Function at 0x41ecd0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x442c58
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x4511b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x78], 0
push str.User_Agent
lea ecx, [ebp - 0x194]
call fcn.00405ff0
mov dword [ebp - 4], 1
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x104]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f0d0
mov ecx, eax
call fcn.0040c6b0
mov byte [ebp - 0x105], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x194]
call fcn.00406130
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x41ed9e
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_80.0.4044.92_Safari_537.36
push str.User_Agent
lea eax, [ebp - 0xfc]
push eax
call fcn.0041f360
add esp, 0xc
push eax
lea ecx, [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f320
push str.Connection
lea ecx, [ebp - 0x178]
call fcn.00405ff0
mov dword [ebp - 4], 2
lea eax, [ebp - 0xe4]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0xe8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f0d0
mov ecx, eax
call fcn.0040c6b0
mov byte [ebp - 0xe9], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x178]
call fcn.00406130
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x41ee34
push str.HTTP_1.1
push str.User_Agent
lea eax, [ebp - 0xe0]
push eax
call fcn.0041f360
add esp, 0xc
push eax
lea ecx, [ebp - 0xd8]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f320
push str.Accept
lea ecx, [ebp - 0x15c]
call fcn.00405ff0
mov dword [ebp - 4], 3
lea eax, [ebp - 0xc8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f0d0
mov ecx, eax
call fcn.0040c6b0
mov byte [ebp - 0xcd], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.00406130
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x41eeca
push 0x4473ec
push str.Accept
lea eax, [ebp - 0xc4]
push eax
call fcn.0041f360
add esp, 0xc
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f320
push str.Connection
lea ecx, [ebp - 0x140]
call fcn.00405ff0
mov dword [ebp - 4], 4
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xb0]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f0d0
mov ecx, eax
call fcn.0040c6b0
mov byte [ebp - 0xb1], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x140]
call fcn.00406130
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x41ef60
push str.Keep_Alive
push str.Connection
lea eax, [ebp - 0xa8]
push eax
call fcn.0041f360
add esp, 0xc
push eax
lea ecx, [ebp - 0xa0]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f320
push str.Accept_Language
lea ecx, [ebp - 0x124]
call fcn.00405ff0
mov dword [ebp - 4], 5
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f0d0
mov ecx, eax
call fcn.0040c6b0
mov byte [ebp - 0x95], al
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x124]
call fcn.00406130
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x41eff6
push str.zh_CN_zh_q0.9
push str.Accept_Language
lea eax, [ebp - 0x8c]
push eax
call fcn.0041f360
add esp, 0xc
push eax
lea ecx, [ebp - 0x84]
push ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0041f320
lea ecx, [ebp - 0x30]
call fcn.00405f80
mov dword [ebp - 4], 6
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.0040b740
jmp 0x41f01e
lea ecx, [ebp - 0x34]
call fcn.0040fe90
lea eax, [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x5c
call fcn.004227f0
push eax
lea ecx, [ebp - 0x34]
call fcn.004232b0
movzx ecx, al
test ecx, ecx
je 0x41f07e
lea ecx, [ebp - 0x34]
call fcn.0040fe20
push eax
lea ecx, [ebp - 0x30]
call fcn.004061f0
push 0x447424
lea ecx, [ebp - 0x30]
call fcn.004069d0
lea ecx, [ebp - 0x34]
call fcn.0040fe20
add eax, 0x1c
push eax
lea ecx, [ebp - 0x30]
call fcn.004061f0
push 0x44740c
lea ecx, [ebp - 0x30]
call fcn.004069d0
jmp 0x41f016
lea eax, [ebp - 0x30]
push eax
call fcn.00410ac0
add esp, 4
push eax
mov ecx, dword [ebp + 8]
call fcn.00406070
mov ecx, dword [ebp - 0x78]
or ecx, 1
mov dword [ebp - 0x78], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00406130
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042a65e
mov esp, ebp
pop ebp
ret 4