joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5bb360
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5bb56f
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5bb3a9
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0x18
jne 0x5bb55b
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5bb442
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5bb442
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5bb4a1
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5bb489
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005bb5a0]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5bb54d
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5bb548
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5bb52d
mov qword [rdi], rax
jmp 0x5bb532
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5bb553
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005bb360
Function at 0x5bbfe0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5bc1ef
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5bc029
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0xd
jne 0x5bc1db
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5bc0c2
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5bc0c2
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5bc121
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5bc109
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005bc220]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5bc1cd
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5bc1c8
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5bc1ad
mov qword [rdi], rax
jmp 0x5bc1b2
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5bc1d3
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005bbfe0
Function at 0x5be6e0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5be8ef
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5be729
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0xb
jne 0x5be8db
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5be7c2
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5be7c2
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5be821
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5be809
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005be920]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5be8cd
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5be8c8
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5be8ad
mov qword [rdi], rax
jmp 0x5be8b2
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5be8d3
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005be6e0
Function at 0x5c0440
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5c064f
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5c0489
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0x16
jne 0x5c063b
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5c0522
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5c0522
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5c0581
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5c0569
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005c0680]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5c062d
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5c0628
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5c060d
mov qword [rdi], rax
jmp 0x5c0612
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5c0633
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005c0440
Function at 0x5c0d40
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5c0f4f
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5c0d89
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0x14
jne 0x5c0f3b
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5c0e22
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5c0e22
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5c0e81
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5c0e69
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005c0f80]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5c0f2d
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5c0f28
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5c0f0d
mov qword [rdi], rax
jmp 0x5c0f12
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5c0f33
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005c0d40
Function at 0x5c1cc0
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x5c1ecf
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov rdx, qword [rax]
mov rbx, qword [rax + 8]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je 0x5c1d09
mov rax, rdx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
movups xmmword [rsp + 0x48], xmm15
lea rdi, [rsp + 0x50]
lea rdi, [rdi - 0x30]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00465d90
mov rbp, qword [rbp]
nop
cmp qword [rsp + 0x78], 0
mov byte [rsp + 0x2f], 0
mov byte [rsp + 0x2f], 0xf
jne 0x5c1ebb
mov qword [rsp + 0xb0], rax
cmp byte [rsp + 0x70], 0
je 0x5c1da2
mov rdx, qword [rsp + 0x60]
inc rdx
cmp qword [rsp + 0x68], rdx
jge 0x5c1da2
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x36
lea rcx, [0x006ca9f3]
mov qword [rax], rcx
lea rcx, [0x0072e7e0]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0xb0]
nop
jmp 0x5c1e01
mov rbx, qword [rsp + 0x60]
lea rdx, [rbx + 1]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x58]
cmp rcx, rdx
jae 0x5c1de9
mov qword [rsp + 0x30], rbx
mov rax, r8
mov rbx, rdx
mov edi, 1
lea rsi, [0x00667c00]
call fcn.0044a700
mov r8, rax
mov rdx, rbx
mov rax, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0x30]
movzx esi, byte [rsp + 0x2f]
mov byte [r8 + rbx], sil
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x58], r8
movups xmmword [rsp + 0x38], xmm15
lea rdx, [0x005c1f00]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x40], rax
mov ebx, 3
xor ecx, ecx
lea rdi, [rsp + 0x38]
lea rax, [rsp + 0x48]
call fcn.0052d2c0
mov rdx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
test rdx, rdx
jne 0x5c1ead
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x68]
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x5c1ea8
sub rcx, rax
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + 8], rcx
sub rsi, rax
mov qword [rdi + 0x10], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
and rax, rsi
add rax, rdx
cmp dword [0x00918a90], 0
jne 0x5c1e8d
mov qword [rdi], rax
jmp 0x5c1e92
call fcn.00465600
mov rbx, rcx
mov rcx, r8
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
call fcn.00465b60
je 0x5c1eb3
mov rdx, qword [rdx + 8]
mov rax, rdx
call fcn.00436260
lea rax, [0x00667a40]
lea rbx, [0x0072dac0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
call fcn.00463440
mov rax, qword [rsp + 8]
nop
jmp fcn.005c1cc0
Function at 0x5c4340
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c443c
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x90], r9
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], rsi
test r9, r9
jne 0x5c43a3
mov rcx, qword [rax + 0x18]
mov rax, rcx
call fcn.004a8be0
mov r9, rax
mov r10, rbx
mov rdx, qword [r9 + 0x30]
mov rax, r10
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
call rdx
mov rdx, qword [rsp + 0x60]
mov rsi, qword [rdx + 0x18]
lea r8, [rsi - 1]
cmp r8, 0x13
jae 0x5c4428
mov r12, qword [0x008b6ce8]
mov r13, qword [0x008b6ce0]
cmp r12, rsi
jbe 0x5c441d
movzx r12d, byte [r13 + rsi]
mov qword [rsp], r12
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov r9, rax
mov r10, rbx
mov r11, rcx
mov rax, rdx
mov rbx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call fcn.005c3880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov rax, rsi
mov rcx, r12
call fcn.00465ac0
lea rax, [0x00667a40]
lea rbx, [0x0072dab0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
jmp fcn.005c4340
Function at 0x5c44a0
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c45b1
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x80], rsi
test rbx, rbx
jne 0x5c4566
mov rdx, qword [rax + 0x18]
lea rdi, [rdx - 1]
nop word [rax + rax]
nop
cmp rdi, 0x13
jae 0x5c459d
mov rcx, qword [0x008b6ce8]
mov rdi, qword [0x008b6ce0]
nop dword [rax + rax]
cmp rcx, rdx
jbe 0x5c4595
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x90], r9
movzx ecx, byte [rdi + rdx]
mov qword [rsp + 0x38], rcx
lea rax, [0x00667c00]
mov rbx, rcx
call fcn.0044a620
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov r9, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x38]
mov rdi, rcx
mov rbx, rax
mov rax, qword [rsp + 0x60]
movups xmmword [rsp + 0x40], xmm15
lea rdx, [0x005c84c0]
mov qword [rsp + 0x40], rdx
mov rdx, qword [rax + 0x18]
mov qword [rsp + 0x48], rdx
lea rax, [rsp + 0x40]
call fcn.00597220
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov rax, rdx
call fcn.00465ac0
lea rax, [0x00667a40]
lea rbx, [0x0072dab0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
nop dword [rax]
jmp fcn.005c44a0

Function at 0x5c4620
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c46ae
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x68], rbx
mov rdx, qword [rax + 0x18]
lea r12, [rdx - 1]
cmp r12, 0x13
jae 0x5c469a
mov r12, qword [0x008b6ce8]
mov r13, qword [0x008b6ce0]
cmp r12, rdx
jbe 0x5c468f
movzx edx, byte [r13 + rdx]
mov qword [rsp], rdx
lea rsi, [0x006ba61b]
mov r8d, 0xb
xor r9d, r9d
xor r10d, r10d
mov r11, r10
nop
call fcn.005c3880
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov rax, rdx
mov rcx, r12
call fcn.00465ac0
lea rax, [0x00667a40]
lea rbx, [0x0072dab0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
nop dword [rax + rax]
jmp fcn.005c4620
Function at 0x5c4800
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c495d
sub rsp, 0x78
mov qword [rsp + 0x70], rbp
lea rbp, [rsp + 0x70]
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], r8
mov rdx, qword [rax + 0x18]
lea r12, [rdx - 1]
nop dword [rax + rax]
cmp r12, 0x13
jae 0x5c4949
mov r12, qword [0x008b6ce8]
mov r13, qword [0x008b6ce0]
nop dword [rax + rax]
cmp r12, rdx
jbe 0x5c493e
mov qword [rsp + 0x80], rax
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], r8
movzx edx, byte [r13 + rdx]
mov qword [rsp], rdx
lea rsi, [0x006b96d9]
mov r8d, 8
xor r9d, r9d
xor r10d, r10d
mov r11, r10
call fcn.005c3880
movups xmmword [rsp + 0x58], xmm15
lea rdx, [0x005c84c0]
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x80]
mov rdx, qword [rdx + 0x18]
mov qword [rsp + 0x60], rdx
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
lea rax, [rsp + 0x58]
call fcn.00588bc0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x68], rbx
mov rdx, qword [rsp + 0xa0]
mov rdx, qword [rdx + 0x30]
xor ecx, ecx
mov rdi, rcx
mov rax, qword [rsp + 0xa8]
xor ebx, ebx
call rdx
mov rdx, qword [rsp + 0x50]
mov r12, qword [rdx + 0x38]
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x68]
call r12
mov rdx, qword [rsp + 0x50]
mov rdx, qword [rdx + 0x30]
mov rax, qword [rsp + 0x68]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
call rdx
mov rbp, qword [rsp + 0x70]
add rsp, 0x78
ret
mov rax, rdx
mov rcx, r12
call fcn.00465ac0
lea rax, [0x00667a40]
lea rbx, [0x0072dab0]
call fcn.00436260
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
nop dword [rax + rax]
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.005c4800
Function at 0x5c4c80
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c4d7b
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
cmp cx, 0x18
ja 0x5c4ce6
cmp cx, 0x17
jne 0x5c4cc7
nop
mov rdx, qword [0x008b4ec8]
lea rcx, [0x00730a18]
mov rsi, rdx
mov edx, 1
jmp 0x5c4d2a
cmp cx, 0x18
jne 0x5c4d24
nop
mov rdx, qword [0x008b4ed0]
lea rcx, [0x00730a58]
mov rsi, rdx
mov edx, 1
jmp 0x5c4d2a
cmp cx, 0x19
jne 0x5c4d05
nop
mov rdx, qword [0x008b4ed8]
lea rcx, [0x00730a98]
mov rsi, rdx
mov edx, 1
jmp 0x5c4d2a
cmp cx, 0x1d
jne 0x5c4d24
nop
mov rdx, qword [0x008b4ee0]
lea rcx, [0x00730ad8]
mov rsi, rdx
mov edx, 1
jmp 0x5c4d2a
xor ecx, ecx
xor edx, edx
xor esi, esi
test dl, dl
je 0x5c4d47
mov rdx, qword [rcx + 0x18]
mov rcx, rbx
mov rbx, rax
mov rax, rsi
call rdx
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x0067fd60]
call fcn.0040da20
mov qword [rax + 8], 0x26
lea rcx, [0x006c629a]
mov qword [rax], rcx
lea rbx, [0x0072e7e0]
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov word [rsp + 0x18], cx
call fcn.00463440
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, word [rsp + 0x18]
nop
jmp fcn.005c4c80

Function at 0x5c6420
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x5c6577
add rsp, 0xffffffffffffff80
mov qword [rsp + 0x78], rbp
lea rbp, [rsp + 0x78]
movzx edx, word [rsp + 0xe0]
cmp dx, 0x303
jae 0x5c644b
cmp al, 0xe4
jne 0x5c6487
cmp qword [rsp + 0xc8], 0
je 0x5c6563
cmp al, 0xe4
je 0x5c6465
cmp dx, 0x303
jmp 0x5c648c
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xd8]
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
cmp dx, 0x303
jae 0x5c6502
cmp al, 0xe3
jne 0x5c64b9
mov rdx, qword [rsp + 0x98]
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rdx + 0x30]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
call rdx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
lea rdi, [rsp + 8]
lea rsi, [rsp + 0x90]
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.004660ec
mov rbp, qword [rbp]
call fcn.005c6120
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
mov rax, rbx
call fcn.004a8be0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbx
mov rcx, qword [rax + 0x38]
mov rdx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd8]
mov rax, rbx
mov rbx, rdx
mov r9, rcx
mov rcx, rsi
call r9
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rsp + 0x70]
xor ebx, ebx
xor edi, edi
mov rdx, rcx
mov rcx, rdi
call rdx
mov rbp, qword [rsp + 0x78]
sub rsp, 0xffffffffffffff80
ret
lea rax, [0x00667a40]
lea rbx, [0x0072da40]
call fcn.00436260
nop
mov byte [rsp + 0x70], al
mov qword [rsp + 0x78], rbx
call fcn.00463440
movzx eax, byte [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
jmp fcn.005c6420