Function at 0x4b114b
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3298
call fcn.004dff80
push edi
mov dword [ebp - 0x3294], ecx
mov dword [ebp - 0x3288], 0
mov dword [ebp - 0x3284], 0
mov word [ebp - 0x1244], 0
mov ecx, 0x3ff
xor eax, eax
lea edi, [ebp - 0x1242]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0
lea eax, [ebp - 0x1244]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14]
push edx
call fcn.004b226b
add esp, 0xc
mov dword [ebp - 0x1648], eax
mov dword [ebp - 0x2e50], 0
mov ecx, 0x600
xor eax, eax
lea edi, [ebp - 0x2e4c]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x244], 0
mov ecx, 0xe
xor eax, eax
lea edi, [ebp - 0x240]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
add eax, 4
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x2e50]
push edx
mov eax, dword [ebp - 0x1648]
push eax
mov ecx, dword [ebp - 0x3294]
call fcn.004b102b
test eax, eax
jne 0x4b120f
xor eax, eax
jmp 0x4b18bb
lea ecx, [ebp - 0x1244]
mov dword [ebp - 0x3278], ecx
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ebp - 0x218]
push eax
push str._s_s
mov ecx, dword [ebp - 0x3278]
push ecx
call fcn.004e3179
add esp, 0x10
mov word [ebp - 0x204], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x202]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x240]
push eax
push str.Referer:_s:___s_
lea ecx, [ebp - 0x204]
push ecx
call fcn.004e3179
add esp, 0x10
cmp dword [ebp - 0x238], 2
jne 0x4b128c
mov dword [ebp - 0x3288], 0x800000
mov dword [ebp - 0x3274], 0x5916d0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x4b12a9
mov dword [ebp - 0x3274], 0x5916dc
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xfffffffa
cmp dword [0x5b51f0], 0
jne 0x4b1323
push 0
push 0
push 0
push 1
push str.Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
call dword [0x5b51fc]
mov dword [0x5b51f0], eax
cmp dword [0x5b51f0], 0
jne 0x4b12f3
call 0xa196e7
mov edx, dword [0x591720]
push edx
mov eax, dword [ebp - 0x3294]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x3294]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x3294]
mov edx, dword [ecx]
push edx
mov eax, dword [0x5b51f0]
push eax
call dword [0x5b5200]
push 0
mov cx, word [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [0x5b51f0]
push eax
call dword [0x5b5204]
mov dword [ebp - 0x2e6c], eax
cmp dword [0x5b51f0], 0
jne 0x4b1362
push edi
call 0x9a1d2c
add eax, 0x15ef3c0
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
jmp 0x4b13b6
mov edx, dword [ebp - 0x3288]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x3278]
push eax
mov ecx, dword [ebp - 0x3274]
push ecx
mov edx, dword [ebp - 0x2e6c]
push edx
call dword [0x5b5208]
mov dword [ebp - 0x2e58], eax
cmp dword [0x5b51f0], 0
jne 0x4b13ac
call 0xb68c70
xor edx, edx
test edx, edx
jne 0x4b12b3
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0xfffffffa
je 0x4b13df
lea ecx, [ebp - 0x2e6c]
push ecx
lea edx, [ebp - 0x2e58]
push edx
mov ecx, dword [ebp - 0x3294]
call fcn.004b1104
xor eax, eax
jmp 0x4b18bb
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xfffffffb
cmp dword [ebp - 0x3288], 0x800000
jne 0x4b1417
mov dword [ebp - 0x3290], 0x3300
push 4
lea ecx, [ebp - 0x3290]
push ecx
push 0x1f
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b520c]
push 0x10000000
push 0xffffffffffffffff
push str.Cache_Control:no_cache
mov eax, dword [ebp - 0x2e58]
push eax
call dword [0x5b5210]
push 0x10000000
push 0xffffffffffffffff
push str.keep_alive
mov ecx, dword [ebp - 0x2e58]
push ecx
call dword [0x5b5210]
push 0x10000000
push 0xffffffffffffffff
push str.Accept:_
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b5210]
push 0x10000000
push 0xffffffffffffffff
push str.Accept_Language:zh_cn
mov eax, dword [ebp - 0x2e58]
push eax
call dword [0x5b5210]
push 0x10000000
push 0xffffffffffffffff
lea ecx, [ebp - 0x204]
push ecx
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b5210]
mov eax, dword [ebp - 0x3274]
xor ecx, ecx
mov cx, word [eax]
cmp ecx, 0x50
jne 0x4b14bf
push 0x10000000
push 0xffffffffffffffff
push str.Content_Type:application_x_www_form_urlencoded
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b5210]
mov word [ebp - 0x3270], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x326e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str.User_Agent:Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
call fcn.004e2f39
add esp, 4
mov dword [ebp - 0x3280], eax
mov eax, dword [ebp - 0x3280]
shl eax, 1
push eax
push str.User_Agent:Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
lea ecx, [ebp - 0x3270]
push ecx
call fcn.004e1860
add esp, 0xc
push 0
mov edx, dword [ebp - 0x3280]
lea eax, [ebp + edx*2 - 0x3272]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
call fcn.004b226b
add esp, 0xc
push 0x80000000
push 0xffffffffffffffff
lea eax, [ebp - 0x3270]
push eax
mov ecx, dword [ebp - 0x2e58]
push ecx
call dword [0x5b5210]
mov edx, dword [ebp + 8]
mov dword [edx + 4], 0xfffffffc
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x18], 0
jne 0x4b1569
mov dword [ebp - 0x3298], 0
jmp 0x4b157e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
push edx
call fcn.004e1ba0
add esp, 4
mov dword [ebp - 0x3298], eax
mov eax, dword [ebp - 0x3298]
mov dword [ebp - 0x328c], eax
mov dword [ebp - 0x2e64], 0
jmp 0x4b15a5
cmp dword [ebp - 0x2e64], 3
jge 0x4b1677
push 0
mov edx, dword [ebp - 0x328c]
push edx
mov eax, dword [ebp - 0x328c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x18]
push edx
push 0
push 0
mov eax, dword [ebp - 0x2e58]
push eax
call dword [0x5b5214]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4b1620
call 0xa524d8
push 0
mov eax, dword [ebp - 0x2e58]
push eax
call dword [0x5b5218]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4b163a
jmp 0x4b1677
call 0x9776f6
cmp dword [ebp - 4], 0
jne 0x4b169d
lea eax, [ebp - 0x2e6c]
push eax
lea ecx, [ebp - 0x2e58]
push ecx
mov ecx, dword [ebp - 0x3294]
call fcn.004b1104
xor eax, eax
jmp 0x4b18bb
mov edx, dword [ebp + 8]
mov dword [edx + 4], 0xfffffffd
mov word [ebp - 0x1644], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x1642]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x2e60], 0x400
push 0
lea eax, [ebp - 0x2e60]
push eax
lea ecx, [ebp - 0x1644]
push ecx
push 0
push 0x13
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b521c]
cmp dword [ebp - 0x2e60], 0
jbe 0x4b170c
lea eax, [ebp - 0x1644]
push eax
call fcn.004e3150
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
jmp 0x4b1716
mov edx, dword [ebp + 8]
mov dword [edx + 4], 0xfffffffe
mov dword [ebp - 0x327c], 0x2000
mov dword [ebp - 0x2e70], 0
mov dword [ebp - 0x2e68], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x164c], 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x2e5c], ecx
lea edx, [ebp - 0x2e68]
push edx
mov eax, dword [ebp - 0x2e58]
push eax
call dword [0x5b5220]
test eax, eax
je 0x4b183e
cmp dword [ebp - 0x2e68], 1
jae 0x4b177e
jmp 0x4b183e
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0xfffffffe
jne 0x4b1791
mov edx, dword [ebp + 8]
mov dword [edx + 4], 0xc8
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x2e68]
mov ecx, dword [ebp - 0x327c]
sub ecx, 1
cmp eax, ecx
jbe 0x4b17f3
mov edx, dword [ebp - 0x327c]
shl edx, 1
mov dword [ebp - 0x327c], edx
mov eax, dword [ebp - 0x327c]
push eax
mov ecx, dword [ebp - 0x2e5c]
push ecx
push 0
call dword [0x5163b8]
push eax
push edi
call 0xa5ff35
mov dword [ebp - 0x2e70], eax
mov edx, dword [ebp - 0x2e70]
mov dword [ebp - 0x2e5c], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2e5c]
mov dword [eax + 0xc], ecx
lea edx, [ebp - 0x164c]
push edx
mov eax, dword [ebp - 0x327c]
sub eax, dword [ebp - 0x208]
push eax
mov ecx, dword [ebp - 0x2e5c]
add ecx, dword [ebp - 0x208]
push ecx
mov edx, dword [ebp - 0x2e58]
push edx
call dword [0x5b5224]
test eax, eax
jne 0x4b1827
jmp 0x4b183e
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x164c]
mov dword [ebp - 0x208], eax
jmp 0x4b1754
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x1c], 0
jne 0x4b1884
mov edx, dword [ebp - 0x2e5c]
add edx, dword [ebp - 0x208]
mov byte [edx], 0
push 0
mov eax, dword [ebp - 0x2e5c]
push eax
call fcn.004b22b6
add esp, 8
mov dword [ebp - 0x2e5c], eax
mov ecx, dword [ebp - 0x2e5c]
push ecx
call fcn.004e1ba0
add esp, 4
mov dword [ebp - 0x2e54], eax
jmp 0x4b1890
mov edx, dword [ebp - 0x208]
mov dword [ebp - 0x2e54], edx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x2e54]
mov dword [eax + 8], ecx
lea edx, [ebp - 0x2e6c]
push edx
lea eax, [ebp - 0x2e58]
push eax
mov ecx, dword [ebp - 0x3294]
call fcn.004b1104
mov eax, dword [ebp - 0x2e54]
pop edi
mov esp, ebp
pop ebp
ret 4