joyce8/EMBER2024-capa huggingface dataset:
Function at 0x439720
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43996d
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rcx, qword [rax + 0x20]
mov rdx, qword [rcx + 0x40]
mov rsi, qword [rcx + 0x50]
nop
test rsi, rsi
je 0x43974e
cmp byte [rsi], 0
setne sil
jmp 0x439750
xor esi, esi
mov rdi, qword [rcx + 0x30]
mov r8, qword [rcx + 0x48]
mov rbx, rcx
jmp 0x439774
nop
mov r9d, 0xffffffff
lea r10, [0x0098c0c0]
lock xadd dword [r10], r9d
mov rcx, qword [rcx + 0x18]
test rcx, rcx
je 0x439798
mov r9, qword [rcx + 0x28]
nop dword [rax]
cmp r9, rdi
jae 0x439793
cmp byte [rcx + 0x61], 0
je 0x43975d
mov r8, qword [rcx + 0x20]
xor esi, esi
jmp 0x43979b
mov r9, rdi
jmp 0x43979b
mov r9, rdi
cmp dword [0x0098c4d0], 0
jne 0x4397a9
test rcx, rcx
jmp 0x4397bc
call sym.runtime.gcWriteBarrier2
mov qword [r11], rcx
mov rdi, qword [rax + 0x20]
mov qword [r11 + 8], rdi
test rcx, rcx
mov qword [rax + 0x20], rcx
jne 0x4397cc
mov dword [rax + 0xd8], 0
cmp qword [rax + 0x88], 0
jne 0x43995b
mov qword [rsp + 0x10], r9
nop
test sil, sil
je 0x439874
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x20], rdx
mov qword [rsp + 0x18], r8
lea rax, [0x006a4780]
call sym.runtime.newobject
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx + 0x48]
mov qword [rax], rdx
mov rdx, qword [rcx + 0x50]
mov rbx, qword [rcx + 0x30]
sub rdx, rbx
mov qword [rax + 8], rdx
mov rdx, qword [rcx + 0x58]
mov rcx, qword [rcx + 0x30]
sub rdx, rcx
mov qword [rax + 0x10], rdx
cmp dword [0x0098c4d0], 0
jne 0x439843
mov rcx, qword [rsp + 0x50]
jmp 0x43985b
call sym.runtime.gcWriteBarrier2
mov qword [r11], rax
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rcx + 0x88]
mov qword [r11 + 8], rdx
mov qword [rcx + 0x88], rax
mov rax, rcx
mov rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x18]
mov r9, qword [rsp + 0x10]
test r9, r9
je 0x43988c
mov rcx, qword [rax]
mov qword [rsp + 0x30], rcx
cmp r9, rcx
jb 0x4398d1
cmp qword [rax + 8], r9
jb 0x4398d1
mov qword [rax + 0x38], r9
mov qword [rax + 0x40], r8
mov qword [rax + 0x60], 0
lea rcx, [rdx - 0x10]
mov qword [rax + 0x68], rcx
mov qword [rax + 0x58], 1
add rax, 0x38
mov qword [rsp], rax
call sym.runtime.gogo.abi0
xorps xmm15, xmm15
mov r14, qword [0x0098c2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x40
pop rbp
ret
mov rax, qword [rax + 8]
mov qword [rsp + 0x28], rax
call sym.runtime.printlock
lea rax, [0x006d1e13]
mov ebx, 9
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
call sym.runtime.printhex
lea rax, [0x006d1e1c]
mov ebx, 9
call sym.runtime.printstring
mov rax, qword [rsp + 0x30]
call sym.runtime.printhex
lea rax, [0x006d0ba2]
mov ebx, 2
call sym.runtime.printstring
mov rax, qword [rsp + 0x28]
call sym.runtime.printhex
lea rax, [0x006d0bc6]
mov ebx, 2
nop dword [rax]
call sym.runtime.printstring
call sym.runtime.printunlock
lea rax, [0x006d2d90]
mov ebx, 0xc
call sym.runtime.throw
lea rax, [0x006d5911]
mov ebx, 0x13
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
nop dword [rax]
jmp sym.runtime.recovery
Function at 0x43aa80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43ab26
push rbp
mov rbp, rsp
sub rsp, 0x18
lea rax, [sym.runtime.asyncPreempt.abi0]
call sym.runtime.findfunc
nop
call sym.runtime.funcMaxSPDelta
mov dword [rsp + 0x14], eax
lea rcx, [sym.runtime.asyncPreempt2]
mov rax, rcx
call sym.runtime.findfunc
call sym.runtime.funcMaxSPDelta
mov ecx, dword [rsp + 0x14]
add ecx, eax
movsxd rcx, ecx
add rcx, 0x40
mov qword [0x008ce4d0], rcx
cmp rcx, 0x320
ja 0x43aae1
add rsp, 0x18
pop rbp
nop
ret
call sym.runtime.printlock
lea rax, [0x006da6c5]
mov ebx, 0x1b
call sym.runtime.printstring
mov rax, qword [0x008ce4d0]
nop
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x006d69eb]
mov ebx, 0x15
nop dword [rax + rax]
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.init.5
Function at 0x43ca60
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x18
nop
mov eax, 2
lea rbx, [0x006dafd9]
mov ecx, 0x1c
call sym.runtime.write
add rsp, 0x18
pop rbp
ret

Function at 0x43d0a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43d0ec
push rbp
mov rbp, rsp
sub rsp, 0x18
mov rcx, qword [0x00908650]
lea rdx, [rcx + 1]
cmp rcx, rdx
jg 0x43d0da
mov qword [rsp + 0x10], rcx
mov qword [0x00908650], rdx
call sym.runtime.checkmcount
mov rax, qword [rsp + 0x10]
add rsp, 0x18
pop rbp
ret
lea rax, [0x006da6e0]
mov ebx, 0x1b
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.mReserveID

Function at 0x43e280
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43e306
push rbp
mov rbp, rsp
sub rsp, 0x20
mov eax, dword [rdx + 0xc]
mov qword [rsp + 0x18], rax
mov ecx, dword [rdx + 8]
mov qword [rsp + 0x10], rcx
call sym.runtime.printlock
lea rax, [0x006daff5]
mov ebx, 0x1c
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
nop dword [rax]
call sym.runtime.printhex
lea rax, [0x006d1a35]
mov ebx, 8
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
nop dword [rax + rax]
call sym.runtime.printhex
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x006dcdb8]
mov ebx, 0x1f
nop dword [rax + rax]
call sym.runtime.throw
nop
call sym.runtime.morestack.abi0
jmp sym.runtime.casgstatus.func1
Function at 0x441320
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4413f7
push rbp
mov rbp, rsp
sub rsp, 0x18
mov cl, byte [0x00908708]
nop dword [rax + rax]
test cl, cl
je 0x4413e5
mov rcx, qword [r14 + 0x30]
cmp byte [rcx + 0xe4], 0
je 0x441372
mov byte [rcx + 0xe4], 0
mov ecx, 0xffffffff
lea rdx, [0x0090867c]
lock xadd dword [rdx], ecx
dec ecx
test ecx, ecx
jl 0x4413d0
call sym.runtime.releasep
mov qword [rsp + 0x10], rax
nop
nop
lea rax, [0x00908638]
call sym.runtime.lock2
mov rax, qword [rsp + 0x10]
mov dword [rax + 4], 3
mov eax, dword [0x0090870c]
lea ecx, [rax - 1]
mov dword [0x0090870c], ecx
cmp eax, 1
jne 0x4413b6
lea rax, [0x00908710]
call sym.runtime.notewakeup
nop
nop
lea rax, [0x00908638]
nop
call sym.runtime.unlock2
call sym.runtime.stopm
add rsp, 0x18
pop rbp
ret
lea rax, [0x006db011]
mov ebx, 0x1c
nop dword [rax]
call sym.runtime.throw
lea rax, [0x006da716]
mov ebx, 0x1b
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt.abi0
nop dword [rax]
jmp sym.runtime.gcstopm
Function at 0x4445c0
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
mov rcx, qword [r14 + 0x30]
mov rdx, r14
cmp qword [rcx], rdx
je 0x4445f9
cmp qword [rcx + 0x50], rdx
je 0x4445f9
mov qword [rdx + 0x40], rax
mov qword [rdx + 0x38], rbx
movups xmmword [rdx + 0x58], xmm15
cmp qword [rdx + 0x50], 0
je 0x4445f3
call sym.runtime.badctxt
add rsp, 0x10
pop rbp
ret
lea rax, [0x006db049]
mov ebx, 0x1c
call sym.runtime.throw
nop
int3
Function at 0x444920
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4449dc
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rax, qword [rdx + 8]
mov rcx, qword [rax + 0x70]
mov qword [rsp + 0x20], rcx
mov rdx, qword [rax]
mov qword [rsp + 0x18], rdx
mov rax, qword [rax + 8]
mov qword [rsp + 0x10], rax
call sym.runtime.printlock
lea rax, [0x006d9c5d]
mov ebx, 0x1a
call sym.runtime.printstring
mov rax, qword [rsp + 0x20]
call sym.runtime.printhex
lea rax, [0x006d0bb0]
mov ebx, 2
nop dword [rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
call sym.runtime.printhex
lea rax, [0x00755018]
mov ebx, 1
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
call sym.runtime.printhex
lea rax, [0x006d0bc6]
mov ebx, 2
nop dword [rax + rax]
call sym.runtime.printstring
call sym.runtime.printunlock
lea rax, [0x006d2da8]
mov ebx, 0xc
call sym.runtime.throw
nop
nop dword [rax]
call sym.runtime.morestack.abi0
jmp sym.runtime.reentersyscall.func1
Function at 0x445f80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44615c
push rbp
mov rbp, rsp
sub rsp, 0x58
mov ecx, dword [rbx + 0x90]
nop dword [rax + rax]
cmp ecx, 6
jne 0x44614a
mov rcx, qword [rbx + 8]
mov rdx, qword [rbx]
mov rsi, rcx
sub rcx, rdx
mov edi, dword [0x008ce45c]
nop dword [rax]
cmp rdi, rcx
je 0x445ff3
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
mov rax, rdx
mov rbx, rsi
call sym.runtime.stackfree
mov rcx, qword [rsp + 0x70]
movups xmmword [rcx], xmm15
mov qword [rcx + 0x10], 0
mov rax, qword [rsp + 0x68]
mov rbx, rcx
mov rcx, qword [rax + 0x9a0]
mov qword [rbx + 0xa0], rcx
mov qword [rax + 0x9a0], rbx
mov ecx, dword [rax + 0x9a8]
inc ecx
mov dword [rax + 0x9a8], ecx
cmp ecx, 0x40
jl 0x44602b
movups xmmword [rsp + 0x18], xmm15
movups xmmword [rsp + 0x48], xmm15
xor ecx, ecx
jmp 0x446033
add rsp, 0x58
pop rbp
ret
inc ecx
cmp dword [rax + 0x9a8], 0x20
jl 0x4460ae
mov rdx, qword [rax + 0x9a0]
nop
test rdx, rdx
je 0x446057
mov rbx, qword [rdx + 0xa0]
mov qword [rax + 0x9a0], rbx
dec dword [rax + 0x9a8]
cmp qword [rdx], 0
jne 0x446089
mov rbx, qword [rsp + 0x48]
nop
mov qword [rdx + 0xa0], rbx
mov rbx, rdx
nop
mov qword [rsp + 0x48], rdx
cmp qword [rsp + 0x50], 0
nop
jne 0x446031
mov qword [rsp + 0x50], rbx
jmp 0x446031
mov rbx, qword [rsp + 0x18]
nop
mov qword [rdx + 0xa0], rbx
mov rbx, rdx
nop
mov qword [rsp + 0x18], rdx
cmp qword [rsp + 0x20], 0
jne 0x446031
mov qword [rsp + 0x20], rbx
jmp 0x446031
mov dword [rsp + 0x14], ecx
nop
nop
lea rax, [0x009086c0]
nop dword [rax + rax]
call sym.runtime.lock2
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rcx
test rdx, rdx
je 0x4460f8
mov rdx, qword [0x009086d0]
mov qword [rcx + 0xa0], rdx
mov rcx, qword [rsp + 0x38]
mov qword [0x009086d0], rcx
mov rcx, qword [rsp + 0x20]
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rcx
test rdx, rdx
je 0x44612b
mov rdx, qword [0x009086c8]
mov qword [rcx + 0xa0], rdx
mov rcx, qword [rsp + 0x28]
mov qword [0x009086c8], rcx
mov ecx, dword [rsp + 0x14]
add dword [0x009086d8], ecx
nop
nop
lea rax, [0x009086c0]
nop
call sym.runtime.unlock2
jmp 0x44602b
lea rax, [0x006db961]
mov ebx, 0x1d
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime.gfput

Function at 0x446560
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x10
mov ecx, dword [0x0098c6e0]
test ecx, ecx
jne 0x446577
call sym.runtime.startTemplateThread
mov rcx, qword [r14 + 0x30]
inc dword [rcx + 0x230]
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0x230], 0
je 0x4465ae
mov rax, qword [r14 + 0x30]
mov rcx, r14
nop
mov qword [rax + 0x128], rcx
mov rax, qword [r14 + 0x30]
mov qword [r14 + 0xd0], rax
add rsp, 0x10
pop rbp
ret
mov dword [rcx + 0x230], 0xffffffff
lea rax, [0x0067b380]
lea rbx, [0x00756da0]
call sym.runtime.gopanic
nop
int3
Function at 0x447860
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44792c
push rbp
mov rbp, rsp
sub rsp, 0x28
mov rax, qword [rdx + 8]
mov rcx, qword [rax + 0x38]
mov qword [rsp + 0x20], rcx
nop
test rcx, rcx
je 0x447925
mov rcx, qword [rcx + 0xb8]
mov qword [rsp + 0x10], rcx
mov eax, dword [rax + 4]
mov qword [rsp + 0x18], rax
nop dword [rax]
call sym.runtime.printlock
lea rax, [0x006d2db4]
mov ebx, 0xc
call sym.runtime.printstring
mov rax, qword [rsp + 0x20]
nop dword [rax + rax]
call sym.runtime.printuint
lea rax, [0x00755010]
mov ebx, 1
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
nop dword [rax + rax]
call sym.runtime.printint
lea rax, [0x006d2dc0]
mov ebx, 0xc
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
nop dword [rax + rax]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x006d73b1]
mov ebx, 0x16
nop dword [rax + rax]
call sym.runtime.throw
xor ecx, ecx
jmp 0x447890
call sym.runtime.morestack.abi0
jmp sym.runtime.wirep.func2

Function at 0x4479e0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x447afc
push rbp
mov rbp, rsp
sub rsp, 0x30
mov rcx, qword [r14 + 0x30]
mov rax, qword [rcx + 0xa0]
nop dword [rax]
test rax, rax
je 0x447aea
mov qword [rsp + 0x28], rcx
mov rdx, qword [rax + 0x38]
mov qword [rsp + 0x10], rdx
nop
cmp rdx, rcx
jne 0x447a43
cmp dword [rax + 4], 1
jne 0x447a43
mov qword [rcx + 0xa0], 0
mov qword [rax + 0x38], 0
mov dword [rax + 4], 0
add rsp, 0x30
pop rbp
ret
mov qword [rsp + 0x20], rax
mov ecx, dword [rax + 4]
mov qword [rsp + 0x18], rcx
call sym.runtime.printlock
lea rax, [0x006d2dcc]
mov ebx, 0xc
call sym.runtime.printstring
mov rax, qword [rsp + 0x28]
call sym.runtime.printpointer
lea rax, [0x006d1350]
mov ebx, 6
nop dword [rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x20]
call sym.runtime.printpointer
lea rax, [0x006d1356]
mov ebx, 6
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
call sym.runtime.printhex
lea rax, [0x006d2734]
mov ebx, 0xb
nop dword [rax + rax]
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
lea rax, [0x006d91d9]
mov ebx, 0x19
call sym.runtime.throw
lea rax, [0x006d6a54]
mov ebx, 0x15
call sym.runtime.throw
nop
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.releasepNoTrace
Function at 0x447ec0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x447f9f
push rbp
mov rbp, rsp
sub rsp, 0x28
mov qword [rsp + 0x38], rax
mov rcx, qword [rdx + 8]
mov qword [rsp + 0x20], rcx
xor ebx, ebx
call sym.runtime.isSystemGoroutine
test al, al
jne 0x447f21
nop
mov rax, qword [rsp + 0x38]
mov ecx, dword [rax + 0x90]
mov edx, ecx
and ecx, 0xffffefff
nop
test ecx, ecx
je 0x447f1b
cmp ecx, 3
jbe 0x447f27
cmp ecx, 4
je 0x447f13
cmp ecx, 9
jne 0x447f1b
mov rax, qword [rsp + 0x20]
inc qword [rax]
add rsp, 0x28
pop rbp
ret
add rsp, 0x28
pop rbp
ret
mov ecx, edx
mov qword [rsp + 0x18], rcx
mov rax, qword [rax + 0x98]
mov qword [rsp + 0x10], rax
call sym.runtime.printlock
lea rax, [0x006da767]
mov ebx, 0x1b
call sym.runtime.printstring
mov rax, qword [rsp + 0x10]
call sym.runtime.printuint
lea rax, [0x006d273f]
mov ebx, 0xb
call sym.runtime.printstring
mov rax, qword [rsp + 0x18]
call sym.runtime.printuint
call sym.runtime.printnl
call sym.runtime.printunlock
nop
nop
lea rax, [0x00908638]
call sym.runtime.unlock2
lea rax, [0x006d6a69]
mov ebx, 0x15
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
call sym.runtime.morestack.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime.checkdead.func1
Function at 0x449600
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x449767
push rbp
mov rbp, rsp
sub rsp, 0x18
mov ecx, dword [rax + 0x190]
mov edx, dword [rax + 0x194]
mov rsi, qword [rax + 0x998]
mov edi, dword [rax + 0x194]
cmp edi, edx
jne 0x449612
cmp edx, ecx
jne 0x449755
nop word [rax + rax]
test rsi, rsi
jne 0x449755
mov qword [rsp + 0x28], rax
test rbx, rbx
jne 0x449674
nop
call sym.runtime.nanotime1.abi0
xorps xmm15, xmm15
mov r14, qword [0x0098c2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x10], rbx
call sym.runtime.updateTimerPMask
mov rcx, qword [rsp + 0x28]
mov edx, dword [rcx]
mov ebx, edx
sar edx, 0x1f
shr edx, 0x1b
add edx, ebx
mov esi, edx
and edx, 0xffffffe0
sub ebx, edx
test ebx, ebx
jl 0x449750
mov rdx, qword [0x00905968]
sar esi, 5
mov rax, rcx
mov ecx, ebx
mov edi, 1
shl edi, cl
movsxd rsi, esi
cmp ecx, 0x20
sbb r8d, r8d
and edi, r8d
cmp rdx, rsi
jbe 0x449745
mov rcx, qword [0x00905960]
lea rcx, [rcx + rsi*4]
lock or dword [rcx], edi
mov rcx, qword [0x00908670]
mov qword [rax + 8], rcx
mov rcx, rax
nop
mov qword [0x00908670], rax
nop
mov edx, 1
lea rsi, [0x00908678]
lock xadd dword [rsi], edx
mov rdx, qword [rcx + 0x1248]
shr rdx, 0x3d
test dl, dl
jne 0x449733
mov rax, qword [rsp + 0x10]
movabs rdx, 0x1fffffffffffffff
and rdx, rax
bts rdx, 0x3f
nop
nop
xchg qword [rcx + 0x1248], rdx
add rsp, 0x18
pop rbp
ret
lea rax, [0x006e1cba]
mov ebx, 0x28
nop
call sym.runtime.throw
mov rax, rsi
mov rcx, rdx
call sym.runtime.panicIndex
call sym.runtime.panicshift
lea rax, [0x006df297]
mov ebx, 0x23
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp sym.runtime.pidleput
Function at 0x44ae20
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44b006
push rbp
mov rbp, rsp
sub rsp, 0x10
mov qword [0x0098c210], 0x2a
mov qword [0x0098c218], 0
xor eax, eax
lea rcx, [0x0098c210]
mov edx, 1
lock cmpxchg qword [rcx], rdx
sete sil
nop
test sil, sil
jne 0x44afef
cmp qword [0x0098c218], 0
jne 0x44afde
mov qword [0x0098c218], 0x2a
mov eax, 0x2a
lock cmpxchg qword [rcx], rdx
sete dl
test dl, dl
je 0x44afcd
cmp qword [0x0098c218], 0x2a
nop
jne 0x44afbc
cmp qword [0x0098c210], 1
jne 0x44afbc
mov rdx, qword [0x0098c210]
nop dword [rax + rax]
cmp rdx, 1
jne 0x44afab
movabs rdx, 0x10000000001
xchg qword [rcx], rdx
mov rdx, qword [0x0098c210]
movabs rsi, 0x10000000001
cmp rdx, rsi
jne 0x44af9a
movabs rdx, 0x10000000001
lock xadd qword [rcx], rdx
movabs rsi, 0x10000000001
add rdx, rsi
movabs rsi, 0x20000000002
cmp rsi, rdx
jne 0x44af89
mov rdx, qword [0x0098c210]
cmp rdx, rsi
jne 0x44af78
movabs rdx, 0x30000000003
xchg qword [rcx], rdx
cmp rdx, rsi
jne 0x44af67
mov rcx, qword [0x0098c210]
movabs rdx, 0x30000000003
cmp rcx, rdx
jne 0x44af56
add rsp, 0x10
pop rbp
ret
lea rax, [0x006d338b]
mov ebx, 0xd
call sym.runtime.throw
lea rax, [0x006d338b]
mov ebx, 0xd
call sym.runtime.throw
lea rax, [0x006d337e]
mov ebx, 0xd
call sym.runtime.throw
lea rax, [0x006d337e]
mov ebx, 0xd
call sym.runtime.throw
lea rax, [0x006d3905]
mov ebx, 0xe
call sym.runtime.throw
lea rax, [0x006d3371]
mov ebx, 0xd
call sym.runtime.throw
lea rax, [0x006d2df0]
mov ebx, 0xc
call sym.runtime.throw
lea rax, [0x006d2df0]
mov ebx, 0xc
call sym.runtime.throw
lea rax, [0x006d2df0]
mov ebx, 0xc
call sym.runtime.throw
lea rax, [0x006d2df0]
mov ebx, 0xc
nop dword [rax + rax]
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt.abi0
jmp sym.runtime.testAtomic64
Function at 0x44bcc0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44bd78
push rbp
mov rbp, rsp
sub rsp, 0x10
mov ecx, 0xffffffff
lock xadd dword [rax + 0x28], ecx
dec ecx
nop
test ecx, ecx
jge 0x44bd36
cmp ecx, 0xffffffff
je 0x44bd66
cmp ecx, 0xbfffffff
je 0x44bd66
mov ecx, 0xffffffff
lock xadd dword [rax + 0x2c], ecx
dec ecx
nop dword [rax]
test ecx, ecx
jne 0x44bd36
mov qword [rsp + 0x20], rax
nop
nop
call sym.runtime.lock2
mov rax, qword [rsp + 0x20]
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x44bd2f
lea rax, [rcx + 0x110]
call sym.runtime.notewakeup
mov rax, qword [rsp + 0x20]
nop
nop
call sym.runtime.unlock2
mov rax, qword [r14 + 0x30]
mov ecx, dword [rax + 0xd8]
lea edx, [rcx - 1]
mov dword [rax + 0xd8], edx
cmp ecx, 1
jne 0x44bd60
cmp byte [r14 + 0xb1], 0
je 0x44bd60
mov qword [r14 + 0x10], 0xfffffffffffffade
add rsp, 0x10
pop rbp
ret
lea rax, [0x006da782]
mov ebx, 0x1b
call sym.runtime.throw
nop
mov qword [rsp + 8], rax
nop dword [rax]
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.runtime._rwmutex_.runlock
Function at 0x44eac0
Capabilities:
Access peb ldr_data

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rcx, r14
test rcx, rcx
je 0x44eb08
mov rcx, qword [rcx + 0x30]
mov rcx, qword [rcx + 0x90]
nop dword [rax + rax]
test rcx, rcx
je 0x44eb08
mov qword [rsp + 0x68], rcx
nop
mov rax, qword [rdi + 0x28]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
jmp 0x44eb18
mov eax, 1
add rsp, 0x70
pop rbp
ret
mov rax, qword [rsp + 0x60]
mov rcx, qword [sym.imp.kernel32.dll_RtlLookupFunctionEntry]
lea rdx, [rsp + 0x58]
mov rbx, qword [rax + 0xf8]
mov qword [rsp], rcx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 0
call sym.runtime.stdcall3.abi0
xorps xmm15, xmm15
mov r14, qword [0x0098c2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
nop
test rax, rax
je 0x44ebf1
mov rcx, qword [rsp + 0x58]
mov rdx, qword [sym.imp.kernel32.dll_RtlVirtualUnwind]
mov rbx, qword [rsp + 0x60]
mov rsi, rbx
lea rdi, [rsp + 0x50]
mov r8, qword [rsi + 0xf8]
mov qword [rsp], rdx
mov qword [rsp + 8], 0
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], 0
call sym.runtime.stdcall8.abi0
xorps xmm15, xmm15
mov r14, qword [0x0098c2c8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x68]
cmp qword [rcx], rax
ja 0x44ebf1
cmp qword [rcx + 8], rax
ja 0x44eb13
mov eax, 1
add rsp, 0x70
pop rbp
ret

Function at 0x44f360
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44f49f
push rbp
mov rbp, rsp
sub rsp, 0x10
cmp eax, 0x60
jae 0x44f3bb
mov edx, eax
shr edx, 5
nop
mov esi, 1
lea rdi, [0x0098c83c]
lock xadd dword [rdi], esi
cmp rdx, 3
jae 0x44f492
lea rcx, [0x0098c814]
lea rcx, [rcx + rdx*4]
mov ecx, dword [rcx]
bt ecx, eax
jb 0x44f3c5
nop
mov ecx, 0xffffffff
lock xadd dword [rdi], ecx
xor eax, eax
add rsp, 0x10
pop rbp
ret
xor eax, eax
add rsp, 0x10
pop rbp
ret
mov eax, ebx
lea rcx, [0x0098c808]
mov esi, dword [rcx + rdx*4]
lea rcx, [rcx + rdx*4]
bt esi, eax
jb 0x44f3f0
mov r8d, esi
bts esi, eax
mov ebx, eax
mov eax, r8d
lock cmpxchg dword [rcx], esi
sete cl
test cl, cl
je 0x44f3c3
jmp 0x44f405
nop
mov ecx, 0xffffffff
lock xadd dword [rdi], ecx
mov eax, 1
add rsp, 0x10
pop rbp
ret
nop
mov ecx, dword [0x0098c838]
test ecx, ecx
jne 0x44f42b
xor eax, eax
lea rcx, [0x0098c838]
mov edx, 2
lock cmpxchg dword [rcx], edx
sete cl
test cl, cl
je 0x44f405
jmp 0x44f465
cmp ecx, 1
jne 0x44f460
mov eax, 1
lea rcx, [0x0098c838]
xor edx, edx
lock cmpxchg dword [rcx], edx
sete cl
test cl, cl
jne 0x44f450
mov edx, 2
jmp 0x44f405
lea rax, [0x0098c800]
call sym.runtime.notewakeup
jmp 0x44f465
cmp ecx, 2
jne 0x44f481
nop
mov ecx, 0xffffffff
lea rdx, [0x0098c83c]
lock xadd dword [rdx], ecx
mov eax, 1
add rsp, 0x10
pop rbp
ret
lea rax, [0x006da79d]
mov ebx, 0x1b
call sym.runtime.throw
mov eax, edx
mov ecx, 3
call sym.runtime.panicIndex
nop
mov dword [rsp + 8], eax
call sym.runtime.morestack_noctxt.abi0
mov eax, dword [rsp + 8]
jmp sym.runtime.sigsend