Function at 0x42fdec
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
call fcn.00402b9c
test eax, eax
je 0x430216
push 0x829398
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [0x829340]
call fcn.00404bfa
push ebx
push ecx
mov eax, dword [ebp + 8]
dec eax
jns 0x42fe59
push 4
call fcn.0049789b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x42fe6c
push 1
call fcn.0049789b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebx]
test eax, eax
je 0x42fe92
push eax
mov ebx, eax
call fcn.00401283
inc eax
push eax
call fcn.00497895
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x42fea3
push ebx
call fcn.0049788f
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x829398
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
push 0
mov ebx, 0x49b620
call fcn.004978a7
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
mov dword [ebp - 0x18], 0
push 0
push dword [ebp - 0x18]
push 1
push 1
push 1
mov eax, str.Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_42.0.2311.90_Safari_537.36_r_nAccept_Language:_zh_cn_r_nAccept_Encoding:_gzip__deflate__sdch_r_nX_Requested_With:_XMLHttpRequest_r_nHost:_kyfw.12306.cn_r_nReferer:_https:__kyfw.12306.cn_otn_confirmPassenger_initDc_r_nCache_Control:_no_store_no_cache_r_nPragma:_no_cache_r_nConnection:_Close
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov eax, str.https:__kyfw.12306.cn_otn_lcxxcx_init
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.004092de
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x42ff3f
push ebx
call fcn.0049788f
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x42ff4f
push ebx
call fcn.0049788f
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x42ff5f
push ebx
call fcn.0049788f
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x42ff6f
push ebx
call fcn.0049788f
add esp, 4
push 0
mov ebx, 0x49b620
call fcn.004978a7
add esp, 4
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fsub qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fild dword [0x82938c]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x28]
fsub qword [ebp - 0x30]
fcomp qword [0x633a0e]
fnstsw ax
test ah, 1
je 0x4301e0
lea eax, [ebp - 0xc]
push eax
call fcn.0043023c
mov dword [ebp - 0x14], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x42ffd8
mov eax, 0x63395e
push eax
push 1
mov ebx, 0x499b50
call fcn.004978a7
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x42fffe
push ebx
call fcn.0049788f
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.sessionInit
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x43002f
mov eax, 0x633823
push eax
push 4
mov ebx, 0x498550
call fcn.004978a7
add esp, 0x34
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x430055
push ebx
call fcn.0049788f
add esp, 4
cmp dword [ebp - 0x1c], 0xffffffff
jg 0x4300ed
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x430072
mov eax, 0x63395e
push eax
push 1
mov ebx, 0x499b50
call fcn.004978a7
add esp, 0x10
mov dword [ebp - 0x24], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.sessionInit
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x4300b9
mov eax, 0x633823
push eax
push 4
mov ebx, 0x498550
call fcn.004978a7
add esp, 0x34
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4300df
push ebx
call fcn.0049788f
add esp, 4
cmp dword [ebp - 0x28], 0xffffffff
jg 0x4300ed
xor eax, eax
jmp 0x4300f2
mov eax, 1
test eax, eax
je 0x4301e0
push 0x829398
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fsub qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fild dword [0x829388]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x28]
fsub qword [ebp - 0x30]
fcomp qword [0x633a0e]
fnstsw ax
test ah, 1
je 0x430196
fild dword [ebp - 0x10]
fstp qword [ebp - 0x18]
fld qword [ebp - 0x18]
fild dword [ebp - 8]
fstp qword [ebp - 0x20]
fsub qword [ebp - 0x20]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
call fcn.00401118
mov dword [0x829388], eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x43017c
push eax
mov ebx, eax
call fcn.00401283
inc eax
push eax
call fcn.00497895
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x829394]
test ebx, ebx
je 0x430190
push ebx
call fcn.0049788f
add esp, 4
pop eax
mov dword [0x829394], eax
push 0x633a96
push dword [ebp - 4]
push dword [0x829390]
mov ecx, 3
call fcn.004012ee
add esp, 0xc
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [0x829390]
test ebx, ebx
je 0x4301cb
push ebx
call fcn.0049788f
add esp, 4
pop eax
mov dword [0x829390], eax
push 0x829398
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
mov eax, 0x63395e
test eax, eax
je 0x4301fc
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.00497895
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x43020d
push ebx
call fcn.0049788f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
call fcn.00403f8e
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x430226
push ebx
call fcn.0049788f
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x430236
push ebx
call fcn.0049788f
add esp, 4
mov esp, ebp
pop ebp
ret 4