joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5ae740
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5ae94f
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
movzx eax, byte [0x00850a83]
cmp al, 1
jbe 0x5ae77d
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
jne 0x5ae786
call fcn.00429df0
ud2
mov byte [0x00850a83], 1
call fcn.0045f790
call fcn.00469820
call fcn.004bf4a0
call fcn.0045de10
lea rax, [0x006b07a2]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0045e8c0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x00834c50], rcx
mov ecx, dword [0x00850df0]
test ecx, ecx
jne 0x5ae93e
mov qword [0x00834c58], rax
lea rax, [0x006ad8d3]
mov qword [rsp], rax
mov qword [rsp + 8], 0xe
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834c60], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5ae92a
mov qword [0x00834c68], rcx
lea rax, [0x006b1245]
mov qword [rsp], rax
mov qword [rsp + 8], 0x17
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834c70], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5ae916
mov qword [0x00834c78], rcx
lea rax, [0x006b56fd]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834c40], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5ae905
mov qword [0x00834c48], rcx
call fcn.005ad480
mov eax, dword [0x00850df0]
mov rcx, qword [rsp]
test eax, eax
jne 0x5ae8f4
mov qword [0x008340e0], rcx
call fcn.005ae370
mov eax, dword [0x00850df0]
mov rcx, qword [rsp]
test eax, eax
jne 0x5ae8e3
mov qword [0x008340e8], rcx
call fcn.005ad550
mov byte [0x00850a83], 2
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdi, [0x008340e8]
mov rax, rcx
call fcn.004553b0
jmp 0x5ae8cd
lea rdi, [0x008340e0]
mov rax, rcx
call fcn.004553b0
jmp 0x5ae8b3
lea rdi, [0x00834c48]
mov rax, rcx
call fcn.004553b0
jmp 0x5ae899
lea rdi, [0x00834c78]
mov rax, rcx
call fcn.004553b0
jmp 0x5ae85e
lea rdi, [0x00834c68]
mov rax, rcx
call fcn.004553b0
jmp 0x5ae81f
lea rdi, [0x00834c58]
call fcn.004553b0
jmp 0x5ae7e0
call fcn.00452950
jmp fcn.005ae740
Function at 0x5aef80
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x5af176
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
movzx eax, byte [0x00850a88]
cmp al, 1
jbe 0x5aefbd
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
jne 0x5aefc6
call fcn.00429df0
ud2
mov byte [0x00850a88], 1
call fcn.00469820
call fcn.0045f790
lea rax, [0x006b590a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x23
call fcn.0045e8c0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [0x00834ca0], rcx
mov ecx, dword [0x00850df0]
test ecx, ecx
jne 0x5af165
mov qword [0x00834ca8], rax
lea rax, [0x006b3def]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834cb0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5af151
mov qword [0x00834cb8], rcx
lea rax, [0x006b8056]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2d
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834c90], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5af13d
mov qword [0x00834c98], rcx
lea rax, [0x006b7a47]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834cc0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5af12c
mov qword [0x00834cc8], rcx
lea rax, [0x006b495b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834cd0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x5af11b
mov qword [0x00834cd8], rcx
mov byte [0x00850a88], 2
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdi, [0x00834cd8]
mov rax, rcx
call fcn.004553b0
jmp 0x5af10a
lea rdi, [0x00834cc8]
mov rax, rcx
call fcn.004553b0
jmp 0x5af0cf
lea rdi, [0x00834c98]
mov rax, rcx
call fcn.004553b0
jmp 0x5af094
lea rdi, [0x00834cb8]
mov rax, rcx
call fcn.004553b0
jmp 0x5af055
lea rdi, [0x00834ca8]
call fcn.004553b0
jmp 0x5af016
call fcn.00452950
jmp fcn.005aef80
Function at 0x603f20
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x60412d
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
movzx eax, byte [0x00850a4d]
cmp al, 1
jbe 0x603f5d
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
jne 0x603f66
call fcn.00429df0
ud2
mov byte [0x00850a4d], 1
call fcn.004bf4a0
call fcn.005476a0
call fcn.005f6990
call fcn.005506b0
call fcn.004c1420
call fcn.004c7d30
call fcn.0045de10
call fcn.004a7ec0
lea rax, [0x006b7448]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2a
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834a80], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x604119
mov qword [0x00834a88], rcx
lea rax, [0x006b7b20]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2c
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834a90], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x604105
mov qword [0x00834a98], rcx
lea rax, [0x006b7716]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2b
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834aa0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6040f1
mov qword [0x00834aa8], rcx
mov qword [rsp], 0x270f
mov qword [rsp + 8], 0xc
mov qword [rsp + 0x10], 0x1f
mov qword [rsp + 0x18], 0x17
mov qword [rsp + 0x20], 0x3b
mov qword [rsp + 0x28], 0x3b
mov qword [rsp + 0x30], 0
mov rax, qword [0x0082a708]
mov qword [rsp + 0x38], rax
call fcn.004a5cb0
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov qword [0x00834ee0], rax
mov qword [0x00834ee8], rcx
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6040e0
mov qword [0x00834ef0], rdx
mov byte [0x00850a4d], 2
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
lea rdi, [0x00834ef0]
mov rax, rdx
call fcn.004553b0
jmp 0x6040cf
lea rdi, [0x00834aa8]
mov rax, rcx
call fcn.004553b0
jmp 0x604052
lea rdi, [0x00834a98]
mov rax, rcx
call fcn.004553b0
jmp 0x604013
lea rdi, [0x00834a88]
mov rax, rcx
call fcn.004553b0
jmp 0x603fd4
call fcn.00452950
jmp fcn.00603f20
Function at 0x605590
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x60584a
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
movzx eax, byte [0x00850a4f]
cmp al, 1
jbe 0x6055cd
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
jne 0x6055d6
call fcn.00429df0
ud2
mov byte [0x00850a4f], 1
call fcn.0059ed70
call fcn.00469820
call fcn.004bf4a0
call fcn.0045f790
call fcn.005731d0
call fcn.005476a0
call fcn.005f6990
call fcn.005506b0
call fcn.004c7d30
call fcn.004a7ec0
call fcn.005be300
call fcn.005a1250
call fcn.0045de10
call fcn.0052f2c0
call fcn.00599a50
call fcn.004070e0
mov rax, qword [rsp]
mov qword [rsp + 0x28], rax
lea rcx, [0x0065cd80]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
lea rdx, [0x006ab358]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 4
call fcn.0040b630
mov rax, qword [rsp + 0x20]
mov byte [rax], 1
lea rax, [0x0065cd80]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 8], rcx
lea rdx, [0x006ae68b]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], 0x11
call fcn.0040b630
mov rax, qword [rsp + 0x20]
mov byte [rax], 1
lea rax, [0x0065cd80]
mov qword [rsp], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 8], rax
lea rcx, [0x006abbc5]
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], 7
call fcn.0040b630
mov rax, qword [rsp + 0x20]
mov byte [rax], 1
mov eax, dword [0x00850df0]
test eax, eax
jne 0x605834
mov rax, qword [rsp + 0x28]
mov qword [0x00833ab0], rax
lea rax, [0x006afdd0]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834ae0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x605820
mov qword [0x00834ae8], rcx
xorps xmm0, xmm0
movups xmmword [rsp], xmm0
call fcn.004c1a90
mov rax, qword [rsp + 0x10]
lea rcx, [0x006f79a0]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.00572d90
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834ac0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x60580c
mov qword [0x00834ac8], rcx
mov rcx, qword [0x00834af0]
mov rax, qword [0x00834af8]
mov qword [0x00834ab0], rcx
mov ecx, dword [0x00850df0]
test ecx, ecx
jne 0x6057fe
mov qword [0x00834ab8], rax
lea rax, [0x006b526a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x22
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834ad0], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6057ed
mov qword [0x00834ad8], rcx
mov byte [0x00850a4f], 2
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lea rdi, [0x00834ad8]
mov rax, rcx
call fcn.004553b0
jmp 0x6057dc
lea rdi, [0x00834ab8]
call fcn.004553b0
jmp 0x6057a1
lea rdi, [0x00834ac8]
mov rax, rcx
call fcn.004553b0
jmp 0x60577b
lea rdi, [0x00834ae8]
mov rax, rcx
call fcn.004553b0
jmp 0x60572f
lea rdi, [0x00833ab0]
mov rax, qword [rsp + 0x28]
call fcn.004553b0
jmp 0x6056f0
call fcn.00452950
jmp fcn.00605590
Function at 0x612120
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x6122ef
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
movzx eax, byte [0x00850a1f]
cmp al, 1
jbe 0x61215d
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
jne 0x612166
call fcn.00429df0
ud2
mov byte [0x00850a1f], 1
call fcn.0052f2c0
call fcn.004871b0
call fcn.004bf4a0
call fcn.00474990
call fcn.004a7ec0
lea rax, [0x006b95a1]
mov qword [rsp], rax
mov qword [rsp + 8], 0x34
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834360], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6122db
mov qword [0x00834368], rcx
lea rax, [0x006b0708]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834340], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6122c7
mov qword [0x00834348], rcx
lea rax, [0x006b515a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x22
call fcn.0045e8c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [0x00834350], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6122b3
mov qword [0x00834358], rcx
mov rax, qword [0x006f5750]
lea rcx, [0x0063d160]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call fcn.0047b5c0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rax, qword [rax + 0x48]
mov qword [rsp], rcx
call rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x10]
mov qword [0x00834370], rax
mov eax, dword [0x00850df0]
test eax, eax
jne 0x6122a2
mov qword [0x00834378], rcx
mov byte [0x00850a1f], 2
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rdi, [0x00834378]
mov rax, rcx
call fcn.004553b0
jmp 0x612291
lea rdi, [0x00834358]
mov rax, rcx
call fcn.004553b0
jmp 0x61223f
lea rdi, [0x00834348]
mov rax, rcx
call fcn.004553b0
jmp 0x612204
lea rdi, [0x00834368]
mov rax, rcx
call fcn.004553b0
jmp 0x6121c5
call fcn.00452950
jmp fcn.00612120
Function at 0x612440
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x612688
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x80]
cmp rax, 0x24
jg 0x6125d5
cmp rax, 0x20
je 0x612587
cmp rax, 0x24
je 0x612539
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [0x00646dc0]
mov qword [rsp], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 8], rax
call fcn.0040e1a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rcx
lea rax, [0x006b439d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
lea rax, [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004b7470
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.006126a0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.00612a10
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
cmp rax, 0x26
je 0x61263a
cmp rax, 0x29
jne 0x61262f
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.00612c50
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
cmp rax, 0x2d
je 0x6125e1
jmp 0x61248e
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.00612ac0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.00452950
jmp fcn.00612440
Function at 0x612ac0
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x612c3c
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x80]
test rax, rax
jbe 0x612c35
mov rcx, qword [rsp + 0x78]
movzx edx, byte [rcx]
cmp dl, 0x7b
je 0x612bb0
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [0x00646dc0]
mov qword [rsp], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 8], rax
call fcn.0040e1a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x006b3e0d]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1e
lea rax, [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004b7470
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
lea rdx, [rax - 1]
cmp rdx, rax
jae 0x612c35
movzx ebx, byte [rax + rcx - 1]
cmp bl, 0x7d
jne 0x612b0a
cmp rdx, 1
jb 0x612c2e
mov rdx, qword [rsp + 0x70]
mov qword [rsp], rdx
mov rdx, qword [rsp + 0x88]
dec rdx
mov rbx, rdx
neg rdx
sar rdx, 0x3f
and rdx, 1
add rcx, rdx
mov qword [rsp + 8], rcx
add rax, 0xfffffffffffffffe
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rbx
call fcn.00612e20
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.00429bc0
ud2
call fcn.00429b50
ud2
call fcn.00452950
jmp fcn.00612ac0
Function at 0x612c50
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x612e0d
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x88]
cmp rax, 9
jb 0x612e06
mov rcx, qword [rsp + 0x78]
mov qword [rsp], rcx
mov qword [rsp + 8], 9
mov qword [rsp + 0x10], rax
mov rdx, qword [0x0082b610]
mov rbx, qword [0x0082b608]
mov rsi, qword [str.urn:uuid:]
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rdx
call fcn.004551c0
movzx eax, byte [rsp + 0x30]
test al, al
je 0x612d4c
mov rax, qword [rsp + 0x80]
cmp rax, 9
jb 0x612dff
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x88]
add rcx, 0xfffffffffffffff7
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and rcx, 9
mov rbx, qword [rsp + 0x78]
add rcx, rbx
mov qword [rsp + 8], rcx
add rax, 0xfffffffffffffff7
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rdx
call fcn.00612e20
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [0x00646dc0]
mov qword [rsp], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 8], rax
call fcn.0040e1a0
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
lea rax, [0x006b437e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
lea rax, [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004b7470
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.00429bc0
ud2
call fcn.00429bc0
ud2
call fcn.00452950
jmp fcn.00612c50
Function at 0x612e20
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x612fa7
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov rax, qword [rsp + 0x80]
cmp rax, 0x20
je 0x612f59
cmp rax, 0x24
jne 0x612eae
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.006126a0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
lea rax, [0x00646dc0]
mov qword [rsp], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 8], rax
call fcn.0040e1a0
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rcx
lea rax, [0x006b499b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
lea rax, [rsp + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 1
mov qword [rsp + 0x20], 1
call fcn.004b7470
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rcx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rcx, qword [rsp + 0x70]
mov qword [rsp], rcx
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x18], rax
call fcn.00612a10
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x98], rax
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
call fcn.00452950
jmp fcn.00612e20
Function at 0x614230
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0x38]
cmp rax, qword [rcx + 0x10]
jbe 0x6144c5
sub rsp, 0xb8
mov qword [rsp + 0xb0], rbp
lea rbp, [rsp + 0xb0]
movzx eax, byte [0x00850a2c]
cmp al, 1
jbe 0x614281
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
jne 0x61428a
call fcn.00429df0
ud2
mov byte [0x00850a2c], 1
call fcn.00469820
call fcn.004f14f0
call fcn.004bf4a0
call fcn.004f0710
call fcn.00506450
call fcn.004e88f0
call fcn.0048b9e0
call fcn.004e6800
call fcn.0045f790
call fcn.005476a0
call fcn.004b38f0
call fcn.0045de10
call fcn.004a7ec0
call fcn.00612120
call fcn.00613050
mov rax, qword [rsp + 8]
mov rcx, qword [rsp]
mov qword [0x00834490], rcx
mov ecx, dword [0x00850df0]
test ecx, ecx
jne 0x6144b4
mov qword [0x00834498], rax
call fcn.004b1ee0
mov rax, qword [rsp]
mov dword [0x00850a90], eax
call fcn.004b1ef0
mov rax, qword [rsp]
mov dword [0x00850a8c], eax
lea rax, [0x006b59df]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.00612300
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x50], xmm0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rsp], xmm0
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rax
call fcn.00613f80
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [0x00850d60], xmm0
lea rax, [0x006b5a03]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.00612300
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x30], xmm0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp], xmm0
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rcx
call fcn.00613f80
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [0x00850d80], xmm0
lea rax, [0x006b5a27]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.00612300
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x90], xmm0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x90]
movups xmmword [rsp + 0xa0], xmm0
movups xmm0, xmmword [rsp + 0xa0]
movups xmmword [rsp], xmm0
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rcx
call fcn.00613f80
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [0x00850d70], xmm0
lea rax, [0x006b5a4b]
mov qword [rsp], rax
mov qword [rsp + 8], 0x24
call fcn.00612300
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x70], xmm0
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x80], xmm0
movups xmm0, xmmword [rsp + 0x80]
movups xmmword [rsp], xmm0
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rcx
call fcn.00613f80
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [0x00850d90], xmm0
mov byte [0x00850a2c], 2
mov rbp, qword [rsp + 0xb0]
add rsp, 0xb8
ret
lea rdi, [0x00834498]
call fcn.004553b0
jmp 0x614301
call fcn.00452950
jmp fcn.00614230