Function at 0x410910
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x472cdf
mov eax, dword fs:[0]
push eax
sub esp, 0x200
mov eax, dword [0x4934a4]
xor eax, esp
mov dword [esp + 0x1f8], eax
push ebx
push esi
push edi
mov eax, dword [0x4934a4]
xor eax, esp
push eax
lea eax, [esp + 0x210]
mov dword fs:[0], eax
mov edi, ecx
jmp 0x410964
call fcn.0041e575
xor ecx, ecx
xor esi, esi
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x410980
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov dword [esp + 0x218], 1
call fcn.0041e575
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x4109b5
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0x218], 3
call fcn.0041e575
xor ecx, ecx
cmp eax, esi
setne cl
cmp ecx, esi
jne 0x4109e7
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0x218], 5
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov byte [esp + 0x218], 7
push 0x103
lea ecx, [esp + 0x101]
push esi
push ecx
mov byte [esp + 0x108], 0
call fcn.0043d760
add esp, 0xc
push 0x104
lea edx, [esp + 0x100]
push edx
push esi
mov esi, dword [ebp + 8]
lea ebx, [edi + 0x17c]
push esi
mov ecx, ebx
call fcn.00427ad1
lea eax, [esp + 0x2c]
push eax
lea edx, [esp + 0x100]
lea ecx, [esp + 0x1c]
call fcn.00411650
mov byte [esp + 0x218], 8
push eax
lea ecx, [esp + 0x34]
call fcn.0040a040
mov byte [esp + 0x218], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x410a9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x2c], 0
jne 0x411530
mov ecx, dword [edi + 0xec]
push 0
push 0
push 0xf0
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
je 0x411098
mov edx, dword [0x4ae210]
push edx
push 0x4803b0
lea ecx, [esp + 0x40]
call fcn.0040db50
mov eax, dword [0x4ae1f4]
push eax
push str._client_id
lea ecx, [esp + 0x40]
call fcn.0040db50
push 0x480554
push str._client_type
lea ecx, [esp + 0x40]
call fcn.0040db50
push str.1.2.1.17
push str._client_version
lea ecx, [esp + 0x40]
call fcn.0040db50
mov ecx, dword [0x4ae1f8]
push ecx
push str._phone_imei
lea ecx, [esp + 0x40]
call fcn.0040db50
push 0x480450
push 0x480564
lea ecx, [esp + 0x40]
call fcn.0040db50
lea edx, [esp + 0xfc]
push edx
push 0x480568
lea ecx, [esp + 0x40]
call fcn.0040db50
push 0x480430
push str.net_type
lea ecx, [esp + 0x40]
call fcn.0040db50
mov eax, dword [esp + 0x30]
push eax
push 0x48056c
lea ecx, [esp + 0x40]
call fcn.0040db50
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x3c]
call fcn.0040d780
mov byte [esp + 0x218], 0xa
push eax
lea ecx, [esp + 0x2c]
call fcn.0040a040
mov byte [esp + 0x218], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x410bc3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
cmp dword [eax - 4], 1
mov edi, dword [eax - 0xc]
jle 0x410bde
push edi
lea ecx, [esp + 0x2c]
call fcn.004094d0
mov eax, dword [esp + 0x28]
push 0x32
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x34]
push ecx
push edi
push eax
push str.http:__c.tieba.baidu.com_c_c_forum_sign
mov edx, str.POST
mov ecx, str.http:__c.tieba.baidu.com_c_c_forum_sign
call fcn.004019b0
add esp, 0x18
test eax, eax
je 0x411073
lea edx, [esp + 0x7c]
push edx
call fcn.00418c20
mov byte [esp + 0x218], 0xc
push 0
lea edi, [esp + 0x50]
call fcn.0041c040
mov byte [esp + 0x218], 0xd
mov edi, dword [esp + 0x2c]
mov eax, edi
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x410c50
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x64]
call fcn.00408130
mov byte [esp + 0x218], 0xe
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0xb8]
call fcn.00408040
cmp dword [esp + 0xc0], 0x10
mov edx, dword [esp + 0xac]
jae 0x410c99
lea edx, [esp + 0xac]
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x4c]
add ecx, edx
push eax
lea edi, [esp + 0x80]
call fcn.00418d30
mov byte [esp + 0x17], al
mov byte [esp + 0x218], 0xd
cmp dword [esp + 0x70], 0x10
jb 0x410cd3
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0041dcac
add esp, 4
cmp byte [esp + 0x17], 0
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
je 0x41103e
push str.error_code
lea edx, [esp + 0x50]
push edx
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x28]
call fcn.004097a0
mov byte [esp + 0x218], 0xf
mov eax, dword [esp + 0x24]
push 0x480440
push eax
call fcn.0043c642
add esp, 8
test eax, eax
jne 0x410f66
push str.user_info
lea ecx, [esp + 0x50]
push ecx
call fcn.0041c890
push eax
lea ecx, [esp + 0x60]
call fcn.0041c1e0
mov byte [esp + 0x218], 0x10
cmp byte [esp + 0x64], 0
je 0x410f50
push str.sign_bonus_point
lea edx, [esp + 0x60]
push edx
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x38]
call fcn.004097a0
mov byte [esp + 0x218], 0x11
push str.user_sign_rank
lea eax, [esp + 0x60]
push eax
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x20]
call fcn.004097a0
mov byte [esp + 0x218], 0x12
push str.cont_sign_num
lea ecx, [esp + 0x60]
push ecx
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x1c]
call fcn.004097a0
mov byte [esp + 0x218], 0x13
mov edx, dword [esp + 0x18]
push edx
call fcn.0043c0fa
add esp, 4
cmp eax, 1
jle 0x410de5
push 0x4805d8
lea ecx, [esp + 0x38]
call fcn.00409760
push 0x4805dc
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
lea esi, [esp + 0x48]
call fcn.00401470
mov byte [esp + 0x218], 0x14
mov eax, dword [eax]
mov esi, dword [ebp + 8]
push eax
push 2
push esi
mov ecx, ebx
call fcn.00427aa4
mov byte [esp + 0x218], 0x13
lea ecx, [esp + 0x48]
call fcn.00409190
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x4c]
push 0x4805e8
push ecx
call fcn.00413640
add esp, 0xc
mov byte [esp + 0x218], 0x15
mov eax, dword [eax]
push eax
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
mov byte [esp + 0x218], 0x13
lea ecx, [esp + 0x48]
call fcn.00409190
push 0
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
mov edx, dword [esp + 0x2c]
push edx
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x218], 0x12
lea ecx, [esp + 0x18]
call fcn.00409190
mov byte [esp + 0x218], 0x11
lea ecx, [esp + 0x1c]
call fcn.00409190
mov byte [esp + 0x218], 0x10
lea ecx, [esp + 0x34]
call fcn.00409190
mov byte [esp + 0x218], 0xf
lea ecx, [esp + 0x5c]
call fcn.0041c340
mov byte [esp + 0x218], 0xd
lea ecx, [esp + 0x24]
call fcn.00409190
mov byte [esp + 0x218], 0xc
lea ecx, [esp + 0x4c]
call fcn.0041c340
mov byte [esp + 0x218], 7
lea eax, [esp + 0x7c]
push eax
call fcn.004107d0
mov byte [esp + 0x218], 5
lea ecx, [esp + 0x38]
push ecx
call fcn.00410750
mov byte [esp + 0x218], 3
lea ecx, [esp + 0x20]
call fcn.00409190
mov byte [esp + 0x218], 1
lea ecx, [esp + 0x30]
call fcn.00409190
mov dword [esp + 0x218], 0xffffffff
lea ecx, [esp + 0x28]
call fcn.00409190
mov eax, 1
jmp 0x41161f
mov byte [esp + 0x218], 0xf
lea ecx, [esp + 0x5c]
call fcn.0041c340
jmp 0x41102d
push str.160002
lea ecx, [esp + 0x28]
call fcn.0040df20
test eax, eax
jne 0x410fae
push 0x480548
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
push 0x480608
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
push 0
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
jmp 0x41102d
sub esp, 0x10
lea edx, [esp + 0x5c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.0041c1e0
mov byte [esp + 0x228], 0x16
push str.error_msg
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x230], 0xf
call fcn.00416120
mov byte [esp + 0x218], 0x17
push 0x48062c
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
mov ecx, dword [esp + 0x18]
push ecx
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
push 1
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
mov byte [esp + 0x218], 0xf
lea ecx, [esp + 0x18]
call fcn.00409190
mov byte [esp + 0x218], 0xd
lea ecx, [esp + 0x24]
call fcn.00409190
mov edx, dword [esp + 0x2c]
push edx
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x218], 0xc
lea ecx, [esp + 0x4c]
call fcn.0041c340
mov byte [esp + 0x218], 7
lea eax, [esp + 0x7c]
push eax
call fcn.004107d0
jmp 0x411564
push 0x48062c
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
push 0x480638
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
push 1
jmp 0x411550
call fcn.0041e575
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4110b2
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x218], 0x19
call fcn.0041e575
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4110e4
push 0x80004005
call fcn.00409620
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x218], 0x1b
push 0x15
push str.http:__wapp.baidu.com
lea ecx, [esp + 0x28]
call fcn.00409670
push 0xf
push str._mo_0_sign_tbs
lea ecx, [esp + 0x28]
call fcn.004022e0
mov eax, dword [esp + 0x30]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.004022e0
push 6
push str.fid1
lea ecx, [esp + 0x28]
call fcn.004022e0
push 4
push str.kw
lea ecx, [esp + 0x28]
call fcn.004022e0
lea ecx, [esp + 0xfc]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00401530
add esp, 8
mov byte [esp + 0x218], 0x1c
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.004022e0
mov byte [esp + 0x218], 0x1b
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4111a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x30]
push edx
mov edx, dword [0x4ae218]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x24]
push ecx
push edx
push str.User_Agent:_Mozilla_5.0__Linux__U__Android_2.3.4__zh_cn__W806_Build_GRJ22__AppleWebKit_530.17__KHTML__like_Gecko__FlyFlow_2.4_Version_4.0_Mobile_Safari_530.17_baidubrowser_042_1.8.4.2_diordna_008_084_AIDIVN_01_4.3.2_608W_1000591a_9B673AC85965A58761CF435A48076629_7C880249110567268_1_r_n
push eax
xor ecx, ecx
mov edx, str.http:__wapp.baidu.com
call fcn.0040b380
add esp, 0x1c
test eax, eax
je 0x4114aa
lea ecx, [esp + 0x7c]
push ecx
call fcn.00418c20
mov byte [esp + 0x218], 0x1e
push 0
lea edi, [esp + 0x50]
call fcn.0041c040
mov byte [esp + 0x218], 0x1f
mov edi, dword [esp + 0x2c]
mov eax, edi
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411222
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x64]
call fcn.00408130
mov byte [esp + 0x218], 0x20
push 0xffffffffffffffff
push 0
lea edx, [esp + 0x64]
push edx
lea ecx, [esp + 0xb8]
call fcn.00408040
cmp dword [esp + 0xc0], 0x10
mov edx, dword [esp + 0xac]
jae 0x41126b
lea edx, [esp + 0xac]
mov ecx, dword [esp + 0xbc]
lea eax, [esp + 0x4c]
lea ecx, [ecx + edx]
push eax
lea edi, [esp + 0x80]
call fcn.00418d30
mov byte [esp + 0x17], al
mov byte [esp + 0x218], 0x1f
cmp dword [esp + 0x70], 0x10
jb 0x4112a6
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0041dcac
add esp, 4
cmp byte [esp + 0x17], 0
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
je 0x411478
push 0x480790
lea edx, [esp + 0x50]
push edx
call fcn.0041c890
mov ecx, eax
call fcn.0041c500
mov edi, eax
push str.error
lea eax, [esp + 0x50]
push eax
call fcn.0041c890
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x28]
call fcn.004097a0
mov byte [esp + 0x218], 0x21
mov ecx, ebx
test edi, edi
jne 0x41140c
push 0x4805dc
push 1
push esi
call fcn.00427aa4
lea esi, [esp + 0x1c]
call fcn.00401470
mov byte [esp + 0x218], 0x22
mov eax, dword [eax]
mov esi, dword [ebp + 8]
push eax
push 2
push esi
mov ecx, ebx
call fcn.00427aa4
mov byte [esp + 0x218], 0x21
lea ecx, [esp + 0x1c]
call fcn.00409190
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x20]
push 0x4805e8
push edx
call fcn.00413640
add esp, 0xc
mov byte [esp + 0x218], 0x23
mov eax, dword [eax]
push eax
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
mov byte [esp + 0x218], 0x21
lea ecx, [esp + 0x1c]
call fcn.00409190
push edi
push edi
push edi
push edi
push edi
push 4
push edi
push esi
mov ecx, ebx
call fcn.00427cb5
mov eax, dword [esp + 0x2c]
push eax
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x218], 0x1f
lea ecx, [esp + 0x24]
call fcn.00409190
mov byte [esp + 0x218], 0x1e
lea ecx, [esp + 0x4c]
call fcn.0041c340
mov byte [esp + 0x218], 0x1b
lea ecx, [esp + 0x7c]
push ecx
call fcn.004107d0
mov byte [esp + 0x218], 0x19
lea ecx, [esp + 0x34]
call fcn.00409190
mov byte [esp + 0x218], 7
lea ecx, [esp + 0x18]
call fcn.00409190
mov byte [esp + 0x218], 5
lea edx, [esp + 0x38]
push edx
jmp 0x410f0b
push 0x48062c
push 1
push esi
call fcn.00427aa4
mov eax, dword [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.00401000
add esp, 8
mov byte [esp + 0x218], 0x24
mov eax, dword [eax]
push eax
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
mov byte [esp + 0x218], 0x21
lea ecx, [esp + 0x1c]
call fcn.00409190
push 1
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
mov byte [esp + 0x218], 0x1f
lea ecx, [esp + 0x24]
call fcn.00409190
mov edx, dword [esp + 0x2c]
push edx
call fcn.0041dcac
add esp, 4
mov byte [esp + 0x218], 0x1e
lea ecx, [esp + 0x4c]
call fcn.0041c340
mov byte [esp + 0x218], 0x1b
lea eax, [esp + 0x7c]
push eax
call fcn.004107d0
jmp 0x4114de
push 0x48062c
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
push 0x480638
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
push 1
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
mov byte [esp + 0x218], 0x19
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411506
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x218], 7
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x411564
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x411564
push 0x480548
push 1
push esi
mov ecx, ebx
call fcn.00427aa4
push 0x480608
push 3
push esi
mov ecx, ebx
call fcn.00427aa4
push 0
push 0
push 0
push 0
push 0
push 4
push 0
push esi
mov ecx, ebx
call fcn.00427cb5
mov byte [esp + 0x218], 5
mov eax, dword [esp + 0x38]
xor esi, esi
cmp eax, esi
je 0x411596
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x3c]
push ecx
push edx
push eax
call fcn.0040e310
mov eax, dword [esp + 0x44]
add esp, 0xc
push eax
call fcn.0041dcac
add esp, 4
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov byte [esp + 0x218], 3
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4115ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x218], 1
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4115f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x218], 0xffffffff
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41161d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x210]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1f8]
xor ecx, esp
call fcn.0043ae62
mov esp, ebp
pop ebp
ret 4