Function at 0x431f60
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0xd8]
cmp r12, qword [r14 + 0x10]
jbe 0x432651
sub rsp, 0x158
mov qword [rsp + 0x150], rbp
lea rbp, [rsp + 0x150]
movabs rax, 0x32336c656e72656b
mov qword [rsp + 0x64], rax
movabs rax, 0x6c6c642e32336c
mov qword [rsp + 0x69], rax
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryA]
lea rcx, [rsp + 0x64]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
nop dword [rax]
call fcn.00434c00
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x10]
nop
test rax, rax
je 0x43263f
mov qword [rsp + 0x30], rax
movabs rdx, 0x69446c6c44646441
mov qword [rsp + 0xad], rdx
movabs rdx, 0x79726f74636572
mov qword [rsp + 0xb5], rdx
lea rbx, [rsp + 0xad]
mov ecx, 0x10
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432039
mov qword [0x008bca20], rax
jmp 0x432045
lea rdi, [0x008bca20]
call fcn.00464be0
movabs rdx, 0x6f74636556646441
mov qword [rsp + 0x135], rdx
movabs rdx, 0x69746e6f43646572
mov qword [rsp + 0x13d], rdx
movabs rdx, 0x65756e69746e6f43
mov qword [rsp + 0x140], rdx
movabs rdx, 0x72656c646e6148
mov qword [rsp + 0x148], rdx
mov rax, qword [rsp + 0x30]
lea rbx, [rsp + 0x135]
mov ecx, 0x1b
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x4320b9
mov qword [0x008bca28], rax
jmp 0x4320c5
lea rdi, [0x008bca28]
call fcn.00464be0
movabs rdx, 0x7262694c64616f4c
mov qword [rsp + 0x8e], rdx
movabs rsi, 0x41784579726172
mov qword [rsp + 0x95], rsi
mov rax, qword [rsp + 0x30]
lea rbx, [rsp + 0x8e]
mov ecx, 0xf
mov rdi, rcx
nop
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432117
mov qword [0x008bca38], rax
jmp 0x432125
lea rdi, [0x008bca38]
nop
call fcn.00464be0
movabs rdx, 0x7262694c64616f4c
mov qword [rsp + 0x7f], rdx
movabs rdx, 0x57784579726172
mov qword [rsp + 0x86], rdx
mov rax, qword [rsp + 0x30]
lea rbx, [rsp + 0x7f]
mov ecx, 0xf
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x43216f
mov qword [0x008bca40], rax
jmp 0x432180
lea rdi, [0x008bca40]
call fcn.00464be0
nop dword [rax + rax]
test rax, rax
je 0x43219c
cmp qword [0x008bca38], 0
je 0x43219c
cmp qword [0x008bca20], 0
setne dl
jmp 0x43219e
xor edx, edx
mov byte [0x00913b25], dl
movabs rdx, 0x3233697061766461
mov qword [rsp + 0x57], rdx
movabs rdx, 0x6c6c642e323369
mov qword [rsp + 0x5c], rdx
lea rax, [rsp + 0x57]
mov ebx, 0xd
mov rcx, rbx
call fcn.00431d40
test rax, rax
je 0x43262e
movabs rdx, 0x75466d6574737953
mov qword [rsp + 0xdf], rdx
movabs rdx, 0x636e75466d657473
mov qword [rsp + 0xe1], rdx
movabs rdx, 0x3633306e6f6974
mov qword [rsp + 0xe9], rdx
lea rbx, [rsp + 0xdf]
mov ecx, 0x12
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x43223a
mov qword [0x008bca60], rax
jmp 0x432246
lea rdi, [0x008bca60]
call fcn.00464be0
movabs rdx, 0x6c642e6c6c64746e
mov qword [rsp + 0x42], rdx
mov word [rsp + 0x4a], 0x6c
lea rax, [rsp + 0x42]
mov ebx, 0xa
mov rcx, rbx
call fcn.00431d40
test rax, rax
je 0x43261d
mov qword [rsp + 0x20], rax
movabs rdx, 0x6f4674696157744e
mov qword [rsp + 0xf1], rdx
movabs rdx, 0x6c676e6953726f46
mov qword [rsp + 0xf7], rdx
movabs rdx, 0x7463656a624f65
mov qword [rsp + 0xff], rdx
lea rbx, [rsp + 0xf1]
mov ecx, 0x16
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x4322d9
mov qword [0x008bca48], rax
jmp 0x4322e5
lea rdi, [0x008bca48]
call fcn.00464be0
movabs rdx, 0x75437465476c7452
mov qword [rsp + 0xce], rdx
movabs rdx, 0x7275437465476c74
mov qword [rsp + 0xcf], rdx
movabs rdx, 0x626550746e6572
mov qword [rsp + 0xd7], rdx
mov rax, qword [rsp + 0x20]
lea rbx, [rsp + 0xce]
mov ecx, 0x11
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432347
mov qword [0x008bca68], rax
jmp 0x432353
lea rdi, [0x008bca68]
call fcn.00464be0
movabs rdx, 0x744e7465476c7452
mov qword [rsp + 0x11e], rdx
movabs rdx, 0x6e6f697372655674
mov qword [rsp + 0x125], rdx
movabs rdx, 0x737265626d754e
mov qword [rsp + 0x12d], rdx
mov rax, qword [rsp + 0x20]
lea rbx, [rsp + 0x11e]
mov ecx, 0x17
mov rdi, rcx
nop
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x4323b7
mov qword [0x008bca70], rax
jmp 0x4323c5
lea rdi, [0x008bca70]
nop
call fcn.00464be0
movabs rdx, 0x6c642e6d6d6e6977
mov qword [rsp + 0x38], rdx
mov word [rsp + 0x40], 0x6c
lea rax, [rsp + 0x38]
mov ebx, 0xa
mov rcx, rbx
call fcn.00431d40
test rax, rax
je 0x43260c
mov qword [rsp + 0x28], rax
movabs rdx, 0x69676542656d6974
mov qword [rsp + 0x9d], rdx
movabs rdx, 0x646f697265506e
mov qword [rsp + 0xa5], rdx
lea rbx, [rsp + 0x9d]
mov ecx, 0x10
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432446
mov qword [0x008bca80], rax
jmp 0x432452
lea rdi, [0x008bca80]
call fcn.00464be0
movabs rdx, 0x50646e45656d6974
mov qword [rsp + 0x71], rdx
movabs rdx, 0x646f6972655064
mov qword [rsp + 0x77], rdx
mov rax, qword [rsp + 0x28]
lea rbx, [rsp + 0x71]
mov ecx, 0xe
mov rdi, rcx
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432499
mov qword [0x008bca88], rax
jmp 0x4324a5
lea rdi, [0x008bca88]
call fcn.00464be0
cmp qword [0x008bca80], 0
je 0x4325fb
test rax, rax
je 0x4325fb
movabs rdx, 0x642e32335f327377
mov qword [rsp + 0x4c], rdx
movabs rdx, 0x6c6c642e32335f
mov qword [rsp + 0x4f], rdx
lea rax, [rsp + 0x4c]
mov ebx, 0xb
mov rcx, rbx
call fcn.00431d40
test rax, rax
je 0x4325ea
movabs rdx, 0x764f746547415357
mov qword [rsp + 0x107], rdx
movabs rdx, 0x657070616c726576
mov qword [rsp + 0x10e], rdx
movabs rdx, 0x746c7573655264
mov qword [rsp + 0x116], rdx
lea rbx, [rsp + 0x107]
mov ecx, 0x17
mov rdi, rcx
nop dword [rax + rax]
call fcn.00431c80
cmp dword [0x00913f20], 0
jne 0x432557
mov qword [0x008bca78], rax
jmp 0x432565
lea rdi, [0x008bca78]
nop
call fcn.00464be0
test rax, rax
je 0x4325d9
movabs rdx, 0x7465675f656e6977
mov qword [rsp + 0xbd], rdx
movabs rdx, 0x5f7465675f656e69
mov qword [rsp + 0xbe], rdx
movabs rdx, 0x6e6f6973726576
mov qword [rsp + 0xc6], rdx
mov rax, qword [rsp + 0x20]
lea rbx, [rsp + 0xbd]
mov ecx, 0x11
mov rdi, rcx
call fcn.00431c80
test rax, rax
je 0x4325c9
mov rax, qword [rsp + 0x30]
call fcn.00433100
mov rbp, qword [rsp + 0x150]
add rsp, 0x158
ret
lea rax, [0x006c0a4d]
mov ebx, 0x20
call fcn.00437c00
lea rax, [0x006ba2f9]
mov ebx, 0x14
call fcn.00437c00
lea rax, [0x006bf62b]
mov ebx, 0x1d
call fcn.00437c00
lea rax, [0x006b9b1a]
mov ebx, 0x13
call fcn.00437c00
lea rax, [0x006b98a7]
mov ebx, 0x13
call fcn.00437c00
lea rax, [0x006badea]
mov ebx, 0x16
call fcn.00437c00
lea rax, [0x006bb1b2]
mov ebx, 0x16
call fcn.00437c00
nop
call fcn.004629a0
jmp fcn.00431f60