Function at 0x180040ef0
Capabilities:
Reference http user-agent string

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x88
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov rax, qword [rsp + 0x90]
mov dword [rax + 0x38], 8
mov eax, SafeArrayUnaccessData
mov word [rsp + 0x20], ax
movsx rax, word [rsp + 0x20]
lea rcx, [0x180096db0]
cmp dword [rcx + rax*4], 1
jne 0x180040f62
movsx rax, word [rsp + 0x20]
lea rcx, [0x180096db0]
mov eax, dword [rcx + rax*4]
inc eax
movsx rcx, word [rsp + 0x20]
lea rdx, [0x180096db0]
mov dword [rdx + rcx*4], eax
cmp qword [rsp + 0xb0], 0
je 0x180040f7c
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x38], rax
jmp 0x180040f88
lea rax, str.Mozilla_5.0__Windows_NT_6.2__WOW64__AppleWebKit_535.7__KHTML__like_Gecko__Chrome_16.0.912.75_Safari_535.7
mov qword [rsp + 0x38], rax
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.18001c140
nop
mov rax, qword [rsp + 0x90]
add rax, 8
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.18001c620
nop
lea rcx, [rsp + 0x60]
call fcn.1800136e0
lea rax, [0x18007bd70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], 0
mov rax, qword [rsp + 0x40]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x61
jne 0x18004102c
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x18004102c
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180096db0]
mov edx, dword [rcx + rax]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 0xc
lea rdx, [0x180096db0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180096db0]
mov edx, 4
imul rdx, rdx, 2
lea r8, [0x180096db0]
mov eax, dword [rcx + rax]
mov dword [r8 + rdx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x180096db0]
mov edx, 4
imul rdx, rdx, 1
lea r8, [0x180096db0]
mov edx, dword [r8 + rdx]
cmp dword [rcx + rax], edx
jae 0x1800410aa
mov eax, 4
imul rax, rax, 3
lea rcx, [0x180096db0]
mov edx, dword [rcx + rax]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x180096db0]
mov dword [rdx + rcx], eax
mov rax, qword [rsp + 0x90]
add rax, 0x20
mov rdx, qword [rsp + 0x98]
mov rcx, rax
call fcn.18002df00
mov rax, qword [rsp + 0x90]
add rax, 0x28
mov rdx, qword [rsp + 0xa0]
mov rcx, rax
call fcn.18002df00
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xa8]
mov qword [rax + 0x78], rcx
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180096db0]
mov eax, dword [rcx + rax]
xor eax, 0xffffff07
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x180096db0]
mov dword [rdx + rcx], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov rcx, qword [rsp + 0x90]
add rcx, 0x80
mov rdx, rax
call fcn.180015520
mov rax, qword [rsp + 0x90]
cmp qword [rax + 0x80], 0
jne 0x1800411ba
mov eax, 0x80004005
jmp 0x180041274
mov rax, qword [rsp + 0x90]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x90]
call qword [rax + 0xa8]
mov eax, 4
imul rax, rax, 1
lea rcx, [0x180096db0]
mov eax, dword [rcx + rax]
xor eax, 0xfffffee8
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x180096db0]
mov dword [rdx + rcx], eax
mov dword [rsp + 0x24], 0
mov eax, dword [rsp + 0x24]
cmp eax, 0x5597dad5
jne 0x180041229
lea r8, str.Local28091560321222443607092708846915067201161853572994070912x
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenMutexA]
mov qword [rsp + 0x50], rax
jmp 0x180041251
mov eax, 4
imul rax, rax, 0xb
lea rcx, [0x180096db0]
mov eax, dword [rcx + rax]
inc eax
mov ecx, 4
imul rcx, rcx, 0xb
lea rdx, [0x180096db0]
mov dword [rdx + rcx], eax
xor eax, eax
jmp 0x180041274
add rsp, 0x88
ret