Function at 0x18000d730
Capabilities:
Reference http user-agent string

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rbx
push rsi
push r14
push r15
lea rbp, [r11 - 0xf8]
sub rsp, 0x1d0
xor r8d, r8d
mov qword [rsp + 0x38], 7
lea ebx, [rcx + 9]
mov qword [rsp + 0x30], r8
mov word [rsp + 0x20], r8w
mov r14, rdx
mov qword [rbp - 0x80], r8
mov edx, 7
mov qword [rbp - 0x78], rdx
mov eax, ecx
mov word [rsp + 0x70], r8w
mov esi, r8d
mov dword [rbp + 0x110], ebx
mov r15d, r8d
cmp ecx, ebx
jae 0x18000ddb9
mov rbx, qword [rsp + 0x70]
lea rdx, [0x180000000]
mov ecx, dword [rbp + 0x110]
mov qword [r11 - 0x30], rdi
mov rdi, qword [rbp + 0x110]
mov qword [r11 - 0x38], r12
mov r12d, 0x100
mov qword [r11 - 0x40], r13
mov r13d, dword [rbp + 0x100]
mov qword [rbp + 0x118], rbx
nop
add eax, 0xffffff28
cmp eax, 9
ja case.default.0x18000d7e8
mov ecx, dword [rdx + rax*4 + 0xddd4]
add rcx, rdx
jmp rcx
mov edi, 0x104
nop
mov ebx, 0x10c
cmp ebx, 0x10c
je 0x18000d817
cmp ebx, 0x1a2
jne 0x18000d87b
cmp r13d, 0x7a
jne case.0x18000d7e8.217
add edi, 0x104
jmp 0x18000d87b
mov edx, edi
cmp rdx, rsi
ja 0x18000d83b
cmp qword [rsp + 0x38], 8
lea rax, [rsp + 0x20]
mov qword [rsp + 0x30], rdx
cmovae rax, qword [rsp + 0x20]
mov word [rax + rdx*2], r8w
jmp 0x18000d84b
xor r8d, r8d
lea rcx, [rsp + 0x20]
sub rdx, rsi
call fcn.18001eee0
cmp qword [rsp + 0x38], 8
lea rdx, [rsp + 0x20]
mov r8d, dword [rsp + 0x30]
cmovae rdx, qword [rsp + 0x20]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [rsp + 0x30]
xor r8d, r8d
mov r13d, eax
add ebx, 0x96
cmp ebx, 0x238
jb 0x18000d7f5
jmp 0x18000d7f0
mov r8d, 0x71
lea rdx, str.Mozilla_5.0__Windows_NT_6.3__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_79.0.3945.79_Safari_537.36
mov rcx, r14
call fcn.18001f060
mov rsi, qword [rsp + 0x30]
xor r8d, r8d
jmp 0x18000dd05
mov qword [rsp + 0x50], r8
lea rdx, [rsp + 0x20]
mov word [rsp + 0x40], r8w
lea rcx, [rsp + 0x40]
lea r8, [rdi + 1]
mov qword [rsp + 0x58], 7
cmp rsi, r8
cmovb r8, rsi
cmp qword [rsp + 0x38], 8
cmovae rdx, qword [rsp + 0x20]
call fcn.18001f1c0
lea rax, [rsp + 0x40]
lea rbx, [r14 + 8]
cmp rbx, rax
je 0x18000d929
mov rcx, rbx
call fcn.18001e690
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
mov rsi, qword [rsp + 0x30]
xor r8d, r8d
mov rbx, qword [rbp + 0x118]
jmp 0x18000dd05
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x18000d915
mov rcx, qword [rsp + 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d966
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ddce
call fcn.180030c24
mov rsi, qword [rsp + 0x30]
xor r8d, r8d
mov rbx, qword [rbp + 0x118]
jmp 0x18000dd05
cmp qword [rsp + 0x38], 8
lea rbx, [rsp + 0x20]
mov dword [rbp + 0x100], 0xd9
cmovae rbx, qword [rsp + 0x20]
test rsi, rsi
je 0x18000da6f
mov r8, r12
lea rcx, [rbp - 0x50]
xor edx, edx
call fcn.1800321f0
lea rcx, [0x18004d864]
nop dword [rax + rax]
movzx eax, word [rcx]
cmp ax, r12w
jae 0x18000da12
movzx eax, al
add rcx, 2
mov byte [rbp + rax - 0x50], 1
lea rax, [0x18004d868]
cmp rcx, rax
jne 0x18000d9c0
lea rcx, [rsi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rdi, [rbx + rax*2]
movzx eax, word [rdi]
cmp ax, r12w
jae 0x18000da07
cmp byte [rbp + rax - 0x50], 0
jne 0x18000da5a
cmp rdi, rbx
je 0x18000da6f
sub rdi, 2
jmp 0x18000d9f7
lea rcx, [rsi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
lea rdi, [rbx + rax*2]
nop dword [rax + rax]
movzx edx, word [rdi]
lea rax, [0x18004d864]
mov ecx, 2
nop
cmp word [rax], dx
je 0x18000da5a
add rax, 2
sub rcx, 1
jne 0x18000da40
cmp rdi, rbx
je 0x18000da6f
sub rdi, 2
jmp 0x18000da30
sub rdi, rbx
mov rbx, qword [rbp + 0x118]
sar rdi, 1
xor r8d, r8d
jmp 0x18000dd05
mov rbx, qword [rbp + 0x118]
mov rdi, 0xffffffffffffffff
xor r8d, r8d
jmp 0x18000dd05
lea rcx, [rdi + 1]
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r8w
cmp rsi, rcx
jb 0x18000ddc8
mov r8, qword [rsp + 0x68]
lea rax, [rsp + 0x20]
sub rsi, rcx
cmp rsi, r8
cmovb r8, rsi
cmp qword [rsp + 0x38], 8
cmovae rax, qword [rsp + 0x20]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x40]
call fcn.18001f1c0
mov r12, qword [rsp + 0x58]
lea r14, [rsp + 0x40]
mov rsi, qword [rsp + 0x40]
cmp r12, 8
mov r15, qword [rsp + 0x50]
cmovae r14, rsi
cmp r15, 8
jae 0x18000db04
movups xmm0, xmmword [r14]
mov qword [rbp - 0x58], 7
jmp 0x18000db4f
movabs rax, 0x7ffffffffffffffe
lea rcx, [rbp - 0x70]
mov rbx, r15
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
call fcn.18001ec60
lea r8, [r15*2 + 2]
mov qword [rbp - 0x70], rax
mov rdx, r14
mov rcx, rax
call fcn.180031de0
movups xmm0, xmmword [rbp - 0x70]
mov qword [rbp - 0x58], rbx
mov rbx, qword [rbp + 0x118]
mov rdx, qword [rbp - 0x78]
mov qword [rbp - 0x60], r15
movups xmmword [rsp + 0x40], xmm0
cmp rdx, 8
jb 0x18000db97
lea rdx, [rdx*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000db8f
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ddce
mov rcx, rbx
call fcn.180030c24
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x70], xmm0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rbp - 0x80], xmm0
cmp r12, 8
jb 0x18000dbe4
lea rdx, [r12*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000dbdc
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ddce
mov rcx, rsi
call fcn.180030c24
mov r14, qword [rbp + 0x108]
xor r8d, r8d
mov rdx, r15
lea rcx, [r14 + 0x28]
call fcn.18002e3b0
mov rbx, qword [rsp + 0x70]
xor r8d, r8d
mov rsi, qword [rsp + 0x30]
mov r12d, 0x100
mov r15, qword [rbp - 0x80]
mov qword [rbp + 0x118], rbx
jmp 0x18000dd05
mov rcx, r8
test r15, r15
je case.0x18000d7e8.224
lea r8, [r14 + 0x28]
mov r14, qword [rbp - 0x78]
nop dword [rax]
nop word [rax + rax]
cmp r14, 8
lea rax, [rsp + 0x70]
mov rdx, r8
cmovae rax, rbx
cmp qword [r8 + 0x18], 0x10
jb 0x18000dc5a
mov rdx, qword [r8]
movzx eax, byte [rax + rcx*2]
mov byte [rdx + rcx], al
inc rcx
cmp rcx, r15
jb 0x18000dc40
mov r14, qword [rbp + 0x108]
xor r8d, r8d
mov rsi, qword [rsp + 0x30]
jmp 0x18000dd05
cmp rdi, 0xffffffffffffffff
je 0x18000dd28
mov qword [rsp + 0x68], 0xffffffffffffffff
jmp case.0x18000d7e8.224
cmp qword [rsp + 0x38], 8
lea rdx, [rsp + 0x20]
cmovae rdx, qword [rsp + 0x20]
test rsi, rsi
je 0x18000dce1
lea rcx, [rsi - 1]
mov rax, 0xffffffffffffffff
cmp rcx, rax
cmovb rax, rcx
cmp word [rdx + rax*2], 0x2e
lea rax, [rdx + rax*2]
je 0x18000dcd4
cmp rax, rdx
je 0x18000dce1
sub rax, 2
cmp word [rax], 0x2e
jne 0x18000dcc5
sub rax, rdx
sar rax, 1
mov qword [rsp + 0x60], rax
jmp 0x18000dd05
mov qword [rsp + 0x60], 0xffffffffffffffff
jmp 0x18000dd05
mov rax, qword [rsp + 0x60]
cmp rax, 0xffffffffffffffff
je case.0x18000d7e8.224
mov rdx, rax
sub rdx, rdi
dec rdx
mov qword [rsp + 0x68], rdx
lea rdx, [0x180000000]
mov ecx, dword [rbp + 0x110]
mov eax, dword [rbp + 0x100]
inc eax
mov dword [rbp + 0x100], eax
cmp eax, ecx
jb 0x18000d7d0
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x18000dd63
lea rdx, [rdx*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x18000dd5b
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ddce
mov rcx, rbx
call fcn.180030c24
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x18000dda1
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dd9c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ddce
call fcn.180030c24
mov r12, qword [rsp + 0x1c0]
mov rdi, qword [rsp + 0x1c8]
mov r13, qword [rsp + 0x1b8]
add rsp, 0x1d0
pop r15
pop r14
pop rsi
pop rbx
pop rbp
ret
call fcn.18001eae0
int3
call fcn.180034d34
int3