Function at 0x4ac360
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x77a042
mov eax, dword fs:[0]
push eax
mov eax, 0x2220
call fcn.00723b70
mov eax, dword [0x88bba0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
push 0
mov dword [ebp - 0x221c], ecx
mov dword [ecx], 0x50
mov ecx, eax
push 0x799e88
mov dword [ebp - 0x2214], eax
mov dword [ebp - 0x2218], edx
call fcn.0042fb60
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x222c], xmm0
call fcn.00480d40
call fcn.004abb40
mov esi, eax
test esi, esi
je 0x4ac3ed
push esi
call dword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x222c]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
jne 0x4ac529
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x3b
mov dword [ebp - 0x21e0], 0
lea ecx, [ebp - 0x21f0]
mov dword [ebp - 0x21dc], 0
mov edi, eax
push str._s:_WinHttpGetIEProxyConfigForCurrentUser_failed__GLE___lu
mov dword [ebp - 0x21dc], 0xf
mov dword [ebp - 0x21e0], 0
mov byte [ebp - 0x21f0], 0
call fcn.0042fb60
mov dword [ebp - 4], 0
lea eax, [ebp - 0x21f0]
push eax
lea ecx, [ebp - 0x220c]
call fcn.00483380
mov esi, eax
mov byte [ebp - 4], 1
mov ecx, esi
push str._anonymous_namespace::GetProxySettings
call fcn.00483720
push edi
mov ecx, esi
call fcn.004836f0
lea eax, [ebp - 0x21d8]
mov ecx, esi
push eax
call fcn.00483750
mov byte [ebp - 4], 2
push eax
call fcn.00481320
add esp, 4
mov byte [ebp - 4], 1
cmp dword [ebp - 0x21c4], 0x10
jb 0x4ac4b4
push dword [ebp - 0x21d8]
call fcn.00489b60
add esp, 4
mov dword [ebp - 0x21c4], 0xf
mov dword [ebp - 0x21c8], 0
mov byte [ebp - 0x21d8], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220c]
call fcn.00483470
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x21dc], 0x10
jb 0x4ac4fc
push dword [ebp - 0x21f0]
call fcn.00489b60
add esp, 4
mov dword [ebp - 0x21dc], 0xf
mov dword [ebp - 0x21e0], 0
mov byte [ebp - 0x21f0], 0
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
call fcn.004810c0
xor al, al
jmp 0x4ac86d
mov eax, dword [ebp - 0x2220]
mov esi, dword [ebp - 0x2224]
mov dword [ebp - 0x2210], eax
xor eax, eax
mov dword [ebp - 0x2198], 0
mov dword [ebp - 0x2194], 0
mov dword [ebp - 0x2194], 7
mov dword [ebp - 0x2198], 0
mov word [ebp - 0x21a8], ax
mov dword [ebp - 4], 3
mov dword [ebp - 0x21b0], eax
mov dword [ebp - 0x21ac], eax
mov dword [ebp - 0x21ac], 7
mov dword [ebp - 0x21b0], eax
mov word [ebp - 0x21c0], ax
mov byte [ebp - 4], 4
push 0xfe
push eax
mov word [ebp - 0x190], ax
lea eax, [ebp - 0x18e]
push eax
call fcn.00723180
mov eax, dword [ebp - 0x2228]
add esp, 0xc
test eax, eax
je 0x4ac5c6
cmp word [eax], 0
jne 0x4ac5d3
cmp dword [ebp - 0x222c], 0
je 0x4ac6e7
cmp dword [edi + 0x14], 0x10
jb 0x4ac5db
mov edi, dword [edi]
push 0x80
lea eax, [ebp - 0x190]
push eax
push 0xffffffffffffffff
push edi
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x4ac6e7
cmp dword [ebp - 0x222c], 1
lea eax, [ebp - 0x21c0]
push eax
sete al
movzx eax, al
push eax
push str.Mozilla_5.0__Windows_NT_6.3__Trident_7.0__rv:11.0_
push dword [ebp - 0x2228]
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x21d8]
push eax
call fcn.004abd60
add esp, 0x18
mov esi, eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0x21a8]
cmp eax, esi
je 0x4ac685
cmp dword [ebp - 0x2194], 8
jb 0x4ac65c
push dword [ebp - 0x21a8]
call fcn.00489b60
add esp, 4
xor eax, eax
mov dword [ebp - 0x2194], 7
push esi
lea ecx, [ebp - 0x21a8]
mov dword [ebp - 0x2198], 0
mov word [ebp - 0x21a8], ax
call fcn.0048d870
mov byte [ebp - 4], 4
cmp dword [ebp - 0x21c4], 8
jb 0x4ac6a0
push dword [ebp - 0x21d8]
call fcn.00489b60
add esp, 4
xor eax, eax
mov dword [ebp - 0x21c4], 7
cmp dword [ebp - 0x2194], 8
lea esi, [ebp - 0x21a8]
lea edi, [ebp - 0x21c0]
mov dword [ebp - 0x21c8], 0
cmovae esi, dword [ebp - 0x21a8]
cmp dword [ebp - 0x21ac], 8
mov word [ebp - 0x21d8], ax
cmovae edi, dword [ebp - 0x21c0]
jmp 0x4ac6ed
mov edi, dword [ebp - 0x2210]
call dword [sym.imp.ADVAPI32.dll_RevertToSelf]
call fcn.004810c0
xor bl, bl
test esi, esi
je 0x4ac7f8
cmp word [esi], 0
je 0x4ac7f8
push 0x7f
lea eax, [ebp - 0x8f]
mov byte [ebp - 0x90], bl
push 0
push eax
call fcn.00723180
add esp, 0xc
lea eax, [ebp - 0x90]
push 0
push 0
push 0x80
push eax
push 0xffffffffffffffff
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0xfde9
call esi
test eax, eax
jle 0x4ac7f8
lea eax, [ebp - 0x90]
push 0x3a
push eax
call fcn.007248c0
add esp, 8
test eax, eax
je 0x4ac787
mov cl, byte [eax + 1]
lea edx, [eax + 1]
cmp cl, 0x30
jl 0x4ac787
cmp cl, 0x39
jg 0x4ac787
push edx
mov byte [eax], bl
call fcn.00723215
mov ecx, dword [ebp - 0x221c]
add esp, 4
mov dword [ecx], eax
mov ecx, dword [ebp - 0x2214]
lea eax, [ebp - 0x90]
push eax
call fcn.0040a400
mov bl, 1
test edi, edi
je 0x4ac7f8
cmp word [edi], 0
je 0x4ac7f8
push 0x1fff
lea eax, [ebp - 0x218f]
mov byte [ebp - 0x2190], 0
push 0
push eax
call fcn.00723180
add esp, 0xc
lea eax, [ebp - 0x2190]
push 0
push 0
push 0x2000
push eax
push 0xffffffffffffffff
push edi
push 0
push 0xfde9
call esi
test eax, eax
jle 0x4ac7f6
mov ecx, dword [ebp - 0x2218]
lea eax, [ebp - 0x2190]
push eax
call fcn.0040a400
jmp 0x4ac7f8
xor bl, bl
mov byte [ebp - 4], 3
cmp dword [ebp - 0x21ac], 8
jb 0x4ac813
push dword [ebp - 0x21c0]
call fcn.00489b60
add esp, 4
xor eax, eax
mov dword [ebp - 0x21ac], 7
mov dword [ebp - 0x21b0], 0
mov word [ebp - 0x21c0], ax
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2194], 8
jb 0x4ac84e
push dword [ebp - 0x21a8]
call fcn.00489b60
add esp, 4
xor eax, eax
mov dword [ebp - 0x2194], 7
mov word [ebp - 0x21a8], ax
mov al, bl
mov dword [ebp - 0x2198], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00722035
mov esp, ebp
pop ebp
ret