joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5aa5c0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5aa732
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rcx, qword [rax + 0x350]
inc rcx
mov qword [rax + 0x350], rcx
cmp rcx, 0x10
jle 0x5aa635
mov qword [rsp + 0x38], rax
mov ebx, 0xa
call sym.crypto_tls._Conn_.sendAlert
lea rax, [0x006951a0]
nop
call sym.runtime.newobject
mov qword [rsp + 0x20], rax
mov qword [rax + 8], 0x1d
lea rcx, [0x006dbb4e]
mov qword [rax], rcx
mov rbx, qword [0x00758268]
mov rcx, qword [0x008f70f0]
mov rdx, qword [rcx]
mov esi, dword [0x00758270]
jmp 0x5aa641
call sym.crypto_tls._Conn_.readRecordOrCCS
add rsp, 0x28
pop rbp
nop
ret
mov rdi, rsi
and rsi, rdx
shl rsi, 4
mov r8, qword [rsi + rcx + 8]
cmp r8, rbx
je 0x5aa674
lea rsi, [rdi + 1]
test r8, r8
jne 0x5aa641
lea rax, [0x008f70f0]
call sym.runtime.typeAssert
mov rcx, rax
mov rax, qword [rsp + 0x20]
jmp 0x5aa679
mov rcx, qword [rsi + rcx + 0x10]
test rcx, rcx
jne 0x5aa6b6
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x38]
mov qword [rdx + 0x180], rcx
cmp dword [0x0098c4d0], 0
je 0x5aa6ad
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 0x188]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x188], rax
jmp 0x5aa71e
mov qword [rsp + 0x18], rcx
lea rax, [0x006947a0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x18]
mov qword [rax], rcx
cmp dword [0x0098c4d0], 0
jne 0x5aa6e4
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x38]
jmp 0x5aa705
call sym.runtime.gcWriteBarrier3
mov rcx, qword [rsp + 0x20]
mov qword [r11], rcx
mov qword [r11 + 8], rax
mov rdx, qword [rsp + 0x38]
mov rsi, qword [rdx + 0x188]
mov qword [r11 + 0x10], rsi
mov qword [rax + 8], rcx
lea rcx, [0x00758580]
mov qword [rdx + 0x180], rcx
mov qword [rdx + 0x188], rax
mov rax, qword [rdx + 0x180]
mov rbx, qword [rdx + 0x188]
add rsp, 0x28
pop rbp
ret
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
nop dword [rax + rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
jmp sym.crypto_tls._Conn_.retryReadRecord
Function at 0x5afa20
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5afaee
push rbp
mov rbp, rsp
sub rsp, 0x38
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x48], rax
mov r9, qword [0x008f4b70]
mov rdx, qword [rdx + 8]
mov qword [rsp + 0x30], rdx
mov rax, r9
call sym.internal_godebug._Setting_.Value
cmp rbx, 1
jne 0x5afab8
cmp byte [rax], 0x31
jne 0x5afab8
mov rax, qword [0x008f4b70]
call sym.internal_godebug._Setting_.IncNonDefault
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx + 0xf8]
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov r9, rcx
mov rcx, qword [rsp + 0x58]
call r9
add rsp, 0x38
pop rbp
ret
nop
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x94
lea rcx, [0x006eece0]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x00758260]
mov rsi, rax
xor eax, eax
add rsp, 0x38
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp sym.crypto_tls._Conn_.connectionStateLocked.func1
Function at 0x5bac40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bae7f
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov r8, qword [rdx + 0x20]
mov rbx, qword [rdx + 8]
cmp rdi, r8
jne 0x5bae07
nop
cmp qword [rax], 0
jne 0x5badfd
cmp qword [rax + 0x30], 0
nop dword [rax]
jne 0x5bae6b
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x40], rbx
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bacf9
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x80]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bace8
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bad5e
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5bad5e
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x80]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bad55
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5badfd
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bad9f
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x48], r9
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x80]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bade4
mov rcx, qword [rsp + 0x48]
jmp 0x5badf9
call sym.runtime.gcWriteBarrier2
mov rcx, qword [rsp + 0x48]
mov qword [r11], rcx
mov rdx, qword [rsi + 0x10]
mov qword [r11 + 8], rdx
mov qword [rsi + 0x10], rcx
xor eax, eax
xor ebx, ebx
add rsp, 0x70
pop rbp
ret
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
mov rax, r8
call sym.runtime.convT64
lea rcx, [0x0067b5c0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x28]
call sym.runtime.convT64
lea rcx, [0x0067b5c0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
lea rax, [0x006e26dd]
mov ebx, 0x29
lea rcx, [rsp + 0x50]
mov edi, 2
mov rsi, rdi
call sym.fmt.Errorf
add rsp, 0x70
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls.addBytesWithLength.func1
Function at 0x5bd720
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bd8df
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5bd8c5
cmp qword [rax + 0x30], 0
jne 0x5bd8cb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bd7c7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bd7b6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bd829
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5bd829
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bd820
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bd8c5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bd86a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bd8ac
mov rax, qword [rsp + 0x48]
jmp 0x5bd8c1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func16.4
Function at 0x5bd900
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bdabf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x68]
cmp qword [rax], 0
nop
jne 0x5bdaa5
cmp qword [rax + 0x30], 0
jne 0x5bdaab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x70]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bd9a7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bd996
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bda09
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5bda09
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bda00
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bdaa5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bda4a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bda8c
mov rax, qword [rsp + 0x48]
jmp 0x5bdaa1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func16.3
Function at 0x5bdae0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bdcdf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov qword [rsp + 0x60], rax
mov rdx, qword [rdx + 8]
mov r8, qword [rdx + 0x50]
mov qword [rsp + 0x48], r8
mov rdx, qword [rdx + 0x58]
mov qword [rsp + 0x40], rdx
xor ecx, ecx
jmp 0x5bdb14
inc rcx
cmp rcx, rdx
jge 0x5bdcc5
movzx r9d, word [r8 + rcx*2]
rol r9w, 8
nop
mov word [rsp + 0x2e], 0
mov word [rsp + 0x2e], r9w
cmp qword [rax], 0
jne 0x5bdb11
cmp qword [rax + 0x30], 0
jne 0x5bdccb
mov qword [rsp + 0x38], rcx
mov r9, qword [rax + 0x18]
add r9, 2
cmp r9, 2
jge 0x5bdbb5
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bdb9f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp byte [rax + 0x28], 0
je 0x5bdc2b
mov r9, qword [rax + 0x18]
add r9, 2
cmp qword [rax + 0x20], r9
jge 0x5bdc2b
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bdc10
nop
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
jmp 0x5bdb11
mov r9, qword [rax + 0x20]
mov rbx, qword [rax + 0x18]
lea r10, [rbx + 2]
mov r11, qword [rax + 0x10]
nop dword [rax + rax]
cmp r9, r10
jae 0x5bdc87
mov qword [rsp + 0x30], rbx
mov rax, r11
mov rbx, r10
mov rcx, r9
mov edi, 2
lea rsi, [0x0067b400]
nop
call sym.runtime.growslice
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r11, rax
mov r9, rcx
mov r10, rbx
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
movzx r12d, word [rsp + 0x2e]
mov word [r11 + rbx], r12w
mov qword [rax + 0x18], r10
mov qword [rax + 0x20], r9
cmp dword [0x0098c4d0], 0
je 0x5bdcb9
mov rbx, r11
call sym.runtime.gcWriteBarrier2
mov qword [r11], rbx
mov r9, qword [rax + 0x10]
mov qword [r11 + 8], r9
mov r11, rbx
mov qword [rax + 0x10], r11
nop dword [rax]
jmp 0x5bdb11
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func16.2
Function at 0x5bdd00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5bdebf
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x38]
cmp qword [rax], 0
nop
jne 0x5bdea5
cmp qword [rax + 0x30], 0
jne 0x5bdeab
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x40]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5bdda7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bdd96
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5bde09
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5bde09
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5bde00
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5bdea5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5bde4a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5bde8c
mov rax, qword [rsp + 0x48]
jmp 0x5bdea1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func16.1
Function at 0x5be040
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be1ff
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5be1e5
cmp qword [rax + 0x30], 0
jne 0x5be1eb
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5be0e7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be0d6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5be149
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5be149
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be140
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5be1e5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5be18a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5be1cc
mov rax, qword [rsp + 0x48]
jmp 0x5be1e1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func15.2.1
Function at 0x5be320
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be4df
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rbx, qword [rdx + 8]
nop
cmp qword [rax], 0
nop dword [rax + rax]
jne 0x5be4c5
cmp qword [rax + 0x30], 0
jne 0x5be4cb
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x38], rbx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x30], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5be3c7
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x50]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be3b6
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
cmp byte [rax + 0x28], 0
je 0x5be429
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp qword [rax + 0x20], rdx
jge 0x5be429
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x50]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be420
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5be4c5
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5be46a
mov qword [rsp + 0x28], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x38]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x38], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x50]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x30]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5be4ac
mov rax, qword [rsp + 0x38]
jmp 0x5be4c1
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x38]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x40
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func15.1.1
Function at 0x5be500
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5be6d3
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rdx, qword [rdx + 8]
mov rbx, qword [rdx + 0x1f8]
cmp qword [rax], 0
jne 0x5be6b9
cmp qword [rax + 0x30], 0
jne 0x5be6bf
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov rdi, qword [rdx + 0x200]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rax + 0x18]
add rdx, rdi
cmp rdi, rdx
jle 0x5be5b0
lea rax, [0x006951a0]
nop dword [rax + rax]
call sym.runtime.newobject
mov qword [rax + 8], 0x1b
lea rcx, [0x006da8fc]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be59f
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov r8, qword [rdx + 8]
mov qword [r11 + 8], r8
mov qword [rdx + 8], rax
mov rax, rdx
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x28]
cmp byte [rax + 0x28], 0
je 0x5be619
mov rdx, qword [rax + 0x18]
add rdx, rdi
nop dword [rax]
cmp qword [rax + 0x20], rdx
jge 0x5be619
lea rax, [0x006951a0]
call sym.runtime.newobject
mov qword [rax + 8], 0x36
lea rcx, [0x006e7c94]
mov qword [rax], rcx
lea rcx, [0x00758260]
mov rdx, qword [rsp + 0x60]
mov qword [rdx], rcx
cmp dword [0x0098c4d0], 0
je 0x5be610
nop dword [rax]
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rdx + 8]
mov qword [r11 + 8], rcx
mov qword [rdx + 8], rax
jmp 0x5be6b9
mov rcx, qword [rax + 0x20]
mov rdx, qword [rax + 0x18]
lea r8, [rdi + rdx]
mov r9, qword [rax + 0x10]
cmp rcx, r8
jae 0x5be65a
mov qword [rsp + 0x38], rdx
mov rax, r9
mov rbx, r8
lea rsi, [0x0067b400]
call sym.runtime.growslice
mov rdx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
mov r9, rax
mov r8, rbx
mov rbx, qword [rsp + 0x40]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x48], r9
lea rax, [r9 + rdx]
mov rcx, rdi
call sym.runtime.memmove
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rsp + 0x38]
mov qword [rsi + 0x20], rdx
cmp dword [0x0098c4d0], 0
jne 0x5be6a0
mov rax, qword [rsp + 0x48]
jmp 0x5be6b5
call sym.runtime.gcWriteBarrier2
mov rax, qword [rsp + 0x48]
mov qword [r11], rax
mov rcx, qword [rsi + 0x10]
mov qword [r11 + 8], rcx
mov qword [rsi + 0x10], rax
add rsp, 0x50
pop rbp
ret
lea rax, [0x0067b380]
lea rbx, [0x00757000]
call sym.runtime.gopanic
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.crypto_tls._clientHelloMsg_.marshal.func14