joyce8/EMBER2024-capa huggingface dataset:
Function at 0x495600
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4956f0
push rbp
mov rbp, rsp
sub rsp, 0x20
jmp 0x495617
mov rax, rbx
mov rcx, qword [rax]
bt ecx, 0
nop
jb 0x495662
mov rdx, rcx
or rcx, 1
add rcx, 8
test rcx, 0x7ffff8
je 0x4956dc
movabs rsi, 0x80000000007fffff
and rcx, rsi
mov rbx, rax
mov rax, rdx
lock cmpxchg qword [rbx], rcx
sete cl
test cl, cl
je 0x495614
mov qword [rsp + 0x18], rbx
nop
jmp 0x495689
xor eax, eax
add rsp, 0x20
pop rbp
ret
mov qword [rsp + 0x10], rdx
lea rax, [rbx + 8]
call sym.internal_poll.runtime_Semrelease
mov rdx, qword [rsp + 0x10]
add rdx, 0xffffffffff800000
mov rbx, qword [rsp + 0x18]
movabs rcx, 0x7ffff800000
test rdx, rcx
jne 0x49566a
jmp 0x4956c2
mov qword [rsp + 0x10], rdx
lea rax, [rbx + 0xc]
call sym.internal_poll.runtime_Semrelease
mov rcx, qword [rsp + 0x10]
movabs rdx, 0xfffff80000000000
add rcx, rdx
mov rbx, qword [rsp + 0x18]
mov rdx, rcx
movabs rcx, 0x7ffff80000000000
test rdx, rcx
jne 0x49569a
mov eax, 1
add rsp, 0x20
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x00501b70]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
nop
jmp sym.internal_poll._fdMutex_.increfAndClose

Function at 0x495720
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49583c
push rbp
mov rbp, rsp
sub rsp, 0x30
test bl, bl
je 0x495752
test byte [rax], al
lea rcx, [rax + 8]
mov edx, 2
mov ebx, 0x800000
movabs rsi, 0x7ffff800000
jmp 0x495771
test byte [rax], al
lea rcx, [rax + 0xc]
mov edx, 4
movabs rbx, 0x80000000000
movabs rsi, 0x7ffff80000000000
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rdx
jmp 0x49578f
mov rax, r9
mov rdi, qword [rax]
bt edi, 0
jb 0x49580d
test rdi, rdx
jne 0x4957b2
mov r8, rdi
or rdi, rdx
add rdi, 8
test rdi, 0x7ffff8
jne 0x4957c4
jmp 0x495828
lea r8, [rbx + rdi]
test rsi, r8
je 0x495815
mov r9, r8
mov r8, rdi
mov rdi, r9
mov r9, rax
mov rax, r8
lock cmpxchg qword [r9], rdi
sete dil
test dil, dil
je 0x49578c
test r8, rdx
je 0x495802
mov rax, rcx
call sym.internal_poll.runtime_Semacquire
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x10]
mov rsi, qword [rsp + 0x18]
mov r9, qword [rsp + 0x40]
nop
jmp 0x49578c
mov eax, 1
add rsp, 0x30
pop rbp
ret
xor eax, eax
add rsp, 0x30
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x00501b70]
call sym.runtime.gopanic
lea rax, [0x004bcec0]
lea rbx, [0x00501b70]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
jmp sym.internal_poll._fdMutex_.rwlock
Function at 0x49a280
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49a47f
push rbp
mov rbp, rsp
sub rsp, 0x38
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
test rdi, rdi
je 0x49a435
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rdi
cmp qword [0x0058f7a0], rdi
je 0x49a2d0
xor edx, edx
jmp 0x49a300
mov rcx, qword [0x0058f7a8]
mov rax, rdi
mov rbx, rsi
nop dword [rax]
call sym.runtime.ifaceeq
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov edx, eax
mov rax, qword [rsp + 0x48]
test dl, dl
jne 0x49a435
cmp qword [0x0058f990], rdi
jne 0x49a352
mov rcx, qword [0x0058f998]
mov rax, rdi
mov rbx, rsi
nop
call sym.runtime.ifaceeq
test al, al
je 0x49a339
mov rdi, qword [0x00597140]
mov rsi, qword [0x00597148]
jmp 0x49a398
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
cmp byte [0x0061bfe8], 0
je 0x49a398
mov rcx, qword [0x0058f990]
mov rdx, qword [0x0058f998]
mov rax, rdi
mov rbx, rsi
mov rdi, rdx
call sym.errors.Is
test al, al
jne 0x49a441
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
lea rax, [0x004c9980]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x58]
mov qword [rax + 8], rcx
cmp dword [0x0061c240], 0
nop
jne 0x49a3c9
mov rcx, qword [rsp + 0x50]
jmp 0x49a3d6
call sym.runtime.gcWriteBarrier1
mov rcx, qword [rsp + 0x50]
mov qword [r11], rcx
mov qword [rax], rcx
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx]
mov rdx, qword [rcx + 0x230]
mov rcx, qword [rcx + 0x228]
mov qword [rax + 0x18], rdx
cmp dword [0x0061c240], 0
jne 0x49a403
mov rdx, qword [rsp + 0x30]
jmp 0x49a414
call sym.runtime.gcWriteBarrier2
mov qword [r11], rcx
mov rdx, qword [rsp + 0x30]
mov qword [r11 + 8], rdx
mov qword [rax + 0x10], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x20], rcx
mov qword [rax + 0x28], rdx
mov rbx, rax
lea rax, [0x00501d08]
add rsp, 0x38
pop rbp
ret
mov rax, rdi
mov rbx, rsi
add rsp, 0x38
pop rbp
ret
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x18]
mov rax, qword [rsp + 0x68]
call rcx
mov ecx, 0x2f
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x004e19a5]
call sym.runtime.concatstring2
call sym.runtime.convTstring
mov rbx, rax
lea rax, [0x004bcec0]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp sym.os._File_.wrapErr
Function at 0x49b380
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49b3d2
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
test rax, rax
jne 0x49b3a9
call sym.internal_testlog.PanicOnExit0
nop dword [rax]
test al, al
jne 0x49b3be
mov rax, qword [rsp + 0x20]
call sym.os.runtime_beforeExit
mov rax, qword [rsp + 0x20]
call sym.syscall.Exit
add rsp, 0x10
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x005016e0]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.os.Exit

Function at 0x4a6ec0
Capabilities:
Hash data using fnv

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a75ff
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
movabs rcx, 0xcbf29ce484222325
jmp 0x4a6eed
lea rax, [rdx + 0x10]
dec rbx
mov rcx, rsi
test rbx, rbx
jle 0x4a7171
mov rdx, rax
mov rsi, qword [rax]
nop dword [rax]
test rsi, rsi
je 0x4a719d
mov edi, dword [rsi + 0x10]
shr edi, 1
mov r8, qword [rax + 8]
and edi, 0x3f
lea rax, [0x00503380]
jmp qword [rax + rdi*8]
mov rax, rcx
add rsp, 0x10
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x00501c00]
call sym.runtime.gopanic
inc rax
cmp rax, r8
jge 0x4a71c2
mov r9, qword [rsi + rax*8]
xor r10d, r10d
nop
jmp 0x4a71f7
lea rdi, [0x004bcf40]
mov rsi, rcx
movabs rcx, 0x100000001b3
jmp 0x4a6ee3
movzx r11d, r9b
xor rcx, r11
inc r10
shr r9, 8
movabs r11, 0x100000001b3
imul rcx, r11
cmp r10, 8
jl 0x4a71db
jmp 0x4a71b0
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.internal_bisect.Hash

Function at 0x4a77a0
Capabilities:
Hash data using fnv

Disassembly:
test byte [rax], al
mov rcx, rbx
and ebx, 0x7f
shl rbx, 5
lea rdx, [rax + rbx]
xor eax, eax
jmp 0x4a77b7
inc rax
cmp rax, 4
jge 0x4a77cf
lea rbx, [rdx + rax*8]
mov rbx, qword [rbx]
cmp rbx, rcx
jne 0x4a77b4
mov eax, 1
ret
xor eax, eax
movabs rbx, 0xcbf29ce484222325
jmp 0x4a77e0
inc rax
cmp rax, 4
jge 0x4a77ee
mov rsi, qword [rdx + rax*8]
xor edi, edi
jmp 0x4a7817
and ebx, 3
lea rdx, [rdx + rbx*8]
xchg qword [rdx], rcx
xor eax, eax
ret
movzx r8d, sil
xor rbx, r8
inc rdi
shr rsi, 8
movabs r8, 0x100000001b3
imul rbx, r8
cmp rdi, 8
jl 0x4a77fb
jmp 0x4a77dd
Function at 0x4a7ae0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a7b9a
push rbp
mov rbp, rsp
sub rsp, 0x30
mov rcx, qword [rdx + 8]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rcx + 8]
mov rsi, qword [rcx]
test rdx, rdx
je 0x4a7b1f
cmp byte [rsi], 0x23
jne 0x4a7b1f
dec rdx
mov rdi, rdx
neg rdi
sar rdi, 0x3f
and edi, 1
add rsi, rdi
mov rax, rsi
mov rbx, rdx
call sym.internal_godebug.lookup
cmp dword [0x0061c240], 0
jne 0x4a7b3a
mov rdx, qword [rsp + 0x28]
jmp 0x4a7b4f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rdx, qword [rsp + 0x28]
mov r8, qword [rdx + 0x20]
mov qword [r11 + 8], r8
mov qword [rdx + 0x20], rax
cmp qword [rax + 0x20], 0
jne 0x4a7b6b
mov rsi, qword [rdx + 8]
mov rdi, qword [rdx]
test rsi, rsi
je 0x4a7b71
cmp byte [rdi], 0x23
jne 0x4a7b71
add rsp, 0x30
pop rbp
ret
xor eax, eax
lea rbx, [0x004e210a]
mov ecx, 0x33
nop
call sym.runtime.concatstring2
call sym.runtime.convTstring
mov rbx, rax
lea rax, [0x004bcec0]
call sym.runtime.gopanic
nop
call sym.runtime.morestack.abi0
nop
jmp sym.internal_godebug._Setting_.Value.func1

Function at 0x4a8900
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a897d
push rbp
mov rbp, rsp
sub rsp, 0x10
mov rcx, qword [rax]
nop
test rcx, rcx
je 0x4a891e
cmp rax, rcx
je 0x4a8939
jmp 0x4a8969
cmp dword [0x0061c240], 0
je 0x4a8936
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rax]
mov qword [r11 + 8], rcx
mov qword [rax], rax
test rbx, rbx
jl 0x4a8956
mov rcx, qword [rax + 0x18]
sub rcx, qword [rax + 0x10]
cmp rbx, rcx
jle 0x4a8950
call sym.strings._Builder_.grow
add rsp, 0x10
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x00501bd0]
call sym.runtime.gopanic
lea rax, [0x004bcec0]
lea rbx, [0x005016f0]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.strings._Builder_.Grow
Function at 0x4a89a0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4a8aaa
push rbp
mov rbp, rsp
sub rsp, 0x48
mov rdx, qword [rax]
nop
test rdx, rdx
je 0x4a89ca
nop dword [rax + rax]
cmp rax, rdx
je 0x4a89e5
jmp 0x4a8a96
cmp dword [0x0061c240], 0
je 0x4a89e2
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rdx, qword [rax]
mov qword [r11 + 8], rdx
mov qword [rax], rax
mov qword [rsp + 0x58], rax
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 8]
mov r8, qword [rax + 0x10]
mov qword [rsp + 0x40], r8
nop dword [rax + rax]
cmp ebx, 0x7f
ja 0x4a8a44
lea r9, [r8 + 1]
cmp rcx, r9
jae 0x4a8a3d
mov dword [rsp + 0x60], ebx
mov rax, rdx
mov rbx, r9
mov edi, 1
lea rsi, [0x004bcf40]
call sym.runtime.growslice
mov r8, qword [rsp + 0x40]
mov r9, rbx
mov rdx, rax
mov rax, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x60]
mov byte [r9 + rdx - 1], bl
jmp 0x4a8a61
mov rax, rdx
mov edi, ebx
mov rbx, r8
call sym.unicode_utf8.appendRuneNonASCII
mov r8, qword [rsp + 0x40]
mov r9, rbx
mov rdx, rax
mov rax, qword [rsp + 0x58]
mov qword [rax + 0x10], r9
mov qword [rax + 0x18], rcx
sub r9, r8
cmp dword [0x0061c240], 0
je 0x4a8a85
call sym.runtime.gcWriteBarrier2
mov qword [r11], rdx
mov rsi, qword [rax + 8]
mov qword [r11 + 8], rsi
mov qword [rax + 8], rdx
mov rax, r9
xor ebx, ebx
xor ecx, ecx
add rsp, 0x48
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x005016f0]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
jmp sym.strings._Builder_.WriteRune
Function at 0x4b0a60
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b0ad8
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rcx, qword [rdx + 8]
mov rax, qword [rcx]
mov rcx, qword [rdx + 0x10]
test rax, rax
je 0x4b0a99
nop
cmp qword [rax + 0x20], 0
je 0x4b0ac4
mov qword [rsp + 0x10], rcx
add rax, 8
call sym.time.stopTimer
mov rcx, qword [rsp + 0x10]
test byte [rcx], al
cmp dword [0x0061c240], 0
je 0x4b0ab3
mov rax, qword [rcx + 0x128]
call sym.runtime.gcWriteBarrier1
mov qword [r11], rax
mov qword [rcx + 0x128], 0
add rsp, 0x18
pop rbp
ret
lea rax, [0x004bcec0]
lea rbx, [0x00501700]
call sym.runtime.gopanic
nop
call sym.runtime.morestack.abi0
jmp sym.os_exec._Cmd_.awaitGoroutines.func1
Function at 0x4b21e0
Capabilities:
Run powershell expression

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4b22f3
push rbp
mov rbp, rsp
sub rsp, 0x28
cmp qword [rax + 0xa0], 0
je 0x4b2206
cmp qword [rax + 0xa8], 0
je 0x4b220c
add rsp, 0x28
pop rbp
ret
cmp qword [rax + 0x138], 0
je 0x4b22e5
lea rbx, [0x004e26c3]
neg rbx
cmp rbx, 0x3a
jb 0x4b22de
mov qword [rsp + 0x38], rax
mov rax, qword [0x00596eb0]
lea rbx, [0x004e26c3]
mov ecx, 0x3a
mov rdi, rcx
call sym.os._File_.Write
mov rax, qword [0x00596eb0]
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rdx + 0x138]
mov rcx, qword [rdx + 0x140]
mov rdi, qword [rdx + 0x148]
call sym.os._File_.Write
lea rbx, [0x00500778]
neg rbx
nop
test rbx, rbx
je 0x4b22d9
mov rax, qword [0x00596eb0]
lea rbx, [0x00500778]
mov ecx, 1
mov rdi, rcx
nop dword [rax + rax]
call sym.os._File_.Write
xor eax, eax
xor ecx, ecx
lea rbx, [0x004e289f]
mov rdi, rcx
mov rsi, rax
xor eax, eax
mov ecx, 0x3d
nop dword [rax]
call sym.runtime.concatstring2
call sym.runtime.convTstring
mov rbx, rax
lea rax, [0x004bcec0]
call sym.runtime.gopanic
call sym.runtime.panicunsafeslicelen
nop
call sym.runtime.panicunsafeslicelen
mov eax, 0x39
lea rcx, [0x004e2651]
jmp 0x4b22a9
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.os_exec.Command.func1
Function at 0x4b2720
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4b293f
push rbp
mov rbp, rsp
sub rsp, 0xa0
xor eax, eax
lea rbx, [0x004e2f25]
mov ecx, 0x87a
call sym.runtime.stringtoslicebyte
mov rdi, rbx
mov rsi, rcx
mov r8d, 0x1a4
mov ebx, 9
mov rcx, rax
lea rax, [0x004d8d72]
call sym.os.WriteFile
test rax, rax
je 0x4b27d0
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x70], xmm15
lea rdx, [0x004bcec0]
mov qword [rsp + 0x60], rdx
lea r8, [0x00501690]
mov qword [rsp + 0x68], r8
je 0x4b279c
mov rax, qword [rax + 8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov rbx, qword [0x00596ea8]
lea rax, [0x00501ca8]
lea rcx, [rsp + 0x60]
mov edi, 2
mov rsi, rdi
call sym.fmt.Fprintln
mov eax, 1
call sym.os.Exit
movups xmmword [rsp + 0x50], xmm15
lea rdx, [0x004bcec0]
mov qword [rsp + 0x50], rdx
lea r8, [0x005016a0]
mov qword [rsp + 0x58], r8
mov rbx, qword [0x00596ea8]
lea rax, [0x00501ca8]
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
call sym.fmt.Fprintln
movups xmmword [rsp + 0x80], xmm15
movups xmmword [rsp + 0x90], xmm15
mov qword [rsp + 0x88], 2
lea rdx, [0x004d842d]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x98], 9
lea rdx, [0x004d8d72]
mov qword [rsp + 0x90], rdx
lea rax, [0x004d8471]
mov ebx, 3
lea rcx, [rsp + 0x80]
mov edi, 2
mov rsi, rdi
call sym.os_exec.Command
mov rdx, qword [0x00596ea8]
lea r8, [0x00501ca8]
mov qword [rax + 0x60], r8
cmp dword [0x0061c240], 0
je 0x4b28a2
call sym.runtime.gcWriteBarrier2
mov qword [r11], rdx
mov rcx, qword [rax + 0x68]
mov qword [r11 + 8], rcx
mov qword [rax + 0x68], rdx
mov rcx, qword [0x00596eb0]
mov qword [rax + 0x70], r8
cmp dword [0x0061c240], 0
je 0x4b28ca
call sym.runtime.gcWriteBarrier2
mov qword [r11], rcx
mov rdx, qword [rax + 0x78]
mov qword [r11 + 8], rdx
mov qword [rax + 0x78], rcx
call sym.os_exec._Cmd_.Run
test rax, rax
je 0x4b2936
movups xmmword [rsp + 0x30], xmm15
movups xmmword [rsp + 0x40], xmm15
lea rdx, [0x004bcec0]
mov qword [rsp + 0x30], rdx
lea rdx, [0x005016b0]
mov qword [rsp + 0x38], rdx
je 0x4b2902
mov rax, qword [rax + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
mov rbx, qword [0x00596ea8]
lea rax, [0x00501ca8]
lea rcx, [rsp + 0x30]
mov edi, 2
mov rsi, rdi
call sym.fmt.Fprintln
mov eax, 1
call sym.os.Exit
add rsp, 0xa0
pop rbp
ret
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.main.main
Function at 0x140017a80
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140017c0b
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [0x140130d38]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.1400360a0
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
jne 0x140017ae5
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
jmp 0x140017af4
add rsp, 0x48
pop rbp
ret
sub rcx, rbx
add rax, rbx
mov rbx, rcx
test rbx, rbx
jbe 0x140017b13
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
mov rcx, rbx
jmp 0x140017b23
cmp rbx, 0x1000
jae 0x140017aeb
jmp 0x140017b8d
add rsp, 0x48
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
cmp rbx, 0x1000
jae 0x140017b35
xor edx, edx
jmp 0x140017b84
mov rcx, qword [0x140130d38]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.1400360a0
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
sete al
mov rcx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov edx, eax
mov rax, qword [rsp + 0x40]
test dl, dl
jne 0x140017b19
jmp 0x140017b08
call fcn.14006b580
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x30], rax
call fcn.14003a160
lea rax, [0x14016756a]
mov ebx, 0x18
nop dword [rax]
call fcn.14003a9e0
mov rax, qword [rsp + 0x38]
call fcn.14003a720
lea rax, [0x140167a06]
mov ebx, 0x19
nop dword [rax + rax]
call fcn.14003a9e0
mov rax, qword [rsp + 0x30]
call fcn.14003a720
call fcn.14003a3a0
call fcn.14003a1c0
lea rax, [0x140169afd]
mov ebx, 0x21
call fcn.1400386c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.1400677c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.140017a80
Function at 0x140017c40
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140017e66
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [0x140130d30]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.140036120
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, rax
cmp qword [rsp + 0x28], rax
je 0x140017cb3
mov rbx, qword [rsp + 0x68]
mov rax, rbx
jmp 0x140017cc2
add rsp, 0x50
pop rbp
ret
sub rdx, rbx
add rcx, rbx
mov rbx, rdx
test rbx, rbx
jbe 0x140017ce5
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov rdx, rbx
jmp 0x140017cf5
cmp rbx, 0x1000
jae 0x140017cb9
nop
jmp 0x140017d78
add rsp, 0x50
pop rbp
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
nop word [rax + rax]
cmp rbx, 0x1000
jae 0x140017d0d
xor esi, esi
jmp 0x140017d6a
mov rax, qword [0x140130d30]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.140036120
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x28], 0
sete al
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov esi, eax
mov rax, qword [rsp + 0x68]
test sil, sil
jne 0x140017ceb
jmp 0x140017cd6
call fcn.14006b580
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x34], eax
cmp eax, 8
jne 0x140017e00
nop dword [rax + rax]
call fcn.14003a160
lea rax, [0x140167a1f]
mov ebx, 0x19
call fcn.14003a9e0
mov rax, qword [rsp + 0x68]
nop dword [rax + rax]
call fcn.14003a720
lea rax, [0x140167a06]
mov ebx, 0x19
call fcn.14003a9e0
mov eax, dword [rsp + 0x34]
call fcn.14003a720
nop
call fcn.14003a3a0
call fcn.14003a1c0
lea rax, [0x140164439]
mov ebx, 0xd
call fcn.1400386c0
nop dword [rax + rax]
cmp eax, 0x5af
je 0x140017da0
call fcn.14003a160
lea rax, [0x140167a1f]
mov ebx, 0x19
call fcn.14003a9e0
mov rax, qword [rsp + 0x38]
call fcn.14003a720
lea rax, [0x140167a06]
mov ebx, 0x19
call fcn.14003a9e0
mov eax, dword [rsp + 0x34]
nop dword [rax]
call fcn.14003a720
call fcn.14003a3a0
call fcn.14003a1c0
lea rax, [0x140169405]
mov ebx, 0x1f
nop dword [rax + rax]
call fcn.1400386c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.1400677c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.140017c40
Function at 0x140021d20
Capabilities:
Hash data using murmur3

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp byte [0x14037d070], 0
jne 0x140021e10
sub rbx, qword [rax + 0x18]
mov rdx, qword [rax + 0x48]
test byte [rdx], al
mov ecx, dword [rax + 0x5c]
imul rcx, rbx
mov rbx, rcx
shr rbx, 0x20
shr rcx, 0x23
and ebx, 7
mov rsi, rcx
mov rcx, rbx
mov edi, 1
shl edi, cl
add rdx, rsi
nop
nop
nop
nop
lock or byte [rdx], dil
mov rcx, qword [rax + 0x18]
movabs rdx, 0x800000000000
add rdx, rcx
mov rbx, rdx
shr rdx, 0x2a
nop
nop
nop
cmp rdx, 0x40
jae 0x140021e03
lea rsi, [0x14030f178]
mov rdx, qword [rsi + rdx*8]
test byte [rdx], al
mov rsi, rcx
shr rsi, 0x10
and esi, 0x3f
shr rcx, 0xd
and ecx, 7
mov edi, 1
shl edi, cl
shr rbx, 0x16
and ebx, 0xfffff
mov rdx, qword [rdx + rbx*8]
test byte [rdx], al
movzx ebx, byte [rdx + rsi + 0x1040]
lea rdx, [rdx + rsi]
lea rdx, [rdx + 0x1040]
test dil, bl
jne 0x140021dde
lock or byte [rdx], dil
mov rcx, qword [r14 + 0x30]
mov rcx, qword [rcx + 0xa0]
test byte [rcx], al
mov rdx, qword [rcx + 0x1270]
add rdx, qword [rax + 0x68]
mov qword [rcx + 0x1270], rdx
add rsp, 0x10
pop rbp
ret
mov rax, rdx
mov ecx, 0x40
call fcn.140069ae0
lea rax, [0x14016bab5]
mov ebx, 0x2c
nop dword [rax]
call fcn.1400386c0
nop
int3

Function at 0x140024240
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140024346
push rbp
mov rbp, rsp
sub rsp, 0x48
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rcx
mov byte [rsp + 0x70], dil
mov qword [rsp + 0x10], 0
jmp 0x140024283
mov rax, qword [rsp + 0x58]
mov rcx, rdx
mov rbx, qword [rsp + 0x60]
movzx edi, byte [rsp + 0x70]
cmp qword [rsp + 0x10], rbx
jae 0x14002433b
test byte [rax], al
lea rcx, [rax + 0x100b8]
mov ebx, edi
mov rax, rcx
nop dword [rax]
call fcn.140025020
test rax, rax
je 0x14002433b
movups xmmword [rsp + 0x18], xmm15
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
lea rcx, [0x140024380]
mov qword [rsp + 0x18], rcx
lea rdx, [rsp + 0x10]
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rbx, [rsp + 0x18]
mov qword [rsp], rbx
nop dword [rax]
call fcn.1400676a0
xorps xmm15, xmm15
mov r14, qword [0x14037d2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x68]
nop dword [rax]
test rdx, rdx
jne 0x140024329
xor eax, eax
jmp 0x140024333
mov rax, qword [rdx]
call rax
mov rdx, qword [rsp + 0x68]
test al, al
je 0x140024271
mov rax, qword [rsp + 0x10]
add rsp, 0x48
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call fcn.1400677c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
jmp fcn.140024240