Function at 0x40cf20
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x40d6a6
push rbp
mov rbp, rsp
sub rsp, 0xa8
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rcx
mov byte [rsp + 0xd0], dil
test byte [rax], al
lea rdx, [rax + 0x10400]
add rbx, 0x3fffff
nop
and rbx, 0xffffffffffc00000
mov qword [rsp + 0x38], rbx
cmp rcx, rdx
je 0x40cf7b
xor edx, edx
jmp 0x40d347
lea rdx, [rax + 0x10408]
mov ecx, 0x400000
lea rdi, [0x0061cb38]
mov rax, rdx
call sym.runtime._linearAlloc_.alloc
test rax, rax
jne 0x40cfc5
mov rcx, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x38]
movzx edi, byte [rsp + 0xd0]
mov rdx, rax
mov rax, qword [rsp + 0xb8]
nop dword [rax + rax]
jmp 0x40d347
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x80], rcx
mov rdx, rax
movabs rsi, 0x800000000000
add rdx, rsi
shr rdx, 0x16
mov rsi, qword [rsp + 0xb8]
jmp 0x40d023
mov r10, qword [rsp + 0x30]
mov r11, qword [rsp + 0x88]
lea r10, [r11 + r10*8]
xchg qword [r10], rax
lea rdx, [r9 + 1]
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x80]
mov rsi, r8
mov r8, rax
add r8, rcx
movabs r9, 0x7fffffffffff
add r8, r9
shr r8, 0x16
nop word [rax + rax]
cmp rdx, r8
ja 0x40d2a5
mov r8, rdx
shr rdx, 0x14
cmp rdx, 0x40
jae 0x40d309
mov qword [rsp + 0x78], r8
mov r10, qword [rsi + rdx*8 + 0x101d8]
test r10, r10
jne 0x40d117
mov qword [rsp + 0x70], rdx
mov rax, qword [sym.imp.kernel32.dll_VirtualAlloc]
nop
mov qword [rsp], rax
mov qword [rsp + 8], 0
mov qword [rsp + 0x10], 0x800000
mov qword [rsp + 0x18], 0x3000
mov qword [rsp + 0x20], 4
call sym.runtime.stdcall4.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x40d2f8
mov rdx, qword [rsp + 0xb8]
cmp byte [rdx + 0x103d8], 0
je 0x40d0de
nop
jmp 0x40d0df
nop
mov rsi, qword [rsp + 0x70]
lea rsi, [rdx + rsi*8]
lea rsi, [rsi + 0x101d8]
mov r10, rax
xchg qword [rsi], rax
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x80]
mov rsi, rdx
mov r8, qword [rsp + 0x78]
movabs r9, 0x7fffffffffff
test byte [r10], al
and r8d, 0xfffff
mov r11, qword [r10 + r8*8]
test r11, r11
jne 0x40d2e7
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x88], r10
lea rax, [rsi + 0x103e0]
mov ebx, 0x10d0
mov ecx, 8
lea rdi, [0x0061ebf8]
call sym.runtime._linearAlloc_.alloc
test rax, rax
jne 0x40d17c
mov eax, 0x10d0
mov ebx, 8
lea rcx, [0x0061ebf8]
call sym.runtime.persistentalloc
test rax, rax
je 0x40d2d6
movzx esi, byte [rsp + 0xd0]
test sil, sil
je 0x40d28e
mov r8, qword [rsp + 0xb8]
mov r9, qword [r8 + 0x10438]
nop dword [rax]
cmp qword [r8 + 0x10430], r9
jne 0x40d256
mov qword [rsp + 0x48], rax
shl r9, 4
test r9, r9
jne 0x40d1c2
mov r9, qword [0x0061c088]
mov qword [rsp + 0x40], r9
mov rax, r9
mov ebx, 8
lea rcx, [0x0061ebf8]
call sym.runtime.persistentalloc
nop dword [rax + rax]
test rax, rax
je 0x40d2c5
mov rsi, qword [rsp + 0xb8]
mov r8, qword [rsi + 0x10430]
mov rbx, qword [rsi + 0x10428]
mov qword [rsi + 0x10428], rax
mov r9, qword [rsp + 0x40]
shr r9, 3
mov qword [rsi + 0x10438], r9
mov rax, qword [rsi + 0x10428]
mov rcx, qword [rsi + 0x10430]
cmp rcx, r8
cmovg rcx, r8
cmp rax, rbx
je 0x40d241
shl rcx, 3
call sym.runtime.memmove
mov rsi, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x48]
movzx esi, byte [rsp + 0xd0]
mov r8, qword [rsp + 0xb8]
mov rcx, qword [r8 + 0x10430]
mov rdx, qword [r8 + 0x10438]
lea r9, [rcx + 1]
cmp rdx, r9
jb 0x40d2bc
mov qword [r8 + 0x10430], r9
cmp rcx, r9
jae 0x40d2b1
mov rdx, qword [r8 + 0x10428]
mov r9, qword [rsp + 0x78]
mov qword [rdx + rcx*8], r9
jmp 0x40cff8
mov r8, qword [rsp + 0xb8]
mov r9, qword [rsp + 0x78]
nop dword [rax + rax]
jmp 0x40cff8
mov rbx, rcx
add rsp, 0xa8
pop rbp
ret
mov rax, rcx
mov rcx, r9
call sym.runtime.panicIndex
mov rcx, r9
nop
call sym.runtime.panicSliceAcap
lea rax, [0x004df7fb]
mov ebx, 0x22
call sym.runtime.throw
lea rax, [0x004e1377]
mov ebx, 0x2c
call sym.runtime.throw
lea rax, [0x004dcfed]
mov ebx, 0x19
call sym.runtime.throw
lea rax, [0x004e0620]
mov ebx, 0x27
call sym.runtime.throw
mov rax, rdx
mov ecx, 0x40
call sym.runtime.panicIndexU
mov r9, qword [rsi + 0x10]
mov qword [rcx], r9
mov r9, qword [rax + 0x16c68]
sub r9, qword [rax + 0x16c38]
nop
mov qword [rax + 0x16c68], r9
mov r9, qword [rax + 0x16c50]
mov qword [rsi], r9
mov qword [rax + 0x16c50], rsi
mov rdx, r11
mov rsi, qword [rcx]
test rsi, rsi
je 0x40d472
mov qword [rsp + 0x68], rsi
mov rdx, qword [rsi]
movzx r8d, byte [rsi + 8]
mov r9, rdx
sub rdx, rbx
test r8, r8
cmovne r9, rdx
lea rdx, [rbx + r9]
cmp r9, rdx
jbe 0x40d385
movabs r8, 0x7fffffffffff
xor r10d, r10d
jmp 0x40d401
movabs r8, 0x7fffffffffff
lea r10, [r8 + rdx]
shr r10, 0x16
nop word [rax + rax]
cmp r10, 0x4000000
jb 0x40d3ae
xor r10d, r10d
jmp 0x40d401
mov qword [rsp + 0x58], r9
mov qword [rsp + 0x80], rdx
mov rax, r9
nop
call sym.runtime.sysReserveOS
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x68]
movzx edi, byte [rsp + 0xd0]
movabs r8, 0x7fffffffffff
mov r9, qword [rsp + 0x58]
mov r10, rax
mov rax, qword [rsp + 0xb8]
mov r11, r10
cmp r10, r9
je 0x40d45e
test r11, r11
je 0x40d316
mov qword [rsp + 0xa0], r11
mov rax, r11
nop dword [rax]
call sym.runtime.sysFreeOS
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x68]
movzx edi, byte [rsp + 0xd0]
movabs r8, 0x7fffffffffff
mov r11, qword [rsp + 0xa0]
jmp 0x40d316
movzx r10d, byte [rsi + 8]
test r10, r10
cmovne rdx, r9
mov qword [rsi], rdx
mov rcx, rbx
jmp 0x40d484
mov rcx, rbx
movabs r8, 0x7fffffffffff
xor ebx, ebx
mov r11, rdx
test rbx, rbx
jne 0x40d54b
xor eax, eax
mov rbx, rcx
mov ecx, 0x400000
call sym.runtime.sysReserveAligned
nop dword [rax]
test rax, rax
je 0x40d5e5
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x80], rbx
mov rax, qword [rsp + 0xb8]
lea rcx, [rax + 0x16c38]
mov qword [rsp + 0x98], rcx
mov rax, rcx
call sym.runtime._fixalloc_.alloc
mov rcx, qword [rsp + 0xa0]
mov qword [rax], rcx
mov byte [rax + 8], 1
mov rcx, qword [0x005ae320]
mov qword [rax + 0x10], rcx
mov qword [0x005ae320], rax
mov rax, qword [rsp + 0x98]
call sym.runtime._fixalloc_.alloc
mov r11, qword [rsp + 0xa0]
mov rcx, r11
mov rbx, qword [rsp + 0x80]
add rcx, rbx
mov qword [rax], rcx
mov rcx, qword [0x005ae320]
mov qword [rax + 0x10], rcx
mov qword [0x005ae320], rax
mov rax, qword [rsp + 0xb8]
movzx edi, byte [rsp + 0xd0]
movabs r8, 0x7fffffffffff
mov rdx, r11
lea rsi, [rbx + r11]
cmp r11, rsi
jbe 0x40d570
movabs r9, 0x800000000000
mov r10d, 0x1c
lea r12, [0x004dddab]
jmp 0x40d5ca
movabs r9, 0x800000000000
lea r10, [r9 + r11]
shr r10, 0x16
cmp r10, 0x4000000
jb 0x40d59a
mov r10d, 0x21
lea r12, [0x004df34f]
jmp 0x40d5ca
lea r10, [r8 + rsi]
shr r10, 0x16
cmp r10, 0x4000000
mov r10d, 0
mov r12d, 0x20
cmovae r10, r12
mov r12d, 0
lea r13, [0x004dee85]
cmovae r12, r13
test r10, r10
jne 0x40d605
test r11, 0x3fffff
jne 0x40d5f2
mov rax, rdx
mov rcx, rbx
nop
jmp 0x40cfca
xor eax, eax
xor ebx, ebx
add rsp, 0xa8
pop rbp
ret
lea rax, [0x004df391]
mov ebx, 0x21
nop
call sym.runtime.throw
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x60], r10
nop
call sym.runtime.printlock
lea rax, [0x004df370]
mov ebx, 0x21
call sym.runtime.printstring
mov rax, qword [rsp + 0x50]
nop dword [rax + rax]
call sym.runtime.printhex
lea rax, [0x004d8431]
mov ebx, 2
call sym.runtime.printstring
mov rax, qword [rsp + 0x80]
nop
call sym.runtime.printhex
lea rax, [0x004deb78]
mov ebx, 0x1f
call sym.runtime.printstring
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x60]
call sym.runtime.printstring
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x004e174f]
mov ebx, 0x2e
nop
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
jmp sym.runtime._mheap_.sysAlloc