joyce8/EMBER2024-capa huggingface dataset:
Function at 0x58c160
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x10]
cmp r12, qword [r14 + 0x10]
jbe 0x58c388
sub rsp, 0x90
mov qword [rsp + 0x88], rbp
lea rbp, [rsp + 0x88]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rcx
lea rax, [rsp + 0x98]
mov rbx, rax
mov ecx, 0x30
call fcn.0053bf20
test al, al
je 0x58c1bf
xor eax, eax
xor ecx, ecx
xor edx, edx
jmp 0x58c20a
lea rax, [0x006d8800]
call fcn.0040daa0
mov qword [rax + 8], 0x22
lea rcx, [0x00728509]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x007f1c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov rdx, rbx
mov rsi, rax
mov rax, rcx
mov rcx, rsi
cmp qword [rsp + 0xa0], 0
je 0x58c368
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x70], 0
movups xmmword [rsp + 0x78], xmm15
lea rax, [rsp + 0x98]
lea rbx, [rsp + 0x70]
mov ecx, 0x30
call fcn.0053bf20
test al, al
je 0x58c329
mov qword [rsp + 0x58], 0
movups xmmword [rsp + 0x60], xmm15
lea rax, [rsp + 0x70]
lea rbx, [rsp + 0x58]
call fcn.0053b7e0
test al, al
je 0x58c2ea
mov rbx, qword [rsp + 0x40]
inc rbx
mov rcx, qword [rsp + 0x48]
cmp rcx, rbx
jb 0x58c291
mov rax, qword [rsp + 0x50]
jmp 0x58c2a7
mov rax, qword [rsp + 0x50]
mov edi, 1
lea rsi, [0x006d3300]
call fcn.0044aa20
lea rdx, [rbx + rbx*2]
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x68]
mov qword [rax + rdx*8 - 0x10], r9
mov qword [rax + rdx*8 - 8], r10
lea rdi, [rax + rdx*8]
lea rdi, [rdi - 0x18]
cmp dword [0x00a04ed0], 0
jne 0x58c2e0
mov qword [rax + rdx*8 - 0x18], r8
jmp 0x58c1fe
call fcn.00465ba0
jmp 0x58c1fe
lea rax, [0x006d8800]
call fcn.0040daa0
mov qword [rax + 8], 0x22
lea rcx, [0x00728509]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x007f1c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
lea rax, [0x006d8800]
call fcn.0040daa0
mov qword [rax + 8], 0x22
lea rcx, [0x00728509]
mov qword [rax], rcx
xor ebx, ebx
mov rcx, rbx
lea rdi, [0x007f1c00]
mov rsi, rax
xor eax, eax
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov rbx, rdx
xor edi, edi
xor esi, esi
mov rdx, rax
mov rax, rcx
mov rcx, rdx
mov rbp, qword [rsp + 0x88]
add rsp, 0x90
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.0058c160
Function at 0x5923a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x59253f
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rdi
nop dword [rax + rax]
test rbx, rbx
je 0x592529
mov rdx, qword [rdi + 0x278]
mov r8, qword [rdi + 0x270]
nop word [rax + rax]
test rdx, rdx
jne 0x5924af
mov rdx, qword [rdi + 0x1d0]
cmp qword [rdi + 0x1d8], 0
je 0x592429
mov rsi, qword [rdx + 8]
mov rdx, qword [rdx]
test rbx, rbx
jmp 0x5924b8
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x28], rbx
mov rdx, qword [rdi + 0xb8]
test rdx, rdx
jne 0x59244d
mov eax, 5
lea rdx, [0x00719d84]
jmp 0x59247c
mov rax, qword [rdx + 8]
mov rbx, qword [rdx + 0x10]
mov rcx, qword [rdx + 0x18]
movzx edi, byte [rdx]
mov esi, 0xa
call fcn.0051d1c0
mov rcx, rbx
mov rbx, rax
lea rax, [rsp + 0x30]
call fcn.0044ec00
mov rdx, rax
mov rax, rbx
lea rbx, [0x0071a613]
mov ecx, 7
mov rdi, rdx
mov rsi, rax
xor eax, eax
call fcn.0044e860
mov rdx, qword [rsp + 0x28]
test rdx, rdx
mov rcx, qword [rsp + 0x50]
mov rsi, rbx
mov rdx, rax
mov rbx, qword [rsp + 0x28]
jmp 0x5924b8
test rbx, rbx
mov rsi, rdx
mov rdx, r8
movups xmmword [rsp + 0x58], xmm15
movups xmmword [rsp + 0x68], xmm15
je 0x5924ca
mov rbx, qword [rbx + 8]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rcx
mov rax, rdx
mov rbx, rsi
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x007319d0]
mov ebx, 0x53
lea rcx, [rsp + 0x58]
mov edi, 2
mov rsi, rdi
call fcn.004c51a0
mov ecx, 0x2d
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x0072cb27]
call fcn.0044e860
jmp 0x592535
mov ebx, 0x2d
lea rax, [0x0072cb27]
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.005923a0
Function at 0x592ea0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593006
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x98], r8
mov rax, rsi
mov rbx, r8
lea rcx, [0x007197dc]
mov edi, 1
nop dword [rax + rax]
call fcn.0050f500
test rax, rax
jl 0x592fdd
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
nop
call fcn.00592640
test sil, sil
je 0x592f81
mov rdx, qword [rsp + 0x30]
cmp rbx, rdx
je 0x592f38
xor eax, eax
jmp 0x592f73
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdi
mov rbx, rax
mov rcx, rdx
mov rax, qword [rsp + 0x48]
call fcn.00402d80
test al, al
jne 0x592f5a
xor eax, eax
jmp 0x592f73
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
call fcn.0050f260
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
movups xmmword [rsp + 0x50], xmm15
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
lea rax, [0x0072db6d]
mov ebx, 0x30
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x98]
call fcn.005932a0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.00592ea0
Function at 0x593060
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x593266
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov qword [rsp + 0x60], rbx
mov rdx, qword [rax + 0x30]
mov rsi, qword [rax + 0x28]
test rdx, rdx
je 0x593210
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rax
mov rax, rsi
mov rbx, rdx
lea rcx, [0x007eeb98]
mov edi, 1
call fcn.0050f500
nop
test rax, rax
jge 0x5930c9
xor eax, eax
jmp 0x5930ef
mov rdx, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
lea rax, [rsi + rdx]
lea rax, [rax - 1]
lea rbx, [0x007eed30]
mov ecx, 1
call fcn.00402d80
xor eax, 1
test al, al
jne 0x5930ff
mov rbx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
jmp 0x59311a
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + 0x28]
mov rbx, qword [rcx + 0x30]
call fcn.0056c040
test rsi, rsi
jne 0x5931fe
nop word [rax + rax]
cmp rbx, 1
jl 0x59312e
cmp byte [rax], 0x5b
sete dl
jmp 0x593130
xor edx, edx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rax
test dl, dl
je 0x593174
nop
cmp rbx, 1
jge 0x59314a
xor ecx, ecx
jmp 0x593176
lea rdx, [rax + rbx]
lea rdx, [rdx - 1]
mov ecx, 1
mov rax, rdx
lea rbx, [0x007eed30]
call fcn.00402d80
mov rbx, qword [rsp + 0x28]
mov ecx, eax
mov rax, qword [rsp + 0x30]
jmp 0x593176
xor ecx, ecx
test cl, cl
jne 0x593185
call fcn.0056ab40
nop
test rax, rax
je 0x5931db
mov rax, qword [rsp + 0x58]
call fcn.0057f420
movups xmmword [rsp + 0x38], xmm15
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x0072ee94]
mov ebx, 0x36
lea rcx, [rsp + 0x38]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
call fcn.005932a0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
xor eax, eax
mov rbx, rsi
mov rcx, r8
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
call fcn.0057f420
movups xmmword [rsp + 0x38], xmm15
nop dword [rax + rax]
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x007302cb]
mov ebx, 0x3e
lea rcx, [rsp + 0x38]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.00593060
Function at 0x5932a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5934cc
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x98], rcx
test rdi, rdi
je 0x593447
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0xa0], rdi
call fcn.00592ba0
test dil, dil
je 0x5933eb
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x98]
movzx edx, byte [rcx]
mov byte [rsp + 0x2f], dl
cmp dl, 0x2e
jne 0x59333a
mov rdi, qword [rsp + 0xa0]
dec rdi
mov rsi, rdi
neg rdi
sar rdi, 0x3f
and edi, 1
add rcx, rdi
jmp 0x593342
mov rsi, qword [rsp + 0xa0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x48], rsi
mov rax, rcx
mov rbx, rsi
call fcn.00592ba0
test dil, dil
je 0x593395
mov rdx, qword [rsp + 0x38]
cmp rdx, rbx
jl 0x593385
movzx esi, byte [rsp + 0x2f]
cmp sil, 0x2e
jne 0x593376
cmp rdx, rbx
je 0x593385
mov qword [rsp + 0x40], rbx
xor ecx, ecx
nop dword [rax]
jmp 0x593470
xor eax, eax
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
movups xmmword [rsp + 0x68], xmm15
mov rax, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x48]
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x0072c5b6]
mov ebx, 0x2c
lea rcx, [rsp + 0x68]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
movups xmmword [rsp + 0x68], xmm15
mov rax, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x90]
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
lea rax, [0x0072c5b6]
mov ebx, 0x2c
lea rcx, [rsp + 0x68]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, 1
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, qword [rsp + 0x58]
add rax, 0x10
mov rcx, qword [rsp + 0x30]
inc rcx
mov rbx, qword [rsp + 0x40]
cmp rbx, rcx
jle 0x5934b9
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x58], rax
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
shl rcx, 4
mov r8, qword [rsp + 0x50]
mov r9, qword [r8 + rcx]
mov rdi, qword [r8 + rcx + 8]
mov rcx, r9
mov rax, rdx
nop
call fcn.0050f260
test al, al
jne 0x59345a
xor eax, eax
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov eax, 1
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.005932a0
Function at 0x597d60
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x597e17
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], rbx
lea rdx, [rax - 1]
cmp rdx, 4
jae 0x597da2
shl rax, 4
lea rdx, [0x009a9000]
mov rsi, qword [rdx + rax + 8]
mov rdx, qword [rdx + rax]
jmp 0x597db3
nop
mov ebx, 0xa
call fcn.00479520
mov rsi, rbx
mov rdx, rax
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
mov rax, rdx
mov rbx, rsi
call fcn.0040b100
lea rcx, [0x006bb4c0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x40], rcx
lea rax, [0x00731b1d]
mov ebx, 0x54
lea rcx, [rsp + 0x28]
mov edi, 2
mov rsi, rdi
call fcn.004c2160
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.00597d60
Function at 0x5a8f00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a90dd
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
cmp ax, 0x501
ja 0x5a8f51
nop
cmp ax, 0x203
ja 0x5a8f37
cmp ax, 0x201
je 0x5a8f6a
cmp ax, 0x203
je 0x5a8f77
jmp 0x5a908f
cmp ax, 0x401
je 0x5a8f6a
nop dword [rax]
cmp ax, 0x403
je 0x5a8f77
cmp ax, 0x501
je 0x5a8f6a
jmp 0x5a908f
cmp ax, 0x601
ja 0x5a8f71
cmp ax, 0x503
je 0x5a8f77
nop dword [rax]
cmp ax, 0x601
jne 0x5a908f
mov ecx, 0xffffffe1
jmp 0x5a8fa0
cmp ax, 0x603
jne 0x5a8f7e
mov ecx, 0xffffffe3
jmp 0x5a8fa0
lea edx, [rax - 0x804]
cmp dx, 2
ja 0x5a8f91
mov ecx, 0xffffffe2
jmp 0x5a8fa0
cmp ax, 0x807
jne 0x5a908f
mov ecx, 0xffffffe4
cmp ax, 0x503
ja 0x5a8fe0
cmp ax, 0x401
ja 0x5a8fc8
cmp ax, 0x201
je 0x5a8fb8
cmp ax, 0x203
jne 0x5a8fc0
mov edx, 3
jmp 0x5a902d
cmp ax, 0x401
je 0x5a8ff8
jmp 0x5a9041
cmp ax, 0x403
je 0x5a8ff8
cmp ax, 0x501
je 0x5a9006
cmp ax, 0x503
je 0x5a9006
jmp 0x5a9041
cmp ax, 0x804
ja 0x5a9000
cmp ax, 0x601
je 0x5a9013
cmp ax, 0x603
je 0x5a9013
cmp ax, 0x804
jne 0x5a9041
mov edx, 5
jmp 0x5a902d
cmp ax, 0x805
jne 0x5a900d
mov edx, 6
jmp 0x5a902d
cmp ax, 0x806
jne 0x5a9020
mov edx, 7
jmp 0x5a902d
cmp ax, 0x807
jne 0x5a9041
mov rdx, qword [0x00a04a88]
mov eax, ecx
mov rbx, rdx
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
nop
ret
movups xmmword [rsp + 0x28], xmm15
call fcn.0040af80
lea rcx, [0x006c3080]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x00728b73]
mov ebx, 0x23
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
movups xmmword [rsp + 0x28], xmm15
call fcn.0040af80
lea rcx, [0x006c3080]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rax
lea rax, [0x00728b73]
mov ebx, 0x23
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov word [rsp + 8], ax
call fcn.00463860
movzx eax, word [rsp + 8]
jmp fcn.005a8f00
Function at 0x5a9100
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a9213
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
test rax, rax
je 0x5a91d1
mov edx, dword [rax + 0x10]
cmp edx, 0x4bcec15d
jne 0x5a9161
lea rdx, [0x006cf260]
nop dword [rax]
cmp rax, rdx
jne 0x5a91d1
mov eax, 0xffffffe1
mov ebx, 8
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp edx, 0x8c7bd38d
jne 0x5a918d
lea rdx, [0x006f9b00]
cmp rax, rdx
jne 0x5a91d1
mov eax, 0xffffffe3
mov ebx, 3
xor ecx, ecx
xor edi, edi
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp edx, 0xc0d9e4a4
jne 0x5a91d1
lea rdx, [0x006c9f00]
nop dword [rax]
cmp rax, rdx
jne 0x5a91d1
lea rax, [0x0072fa35]
mov ebx, 0x39
xor ecx, ecx
xor edi, edi
mov rsi, rdi
call fcn.004c2160
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
movups xmmword [rsp + 0x28], xmm15
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
lea rax, [0x00726a81]
mov ebx, 0x1f
lea rcx, [rsp + 0x28]
mov edi, 1
mov rsi, rdi
call fcn.004c2160
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005a9100
Function at 0x5a9780
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5a9885
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov word [rsp + 0x30], ax
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rcx
call fcn.005a9240
test rbx, rbx
je 0x5a97fd
mov rdx, qword [rsp + 0x48]
nop dword [rax + rax]
test rdx, rdx
jne 0x5a97f4
movzx esi, word [rsp + 0x30]
cmp si, 0x303
jne 0x5a97ed
mov dword [rsp + 0x14], 0
mov dword [rsp + 0x14], 0x2030201
mov edx, 2
lea rcx, [rsp + 0x14]
jmp 0x5a97f9
mov rcx, qword [rsp + 0x40]
jmp 0x5a97f9
mov rcx, qword [rsp + 0x40]
xor esi, esi
jmp 0x5a9820
mov rax, qword [rsp + 0x18]
call fcn.005a98e0
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
inc rsi
nop dword [rax]
cmp rsi, rdx
jge 0x5a982e
movzx edi, word [rcx + rsi*2]
xor r8d, r8d
jmp 0x5a9865
lea rax, [0x006d8800]
call fcn.0040daa0
mov qword [rax + 8], 0x47
lea rcx, [0x0073112e]
mov qword [rax], rcx
lea rbx, [0x007f1c00]
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
inc r8
cmp rbx, r8
jle 0x5a9819
movzx r9d, word [rax + r8*2]
cmp r9w, di
jne 0x5a9862
mov eax, edi
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
mov word [rsp + 8], ax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
nop
call fcn.00463860
movzx eax, word [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
nop
jmp fcn.005a9780
Function at 0x5abbc0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x5abe3c
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
movzx edx, word [rax + 0x30]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rax + 0x20]
mov rsi, qword [rax + 0x28]
mov eax, edx
call fcn.005a9780
test rbx, rbx
jne 0x5abc4e
mov rdx, qword [rsp + 0xa0]
cmp qword [rdx + 8], 0
nop
je 0x5abc3a
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsi]
mov r8, qword [rsi + 8]
mov qword [rsp + 0x48], r8
xor eax, eax
jmp 0x5abc6b
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov rax, rbx
mov rbx, rcx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
add rdi, 0x18
inc rax
cmp rax, r8
jge 0x5abd75
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x68], rdi
mov r9, qword [rdi]
mov rbx, qword [rdi + 8]
mov rcx, qword [rdi + 0x10]
mov r10, qword [rsi + 0x70]
test rax, rax
jne 0x5abc97
test r10, r10
jne 0x5abcc7
mov rax, r9
call fcn.005900c0
nop
test rbx, rbx
jne 0x5abcdf
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x48]
mov r10, rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x50], r10
mov r9, qword [rdx]
mov r11, qword [rdx + 8]
mov qword [rsp + 0x40], r11
xor ecx, ecx
jmp 0x5abdc0
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x58], rcx
movups xmmword [rsp + 0x70], xmm15
movups xmmword [rsp + 0x80], xmm15
mov rax, qword [rsp + 0x28]
nop dword [rax]
call fcn.0040b080
lea rcx, [0x006bac80]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x30]
nop dword [rax + rax]
test rcx, rcx
je 0x5abd2b
mov rbx, qword [rcx + 8]
jmp 0x5abd2e
mov rbx, rcx
mov qword [rsp + 0x80], rbx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x88], rdx
lea rax, [0x0072d80d]
mov ebx, 0x30
lea rcx, [rsp + 0x70]
mov edi, 2
mov rsi, rdi
nop dword [rax]
call fcn.004c2160
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
lea rax, [0x006d8800]
nop dword [rax]
call fcn.0040daa0
mov qword [rax + 8], 0x27
lea rcx, [0x0072a535]
mov qword [rax], rcx
mov rbx, rax
lea rax, [0x007f1c00]
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
add r9, 0x18
inc rcx
nop dword [rax + rax]
cmp rcx, r11
jge 0x5abc64
mov rbx, qword [r9]
mov r12, qword [r10 + 0x68]
mov r13, qword [r10 + 0x60]
cmp qword [r9 + 8], r12
jne 0x5abdb1
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x60], r9
mov rax, r13
mov rcx, r12
call fcn.00402d80
test al, al
jne 0x5abe28
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
jmp 0x5abdb1
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00463860
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.005abbc0
Function at 0x5b3b00
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5b3d57
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
cmp word [rax + 0x40], 0x304
nop
jne 0x5b3d48
mov qword [rsp + 0x70], rax
xor ebx, ebx
xor ecx, ecx
call fcn.005b24e0
test rcx, rcx
jne 0x5b3d38
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rcx + 0x338]
inc rdx
mov qword [rcx + 0x338], rdx
cmp rdx, 0x10
jg 0x5b3c0f
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rbx
test rax, rax
je 0x5b3bbd
mov edx, dword [rax + 0x10]
cmp edx, 0x657fdec6
jne 0x5b3b97
lea rdx, [0x006cfa60]
nop
cmp rax, rdx
jne 0x5b3bbd
mov rax, rcx
call fcn.005b3d80
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
cmp edx, 0x82cd91e9
jne 0x5b3bbd
lea rdx, [0x006cfb60]
cmp rax, rdx
jne 0x5b3bbd
mov rax, rcx
call fcn.005beca0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov ebx, 0xa
call fcn.005b1300
movups xmmword [rsp + 0x50], xmm15
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x58], rcx
lea rax, [0x0072edf4]
mov ebx, 0x35
lea rcx, [rsp + 0x50]
mov edi, 1
mov rsi, rdi
nop dword [rax]
call fcn.004c2160
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov ebx, 0xa
call fcn.005b1300
lea rax, [0x006d8800]
call fcn.0040daa0
mov qword [rsp + 0x38], rax
mov qword [rax + 8], 0x23
lea rcx, [0x00728ac4]
mov qword [rax], rcx
lea rbx, [0x007f1c00]
mov rcx, rax
lea rax, [0x006d9600]
call fcn.0040b3a0
test rax, rax
jne 0x5b3ca3
lea rcx, [0x007f1c00]
mov rdi, qword [rsp + 0x70]
mov qword [rdi + 0x178], rcx
cmp dword [0x00a04ed0], 0
jne 0x5b3c87
mov rcx, qword [rsp + 0x38]
mov qword [rdi + 0x180], rcx
jmp 0x5b3d20
lea rcx, [rdi + 0x180]
mov rax, rdi
mov rdi, rcx
mov rdx, qword [rsp + 0x38]
call fcn.00465b40
mov rdi, rax
jmp 0x5b3d20
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
lea rax, [0x006d8580]
call fcn.0040daa0
mov rcx, qword [rsp + 0x28]
mov qword [rax], rcx
cmp dword [0x00a04ed0], 0
jne 0x5b3cd5
mov rcx, qword [rsp + 0x30]
mov qword [rax + 8], rcx
jmp 0x5b3ce5
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x30]
nop
call fcn.00465b20
lea rcx, [0x007f1ae0]
mov rdi, qword [rsp + 0x70]
mov qword [rdi + 0x178], rcx
cmp dword [0x00a04ed0], 0
nop
jne 0x5b3d0b
mov qword [rdi + 0x180], rax
jmp 0x5b3d20
lea rcx, [rdi + 0x180]
mov rdx, rdi
mov rdi, rcx
call fcn.00465a20
mov rdi, rdx
mov rax, qword [rdi + 0x178]
mov rbx, qword [rdi + 0x180]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, rcx
mov rbx, rdi
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.005b36c0
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.00463860
mov rax, qword [rsp + 8]
jmp fcn.005b3b00