Function at 0x427f40
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x18]
jbe 0x4284c6
push rbp
mov rbp, rsp
sub rsp, 0x90
mov byte [rsp + 0x2f], dil
mov byte [rsp + 0xb0], cl
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0xa0]
mov qword [rsp + 0x88], rdx
test rdx, rdx
je 0x428074
cmp rbx, 0x10
jae 0x42806a
cmp qword [rdx + 0x50], 0
jne 0x427ff8
test byte [rax], al
lea rcx, [rax + 8]
mov qword [rsp + 0x80], rcx
nop
call fcn.0040b580
mov rax, qword [rsp + 0x80]
nop
call fcn.0042d2e0
mov rdx, qword [rsp + 0x88]
mov qword [rdx + 0x48], rax
mov qword [rdx + 0x50], rbx
mov qword [rdx + 0x58], rcx
nop
nop
mov rax, qword [rsp + 0xa0]
call fcn.0040b7a0
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xa8]
lea rax, [rdx + 0x48]
nop dword [rax]
call fcn.0042cec0
test rax, rax
je 0x428057
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0xa0]
test rdx, rdx
je 0x428048
mov r9, qword [rdx + 0xdc8]
test r9, r9
je 0x428048
lea r10, [r9 - 1]
cmp r10, 0x80
jae 0x4284b3
mov r9, qword [rdx + r9*8 + 0xdc8]
mov qword [rdx + 0xdc8], r10
jmp 0x42804b
xor r9d, r9d
test r9, r9
je 0x42805a
xor ecx, ecx
jmp 0x428189
xor r9d, r9d
mov rsi, rax
mov r8, rbx
mov rax, qword [rsp + 0xa0]
jmp 0x42807c
xor esi, esi
xor r9d, r9d
xor r8d, r8d
jmp 0x42807c
xor esi, esi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x58], rsi
test byte [rax], al
nop
call fcn.0040b580
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x4280ae
xor ecx, ecx
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x38]
jmp 0x428138
mov rax, qword [rsp + 0xa0]
lea rcx, [rax + 8]
mov qword [rsp + 0x80], rcx
mov rbx, qword [rsp + 0xa8]
mov rax, rcx
call fcn.0042bc00
test rax, rax
je 0x4280db
xor ecx, ecx
jmp 0x428138
mov rax, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
call fcn.004287a0
test bl, bl
jne 0x428110
nop
nop
mov rax, qword [rsp + 0xa0]
nop
call fcn.0040b7a0
xor eax, eax
add rsp, 0x90
pop rbp
ret
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x80]
mov rbx, qword [rsp + 0xa8]
call fcn.0042bc00
test rax, rax
je 0x4284a2
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x48], rcx
mov rdx, qword [rsp + 0x78]
test rdx, rdx
jne 0x428161
mov rax, qword [rsp + 0xa0]
call fcn.00427e40
mov rdx, rax
mov qword [rsp + 0x78], rdx
nop
nop
mov rax, qword [rsp + 0xa0]
call fcn.0040b7a0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
mov r9, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x38]
mov rdx, qword [0x00921fc8]
nop
mov r10b, byte [0x00921884]
test r10b, r10b
je 0x4281a4
xor r11d, r11d
xor edx, edx
jmp 0x4281c5
nop
mov r10, qword [0x009220f8]
add r10, rbx
mov r11, r10
sub r10, rdx
cmp rdx, r11
setb dl
mov r11d, 0
cmovb r11, r10
mov r10, qword [0x00921640]
cmp r10, 0xffffffffffffffff
je 0x428228
test rcx, rcx
jbe 0x42821b
mov r12, qword [0x009220d0]
mov r13, qword [0x009220e0]
add r12, r13
add r12, rcx
cmp r10, r12
jae 0x42820e
sub r12, r10
cmp rcx, r12
cmova rcx, r12
cmp r11, rcx
cmovb r11, rcx
mov r10, qword [rsp + 0x88]
test r10, r10
jmp 0x428233
mov r10, qword [rsp + 0x88]
test r10, r10
jmp 0x428233
mov r10, qword [rsp + 0x88]
test r10, r10
jmp 0x428233
mov r10, qword [rsp + 0x88]
test r10, r10
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x78], r9
je 0x428358
test r11, r11
jbe 0x428358
mov byte [rsp + 0x2e], dl
mov qword [rsp + 0x50], r11
nop
nop dword [rax + rax]
call fcn.00468220
xorps xmm15, xmm15
mov r14, qword [0x00921328]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov qword [rsp + 0x30], rax
mov rcx, qword [rsp + 0x88]
mov rdx, qword [rcx + 0x1228]
shr rdx, 0x3d
mov qword [rsp + 0x70], rdx
test dl, dl
jne 0x4282bf
movabs rsi, 0x1fffffffffffffff
and rsi, rax
movabs r8, 0x6000000000000000
or r8, rsi
nop
nop
xchg qword [rcx + 0x1228], r8
mov rax, qword [rsp + 0xa0]
test byte [rax], al
lea rdx, [rax + 8]
mov rbx, qword [rsp + 0x50]
lea rcx, [0x006e0a88]
movzx edi, byte [rsp + 0x2e]
mov rax, rdx
call fcn.00422740
nop
lea rdx, [0x008f3418]
lock xadd qword [rdx], rax
nop
call fcn.00468220
xorps xmm15, xmm15
mov r14, qword [0x00921328]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp]
mov rdx, qword [rsp + 0x70]
test dl, dl
jne 0x42833a
mov qword [rsp + 0x40], rcx
mov rax, qword [rsp + 0x88]
add rax, 0x1228
mov ebx, 3
call fcn.0041cca0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
sub rcx, rdx
lea rdx, [0x00921650]
lock xadd qword [rdx], rcx
mov rax, qword [rsp + 0x58]
mov r9, qword [rsp + 0x78]
mov rbx, r9
movzx ecx, byte [rsp + 0xb0]
movzx edi, byte [rsp + 0x2f]
mov rsi, rax
mov r8, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xa0]
nop dword [rax + rax]
call fcn.00428500
mov rbx, qword [rsp + 0xa8]
shl rbx, 0xd
mov qword [rsp + 0x68], rbx
mov rdx, qword [rsp + 0x38]
nop dword [rax + rax]
test rdx, rdx
je 0x4283e2
mov rax, qword [rsp + 0x58]
mov rcx, rdx
neg rdx
mov qword [rsp + 0x60], rdx
nop
lea rsi, [0x009220f8]
lock xadd qword [rsi], rcx
call fcn.00416d60
lea rax, [0x009220d8]
mov rbx, qword [rsp + 0x60]
call fcn.004304a0
mov rdx, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x68]
sub rdx, rbx
lea rax, [0x009220e0]
mov rbx, rdx
call fcn.004304a0
movzx ecx, byte [rsp + 0xb0]
nop dword [rax]
test cl, cl
jne 0x428415
lea rax, [0x009220d0]
mov rbx, qword [rsp + 0x68]
call fcn.004304a0
lea rax, [0x009259c0]
nop dword [rax]
call fcn.00430560
mov rcx, qword [rsp + 0x38]
mov rdx, rcx
lock xadd qword [rax], rcx
neg rdx
lock xadd qword [rax + 8], rdx
movzx ecx, byte [rsp + 0xb0]
cmp cl, 1
ja 0x428466
test cl, cl
jne 0x428459
mov rcx, qword [rsp + 0x68]
lock xadd qword [rax + 0x10], rcx
jmp 0x428488
mov rcx, qword [rsp + 0x68]
lock xadd qword [rax + 0x18], rcx
jmp 0x428488
cmp cl, 2
jne 0x428478
mov rcx, qword [rsp + 0x68]
lock xadd qword [rax + 0x28], rcx
jmp 0x428488
cmp cl, 3
jne 0x428488
mov rcx, qword [rsp + 0x68]
lock xadd qword [rax + 0x20], rcx
lea rax, [0x009259c0]
call fcn.00430640
mov rax, qword [rsp + 0x78]
add rsp, 0x90
pop rbp
ret
lea rax, [0x006bfac3]
mov ebx, 0x2b
call fcn.00437240
mov rax, r10
mov ecx, pe_nt_image_headers64
nop dword [rax + rax]
call fcn.00466960
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
mov byte [rsp + 0x19], dil
call fcn.0046b280
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
movzx edi, byte [rsp + 0x19]
jmp fcn.00427f40