Function at 0x411180
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x4532db
mov eax, dword fs:[0]
push eax
sub esp, 0x444
mov eax, dword [0x469424]
xor eax, esp
mov dword [esp + 0x440], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x469424]
xor eax, esp
push eax
lea eax, [esp + 0x458]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x474]
push 0xd
push str.Accept:___r_n
mov eax, ebp
mov esi, ecx
mov dword [esp + 0x1c], 0x400
call fcn.00402990
push 0x20
push str.Accept_Encoding:_gzip__deflate_r_n
mov eax, ebp
call fcn.00402990
push 0x19
push str.Cache_Control:_no_cache_r_n
mov eax, ebp
call fcn.00402990
push 0x12
push str.Pragma:_no_cache_r_n
mov eax, ebp
call fcn.00402990
mov eax, dword [esi + 0x74]
test eax, eax
jbe 0x411265
push 9
push str.Referer:
mov eax, ebp
call fcn.00402990
add esi, 0x60
push esi
mov edi, 0x45d550
lea esi, [esp + 0x1c]
call fcn.0040e560
add esp, 4
push 0
push eax
or eax, 0xffffffff
mov esi, ebp
mov dword [esp + 0x468], 0
call fcn.00402a80
mov dword [esp + 0x460], 0xffffffff
cmp dword [esp + 0x30], 0x10
jb 0x411265
mov eax, dword [esp + 0x1c]
push eax
call fcn.0041edce
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x58]
push edx
push 0
call fcn.00450a4a
test eax, eax
jne 0x4112b1
mov eax, dword [esp + 0x14]
mov byte [esp + eax + 0x54], 0
lea eax, [esp + 0x54]
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x411290
sub eax, edx
push eax
lea ecx, [esp + 0x58]
push ecx
mov eax, ebp
call fcn.00402990
push 2
push 0x45d550
jmp 0x4112fc
cmp eax, 0x80070057
jne 0x4112bf
push str.ObtainUserAgentString_Ret_E_INVALIDARG__n
jmp 0x4112cb
cmp eax, 0x8007000e
jne 0x4112de
push str.ObtainUserAgentString_Ret_E_OUTOFMEMORY__n
push 2
call fcn.0040ed90
mov ecx, eax
call fcn.0040f030
add esp, 8
jmp 0x4112f5
push eax
push str.ObtainUserAgentString_Ret__d__n
push 2
call fcn.0040ed90
mov ecx, eax
call fcn.0040f030
add esp, 0xc
push 0x61
push str.User_Agent:_Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1__SV1__GTB7.1__.NET_CLR_2.0.50727__r_n
mov eax, ebp
call fcn.00402990
push 0x18
push str.Connection:_keep_alive_r_n
mov eax, ebp
call fcn.00402990
mov edi, dword [esp + 0x468]
mov ebx, dword [esp + 0x46c]
mov edx, edi
or edx, ebx
jne 0x411333
cmp dword [esp + 0x470], 0
je 0x4113f2
xor eax, eax
push 0xd
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov dword [esp + 0x41], eax
mov dword [esp + 0x45], eax
mov dword [esp + 0x49], eax
mov dword [esp + 0x4d], eax
mov dword [esp + 0x51], eax
mov word [esp + 0x55], ax
mov byte [esp + 0x57], al
push str.Range:_bytes
mov eax, ebp
mov byte [esp + 0x3c], 0
call fcn.00402990
push 0xa
lea eax, [esp + 0x38]
push eax
push ebx
push edi
call fcn.0043d3fe
mov ecx, eax
add esp, 0x10
lea esi, [ecx + 1]
mov dl, byte [ecx]
add ecx, 1
test dl, dl
jne 0x411383
sub ecx, esi
push ecx
push eax
mov eax, ebp
call fcn.00402990
push 1
push 0x45d6e0
mov eax, ebp
call fcn.00402990
mov eax, dword [esp + 0x470]
test eax, eax
jle 0x4113e4
add eax, 0xffffffff
cdq
push 0xa
add eax, edi
lea ecx, [esp + 0x38]
push ecx
adc edx, ebx
push edx
push eax
call fcn.0043d3fe
mov ecx, eax
add esp, 0x10
lea esi, [ecx + 1]
mov edi, edi
mov dl, byte [ecx]
add ecx, 1
test dl, dl
jne 0x4113d0
sub ecx, esi
push ecx
push eax
mov eax, ebp
call fcn.00402990
push 2
push 0x45d550
mov eax, ebp
call fcn.00402990
mov ecx, dword [esp + 0x458]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x440]
xor ecx, esp
call fcn.00439d55
add esp, 0x450
ret 0x10