Function at 0x406310
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4f8970
push reloc.WS2_32.dll_connect
push 0
push str.Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_6.0___r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_5.2___r_nMozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1___r_nMozilla_5.0__Windows__U__Windows_NT_5.2__Gecko_2008070208_Firefox_33.0.1__r_nMozilla_5.0__Windows__U__Windows_NT_5.1__Gecko_20070309_Firefox_23.0.0.3__r_nMozilla_5.0__Windows__U__Windows_NT_5.1__Gecko_20070803_Firefox_15.5.0.12_r_nMozilla_5.0__Windows_NT_5.1__rv:35.0__Gecko_20140101_Firefox_35.0_r_nOpera_9.27__Windows_NT_5.2__U__zh_cn___r_nOpera_8.0__Macintosh__PPC_Mac_OS_X__U__en___r_nMozilla_5.0__Macintosh__PPC_Mac_OS_X__U__en__Opera_8.0_r_nMozilla_5.0__Windows__U__Windows_NT_5.2__AppleWebKit_525.13__KHTML__like_Gecko__Version_3.1_Safari_525.13__r_nMozilla_5.0__iPhone__U__CPU_like_Mac_OS_X__AppleWebKit_420.1__KHTML__like_Gecko__Version_3.0_Mobile_4A93_Safari_419.3_r_nMozilla_5.0__Windows__U__Windows_NT_5.2__AppleWebKit_525.13__KHTML__like_Gecko___r_nMozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.8.1.12__Gecko_20080219_Firefox_2.0.0.12_Navigator_r_nMozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_535.1__KHTML__like_Gecko__Chrome_14.0.835.163_Safari_535.1_r_nMozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_535.1__KHTML__like_Gecko__Chrome_14.0.835.163_Safari_535.1_r_nMozilla_5.0__Windows_NT_6.1__WOW64__rv:6.0__Gecko_20100101_Firefox_6.0_r_nMozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_534.50__KHTML__like_Gecko__Version_5.1_Safari_534.50_r_nOpera_9.80__Windows_NT_6.1__U__zh_cn__Presto_2.9.168_Version_11.50_r_nMozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Win64__x64__Trident_5.0__.NET_CLR_2.0.50727__SLCC2__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__InfoPath.3__.NET4.0C__Tablet_PC_2.0__.NET4.0E__r_nMozilla_4.0__compatible__MSIE_8.0__Windows_NT_6.1__WOW64__Trident_4.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__.NET4.0C__InfoPath.3__r_nMozilla_4.0__compatible__MSIE_8.0__Windows_NT_5.1__Trident_4.0__GTB7.0__r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_5.1__r_nMozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__r_nMozilla_5.0__Windows__U__Windows_NT_6.1____AppleWebKit_534.12__KHTML__like_Gecko__Maxthon_3.0_Safari_534.12_r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_6.1__WOW64__Trident_5.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__InfoPath.3__.NET4.0C__.NET4.0E__r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_6.1__WOW64__Trident_5.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__InfoPath.3__.NET4.0C__.NET4.0E__SE_2.X_MetaSr_1.0__r_nMozilla_5.0__Windows__U__Windows_NT_6.1__en_US__AppleWebKit_534.3__KHTML__like_Gecko__Chrome_6.0.472.33_Safari_534.3_SE_2.X_MetaSr_1.0_r_nMozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__InfoPath.3__.NET4.0C__.NET4.0E__r_nMozilla_5.0__Windows_NT_6.1__AppleWebKit_535.1__KHTML__like_Gecko__Chrome_13.0.782.41_Safari_535.1_QQBrowser_6.9.11079.201_r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_6.1__WOW64__Trident_5.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__Media_Center_PC_6.0__InfoPath.3__.NET4.0C__.NET4.0E__QQBrowser_6.9.11079.201_r_nMozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__WOW64__Trident_5.0__r_nMozilla_4.0__compatible__MSIE_7.0__Windows_NT_6.1__WOW64__Trident_4.0__SLCC2__.NET_CLR_2.0.50727__.NET_CLR_3.5.30729__.NET_CLR_3.0.30729__baidubrowser_1.x__r_nMozilla_5.0__Windows__U__Windows_NT_6.1__en_US__AppleWebKit_534.3__KHTML__like_Gecko___Chrome_6.0.472.33_Safari_534.3_SE_2.X_MetaSr_1.0_r_nMozilla_5.0__Windows_NT_6.1__AppleWebKit_534.36__KHTML__like_Gecko__Chrome_12.0.742.53_Safari_534.36_QQBrowser_6.5.9225.201_r_nMozilla_5.0__Windows__U__Windows_NT_5.1__zh_CN__AppleWebKit_533.9__KHTML__like_Gecko__Maxthon_3.0_Safari_533.9
push 3
mov ebx, 0x4309b0
call fcn.0042f59f
add esp, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ebx, dword [0x773f98]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x406371
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40636d
imul eax, dword [ebx]
jmp 0x406362
mov ecx, eax
test ecx, ecx
je 0x406390
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x406389
push ebx
push eax
call fcn.0042f599
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x406377
call fcn.0042f599
add esp, 4
pop eax
mov dword [0x773f98], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4f8970
push reloc.WS2_32.dll_connect
push 0
push str.Mozilla_5.0__iPhone__U__CPU_like_Mac_OS_X__en__AppleWebKit_420__KHTML__like_Gecko__Version_3.0_Mobile_1C28_Safari_419.3_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_2_0_like_Mac_OS_X__ja_jp__AppleWebKit_525.18.1__KHTML__like_Gecko__Version_3.1.1_Mobile_5A347_Safari_52_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_2_0_like_Mac_OS_X__ja_jp__AppleWebKit_525.18.1__KHTML__like_Gecko__Version_3.1.1_Mobile_5A345_Safari_525.20_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_2_0_1_like_Mac_OS_X__ja_jp__AppleWebKit_525.18.1__KHTML__like_Gecko__Version_3.1.1_Mobile_5B108_Safari_525.20_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_2_1_like_Mac_OS_X__ja_jp__AppleWebKit_525.18.1__KHTML__like_Gecko__Version_3.1.1_Mobile_5F136_Safari_525.20_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_3_0_like_Mac_OS_X__en_us__AppleWebKit_528.18__KHTML__like_Gecko__Version_4.0_Mobile_7A341_Safari_528.16_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_3_1_3_like_Mac_OS_X__ja_jp__AppleWebKit_528.18__KHTML__like_Gecko__Version_4.0_Mobile_7E18_Safari_528.16_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_0_1_like_Mac_OS_X__ja_jp__AppleWebKit_532.9__KHTML__like_Gecko__Version_4.0.5_Mobile_8A306_Safari_6531.22.7_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_0_2_like_Mac_OS_X__ja_jp__AppleWebKit_532.9__KHTML__like_Gecko__Version_4.0.5_Mobile_8A400_Safari_6531.22.7_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_1_like_Mac_OS_X__ja_jp__AppleWebKit_532.9__KHTML__like_Gecko__Version_4.0.5_Mobile_8B117_Safari_6531.22.7_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_2_1_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8C148_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8F190_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_1_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8G4_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_2_like_Mac_OS_X__en_us__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8H7_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_3_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8J2_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_4_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8K2_Safari_6533.18.5_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_4_3_5_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Mobile_8L1_r_nMozilla_5.0__iPhone__U__CPU_iPhone_OS_5_0_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Mobile_9A334_Safari_7534.48.3_r_nMozilla_5.0__iPhone__CPU_iPhone_OS_5_0_1_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Mobile_9A405_Safari_7534.48._r_nMozilla_5.0__iPod__U__CPU_like_Mac_OS_X__en__AppleWebKit_420.1__KHTML__like_Gecko__Version_3.0_Mobile_3A100a_Safari_419.3_r_nMozilla_5.0__iPod__U__CPU_iPhone_OS_2_1_like_Mac_OS_X__ja_jp__AppleWebKit_525.18.1__KHTML__like_Gecko__Version_3.1.1_Mobile_5F137_Safari_525.20_r_nMozilla_5.0__iPod__U__CPU_iPhone_OS_4_1_like_Mac_OS_X__ja_jp__AppleWebKit_532.9__KHTML__like_Gecko__Version_4.0.5_Mobile_8B118_Safari_6531.22.7_r_nMozilla_5.0__iPod__U__CPU_iPhone_OS_4_2_1_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8C148_Safari_6533.18.5_r_nMozilla_5.0__iPod__U__CPU_iPhone_OS_4_3_5_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobile_8L1_Safari_6533.18.5_r_nMozilla_5.0__iPod__CPU_iPhone_OS_5_0_1_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Version_5.1_Mobile_9A405_Safari_7534.48.3_r_nMozilla_5.0__iPad__U__CPU_OS_3_2_like_Mac_OS_X__en_us__AppleWebKit_531.21.10__KHTML__like_Gecko__Version_4.0.4_Mobile_7B367_Safari_531.21.10_r_nMozilla_5.0__iPad__U__CPU_OS_3_2_1_like_Mac_OS_X__en_us__AppleWebKit_531.21.10__KHTML__like_Gecko__Mobile_7B405_r_nMozilla_5.0__iPad__U__CPU_OS_4_2_like_Mac_OS_X__zh_cn__AppleWebKit_533.17.9__KHTML__like_Gecko__Mobile_8C134_r_nMozilla_5.0__iPad__U__CPU_OS_4_3_like_Mac_OS_X__ja_jp__AppleWebKit_533.17.9__KHTML__like_Gecko__Version_5.0.2_Mobil
push 3
mov ebx, 0x4309b0
call fcn.0042f59f
add esp, 0x28
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
push eax
mov ebx, dword [0x773f9c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4063f6
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4063f2
imul eax, dword [ebx]
jmp 0x4063e7
mov ecx, eax
test ecx, ecx
je 0x406415
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40640e
push ebx
push eax
call fcn.0042f599
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4063fc
call fcn.0042f599
add esp, 4
pop eax
mov dword [0x773f9c], eax
push reloc.WS2_32.dll_connect
push 0
push str.47.153.128.0_47.154.255.255_r_n58.14.0.0_58.25.255.255_r_n58.30.0.0_58.63.255.255_r_n58.66.0.0_58.68.255.255_r_n58.82.0.0_58.83.255.255_r_n58.87.64.0_58.87.127.255_r_n58.99.128.0_58.101.255.255_r_n58.116.0.0_58.119.255.255_r_n58.128.0.0_58.135.255.255_r_n58.144.0.0_58.144.255.255_r_n58.154.0.0_58.155.255.255_r_n58.192.0.0_58.223.255.255_r_n58.240.0.0_58.255.255.255_r_n59.32.0.0_59.65.255.255_r_n59.67.0.0_59.83.255.255_r_n59.107.0.0_59.111.255.255_r_n59.151.0.0_59.151.127.255_r_n59.155.0.0_59.155.255.255_r_n59.172.0.0_59.175.255.255_r_n59.191.0.0_59.201.255.255_r_n59.201.255.255_59.211.255.255_r_n59.211.255.255_59.221.255.255_r_n59.221.255.255_59.231.255.255_r_n59.231.255.255_59.241.255.255_r_n59.241.255.255_59.251.255.255_r_n59.251.255.255_59.255.255.255_r_n60.0.0.0_60.11.255.255_r_n60.11.255.255_60.21.255.255_r_n60.21.255.255_60.31.255.255_r_n60.55.0.0_60.55.255.255_r_n60.63.0.0_60.63.255.255_r_n60.160.0.0_60.171.255.255_r_n60.171.255.255_60.181.255.255_r_n60.181.255.255_60.191.255.255_r_n60.194.0.0_60.195.255.255_r_n60.200.0.0_60.223.255.255_r_n60.232.0.0_60.233.255.255_r_n60.235.0.0_60.235.255.255_r_n60.245.128.0_60.245.255.255_r_n60.247.0.0_60.247.255.255_r_n60.252.0.0_60.253.255.255_r_n60.255.0.0_60.255.255.255_r_n61.4.64.0_61.4.191.255_r_n61.8.160.0_61.8.175.255_r_n61.26.103.0_61.26.103.255_r_n61.28.0.0_61.29.255.255_r_n61.45.128.0_61.45.191.255_r_n61.47.128.0_61.55.255.255_r_n61.87.192.0_61.87.255.255_r_n61.128.0.0_61.131.255.255_r_n61.131.255.255_61.141.255.255_r_n61.141.255.255_61.151.255.255_r_n61.151.255.255_61.161.255.255_r_n61.161.255.255_61.171.255.255_r_n61.171.255.255_61.181.255.255_r_n61.181.255.255_61.191.255.255_r_n61.232.0.0_61.237.255.255_r_n61.240.0.0_61.243.255.255_r_n80.227.196.0_80.227.196.255_r_n116.1.0.0_116.11.255.255_r_n116.13.0.0_116.13.255.255_r_n116.16.0.0_116.23.255.255_r_n116.23.255.255_116.31.255.255_r_n116.52.0.0_116.58.223.255_r_n116.60.0.0_116.63.255.255_r_n116.66.0.0_116.66.127.255_r_n116.69.0.0_116.70.127.255_r_n116.76.0.0_116.79.255.255_r_n116.89.144.0_116.90.191.255_r_n116.95.0.0_116.95.255.255_r_n116.112.0.0_116.117.255.255_r_n116.128.0.0_116.135.255.255_r_n116.135.255.255_116.145.255.255_r_n116.145.255.255_116.155.255.255_r_n116.155.255.255_116.165.255.255_r_n116.165.255.255_116.175.255.255_r_n116.175.255.255_116.185.255.255_r_n116.185.255.255_116.195.255.255_r_n116.198.0.0_116.199.159.255_r_n116.204.0.0_116.205.255.255_r_n116.207.0.0_116.219.255.255_r_n116.224.0.0_116.239.255.255_r_n116.242.0.0_116.249.255.255_r_n116.252.0.0_116.255.255.255_r_n117.8.0.0_117.15.255.255_r_n117.21.0.0_117.45.255.255_r_n117.48.0.0_117.51.255.255_r_n117.53.48.0_117.53.191.255_r_n117.57.0.0_117.95.255.255_r_n117.100.0.0_117.101.255.255_r_n117.103.16.0_117.103.143.255_r_n117.106.0.0_117.107.255.255_r_n117.112.0.0_117.191.255.255_r_n118.21.0.0_118.21.255.255_r_n118.24.0.0_118.26.255.255_r_n118.45.36.0_118.45.36.255_r_n118.72.0.0_118.79.255.255_r_n118.81.0.0_118.81.255.255_r_n118.84.0.0_118.84.255.255_r_n118.88.0.0_118.88.255.255_r_n118.91.0.0_118.91.255.255_r_n118.112.0.0_118.126.255.255_r_n118.144.0.0_118.147.255.255_r_n118.192.0.0_118.192.127.255_r_n118.197.0.0_118.197.255.255_r_n118.205.0.0_118.205.255.255_r_n118.212.0.0_118.229.219.255_r_n118.244.0.0_118.245.255.255_r_n118.248.0.0_118.249.255.255_r_n119.0.0.0_119.5.255.255_r_n119.12.0.0_119.12.255.255_r_n119.18.0.0_119.23.255.255_r_n119.32.20.0_119.32.63.255_r_n119.36.0.0_119.36.255.255_r_n119.38.0.0_119.40.255.255_r_n119.45.192.0_119.45.255.255_r_n119.48.0.0_119.48.255.255_r_n119.81.0.0_119.81.255.255_r_n119.96.0.0_119.96.255.255_r_n119.112.0.0_119.127.98.255_r_n119.127.98.255_119.137.98.255_r_n119.137.98.255_119.147.98.255_r_n119.161.0.0_119.161.255.255_r_n119.167.0.0_119.167.255.255_r_n120.0.0.0_120.7.255.255_r_n120.32.0.0_120.39.255.255_r_n120.48.0.0_120.48.255.255_r_n120.64.0.0_120.67.255.255_r_n120.87.201.0_120.87.201.255_r_n121.0.16.0_121.0.31.255_r_n121.4.0.0_121.5.255.255_r_n121.8.0.0_121.43.255.255_r_n121.46.0.0_121.49.255.255_r_n121.51.0.0_121.52.255.255_r_n121.55.0.0_121.63.255.255_r_n121.68.0.0_121.71.255.255_r_n121.76.0.0_121.77.255.
push 1
mov ebx, 0x4307a0
call fcn.0042f59f
add esp, 0x10
mov dword [ebp - 4], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x4f8970
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x406469
mov eax, 0x4f88fb
push eax
push 3
mov ebx, 0x4309b0
call fcn.0042f59f
add esp, 0x28
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40648f
push ebx
call fcn.0042f599
add esp, 4
mov eax, dword [ebp - 8]
push eax
mov ebx, dword [0x773fa0]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4064b4
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4064b0
imul eax, dword [ebx]
jmp 0x4064a5
mov ecx, eax
test ecx, ecx
je 0x4064d3
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4064cc
push ebx
push eax
call fcn.0042f599
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4064ba
call fcn.0042f599
add esp, 4
pop eax
mov dword [0x773fa0], eax
mov eax, 0
jmp 0x4064eb
mov esp, ebp
pop ebp
ret