Function at 0x41b260
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46b2de
mov eax, dword fs:[0]
push eax
mov eax, 0x1e58
call fcn.00466360
mov eax, dword [0x485008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 3
push 0x476ee8
call fcn.0041a090
add esp, 8
call dword [0x488968]
mov dword [ebp - 0x1e30], eax
lea ecx, [ebp - 0x1e2c]
call fcn.004395e0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1e34], 0
jmp 0x41b2d7
mov eax, dword [ebp - 0x1e34]
add eax, 1
mov dword [ebp - 0x1e34], eax
cmp dword [ebp - 0x1e34], 0x40
jae 0x41b326
imul ecx, dword [ebp - 0x1e34], 0x78
cmp dword [ebp + ecx - 0x1db4], 0
je 0x41b324
imul edx, dword [ebp - 0x1e34], 0x78
lea eax, [ebp + edx - 0x1dc4]
mov ecx, dword [eax]
mov dword [ebp - 0x1e4c], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x1e48], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1e44], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1e40], edx
jmp 0x41b326
jmp 0x41b2c8
mov eax, dword [ebp - 0x1e44]
sub eax, dword [0x488658]
mov dword [0x48865c], eax
mov ecx, dword [ebp - 0x1e40]
sub ecx, dword [0x488668]
mov dword [0x488684], ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0
push 0
mov edx, dword [0x488668]
push edx
mov eax, dword [0x488658]
push eax
push 0xffffd8f1
push 0xffffd8f1
push 0x80000000
push 0
push 0x476f04
push 0x80
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x488660], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
push 0
mov ecx, dword [0x488660]
push ecx
push 0x64
push 0x64
push 0
push 0
push 0x80000000
push 0
push str.TestMbWindow
push 0x80000
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [0x488688], eax
mov edx, dword [0x488688]
push edx
call fcn.00418c60
add esp, 4
mov eax, dword [ebp - 0x1e30]
push eax
push 0x476f3c
mov ecx, dword [0x488660]
push ecx
call dword [sym.imp.USER32.dll_SetPropW]
push str.minblink
mov edx, dword [0x488660]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, dword [0x488660]
push eax
mov ecx, dword [ebp - 0x1e30]
push ecx
call dword [0x488760]
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_89.0.4389.90_Safari_537.36_wke_2.0
lea ecx, [ebp - 0x28]
call fcn.0041c7d0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0041c450
push eax
mov edx, dword [ebp - 0x1e30]
push edx
call dword [0x488860]
mov eax, dword [0x488668]
push eax
mov ecx, dword [0x488658]
push ecx
mov edx, dword [ebp - 0x1e30]
push edx
call dword [0x488978]
mov eax, dword [ebp - 0x1e30]
push eax
call dword [0x4888a4]
mov ecx, dword [0x488660]
push ecx
push 0x41a130
mov edx, dword [ebp - 0x1e30]
push edx
call dword [0x488958]
mov eax, dword [ebp - 0x1e30]
push eax
push 0x41a360
mov ecx, dword [ebp - 0x1e30]
push ecx
call dword [0x4889a4]
mov edx, dword [ebp - 0x1e30]
push edx
push 0x41b250
mov eax, dword [ebp - 0x1e30]
push eax
call dword [0x4887c0]
mov ecx, dword [ebp - 0x1e30]
push ecx
push 0x41a4f0
mov edx, dword [ebp - 0x1e30]
push edx
call dword [0x4888e8]
mov eax, dword [ebp - 0x1e30]
push eax
push 0x41a510
mov ecx, dword [ebp - 0x1e30]
push ecx
call dword [0x48875c]
mov edx, dword [ebp - 0x1e30]
push edx
push 0x41a520
mov eax, dword [ebp - 0x1e30]
push eax
call dword [0x4888c8]
push 0x488698
lea ecx, [ebp - 0x1e64]
push ecx
call fcn.00418aa0
add esp, 8
mov dword [ebp - 0x1e38], eax
mov edx, dword [ebp - 0x1e38]
mov dword [ebp - 0x1e3c], edx
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1e3c]
call fcn.0041c450
push eax
mov eax, dword [ebp - 0x1e30]
push eax
call dword [0x4887ac]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1e64]
call fcn.0041c5a0
push 1
push 0x41a690
mov ecx, dword [ebp - 0x1e30]
push ecx
call dword [0x4889e4]
push 1
mov edx, dword [ebp - 0x1e30]
push edx
call dword [0x48883c]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.0041c5a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e2c]
call fcn.00403c70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00439667
mov esp, ebp
pop ebp
ret