Function at 0x10008e20
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1010c544
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x10137920]
xor eax, esp
mov dword [esp + 0x118], eax
push ebx
push esi
push edi
mov eax, dword [0x10137920]
xor eax, esp
push eax
lea eax, [esp + 0x130]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push 0x68
mov dword [esp + 0x14], eax
call fcn.10066a7d
add esp, 4
mov esi, eax
push 0x32
xor ebx, ebx
lea ecx, [esi + 8]
or edi, 0xffffffff
push ebx
push ecx
mov dword [esp + 0x20], esi
mov dword [esi], edi
mov dword [esi + 4], edi
call fcn.10066620
add esp, 0xc
push 1
mov dword [esi + 0x58], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
call fcn.10066a7d
add esp, 4
push str.Accept:__
push ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ebx
call fcn.100b8c90
push str.Accept_Language:
push eax
call fcn.100b8c90
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko
push eax
call fcn.100b8c90
push str.Accept_Encoding:_gzip__deflate
push eax
call fcn.100b8c90
add esp, 0x20
mov dword [esp + 0x18], eax
call fcn.100b89c0
mov dword [esp + 0x1c], eax
cmp eax, ebx
je 0x1000942d
lea edx, [esp + 0xec]
push edx
call fcn.10001360
add esp, 4
lea eax, [esp + 0x98]
push eax
mov dword [esp + 0x13c], ebx
call fcn.100014b0
add esp, 4
lea ecx, [esp + 0x7c]
push ecx
mov byte [esp + 0x13c], 1
call fcn.10001690
add esp, 4
lea edx, [esp + 0xb4]
push edx
mov byte [esp + 0x13c], 2
call fcn.100017c0
add esp, 4
mov byte [esp + 0x138], 3
xor eax, eax
mov byte [esp + 0x108], bl
mov dword [esp + 0x109], eax
mov dword [esp + 0x10d], eax
mov dword [esp + 0x111], eax
mov dword [esp + 0x115], eax
mov dword [esp + 0x119], eax
mov dword [esp + 0x11d], eax
mov dword [esp + 0x121], eax
mov word [esp + 0x125], ax
mov byte [esp + 0x127], al
call fcn.10001de0
push eax
push 0x10123014
lea eax, [esp + 0x110]
push 0x20
push eax
call fcn.100665ff
mov esi, 0xf
mov dword [esp + 0x68], esi
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
lea ecx, [esp + 0x38]
push 0x101230c4
push ecx
lea ebx, [esp + 0x104]
mov byte [esp + 0x150], 4
call fcn.1000a430
add esp, 0x18
push edi
push 0
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x144], 5
call fcn.10003d30
mov edi, 0x10
mov byte [esp + 0x138], 4
cmp dword [esp + 0x3c], edi
jb 0x1000902d
mov edx, dword [esp + 0x28]
push edx
call fcn.10065453
add esp, 4
lea eax, [esp + 0x28]
push 0x101230c8
push eax
lea ebx, [esp + 0xbc]
call fcn.1000a430
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x144], 6
call fcn.10003d30
mov byte [esp + 0x138], 4
cmp dword [esp + 0x3c], edi
jb 0x10009077
mov ecx, dword [esp + 0x28]
push ecx
call fcn.10065453
add esp, 4
lea edx, [esp + 0x28]
push 0x101230cc
push edx
lea ebx, [esp + 0xa0]
call fcn.1000a430
add esp, 8
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x144], 7
call fcn.10003d30
mov byte [esp + 0x138], 4
cmp dword [esp + 0x3c], edi
jb 0x100090c1
mov eax, dword [esp + 0x28]
push eax
call fcn.10065453
add esp, 4
lea ecx, [esp + 0x28]
push str.cv
push ecx
lea ebx, [esp + 0x84]
call fcn.1000a430
add esp, 8
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x144], 8
call fcn.10003d30
mov byte [esp + 0x138], 4
cmp dword [esp + 0x3c], edi
jb 0x1000910c
mov edx, dword [esp + 0x28]
push edx
call fcn.10065453
add esp, 4
push 4
push str.an
lea ecx, [esp + 0xd8]
mov dword [esp + 0xec], esi
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xd8], bl
call fcn.10004560
lea eax, [esp + 0xd0]
push eax
lea edx, [esp + 0x10c]
lea esi, [esp + 0x2c]
mov byte [esp + 0x13c], 9
call fcn.1000a500
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x144], 0xa
call fcn.10003d30
cmp dword [esp + 0x3c], edi
jb 0x1000917f
mov ecx, dword [esp + 0x28]
push ecx
call fcn.10065453
add esp, 4
mov byte [esp + 0x138], 4
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
cmp dword [esp + 0xe4], edi
jb 0x100091b0
mov edx, dword [esp + 0xd0]
push edx
call fcn.10065453
add esp, 4
lea ecx, [esp + 0x44]
lea edi, [esp + 0x28]
call fcn.10004b70
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x13c], 0xb
call fcn.10004040
mov esi, 0x10
mov byte [esp + 0x138], 4
cmp dword [esp + 0x3c], esi
jb 0x100091ef
mov eax, dword [esp + 0x28]
push eax
call fcn.10065453
add esp, 4
push 7
push str.http:__
lea ecx, [esp + 0x68]
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], ebx
mov byte [esp + 0x68], bl
call fcn.10004560
lea ecx, [esp + 0x28]
push ecx
mov byte [esp + 0x13c], 0xc
call fcn.10008cd0
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x144], 0xd
call fcn.10003d30
mov byte [esp + 0x138], 0xc
cmp dword [esp + 0x3c], esi
jb 0x10009254
mov edx, dword [esp + 0x28]
push edx
call fcn.10065453
add esp, 4
push 3
push 0x101232cc
lea ecx, [esp + 0x68]
call fcn.10003e20
push 1
push 0x101231c4
lea ecx, [esp + 0x68]
call fcn.10003e20
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x6c]
call fcn.10003d30
mov edi, dword [esp + 0x1c]
push 0xa
push 0xd
push edi
call fcn.100b8a00
mov eax, dword [esp + 0x6c]
add esp, 0xc
cmp dword [esp + 0x74], esi
jae 0x100092a4
lea eax, [esp + 0x60]
push eax
push 0x2712
push edi
call fcn.100b8a00
add esp, 0xc
push 0x10005a00
push 0x4e2b
push edi
call fcn.100b8a00
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
push 0x2711
push edi
call fcn.100b8a00
add esp, 0xc
push 0x10004790
push 0x4e6f
push edi
call fcn.100b8a00
mov esi, dword [esp + 0x20]
add esp, 0xc
push esi
push 0x272d
push edi
call fcn.100b8a00
add esp, 0xc
push 0x100047e0
push 0x4e2b
push edi
call fcn.100b8a00
add esp, 0xc
push esi
push 0x2711
push edi
call fcn.100b8a00
add esp, 0xc
push edi
call fcn.100b8bf0
add esp, 4
test eax, eax
je 0x10009453
mov edx, dword [esp + 0x18]
push edx
call fcn.100b8cd0
add esp, 4
push edi
call fcn.100b8c10
mov esi, 0x10
add esp, 4
cmp dword [esp + 0x74], esi
jb 0x10009360
mov eax, dword [esp + 0x60]
push eax
call fcn.10065453
add esp, 4
mov edi, 0xf
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
cmp dword [esp + 0x58], esi
jb 0x10009384
mov ecx, dword [esp + 0x44]
push ecx
call fcn.10065453
add esp, 4
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
cmp dword [esp + 0xc8], esi
jb 0x100093a9
mov edx, dword [esp + 0xb4]
push edx
call fcn.10065453
add esp, 4
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
cmp dword [esp + 0x90], esi
jb 0x100093d4
mov eax, dword [esp + 0x7c]
push eax
call fcn.10065453
add esp, 4
mov dword [esp + 0x90], edi
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
cmp dword [esp + 0xac], esi
jb 0x100093ff
mov ecx, dword [esp + 0x98]
push ecx
call fcn.10065453
add esp, 4
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x100], esi
jb 0x1000942d
mov edx, dword [esp + 0xec]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x130]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x118]
xor ecx, esp
call fcn.1006656c
mov esp, ebp
pop ebp
ret
mov esi, dword [esi + 0x48]
mov eax, esi
lea edx, [eax + 1]
jmp 0x10009460
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10009460
sub eax, edx
push eax
push esi
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.10004560
cmp dword [esi + 0x10], ebx
je 0x10009480
call fcn.10003930
mov eax, dword [esp + 0x18]
push eax
call fcn.100b8cd0
add esp, 4
push edi
call fcn.100b8c10
mov edi, dword [esp + 0x18]
add esp, 4
call fcn.10008a50
mov esi, 0x10
mov dword [esp + 0x10], eax
cmp dword [esp + 0x74], esi
jb 0x100094bb
mov ecx, dword [esp + 0x60]
push ecx
call fcn.10065453
add esp, 4
mov edi, 0xf
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
cmp dword [esp + 0x58], esi
jb 0x100094df
mov edx, dword [esp + 0x44]
push edx
call fcn.10065453
add esp, 4
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
cmp dword [esp + 0xc8], esi
jb 0x10009504
mov eax, dword [esp + 0xb4]
push eax
call fcn.10065453
add esp, 4
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
cmp dword [esp + 0x90], esi
jb 0x1000952f
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.10065453
add esp, 4
mov dword [esp + 0x90], edi
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
cmp dword [esp + 0xac], esi
jb 0x1000955a
mov edx, dword [esp + 0x98]
push edx
call fcn.10065453
add esp, 4
mov dword [esp + 0xac], edi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
cmp dword [esp + 0x100], esi
jb 0x10009588
mov eax, dword [esp + 0xec]
push eax
call fcn.10065453
add esp, 4
mov eax, dword [esp + 0x10]
jmp 0x1000942f