Function at 0x4067c3
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push 8
call fcn.0040f0ac
add esp, 4
mov dword [ebp - 4], eax
mov edi, eax
mov esi, 0x485c4d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040f0ac
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x485c4d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040f0ac
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x485c4d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040f0ac
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x485c4d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040f0ac
add esp, 4
mov dword [ebp - 0x14], eax
mov edi, eax
mov esi, 0x485c4d
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0x40004
push 0x1601266b
push 0x5201147d
push 1
mov eax, 3
mov ebx, 0x45d020
call fcn.0040f0be
add esp, 0x10
push str.g_f160cmd11
push dword [0x574614]
push 0x485924
push dword [0x574610]
push str.http:__qqpet.wapsns.3g.qq.com_qqpet_fcgi_bin_fish_sid
mov ecx, 5
call fcn.00401277
add esp, 0x14
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_OS_4_2_1_like_Mac_OS_X__AppleWebKit_532.9__KHTML__like_Gecko__Version_5.0.3_Mobile_8B5097d_Safari_6531.22.7
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00401921
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x406910
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x406920
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x406930
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406940
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406950
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x406960
push ebx
call fcn.0040f0b2
add esp, 4
lea eax, [ebp - 0x38]
push eax
call fcn.00402dfe
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40697c
push ebx
call fcn.0040f0b2
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [0x57461c]
test ebx, ebx
je 0x406993
push ebx
call fcn.0040f0b2
add esp, 4
pop eax
mov dword [0x57461c], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 4]
push eax
mov eax, 0x54d51d
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, 0x54d520
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 0x57461c
call fcn.004045dd
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x406a1b
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406a2b
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406a3b
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406a4b
push ebx
call fcn.0040f0b2
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 8]
push eax
mov eax, str._n_t_tnbsp_
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.__P__n_t_t
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 0x57461c
call fcn.004045dd
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x406acd
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406add
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406aed
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406afd
push ebx
call fcn.0040f0b2
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0xc]
push eax
mov eax, str._n_t_tnbsp__n
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, 0x54d544
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 0x57461c
call fcn.004045dd
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x406b7f
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406b8f
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406b9f
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406baf
push ebx
call fcn.0040f0b2
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0x10]
push eax
mov eax, 0x54d54b
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, 0x54d550
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 0x57461c
call fcn.004045dd
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x406c31
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406c41
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406c51
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406c61
push ebx
call fcn.0040f0b2
add esp, 4
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0x14]
push eax
mov eax, str.amp_sname
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, str.fryid
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 0x57461c
call fcn.004045dd
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x406ce3
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406cf3
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x406d03
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x406d13
push ebx
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x14]
call fcn.004045c4
xor ecx, ecx
push eax
lea eax, [ebp - 0x18]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4070ca
mov ebx, dword [ebp - 0x14]
call fcn.00403c66
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x406d4f
push 4
call fcn.0040f0ca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406d62
push 1
call fcn.0040f0ca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x406d7f
mov eax, 0x48590c
push eax
push 1
mov ebx, 0x40fa70
call fcn.0040f0b8
add esp, 0x10
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fsub qword [0x485c5f]
fstp qword [ebp - 0x34]
push 0x80000601
push dword [ebp - 0x30]
push dword [ebp - 0x34]
push 1
mov ebx, 0x410600
call fcn.0040f0b8
add esp, 0x10
mov dword [ebp - 0x38], eax
mov ebx, 0xc
call fcn.00403c0d
push getpeername
push 0
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x406de4
mov eax, 0x48590c
push eax
push 0
push 0
push 0
push 0x40004
push 0x1601266b
push 0x5201147d
push 7
mov eax, 3
mov ebx, 0x45cf30
call fcn.0040f0be
add esp, 0x58
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406e24
push ebx
call fcn.0040f0b2
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 4]
call fcn.00403c66
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x406e47
push 4
call fcn.0040f0ca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406e5a
push 1
call fcn.0040f0ca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x406e77
mov eax, 0x48590c
push eax
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x40004
push 0x1601266b
push 0x5201147d
push 4
mov eax, 3
mov ebx, 0x45cf10
call fcn.0040f0be
add esp, 0x34
mov ebx, dword [ebp - 8]
call fcn.00403c66
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x406ed1
push 4
call fcn.0040f0ca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406ee4
push 1
call fcn.0040f0ca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x406f01
mov eax, 0x48590c
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x40004
push 0x1601266b
push 0x5201147d
push 4
mov eax, 3
mov ebx, 0x45cf10
call fcn.0040f0be
add esp, 0x34
mov ebx, dword [ebp - 0xc]
call fcn.00403c66
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x406f5b
push 4
call fcn.0040f0ca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x406f6e
push 1
call fcn.0040f0ca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push getpeername
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x406f8b
mov eax, 0x48590c
push eax
push 0x80000301
push 0
push 3
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x40004
push 0x1601266b
push 0x5201147d
push 4
mov eax, 3
mov ebx, 0x45cf10
call fcn.0040f0be
add esp, 0x34
push getpeername
push 0
push 0x54d57a
push 0x80000301
push 0
push 4
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x40004
push 0x1601266b
push 0x5201147d
push 4
mov eax, 3
mov ebx, 0x45cf10
call fcn.0040f0be
add esp, 0x34
mov ebx, dword [ebp - 0x10]
call fcn.00403c66
push ebx
push ecx
mov eax, dword [ebp - 0x18]
dec eax
jns 0x40702d
push 4
call fcn.0040f0ca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x407040
push 1
call fcn.0040f0ca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 0x54d54b
mov ebx, dword [ebp - 0x20]
push dword [ebx]
mov ecx, 2
call fcn.00401277
add esp, 8
mov dword [ebp - 0x24], eax
push getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x407075
mov eax, 0x48590c
push eax
push 0x80000301
push 0
push 5
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x40004
push 0x1601266b
push 0x5201147d
push 4
mov eax, 3
mov ebx, 0x45cf10
call fcn.0040f0be
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4070c2
push ebx
call fcn.0040f0b2
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x406d24
add esp, 0xc
mov ebx, dword [ebp - 4]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4070eb
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4070e7
imul eax, dword [ebx]
jmp 0x4070dc
mov ecx, eax
test ecx, ecx
je 0x40710a
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x407103
push ebx
push eax
call fcn.0040f0b2
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4070f1
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x407130
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40712c
imul eax, dword [ebx]
jmp 0x407121
mov ecx, eax
test ecx, ecx
je 0x40714f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x407148
push ebx
push eax
call fcn.0040f0b2
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x407136
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x407175
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x407171
imul eax, dword [ebx]
jmp 0x407166
mov ecx, eax
test ecx, ecx
je 0x407194
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x40718d
push ebx
push eax
call fcn.0040f0b2
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40717b
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4071ba
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4071b6
imul eax, dword [ebx]
jmp 0x4071ab
mov ecx, eax
test ecx, ecx
je 0x4071d9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4071d2
push ebx
push eax
call fcn.0040f0b2
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4071c0
call fcn.0040f0b2
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4071ff
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4071fb
imul eax, dword [ebx]
jmp 0x4071f0
mov ecx, eax
test ecx, ecx
je 0x40721e
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x407217
push ebx
push eax
call fcn.0040f0b2
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x407205
call fcn.0040f0b2
add esp, 4
mov esp, ebp
pop ebp
ret