joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4197e0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41982b
push rbp
mov rbp, rsp
sub rsp, 0x28
mov r8, qword [rdx + 0x10]
mov rcx, qword [rdx + 0x18]
mov rdi, qword [rdx + 0x20]
mov rsi, qword [rdx + 0x28]
mov rdx, qword [rdx + 8]
mov rax, qword [rdx + 8]
mov rbx, qword [r8 + 8]
call sym.runtime.addfinalizer
test al, al
je 0x419819
add rsp, 0x28
pop rbp
ret
lea rax, [0x004e10ee]
mov ebx, 0x2b
call sym.runtime.throw
nop
call sym.runtime.morestack.abi0
jmp sym.runtime.SetFinalizer.func2

Function at 0x4199a0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x419a9c
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rsi, qword [rax]
test rsi, rsi
je 0x419a6e
mov rdi, qword [rax + 0x18]
test rdi, rdi
je 0x4199f9
mov rcx, qword [rdi]
mov qword [rax + 0x18], rcx
mov rcx, qword [rax]
add qword [rax + 0x30], rcx
cmp byte [rax + 0x40], 0
je 0x4199f0
mov qword [rsp + 0x18], rdi
mov rbx, qword [rax]
mov rax, rdi
call sym.runtime.memclrNoHeapPointers
mov rdi, qword [rsp + 0x18]
mov rax, rdi
add rsp, 0x28
pop rbp
ret
mov qword [rsp + 0x38], rax
mov edi, dword [rax + 0x28]
cmp rsi, rdi
jbe 0x419a29
mov edx, dword [rax + 0x2c]
mov rcx, qword [rax + 0x38]
xor ebx, ebx
mov rax, rdx
call sym.runtime.persistentalloc
mov rdx, qword [rsp + 0x38]
mov qword [rdx + 0x20], rax
mov esi, dword [rdx + 0x2c]
mov dword [rdx + 0x28], esi
mov rax, rdx
mov rbx, qword [rax + 0x20]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x419a51
mov qword [rsp + 0x20], rbx
mov rcx, qword [rdx]
mov rsi, qword [rax + 0x10]
mov rax, rsi
call rcx
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x20]
mov rcx, qword [rax]
add qword [rax + 0x20], rcx
mov rcx, qword [rax]
sub dword [rax + 0x28], ecx
mov rcx, qword [rax]
add qword [rax + 0x30], rcx
mov rax, rbx
add rsp, 0x28
pop rbp
ret
call sym.runtime.printlock
lea rax, [0x004e21a5]
mov ebx, 0x34
nop
call sym.runtime.printstring
call sym.runtime.printunlock
lea rax, [0x004dc68a]
mov ebx, 0x17
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._fixalloc_.alloc
Function at 0x41bfe0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41c166
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rsi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rsi
mov rax, qword [rdx + 8]
mov qword [rsp + 0x30], rax
nop
mov byte [rax + 0xb0], 0x1b
mov ebx, 2
mov ecx, 4
call sym.runtime.casgstatus
mov rax, qword [rsp + 0x28]
test byte [rax], al
mov rdx, qword [rax + 0x1250]
cmp rdx, 1
je 0x41c06a
cmp rdx, 2
je 0x41c054
cmp rdx, 3
jne 0x41c14f
add rax, 0x1260
mov ebx, 7
call sym.runtime.gcDrain
jmp 0x41c135
add rax, 0x1260
mov ebx, 0xb
nop
call sym.runtime.gcDrain
jmp 0x41c135
lea rcx, [rax + 0x1260]
mov qword [rsp + 0x38], rcx
mov ebx, 3
mov rax, rcx
nop
call sym.runtime.gcDrain
mov rcx, qword [rsp + 0x30]
cmp byte [rcx + 0xb1], 0
je 0x41c125
mov rax, qword [rsp + 0x28]
nop dword [rax]
call sym.runtime.runqdrain
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rbx
test ecx, ecx
jbe 0x41c125
mov dword [rsp + 0x14], ecx
nop
nop
lea rax, [0x005985b8]
call sym.runtime.lock2
mov rcx, qword [rsp + 0x20]
nop
test rcx, rcx
je 0x41c106
mov rdx, rcx
mov rbx, qword [rsp + 0x18]
mov qword [rcx + 0xa0], 0
mov rcx, qword [0x00598610]
test rcx, rcx
je 0x41c0f8
mov qword [rcx + 0xa0], rbx
jmp 0x41c0ff
mov qword [0x00598608], rbx
mov qword [0x00598610], rdx
mov ecx, dword [rsp + 0x14]
add dword [0x00598618], ecx
movups xmmword [rsp + 0x18], xmm15
nop
nop
lea rax, [0x005985b8]
nop
call sym.runtime.unlock2
nop
mov rax, qword [rsp + 0x38]
mov ebx, 2
call sym.runtime.gcDrain
mov rax, qword [rsp + 0x30]
mov ebx, 4
mov ecx, 2
call sym.runtime.casgstatus
add rsp, 0x40
pop rbp
ret
lea rax, [0x004e1119]
mov ebx, 0x2b
nop dword [rax + rax]
call sym.runtime.throw
nop
call sym.runtime.morestack.abi0
jmp sym.runtime.gcBgMarkWorker.func2
Function at 0x41c5c0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x41c7d8
push rbp
mov rbp, rsp
sub rsp, 0x30
cmp dword [0x0061c008], 0
jne 0x41c7c6
mov qword [rsp + 0x40], rax
nop
nop
lea rax, [0x0059df20]
call sym.runtime.lock2
add dword [0x005ae060], 2
nop
nop
xor ecx, ecx
lea rdx, [0x005974d4]
xchg dword [rdx], ecx
nop
xor ecx, ecx
lea rdx, [0x005ae088]
xchg qword [rdx], rcx
mov rcx, qword [0x005ae350]
mov rdx, qword [0x005ae358]
mov rbx, qword [0x005ae348]
mov qword [0x005ae368], rcx
mov qword [0x005ae370], rdx
cmp dword [0x0061c240], 0
je 0x41c653
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov rcx, qword [0x005ae360]
mov qword [r11 + 8], rcx
mov qword [0x005ae360], rbx
nop
xor ecx, ecx
lea rdx, [0x005ae0a8]
xchg qword [rdx], rcx
nop
xor ecx, ecx
lea rdx, [0x005ae0b0]
xchg qword [rdx], rcx
nop
nop
lea rax, [0x0059df20]
nop dword [rax]
call sym.runtime.unlock2
nop
xor ecx, ecx
lea rdx, [0x005974d8]
xchg dword [rdx], ecx
mov rcx, qword [rsp + 0x40]
cmp rcx, 2
jne 0x41c6e2
nop
nop
lea rax, [0x0059df20]
call sym.runtime.lock2
xorps xmm0, xmm0
movsd qword [0x005ae0a0], xmm0
nop
nop
lea rax, [0x0059df20]
nop
call sym.runtime.unlock2
mov rcx, qword [0x00597390]
mov qword [rsp + 0x28], rcx
mov rdx, qword [0x00597398]
mov qword [rsp + 0x20], rdx
xor eax, eax
nop
jmp 0x41c757
nop
nop
lea rax, [0x005974c0]
call sym.runtime.lock2
cmp byte [0x005974d0], 0
je 0x41c713
mov byte [0x005974d0], 0
mov rax, qword [0x005974c8]
xor ebx, ebx
mov ecx, 1
call sym.runtime.ready
nop
nop
lea rax, [0x005974c0]
nop dword [rax]
call sym.runtime.unlock2
xor eax, eax
add rsp, 0x30
pop rbp
ret
mov qword [rsp + 0x18], rax
mov rdx, qword [rcx + rax*8]
mov rdx, qword [rdx + 0x40]
mov rax, rdx
nop dword [rax]
call sym.runtime._mcache_.prepareForSweep
mov rax, qword [rsp + 0x18]
inc rax
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
cmp rax, rdx
jl 0x41c72d
nop dword [rax]
call sym.runtime.sweepone
cmp rax, 0xffffffffffffffff
jne 0x41c75c
call sym.runtime.prepareFreeWorkbufs
xor eax, eax
call sym.runtime.freeSomeWbufs
test al, al
jne 0x41c770
nop
nop
nop
mov eax, dword [0x0061c014]
mov ecx, eax
shr ecx, 1
lea edx, [rcx + 1]
mov ebx, 0xaaaaaaab
imul rdx, rbx
shr rdx, 0x3a
lea edx, [rdx + rdx*2]
shl edx, 0x19
sub ecx, edx
inc ecx
shl ecx, 1
lea rdx, [0x0061c014]
lock cmpxchg dword [rdx], ecx
sete cl
test cl, cl
je 0x41c77d
call sym.runtime.mProf_Flush
mov eax, 1
add rsp, 0x30
pop rbp
ret
lea rax, [0x004e0c83]
mov ebx, 0x29
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
nop dword [rax]
call sym.runtime.morestackc.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime.gcSweep
Function at 0x41caa0
Capabilities:
Run powershell expression

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
cmp rdi, 0x989680
jb 0x41cad9
mov rdx, rax
movabs rax, 0x8637bd05af6c69b6
mov rsi, rdx
mul rdi
shr rdx, 0x13
lea rdi, [rbx - 1]
mov rax, rdi
jmp 0x41cc05
shr rdi, 1
mov rdx, rax
movabs rax, 0x83126e978d4fdf3c
mov rsi, rdx
mul rdi
shr rdx, 8
test rdx, rdx
je 0x41cb00
mov eax, 3
jmp 0x41cb4a
test rbx, rbx
jbe 0x41cb28
mov byte [rsi], 0x30
cmp rcx, 1
jb 0x41cb1c
mov rax, rsi
mov ebx, 1
add rsp, 0x10
pop rbp
ret
mov ecx, 1
xor edx, edx
call sym.runtime.panicSliceAcap
xor eax, eax
mov rcx, rax
call sym.runtime.panicIndex
mov rdi, rax
movabs rax, 0xcccccccccccccccd
mul rdx
shr rdx, 3
lea rax, [rdi - 1]
cmp rdx, 0x64
jae 0x41cb32
mov rdi, rbx
sub rdi, rax
lea r8, [rbx - 1]
dec rdi
jmp 0x41cb62
mov r8, rax
cmp rdx, 0xa
jae 0x41cb6d
cmp r8, rdi
jl 0x41cbb6
movabs rax, 0xcccccccccccccccd
mov r9, rdx
mul rdx
shr rdx, 3
lea r10, [rdx + rdx*4]
shl r10, 1
sub r9, r10
cmp rbx, r8
jbe 0x41cbf4
add r9, 0x30
mov byte [rsi + r8], r9b
lea rax, [r8 - 1]
nop dword [rax]
cmp rax, rdi
jne 0x41cb5f
cmp rbx, rax
jbe 0x41cbec
mov byte [r8 + rsi - 1], 0x2e
lea rax, [r8 - 2]
jmp 0x41cb5f
cmp rbx, r8
jbe 0x41cbe1
add rdx, 0x30
mov byte [rsi + r8], dl
sub rcx, r8
mov rdx, rcx
neg rdx
sar rdx, 0x3f
and rdx, r8
lea rax, [rdx + rsi]
sub rbx, r8
add rsp, 0x10
pop rbp
nop
ret
mov rax, r8
mov rcx, rbx
call sym.runtime.panicIndex
mov rcx, rbx
call sym.runtime.panicIndex
mov rax, r8
mov rcx, rbx
call sym.runtime.panicIndex
mov rdi, rax
mov rax, r8
cmp rdx, 0xa
jae 0x41cc10
cmp rdi, rax
jl 0x41cc57
mov r8, rax
movabs rax, 0xcccccccccccccccd
mov r9, rdx
mul rdx
shr rdx, 3
lea r10, [rdx + rdx*4]
shl r10, 1
sub r9, r10
cmp rbx, rdi
jbe 0x41cc94
add r9, 0x30
mov byte [rsi + rdi], r9b
lea rax, [rdi - 1]
cmp rax, r8
jne 0x41cbff
cmp rbx, rax
jbe 0x41cc8c
mov byte [rdi + rsi - 1], 0x2e
lea rax, [rdi - 2]
jmp 0x41cbff
cmp rbx, rdi
jbe 0x41cc81
add rdx, 0x30
mov byte [rsi + rdi], dl
sub rcx, rdi
mov rdx, rcx
neg rdx
sar rdx, 0x3f
and rdx, rdi
lea rax, [rsi + rdx]
sub rbx, rdi
add rsp, 0x10
pop rbp
nop
ret
mov rax, rdi
mov rcx, rbx
call sym.runtime.panicIndex
mov rcx, rbx
call sym.runtime.panicIndex
mov rax, rdi
mov rcx, rbx
call sym.runtime.panicIndex
nop
Function at 0x41cca0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41cd18
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rdx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx], esi
sete sil
test sil, sil
je 0x41cd06
cmp byte [rdx + 0x20], bl
je 0x41ccf5
mov qword [rsp + 0x10], rdx
mov byte [rsp + 0x30], bl
mov rax, rdx
mov rbx, rcx
call sym.runtime._gcCPULimiterState_.updateLocked
movzx ecx, byte [rsp + 0x30]
mov rdx, qword [rsp + 0x10]
mov byte [rdx + 0x20], cl
mov byte [rdx + 0x21], 1
add rsp, 0x18
pop rbp
ret
lea rax, [0x004e1530]
mov ebx, 0x2d
call sym.runtime.throw
lea rax, [0x004e1a61]
mov ebx, 0x2f
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
mov qword [rsp + 0x18], rcx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.runtime._gcCPULimiterState_.startGCTransition

Function at 0x41cd40
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41cdac
push rbp
mov rbp, rsp
sub rsp, 0x18
cmp byte [rax + 0x21], 0
je 0x41cd9a
mov rdx, qword [rax + 0x40]
cmp rdx, rbx
jg 0x41cd86
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
mov rcx, rbx
sub rcx, rdx
movsxd rdx, dword [rax + 0x4c]
imul rcx, rdx
xor ebx, ebx
call sym.runtime._gcCPULimiterState_.accumulate
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
nop
xchg qword [rax + 0x40], rbx
mov byte [rax + 0x21], 0
call sym.runtime._gcCPULimiterState_.unlock
add rsp, 0x18
pop rbp
ret
lea rax, [0x004e1a90]
mov ebx, 0x2f
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime._gcCPULimiterState_.finishGCTransition

Function at 0x41d180
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41d226
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rdx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx], esi
sete sil
test sil, sil
je 0x41d212
mov qword [rsp + 0x10], rdx
mov dword [rsp + 0x38], ecx
mov rax, rdx
call sym.runtime._gcCPULimiterState_.updateLocked
mov ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x10]
mov dword [rax + 0x4c], ecx
movsxd rcx, ecx
imul rcx, rcx, 0x3b9aca00
mov qword [rax + 0x10], rcx
mov rdx, qword [rax + 8]
cmp rdx, rcx
jbe 0x41d1fb
mov qword [rax + 8], rcx
lea rcx, [rax + 4]
nop
nop
mov edx, 1
xchg byte [rcx], dl
mov ecx, dword [0x0061fc18]
inc ecx
xchg dword [rax + 0x48], ecx
jmp 0x41d207
jae 0x41d207
lea rcx, [rax + 4]
nop
nop
xor edx, edx
xchg byte [rcx], dl
call sym.runtime._gcCPULimiterState_.unlock
add rsp, 0x18
pop rbp
ret
lea rax, [0x004e09d3]
mov ebx, 0x28
nop
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
jmp sym.runtime._gcCPULimiterState_.resetCapacity
Function at 0x41d300
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41d44b
push rbp
mov rbp, rsp
sub rsp, 0x18
jmp 0x41d317
mov rax, rdx
mov rdx, qword [rax]
mov rsi, rdx
shr rdx, 0x3d
cmp bl, dl
jne 0x41d3e7
mov rdx, rax
mov rax, rsi
xor edi, edi
lock cmpxchg qword [rdx], rdi
sete r8b
test r8b, r8b
je 0x41d314
movabs rdx, 0xe000000000000000
and rdx, rcx
movabs rdi, 0x1fffffffffffffff
and rdi, rsi
or rdx, rdi
mov rsi, rcx
sub rcx, rdx
cmp rsi, rdx
mov edx, 0
cmovl rcx, rdx
test rcx, rcx
je 0x41d3d0
cmp bl, 2
ja 0x41d393
cmp bl, 1
jne 0x41d38c
nop
lea rax, [0x0061c558]
lock xadd qword [rax], rcx
jmp 0x41d3ca
cmp bl, 2
je 0x41d398
jmp 0x41d3d6
cmp bl, 3
jne 0x41d3a7
nop
lea rax, [0x0061c548]
lock xadd qword [rax], rcx
jmp 0x41d3ca
cmp bl, 4
jne 0x41d3d6
nop
nop
lea rax, [0x0061c558]
mov rdx, rcx
lock xadd qword [rax], rcx
nop
lea rax, [0x00598bf0]
lock xadd qword [rax], rdx
add rsp, 0x18
pop rbp
ret
add rsp, 0x18
pop rbp
ret
lea rax, [0x004e203e]
mov ebx, 0x33
call sym.runtime.throw
mov byte [rsp + 0x30], bl
mov qword [rsp + 0x10], rdx
call sym.runtime.printlock
lea rax, [0x004d9e9a]
mov ebx, 0xe
call sym.runtime.printstring
movzx eax, byte [rsp + 0x30]
movzx eax, al
call sym.runtime.printuint
lea rax, [0x004d8765]
mov ebx, 5
nop
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x004e2995]
mov ebx, 0x3e
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
mov qword [rsp + 0x18], rcx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.runtime._limiterEvent_.stop
Function at 0x420c60
Capabilities:
Hash data using murmur3
Run powershell expression

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp byte [0x0061bff2], 0
jne 0x420d50
sub rbx, qword [rax + 0x18]
mov rdx, qword [rax + 0x48]
test byte [rdx], al
mov ecx, dword [rax + 0x5c]
imul rcx, rbx
mov rbx, rcx
shr rbx, 0x20
shr rcx, 0x23
and ebx, 7
mov rsi, rcx
mov rcx, rbx
mov edi, 1
shl edi, cl
add rdx, rsi
nop
nop
nop
nop
lock or byte [rdx], dil
mov rcx, qword [rax + 0x18]
movabs rdx, 0x800000000000
add rdx, rcx
mov rbx, rdx
shr rdx, 0x2a
nop
nop
nop
cmp rdx, 0x40
jae 0x420d43
lea rsi, [0x005ae0f8]
mov rdx, qword [rsi + rdx*8]
test byte [rdx], al
mov rsi, rcx
shr rsi, 0x10
and esi, 0x3f
shr rcx, 0xd
and ecx, 7
mov edi, 1
shl edi, cl
shr rbx, 0x16
and ebx, 0xfffff
mov rdx, qword [rdx + rbx*8]
test byte [rdx], al
movzx ebx, byte [rdx + rsi + 0x1040]
lea rdx, [rdx + rsi]
lea rdx, [rdx + 0x1040]
test dil, bl
jne 0x420d1e
lock or byte [rdx], dil
mov rcx, qword [r14 + 0x30]
mov rcx, qword [rcx + 0xa0]
test byte [rcx], al
mov rdx, qword [rcx + 0x1270]
add rdx, qword [rax + 0x68]
mov qword [rcx + 0x1270], rdx
add rsp, 0x10
pop rbp
ret
mov rax, rdx
mov ecx, 0x40
call sym.runtime.panicIndexU
lea rax, [0x004e13fb]
mov ebx, 0x2c
nop dword [rax]
call sym.runtime.throw
nop
int3
Function at 0x421d60
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x421dcc
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp rbx, 1
jne 0x421d8d
lock xadd qword [rax + 0xc8], rcx
mov ecx, 1
lock xadd qword [rax + 0xe8], rcx
jmp 0x421db4
cmp rbx, 2
jne 0x421da0
lock xadd qword [rax + 0xd0], rcx
jmp 0x421db4
cmp rbx, 3
jne 0x421dba
lock xadd qword [rax + 0xd8], rcx
call sym.runtime._gcControllerState_.removeIdleMarkWorker
add rsp, 0x10
pop rbp
ret
lea rax, [0x004e09fb]
mov ebx, 0x28
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
nop dword [rax + rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.runtime._gcControllerState_.markWorkerStop

Function at 0x422060
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4221cb
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], rax
call sym.runtime._gcControllerState_.heapGoalInternal
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx + 0x98]
cmp rax, rdx
jbe 0x422106
mov rsi, rax
sub rsi, rdx
shr rsi, 6
lea rdi, [rsi + rsi*4]
lea rdi, [rdi + rdi*8]
add rdi, rdx
imul rsi, rsi, 0x3d
add rsi, rdx
cmp rbx, rdx
cmovb rbx, rdx
cmp rbx, rdi
cmovb rbx, rdi
cmp rax, 0x400000
jbe 0x4220cb
lea rdx, [rax - 0x400000]
cmp rdx, rsi
ja 0x4220ce
mov rdx, rsi
nop
mov rcx, qword [rcx + 0x18]
mov rsi, rax
sub rsi, rcx
cmp rdx, rbx
cmovb rdx, rbx
cmp rax, rcx
cmovb rsi, rbx
cmp rsi, rbx
cmovb rsi, rbx
cmp rsi, rdx
cmova rsi, rdx
cmp rax, rsi
jb 0x42210f
mov rbx, rax
mov rax, rsi
add rsp, 0x30
pop rbp
ret
mov rbx, rax
add rsp, 0x30
pop rbp
ret
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rbx
call sym.runtime.printlock
lea rax, [0x004d8c6a]
mov ebx, 8
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
nop
call sym.runtime.printuint
lea rax, [0x004d90ec]
mov ebx, 0xa
call sym.runtime.printstring
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
call sym.runtime.printlock
lea rax, [0x004d940f]
mov ebx, 0xb
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
call sym.runtime.printuint
lea rax, [0x004d9863]
mov ebx, 0xc
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x20]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x004e155d]
mov ebx, 0x2d
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._gcControllerState_.trigger
Function at 0x422360
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x422410
push rbp
mov rbp, rsp
sub rsp, 0x20
lea rax, [0x004d90f6]
mov ebx, 0xa
nop
call sym.runtime.gogetenv
test rbx, rbx
je 0x42239d
cmp rbx, 3
jne 0x4223ad
cmp word [rax], 0x666f
jne 0x4223ad
cmp byte [rax + 2], 0x66
jne 0x4223ad
movabs rax, 0x7fffffffffffffff
add rsp, 0x20
pop rbp
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rax
call sym.runtime.parseByteCount
nop dword [rax]
test bl, bl
je 0x4223ca
add rsp, 0x20
pop rbp
ret
call sym.runtime.printlock
lea rax, [0x004d941a]
mov ebx, 0xb
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
mov rbx, qword [rsp + 0x10]
call sym.runtime.printstring
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x004e2a11]
mov ebx, 0x3f
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.readGOMEMLIMIT

Function at 0x422b60
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x422bc6
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x30], rax
test byte [rax], al
nop
call sym.runtime.lock2
mov rcx, r14
mov rbx, qword [rsp + 0x30]
cmp qword [rbx + 8], rcx
jne 0x422baf
mov byte [rbx + 0x10], 1
nop
lea rax, sym.runtime.parkunlock_c
mov ecx, 0xd
mov edi, 0xa
mov esi, 2
call sym.runtime.gopark
add rsp, 0x20
pop rbp
ret
lea rax, [0x004e177d]
mov ebx, 0x2e
nop dword [rax + rax]
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._scavengerState_.park
Function at 0x422c60
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x422eae
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rsp + 0x70], rax
movsd qword [rsp + 0x78], xmm0
test byte [rax], al
nop
call sym.runtime.lock2
mov rcx, r14
mov rax, qword [rsp + 0x70]
cmp qword [rax + 8], rcx
jne 0x422e9c
movsd xmm0, qword [0x00501610]
movsd xmm1, qword [rsp + 0x78]
ucomisd xmm0, xmm1
jbe 0x422cb3
movsd xmm1, qword [0x00501610]
movsd qword [rsp + 0x58], xmm1
movsd xmm0, qword [rax + 0x30]
divsd xmm1, xmm0
cvttsd2si rcx, xmm1
mov qword [rsp + 0x48], rcx
cmp qword [rax + 0x80], 0
je 0x422cf8
nop
nop
call sym.runtime.unlock2
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rcx + 0x80]
mov rbx, qword [rdx]
mov rax, qword [rsp + 0x48]
call rbx
jmp 0x422dce
nop
call sym.runtime.nanotime1.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rsp]
mov qword [rsp + 0x38], rdx
mov rbx, qword [rsp + 0x48]
add rbx, rdx
mov rsi, qword [rcx + 0x10]
mov rdi, qword [rcx + 0x18]
mov r8, qword [rcx + 0x20]
mov r9, qword [rcx + 0x28]
mov r10, qword [rcx + 0x30]
nop
mov rax, rcx
mov rcx, rsi
mov rsi, r8
mov r8, r9
mov r9, r10
call sym.runtime.modtimer
mov rbx, qword [rsp + 0x70]
mov byte [rbx + 0x10], 1
nop
lea rax, sym.runtime.parkunlock_c
mov ecx, 0x13
mov edi, 0xe
mov esi, 2
call sym.runtime.gopark
call sym.runtime.nanotime1.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x38]
sub rax, rcx
mov qword [rsp + 0x40], rax
nop
nop
mov rax, qword [rsp + 0x70]
call sym.runtime.lock2
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0x18]
mov rax, rcx
call sym.runtime.deltimer
nop
nop
mov rax, qword [rsp + 0x70]
call sym.runtime.unlock2
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rcx + 0x70]
test rbx, rbx
jle 0x422e06
movsd xmm0, qword [rsp + 0x58]
cvttsd2si rdx, xmm0
add rax, rdx
cmp rbx, rax
jge 0x422df9
mov qword [rcx + 0x70], 0
jmp 0x422e00
sub rbx, rax
mov qword [rcx + 0x70], rbx
add rsp, 0x60
pop rbp
ret
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
movsd xmm1, qword [rsp + 0x58]
addsd xmm0, xmm1
movsd qword [rsp + 0x50], xmm0
mov rdx, qword [rcx + 0x98]
mov rax, qword [rdx]
call rax
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
movsd xmm2, qword [rsp + 0x50]
mulsd xmm0, xmm2
movsd xmm1, qword [rsp + 0x58]
divsd xmm1, xmm0
mov rax, qword [rsp + 0x70]
lea rcx, [rax + 0x38]
movups xmm0, xmm1
movsd xmm1, qword [0x005015b0]
mov rax, rcx
nop dword [rax]
call sym.runtime._piController_.next
mov rcx, qword [rsp + 0x70]
movsd qword [rcx + 0x30], xmm0
test al, al
jne 0x422e96
movsd xmm0, qword [0x005015a8]
movsd qword [rcx + 0x30], xmm0
movabs rdx, 0x12a05f200
mov qword [rcx + 0x70], rdx
mov rax, rcx
call sym.runtime._scavengerState_.controllerFailed
add rsp, 0x60
pop rbp
ret
lea rax, [0x004e1abf]
mov ebx, 0x2f
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
movsd qword [rsp + 0x10], xmm0
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
movsd xmm0, qword [rsp + 0x10]
jmp sym.runtime._scavengerState_.sleep
Function at 0x422f40
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4230ce
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x30], rax
test byte [rax], al
nop
call sym.runtime.lock2
mov rcx, r14
mov rax, qword [rsp + 0x30]
cmp qword [rax + 8], rcx
jne 0x4230bc
nop
call sym.runtime.unlock2
xorps xmm0, xmm0
xor eax, eax
jmp 0x422f84
movups xmm0, xmm1
mov rax, rcx
movsd xmm1, qword [0x00501610]
ucomisd xmm1, xmm0
jbe 0x423086
movsd qword [rsp + 0x18], xmm0
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x30]
mov rdx, qword [rax + 0x90]
mov rcx, qword [rdx]
call rcx
test al, al
jne 0x423079
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx + 0x88]
mov rbx, qword [rdx]
mov eax, 0x10000
call rbx
test rbx, rbx
jne 0x423033
mov rcx, qword [0x0061c088]
nop dword [rax]
test rcx, rcx
je 0x4230b7
mov rdx, rax
mov rbx, rdx
xor edx, edx
div rcx
test rax, rax
jl 0x423003
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
jmp 0x42301b
mov rcx, rax
and eax, 1
shr rcx, 1
or rcx, rax
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
addsd xmm1, xmm1
movsd xmm2, qword [0x005015f8]
mulsd xmm1, xmm2
movsd xmm3, qword [rsp + 0x18]
addsd xmm1, xmm3
jmp 0x423050
xorps xmm1, xmm1
cvtsi2sd xmm1, rbx
movsd xmm2, qword [rsp + 0x18]
addsd xmm1, xmm2
mov rbx, rax
movsd xmm2, qword [0x005015f8]
mov rcx, qword [rsp + 0x10]
add rcx, rbx
nop dword [rax + rax]
cmp rbx, 0x10000
jb 0x42308c
cmp qword [0x0061c1b8], 0
je 0x422f7e
jmp 0x42308c
mov rcx, qword [rsp + 0x10]
movsd xmm1, qword [rsp + 0x18]
jmp 0x42308c
mov rcx, rax
movups xmm1, xmm0
test rcx, rcx
jbe 0x42309a
cmp qword [0x0061c088], rcx
ja 0x4230a6
mov rax, rcx
movups xmm0, xmm1
add rsp, 0x20
pop rbp
ret
lea rax, [0x004e17ab]
mov ebx, 0x2e
call sym.runtime.throw
call sym.runtime.panicdivide
lea rax, [0x004e158a]
mov ebx, 0x2d
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
nop dword [rax]
jmp sym.runtime._scavengerState_.run