joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5c0040
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0213
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0xb0]
cmp qword [rax], 0
jne 0x5c01f9
cmp qword [rax + 0x30], 0
jne 0x5c01ff
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0xb8]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c00f0
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c00df
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c0159
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5c0159
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0150
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c01f9
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c019a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c01e0
mov rax, qword [rsp + 0x48]
jmp 0x5c01f5
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func4.1
Function at 0x5c02a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c04a6
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x98]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0xa0]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5c02e0
inc rcx
nop word [rax + rax]
cmp rcx, rdx
jge 0x5c048c
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5c02d7
cmp qword [rax + 0x30], 0
jne 0x5c0492
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
nop
cmp r9, 2
jge 0x5c0386
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0370
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5c03fb
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5c03fb
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c03e0
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5c02d7
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
cmp r9, r10
jae 0x5c0451
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5c0483
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
jmp 0x5c02d7
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func3.1
Function at 0x5c0520
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c06df
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
nop
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0
cmp qword [rax], 0
jne 0x5c0699
cmp qword [rax + 0x30], 0
jne 0x5c06cb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], rdx
mov r8, qword [rax + 0x18]
inc r8
test r8, r8
jg 0x5c05be
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c05b2
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
cmp byte [rax + 0x28], 0
je 0x5c0625
mov r8, qword [rax + 0x18]
inc r8
cmp qword [rax + 0x20], r8
jge 0x5c0625
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0617
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rsi, qword [rdx + 8]
mov qword [r11 + 8], rsi
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
jmp 0x5c0699
mov rcx, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r8, [rbx + 1]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c066b
mov qword [rsp + 0x30], rbx
mov rax, r9
mov rbx, r8
mov edi, 1
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov r9, rax
mov r8, rbx
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r9 + rbx], sil
mov qword [rax + 0x18], r8
mov qword [rax + 0x20], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0695
call sym.runtime.gcWriteBarrier2
mov qword [r11], r9
mov rsi, qword [rax + 0x10]
mov qword [r11 + 8], rsi
mov qword [rax + 0x10], r9
movups xmmword [rsp + 0x40], xmm15
lea rsi, [sym.crypto_tls._clientHelloMsg_.marshal.func1.1.1]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdx
mov ebx, 2
xor ecx, ecx
lea rdi, [rsp + 0x40]
nop dword [rax]
call sym.vendor_golang.org_x_crypto_cryptobyte._Builder_.addLengthPrefixed
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func1.1
Function at 0x5c0700
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c08df
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x80]
test r8, r8
lea rbx, [0x0098c060]
cmovne rbx, r8
cmp qword [rax], 0
jne 0x5c08c5
cmp qword [rax + 0x30], 0
nop word [rax + rax]
jne 0x5c08cb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x88]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c07c1
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c07b0
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c0828
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c0828
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c081f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c08c5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c0869
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
nop
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c08ac
mov rax, qword [rsp + 0x48]
jmp 0x5c08c1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func1.1.1
Function at 0x5c0cc0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c0e7f
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5c0e65
cmp qword [rax + 0x30], 0
jne 0x5c0e6b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c0d67
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0d56
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c0dc9
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c0dc9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c0dc0
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c0e65
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c0e0a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c0e4c
mov rax, qword [rsp + 0x48]
jmp 0x5c0e61
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.updateBinders.func1.1
Function at 0x5c4b60
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4d1f
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5c4d05
cmp qword [rax + 0x30], 0
jne 0x5c4d0b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c4c07
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c4bf6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c4c69
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c4c69
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c4c60
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c4d05
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c4caa
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c4cec
mov rax, qword [rsp + 0x48]
jmp 0x5c4d01
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._serverHelloMsg_.marshal.func10.2
Function at 0x5c4d40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4eff
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x38]
cmp qword [rax], 0
nop
jne 0x5c4ee5
cmp qword [rax + 0x30], 0
jne 0x5c4eeb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x40]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c4de7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c4dd6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c4e49
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c4e49
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c4e40
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c4ee5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c4e8a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c4ecc
mov rax, qword [rsp + 0x48]
jmp 0x5c4ee1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._serverHelloMsg_.marshal.func10.1
Function at 0x5c4f80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c5153
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0xd0]
cmp qword [rax], 0
jne 0x5c5139
cmp qword [rax + 0x30], 0
jne 0x5c513f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0xd8]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c5030
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c501f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c5099
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5c5099
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c5090
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c5139
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c50da
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c5120
mov rax, qword [rsp + 0x48]
jmp 0x5c5135
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._serverHelloMsg_.marshal.func9.1
Function at 0x5c5180
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c5310
push rbp
mov rbp, rsp
sub rsp, 0x38
mov rdx, qword [rdx + 8]
movzx edx, word [rdx + 0x100]
rol dx, 8
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], dx
cmp qword [rax], 0
jne 0x5c52f6
cmp qword [rax + 0x30], 0
nop dword [rax]
jne 0x5c52fc
mov qword [rsp + 0x48], rax
mov rdx, qword [rax + 0x18]
add rdx, 2
cmp rdx, 2
jge 0x5c5226
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x48]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c521f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
cmp byte [rax + 0x28], 0
je 0x5c5286
mov rdx, qword [rax + 0x18]
add rdx, 2
cmp qword [rax + 0x20], rdx
jge 0x5c5286
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x48]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c5280
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c52f6
mov rcx, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea rdx, [rbx + 2]
mov r8, qword [rax + 0x10]
cmp rcx, rdx
jae 0x5c52c7
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x30]
movzx esi, word [rsp + 0x2e]
mov word [r8 + rbx], si
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rcx
cmp dword [0x0098c4d0], 0
je 0x5c52f2
call sym.runtime.gcWriteBarrier2
mov qword [r11], r8
mov rcx, qword [rax + 0x10]
mov qword [r11 + 8], rcx
mov qword [rax + 0x10], r8
add rsp, 0x38
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
nop
jmp sym.crypto_tls._serverHelloMsg_.marshal.func8