Function at 0x4991a0
Capabilities:
Access peb ldr_data
Encode data using xor
Link many functions at runtime
Reference http user-agent string

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x528a5c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x70
mov eax, ecx
xorps xmm0, xmm0
lea ecx, [eax + 0xc]
mov dword [ebp - 0x14], eax
movups xmmword [ecx], xmm0
push esi
xor edx, edx
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push edi
mov word [ecx], dx
mov dword [ebp - 4], edx
movups xmmword [eax + 0x30], xmm0
mov dword [eax + 0x40], edx
mov dword [eax + 0x44], 7
mov word [eax + 0x30], dx
movups xmmword [eax + 0x48], xmm0
mov dword [eax + 0x58], edx
mov dword [eax + 0x5c], 7
mov word [eax + 0x48], dx
movups xmmword [eax + 0x60], xmm0
mov dword [eax + 0x70], edx
mov dword [eax + 0x74], 0xf
mov byte [eax + 0x60], dl
movups xmmword [eax + 0x78], xmm0
mov dword [eax + 0x88], edx
mov dword [eax + 0x8c], 0xf
mov byte [eax + 0x78], dl
push 0x6f
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_119.0.0.0_Safari_537.36
mov byte [ebp - 4], 4
call fcn.00482010
cmp byte [0x5585f8], 0
jne 0x4999f3
movaps xmm0, xmmword [0x543c50]
xor ecx, ecx
mov dword [ebp - 0x50], 0xa6a3a5bc
movups xmmword [ebp - 0x4c], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x50], al
inc ecx
cmp ecx, 0xb
jb 0x499272
mov dword [0x5584e0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x50]
mov byte [ebp - 0x45], 0
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x20], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4992a4
sub ecx, edx
lea eax, [ebp - 0x50]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00402b20
cmp dword [ebp - 0x1c], 0x10
lea eax, [ebp - 0x30]
cmovae eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, dword [ebp - 0x1c]
mov edi, eax
cmp ecx, 0x10
jb 0x499302
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4992f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a09
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x543700]
xor ecx, ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0xf
mov byte [ebp - 0x30], 0
mov dword [ebp - 0x73], 0xa68385bc
mov word [ebp - 0x6f], 0x849b
mov byte [ebp - 0x6d], 0x81
movups xmmword [ebp - 0x6c], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x73], al
inc ecx
cmp ecx, 0xe
jb 0x499332
mov dword [0x5584d4], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x73]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499364
sub ecx, edx
lea eax, [ebp - 0x73]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f58], eax
cmp ecx, 0x10
jb 0x4993c8
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4993be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a0e
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x5459f0]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov word [ebp - 0x68], 0x8e9e
xorps xmm0, xmm0
mov byte [ebp - 0x66], 0x8e
movq qword [ebp - 0x65], xmm0
mov byte [ebp - 0x5d], 0
nop dword [eax + eax]
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x78], al
inc ecx
cmp ecx, 0x13
jb 0x4993f0
mov dword [0x558558], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x78]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499422
sub ecx, edx
lea eax, [ebp - 0x78]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f5c], eax
cmp ecx, 0x10
jb 0x499480
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x499476
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a13
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x543cf0]
xor ecx, ecx
mov dword [ebp - 0x70], 0xa68385bc
movups xmmword [ebp - 0x6c], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x70], al
inc ecx
cmp ecx, 0xb
jb 0x499494
mov dword [0x5584e0], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4994c6
sub ecx, edx
lea eax, [ebp - 0x70]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f44], eax
cmp ecx, 0x10
jb 0x499524
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x49951a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a18
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545af0]
xor ecx, ecx
movups xmmword [ebp - 0x77], xmm0
mov word [ebp - 0x67], 0x8888
xorps xmm0, xmm0
mov byte [ebp - 0x5d], 0
movq qword [ebp - 0x65], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x12
jb 0x499543
mov dword [0x55858c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499575
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f60], eax
cmp ecx, 0x10
jb 0x4995d3
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4995c9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a1d
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545840]
xor ecx, ecx
movups xmmword [ebp - 0x7e], xmm0
mov word [ebp - 0x6e], 0x8aba
movaps xmm0, xmmword [0x542ed0]
movups xmmword [ebp - 0x6c], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x7e], al
inc ecx
cmp ecx, 0x19
jb 0x4995f1
mov dword [0x5585e8], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x7e]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499623
sub ecx, edx
lea eax, [ebp - 0x7e]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f64], eax
cmp ecx, 0x10
jb 0x499681
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x499677
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a22
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545ae0]
xor ecx, ecx
movups xmmword [ebp - 0x77], xmm0
mov word [ebp - 0x67], 0x8888
xorps xmm0, xmm0
mov byte [ebp - 0x5d], 0
movq qword [ebp - 0x65], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x12
jb 0x4996a0
mov dword [0x55858c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4996d2
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f40], eax
cmp ecx, 0x10
jb 0x499730
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x499726
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a27
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x545c50]
xor ecx, ecx
movups xmmword [ebp - 0x7b], xmm0
mov dword [ebp - 0x6b], 0x90928c88
xorps xmm0, xmm0
mov word [ebp - 0x67], 0x658c
movq qword [ebp - 0x65], xmm0
mov byte [ebp - 0x5d], 0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x16
jb 0x499756
mov dword [0x558524], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x7b]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499788
sub ecx, edx
lea eax, [ebp - 0x7b]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f50], eax
cmp ecx, 0x10
jb 0x4997e6
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4997dc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a2c
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x543ba0]
xor ecx, ecx
mov dword [ebp - 0x74], 0xa68385bc
mov dword [ebp - 0x70], 0xa081849b
movups xmmword [ebp - 0x6c], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x74], al
inc ecx
cmp ecx, 0xf
jb 0x499801
mov dword [0x558508], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x74]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499833
sub ecx, edx
lea eax, [ebp - 0x74]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f54], eax
cmp ecx, 0x10
jb 0x499891
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x499887
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a31
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x5459e0]
xor ecx, ecx
movups xmmword [ebp - 0x77], xmm0
mov word [ebp - 0x67], 0x9997
xorps xmm0, xmm0
mov byte [ebp - 0x5d], 0
movq qword [ebp - 0x65], xmm0
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x12
jb 0x4998b0
mov dword [0x55858c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4998e2
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f4c], eax
cmp ecx, 0x10
jb 0x499940
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x499936
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a36
push ecx
push edx
call fcn.004f7c11
add esp, 8
movaps xmm0, xmmword [0x5452d0]
xor ecx, ecx
movups xmmword [ebp - 0x77], xmm0
mov word [ebp - 0x67], 0x8f8f
xorps xmm0, xmm0
mov byte [ebp - 0x5d], 0
movq qword [ebp - 0x65], xmm0
nop
lea eax, [ecx - 0x15]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x12
jb 0x499960
mov dword [0x55858c], ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x77]
mov byte [ebp - 0x65], 0
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x38], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x34], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x499992
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00402b20
cmp dword [ebp - 0x34], 0x10
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push edi
call esi
mov ecx, dword [ebp - 0x34]
mov dword [0x557f48], eax
cmp ecx, 0x10
jb 0x4999ec
mov edx, dword [ebp - 0x48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4999e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x499a3b
push ecx
push edx
call fcn.004f7c11
add esp, 8
mov byte [0x5585f8], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
call fcn.004fceb0
int3