Function at 0x4036df
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
fild dword [ebp + 8]
fstp qword [ebp - 0x14]
fld qword [ebp - 0x14]
fsub qword [0x4903f1]
fstp qword [ebp - 0x1c]
push 0x80000301
push 0
push 1
fld qword [ebp - 0x1c]
call fcn.00401050
push 0x80000301
push 0
push eax
push 0x30004
push 0x16011ecf
push 0x52010001
push 3
mov eax, 2
mov ebx, 0x4594f0
call fcn.0040b1a3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x403768
push ebx
call fcn.0040b197
add esp, 4
pop eax
mov dword [ebp - 4], eax
xor ecx, ecx
lea eax, [ebp - 8]
mov ebx, eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
cmp ecx, 0x186a0
jg 0x403a9f
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
push 1
mov eax, str.Host:_wechat.gf.com.cn_r_nAccept_Language:_zh_cn_r_nConnection:_keep_alive_r_nUser_Agent:_Mozilla_5.0__iPad__CPU_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B435_MicroMessenger_6.1.1_NetType_WIFI
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 4]
push eax
call fcn.00403ac8
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403814
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403824
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x403834
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x403844
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x403854
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x403864
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x403874
push ebx
call fcn.0040b197
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x403888
push ebx
call fcn.0040b197
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
fild dword [ebp + 8]
fstp qword [ebp - 0x14]
fld qword [ebp - 0x14]
fsub qword [0x4903f1]
fstp qword [ebp - 0x1c]
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x40c5f0
call fcn.0040b18b
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0xc]
push 0x4905c9
push dword [ebp - 0x20]
push 0x4905cc
mov ecx, 4
call fcn.004017d8
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4038ed
push ebx
call fcn.0040b197
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x403900
mov eax, 0x4903f9
push eax
push 0x80000301
push 0
push 2
fld qword [ebp - 0x1c]
call fcn.00401050
push 0x80000301
push 0
push eax
push 0x30004
push 0x16011ecf
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x4596c0
call fcn.0040b1a3
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x403953
push ebx
call fcn.0040b197
add esp, 4
push str._amount_:__1_
push dword [ebp - 0xc]
call fcn.004016d0
add esp, 8
cmp eax, 0
je 0x4039c4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push str.404_Not_Found
push getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x40399d
mov eax, 0x4903f9
push eax
push 4
mov ebx, 0x40b8f0
call fcn.0040b18b
add esp, 0x34
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x4039c4
mov eax, 1
jmp 0x4039c6
xor eax, eax
test eax, eax
je 0x403a62
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x40c5f0
call fcn.0040b18b
add esp, 0x10
mov dword [ebp - 0x10], eax
push 0x490402
push dword [ebp - 0xc]
push 0x4905ed
push dword [ebp - 0x10]
mov ecx, 4
call fcn.004017d8
add esp, 0x10
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x403a1d
push ebx
call fcn.0040b197
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x403a30
mov eax, 0x4903f9
push eax
push 0x10005
push 0x16013bef
push 0x52010001
push 2
mov ebx, 0x40d060
call fcn.0040b18b
add esp, 0x1c
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x403a62
push ebx
call fcn.0040b197
add esp, 4
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push 1
push 0x64
call fcn.004034ea
push str._amount_:__3_
push dword [ebp - 0xc]
call fcn.004016d0
add esp, 8
cmp eax, 0
jne 0x403a98
jmp 0x403a9f
pop ebx
pop ecx
jmp 0x403773
add esp, 8
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x403ab2
push ebx
call fcn.0040b197
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x403ac2
push ebx
call fcn.0040b197
add esp, 4
mov esp, ebp
pop ebp
ret 4