joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4fc5c0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc706
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
nop dword [rax]
cmp rcx, r9
jb 0x4fc6f6
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], r8
call sym.math_big.addVV.abi0
xorps xmm15, xmm15
mov r14, qword [0x00a30e38]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x4fc6db
mov rbx, qword [rsp + 0x90]
mov rsi, rbx
sar rbx, 1
lea rcx, [rsi + rbx]
mov rdx, qword [rsp + 0x70]
cmp rdx, rcx
jb 0x4fc6f1
cmp rsi, rcx
ja 0x4fc6e9
sub rdx, rsi
mov rdi, rdx
neg rdx
mov r8, rsi
shl rsi, 3
sar rdx, 0x3f
and rsi, rdx
mov rdx, qword [rsp + 0x60]
add rdx, rsi
mov rcx, qword [rsp + 0x68]
cmp rcx, r8
jb 0x4fc6e1
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rdx
sub rcx, r8
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call sym.math_big.addVW.abi0
xorps xmm15, xmm15
mov r14, qword [0x00a30e38]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov rax, r8
call sym.runtime.panicSliceB
mov rax, rsi
call sym.runtime.panicSliceB
call sym.runtime.panicSliceAcap
mov rdx, rcx
mov rcx, r9
nop dword [rax]
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp sym.math_big.karatsubaAdd
Function at 0x4fc760
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4fc8a6
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
nop dword [rax]
cmp rcx, r9
jb 0x4fc896
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
mov qword [rsp], rax
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], r8
call sym.math_big.subVV.abi0
xorps xmm15, xmm15
mov r14, qword [0x00a30e38]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x4fc87b
mov rbx, qword [rsp + 0x90]
mov rsi, rbx
sar rbx, 1
lea rcx, [rsi + rbx]
mov rdx, qword [rsp + 0x70]
cmp rdx, rcx
jb 0x4fc891
cmp rsi, rcx
ja 0x4fc889
sub rdx, rsi
mov rdi, rdx
neg rdx
mov r8, rsi
shl rsi, 3
sar rdx, 0x3f
and rsi, rdx
mov rdx, qword [rsp + 0x60]
add rdx, rsi
mov rcx, qword [rsp + 0x68]
cmp rcx, r8
jb 0x4fc881
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rdx
sub rcx, r8
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x30], rax
call sym.math_big.subVW.abi0
xorps xmm15, xmm15
mov r14, qword [0x00a30e38]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov rax, r8
call sym.runtime.panicSliceB
mov rax, rsi
call sym.runtime.panicSliceB
call sym.runtime.panicSliceAcap
mov rdx, rcx
mov rcx, r9
nop dword [rax]
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp sym.math_big.karatsubaSub
Function at 0x549640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x549826
push rbp
mov rbp, rsp
sub rsp, 0x68
movq qword [rsp + 0x60], xmm15
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rcx
mov dword [rsp + 0x90], edi
mov dword [rsp + 0x94], esi
mov byte [rsp + 0x37], 0
mov dword [rsp + 0x3c], 0
mov ebx, 0x10
call sym.modernc.org_libc._TLS_.Alloc
lea rcx, [sym.modernc.org_sqlite_lib._pagerWalFrames.deferwrap1]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x58], rcx
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x60], rdx
mov byte [rsp + 0x37], 1
mov rdx, rax
mov rsi, qword [rsp + 0x88]
mov qword [rax], rsi
mov r8d, dword [rsp + 0x94]
test r8d, r8d
je 0x5496ea
mov rax, rdx
mov rdx, qword [rdx]
mov esi, dword [rsp + 0x90]
mov rbx, rax
xor edi, edi
jmp 0x549802
mov eax, 1
mov qword [rsp + 0x48], rdx
mov r10, qword [rsp + 0x80]
lea r11, [r10 + 0x100]
add dword [r11], eax
mov r11, rdx
mov rbx, qword [rdx]
mov rdx, rbx
cmp dword [rdx + 0x30], 1
jne 0x549737
mov rax, rcx
call sym.modernc.org_sqlite_lib._pager_write_changecounter
mov rcx, qword [rsp + 0x78]
mov r8d, dword [rsp + 0x94]
mov r10, qword [rsp + 0x80]
mov r11, qword [rsp + 0x48]
mov rbx, qword [r10 + 0x128]
mov r12, qword [r10 + 0xc8]
mov rdi, qword [r11]
movzx r9d, byte [r10 + 0xf]
mov rax, rcx
mov rcx, r12
mov esi, dword [rsp + 0x90]
call sym.modernc.org_sqlite_lib._walFrames
nop
test eax, eax
jne 0x549784
mov rsi, qword [rsp + 0x80]
mov r8, rsi
cmp qword [rsi + 0x70], 0
je 0x549784
mov dword [rsp + 0x38], eax
mov rsi, qword [rsp + 0x48]
mov rsi, qword [rsi]
jmp 0x5497a8
mov dword [rsp + 0x3c], eax
mov byte [rsp + 0x37], 0
mov rdx, qword [rsp + 0x60]
mov rax, qword [rdx]
call rax
mov eax, dword [rsp + 0x3c]
add rsp, 0x68
pop rbp
ret
mov rsi, qword [rsi + 0x20]
mov r8, r9
test rsi, rsi
je 0x549784
mov r9, r8
mov rbx, qword [r8 + 0x70]
test rbx, rbx
je 0x5497a1
mov qword [rsp + 0x40], rsi
mov ecx, dword [rsi + 0x30]
mov rdi, qword [rsi + 8]
mov rax, qword [rsp + 0x78]
call sym.modernc.org_sqlite_lib._backupUpdate
mov eax, dword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r9, qword [rsp + 0x80]
jmp 0x5497a1
mov r11, rdx
add r11, 0x20
lea r12d, [rdi + 1]
mov r13, qword [rdx + 0x20]
cmp dword [rdx + 0x30], esi
cmovbe r10, r11
cmovbe edi, r12d
mov rdx, r13
mov rax, r10
mov r10, rax
mov qword [rax], rdx
test rdx, rdx
jne 0x5497e2
mov rdx, rbx
mov eax, edi
jmp 0x5496ef
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x24], esi
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov edi, dword [rsp + 0x20]
mov esi, dword [rsp + 0x24]
nop dword [rax]
jmp sym.modernc.org_sqlite_lib._pagerWalFrames
Function at 0x54ffa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x550182
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x60], ecx
mov rsi, qword [rbx + 0x78]
movsxd rdi, ecx
imul rdi, rdi, 0x38
mov r8d, dword [rbx + 0x80]
mov dword [rsp + 0x20], r8d
mov rbx, rsi
mov rcx, rdi
nop dword [rax]
call sym.modernc.org_sqlite_lib._sqlite3Realloc
test rax, rax
je 0x55002e
mov qword [rsp + 0x28], rax
mov edx, dword [rsp + 0x20]
movsxd rsi, edx
imul rsi, rsi, 0x38
lea rbx, [rsi + rax]
mov esi, dword [rsp + 0x60]
sub esi, edx
movsxd rsi, esi
imul rdi, rsi, 0x38
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call sym.modernc.org_libc.Xmemset
mov rdx, qword [rsp + 0x58]
mov rsi, rdx
mov r8, qword [rsp + 0x28]
mov qword [rdx + 0x78], r8
mov eax, dword [rsp + 0x20]
jmp 0x55004b
mov eax, 7
add rsp, 0x40
pop rbp
ret
mov rsi, rdx
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rdx + 0x80], eax
mov r8, rdi
mov ecx, dword [rsp + 0x60]
cmp ecx, eax
jle 0x55017a
mov dword [rsp + 0x20], eax
movsxd rdx, eax
imul rdx, rdx, 0x38
mov qword [rsp + 0x38], rdx
lea rdi, [rdx + r8]
mov r9, rdi
mov r10, rsi
mov esi, dword [rsi + 0x20]
mov dword [rdi + 0x18], esi
mov rsi, r10
mov rdi, qword [r10 + 0x50]
cmp qword [rdi], 0
je 0x550098
mov rdi, qword [r10 + 0x60]
test rdi, rdi
jle 0x550098
mov r10, r9
mov qword [r9], rdi
mov rdi, r10
jmp 0x5500a5
mov rdi, r9
mov r10d, dword [r10 + 0xb8]
mov qword [r9], r10
mov qword [rsp + 0x30], rdi
mov rdx, rsi
mov esi, dword [rsi + 0x3c]
mov dword [rdi + 0x1c], esi
mov edx, dword [rdx + 0x20]
mov dword [rsp + 0x24], edx
mov rax, qword [rsp + 0x50]
mov ebx, 0x200
call sym.modernc.org_sqlite_lib._sqlite3MallocZero
test rax, rax
je 0x5500d9
mov rcx, rax
mov edx, dword [rsp + 0x24]
mov dword [rax], edx
jmp 0x5500dc
mov rcx, rax
mov rdx, qword [rsp + 0x30]
mov rsi, rdx
mov qword [rdx + 0x10], rcx
mov rcx, rsi
mov dword [rsi + 0x20], 1
cmp qword [rcx + 0x10], 0
je 0x55016f
mov rcx, qword [rsp + 0x58]
mov rdx, rcx
mov rcx, qword [rcx + 0x128]
test rcx, rcx
je 0x550165
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
lea r8, [rdi + rsi]
lea r8, [r8 + 0x24]
mov r9, rcx
mov ecx, dword [rcx + 0x58]
lea r10, [rdi + rsi]
lea r10, [r10 + 0x28]
lea r11, [r9 + 0x60]
lea r12, [rdi + rsi]
lea r12, [r12 + 0x2c]
lea r13, [r9 + 0x64]
lea rsi, [rdi + rsi]
lea rsi, [rsi + 0x30]
mov dword [r8], ecx
mov ecx, dword [r11]
mov dword [r10], ecx
mov ecx, dword [r13]
mov dword [r12], ecx
mov ecx, dword [r9 + 0x88]
mov dword [rsi], ecx
jmp 0x550039
mov rdi, qword [rsp + 0x28]
jmp 0x550039
mov eax, 7
add rsp, 0x40
pop rbp
ret
xor eax, eax
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
jmp sym.modernc.org_sqlite_lib._pagerOpenSavepoint
Function at 0x5a2460
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a25d6
push rbp
mov rbp, rsp
sub rsp, 0x38
lea rdx, [rdi + 1]
movzx edx, byte [rdx]
lea r10, [r8 + 1]
movzx r10d, byte [r10]
mov r11, rdi
movzx r11d, byte [r11]
mov r12, r8
movzx r12d, byte [r12]
add r11, rdi
add r12, r8
cmp r10d, edx
jne 0x5a24c5
movsxd rdx, edx
nop
cmp rdx, 0xa
jae 0x5a25c8
lea r10, [0x009b89d0]
movzx edx, byte [r10 + rdx]
xor r10d, r10d
xor r13d, r13d
nop dword [rax]
jmp 0x5a2572
cmp edx, 7
jle 0x5a24d5
cmp r10d, 7
jle 0x5a24e8
sub edx, r10d
jmp 0x5a252b
cmp r10d, 7
jle 0x5a24e8
mov r10d, 0xffffffff
mov edx, 1
jmp 0x5a2500
mov r13d, edx
sub edx, r10d
cmp r13d, 7
mov r10d, 0xffffffff
cmovg edx, r10d
nop dword [rax]
test edx, edx
jle 0x5a2515
movzx r11d, byte [r11]
test r11d, 0x80
cmovne edx, r10d
jmp 0x5a252b
movzx r10d, byte [r12]
test r10d, 0x80
mov r10d, 1
cmovne edx, r10d
test edx, edx
jne 0x5a2550
mov rdx, rbx
mov rdx, qword [rdx + 0x10]
mov rdx, qword [rdx + 0x28]
movzx edx, word [rdx + 6]
nop
cmp edx, 1
jg 0x5a2549
xor eax, eax
jmp 0x5a2566
call sym.modernc.org_sqlite_lib._vdbeSorterCompareTail
jmp 0x5a2566
mov rcx, qword [rbx + 0x10]
mov rcx, qword [rcx + 0x28]
mov rcx, qword [rcx + 0x18]
mov eax, edx
neg edx
cmp byte [rcx], 0
cmovne eax, edx
add rsp, 0x38
pop rbp
ret
inc r10d
mov r13d, r15d
cmp r10d, edx
jge 0x5a25bd
movsxd r13, r10d
lea r15, [r13 + r11]
movzx r15d, byte [r15]
add r13, r12
movzx r13d, byte [r13]
sub r15d, r13d
test r15d, r15d
je 0x5a256c
movzx edx, byte [r11]
movzx r10d, byte [r12]
xor r10d, edx
bt r10d, 7
jae 0x5a25c0
test edx, 0x80
mov r15d, 1
mov edx, 0xffffffff
cmovne r15d, edx
jmp 0x5a25c0
mov r15d, r13d
mov edx, r15d
jmp 0x5a252b
mov rax, rdx
mov ecx, 0xa
call sym.runtime.panicIndex
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x38], r9d
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov esi, dword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x38]
nop
jmp sym.modernc.org_sqlite_lib._vdbeSorterCompareInt
Function at 0x5ecc80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5ecdcb
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rdx, rdi
mov rsi, qword [rdi]
mov r8, rbx
mov r9, qword [r8 + 8]
mov r10, qword [r8 + 0x18]
mov r8d, dword [r8 + 0x20]
dec r8d
movsxd r8, r8d
lea r8, [r8 + r8*2]
shl r8, 3
movzx esi, word [rsi + 0x14]
and esi, 0x3f
lea r11, [0x009bafc0]
movzx esi, byte [r11 + rsi]
nop
add r8, qword [r10 + 0x88]
cmp qword [r9 + 8], 0
mov r9d, 0xffffffff
mov r10d, 0
cmove r9d, r10d
cmp esi, 5
je 0x5ecd18
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x60], ecx
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x24], r9d
lea rsi, [r8 + 0x10]
mov rdi, qword [rsi]
mov qword [rsp + 0x30], rdi
mov esi, 1
xor r8d, r8d
jmp 0x5ecd51
add rsp, 0x40
pop rbp
ret
mov esi, dword [rsp + 0x2c]
inc esi
mov ecx, dword [rsp + 0x60]
mov r10, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
mov rdx, r12
mov rbx, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x24]
lea r11, [0x009bafc0]
mov r8d, eax
mov rax, r10
cmp ecx, esi
jle 0x5ecdb4
movsxd r10, esi
lea r10, [rdx + r10*8]
mov r10, qword [r10]
mov r12, r10
movzx r10d, word [r10 + 0x14]
and r10d, 0x3f
movzx r10d, byte [r11 + r10]
cmp r10d, 5
je 0x5ecdae
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x2c], esi
movsxd rsi, r8d
lea rsi, [rdx + rsi*8]
mov rbx, qword [rsi]
mov rcx, r12
call sym.modernc.org_sqlite_lib._sqlite3MemCompare
mov edx, dword [rsp + 0x24]
xor eax, edx
test eax, eax
jl 0x5ecda5
mov eax, dword [rsp + 0x2c]
nop
jmp 0x5ecd1e
mov eax, dword [rsp + 0x28]
jmp 0x5ecd1e
add rsp, 0x40
pop rbp
ret
movsxd rsi, r8d
lea rdx, [rdx + rsi*8]
mov rcx, qword [rdx]
nop
call sym.modernc.org_sqlite_lib.Xsqlite3_result_value
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
mov qword [rsp + 0x20], rdi
nop
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp sym.modernc.org_sqlite_lib._minmaxFunc
Function at 0x67d380
Capabilities:
Resolve function by parsing pe exports

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x67dee5
push rbp
mov rbp, rsp
sub rsp, 0x98
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rbx
mov dword [rsp + 0xb8], ecx
mov dword [rsp + 0xbc], edi
mov dword [rsp + 0xc0], esi
mov dword [rsp + 0x24], 0
mov ebx, 0x10
call sym.modernc.org_libc._TLS_.Alloc
mov qword [rsp + 0x48], rax
lea rcx, [sym.modernc.org_sqlite_lib._jsonbValidityCheck.deferwrap1]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x90], rcx
lea rdx, [rsp + 0x88]
mov qword [rsp + 0x70], rdx
lea rax, [rsp + 0x58]
call sym.runtime.deferprocStack
test eax, eax
jne 0x67d7d2
mov edx, dword [rsp + 0xc0]
nop dword [rax + rax]
cmp edx, 0x3e8
ja 0x67d7b2
mov rdi, qword [rsp + 0x48]
mov rdx, rdi
mov dword [rdx], 0
mov rax, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xb0]
mov ecx, dword [rsp + 0xb8]
call sym.modernc.org_sqlite_lib._jsonbPayloadSize
test eax, eax
je 0x67d792
mov edx, dword [rsp + 0xb8]
lea esi, [rax + rdx]
mov rdi, qword [rsp + 0x48]
mov r8, rdi
mov r8d, dword [r8]
lea ecx, [rsi + r8]
mov r9d, dword [rsp + 0xbc]
nop
cmp r9d, ecx
jne 0x67d776
mov rbx, qword [rsp + 0xb0]
mov r9, rbx
mov r9, qword [r9]
mov r10d, edx
add r10, r9
movzx r10d, byte [r10]
mov r11d, r10d
and r10d, 0xf
cmp r10, 0xc
ja 0x67d75d
mov dword [rsp + 0x3c], ecx
mov qword [rsp + 0x40], r9
and r11d, 0xf
lea r12, [0x007cdb40]
jmp qword [r12 + r10*8]
lea eax, [rdx + 1]
mov dword [rsp + 0x24], eax
call sym.runtime.deferreturn
mov eax, dword [rsp + 0x24]
add rsp, 0x98
pop rbp
ret
lea eax, [rdx + 1]
mov dword [rsp + 0x24], eax
nop dword [rax]
call sym.runtime.deferreturn
mov eax, dword [rsp + 0x24]
add rsp, 0x98
pop rbp
ret
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0x24], eax
nop
call sym.runtime.deferreturn
mov eax, dword [rsp + 0x24]
add rsp, 0x98
pop rbp
ret
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0x24], eax
nop
call sym.runtime.deferreturn
mov eax, dword [rsp + 0x24]
add rsp, 0x98
pop rbp
ret
call sym.runtime.deferreturn
mov eax, dword [rsp + 0x24]
add rsp, 0x98
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
mov dword [rsp + 0x1c], edi
mov dword [rsp + 0x20], esi
nop dword [rax + rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
mov edi, dword [rsp + 0x1c]
mov esi, dword [rsp + 0x20]
nop dword [rax + rax]
jmp sym.modernc.org_sqlite_lib._jsonbValidityCheck
Function at 0x68df40
Capabilities:
Parse credit card information

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x68e142
push rbp
mov rbp, rsp
sub rsp, 0x30
movq qword [rsp + 0x28], xmm15
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], ecx
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x17], 0
mov ebx, 0x10
nop dword [rax + rax]
call sym.modernc.org_libc._TLS_.Alloc
lea rcx, [sym.modernc.org_sqlite_lib._rtreeLeafConstraint.deferwrap1]
mov qword [rsp + 0x18], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x18]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x17], 1
mov rcx, qword [rsp + 0x48]
mov rdx, rcx
mov ecx, dword [rcx]
shl ecx, 2
add ecx, 8
movsxd rcx, ecx
mov rsi, qword [rsp + 0x58]
add rcx, rsi
mov rsi, rax
mov ecx, dword [rcx]
mov edi, ecx
shl ecx, 0x18
mov r8d, edi
and edi, 0xff00
shl edi, 8
or ecx, edi
mov edi, r8d
and r8d, 0xff0000
shr r8d, 8
or r8d, ecx
shr edi, 0x18
or edi, r8d
mov dword [rax], edi
mov ecx, dword [rsp + 0x50]
test ecx, ecx
je 0x68e009
mov eax, dword [rsi]
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
jmp 0x68e011
movss xmm1, dword [rsi]
cvtss2sd xmm0, xmm1
mov rax, rdx
mov ecx, dword [rdx + 4]
cmp ecx, 0x42
jg 0x68e073
nop dword [rax]
cmp ecx, 0x3f
je 0x68e05e
cmp ecx, 0x40
je 0x68e102
cmp ecx, 0x42
jne 0x68e0f0
add rax, 8
movsd xmm1, qword [rax]
ucomisd xmm1, xmm0
jb 0x68e102
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
cmp ecx, 0x43
jne 0x68e0a0
add rax, 8
movsd xmm1, qword [rax]
ucomisd xmm1, xmm0
jbe 0x68e102
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
cmp ecx, 0x44
jne 0x68e0c8
add rax, 8
movsd xmm1, qword [rax]
ucomisd xmm0, xmm1
jb 0x68e102
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
cmp ecx, 0x45
jne 0x68e0f0
add rax, 8
movsd xmm1, qword [rax]
ucomisd xmm0, xmm1
jbe 0x68e102
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
add rax, 8
movsd xmm1, qword [rax]
ucomisd xmm0, xmm1
jne 0x68e102
nop
jnp 0x68e122
mov rax, qword [rsp + 0x60]
mov dword [rax], 0
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
mov byte [rsp + 0x17], 0
mov rdx, qword [rsp + 0x28]
mov rax, qword [rdx]
call rax
add rsp, 0x30
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp sym.modernc.org_sqlite_lib._rtreeLeafConstraint
Function at 0x6a7780
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6a7962
push rbp
mov rbp, rsp
sub rsp, 0x70
movq qword [rsp + 0x68], xmm15
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rbx
mov byte [rsp + 0x37], 0
mov dword [rsp + 0x3c], 0
mov ebx, 0x10
nop dword [rax + rax]
call sym.modernc.org_libc._TLS_.Alloc
mov qword [rsp + 0x40], rax
lea rcx, [sym.modernc.org_sqlite_lib._fts5CInstIterNext.deferwrap1]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x60], rcx
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x68], rdx
mov byte [rsp + 0x37], 1
mov rdx, qword [rsp + 0x88]
mov rsi, rdx
mov dword [rdx + 0x1c], 0xffffffff
mov rdx, rsi
mov dword [rsi + 0x20], 0xffffffff
xor ebx, ebx
jmp 0x6a7827
mov rcx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x40]
mov rdx, r9
mov ebx, eax
mov rax, rsi
test ebx, ebx
jne 0x6a7936
mov r9, rdx
mov r10d, dword [rdx + 0x14]
nop word [rax + rax]
nop
cmp dword [rdx + 0x18], r10d
jle 0x6a7936
mov r10, r9
mov r9, qword [r9]
mov rdx, qword [r9 + 0x48]
mov r9, qword [rdx]
mov rbx, qword [r10 + 8]
mov r10d, dword [r10 + 0x14]
lea rsi, [rax + 4]
mov qword [rsp + 0x50], rsi
lea r8, [rax + 8]
mov qword [rsp + 0x48], r8
mov rdi, rax
mov rax, rcx
mov ecx, r10d
call r9
nop dword [rax]
test eax, eax
jne 0x6a7925
mov r9, qword [rsp + 0x50]
mov r9d, dword [r9]
mov r10, qword [rsp + 0x88]
mov r11, r10
nop dword [rax + rax]
cmp dword [r10 + 0x10], r9d
jne 0x6a7915
mov dword [rsp + 0x38], eax
mov rsi, r11
mov rdi, qword [r11]
mov rdx, qword [rdi + 0x38]
mov rdi, qword [rdx]
mov r9, qword [rsp + 0x40]
mov ecx, dword [r9]
mov rbx, qword [rsi + 8]
mov rax, qword [rsp + 0x80]
call rdi
mov rsi, qword [rsp + 0x48]
mov esi, dword [rsi]
mov rdi, qword [rsp + 0x88]
mov r8, rdi
lea r9d, [rsi + rax]
lea r9d, [r9 - 1]
cmp dword [rdi + 0x1c], 0
jge 0x6a78fc
mov dword [rdi + 0x1c], esi
mov r10, r8
mov dword [r8 + 0x20], r9d
mov r8, r10
jmp 0x6a790e
mov r10d, dword [rdi + 0x20]
cmp r10d, esi
jl 0x6a7932
cmp r10d, r9d
jge 0x6a790e
mov dword [rdi + 0x20], r9d
mov eax, dword [rsp + 0x38]
mov r11, r8
mov r9, r11
inc dword [r11 + 0x14]
nop dword [rax]
jmp 0x6a7812
mov r9, qword [rsp + 0x88]
jmp 0x6a7812
mov ebx, dword [rsp + 0x38]
mov dword [rsp + 0x3c], ebx
mov byte [rsp + 0x37], 0
mov rdx, qword [rsp + 0x68]
mov rax, qword [rdx]
call rax
mov eax, dword [rsp + 0x3c]
add rsp, 0x70
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop dword [rax + rax]
jmp sym.modernc.org_sqlite_lib._fts5CInstIterNext