joyce8/EMBER2024-capa huggingface dataset:
Function at 0x611740
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x611964
push rbp
mov rbp, rsp
sub rsp, 0xa8
movq qword [rsp + 0xa0], xmm15
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
mov byte [rsp + 0x1b], 0
lea rdx, [rax + 0x58]
mov rcx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rcx + 0x58], esi
sete sil
test sil, sil
jne 0x6117ba
mov qword [rsp + 0x28], rdx
mov rax, rdx
nop dword [rax]
call fcn.00480e60
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0xc0]
movups xmmword [rsp + 0x30], xmm15
lea rsi, [0x006119a0]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdx
lea rdx, [rsp + 0x30]
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0x1b], 1
mov rdx, qword [rcx + 0x88]
cmp dword [0x00921500], 0
je 0x611806
call fcn.004665c0
mov qword [r11], rbx
mov rsi, qword [rcx + 0x88]
mov qword [r11 + 8], rsi
mov qword [rcx + 0x88], rbx
cmp qword [rcx + 0x98], 0
jne 0x611880
cmp byte [rbx], 0
nop word [rax + rax]
je 0x611942
mov qword [rsp + 0x20], rdx
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
xor eax, eax
mov rbx, rdx
call fcn.0044f9a0
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x98], rbx
cmp dword [0x00921500], 0
je 0x611868
call fcn.004665c0
mov qword [r11], rax
mov rsi, qword [rdx + 0x90]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x90], rax
mov rcx, rdx
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0xc0]
nop
test rdx, rdx
je 0x611896
mov edx, dword [rdx + 0x10]
test edx, edx
je 0x611896
mov rsi, qword [rcx + 0x88]
mov dword [rsi + 0x10], edx
mov rdx, qword [rcx + 0xa0]
mov esi, dword [rbx + 0xc]
mov dword [rsp + 0x1c], esi
lea rdi, [rsp + 0x40]
lea rdi, [rdi - 0x20]
nop word [rax + rax]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00466c8b
mov rbp, qword [rbp]
lea rax, [0x0066aca0]
mov rbx, rdx
lea rcx, [rsp + 0x40]
call fcn.0040f4e0
jmp 0x6118f3
lea rax, [rsp + 0x40]
call fcn.0040f780
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x611927
mov rdx, qword [rsp + 0x48]
test byte [rdx], al
mov edi, dword [rsp + 0x1c]
cmp dword [rsi], edi
jbe 0x6118e9
mov rax, qword [rdx]
mov rbx, qword [0x008be060]
mov rcx, qword [0x008be068]
nop dword [rax]
call fcn.0060ed40
jmp 0x6118e9
mov byte [rsp + 0x1b], 0
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rdx]
call rax
add rsp, 0xa8
pop rbp
ret
lea rax, [0x0065b7a0]
lea rbx, [0x00727a60]
call fcn.00436ac0
nop
call fcn.00435fa0
add rsp, 0xa8
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop dword [rax]
jmp fcn.00611740
Function at 0x612000
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x61217e
push rbp
mov rbp, rsp
sub rsp, 0x70
mov qword [rsp + 0x80], rax
lea rcx, [rax + 0x58]
mov rdx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx + 0x58], esi
sete sil
test sil, sil
jne 0x612052
mov qword [rsp + 0x38], rcx
mov rax, rcx
nop
call fcn.00480e60
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x80]
mov rsi, qword [rdx + 0xa0]
test rsi, rsi
je 0x612063
mov rsi, qword [rsi]
jmp 0x612065
xor esi, esi
test rsi, rsi
jg 0x612074
cmp qword [rdx + 0xa8], 0
jle 0x612093
nop
mov ebx, 0xffffffff
lock xadd dword [rdx + 0x58], ebx
dec ebx
test ebx, ebx
je 0x61208d
mov rax, rcx
call fcn.00481140
add rsp, 0x70
pop rbp
ret
mov byte [rdx + 0x82], 1
mov eax, dword [rdx + 0xb0]
nop
mov ebx, 0xffffffff
lock xadd dword [rdx + 0x58], ebx
dec ebx
test ebx, ebx
je 0x6120c9
mov dword [rsp + 0x34], eax
mov rax, rcx
call fcn.00481140
mov eax, dword [rsp + 0x34]
mov rdx, qword [rsp + 0x80]
cmp byte [0x009210c3], 0
je 0x612170
movups xmmword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x60], xmm15
lea rcx, [0x006a8a00]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdx
movzx ecx, byte [rdx + 0x2c]
lea rbx, [0x0065b7e0]
mov qword [rsp + 0x50], rbx
lea rbx, [0x0089c320]
lea rcx, [rbx + rcx*8]
mov qword [rsp + 0x58], rcx
add eax, 0xfffffffe
nop dword [rax]
call fcn.0040ad60
lea rcx, [0x0065baa0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
cmp byte [0x009210c3], 0
je 0x612168
mov rdx, qword [rsp + 0x80]
mov rax, qword [rdx]
lea rbx, [0x006c46e5]
mov ecx, 0x45
lea rdi, [rsp + 0x40]
mov esi, 3
mov r8, rsi
call fcn.0061cde0
mov rdx, qword [rsp + 0x80]
mov rax, rdx
call fcn.00611e60
add rsp, 0x70
pop rbp
ret
mov qword [rsp + 8], rax
call fcn.004646a0
mov rax, qword [rsp + 8]
jmp fcn.00612000
Function at 0x612700
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x612994
push rbp
mov rbp, rsp
sub rsp, 0x38
mov qword [rsp + 0x48], rax
mov rdx, qword [rax + 0x38]
lea rbx, [0x006b117f]
mov ecx, 7
mov rax, rdx
call fcn.005e7a40
test rbx, rbx
jne 0x61283d
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x0069da20]
lea rcx, [0x006b4640]
mov edi, 0x11
call fcn.00412420
mov rbx, qword [rax + 8]
nop dword [rax]
test rbx, rbx
je 0x6127dd
mov rdx, qword [rax]
cmp rbx, 1
jg 0x612796
mov rsi, qword [rdx + 8]
test rsi, rsi
je 0x6127dd
cmp rsi, 7
jne 0x612796
mov rsi, qword [rdx]
cmp dword [rsi], 0x6e756863
jne 0x612796
cmp word [rsi + 4], 0x656b
jne 0x612796
cmp byte [rsi + 6], 0x64
je 0x6127dd
mov rcx, qword [rax + 0x10]
movups xmmword [rsp + 0x28], xmm15
mov rax, rdx
call fcn.0040aee0
lea rdx, [0x00659260]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006c2266]
mov ebx, 0x33
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004dd6a0
add rsp, 0x38
pop rbp
ret
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x0069da20]
lea rcx, [0x006b1f40]
mov edi, 0xa
call fcn.00412420
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x6128ad
mov rdx, qword [rax]
cmp rbx, 1
jg 0x6128b7
mov rsi, qword [rdx + 8]
nop dword [rax]
test rsi, rsi
je 0x6128ad
mov rdi, qword [rdx]
cmp rsi, 5
jne 0x612939
xor ecx, ecx
jmp 0x612901
movups xmmword [rsp + 0x28], xmm15
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x0069da20]
lea rcx, [0x006b117f]
mov edi, 7
nop
call fcn.00412420
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, rdx
call fcn.0040aee0
lea rdx, [0x00659260]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006bf312]
mov ebx, 0x29
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004dd6a0
add rsp, 0x38
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x38
pop rbp
ret
mov rcx, qword [rax + 0x10]
movups xmmword [rsp + 0x28], xmm15
mov rax, rdx
call fcn.0040aee0
lea rdx, [0x00659260]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006c01e2]
mov ebx, 0x2c
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004dd6a0
add rsp, 0x38
pop rbp
ret
inc rcx
cmp rcx, 5
jge 0x6128ad
movzx r8d, byte [rcx + rdi]
lea r9d, [r8 - 0x41]
cmp r9b, 0x19
ja 0x61291a
add r8d, 0x20
lea r9, [0x006b0a94]
movzx r9d, byte [r9 + rcx]
lea r10d, [r9 - 0x41]
cmp r10b, 0x19
ja 0x612934
add r9d, 0x20
cmp r8b, r9b
je 0x6128fe
nop dword [rax]
cmp rsi, 0xa
jne 0x6128b7
xor ecx, ecx
jmp 0x612951
inc rcx
cmp rcx, 0xa
jge 0x6128ad
movzx esi, byte [rcx + rdi]
lea r8d, [rsi - 0x41]
cmp r8b, 0x19
ja 0x61296c
add esi, 0x20
lea r8, [0x006b1f72]
movzx r8d, byte [r8 + rcx]
lea r9d, [r8 - 0x41]
nop dword [rax]
cmp r9b, 0x19
ja 0x61298a
add r8d, 0x20
cmp sil, r8b
je 0x61294e
jmp 0x6128b7
mov qword [rsp + 8], rax
call fcn.004646a0
mov rax, qword [rsp + 8]
jmp fcn.00612700
Function at 0x617320
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x61756a
push rbp
mov rbp, rsp
sub rsp, 0xc8
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x60], rbx
mov qword [rax + 0x150], 0
mov qword [rax + 0x160], 0
mov byte [rax + 0x168], 0
lea rdi, [rsp + 0x68]
lea rdi, [rdi - 0x20]
nop word [rax + rax]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00466c8b
mov rbp, qword [rbp]
lea rcx, [rsp + 0x68]
lea rax, [0x0069da20]
nop
call fcn.0040f4e0
xor eax, eax
jmp 0x6173c0
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x68]
call fcn.0040f780
mov rcx, qword [rsp + 0x38]
mov rax, rcx
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x6173e5
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rcx]
mov rcx, qword [rcx + 8]
mov rdx, qword [rdx + 8]
xor esi, esi
nop dword [rax]
jmp 0x617560
mov rdx, qword [rsp + 0xd8]
cmp qword [rdx + 0x108], rax
jb 0x61742b
lea rdi, [rsp + 0x68]
lea rdi, [rdi - 0x20]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00466c8b
mov rbp, qword [rbp]
lea rax, [0x0069da20]
mov rbx, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.0040f4e0
jmp 0x617453
mov rdi, qword [0x008be0d0]
mov rsi, qword [0x008be0d8]
xor eax, eax
xor ebx, ebx
mov rcx, rbx
add rsp, 0xc8
pop rbp
ret
lea rax, [rsp + 0x68]
call fcn.0040f780
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x61749a
mov rcx, qword [rsp + 0x70]
mov rax, qword [rdx]
mov rbx, qword [rdx + 8]
mov rdx, qword [rcx]
mov qword [rsp + 0x48], rdx
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x28], rcx
call fcn.0060cf60
nop
test cl, cl
je 0x617449
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x30], rbx
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
jmp 0x617530
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rdx + 0x150]
mov rax, qword [rdx + 0x160]
cmp rax, rcx
ja 0x6174ec
mov r8, qword [rdx + 0x148]
mov rdx, qword [rdx + 0x158]
sub rdx, rax
sub rcx, rax
mov r9, rdx
neg rdx
sar rdx, 0x3f
and rax, rdx
add rax, r8
mov rbx, rcx
mov rcx, r9
xor edi, edi
xor esi, esi
add rsp, 0xc8
pop rbp
ret
call fcn.00466a20
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x58], rdx
mov rdi, qword [rdx]
mov rsi, qword [rdx + 8]
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0xd8]
call fcn.006175a0
mov rdx, qword [rsp + 0x58]
add rdx, 0x10
mov rcx, qword [rsp + 0x40]
inc rcx
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x28]
cmp rcx, r8
jl 0x6174f1
jmp 0x617449
mov rdi, rbx
mov r8, qword [rbx + 8]
lea r8, [rdx + r8]
lea r8, [r8 + 0x20]
mov r8d, r8d
lea rbx, [rdi + 0x10]
inc rsi
add rax, r8
nop dword [rax + rax]
cmp rsi, rcx
jl 0x61753f
jmp 0x6173a9
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00617320
Function at 0x6175a0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x617734
push rbp
mov rbp, rsp
sub rsp, 0xa8
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xd0], rdi
cmp byte [0x009210c3], 0
je 0x6176f1
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xd0], rdi
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
movups xmmword [rsp + 0x30], xmm15
movups xmmword [rsp + 0x40], xmm15
mov rax, rbx
mov rbx, rcx
call fcn.0040ae40
lea rcx, [0x0065b7a0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0xd8]
call fcn.0040ae40
lea rcx, [0x0065b7a0]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
movups xmmword [rsp + 0x78], xmm15
movups xmmword [rsp + 0x88], xmm15
movups xmmword [rsp + 0x98], xmm15
lea rcx, [0x00617780]
mov qword [rsp + 0x78], rcx
lea rcx, [0x006bed0d]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], 0x28
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], 2
mov qword [rsp + 0xa0], 2
mov rax, qword [0x008cc108]
xor ebx, ebx
mov ecx, 2
lea rdi, [rsp + 0x78]
call fcn.005e6f20
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xd0]
movups xmmword [rsp + 0x50], xmm15
movups xmmword [rsp + 0x58], xmm15
movups xmmword [rsp + 0x68], xmm15
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
mov rax, qword [rax + 0x170]
mov rbx, qword [rsp + 0x50]
xor r8d, r8d
call fcn.005f8a40
add rsp, 0xa8
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp fcn.006175a0
Function at 0x618f80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6191dc
push rbp
mov rbp, rsp
sub rsp, 0x40
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x20], rax
mov rcx, qword [rbx]
mov ecx, dword [rcx + 8]
mov ebx, ecx
call fcn.0061b720
test rax, rax
je 0x6191d2
mov qword [rsp + 0x18], rax
cmp byte [rax + 0x15e], 0
nop
jne 0x619141
cmp byte [rax + 0x15a], 0
jne 0x618ff6
mov rsi, qword [rax + 0x20]
test rsi, rsi
je 0x618fef
mov rdx, qword [rsi + 0x18]
nop
nop dword [rax]
test rdx, rdx
je 0x618fef
mov rax, qword [rdx]
call rax
mov rax, qword [rsp + 0x18]
mov byte [rax + 0x15a], 1
cmp byte [rax + 0x15b], 0
nop dword [rax]
jne 0x619128
mov byte [rax + 0x15b], 1
mov rbx, rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x20]
call fcn.00619200
nop
test rbx, rbx
je 0x61909a
lea rdx, [0x00728d40]
cmp rbx, rdx
jne 0x61903d
mov rax, rbx
mov rbx, rcx
add rsp, 0x40
pop rbp
ret
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx]
mov edx, dword [rdx + 8]
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x2c], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rcx
lea rax, [0x00697260]
lea rbx, [rsp + 0x28]
call fcn.0040abe0
mov rcx, qword [rsp + 0x18]
mov byte [rcx + 0x15f], 1
lea rbx, [0x00728d60]
mov rdx, rax
mov rax, rcx
mov rcx, rdx
call fcn.0060ebe0
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
test rax, rax
je 0x61911e
lea rcx, [rax + 0x78]
cmp dword [0x00921500], 0
jne 0x6190b3
mov rdx, qword [rsp + 0x18]
jmp 0x6190da
call fcn.00466600
mov qword [r11], rcx
mov rdx, qword [rsp + 0x18]
mov rbx, qword [rdx + 0x168]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rax
mov rbx, qword [rdx + 0x100]
mov qword [r11 + 0x18], rbx
mov qword [rdx + 0x168], rcx
mov qword [rdx + 0x100], rax
mov rax, qword [rdx + 0xf8]
call fcn.00406060
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx]
movzx ecx, byte [rcx + 2]
test cl, 1
je 0x619114
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x18]
call fcn.0061b540
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
mov rbx, rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rsp + 0x20]
call fcn.00619f60
add rsp, 0x40
pop rbp
nop
ret
lea rax, [0x00673e00]
call fcn.0040d680
mov qword [rax + 8], 0x28
lea rcx, [0x006bed35]
mov qword [rax], rcx
mov qword [rsp + 0x28], 0
movups xmmword [rsp + 0x30], xmm15
mov rcx, qword [rsp + 0x58]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 8]
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x2c], 1
lea rcx, [0x00728640]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rax
lea rax, [0x00697260]
lea rbx, [rsp + 0x28]
call fcn.0040abe0
mov rcx, qword [rsp + 0x18]
mov byte [rcx + 0x15f], 1
lea rbx, [0x00728d60]
mov rdx, rax
mov rax, rcx
mov rcx, rdx
call fcn.0060ebe0
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x40
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00618f80
Function at 0x61a920
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x38]
cmp r12, qword [r14 + 0x10]
jbe 0x61ab9f
push rbp
mov rbp, rsp
sub rsp, 0xb0
mov qword [rsp + 0x78], rax
mov rcx, qword [0x008be0b0]
mov rdi, qword [0x008be0b8]
lea rdx, [rax + 0x30]
mov qword [rsp + 0x50], rdx
lea rbx, [rax + 0x98]
mov r8, qword [rax]
mov qword [rsp + 0x68], r8
xor esi, esi
mov rax, rdx
call fcn.0060dc20
mov rbx, qword [0x008be0b0]
mov rcx, qword [0x008be0b8]
mov rax, qword [rsp + 0x78]
call fcn.0060ebe0
mov rax, qword [rsp + 0x50]
call fcn.0060d4a0
test rax, rax
jle 0x61aace
mov rdx, qword [rsp + 0x68]
lea rsi, [rdx + 0x58]
mov rcx, rax
xor eax, eax
mov edi, 1
lock cmpxchg dword [rdx + 0x58], edi
sete r8b
test r8b, r8b
jne 0x61a9e1
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x60], rsi
mov rax, rsi
call fcn.00480e60
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov edi, 1
movsxd r8, dword [rdx + 0x7c]
add r8, rcx
movsxd r9, dword [rdx + 0x78]
add r9, r8
cmp r9, 0x7fffffff
jg 0x61ab8b
mov dword [rdx + 0x7c], r8d
cmp r8d, 0x1000
jge 0x61aa14
cmp dword [rdx + 0x78], r8d
jle 0x61aa14
xor r8d, r8d
jmp 0x61aa1f
add dword [rdx + 0x78], r8d
mov dword [rdx + 0x7c], 0
mov dword [rsp + 0x34], r8d
nop
mov ebx, 0xffffffff
lock xadd dword [rdx + 0x58], ebx
dec ebx
test ebx, ebx
je 0x61aa4c
mov rax, rsi
call fcn.00481140
mov rdx, qword [rsp + 0x68]
mov edi, 1
mov r8d, dword [rsp + 0x34]
lea rsi, [rdx + 0x120]
mov qword [rsp + 0x58], rsi
xor eax, eax
lock cmpxchg dword [rdx + 0x120], edi
sete dil
test dil, dil
jne 0x61aa82
mov rax, rsi
call fcn.00480e60
mov rdx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x34]
test r8d, r8d
jle 0x61aa9d
mov rax, qword [rdx + 0x130]
xor ebx, ebx
mov ecx, r8d
call fcn.00609de0
mov rdx, qword [rsp + 0x68]
mov rax, qword [rdx + 0x128]
call fcn.004efe40
nop
mov ebx, 0xffffffff
mov rcx, qword [rsp + 0x68]
lock xadd dword [rcx + 0x120], ebx
dec ebx
nop
test ebx, ebx
je 0x61aace
mov rax, qword [rsp + 0x58]
call fcn.00481140
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rcx + 0xe8]
mov qword [rsp + 0x70], rdx
mov rax, qword [rcx + 0x10]
mov rbx, qword [rcx + 8]
mov rbx, qword [rbx + 0x20]
call rbx
mov rcx, qword [rsp + 0x78]
mov rcx, qword [rcx + 0x18]
movups xmmword [rsp + 0x80], xmm15
movups xmmword [rsp + 0x90], xmm15
movups xmmword [rsp + 0xa0], xmm15
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x80], rcx
lea rax, [rsp + 0x80]
lea rbx, [rsp + 0x44]
xor ecx, ecx
xor edi, edi
mov esi, 3
mov r8d, 1
call fcn.00448320
test rax, rax
je 0x61ab74
cmp rax, 1
jne 0x61ab67
xor eax, eax
xor ebx, ebx
add rsp, 0xb0
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0xb0
pop rbp
ret
mov rax, qword [0x008be070]
mov rbx, qword [0x008be078]
add rsp, 0xb0
pop rbp
ret
lea rax, [0x0065b7a0]
lea rbx, [0x00727a40]
call fcn.00436ac0
nop
mov qword [rsp + 8], rax
call fcn.004646a0
mov rax, qword [rsp + 8]
jmp fcn.0061a920
Function at 0x61b8c0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 8]
cmp r12, qword [r14 + 0x10]
jbe 0x61ba7f
push rbp
mov rbp, rsp
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x98], rbx
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov rax, qword [rcx]
test byte [rax], al
movups xmmword [rsp + 0x60], xmm15
lea rdx, [0x0063cca0]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov edx, dword [rax + 0x68]
test edx, edx
jne 0x61b92f
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x68]
lea rbx, [rsp + 0x60]
mov rax, rcx
nop dword [rax + rax]
call fcn.00481260
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rax + 0x78]
mov rdx, qword [rdx + 0x20]
mov rax, qword [rax + 0x80]
mov rbx, rcx
call rdx
mov rbx, qword [rsp + 0x98]
cmp dword [rbx + 0x10], 0
je 0x61ba6b
movups xmmword [rsp + 0x50], xmm15
mov eax, dword [rbx + 0x10]
nop
call fcn.0040ad60
lea rcx, [0x0066c440]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
cmp byte [0x009210c3], 0
je 0x61b9a5
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx]
lea rbx, [0x006bf33b]
mov ecx, 0x29
lea rdi, [rsp + 0x50]
mov esi, 1
mov r8, rsi
call fcn.0061cde0
mov rax, qword [rsp + 0x48]
mov rdx, qword [rax]
mov rdx, qword [rdx + 0x58]
test rdx, rdx
je 0x61ba63
mov qword [rsp + 0x40], rdx
mov rdx, qword [rsp + 0x98]
mov ecx, dword [rdx + 0x10]
mov dword [rsp + 0x34], ecx
mov rbx, qword [0x008cbe98]
lea rax, [0x0066b240]
nop dword [rax]
call fcn.004106e0
test bl, bl
je 0x61b9f2
mov rdx, qword [rax]
mov r8, qword [rax + 8]
jmp 0x61ba3a
movups xmmword [rsp + 0x70], xmm15
mov eax, dword [rsp + 0x34]
nop dword [rax]
call fcn.0040ad60
lea rcx, [0x0065baa0]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, [0x006b34bc]
mov ebx, 0xe
lea rcx, [rsp + 0x70]
mov edi, 1
mov rsi, rdi
call fcn.004e0560
mov r8, rbx
mov rdx, rax
xor eax, eax
lea rbx, [0x006b2af5]
mov ecx, 0xc
mov rdi, rdx
mov rsi, r8
call fcn.0044f620
mov rdx, qword [rsp + 0x40]
mov r8, qword [rdx]
call r8
mov rax, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x48]
call fcn.00611740
xor eax, eax
xor ebx, ebx
sub rsp, 0xffffffffffffff80
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004646a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0061b8c0
Function at 0x62ac60
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x62ae58
push rbp
mov rbp, rsp
sub rsp, 0x30
mov qword [rsp + 0x40], rax
mov rsi, qword [rax + 0x40]
nop dword [rax + rax]
test rsi, rsi
je 0x62acb1
lea rdi, [0x00729a40]
cmp rsi, rdi
je 0x62ac95
xor ecx, ecx
jmp 0x62acb6
mov rbx, qword [rax + 0x48]
lea rcx, [0x009210a0]
mov rax, rsi
call fcn.00404940
mov ecx, eax
mov rax, qword [rsp + 0x40]
jmp 0x62acb6
mov ecx, 1
test cl, cl
jne 0x62ae37
mov rsi, qword [rax + 0x40]
lea rdi, [0x00729a68]
cmp rsi, rdi
jne 0x62ae41
mov r8, qword [rax + 0x48]
cmp byte [r8 + 0x10], 0
jne 0x62ace8
cmp byte [r8 + 0x11], 0
je 0x62ae37
cmp byte [r8 + 0x11], 0
jne 0x62ad0a
nop
test rsi, rsi
je 0x62ad0a
mov rcx, qword [rsi + 0x18]
mov rax, r8
call rcx
mov rax, qword [rsp + 0x40]
lea rdi, [0x00729a68]
mov rdx, qword [rax + 0x50]
test rdx, rdx
je 0x62ae21
mov rax, qword [rdx]
call rax
nop dword [rax]
test rcx, rcx
jne 0x62ae13
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rax
lea rax, [0x006a7820]
call fcn.0040d680
mov qword [rsp + 0x28], rax
cmp dword [0x00921500], 0
je 0x62ad6a
mov rbx, rax
mov rcx, qword [rsp + 0x40]
lea rax, [0x006a7820]
nop dword [rax]
call fcn.00413880
mov rax, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x40]
mov rcx, qword [rsi]
mov qword [rax], rcx
add rsi, 8
lea rdi, [rax + 8]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00466f6e
mov rbp, qword [rbp]
lea rax, [0x006866a0]
call fcn.0040d680
mov byte [rax + 0x10], 0
mov byte [rax + 0x11], 0
mov rcx, qword [rsp + 0x20]
mov qword [rax], rcx
cmp dword [0x00921500], 0
jne 0x62adc0
mov rdx, qword [rsp + 0x18]
jmp 0x62add5
call fcn.004665c0
mov rdx, qword [rsp + 0x18]
mov qword [r11], rdx
mov rsi, qword [rax + 8]
mov qword [r11 + 8], rsi
mov qword [rax + 8], rdx
lea rdx, [0x00729a68]
mov rsi, qword [rsp + 0x28]
mov qword [rsi + 0x40], rdx
cmp dword [0x00921500], 0
je 0x62ae02
call fcn.004665c0
mov qword [r11], rax
mov rdx, qword [rsi + 0x48]
mov qword [r11 + 8], rdx
mov qword [rsi + 0x48], rax
mov rax, rsi
xor ebx, ebx
xor ecx, ecx
add rsp, 0x30
pop rbp
ret
xor eax, eax
mov rbx, rcx
mov rcx, rdi
add rsp, 0x30
pop rbp
ret
mov rbx, qword [0x008be130]
mov rcx, qword [0x008be138]
xor eax, eax
add rsp, 0x30
pop rbp
ret
xor ebx, ebx
xor ecx, ecx
add rsp, 0x30
pop rbp
ret
mov rbx, qword [0x00729a70]
mov rax, rsi
lea rcx, [0x006726c0]
call fcn.0040ab20
nop
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.004646a0
mov rax, qword [rsp + 8]
jmp fcn.0062ac60