Function at 0x41a5b4
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
push 0x10
call fcn.0041c314
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx], 0x4a9880
push ebx
add ebx, 4
push ebx
push 8
call fcn.0041c314
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
add ebx, 4
push ebx
push 8
call fcn.0041c314
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
pop ebx
pop ebx
push ebx
mov eax, esp
push eax
call fcn.004164d6
pop ebx
cmp dword [0x4ef174], 1
jne 0x41a664
jmp 0x41adbb
push 0xffffffffffffffff
push 8
push 0x16016bfc
push 0x5201017d
call fcn.0041c31a
add esp, 0x10
mov dword [ebp - 0xc], eax
push dword [0x4ef190]
push str.sid
push dword [ebp - 0xc]
push str.http:__http:__lt5.3g.qq.com_g_v2_reply_list.jsp_p
mov ecx, 4
call fcn.00401b28
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a6b0
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 1
push 1
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_OS_4_2_1_like_Mac_OS_X__AppleWebKit_532.9__KHTML__like_Gecko__Version_5.0.3_Mobile_8B5097d_Safari_6531.22.7
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00417564
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a71c
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a72c
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a73c
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41a74c
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41a75c
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41a76c
push ebx
call fcn.0041c308
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x41a77f
mov eax, 0x4a8cf9
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a7a5
push ebx
call fcn.0041c308
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a7b9
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push eax
mov eax, str.vid__value__.44_
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41a80f
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0xc], 0
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 1
lea eax, [ebp - 8]
push eax
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a84b
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0xffffffffffffffff
push 8
push 0x16016bfc
push 0x5201017d
call fcn.0041c31a
add esp, 0x10
mov dword [ebp - 0xc], eax
push dword [0x4ef190]
push str.sid
push dword [ebp - 0xc]
push str.http:__lt5.3g.qq.com_g_v2_reply_add.jsp_p
mov ecx, 4
call fcn.00401b28
add esp, 0x10
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a89b
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push eax
call fcn.00419253
mov dword [ebp - 0x18], eax
push str.fromPagetopic_detail.jspat_E5_9B_9E_E5_A4_8D
push dword [ebp - 0x18]
push str._vid
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.content
mov ecx, 5
call fcn.00401b28
add esp, 0x14
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41a8ea
push ebx
call fcn.0041c308
add esp, 4
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
push 1
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_OS_4_2_1_like_Mac_OS_X__AppleWebKit_532.9__KHTML__like_Gecko__Version_5.0.3_Mobile_8B5097d_Safari_6531.22.7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
lea eax, [ebp - 0x10]
push eax
call fcn.00417564
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41a94f
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a95f
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a96f
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41a97f
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a98f
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a99f
push ebx
call fcn.0041c308
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x41a9b2
mov eax, 0x4a8cf9
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a9d8
push ebx
call fcn.0041c308
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [0x4ef198]
test ebx, ebx
je 0x41a9ef
push ebx
call fcn.0041c308
add esp, 4
pop eax
mov dword [0x4ef198], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c0c
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x41aa28
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41aaab
push VariantClear
push 0
push str.SID
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.0041ade1
jmp 0x41adbb
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c23
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x41aade
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41ab61
push VariantClear
push 0
push 0x4a9c28
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.0041ade1
jmp 0x41adbb
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c3b
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x41ab94
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41ac17
push VariantClear
push 0
push 0x4a9c58
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.0041ade1
jmp 0x41adbb
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x4a9c77
push VariantClear
push 0
mov eax, dword [0x4ef198]
test eax, eax
jne 0x41ac4a
mov eax, 0x4a8cc8
push eax
push 4
mov ebx, 0x41cc20
call fcn.0041c30e
add esp, 0x34
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x41ad58
mov dword [0x4ef19c], 1
push 0
mov ebx, 0x41e710
call fcn.0041c30e
add esp, 4
push edx
push eax
call fcn.004198f3
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x41aca3
mov eax, 0x4a8cc8
push eax
push 1
mov ebx, 0x41dc60
call fcn.0041c30e
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41acc9
push ebx
call fcn.0041c308
add esp, 4
push 0x4a9c7e
push dword [ebp - 0x18]
mov ecx, 2
call fcn.00401b28
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41acf1
push ebx
call fcn.0041c308
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x41ad04
mov eax, 0x4a8cc8
push eax
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41ad36
push ebx
call fcn.0041c308
add esp, 4
push 0
push 0x3e8
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
jmp 0x41adbb
push VariantClear
push 0
push 0x4a9c8f
push 0x10005
push 0x16016bf9
push 0x5201017d
push 2
mov ebx, 0x41fc80
call fcn.0041c30e
add esp, 0x1c
push 0
push 0
push 0xffffffffffffffff
push 8
push 0x16016bf5
push 0x5201017d
call fcn.0041c320
add esp, 0x18
call fcn.00416515
mov dword [0x4ef184], 0
call fcn.00419845
jmp 0x41adbb
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41adcb
push ebx
call fcn.0041c308
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov eax, dword [ebx]
call dword [eax]
call fcn.0041c308
add esp, 4
mov esp, ebp
pop ebp
ret 4