Function at 0x411b05
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 7
xor eax, eax
cmp byte [ebx], 0x20
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov esi, ebx
je 0x411b45
mov al, byte [esi]
cmp al, 0xd
je 0x411b45
cmp al, 0xa
je 0x411b45
test al, al
je 0x411b45
inc esi
cmp byte [esi], 0x20
jne 0x411b31
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00421658
inc esi
mov dword [esp], str.User_Agent:
push esi
call fcn.00413394
test eax, eax
pop ecx
pop ecx
je 0x411ba0
add eax, 0xb
cmp byte [eax], 0xd
mov ecx, eax
je 0x411b83
mov dl, byte [ecx]
cmp dl, 0xa
je 0x411b83
test dl, dl
je 0x411ba0
inc ecx
cmp byte [ecx], 0xd
jne 0x411b72
cmp byte [ecx], 0
je 0x411ba0
push 0x42a8f0
push eax
mov byte [ecx], 0
call fcn.00413394
test eax, eax
pop ecx
pop ecx
je 0x411ba0
mov byte [ebp - 2], 1
push 0x42a8ec
push ebx
call fcn.00421840
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411bcf
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jl 0x411bcf
mov al, byte [esi + 2]
mov byte [ebp + 0xc], al
mov al, byte [esi + 3]
mov byte [ebp + 0xd], al
mov byte [ebp + 0xe], 0
push 0x42a8e8
push ebx
call fcn.00421840
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411c37
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 5
jl 0x411c37
lea eax, [ebp - 0x30]
push 2
mov ecx, eax
pop edi
sub edi, ecx
sub esi, ecx
lea edx, [esi + 2]
mov cl, byte [edx + eax]
cmp cl, 0x2d
jb 0x411c0a
cmp cl, 0x39
jbe 0x411c1e
cmp cl, 0x41
jb 0x411c14
cmp cl, 0x5a
jbe 0x411c1e
cmp cl, 0x61
jb 0x411c34
cmp cl, 0x7a
ja 0x411c34
cmp cl, 0x26
je 0x411c34
test cl, cl
je 0x411c34
lea esi, [edi + eax]
cmp esi, 0x19
jge 0x411c34
mov byte [eax], cl
inc eax
jmp 0x411bfd
mov byte [eax], 0
push 0x42a8e4
push ebx
call fcn.00421840
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411c5e
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jl 0x411c5e
mov al, byte [esi + 2]
mov byte [ebp - 1], al
jmp 0x411c8b
mov eax, dword [0x459458]
cmp eax, 2
jb 0x411c6d
cmp eax, 0x64
jbe 0x411c77
mov dword [0x459458], 0xa
call fcn.00421662
xor edx, edx
div dword [0x459458]
dec edx
jne 0x411c8b
mov byte [ebp - 1], 0x72
cmp byte [ebp - 2], 0
je 0x411e18
cmp byte [ebp - 1], 0x7a
je 0x411e18
mov ebx, dword [ebp + 8]
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x8004667e
push dword [ebx + 8]
mov byte [ebx + 0xc], 1
call dword [0x458af0]
cmp eax, 0xffffffff
jne 0x411cc8
xor eax, eax
jmp 0x411e2c
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x34], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jge 0x411ced
lea eax, [ebp - 0x54]
push 3
push eax
call fcn.00413296
pop ecx
pop ecx
jmp 0x411cfb
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
cmp byte [0x459480], 0
mov byte [ebp - 0x10], 0
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x411d1b
cmp byte [ebp - 1], 0x72
jne 0x411d1b
mov byte [ebp - 1], 0
cmp byte [0x459481], 0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x411d37
push 0x42a8e0
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411d41
cmp byte [ebp - 1], 0x65
jne 0x411d41
mov byte [ebp - 1], 0
cmp byte [0x459482], 0
je 0x411d57
push 0x42a8dc
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411d61
cmp byte [ebp - 1], 0x73
jne 0x411d61
mov byte [ebp - 1], 0
cmp byte [0x459483], 0
je 0x411d77
push 0x42a4cc
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411d81
cmp byte [ebp - 1], 0x62
jne 0x411d81
mov byte [ebp - 1], 0
cmp byte [0x459484], 0
je 0x411d97
push str.pse
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x411da1
cmp byte [ebp - 1], 0x70
jne 0x411da1
mov byte [ebp - 1], 0
cmp byte [ebp - 0x10], 0
jne 0x411dab
mov byte [ebp - 0x10], 0x65
cmp byte [ebp - 1], 0
jne 0x411dcc
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
call fcn.00421662
cdq
idiv esi
mov al, byte [ebp + edx - 0x10]
mov byte [ebp - 1], al
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5f]
push eax
call fcn.00421930
mov al, byte [ebp - 1]
pop ecx
pop ecx
mov byte [ebp - 0x60], al
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x64]
push ecx
push 0x4117f0
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x411e10
push dword [ebx + 8]
call dword [0x458c90]
push 2
pop eax
jmp 0x411e2c
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x34], 0
je 0x411e08
jmp 0x411e03
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.00411a0a
pop ecx
xor eax, eax
pop ecx
inc eax
pop edi
pop esi
pop ebx
leave
ret