Function at 0x644dd0
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xd0]
cmp eax, dword [ecx + 8]
jbe 0x6459ca
sub esp, 0x150
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov ecx, dword [esp + 0x158]
mov dword [esp + 4], ecx
lea edx, [0x7aea4c]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004d10d0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x58], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004cfb30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004d0410
mov eax, dword [esp + 8]
mov dword [esp + 0xfc], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x64], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00644c20
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
test eax, eax
jne 0x644ec0
mov dword [esp + 0xf8], edx
mov dword [esp + 0xf4], ecx
call fcn.0040cf60
mov ecx, dword [esp + 0x158]
mov eax, dword [esp + 0x58]
cmp ecx, eax
jb 0x6459c4
sub ecx, eax
mov edx, ecx
neg ecx
sar ecx, 0x1f
and eax, ecx
mov ecx, dword [esp]
mov dword [esp + 0xb8], ecx
mov ebx, dword [esp + 0x154]
add ebx, eax
xor eax, eax
jmp 0x644f11
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], edx
add esp, 0x150
ret
mov dword [eax], ecx
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0xb4]
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xd4], eax
test edx, edx
je 0x645283
mov dword [esp], ebx
mov dword [esp + 4], edx
lea eax, [0x75895c]
mov dword [esp + 8], eax
call fcn.004cfee0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x64527c
mov ecx, dword [esp + 0xc]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00645f80
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
test eax, eax
je 0x645212
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x2c], ebp
mov dword [esp + 0xa8], ebx
mov ecx, dword [esp + 8]
mov dword [esp + 0xc4], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x7ae9e8]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
call fcn.004d10d0
movzx eax, byte [esp + 0x20]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
test al, al
je 0x6450c7
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x54], edx
mov eax, dword [esp + 0xd4]
test eax, eax
jne 0x644fef
call fcn.0040cf60
mov eax, dword [esp]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0x54]
mov dword [esp + 0xd4], eax
lea ebx, [0x6f8920]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.00410d20
movzx eax, byte [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
test al, al
jne 0x6450be
call fcn.0040cf60
mov eax, dword [esp]
mov dword [esp + 0xf0], eax
lea ecx, [0x6f8920]
mov dword [esp], ecx
mov edx, dword [esp + 0xd4]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0xd8]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x54]
mov dword [esp + 0xc], ebp
call fcn.00411080
mov eax, dword [esp + 0x10]
test byte [eax], al
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x645077
mov ecx, dword [esp + 0xf0]
jmp 0x64508a
call fcn.00468e70
mov ecx, dword [esp + 0xf0]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
lea eax, [0x6f8920]
mov dword [esp], eax
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xd8]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0xc], edx
call fcn.004109f0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [esp + 0xd4]
jmp 0x6450d5
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xd4], eax
lea edx, [0x6f7340]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ebx, dword [esp + 0xc4]
mov dword [esp + 8], ebx
mov ebp, dword [esp + 0x44]
mov dword [esp + 0xc], ebp
call fcn.00410d20
movzx eax, byte [esp + 0x14]
test al, al
je 0x645150
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x2c]
cmp edx, ecx
je 0x645127
mov eax, 1
jmp 0x64514c
mov eax, dword [eax]
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004034e0
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0x2c]
test al, al
jne 0x6451b5
lea eax, [0x6f7340]
mov dword [esp], eax
mov ecx, dword [esp + 0xec]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], ecx
call fcn.00411080
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x2c]
mov dword [eax + 4], ecx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x64519d
mov ecx, dword [esp + 0xa8]
jmp 0x644ef6
call fcn.00468e70
mov ecx, dword [esp + 0xa8]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
jmp 0x644ef6
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1e
lea ecx, [0x745d76]
mov dword [eax], ecx
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 0
mov dword [esp + 0x164], 0
lea ecx, [0x7b0bb8]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
add esp, 0x150
ret
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004d0410
cmp dword [esp + 0xc], 1
jne 0x645237
mov ecx, dword [esp + 8]
cmp byte [ecx], 0x3b
jne 0x645237
mov eax, dword [esp + 0xd4]
jmp 0x645283
mov eax, dword [0x967890]
mov ecx, dword [0x967894]
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x15c], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x160], edx
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
add esp, 0x150
ret
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x100], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
lea edi, [esp + 0x120]
xor eax, eax
call fcn.004690f4
lea ecx, [0x6f8920]
mov dword [esp], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x120]
mov dword [esp + 8], ecx
call fcn.0040e110
jmp 0x6452f2
lea eax, [esp + 0x120]
mov dword [esp], eax
call fcn.0040e350
mov eax, dword [esp + 0x120]
test eax, eax
je 0x64544a
mov ecx, dword [eax]
mov dword [esp + 0xc0], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x124]
mov edx, dword [edx]
mov dword [esp + 0xbc], edx
lea ebx, [esp + 0x88]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea ebx, [0x7ae9e8]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 1
call fcn.00452120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [0x6f7340]
mov dword [esp], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410d20
movzx eax, byte [esp + 0x14]
test al, al
jne 0x6453b1
mov dword [esp + 0x100], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x10c], 0
mov dword [esp + 0x104], 0
xor eax, eax
xor ecx, ecx
jmp 0x6454a0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006459e0
movzx eax, byte [esp + 0x10]
test al, al
je 0x6452e3
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0xd0], ecx
lea edx, [0x6f7340]
mov dword [esp], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0xc0]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x40]
mov dword [esp + 0xc], ebp
call fcn.00411080
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x50]
mov dword [eax + 4], ecx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x645430
mov ecx, dword [esp + 0xd0]
jmp 0x645443
call fcn.00468e70
mov ecx, dword [esp + 0xd0]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
jmp 0x6452e3
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x15c], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x164], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x16c], eax
add esp, 0x150
ret
mov edx, dword [esp + 0x3c]
lea eax, [edx + 1]
mov ecx, 1
mov byte [esp + 0x27], cl
mov dword [esp + 0x3c], eax
mov dword [esp + 0x110], 0
mov dword [esp + 0x114], 0
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 0
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
mov ebx, dword [esp + 0x40]
mov dword [esp + 4], ebx
call fcn.00409d40
mov eax, dword [esp + 8]
lea ecx, [0x6f44e0]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00409c30
mov eax, dword [esp + 4]
lea ecx, [0x6f4660]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], eax
lea eax, [0x73ac06]
mov dword [esp], eax
mov dword [esp + 4], 5
lea edx, [esp + 0x110]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c4b20
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], ecx
lea edx, [0x6f7340]
mov dword [esp], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410d20
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [eax + 4]
mov eax, dword [eax]
test cl, cl
je 0x64567b
mov ecx, dword [esp + 0x100]
nop
nop
test ecx, ecx
je 0x6455bf
lea ebx, [esp + 0x100]
cmp ecx, ebx
je 0x6455cd
jmp 0x6459ac
lea ecx, [esp + 0x100]
mov dword [esp + 0x100], ecx
mov ecx, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
lea ebp, [edx + ebx]
mov esi, dword [esp + 0x104]
cmp ecx, ebp
jae 0x645631
mov dword [esp + 0x30], edx
mov dword [esp + 0xac], eax
mov dword [esp + 0x60], ebx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0xac]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], ecx
mov dword [esp + 0xe8], esi
add ebx, esi
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004697f0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xe8]
mov dword [esp + 0x104], eax
jmp 0x645494
lea eax, [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
lea eax, [0x7ae9e8]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.00452120
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [0x6f7340]
mov dword [esp], edx
mov ebx, dword [esp + 0xbc]
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
call fcn.00410d20
movzx eax, byte [esp + 0x14]
test al, al
je 0x6458dc
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x3c]
test edx, edx
jne 0x6457f0
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006459e0
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test al, al
je 0x645494
mov eax, dword [esp + 0x100]
nop
test eax, eax
je 0x645734
lea ebx, [esp + 0x100]
cmp eax, ebx
je 0x645742
jmp 0x645994
lea eax, [esp + 0x100]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
lea ebp, [ecx + ebx]
mov esi, dword [esp + 0x104]
cmp eax, ebp
jae 0x6457a6
mov dword [esp + 0x60], ebx
mov dword [esp + 0xcc], edx
mov dword [esp + 0x4c], ecx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0xcc]
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], eax
mov dword [esp + 0xe4], esi
add ebx, esi
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004697f0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x104], eax
jmp 0x645494
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.006462b0
mov eax, dword [esp + 0x100]
nop
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test eax, eax
je 0x645820
lea ebx, [esp + 0x100]
cmp eax, ebx
je 0x64582e
jmp 0x64597c
lea eax, [esp + 0x100]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x10c]
mov ebx, dword [esp + 0x108]
lea ebp, [ecx + ebx]
mov esi, dword [esp + 0x104]
cmp eax, ebp
jae 0x645892
mov dword [esp + 0x60], ebx
mov dword [esp + 0xc8], edx
mov dword [esp + 0x48], ecx
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
mov dword [esp + 0xc], ecx
lea eax, [0x6f4820]
mov dword [esp + 0x10], eax
call fcn.0044e6e0
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], eax
mov dword [esp + 0xe0], esi
add ebx, esi
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.004697f0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x108], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x104], eax
jmp 0x645494
movzx eax, byte [esp + 0x27]
test al, al
je 0x6452e3
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x104]
mov edx, ecx
neg ecx
cmp eax, ecx
ja 0x64596e
mov dword [esp + 0x28], eax
mov dword [esp + 0xdc], edx
lea eax, [0x6f7340]
mov dword [esp], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xc0]
mov dword [esp + 8], edx
mov edx, dword [esp + 0x40]
mov dword [esp + 0xc], edx
call fcn.00411080
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x645954
mov ecx, dword [esp + 0xdc]
jmp 0x645967
call fcn.00468e70
mov ecx, dword [esp + 0xdc]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
jmp 0x6452e3
test edx, edx
je 0x645977
call fcn.0045ff10
call fcn.0045ff50
lea eax, [0x6f44e0]
mov dword [esp], eax
lea eax, [0x7b028c]
mov dword [esp + 4], eax
call fcn.00438b10
lea eax, [0x6f44e0]
mov dword [esp], eax
lea eax, [0x7b028c]
mov dword [esp + 4], eax
call fcn.00438b10
lea eax, [0x6f44e0]
mov dword [esp], eax
lea eax, [0x7b028c]
mov dword [esp + 4], eax
call fcn.00438b10
call fcn.00468f30
nop
call fcn.00467a60
jmp fcn.00644dd0