Function at 0x416684
Capabilities:
Reference http user-agent string

Disassembly:
push 0x158
mov eax, 0x444382
call fcn.0042bcc0
mov ebx, ecx
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0x10]
push 0xf
mov dword [ebp - 0x160], eax
mov byte [ebp - 0x158], al
xor eax, eax
pop ecx
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x40], al
mov dword [ebp - 4], eax
cmp byte [ebx], al
jne 0x4166e7
mov dword [edi + 0x14], ecx
mov ecx, edi
mov dword [edi + 0x10], eax
mov byte [edi], al
lea eax, [ebp - 0x40]
push eax
call fcn.00402a78
push 0
push 1
jmp 0x416aec
push str.GET__URL__HTTP_1.1_r_nHost:__HOST__r_nConnection:_keep_alive_r_nAccept_:_application___json__text___javascript_____q0.01_r_nX_Requested_With:_XMLHttpRequest_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_37.0.2062.120_Safari_537.36_r_nAccept_Language:_en_zh_CN_q0.8_zh_q0.6_r_n
lea ecx, [ebp - 0x58]
call fcn.0040276c
cmp byte [ebp - 0x160], 0
mov byte [ebp - 4], 1
je 0x416717
mov esi, str.Accept_Encoding:_gzip_deflate_sdch_r_n
push esi
call fcn.004012d5
pop ecx
push eax
push esi
lea ecx, [ebp - 0x58]
call fcn.00402b6c
mov esi, 0x451f3c
push esi
call fcn.004012d5
pop ecx
push eax
push esi
lea ecx, [ebp - 0x58]
call fcn.00402b6c
push str._URL_
lea ecx, [ebp - 0x88]
call fcn.0040276c
push str._HOST_
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
call fcn.0040276c
mov byte [ebp - 4], 3
lea eax, [ebp - 0x88]
mov esi, dword [ebp - 0x78]
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x74], 0x10
push esi
cmovae eax, dword [ebp - 0x88]
push 0
push eax
call fcn.00402ca2
push 0xffffffffffffffff
push 0
push dword [ebp - 0x15c]
lea ecx, [ebp - 0x58]
push esi
push eax
call fcn.00403a70
mov esi, dword [ebp - 0x60]
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x58]
push esi
cmovae eax, dword [ebp - 0x70]
push 0
push eax
call fcn.00402ca2
push 0xffffffffffffffff
push 0
lea ecx, [ebx + 0x24]
push ecx
push esi
push eax
lea ecx, [ebp - 0x58]
call fcn.00403a70
lea eax, [ebp - 0x58]
mov ecx, ebx
push eax
call fcn.004170db
test al, al
jne 0x416804
xor ebx, ebx
mov dword [edi + 0x14], 0xf
lea eax, [ebp - 0x40]
mov dword [edi + 0x10], ebx
push eax
mov ecx, edi
mov byte [edi], bl
call fcn.00402a78
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.00402d99
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.00402d99
push ebx
push 1
lea ecx, [ebp - 0x58]
call fcn.00402d99
push ebx
jmp 0x4166e0
and dword [ebp - 0x18], 0
push 0xf
pop esi
mov dword [ebp - 0x14], esi
mov byte [ebp - 0x28], 0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
mov ecx, ebx
call fcn.00416ea0
cmp dword [ebp - 0x18], 0
jne 0x416849
xor ebx, ebx
mov dword [edi + 0x14], esi
lea eax, [ebp - 0x40]
mov dword [edi + 0x10], ebx
push eax
mov ecx, edi
mov byte [edi], bl
call fcn.00402a78
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00402d99
jmp 0x4167da
push str.HTTP_1.1_302
lea ecx, [ebp - 0xd0]
call fcn.0040276c
mov byte [ebp - 4], 5
lea eax, [ebp - 0xd0]
push dword [ebp - 0xc0]
cmp dword [ebp - 0xbc], 0x10
lea ecx, [ebp - 0x28]
push 0
cmovae eax, dword [ebp - 0xd0]
push eax
call fcn.00402ca2
cmp eax, 0xffffffff
je 0x416a4d
push str.Location:
lea ecx, [ebp - 0xa0]
call fcn.0040276c
mov byte [ebp - 4], 6
lea eax, [ebp - 0xa0]
push dword [ebp - 0x90]
cmp dword [ebp - 0x8c], 0x10
lea ecx, [ebp - 0x28]
push 0
cmovae eax, dword [ebp - 0xa0]
push eax
call fcn.00402ca2
mov esi, eax
cmp esi, 0xffffffff
je 0x416a3a
push 0x451f3c
lea ecx, [ebp - 0xb8]
call fcn.0040276c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb8]
push dword [ebp - 0xa8]
cmp dword [ebp - 0xa4], 0x10
push esi
cmovae ecx, dword [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402ca2
cmp eax, 0xffffffff
je 0x416a2b
mov ecx, dword [ebp - 0x90]
sub eax, ecx
sub eax, esi
push eax
lea eax, [ecx + esi]
push eax
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x28]
call fcn.0040281c
mov byte [ebp - 4], 8
lea eax, [ebp - 0xe8]
cmp dword [ebp - 0xd4], 0x10
lea ecx, [ebp - 0x118]
cmovae eax, dword [ebp - 0xe8]
push eax
call fcn.0040276c
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x118]
call fcn.00416456
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0xf0], 0
jne 0x4169cc
push 0x44d05a
mov ecx, edi
call fcn.0040276c
xor esi, esi
xor ebx, ebx
inc esi
push ebx
push esi
lea ecx, [ebp - 0x100]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x118]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0xe8]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0xb8]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0xa0]
call fcn.00402d99
jmp 0x416ab2
push 0x3c
xor ebx, ebx
lea eax, [ebp - 0x154]
push ebx
push eax
call fcn.0042b470
sub esp, 0xc
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.00402746
lea ecx, [ebp - 0x154]
call fcn.00416535
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xe8]
push dword [ebp - 0x158]
lea ecx, [ebp - 0x154]
push eax
push edi
call fcn.00416684
xor esi, esi
lea ecx, [ebp - 0x130]
push ebx
inc esi
push esi
call fcn.00402d99
jmp 0x416986
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402d99
push 0
push 1
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.00402d99
mov esi, str.Transfer_Encoding:_chunked
push esi
call fcn.004012d5
pop ecx
push eax
push 0
push esi
lea ecx, [ebp - 0x28]
call fcn.00402ca2
cmp eax, 0xffffffff
je 0x416a81
lea eax, [ebp - 0x40]
mov dword [ebp - 0x158], ebx
push eax
lea ecx, [ebp - 0x158]
call fcn.004171ca
jmp 0x416a96
lea eax, [ebp - 0x28]
push eax
call fcn.00416f5a
lea ecx, [ebp - 0x40]
push ecx
push eax
mov ecx, ebx
call fcn.00416e3c
xor ebx, ebx
mov dword [edi + 0x14], 0xf
lea eax, [ebp - 0x40]
mov dword [edi + 0x10], ebx
push eax
mov ecx, edi
mov byte [edi], bl
call fcn.00402a78
xor esi, esi
inc esi
push ebx
push esi
lea ecx, [ebp - 0xd0]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x28]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x70]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x88]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x58]
call fcn.00402d99
push ebx
push esi
lea ecx, [ebp - 0x40]
call fcn.00402d99
mov eax, edi
call fcn.0042bc6f
ret 0xc