Function at 0x4237e0
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x423930
sub esp, 0x14
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x18]
cmp ecx, edx
jne 0x423846
cmp dword [edx], eax
jne 0x42383d
mov ecx, dword [eax]
mov dword [edx], ecx
cmp dword [edx + 4], eax
jne 0x423833
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
add esp, 0x14
ret
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
jmp 0x42381b
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ecx], ebx
jmp 0x423810
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 8], ecx
mov edx, dword [eax + 4]
mov dword [esp + 0xc], edx
call fcn.004327b0
lea eax, [0x85441d]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00433050
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00432d60
lea eax, [0x83feaa]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00433050
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00433010
lea eax, [0x83fea4]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00433050
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.00433010
lea eax, [0x8419b3]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00433050
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00433010
lea eax, [0x83fe8c]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00433050
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00433010
call fcn.004329d0
call fcn.00432820
lea eax, [0x84410c]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00430f30
nop
call fcn.00458550
jmp fcn.004237e0

Function at 0x4241a0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4242a9
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 1
je 0x424227
cmp cl, 2
jne 0x424292
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.00429080
lea eax, [0xc77ab0]
mov dword [esp], eax
call fcn.00408c80
nop
mov eax, dword [0xc77aa4]
sub eax, dword [0xc77a8c]
mov dword [0xc77aa4], eax
mov eax, dword [0xc77a98]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xc77a98], ecx
lea eax, [0xc77ab0]
mov dword [esp], eax
call fcn.00408e60
add esp, 0x14
ret
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00414ba0
lea eax, [0xc77ab0]
mov dword [esp], eax
call fcn.00408c80
nop
mov eax, dword [0xc77a80]
sub eax, dword [0xc77a68]
mov dword [0xc77a80], eax
mov eax, dword [0xc77a74]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0xc77a74], ecx
lea eax, [0xc77ab0]
mov dword [esp], eax
call fcn.00408e60
jmp 0x424223
lea eax, [0x843f1c]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00430f30
nop
call fcn.00458550
jmp fcn.004241a0