joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5be760
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be933
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x1b0]
cmp qword [rax], 0
jne 0x5be919
cmp qword [rax + 0x30], 0
jne 0x5be91f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x1b8]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5be810
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be7ff
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5be879
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5be879
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be870
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5be919
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5be8ba
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5be900
mov rax, qword [rsp + 0x48]
jmp 0x5be915
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func13.1
Function at 0x5beca0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bee5f
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rbx, qword [rdx + 0x10]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5bee45
cmp qword [rax + 0x30], 0
jne 0x5bee4b
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x38], rbx
mov rdi, qword [rdx + 0x18]
mov qword [rsp + 0x30], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bed47
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x50]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bed36
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
cmp byte [rax + 0x28], 0
je 0x5beda9
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5beda9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x50]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5beda0
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bee45
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bedea
mov qword [rsp + 0x28], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x38]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x38], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x50]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x30]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bee2c
mov rax, qword [rsp + 0x38]
jmp 0x5bee41
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x38]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x40
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func12.1.1
Function at 0x5beee0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf0b3
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x178]
cmp qword [rax], 0
jne 0x5bf099
cmp qword [rax + 0x30], 0
jne 0x5bf09f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x180]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bef90
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bef7f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5beff9
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5beff9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5beff0
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bf099
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bf03a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bf080
mov rax, qword [rsp + 0x48]
jmp 0x5bf095
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func11.1
Function at 0x5bf140
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf346
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x160]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0x168]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5bf180
inc rcx
nop word [rax + rax]
cmp rcx, rdx
jge 0x5bf32c
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5bf177
cmp qword [rax + 0x30], 0
jne 0x5bf332
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
nop
cmp r9, 2
jge 0x5bf226
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf210
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5bf29b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5bf29b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf280
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5bf177
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
cmp r9, r10
jae 0x5bf2f1
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5bf323
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
jmp 0x5bf177
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func10.1
Function at 0x5bf480
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf653
push rbp
mov rbp, rsp
sub rsp, 0x50
mov r8, qword [rdx + 8]
test r8, r8
lea rbx, [0x0098c060]
cmovne rbx, r8
cmp qword [rax], 0
jne 0x5bf639
cmp qword [rax + 0x30], 0
jne 0x5bf63f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bf530
lea rax, [0x006951a0]
nop
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf51f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bf599
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5bf599
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf590
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bf639
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bf5da
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bf620
mov rax, qword [rsp + 0x48]
jmp 0x5bf635
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func9.1.1
Function at 0x5bf6e0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bf8b3
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x120]
cmp qword [rax], 0
jne 0x5bf899
cmp qword [rax + 0x30], 0
jne 0x5bf89f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x128]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bf790
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf77f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bf7f9
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5bf7f9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bf7f0
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bf899
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bf83a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bf880
mov rax, qword [rsp + 0x48]
jmp 0x5bf895
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func8.1
Function at 0x5bf940
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bfb46
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x100]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0x108]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5bf980
inc rcx
nop word [rax + rax]
cmp rcx, rdx
jge 0x5bfb2c
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5bf977
cmp qword [rax + 0x30], 0
jne 0x5bfb32
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
nop
cmp r9, 2
jge 0x5bfa26
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfa10
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5bfa9b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5bfa9b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfa80
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5bf977
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
cmp r9, r10
jae 0x5bfaf1
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5bfb23
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
jmp 0x5bf977
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func7.1
Function at 0x5bfbc0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bfdc6
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0xe8]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0xf0]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5bfc00
inc rcx
nop word [rax + rax]
cmp rcx, rdx
jge 0x5bfdac
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5bfbf7
cmp qword [rax + 0x30], 0
jne 0x5bfdb2
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
nop
cmp r9, 2
jge 0x5bfca6
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfc90
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5bfd1b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5bfd1b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfd00
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5bfbf7
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
cmp r9, r10
jae 0x5bfd71
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5bfda3
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
jmp 0x5bfbf7
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func6.1
Function at 0x5bfde0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bffb3
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0xd0]
cmp qword [rax], 0
jne 0x5bff99
cmp qword [rax + 0x30], 0
jne 0x5bff9f
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0xd8]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bfe90
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfe7f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bfef9
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5bfef9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bfef0
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bff99
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bff3a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bff80
mov rax, qword [rsp + 0x48]
jmp 0x5bff95
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func5