Function at 0x601bb0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
cmp eax, 4
ja case.default.0x601bc5
jmp dword [eax*4 + 0x601da8]
mov dword [ebx], 0
mov ecx, ebx
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
push 0x40
mov byte [ebx], 0
call fcn.00448c50
mov dword [ebx + 0x10], 0x32
mov ecx, eax
mov dword [ebx + 0x14], 0x3f
movups xmm0, xmmword [str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1_]
pop edi
pop esi
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x69f7a4]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x69f7b4]
movups xmmword [ecx + 0x20], xmm0
mov ax, word [0x69f7c4]
mov word [ecx + 0x30], ax
mov eax, ebx
mov byte [ecx + 0x32], 0
mov dword [ebx], ecx
pop ebx
pop ebp
ret
mov dword [ebx], 0
mov ecx, ebx
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
push 0x70
mov byte [ebx], 0
call fcn.00448c50
mov dword [ebx + 0x10], 0x67
mov edi, eax
mov dword [ebx + 0x14], 0x6f
mov ecx, 0x19
mov esi, str.Mozilla_5.0__X11__U__Linux_i686__ru__rv:1.9.2.14__Gecko_20110221_Ubuntu_10.10__maverick__Firefox_3.6.14
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
mov byte [eax + 0x67], 0
mov dword [ebx], eax
mov eax, ebx
pop esi
pop ebx
pop ebp
ret
mov dword [ebx], 0
mov ecx, ebx
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
push 0x40
mov byte [ebx], 0
call fcn.00448c50
mov dword [ebx + 0x10], 0x3f
mov edi, eax
mov dword [ebx + 0x14], 0x3f
mov ecx, 0xf
mov esi, str.Opera_9.80__X11__Linux_i686__U__ru__Presto_2.7.62_Version_11.01
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
mov byte [eax + 0x3f], 0
mov dword [ebx], eax
mov eax, ebx
pop esi
pop ebx
pop ebp
ret
mov dword [ebx], 0
mov ecx, ebx
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
push 0x80
mov byte [ebx], 0
call fcn.00448c50
mov dword [ebx + 0x10], 0x77
mov edi, eax
mov dword [ebx + 0x14], 0x7f
mov ecx, 0x1d
mov esi, str.Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__AppleWebKit_534.13__KHTML__like_Gecko__Chrome_9.0.597.107_Safari_534.13
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop edi
mov byte [eax + 0x77], 0
mov dword [ebx], eax
mov eax, ebx
pop esi
pop ebx
pop ebp
ret
mov dword [ebx], 0
mov ecx, ebx
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
push 0x90
mov byte [ebx], 0
call fcn.00448c50
mov dword [ebx + 0x10], 0x80
mov edi, eax
mov dword [ebx + 0x14], 0x8f
mov ecx, 0x20
mov esi, str.Mozilla_5.0__Macintosh__U__Intel_Mac_OS_X_10_6_6__en_US__AppleWebKit_534.13__KHTML__like_Gecko__Chrome_9.0.597.102_Safari_534.13
rep movsd dword es:[edi], dword [esi]
pop edi
mov byte [eax + 0x80], 0
mov dword [ebx], eax
mov eax, ebx
pop esi
pop ebx
pop ebp
ret
call fcn.005c36b0
mov ecx, accept
mov edx, dword [eax + 0x10]
sub ecx, edx
cmp ecx, 0xa
jb 0x601da2
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x601d87
mov ecx, dword [eax]
push 0xa
push str._installer
push edx
push ecx
push eax
push dword [ebp + 0xc]
mov ecx, ebx
call fcn.005b3710
pop edi
pop esi
mov eax, ebx
pop ebx
pop ebp
ret
call fcn.00446f60
nop
int3