Function at 0x4dd840
Capabilities:
Reference http user-agent string
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x3c]
cmp eax, dword [ecx + 8]
jbe 0x4de2f3
sub esp, 0xbc
mov eax, 0
mov dword [esp + 0xb8], eax
mov byte [esp + 0x27], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x50]
test ecx, ecx
jne 0x4de096
mov byte [esp + 0x26], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
lea ecx, [0x4de470]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], eax
lea ecx, [esp + 0x26]
mov dword [esp + 0x84], ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0xb8], ecx
mov byte [esp + 0x27], 1
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x4dd94b
mov ecx, dword [eax + 0x60]
test ecx, ecx
jne 0x4dd94b
mov ecx, dword [eax + 0xac]
test ecx, ecx
jne 0x4dd94b
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x10
lea ecx, [0x73e47c]
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov edx, dword [esp + 0xc0]
mov dword [edx + 0x60], ecx
mov ebx, dword [0x995310]
test ebx, ebx
je 0x4dd946
call fcn.00468e70
mov dword [edi], eax
mov ebx, dword [edx + 0x64]
mov dword [edi + 4], ebx
mov dword [edx + 0x64], eax
jmp 0x4dd953
lea ecx, [0x7b0bb8]
mov edx, eax
mov eax, dword [edx + 0x60]
test eax, eax
jne 0x4dd964
mov ebx, dword [edx + 0xac]
test ebx, ebx
je 0x4dd9c1
mov ecx, dword [edx + 0xac]
test ecx, ecx
je 0x4dd999
mov eax, dword [edx + 0xb0]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov ecx, dword [edx + 0x64]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov ebx, dword [edx + 0x20]
mov ebp, dword [edx + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
call fcn.004dd560
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x4de069
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc0]
mov dword [edx + 4], eax
mov eax, dword [0x995310]
test eax, eax
je 0x4dda14
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [edx]
mov dword [edi + 4], eax
mov dword [edx], ecx
mov eax, dword [edx + 0x68]
test eax, eax
je 0x4dda70
mov eax, dword [edx + 0x58]
test eax, eax
jne 0x4dda70
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x47
lea ecx, [0x751742]
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [edx + 0x58]
test eax, eax
je 0x4ddaa2
mov ecx, dword [edx + 0x5c]
mov eax, dword [eax + 0x14]
mov dword [esp], ecx
call eax
mov dword [esp], 0
call fcn.00406510
movzx eax, byte [esp + 8]
test al, al
jne 0x4de027
mov edx, dword [esp + 0xc0]
mov eax, dword [edx + 0x44]
mov dword [esp + 0x38], eax
lea ecx, [0x735580]
mov dword [esp], ecx
mov dword [esp + 4], 0
lea ebx, [eax + 3]
mov dword [esp + 0x30], ebx
mov dword [esp + 8], ebx
call fcn.0044e560
mov eax, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0xc0]
mov dword [esp], ecx
call fcn.004dca50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4ddffa
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x38]
cmp eax, 0xfffffffd
je 0x4ddb08
mov eax, dword [esp + 0x70]
mov ebx, dword [esp + 0x30]
jmp 0x4ddb3e
mov eax, dword [esp + 0x70]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
lea eax, [0x735580]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x30], ebx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x4ddb52
mov ecx, dword [esp + 0x44]
jmp 0x4ddb62
call fcn.00468e70
mov ecx, dword [esp + 0x44]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [esp + 0x60], eax
mov dword [eax], ecx
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0x30]
mov ebx, dword [ecx + 0x34]
nop
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.004dd0c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test eax, eax
jne 0x4ddfcd
mov eax, dword [esp + 0x30]
cmp eax, 2
jb 0x4ddba5
mov edx, dword [esp + 0x60]
jmp 0x4ddbe3
mov dword [esp + 0x40], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x735580]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x40]
mov edx, eax
mov eax, ebx
mov dword [esp + 0x30], eax
mov ebx, dword [0x995310]
test ebx, ebx
je 0x4ddbfe
call fcn.00468e70
mov dword [edi], ecx
mov ebx, dword [edx + 4]
mov dword [edi + 4], ebx
mov dword [esp + 0x60], edx
mov dword [edx + 4], ecx
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004dd000
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4ddfa0
mov eax, dword [esp + 0x30]
cmp eax, 3
jb 0x4ddc37
mov edx, dword [esp + 0x60]
jmp 0x4ddc71
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
lea eax, [0x735580]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x48]
mov ebx, dword [0x995310]
test ebx, ebx
je 0x4ddc88
call fcn.00468e70
mov dword [edi], ecx
mov ebx, dword [edx + 8]
mov dword [edi + 4], ebx
mov dword [edx + 8], ecx
mov ecx, dword [esp + 0xc0]
mov ebx, dword [ecx + 0x44]
lea ebp, [ebx + 3]
mov esi, dword [ecx + 0x40]
cmp eax, ebp
jae 0x4ddcd9
mov dword [esp + 0x38], ebx
mov dword [esp + 0x6c], esi
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ebx
lea eax, [0x735580]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov edx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x38]
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x60], edx
lea ecx, [0x735580]
mov dword [esp], ecx
lea ecx, [ebp - 3]
lea edi, [eax - 3]
xchg edi, ebx
neg ebx
xchg edi, ebx
sar edi, 0x1f
and edi, 0xc
add edi, edx
mov dword [esp + 4], edi
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
call fcn.00411c10
mov eax, dword [esp + 0xc0]
mov dword [esp], eax
call fcn.004df600
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0xc]
mov ebx, dword [esp + 8]
test eax, eax
jne 0x4ddf73
mov ebp, dword [esp + 0xc0]
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x4ddd54
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x10]
jmp 0x4ddd80
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov eax, dword [ebp]
mov esi, dword [ebp + 4]
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], eax
mov edi, 1
mov esi, 1
lea eax, [esp + 0x74]
mov dword [esp + 0x28], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x5c], ecx
lea edi, [esp + 0x94]
xor eax, eax
call fcn.004690f7
mov ecx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x98], eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xac], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x60]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], edx
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x9c], ecx
mov ecx, dword [ebp + 0x4c]
mov dword [esp + 0xb4], ecx
mov ecx, dword [ebp]
mov edx, dword [ebp + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x94]
mov dword [esp + 0x14], ecx
call fcn.0049ec70
mov ecx, dword [0x995310]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
test ecx, ecx
jne 0x4dde46
mov eax, dword [esp + 0xc0]
jmp 0x4dde5a
call fcn.00468e70
mov dword [edi], edx
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x50]
mov dword [edi + 4], ecx
mov dword [eax + 0x50], edx
test ebx, ebx
jne 0x4ddf4e
mov byte [esp + 0x26], 1
mov ecx, dword [eax + 0x90]
test ecx, ecx
je 0x4de0d2
lea eax, [0x6ee3c0]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00405010
mov eax, dword [0x995310]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4ddea5
mov eax, dword [esp + 0xc0]
jmp 0x4ddebc
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [esp + 0xc0]
mov edx, dword [eax + 0x98]
mov dword [edi + 4], edx
mov dword [esp + 0x54], ecx
mov dword [eax + 0x98], ecx
lea edx, [0x6ee380]
mov dword [esp], edx
mov dword [esp + 4], 1
call fcn.00405010
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0x90]
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x88], edx
mov dword [esp], eax
lea edx, [esp + 0x88]
mov dword [esp + 4], edx
call fcn.004051e0
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x8c]
mov dword [esp + 0x68], ecx
mov edx, dword [eax + 0x90]
mov dword [esp + 0x38], edx
xor ebx, ebx
jmp 0x4de208
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], esi
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 0x58]
mov eax, dword [eax + 0x5c]
mov ecx, dword [ecx + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], ecx
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
lea ecx, [0x740913]
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xc8], eax
add esp, 0xbc
ret
mov ecx, dword [eax + 0x68]
test ecx, ecx
jne 0x4de0f3
mov ecx, dword [eax + 0x6c]
mov ebx, dword [eax + 0x70]
test ecx, ecx
setne cl
test ebx, ebx
setne bl
or ebx, ecx
test bl, bl
je 0x4de1b7
mov ecx, dword [eax + 0x58]
test ecx, ecx
je 0x4de1b7
mov edx, dword [eax + 0x5c]
mov ecx, dword [ecx + 0x14]
mov dword [esp], edx
call ecx
mov eax, dword [esp + 4]
test eax, eax
je 0x4de1b7
lea eax, [0x6ee400]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00405010
mov eax, dword [0x995310]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4de142
mov eax, dword [esp + 0xc0]
jmp 0x4de159
call fcn.00468e70
mov dword [edi], ecx
mov eax, dword [esp + 0xc0]
mov edx, dword [eax + 0x9c]
mov dword [edi + 4], edx
mov dword [esp + 0x50], ecx
mov dword [eax + 0x9c], ecx
lea edx, [0x707460]
mov dword [esp], edx
call fcn.0040c500
mov eax, dword [esp + 4]
lea ecx, [0x4de300]
mov dword [eax], ecx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x4de194
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0x50]
jmp 0x4de1a9
call fcn.00468e70
mov ecx, dword [esp + 0xc0]
mov dword [edi], ecx
mov edx, dword [esp + 0x50]
mov dword [edi + 4], edx
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
mov dword [esp], eax
call fcn.004448d0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 0
mov byte [esp + 0x27], 0
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
add esp, 0xbc
ret
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov dword [esp], eax
call fcn.004448d0
mov eax, dword [esp + 0x34]
lea ebx, [eax + 1]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x38]
cmp ebx, edx
jge 0x4de2ad
mov dword [esp + 0x34], ebx
mov eax, dword [ecx + ebx*4]
mov dword [esp + 0x58], eax
lea edx, [0x7073a0]
mov dword [esp], edx
call fcn.0040c500
mov eax, dword [esp + 4]
lea ecx, [0x4de390]
mov dword [eax], ecx
mov edx, dword [0x995310]
test edx, edx
jne 0x4de249
mov edx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x54]
jmp 0x4de25b
call fcn.00468e70
mov edx, dword [esp + 0x4c]
mov dword [edi], edx
mov ebx, dword [esp + 0x54]
mov dword [edi + 4], ebx
mov dword [esp + 0x64], eax
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
lea ecx, [0x7074c0]
mov dword [esp], ecx
call fcn.0040c500
mov eax, dword [esp + 4]
lea ecx, [0x4de350]
mov dword [eax], ecx
mov edx, dword [0x995310]
test edx, edx
jne 0x4de296
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x58]
jmp 0x4de1e4
call fcn.00468e70
mov edx, dword [esp + 0x64]
mov dword [edi], edx
mov ebx, dword [esp + 0x58]
mov dword [edi + 4], ebx
jmp 0x4de1e4
mov dword [eax + 0x90], 0
mov dword [eax + 0x94], 0
mov ecx, dword [0x995310]
test ecx, ecx
je 0x4de2d8
mov ecx, dword [eax + 0x8c]
call fcn.00468e60
mov dword [edi], ecx
mov dword [eax + 0x8c], 0
jmp 0x4de0d2
call fcn.00467a60
jmp fcn.004dd840