Function at 0x409ac0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4013e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb4
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401368
mov edx, dword [ebp + 0xc]
xor esi, esi
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x7c], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push esi
lea eax, [ebp - 0x5c]
push 0x404a30
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
lea edx, [ebp - 0x28]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
sub esp, 0x10
mov ecx, 8
mov ebx, esp
mov dword [ebp - 0x7c], ecx
mov eax, 0x404a58
sub esp, 0x10
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
mov edi, 0x4008
mov dword [ebx + 4], ecx
mov ecx, esp
lea edx, [ebp - 0x3c]
sub esp, 0x10
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x70]
or esi, 0xffffffff
mov dword [ebx + 0xc], eax
mov ebx, dword [ebp - 0x90]
mov dword [ecx], edi
mov edi, dword [ebp - 0x98]
mov eax, 0xb
mov dword [ecx + 4], edi
mov dword [ecx + 8], edx
mov edx, esp
push 3
push 0x404a60
mov dword [ecx + 0xc], ebx
mov ecx, dword [ebp - 0xa0]
mov dword [edx], eax
mov eax, dword [ebp - 0xa8]
mov dword [edx + 4], eax
mov dword [edx + 8], esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x28]
push edx
call esi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x404a80
mov dword [edx], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x70]
sub esp, 0x10
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x9c]
mov ecx, esp
mov eax, 0x404aa4
push 2
mov dword [ecx], edx
push 0x404ac0
mov dword [ecx + 4], edi
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x28]
push eax
mov dword [ecx + 0xc], ebx
call esi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x404ae8
mov dword [edx], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x404ac0
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x70]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x9c]
mov dword [ecx], edx
mov eax, 0x404b04
mov dword [ecx + 4], edi
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x28]
push eax
mov dword [ecx + 0xc], ebx
call esi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x9c], ecx
mov eax, 0x404bf4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x404ac0
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x70]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x9c]
mov dword [ecx], edx
mov eax, 0x404c24
mov dword [ecx + 4], edi
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x28]
push eax
mov dword [ecx + 0xc], ebx
call esi
mov ecx, dword [ebp - 0x28]
push 0
push 0x404c88
push ecx
call esi
add esp, 0x38
lea edx, [ebp - 0x5c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x4c]
call ebx
mov eax, dword [ebp - 0x28]
push 0
push 0x404c94
lea ecx, [ebp - 0x5c]
push eax
push ecx
mov dword [ebp - 0x74], 4
mov dword [ebp - 0x7c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
lea edx, [ebp - 0x7c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x5c]
mov edi, eax
call esi
test di, di
je 0x409db6
lea eax, [ebp - 0x5c]
push 0x32
push eax
call fcn.00409a20
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x38]
call ebx
push 1
lea edx, [ebp - 0x38]
push 1
lea eax, [ebp - 0x4c]
push edx
push eax
lea ecx, [ebp - 0x5c]
push 0x404cb0
push ecx
call dword [0x401044]
lea edx, [ebp - 0x5c]
lea eax, [ebp - 0x7c]
push edx
push eax
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x7c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0x5c]
mov edi, eax
call esi
test di, di
je 0x409ce5
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x74], 0x404cb8
mov dword [ebp - 0x7c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
push 0x409e2e
jmp 0x409e0b
mov ecx, dword [ebp - 0x28]
push 0
push 0x404cc4
lea edx, [ebp - 0x5c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0x24]
call ebx
lea eax, [ebp - 0x28]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push 0x409e2e
jmp 0x409e0b
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x4c]
call esi
ret