joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41d780
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x41d957
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rax + 0x40]
cmp rdx, rbx
jg 0x41d831
mov rsi, rbx
sub rsi, rdx
movsxd rdx, dword [rax + 0x4c]
imul rsi, rdx
nop
mov rdx, rbx
xchg qword [rax + 0x40], rdx
nop
mov rdx, qword [rax + 0x28]
test rdx, rdx
je 0x41d7cd
mov rdi, rdx
neg rdx
lock xadd qword [rax + 0x28], rdx
jmp 0x41d7d0
mov rdi, rdx
nop
mov rdx, qword [rax + 0x38]
test rdx, rdx
je 0x41d7e8
mov r8, rdx
neg rdx
lock xadd qword [rax + 0x38], rdx
jmp 0x41d7eb
mov r8, rdx
cmp byte [rax + 0x50], 0
jne 0x41d837
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x18], rsi
mov r9, qword [r14 + 0x30]
nop
inc dword [r9 + 0xd8]
mov r9, qword [0x005fde50]
mov qword [rsp + 0x48], r9
mov r10, qword [0x005fde58]
mov qword [rsp + 0x38], r10
mov r11, qword [r14 + 0x30]
mov qword [rsp + 0x40], r11
xor ecx, ecx
jmp 0x41d896
add rsp, 0x50
pop rbp
ret
cmp byte [rax + 0x20], 0
je 0x41d859
xorps xmm0, xmm0
cvtsi2sd xmm0, rsi
movsd xmm1, qword [0x005411c8]
mulsd xmm0, xmm1
cvttsd2si rdx, xmm0
add rdi, rdx
sub rsi, r8
sub rsi, rdi
mov rbx, rsi
mov rcx, rdi
call sym.runtime._gcCPULimiterState_.accumulate
add rsp, 0x50
pop rbp
ret
mov rcx, qword [rsp + 0x30]
inc rcx
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x18]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x40]
cmp rcx, r10
jge 0x41d90b
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x28], rdi
mov rax, qword [r9 + rcx*8]
test byte [rax], al
add rax, 0x1248
call sym.runtime._limiterEvent_.consume
cmp al, 1
ja 0x41d8d0
nop
test al, al
jne 0x41d8ec
mov rdi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
jmp 0x41d870
cmp al, 2
je 0x41d8d8
cmp al, 3
jne 0x41d8e8
mov rdx, qword [rsp + 0x28]
lea rdi, [rdx + rbx]
mov r8, qword [rsp + 0x20]
jmp 0x41d870
cmp al, 4
jne 0x41d945
mov rdx, qword [rsp + 0x20]
lea r8, [rdx + rbx]
lea rdx, [0x005ff7f0]
lock xadd qword [rdx], rbx
mov rdi, qword [rsp + 0x28]
jmp 0x41d870
mov edx, dword [r11 + 0xd8]
lea r9d, [rdx - 1]
nop
mov dword [r11 + 0xd8], r9d
nop
cmp edx, 1
jne 0x41d837
cmp byte [r14 + 0xb1], 0
je 0x41d837
mov qword [r14 + 0x10], 0xfffffffffffffade
nop
jmp 0x41d837
lea rax, [0x00518fd5]
mov ebx, 0x20
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime._gcCPULimiterState_.updateLocked
Function at 0x421560
Capabilities:
Hash data using murmur3

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp byte [0x00682bf2], 0
jne 0x421650
sub rbx, qword [rax + 0x18]
mov rdx, qword [rax + 0x48]
test byte [rdx], al
mov ecx, dword [rax + 0x5c]
imul rcx, rbx
mov rbx, rcx
shr rbx, 0x20
shr rcx, 0x23
and ebx, 7
mov rsi, rcx
mov rcx, rbx
mov edi, 1
shl edi, cl
add rdx, rsi
nop
nop
nop
nop
lock or byte [rdx], dil
mov rcx, qword [rax + 0x18]
movabs rdx, 0x800000000000
add rdx, rcx
mov rbx, rdx
shr rdx, 0x2a
nop
nop
nop
cmp rdx, 0x40
jae 0x421643
lea rsi, [0x00614cf8]
mov rdx, qword [rsi + rdx*8]
test byte [rdx], al
mov rsi, rcx
shr rsi, 0x10
and esi, 0x3f
shr rcx, 0xd
and ecx, 7
mov edi, 1
shl edi, cl
shr rbx, 0x16
and ebx, 0xfffff
mov rdx, qword [rdx + rbx*8]
test byte [rdx], al
movzx ebx, byte [rdx + rsi + 0x1040]
lea rdx, [rdx + rsi]
lea rdx, [rdx + 0x1040]
test dil, bl
jne 0x42161e
lock or byte [rdx], dil
mov rcx, qword [r14 + 0x30]
mov rcx, qword [rcx + 0xa0]
test byte [rcx], al
mov rdx, qword [rcx + 0x1270]
add rdx, qword [rax + 0x68]
mov qword [rcx + 0x1270], rdx
add rsp, 0x10
pop rbp
ret
mov rax, rdx
mov ecx, 0x40
call sym.runtime.panicIndexU
lea rax, [0x0051bc05]
mov ebx, 0x2c
nop dword [rax]
call sym.runtime.throw
nop
int3
Function at 0x423260
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x423433
push rbp
mov rbp, rsp
sub rsp, 0x18
cmp qword [rax + 8], 0
jne 0x423421
cmp dword [0x00682e70], 0
jne 0x423292
mov qword [rsp + 0x10], r14
mov rcx, qword [rsp + 0x10]
jmp 0x4232a5
call sym.runtime.gcWriteBarrier2
mov rcx, r14
mov qword [r11], rcx
mov rdx, qword [rax + 8]
mov qword [r11 + 8], rdx
mov qword [rsp + 0x28], rax
mov qword [rax + 8], rcx
lea rax, [0x00507d00]
call sym.runtime.newobject
cmp dword [0x00682e70], 0
jne 0x4232ca
mov rcx, qword [rsp + 0x28]
jmp 0x4232df
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx + 0x18]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x18], rax
lea rdx, [0x00503660]
mov qword [rax + 0x20], rdx
cmp dword [0x00682e70], 0
je 0x423307
call sym.runtime.gcWriteBarrier2
mov qword [r11], rcx
mov rdx, qword [rax + 0x28]
mov qword [r11 + 8], rdx
mov qword [rax + 0x28], rcx
mov rax, qword [rcx + 0x18]
test byte [rax], al
cmp dword [0x00682e70], 0
je 0x423328
mov rdx, qword [rax + 0x18]
nop
call sym.runtime.gcWriteBarrier1
mov qword [r11], rdx
lea rdx, sym.runtime._scavengerState_.init.func1
mov qword [rax + 0x18], rdx
movabs rax, 0x3fd599999999999a
mov qword [rcx + 0x38], rax
movabs rax, 0x41486a0000000000
mov qword [rcx + 0x40], rax
movabs rax, 0x41cdcd6500000000
mov qword [rcx + 0x48], rax
movabs rax, 0x3f50624dd2f1a9fc
mov qword [rcx + 0x50], rax
movabs rax, 0x408f400000000000
mov qword [rcx + 0x58], rax
movups xmmword [rcx + 0x60], xmm15
movsd xmm0, qword [0x00541230]
movsd qword [rcx + 0x30], xmm0
cmp qword [rcx + 0x88], 0
jne 0x4233bb
cmp dword [0x00682e70], 0
je 0x4233ad
mov rax, qword [rcx + 0x88]
call sym.runtime.gcWriteBarrier1
mov qword [r11], rax
lea rax, sym.runtime._scavengerState_.init.func2
mov qword [rcx + 0x88], rax
cmp qword [rcx + 0x90], 0
jne 0x4233eb
cmp dword [0x00682e70], 0
je 0x4233dd
mov rax, qword [rcx + 0x90]
call sym.runtime.gcWriteBarrier1
mov qword [r11], rax
lea rax, [0x0051e180]
mov qword [rcx + 0x90], rax
cmp qword [rcx + 0x98], 0
jne 0x42341b
cmp dword [0x00682e70], 0
je 0x42340d
mov rax, qword [rcx + 0x98]
call sym.runtime.gcWriteBarrier1
mov qword [r11], rax
lea rax, sym.runtime._scavengerState_.init.func4
mov qword [rcx + 0x98], rax
add rsp, 0x18
pop rbp
ret
lea rax, [0x00519015]
mov ebx, 0x20
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._scavengerState_.init
Function at 0x423aa0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x423ba6
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rcx
mov byte [rsp + 0x70], dil
mov qword [rsp + 0x10], 0
jmp 0x423ae3
mov rax, qword [rsp + 0x58]
mov rcx, rdx
mov rbx, qword [rsp + 0x60]
movzx edi, byte [rsp + 0x70]
cmp qword [rsp + 0x10], rbx
jae 0x423b9b
test byte [rax], al
lea rcx, [rax + 0x100b8]
mov ebx, edi
mov rax, rcx
nop dword [rax]
call sym.runtime._scavengeIndex_.find
test rax, rax
je 0x423b9b
movups xmmword [rsp + 0x18], xmm15
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
lea rcx, [sym.runtime._pageAlloc_.scavenge.func1]
mov qword [rsp + 0x18], rcx
lea rdx, [rsp + 0x10]
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x18]
mov qword [rsp], rbx
nop dword [rax]
call sym.runtime.systemstack.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x68]
nop dword [rax]
test rdx, rdx
jne 0x423b89
xor eax, eax
jmp 0x423b93
mov rax, qword [rdx]
call rax
mov rdx, qword [rsp + 0x68]
test al, al
je 0x423ad1
mov rax, qword [rsp + 0x10]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
jmp sym.runtime._pageAlloc_.scavenge
Function at 0x424e00
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x424ec6
push rbp
mov rbp, rsp
sub rsp, 0x18
movzx edx, word [rax]
lea rsi, [rdx + rbx]
nop dword [rax]
cmp rsi, 0x200
ja 0x424e58
cmp dword [rax + 4], ecx
je 0x424e35
mov word [rax + 2], dx
mov dword [rax + 4], ecx
movzx ecx, word [rax]
add ecx, ebx
mov word [rax], cx
nop dword [rax]
cmp cx, 0x200
jne 0x424e52
movzx ecx, byte [rax + 8]
and ecx, 0xfffffffe
nop
mov byte [rax + 8], cl
add rsp, 0x18
pop rbp
ret
mov qword [rsp + 0x30], rbx
mov word [rsp + 0x16], dx
call sym.runtime.printlock
lea rax, [0x005128d3]
mov ebx, 0xf
call sym.runtime.printstring
movzx eax, word [rsp + 0x16]
nop dword [rax]
call sym.runtime.printuint
lea rax, [0x00510c82]
mov ebx, 8
call sym.runtime.printstring
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x005199b9]
mov ebx, 0x22
nop dword [rax + rax]
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
jmp sym.runtime._scavChunkData_.alloc

Function at 0x424f00
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x424fa6
push rbp
mov rbp, rsp
sub rsp, 0x18
movzx edx, word [rax]
cmp rbx, rdx
ja 0x424f3f
cmp dword [rax + 4], ecx
je 0x424f26
mov word [rax + 2], dx
mov dword [rax + 4], ecx
movzx ecx, word [rax]
sub ecx, ebx
mov word [rax], cx
movzx ecx, byte [rax + 8]
or ecx, 1
nop
mov byte [rax + 8], cl
add rsp, 0x18
pop rbp
ret
mov qword [rsp + 0x30], rbx
mov word [rsp + 0x16], dx
call sym.runtime.printlock
lea rax, [0x005128d3]
mov ebx, 0xf
call sym.runtime.printstring
movzx eax, word [rsp + 0x16]
call sym.runtime.printuint
lea rax, [0x00510c82]
mov ebx, 8
call sym.runtime.printstring
mov rax, qword [rsp + 0x30]
nop
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x005173f8]
mov ebx, 0x1b
nop dword [rax + rax]
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
jmp sym.runtime._scavChunkData_.free
Function at 0x425100
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4251dd
push rbp
mov rbp, rsp
sub rsp, 0x18
cmp qword [rax], rbx
ja 0x4251cb
nop dword [rax + rax]
cmp qword [rax + 8], rbx
jbe 0x4251cb
lea rdx, [rax + 0x18]
test cl, cl
je 0x425136
lea rdx, [rax + 0x28]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x10], rdx
mov rsi, qword [rdx]
test rsi, rsi
je 0x42518b
cmp qword [rsi + 0x10], 0xfc
jne 0x4251a5
mov rsi, qword [rax + 0x20]
test rsi, rsi
je 0x425165
mov qword [rax + 0x20], 0
jmp 0x425177
call sym.runtime.getempty
mov rdx, qword [rsp + 0x10]
mov rbx, qword [rsp + 0x30]
mov rsi, rax
mov qword [rsi + 0x10], 0
mov rdi, qword [rdx]
mov qword [rsi + 0x18], rdi
mov qword [rdx], rsi
jmp 0x4251a5
call sym.runtime.getempty
movups xmmword [rax + 0x10], xmm15
mov rcx, qword [rsp + 0x10]
mov qword [rcx], rax
mov rbx, qword [rsp + 0x30]
mov rsi, rax
mov rax, qword [rsi + 0x10]
cmp rax, 0xfc
jae 0x4251c1
mov qword [rsi + rax*8 + 0x20], rbx
inc qword [rsi + 0x10]
add rsp, 0x18
pop rbp
nop
ret
mov ecx, 0xfc
call sym.runtime.panicIndex
lea rax, [0x00517413]
mov ebx, 0x1b
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
nop
jmp sym.runtime._stackScanState_.putPtr
Function at 0x425760
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4258ca
push rbp
mov rbp, rsp
sub rsp, 0x30
cmp dword [0x00614c60], ebx
je 0x425782
jmp 0x4258b8
mov rax, rbx
mov ecx, dword [rax]
mov edx, ecx
and ecx, 0x7fffffff
dec ecx
cmp ecx, 0x80000000
jae 0x4258a7
lea ecx, [rdx - 1]
mov rbx, rax
mov eax, edx
lock cmpxchg dword [rbx], ecx
sete cl
test cl, cl
je 0x42577f
cmp edx, 0x80000000
jne 0x4258a1
cmp dword [0x006831d8], 0
jle 0x42589b
nop
mov rax, qword [0x006836c8]
mov rcx, rax
shr rax, 0x14
mov qword [rsp + 0x28], rax
mov rdx, qword [0x00614c88]
mov qword [rsp + 0x10], rdx
mov rbx, qword [0x00614c98]
sub rcx, rbx
shr rcx, 0x14
mov qword [rsp + 0x20], rcx
movsd xmm0, qword [0x00614ca0]
movsd qword [rsp + 0x18], xmm0
call sym.runtime.printlock
lea rax, [0x00518ba2]
mov ebx, 0x1f
call sym.runtime.printstring
mov rax, qword [rsp + 0x28]
call sym.runtime.printuint
lea rax, [0x00512446]
mov ebx, 0xe
call sym.runtime.printstring
mov rax, qword [rsp + 0x20]
nop dword [rax]
call sym.runtime.printuint
lea rax, [0x00515a09]
mov ebx, 0x17
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
nop dword [rax + rax]
call sym.runtime.printuint
lea rax, [0x00511213]
mov ebx, 0xa
call sym.runtime.printstring
movsd xmm0, qword [rsp + 0x18]
nop dword [rax]
call sym.runtime.printfloat
lea rax, [0x00511af8]
mov ebx, 0xc
call sym.runtime.printstring
call sym.runtime.printunlock
add rsp, 0x30
pop rbp
ret
add rsp, 0x30
pop rbp
ret
lea rax, [0x00519cb1]
mov ebx, 0x23
call sym.runtime.throw
lea rax, [0x0051c71a]
mov ebx, 0x31
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
mov byte [rsp + 0x14], cl
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
movzx ecx, byte [rsp + 0x14]
jmp sym.runtime._activeSweep_.end
Function at 0x425c60
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x425e9c
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x38], r14
mov rcx, qword [r14 + 0x30]
inc dword [rcx + 0xd8]
nop
mov eax, dword [0x005fe114]
mov ecx, eax
and ecx, 0x80000000
test ecx, ecx
jne 0x425cb3
lea edx, [rax + 1]
lea rbx, [0x005fe114]
lock cmpxchg dword [rbx], edx
sete dl
test dl, dl
je 0x425c81
mov edx, dword [0x00614c60]
test ecx, ecx
jmp 0x425cb9
mov edx, dword [0x00614c60]
mov dword [rsp + 0x18], edx
sete byte [rsp + 0x1c]
je 0x425ce1
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
dec dword [rcx + 0xd8]
mov rax, 0xffffffffffffffff
add rsp, 0x40
pop rbp
nop
ret
lea rax, [0x00604b20]
call sym.runtime._mheap_.nextSpanForSweep
test rax, rax
je 0x425d62
nop
mov cl, byte [rax + 0x63]
cmp cl, 1
je 0x425d12
mov edx, dword [rax + 0x58]
mov ebx, dword [rsp + 0x18]
cmp ebx, edx
je 0x425ce1
lea esi, [rbx + 3]
cmp edx, esi
je 0x425ce1
jmp 0x425e1b
mov rbx, rax
lea rax, [rsp + 0x18]
call sym.runtime._sweepLocker_.tryAcquire
mov qword [rsp + 0x28], rax
test bl, bl
je 0x425ce1
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x28]
xor ebx, ebx
call sym.runtime._sweepLocked_.sweep
nop dword [rax]
test al, al
je 0x425d5b
nop
mov rcx, qword [rsp + 0x30]
lea rdx, [0x00614cb0]
mov rsi, rcx
lock xadd qword [rdx], rsi
jmp 0x425d5d
xor ecx, ecx
xor edx, edx
nop
jmp 0x425d9d
nop
mov eax, dword [0x005fe114]
mov edx, eax
and edx, 0x80000000
test edx, edx
jne 0x425d93
mov esi, eax
or esi, 0x80000000
lea rdi, [0x005fe114]
lock cmpxchg dword [rdi], esi
sete sil
test sil, sil
je 0x425d62
test edx, edx
sete dl
mov rcx, 0xffffffffffffffff
mov byte [rsp + 0x17], dl
mov qword [rsp + 0x30], rcx
mov ebx, dword [rsp + 0x18]
movzx esi, byte [rsp + 0x1c]
lea rax, [0x005fe114]
mov ecx, esi
call sym.runtime._activeSweep_.end
movzx edx, byte [rsp + 0x17]
test dl, dl
je 0x425e01
cmp dword [0x006831f4], 0
jle 0x425df1
lea rax, sym.runtime.sweepone.func1
mov qword [rsp], rax
call sym.runtime.systemstack.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
nop
nop
mov ecx, 1
lea rdx, [0x005fe380]
xchg dword [rdx], ecx
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
dec dword [rcx + 0xd8]
mov rax, qword [rsp + 0x30]
add rsp, 0x40
pop rbp
ret
mov byte [rsp + 0x16], cl
mov dword [rsp + 0x24], edx
mov dword [rsp + 0x20], ebx
call sym.runtime.printlock
lea rax, [0x00516e49]
mov ebx, 0x1a
call sym.runtime.printstring
movzx eax, byte [rsp + 0x16]
movzx eax, al
call sym.runtime.printuint
lea rax, [0x00511b04]
mov ebx, 0xc
call sym.runtime.printstring
mov eax, dword [rsp + 0x24]
nop
call sym.runtime.printuint
lea rax, [0x0051121d]
mov ebx, 0xa
call sym.runtime.printstring
mov eax, dword [rsp + 0x20]
call sym.runtime.printuint
nop
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x00518bc1]
mov ebx, 0x1f
call sym.runtime.throw
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.sweepone
Function at 0x425ec0
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x426006
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0xd8], 0
jne 0x425ef4
cmp dword [rcx + 0xc0], 0
jne 0x425ef4
mov rdx, r14
cmp qword [rcx], rdx
jne 0x425ff1
jmp 0x425ef9
mov rax, rbx
nop
mov ecx, dword [0x005fe114]
mov edx, ecx
and ecx, 0x80000000
test ecx, ecx
jne 0x425f30
lea esi, [rdx + 1]
mov rbx, rax
mov eax, edx
lea rdi, [0x005fe114]
lock cmpxchg dword [rdi], esi
sete dl
test dl, dl
je 0x425ef6
mov edx, dword [0x00614c60]
test ecx, ecx
jmp 0x425f39
mov edx, dword [0x00614c60]
mov rbx, rax
mov qword [rsp + 0x20], rbx
mov dword [rsp + 0x10], edx
sete byte [rsp + 0x14]
jne 0x425fd5
lea rax, [rsp + 0x10]
call sym.runtime._sweepLocker_.tryAcquire
mov qword [rsp + 0x18], rax
nop dword [rax]
test bl, bl
jne 0x425f82
mov ebx, dword [rsp + 0x10]
movzx ecx, byte [rsp + 0x14]
lea rax, [0x005fe114]
call sym.runtime._activeSweep_.end
mov rbx, qword [rsp + 0x20]
nop
jmp 0x425fd5
lea rax, [rsp + 0x18]
xor ebx, ebx
call sym.runtime._sweepLocked_.sweep
mov ebx, dword [rsp + 0x10]
movzx ecx, byte [rsp + 0x14]
lea rax, [0x005fe114]
nop
call sym.runtime._activeSweep_.end
add rsp, 0x28
pop rbp
ret
lea rax, sym.runtime._mspan_.ensureSwept.osyield.func1
mov qword [rsp], rax
call sym.runtime.systemstack.abi0
xorps xmm15, xmm15
mov r14, qword [0x00682e20]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
mov rbx, rax
mov eax, dword [rbx + 0x58]
mov ecx, dword [rsp + 0x10]
nop dword [rax]
cmp eax, ecx
je 0x425feb
add ecx, 3
cmp eax, ecx
jne 0x425fab
add rsp, 0x28
pop rbp
ret
lea rax, [0x005199db]
mov ebx, 0x22
nop dword [rax]
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._mspan_.ensureSwept
Function at 0x4284c0
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x428657
push rbp
mov rbp, rsp
sub rsp, 0x38
test byte [rax], al
mov rsi, qword [rax + 0x10158]
nop dword [rax + rax]
cmp qword [rax + 0x10150], rsi
jl 0x4285f9
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
lea rcx, [rsi + rsi*2]
mov rdx, rcx
shr rcx, 0x3f
add rcx, rdx
sar rcx, 1
mov qword [rsp + 0x20], 0
movups xmmword [rsp + 0x28], xmm15
cmp rcx, 0x2000
mov eax, 0x2000
cmovg rax, rcx
mov qword [rsp + 0x18], rax
mov rcx, rax
shl rcx, 3
lea rbx, [0x00685840]
mov rax, rcx
nop dword [rax]
call sym.runtime.sysAlloc
mov qword [rsp + 0x20], rax
test rax, rax
je 0x428645
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsi + 0x10150]
mov qword [rsp + 0x28], rcx
mov rdi, qword [rsp + 0x18]
mov qword [rsp + 0x30], rdi
mov rdi, qword [rsi + 0x10150]
test rdi, rdi
je 0x4285a0
mov rbx, qword [rsi + 0x10148]
mov rax, qword [rsp + 0x20]
cmp rdi, rcx
cmovl rcx, rdi
cmp rax, rbx
je 0x4285a0
shl rcx, 3
call sym.runtime.memmove
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x20]
mov rax, qword [rsi + 0x10148]
mov rbx, qword [rsi + 0x10158]
cmp qword [rsi + 0x10150], 0
mov qword [rsi + 0x10148], r9
mov qword [rsi + 0x10150], rdi
mov qword [rsi + 0x10158], r8
je 0x4285f1
shl rbx, 3
lea rcx, [0x00685840]
call sym.runtime.sysFree
mov rsi, qword [rsp + 0x48]
mov rax, rsi
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rax + 0x10150]
mov rdx, qword [rax + 0x10158]
lea rsi, [rcx + 1]
cmp rdx, rsi
jb 0x428638
mov qword [rax + 0x10150], rsi
cmp rcx, rsi
jae 0x42862d
mov rax, qword [rax + 0x10148]
mov qword [rax + rcx*8], rbx
add rsp, 0x38
pop rbp
ret
mov rax, rcx
mov rcx, rsi
call sym.runtime.panicIndex
mov rcx, rsi
nop dword [rax + rax]
call sym.runtime.panicSliceAcap
lea rax, [0x00518b07]
mov ebx, 0x1f
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime.recordspan
Function at 0x42a680
Capabilities:
Reference wmi statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42a75c
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rcx
test rcx, rcx
jne 0x42a6d3
cmp qword [rbx + 8], 0
jne 0x42a6d3
cmp qword [rbx + 0x10], 0
jne 0x42a6d3
mov rcx, qword [rax]
mov qword [rbx], rcx
mov rcx, qword [rax]
test rcx, rcx
je 0x42a6c2
mov qword [rcx + 8], rbx
nop
jmp 0x42a6c6
mov qword [rax + 8], rbx
mov qword [rax], rbx
mov qword [rbx + 0x10], rax
add rsp, 0x28
pop rbp
ret
mov qword [rsp + 0x40], rbx
mov rax, qword [rbx + 8]
mov qword [rsp + 0x18], rax
mov rcx, qword [rbx + 0x10]
mov qword [rsp + 0x10], rcx
call sym.runtime.printlock
lea rax, [0x0051960f]
mov ebx, 0x21
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x40]
call sym.runtime.printuintptr
call sym.runtime.printsp
mov rax, qword [rsp + 0x20]
call sym.runtime.printuintptr
nop
call sym.runtime.printsp
mov rax, qword [rsp + 0x18]
call sym.runtime.printuintptr
call sym.runtime.printsp
mov rax, qword [rsp + 0x10]
call sym.runtime.printuintptr
nop
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x00512e80]
mov ebx, 0x10
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime._mSpanList_.insert