Function at 0x40b12b
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push 8
call fcn.00414cf0
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x4d5656
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0
push 0
push 0
push 1
mov ebx, 0x4166e0
call fcn.00414cea
add esp, 0x10
push 0
push 0
push 0
push getpeername
push 0
push 0x4d5cc4
push getpeername
push 0
push str.Mozilla_5.0__iPhone_84__CPU_iPhone_OS_10_3_3_like_Mac_OS_X__AppleWebKit_603.3.8__KHTML__like_Gecko__Version_10.0_MQQBrowser_7.8.0_Mobile_14G60_Safari_8536.25_MttCustomUA_2_QBWebViewType_1_WKType_1_r_nMozilla_5.0__Linux__Android_7.0__STF_AL10_Build_HUAWEISTF_AL10__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_53.0.2785.49_Mobile_MQQBrowser_6.2_TBS_043508_Safari_537.36_V1_AND_SQ_7.2.0_730_YYB_D_QQ_7.2.0.3270_NetType_4G_WebP_0.3.0_Pixel_1080_r_nMozilla_5.0__iPhone__CPU_iPhone_OS_10_3_3_like_Mac_OS_X__AppleWebKit_603.3.8__KHTML__like_Gecko__Mobile_14G60_MicroMessenger_6.5.18_NetType_WIFI_Language_en_r_nMozilla_5.0__Linux__Android_5.1.1__vivo_Xplay5A_Build_LMY47V__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_48.0.2564.116_Mobile_Safari_537.36_T7_9.3_baiduboxapp_9.3.0.10__Baidu__P1_5.1.1__r_nMozilla_5.0__Linux__U__Android_7.0__zh_cn__STF_AL00_Build_HUAWEISTF_AL00__AppleWebKit_537.36__KHTML__like_Gecko_Version_4.0_Chrome_37.0.0.0_MQQBrowser_7.9_Mobile_Safari_537.36_r_nMozilla_5.0__Linux__Android_6.0__LEX626_Build_HEXCNFN5902606111S__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_35.0.1916.138_Mobile_Safari_537.36_T7_7.4_baiduboxapp_8.3.1__Baidu__P1_6.0__r_nMozilla_5.0__iPhone_92__CPU_iPhone_OS_10_3_2_like_Mac_OS_X__AppleWebKit_603.2.4__KHTML__like_Gecko__Version_10.0_MQQBrowser_7.7.2_Mobile_14F89_Safari_8536.25_MttCustomUA_2_QBWebViewType_1_WKType_1_r_nMozilla_5.0__Linux__U__Android_7.0__zh_CN__ZUK_Z2121_Build_NRD90M__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_40.0.2214.89_UCBrowser_11.6.8.952_Mobile_Safari_537.36_r_nMozilla_5.0__iPhone__CPU_iPhone_OS_11_0_like_Mac_OS_X__AppleWebKit_604.1.38__KHTML__like_Gecko__Mobile_15A372_MicroMessenger_6.5.17_NetType_WIFI_Language_zh_HK_r_nMozilla_5.0__Linux__U__Android_6.0.1__zh_CN__SM_C7000_Build_MMB29M__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_40.0.2214.89_UCBrowser_11.6.2.948_Mobile_Safari_537.36_r_nMQQBrowser_5.3_Mozilla_5.0__Linux__Android_6.0__TCL_580_Build_MRA58K__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_52.0.2743.98_Mobile_Safari_537.36_r_nMozilla_5.0__iPhone__CPU_iPhone_OS_10_2_like_Mac_OS_X__AppleWebKit_602.3.12__KHTML__like_Gecko__Mobile_14C92_MicroMessenger_6.5.16_NetType_WIFI_Language_zh_CN_r_nMozilla_5.0__Linux__U__Android_5.1.1__zh_cn__MI_4S_Build_LMY47V__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_53.0.2785.146_Mobile_Safari_537.36_XiaoMi_MiuiBrowser_9.1.3_r_nMozilla_5.0__Linux__U__Android_7.0__zh_CN__SM_G9550_Build_NRD90M__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_40.0.2214.89_UCBrowser_11.7.0.953_Mobile_Safari_537.36_r_nMozilla_5.0__Linux__Android_5.1__m3_note_Build_LMY47I__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_48.0.2564.116_Mobile_Safari_537.36_T7_9.3_baiduboxapp_9.3.0.10__Baidu__P1_5.1__r_nMozilla_5.0__iPhone_92__CPU_iPhone_OS_11_0_like_Mac_OS_X__AppleWebKit_604.1.38__KHTML__like_Gecko__Version_11.0_MQQBrowser_7.7.2_Mobile_15A372_Safari_8536.25_MttCustomUA_2_QBWebViewType_1_WKType_1_r_nMozilla_5.0__Linux__Android_6.0__MX6_Build_MRA58K__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_53.0.2785.49_Mobile_MQQBrowser_6.2_TBS_043508_Safari_537.36_MicroMessenger_6.5.13.1100_NetType_4G_Language_zh_CN_r_nMozilla_5.0__iPhone__CPU_iPhone_OS_9_0_1_like_Mac_OS_X__AppleWebKit_601.1.46__KHTML__like_Gecko__Mobile_13A405_MicroMessenger_6.5.15_NetType_WIFI_Language_zh_CN_r_nMozilla_5.0__Linux__Android_7.1.1__OPPO_R11_Build_NMF26X__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_53.0.2785.49_Mobile_MQQBrowser_6.2_TBS_043508_Safari_537.36_MicroMessenger_6.5.13.1100_NetType_4G_Language_zh_CN_r_nMozilla_5.0__Linux__U__Android_7.0__zh_CN__PRA_AL00_Build_HONORPRA_AL00__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_40.0.2214.89_UCBrowser_11.7.0.953_Mobile_Safari_537.36_r_nMozilla_5.0__Linux__Android_7.0__FRD_AL00_Build_HUAWEIFRD_AL00__wv__AppleWebKit_537.36__KHTML__like_Gecko__Version_4.0_Chrome_53.0.2785.49_Mobile_MQQBrowser_6.2_TBS_043508_Safari_537.36_V1_AND_SQ_7.1.0_0_TIM_D_TIM2.0_1.2.0.1692_QQ_6.5.5
push 3
mov ebx, 0x417310
call fcn.00414cea
add esp, 0x28
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40b1ca
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40b1c6
imul eax, dword [ebx]
jmp 0x40b1bb
mov ecx, eax
test ecx, ecx
je 0x40b1e9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40b1e2
push ebx
push eax
call fcn.00414cf6
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40b1d0
call fcn.00414cf6
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push 0x19fe
push 0x80000301
push 0
push 1
push 2
mov ebx, 0x416750
call fcn.00414cea
add esp, 0x1c
mov dword [ebp - 8], eax
mov ebx, dword [ebp - 4]
call fcn.00401f1f
push ebx
push ecx
mov eax, dword [ebp - 8]
dec eax
jns 0x40b23f
push 4
call fcn.00414cde
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x40b252
push 1
call fcn.00414cde
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x10], ebx
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx]
test eax, eax
je 0x40b278
push eax
mov ebx, eax
call fcn.00401111
inc eax
push eax
call fcn.00414cf0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40b289
push ebx
call fcn.00414cf6
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x40b2a9
push eax
mov ebx, eax
call fcn.00401111
inc eax
push eax
call fcn.00414cf0
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40b2ae
push eax
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x40b2cd
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40b2c9
imul eax, dword [ebx]
jmp 0x40b2be
mov ecx, eax
test ecx, ecx
je 0x40b2ec
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40b2e5
push ebx
push eax
call fcn.00414cf6
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40b2d3
call fcn.00414cf6
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40b304
push ebx
call fcn.00414cf6
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret