Function at 0x496d16
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0xa4
mov eax, dword [0x614c9c]
mov dword [ebp - 0x84], eax
mov eax, 0
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
mov dword [ebp - 0x8c], 0xffffffff
mov eax, 0
mov dword [ebp - 0x58], 0
mov eax, 0
mov dword [ebp - 0x4c], 0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.OLEAUT32.DLL_VariantInit]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.OLEAUT32.DLL_VariantInit]
mov eax, 0xb
xchg edx, eax
lea eax, [ebp - 0x30]
mov dword [eax], edx
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x30]
mov dword [eax + 8], edx
mov eax, dword [ebp + 8]
mov edx, dword [0x60ec2c]
cmp eax, edx
jne 0x496db6
mov dword [ebp - 0xc], 0x621624
mov eax, 0xa
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax], edx
jmp 0x496f81
mov eax, dword [ebp + 8]
mov edx, dword [0x60ec38]
cmp eax, edx
jne 0x496dda
mov dword [ebp - 0xc], str.HEAD
mov eax, 0xa
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax], edx
jmp 0x496f81
xor eax, eax
inc eax
je 0x496f73
mov eax, dword [ebp + 8]
mov edx, dword [0x60ec34]
cmp eax, edx
jne 0x496dfc
mov dword [ebp - 0xc], str.POST
jmp 0x496e83
mov eax, dword [0x616b24]
mov eax, dword [eax + 8]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0xc]
mov edx, eax
mov eax, dword [ebp + 8]
shl eax, 4
add eax, edx
sub eax, 0x10
mov dword [ebp - 0xac], eax
push dword [ebp - 0xac]
call fcn.0044dee5
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0xac]
call fcn.0042f419
mov eax, 7
xchg edx, eax
lea eax, [ebp - 0x6c]
mov dword [eax], edx
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x6c]
mov dword [eax + 4], edx
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x6c]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x6c]
push eax
call fcn.00432a11
push eax
call dword [sym.imp.MSVCRT.DLL__wcsupr]
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, 0
mov edx, dword [ebp + 0x14]
cmp eax, edx
jne 0x496e9f
mov eax, 0xa
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax], edx
jmp 0x496f71
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 0x29
jne 0x496f3d
push dword [ebp + 0x14]
call fcn.004652f5
mov dword [ebp - 0xa4], eax
push dword [ebp + 0x14]
call fcn.004652b4
mov dword [ebp - 0x8c], eax
push dword [ebp - 0x8c]
push 0
push 0x11
call dword [sym.imp.OLEAUT32.DLL_SafeArrayCreateVector]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0xa0]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayAccessData]
push dword [ebp - 0x8c]
push dword [ebp - 0xa4]
push dword [ebp - 0x58]
call dword [sym.imp.MSVCRT.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xa0]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayUnaccessData]
mov eax, 0x2000
or eax, 0x11
mov edx, eax
lea eax, [ebp - 0x40]
mov dword [eax], edx
mov eax, dword [ebp - 0xa0]
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax + 8], edx
jmp 0x496f71
mov eax, 8
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax], edx
xor eax, eax
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp + 0x14]
call fcn.00432a3b
push eax
call dword [sym.imp.OLEAUT32.DLL_SysAllocString]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xchg edx, eax
lea eax, [ebp - 0x40]
mov dword [eax + 8], edx
jmp 0x496f81
call 0x496f78
pop eax
push eax
push 0x64
call fcn.004252dd
mov dword [ebp - 0x44], 0x621640
mov eax, 0
mov dword [ebp - 0x48], 0
lea eax, [ebp - 0x20]
push eax
push str.WinHttp.WinHttpRequest.5.1
call dword [sym.imp.OLE32.DLL_CLSIDFromProgID]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x496fca
push dword [ebp - 0x44]
push dword [0x6166b8]
push 1
push 0
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.OLE32.DLL_CoCreateInstance]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x49704c
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
push dword [ebp - 0xc]
call dword [sym.imp.OLEAUT32.DLL_SysAllocString]
mov dword [ebp - 0x50], eax
push dword [ebp + 0xc]
call fcn.00432a11
push eax
call dword [sym.imp.OLEAUT32.DLL_SysAllocString]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x30]
mov eax, dword [eax + 0xc]
push eax
lea eax, [ebp - 0x30]
mov eax, dword [eax + 8]
push eax
lea eax, [ebp - 0x30]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x30]
mov eax, dword [eax]
push eax
push dword [ebp - 0x54]
push dword [ebp - 0x50]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x24]
call eax
mov dword [ebp - 0x10], eax
push dword [ebp - 0x50]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
push dword [ebp - 0x54]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x49718f
mov eax, dword [ebp + 0x10]
cmp eax, 0
je 0x497116
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0xc]
xchg edx, eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 4]
xchg edx, eax
xchg edx, eax
shl eax, 4
add eax, edx
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x74], eax
jmp 0x49710a
push dword [ebp - 0x70]
call fcn.0044f689
push eax
call fcn.00432a11
push eax
call dword [sym.imp.OLEAUT32.DLL_SysAllocString]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x70]
add eax, 0x10
mov dword [ebp - 0x70], eax
push dword [ebp - 0x70]
call fcn.00432a11
push eax
call dword [sym.imp.OLEAUT32.DLL_SysAllocString]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x70]
add eax, 0x10
mov dword [ebp - 0x70], eax
push dword [ebp - 0x50]
push dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x28]
call eax
push dword [ebp - 0x50]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
push dword [ebp - 0x54]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
cmp eax, edx
jb 0x4970a1
jmp 0x497155
push str.application_x_www_form_urlencoded
push str.Content_Type
push dword [ebp - 0x44]
push dword [ebp - 0x48]
call fcn.00496cc7
push str.UTF_8
push str.Accept_Charset
push dword [ebp - 0x44]
push dword [ebp - 0x48]
call fcn.00496cc7
push str.Mozilla_5.0__Windows_NT_6.1__Win64__x64_
push str.User_Agent
push dword [ebp - 0x44]
push dword [ebp - 0x48]
call fcn.00496cc7
lea eax, [ebp - 0x40]
mov eax, dword [eax + 0xc]
push eax
lea eax, [ebp - 0x40]
mov eax, dword [eax + 8]
push eax
lea eax, [ebp - 0x40]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x40]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x34]
call eax
mov dword [ebp - 0x10], eax
jmp 0x49719a
mov eax, dword [ebp - 0x84]
jmp 0x4973e9
mov eax, 0
mov edx, dword [ebp - 0xa0]
cmp eax, edx
sete al
xor ah, ah
cwde
xor al, 1
cmp eax, 0
je 0x4971c2
push dword [ebp - 0xa0]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayDestroy]
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x49728b
mov eax, dword [ebp + 0x20]
cmp eax, 0
je 0x497260
push 3
call fcn.00441382
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x38]
call eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x497239
push dword [ebp - 0x8c]
push dword [ebp - 0x88]
call fcn.0044cf7e
lea eax, [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x30]
call eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x497260
push dword [ebp - 0x58]
call fcn.00496b0e
push eax
push dword [ebp - 0x88]
call fcn.004408ee
push dword [ebp - 0x58]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
mov eax, dword [ebp - 0x4c]
cmp eax, 0
je 0x497273
push dword [ebp - 0x4c]
call dword [sym.imp.OLEAUT32.DLL_SysFreeString]
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 0x44]
call eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
jl 0x4973c8
lea eax, [ebp - 0x40]
mov eax, dword [eax + 8]
mov dword [ebp - 0x80], eax
mov eax, 0x2000
or eax, 0x11
push eax
pop edx
xchg edx, eax
lea eax, [ebp - 0x40]
mov eax, dword [eax]
xchg edx, eax
cmp eax, edx
jne 0x4972d2
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayGetDim]
mov edx, eax
mov eax, 1
cmp eax, edx
jne 0x4972d2
jmp 0x4972d6
xor eax, eax
jmp 0x4972d9
xor eax, eax
inc eax
cmp eax, 0
je 0x497387
mov eax, 0
mov dword [ebp - 0x78], 0
mov eax, 0
mov dword [ebp - 0x7c], 0
lea eax, [ebp - 0x78]
push eax
push 1
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayGetLBound]
lea eax, [ebp - 0x7c]
push eax
push 1
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayGetUBound]
lea eax, [ebp - 0x58]
push eax
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayAccessData]
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
sub eax, edx
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x18]
cmp eax, 0
je 0x497350
push dword [ebp - 0x8c]
push dword [ebp - 0x58]
call fcn.00466d04
jmp 0x497378
mov eax, dword [ebp + 0x1c]
cmp eax, 0
je 0x49736a
push dword [ebp - 0x8c]
push dword [ebp - 0x58]
call fcn.00495c37
jmp 0x497378
push dword [ebp - 0x8c]
push dword [ebp - 0x58]
call fcn.004959ba
mov dword [ebp - 0x84], eax
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayUnaccessData]
lea eax, [ebp - 0x40]
mov eax, dword [eax]
and eax, 0x2000
cmp eax, 0
jle 0x4973a1
push dword [ebp - 0x80]
call dword [sym.imp.OLEAUT32.DLL_SafeArrayDestroy]
mov eax, dword [ebp + 0x20]
cmp eax, 0
je 0x4973c8
push dword [ebp - 0x84]
push dword [ebp - 0x88]
call fcn.004408ee
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x48]
cmp eax, 0
je 0x4973e3
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
push eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 8]
call eax
mov eax, dword [ebp - 0x84]
leave
ret 0x1c