Function at 0x42c850
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x487210
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
push ebx
push ebp
mov ebp, dword [esp + 0x98]
push esi
mov ebx, ecx
push edi
mov eax, dword [ebp]
push str.___BuildFireFoxGetRequest___
mov ecx, ebp
call dword [eax + 0x14]
mov esi, dword [esp + 0x9c]
mov ecx, esi
call fcn.004182d0
mov ecx, dword [esp + 0x8c]
mov edi, dword [esp + 0x84]
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
push ebp
push ecx
mov ecx, dword [esp + 0x78]
push esi
push edi
push edx
push eax
push ecx
mov ecx, ebx
call fcn.0042bf60
push str.Host:
mov ecx, esi
call fcn.00418c40
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x10]
push edx
call fcn.00419050
mov eax, dword [esp + 0x78]
mov dword [esp + 0x68], 0
cmp eax, 0x50
je 0x42c906
cmp eax, 0x1bb
je 0x42c906
push 0x3a
lea ecx, [esp + 0x14]
call fcn.00418340
mov eax, dword [esp + 0x78]
lea ecx, [esp + 0x10]
push eax
call fcn.00418900
lea ecx, [esp + 0x10]
call fcn.0041a180
lea ecx, [esp + 0x10]
call fcn.004220a0
push eax
mov ecx, esi
call fcn.00418c40
push 0x49f56c
mov ecx, esi
call fcn.00418c40
push str.User_Agent:_Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.9.1.3__Gecko_20090824_Firefox_3.5.3__.NET_CLR_3.5.30729__r_n
mov ecx, esi
call fcn.00418c40
mov eax, dword [esp + 0x88]
test eax, eax
je 0x42c94b
push eax
mov ecx, esi
call fcn.00418c40
push 0
lea ecx, [esp + 0xa4]
push ebp
push ecx
push esi
push edi
mov ecx, ebx
mov byte [esp + 0xb4], 0
call fcn.0042b9d0
mov edx, dword [edi + 0x338]
mov eax, dword [edi + 0x33c]
or edx, eax
je 0x42c9d2
push str.Range:_bytes
mov ecx, esi
call fcn.00418c40
lea ecx, [esp + 0x38]
call fcn.00419150
mov ecx, dword [edi + 0x33c]
mov edx, dword [edi + 0x338]
lea eax, [esp + 0x38]
mov byte [esp + 0x68], 1
push eax
push ecx
push edx
call fcn.0044ae90
add esp, 0xc
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.0041a240
push 0x4a3b14
mov ecx, esi
call fcn.00418c40
lea ecx, [esp + 0x38]
mov byte [esp + 0x68], 0
call fcn.00419440
push str.Accept:_text_xml_application_xml_application_xhtmlxml_text_html_q0.9_text_plain_q0.8_image_png___q0.5_r_n
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x2c0]
call fcn.00422090
test eax, eax
je 0x42ca13
push str.Accept_Charset:
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x2c0]
call fcn.004220a0
push eax
mov ecx, esi
call fcn.00418c40
push 0x49f56c
jmp 0x42ca18
push str.Accept_Charset:_ISO_8859_1_utf_8_q0.7__q0.7_r_n
mov ecx, esi
call fcn.00418c40
mov al, byte [edi + 0x3ae]
test al, al
je 0x42ca30
push str.Accept_Encoding:_gzip_r_n
jmp 0x42ca35
push str.Accept_Encoding:__r_n
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x2e8]
call fcn.00422090
test eax, eax
je 0x42ca71
push str.Accept_Language:
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x2e8]
call fcn.004220a0
push eax
mov ecx, esi
call fcn.00418c40
push 0x49f56c
jmp 0x42ca76
push str.Accept_Language:_en_us_en_q0.5_r_n
mov ecx, esi
call fcn.00418c40
push str.Keep_Alive:_300_r_n
mov ecx, esi
call fcn.00418c40
push str.Connection:_keep_alive_r_n
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x310]
call fcn.00422090
test eax, eax
je 0x42cae6
push str.Authorization:
mov ecx, esi
call fcn.00418c40
lea ecx, [ebx + 0x190]
push ecx
mov ecx, esi
call fcn.0041a240
push 0x20
mov ecx, esi
call fcn.00418340
lea ecx, [edi + 0x310]
call fcn.004220a0
push eax
mov ecx, esi
call fcn.00418c40
push 0x49f56c
mov ecx, esi
call fcn.00418c40
lea ecx, [edi + 0x248]
call fcn.00422090
test eax, eax
je 0x42cb1b
push str.Referer:
mov ecx, esi
call fcn.00418c40
lea eax, [edi + 0x248]
mov ecx, esi
push eax
call fcn.0041a240
push 0x49f56c
mov ecx, esi
call fcn.00418c40
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x74]
push ebp
push esi
push edx
push eax
push edi
mov ecx, ebx
call fcn.0042bdd0
push ebp
push esi
push edi
mov ecx, ebx
call fcn.0042bc40
push ebp
push esi
push edi
mov ecx, ebx
call fcn.0042bad0
mov ecx, dword [esp + 0x8c]
push esi
add ecx, 0x100
call fcn.0041a370
push 0x49f56c
mov ecx, esi
call fcn.00418c40
lea ecx, [esp + 0x10]
mov dword [esp + 0x68], 0xffffffff
call fcn.00419440
mov ecx, dword [esp + 0x60]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c
ret 0x34