Function at 0x410cdd
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 7
xor eax, eax
cmp byte [ebx], 0x20
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov esi, ebx
je 0x410d1d
mov al, byte [esi]
cmp al, 0xd
je 0x410d1d
cmp al, 0xa
je 0x410d1d
test al, al
je 0x410d1d
inc esi
cmp byte [esi], 0x20
jne 0x410d09
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004201a8
inc esi
mov dword [esp], str.User_Agent:
push esi
call fcn.00412073
test eax, eax
pop ecx
pop ecx
je 0x410d78
add eax, 0xb
cmp byte [eax], 0xd
mov ecx, eax
je 0x410d5b
mov dl, byte [ecx]
cmp dl, 0xa
je 0x410d5b
test dl, dl
je 0x410d78
inc ecx
cmp byte [ecx], 0xd
jne 0x410d4a
cmp byte [ecx], 0
je 0x410d78
push 0x428898
push eax
mov byte [ecx], 0
call fcn.00412073
test eax, eax
pop ecx
pop ecx
je 0x410d78
mov byte [ebp - 2], 1
push 0x428894
push ebx
call fcn.00420390
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410da7
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jl 0x410da7
mov al, byte [esi + 2]
mov byte [ebp + 0xc], al
mov al, byte [esi + 3]
mov byte [ebp + 0xd], al
mov byte [ebp + 0xe], 0
push 0x428890
push ebx
call fcn.00420390
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410e0f
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 5
jl 0x410e0f
lea eax, [ebp - 0x30]
push 2
mov ecx, eax
pop edi
sub edi, ecx
sub esi, ecx
lea edx, [esi + 2]
mov cl, byte [edx + eax]
cmp cl, 0x2d
jb 0x410de2
cmp cl, 0x39
jbe 0x410df6
cmp cl, 0x41
jb 0x410dec
cmp cl, 0x5a
jbe 0x410df6
cmp cl, 0x61
jb 0x410e0c
cmp cl, 0x7a
ja 0x410e0c
cmp cl, 0x26
je 0x410e0c
test cl, cl
je 0x410e0c
lea esi, [edi + eax]
cmp esi, 0x19
jge 0x410e0c
mov byte [eax], cl
inc eax
jmp 0x410dd5
mov byte [eax], 0
push 0x42888c
push ebx
call fcn.00420390
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410e36
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jl 0x410e36
mov al, byte [esi + 2]
mov byte [ebp - 1], al
jmp 0x410e63
mov eax, dword [0x456370]
cmp eax, 2
jb 0x410e45
cmp eax, 0x64
jbe 0x410e4f
mov dword [0x456370], 0xa
call fcn.004201b2
xor edx, edx
div dword [0x456370]
dec edx
jne 0x410e63
mov byte [ebp - 1], 0x72
cmp byte [ebp - 2], 0
jne 0x410e82
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.00410be2
pop ecx
xor eax, eax
pop ecx
inc eax
jmp 0x410fe9
mov ebx, dword [ebp + 8]
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x8004667e
push dword [ebx + 8]
mov byte [ebx + 0xc], 1
call dword [0x455a04]
cmp eax, 0xffffffff
jne 0x410eab
xor eax, eax
jmp 0x410fe9
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x34], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jge 0x410ed0
lea eax, [ebp - 0x54]
push 3
push eax
call fcn.00411f79
pop ecx
pop ecx
jmp 0x410ede
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
cmp byte [0x456398], 0
mov byte [ebp - 0x10], 0
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x410efe
cmp byte [ebp - 1], 0x72
jne 0x410efe
mov byte [ebp - 1], 0
cmp byte [0x456399], 0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x410f1a
push 0x428888
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f24
cmp byte [ebp - 1], 0x65
jne 0x410f24
mov byte [ebp - 1], 0
cmp byte [0x45639a], 0
je 0x410f3a
push 0x428884
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f44
cmp byte [ebp - 1], 0x73
jne 0x410f44
mov byte [ebp - 1], 0
cmp byte [0x45639b], 0
je 0x410f5a
push 0x4284c4
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f64
cmp byte [ebp - 1], 0x62
jne 0x410f64
mov byte [ebp - 1], 0
cmp byte [0x45639c], 0
je 0x410f7a
push str.pse
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f84
cmp byte [ebp - 1], 0x70
jne 0x410f84
mov byte [ebp - 1], 0
cmp byte [ebp - 0x10], 0
jne 0x410f8e
mov byte [ebp - 0x10], 0x65
cmp byte [ebp - 1], 0
jne 0x410faf
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
call fcn.004201b2
cdq
idiv esi
mov al, byte [ebp + edx - 0x10]
mov byte [ebp - 1], al
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5f]
push eax
call fcn.00420480
mov al, byte [ebp - 1]
pop ecx
pop ecx
mov byte [ebp - 0x60], al
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x64]
push ecx
push 0x4109cd
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x410ff6
push dword [ebx + 8]
call dword [0x455ba4]
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x34], 0
je 0x410fee
jmp 0x410fe6