Function at 0x412255
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 8
call fcn.00416335
add esp, 4
mov dword [ebp - 0xc], eax
mov edi, eax
mov esi, 0x4b8f21
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
push 0x80000301
push 0
push 1
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 3
mov eax, 2
mov ebx, 0x47e090
call fcn.00416359
add esp, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4122e8
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x1c], 0
push 0
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__iPhone__CPU_iPhone_OS_8_1_1_like_Mac_OS_X__AppleWebKit_600.1.4__KHTML__like_Gecko__Mobile_12B436_MicroMessenger_6.0.2_NetType_WIFI_r_n
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 1
push 0
mov eax, str.http:__weixin.telunsu.net_RedEnvelope_UserRedEnvelope.aspx_usertype
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.004088c9
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x412385
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x412395
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4123a5
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4123b5
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4123c5
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4123d5
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x4123e5
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4123f5
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x412409
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.hbMySARtop_
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x412432
mov eax, 0x4b8f20
push eax
push 3
mov ebx, 0x4172f0
call fcn.0041634d
add esp, 0x28
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x41246a
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x412466
imul eax, dword [ebx]
jmp 0x41245b
mov ecx, eax
test ecx, ecx
je 0x412489
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x412482
push ebx
push eax
call fcn.00416347
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x412470
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x8215a5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4124c6
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x41252e
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x8215b8
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
mov ebx, dword [ebp - 0xc]
call fcn.00401004
xor ecx, ecx
push eax
lea eax, [ebp - 0x10]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x412c62
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x41256a
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41257d
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4d07e5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx]
test eax, eax
jne 0x4125b8
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x412708
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4125f5
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412608
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov eax, 0x8215cb
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, str._fs14_hbMySARtop_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x18]
call fcn.00403d77
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41265b
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41266b
push ebx
call fcn.00416347
add esp, 4
push dword [ebp - 0x14]
push 0x8215e8
push dword [ebp - 0x2c]
push 0x8215eb
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41269b
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4126af
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4126c6
mov eax, 0x4b8f20
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
jmp 0x412be8
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x412725
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412738
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x81b251
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx]
test eax, eax
jne 0x412773
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
je 0x4128c3
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4127b0
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4127c3
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov eax, 0x8215f6
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, str._fs14_hbMySARtop_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x18]
call fcn.00403d77
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x412816
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x412826
push ebx
call fcn.00416347
add esp, 4
push dword [ebp - 0x14]
push 0x8215e8
push dword [ebp - 0x2c]
push 0x821600
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x412856
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x41286a
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x412881
mov eax, 0x4b8f20
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
jmp 0x412be8
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4128e0
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4128f3
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x4d07e5
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebx]
test eax, eax
jne 0x41292e
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x412aab
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x41296b
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x41297e
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x28], ebx
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x82160b
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x28]
mov eax, dword [ebx]
test eax, eax
jne 0x4129b9
mov eax, 0x4b8f20
push eax
push 4
mov ebx, 0x416bf0
call fcn.0041634d
add esp, 0x34
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x412aab
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x4129f6
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412a09
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov eax, 0x821610
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
mov eax, str._fs14_hbMySARtop_
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x38]
call fcn.00403d77
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x412a5c
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x412a6c
push ebx
call fcn.00416347
add esp, 4
push 0x4b8f20
push dword [ebp - 0x4c]
call fcn.0040214f
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x412a9a
push ebx
call fcn.00416347
add esp, 4
cmp dword [ebp - 0x50], 0
je 0x412aab
mov eax, 1
jmp 0x412ab0
mov eax, 0
test eax, eax
je 0x412be8
mov ebx, dword [ebp - 0xc]
call fcn.00401025
push ebx
push ecx
mov eax, dword [ebp - 0x10]
dec eax
jns 0x412ad5
push 4
call fcn.0041633b
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x412ae8
push 1
call fcn.0041633b
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0
push 0
push dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov eax, 0x821610
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov eax, str._fs14_hbMySARtop_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x18]
call fcn.00403d77
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x412b3b
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x412b4b
push ebx
call fcn.00416347
add esp, 4
push dword [ebp - 0x14]
push 0x8215e8
push dword [ebp - 0x2c]
push 0x82161a
mov ecx, 4
call fcn.004020f3
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x412b7b
push ebx
call fcn.00416347
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x412b8f
push ebx
call fcn.00416347
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x412ba6
mov eax, 0x4b8f20
push eax
push 0x80000301
push 0
push 2
push 0x80000301
push 0
push dword [ebp + 8]
push 0x30004
push 0x16010e9a
push 0x52010001
push 4
mov eax, 2
mov ebx, 0x47e280
call fcn.00416359
add esp, 0x34
jmp 0x412be8
push 0xffffffffffffffff
push 8
push 0x160112a0
push 0x52010001
call fcn.0041635f
add esp, 0x10
mov dword [ebp - 0x18], eax
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x412c14
mov eax, 0x4b8f20
push eax
push 1
mov ebx, 0x416dc0
call fcn.0041634d
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x412c3a
push ebx
call fcn.00416347
add esp, 4
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fmul qword [0x4d05e6]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.0040184f
push eax
call fcn.00407d07
pop eax
pop ebx
pop ecx
jmp 0x41253f
add esp, 0xc
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x412c75
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x412c85
push ebx
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x412ca3
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x412c9f
imul eax, dword [ebx]
jmp 0x412c94
mov ecx, eax
test ecx, ecx
je 0x412cc2
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x412cbb
push ebx
push eax
call fcn.00416347
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x412ca9
call fcn.00416347
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x412cda
push ebx
call fcn.00416347
add esp, 4
mov esp, ebp
pop ebp
ret 4