Function at 0x432420
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x800]
cmp r12, qword [r14 + 0x10]
jbe 0x43279d
push rbp
mov rbp, rsp
sub rsp, 0x878
lea rdi, [rsp + 0x78]
mov ecx, 0x100
mov rdx, rax
xor eax, eax
rep stosq qword [rdi], rax
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x44], 0
mov qword [rsp + 0x58], 0
mov rsi, qword [r14 + 0x30]
cmp qword [0x005fc390], 0xffffffffffffffff
nop dword [rax]
je 0x4325f6
test rdx, rdx
jge 0x432495
mov rcx, rdx
mov edx, 0xffffffff
jmp 0x4324e3
jne 0x4324a0
mov rcx, rdx
xor edx, edx
jmp 0x4324e3
cmp rdx, 0xf4240
jge 0x4324b3
mov rcx, rdx
mov edx, 1
jmp 0x4324e3
movabs rcx, 0x38d7ea4c68000
nop dword [rax]
cmp rdx, rcx
jge 0x4324db
movabs rax, 0x431bde82d7b634db
mov rcx, rdx
imul rdx
sar rdx, 0x12
jmp 0x4324e3
mov rcx, rdx
mov edx, 0x3b9aca00
movsxd rbx, dword [0x00696668]
test rbx, rbx
je 0x432797
mov eax, 0x40
mov edi, edx
nop word [rax + rax]
cmp rbx, 0xffffffffffffffff
jne 0x43250d
neg rax
xor edx, edx
jmp 0x432512
cqo
idiv rbx
mov dword [rsp + 0x44], eax
cmp eax, 8
jae 0x432528
mov dword [rsp + 0x44], 8
test rcx, rcx
jmp 0x43252b
test rcx, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x70], rsi
je 0x43253e
mov byte [rsi + 0xe5], 1
mov rax, qword [0x005fc390]
mov rcx, qword [sym.imp.kernel32.dll_GetQueuedCompletionStatusEx]
lea rdx, [rsp + 0x78]
mov ebx, dword [rsp + 0x44]
lea rsi, [rsp + 0x44]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov eax, edi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 0
call fcn.00434bc0
xorps xmm15, xmm15
mov r14, qword [0x00696838]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x38], 0
nop
je 0x4325bc
mov rdx, qword [rsp + 0x70]
mov byte [rdx + 0xe5], 0
mov rdx, qword [rsp + 0x60]
xor eax, eax
xor ecx, ecx
jmp 0x432653
mov rax, qword [rsp + 0x70]
mov byte [rax + 0xe5], 0
call fcn.00467c40
xorps xmm15, xmm15
mov r14, qword [0x00696838]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
cmp eax, 0x102
jne 0x432603
xor eax, eax
xor ebx, ebx
add rsp, 0x878
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x878
pop rbp
ret
mov dword [rsp + 0x54], eax
call fcn.00438ae0
lea rax, [0x004ea588]
mov ebx, 0x34
call fcn.00439360
mov eax, dword [rsp + 0x54]
movsxd rax, eax
call fcn.00439180
lea rax, [0x004df050]
mov ebx, 3
call fcn.00439360
call fcn.00438b40
lea rax, [0x004e3f7c]
mov ebx, 0x17
call fcn.00437040
lea eax, [rsi + 1]
cmp dword [rsp + 0x44], eax
jbe 0x43277d
nop dword [rax]
cmp rax, 0x40
jae 0x43278d
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x50], ecx
mov esi, eax
shl rax, 5
mov rdi, qword [rsp + rax + 0x80]
test rdi, rdi
je 0x43274d
mov r8, qword [rdi + 0x20]
mov r9, qword [rsp + rax + 0x78]
cmp r9, r8
je 0x43269f
test rdx, rdx
jmp 0x432750
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x40], 0
mov rax, qword [0x006114c0]
mov rcx, qword [rdi + 0x20]
mov rcx, qword [rcx + 8]
lea rbx, [rsp + 0x40]
lea rsi, [rsp + 0x4c]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], rsi
call fcn.00434b40
xorps xmm15, xmm15
mov r14, qword [0x00696838]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x30], 0
je 0x432709
xor eax, eax
jmp 0x432723
call fcn.00467c40
xorps xmm15, xmm15
mov r14, qword [0x00696838]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov edi, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x68]
mov ecx, eax
lea rax, [rsp + 0x58]
call fcn.004327c0
mov edx, dword [rsp + 0x50]
lea ecx, [rdx + rax]
mov rdx, qword [rsp + 0x60]
mov esi, dword [rsp + 0x48]
jmp 0x432650
test rdx, rdx
nop
mov edi, 0
lea r8, [0x00696640]
xchg dword [r8], edi
jne 0x432650
call fcn.00432320
mov ecx, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
mov esi, dword [rsp + 0x48]
jmp 0x432650
mov rax, qword [rsp + 0x58]
mov ebx, ecx
add rsp, 0x878
pop rbp
ret
mov ecx, 0x40
call fcn.00466800
call fcn.00435c80
nop
mov qword [rsp + 8], rax
call fcn.00464520
mov rax, qword [rsp + 8]
jmp fcn.00432420