Function at 0x408186
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push 0x47da28
mov ebx, dword [ebp + 0x14]
push dword [ebx]
call fcn.00401004
add esp, 8
cmp eax, 0
jne 0x408245
cmp dword [ebp + 0x1c], 1
jne 0x4081f8
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__U__CPU_iPhone_OS_3_0_like_Mac_OS_X__en_us__AppleWebKit_528.18__KHTML__like_Gecko__Version_4.0_Mobile_7A341_Safari_528.16
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4081f4
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0x1c], 2
jne 0x40821c
mov eax, str.User_Agent:_Mozilla_5.0__iPad__U__CPU_OS_3_2_like_Mac_OS_X__en_us__AppleWebKit_531.21.10__KHTML__like_Gecko__Version_4.0.4_Mobile_7B334b_Safari_531.21.10
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x408218
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0x1c], 3
jne 0x408240
mov eax, str.User_Agent:_Mozilla_5.0__Linux_U_Android_2.2.1_zh_cn_I7500_Build_FRG83__AppleWebKit_533.1__KHTML__like_Gecko_Version_4.0_Mobile_Safari_533.1
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40823c
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
jmp 0x408277
mov ebx, dword [ebp + 0x14]
push dword [ebx]
push str.User_Agent:
mov ecx, 2
call fcn.00401279
add esp, 8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x408273
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp + 0x24], 1
jne 0x4082a0
mov eax, 0x47e6f2
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x408297
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 8], eax
jmp 0x4082ba
mov eax, 0x47e6f4
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4082b6
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 8], eax
cmp dword [ebp + 0x2c], 1
jne 0x4082e3
mov eax, 0x47e6f2
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4082da
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x4082fd
mov eax, 0x47e6f4
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4082f9
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x408310
mov eax, 0x47da28
push eax
push 1
mov ebx, 0x40a170
call fcn.004091c7
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push str.type2status
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.ac37buid
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__m.z.qq.com_iphone_vaction.jsp_sid
mov ecx, 6
call fcn.00401279
add esp, 0x18
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408362
push ebx
call fcn.004091c1
add esp, 4
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004014d1
mov ebx, eax
test ebx, ebx
je 0x4083b4
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4083c4
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4083d4
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4083e4
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4083f4
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x408404
push ebx
call fcn.004091c1
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x408417
mov eax, 0x47da28
push eax
push 1
mov ebx, 0x40a170
call fcn.004091c7
add esp, 0x10
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push str.type3status
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.ac37buid
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__m.z.qq.com_iphone_vaction.jsp_sid
mov ecx, 6
call fcn.00401279
add esp, 0x18
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408469
push ebx
call fcn.004091c1
add esp, 4
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004014d1
mov ebx, eax
test ebx, ebx
je 0x4084bb
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4084cb
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4084db
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4084eb
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4084fb
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40850b
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push str.http:__m.z.qq.com_iphone_vaction.jsp_sid
mov ecx, 2
call fcn.00401279
add esp, 8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x408539
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push dword [ebp + 0x10]
call fcn.00408745
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push str.content
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.ac3mst2buid
mov ecx, 4
call fcn.00401279
add esp, 0x10
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40857a
push ebx
call fcn.004091c1
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40858e
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
push 1
mov eax, str.POST
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004014d1
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4085e2
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4085f2
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x408602
push ebx
call fcn.004091c1
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x408615
mov eax, 0x47db1c
push eax
push 1
mov ebx, 0x40a170
call fcn.004091c7
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40863b
push ebx
call fcn.004091c1
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40864f
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.WS2_32.dll_bind
push 0
push 0
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.mguide
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x408684
mov eax, 0x47da28
push eax
push 4
mov ebx, 0x409640
call fcn.004091c7
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x4086b3
mov eax, 1
jmp 0x4086bd
mov eax, 0
jmp 0x4086bd
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4086ce
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4086de
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4086ee
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x4086fe
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40870e
push ebx
call fcn.004091c1
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40871e
push ebx
call fcn.004091c1
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x2c