Function at 0x401482
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
inc dword [0x4ca648]
mov eax, str.Host:_hd.heitao.com_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_5_1_1_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Mobile_9B208_MicroMessenger_6.0_NetType_WIFI_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_r_nReferer:_http:__hd.heitao.com_glact_yyy_fail_r_nConnection:_keep_alive_r_nConnection:_keep_alive
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4014c3
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0xffffffffffffffff
push 8
push 0x16013947
push 0x52010002
call fcn.0040aa41
add esp, 0x10
mov dword [ebp - 0x14], eax
push 8
call fcn.0040aa17
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
push 0x4ca644
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov eax, str.http:__hd.heitao.com_glact_yyy_ydo
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00402279
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4015b4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4015c4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4015d4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4015e4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4015f4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x401604
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x401614
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40cfd0
call fcn.0040aa2f
add esp, 0x10
call fcn.0040aa1d
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x40164a
mov eax, 0x48e0c1
push eax
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x401670
push ebx
call fcn.0040aa1d
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401684
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.0040477d
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4016a8
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
cmp dword [ebp - 0x10], 0x12e
jne 0x401896
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push str.hongbao
push VariantClear
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4016ea
mov eax, 0x48ded7
push eax
push 4
mov ebx, 0x40b080
call fcn.0040aa2f
add esp, 0x34
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
je 0x4017a3
push 0x80000301
push 0
push dword [0x4ca648]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0d1
push dword [ebp - 0x14]
push 0x48e0dc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401759
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40176c
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40179e
push ebx
call fcn.0040aa1d
add esp, 4
jmp 0x401891
push 0x80000301
push 0
push dword [0x4ca648]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0df
push dword [ebp - 0x14]
push 0x48e0dc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4017f2
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x401805
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401837
push ebx
call fcn.0040aa1d
add esp, 4
push 1
push 1
push 1
push 2
call fcn.00404a66
mov dword [ebp - 0x14], esp
push 0x4ca640
push 0
push 0
push 0x404c5e
push 0
push 0
mov eax, 1
call fcn.0040aa29
cmp dword [ebp - 0x14], esp
je 0x401887
push 6
call fcn.0040aa23
add esp, 4
mov dword [0x4ca640], eax
jmp 0x402094
jmp 0x401a02
push 0x80000301
push 0
push dword [0x4ca648]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0ea
push dword [ebp - 0x14]
push 0x48e0dc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4018e5
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x4018f8
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40192a
push ebx
call fcn.0040aa1d
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0f9
push dword [ebp - 0x14]
push 0x48e0fc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401976
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x401989
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4019bb
push ebx
call fcn.0040aa1d
add esp, 4
mov dword [ebp - 0x14], esp
push 0x4ca640
push 0
push 0
push 0x404c5e
push 0
push 0
mov eax, 1
call fcn.0040aa29
cmp dword [ebp - 0x14], esp
je 0x4019f8
push 6
call fcn.0040aa23
add esp, 4
mov dword [0x4ca640], eax
jmp 0x402094
mov eax, str.Host:_hd.heitao.com_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_5_1_1_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Mobile_9B208_MicroMessenger_6.0_NetType_WIFI_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nAccept_Language:_zh_cn_r_nReferer:_http:__hd.heitao.com_glact_yyy_fail_r_nConnection:_keep_alive_r_nConnection:_keep_alive
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x401a18
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0xffffffffffffffff
push 8
push 0x16013947
push 0x52010002
call fcn.0040aa41
add esp, 0x10
mov dword [ebp - 0x14], eax
push 8
call fcn.0040aa17
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 0x4ca644
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, str.http:__hd.heitao.com_glact_yyy_hongbao
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00402279
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x401b10
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x401b20
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401b30
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x401b40
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x401b50
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401b60
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x401b70
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x401b80
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40cfd0
call fcn.0040aa2f
add esp, 0x10
call fcn.0040aa1d
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x401bb6
mov eax, 0x48e0c1
push eax
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x401bdc
push ebx
call fcn.0040aa1d
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401bf0
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.0040477d
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401c14
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
cmp dword [ebp - 0x10], 0xc8
jne 0x402003
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x48e136
push VariantClear
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x401c56
mov eax, 0x48ded7
push eax
push 4
mov ebx, 0x40b080
call fcn.0040aa2f
add esp, 0x34
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
je 0x401fd1
push VariantClear
push 0
push 0x48e14d
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
push 1
push 1
push 1
push 2
call fcn.00404a66
mov eax, str.Host:_hd.heitao.com_r_nUser_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_5_1_1_like_Mac_OS_X__AppleWebKit_534.46__KHTML__like_Gecko__Mobile_9B208_MicroMessenger_6.0_NetType_WIFI_r_nAccept:___r_nX_Requested_With:_XMLHttpRequest_r_nReferer:_http:__hd.heitao.com_glact_yyy_hongbao_r_nAccept_Language:_zh_cn_r_nConnection:_keep_alive_r_nConnection:_keep_alive
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x401ccc
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0xffffffffffffffff
push 8
push 0x16013947
push 0x52010002
call fcn.0040aa41
add esp, 0x10
mov dword [ebp - 0x14], eax
push 8
call fcn.0040aa17
add esp, 4
mov dword [ebp - 0x18], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 0x4ca644
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov eax, str.http:__hd.heitao.com_glact_yyy_getmoneyapi
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00402279
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x401dc4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x401dd4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x401de4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x401df4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x401e04
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401e14
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x401e24
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x401e34
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40cfd0
call fcn.0040aa2f
add esp, 0x10
call fcn.0040aa1d
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x401e6a
mov eax, 0x48e0c1
push eax
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x401e90
push ebx
call fcn.0040aa1d
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401ea4
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
cmp dword [ebp - 0x10], 0xc8
jne 0x401f3b
lea eax, [ebp - 8]
push eax
call fcn.0040477d
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x401ed5
push ebx
call fcn.0040aa1d
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x48e0f9
push dword [ebp - 8]
mov ecx, 2
call fcn.00401426
add esp, 8
mov dword [ebp - 0x14], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x401f04
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401f36
push ebx
call fcn.0040aa1d
add esp, 4
jmp 0x401fcc
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0f9
push dword [ebp - 0x14]
push 0x48e0fc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401f87
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x401f9a
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401fcc
push ebx
call fcn.0040aa1d
add esp, 4
jmp 0x401ffe
push VariantClear
push 0
push 0x48e2dd
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
jmp 0x402094
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x40bac0
call fcn.0040aa2f
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x48e0f9
push dword [ebp - 0x14]
push 0x48e0fc
mov ecx, 3
call fcn.00401426
add esp, 0xc
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40204f
push ebx
call fcn.0040aa1d
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x402062
mov eax, 0x48ded7
push eax
push 0x10005
push 0x16010009
push 0x52010002
push 2
mov ebx, 0x40bd50
call fcn.0040aa2f
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x402094
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4020a4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4020b4
push ebx
call fcn.0040aa1d
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4020c4
push ebx
call fcn.0040aa1d
add esp, 4
mov esp, ebp
pop ebp
ret