Function at 0x402609
Capabilities:
Reference http user-agent string

Disassembly:
mov eax, 0x40afc7
call fcn.0040a890
sub esp, 0x14
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x10], ebx
mov esi, 0x40faa4
lea ecx, [ebp - 0x14]
push esi
mov dword [ebp - 4], 2
call fcn.00406638
mov byte [ebp - 4], 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.00408c13
test al, al
jne 0x40299e
cmp dword [ebp + 0x10], ebx
je 0x40299e
push dword [ebp + 0x10]
lea eax, [ebp + 0xc]
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push eax
call fcn.0040659c
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 3
push eax
call fcn.004019bd
cmp al, bl
je 0x402970
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp - 0x1c]
push str.GET__
push eax
call fcn.00408b43
push str._HTTP_1.0_r_n
push eax
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 5
push eax
call fcn.00408a97
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x20]
push str.Host:
push eax
call fcn.00408b43
mov esi, 0x40f384
mov byte [ebp - 4], 8
push esi
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00408a97
push eax
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 9
call fcn.0040861c
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00406565
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
push str.Connection:_close_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push str.Cache_Control:_max_age0_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
push str.User_Agent:_Mozilla_5.0__Windows_NT_5.1__AppleWebKit_536.11__KHTML__like_Gecko__Chrome_20.0.1132.57_Safari_536.11_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8._r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
push str.Accept_Encoding:_gzip_deflate_sdch_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push str.Accept_Language:_zh_CN_zh_q0.8_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push str.Accept_Charset:_GBK_utf_8_q0.7__q0.3_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push str.Cookie:_BAIDUID4551B3A873310A1D9F1D8F3847FADA52:FG1__SSUDBTSP1373544335__SSUDBVkcDN6OGJ2RWV5Y3h6a1JYYUlsTklyOGZIdnpCdnpWUXotclo2WmV_eVBMQVpTQVFBQUFBJCQAAAAAAAAAAAEAAACBxKA1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI_f3lGPn95RWF__BAIDU_WISE_UIDbd_1374714064_282__Hm_lvt_9f14aaa038bbba8b12ec2a4a3e51d2541381926448__BDSVRTM1__H_PS_PSSID3635_1436_2981_3545_3448_r_n
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push esi
lea ecx, [ebp + 0x10]
call fcn.004085a8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [ebp + 0x10]
call fcn.0040628c
push eax
lea ecx, [ebp + 0x10]
call fcn.004062b4
push eax
push dword [ebp - 0x18]
call fcn.00402198
test al, al
je 0x402928
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x20]
push dword [ebp - 0x18]
push eax
call fcn.00402406
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
call fcn.0040684f
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, 0x3e8
lea ecx, [ebp - 0x1c]
call fcn.00406271
mov byte [ebp - 4], 0xb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
push esi
push esi
lea ecx, [ebp - 0x1c]
call fcn.0040878c
push eax
push dword [ebp - 0x18]
call fcn.00405c38
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp eax, ebx
je 0x40291c
cmp eax, 0xffffffff
je 0x40291c
push eax
lea ecx, [ebp - 0x1c]
call fcn.00408739
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x14]
push eax
call fcn.0040861c
nop
nop
nop
nop
nop
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.00406565
jmp 0x402893
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.00406565
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push dword [ebp - 0x18]
call fcn.00404aa5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ecx, [ebp + 0x10]
mov byte [ebp - 4], 3
call fcn.00406565
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
call fcn.0040659c
jmp 0x402995
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp + 8]
push esi
call fcn.00406638
mov dword [ebp - 0x10], 1
jmp 0x4029be
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp + 8]
push esi
call fcn.00406638
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.00406565
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 1
call fcn.00406565
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], bl
call fcn.00406565
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x10