Function at 0x4bbc25
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push 0x1c
call fcn.00515ee9
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebx], 0xc78436
push ebx
mov eax, esp
push eax
call fcn.00411c37
pop ebx
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov eax, 0xb60ab3
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040f577
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4bbc9b
push ebx
call fcn.00515eef
add esp, 4
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4bbcca
push ebx
call fcn.00515eef
add esp, 4
cmp dword [ebp - 0x20], 0
jne 0x4bbcde
mov eax, 0xcc8c59
jmp 0x4bc136
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0041720f
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4bbd04
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xc78639
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4bbd39
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x4bbda1
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov eax, 0xc78639
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00407315
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bbd99
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x4bc136
push 0xc7b7bd
mov ebx, dword [ebp + 0x18]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x4bbddb
mov eax, 0xcc8c62
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bbdd2
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x4bbdf5
mov eax, 0xcc8c65
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bbdf1
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
push dword [ebp + 0x10]
call fcn.004424a2
mov dword [ebp - 0x18], eax
push 0xcc8c68
mov ebx, dword [ebp + 0x14]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
mov eax, 0
sete al
test eax, eax
je 0x4bbe31
mov eax, 0xc512da
jmp 0x4bbe36
mov eax, 0xcc8c6b
mov dword [ebp - 0x20], eax
push dword [ebp + 0x18]
call fcn.0042c749
mov dword [ebp - 0x24], eax
push dword [ebp + 0x20]
call fcn.0042c84e
mov dword [ebp - 0x28], eax
push str.studentInfoDTO.province_code11studentInfoDTO.school_codestudentInfoDTO.school_name_E7_AE_80_E7_A0_81_2F_E6_B1_89_E5_AD_97studentInfoDTO.departmentstudentInfoDTO.school_classstudentInfoDTO.student_nostudentInfoDTO.school_system1studentInfoDTO.enter_year2014studentInfoDTO.preference_card_nostudentInfoDTO.preference_from_station_namestudentInfoDTO.preference_from_station_codestudentInfoDTO.preference_to_station_namestudentInfoDTO.preference_to_station_code
push dword [ebp - 0x28]
push str.mobile_nophone_noemailaddresspostalcodepassenger_type
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push str.passenger_id_no
push dword [ebp - 0x24]
push str.passenger_id_type_code
push dword [ebp - 0xc]
push str._birthDatecountry_code
push dword [ebp - 0x20]
push str.sex_code
push dword [ebp - 0x18]
push str.passenger_name
mov ecx, 0xd
call fcn.0040113b
add esp, 0x34
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4bbea6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bbeb6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4bbec6
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4bbed6
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4bbeea
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x1f40
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.x_requested_with:_XMLHttpRequest_r_nAccept_Language:_zh_cn_r_nReferer:_https:__kyfw.12306.cn_otn_passengers_addInit_r_nAccept:___r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passengers_add
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4bbf69
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4bbf79
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bbf89
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4bbf99
push ebx
call fcn.00515eef
add esp, 4
lea eax, [ebp - 0x2c]
push eax
call fcn.0040b3e1
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4bbfb5
push ebx
call fcn.00515eef
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4bbfc9
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x1f40
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov eax, str.https:__kyfw.12306.cn_otn_login_loginOut
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov ebx, eax
test ebx, ebx
je 0x4bc04f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4bc05f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4bc06f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4bc07f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bc08f
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4bc09f
push ebx
call fcn.00515eef
add esp, 4
push 0x65d6b8
push dword [ebp - 0x14]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x4bc0c2
mov eax, 0xc78a54
jmp 0x4bc136
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str._data_:_flag_:true
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4bc0f3
mov eax, 0x65d6b8
push eax
push 4
mov ebx, 0x516de0
call fcn.00515f01
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x4bc122
mov eax, 0xcc8c50
jmp 0x4bc136
lea eax, [ebp - 0x14]
push eax
call fcn.0041f143
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
jmp 0x4bc136
push eax
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4bc157
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bc167
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4bc177
push ebx
call fcn.00515eef
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4bc187
push ebx
call fcn.00515eef
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x1c