Function at 0x4bb3a3
Capabilities:
Get geographical location
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push 0x1c
call fcn.0051fdd5
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 7
rep stosd dword es:[edi], eax
mov dword [ebx], 0x8cd268
push ebx
mov eax, esp
push eax
call fcn.00411e82
pop ebx
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov eax, str.kyfw.12306.cn
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00411684
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4bb419
push ebx
call fcn.0051fddb
add esp, 4
push 0x1f40
push 0x1bb
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4bb448
push ebx
call fcn.0051fddb
add esp, 4
cmp dword [ebp - 0x20], 0
jne 0x4bb45c
mov eax, 0x9152cd
jmp 0x4bb7e2
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00422599
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4bb482
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x8d084a
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4bb4b7
mov eax, 0x6024b4
push eax
push 4
mov ebx, 0x520cd0
call fcn.0051fded
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x4bb51f
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov eax, 0x8d084a
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040694f
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bb517
push ebx
call fcn.0051fddb
add esp, 4
mov eax, dword [ebp - 0x24]
jmp 0x4bb7e2
push 0x8f83c0
mov ebx, dword [ebp + 0x18]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x4bb559
mov eax, 0x9152d6
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bb550
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x4bb573
mov eax, 0x9152d9
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bb56f
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 1
push dword [ebp + 0x10]
call fcn.0043cfc8
mov dword [ebp - 0x18], eax
push 0x9152dc
mov ebx, dword [ebp + 0x14]
push dword [ebx]
call fcn.0040102b
add esp, 8
cmp eax, 0
mov eax, 0
sete al
test eax, eax
je 0x4bb5af
mov eax, 0x8a615f
jmp 0x4bb5b4
mov eax, 0x9152df
mov dword [ebp - 0x20], eax
push dword [ebp + 0x18]
call fcn.004b0fbb
mov dword [ebp - 0x24], eax
push dword [ebp + 0x20]
call fcn.004b10c0
mov dword [ebp - 0x28], eax
push str.studentInfoDTO.province_code11studentInfoDTO.school_codestudentInfoDTO.school_name_E7_AE_80_E7_A0_81_2F_E6_B1_89_E5_AD_97studentInfoDTO.departmentstudentInfoDTO.school_classstudentInfoDTO.student_nostudentInfoDTO.school_system1studentInfoDTO.enter_year2014studentInfoDTO.preference_card_nostudentInfoDTO.preference_from_station_namestudentInfoDTO.preference_from_station_codestudentInfoDTO.preference_to_station_namestudentInfoDTO.preference_to_station_code
push dword [ebp - 0x28]
push str.mobile_nophone_noemailaddresspostalcodepassenger_type
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
push str.passenger_id_no
push dword [ebp - 0x24]
push str.passenger_id_type_code
push dword [ebp - 0xc]
push str._birthDatecountry_code
push dword [ebp - 0x20]
push str.sex_code
push dword [ebp - 0x18]
push str.passenger_name
mov ecx, 0xd
call fcn.0040113b
add esp, 0x34
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4bb624
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bb634
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4bb644
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4bb654
push ebx
call fcn.0051fddb
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4bb668
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 0x1f40
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.x_requested_with:_XMLHttpRequest_r_nAccept_Language:_zh_cn_r_nReferer:_https:__kyfw.12306.cn_otn_passengers_addInit_r_nAccept:___r_nContent_Type:_application_x_www_form_urlencoded__charsetUTF_8_r_nAccept_Encoding:_gzip__deflate_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__rv:34.0__Gecko_20100101_Firefox_34.0_r_nConnection:_Keep_Alive_r_nCache_Control:_no_cache
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 8]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
push 1
mov eax, str.https:__kyfw.12306.cn_otn_passengers_add
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 4]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4bb6e7
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4bb6f7
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4bb707
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4bb717
push ebx
call fcn.0051fddb
add esp, 4
lea eax, [ebp - 0x2c]
push eax
call fcn.0040d9f4
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4bb733
push ebx
call fcn.0051fddb
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4bb747
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0x6024b4
push dword [ebp - 0x14]
call fcn.0040102b
add esp, 8
cmp eax, 0
jne 0x4bb76e
mov eax, 0x8d0c37
jmp 0x4bb7e2
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str._data_:_flag_:true
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4bb79f
mov eax, 0x6024b4
push eax
push 4
mov ebx, 0x520cd0
call fcn.0051fded
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x4bb7ce
mov eax, 0x9152c4
jmp 0x4bb7e2
lea eax, [ebp - 0x14]
push eax
call fcn.00427145
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
jmp 0x4bb7e2
push eax
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4bb803
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4bb813
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4bb823
push ebx
call fcn.0051fddb
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4bb833
push ebx
call fcn.0051fddb
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x1c