joyce8/EMBER2024-capa huggingface dataset:
Function at 0x600f60
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x60118d
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xb8], rdi
xor edx, edx
jmp 0x600fe2
mov rdx, qword [rsp + 0x50]
inc rdx
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xb8]
cmp rsi, rdx
jle 0x6010b3
mov qword [rsp + 0x50], rdx
mov rbx, qword [rcx]
movzx eax, byte [rdi + rdx]
mov rdx, rcx
call rbx
nop dword [rax]
test al, al
jne 0x600fb2
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xb8]
movzx ecx, byte [rdx + rcx]
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x80], xmm15
lea rsi, [0x00667c00]
mov qword [rsp + 0x70], rsi
lea rdi, [0x00896b80]
lea rcx, [rdi + rcx*8]
mov qword [rsp + 0x78], rcx
mov rax, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
call fcn.0040b080
lea rcx, [0x00667a40]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x88], rax
lea rax, [0x006cae9e]
mov ebx, 0x37
lea rcx, [rsp + 0x70]
mov edi, 2
mov rsi, rdi
call fcn.005cbb40
lea rax, [0x00667c00]
xor ebx, ebx
mov rcx, qword [rsp + 0xc0]
nop dword [rax + rax]
call fcn.0044a620
xor ecx, ecx
mov rdx, qword [rsp + 0xc0]
xor ebx, ebx
jmp 0x6010d7
mov rax, rdi
mov rbx, rsi
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov rsi, qword [rsp + 0x48]
inc rsi
mov rdx, rcx
mov rcx, rsi
mov rsi, qword [rsp + 0xc0]
nop
cmp rsi, rcx
jle 0x601170
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x60], rdx
mov rbx, qword [rsp + 0xb8]
movzx eax, byte [rbx + rcx]
mov byte [rsp + 0x47], al
mov rdx, qword [rsp + 0xb0]
mov rsi, qword [rdx]
call rsi
test al, al
je 0x60115c
mov rbx, qword [rsp + 0x58]
inc rbx
mov rcx, qword [rsp + 0x60]
cmp rcx, rbx
jb 0x601137
mov rax, qword [rsp + 0x68]
jmp 0x60114d
mov rax, qword [rsp + 0x68]
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
movzx esi, byte [rsp + 0x47]
mov byte [rbx + rax - 1], sil
jmp 0x6010c9
mov rbx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
jmp 0x6010c9
mov rcx, rbx
mov rbx, rax
xor eax, eax
call fcn.0044e8e0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp fcn.00600f60
Function at 0x6034e0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x603636
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rdi
mov dword [rsp + 0x2c], ebx
nop word [rax + rax]
test rcx, rcx
je 0x6035cc
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
movups xmmword [rsp + 0x60], xmm15
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x80], xmm15
call fcn.0040af80
lea rcx, [0x00667b80]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x2c]
call fcn.0040af80
lea rcx, [0x00676840]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x30]
nop dword [rax]
test rcx, rcx
je 0x603589
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x80], rcx
mov rdx, qword [rsp + 0x38]
mov qword [rsp + 0x88], rdx
lea rax, [0x006c47c9]
mov ebx, 0x22
lea rcx, [rsp + 0x60]
mov edi, 3
mov rsi, rdi
call fcn.004f3aa0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
movups xmmword [rsp + 0x40], xmm15
movups xmmword [rsp + 0x50], xmm15
call fcn.0040af80
lea rcx, [0x00667b80]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
mov eax, dword [rsp + 0x2c]
call fcn.0040af80
lea rcx, [0x00676840]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
lea rax, [0x006c2b02]
mov ebx, 0x1e
lea rcx, [rsp + 0x40]
mov edi, 2
mov rsi, rdi
call fcn.004f3aa0
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov dword [rsp + 8], eax
mov dword [rsp + 0xc], ebx
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rdi
call fcn.00463440
mov eax, dword [rsp + 8]
mov ebx, dword [rsp + 0xc]
mov rcx, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
nop
jmp fcn.006034e0
Function at 0x604180
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6043a3
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x50], rax
cmp qword [rax + 0xb8], 0
jne 0x604242
lea rax, [0x0068e980]
call fcn.0040da20
cmp dword [0x00918a90], 0
nop
jne 0x6041d0
mov rdx, qword [rsp + 0x50]
mov qword [rdx + 0xc0], rax
jmp 0x6041e5
mov rdi, qword [rsp + 0x50]
lea rdx, [rdi + 0xc0]
mov rdi, rdx
nop
call fcn.00465600
xor ebx, ebx
lea rcx, [0x0072e6a0]
mov rdi, rax
xor eax, eax
call fcn.006043c0
cmp dword [0x00918a90], 0
nop
jne 0x604210
mov rdx, qword [rsp + 0x50]
mov qword [rdx + 0xb8], rax
jmp 0x60422a
mov rdi, qword [rsp + 0x50]
lea rdx, [rdi + 0xb8]
mov rcx, rdi
mov rdi, rdx
call fcn.00465600
mov rdx, rcx
mov byte [rax + 0xb4], 0
mov rsi, qword [rdx + 0xb8]
mov byte [rsi + 0xa1], 1
mov rax, rdx
mov rdx, qword [rax + 0xc0]
mov rbx, qword [rax + 0x88]
mov rcx, qword [rax + 0x90]
mov rdi, qword [rax + 0x98]
mov rax, rdx
call fcn.004a71a0
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx + 0xb8]
call fcn.00604600
test rcx, rcx
je 0x6042e2
lea rax, [0x00668fc0]
call fcn.0040da20
lea rcx, [0x006ae720]
mov qword [rax], rcx
cmp dword [0x00918a90], 0
jne 0x6042a6
mov r8, qword [rsp + 0x50]
mov qword [rax + 8], r8
jmp 0x6042b4
lea rdi, [rax + 8]
mov r8, qword [rsp + 0x50]
call fcn.00465780
mov rdx, qword [r8 + 0xd0]
mov r8, qword [rdx]
mov ebx, 0x35
mov rcx, rax
mov edi, 1
mov rsi, rdi
lea rax, [0x006ca774]
call r8
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
call fcn.00609020
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x28], rbx
lea rax, [0x00669920]
call fcn.0040da20
mov qword [rsp + 0x30], rax
lea rcx, [0x006ae720]
mov qword [rax], rcx
cmp dword [0x00918a90], 0
jne 0x604322
mov rcx, qword [rsp + 0x50]
mov qword [rax + 8], rcx
nop
jmp 0x604330
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x50]
call fcn.00465700
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x28]
call fcn.0040b080
lea rcx, [0x00667a40]
mov rdi, qword [rsp + 0x30]
mov qword [rdi + 0x10], rcx
cmp dword [0x00918a90], 0
jne 0x60435e
mov qword [rdi + 0x18], rax
jmp 0x604370
lea r8, [rdi + 0x18]
mov rcx, rdi
mov rdi, r8
call fcn.00465600
mov rdi, rcx
mov r8, qword [rsp + 0x50]
mov rdx, qword [r8 + 0xd0]
mov r8, qword [rdx]
lea rax, [0x006c09cc]
mov ebx, 0x1a
mov rcx, rdi
mov edi, 2
mov rsi, rdi
call r8
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
jmp fcn.00604180
Function at 0x605880
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x6059ac
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
cmp byte [rax], 0
nop dword [rax + rax]
je 0x605998
xor ecx, ecx
jmp 0x6058b0
inc rcx
mov rax, r8
mov rdx, qword [rax + 0x20]
mov rsi, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
mov r8, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mov r9, rdx
imul rdi
add rdi, rdx
sar rdi, 2
cmp rcx, rdi
jge 0x605964
lea rax, [rcx + rcx*2]
lea rdi, [rax + 2]
add rdi, rax
cmp r9, rdi
jb 0x60598d
mov r10, rax
shl rax, 1
nop dword [rax]
cmp rdi, rax
jb 0x605985
mov rdx, r9
sub r9, rax
mov r11, r9
neg r9
sar r9, 0x3f
and r9, rax
lea r12, [r10 + 6]
add r10, r12
movzx r9d, word [rsi + r9]
cmp rdx, r10
jb 0x60597d
cmp r10, rdi
jb 0x605972
lea r10, [r11 - 2]
neg r10
sar r10, 0x3f
and r10, rdi
rol r9w, 8
mov eax, dword [rsi + r10]
cmp bx, r9w
jne 0x6058aa
bswap eax
mov ebx, 1
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rax, rdi
mov rcx, r10
call fcn.00465b60
mov rcx, r10
call fcn.00465b20
mov rcx, rdi
call fcn.00465b60
mov rcx, rdi
mov rdx, r9
call fcn.00465b20
lea rax, [0x00667a40]
lea rbx, [0x0072dd60]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov word [rsp + 0x10], bx
call fcn.00463440
mov rax, qword [rsp + 8]
movzx ebx, word [rsp + 0x10]
jmp fcn.00605880

Function at 0x6059e0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x605b26
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
cmp byte [rax], 0
nop dword [rax + rax]
je 0x605b12
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
xor ecx, ecx
jmp 0x605a26
mov rcx, qword [rsp + 0x10]
inc rcx
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
mov rdx, qword [rax + 0x20]
mov rsi, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
movabs rax, 0xaaaaaaaaaaaaaaab
mov r9, rdx
imul rdi
add rdi, rdx
sar rdi, 2
cmp rcx, rdi
jge 0x605ade
lea rax, [rcx + rcx*2]
lea rdi, [rax + 2]
add rdi, rax
nop dword [rax]
cmp r9, rdi
jb 0x605b07
mov r10, rax
shl rax, 1
cmp rdi, rax
jb 0x605aff
mov rdx, r9
sub r9, rax
mov r11, r9
neg r9
sar r9, 0x3f
and rax, r9
lea r9, [r10 + 6]
add r9, r10
movzx eax, word [rsi + rax]
cmp rdx, r9
jb 0x605af7
nop dword [rax + rax]
cmp r9, rdi
jb 0x605aec
mov qword [rsp + 0x10], rcx
mov rcx, qword [rbx]
lea r8, [r11 - 2]
neg r8
sar r8, 0x3f
and rdi, r8
rol ax, 8
mov esi, dword [rsi + rdi]
bswap esi
mov rdx, rbx
mov ebx, esi
call rcx
test rax, rax
je 0x605a14
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov rax, rdi
mov rcx, r9
call fcn.00465b60
mov rcx, r9
call fcn.00465b20
mov rcx, rdi
call fcn.00465b60
mov rcx, rdi
mov rdx, r9
call fcn.00465b20
lea rax, [0x00667a40]
lea rbx, [0x0072dd60]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.006059e0
Function at 0x60cfa0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x118]
cmp r12, qword [r14 + 0x10]
jbe 0x60d1c7
sub rsp, 0x198
mov qword [rsp + 0x190], rbp
lea rbp, [rsp + 0x190]
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], rcx
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c8], r8
mov rdx, qword [rax]
test rdx, rdx
jne 0x60d19c
mov rdx, qword [rax + 8]
nop dword [rax]
test rdx, rdx
jne 0x60d177
call fcn.006096e0
test rbx, rbx
jne 0x60d15d
mov qword [rsp + 0xb8], rax
nop
call fcn.005a40e0
lea rdi, [rsp + 0xe0]
mov rsi, rsp
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004660a6
mov rbp, qword [rbp]
mov rax, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xf0]
cmp rbx, 2
jne 0x60d074
cmp word [rax], 0x3268
je 0x60d0f4
movups xmmword [rsp + 0xc0], xmm15
movups xmmword [rsp + 0xd0], xmm15
call fcn.0040b080
lea rcx, [0x00667a40]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rcx
lea rcx, [0x0072ddb0]
mov qword [rsp + 0xd8], rcx
lea rax, [0x006c7b13]
mov ebx, 0x2b
lea rcx, [rsp + 0xc0]
mov edi, 2
mov rsi, rdi
call fcn.004f0a80
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
cmp byte [rsp + 0xf8], 0
je 0x60d121
lea rax, [0x007319f8]
mov rbx, qword [rsp + 0xb8]
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x2c
lea rcx, [0x006c8080]
mov qword [rax], rcx
xor ebx, ebx
lea rcx, [0x0072e7e0]
mov rdi, rax
xor eax, eax
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
xor eax, eax
mov rdi, rcx
mov rcx, rbx
xor ebx, ebx
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
mov r11, qword [rdx]
mov rax, rdi
mov rbx, rsi
mov rcx, r8
mov rdi, r9
mov rsi, r10
call r11
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
mov r11, qword [rdx]
mov rax, rbx
mov rbx, rcx
mov rcx, rdi
mov rdi, rsi
mov rsi, r8
mov r8, r9
mov r9, r10
call r11
mov rbp, qword [rsp + 0x190]
add rsp, 0x198
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
nop dword [rax]
jmp fcn.0060cfa0
Function at 0x60e020
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60e16f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov r13, 0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x2f], 0
mov rdx, qword [rax]
cmp qword [rdx + 0x48], 0
jne 0x60e064
movabs rdx, 0x37e11d600
jmp 0x60e068
mov rdx, qword [rdx + 0x48]
mov rbx, qword [0x008c3278]
lea rax, [0x007307e8]
mov rcx, rdx
call fcn.00542c60
mov qword [rsp + 0x50], rcx
mov byte [rsp + 0x2f], 1
nop
nop
cmp byte [0x009185f0], 0
je 0x60e0c0
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
nop
lea rax, [0x006c59ca]
mov ebx, 0x25
xor ecx, ecx
xor edi, edi
mov rsi, rdi
call fcn.005cbb40
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x68]
call fcn.00619400
test rax, rax
je 0x60e122
movups xmmword [rsp + 0x40], xmm15
je 0x60e0e1
mov rax, qword [rax + 8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rbx
nop
cmp byte [0x009185f0], 0
je 0x60e114
nop
lea rax, [0x006c71c2]
mov ebx, 0x29
lea rcx, [rsp + 0x40]
mov edi, 1
mov rsi, rdi
call fcn.005cbb40
mov rax, qword [rsp + 0x68]
call fcn.0060ef80
nop
jmp 0x60e146
nop
nop
cmp byte [0x009185f0], 0
je 0x60e146
nop
lea rax, [0x006c59a5]
mov ebx, 0x25
xor ecx, ecx
xor edi, edi
mov rsi, rdi
call fcn.005cbb40
mov byte [rsp + 0x2f], 0
mov rdx, qword [rsp + 0x50]
mov rax, qword [rdx]
call rax
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.0060e020
Function at 0x60e2e0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x60e50d
sub rsp, 0xb0
mov qword [rsp + 0xa8], rbp
lea rbp, [rsp + 0xa8]
mov r13, 0
mov qword [rsp + 0xa0], r13
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
mov byte [rsp + 0x1b], 0
mov rcx, rax
xor eax, eax
mov edx, 1
lock cmpxchg dword [rcx + 0x58], edx
sete dl
lea rax, [rcx + 0x58]
test dl, dl
jne 0x60e363
mov qword [rsp + 0x28], rax
call fcn.00470b60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
movups xmmword [rsp + 0x30], xmm15
lea rdx, [0x0060e540]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x30]
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0x1b], 1
mov rdx, qword [rcx + 0x90]
cmp dword [0x00918a90], 0
jne 0x60e3a5
mov qword [rcx + 0x90], rbx
jmp 0x60e3b1
lea rdi, [rcx + 0x90]
call fcn.00465740
cmp qword [rcx + 0xa0], 0
jne 0x60e423
cmp byte [rbx], 0
nop
je 0x60e4e4
mov qword [rsp + 0x20], rdx
mov rdx, qword [rbx + 0x18]
mov rcx, qword [rbx + 0x20]
xor eax, eax
mov rbx, rdx
call fcn.0044e8e0
mov rdi, qword [rsp + 0xb8]
mov qword [rdi + 0xa0], rbx
cmp dword [0x00918a90], 0
jne 0x60e3fe
mov qword [rdi + 0x98], rax
jmp 0x60e413
lea rdx, [rdi + 0x98]
mov rcx, rdi
mov rdi, rdx
call fcn.00465600
mov rdi, rcx
mov rcx, rdi
mov rdx, qword [rsp + 0x20]
mov rbx, qword [rsp + 0xc0]
test rdx, rdx
je 0x60e439
mov edx, dword [rdx + 0x10]
test edx, edx
je 0x60e439
mov rsi, qword [rcx + 0x90]
mov dword [rsi + 0x10], edx
mov edx, dword [rbx + 0xc]
mov dword [rsp + 0x1c], edx
mov rbx, qword [rcx + 0xa8]
lea rdi, [rsp + 0x40]
lea rdi, [rdi - 0x20]
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d8b
mov rbp, qword [rbp]
lea rax, [0x00675360]
lea rcx, [rsp + 0x40]
nop
call fcn.0040f9e0
jmp 0x60e491
lea rax, [rsp + 0x40]
call fcn.0040fc60
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x60e4c2
mov rdx, qword [rsp + 0x48]
mov rax, qword [rdx]
mov edx, dword [rsp + 0x1c]
cmp dword [rsi], edx
jbe 0x60e487
mov rbx, qword [0x008b65b0]
mov rcx, qword [0x008b65b8]
call fcn.0060b920
nop
jmp 0x60e487
mov byte [rsp + 0x1b], 0
mov rdx, qword [rsp + 0xa0]
mov rax, qword [rdx]
call rax
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
lea rax, [0x00667a40]
lea rbx, [0x0072dd60]
call fcn.00436260
nop
call fcn.00435700
mov rbp, qword [rsp + 0xa8]
add rsp, 0xb0
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0060e2e0
Function at 0x60ec00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60ed6f
sub rsp, 0x70
mov qword [rsp + 0x68], rbp
lea rbp, [rsp + 0x68]
mov qword [rsp + 0x78], rax
mov rcx, rax
xor eax, eax
mov edx, 1
lock cmpxchg dword [rcx + 0x58], edx
sete dl
lea rax, [rcx + 0x58]
test dl, dl
jne 0x60ec4f
mov qword [rsp + 0x30], rax
nop dword [rax]
call fcn.00470b60
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rcx + 0xa8]
test rdx, rdx
je 0x60ec62
mov rdx, qword [rdx]
nop
jmp 0x60ec64
xor edx, edx
test rdx, rdx
jg 0x60ec73
cmp qword [rcx + 0xb0], 0
jle 0x60ec93
nop
mov ebx, 0xffffffff
lock xadd dword [rcx + 0x58], ebx
dec ebx
test ebx, ebx
je 0x60ec89
call fcn.00470e60
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov byte [rcx + 0x8a], 1
mov edx, dword [rcx + 0xb8]
nop
mov ebx, 0xffffffff
lock xadd dword [rcx + 0x58], ebx
dec ebx
test ebx, ebx
je 0x60ecc3
mov dword [rsp + 0x2c], edx
call fcn.00470e60
mov rcx, qword [rsp + 0x78]
mov edx, dword [rsp + 0x2c]
cmp byte [0x009185f0], 0
je 0x60ed5a
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
movups xmmword [rsp + 0x58], xmm15
lea rbx, [0x006b0d40]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
movzx ebx, byte [rcx + 0x2c]
lea rsi, [0x00665c40]
mov qword [rsp + 0x48], rsi
lea rsi, [0x00896b80]
lea rbx, [rsi + rbx*8]
mov qword [rsp + 0x50], rbx
lea eax, [rdx - 2]
call fcn.0040af80
lea rcx, [0x00667b80]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rax
nop
cmp byte [0x009185f0], 0
je 0x60ed55
nop
lea rax, [0x006cc6b3]
mov ebx, 0x45
lea rcx, [rsp + 0x38]
mov edi, 3
mov rsi, rdi
call fcn.005cbb40
mov rcx, qword [rsp + 0x78]
mov rax, rcx
nop dword [rax]
call fcn.0060ea20
mov rbp, qword [rsp + 0x68]
add rsp, 0x70
ret
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.0060ec00
Function at 0x60f340
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x60f5f4
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov rdx, qword [rax + 0x38]
lea rbx, [0x006b9283]
mov ecx, 7
mov rax, rdx
call fcn.005d6fc0
test rbx, rbx
jne 0x60f491
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x006a6a60]
lea rcx, [0x006bc442]
mov edi, 0x11
call fcn.00412a60
mov rbx, qword [rax + 8]
mov rdx, qword [rax]
mov rcx, qword [rax + 0x10]
test rbx, rbx
je 0x60f429
cmp rbx, 1
jg 0x60f3e2
mov rsi, qword [rdx]
mov r8, qword [rdx + 8]
nop dword [rax]
test r8, r8
je 0x60f429
cmp r8, 7
jne 0x60f3e2
cmp dword [rsi], 0x6e756863
jne 0x60f3e2
cmp word [rsi + 4], 0x656b
jne 0x60f3e2
cmp byte [rsi + 6], 0x64
nop
je 0x60f429
movups xmmword [rsp + 0x28], xmm15
mov rax, rdx
call fcn.0040b120
lea rdx, [0x00665100]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006ca1fb]
mov ebx, 0x33
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004f0a80
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x006a6a60]
lea rcx, [0x006b9d5b]
mov edi, 0xa
call fcn.00412a60
mov rbx, qword [rax + 8]
mov rdx, qword [rax]
mov rcx, qword [rax + 0x10]
test rbx, rbx
je 0x60f504
nop
cmp rbx, 1
jg 0x60f512
mov rsi, qword [rdx + 8]
mov rdi, qword [rdx]
test rsi, rsi
je 0x60f504
nop word [rax + rax]
cmp rsi, 5
jne 0x60f599
xor eax, eax
jmp 0x60f561
movups xmmword [rsp + 0x28], xmm15
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rdx + 0x38]
lea rax, [0x006a6a60]
lea rcx, [0x006b9283]
mov edi, 7
call fcn.00412a60
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
mov rax, rdx
call fcn.0040b120
lea rdx, [0x00665100]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006c71eb]
mov ebx, 0x29
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004f0a80
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
movups xmmword [rsp + 0x28], xmm15
mov rax, rdx
nop dword [rax + rax]
call fcn.0040b120
lea rdx, [0x00665100]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rax
lea rax, [0x006c80ac]
mov ebx, 0x2c
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004f0a80
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
inc rax
cmp rax, 5
jge 0x60f504
movzx r8d, byte [rax + rdi]
lea r9d, [r8 - 0x41]
cmp r9b, 0x19
ja 0x60f57a
add r8d, 0x20
lea r9, [0x006b8c38]
movzx r9d, byte [r9 + rax]
lea r10d, [r9 - 0x41]
cmp r10b, 0x19
ja 0x60f594
add r9d, 0x20
cmp r8b, r9b
je 0x60f55e
nop dword [rax]
cmp rsi, 0xa
jne 0x60f512
xor eax, eax
jmp 0x60f5b1
inc rax
cmp rax, 0xa
jge 0x60f504
movzx esi, byte [rax + rdi]
lea r8d, [rsi - 0x41]
cmp r8b, 0x19
ja 0x60f5cc
add esi, 0x20
lea r8, [0x006ba003]
movzx r8d, byte [r8 + rax]
lea r9d, [r8 - 0x41]
nop dword [rax]
cmp r9b, 0x19
ja 0x60f5ea
add r8d, 0x20
cmp sil, r8b
je 0x60f5ae
jmp 0x60f512
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
jmp fcn.0060f340
Function at 0x6140e0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x614337
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x60], rbx
mov qword [rax + 0x158], 0
mov qword [rax + 0x168], 0
mov byte [rax + 0x170], 0
lea rdi, [rsp + 0x68]
lea rdi, [rdi - 0x20]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d8b
mov rbp, qword [rbp]
lea rcx, [rsp + 0x68]
lea rax, [0x006a6a60]
nop
call fcn.0040f9e0
xor eax, eax
jmp 0x614180
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x68]
call fcn.0040fc60
mov rcx, qword [rsp + 0x38]
mov rax, rcx
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x6141a5
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rcx]
mov rcx, qword [rcx + 8]
mov rdx, qword [rdx + 8]
xor esi, esi
nop dword [rax]
jmp 0x61432d
mov rdx, qword [rsp + 0xd8]
cmp qword [rdx + 0x110], rax
jb 0x6141eb
lea rdi, [rsp + 0x68]
lea rdi, [rdi - 0x20]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d8b
mov rbp, qword [rbp]
lea rax, [0x006a6a60]
mov rbx, qword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.0040f9e0
jmp 0x61421a
mov rdi, qword [0x008b6690]
mov rsi, qword [0x008b6698]
xor eax, eax
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
lea rax, [rsp + 0x68]
call fcn.0040fc60
mov rdx, qword [rsp + 0x68]
nop
test rdx, rdx
je 0x614265
mov rcx, qword [rsp + 0x70]
mov rax, qword [rdx]
mov rsi, qword [rcx]
mov qword [rsp + 0x48], rsi
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x28], rcx
mov rbx, qword [rdx + 8]
call fcn.006099a0
test cl, cl
je 0x614210
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x48]
xor ecx, ecx
nop dword [rax]
jmp 0x614304
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rdx + 0x158]
mov r8, qword [rdx + 0x150]
mov r9, qword [rdx + 0x160]
mov rax, qword [rdx + 0x168]
cmp rax, rcx
ja 0x6142be
sub r9, rax
sub rcx, rax
mov rdx, r9
neg r9
sar r9, 0x3f
and rax, r9
add rax, r8
mov rbx, rcx
mov rcx, rdx
xor edi, edi
xor esi, esi
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
nop
call fcn.00465b60
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x58], rdx
mov rdi, qword [rdx]
mov rsi, qword [rdx + 8]
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0xd8]
call fcn.00614360
mov rdx, qword [rsp + 0x58]
add rdx, 0x10
mov rcx, qword [rsp + 0x40]
inc rcx
mov rax, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x28]
cmp rcx, r8
jl 0x6142c5
jmp 0x614210
mov rdi, rbx
mov rdi, qword [rdi + 8]
add rbx, 0x10
inc rsi
lea r8, [rdx + 0x20]
add rdi, r8
mov edi, edi
add rax, rdi
cmp rsi, rcx
jl 0x614313
jmp 0x614169
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.006140e0