Function at 0x1800ebff0
Capabilities:
Reference http user-agent string

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xc0
mov rax, qword [0x180279b80]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r15, r9
mov rdi, r8
mov rsi, rdx
mov rbx, rcx
mov qword [rbp - 0x59], rcx
xor r12d, r12d
mov dword [rbp - 0x7d], r12d
xor r14b, r14b
cmp qword [0x180b5ee30], r12
jne 0x1800ec068
call fcn.18015da30
mov qword [0x180b5ee30], rax
mov r14b, 1
test rax, rax
jne 0x1800ec068
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r12b
jmp 0x1800ec2a6
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov r8, qword [rsi + 8]
mov rdx, qword [rsi]
lea rcx, [rbp - 0x31]
call fcn.180005120
nop
cmp qword [rdi + 8], 0
je 0x1800ec100
lea rax, [rbp - 0x31]
mov r8, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x19]
cmp rdx, 0xf
cmova rax, r8
mov rcx, qword [rbp - 0x21]
cmp byte [rcx + rax - 1], 0x2f
jne 0x1800ec0b8
mov rax, qword [rdi]
cmp byte [rax], 0x2f
je 0x1800ec0f0
cmp rcx, rdx
jae 0x1800ec0d9
lea rax, [rcx + 1]
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x31]
cmp rdx, 0xf
cmova rax, r8
mov word [rax + rcx], Ordinal_50
jmp 0x1800ec0f0
mov r9b, 0x2f
movzx r8d, byte [rsp + 0x20]
mov edx, 1
lea rcx, [rbp - 0x31]
call fcn.180026930
mov r8, qword [rdi + 8]
mov rdx, qword [rdi]
lea rcx, [rbp - 0x31]
call fcn.1800246b0
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x11], xmm0
vmovdqu xmm1, xmmword [0x180249350]
vmovdqu xmmword [rbp - 1], xmm1
mov byte [rbp - 0x11], 0
lea r8, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova r8, qword [rbp - 0x31]
mov edx, 0x2712
mov rcx, qword [0x180b5ee30]
call fcn.180160950
mov r8, qword [r15]
mov edx, 0x271f
mov rcx, qword [0x180b5ee30]
call fcn.180160950
lea r8, [rbp - 0x11]
mov edx, 0x2711
mov rcx, qword [0x180b5ee30]
call fcn.180160950
mov edi, 3
test r14b, r14b
je 0x1800ec1ff
lea edx, [rdi + 0x2c]
lea r8d, [rdi - 2]
mov rcx, qword [0x180b5ee30]
call fcn.180160950
lea r8, [0x180245f50]
mov edx, 0x2722
mov rcx, qword [0x180b5ee30]
call fcn.180160950
mov r8d, edi
lea edx, [rdi + 0xa]
mov rcx, qword [0x180b5ee30]
call fcn.180160950
lea edx, [rdi + 0x3d]
lea r8d, [rdi - 2]
mov rcx, qword [0x180b5ee30]
call fcn.180160950
mov r8d, edi
lea edx, [rdi + 0x51]
mov rcx, qword [0x180b5ee30]
call fcn.180160950
lea edx, [rdi + 0x6f]
mov r8d, 0x40000000
mov rcx, qword [0x180b5ee30]
call fcn.180160950
lea r8, [0x1800ebf60]
mov edx, 0x4e2b
mov rcx, qword [0x180b5ee30]
call fcn.180160950
mov rcx, qword [0x180b5ee30]
call fcn.18015daa0
test eax, eax
jne 0x1800ec21e
lea rdx, [rbp - 0x11]
lea rcx, [rbp - 0x51]
call fcn.18000d770
jmp 0x1800ec241
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp - 0x79], xmm0
vmovdqu xmm1, xmmword [0x180249350]
vmovdqu xmmword [rbp - 0x69], xmm1
mov byte [rbp - 0x79], 0
lea rax, [rbp - 0x79]
mov edi, 5
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbx], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
test dil, 4
je 0x1800ec27d
and edi, 0xfffffffb
lea rcx, [rbp - 0x79]
vzeroupper
call fcn.180005050
test dil, 2
je 0x1800ec290
lea rcx, [rbp - 0x51]
vzeroupper
call fcn.180005050
nop
lea rcx, [rbp - 0x11]
vzeroupper
call fcn.180005050
nop
lea rcx, [rbp - 0x31]
call fcn.180005050
mov rax, rbx
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1801be920
add rsp, 0xc0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret