Function at 0x45a720
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45a88f
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x80], rsi
call fcn.004394c0
lea rax, [0x006be700]
mov ebx, 0x1c
call fcn.00439dc0
mov rax, qword [rsp + 0x30]
call fcn.00439bc0
lea rax, str._:_nadxaesageavxcgocmddirdnsendfinfmaftpgc_getgp_in_intip4ip6keymapmmhnewnilobjpcptrsetsshtcpudpviass_____u_____r_t_n_as__at__fp_is__lr:_of__on__pc_sp:_sp_x_r_ngt_lt______mInf_Inf.bat.cmd.com.css.exe.gif.htm.jpg.mjs.pdf.png.svg.xml0x_x0x000x0210803125:_p:443::_0ACDTACSTAEDTAESTAKDTAKSTAWSTAhomAtoiCESTCOM1COM2COM3COM4COM5COM6COM7COM8COM9ChamDATADashDateEESTEtagFromGET_GOGCGoneGoodHostJulyJuneLEAFLPT1LPT2LPT3LPT4LPT5LPT6LPT7LPT8LPT9LisuMiaoModiNZDTNZSTNameNewaPINGPOSTSASTStatThaiTypeWeak___F_n_tm_____nallgallpasn1avx2basebindbitsbmi1bmi2boolcallcas1cas2cas3cas4cas5cas6chancx16datedeaddialermsetagfilefromftpsfuncget1gziphosthourhttpicmpidleigmpint8itabkindlinkmineopenpathpipepop3postquitreadrootsbrksmtpsse2sse3tcp4tcp6trueudp4uintunixvaryxn___..._n_MB___and__cnt_got_max_ms___ptr__tab_top_s__q_s_d_s:_s_s:_v_s_s34_39_amp_033004300530054506300845103012451345__fp:_0930.avif.html.jpeg.json.wasm.webp_win_1562578125:_:3333:5555:8888::_96:path_nil_AdlamAprilBamumBatakBuhidClassDograECDSAErrorFoundGreekHTTP_KhmerLatinLimbuLocalLstatMarchNushuOghamOriyaOsageP_224P_256P_384P_521POST_RangeRealmRunicSHA_1STermTakriTamilTypeAWOW64____allowarraybad_nchdirclosedeferfalsefaultfilesfivemgFreegcinggscanhchanhostshttpsimap2imap3imapsinit_int16int32int64mheapmonthntohspanicparsepop3spost1rangescav_schedsleepslicesockssse41sse42ssse3sudogsweeptext_tls:_traceuint8usageutf_8write_B_____Value_addr_alloc_base__code_ctxt:_curg_free__goid__jobs_list_m__p_max__min__next_p__m_prev_span__utilguid_...__n__i____not___val_.local.onion390625__chanAcceptAnswerArabicAugustBasic_BrahmiCANCELCarianChakmaCommonCookieCopticDecentExpectFormatFridayGOAWAYGetACPGothicHangulHatranHebrewHyphenInsaneKaithiKhojkiLengthLepchaLockedLycianLydianMondayPADDEDPragmaRejangSCHED_STREETServerStringStrongSundaySyriacTai_LeTangutTeluguThaanaTypeMXTypeNSUTC12UTC13UTC_02UTC_08UTC_09UTC_11WanchoX25519Yezidi__byteacceptactiveavx512chan__chromeclosedcookiedomainefenceexec:_expectgopherhangupheaderinternipnetkilledlistenminutenetdnsobjectpopcntrdrandrdseedrdtscpremovereturnsecondselectserversocketsocks_socks5spiderstatusstringstructsweep_sysmontcphextcpvsetelnettimerstokenudphexudpvseuint16uint32uint64unused__v_v___conn___scan___scan__MB_in__Value__allocs_dying_flags_len_d_locks_m__g0_nmsys_pad1__pad2__snil_n_text__zombie__CPU____goid__j0___client19531252.5.4.32.5.4.52.5.4.62.5.4.72.5.4.82.5.4.99765625:_type_::1_128:method:scheme:statusAvestanBengaliBrailleCONNECTChanDirCopySidCreatedCypriotDeseretEd25519ElbasanElymaicExpiresGODEBUGGodlikeGranthaHEADERSHanunooIM_UsedIO_waitJanuaryKannadaMD2_RSAMD5_RSAMUI_DltMUI_StdMakasarMandaicMarchenMultaniMyanmarOctoberOsmanyaPATHEXTRadicalRefererSHA_224SHA_256SHA_384SHA_512SharadaShavianSiddhamSinhalaSogdianSoyomboSubjectSwapperTagalogTibetanTirhutaTrailerTuesdayTypeALLTypeOPTTypePTRTypeSOATypeSRVTypeTXTTypeWKSUNKNOWNUpgradeWSARecvWSASendWin3.11Windows_ttypes__tvalueabortedanswersavx512fbigdatacharsetchunkedconnectconsolecpuprofdel__f_derivedexpiresfloat32float64forcegcgatewaygctracegetrandhead__http:__invalidlookup_minpc_nil_keyosxsavepacer:_panic:_refererrefreshrunningserial:signal_syscalltraileruintptrunknownupgradewaitingwindowswsarecvwsasend_Safari__bytes___data_q_etypes__incr_v_is_not__maxpc__mcount_minLC__minutes_nalloc_newval_nfreed_packed_ping_q_pointer_stack__status___Month_.NET_CLR.exe__O_2.5.4.102.5.4.112.5.4.1748828125AcceptExAcceptedArmenianBalineseBopomofoBugineseCancelIoCherokeeClassANYConflictContinueCurveID_CyrillicDNS_nameDSA_SHA1DecemberDuployanEthiopicExtenderFebruaryFullPathGeorgianGoStringGujaratiGurmukhiHTTP_1.1HTTP_2.0HiraganaJavaneseKatakanaKayah_LiLinear_ALinear_BLocationMD5SHA1MahajaniNO_ERRORNO_PROXYNovemberOl_ChikiPRIORITYParseIntPhags_PaQuestionReadFileReceivedSETTINGSSHA1_RSASHA3_224SHA3_256SHA3_384SHA3_512SaturdayTagbanwaTai_ThamTai_VietThursdayTifinaghTrident_TypeAAAATypeAXFRUgariticWSAIoctlWinNT4.0_::1_:53_signal__tstack_address_avx512bwavx512cdavx512dqavx512eravx512pfavx512vlcgocheckcontinuecs______deadlockexporterfc00::
mov ebx, 3
call fcn.00439dc0
call fcn.00439540
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x28], rcx
xor edx, edx
jmp 0x45a7b9
mov rdx, qword [rsp + 0x20]
inc rdx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x28]
cmp rdx, rcx
jge 0x45a80e
mov qword [rsp + 0x20], rdx
mov rcx, qword [rax + rdx*8]
mov qword [rsp + 0x18], rcx
mov rax, rcx
call fcn.00451de0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov rcx, qword [rsp + 0x20]
test rcx, rcx
sete dl
xor edi, edi
mov esi, edi
mov ecx, edx
call fcn.0045ae80
test al, al
je 0x45a7a7
mov rax, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x18]
call fcn.0045a8e0
jmp 0x45a7a7
cmp qword [rsp + 0x68], 0x64
jne 0x45a831
call fcn.004394c0
lea rax, [0x006bffbd]
mov ebx, 0x1f
call fcn.00439dc0
call fcn.00439540
mov rax, qword [rsp + 0x80]
call fcn.00451de0
nop
test rax, rax
jne 0x45a849
xor ecx, ecx
jmp 0x45a86a
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rax
xor ecx, ecx
xor edi, edi
mov esi, edi
call fcn.0045ae80
mov rbx, qword [rsp + 0x38]
mov ecx, eax
mov rax, qword [rsp + 0x40]
test cl, cl
je 0x45a885
cmp qword [rsp + 0x78], 1
je 0x45a885
mov rcx, qword [rsp + 0x80]
nop
call fcn.0045a100
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call fcn.004629a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp fcn.0045a720