Function at 0x413181
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.00416335
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x4b8f21
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 3
mov eax, 2
mov ebx, 0x47e090
call fcn.00416359
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x413222
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
push 0
mov eax, str.http:__weixin.telunsu.net_RedEnvelope_UserRedEnvelope.aspx_usertype
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.004088c9
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4132bf
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4132cf
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4132df
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4132ef
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4132ff
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41330f
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41331f
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41332f
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x413343
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.hbMySARtop_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x41336c
mov eax, 0x4b8f20
push eax
push 3
mov ebx, 0x4172f0
call fcn.0041634d
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4133a4
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4133a0
imul eax, dword [ebx]
jmp 0x413395
mov ecx, eax
test ecx, ecx
je 0x4133c3
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4133bc
push ebx
push eax
call fcn.00416347
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4133aa
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x8215a5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x413400
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
je 0x413468
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x8215b8
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
mov ebx, dword [ebp - 0xc]
call fcn.00401004
xor ecx, ecx
push eax
lea eax, [ebp - 0x10]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x414161
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4134a4
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4134b7
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4d07e5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x4134f2
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x413b4a
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x41352f
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413542
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov eax, str.__classhbMySrcol
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, str._div_value_
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
call fcn.00403d77
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x413595
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4135a5
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4135b9
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0x4d080e
mov ecx, 2
call fcn.004020f3
add esp, 8
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 1
push 1
mov eax, str.http:__weixin.telunsu.net_RedEnvelope_Ajax.aspx_actionshare
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00408939
mov ebx, eax
test ebx, ebx
je 0x413663
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x413673
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x413683
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x413693
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4136a3
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4136b3
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4136c3
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4136d3
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4136e3
push ebx
call fcn.00416347
add esp, 4
push str.usertype
push dword [ebp - 0x14]
push str.http:__weixin.telunsu.net_RedEnvelope_ValidReCode.aspx_id
mov ecx, 3
call fcn.004020f3
add esp, 0xc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004088c9
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x413791
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4137a1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4137b1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4137c1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4137d1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4137e1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4137f1
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x413801
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x413815
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0x4d04d7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Ajax.aspx_action
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403d77
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413865
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x413875
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x413889
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x3e7
push 0x64
call fcn.0040b2fc
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x417ba0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push str.t0.7553880515042
push dword [ebp - 0x1c]
push str.http:__weixin.telunsu.net_RedEnvelope_Ajax.aspx_action
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4138e9
push ebx
call fcn.00416347
add esp, 4
push 0xffffffffffffffff
push 8
push 0x1601b89d
push 0x52010001
call fcn.0041635f
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push str.code
push dword [ebp - 0x14]
push str.package
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413932
push ebx
call fcn.00416347
add esp, 4
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.004088c9
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4139bc
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4139cc
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x4139dc
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4139ec
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4139fc
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x413a0c
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x413a1c
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x413a2c
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x413a40
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x413a57
mov eax, 0x4b8f20
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
fild dword [ebp + 8]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fadd qword [0x4b8f2c]
fstp qword [ebp - 0x2c]
push 0x80000601
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x417ba0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x4b8f29
push dword [ebp - 0x18]
push 0x821627
push dword [ebp - 0x30]
push 0x821630
mov ecx, 5
call fcn.004020f3
add esp, 0x14
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x413afb
push ebx
call fcn.00416347
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x413b0e
mov eax, 0x4b8f20
push eax
push 0x10005
push 0x16011325
push 0x52010001
push 2
mov ebx, 0x418c30
call fcn.0041634d
add esp, 0x1c
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x413b40
push ebx
call fcn.00416347
add esp, 4
jmp 0x414161
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x413b67
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413b7a
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x81b251
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x413bb5
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x4140e7
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x413bf2
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x413c05
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov eax, str.__classhbMySrcol
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, str._div_value_
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x20]
call fcn.00403d77
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x413c58
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413c68
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x413c7c
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push str.usertype
push dword [ebp - 0x14]
push str.http:__weixin.telunsu.net_RedEnvelope_ValidReCode.aspx_id
mov ecx, 3
call fcn.004020f3
add esp, 0xc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
push 1
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004088c9
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x413d2e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x413d3e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x413d4e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x413d5e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x413d6e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413d7e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x413d8e
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x413d9e
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x413db2
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0x4d04d7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str.Ajax.aspx_action
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00403d77
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413e02
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x413e12
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x413e26
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
push 0x3e7
push 0x64
call fcn.0040b2fc
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x417ba0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push str.t0.7553880515042
push dword [ebp - 0x1c]
push str.http:__weixin.telunsu.net_RedEnvelope_Ajax.aspx_action
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x413e86
push ebx
call fcn.00416347
add esp, 4
push 0xffffffffffffffff
push 8
push 0x1601b89d
push 0x52010001
call fcn.0041635f
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push str.code
push dword [ebp - 0x14]
push str.package
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x413ecf
push ebx
call fcn.00416347
add esp, 4
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
push 1
lea eax, [ebp - 4]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.004088c9
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x413f59
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x413f69
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x413f79
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x413f89
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x413f99
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x413fa9
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x413fb9
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x413fc9
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x413fdd
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x413ff4
mov eax, 0x4b8f20
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
fild dword [ebp + 8]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fadd qword [0x4b8f2c]
fstp qword [ebp - 0x2c]
push 0x80000601
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x417ba0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x4b8f29
push dword [ebp - 0x18]
push 0x821627
push dword [ebp - 0x30]
push 0x821630
mov ecx, 5
call fcn.004020f3
add esp, 0x14
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x414098
push ebx
call fcn.00416347
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x4140ab
mov eax, 0x4b8f20
push eax
push 0x10005
push 0x16011325
push 0x52010001
push 2
mov ebx, 0x418c30
call fcn.0041634d
add esp, 0x1c
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4140dd
push ebx
call fcn.00416347
add esp, 4
jmp 0x414161
push 0xffffffffffffffff
push 8
push 0x160112a0
push 0x52010001
call fcn.0041635f
add esp, 0x10
mov dword [ebp - 0x20], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x414113
mov eax, 0x4b8f20
push eax
push 1
mov ebx, 0x416dc0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x414139
push ebx
call fcn.00416347
add esp, 4
fild dword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fmul qword [0x4d05e6]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
call fcn.0040184f
push eax
call fcn.00407d07
pop eax
pop ebx
pop ecx
jmp 0x413479
add esp, 0xc
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x414174
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414184
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4141a2
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x41419e
imul eax, dword [ebx]
jmp 0x414193
mov ecx, eax
test ecx, ecx
je 0x4141c1
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4141ba
push ebx
push eax
call fcn.00416347
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4141a8
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4141d9
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4141e9
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4141f9
push ebx
call fcn.00416347
add esp, 4
mov esp, ebp
pop ebp
ret 4