Function at 0x410d02
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 7
xor eax, eax
cmp byte [ebx], 0x20
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov esi, ebx
je 0x410d42
mov al, byte [esi]
cmp al, 0xd
je 0x410d42
cmp al, 0xa
je 0x410d42
test al, al
je 0x410d42
inc esi
cmp byte [esi], 0x20
jne 0x410d2e
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004201d8
inc esi
mov dword [esp], str.User_Agent:
push esi
call fcn.00412098
test eax, eax
pop ecx
pop ecx
je 0x410d9d
add eax, 0xb
cmp byte [eax], 0xd
mov ecx, eax
je 0x410d80
mov dl, byte [ecx]
cmp dl, 0xa
je 0x410d80
test dl, dl
je 0x410d9d
inc ecx
cmp byte [ecx], 0xd
jne 0x410d6f
cmp byte [ecx], 0
je 0x410d9d
push 0x428898
push eax
mov byte [ecx], 0
call fcn.00412098
test eax, eax
pop ecx
pop ecx
je 0x410d9d
mov byte [ebp - 2], 1
push 0x428894
push ebx
call fcn.004203c0
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410dcc
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jl 0x410dcc
mov al, byte [esi + 2]
mov byte [ebp + 0xc], al
mov al, byte [esi + 3]
mov byte [ebp + 0xd], al
mov byte [ebp + 0xe], 0
push 0x428890
push ebx
call fcn.004203c0
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410e34
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 5
jl 0x410e34
lea eax, [ebp - 0x30]
push 2
mov ecx, eax
pop edi
sub edi, ecx
sub esi, ecx
lea edx, [esi + 2]
mov cl, byte [edx + eax]
cmp cl, 0x2d
jb 0x410e07
cmp cl, 0x39
jbe 0x410e1b
cmp cl, 0x41
jb 0x410e11
cmp cl, 0x5a
jbe 0x410e1b
cmp cl, 0x61
jb 0x410e31
cmp cl, 0x7a
ja 0x410e31
cmp cl, 0x26
je 0x410e31
test cl, cl
je 0x410e31
lea esi, [edi + eax]
cmp esi, 0x19
jge 0x410e31
mov byte [eax], cl
inc eax
jmp 0x410dfa
mov byte [eax], 0
push 0x42888c
push ebx
call fcn.004203c0
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x410e5b
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jl 0x410e5b
mov al, byte [esi + 2]
mov byte [ebp - 1], al
jmp 0x410e88
mov eax, dword [0x456370]
cmp eax, 2
jb 0x410e6a
cmp eax, 0x64
jbe 0x410e74
mov dword [0x456370], 0xa
call fcn.004201e2
xor edx, edx
div dword [0x456370]
dec edx
jne 0x410e88
mov byte [ebp - 1], 0x72
cmp byte [ebp - 2], 0
jne 0x410ea7
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.00410c07
pop ecx
xor eax, eax
pop ecx
inc eax
jmp 0x41100e
mov ebx, dword [ebp + 8]
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x8004667e
push dword [ebx + 8]
mov byte [ebx + 0xc], 1
call dword [0x455a04]
cmp eax, 0xffffffff
jne 0x410ed0
xor eax, eax
jmp 0x41100e
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x34], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jge 0x410ef5
lea eax, [ebp - 0x54]
push 3
push eax
call fcn.00411f9e
pop ecx
pop ecx
jmp 0x410f03
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
cmp byte [0x456398], 0
mov byte [ebp - 0x10], 0
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x410f23
cmp byte [ebp - 1], 0x72
jne 0x410f23
mov byte [ebp - 1], 0
cmp byte [0x456399], 0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x410f3f
push 0x428888
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f49
cmp byte [ebp - 1], 0x65
jne 0x410f49
mov byte [ebp - 1], 0
cmp byte [0x45639a], 0
je 0x410f5f
push 0x428884
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f69
cmp byte [ebp - 1], 0x73
jne 0x410f69
mov byte [ebp - 1], 0
cmp byte [0x45639b], 0
je 0x410f7f
push 0x4284c4
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410f89
cmp byte [ebp - 1], 0x62
jne 0x410f89
mov byte [ebp - 1], 0
cmp byte [0x45639c], 0
je 0x410f9f
push str.pse
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x410fa9
cmp byte [ebp - 1], 0x70
jne 0x410fa9
mov byte [ebp - 1], 0
cmp byte [ebp - 0x10], 0
jne 0x410fb3
mov byte [ebp - 0x10], 0x65
cmp byte [ebp - 1], 0
jne 0x410fd4
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
call fcn.004201e2
cdq
idiv esi
mov al, byte [ebp + edx - 0x10]
mov byte [ebp - 1], al
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5f]
push eax
call fcn.004204b0
mov al, byte [ebp - 1]
pop ecx
pop ecx
mov byte [ebp - 0x60], al
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x64]
push ecx
push 0x4109f2
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x41101b
push dword [ebx + 8]
call dword [0x455ba4]
push 2
pop eax
pop edi
pop esi
pop ebx
leave
ret
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x34], 0
je 0x411013
jmp 0x41100b