Function at 0x1000a311
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3394
call fcn.10017cc0
mov eax, dword [0x10027120]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x3230], eax
mov eax, dword [ebp + 0xc]
xor esi, esi
push edi
mov dword [ebp - 0x3238], eax
mov dword [ebp - 0x324c], ecx
cmp eax, esi
je 0x1000a64d
cmp word [eax], si
je 0x1000a64d
xor eax, eax
push 7
mov word [ebp - 0x24], ax
pop ecx
lea edi, [ebp - 0x22]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
push 0x1fe
mov word [ebp - 0x228], ax
lea eax, [ebp - 0x226]
push esi
push eax
call fcn.1000f470
add esp, 0xc
xor eax, eax
push 0xffe
mov word [ebp - 0x3228], ax
lea eax, [ebp - 0x3226]
push esi
push eax
call fcn.1000f470
mov edi, dword [ebp - 0x3238]
add esp, 0xc
lea eax, [ebp - 0x3228]
push eax
lea eax, [ebp - 0x323c]
push eax
lea eax, [ebp - 0x228]
push eax
lea ebx, [ebp - 0x24]
mov dword [ebp - 0x323c], esi
call fcn.10009e28
add esp, 0xc
test eax, eax
je 0x1000a64d
push 5
mov eax, ebx
push str.https
push eax
call fcn.1000de30
add esp, 0xc
mov edi, eax
neg edi
sbb edi, edi
inc edi
cmp word [ebp - 0x323c], si
jne 0x1000a40f
mov eax, edi
neg eax
sbb eax, eax
and eax, 0x16b
add eax, 0x50
movzx eax, ax
mov dword [ebp - 0x323c], eax
lea eax, [ebp - 0x3241]
push eax
call fcn.10009e81
mov eax, dword [ebp - 0x324c]
mov dword [ebp - 0x3238], esi
mov dword [ebp - 0x3240], eax
cmp eax, esi
jne 0x1000a44e
push esi
push esi
push esi
push esi
push str.Mozilla_5.0__Windows_NT_6.1__WOW64__Trident_7.0__rv:11.0__like_Gecko
call dword [0x1002959c]
mov dword [ebp - 0x3240], eax
cmp eax, esi
je 0x1000a645
push esi
push esi
push 3
push esi
push esi
push dword [ebp - 0x323c]
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x3240]
call dword [0x100295a0]
mov dword [ebp - 0x3248], eax
cmp eax, esi
je 0x1000a631
push 0x13c
lea eax, [ebp - 0x338c]
push esi
push eax
call fcn.1000f470
mov ebx, dword [ebp - 0x3230]
mov eax, dword [ebx + 0x28]
add esp, 0xc
mov dword [ebp - 0x3390], 0x100231c4
mov ecx, 0x840c0300
cmp eax, esi
je 0x1000a4ae
or ecx, eax
mov eax, dword [ebx + 0x2c]
cmp eax, esi
je 0x1000a4b9
not eax
and ecx, eax
mov eax, edi
neg eax
sbb eax, eax
push esi
and eax, 0x803000
or eax, ecx
push eax
lea eax, [ebp - 0x3390]
push eax
push esi
push esi
lea eax, [ebp - 0x3228]
push eax
push esi
push dword [ebp - 0x3248]
call dword [0x100295a4]
mov dword [ebp - 0x3234], eax
cmp eax, esi
je 0x1000a625
cmp edi, esi
je 0x1000a53d
push 4
pop edi
lea ecx, [ebp - 0x3230]
push ecx
lea ecx, [ebp - 0x322c]
push ecx
push 0x1f
push eax
mov dword [ebp - 0x322c], esi
mov dword [ebp - 0x3230], edi
call dword [0x100295a8]
or dword [ebp - 0x322c], 0x3100
push edi
lea eax, [ebp - 0x322c]
push eax
push 0x1f
push dword [ebp - 0x3234]
call dword [0x100295ac]
mov edi, dword [ebx]
cmp edi, esi
je 0x1000a551
cmp word [edi], si
je 0x1000a551
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x1000a553
xor eax, eax
push esi
push esi
push eax
push edi
mov edi, dword [ebp - 0x3234]
push edi
call dword [0x100295b0]
test eax, eax
je 0x1000a61e
push esi
lea eax, [ebp - 0x322c]
push eax
lea eax, [ebp - 0x3234]
push eax
push 0x20000013
push edi
mov dword [ebp - 0x3238], 1
mov dword [ebp - 0x3234], esi
mov dword [ebp - 0x322c], 4
call dword [0x100295b4]
test eax, eax
je 0x1000a61e
mov eax, dword [ebp - 0x3234]
push esi
mov dword [ebx + 4], eax
lea eax, [ebp - 0x322c]
push eax
lea eax, [ebp - 0x3230]
push eax
push 0x20000005
push edi
mov dword [ebp - 0x3230], esi
call dword [0x100295b4]
test eax, eax
je 0x1000a5dc
mov eax, dword [ebp - 0x3230]
mov dword [ebx + 8], eax
lea eax, [ebp - 0x322c]
push eax
push 0x2000
lea eax, [ebp - 0x2228]
push eax
push edi
call dword [0x100295b8]
test eax, eax
je 0x1000a61e
cmp dword [ebp - 0x322c], esi
je 0x1000a61e
push dword [ebp - 0x322c]
lea ecx, [ebx + 0xc]
lea eax, [ebp - 0x2228]
call fcn.1000a25f
cmp dword [ebp - 0x322c], esi
jne 0x1000a5dc
push edi
call dword [0x100295bc]
push dword [ebp - 0x3248]
call dword [0x100295bc]
cmp dword [ebp - 0x324c], esi
jne 0x1000a645
push dword [ebp - 0x3240]
call dword [0x100295bc]
mov eax, dword [ebp - 0x3238]
jmp 0x1000a64f
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000d755
leave
ret