Function at 0x4b10f0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x32a0
call fcn.00467a60
mov eax, dword [0x4e5b00]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x329c], ecx
mov dword [ebp - 0x3040], 0
mov dword [ebp - 0x1830], 0
xor eax, eax
mov word [ebp - 0x1828], ax
push 0xffe
push 0
lea ecx, [ebp - 0x1826]
push ecx
call fcn.00465660
add esp, 0xc
push 0
lea edx, [ebp - 0x1828]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.004b2330
add esp, 0xc
mov dword [ebp - 0x3044], eax
mov dword [ebp - 0x3038], 0
push 0x1800
push 0
lea edx, [ebp - 0x3034]
push edx
call fcn.00465660
add esp, 0xc
mov dword [ebp - 0x3288], 0
push 0x38
push 0
lea eax, [ebp - 0x3284]
push eax
call fcn.00465660
add esp, 0xc
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
lea edx, [ebp - 0x3288]
push edx
lea eax, [ebp - 0x3038]
push eax
mov ecx, dword [ebp - 0x3044]
push ecx
mov ecx, dword [ebp - 0x329c]
call fcn.004b0fc0
test eax, eax
jne 0x4b11cd
xor eax, eax
jmp 0x4b1888
lea edx, [ebp - 0x1828]
mov dword [ebp - 0x324c], edx
mov eax, dword [ebp - 0x3254]
push eax
mov ecx, dword [ebp - 0x325c]
push ecx
push 0x4c97f0
mov edx, dword [ebp - 0x324c]
push edx
call fcn.004b6b20
add esp, 0x10
xor eax, eax
mov word [ebp - 0x3248], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x3246]
push ecx
call fcn.00465660
add esp, 0xc
mov edx, dword [ebp - 0x3278]
push edx
mov eax, dword [ebp - 0x3284]
push eax
push str.Referer:_s:___s_
lea ecx, [ebp - 0x3248]
push ecx
call fcn.004b6b20
add esp, 0x10
cmp dword [ebp - 0x327c], 2
jne 0x4b124f
mov dword [ebp - 0x3040], 0x800000
mov dword [ebp - 0x182c], 0x4e6b74
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x4b126c
mov dword [ebp - 0x182c], 0x4e6b80
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xfffffffa
cmp dword [0x51716c], 0
jne 0x4b12e6
push 0
push 0
push 0
push 1
push str.Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
call dword [0x517178]
mov dword [0x51716c], eax
cmp dword [0x51716c], 0
jne 0x4b12b6
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x1406f40
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
jmp 0x4b1377
mov edx, dword [0x4e6bc4]
push edx
mov eax, dword [ebp - 0x329c]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x329c]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x329c]
mov edx, dword [ecx]
push edx
mov eax, dword [0x51716c]
push eax
call dword [0x51717c]
push 0
movzx ecx, word [ebp - 0x3270]
push ecx
mov edx, dword [ebp - 0x3278]
push edx
mov eax, dword [0x51716c]
push eax
call dword [0x517180]
mov dword [ebp - 0x328c], eax
cmp dword [0x51716c], 0
jne 0x4b1325
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x15ef3c0
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
jmp 0x4b1377
mov edx, dword [ebp - 0x3040]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x324c]
push eax
mov ecx, dword [ebp - 0x182c]
push ecx
mov edx, dword [ebp - 0x328c]
push edx
call dword [0x517184]
mov dword [ebp - 0x824], eax
cmp dword [0x51716c], 0
jne 0x4b136f
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x16e3600
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
jmp 0x4b1377
xor edx, edx
jne 0x4b1276
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0xfffffffa
je 0x4b13a0
lea ecx, [ebp - 0x328c]
push ecx
lea edx, [ebp - 0x824]
push edx
mov ecx, dword [ebp - 0x329c]
call fcn.004b10a0
xor eax, eax
jmp 0x4b1888
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xfffffffb
cmp dword [ebp - 0x3040], 0x800000
jne 0x4b13d8
mov dword [ebp - 0x3294], 0x3300
push 4
lea ecx, [ebp - 0x3294]
push ecx
push 0x1f
mov edx, dword [ebp - 0x824]
push edx
call dword [0x517188]
push 0x10000000
push 0xffffffffffffffff
push str.Cache_Control:no_cache
mov eax, dword [ebp - 0x824]
push eax
call dword [0x51718c]
push 0x10000000
push 0xffffffffffffffff
push str.keep_alive
mov ecx, dword [ebp - 0x824]
push ecx
call dword [0x51718c]
push 0x10000000
push 0xffffffffffffffff
push str.Accept:_
mov edx, dword [ebp - 0x824]
push edx
call dword [0x51718c]
push 0x10000000
push 0xffffffffffffffff
push str.Accept_Language:zh_cn
mov eax, dword [ebp - 0x824]
push eax
call dword [0x51718c]
push 0x10000000
push 0xffffffffffffffff
lea ecx, [ebp - 0x3248]
push ecx
mov edx, dword [ebp - 0x824]
push edx
call dword [0x51718c]
mov eax, dword [ebp - 0x182c]
movzx ecx, word [eax]
cmp ecx, 0x50
jne 0x4b147e
push 0x10000000
push 0xffffffffffffffff
push str.Content_Type:application_x_www_form_urlencoded
mov edx, dword [ebp - 0x824]
push edx
call dword [0x51718c]
xor eax, eax
mov word [ebp - 0x408], ax
push 0x3fe
push 0
lea ecx, [ebp - 0x406]
push ecx
call fcn.00465660
add esp, 0xc
push str.User_Agent:Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
call fcn.00467534
add esp, 4
mov dword [ebp - 0x81c], eax
mov edx, dword [ebp - 0x81c]
shl edx, 1
push edx
push str.User_Agent:Mozilla_5.0__compatible__MSIE_10.0__Windows_NT_6.2___
lea eax, [ebp - 0x408]
push eax
call fcn.00469530
add esp, 0xc
push 0
mov ecx, dword [ebp - 0x81c]
lea edx, [ebp + ecx*2 - 0x40a]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
call fcn.004b2330
add esp, 0xc
push SysReAllocString
push 0xffffffffffffffff
lea edx, [ebp - 0x408]
push edx
mov eax, dword [ebp - 0x824]
push eax
call dword [0x51718c]
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], 0xfffffffc
mov dword [ebp - 0x80c], 0
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x4b1530
mov dword [ebp - 0x32a0], 0
jmp 0x4b1545
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
push ecx
call fcn.00465dc0
add esp, 4
mov dword [ebp - 0x32a0], eax
mov edx, dword [ebp - 0x32a0]
mov dword [ebp - 0x828], edx
mov dword [ebp - 0x3298], 0
jmp 0x4b156c
mov eax, dword [ebp - 0x3298]
add eax, 1
mov dword [ebp - 0x3298], eax
cmp dword [ebp - 0x3298], 3
jge 0x4b1648
push 0
mov ecx, dword [ebp - 0x828]
push ecx
mov edx, dword [ebp - 0x828]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x18]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x824]
push edx
call dword [0x517190]
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0
jne 0x4b15ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
add eax, 0x17d7840
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
cmp dword [ebp - 0x1830], 0x2efd
je 0x4b15e7
cmp dword [ebp - 0x1830], 0x2efe
je 0x4b15e7
jmp 0x4b1648
jmp 0x4b155d
push 0
mov edx, dword [ebp - 0x824]
push edx
call dword [0x517194]
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0
je 0x4b160c
jmp 0x4b1648
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1830], eax
mov eax, dword [ebp - 0x1830]
add eax, 0x18cba80
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
cmp dword [ebp - 0x1830], 0x2efd
je 0x4b1643
cmp dword [ebp - 0x1830], 0x2efe
je 0x4b1643
jmp 0x4b1648
jmp 0x4b155d
cmp dword [ebp - 0x80c], 0
jne 0x4b1671
lea edx, [ebp - 0x328c]
push edx
lea eax, [ebp - 0x824]
push eax
mov ecx, dword [ebp - 0x329c]
call fcn.004b10a0
xor eax, eax
jmp 0x4b1888
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], 0xfffffffd
xor edx, edx
mov word [ebp - 0x808], dx
push 0x3fe
push 0
lea eax, [ebp - 0x806]
push eax
call fcn.00465660
add esp, 0xc
mov dword [ebp - 0x814], 0x400
push 0
lea ecx, [ebp - 0x814]
push ecx
lea edx, [ebp - 0x808]
push edx
push 0
push 0x13
mov eax, dword [ebp - 0x824]
push eax
call dword [0x517198]
cmp dword [ebp - 0x814], 0
jbe 0x4b16e5
lea ecx, [ebp - 0x808]
push ecx
call sub.ntdll.dll__wtoi
add esp, 4
mov edx, dword [ebp + 8]
mov dword [edx + 4], eax
jmp 0x4b16ef
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xfffffffe
mov dword [ebp - 0x818], 0x2000
mov dword [ebp - 0x3048], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x303c], 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x820], edx
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x824]
push ecx
call dword [0x51719c]
test eax, eax
je 0x4b180b
cmp dword [ebp - 4], 1
jae 0x4b174e
jmp 0x4b180b
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0xfffffffe
jne 0x4b1761
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xc8
mov ecx, dword [ebp - 0x810]
add ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x818]
sub edx, 1
cmp ecx, edx
jbe 0x4b17c0
mov eax, dword [ebp - 0x818]
shl eax, 1
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
push ecx
mov edx, dword [ebp - 0x820]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov dword [ebp - 0x3048], eax
mov eax, dword [ebp - 0x3048]
mov dword [ebp - 0x820], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x820]
mov dword [ecx + 0xc], edx
lea eax, [ebp - 0x303c]
push eax
mov ecx, dword [ebp - 0x818]
sub ecx, dword [ebp - 0x810]
push ecx
mov edx, dword [ebp - 0x820]
add edx, dword [ebp - 0x810]
push edx
mov eax, dword [ebp - 0x824]
push eax
call dword [0x5171a0]
test eax, eax
jne 0x4b17f4
jmp 0x4b180b
mov ecx, dword [ebp - 0x810]
add ecx, dword [ebp - 0x303c]
mov dword [ebp - 0x810], ecx
jmp 0x4b172a
mov edx, dword [ebp + 8]
cmp dword [edx + 0x1c], 0
jne 0x4b1851
mov eax, dword [ebp - 0x820]
add eax, dword [ebp - 0x810]
mov byte [eax], 0
push 0
mov ecx, dword [ebp - 0x820]
push ecx
call fcn.004b2380
add esp, 8
mov dword [ebp - 0x820], eax
mov edx, dword [ebp - 0x820]
push edx
call fcn.00465dc0
add esp, 4
mov dword [ebp - 0x3290], eax
jmp 0x4b185d
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x3290], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x3290]
mov dword [ecx + 8], edx
lea eax, [ebp - 0x328c]
push eax
lea ecx, [ebp - 0x824]
push ecx
mov ecx, dword [ebp - 0x329c]
call fcn.004b10a0
mov eax, dword [ebp - 0x3290]
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004606fe
mov esp, ebp
pop ebp
ret 4