Function at 0x411df7
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 7
xor eax, eax
cmp byte [ebx], 0x20
mov byte [ebp - 0x30], 0
pop ecx
lea edi, [ebp - 0x2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov esi, ebx
je 0x411e37
mov al, byte [esi]
cmp al, 0xd
je 0x411e37
cmp al, 0xa
je 0x411e37
test al, al
je 0x411e37
inc esi
cmp byte [esi], 0x20
jne 0x411e23
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00421d78
inc esi
mov dword [esp], str.User_Agent:
push esi
call fcn.00413761
test eax, eax
pop ecx
pop ecx
je 0x411e92
add eax, 0xb
cmp byte [eax], 0xd
mov ecx, eax
je 0x411e75
mov dl, byte [ecx]
cmp dl, 0xa
je 0x411e75
test dl, dl
je 0x411e92
inc ecx
cmp byte [ecx], 0xd
jne 0x411e64
cmp byte [ecx], 0
je 0x411e92
push 0x42a8f4
push eax
mov byte [ecx], 0
call fcn.00413761
test eax, eax
pop ecx
pop ecx
je 0x411e92
mov byte [ebp - 2], 1
push 0x42a8f0
push ebx
call fcn.00421f60
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411ec1
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 4
jl 0x411ec1
mov al, byte [esi + 2]
mov byte [ebp + 0xc], al
mov al, byte [esi + 3]
mov byte [ebp + 0xd], al
mov byte [ebp + 0xe], 0
push 0x42a8ec
push ebx
call fcn.00421f60
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411f29
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 5
jl 0x411f29
lea eax, [ebp - 0x30]
push 2
mov ecx, eax
pop edi
sub edi, ecx
sub esi, ecx
lea edx, [esi + 2]
mov cl, byte [edx + eax]
cmp cl, 0x2d
jb 0x411efc
cmp cl, 0x39
jbe 0x411f10
cmp cl, 0x41
jb 0x411f06
cmp cl, 0x5a
jbe 0x411f10
cmp cl, 0x61
jb 0x411f26
cmp cl, 0x7a
ja 0x411f26
cmp cl, 0x26
je 0x411f26
test cl, cl
je 0x411f26
lea esi, [edi + eax]
cmp esi, 0x19
jge 0x411f26
mov byte [eax], cl
inc eax
jmp 0x411eef
mov byte [eax], 0
push 0x42a8e8
push ebx
call fcn.00421f60
mov esi, eax
test esi, esi
pop ecx
pop ecx
je 0x411f50
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jl 0x411f50
mov al, byte [esi + 2]
mov byte [ebp - 1], al
jmp 0x411f7d
mov eax, dword [0x459458]
cmp eax, 2
jb 0x411f5f
cmp eax, 0x64
jbe 0x411f69
mov dword [0x459458], 0xa
call fcn.00421d82
xor edx, edx
div dword [0x459458]
dec edx
jne 0x411f7d
mov byte [ebp - 1], 0x72
cmp byte [ebp - 2], 0
je 0x41210a
cmp byte [ebp - 1], 0x7a
je 0x41210a
mov ebx, dword [ebp + 8]
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push eax
push 0x8004667e
push dword [ebx + 8]
mov byte [ebx + 0xc], 1
call dword [0x458af0]
cmp eax, 0xffffffff
jne 0x411fba
xor eax, eax
jmp 0x41211e
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x34], 0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 3
jge 0x411fdf
lea eax, [ebp - 0x54]
push 3
push eax
call fcn.00413663
pop ecx
pop ecx
jmp 0x411fed
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
xor eax, eax
cmp byte [0x459480], 0
mov byte [ebp - 0x10], 0
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
jne 0x41200d
cmp byte [ebp - 1], 0x72
jne 0x41200d
mov byte [ebp - 1], 0
cmp byte [0x459481], 0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x412029
push 0x42a8e4
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x412033
cmp byte [ebp - 1], 0x65
jne 0x412033
mov byte [ebp - 1], 0
cmp byte [0x459482], 0
je 0x412049
push 0x42a8e0
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x412053
cmp byte [ebp - 1], 0x73
jne 0x412053
mov byte [ebp - 1], 0
cmp byte [0x459483], 0
je 0x412069
push 0x42a4d8
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x412073
cmp byte [ebp - 1], 0x62
jne 0x412073
mov byte [ebp - 1], 0
cmp byte [0x459484], 0
je 0x412089
push str.pse
lea eax, [ebp - 0x10]
push eax
call esi
jmp 0x412093
cmp byte [ebp - 1], 0x70
jne 0x412093
mov byte [ebp - 1], 0
cmp byte [ebp - 0x10], 0
jne 0x41209d
mov byte [ebp - 0x10], 0x65
cmp byte [ebp - 1], 0
jne 0x4120be
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
call fcn.00421d82
cdq
idiv esi
mov al, byte [ebp + edx - 0x10]
mov byte [ebp - 1], al
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5f]
push eax
call fcn.004220a0
mov al, byte [ebp - 1]
pop ecx
pop ecx
mov byte [ebp - 0x60], al
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x64]
push ecx
push 0x411ae2
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x412102
push dword [ebx + 8]
call dword [0x458c90]
push 2
pop eax
jmp 0x41211e
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp - 0x34], 0
je 0x4120fa
jmp 0x4120f5
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.00411cfc
pop ecx
xor eax, eax
pop ecx
inc eax
pop edi
pop esi
pop ebx
leave
ret