Function at 0x48c258
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0xc
call fcn.005cb7e7
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx], 0x6845e9
push 8
call fcn.005cb7e7
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x678929
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.005cb7e7
add esp, 4
mov dword [ebp - 0x14], eax
mov edi, eax
mov esi, 0x678929
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0
push 8
call fcn.005cb7e7
add esp, 4
mov dword [ebp - 0x1c], eax
mov edi, eax
mov esi, 0x678929
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
push 0x80000301
push 0
push 8
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x48c322
mov eax, 0x67883c
push eax
push 2
mov ebx, 0x5cc4e0
call fcn.005cb7f9
add esp, 0x1c
mov dword [ebp - 0x28], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x48c34b
mov eax, 0x67883c
push eax
push 1
mov ebx, 0x5cc9a0
call fcn.005cb7f9
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c371
push ebx
call fcn.005cb7e1
add esp, 4
push str.https:__
push dword [ebp - 0x2c]
call fcn.00401015
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c39f
push ebx
call fcn.005cb7e1
add esp, 4
cmp dword [ebp - 0x30], 1
mov eax, 0
sete al
mov dword [ebp - 4], eax
push dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xa4]
mov dword [ebp - 8], eax
cmp dword [ebp - 4], 0
je 0x48c459
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x64]
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x48c429
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x48c439
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c449
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c459
push ebx
call fcn.005cb7e1
add esp, 4
push 0x1388
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x178]
push 0x2710
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x17c]
push 0
push dword [ebp - 8]
lea eax, [ebp - 0xc]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x130]
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Connection:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c4d7
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c538
mov eax, str.Keep_Alive
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Connection
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c528
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c538
push ebx
call fcn.005cb7e1
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Content_Type:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c56b
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c5cc
mov eax, str.application_x_www_form_urlencoded__CharsetUTF_8
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Content_Type
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c5bc
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c5cc
push ebx
call fcn.005cb7e1
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Accept:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c5ff
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c660
mov eax, 0x6844d2
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Accept
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c650
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c660
push ebx
call fcn.005cb7e1
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Accept_Language:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c693
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c6f4
mov eax, str.zh_cn
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Accept_Language
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c6e4
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c6f4
push ebx
call fcn.005cb7e1
add esp, 4
cmp dword [ebp + 0x20], 0
mov eax, 0
sete al
and eax, 1
xor eax, 1
test eax, eax
je 0x48c736
push dword [ebp + 0x1c]
mov eax, str.Cookie
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c736
push ebx
call fcn.005cb7e1
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Referer:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c769
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c7b1
push dword [ebp + 8]
mov eax, str.Referer
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c7b1
push ebx
call fcn.005cb7e1
add esp, 4
push reloc.WS2_32.dll_bind
push 0
push 1
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.User_Agent:
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c7e4
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x48c845
mov eax, str.Mozilla_5.0__Linux__Android_9__MI_8_UD_Build_PKQ1.180729.001__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_66.0.3359.126_MQQBrowser_6.2_TBS_044904_Mobile_Safari_537.36_GameHelper_1006_2103030506
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.User_Agent
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x48c835
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x48c845
push ebx
call fcn.005cb7e1
add esp, 4
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push dword [ebp + 8]
call fcn.0047834b
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, str.Host
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x48c89d
push ebx
call fcn.005cb7e1
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x48c8ad
push ebx
call fcn.005cb7e1
add esp, 4
cmp dword [ebp + 0x30], 0
mov eax, 0
sete al
and eax, 1
xor eax, 1
test eax, eax
je 0x48cc7e
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x678a7e
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c8fa
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x48c9a9
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x678a7e
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48c941
mov eax, 0x67883c
push eax
push 3
mov ebx, 0x5cd330
call fcn.005cb7f9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x48c979
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x48c975
imul eax, dword [ebx]
jmp 0x48c96a
mov ecx, eax
test ecx, ecx
je 0x48c998
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x48c991
push ebx
push eax
call fcn.005cb7e1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x48c97f
call fcn.005cb7e1
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
jmp 0x48ca34
lea eax, [ebp - 0x14]
push eax
push 4
mov eax, 2
call fcn.005cb7db
add esp, 8
mov ebx, dword [ebp + 0x2c]
mov eax, dword [ebx]
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], ebx
call fcn.004038b4
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x2c]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x48c9ee
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x30]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x2c]
call fcn.005cb805
add esp, 8
mov dword [ebp - 0x14], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x30]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x28]
push edi
test eax, eax
je 0x48ca31
push eax
mov ebx, eax
call fcn.004010b2
inc eax
push eax
call fcn.005cb7e7
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
mov dword [edi], eax
mov ebx, dword [ebp - 0x14]
call fcn.00403ea1
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x48cc7b
mov ebx, dword [ebp - 0x14]
call fcn.004038b4
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x48ca7a
push 0x7e5
push 0x4012b40
push 4
call fcn.005cb7ed
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x48ca97
push 0x7e5
push 0x4012b40
push 1
call fcn.005cb7ed
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x6845e6
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x48cad2
mov eax, 0x67883c
push eax
push 4
mov ebx, 0x5cc7d0
call fcn.005cb7f9
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
je 0x48cc73
mov ebx, dword [ebp - 0x14]
call fcn.004038b4
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x48cb19
push 0x836
push 0x4012b40
push 4
call fcn.005cb7ed
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x48cb36
push 0x836
push 0x4012b40
push 1
call fcn.005cb7ed
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x6845e6
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x48cb65
mov eax, 0x67883c
push eax
push 3
mov ebx, 0x5cd330
call fcn.005cb7f9
add esp, 0x28
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x1c]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x48cb9d
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x48cb99
imul eax, dword [ebx]
jmp 0x48cb8e
mov ecx, eax
test ecx, ecx
je 0x48cbbc
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x48cbb5
push ebx
push eax
call fcn.005cb7e1
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x48cba3
call fcn.005cb7e1
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x1c]
call fcn.004038b4
mov eax, 0
cmp eax, ecx
jl 0x48cbf0
push 0x861
push 0x4012b40
push 1
call fcn.005cb7ed
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x1c]
call fcn.004038b4
mov eax, 1
cmp eax, ecx
jl 0x48cc20
push 0x887
push 0x4012b40
push 1
call fcn.005cb7ed
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x2c], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x2c]
mov eax, dword [ebx]
test eax, eax
jne 0x48cc3d
mov eax, 0x67883c
push eax
push 1
mov ebx, 0x5cd050
call fcn.005cb7f9
add esp, 0x10
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x10]
push eax
call fcn.0048d999
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x48cc73
push ebx
call fcn.005cb7e1
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x48ca45
add esp, 0xc
fild dword [ebp + 0xc]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fadd qword [0x678b92]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
call fcn.00401181
cmp eax, 1
jl 0x48cca2
cmp eax, 9
jl 0x48ccb9
push 0x903
push 0x4012b40
push 9
call fcn.005cb7ed
add esp, 0xc
dec eax
call 0x48ccbf
pop ebx
add ebx, dword [eax*4 + 0x683b67]
jmp ebx