Function at 0x40c400
Capabilities:
Reference http user-agent string

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x40cb86
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xc0], rcx
mov byte [rsp + 0xc8], dil
test byte [rax], al
nop
lea rdx, [rax + 0x10390]
add rbx, 0x3fffff
and rbx, 0xffffffffffc00000
mov qword [rsp + 0x30], rbx
nop dword [rax + rax]
cmp rcx, rdx
je 0x40c46c
xor edx, edx
jmp 0x40c836
lea rdx, [rax + 0x10398]
mov ecx, 0x400000
lea rdi, [0x01329300]
mov rax, rdx
call fcn.0040e040
test rax, rax
jne 0x40c4b1
mov rcx, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0x30]
movzx edi, byte [rsp + 0xc8]
mov rdx, rax
mov rax, qword [rsp + 0xb0]
jmp 0x40c836
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x70], rcx
mov rdx, rax
movabs rsi, 0x800000000000
add rsi, rax
shr rsi, 0x16
mov rax, qword [rsp + 0xb0]
nop
jmp 0x40c503
mov r10, qword [rsp + 0x88]
xchg qword [r10], rax
inc r9
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x70]
mov rax, r8
mov rsi, r9
mov r8, rdx
add rdx, rcx
movabs r9, 0x7fffffffffff
add rdx, r9
shr rdx, 0x16
nop word [rax + rax]
cmp rsi, rdx
ja 0x40c785
mov rdx, rsi
shr rsi, 0x14
cmp rsi, 0x40
jae 0x40c7f6
mov qword [rsp + 0x68], rdx
mov r10, qword [rax + rsi*8 + 0x10170]
lea rsi, [rax + rsi*8]
lea rsi, [rsi + 0x10170]
test r10, r10
jne 0x40c5ea
mov qword [rsp + 0x90], rsi
nop
mov rax, qword [sym.imp.KERNEL32.DLL_VirtualAlloc]
mov qword [rsp], rax
mov qword [rsp + 8], 0
mov qword [rsp + 0x10], 0x800000
mov qword [rsp + 0x18], 0x3000
mov qword [rsp + 0x20], 4
call fcn.00433de0
xorps xmm15, xmm15
mov r14, qword [0x013284d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x28]
test rax, rax
je 0x40c7e5
mov rdx, qword [rsp + 0x90]
mov r10, rax
xchg qword [rdx], rax
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x98]
movabs r9, 0x7fffffffffff
test byte [r10], al
and edx, 0xfffff
mov r11, qword [r10 + rdx*8]
lea rdx, [r10 + rdx*8]
nop dword [rax + rax]
test r11, r11
jne 0x40c7d0
mov qword [rsp + 0x88], rdx
lea rdx, [rax + 0x10370]
mov ebx, 0x114d0
mov ecx, 8
lea rdi, [0x0132d9d8]
mov rax, rdx
call fcn.0040e040
test rax, rax
jne 0x40c655
mov eax, 0x114d0
mov ebx, 8
lea rcx, [0x0132d9d8]
call fcn.0040dc60
test rax, rax
je 0x40c7bf
movzx esi, byte [rsp + 0xc8]
nop dword [rax]
test sil, sil
je 0x40c773
mov r8, qword [rsp + 0xb0]
mov r9, qword [r8 + 0x103c8]
nop dword [rax + rax]
cmp qword [r8 + 0x103c0], r9
jne 0x40c736
mov qword [rsp + 0x40], rax
shl r9, 4
test r9, r9
jne 0x40c6a2
mov r9, qword [0x01328460]
mov qword [rsp + 0x38], r9
mov rax, r9
mov ebx, 8
lea rcx, [0x0132d9d8]
call fcn.0040dc60
nop dword [rax + rax]
test rax, rax
je 0x40c7ae
mov rsi, qword [rsp + 0xb0]
mov rbx, qword [rsi + 0x103b8]
mov r8, qword [rsi + 0x103c0]
mov qword [rsi + 0x103b8], rax
mov r9, qword [rsp + 0x38]
shr r9, 3
mov qword [rsi + 0x103c8], r9
mov rcx, qword [rsi + 0x103c0]
cmp rcx, r8
cmovg rcx, r8
mov rax, qword [rsi + 0x103b8]
cmp rax, rbx
je 0x40c721
shl rcx, 3
call fcn.004663c0
mov rsi, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x40]
movzx esi, byte [rsp + 0xc8]
mov r8, qword [rsp + 0xb0]
mov rcx, qword [r8 + 0x103c0]
mov rdx, qword [r8 + 0x103c8]
lea r9, [rcx + 1]
cmp rdx, r9
jb 0x40c7a6
mov qword [r8 + 0x103c0], r9
mov rdx, qword [r8 + 0x103b8]
nop dword [rax + rax]
cmp rcx, r9
jae 0x40c79b
mov r9, qword [rsp + 0x68]
mov qword [rdx + rcx*8], r9
jmp 0x40c4e2
mov r8, qword [rsp + 0xb0]
mov r9, qword [rsp + 0x68]
jmp 0x40c4e2
mov rax, r8
mov rbx, rcx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
mov rax, rcx
mov rcx, r9
call fcn.00465a20
mov rcx, r9
call fcn.00465aa0
lea rax, [0x006d752e]
mov ebx, 0x22
call fcn.00436b60
lea rax, [0x006dae80]
mov ebx, 0x2c
call fcn.00436b60
lea rax, [0x006d2e49]
mov ebx, 0x19
nop dword [rax]
call fcn.00436b60
lea rax, [0x006d94c2]
mov ebx, 0x27
call fcn.00436b60
mov rax, rsi
mov ecx, 0x40
nop
call fcn.00465a40
mov r9, qword [rsi + 0x10]
mov qword [rcx], r9
nop
mov r9, qword [rax + 0x16bb0]
sub r9, qword [rax + 0x16b80]
mov qword [rax + 0x16bb0], r9
mov r9, qword [rax + 0x16b98]
mov qword [rsi], r9
mov qword [rax + 0x16b98], rsi
mov rdx, r11
mov rsi, qword [rcx]
nop dword [rax]
test rsi, rsi
je 0x40c959
mov qword [rsp + 0x60], rsi
mov rdx, qword [rsi]
movzx r8d, byte [rsi + 8]
mov r9, rdx
sub rdx, rbx
test r8, r8
cmovne r9, rdx
lea rdx, [rbx + r9]
cmp r9, rdx
jbe 0x40c87b
movabs r8, 0x7fffffffffff
xor r10d, r10d
jmp 0x40c8e6
movabs r8, 0x7fffffffffff
lea r10, [r8 + rdx]
shr r10, 0x16
cmp r10, 0x4000000
jb 0x40c89b
xor r10d, r10d
jmp 0x40c8e6
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x70], rdx
mov rax, r9
call fcn.00417ae0
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
movzx edi, byte [rsp + 0xc8]
movabs r8, 0x7fffffffffff
mov r9, qword [rsp + 0x50]
mov r10, rax
mov rax, qword [rsp + 0xb0]
mov r11, r10
cmp r10, r9
je 0x40c945
test r11, r11
je 0x40c805
mov qword [rsp + 0x98], r11
mov rax, r11
call fcn.004179a0
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x60]
movzx edi, byte [rsp + 0xc8]
movabs r8, 0x7fffffffffff
mov r11, qword [rsp + 0x98]
nop dword [rax + rax]
jmp 0x40c805
movzx r10d, byte [rsi + 8]
test r10, r10
cmovne rdx, r9
mov qword [rsi], rdx
mov rcx, rbx
jmp 0x40c96b
mov rcx, rbx
movabs r8, 0x7fffffffffff
xor ebx, ebx
mov r11, rdx
test rbx, rbx
jne 0x40ca2e
xor eax, eax
mov rbx, rcx
mov ecx, 0x400000
nop
call fcn.0040cbc0
test rax, rax
je 0x40cac6
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x70], rbx
mov rax, qword [rsp + 0xb0]
lea rcx, [rax + 0x16b80]
mov qword [rsp + 0x80], rcx
mov rax, rcx
call fcn.00418c80
mov rcx, qword [rsp + 0x98]
mov qword [rax], rcx
mov byte [rax + 8], 1
mov rcx, qword [0x012fa910]
mov qword [rax + 0x10], rcx
mov qword [0x012fa910], rax
mov rax, qword [rsp + 0x80]
call fcn.00418c80
mov r11, qword [rsp + 0x98]
mov rcx, r11
mov rbx, qword [rsp + 0x70]
lea rdx, [rbx + r11]
mov qword [rax], rdx
mov rdx, qword [0x012fa910]
mov qword [rax + 0x10], rdx
mov qword [0x012fa910], rax
mov rax, qword [rsp + 0xb0]
movzx edi, byte [rsp + 0xc8]
movabs r8, 0x7fffffffffff
mov r11, rcx
mov rdx, r11
lea rsi, [rbx + r11]
cmp r11, rsi
jbe 0x40ca53
movabs r9, 0x800000000000
mov r10d, 0x1c
lea r12, [0x006d48f5]
jmp 0x40caad
movabs r9, 0x800000000000
lea r10, [r9 + r11]
shr r10, 0x16
cmp r10, 0x4000000
jb 0x40ca7d
mov r10d, 0x21
lea r12, [0x006d69da]
jmp 0x40caad
lea r10, [r8 + rsi]
shr r10, 0x16
cmp r10, 0x4000000
mov r10d, 0
mov r12d, 0x20
cmovae r10, r12
mov r12d, 0
lea r13, [0x006d6334]
cmovae r12, r13
test r10, r10
jne 0x40caeb
test r11, 0x3fffff
jne 0x40cada
mov rax, rdx
mov rcx, rbx
jmp 0x40c4b6
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
lea rax, [0x006d6c6e]
mov ebx, 0x21
call fcn.00436b60
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x78], r12
nop
call fcn.004384a0
lea rax, [0x006d6e1b]
mov ebx, 0x21
call fcn.00438da0
mov rax, qword [rsp + 0x48]
nop dword [rax + rax]
call fcn.00438c00
lea rax, [0x006cb2fe]
mov ebx, 2
call fcn.00438da0
mov rax, qword [rsp + 0x70]
nop dword [rax + rax]
call fcn.00438c00
lea rax, [0x006d59af]
mov ebx, 0x1f
call fcn.00438da0
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x58]
call fcn.00438da0
call fcn.00438700
call fcn.00438520
lea rax, [0x006db696]
mov ebx, 0x2e
nop dword [rax + rax]
call fcn.00436b60
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov byte [rsp + 0x20], dil
call fcn.004633c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
movzx edi, byte [rsp + 0x20]
jmp fcn.0040c400