Function at 0x43af20
Capabilities:
Reference http user-agent string

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43b25d
push rbp
mov rbp, rsp
sub rsp, 0x38
mov rax, qword [0x01ec1400]
lea rcx, str.bcryptprimitives.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
nop dword [rax]
call fcn.0043cf80
xorps xmm15, xmm15
mov r14, qword [0x0203d8d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
nop dword [rax]
test rax, rax
je 0x43b24b
lea rbx, [0x010920d0]
mov ecx, 0xc
mov rdi, rcx
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43afb9
call fcn.00479b20
mov qword [r11], rax
mov rcx, qword [0x01faecb0]
mov qword [r11 + 8], rcx
mov qword [0x01faecb0], rax
mov rax, qword [0x01ec1400]
lea rcx, str.ntdll.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call fcn.0043cf80
xorps xmm15, xmm15
mov r14, qword [0x0203d8d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x43b23a
mov qword [rsp + 0x28], rax
lea rbx, [0x010983fe]
mov ecx, 0x11
mov rdi, rcx
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43b044
call fcn.00479b20
mov qword [r11], rax
mov rdx, qword [0x01faecb8]
mov qword [r11 + 8], rdx
mov qword [0x01faecb8], rax
mov rax, qword [rsp + 0x28]
lea rbx, [0x010a13ec]
mov ecx, 0x17
mov rdi, rcx
nop
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43b081
call fcn.00479b20
mov qword [r11], rax
mov rcx, qword [0x01faecc0]
mov qword [r11 + 8], rcx
mov qword [0x01faecc0], rax
mov rax, qword [0x01ec1400]
lea rcx, str.winmm.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call fcn.0043cf80
xorps xmm15, xmm15
mov r14, qword [0x0203d8d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x43b229
mov qword [rsp + 0x30], rax
lea rbx, [0x01096d2e]
mov ecx, 0x10
mov rdi, rcx
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43b10c
call fcn.00479b20
mov qword [r11], rax
mov rdx, qword [0x01faecc8]
mov qword [r11 + 8], rdx
mov qword [0x01faecc8], rax
mov rax, qword [rsp + 0x30]
lea rbx, [0x01094352]
mov ecx, 0xe
mov rdi, rcx
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43b148
call fcn.00479b20
mov qword [r11], rax
mov rcx, qword [0x01faecd0]
mov qword [r11 + 8], rcx
mov qword [0x01faecd0], rax
cmp qword [0x01faecc8], 0
je 0x43b218
nop dword [rax]
test rax, rax
je 0x43b218
mov rax, qword [0x01ec1400]
lea rcx, str.ws2_32.dll
nop
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x800
call fcn.0043cf80
xorps xmm15, xmm15
mov r14, qword [0x0203d8d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x43b207
lea rbx, [0x010a1403]
mov ecx, 0x17
mov rdi, rcx
call fcn.0043adc0
cmp dword [0x0203dd30], 0
je 0x43b1e4
call fcn.00479b20
mov qword [r11], rax
mov rcx, qword [0x01faecd8]
mov qword [r11 + 8], rcx
mov qword [0x01faecd8], rax
test rax, rax
je 0x43b1f6
add rsp, 0x38
pop rbp
ret
lea rax, [0x010b43fd]
mov ebx, 0x20
call fcn.0043ffc0
lea rax, [0x0109c9a6]
mov ebx, 0x14
call fcn.0043ffc0
lea rax, [0x010ad0cc]
mov ebx, 0x1d
call fcn.0043ffc0
lea rax, [0x0109b04e]
mov ebx, 0x13
call fcn.0043ffc0
lea rax, [0x0109b03b]
mov ebx, 0x13
call fcn.0043ffc0
lea rax, [0x010af64a]
mov ebx, 0x1e
call fcn.0043ffc0
nop
nop dword [rax]
call fcn.00477be0
jmp fcn.0043af20