Function at 0x41a660
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0
push 8
call fcn.0043a4b8
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52b9f4
push getpeername
push 0
push 0x52aecc
push getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x41a6d2
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a6fc
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
call fcn.004019bf
push 0
push 0
push 0
push getpeername
push 0
push str.ScriptControl
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x43e6e0
call fcn.0043a4d0
add esp, 0x28
push getpeername
push 0
push str.JScript
push getpeername
push 0
push str.Language
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x43e5e0
call fcn.0043a4d0
add esp, 0x28
push str._return_escape_x__
push dword [ebp - 4]
push str.function_xx__var_x
mov ecx, 3
call fcn.00402edc
add esp, 0xc
mov dword [ebp - 0xc], eax
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x41a797
mov eax, 0x5135f8
push eax
push getpeername
push 0
push str.ExecuteStatement
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x43d420
call fcn.0043a4d0
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a7d0
push ebx
call fcn.0043a4ca
add esp, 4
push getpeername
push 0
push 0x52ba52
push getpeername
push 0
push 0x52ba55
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x43d3f0
call fcn.0043a4d0
add esp, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a81b
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x10030
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.00407cd3
cmp dword [ebp + 0xc], 0
je 0x41aae4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52ba59
push getpeername
push 0
push 0x52ba5b
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a88b
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a8b5
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52ba5f
push getpeername
push 0
push 0x52ba61
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a8fa
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a924
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52a091
push getpeername
push 0
push 0x52ba65
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a969
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a993
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52a08f
push getpeername
push 0
push 0x52ba69
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a9d8
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41aa02
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52ba6d
push getpeername
push 0
push 0x52ba6f
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41aa47
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41aa71
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52ba73
push getpeername
push 0
push 0x52ba75
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41aab6
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41aae0
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0x14], 0
je 0x41ac3b
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x5137f4
push getpeername
push 0
push 0x52ba79
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41ab2f
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ab59
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x52ba7d
push getpeername
push 0
push 0x52ba7f
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41ab9e
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41abc8
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
push 0x513905
push getpeername
push 0
push 0x52ba83
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41ac0d
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ac37
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x52ba87
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
call fcn.004015a0
add esp, 8
cmp eax, 0
je 0x41acc0
push getpeername
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x41ac6b
mov eax, 0x5135f8
push eax
push 1
mov ebx, 0x43b9b0
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x5135f8
push dword [ebp - 0x10]
call fcn.004015a0
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41acaf
push ebx
call fcn.0043a4ca
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x41acc0
mov eax, 1
jmp 0x41acc5
mov eax, 0
test eax, eax
je 0x41ad46
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.004010a8
push getpeername
push 0
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebx]
test eax, eax
jne 0x41acf8
mov eax, 0x5135f8
push eax
push getpeername
push 0
push 0x52ba87
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41ad18
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ad42
push ebx
call fcn.0043a4ca
add esp, 4
pop eax
mov dword [ebp - 4], eax
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41ad59
mov eax, 0x5135f8
push eax
push 1
mov ebx, 0x43ab10
call fcn.0043a4d0
add esp, 0x10
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0xc]
push 0
push 0
push 0
push getpeername
push 0
push 0x52aecc
push getpeername
push 0
push 0x52b9f4
push getpeername
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41adb6
mov eax, 0x5135f8
push eax
push 6
mov ebx, 0x43b9d0
call fcn.0043a4d0
add esp, 0x4c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
jmp 0x41add4
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41ade5
push ebx
call fcn.0043a4ca
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x43e6b0
call fcn.0043a4d0
add esp, 0x10
call fcn.0043a4ca
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x1c