Function at 0x218631cd0
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
sub rsp, 0x4a0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x430], rcx
mov qword [rbp + 0x438], rdx
mov qword [rbp + 0x440], r8
mov dword [rbp + 0x448], r9d
mov ecx, 0x6ae69f02
call fcn.218631728
mov qword [rbp + 0x410], rax
mov rax, qword [rbp + 0x410]
mov edx, 0x3fc1bd8d
mov rcx, rax
call fcn.218631380
mov qword [0x2186420e0], rax
mov rax, qword [0x2186420e0]
lea rdx, str.winhttp.dll
mov rcx, rdx
call rax
mov qword [rbp + 0x408], rax
mov rax, qword [rbp + 0x408]
mov edx, 0x2d697d39
mov rcx, rax
call fcn.218631380
mov qword [0x2186420a8], rax
mov rax, qword [rbp + 0x408]
mov edx, 0x6f50b6c6
mov rcx, rax
call fcn.218631380
mov qword [0x2186420b0], rax
mov rax, qword [rbp + 0x408]
mov edx, 0xb8172a42
mov rcx, rax
call fcn.218631380
mov qword [0x2186420b8], rax
mov rax, qword [rbp + 0x408]
mov edx, 0xcee9b4f7
mov rcx, rax
call fcn.218631380
mov qword [0x2186420c0], rax
mov rax, qword [rbp + 0x408]
mov edx, 0x46bb61f9
mov rcx, rax
call fcn.218631380
mov qword [0x2186420c8], rax
mov rax, qword [rbp + 0x408]
mov edx, 0x2e5251ca
mov rcx, rax
call fcn.218631380
mov qword [0x2186420d0], rax
mov rax, qword [rbp + 0x408]
mov edx, 0x6a29f9f4
mov rcx, rax
call fcn.218631380
mov qword [0x2186420d8], rax
mov ecx, 0x6ae69f02
call fcn.218631728
mov edx, 0x517fef08
mov rcx, rax
call fcn.218631380
mov qword [0x2186420a0], rax
mov dword [rbp + 0x3c4], 0
mov dword [rbp + 0x41c], 0
mov dword [rbp + 0x404], 0x400
mov rax, qword [0x2186420a8]
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 1
lea rcx, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_114.0.0.0_Safari_537.36
call rax
mov qword [rbp + 0x3f8], rax
cmp qword [rbp + 0x3f8], 0
jne 0x218631e7f
mov eax, 0xffffffff
jmp 0x2186321b0
cmp dword [rbp + 0x448], 0
je 0x218631e8f
mov eax, 0x1bb
jmp 0x218631e94
mov eax, 0x50
mov word [rbp + 0x3f6], ax
mov r10, qword [0x2186420b0]
movzx ecx, word [rbp + 0x3f6]
mov rdx, qword [rbp + 0x438]
mov rax, qword [rbp + 0x3f8]
mov r9d, 0
mov r8d, ecx
mov rcx, rax
call r10
mov qword [rbp + 0x3e8], rax
cmp qword [rbp + 0x3e8], 0
jne 0x218631ef4
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3f8]
mov rcx, rax
call rdx
mov eax, 0xffffffff
jmp 0x2186321b0
cmp dword [rbp + 0x448], 0
je 0x218631f04
mov eax, 0x800000
jmp 0x218631f09
mov eax, 0
mov dword [rbp + 0x3e4], eax
mov r10, qword [0x2186420b8]
mov rcx, qword [rbp + 0x440]
mov rax, qword [rbp + 0x3e8]
mov edx, dword [rbp + 0x3e4]
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8, rcx
lea rdx, [0x21863e150]
mov rcx, rax
call r10
mov qword [rbp + 0x3d8], rax
mov r10, qword [0x2186420c0]
mov rax, qword [rbp + 0x3d8]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call r10
mov dword [rbp + 0x3d4], eax
cmp dword [rbp + 0x3d4], 0
jne 0x218631fed
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3f8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3e8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3d8]
mov rcx, rax
call rdx
mov eax, 0xffffffff
jmp 0x2186321b0
mov r8, qword [0x2186420c8]
mov rax, qword [rbp + 0x3d8]
mov edx, 0
mov rcx, rax
call r8
mov dword [rbp + 0x3d4], eax
cmp dword [rbp + 0x3d4], 0
jne 0x218632058
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3f8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3e8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3d8]
mov rcx, rax
call rdx
mov eax, 0xffffffff
jmp 0x2186321b0
mov rax, qword [0x21863e170]
mov rax, qword [rax + 0x40]
mov ecx, 1
call rax
mov rdx, qword [rbp + 0x430]
mov qword [rdx], rax
mov r10, qword [0x2186420d0]
lea r8, [rbp + 0x3c4]
mov ecx, dword [rbp + 0x404]
lea rdx, [rbp - 0x40]
mov rax, qword [rbp + 0x3d8]
mov r9, r8
mov r8d, ecx
mov rcx, rax
call r10
test eax, eax
je 0x218632163
mov eax, dword [rbp + 0x3c4]
test eax, eax
je 0x218632163
mov rax, qword [0x21863e170]
mov r8, qword [rax + 0x38]
mov edx, dword [rbp + 0x3c4]
mov eax, dword [rbp + 0x41c]
add eax, edx
add eax, 1
mov edx, eax
mov rax, qword [rbp + 0x430]
mov rax, qword [rax]
mov rcx, rax
call r8
mov qword [rbp + 0x3c8], rax
cmp qword [rbp + 0x3c8], 0
jne 0x2186320fe
mov eax, 0xffffffff
jmp 0x2186321b0
mov rax, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x3c8]
mov qword [rax], rdx
mov rax, qword [0x21863e170]
mov r9, qword [rax + 0x20]
mov eax, dword [rbp + 0x3c4]
mov r8d, eax
mov rax, qword [rbp + 0x430]
mov rdx, qword [rax]
mov eax, dword [rbp + 0x41c]
lea rcx, [rdx + rax]
lea rax, [rbp - 0x40]
mov rdx, rax
call r9
mov eax, dword [rbp + 0x3c4]
add dword [rbp + 0x41c], eax
mov rax, qword [rbp + 0x430]
mov rdx, qword [rax]
mov eax, dword [rbp + 0x41c]
add rax, rdx
mov byte [rax], 0
mov eax, dword [rbp + 0x3c4]
test eax, eax
jne 0x218632074
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3f8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3e8]
mov rcx, rax
call rdx
mov rdx, qword [0x2186420d8]
mov rax, qword [rbp + 0x3d8]
mov rcx, rax
call rdx
mov eax, dword [rbp + 0x41c]
add rsp, 0x4a0
pop rbp
ret