Function at 0x4168c0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9858
call fcn.00447f50
mov eax, dword [0x4ce6a8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push edi
mov edi, dword [ebp + 0x1c]
mov ebx, ecx
mov dword [ebp - 0x9858], eax
mov eax, dword [ebp + 0x18]
push 0x400
mov dword [ebp - 0x984c], eax
lea eax, [ebp - 0x1a44]
push 0
push eax
mov dword [ebp - 0x9850], ebx
mov dword [ebp - 0x9848], edi
call fcn.0044a900
push 5
lea eax, [ebp - 0xc]
push eax
push dword [ebx + 0x32418]
call fcn.004580f7
mov ecx, ebx
add esp, 0x18
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416928
sub ecx, edx
je 0x4174db
push esi
lea eax, [ebx + 0x42dc]
mov dword [ebp - 0x9854], 0x4705a0
push eax
push 0x474708
push 0x3ff
lea esi, [ebx + 0x3edc]
push 0x400
push esi
call fcn.004082c0
push dword [ebp - 0x9858]
lea eax, [ebp - 0x3c44]
push 0x47471c
push 0x400
push eax
call fcn.0040a640
lea eax, [ebp - 0x3c44]
push eax
lea eax, [ebp - 0x4444]
push 0x400
push eax
call fcn.00456be4
add esp, 0x30
lea eax, [ebp - 0x1a44]
mov ecx, 0x556050
push eax
lea eax, [ebp - 0x4444]
push eax
call fcn.00444a20
mov eax, dword [ebp - 0x984c]
test eax, eax
je 0x416a2b
push eax
push 0x47473c
lea eax, [ebp - 0x7844]
push 0x800
push eax
call fcn.0040a640
lea eax, [ebp - 0x7844]
push eax
lea eax, [ebp - 0x8844]
push 0x800
push eax
call fcn.00456be4
add esp, 0x1c
lea eax, [ebp - 0x4c44]
mov ecx, 0x556050
push eax
lea eax, [ebp - 0x8844]
push eax
call fcn.00444a20
lea eax, [ebp - 0x4c44]
push eax
lea eax, [ebp - 0x1a44]
push eax
lea eax, [ebp - 0x3444]
push 0x474768
push eax
call fcn.0041cb10
add esp, 0x10
jmp 0x416a46
lea eax, [ebp - 0x1a44]
push eax
lea eax, [ebp - 0x3444]
push 0x470908
push eax
call fcn.0041cb10
add esp, 0xc
test edi, edi
je 0x416b76
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x416a53
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
sub ecx, edx
push 0
push 0
push 0
push 0
sar ecx, 1
push ecx
push edi
push 0
push 0xfde9
call esi
mov edi, eax
push edi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push edi
mov ebx, eax
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x9848]
push 0
push 0xfde9
call esi
lea eax, [edi + edi*2]
push eax
push 1
call fcn.0044dcc9
mov esi, dword [ebp - 0x9850]
add esp, 8
mov ecx, esi
push ebx
mov dword [esi + 0x3455c], eax
call fcn.004132a0
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0
push 0
push 0xffffffffffffffff
push dword [esi + 0x3455c]
push 0
push 0xfde9
call ebx
mov esi, eax
lea ecx, [esi*2 + 2]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push esi
mov edi, eax
mov eax, dword [ebp - 0x9850]
push edi
push 0xffffffffffffffff
push dword [eax + 0x3455c]
push 0
push 0xfde9
call ebx
push edi
push 0x4750c4
lea eax, [ebp - 0x9844]
push 0x800
push eax
call fcn.0040a640
mov ebx, dword [ebp - 0x9850]
push dword [ebx + 0x3455c]
call fcn.0044dcd4
add esp, 0x14
lea eax, [ebp - 0x5444]
mov ecx, 0x556050
push eax
lea eax, [ebp - 0x9844]
push eax
call fcn.00444a20
lea eax, [ebp - 0x5444]
push eax
lea eax, [ebp - 0x3444]
push eax
push 0x474768
lea eax, [ebp - 0x6844]
push eax
call fcn.0041cb10
add esp, 0x10
lea esi, [ebx + 0x3edc]
jmp 0x416b91
lea eax, [ebp - 0x3444]
push eax
lea eax, [ebp - 0x6844]
push 0x470908
push eax
call fcn.0041cb10
add esp, 0xc
push dword [ebp + 0x14]
lea eax, [ebp - 0x1e0]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0x474770
push 0xc7
push 0xc8
push eax
call fcn.004082c0
lea eax, [ebx + 0x46dc]
push eax
lea eax, [ebp - 0x2044]
push 0x400
push eax
call fcn.0044db48
lea eax, [ebp - 0x2044]
push 0x400
push eax
call fcn.00457daa
push 0x400
push 1
call fcn.0044dcc9
mov edi, eax
lea eax, [ebp - 0x2044]
push eax
push 0x3ff
push 0x400
push edi
call fcn.004082c0
add esp, 0x48
lea edx, [ebx + 0x5134]
cmp dword [ebx + 0x4b8], 0
je 0x416cef
push edi
lea eax, [ebp - 0x2444]
push 0x400
push eax
call fcn.00408300
add esp, 0xc
lea eax, [ebp - 0x244]
mov ecx, 0x556050
push 0x64
push eax
push 0x474484
push 0x474488
lea eax, [ebp - 0x2444]
push eax
call fcn.00444350
lea eax, [ebp - 0x244]
push eax
push 0x471100
lea eax, [ebp - 0x118]
push 0x64
push eax
call fcn.00408300
lea eax, [ebx + 0x5134]
push eax
push 0x471100
lea eax, [ebp - 0xb4]
push 0x64
push eax
call fcn.00408300
lea edx, [ebp - 0xb4]
add esp, 0x20
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x416c92
sub edx, ecx
lea ecx, [ebp - 0x118]
lea eax, [ecx + 1]
mov dword [ebp - 0x9848], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416cb0
sub ecx, dword [ebp - 0x9848]
lea eax, [ebp - 0xb4]
push 0x400
push edi
push edx
push eax
push ecx
lea eax, [ebp - 0x118]
mov ecx, 0x556050
push eax
push 0x400
lea eax, [ebp - 0x2444]
push eax
call fcn.00444540
lea edx, [ebx + 0x5134]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x9848], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d00
sub ecx, dword [ebp - 0x9848]
push 0x400
push edi
push ecx
push edx
push 0xf
push 0x471978
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
lea eax, [ebx + 0x5134]
push eax
push 1
push dword [0x50c768]
call fcn.00444090
lea edx, [ebx + 0x50d0]
add esp, 0xc
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x9848], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d54
sub ecx, dword [ebp - 0x9848]
push 0x400
push edi
push ecx
push edx
push 0x13
push 0x471988
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
lea edx, [ebx + 0x506c]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x9848], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416d91
sub ecx, dword [ebp - 0x9848]
push 0x400
push edi
push ecx
push edx
push 0x13
push 0x4719b0
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
lea edx, [ebx + 0x5008]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x9848], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416dd0
sub ecx, dword [ebp - 0x9848]
push 0x400
push edi
push ecx
push edx
push 0x11
push 0x47199c
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0x47479c
push edi
call fcn.0044aa60
add esp, 8
test eax, eax
jne 0x416e2d
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416e13
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x1a
push str.agentidentifierWINCSECB
jmp 0x416e5c
push str.wincaltsecb_
push edi
call fcn.0044aa60
add esp, 8
test eax, eax
jne 0x416e6c
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416e44
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x1b
push str.agentidentifierwincaltsecb
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x416e71
push 0x400
push edi
sub ecx, edx
push ecx
push esi
push 0x17
push 0x4747f0
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0x400
push edi
push 1
push 0x4705a0
push 0x16
push 0x474808
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0x400
push edi
push 1
push 0x4705a0
push 0x12
push 0x474820
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0x400
push edi
push 1
push 0x4705a0
push 0x13
push 0x474834
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0x474848
push 0x400
push edi
call fcn.0044dba2
lea eax, [ebx + 0x4edc]
push eax
push 0x400
push edi
call fcn.0044dba2
push 0x4744cc
push 0x400
push edi
call fcn.0044dba2
lea eax, [ebx + 0x4f40]
push eax
push 0x400
push edi
call fcn.0044dba2
push 0x474854
push 0x400
push edi
call fcn.0044dba2
push 0x50c770
push 0x400
push edi
call fcn.0044dba2
add esp, 0x48
push 0x474864
push 0x400
push edi
call fcn.0044dba2
lea eax, [ebx + 0x3241c]
push eax
push 0x400
push edi
call fcn.0044dba2
push 0x47486c
push 0x400
push edi
call fcn.0044dba2
lea eax, [ebp - 0xc]
push eax
push 0x400
push edi
call fcn.0044dba2
push str.fingerprint
push 0x400
push edi
call fcn.0044dba2
push 0x49c28c
push 0x400
push edi
call fcn.0044dba2
add esp, 0x48
mov ecx, 0x556050
push 0x400
push edi
push 1
push 0x4705a0
push 0x16
push 0x474888
push 0x400
push edi
call fcn.00444540
mov ecx, edi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417000
sub ecx, edx
push 0x474888
lea eax, [ecx + 0x17]
push eax
push edi
call fcn.0044dba2
push 0x400
push 1
call fcn.0044dcc9
mov esi, eax
lea ecx, [ebp - 0x1e0]
add esp, 0x14
mov dword [ebp - 0x984c], esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417038
push 0x400
push esi
sub ecx, edx
lea eax, [ebp - 0x1e0]
push ecx
push eax
push 0x15
push 0x4748a0
push 0x400
push edi
mov ecx, 0x556050
call fcn.00444540
push 0
push 0
push 0x4748b8
push 0x4719f4
push esi
push 0x400
lea eax, [ebp - 0x1644]
mov ecx, ebx
push eax
call fcn.00415800
lea ecx, [ebp - 0x1644]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417091
sub ecx, edx
lea edx, [ebp - 0x1e0]
lea eax, [edx + 1]
mov dword [ebp - 0x9848], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4170b0
sub edx, dword [ebp - 0x9848]
lea eax, [ebp - 0x1e0]
push eax
lea eax, [edx + 1]
add eax, ecx
push eax
lea eax, [ebp - 0x1644]
push eax
call fcn.0044dba2
add esp, 0xc
lea eax, [ebp - 0x2844]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1644]
push eax
call fcn.0041ca20
lea eax, [ebp - 0x2844]
push eax
push 0x4719f8
push 0x1ff
lea eax, [ebp - 0x1c44]
push 0x200
push eax
call fcn.004082c0
add esp, 0x14
lea eax, [ebp - 0x50]
mov ecx, ebx
push eax
lea eax, [ebp - 0x1c44]
push eax
call fcn.004187f0
push esi
lea eax, [ebp - 0xa44]
push 0x400
push eax
call fcn.0044db48
push 4
push 0x471a30
lea eax, [ebp - 0xa44]
push 0x400
push eax
call fcn.00458700
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xa44]
push 0x400
push eax
call fcn.00458700
lea eax, [ebp - 0xa44]
push eax
push 0x4748c4
push 1
push dword [0x50c768]
call fcn.00444090
push 7
lea eax, [ebp - 0xa44]
push 0x470b18
push eax
call fcn.004568da
add esp, 0x48
test eax, eax
jne 0x4172a4
push 0x400
lea eax, [ebp - 0x1244]
mov ecx, 0x556050
push eax
push 0x4748f4
push 0x470b18
lea eax, [ebp - 0xa44]
push eax
call fcn.00444350
lea eax, [ebp - 0x1244]
push eax
push 0x474900
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0x10
lea eax, [ebp - 0x644]
mov ecx, 0x556050
push 0x400
push eax
lea eax, [ebp - 0x50]
push eax
push 0x4748f4
lea eax, [ebp - 0xa44]
push eax
call fcn.00444350
lea eax, [ebp - 0x644]
push eax
push 0x4750f8
push 1
push dword [0x50c768]
call fcn.00444090
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x644]
push 0x3ff
push eax
call fcn.00458700
lea ecx, [ebp - 0xe44]
add esp, 0x20
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417242
sub ecx, edx
push 0x4748f4
lea eax, [ecx + 9]
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.004082c0
lea ecx, [ebp - 0x644]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417271
sub ecx, edx
lea eax, [ebp - 0x644]
push ecx
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.00458700
lea eax, [ebp - 0xe44]
push eax
push 0x475118
jmp 0x4173c4
push 8
lea eax, [ebp - 0xa44]
push 0x470b20
push eax
call fcn.004568da
add esp, 0xc
test eax, eax
jne 0x4173d4
push 0x400
lea eax, [ebp - 0x1244]
mov ecx, 0x556050
push eax
push 0x4748f4
push 0x470b20
lea eax, [ebp - 0xa44]
push eax
call fcn.00444350
lea eax, [ebp - 0x1244]
push eax
push 0x474900
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0x10
lea eax, [ebp - 0x644]
mov ecx, 0x556050
push 0x400
push eax
lea eax, [ebp - 0x50]
push eax
push 0x4748f4
lea eax, [ebp - 0xa44]
push eax
call fcn.00444350
lea eax, [ebp - 0x644]
push eax
push 0x4750f8
push 1
push dword [0x50c768]
call fcn.00444090
push 0x29
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x644]
push 0x400
push eax
call fcn.00458700
lea ecx, [ebp - 0xe44]
add esp, 0x20
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417367
sub ecx, edx
push 0x4748f4
lea eax, [ecx + 9]
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.004082c0
lea ecx, [ebp - 0x644]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x417396
sub ecx, edx
lea eax, [ebp - 0x644]
push ecx
push eax
lea eax, [ebp - 0xe44]
push 0x400
push eax
call fcn.00458700
lea eax, [ebp - 0xe44]
push eax
push 0x47513c
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0x20
lea eax, [ebp - 0x6844]
push eax
push 0x474914
push 1
push dword [0x50c768]
call fcn.00444090
push 5
lea eax, [ebp - 0x24]
push eax
push dword [0x5183c4]
call fcn.004580f7
push 5
lea eax, [ebp - 0x14]
push eax
push dword [0x518fc8]
call fcn.004580f7
push 5
lea eax, [ebp - 0x1c]
push eax
push dword [0x518fcc]
call fcn.004580f7
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x553478
push 0x551414
push 0x528a04
push 0x50e068
push 0x520cc8
push 0x49c094
push 0x50c770
push 0x50dc68
lea esi, [ebx + 0xcac8]
push str.Mozilla_5.0___s__AppleWebKit_537.36_Chrome_84.0.4147.30_Edg_84.0.522.11__SecureBrowser__s__s__s__s__TS__s__UUID__s___s_DKM:_s._s._s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x68
lea eax, [ebp - 0x9854]
mov ecx, ebx
push eax
lea eax, [ebp - 0x6844]
push eax
lea eax, [ebp - 0xe44]
push eax
push 0x4749b4
lea eax, [ebp - 0x1244]
push eax
push esi
call fcn.0041c210
pop esi
test eax, eax
je 0x41749e
push 0x4749e4
jmp 0x4174a3
push 0x474a00
push 1
push dword [0x50c768]
call fcn.00444090
add esp, 0xc
push edi
call fcn.0044dcd4
push dword [ebp - 0x984c]
call fcn.0044dcd4
add esp, 8
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00447cbd
mov esp, ebp
pop ebp
ret 0x18
push 0x474a20
push 1
push dword [0x50c768]
call fcn.00444090
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
xor eax, eax
pop edi
pop ebx
call fcn.00447cbd
mov esp, ebp
pop ebp
ret 0x18