Function at 0x56fab0
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x34]
cmp eax, dword [ecx + 8]
jbe 0x5703a7
sub esp, 0xb4
mov eax, 0
lea edi, [esp + 0x90]
call fcn.0045a037
mov byte [esp + 0x25], 0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
call fcn.0056f9a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
jne 0x570357
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
call ecx
movzx eax, byte [esp + 0x18]
lea esi, [esp + 4]
mov dword [esp + 0x50], esi
lea edi, [esp + 0x7c]
call fcn.0045a51e
test al, al
je 0x570350
lea edi, [esp + 0x54]
lea esi, [esp + 0x7c]
call fcn.0045a51e
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x54]
test eax, 0x80000000
je 0x570341
shl eax, 1
mov ebx, ecx
shr ecx, 0x1f
or ecx, eax
mov eax, ebx
shl ebx, 1
mov ebp, ecx
shl ecx, 1
shr ebx, 0x1f
or ebx, ecx
mov ecx, ebx
add ebx, 0xd7b17f80
shr ebp, 0x1f
add ecx, 0xd7b17f80
adc ebp, 0xd
test ebx, ebx
sete cl
test ebp, ebp
sete bl
and ebx, ecx
test bl, bl
je 0x57033a
test eax, 0x3fffffff
sete al
xor eax, 1
mov byte [esp + 0x27], al
test al, al
jne 0x5702cb
mov ecx, dword [esp + 0xb8]
mov ebx, dword [ecx + 0x148]
mov ebp, dword [ecx + 0x14c]
cmp ebp, 3
jne 0x5702a5
cmp word [ebx], 0x6374
jne 0x5701b2
cmp byte [ebx + 2], 0x70
jne 0x5701b2
mov edx, dword [esp + 0xc4]
test edx, edx
je 0x570057
lea eax, [0x7b7dc0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00404460
mov eax, dword [esp + 8]
lea ecx, [0x90d198]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], eax
movzx ecx, byte [esp + 0x27]
or ecx, 2
mov byte [esp + 0x26], cl
mov byte [esp + 0x25], cl
mov dword [esp], 0x10
lea edx, [0x90d19c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 8], edx
mov ebx, dword [esp + 0xc0]
mov dword [esp + 0xc], ebx
mov ebp, dword [esp + 0xb8]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
call fcn.0043a5a0
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov ecx, dword [esp + 0xcc]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xd0]
mov dword [esp + 8], ecx
call fcn.004c49a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test eax, eax
je 0x56ff31
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], ecx
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax + 0x14]
mov edx, dword [esp + 0xc0]
mov dword [esp], edx
call ecx
mov dword [esp], 0
call fcn.00405850
movzx eax, byte [esp + 8]
test al, al
jne 0x56fdf6
lea eax, [0x98b990]
mov ecx, dword [esp + 0x2c]
cmp eax, ecx
jne 0x56fded
nop
lea eax, [0x7f2bc0]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
mov dword [eax + 4], 9
lea ecx, [0x841006]
mov dword [eax], ecx
mov ecx, dword [esp + 0x2c]
mov dword [eax + 8], ecx
mov ecx, dword [0xc83da0]
test ecx, ecx
jne 0x56fdd8
mov ecx, dword [esp + 0x40]
mov dword [eax + 0xc], ecx
lea ecx, [0x98adf0]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
movzx eax, byte [esp + 0x26]
test al, 2
jne 0x56fdb7
test al, 1
jne 0x56fd8f
add esp, 0xb4
ret
and eax, 0xfffffffe
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0xa0]
call fcn.0045a51e
call fcn.004c0d40
jmp 0x56fd88
and eax, 0xfffffffd
mov byte [esp + 0x26], al
mov byte [esp + 0x25], al
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
call fcn.0058bc40
movzx eax, byte [esp + 0x26]
jmp 0x56fd83
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x40]
call fcn.00459d90
mov eax, ecx
jmp 0x56fd4f
mov eax, dword [esp + 0x40]
jmp 0x56fd55
mov eax, dword [esp + 0xbc]
mov eax, dword [eax + 0x18]
mov ecx, dword [esp + 0xc0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
cmp dword [0xc70908], eax
je 0x56fef4
cmp dword [0xc69a10], eax
je 0x56feb7
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], ecx
movzx eax, byte [esp + 0x26]
test al, 2
jne 0x56fe96
test al, 1
jne 0x56fe6e
add esp, 0xb4
ret
and eax, 0xfffffffe
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0xa0]
call fcn.0045a51e
call fcn.004c0d40
jmp 0x56fe67
and eax, 0xfffffffd
mov byte [esp + 0x26], al
mov byte [esp + 0x25], al
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
call fcn.0058bc40
movzx eax, byte [esp + 0x26]
jmp 0x56fe62
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0xc69a14]
mov dword [esp + 8], edx
call fcn.004033f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x56fee7
mov ecx, dword [0xc69adc]
mov eax, dword [0xc69ad8]
jmp 0x56fe34
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
jmp 0x56fe34
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [0xc7090c]
mov dword [esp + 8], edx
call fcn.004033f0
movzx eax, byte [esp + 0xc]
test al, al
je 0x56ff24
mov ecx, dword [0xc70f04]
mov eax, dword [0xc70f00]
jmp 0x56fe34
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
jmp 0x56fe28
mov eax, dword [esp + 0xb8]
mov ecx, dword [eax + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], 0xffff
mov dword [esp + 8], 0x7010
add eax, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 4
call fcn.004a8180
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x56fff9
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
movzx eax, byte [esp + 0x26]
test al, 2
jne 0x56ffd8
test al, 1
jne 0x56ffb0
add esp, 0xb4
ret
and eax, 0xfffffffe
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0xa0]
call fcn.0045a51e
call fcn.004c0d40
jmp 0x56ffa9
and eax, 0xfffffffd
mov byte [esp + 0x26], al
mov byte [esp + 0x25], al
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
call fcn.0058bc40
movzx eax, byte [esp + 0x26]
jmp 0x56ffa4
mov dword [esp + 0x30], eax
mov dword [esp + 0x4c], ecx
lea eax, [0x7f2bc0]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
mov dword [eax + 4], 0xa
lea ecx, [0x84182d]
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 8], ecx
mov ecx, dword [0xc83da0]
test ecx, ecx
jne 0x570045
mov ecx, dword [esp + 0x4c]
mov dword [eax + 0xc], ecx
lea ecx, [0x98adf0]
jmp 0x56ff76
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x4c]
call fcn.00459d90
mov eax, ecx
jmp 0x57003a
mov edx, dword [esp + 0xcc]
test edx, edx
je 0x570382
mov ebx, dword [edx + 8]
cmp ebx, 0x61a1523f
jne 0x57017b
lea ebx, [0x98aef0]
cmp ebx, edx
jne 0x570382
lea eax, [0x801ae0]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
lea ecx, [0x98aef0]
mov edx, dword [esp + 0xb8]
mov ebx, dword [edx + 0x10]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.004a4a00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x56fc1a
mov dword [esp + 0x44], eax
mov dword [esp + 0x38], ecx
lea eax, [0x7f2bc0]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x83f9d4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [0xc83da0]
test ecx, ecx
jne 0x570169
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
lea ecx, [0x98adf0]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
movzx eax, byte [esp + 0x27]
test al, 1
jne 0x570141
add esp, 0xb4
ret
and eax, 0xfffffffe
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0xa0]
call fcn.0045a51e
call fcn.004c0d40
jmp 0x57013a
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x44]
call fcn.00459d90
mov eax, ecx
jmp 0x570106
cmp ebx, 0x98d3a9ba
jne 0x570382
lea ebx, [0x98af10]
cmp ebx, edx
jne 0x570382
lea eax, [0x807580]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
lea ecx, [0x98af10]
jmp 0x57009b
mov edx, dword [0xc695e4]
mov eax, dword [ecx + 0x10]
mov dword [esp], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xd0]
mov dword [esp + 8], eax
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
test ecx, ecx
jne 0x570245
xor eax, eax
xor ecx, ecx
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], ecx
movzx eax, byte [esp + 0x27]
test al, 1
jne 0x57021d
add esp, 0xb4
ret
and eax, 0xfffffffe
mov byte [esp + 0x25], al
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0xa0]
call fcn.0045a51e
call fcn.004c0d40
jmp 0x570216
mov dword [esp + 0x48], eax
mov dword [esp + 0x34], ecx
lea eax, [0x7f2bc0]
mov dword [esp], eax
call fcn.0040ac80
mov eax, dword [esp + 4]
mov dword [eax + 4], 7
lea ecx, [0x840536]
mov dword [eax], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 8], ecx
mov ecx, dword [0xc83da0]
test ecx, ecx
jne 0x570293
mov ecx, dword [esp + 0x48]
mov dword [eax + 0xc], ecx
mov ecx, eax
lea eax, [0x98adf0]
jmp 0x5701e8
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x48]
call fcn.00459d90
mov eax, ecx
jmp 0x570286
cmp ebp, 4
jne 0x5701b2
cmp dword [ebx], 0x34706374
je 0x56fc0b
cmp dword [ebx], 0x36706374
je 0x56fc0b
jmp 0x5701b2
mov eax, dword [esp + 0xb8]
test byte [eax], al
lea edi, [esp + 0x68]
lea esi, [esp + 0x7c]
call fcn.0045a51e
mov dword [esp], eax
mov edi, dword [esp + 0x50]
lea esi, [esp + 0x68]
call fcn.0045a51e
mov dword [esp + 0x18], 0x77
call fcn.004c0da0
lea eax, [0x90d0fc]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x98], eax
lea edi, [esp + 0xa0]
lea esi, [0xc717c0]
call fcn.0045a51e
mov byte [esp + 0x25], 1
movzx eax, byte [esp + 0x27]
jmp 0x56fbda
xor eax, eax
jmp 0x56fbcb
mov ebx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
mov eax, ecx
jmp 0x56fbaf
xor eax, eax
jmp 0x56fbce
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
add esp, 0xb4
ret
lea eax, [0x7cfd20]
mov dword [esp], eax
lea eax, [0x984188]
mov dword [esp + 4], eax
call fcn.00430830
nop
call fcn.0042ff30
add esp, 0xb4
ret
call fcn.00458550
jmp fcn.0056fab0