Function at 0x410940
Capabilities:
Reference http user-agent string
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x492c16
mov eax, dword fs:[0]
push eax
sub esp, 0x978
mov eax, dword [0x4b6170]
xor eax, esp
mov dword [esp + 0x974], eax
push ebx
push ebp
push esi
mov eax, dword [0x4b6170]
xor eax, esp
push eax
lea eax, [esp + 0x988]
mov dword fs:[0], eax
call fcn.0040dd70
mov esi, 7
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x9c], esi
mov dword [esp + 0x98], ebp
mov word [esp + 0x88], ax
mov dword [esp + 0x990], ebp
cmp dword [edi + 0x11c], 8
jb 0x4109b6
mov eax, dword [edi + 0x108]
jmp 0x4109bc
lea eax, [edi + 0x108]
push eax
call fcn.00441c53
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
add esp, 4
push eax
lea ecx, [esp + 0xc0]
push 0x4ac848
push ecx
call ebx
mov al, byte [edi]
add esp, 0xc
cmp al, 1
jne 0x410c09
mov dword [esp + 0x14], str.KTU84P
mov dword [esp + 0x18], str.LMY47D
mov dword [esp + 0x1c], str.LMY47V
mov dword [esp + 0x20], str.KOT49H
mov dword [esp + 0x24], str.LMY47I
mov dword [esp + 0x28], str.LRX22G
mov dword [esp + 0x2c], str.MMB29M
mov dword [esp + 0x30], str.JLS36C
mov dword [esp + 0x34], str.JDQ39
mov dword [esp + 0x38], str.MRA58K
mov dword [esp + 0x3c], str.LMY47X
mov dword [esp + 0x40], str.LRX21M
mov dword [esp + 0x44], str.JZO54K
mov dword [esp + 0x48], str.KVT49L
mov dword [esp + 0x4c], str.MMB29K
mov dword [esp + 0x50], str.JSS15J
mov dword [esp + 0x54], str.LRX21V
mov dword [esp + 0x58], str.MXB48T
mov dword [esp + 0x5c], str.KTU84Q
mov dword [esp + 0x60], str.KTU84M
mov dword [esp + 0x64], str.LRX22C
mov dword [esp + 0x68], str.JOP40D
mov dword [esp + 0x6c], str.LRX21T
mov dword [esp + 0x70], str.LMY48W
mov dword [esp + 0x74], str.LMY47O
mov dword [esp + 0x78], str.JSS15Q
mov dword [esp + 0x7c], str.IML74K
mov dword [esp + 0x80], str.JRO03C
call fcn.0040dd70
xor edx, edx
mov ecx, 0x1c
div ecx
mov dword [esp + 0xb8], esi
mov dword [esp + 0xb4], ebp
mov eax, dword [esp + edx*4 + 0x14]
xor edx, edx
mov ecx, eax
mov word [esp + 0xa4], dx
lea esi, [ecx + 2]
lea ebx, [ebx]
mov dx, word [ecx]
add ecx, 2
cmp dx, bp
jne 0x410b00
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0xa4]
call fcn.00403500
lea ebp, [edi + 0xe8]
mov eax, 8
mov byte [esp + 0x990], 1
cmp dword [ebp + 0x18], eax
jb 0x410b39
mov edx, dword [ebp + 4]
jmp 0x410b3c
lea edx, [ebp + 4]
mov esi, dword [esp + 0xa4]
cmp dword [esp + 0xb8], eax
jae 0x410b53
lea esi, [esp + 0xa4]
cmp dword [edi + 0x40], eax
jb 0x410b5d
mov ecx, dword [edi + 0x2c]
jmp 0x410b60
lea ecx, [edi + 0x2c]
cmp dword [edi + 0x11c], eax
jb 0x410b70
mov eax, dword [edi + 0x108]
jmp 0x410b76
lea eax, [edi + 0x108]
lea ebx, [esp + 0xbc]
push ebx
push edx
push esi
push ecx
push eax
lea eax, [esp + 0x198]
push str.Mozilla_5.0__Linux__U__Android__s___s_Build__s__AppleWebKit__s__KHTML__like_Gecko__Version__s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [esp + 0x1a0]
add esp, 0x1c
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410ba2
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x188]
lea esi, [esp + 0x88]
call fcn.00403500
push 0xf
push str._Mobile_Safari_
mov eax, esi
call fcn.0040bbe0
push 0
push ebp
or eax, 0xffffffff
call fcn.0040bed0
mov byte [esp + 0x990], 0
cmp dword [esp + 0xb8], 8
jb 0x410d6d
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0043f604
add esp, 4
jmp 0x410d6d
cmp al, 2
jne 0x410d6d
xor esi, esi
mov ebp, 0x4b7678
call fcn.0040dd70
xor edx, edx
mov ecx, 0x64
div ecx
xor ecx, ecx
xor eax, eax
lea ebx, [ebx]
add esi, dword [eax + 0x4b7678]
cmp esi, edx
jg 0x410c47
add eax, 0x18
inc ecx
cmp eax, 0xd8
jb 0x410c30
jmp 0x410c51
lea ebp, [ecx + ecx*2]
lea ebp, [ebp*8 + 0x4b7678]
mov edx, dword [ebp + 8]
mov dword [edi + 4], edx
mov eax, dword [ebp + 0xc]
mov dword [edi + 8], eax
push 6
lea esi, [edi + 0xc]
mov eax, str.iPhone
call fcn.00403500
mov eax, dword [ebp + 0x14]
mov ecx, eax
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x410c74
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [edi + 0x28]
call fcn.00403500
call fcn.0040dd70
xor edx, edx
mov ecx, 0x26
div ecx
mov ebp, 8
mov edx, dword [edx*4 + 0x4b7d38]
cmp dword [edi + 0x100], ebp
jb 0x410cb6
mov ecx, dword [edi + 0xec]
jmp 0x410cbc
lea ecx, [edi + 0xec]
cmp dword [edi + 0x11c], ebp
jb 0x410ccc
mov eax, dword [edi + 0x108]
jmp 0x410cd2
lea eax, [edi + 0x108]
push edx
lea edx, [esp + 0xc0]
push edx
push ecx
push eax
lea eax, [esp + 0x194]
push str.Mozilla_5.0__iPhone__CPU_iPhone_OS__s_like_Mac_OS_X__AppleWebKit__s__KHTML__like_Gecko__Version__s_Mobile__s
push eax
call ebx
lea eax, [esp + 0x19c]
add esp, 0x18
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410d00
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x188]
lea esi, [esp + 0x88]
call fcn.00403500
push ebp
push str._Safari_
mov eax, esi
call fcn.0040bbe0
cmp dword [edi + 0x100], ebp
jb 0x410d40
mov edx, dword [edi + 0xec]
jmp 0x410d46
lea edx, [edi + 0xec]
mov eax, edx
lea esi, [eax + 2]
jmp 0x410d50
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x410d50
sub eax, esi
sar eax, 1
push eax
push edx
lea eax, [esp + 0x8c]
call fcn.0040bbe0
push 0xffffffffffffffff
push 0
lea ecx, [edi + 0xcc]
lea eax, [esp + 0x8c]
call fcn.004027a0
cmp dword [esp + 0x9c], 8
jb 0x410d9d
mov ecx, dword [esp + 0x88]
push ecx
call fcn.0043f604
add esp, 4
mov ecx, dword [esp + 0x988]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x974]
xor ecx, esp
call fcn.0043f4b7
add esp, 0x984
ret