Function at 0x424390
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x46e5f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x58
push ebx
push ebp
push esi
mov esi, dword [esp + 0x98]
mov dword [esp + 0xc], ecx
push edi
mov ecx, esi
call fcn.00413a90
mov edi, dword [esp + 0x88]
mov ebx, 0x4852a0
lea ebp, [edi + 0x158]
mov ecx, ebp
call fcn.00443b10
test eax, eax
je 0x4243e4
mov ecx, ebp
call fcn.00443b00
mov ebx, eax
push ebx
mov ecx, esi
call fcn.004141f0
push 0x484794
mov ecx, esi
call fcn.004141f0
mov eax, dword [esp + 0x8c]
push ebx
lea ecx, [eax + 0xa8]
call fcn.00415650
lea ecx, [esp + 0x4c]
call fcn.004146b0
mov ecx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x78]
push 0x67
lea edx, [esp + 0xa0]
push ecx
lea eax, [esp + 0x54]
push edx
push eax
push ebp
mov ecx, edi
mov dword [esp + 0x84], 0
mov dword [esp + 0xb0], 0x50
call fcn.0041ec10
lea ecx, [esp + 0x4c]
call fcn.00443b10
test eax, eax
je 0x42445d
push ebp
jmp 0x424489
mov ecx, dword [esp + 0x80]
push ecx
mov ecx, esi
call fcn.004141f0
mov ebx, dword [esp + 0x84]
test ebx, ebx
je 0x424490
cmp byte [ebx], 0
je 0x424490
push 0x48529c
mov ecx, esi
call fcn.004141f0
push ebx
mov ecx, esi
call fcn.004141f0
push str._HTTP_1.1_r_n
mov ecx, esi
call fcn.004141f0
push str.Host:
mov ecx, esi
call fcn.004141f0
mov edx, dword [esp + 0x7c]
lea ecx, [esp + 0x30]
push edx
call fcn.004145b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 1
call fcn.004154f0
lea ecx, [esp + 0x30]
call fcn.00443b00
push eax
mov ecx, esi
call fcn.004141f0
push 0x481fe8
mov ecx, esi
call fcn.004141f0
push str.User_Agent:_Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.7.7__Gecko_20050414_Firefox_1.0.3_r_n
mov ecx, esi
call fcn.004141f0
mov ebx, dword [esp + 0x10]
push esi
push edi
mov ecx, ebx
call fcn.00423680
mov eax, dword [edi + 0x130]
mov ecx, dword [edi + 0x134]
or eax, ecx
je 0x424565
push str.Range:_bytes
mov ecx, esi
call fcn.004141f0
lea ecx, [esp + 0x14]
call fcn.004146b0
mov edx, dword [edi + 0x134]
mov eax, dword [edi + 0x130]
lea ecx, [esp + 0x14]
mov byte [esp + 0x70], 2
push ecx
push edx
push eax
call fcn.00440a10
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.004155b0
push 0x485258
mov ecx, esi
call fcn.004141f0
lea ecx, [esp + 0x14]
mov byte [esp + 0x70], 1
call fcn.004149a0
push str.Accept:_text_xml_application_xml_application_xhtmlxml_text_html_q0.9_text_plain_q0.8_image_png___q0.5_r_n
mov ecx, esi
call fcn.004141f0
lea ebp, [edi + 0xdc]
mov ecx, ebp
call fcn.00443b10
test eax, eax
je 0x4245a4
push str.Accept_Charset:
mov ecx, esi
call fcn.004141f0
mov ecx, ebp
call fcn.00443b00
push eax
mov ecx, esi
call fcn.004141f0
push 0x481fe8
jmp 0x4245a9
push str.Accept_Charset:_ISO_8859_1_utf_8_q0.7__q0.7_r_n
mov ecx, esi
call fcn.004141f0
mov al, byte [edi + 0x156]
test al, al
je 0x4245c1
push str.Accept_Encoding:_gzip_r_n
jmp 0x4245c6
push str.Accept_Encoding:__r_n
mov ecx, esi
call fcn.004141f0
lea ebp, [edi + 0xf8]
mov ecx, ebp
call fcn.00443b10
test eax, eax
je 0x424600
push str.Accept_Language:
mov ecx, esi
call fcn.004141f0
mov ecx, ebp
call fcn.00443b00
push eax
mov ecx, esi
call fcn.004141f0
push 0x481fe8
jmp 0x424605
push str.Accept_Language:_en_us_en_q0.5_r_n
mov ecx, esi
call fcn.004141f0
push str.Keep_Alive:_300_r_n
mov ecx, esi
call fcn.004141f0
push str.Connection:_keep_alive_r_n
mov ecx, esi
call fcn.004141f0
lea ebp, [edi + 0x114]
mov ecx, ebp
call fcn.00443b10
test eax, eax
je 0x42465c
push str.Authorization:_NTLM
mov ecx, esi
call fcn.004141f0
mov ecx, ebp
call fcn.00443b00
push eax
mov ecx, esi
call fcn.004141f0
push 0x481fe8
mov ecx, esi
call fcn.004141f0
lea ebp, [edi + 0x88]
mov ecx, ebp
call fcn.00443b10
test eax, eax
je 0x42468d
push str.Referer:
mov ecx, esi
call fcn.004141f0
push ebp
mov ecx, esi
call fcn.004155b0
push 0x481fe8
mov ecx, esi
call fcn.004141f0
mov ebp, dword [esp + 0xa0]
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
push ebp
push esi
push edx
push eax
push edi
mov ecx, ebx
call fcn.00423a20
push ebp
push esi
push edi
mov ecx, ebx
call fcn.00423740
mov ecx, dword [esp + 0x8c]
push esi
add ecx, 0xc4
call fcn.004156e0
push 0x481fe8
mov ecx, esi
call fcn.004141f0
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 0
call fcn.004149a0
lea ecx, [esp + 0x4c]
mov dword [esp + 0x70], 0xffffffff
call fcn.004149a0
mov ecx, dword [esp + 0x68]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x64
ret 0x2c