Function at 0x1400c4d50
Capabilities:
Reference http user-agent string

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov qword [rax - 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov r14, rcx
add rcx, 0x18
call fcn.14000f250
nop
lea rcx, [r14 + 0x40]
call fcn.14000f250
nop
lea rcx, [r14 + 0x90]
call fcn.14000f250
nop
xor r15d, r15d
mov qword [r14 + 0xd0], r15
mov qword [r14 + 0xd8], r15
mov qword [r14 + 0xe0], r15
mov qword [r14 + 0xe8], r15
mov qword [r14 + 0xf0], r15
mov qword [r14 + 0xf8], r15
mov qword [r14 + 0x100], r15
mov qword [r14 + 0x108], r15
mov qword [r14 + 0x110], r15
lea rcx, [r14 + 0x118]
call fcn.14000f250
nop
lea rcx, [r14 + 0x138]
call fcn.14000f250
nop
lea rcx, [r14 + 0x158]
call fcn.14000f250
nop
lea rcx, [r14 + 0x278]
call fcn.14000f250
nop
lea r12, [0x14072bb00]
cmp byte [0x14032ba6c], r15b
jne 0x1400c4eaa
mov byte [r14 + 0x2a0], 1
lea ecx, [r15 + 3]
call qword [sym.imp.libcurl_x64.dll_Ordinal_26]
lea ecx, [r15 + 4]
call qword [sym.imp.libcurl_x64.dll_Ordinal_85]
lea rdx, str.WinSSL
mov rcx, qword [rax + 0x28]
call fcn.14021eb74
mov r8d, 0x3ff
mov rdx, r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenA]
movsxd rcx, eax
test eax, eax
js 0x1400c4e83
nop
cmp byte [rcx + r12], 0x5c
je 0x1400c50c9
dec eax
sub rcx, 1
jns 0x1400c4e70
lea r8, str.curl_ca_bundle.crt
mov edx, 0x400
mov rcx, r12
call fcn.14022f944
lea rcx, [0x1400c5980]
call fcn.14013aa58
mov byte [0x14032ba6c], 1
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x2a8], 0xffffffffffffffff
mov qword [r14 + 0x2b0], 0xffffffffffffffff
mov qword [r14 + 0x298], r15
mov qword [r14 + 0xc0], 0xffffffffffffffff
mov qword [r14 + 0x38], r15
mov byte [r14 + 0x178], 0
mov qword [r14 + 0x78], r15
call qword [sym.imp.libcurl_x64.dll_Ordinal_5]
mov qword [r14 + 8], rax
mov qword [r14 + 0x64], r15
mov qword [r14 + 0x70], r14
mov dword [r14], 0x10000
mov dword [r14 + 0x80], 1
mov qword [r14 + 0x88], r14
mov byte [r14 + 0x2b8], 0
lea r8, [0x1402becd1]
mov edx, 0x2797
mov rcx, rax
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea rdx, str.Mozilla_5.0
lea rcx, [rsp + 0x28]
call fcn.14000f200
nop
lea rdx, [rsp + 0x28]
lea rcx, [r14 + 0x158]
call fcn.140032b90
nop
lea rcx, [rsp + 0x28]
call fcn.14000f150
lea r8, [0x1400c4bd0]
mov edx, 0x4e2b
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [r14 + 0x68]
mov edx, 0x2711
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [r14 + 0x80]
mov edx, 0x272d
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [r14 + 0x178]
mov edx, 0x271a
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [0x1400c4cc0]
mov edx, 0x4e58
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
xor r8d, r8d
lea edx, [r8 + 0x2b]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov r8, r14
mov edx, 0x2749
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov edx, reloc.WS2_32.dll_gethostbyname
lea r8d, [rdx - 0x33]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [0x1402becd1]
mov edx, 0x2776
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
lea r8, [0x1400c4b70]
mov edx, 0x4eb4
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov r8, r14
mov edx, 0x27a5
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov r8, r12
mov edx, 0x2751
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov edx, Ordinal_85
lea r8d, [rdx - 0x4f]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov edx, 0x3a
lea r8d, [rdx - 0x39]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
mov edx, 0x62
mov r8d, 0x8000
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
xor r8d, r8d
lea edx, [r8 + 0x29]
mov rcx, qword [r14 + 8]
call qword [sym.imp.libcurl_x64.dll_Ordinal_14]
nop
mov rax, r14
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
cdqe
inc rax
cmp rax, 0x400
jae 0x1400c50e0
mov byte [rax + r12], 0
jmp 0x1400c4e83
call fcn.14013abac
int3