Function at 0x416cdf
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
push 0x10
call fcn.0041c314
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0x4a9880
push ebx
add ebx, 4
push ebx
push 8
call fcn.0041c314
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.0041c314
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.004164d6
pop ebx
cmp dword [0x4ef174], 1
jne 0x416d8f
jmp 0x41753e
inc dword [0x4ef194]
mov ebx, dword [0x4ef18c]
call fcn.00403fad
cmp dword [0x4ef194], eax
jne 0x416dbb
mov dword [0x4ef194], 1
call fcn.00411d6f
mov ebx, dword [0x4ef18c]
call fcn.00401a76
push ebx
push ecx
mov eax, dword [0x4ef194]
dec eax
jns 0x416ddd
push 4
call fcn.0041c2fc
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416df0
push 1
call fcn.0041c2fc
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push dword [0x4ef190]
push str.sid
mov ebx, dword [ebp - 0xc]
push dword [ebx]
push str.http:__http:__lt5.3g.qq.com_g_v2_reply_list.jsp_p
mov ecx, 4
call fcn.00401b28
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 1
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_OS_4_2_1_like_Mac_OS_X__AppleWebKit_532.9__KHTML__like_Gecko__Version_5.0.3_Mobile_8B5097d_Safari_6531.22.7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00417564
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x416e89
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x416e99
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x416ea9
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x416eb9
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416ec9
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x416ed9
push ebx
call fcn.0041c308
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x416eec
mov eax, 0x4a8cf9
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x416f12
push ebx
call fcn.0041c308
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416f26
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push eax
mov eax, str.vid__value__.44_
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x416f7c
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0xc], 0
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x416fb8
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov ebx, dword [0x4ef18c]
call fcn.00401a76
push ebx
push ecx
mov eax, dword [0x4ef194]
dec eax
jns 0x416fde
push 4
call fcn.0041c2fc
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x416ff1
push 1
call fcn.0041c2fc
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0xc], ebx
push dword [0x4ef190]
push str.sid
mov ebx, dword [ebp - 0xc]
push dword [ebx]
push str.http:__lt5.3g.qq.com_g_v2_reply_add.jsp_p
mov ecx, 4
call fcn.00401b28
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push eax
call fcn.00419253
mov dword [ebp - 0x18], eax
push str.fromPagetopic_detail.jspat_E5_9B_9E_E5_A4_8D
push dword [ebp - 0x18]
push str._vid
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.content
mov ecx, 5
call fcn.00401b28
add esp, 0x14
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41706d
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
push 1
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_OS_4_2_1_like_Mac_OS_X__AppleWebKit_532.9__KHTML__like_Gecko__Version_5.0.3_Mobile_8B5097d_Safari_6531.22.7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.00417564
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4170d2
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4170e2
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4170f2
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x417102
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x417112
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417122
push ebx
call fcn.0041c308
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x417135
mov eax, 0x4a8cf9
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41715b
push ebx
call fcn.0041c308
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [0x4ef198]
test ebx, ebx
je 0x417172
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [0x4ef198], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c0c
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x4171ab
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41722e
push VariantClear
push 0
push str.SID
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.00419845
jmp 0x41753e
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c23
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x417261
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x4172e4
push VariantClear
push 0
push 0x4a9c28
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.00419845
jmp 0x41753e
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c3b
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x417317
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41739a
push VariantClear
push 0
push 0x4a9c58
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.00419845
jmp 0x41753e
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c77
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x4173cd
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x4174db
mov dword [0x4ef19c], 1
push 0
mov ebx, 0x41e710
call fcn.0041c30e
add esp, 4
push edx
push eax
call fcn.004198f3
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x417426
mov eax, 0x4a8cc8
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41744c
push ebx
call fcn.0041c308
add esp, 4
push 0x4a9c7e
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00401b28
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x417474
push ebx
call fcn.0041c308
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x417487
mov eax, 0x4a8cc8
push eax
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4174b9
push ebx
call fcn.0041c308
add esp, 4
push 0
push 0x3e8
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
jmp 0x41753e
push VariantClear
push 0
push 0x4a9c8f
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.00419845
jmp 0x41753e
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41754e
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0041c308
add esp, 4
mov esp, ebp
pop ebp
ret 4