Function at 0x425800
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x46be48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push ebp
push esi
mov esi, dword [esp + 0x94]
mov ebp, ecx
push edi
mov ecx, esi
call fcn.00416380
push str.GET
mov ecx, esi
call fcn.00416a20
mov eax, dword [esp + 0x88]
push 0x4839a8
lea ecx, [eax + 0xa8]
call fcn.00417e70
lea ecx, [esp + 0x48]
call fcn.00416ed0
mov ecx, dword [esp + 0x9c]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x84]
lea edx, [esp + 0x98]
push ecx
lea eax, [esp + 0x4c]
push edx
push eax
push ebx
mov ecx, edi
mov dword [esp + 0x7c], 0
mov dword [esp + 0xa8], 0x50
call fcn.00420050
lea ecx, [esp + 0x48]
call fcn.004226f0
test eax, eax
jne 0x4258c8
mov ecx, dword [esp + 0x7c]
push ecx
mov ecx, esi
call fcn.00416a20
mov ebx, dword [esp + 0x80]
test ebx, ebx
je 0x4258d0
cmp byte [ebx], 0
je 0x4258d0
push 0x4839a4
mov ecx, esi
call fcn.00416a20
push ebx
mov ecx, esi
call fcn.00416a20
push str._HTTP_1.1_r_n
mov ecx, esi
call fcn.00416a20
push str.Host:
mov ecx, esi
call fcn.00416a20
mov edx, dword [esp + 0x78]
lea ecx, [esp + 0x2c]
push edx
call fcn.00416de0
mov bl, 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], bl
call fcn.00417d10
lea ecx, [esp + 0x2c]
call fcn.00422700
push eax
mov ecx, esi
call fcn.00416a20
push 0x47ffb8
mov ecx, esi
call fcn.00416a20
push str.User_Agent:_Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.7.7__Gecko_20050414_Firefox_1.0.3_r_n
mov ecx, esi
call fcn.00416a20
push esi
push edi
mov ecx, ebp
call fcn.00424b50
mov eax, dword [edi + 0x130]
mov ecx, dword [edi + 0x134]
or eax, ecx
je 0x4259a1
push str.Range:_bytes
mov ecx, esi
call fcn.00416a20
lea ecx, [esp + 0x10]
call fcn.00416ed0
mov edx, dword [edi + 0x134]
mov eax, dword [edi + 0x130]
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], 2
push ecx
push edx
push eax
call fcn.00440cd0
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.00417dd0
push 0x483960
mov ecx, esi
call fcn.00416a20
lea ecx, [esp + 0x10]
mov byte [esp + 0x6c], bl
call fcn.004171c0
push str.Accept:_text_xml_application_xml_application_xhtmlxml_text_html_q0.9_text_plain_q0.8_image_png___q0.5_r_n
mov ecx, esi
call fcn.00416a20
lea ebx, [edi + 0xdc]
mov ecx, ebx
call fcn.004226f0
test eax, eax
je 0x4259e0
push str.Accept_Charset:
mov ecx, esi
call fcn.00416a20
mov ecx, ebx
call fcn.00422700
push eax
mov ecx, esi
call fcn.00416a20
push 0x47ffb8
jmp 0x4259e5
push str.Accept_Charset:_ISO_8859_1_utf_8_q0.7__q0.7_r_n
mov ecx, esi
call fcn.00416a20
mov al, byte [edi + 0x156]
test al, al
je 0x4259fd
push str.Accept_Encoding:_gzip_r_n
jmp 0x425a02
push str.Accept_Encoding:__r_n
mov ecx, esi
call fcn.00416a20
lea ebx, [edi + 0xf8]
mov ecx, ebx
call fcn.004226f0
test eax, eax
je 0x425a3c
push str.Accept_Language:
mov ecx, esi
call fcn.00416a20
mov ecx, ebx
call fcn.00422700
push eax
mov ecx, esi
call fcn.00416a20
push 0x47ffb8
jmp 0x425a41
push str.Accept_Language:_en_us_en_q0.5_r_n
mov ecx, esi
call fcn.00416a20
push str.Keep_Alive:_300_r_n
mov ecx, esi
call fcn.00416a20
push str.Connection:_keep_alive_r_n
mov ecx, esi
call fcn.00416a20
lea ebx, [edi + 0x114]
mov ecx, ebx
call fcn.004226f0
test eax, eax
je 0x425a98
push str.Authorization:_NTLM
mov ecx, esi
call fcn.00416a20
mov ecx, ebx
call fcn.00422700
push eax
mov ecx, esi
call fcn.00416a20
push 0x47ffb8
mov ecx, esi
call fcn.00416a20
lea ebx, [edi + 0x88]
mov ecx, ebx
call fcn.004226f0
test eax, eax
je 0x425ac9
push str.Referer:
mov ecx, esi
call fcn.00416a20
push ebx
mov ecx, esi
call fcn.00417dd0
push 0x47ffb8
mov ecx, esi
call fcn.00416a20
mov ebx, dword [esp + 0x9c]
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x78]
push ebx
push esi
push edx
push eax
push edi
mov ecx, ebp
call fcn.00424ef0
push ebx
push esi
push edi
mov ecx, ebp
call fcn.00424c10
mov ecx, dword [esp + 0x88]
push esi
add ecx, 0xc4
call fcn.00417f00
push 0x47ffb8
mov ecx, esi
call fcn.00416a20
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0
call fcn.004171c0
lea ecx, [esp + 0x48]
mov dword [esp + 0x6c], 0xffffffff
call fcn.004171c0
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x60
ret 0x2c