Function at 0x433380
Capabilities:
Reference http user-agent string

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
lea rax, [rsp - 0xb8]
nop dword [rax + rax]
cmp rax, qword [rcx + 0x10]
jbe 0x433b71
sub rsp, 0x138
mov qword [rsp + 0x130], rbp
lea rbp, [rsp + 0x130]
movabs rax, 0x32336c656e72656b
mov qword [rsp + 0x6c], rax
movabs rax, 0x6c6c642e32336c
mov qword [rsp + 0x71], rax
mov rax, qword [sym.imp.kernel32.dll_LoadLibraryA]
lea rcx, [rsp + 0x6c]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
call fcn.00435a20
mov rax, qword [rsp + 0x10]
nop
test rax, rax
je 0x433b57
mov qword [rsp + 0x38], rax
movabs rcx, 0x69446c6c44646441
mov qword [rsp + 0xb5], rcx
movabs rcx, 0x79726f74636572
mov qword [rsp + 0xbd], rcx
mov qword [rsp], rax
lea rcx, [rsp + 0xb5]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0x10
mov qword [rsp + 0x18], 0x10
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433aac
mov qword [0x007cc3e0], rax
movabs rax, 0x6f74636556646441
mov qword [rsp + 0x115], rax
movabs rax, 0x69746e6f43646572
mov qword [rsp + 0x11d], rax
movabs rax, 0x65756e69746e6f43
mov qword [rsp + 0x120], rax
movabs rax, 0x72656c646e6148
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
lea rcx, [rsp + 0x115]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0x1b
mov qword [rsp + 0x18], 0x1b
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a9b
mov qword [0x007cc3e8], rax
movabs rax, 0x7262694c64616f4c
mov qword [rsp + 0x96], rax
movabs rcx, 0x41784579726172
mov qword [rsp + 0x9d], rcx
mov rcx, qword [rsp + 0x38]
mov qword [rsp], rcx
lea rdx, [rsp + 0x96]
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], 0xf
mov qword [rsp + 0x18], 0xf
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
nop
jne 0x433a8a
mov qword [0x007cc3f8], rax
movabs rax, 0x7262694c64616f4c
mov qword [rsp + 0x87], rax
movabs rax, 0x57784579726172
mov qword [rsp + 0x8e], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
lea rcx, [rsp + 0x87]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0xf
mov qword [rsp + 0x18], 0xf
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a75
mov qword [0x007cc400], rax
nop word [rax + rax]
test rax, rax
je 0x433a6e
cmp qword [0x007cc3f8], 0
je 0x433a6e
cmp qword [0x007cc3e0], 0
setne al
mov byte [0x008110dd], al
movabs rax, 0x3233697061766461
mov qword [rsp + 0x5f], rax
movabs rax, 0x6c6c642e323369
mov qword [rsp + 0x64], rax
lea rax, [rsp + 0x5f]
mov qword [rsp], rax
mov qword [rsp + 8], 0xd
mov qword [rsp + 0x10], 0xd
call fcn.00433160
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x433b3e
movabs rcx, 0x75466d6574737953
mov qword [rsp + 0xd6], rcx
movabs rcx, 0x636e75466d657473
mov qword [rsp + 0xd8], rcx
movabs rcx, 0x3633306e6f6974
mov qword [rsp + 0xe0], rcx
mov qword [rsp], rax
lea rax, [rsp + 0xd6]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0x12
mov qword [rsp + 0x18], 0x12
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
nop
jne 0x433a5d
mov qword [0x007cc420], rax
movabs rax, 0x6c642e6c6c64746e
mov qword [rsp + 0x4a], rax
mov word [rsp + 0x52], 0x6c
lea rax, [rsp + 0x4a]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
mov qword [rsp + 0x10], 0xa
nop
call fcn.00433160
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x433b25
mov qword [rsp + 0x28], rax
movabs rcx, 0x6f4674696157744e
mov qword [rsp + 0xe8], rcx
movabs rcx, 0x6c676e6953726f46
mov qword [rsp + 0xee], rcx
movabs rcx, 0x7463656a624f65
mov qword [rsp + 0xf6], rcx
mov qword [rsp], rax
lea rcx, [rsp + 0xe8]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0x16
mov qword [rsp + 0x18], 0x16
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a4c
mov qword [0x007cc408], rax
movabs rax, 0x6c642e6d6d6e6977
mov qword [rsp + 0x40], rax
mov word [rsp + 0x48], 0x6c
lea rax, [rsp + 0x40]
mov qword [rsp], rax
mov qword [rsp + 8], 0xa
mov qword [rsp + 0x10], 0xa
call fcn.00433160
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x433b08
mov qword [rsp + 0x30], rax
movabs rcx, 0x69676542656d6974
mov qword [rsp + 0xa5], rcx
movabs rcx, 0x646f697265506e
mov qword [rsp + 0xad], rcx
mov qword [rsp], rax
lea rcx, [rsp + 0xa5]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], 0x10
mov qword [rsp + 0x18], 0x10
nop
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a3b
mov qword [0x007cc430], rax
movabs rax, 0x50646e45656d6974
mov qword [rsp + 0x79], rax
movabs rax, 0x646f6972655064
mov qword [rsp + 0x7f], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp], rax
lea rax, [rsp + 0x79]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0xe
mov qword [rsp + 0x18], 0xe
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a2a
mov qword [0x007cc438], rax
cmp qword [0x007cc430], 0
je 0x433aef
test rax, rax
je 0x433aef
movabs rax, 0x642e32335f327377
mov qword [rsp + 0x54], rax
movabs rax, 0x6c6c642e32335f
mov qword [rsp + 0x57], rax
lea rax, [rsp + 0x54]
mov qword [rsp], rax
mov qword [rsp + 8], 0xb
mov qword [rsp + 0x10], 0xb
call fcn.00433160
mov rax, qword [rsp + 0x18]
nop dword [rax]
test rax, rax
je 0x433ad6
movabs rcx, 0x764f746547415357
mov qword [rsp + 0xfe], rcx
movabs rcx, 0x657070616c726576
mov qword [rsp + 0x105], rcx
movabs rcx, 0x746c7573655264
mov qword [rsp + 0x10d], rcx
mov qword [rsp], rax
lea rax, [rsp + 0xfe]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0x17
mov qword [rsp + 0x18], 0x17
call fcn.004330a0
mov rax, qword [rsp + 0x20]
cmp dword [0x00811460], 0
jne 0x433a14
mov qword [0x007cc428], rax
test rax, rax
je 0x433abd
movabs rax, 0x7465675f656e6977
mov qword [rsp + 0xc5], rax
movabs rax, 0x5f7465675f656e69
mov qword [rsp + 0xc6], rax
movabs rax, 0x6e6f6973726576
mov qword [rsp + 0xce], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp], rax
lea rax, [rsp + 0xc5]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0x11
mov qword [rsp + 0x18], 0x11
call fcn.004330a0
cmp qword [rsp + 0x20], 0
jne 0x433a04
mov rbp, qword [rsp + 0x130]
add rsp, 0x138
ret
mov rax, qword [rsp + 0x38]
mov qword [rsp], rax
call fcn.004342e0
jmp 0x4339f4
lea rdi, [0x007cc428]
nop dword [rax + rax]
call fcn.0046c920
jmp 0x433980
lea rdi, [0x007cc438]
call fcn.0046c920
jmp 0x43389f
lea rdi, [0x007cc430]
call fcn.0046c920
jmp 0x43383e
lea rdi, [0x007cc408]
call fcn.0046c920
jmp 0x43378f
lea rdi, [0x007cc420]
call fcn.0046c920
jmp 0x4336cd
xor eax, eax
jmp 0x433602
lea rdi, [0x007cc400]
nop dword [rax]
call fcn.0046c920
jmp 0x4335e0
lea rdi, [0x007cc3f8]
call fcn.0046c920
jmp 0x43356d
lea rdi, [0x007cc3e8]
call fcn.0046c920
jmp 0x433501
lea rdi, [0x007cc3e0]
call fcn.0046c920
jmp 0x433473
lea rax, [0x0066346e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x20
call fcn.00439220
lea rax, [0x0065ed88]
mov qword [rsp], rax
mov qword [rsp + 8], 0x14
call fcn.00439220
lea rax, [0x00662844]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1d
call fcn.00439220
lea rax, [0x0065e722]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
nop dword [rax]
call fcn.00439220
lea rax, [0x0065e4fb]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.00439220
lea rax, [0x0065f67e]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.00439220
lea rax, [0x0065f80a]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.00439220
nop
call fcn.0046abe0
jmp fcn.00433380