Function at 0x4956e0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4c1a87
mov eax, dword fs:[0]
push eax
sub esp, 0x2e8
mov eax, dword [0x4eb6b8]
xor eax, esp
mov dword [esp + 0x2e0], eax
push ebx
push esi
push edi
mov eax, dword [0x4eb6b8]
xor eax, esp
push eax
lea eax, [esp + 0x2f8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
mov esi, edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ecx
cmp dword [esi + 0x10], ebx
jne 0x495743
or eax, 0xffffffff
jmp 0x496014
lea edx, [esp + 0x1c]
push edx
call fcn.00410ff0
mov dword [esp + 0x300], ebx
push edi
lea ebx, [esp + 0xf0]
call fcn.0046f050
add esp, 4
mov byte [esp + 0x300], 1
mov ecx, dword [esp + 0x14]
push ecx
push ecx
push str.__verb_is:
push ecx
push eax
push ecx
push str.__body_is:
push ecx
push esi
push ecx
lea edx, [esp + 0x44]
push str.url_is:
push edx
call fcn.00418890
add esp, 0xc
push eax
call fcn.00418af0
add esp, 0xc
push eax
call fcn.00418890
add esp, 0xc
push eax
call fcn.00418af0
add esp, 0xc
push eax
call fcn.00418890
add esp, 0xc
push eax
call fcn.00418af0
xor ebx, ebx
add esp, 8
mov byte [esp + 0x300], bl
cmp dword [esp + 0x100], 8
jb 0x4957e4
mov eax, dword [esp + 0xec]
push eax
call fcn.0049b30a
add esp, 4
xor ecx, ecx
push 0x17
mov word [esp + 0xf0], cx
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xd8]
mov dword [esp + 0x108], 7
mov dword [esp + 0x104], ebx
mov dword [esp + 0xec], 0xf
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xd8], bl
call fcn.004159b0
mov byte [esp + 0x300], 2
push 0xd
push str.ReportMgr.cpp
lea ecx, [esp + 0xf4]
mov dword [esp + 0x108], 0xf
mov dword [esp + 0x104], ebx
mov byte [esp + 0xf4], bl
call fcn.004159b0
mov byte [esp + 0x300], 3
lea edx, [esp + 0xb4]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.004110f0
mov byte [esp + 0x300], 4
push eax
push 0x45
push 2
call fcn.004117f0
push eax
lea edx, [esp + 0xe0]
lea ecx, [esp + 0xfc]
call fcn.0047acf0
mov byte [esp + 0x300], 3
cmp dword [esp + 0xc8], 8
jb 0x4958c2
mov ecx, dword [esp + 0xb4]
push ecx
call fcn.0049b30a
add esp, 4
xor edx, edx
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], ebx
mov word [esp + 0xb4], dx
mov byte [esp + 0x300], 2
cmp dword [esp + 0x100], 0x10
jb 0x495900
mov eax, dword [esp + 0xec]
push eax
call fcn.0049b30a
add esp, 4
mov dword [esp + 0x100], 0xf
mov dword [esp + 0xfc], ebx
mov byte [esp + 0xec], bl
mov byte [esp + 0x300], bl
cmp dword [esp + 0xe4], 0x10
jb 0x49593a
mov ecx, dword [esp + 0xd0]
push ecx
call fcn.0049b30a
add esp, 4
mov dword [esp + 0xe4], 0xf
mov dword [esp + 0xe0], ebx
mov byte [esp + 0xd0], bl
mov dword [esp + 0x300], 0xffffffff
lea ecx, [esp + 0x1c]
call fcn.004039f0
lea edx, [esp + 0x124]
push edx
mov edx, esi
call fcn.0048cf10
mov dword [esp + 0x300], 5
push 0x10
push str.Content_Length:
lea ecx, [esp + 0x110]
mov dword [esp + 0x124], 0xf
mov dword [esp + 0x120], ebx
mov byte [esp + 0x110], bl
call fcn.004159b0
mov byte [esp + 0x300], 6
mov ecx, dword [edi + 0x10]
lea esi, [esp + 0xb4]
call fcn.0046fb00
mov byte [esp + 0x300], 7
push ebx
push eax
or eax, 0xffffffff
lea esi, [esp + 0x110]
call fcn.00412fa0
mov ecx, eax
push 0x31
mov eax, str._r_nContent_Type:_application_x_www_form_urlencoded
call fcn.00413090
mov ecx, eax
push 0x1a
mov eax, str._r_nReferrer:_www.client.com
call fcn.00413090
mov byte [esp + 0x300], 6
cmp dword [esp + 0xc8], 0x10
jb 0x495a1b
mov eax, dword [esp + 0xb4]
push eax
call fcn.0049b30a
add esp, 4
lea ecx, [esp + 0x108]
mov dword [esp + 0xc4], ebx
mov byte [esp + 0xb4], bl
push ecx
lea ebx, [esp + 0xb8]
mov dword [esp + 0xcc], 0xf
call fcn.0046f050
add esp, 4
mov byte [esp + 0x300], 8
xor ebx, ebx
push ebx
push eax
or eax, 0xffffffff
lea ecx, [esp + 0x210]
call fcn.004138e0
mov byte [esp + 0x300], 6
cmp dword [esp + 0xc8], 8
jb 0x495a88
mov edx, dword [esp + 0xb4]
push edx
call fcn.0049b30a
add esp, 4
xor eax, eax
mov word [esp + 0xb4], ax
mov eax, dword [edi + 0x10]
mov dword [esp + 0xc8], 7
mov dword [esp + 0xc4], ebx
cmp eax, ebx
je 0x495bf2
cmp dword [edi + 0x14], 0x10
jb 0x495ab9
mov ebx, dword [edi]
jmp 0x495abb
mov ebx, edi
mov edi, eax
lea esi, [esp + 0x124]
call fcn.0048e660
test al, al
jne 0x495bf0
lea ecx, [esp + 0x1c]
push ecx
call fcn.00410ff0
mov byte [esp + 0x300], 0xd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea edx, [esp + 0x24]
push str.SetAdditionalDataToSend_FAILED._GetLastError_is:
push edx
call fcn.00418890
add esp, 0xc
push eax
call fcn.004102c0
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xd4]
call fcn.0040fb20
mov bl, 0xe
mov byte [esp + 0x300], bl
push str.ReportMgr.cpp
lea ecx, [esp + 0xb8]
call fcn.0040fb20
mov byte [esp + 0x300], 0xf
lea eax, [esp + 0xec]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.004110f0
mov byte [esp + 0x300], 0x10
push eax
push 0x59
push 0
call fcn.004117f0
push eax
lea edx, [esp + 0xe0]
lea ecx, [esp + 0xc4]
call fcn.0047acf0
mov byte [esp + 0x300], 0xf
lea esi, [esp + 0xec]
call fcn.00410c70
mov byte [esp + 0x300], bl
lea ecx, [esp + 0xb4]
call fcn.0040fb80
mov byte [esp + 0x300], 0xd
lea ecx, [esp + 0xd0]
call fcn.0040fb80
mov byte [esp + 0x300], 6
lea ecx, [esp + 0x1c]
call fcn.004039f0
mov byte [esp + 0x300], 5
lea ecx, [esp + 0x108]
call fcn.0040fb80
mov dword [esp + 0x300], 0xffffffff
lea edx, [esp + 0x124]
push edx
call fcn.0048d1a0
mov eax, 0xfffffffd
jmp 0x496014
xor ebx, ebx
xor eax, eax
mov word [esp + 0xd0], ax
push 0x5a
mov eax, str.Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_5.1__Trident_4.0__GTB7.4__FX1.0___like_Gecko
lea esi, [esp + 0xd4]
mov dword [esp + 0xe8], 7
mov dword [esp + 0xe4], ebx
call fcn.00415f60
mov byte [esp + 0x300], 0x11
push ebx
mov ecx, esi
push ecx
or eax, 0xffffffff
lea ecx, [esp + 0x268]
call fcn.004138e0
mov byte [esp + 0x300], 6
cmp dword [esp + 0xe4], 8
jb 0x495c5e
mov edx, dword [esp + 0xd0]
push edx
call fcn.0049b30a
add esp, 4
xor eax, eax
mov word [esp + 0xd0], ax
mov eax, 0x4db0b4
lea ecx, [esp + 0xb4]
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], ebx
call fcn.00410c10
mov byte [esp + 0x300], 0x16
push ebx
lea ecx, [esp + 0xb8]
push ecx
or eax, 0xffffffff
lea ecx, [esp + 0x1a4]
mov dword [esp + 0x18], 1
call fcn.004138e0
mov dword [esp + 0x300], 6
mov eax, 1
mov dword [esp + 0x10], eax
and eax, 0xfffffffe
lea esi, [esp + 0xb4]
mov dword [esp + 0x10], eax
call fcn.00410c70
mov ecx, dword [esp + 0x14]
lea ebx, [esp + 0x124]
call fcn.0048d4c0
test al, al
jne 0x495e11
lea edx, [esp + 0x1c]
push edx
call fcn.00410ff0
mov byte [esp + 0x300], 0x1b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea eax, [esp + 0x24]
push str.SendHttpRequest_FAILED._GetLastError_is:
push eax
call fcn.00418890
add esp, 0xc
push eax
call fcn.004102c0
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xd4]
call fcn.0040fb20
mov byte [esp + 0x300], 0x1c
push str.ReportMgr.cpp
lea ecx, [esp + 0xb8]
call fcn.0040fb20
mov bl, 0x1d
mov byte [esp + 0x300], bl
lea ecx, [esp + 0xec]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.004110f0
mov byte [esp + 0x300], 0x1e
push eax
push 0x6e
push 0
call fcn.004117f0
push eax
lea edx, [esp + 0xe0]
lea ecx, [esp + 0xc4]
call fcn.0047acf0
mov byte [esp + 0x300], bl
lea esi, [esp + 0xec]
call fcn.00410c70
mov byte [esp + 0x300], 0x1c
lea ecx, [esp + 0xb4]
call fcn.0040fb80
mov byte [esp + 0x300], 0x1b
lea ecx, [esp + 0xd0]
call fcn.0040fb80
mov byte [esp + 0x300], 6
lea ecx, [esp + 0x1c]
call fcn.004039f0
mov byte [esp + 0x300], 5
lea ecx, [esp + 0x108]
call fcn.0040fb80
mov dword [esp + 0x300], 0xffffffff
lea eax, [esp + 0x124]
push eax
call fcn.0048d1a0
mov eax, 0xfffffffa
jmp 0x496014
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x128]
call fcn.0048e6b0
mov ecx, eax
mov byte [esp + 0x300], 0x1f
mov eax, dword [ecx + 0x10]
push 0x4db70c
mov edi, 3
call fcn.00419f50
test eax, eax
setne bl
mov byte [esp + 0x300], 6
lea esi, [esp + 0xb4]
call fcn.00410c70
test bl, bl
je 0x495fa8
lea edx, [esp + 0x1c]
push edx
call fcn.00410ff0
mov bl, 0x20
mov byte [esp + 0x300], bl
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0x128]
call fcn.0048e6b0
mov byte [esp + 0x300], 0x21
push eax
push ecx
lea ecx, [esp + 0x24]
push str.GetResponseStatusCode_FAILED__GetResponseStatusCode_is:
push ecx
call fcn.00418890
add esp, 0xc
push eax
call fcn.00418af0
add esp, 8
mov byte [esp + 0x300], bl
lea esi, [esp + 0xb4]
call fcn.00410c70
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xd4]
call fcn.0040fb20
mov byte [esp + 0x300], 0x22
push str.ReportMgr.cpp
lea ecx, [esp + 0xb8]
call fcn.0040fb20
mov byte [esp + 0x300], 0x23
lea edx, [esp + 0xec]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.004110f0
mov byte [esp + 0x300], 0x24
push eax
push 0x75
push 0
call fcn.004117f0
push eax
lea edx, [esp + 0xe0]
lea ecx, [esp + 0xc4]
call fcn.0047acf0
mov byte [esp + 0x300], 0x23
lea esi, [esp + 0xec]
call fcn.00410c70
mov byte [esp + 0x300], 0x22
lea ecx, [esp + 0xb4]
call fcn.0040fb80
mov byte [esp + 0x300], bl
lea ecx, [esp + 0xd0]
call fcn.0040fb80
mov byte [esp + 0x300], 6
lea ecx, [esp + 0x1c]
call fcn.004039f0
mov byte [esp + 0x300], 5
lea ecx, [esp + 0x108]
call fcn.0040fb80
mov dword [esp + 0x300], 0xffffffff
lea ecx, [esp + 0x124]
push ecx
call fcn.0048d1a0
lea eax, [edi - 0xa]
jmp 0x496014
lea edx, [esp + 0xb4]
push edx
lea ecx, [esp + 0x128]
call fcn.0048e580
mov byte [esp + 0x300], 0x25
mov esi, dword [esp + 0x18]
mov edi, eax
call fcn.00413650
mov byte [esp + 0x300], 6
lea esi, [esp + 0xb4]
call fcn.00410c70
mov byte [esp + 0x300], 5
lea ecx, [esp + 0x108]
call fcn.0040fb80
mov dword [esp + 0x300], 0xffffffff
lea eax, [esp + 0x124]
push eax
call fcn.0048d1a0
mov eax, 1
mov ecx, dword [esp + 0x2f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2e0]
xor ecx, esp
call fcn.0049b315
mov esp, ebp
pop ebp
ret