joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5c8fe0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c91bf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
cmp dword [rdx + 0x50], 0
nop word [rax + rax]
jbe 0x5c91a5
nop
mov word [rsp + 0x2e], 0
mov byte [rsp + 0x2f], 0x2a
cmp qword [rax], 0
jne 0x5c9179
cmp qword [rax + 0x30], 0
jne 0x5c91ab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], rdx
mov r8, qword [rax + 0x18]
add r8, 2
nop word [rax + rax]
cmp r8, 2
jge 0x5c909c
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9090
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
cmp byte [rax + 0x28], 0
je 0x5c9104
mov r8, qword [rax + 0x18]
add r8, 2
cmp qword [rax + 0x20], r8
jge 0x5c9104
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c90f6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rsi, qword [rdx + 8]
mov qword [r11 + 8], rsi
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
jmp 0x5c9179
mov rcx, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r8, [rbx + 2]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c914a
mov qword [rsp + 0x30], rbx
mov rax, r9
mov rbx, r8
mov edi, 2
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov r9, rax
mov r8, rbx
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x30]
movzx esi, word [rsp + 0x2e]
mov word [r9 + rbx], si
mov qword [rax + 0x18], r8
mov qword [rax + 0x20], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9175
call sym.runtime.gcWriteBarrier2
mov qword [r11], r9
mov rsi, qword [rax + 0x10]
mov qword [r11 + 8], rsi
mov qword [rax + 0x10], r9
movups xmmword [rsp + 0x40], xmm15
lea rsi, [sym.crypto_tls._newSessionTicketMsgTLS13_.marshal.func1.3.1]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdx
mov ebx, 2
xor ecx, ecx
lea rdi, [rsp + 0x40]
nop dword [rax]
call sym.vendor_golang.org_x_crypto_cryptobyte._Builder_.addLengthPrefixed
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._newSessionTicketMsgTLS13_.marshal.func1.3
Function at 0x5c9220
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c93df
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x38]
cmp qword [rax], 0
nop
jne 0x5c93c5
cmp qword [rax + 0x30], 0
jne 0x5c93cb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x40]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c92c7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c92b6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c9329
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c9329
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9320
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c93c5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c936a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c93ac
mov rax, qword [rsp + 0x48]
jmp 0x5c93c1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._newSessionTicketMsgTLS13_.marshal.func1.2
Function at 0x5c9400
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c95bf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x20]
cmp qword [rax], 0
nop
jne 0x5c95a5
cmp qword [rax + 0x30], 0
jne 0x5c95ab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x28]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5c94a7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9496
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5c9509
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5c9509
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9500
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5c95a5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c954a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5c958c
mov rax, qword [rsp + 0x48]
jmp 0x5c95a1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._newSessionTicketMsgTLS13_.marshal.func1.1
Function at 0x5c9d60
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c9f1f
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
nop
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0
cmp qword [rax], 0
jne 0x5c9ed9
cmp qword [rax + 0x30], 0
jne 0x5c9f0b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], rdx
mov r8, qword [rax + 0x18]
inc r8
test r8, r8
jg 0x5c9dfe
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9df2
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
cmp byte [rax + 0x28], 0
je 0x5c9e65
mov r8, qword [rax + 0x18]
inc r8
cmp qword [rax + 0x20], r8
jge 0x5c9e65
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9e57
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rsi, qword [rdx + 8]
mov qword [r11 + 8], rsi
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
jmp 0x5c9ed9
mov rcx, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r8, [rbx + 1]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5c9eab
mov qword [rsp + 0x30], rbx
mov rax, r9
mov rbx, r8
mov edi, 1
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov r9, rax
mov r8, rbx
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r9 + rbx], sil
mov qword [rax + 0x18], r8
mov qword [rax + 0x20], rcx
cmp dword [0x0098c4d0], 0
je 0x5c9ed5
call sym.runtime.gcWriteBarrier2
mov qword [r11], r9
mov rsi, qword [rax + 0x10]
mov qword [r11 + 8], rsi
mov qword [rax + 0x10], r9
movups xmmword [rsp + 0x40], xmm15
lea rsi, [sym.crypto_tls._certificateRequestMsgTLS13_.marshal.func1.1]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdx
mov ebx, 2
xor ecx, ecx
lea rdi, [rsp + 0x40]
nop dword [rax]
call sym.vendor_golang.org_x_crypto_cryptobyte._Builder_.addLengthPrefixed
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateRequestMsgTLS13_.marshal.func1
Function at 0x5cac00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cadbf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5cada5
cmp qword [rax + 0x30], 0
jne 0x5cadab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5caca7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cac96
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5cad09
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5cad09
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cad00
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5cada5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5cad4a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5cad8c
mov rax, qword [rsp + 0x48]
jmp 0x5cada1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateRequestMsgTLS13_.marshal.func1.1.3.1.1
Function at 0x5cae40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb03f
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x38]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0x40]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5cae74
inc rcx
cmp rcx, rdx
jge 0x5cb025
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5cae71
cmp qword [rax + 0x30], 0
jne 0x5cb02b
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
cmp r9, 2
jge 0x5caf15
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5caeff
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5caf8b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5caf8b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5caf70
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5cae71
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
nop dword [rax + rax]
cmp r9, r10
jae 0x5cafe7
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
nop
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5cb019
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
nop dword [rax]
jmp 0x5cae71
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateRequestMsgTLS13_.marshal.func1.1.2.1
Function at 0x5cb0c0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cb2bf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x20]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0x28]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5cb0f4
inc rcx
cmp rcx, rdx
jge 0x5cb2a5
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5cb0f1
cmp qword [rax + 0x30], 0
jne 0x5cb2ab
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
cmp r9, 2
jge 0x5cb195
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cb17f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5cb20b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5cb20b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cb1f0
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5cb0f1
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
nop dword [rax + rax]
cmp r9, r10
jae 0x5cb267
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
nop
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5cb299
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
nop dword [rax]
jmp 0x5cb0f1
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateRequestMsgTLS13_.marshal.func1.1.1.1
Function at 0x5cd700
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cd8bf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
nop
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 1
cmp qword [rax], 0
jne 0x5cd879
cmp qword [rax + 0x30], 0
jne 0x5cd8ab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], rdx
mov r8, qword [rax + 0x18]
inc r8
test r8, r8
jg 0x5cd79e
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cd792
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
cmp byte [rax + 0x28], 0
je 0x5cd805
mov r8, qword [rax + 0x18]
inc r8
cmp qword [rax + 0x20], r8
jge 0x5cd805
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cd7f7
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rsi, qword [rdx + 8]
mov qword [r11 + 8], rsi
mov qword [rdx + 8], rax
mov rax, rdx
mov rdx, qword [rsp + 0x38]
jmp 0x5cd879
mov rcx, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r8, [rbx + 1]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5cd84b
mov qword [rsp + 0x30], rbx
mov rax, r9
mov rbx, r8
mov edi, 1
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov r9, rax
mov r8, rbx
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r9 + rbx], sil
mov qword [rax + 0x18], r8
mov qword [rax + 0x20], rcx
cmp dword [0x0098c4d0], 0
je 0x5cd875
call sym.runtime.gcWriteBarrier2
mov qword [r11], r9
mov rsi, qword [rax + 0x10]
mov qword [r11 + 8], rsi
mov qword [rax + 0x10], r9
movups xmmword [rsp + 0x40], xmm15
lea rsi, [sym.crypto_tls._certificateStatusMsg_.marshal.func1.1]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdx
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x40]
nop dword [rax]
call sym.vendor_golang.org_x_crypto_cryptobyte._Builder_.addLengthPrefixed
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateStatusMsg_.marshal.func1
Function at 0x5cd8e0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5cda9f
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x18]
cmp qword [rax], 0
nop
jne 0x5cda85
cmp qword [rax + 0x30], 0
jne 0x5cda8b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x20]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5cd987
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cd976
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5cd9e9
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5cd9e9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5cd9e0
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5cda85
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5cda2a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5cda6c
mov rax, qword [rsp + 0x48]
jmp 0x5cda81
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._certificateStatusMsg_.marshal.func1.1