joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5aad40
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x5aaf68
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rcx
lea rax, [rsp + 0x98]
mov rbx, rax
mov ecx, 0x30
call fcn.00589c80
test al, al
je 0x5aad9f
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x5aadea
lea rax, [0x00690f40]
call fcn.0040d960
mov qword [rax + 8], 0x22
lea rcx, [0x006d5c7f]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x00742c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov rdx, rbx
mov rsi, rax
mov rax, rcx
mov rcx, rsi
cmp qword [rsp + 0xa0], 0
je 0x5aaf48
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x70], 0
movups xmmword [rsp + 0x78], xmm15
lea rax, [rsp + 0x98]
lea rbx, [rsp + 0x70]
mov ecx, 0x30
call fcn.00589c80
test al, al
je 0x5aaf09
mov qword [rsp + 0x58], 0
movups xmmword [rsp + 0x60], xmm15
lea rax, [rsp + 0x70]
lea rbx, [rsp + 0x58]
call fcn.00589540
test al, al
je 0x5aaeca
mov rbx, qword [rsp + 0x40]
inc rbx
mov rcx, qword [rsp + 0x48]
cmp rcx, rbx
jb 0x5aae71
mov rax, qword [rsp + 0x50]
jmp 0x5aae87
mov rax, qword [rsp + 0x50]
mov edi, 1
lea rsi, [0x0068c820]
call fcn.0044a920
lea rdx, [rbx + rbx*2]
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x68]
mov qword [rax + rdx*8 - 0x10], r9
mov qword [rax + rdx*8 - 8], r10
lea rdi, [rax + rdx*8]
lea rdi, [rdi - 0x18]
cmp dword [0x0092b0b0], 0
jne 0x5aaec0
mov qword [rax + rdx*8 - 0x18], r8
jmp 0x5aadde
call fcn.00465a80
jmp 0x5aadde
lea rax, [0x00690f40]
call fcn.0040d960
mov qword [rax + 8], 0x22
lea rcx, [0x006d5c7f]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x00742c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
lea rax, [0x00690f40]
call fcn.0040d960
mov qword [rax + 8], 0x22
lea rcx, [0x006d5c7f]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x00742c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov rbx, rdx
xor edi, edi
xor esi, esi
mov rdx, rax
mov rax, rcx
mov rcx, rdx
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.005aad40
Function at 0x5b0f80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b111f
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdi
nop dword [rax + rax]
test rbx, rbx
je 0x5b1109
mov rdx, qword [rdi + 0x278]
mov r8, qword [rdi + 0x270]
nop word [rax + rax]
test rdx, rdx
jne 0x5b108f
mov rdx, qword [rdi + 0x1d0]
cmp qword [rdi + 0x1d8], 0
je 0x5b1009
mov rsi, qword [rdx + 8]
mov rdx, qword [rdx]
test rbx, rbx
jmp 0x5b1098
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x28], rbx
mov rdx, qword [rdi + 0xb8]
test rdx, rdx
jne 0x5b102d
mov eax, 5
lea rdx, [0x006c98ec]
jmp 0x5b105c
mov rax, qword [rdx + 8]
mov rbx, qword [rdx + 0x10]
mov rcx, qword [rdx + 0x18]
movzx edi, byte [rdx]
mov esi, 0xa
call fcn.00533a60
mov rcx, rbx
mov rbx, rax
lea rax, [rsp + 0x30]
call fcn.0044eb00
mov rdx, rax
mov rax, rbx
lea rbx, [0x006ca111]
mov ecx, 7
mov rdi, rdx
mov rsi, rax
xor eax, eax
call fcn.0044e760
mov rdx, qword [rsp + 0x28]
test rdx, rdx
mov rcx, qword [rsp + 0x50]
mov rsi, rbx
mov rdx, rax
mov rbx, qword [rsp + 0x28]
jmp 0x5b1098
test rbx, rbx
mov rsi, rdx
mov rdx, r8
movups xmmword [rsp + 0x58], xmm15
movups xmmword [rsp + 0x68], xmm15
je 0x5b10aa
mov rbx, qword [rbx + 8]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rcx
mov rax, rdx
mov rbx, rsi
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x006de635]
mov ebx, 0x53
lea rcx, [rsp + 0x58]
mov edi, 2
mov rsi, rdi
call fcn.004cb480
mov ecx, 0x2d
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x006d9aff]
call fcn.0044e760
jmp 0x5b1115
mov ebx, 0x2d
lea rax, [0x006d9aff]
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.005b0f80
Function at 0x5b1a80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1be6
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x98], r8
mov rax, rsi
mov rbx, r8
lea rcx, [0x006c935d]
mov edi, 1
nop dword [rax + rax]
call fcn.004d88e0
test rax, rax
jl 0x5b1bbd
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
nop
call fcn.005b1220
test sil, sil
je 0x5b1b61
mov rdx, qword [rsp + 0x30]
cmp rbx, rdx
je 0x5b1b18
xor eax, eax
jmp 0x5b1b53
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdi
mov rbx, rax
mov rcx, rdx
mov rax, qword [rsp + 0x48]
call fcn.00402d80
test al, al
jne 0x5b1b3a
xor eax, eax
jmp 0x5b1b53
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
call fcn.004d8640
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
movups xmmword [rsp + 0x50], xmm15
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
lea rax, [0x006daa28]
mov ebx, 0x30
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x98]
call fcn.005b1e80
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.005b1a80
Function at 0x5b1c40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b1e46
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov qword [rsp + 0x60], rbx
mov rdx, qword [rax + 0x30]
mov rsi, qword [rax + 0x28]
test rdx, rdx
je 0x5b1df0
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rax
mov rax, rsi
mov rbx, rdx
lea rcx, [0x00740158]
mov edi, 1
call fcn.004d88e0
nop
test rax, rax
jge 0x5b1ca9
xor eax, eax
jmp 0x5b1ccf
mov rdx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
lea rax, [rsi + rdx]
lea rax, [rax - 1]
lea rbx, [0x007402c8]
mov ecx, 1
call fcn.00402d80
xor eax, 1
test al, al
jne 0x5b1cdf
mov rbx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
jmp 0x5b1cfa
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + 0x28]
mov rbx, qword [rcx + 0x30]
call fcn.0050eec0
test rsi, rsi
jne 0x5b1dde
nop word [rax + rax]
cmp rbx, 1
jl 0x5b1d0e
cmp byte [rax], 0x5b
sete dl
jmp 0x5b1d10
xor edx, edx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rax
test dl, dl
je 0x5b1d54
nop
cmp rbx, 1
jge 0x5b1d2a
xor ecx, ecx
jmp 0x5b1d56
lea rdx, [rax + rbx]
lea rdx, [rdx - 1]
mov ecx, 1
mov rax, rdx
lea rbx, [0x007402c8]
call fcn.00402d80
mov rbx, qword [rsp + 0x28]
mov ecx, eax
mov rax, qword [rsp + 0x30]
jmp 0x5b1d56
xor ecx, ecx
test cl, cl
jne 0x5b1d65
call fcn.0050d9c0
nop
test rax, rax
je 0x5b1dbb
mov rax, qword [rsp + 0x58]
call fcn.0059ea20
movups xmmword [rsp + 0x38], xmm15
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x006dbbe9]
mov ebx, 0x36
lea rcx, [rsp + 0x38]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
call fcn.005b1e80
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
xor eax, eax
mov rbx, rsi
mov rcx, r8
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
call fcn.0059ea20
movups xmmword [rsp + 0x38], xmm15
nop dword [rax + rax]
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x006dcfb7]
mov ebx, 0x3e
lea rcx, [rsp + 0x38]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.005b1c40
Function at 0x5b1e80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b20ac
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x98], rcx
test rdi, rdi
je 0x5b2027
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa0], rdi
call fcn.005b1780
test dil, dil
je 0x5b1fcb
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x98]
movzx edx, byte [rcx]
mov byte [rsp + 0x2f], dl
cmp dl, 0x2e
jne 0x5b1f1a
mov rdi, qword [rsp + 0xa0]
dec rdi
mov rsi, rdi
neg rdi
sar rdi, 0x3f
and edi, 1
add rcx, rdi
jmp 0x5b1f22
mov rsi, qword [rsp + 0xa0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x48], rsi
mov rax, rcx
mov rbx, rsi
call fcn.005b1780
test dil, dil
je 0x5b1f75
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jl 0x5b1f65
movzx esi, byte [rsp + 0x2f]
cmp sil, 0x2e
jne 0x5b1f56
cmp rdx, rbx
je 0x5b1f65
mov qword [rsp + 0x40], rbx
xor ecx, ecx
nop dword [rax]
jmp 0x5b2050
xor eax, eax
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
movups xmmword [rsp + 0x68], xmm15
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x006d9642]
mov ebx, 0x2c
lea rcx, [rsp + 0x68]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
movups xmmword [rsp + 0x68], xmm15
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x90]
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x006d9642]
mov ebx, 0x2c
lea rcx, [rsp + 0x68]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, 1
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, qword [rsp + 0x58]
add rax, 0x10
mov rcx, qword [rsp + 0x30]
inc rcx
mov rbx, qword [rsp + 0x40]
cmp rbx, rcx
jle 0x5b2099
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x58], rax
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
shl rcx, 4
mov r8, qword [rsp + 0x50]
mov r9, qword [r8 + rcx]
mov rdi, qword [r8 + rcx + 8]
mov rcx, r9
mov rax, rdx
nop
call fcn.004d8640
test al, al
jne 0x5b203a
xor eax, eax
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, 1
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.005b1e80
Function at 0x5b6940
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b69f7
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rbx
lea rdx, [rax - 1]
cmp rdx, 4
jae 0x5b6982
shl rax, 4
lea rdx, [0x008d0400]
mov rsi, qword [rdx + rax + 8]
mov rdx, qword [rdx + rax]
jmp 0x5b6993
nop
mov ebx, 0xa
call fcn.00480f20
mov rsi, rbx
mov rdx, rax
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
mov rax, rdx
mov rbx, rsi
call fcn.0040afc0
lea rcx, [0x00679500]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x40], rcx
lea rax, [0x006de782]
mov ebx, 0x54
lea rcx, [rsp + 0x28]
mov edi, 2
mov rsi, rdi
call fcn.004c8440
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.005b6940
Function at 0x5c7ae0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c7cbd
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
cmp ax, 0x501
ja 0x5c7b31
nop
cmp ax, 0x203
ja 0x5c7b17
cmp ax, 0x201
je 0x5c7b4a
cmp ax, 0x203
je 0x5c7b57
jmp 0x5c7c6f
cmp ax, 0x401
je 0x5c7b4a
nop dword [rax]
cmp ax, 0x403
je 0x5c7b57
cmp ax, 0x501
je 0x5c7b4a
jmp 0x5c7c6f
cmp ax, 0x601
ja 0x5c7b51
cmp ax, 0x503
je 0x5c7b57
nop dword [rax]
cmp ax, 0x601
jne 0x5c7c6f
mov ecx, 0xffffffe1
jmp 0x5c7b80
cmp ax, 0x603
jne 0x5c7b5e
mov ecx, 0xffffffe3
jmp 0x5c7b80
lea edx, [rax - 0x804]
cmp dx, 2
ja 0x5c7b71
mov ecx, 0xffffffe2
jmp 0x5c7b80
cmp ax, 0x807
jne 0x5c7c6f
mov ecx, 0xffffffe4
cmp ax, 0x503
ja 0x5c7bc0
cmp ax, 0x401
ja 0x5c7ba8
cmp ax, 0x201
je 0x5c7b98
cmp ax, 0x203
jne 0x5c7ba0
mov edx, 3
jmp 0x5c7c0d
cmp ax, 0x401
je 0x5c7bd8
jmp 0x5c7c21
cmp ax, 0x403
je 0x5c7bd8
cmp ax, 0x501
je 0x5c7be6
cmp ax, 0x503
je 0x5c7be6
jmp 0x5c7c21
cmp ax, 0x804
ja 0x5c7be0
cmp ax, 0x601
je 0x5c7bf3
cmp ax, 0x603
je 0x5c7bf3
cmp ax, 0x804
jne 0x5c7c21
mov edx, 5
jmp 0x5c7c0d
cmp ax, 0x805
jne 0x5c7bed
mov edx, 6
jmp 0x5c7c0d
cmp ax, 0x806
jne 0x5c7c00
mov edx, 7
jmp 0x5c7c0d
cmp ax, 0x807
jne 0x5c7c21
mov rdx, qword [0x0092aca8]
mov eax, ecx
mov rbx, rdx
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
nop
ret
movups xmmword [rsp + 0x28], xmm15
call fcn.0040ae40
lea rcx, [0x0067fa00]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x006d62c6]
mov ebx, 0x23
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
movups xmmword [rsp + 0x28], xmm15
call fcn.0040ae40
lea rcx, [0x0067fa00]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x006d62c6]
mov ebx, 0x23
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov word [rsp + 8], ax
call fcn.00463740
movzx eax, word [rsp + 8]
jmp fcn.005c7ae0
Function at 0x5c7ce0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c7df3
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
test rax, rax
je 0x5c7db1
mov edx, dword [rax + 0x10]
cmp edx, 0x4bcec15d
jne 0x5c7d41
lea rdx, [0x00688a80]
nop dword [rax]
cmp rax, rdx
jne 0x5c7db1
mov eax, 0xffffffe1
mov ebx, 8
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp edx, 0x8c7bd38d
jne 0x5c7d6d
lea rdx, [0x006acaa0]
cmp rax, rdx
jne 0x5c7db1
mov eax, 0xffffffe3
mov ebx, 3
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp edx, 0xc0d9e4a4
jne 0x5c7db1
lea rdx, [0x00684780]
nop dword [rax]
cmp rax, rdx
jne 0x5c7db1
lea rax, [0x006dc6e7]
mov ebx, 0x39
xor ecx, ecx
xor edi, edi
mov rsi, rdi
call fcn.004c8440
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
movups xmmword [rsp + 0x28], xmm15
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
lea rax, [0x006d43e3]
mov ebx, 0x1f
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c8440
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005c7ce0
Function at 0x5c8360
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c8465
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x30], ax
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rcx
call fcn.005c7e20
test rbx, rbx
je 0x5c83dd
mov rdx, qword [rsp + 0x48]
nop dword [rax + rax]
test rdx, rdx
jne 0x5c83d4
movzx esi, word [rsp + 0x30]
cmp si, 0x303
jne 0x5c83cd
mov dword [rsp + 0x14], 0
mov dword [rsp + 0x14], 0x2030201
mov edx, 2
lea rcx, [rsp + 0x14]
jmp 0x5c83d9
mov rcx, qword [rsp + 0x40]
jmp 0x5c83d9
mov rcx, qword [rsp + 0x40]
xor esi, esi
jmp 0x5c8400
mov rax, qword [rsp + 0x18]
call fcn.005c84c0
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
inc rsi
nop dword [rax]
cmp rsi, rdx
jge 0x5c840e
movzx edi, word [rcx + rsi*2]
xor r8d, r8d
jmp 0x5c8445
lea rax, [0x00690f40]
call fcn.0040d960
mov qword [rax + 8], 0x47
lea rcx, [0x006ddddc]
mov qword [rax], rcx
lea rbx, [0x00742c00]
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
inc r8
cmp rbx, r8
jle 0x5c83f9
movzx r9d, word [rax + r8*2]
cmp r9w, di
jne 0x5c8442
mov eax, edi
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov word [rsp + 8], ax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
nop
call fcn.00463740
movzx eax, word [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
nop
jmp fcn.005c8360
Function at 0x5ca7a0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5caa1c
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
movzx edx, word [rax + 0x30]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov rsi, qword [rax + 0x28]
mov eax, edx
call fcn.005c8360
test rbx, rbx
jne 0x5ca82e
mov rdx, qword [rsp + 0xa0]
cmp qword [rdx + 8], 0
nop
je 0x5ca81a
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsi]
mov r8, qword [rsi + 8]
mov qword [rsp + 0x48], r8
xor eax, eax
jmp 0x5ca84b
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov rax, rbx
mov rbx, rcx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
add rdi, 0x18
inc rax
cmp rax, r8
jge 0x5ca955
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x68], rdi
mov r9, qword [rdi]
mov rbx, qword [rdi + 8]
mov rcx, qword [rdi + 0x10]
mov r10, qword [rsi + 0x70]
test rax, rax
jne 0x5ca877
test r10, r10
jne 0x5ca8a7
mov rax, r9
call fcn.005aeca0
nop
test rbx, rbx
jne 0x5ca8bf
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x48]
mov r10, rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x50], r10
mov r9, qword [rdx]
mov r11, qword [rdx + 8]
mov qword [rsp + 0x40], r11
xor ecx, ecx
jmp 0x5ca9a0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x58], rcx
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x80], xmm15
mov rax, qword [rsp + 0x28]
nop dword [rax]
call fcn.0040af40
lea rcx, [0x00678d40]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x30]
nop dword [rax + rax]
test rcx, rcx
je 0x5ca90b
mov rbx, qword [rcx + 8]
jmp 0x5ca90e
mov rbx, rcx
mov qword [rsp + 0x80], rbx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x88], rdx
lea rax, [0x006da728]
mov ebx, 0x30
lea rcx, [rsp + 0x70]
mov edi, 2
mov rsi, rdi
nop dword [rax]
call fcn.004c8440
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
lea rax, [0x00690f40]
nop dword [rax]
call fcn.0040d960
mov qword [rax + 8], 0x27
lea rcx, [0x006d7903]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x00742c00]
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
add r9, 0x18
inc rcx
nop dword [rax + rax]
cmp rcx, r11
jge 0x5ca844
mov rbx, qword [r9]
mov r12, qword [r10 + 0x68]
mov r13, qword [r10 + 0x60]
cmp qword [r9 + 8], r12
jne 0x5ca991
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x60], r9
mov rax, r13
mov rcx, r12
call fcn.00402d80
test al, al
jne 0x5caa08
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
jmp 0x5ca991
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463740
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005ca7a0
Function at 0x5d26e0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5d2937
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
cmp word [rax + 0x40], 0x304
nop
jne 0x5d2928
mov qword [rsp + 0x70], rax
xor ebx, ebx
xor ecx, ecx
call fcn.005d10c0
test rcx, rcx
jne 0x5d2918
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rcx + 0x338]
inc rdx
mov qword [rcx + 0x338], rdx
cmp rdx, 0x10
jg 0x5d27ef
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
test rax, rax
je 0x5d279d
mov edx, dword [rax + 0x10]
cmp edx, 0x657fdec6
jne 0x5d2777
lea rdx, [0x00689280]
nop
cmp rax, rdx
jne 0x5d279d
mov rax, rcx
call fcn.005d2960
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
cmp edx, 0x82cd91e9
jne 0x5d279d
lea rdx, [0x00689380]
cmp rax, rdx
jne 0x5d279d
mov rax, rcx
call fcn.005dd880
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov ebx, 0xa
call fcn.005cfee0
movups xmmword [rsp + 0x50], xmm15
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x58], rcx
lea rax, [0x006dbb7f]
mov ebx, 0x35
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
nop dword [rax]
call fcn.004c8440
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov ebx, 0xa
call fcn.005cfee0
lea rax, [0x00690f40]
call fcn.0040d960
mov qword [rsp + 0x38], rax
mov qword [rax + 8], 0x23
lea rcx, [0x006d6217]
mov qword [rax], rcx
lea rbx, [0x00742c00]
mov rcx, rax
lea rax, [0x006911c0]
call fcn.0040b260
test rax, rax
jne 0x5d2883
lea rcx, [0x00742c00]
mov rdi, qword [rsp + 0x70]
mov qword [rdi + 0x178], rcx
cmp dword [0x0092b0b0], 0
jne 0x5d2867
mov rcx, qword [rsp + 0x38]
mov qword [rdi + 0x180], rcx
jmp 0x5d2900
lea rcx, [rdi + 0x180]
mov rax, rdi
mov rdi, rcx
mov rdx, qword [rsp + 0x38]
call fcn.00465a20
mov rdi, rax
jmp 0x5d2900
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
lea rax, [0x00690cc0]
call fcn.0040d960
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
cmp dword [0x0092b0b0], 0
jne 0x5d28b5
mov rcx, qword [rsp + 0x30]
mov qword [rax + 8], rcx
jmp 0x5d28c5
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x30]
nop
call fcn.00465a00
lea rcx, [0x00742ae0]
mov rdi, qword [rsp + 0x70]
mov qword [rdi + 0x178], rcx
cmp dword [0x0092b0b0], 0
nop
jne 0x5d28eb
mov qword [rdi + 0x180], rax
jmp 0x5d2900
lea rcx, [rdi + 0x180]
mov rdx, rdi
mov rdi, rcx
call fcn.00465900
mov rdi, rdx
mov rax, qword [rdi + 0x178]
mov rbx, qword [rdi + 0x180]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov rbx, rdi
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.005d22a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.00463740
mov rax, qword [rsp + 8]
jmp fcn.005d26e0