x568520
Capabilities:
Reference sql statements

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x56867a
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
lea rax, [rsp + 0x90]
mov rcx, qword [rdx + 8]
mov qword [rsp + 0x40], rcx
mov rbx, qword [rdx + 0x10]
mov qword [rsp + 0x48], rbx
mov rdx, qword [rdx + 0x18]
mov qword [rsp + 0x30], rdx
call sym.runtime.gorecover
nop
test rax, rax
je 0x568674
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx]
mov rax, qword [rcx + 8]
mov rdx, qword [rdx + 0x98]
call rdx
cmp rax, 0x16
je 0x568595
mov rcx, qword [rsp + 0x40]
jmp 0x5685cc
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx]
mov rax, qword [rcx + 8]
mov rdx, qword [rdx + 0x48]
call rdx
mov rcx, qword [rsp + 0x40]
mov qword [rcx], rax
cmp dword [0x007c4ac0], 0
je 0x5685c8
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov rdx, qword [rcx + 8]
mov qword [r11 + 8], rdx
mov qword [rcx + 8], rbx
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x70], xmm15
mov rdx, qword [rcx]
test rdx, rdx
je 0x5685ea
mov rdx, qword [rdx + 8]
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov rbx, qword [rcx + 8]
call sym.runtime.convTstring
lea rcx, [0x00592aa0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x78], rcx
lea rax, [0x005ec2ec]
mov ebx, 0x36
lea rcx, [rsp + 0x50]
mov edi, 3
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
cmp dword [0x007c4ac0], 0
je 0x568670
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov rax, qword [rcx + 8]
mov qword [r11 + 8], rax
mov qword [rcx + 8], rbx
sub rsp, 0xffffffffffffff80
pop rbp
ret
call sym.runtime.morestack.abi0
nop
jmp sym.flag.isZeroValue.func1
Function at 0x569d00
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x569f0b
push rbp
mov rbp, rsp
sub rsp, 0x40
cmp qword [rbx + 0x20], 0
jne 0x569ec6
cmp qword [rbx + 0x78], 0
jne 0x569e81
cmp qword [rbx + 0x68], 0
jne 0x569e3c
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x28]
mov rcx, qword [rbx + 0x30]
mov rbx, rcx
call sym.net_url.splitHostPort
test rdi, rdi
jne 0x569df2
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + 0x28]
mov rbx, qword [rcx + 0x30]
call sym.net_url.splitHostPort
test rbx, rbx
je 0x569dd5
cmp rbx, 9
jne 0x569d8b
movabs rdx, 0x736f686c61636f6c
nop dword [rax]
cmp qword [rax], rdx
jne 0x569d8b
cmp byte [rax + 8], 0x74
je 0x569dd5
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x005cd020]
mov qword [rsp + 0x30], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], rdx
lea rax, [0x005ec697]
mov ebx, 0x38
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rdx + 0x38]
mov rcx, qword [rdx + 0x40]
mov rax, qword [rsp + 0x28]
call sym.go.uber.org_zap._sinkRegistry_.newFileSinkFromPath
add rsp, 0x40
pop rbp
ret
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x005cd020]
mov qword [rsp + 0x30], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x38], rdx
lea rax, [0x005e9fd3]
mov ebx, 0x28
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x005cd020]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rbx
lea rax, [0x005ebe64]
mov ebx, 0x33
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x005cd020]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rbx
lea rax, [0x005ead0c]
mov ebx, 0x2c
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x005cd020]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rbx
lea rax, [0x005ec037]
mov ebx, 0x34
lea rcx, [rsp + 0x30]
mov edi, 1
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.go.uber.org_zap._sinkRegistry_.newFileSinkFromURL
Function at 0x56b500
Capabilities:
Reference sql statements

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x56b745
push rbp
mov rbp, rsp
sub rsp, 0x90
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], rax
lea rax, [0x005c1c00]
call sym.runtime.newobject
mov qword [rsp + 0x78], rax
mov rbx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
lea rdi, [0x005dd08b]
mov esi, 2
xor eax, eax
call sym.runtime.concatstring2
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 8], rbx
cmp dword [0x007c4ac0], 0
je 0x56b57f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rdx, qword [rcx]
mov qword [r11 + 8], rdx
mov qword [rcx], rax
mov rax, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
call sym.github.com_getlantern_golog.shouldEnableTrace
mov rcx, qword [rsp + 0x78]
mov byte [rcx + 0x10], al
nop
test al, al
jne 0x56b5d9
mov rdx, qword [0x007703d0]
mov rsi, qword [0x007703d8]
mov qword [rcx + 0x18], rdx
cmp dword [0x007c4ac0], 0
je 0x56b5d0
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rsi
mov rdx, qword [rcx + 0x20]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x20], rsi
jmp 0x56b66e
movups xmmword [rsp + 0x80], xmm15
mov rax, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
call sym.runtime.convTstring
lea rcx, [0x00592aa0]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
mov rbx, qword [0x0076fc98]
lea rax, [0x006371a0]
lea rcx, [0x005ea2dd]
mov edi, 0x29
lea rsi, [rsp + 0x80]
mov r8d, 1
mov r9, r8
call sym.fmt.Fprintf
mov rax, qword [rsp + 0x78]
call sym.github.com_getlantern_golog._logger_.newTraceWriter
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 0x18], rax
cmp dword [0x007c4ac0], 0
je 0x56b66a
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov rdx, qword [rcx + 0x20]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x20], rbx
lea rax, [0x005df02d]
mov ebx, 0xb
call sym.os.Getenv
nop
cmp rbx, 1
jne 0x56b6b0
movzx edx, byte [rax]
cmp dl, 0x46
jg 0x56b69f
cmp byte [rax], 0x30
je 0x56b705
cmp byte [rax], 0x31
je 0x56b6ce
cmp dl, 0x46
je 0x56b705
jmp 0x56b709
cmp byte [rax], 0x54
je 0x56b6ce
cmp byte [rax], 0x66
je 0x56b705
cmp byte [rax], 0x74
je 0x56b6ce
jmp 0x56b709
cmp rbx, 4
jne 0x56b6d5
cmp dword [rax], 0x45555254
je 0x56b6ce
cmp dword [rax], 0x65757254
je 0x56b6ce
cmp dword [rax], 0x65757274
jne 0x56b709
mov eax, 1
jmp 0x56b72d
cmp rbx, 5
jne 0x56b709
cmp dword [rax], 0x534c4146
jne 0x56b6e9
cmp byte [rax + 4], 0x45
je 0x56b705
cmp dword [rax], 0x736c6146
jne 0x56b6f7
cmp byte [rax + 4], 0x65
je 0x56b705
cmp dword [rax], 0x736c6166
jne 0x56b709
cmp byte [rax + 4], 0x65
jne 0x56b709
xor eax, eax
jmp 0x56b72d
nop
nop
mov rcx, rbx
mov rbx, rax
lea rax, [rsp + 0x58]
call sym.runtime.stringtoslicebyte
mov rcx, rbx
mov rbx, rax
lea rax, [rsp + 0x38]
call sym.runtime.slicebytetostring
xor eax, eax
mov rbx, qword [rsp + 0x78]
mov byte [rbx + 0x28], al
lea rax, [0x00639500]
add rsp, 0x90
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp sym.github.com_getlantern_golog.LoggerFor
Function at 0x56bf00
Capabilities:
Reference sql statements

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x56c0f9
push rbp
mov rbp, rsp
sub rsp, 0xd0
movups xmmword [rsp + 0xc0], xmm15
mov byte [rsp + 0x57], 0
mov rcx, qword [rdx + 8]
mov rsi, qword [rdx + 0x10]
mov rdi, qword [rdx + 0x20]
mov qword [rsp + 0x70], rdi
mov rax, qword [rdx + 0x18]
mov qword [rsp + 0x80], rax
movups xmmword [rsp + 0xb0], xmm15
lea rdx, [sym.github.com_getlantern_golog._logger_.newTraceWriter.func1.1]
mov qword [rsp + 0xb0], rdx
mov qword [rsp + 0xb8], rcx
lea rcx, [rsp + 0xb0]
mov qword [rsp + 0xc8], rcx
mov byte [rsp + 0x57], 1
movups xmmword [rsp + 0xa0], xmm15
lea rcx, [sym.github.com_getlantern_golog._logger_.newTraceWriter.func1.2]
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rsi
lea rcx, [rsp + 0xa0]
mov qword [rsp + 0xc0], rcx
mov byte [rsp + 0x57], 3
jmp 0x56bffa
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x68]
nop
call sym.runtime.convTstring
mov rbx, qword [rsp + 0x88]
mov ecx, 6
lea rdi, [0x005dd685]
mov esi, 5
lea r8, [0x00592aa0]
mov r9, rax
mov rax, qword [rsp + 0x70]
call sym.github.com_getlantern_golog._logger_.print
mov rax, qword [rsp + 0x80]
mov ebx, 0xa
nop
call sym.bufio._Reader_.ReadString
test rcx, rcx
jne 0x56c02c
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x58], rbx
call sym.github.com_getlantern_golog.getDebugOut
mov rcx, qword [rsp + 0x58]
lea rbx, [rcx - 1]
cmp rcx, rbx
jae 0x56bfb1
jmp 0x56c0df
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x60], rcx
call sym.github.com_getlantern_golog.getDebugOut
movups xmmword [rsp + 0x90], xmm15
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x56c052
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x90], rcx
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x98], rdx
lea rdx, [rsp + 0x90]
mov qword [rsp], rdx
mov qword [rsp + 8], 1
mov qword [rsp + 0x10], 1
mov rbx, rax
mov ecx, 6
lea rdi, [0x005dd685]
mov esi, 5
lea r8, [0x005eb341]
mov r9d, 0x2e
mov rax, qword [rsp + 0x70]
call sym.github.com_getlantern_golog._logger_.printf
mov byte [rsp + 0x57], 1
mov rdx, qword [rsp + 0xc0]
mov r10, qword [rdx]
call r10
mov byte [rsp + 0x57], 0
mov rdx, qword [rsp + 0xc8]
mov r10, qword [rdx]
call r10
add rsp, 0xd0
pop rbp
ret
mov rdx, rcx
mov rcx, rbx
call sym.runtime.panicSliceAlen
nop
call sym.runtime.deferreturn
add rsp, 0xd0
pop rbp
ret
call sym.runtime.morestack.abi0
nop
jmp sym.github.com_getlantern_golog._logger_.newTraceWriter.func1
Function at 0x577400
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577557
push rbp
mov rbp, rsp
sub rsp, 0x50
lea rax, [0x007710c0]
call sym.github.com_getlantern_systray._winTray_.initInstance
nop
test rax, rax
je 0x5774aa
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x38], rax
lea rax, [0x00595820]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x57744f
mov rdx, qword [rcx + 8]
jmp 0x577452
mov rdx, rcx
mov qword [rax], rdx
cmp dword [0x007c4ac0], 0
jne 0x577465
mov rdx, qword [rsp + 0x48]
jmp 0x577472
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x48]
mov qword [r11], rdx
mov qword [rax + 8], rdx
mov rdx, qword [0x00770290]
mov r9, qword [0x00770298]
mov rdx, qword [rdx + 0x48]
lea rbx, [0x005e5f80]
mov ecx, 0x1b
mov rdi, rax
mov esi, 1
mov r8, rsi
mov rax, r9
call rdx
add rsp, 0x50
pop rbp
ret
lea rax, [0x007710c0]
call sym.github.com_getlantern_systray._winTray_.createMenu
test rax, rax
je 0x577545
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x30], rax
lea rax, [0x00595820]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x5774e5
mov rdx, qword [rcx + 8]
jmp 0x5774e8
mov rdx, rcx
mov qword [rax], rdx
cmp dword [0x007c4ac0], 0
jne 0x577500
mov rdx, qword [rsp + 0x40]
jmp 0x57750d
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x40]
mov qword [r11], rdx
mov qword [rax + 8], rdx
mov rdx, qword [0x00770290]
mov r9, qword [0x00770298]
mov rdx, qword [rdx + 0x48]
lea rbx, [0x005e4ec7]
mov ecx, 0x19
mov rdi, rax
mov esi, 1
mov r8, rsi
mov rax, r9
call rdx
add rsp, 0x50
pop rbp
ret
mov rdx, qword [0x0076fe30]
mov rax, qword [rdx]
call rax
add rsp, 0x50
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
nop dword [rax]
jmp sym.github.com_getlantern_systray.registerSystray
Function at 0x577980
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577ad0
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
call sym.github.com_getlantern_systray.iconBytesToFilePath
nop dword [rax]
test rcx, rcx
je 0x577a28
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x38], rcx
lea rax, [0x00595820]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x5779cd
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
cmp dword [0x007c4ac0], 0
jne 0x5779e2
mov rdx, qword [rsp + 0x48]
nop
jmp 0x5779ef
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x48]
mov qword [r11], rdx
mov qword [rax + 8], rdx
mov rdx, qword [0x00770290]
mov r9, qword [0x00770298]
mov rdx, qword [rdx + 0x48]
lea rbx, [0x005ea5f6]
mov ecx, 0x2a
mov rdi, rax
mov esi, 1
mov r8, rsi
mov rax, r9
nop
call rdx
add rsp, 0x50
pop rbp
ret
mov rcx, rbx
mov rbx, rax
lea rax, [0x007710c0]
call sym.github.com_getlantern_systray._winTray_.setIcon
nop word [rax + rax]
test rax, rax
je 0x577aca
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x30], rax
lea rax, [0x00595820]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x577a6f
mov rdx, qword [rcx + 8]
jmp 0x577a72
mov rdx, rcx
mov qword [rax], rdx
cmp dword [0x007c4ac0], 0
jne 0x577a85
mov rdx, qword [rsp + 0x40]
jmp 0x577a92
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x40]
mov qword [r11], rdx
mov qword [rax + 8], rdx
mov rdx, qword [0x00770290]
mov r9, qword [0x00770298]
mov rdx, qword [rdx + 0x48]
lea rbx, [0x005e377e]
mov ecx, 0x16
mov rdi, rax
mov esi, 1
mov r8, rsi
mov rax, r9
call rdx
add rsp, 0x50
pop rbp
ret
add rsp, 0x50
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
nop
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.github.com_getlantern_systray.SetIcon
Function at 0x577be0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x577cb7
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rdx, qword [rax + 0x38]
test rdx, rdx
je 0x577c02
mov edx, dword [rdx + 8]
nop
jmp 0x577c04
xor edx, edx
mov ebx, dword [rax + 8]
mov rdi, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
movzx r8d, byte [rax + 0x30]
movzx r9d, byte [rax + 0x31]
lea rax, [0x007710c0]
mov ecx, edx
call sym.github.com_getlantern_systray._winTray_.addOrUpdateMenuItem
test rax, rax
je 0x577cb1
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rax
lea rax, [0x00595820]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x577c56
mov rdx, qword [rcx + 8]
jmp 0x577c59
mov rdx, rcx
mov qword [rax], rdx
cmp dword [0x007c4ac0], 0
jne 0x577c6c
mov rdx, qword [rsp + 0x38]
jmp 0x577c79
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0x38]
mov qword [r11], rdx
mov qword [rax + 8], rdx
mov rdx, qword [0x00770290]
mov r9, qword [0x00770298]
mov rdx, qword [rdx + 0x48]
lea rbx, [0x005e8339]
mov ecx, 0x21
mov rdi, rax
mov esi, 1
mov r8, rsi
mov rax, r9
call rdx
add rsp, 0x40
pop rbp
ret
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.github.com_getlantern_systray.addOrUpdateMenuItem
Function at 0x579060
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5791ab
push rbp
mov rbp, rsp
sub rsp, 0x58
mov qword [rsp + 0x68], rax
mov rdx, qword [0x0076fc80]
lea rbx, [0x00638348]
lea rcx, [0x007c4780]
xor edi, edi
lea rsi, [0x005e335e]
mov r8d, 0x16
xor r9d, r9d
xor r10d, r10d
mov r11, r10
mov rax, rdx
call sym.log_slog._Logger_.log
mov rdx, qword [rsp + 0x68]
mov rdx, qword [rdx]
mov rax, qword [rdx + 0xa0]
nop dword [rax + rax]
test rax, rax
je 0x579172
mov rbx, qword [0x0075b3c0]
mov rcx, qword [0x0075b3c8]
nop
nop
call sym.os._Process_.signal
nop
test rax, rax
je 0x57913e
mov rdx, qword [0x0076fc80]
movups xmmword [rsp + 0x48], xmm15
je 0x5790f8
mov rax, qword [rax + 8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
mov rax, rdx
lea rbx, [0x00638348]
lea rcx, [0x007c4780]
mov edi, 8
lea rsi, [0x005e67bf]
mov r8d, 0x1d
lea r9, [rsp + 0x48]
mov r10d, 1
mov r11, r10
call sym.log_slog._Logger_.log
add rsp, 0x58
pop rbp
ret
mov rax, qword [0x0076fc80]
lea rbx, [0x00638348]
lea rcx, [0x007c4780]
xor edi, edi
lea rsi, [0x005e5b2d]
mov r8d, 0x1b
xor r9d, r9d
xor r10d, r10d
mov r11, r10
call sym.log_slog._Logger_.log
jmp 0x5791a5
mov rax, qword [0x0076fc80]
lea rbx, [0x00638348]
lea rcx, [0x007c4780]
xor edi, edi
lea rsi, [0x005e7f7c]
mov r8d, 0x21
xor r9d, r9d
xor r10d, r10d
mov r11, r10
nop
call sym.log_slog._Logger_.log
add rsp, 0x58
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.main._SSHTunnel_.Stop