Function at 0x411cdf
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 7
xor eax, eax
cmp byte [ebx], 0x20
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov esi, ebx
je 0x411d1f
mov al, byte [esi]
cmp al, 0xd
je 0x411d1f
cmp al, 0xa
je 0x411d1f
test al, al
je 0x411d1f
inc esi
cmp byte [esi], 0x20
jne 0x411d0b
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00421b28
inc esi
mov dword [esp], str.User_Agent:
push esi
call fcn.0041356e
test eax, eax
pop ecx
pop ecx
je 0x411d7a
add eax, 0xb
cmp byte [eax], 0xd
mov ecx, eax
je 0x411d5d
mov dl, byte [ecx]
cmp dl, 0xa
je 0x411d5d
test dl, dl
je 0x411d7a
inc ecx
cmp byte [ecx], 0xd
jne 0x411d4c
cmp byte [ecx], 0
je 0x411d7a
push 0x42a8ec
push eax
mov byte [ecx], 0
call fcn.0041356e
test eax, eax
pop ecx
pop ecx
je 0x411d7a
mov byte [ebp - 2], 1
push 0x42a8e8
push ebx
call fcn.00421d10
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411da9
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jl 0x411da9
mov al, byte [esi + 2]
mov byte [ebp + 0xc], al
mov al, byte [esi + 3]
mov byte [ebp + 0xd], al
mov byte [ebp + 0xe], 0
push 0x42a8e4
push ebx
call fcn.00421d10
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411e11
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 5
jl 0x411e11
lea eax, [ebp - 0x30]
push 2
mov ecx, eax
pop edi
sub edi, ecx
sub esi, ecx
lea edx, [esi + 2]
mov cl, byte [edx + eax]
cmp cl, 0x2d
jb 0x411de4
cmp cl, 0x39
jbe 0x411df8
cmp cl, 0x41
jb 0x411dee
cmp cl, 0x5a
jbe 0x411df8
cmp cl, 0x61
jb 0x411e0e
cmp cl, 0x7a
ja 0x411e0e
cmp cl, 0x26
je 0x411e0e
test cl, cl
je 0x411e0e
lea esi, [edi + eax]
cmp esi, 0x19
jge 0x411e0e
mov byte [eax], cl
inc eax
jmp 0x411dd7
mov byte [eax], 0
push 0x42a8e0
push ebx
call fcn.00421d10
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411e38
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jl 0x411e38
mov al, byte [esi + 2]
mov byte [ebp - 1], al
jmp 0x411e65
mov eax, dword [0x459458]
cmp eax, 2
jb 0x411e47
cmp eax, 0x64
jbe 0x411e51
mov dword [0x459458], 0xa
call fcn.00421b32
xor edx, edx
div dword [0x459458]
dec edx
jne 0x411e65
mov byte [ebp - 1], 0x72
cmp byte [ebp - 2], 0
je 0x411ff2
cmp byte [ebp - 1], 0x7a
je 0x411ff2
mov ebx, dword [ebp + 8]
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x8004667e
push dword [ebx + 8]
mov byte [ebx + 0xc], 1
call dword [0x458af0]
cmp eax, 0xffffffff
jne 0x411ea2
xor eax, eax
jmp 0x412006
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x34], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jge 0x411ec7
lea eax, [ebp - 0x54]
push 3
push eax
call fcn.00413470
pop ecx
pop ecx
jmp 0x411ed5
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
cmp byte [0x459480], 0
mov byte [ebp - 0x10], 0
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x411ef5
cmp byte [ebp - 1], 0x72
jne 0x411ef5
mov byte [ebp - 1], 0
cmp byte [0x459481], 0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x411f11
push 0x42a8dc
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411f1b
cmp byte [ebp - 1], 0x65
jne 0x411f1b
mov byte [ebp - 1], 0
cmp byte [0x459482], 0
je 0x411f31
push 0x42a8d8
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411f3b
cmp byte [ebp - 1], 0x73
jne 0x411f3b
mov byte [ebp - 1], 0
cmp byte [0x459483], 0
je 0x411f51
push 0x42a4cc
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411f5b
cmp byte [ebp - 1], 0x62
jne 0x411f5b
mov byte [ebp - 1], 0
cmp byte [0x459484], 0
je 0x411f71
push str.pse
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411f7b
cmp byte [ebp - 1], 0x70
jne 0x411f7b
mov byte [ebp - 1], 0
cmp byte [ebp - 0x10], 0
jne 0x411f85
mov byte [ebp - 0x10], 0x65
cmp byte [ebp - 1], 0
jne 0x411fa6
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
call fcn.00421b32
cdq
idiv esi
mov al, byte [ebp + edx - 0x10]
mov byte [ebp - 1], al
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5f]
push eax
call fcn.00421e50
mov al, byte [ebp - 1]
pop ecx
pop ecx
mov byte [ebp - 0x60], al
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x64]
push ecx
push 0x4119ca
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x411fea
push dword [ebx + 8]
call dword [0x458c90]
push 2
pop eax
jmp 0x412006
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x34], 0
je 0x411fe2
jmp 0x411fdd
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.00411be4
pop ecx
xor eax, eax
pop ecx
inc eax
pop edi
pop esi
pop ebx
leave
ret