Function at 0x409930
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x401d36
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401b10
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x4c], edi
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
push 0x402bc4
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [ebp - 0x20]
push ecx
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
or eax, 0xffffffff
mov ecx, 0xb
mov edx, dword [ebp - 0x4c]
mov esi, dword [edx]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0xc], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
push eax
push 0x402bd8
push edx
call dword [esi + 0x24]
fnclex
cmp eax, edi
jge 0x4099f3
push 0x24
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call esi
jmp 0x4099f9
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
push 0x4046cc
push 0x404430
push eax
call dword [edx + 0x28]
fnclex
cmp eax, edi
jge 0x409a20
push 0x28
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
push 0x404558
push 0x404358
push eax
call dword [edx + 0x28]
fnclex
cmp eax, edi
jge 0x409a47
push 0x28
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
push 0x404614
push 0x4045f4
push eax
call dword [edx + 0x28]
fnclex
cmp eax, edi
jge 0x409a6e
push 0x28
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
push 0x4e20
push 0x2710
push 0x2710
push 0x2710
push eax
call dword [edx + 0x5c]
fnclex
cmp eax, edi
jge 0x409a9f
push 0x5c
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov eax, 0x80020004
mov ecx, 0xa
mov edx, dword [ebp - 0x4c]
mov edi, dword [edx]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0xc], eax
push edx
call dword [edi + 0x34]
fnclex
test eax, eax
jge 0x409adc
push 0x34
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov eax, 0x80020004
mov ecx, 0xa
mov edx, dword [ebp - 0x4c]
mov edi, dword [edx]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x38]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0xc], eax
push edx
call dword [edi + 0x54]
fnclex
test eax, eax
jge 0x409b1d
push 0x54
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
mov edx, dword [ebp + 0xc]
cmp word [edx], 0
je 0x409b50
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
lea edx, [ebp - 0x44]
push edx
push eax
call dword [ecx + 0x38]
fnclex
test eax, eax
jge 0x409b47
push 0x38
push 0x402bb4
mov ecx, dword [ebp - 0x4c]
push ecx
push eax
call esi
cmp dword [ebp - 0x44], 0xc8
jne 0x409bb5
push 0
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x409b7d
push 0x40
push 0x402bb4
mov ecx, dword [ebp - 0x20]
push ecx
push eax
call esi
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0x402bb4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea edx, [ebp - 0x20]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call dword [0x401068]
push 0x409c2b
jmp 0x409c1a
push 0x402bb4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x20]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call esi
mov edx, dword [eax]
push eax
call dword [edx + 0x48]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call dword [0x401068]
push 0x409c2b
jmp 0x409c1a
lea ecx, [ebp - 0x4c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x20]
call esi
ret