Function at 0x484790
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x4f9bf8
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5e4ce0]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebp, ecx
mov esi, dword [esp + 0x60]
mov ecx, esi
call fcn.00451240
push str.GET
mov ecx, esi
call fcn.004516b0
mov edi, dword [esp + 0x50]
lea ecx, [edi + 0x250]
call fcn.004c49f0
test eax, eax
je 0x4847ea
mov eax, dword [esp + 0x40]
push eax
jmp 0x484810
mov ecx, dword [esp + 0x48]
push ecx
mov ecx, esi
call fcn.004516b0
mov ebx, dword [esp + 0x4c]
test ebx, ebx
je 0x484817
cmp byte [ebx], 0
je 0x484817
push 0x5b42d4
mov ecx, esi
call fcn.004516b0
push ebx
mov ecx, esi
call fcn.004516b0
push str._HTTP_1.1_r_n
mov ecx, esi
call fcn.004516b0
push str.Host:
mov ecx, esi
call fcn.004516b0
mov edx, dword [esp + 0x44]
push edx
lea ecx, [esp + 0x18]
call fcn.00451b50
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0
call fcn.00452970
lea ecx, [esp + 0x14]
call fcn.004c06c0
push eax
mov ecx, esi
call fcn.004516b0
push 0x5aff2c
mov ecx, esi
call fcn.004516b0
push str.User_Agent:_Mozilla_5.0__Windows__U__Windows_NT_5.1__en_US__rv:1.7.7__Gecko_20050414_Firefox_1.0.3_r_n
mov ecx, esi
call fcn.004516b0
push esi
push edi
mov ecx, ebp
call fcn.00483e80
push str.Accept:_text_xml_application_xml_application_xhtmlxml_text_html_q0.9_text_plain_q0.8_image_png___q0.5_r_n
mov ecx, esi
call fcn.004516b0
lea ebx, [edi + 0x19c]
mov ecx, ebx
call fcn.004c49f0
test eax, eax
mov ecx, esi
je 0x4848c1
push str.Accept_Charset:
call fcn.004516b0
mov ecx, ebx
call fcn.004c06c0
push eax
mov ecx, esi
call fcn.004516b0
push 0x5aff2c
mov ecx, esi
jmp 0x4848c6
push str.Accept_Charset:_ISO_8859_1_utf_8_q0.7__q0.7_r_n
call fcn.004516b0
cmp byte [edi + 0x20e], 0
mov ecx, esi
je 0x4848dd
push str.Accept_Encoding:_gzip_r_n
jmp 0x4848e2
push str.Accept_Encoding:__r_n
call fcn.004516b0
lea ebx, [edi + 0x1b8]
mov ecx, ebx
call fcn.004c49f0
test eax, eax
mov ecx, esi
je 0x48491c
push str.Accept_Language:
call fcn.004516b0
mov ecx, ebx
call fcn.004c06c0
push eax
mov ecx, esi
call fcn.004516b0
push 0x5aff2c
mov ecx, esi
jmp 0x484921
push str.Accept_Language:_en_us_en_q0.5_r_n
call fcn.004516b0
push str.Keep_Alive:_300_r_n
mov ecx, esi
call fcn.004516b0
push str.Connection:_keep_alive_r_n
mov ecx, esi
call fcn.004516b0
lea ebx, [edi + 0x1d4]
mov ecx, ebx
call fcn.004c49f0
test eax, eax
je 0x484976
push str.Authorization:_NTLM
mov ecx, esi
call fcn.004516b0
mov ecx, ebx
call fcn.004c06c0
push eax
mov ecx, esi
call fcn.004516b0
push 0x5aff2c
mov ecx, esi
call fcn.004516b0
lea ebx, [edi + 0x148]
mov ecx, ebx
call fcn.004c49f0
test eax, eax
je 0x4849a7
push str.Referer:
mov ecx, esi
call fcn.004516b0
push ebx
mov ecx, esi
call fcn.00452a30
push 0x5aff2c
mov ecx, esi
call fcn.004516b0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push esi
push eax
push ecx
push edi
mov ecx, ebp
call fcn.004840b0
push esi
push edi
mov ecx, ebp
call fcn.00483f50
push 0x5aff2c
mov ecx, esi
call fcn.004516b0
lea ecx, [esp + 0x14]
mov dword [esp + 0x38], 0xffffffff
call fcn.00451e70
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x28
ret 0x24