Function at 0x10359540
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10415292
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push esi
push edi
mov eax, dword [0x104c5878]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov edx, str.Mozilla_5.0__Windows_NT_6.2__WOW64__AppleWebKit_537.31__KHTML__like_Gecko__Chrome_26.0.1410.64_Safari_537.31
mov eax, dword [ebp + 8]
test eax, eax
cmovne edx, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], str.User_Agent:
mov dword [ebp - 0x20], 0xd
test edx, edx
je 0x103595bc
mov ecx, edx
mov dword [ebp - 0x1c], edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x103595b0
sub ecx, esi
inc ecx
jmp 0x103595c3
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x10], 4
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp + 8], eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x44], str.User_Agent:
mov dword [ebp - 0x40], 0xd
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x34], str._r_nAccept:___r_nCache_Control:_no_cache_r_nProxy_Connection:_Close_r_nConnection:_Close_r_n_r_n
mov dword [ebp - 0x30], 0x57
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xc
test ecx, ecx
je 0x10359632
dec ecx
jmp 0x10359634
xor ecx, ecx
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x1035963e
dec eax
jmp 0x10359640
xor eax, eax
mov esi, dword [ebp - 0x30]
add ecx, eax
dec esi
mov dword [ebp - 0x48], ecx
add esi, ecx
mov dword [ebp - 0x50], esi
lea ebx, [esi + 1]
mov ecx, ebx
call fcn.103675e0
mov edi, eax
mov byte [esi + edi], 0
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x10359668
dec ecx
jmp 0x1035966a
xor ecx, ecx
push ecx
push dword [ebp - 0x44]
push edi
call fcn.103ce0b0
mov esi, dword [ebp - 0x40]
add esp, 0xc
test esi, esi
je 0x10359681
dec esi
jmp 0x10359683
xor esi, esi
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x1035968d
dec eax
jmp 0x1035968f
xor eax, eax
push eax
push dword [ebp - 0x3c]
lea eax, [esi + edi]
push eax
call fcn.103ce0b0
mov eax, dword [ebp - 0x38]
add esp, 0xc
test eax, eax
je 0x103596a9
dec eax
jmp 0x103596ab
xor eax, eax
lea ecx, [esi + eax]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x103596b8
dec eax
jmp 0x103596ba
xor eax, eax
push eax
push dword [ebp - 0x34]
lea eax, [ecx + edi]
push eax
call fcn.103ce0b0
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov ecx, dword [eax + 0xec]
mov dword [eax + 0xf0], ebx
mov dword [eax + 0xf4], ebx
mov dword [eax + 0xec], edi
call fcn.10367720
mov esi, 0xc
mov dword [ebp - 0x10], esi
and esi, 0xfffffff7
mov dword [ebp - 0x10], esi
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x54]
call fcn.10367720
mov dword [ebp - 0x54], 0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x4c]
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x4c]
call fcn.10367720
and esi, 0xfffffffb
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x10], esi
mov dword [ebp - 4], 0xffffffff
xor ecx, ecx
call fcn.10367720
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0
mov byte [ecx + 0x160], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8