Function at 0x446049
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
push 8
call fcn.0048c4b6
add esp, 4
mov dword [ebp - 4], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 8], 0
cmp dword [ebp + 0x38], 0
je 0x446090
cmp dword [ebp + 0x34], 0
je 0x446090
xor eax, eax
jmp 0x446095
mov eax, 1
test eax, eax
je 0x4460a4
mov dword [ebp + 0x34], 0x5a
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.MSXML2.XMLHTTP
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x490710
call fcn.0048c4bc
add esp, 0x28
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x4460e9
mov eax, 0x5987d7
jmp 0x4466a2
fild dword [ebp + 0x34]
fstp qword [ebp - 0x10]
fld qword [ebp - 0x10]
fmul qword [0x598911]
fstp qword [ebp - 0x18]
fild dword [ebp + 0x34]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fmul qword [0x598911]
fstp qword [ebp - 0x28]
fild dword [ebp + 0x34]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x598911]
fstp qword [ebp - 0x38]
fild dword [ebp + 0x34]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fmul qword [0x598911]
fstp qword [ebp - 0x48]
push 0x80000601
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 0x80000601
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.setTimeouts
push 0x10030
push 0
push dword [ebp - 4]
push 6
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x4c
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0xa0000004
push 0
push dword [ebp + 8]
push 0xa0000004
push 0
push dword [ebp + 0xc]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x59e700
push 0x10030
push 0
push dword [ebp - 4]
push 5
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x40
cmp dword [ebp + 0x48], 0
mov eax, 0
sete al
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
je 0x446205
push 0x5987a9
mov ebx, dword [ebp + 0x44]
push dword [ebx]
call fcn.0040173b
add esp, 8
cmp eax, 0
je 0x446205
xor eax, eax
jmp 0x44620a
mov eax, 1
test eax, eax
je 0x446230
mov eax, str.application_x_www_form_urlencoded
push eax
mov ebx, dword [ebp + 0x44]
mov ebx, dword [ebx]
test ebx, ebx
je 0x44622a
push ebx
call fcn.0048c4b0
add esp, 4
pop eax
mov ebx, dword [ebp + 0x44]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.XMLHttpRequest
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.x_requested_with
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.setRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.XMLHttpRequest
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.x_requested_with
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.text_html_application_xhtmlxml_application_xml_q0.9___q0.8
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Accept
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.GB2312_utf_8_q0.7__q0.7
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Accept_Charset
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.gzip_deflate
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Accept_Encoding
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.zh_cn_zh_q0.5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Accept_Language
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.no_cache
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Cache_Control
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x59e7fa
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Keep_Alive
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Mozilla_5.0__Windows__U__Windows_NT_5.1__zh_CN__rv:1.9.2.16__Gecko_20110319_Firefox_3.6.16_QQDownload_1.7_FUZHU_3.981
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.User_Agent
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.http:__youxi.baidu.com_ogzq_select_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Referer
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.application_x_www_form_urlencoded
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Content_Type
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push 0x5987a9
mov ebx, dword [ebp + 0x1c]
push dword [ebx]
call fcn.0040173b
add esp, 8
cmp eax, 0
je 0x446549
push 0xa0000004
push 0
push dword [ebp + 0x1c]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Cookie
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.SetRequestHeader
push 0x10030
push 0
push dword [ebp - 4]
push 4
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x34
push 0
mov ebx, 0x48e8a0
call fcn.0048c4bc
add esp, 4
push 0xa0000004
push 0
push dword [ebp + 0x14]
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.send
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x48f4a0
call fcn.0048c4bc
add esp, 0x28
push 0
mov ebx, 0x48e8a0
call fcn.0048c4bc
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.Set_Cookie
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.GetResponseHeader
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x48f500
call fcn.0048c4bc
add esp, 0x28
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp + 0x24]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4465ec
push ebx
call fcn.0048c4b0
add esp, 4
pop eax
mov ebx, dword [ebp + 0x24]
mov dword [ebx], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.ResponseBody
push 0x10030
push 0
push dword [ebp - 4]
push 3
mov ebx, 0x48f470
call fcn.0048c4bc
add esp, 0x28
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
push 0x10031
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x48f600
call fcn.0048c4bc
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
push ebx
push 0x10031
push 0
push ebx
push 1
mov ebx, 0x48f5c0
call fcn.0048c4bc
add esp, 0x10
call fcn.0048c4b0
add esp, 4
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x44667f
push ebx
call fcn.0048c4b0
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
test eax, eax
je 0x44669d
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0048c4b6
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x4466a2
push eax
mov ebx, dword [ebp - 4]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x4906e0
call fcn.0048c4bc
add esp, 0x10
call fcn.0048c4b0
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4466d6
push ebx
call fcn.0048c4b0
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x64