Function at 0x414840
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
mov rdx, rbx
or rdx, rax
or rdx, rcx
test rdx, 7
jne 0x414be7
cmp byte [0x0092d940], 0
je 0x4149a2
movabs rdx, 0x800000000000
add rdx, rax
mov r8, rdx
shr rdx, 0x2a
nop
cmp rdx, 0x40
jb 0x41488a
xor edx, edx
jmp 0x4148c8
lea r9, [0x008bf5d8]
mov rdx, qword [r9 + rdx*8]
test rdx, rdx
je 0x4148c6
shr r8, 0x16
and r8d, 0xfffff
mov rdx, qword [rdx + r8*8]
test rdx, rdx
je 0x4148c2
mov r8, rax
shr r8, 0xd
and r8d, 0x1ff
mov rdx, qword [rdx + r8*8]
jmp 0x4148c8
xor edx, edx
jmp 0x4148c8
xor edx, edx
test rdx, rdx
jne 0x4148ee
mov rdx, qword [0x008a6718]
test rdx, rdx
je 0x4148e2
mov r8, qword [rdx]
mov rdx, qword [rdx + 8]
jmp 0x4148e7
xor edx, edx
xor r8d, r8d
xor esi, esi
jmp 0x414b48
nop
mov r8b, byte [rdx + 0x63]
cmp r8b, 1
jne 0x414906
cmp qword [rdx + 0x18], rax
ja 0x414906
nop
cmp qword [rdx + 0x70], rax
ja 0x41490c
add rsp, 0x60
pop rbp
ret
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rcx
mov r8, qword [r14 + 0x30]
mov r8, qword [r8 + 0xa0]
mov qword [rsp + 0x58], r8
test byte [r8], al
test rdi, rdi
je 0x41496a
movzx r9d, byte [rdi + 0x17]
nop dword [rax + rax]
test r9b, 0x40
jne 0x41496a
movzx edx, byte [rdx + 0x62]
test dl, 1
je 0x414957
xor edx, edx
xor esi, esi
xor edi, edi
jmp 0x414965
mov rdx, qword [rdi + 0x20]
nop
mov rdx, qword [rdx]
mov rsi, rdx
mov rdx, rax
mov r9, rdx
jmp 0x414995
mov rbx, rax
mov rax, rdx
call fcn.00414460
mov r8, qword [rsp + 0x58]
mov rsi, rcx
mov rdx, rbx
mov r9, rax
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
test rbx, rbx
je 0x414ac7
nop
jmp 0x4149e2
add rsp, 0x60
pop rbp
ret
mov r12, qword [r11 + 0x1288]
mov r13, r12
add r13, 0x10
mov qword [r11 + 0x1288], r13
mov r8, qword [r8]
mov qword [r12], r8
mov r8, qword [r10]
mov qword [r12 + 8], r8
mov rsi, rcx
mov rdx, rbx
mov r9, rax
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
lea r8, [rcx + rax]
mov rbx, rdx
mov rax, r9
mov rcx, rsi
mov rsi, r8
call fcn.00414580
nop word [rax + rax]
test rsi, rsi
je 0x414a90
mov rdx, qword [rsp + 0x70]
mov r8, rsi
sub rsi, rdx
mov r9, qword [rsp + 0x78]
lea r10, [r9 + rsi]
mov r11, qword [rsp + 0x58]
mov r12, qword [r11 + 0x1288]
add r12, 0x10
nop
cmp qword [r11 + 0x1290], r12
jae 0x4149a8
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r10
call fcn.0042e860
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x78]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x58]
jmp 0x4149a8
add rsp, 0x60
pop rbp
ret
mov r8, qword [rdx + 0x1288]
mov r10, r8
add r10, 8
mov qword [rdx + 0x1288], r10
mov r10, qword [rsi]
mov qword [r8], r10
mov rsi, rcx
mov rdx, rbx
mov r9, rax
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x80]
lea r8, [rcx + rax]
mov rbx, rdx
mov rax, r9
mov rcx, rsi
mov rsi, r8
call fcn.00414580
nop dword [rax]
test rsi, rsi
je 0x414a90
mov rdx, qword [rsp + 0x58]
mov r8, qword [rdx + 0x1288]
add r8, 8
nop
cmp qword [rdx + 0x1290], r8
jae 0x414a96
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x48], rsi
call fcn.0042e860
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
nop dword [rax + rax]
jmp 0x414a96
inc rsi
cmp rdx, rsi
jle 0x414b81
mov r9, qword [r8 + rsi*8]
mov r10, qword [r9 + 0xd0]
cmp rax, r10
jb 0x414b45
nop dword [rax]
cmp qword [r9 + 0xd8], rax
jbe 0x414b45
mov rdi, rax
sub rdi, r10
mov rsi, qword [r9 + 0x220]
call fcn.00413be0
add rsp, 0x60
pop rbp
ret
mov rdx, qword [0x008a6718]
test rdx, rdx
je 0x414b96
mov r8, qword [rdx]
mov rdx, qword [rdx + 8]
jmp 0x414b9b
xor edx, edx
xor r8d, r8d
xor esi, esi
jmp 0x414ba2
inc rsi
cmp rdx, rsi
jle 0x414be1
mov r9, qword [r8 + rsi*8]
mov r10, qword [r9 + 0xe0]
cmp rax, r10
jb 0x414b9f
nop word [rax + rax]
cmp qword [r9 + 0xe8], rax
jbe 0x414b9f
mov rdi, rax
sub rdi, r10
mov rsi, qword [r9 + 0x230]
call fcn.00413be0
add rsp, 0x60
pop rbp
ret
add rsp, 0x60
pop rbp
ret
lea rax, [0x006d20c4]
mov ebx, 0x28
call fcn.004341e0
nop
int3