Function at 0x4df520
Capabilities:
Access peb ldr_data
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4df8a6
sub rsp, 0x98
mov qword [rsp + 0x90], rbp
lea rbp, [rsp + 0x90]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xf8], r9
mov rdx, qword [rsp + 0xc0]
cmp rsi, rdx
jne 0x4df88e
cmp r10, rdx
jne 0x4df88e
mov r10, qword [rsp + 0xa8]
cmp r10, rdx
jne 0x4df88e
mov qword [rsp + 0xf0], r8
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0xf8], r9
mov rdi, rdx
shl rdi, 1
call fcn.004de9a0
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x70], rcx
call fcn.004de920
xor eax, eax
xor ecx, ecx
jmp 0x4df5db
lea rdx, [rdi + 1]
mov rcx, rax
mov rax, rdx
mov rbx, qword [rsp + 0xc0]
cmp rbx, rax
jle 0x4df76c
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rcx + rax*8]
mov rsi, qword [rsp + 0x70]
sub rsi, rax
mov qword [rsp + 0x68], rsi
mov r8, rsi
neg rsi
sar rsi, 0x3f
shl rax, 3
and rax, rsi
mov rsi, qword [rsp + 0x88]
add rax, rsi
mov qword [rsp + 0x80], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r8
mov r10, qword [rsp + 0xe0]
mov qword [rsp + 0x18], r10
mov r11, qword [rsp + 0xe8]
mov qword [rsp + 0x20], r11
mov r12, qword [rsp + 0xf0]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x30], rdx
call fcn.004e7da0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x58], rax
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rdx + rcx*8]
mov rsi, qword [rsp + 0x80]
mov qword [rsp], rsi
mov rsi, qword [rsp + 0xc0]
mov qword [rsp + 8], rsi
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rsp + 0xa0]
mov qword [rsp + 0x18], rdi
mov r8, qword [rsp + 0xa8]
mov qword [rsp + 0x20], r8
mov r9, qword [rsp + 0xb0]
mov qword [rsp + 0x28], r9
mov r10, qword [rsp + 0xb8]
imul rbx, r10
mov qword [rsp + 0x30], rbx
nop dword [rax]
call fcn.004e7da0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
add rdx, rcx
lea rbx, [rdx + rax]
mov rsi, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0x50]
lea r8, [rdi + rsi]
mov r9, qword [rsp + 0x88]
mov qword [r9 + r8*8], rbx
cmp rcx, rdx
ja 0x4df756
cmp rax, rbx
jbe 0x4df765
mov eax, 1
nop dword [rax + rax]
jmp 0x4df5d1
xor eax, eax
jmp 0x4df5d1
test rcx, rcx
jne 0x4df7d7
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
cmp rbx, rdx
mov rcx, rbx
cmovg rcx, rdx
mov rdx, qword [rsp + 0x70]
mov rsi, rbx
sub rbx, rdx
mov rdi, rsi
shl rsi, 3
sar rbx, 0x3f
and rbx, rsi
mov rax, qword [rsp + 0x88]
lea rsi, [rax + rbx]
test rbx, rbx
je 0x4df878
shl rcx, 3
mov rbx, rsi
call fcn.00461f80
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xc0]
jmp 0x4df878
mov rax, qword [rsp + 0x88]
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x10], rcx
sub rcx, rbx
mov rsi, rcx
neg rcx
mov rdi, rbx
shl rbx, 3
sar rcx, 0x3f
and rcx, rbx
add rcx, rax
mov qword [rsp + 0x18], rcx
mov rcx, qword [rsp + 0x78]
sub rcx, rdi
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rsi
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x40], rcx
call fcn.004e7a20
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0xc0]
mov rbx, rdi
mov rcx, rdx
mov rbp, qword [rsp + 0x90]
add rsp, 0x98
ret
lea rax, [0x005fe120]
lea rbx, [0x00684aa0]
nop dword [rax]
call fcn.00436780
nop
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], r11
call fcn.0045f280
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x68]
mov r11, qword [rsp + 0x70]
jmp fcn.004df520