joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5bbd80
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x20]
cmp rax, qword [rcx + 0x10]
jbe 0x5bc016
sub rsp, 0xa0
mov qword [rsp + 0x98], rbp
lea rbp, [rsp + 0x98]
mov rax, qword [rsp + 0xc0]
nop
test rax, rax
jle 0x5bbe3b
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0xb8]
xor esi, esi
nop
jmp 0x5bbe0f
add rcx, 0x10
mov r11, qword [rcx]
cmp qword [rcx + 8], rdi
je 0x5bbf7a
inc r10
cmp r10, rdx
jl 0x5bbde2
lea rcx, [rsi + 1]
nop
cmp rax, rcx
jle 0x5bbe3b
add rbx, 0x10
mov rsi, rcx
mov rcx, r9
mov rdi, qword [rbx + 8]
mov r8, qword [rbx]
test rdx, rdx
jle 0x5bc00e
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x38], rdi
mov r9, rcx
xor r10d, r10d
jmp 0x5bbde6
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x88], xmm0
mov rax, qword [rsp + 0xa8]
mov qword [rsp], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 8], rax
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x10], rax
call fcn.0040b6a0
mov rax, qword [rsp + 0x18]
lea rcx, [0x00611440]
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x10], rax
call fcn.0040b6a0
mov rax, qword [rsp + 0x18]
lea rcx, [0x00611440]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rax, [0x00669285]
mov qword [rsp], rax
mov qword [rsp + 8], 0x47
lea rax, [rsp + 0x68]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 3
mov qword [rsp + 0x20], 3
nop
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0xe8], xmm0
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x100], rcx
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x58], rcx
mov qword [rsp], r8
mov qword [rsp + 8], r11
mov qword [rsp + 0x10], rdi
call fcn.00402a40
cmp byte [rsp + 0x18], 0
jne 0x5bbfd9
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x38]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0xd0]
mov r10, qword [rsp + 0x40]
jmp 0x5bbdf3
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xf0], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
mov rbp, qword [rsp + 0x98]
add rsp, 0xa0
ret
mov r9, rcx
jmp 0x5bbdfb
call fcn.0046abe0
nop dword [rax + rax]
jmp fcn.005bbd80
Function at 0x5bdce0
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5bddf4
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x38], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax + 0x78]
mov qword [rsp], rcx
lea rcx, [rsp + 0x38]
mov qword [rsp + 8], rcx
call fcn.004067c0
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
cmp byte [rsp + 0x10], 0
je 0x5bddd0
xor edx, edx
xor ebx, ebx
test rdx, rdx
jne 0x5bddbc
test rcx, rcx
jbe 0x5bddec
cmp byte [rax], 0x15
nop
je 0x5bddaa
lea rax, [0x00665819]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
xorps xmm0, xmm0
movups xmmword [rsp + 0x10], xmm0
mov qword [rsp + 0x20], 0
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], rbx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov rsi, qword [rsp + 0x60]
mov rdx, qword [rsi + 0x80]
mov rbx, qword [rsi + 0x88]
xor ecx, ecx
xor eax, eax
jmp 0x5bdd4e
xor eax, eax
call fcn.0046cdc0
nop
call fcn.0046abe0
jmp fcn.005bdce0
Function at 0x5c5160
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5c5286
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov rax, qword [rsp + 0x50]
cmp qword [rax + 0x10], 0
jne 0x5c526b
xor ecx, ecx
test rcx, rcx
jg 0x5c51f0
lea rax, [0x00663295]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
xorps xmm0, xmm0
movups xmmword [rsp + 0x10], xmm0
mov qword [rsp + 0x20], 0
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x60], 0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rcx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx + 8]
mov qword [rsp], rax
mov qword [rsp + 8], rdx
call fcn.0051bc80
cmp qword [rsp + 0x10], 0
jge 0x5c519f
lea rax, [0x0062df20]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x48]
mov rcx, qword [rcx + 8]
mov qword [rsp], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rcx
call fcn.0051c000
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp byte [rax], 0
je 0x5c527c
mov rcx, 0xffffffffffffffff
jmp 0x5c519a
mov ecx, 1
jmp 0x5c519a
call fcn.0046abe0
jmp fcn.005c5160
Function at 0x5c7a20
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5c7c15
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rbx, qword [rsp + 0x78]
cmp rbx, 4
jge 0x5c7b85
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
test al, al
je 0x5c7b52
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x80], rbx
mov qword [rsp], 0
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
call fcn.00452060
mov rax, qword [rsp + 0x70]
mov qword [rsp], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x10], rax
call fcn.005c7100
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x58]
cmp qword [rsp + 0x40], 0
jle 0x5c7b28
lea rax, [0x00625ba0]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rax + 8], 0x20
lea rcx, [0x006638ee]
mov qword [rax], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
lea rcx, [0x006a4760]
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rbx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, qword [0x007cce00]
mov rcx, qword [0x007cce08]
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
nop
mov rsi, qword [rsp + 0x80]
lea rdx, [rsi - 4]
mov rdi, rdx
neg rdx
sar rdx, 0x3f
and rdx, 4
mov r8, qword [rsp + 0x70]
lea r9, [r8 + rdx]
lea rcx, [rbx - 4]
mov eax, dword [r8]
bswap eax
cmp ecx, eax
jae 0x5c7bc7
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esi, esi
xor edi, edi
jmp 0x5c7a63
cmp rdi, rax
jb 0x5c7c0a
cmp rcx, rax
jb 0x5c7c05
sub rsi, rax
sub rbx, rax
lea r8, [rsi - 4]
mov r10, r8
neg r8
sar r8, 0x3f
and r8, rax
lea rsi, [r8 + r9]
lea rcx, [rbx - 4]
mov edx, eax
mov rbx, r10
mov rdi, r9
mov eax, 1
nop dword [rax]
jmp 0x5c7a63
call fcn.0046ce80
mov ecx, eax
mov rdx, rdi
call fcn.0046ce40
nop
call fcn.0046abe0
jmp fcn.005c7a20
Function at 0x5c8320
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5c8428
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 8]
lea rdx, [rcx - 1]
nop dword [rax]
test rdx, rdx
jl 0x5c8421
mov rax, qword [rax + rcx*8 - 8]
bsr rax, rax
mov rcx, 0xffffffffffffffff
cmove rax, rcx
shl rdx, 6
lea rax, [rax + rdx]
lea rax, [rax + 1]
cmp rax, 0x400
je 0x5c840e
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp], rax
nop dword [rax]
call fcn.0040b580
mov rax, qword [rsp + 8]
lea rcx, [0x00613700]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x0066390e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
lea rax, [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
nop
ret
xor eax, eax
jmp 0x5c8389
call fcn.0046abe0
jmp fcn.005c8320
Function at 0x5c9320
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5c9406
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov rcx, qword [rcx + 0x30]
mov qword [rsp], rax
call rcx
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x28]
cmp rax, 0x100
jne 0x5c93c4
lea rax, [0x0065b0be]
mov qword [rsp], 0
lea rcx, [0x0065bc6c]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0xb
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], 8
call fcn.00451e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
cmp rax, 0x180
jne 0x5c93d5
lea rax, [0x0065b0c6]
jmp 0x5c9376
cmp rax, 0x209
jne 0x5c93e6
lea rax, [0x0065b0ce]
jmp 0x5c9376
lea rax, [0x00613e40]
mov qword [rsp], rax
lea rax, [0x006a13d0]
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.00438920
nop
call fcn.0046abe0
jmp fcn.005c9320
Function at 0x5c9440
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5c9626
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
lea rax, [0x00629620]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x60]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x10], rcx
lea rcx, [0x0060ec00]
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rax
call fcn.005cf8a0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp qword [rsp + 0x28], 0
jne 0x5c95f0
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov rdx, qword [rax]
mov rbx, qword [rax + 0x10]
nop dword [rax + rax]
cmp rcx, 0x20
je 0x5c9586
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp], rcx
call fcn.0040b580
mov rax, qword [rsp + 8]
lea rcx, [0x00613700]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
lea rax, [0x0066575b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
lea rax, [rsp + 0x40]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], 0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp], rdx
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rbx
call fcn.0040b6a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx + 0x18]
mov rbx, qword [rcx + 0x20]
mov rcx, qword [rcx + 0x28]
lea rsi, [0x006a7058]
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x98], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], 0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
call fcn.0046abe0
jmp fcn.005c9440
Function at 0x5c97c0
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 8]
cmp rax, qword [rcx + 0x10]
jbe 0x5c9a87
sub rsp, 0x88
mov qword [rsp + 0x80], rbp
lea rbp, [rsp + 0x80]
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rax + 8]
mov rdx, qword [rax]
cmp rcx, 0xb
je 0x5c98da
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
lea rax, [0x0065bda0]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
nop dword [rax + rax]
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
lea rax, [0x0066588b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
lea rax, [rsp + 0x60]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 2
mov qword [rsp + 0x20], 2
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rcx
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov qword [rsp], rdx
lea rax, [0x0065bda0]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rcx
call fcn.00402a40
cmp byte [rsp + 0x18], 0
je 0x5c9a7a
mov rax, qword [rsp + 0x98]
cmp rax, 0x20
jne 0x5c99ef
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rcx + 0x10]
mov rbx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x20]
mov rsi, qword [rsp + 0x90]
mov qword [rsp], rsi
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
call fcn.005a8f40
cmp byte [rsp + 0x48], 0
je 0x5c99a1
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
nop
ret
lea rax, [0x00625ba0]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rax + 8], 0x1d
lea rcx, [0x006627d0]
mov qword [rax], rcx
lea rcx, [0x006a4760]
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xd0], rax
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp], rax
nop dword [rax + rax]
call fcn.0040b580
mov rax, qword [rsp + 8]
lea rcx, [0x00613700]
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rax
lea rax, [0x00666a0c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
lea rax, [rsp + 0x50]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rcx
mov rbp, qword [rsp + 0x80]
add rsp, 0x88
ret
mov rax, qword [rsp + 0xc0]
jmp 0x5c980f
call fcn.0046abe0
jmp fcn.005c97c0
Function at 0x5cb3a0
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5cb5d1
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
lea rax, [0x00633040]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x60]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x10], rcx
lea rcx, [0x0060ebc0]
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rax
call fcn.005cf8a0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp qword [rsp + 0x28], 0
jne 0x5cb59b
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
cmp rcx, 0x20
jne 0x5cb4ff
lea rax, [0x00633720]
mov qword [rsp], rax
call fcn.0040e560
mov rdi, qword [rsp + 8]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rax + 0x20]
mov qword [rdi + 8], rdx
cmp dword [0x00811460], 0
jne 0x5cb4f5
mov qword [rdi], rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov rbx, qword [rax + 0x10]
mov qword [rdi + 0x18], rdx
mov qword [rdi + 0x20], rbx
cmp dword [0x00811460], 0
jne 0x5cb4e1
mov qword [rdi + 0x10], rcx
mov rcx, qword [rax + 0x28]
mov rdx, qword [rax + 0x30]
mov rax, qword [rax + 0x38]
lea rbx, [0x006a6f68]
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0x98], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
lea rdx, [rdi + 0x10]
mov rbx, rdi
mov rdi, rdx
call fcn.0046ca20
mov rdi, rbx
jmp 0x5cb494
call fcn.0046ca20
jmp 0x5cb474
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp], rcx
call fcn.0040b580
mov rax, qword [rsp + 8]
lea rcx, [0x00613700]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rax
lea rax, [0x0066575b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x26
lea rax, [rsp + 0x40]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], 0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], 0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rcx
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
call fcn.0046abe0
jmp fcn.005cb3a0
Function at 0x5cd8a0
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5cdb49
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
lea rax, [0x00643c20]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rsp + 0x70], rax
nop
mov rcx, qword [rsp + 0x88]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 8], rcx
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rcx
lea rcx, [0x0060efc0]
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
call fcn.0058c060
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x40]
test rax, rax
jne 0x5cda8d
nop
test rdx, rdx
jg 0x5cda39
lea rax, [0x0062c620]
mov qword [rsp], rax
call fcn.0040e560
mov rdi, qword [rsp + 8]
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 8]
cmp dword [0x00811460], 0
jne 0x5cda2f
mov qword [rdi], rcx
mov rcx, qword [rax + 0x10]
cmp dword [0x00811460], 0
jne 0x5cda18
mov qword [rdi + 8], rcx
mov rcx, qword [rax + 0x18]
cmp dword [0x00811460], 0
jne 0x5cda04
mov qword [rdi + 0x10], rcx
mov rcx, qword [rax + 0x20]
cmp dword [0x00811460], 0
jne 0x5cd9f0
mov qword [rdi + 0x18], rcx
mov rax, qword [rax + 0x28]
cmp dword [0x00811460], 0
jne 0x5cd9dc
mov qword [rdi + 0x20], rax
mov qword [rsp + 0xa0], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
lea rcx, [rdi + 0x20]
mov rdx, rdi
mov rdi, rcx
call fcn.0046c920
mov rdi, rdx
jmp 0x5cd9bf
lea rdx, [rdi + 0x18]
mov rbx, rdi
mov rdi, rdx
call fcn.0046ca20
mov rdi, rbx
jmp 0x5cd9ae
lea rdx, [rdi + 0x10]
mov rbx, rdi
mov rdi, rdx
call fcn.0046ca20
mov rdi, rbx
jmp 0x5cd99d
lea rdx, [rdi + 8]
mov rbx, rdi
mov rdi, rdx
call fcn.0046ca20
mov rdi, rbx
jmp 0x5cd98c
call fcn.0046ca20
jmp 0x5cd977
lea rax, [0x00625ba0]
mov qword [rsp], rax
call fcn.0040e560
mov rax, qword [rsp + 8]
mov qword [rax + 8], 0x1a
lea rcx, [0x006615b8]
mov qword [rax], rcx
mov qword [rsp + 0xa0], 0
lea rcx, [0x006a4760]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rax
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, qword [rax + 0x18]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [rsp], 0
lea rdx, [0x00662dc2]
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], 0x1e
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rcx
call fcn.00451e60
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x60], rcx
lea rdx, [0x00625ba0]
mov qword [rsp], rdx
call fcn.0040e560
mov rdi, qword [rsp + 8]
mov rax, qword [rsp + 0x60]
mov qword [rdi + 8], rax
cmp dword [0x00811460], 0
jne 0x5cdb3d
mov rax, qword [rsp + 0x68]
mov qword [rdi], rax
mov qword [rsp + 0xa0], 0
lea rax, [0x006a4760]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rdi
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, qword [rsp + 0x68]
call fcn.0046c920
jmp 0x5cdb10
call fcn.0046abe0
jmp fcn.005cd8a0
Function at 0x5cf620
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0xa8]
nop dword [rax + rax]
cmp rax, qword [rcx + 0x10]
jbe 0x5cf885
sub rsp, 0x128
mov qword [rsp + 0x120], rbp
lea rbp, [rsp + 0x120]
mov rax, qword [rsp + 0x150]
test rax, rax
jne 0x5cf83d
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x148], rcx
mov rdx, qword [rsp + 0x130]
mov rbx, qword [rdx + 0x50]
mov rsi, qword [rsp + 0x138]
mov qword [rsp], rsi
mov rdi, qword [rsp + 0x140]
mov qword [rsp + 8], rdi
call rbx
mov rax, qword [rsp + 0x10]
mov qword [rsp + 0xb8], rax
lea rdi, [rsp + 0xc0]
lea rsi, [rsp + 0x18]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0046d3ac
mov rbp, qword [rbp]
mov rax, qword [rsp + 0x130]
mov rax, qword [rax + 0xb8]
mov rcx, qword [rsp + 0x138]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x78], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0xa8], xmm0
mov rdx, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 8], rax
nop dword [rax]
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x148]
mov qword [rsp], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 8], rax
call fcn.0040b600
mov rax, qword [rsp + 0x10]
lea rcx, [0x00613e40]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rax
lea rax, [0x00667462]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2e
lea rax, [rsp + 0x88]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 3
mov qword [rsp + 0x20], 3
call fcn.004d6e60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rcx
mov rbp, qword [rsp + 0x120]
add rsp, 0x128
ret
mov qword [rsp], 0
lea rcx, [0x0065a2e6]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 2
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rax
call fcn.00451e60
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
jmp 0x5cf67a
call fcn.0046abe0
jmp fcn.005cf620