Function at 0x578d50
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5947ce
mov eax, dword fs:[0]
push eax
sub esp, 0x230
mov eax, dword [0x61b660]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x1e4]
add eax, 0x30
push eax
push str.GET
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00407200
add esp, 0xc
mov dword [ebp - 0x1e8], eax
mov edx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], edx
mov dword [ebp - 4], 0
push str._HTTP_1.1
mov eax, dword [ebp - 0x1ec]
push eax
lea ecx, [ebp - 0x48]
push ecx
call fcn.00407330
add esp, 0xc
mov dword [ebp - 0x1f0], eax
mov edx, dword [ebp - 0x1f0]
mov dword [ebp - 0x1f4], edx
mov byte [ebp - 4], 1
push 0x5a724c
mov eax, dword [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.00407330
add esp, 0xc
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x1f8]
mov dword [ebp - 0x178], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x178]
push eax
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00405ab0
mov byte [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406060
mov byte [ebp - 4], 1
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406060
mov byte [ebp - 4], 0
mov dword [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x4c
push ecx
push str.Host:
lea edx, [ebp - 0x80]
push edx
call fcn.00407200
add esp, 0xc
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x200], eax
mov dword [ebp - 4], 6
push 0x5a724c
mov ecx, dword [ebp - 0x200]
push ecx
lea edx, [ebp - 0x9c]
push edx
call fcn.00407330
add esp, 0xc
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x17c], eax
mov byte [ebp - 4], 7
mov ecx, dword [0x5a6ffc]
push ecx
push 0
mov edx, dword [ebp - 0x17c]
push edx
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406240
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406060
mov byte [ebp - 4], 6
mov dword [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
push str.Connection:_keep_alive__r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
push eax
push str.Connection:_keep_alive__r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x84
call fcn.00406100
mov dword [ebp - 0x184], eax
push 0
mov ecx, dword [ebp - 0x184]
push ecx
call fcn.00529925
add esp, 8
cmp eax, 0xffffffff
je 0x579167
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x84
call fcn.00406100
mov dword [ebp - 0x188], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x16c], esp
mov edx, dword [ebp - 0x188]
push edx
call fcn.00405860
mov dword [ebp - 0x208], eax
call fcn.00575d80
add esp, 0x1c
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], edx
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x148], ecx
lea edx, [ebp - 0x1a1]
mov dword [ebp - 0x1a0], edx
lea eax, [ebp - 0x168]
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], 0xa
push 0
push 0
lea ecx, [ebp - 0x168]
call fcn.00406060
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x168]
push ecx
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp - 0x14c]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.00575ff0
add esp, 0x10
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406060
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x168]
push edx
push str.Range:_bytes
lea eax, [ebp - 0xd4]
push eax
call fcn.00407200
add esp, 0xc
mov dword [ebp - 0x218], eax
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x21c], ecx
mov byte [ebp - 4], 0xd
push 0x5a7214
mov edx, dword [ebp - 0x21c]
push edx
lea eax, [ebp - 0xf0]
push eax
call fcn.00407330
add esp, 0xc
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x224], ecx
mov byte [ebp - 4], 0xe
push 0x5a724c
mov edx, dword [ebp - 0x224]
push edx
lea eax, [ebp - 0x10c]
push eax
call fcn.00407330
add esp, 0xc
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [0x5a6ffc]
push edx
push 0
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406240
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.00406060
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0x11
push 0
push 1
lea ecx, [ebp - 0xf0]
call fcn.00406060
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00406060
mov byte [ebp - 4], 0xb
mov dword [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0x168]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8__r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
push ecx
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8__r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
push str.User_Agent:_Mozilla_5.0__Windows_NT_5.1__AppleWebKit_537.17__KHTML__like_Gecko__Chrome_24.0.1312.57_Safari_537.17_SE_2.X_MetaSr_1.0_r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
push edx
push str.User_Agent:_Mozilla_5.0__Windows_NT_5.1__AppleWebKit_537.17__KHTML__like_Gecko__Chrome_24.0.1312.57_Safari_537.17_SE_2.X_MetaSr_1.0_r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
push str.Accept_Encoding:_gzip_deflate_sdch_r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
push eax
push str.Accept_Encoding:_gzip_deflate_sdch_r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
push str.Accept_Language:_zh_CN_zh_q0.8_r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1b8], eax
mov ecx, dword [ebp - 0x1b8]
push ecx
push str.Accept_Language:_zh_CN_zh_q0.8_r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
push str.Accept_Charset:_GBK_utf_8_q0.7__q0.3_r_n
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1bc], eax
mov edx, dword [ebp - 0x1bc]
push edx
push str.Accept_Charset:_GBK_utf_8_q0.7__q0.3_r_n
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [eax + 0x2c]
xor edx, edx
cmp dword [ecx + 0x24], 0
sete dl
movzx eax, dl
test eax, eax
je 0x5792a7
push 0x5a72aa
lea ecx, [ebp - 0x128]
call fcn.00405860
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x230], ecx
mov dword [ebp - 4], 0x14
mov edx, dword [ebp - 0x174]
or edx, 1
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x234], eax
jmp 0x5792fc
push 0x5a724c
mov ecx, dword [ebp - 0x1e4]
mov edx, dword [ecx + 0x2c]
add edx, 0x14
push edx
lea eax, [ebp - 0x144]
push eax
call fcn.0040e850
add esp, 0xc
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 4], 0x15
mov edx, dword [ebp - 0x174]
or edx, 2
mov dword [ebp - 0x174], edx
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x170], ecx
mov edx, dword [0x5a6ffc]
push edx
push 0
mov eax, dword [ebp - 0x170]
push eax
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406240
mov dword [ebp - 4], 0x14
mov ecx, dword [ebp - 0x174]
and ecx, 2
je 0x579359
and dword [ebp - 0x174], 0xfffffffd
mov dword [ebp - 4], 0x16
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.00406060
mov byte [ebp - 4], 0x14
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x174]
and edx, 1
je 0x57938f
and dword [ebp - 0x174], 0xfffffffe
mov dword [ebp - 4], 0x17
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.00406060
mov dword [ebp - 4], 0xffffffff
push 0x5a724c
call fcn.005291f0
add esp, 4
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
push eax
push 0x5a724c
mov ecx, dword [ebp - 0x1e4]
add ecx, 0x68
call fcn.00406360
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052927b
mov esp, ebp
pop ebp
ret