Function at 0x41b291
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0x28
call fcn.00462e3a
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0xa
rep stosd dword es:[edi], eax
mov dword [ebx], 0xefd462
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0xc
call fcn.00462e3a
add esp, 4
mov dword [ebp - 0x20], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0xefdaaf
push ebx
add ebx, 4
push ebx
push 8
call fcn.00462e3a
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x500e01
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
add ebx, 4
push ebx
push 8
call fcn.00462e3a
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x500e01
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
pop ebx
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
push 0
mov eax, 0xefdaeb
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call fcn.00412ef2
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b38d
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41b3a1
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
push 0
mov eax, 0xefdaef
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefdaeb
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp + 8]
call fcn.00414ac2
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b3eb
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b3fb
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41b40f
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 1
push 0
mov eax, 0xefdaef
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
call fcn.0041a85a
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b44d
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41b461
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
push 1
push 0x1388
push 1
push 0x1388
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x98]
push 0xefdbe9
push dword [ebp - 4]
push 0xefd861
mov ecx, 3
call fcn.00401887
add esp, 0xc
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x84]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b4d4
push ebx
call fcn.00462e34
add esp, 4
push 1
push 0
push 0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc4]
push 1
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
push 0
push 0
push 0
push getpeername
push 0
push 0xe52b88
push getpeername
push 0
push 0xefd869
push 3
mov ebx, 0x463ea0
call fcn.00462e4c
add esp, 0x28
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41b56d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41b569
imul eax, dword [ebx]
jmp 0x41b55e
mov ecx, eax
test ecx, ecx
je 0x41b58c
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x41b585
push ebx
push eax
call fcn.00462e34
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x41b573
call fcn.00462e34
add esp, 4
mov eax, 0x500e29
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x8c]
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b5c1
push ebx
call fcn.00462e34
add esp, 4
push 1
push 0x2f
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
push 0xefd8f9
push dword [ebp - 0xc]
push 0xefdb00
push dword [ebp - 8]
push 0xefd8fb
mov ecx, 5
call fcn.00401887
add esp, 0x14
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
call fcn.00419f95
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b61a
push ebx
call fcn.00462e34
add esp, 4
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa8]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b63f
push ebx
call fcn.00462e34
add esp, 4
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x2c]
lea eax, [ebp - 0x10]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd0]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00416f19
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41b6a3
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41b6b3
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b6c3
push ebx
call fcn.00462e34
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x41b6d6
mov eax, 0x500e01
push eax
push 1
mov ebx, 0x4648b0
call fcn.00462e4c
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41b6fc
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41b710
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov eax, 0xe52b66
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, 0xefd919
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004192cc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41b760
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b770
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41b784
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov eax, 0xe52b66
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, 0xefd921
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004192cc
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41b7d4
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b7e4
push ebx
call fcn.00462e34
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41b7f8
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefd92b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefd936
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b83e
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b84e
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefd941
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefd945
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b890
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b8a0
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefd94c
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefd95e
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b8e2
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b8f2
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefd96e
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefd9af
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b934
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b944
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefdb0b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefdaa4
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41b986
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b996
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
lea eax, [ebp - 0x1c]
push eax
mov eax, 0xefd9bd
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b9d0
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefdb16
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefd9da
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41ba12
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ba22
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0xefdb2b
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0xefdaa4
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41ba64
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41ba74
push ebx
call fcn.00462e34
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [0xf2b574]
test ebx, ebx
je 0x41baa8
push ebx
call fcn.00462e34
add esp, 4
pop eax
mov dword [0xf2b574], eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x41baca
push eax
mov ebx, eax
call fcn.0040181c
inc eax
push eax
call fcn.00462e3a
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x41bacf
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41bae0
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41baf0
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41bb00
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41bb20
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41bb30
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41bb40
push ebx
call fcn.00462e34
add esp, 4
mov ebx, dword [ebp - 0x20]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00462e34
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4