joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6041c0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6043de
push rbp
mov rbp, rsp
sub rsp, 0x38
mov byte [rsp + 0x68], bl
mov byte [rsp + 0x69], cl
mov byte [rsp + 0x6a], dil
mov dword [rsp + 0x6c], esi
mov dword [rsp + 0x70], r8d
test r8d, r8d
je 0x60436d
nop
test rax, rax
jne 0x60420d
mov qword [rsp + 0x78], r9
lea rax, [0x006aed40]
call sym.runtime.newobject
mov r9, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
mov r8d, dword [rsp + 0x70]
mov qword [rax], rsi
mov dword [rax + 8], r8d
movzx esi, byte [rsp + 0x6a]
test sil, 8
je 0x6042b7
mov rsi, qword [rsp + 0x50]
test rsi, rsi
jne 0x604253
mov rsi, qword [0x008f5d30]
mov r8, qword [0x008f5d38]
xor r12d, r12d
xor r11d, r11d
xor r13d, r13d
xor r10d, r10d
jmp 0x604280
mov r10, qword [rsp + 0x58]
dec r10
mov r11, r10
neg r10
sar r10, 0x3f
and r10d, 1
mov r12, qword [rsp + 0x48]
add r10, r12
lea r13, [rsi - 1]
movzx r12d, byte [r12]
xor esi, esi
xor r8d, r8d
nop
test rsi, rsi
je 0x6042c9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rsi
mov rcx, qword [r9]
lea rax, [0x006d947c]
mov ebx, 0x19
mov rdx, r9
call rcx
xor eax, eax
xor ebx, ebx
mov rcx, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
add rsp, 0x38
pop rbp
ret
xor r12d, r12d
mov r13, qword [rsp + 0x50]
mov r11, qword [rsp + 0x58]
mov r10, qword [rsp + 0x48]
movzx esi, r12b
cmp r13, rsi
jl 0x604317
sub r13, rsi
cmp r11, r13
jb 0x6043d2
mov qword [rax + 0x18], r13
mov qword [rax + 0x20], r11
cmp dword [0x0098c4d0], 0
je 0x6042ff
call sym.runtime.gcWriteBarrier2
mov qword [r11], r10
mov rdx, qword [rax + 0x10]
mov qword [r11 + 8], rdx
mov qword [rax + 0x10], r10
mov rbx, rax
xor ecx, ecx
xor edi, edi
lea rax, [0x007595b0]
add rsp, 0x38
pop rbp
ret
mov rcx, qword [r9]
lea rax, [0x006d7619]
mov ebx, 0x16
mov rdx, r9
call rcx
mov dword [rsp + 0x20], 1
lea rcx, [0x006de26c]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], 0x21
lea rax, [0x006a2f40]
lea rbx, [rsp + 0x20]
call sym.runtime.convT
xor ebx, ebx
lea rcx, [0x007588a0]
mov rdi, rax
xor eax, eax
add rsp, 0x38
pop rbp
ret
mov rcx, qword [r9]
lea rax, [0x006d5c1c]
mov ebx, 0x13
mov rdx, r9
nop
call rcx
mov dword [rsp + 0x20], 0
movups xmmword [rsp + 0x28], xmm15
mov dword [rsp + 0x20], 1
lea rcx, [0x006da968]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], 0x1b
lea rax, [0x006a2f40]
lea rbx, [rsp + 0x20]
call sym.runtime.convT
xor ebx, ebx
lea rcx, [0x007588a0]
mov rdi, rax
xor eax, eax
add rsp, 0x38
pop rbp
ret
mov rcx, r13
mov rdx, r11
call sym.runtime.panicSliceAcap
nop
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x29], cl
mov byte [rsp + 0x2a], dil
mov dword [rsp + 0x2c], esi
mov dword [rsp + 0x30], r8d
mov qword [rsp + 0x38], r9
nop
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 0x20]
movzx ebx, byte [rsp + 0x28]
movzx ecx, byte [rsp + 0x29]
movzx edi, byte [rsp + 0x2a]
mov esi, dword [rsp + 0x2c]
mov r8d, dword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp sym.net_http.http2parseDataFrame
Function at 0x6067c0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x606893
push rbp
mov rbp, rsp
sub rsp, 0x18
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], cl
mov byte [rsp + 0x4a], dil
mov dword [rsp + 0x4c], esi
mov dword [rsp + 0x50], r8d
mov rcx, qword [rsp + 0x30]
cmp rcx, 4
jne 0x606867
test r8d, r8d
jne 0x606824
mov rcx, qword [r9]
lea rax, [0x006da983]
mov ebx, 0x1b
mov rdx, r9
call rcx
xor eax, eax
xor ebx, ebx
lea rcx, [0x007587a0]
lea rdi, [0x00754e88]
add rsp, 0x18
pop rbp
ret
mov rcx, qword [rsp + 0x28]
mov ecx, dword [rcx]
bswap ecx
mov dword [rsp + 0x14], ecx
lea rax, [0x006aeec0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x48]
mov edx, dword [rsp + 0x50]
mov qword [rax], rcx
mov dword [rax + 8], edx
mov ecx, dword [rsp + 0x14]
mov dword [rax + 0xc], ecx
mov rbx, rax
xor ecx, ecx
xor edi, edi
lea rax, [0x00759600]
add rsp, 0x18
pop rbp
ret
mov rcx, qword [r9]
lea rax, [0x006d81b6]
mov ebx, 0x17
mov rdx, r9
call rcx
xor eax, eax
xor ebx, ebx
lea rcx, [0x007587a0]
lea rdi, [0x00754f30]
add rsp, 0x18
pop rbp
ret
mov qword [rsp + 0x20], rax
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x29], cl
mov byte [rsp + 0x2a], dil
mov dword [rsp + 0x2c], esi
mov dword [rsp + 0x30], r8d
mov qword [rsp + 0x38], r9
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 0x20]
movzx ebx, byte [rsp + 0x28]
movzx ecx, byte [rsp + 0x29]
movzx edi, byte [rsp + 0x2a]
mov esi, dword [rsp + 0x2c]
mov r8d, dword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp sym.net_http.http2parseRSTStreamFrame
Function at 0x609040
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6090c5
push rbp
mov rbp, rsp
sub rsp, 0x30
lea rax, [0x006d160b]
mov ebx, 7
call sym.os.Getenv
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea rcx, [0x006d2f10]
mov edi, 0xc
call sym.strings.Index
test rax, rax
jl 0x609086
mov byte [0x0098c081], 1
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
lea rcx, [0x006d2f1c]
mov edi, 0xc
nop dword [rax]
call sym.strings.Index
test rax, rax
jl 0x6090bf
mov byte [0x0098c081], 1
mov byte [0x0098c082], 1
mov byte [0x0098c083], 1
add rsp, 0x30
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.net_http.init.0
Function at 0x60e2a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60e323
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rsp + 0x30], rax
nop
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1d
lea rcx, [0x006dbcaa]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx]
mov rdx, qword [rdx + 0x58]
test rdx, rdx
je 0x60e308
mov qword [rsp + 0x18], rax
mov rcx, qword [rdx]
lea rax, [0x006d64e5]
mov ebx, 0x14
call rcx
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x30]
lea rbx, [0x00758260]
mov rdx, rax
mov rax, rcx
mov rcx, rdx
call sym.net_http._http2ClientConn_.closeForError
add rsp, 0x20
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net_http._http2ClientConn_.closeForLostPing
Function at 0x610a00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x610b33
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
nop dword [rax]
call sym.time.Now
mov rdx, qword [rsp + 0x20]
mov qword [rdx + 0xc8], rax
mov qword [rdx + 0xd0], rbx
cmp dword [0x0098c4d0], 0
nop
je 0x610a55
call sym.runtime.gcWriteBarrier2
mov qword [r11], rcx
mov rsi, qword [rdx + 0xd8]
mov qword [r11 + 8], rsi
mov qword [rdx + 0xd8], rcx
cmp byte [rdx + 0x7a], 0
jne 0x610b1f
mov rax, rdx
call sym.net_http._http2ClientConn_.idleStateLocked
test al, al
je 0x610b1f
mov rcx, qword [rsp + 0x20]
movups xmmword [rcx + 0xe0], xmm15
cmp dword [0x0098c4d0], 0
je 0x610a9b
mov rdx, qword [rcx + 0xf0]
call sym.runtime.gcWriteBarrier1
mov qword [r11], rdx
mov qword [rcx + 0xf0], 0
mov rdx, qword [rcx + 0x98]
test rdx, rdx
je 0x610ab7
mov rdx, qword [rdx]
jmp 0x610ab9
xor edx, edx
mov esi, dword [rcx + 0xfc]
nop
cmp rdx, rsi
jl 0x610b15
inc qword [rcx + 0xb0]
mov rax, qword [rcx + 0x58]
call sym.sync._Cond_.Wait
mov rcx, qword [rsp + 0x20]
dec qword [rcx + 0xb0]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rdx + 0xc8]
xor eax, eax
call sym.runtime.selectnbrecv
test al, al
je 0x610a1c
mov rcx, qword [rsp + 0x28]
mov rax, qword [rcx + 0xd0]
mov rbx, qword [rcx + 0xd8]
add rsp, 0x10
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x10
pop rbp
ret
mov rax, qword [0x008f5510]
mov rbx, qword [0x008f5518]
add rsp, 0x10
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.net_http._http2ClientConn_.awaitOpenSlotForStreamLocked
Function at 0x617880
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x617a3f
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x98], rbx
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov rax, qword [rcx]
test byte [rax], al
movups xmmword [rsp + 0x60], xmm15
lea rdx, [sym.net_http._http2Transport_.initConnPool_fm]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov edx, dword [rax + 0x68]
test edx, edx
jne 0x6178ef
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x68]
lea rbx, [rsp + 0x60]
mov rax, rcx
nop dword [rax + rax]
call sym.sync._Once_.doSlow
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rax + 0x78]
mov rdx, qword [rdx + 0x20]
mov rax, qword [rax + 0x80]
mov rbx, rcx
call rdx
mov rbx, qword [rsp + 0x98]
cmp dword [rbx + 0x10], 0
je 0x617a2b
movups xmmword [rsp + 0x50], xmm15
mov eax, dword [rbx + 0x10]
nop
call sym.runtime.convT32
lea rcx, [0x0068bb40]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
cmp byte [0x0098c081], 0
je 0x617965
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx]
lea rbx, [0x006e27d3]
mov ecx, 0x29
lea rdi, [rsp + 0x50]
mov esi, 1
mov r8, rsi
call sym.net_http._http2Transport_.logf
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x58]
test rdx, rdx
je 0x617a23
mov qword [rsp + 0x40], rdx
mov rdx, qword [rsp + 0x98]
mov ecx, dword [rdx + 0x10]
mov dword [rsp + 0x34], ecx
mov rbx, qword [0x00905128]
lea rax, [0x0068a6c0]
nop dword [rax]
call sym.runtime.mapaccess2_fast32
test bl, bl
je 0x6179b2
mov rdx, qword [rax]
mov r8, qword [rax + 8]
jmp 0x6179fa
movups xmmword [rsp + 0x70], xmm15
mov eax, dword [rsp + 0x34]
nop dword [rax]
call sym.runtime.convT32
lea rcx, [0x0067b500]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, [0x006d3a1d]
mov ebx, 0xe
lea rcx, [rsp + 0x70]
mov edi, 1
mov rsi, rdi
call sym.fmt.Sprintf
mov r8, rbx
mov rdx, rax
xor eax, eax
lea rbx, [0x006d2f34]
mov ecx, 0xc
mov rdi, rdx
mov rsi, r8
call sym.runtime.concatstring2
mov rdx, qword [rsp + 0x40]
mov r8, qword [rdx]
call r8
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x48]
call sym.net_http._http2ClientConn_.setGoAway
xor eax, eax
xor ebx, ebx
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.net_http._http2clientConnReadLoop_.processGoAway
Function at 0x61d1c0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61d21e
push rbp
mov rbp, rsp
sub rsp, 0x20
mov rbx, qword [rax + 0x38]
lea rax, [0x006bd880]
lea rcx, [0x006d142e]
mov edi, 6
call sym.runtime.mapaccess1_faststr
cmp qword [rax + 8], 0
je 0x61d1fd
mov rdx, qword [rax]
mov rsi, qword [rdx + 8]
mov rdx, qword [rdx]
jmp 0x61d201
xor esi, esi
xor edx, edx
mov rax, rdx
mov rbx, rsi
lea rcx, [0x006d2f28]
mov edi, 0xc
call sym.net_http.hasToken
add rsp, 0x20
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net_http._Request_.expectsContinue

Function at 0x61db40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61db84
push rbp
mov rbp, rsp
sub rsp, 8
mov rax, qword [0x008f4b98]
call sym.internal_godebug._Setting_.Value
nop word [rax + rax]
cmp rbx, 1
jne 0x61db7e
cmp byte [rax], 0x31
jne 0x61db7e
mov byte [0x0098c085], 1
mov rax, qword [0x008f4b98]
call sym.internal_godebug._Setting_.IncNonDefault
add rsp, 8
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.net_http.init.1
Function at 0x625780
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x625982
push rbp
mov rbp, rsp
sub rsp, 0x58
mov qword [rsp + 0x68], rax
test rbx, rbx
je 0x6257a5
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
jmp 0x6257ca
mov rax, 0xffffffffffffffff
xor ebx, ebx
xor ecx, ecx
add rsp, 0x58
pop rbp
ret
dec rsi
mov r8, rsi
neg r8
sar r8, 0x3f
and r8d, 1
add rdx, r8
test rsi, rsi
je 0x6257ec
movzx r8d, byte [rdx]
cmp r8b, 0x20
je 0x6257b6
cmp r8b, 9
je 0x6257b6
nop
cmp r8b, 0xa
je 0x6257b6
cmp r8b, 0xd
je 0x6257b6
mov qword [rsp + 0x30], rdx
jmp 0x6257f6
dec rsi
mov qword [rsp + 0x28], rsi
nop dword [rax + rax]
test rsi, rsi
je 0x6258d3
movzx r8d, byte [rsi + rdx - 1]
cmp r8b, 0x20
je 0x6257f3
cmp r8b, 9
je 0x6257f3
nop dword [rax + rax]
cmp r8b, 0xa
je 0x6257f3
cmp r8b, 0xd
je 0x6257f3
test rsi, rsi
je 0x6258d3
mov rax, rdx
mov rbx, rsi
mov ecx, 0xa
mov edi, 0x3f
call sym.strconv.ParseUint
test rbx, rbx
je 0x6258c9
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
lea rax, [0x006d53d9]
mov ebx, 0x12
call sym.runtime.convTstring
lea rcx, [0x0067b380]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
call sym.runtime.convTstring
lea rcx, [0x0067b380]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
lea rax, [0x006d1199]
mov ebx, 5
lea rcx, [rsp + 0x38]
mov edi, 2
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x58
pop rbp
ret
xor ebx, ebx
xor ecx, ecx
add rsp, 0x58
pop rbp
ret
mov rax, qword [0x008f4ba0]
call sym.internal_godebug._Setting_.Value
nop
cmp rbx, 1
jne 0x625908
cmp byte [rax], 0x31
jne 0x625908
mov rax, qword [0x008f4ba0]
call sym.internal_godebug._Setting_.IncNonDefault
mov rax, 0xffffffffffffffff
xor ebx, ebx
xor ecx, ecx
add rsp, 0x58
pop rbp
ret
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
lea rax, [0x006db359]
mov ebx, 0x1c
call sym.runtime.convTstring
lea rcx, [0x0067b380]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
call sym.runtime.convTstring
lea rcx, [0x0067b380]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
lea rax, [0x006d1199]
mov ebx, 5
lea rcx, [rsp + 0x38]
mov edi, 2
mov rsi, rdi
call sym.fmt.Errorf
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x58
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp sym.net_http.parseContentLength
Function at 0x62fbe0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x62fcd3
push rbp
mov rbp, rsp
sub rsp, 0x40
movq qword [rsp + 0x38], xmm15
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x1f], 0
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x20], rdx
mov rcx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx], esi
sete sil
nop
test sil, sil
jne 0x62fc37
mov rax, rdx
call sym.sync._Mutex_.lockSlow
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x20]
movups xmmword [rsp + 0x28], xmm15
lea rsi, [sym.net_http._persistConn_.closeConnIfStillIdle.deferwrap1]
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], rdx
lea rsi, [rsp + 0x28]
mov qword [rsp + 0x38], rsi
mov byte [rsp + 0x1f], 1
mov rbx, qword [rdx + 0x28]
mov rsi, rcx
lea rax, [0x0068a240]
mov rcx, rsi
call sym.runtime.mapaccess2_fast64
test bl, bl
je 0x62fcb3
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x50]
call sym.net_http._Transport_.removeIdleConnLocked
mov rbx, qword [0x008f5670]
mov rcx, qword [0x008f5678]
mov rax, qword [rsp + 0x50]
call sym.net_http._persistConn_.close
mov byte [rsp + 0x1f], 0
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rdx]
call rcx
add rsp, 0x40
pop rbp
ret
mov byte [rsp + 0x1f], 0
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx]
call rax
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net_http._persistConn_.closeConnIfStillIdle

Function at 0x6337c0
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6338c2
push rbp
mov rbp, rsp
sub rsp, 0x68
mov qword [rsp + 0x78], rax
mov rcx, qword [rax + 0x28]
mov rbx, qword [rax + 0x30]
nop
mov rax, rcx
call sym.net_url.splitHostPort
test rdi, rdi
jne 0x633813
mov rbx, qword [0x009051d8]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rdx]
mov rdi, qword [rdx + 8]
lea rax, [0x0068a0c0]
call sym.runtime.mapaccess1_faststr
mov rdi, qword [rax + 8]
mov rcx, qword [rax]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x48], rdi
mov rax, qword [rsp + 0x78]
call sym.net_http.idnaASCIIFromURL
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x50], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x3a
nop
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x0098c2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
jl 0x633895
xor eax, eax
lea rbx, [0x006d0b12]
mov ecx, 1
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x50]
lea r8, [0x006d0b9a]
mov r9d, 2
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x48]
call sym.runtime.concatstring4
jmp 0x6338bc
xor eax, eax
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
lea rdi, [0x00755048]
mov esi, 1
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x48]
call sym.runtime.concatstring3
add rsp, 0x68
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net_http.canonicalAddr
Function at 0x637320
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x637389
push rbp
mov rbp, rsp
sub rsp, 0x38
mov r12, qword [r14 + 0x20]
test r12, r12
jne 0x63739a
test rax, rax
je 0x637383
mov rbx, qword [rax + 8]
mov rax, qword [rax]
movups xmmword [rsp + 0x28], xmm15
call sym.runtime.convTstring
lea rcx, [0x0067b380]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x006db25d]
mov ebx, 0x1c
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call sym.fmt.Sprintf
add rsp, 0x38
pop rbp
ret
call sym.runtime.panicwrap
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net_http._http2headerFieldNameError_.Error
lea r13, [rsp + 0x48]
nop
cmp qword [r12], r13
jne 0x637337
mov qword [r12], rsp
jmp 0x637337
Function at 0x643020
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x643290
push rbp
mov rbp, rsp
sub rsp, 0x68
mov edx, 0x646e6977
nop word [rax + rax]
cmp edx, 0x646e6977
jne 0x64328a
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1c
lea rdx, [0x006dae35]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea r8, [0x006d0c32]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], 0xa
lea r9, [0x006d2075]
mov qword [rsp + 0x48], r9
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea r8, [0x006d0c32]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], 0xa
lea r9, [0x006d2075]
mov qword [rsp + 0x48], r9
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
nop dword [rax]
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1c
lea rdx, [0x006dae35]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
nop
call sym.os_exec._Cmd_.Run
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1c
lea rdx, [0x006dae35]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea rdx, [0x006d0c32]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x50], 0xa
lea rdx, [0x006d2075]
mov qword [rsp + 0x48], rdx
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
nop dword [rax]
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
add rsp, 0x68
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.main.stopscan
Function at 0x643a00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x643c6b
push rbp
mov rbp, rsp
sub rsp, 0x68
mov edx, 0x646e6977
nop word [rax + rax]
cmp edx, 0x646e6977
jne 0x643c65
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea r8, [0x006d0c32]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], 0xb
lea r9, [0x006d25a8]
mov qword [rsp + 0x48], r9
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movabs rax, 0x12a05f200
call sym.time.Sleep
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea r8, [0x006d0c32]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], 0xb
lea r9, [0x006d25a8]
mov qword [rsp + 0x48], r9
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
nop dword [rax]
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
nop
call sym.os_exec._Cmd_.Run
mov eax, 0xb2d05e00
call sym.time.Sleep
movups xmmword [rsp + 0x58], xmm15
mov qword [rsp + 0x60], 0x1d
lea rdx, [0x006db73a]
mov qword [rsp + 0x58], rdx
lea rax, [0x006d0c2f]
mov ebx, 3
lea rcx, [rsp + 0x58]
mov edi, 1
mov rsi, rdi
call sym.os_exec.Command
call sym.os_exec._Cmd_.Run
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
mov qword [rsp + 0x30], 2
lea rdx, [0x006d0b8c]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x40], 3
lea rdx, [0x006d0c32]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x50], 0xb
lea rdx, [0x006d25a8]
mov qword [rsp + 0x48], rdx
lea rax, [0x006d2b20]
mov ebx, 0xc
lea rcx, [rsp + 0x28]
mov edi, 3
mov rsi, rdi
call sym.os_exec.Command
nop dword [rax]
call sym.os_exec._Cmd_.Run
add rsp, 0x68
pop rbp
ret
call sym.runtime.morestack_noctxt.abi0
jmp sym.main.stopmine
Function at 0x180001240
Capabilities:
Hash data using fnv

Disassembly:
movsx eax, byte [rcx]
test al, al
jne 0x18000124a
mov eax, edx
ret
xor eax, edx
imul edx, eax, 0x1000193
inc rcx
jmp fcn.180001240
Function at 0x1800090a0
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3f
syscall
ret

Function at 0x1800090ab
Capabilities:
Execute syscall

Disassembly:
mov r10, rcx
mov eax, 0x3a
syscall
ret