Function at 0x49ca40
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x49cda0
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov rdx, qword [rax + 0x38]
cmp qword [rdx + 0x1b8], 0
je 0x49cd19
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x58], rax
lea rsi, [rdx + 0x1b8]
mov qword [rsp + 0x38], rsi
movsxd rbx, dword [rax + 0x28]
movzx ecx, byte [rdx + 0x21f]
mov rax, rsi
call fcn.0049c220
nop dword [rax + rax]
test rax, rax
jne 0x49cd07
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rdx]
mov rax, qword [rsp + 0x58]
call rcx
test rax, rax
je 0x49caee
je 0x49cadc
lea rdx, [0x004f4100]
cmp qword [rax + 8], rdx
jne 0x49cadc
cmp qword [rbx], 0x3e5
jne 0x49cadc
mov rdx, qword [rsp + 0x58]
jmp 0x49cb06
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rdx + 0x38]
cmp byte [rsi + 0x21c], 0
nop
jne 0x49ccf6
movsxd rbx, dword [rdx + 0x28]
mov rsi, qword [rsp + 0x40]
movzx ecx, byte [rsi + 0x21f]
mov rax, qword [rsp + 0x38]
nop dword [rax + rax]
call fcn.0049c360
test rax, rax
je 0x49cc72
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
je 0x49cb47
lea rdx, [0x004f4f40]
cmp qword [rax + 8], rdx
je 0x49cb9a
mov rcx, qword [0x005dbd08]
cmp qword [0x005dbd00], rax
jne 0x49cb6e
call fcn.00403be0
nop dword [rax]
test al, al
jne 0x49cb9a
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
mov rcx, qword [0x005d4598]
nop word [rax + rax]
nop
cmp qword [0x005d4590], rax
jne 0x49cd62
call fcn.00403be0
test al, al
je 0x49cd62
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rsp + 0x58]
call fcn.004866c0
test rax, rax
je 0x49cbd8
je 0x49cd56
lea rdx, [0x004f4100]
nop
cmp qword [rax + 8], rdx
jne 0x49cd5b
cmp qword [rbx], 0x490
je 0x49cbdf
jmp 0x49cd4d
lea rdx, [0x004f4100]
mov rsi, qword [rsp + 0x58]
movsxd rbx, dword [rsi + 0x28]
mov rdi, qword [rsp + 0x40]
mov rax, qword [rdi + 0x1b8]
test rax, rax
je 0x49cc0a
call fcn.0045dbc0
lea rdx, [0x004f4100]
mov rsi, qword [rsp + 0x58]
mov edi, dword [rsi + 0x2c]
test edi, edi
je 0x49cc61
movsxd rax, edi
call fcn.0040a8c0
lea rcx, [0x004f4100]
cmp qword [0x00536a70], rcx
jne 0x49cc47
cmp qword [rax], 0x3e3
jne 0x49cc3e
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
jmp 0x49cc4e
lea rcx, [0x00536a68]
jmp 0x49cc4e
lea rcx, [0x00536a68]
mov rbx, rcx
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
nop
ret
mov eax, dword [rsi + 0x30]
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rdx, qword [rsp + 0x58]
mov esi, dword [rdx + 0x2c]
test esi, esi
je 0x49cce5
movsxd rax, esi
call fcn.0040a8c0
mov rcx, qword [0x00536a70]
lea rdx, [0x004f4100]
cmp rcx, rdx
jne 0x49cca5
cmp qword [rax], 0xea
je 0x49ccb0
cmp rcx, rdx
jne 0x49cccf
cmp qword [rax], 0x2738
jne 0x49cccf
mov rdx, qword [rsp + 0x58]
mov edx, dword [rdx + 0x30]
lea rbx, [0x00536a68]
mov rcx, rax
mov rax, rdx
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
lea rbx, [0x00536a68]
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, dword [rdx + 0x30]
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov eax, dword [rdx + 0x30]
xor ebx, ebx
xor ecx, ecx
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
lea rax, [0x004f2980]
call fcn.0040d140
mov qword [rax + 8], 0x36
lea rcx, [0x0051336c]
mov qword [rax], rcx
lea rbx, [0x00536708]
mov rcx, rax
xor eax, eax
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
test rax, rax
je 0x49cd56
mov rax, qword [rax + 8]
call fcn.00436620
test rax, rax
nop
jmp 0x49cd50
mov rcx, qword [rsp + 0x28]
mov rcx, qword [rcx + 0x18]
mov rax, qword [rsp + 0x30]
call rcx
mov ecx, 0x22
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x005109c1]
call fcn.0044e320
call fcn.0040a940
mov rbx, rax
lea rax, [0x004ea4e0]
call fcn.00436620
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.004612c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0049ca40