Function at 0x618080
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword [0x99504c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xcc]
cmp eax, dword [ecx + 8]
jbe 0x6188bb
sub esp, 0x14c
mov eax, dword [esp + 0x150]
mov ecx, dword [eax]
mov dword [esp + 0x98], ecx
mov edx, dword [ecx + 0x2c]
mov ebx, dword [edx + 0x48]
test ebx, ebx
jle 0x61849f
movzx ebx, byte [eax + 0x15]
test bl, bl
jne 0x61849f
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov dword [esp + 0xa0], edx
lea ebx, [0x6ff340]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00409e40
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 8], eax
call fcn.005eb1b0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x618482
mov eax, dword [esp + 0xc]
lea ecx, [0x705ae0]
cmp eax, ecx
jne 0x61812c
mov edx, dword [esp + 0x10]
jmp 0x618131
mov edx, 0
mov dword [esp + 0x94], edx
jne 0x6183ab
test byte [edx], al
lea esi, [edx + 0xc]
lea edi, [esp + 0xb4]
call fcn.0046957a
mov eax, dword [esp + 0x98]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0xb4]
call fcn.0046957a
call fcn.00612c20
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x61838e
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x2c]
mov ecx, dword [ecx + 0x2c]
test ecx, ecx
je 0x6181de
mov dword [esp], eax
call fcn.005ee210
lea edi, [esp + 0xf0]
lea esi, [esp + 4]
call fcn.0046952a
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [edx]
mov dword [esp + 0x78], ecx
lea edi, [esp]
lea esi, [esp + 0xf0]
call fcn.0046952a
mov ecx, dword [esp + 0x78]
call ecx
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x618341
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x94]
mov ecx, dword [ecx + 0x10]
test ecx, ecx
je 0x6187c2
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.005eb1b0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x618324
mov eax, dword [esp + 0xc]
lea ecx, [0x7059c0]
cmp eax, ecx
jne 0x618228
mov edx, dword [esp + 0x10]
jmp 0x61822d
mov edx, 0
mov dword [esp + 0x90], edx
jne 0x61824d
movzx eax, word [edx + 0xe]
mov ecx, dword [0x967be0]
mov ebx, dword [0x967be4]
xor ebp, ebp
jmp 0x618559
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov byte [esp + 4], 0xa
call fcn.005e9f50
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xa8], eax
lea eax, [0x7059c0]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0xb0], eax
lea eax, [0x751a0c]
mov dword [esp], eax
mov dword [esp + 4], 0x49
lea eax, [esp + 0xa4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c1f50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov byte [esp + 4], 0x2a
call fcn.005e9f50
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x158], eax
add esp, 0x14c
ret
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov byte [esp + 4], 0xa
call fcn.005e9f50
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0xa8], eax
lea eax, [0x705ae0]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0xb0], eax
lea eax, [0x751a0c]
mov dword [esp], eax
mov dword [esp + 4], 0x49
lea eax, [esp + 0xa4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c1f50
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [edx + 0x2c]
test eax, eax
je 0x6184ee
mov dword [esp], ecx
call fcn.005ee210
lea edi, [esp + 0xf0]
lea esi, [esp + 4]
call fcn.0046952a
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ecx + 0x2c]
mov ecx, dword [edx]
mov dword [esp + 0x78], ecx
lea edi, [esp]
lea esi, [esp + 0xf0]
call fcn.0046952a
mov ecx, dword [esp + 0x78]
call ecx
mov eax, dword [esp + 0x5c]
test eax, eax
jne 0x61850b
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x14c
ret
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
mov byte [esp + 4], 0x2a
call fcn.005e9f50
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x158], eax
add esp, 0x14c
ret
inc ebp
cmp ebp, ebx
jge 0x618861
lea esi, [ecx + ebp*2]
cmp word [esi], ax
jne 0x618558
mov word [esp], ax
call fcn.005dfcf0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x618830
movzx eax, byte [esp + 4]
cmp al, 0xe1
je 0x618591
mov ecx, dword [esp + 8]
cmp ecx, 3
jne 0x6185e1
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.005e9f50
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x3d
lea ecx, [0x750565]
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], eax
add esp, 0x14c
ret
mov byte [esp + 0x67], al
mov dword [esp + 0x6c], ecx
mov eax, dword [esp + 0x150]
mov edx, dword [eax + 0x60]
mov ebx, dword [eax + 0x64]
mov dword [esp], ecx
lea ebp, str.TLS_1.3__client_CertificateVerify
mov dword [esp + 4], ebp
mov dword [esp + 8], 0x22
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.005dfab0
mov eax, dword [esp + 0x98]
mov ecx, dword [eax + 0x54]
test ecx, ecx
jbe 0x6188b1
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [eax + 0x50]
mov ebp, dword [ebp]
mov esi, dword [ebp + 0x50]
mov ebp, dword [ebp + 0x54]
mov edi, dword [esp + 0x90]
mov eax, dword [edi + 0x10]
mov dword [esp + 0x9c], eax
mov eax, dword [edi + 0x14]
mov edi, dword [edi + 0x18]
mov dword [esp + 0x74], edi
movzx edi, byte [esp + 0x67]
xchg edi, eax
mov byte [esp], al
xchg edi, eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x6c]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x24], eax
call fcn.005df610
mov eax, dword [esp + 0x28]
test eax, eax
je 0x618770
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x98]
mov dword [esp], ecx
mov byte [esp + 4], 0x33
call fcn.005e9f50
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x84]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp], 0
lea edx, [0x74e1bb]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x32
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.00452120
mov eax, dword [esp + 0x18]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x7c], ecx
lea edx, [0x701240]
mov dword [esp], edx
call fcn.0040c500
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [0x995310]
test ecx, ecx
jne 0x618748
mov ecx, dword [esp + 0x7c]
jmp 0x618753
call fcn.00468e60
mov ecx, dword [esp + 0x7c]
mov dword [edi], ecx
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], eax
add esp, 0x14c
ret
mov eax, dword [esp + 0x150]
mov ecx, dword [eax + 0x60]
mov edx, dword [eax + 0x64]
mov dword [esp + 0xa0], edx
lea ebx, [0x6ff340]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.00409e40
lea eax, [0x7b1a04]
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0xc], eax
call fcn.0060dcd0
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x618813
mov eax, dword [esp + 0x150]
mov dword [esp], eax
call fcn.00617990
mov eax, dword [esp + 4]
test eax, eax
je 0x6187f6
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov dword [esp + 0x154], 0
mov dword [esp + 0x158], 0
add esp, 0x14c
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov byte [esp + 4], 0x50
call fcn.005e9f50
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], ecx
add esp, 0x14c
ret
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov byte [esp + 4], 0x2f
call fcn.005e9f50
lea eax, [0x701240]
mov dword [esp], eax
call fcn.0040c500
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x3d
lea ecx, [0x750565]
mov dword [eax], ecx
lea ecx, [0x7b0bb8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], eax
add esp, 0x14c
ret
xor eax, eax
mov ecx, eax
call fcn.00468ed0
nop
call fcn.00467a60
jmp fcn.00618080