Function at 0x40e823
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
cmp dword [ebp + 0x10], 0
je 0x40e977
mov eax, str.forward.xdaili.cn:80
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40e88b
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
push 1
call fcn.004074db
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40e8b2
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 8], eax
push dword [ebp - 8]
push str._timestamp
mov ebx, dword [ebp + 0x20]
push dword [ebx]
push str._secret
mov ebx, dword [ebp + 0x18]
push dword [ebx]
push 0x4d1b34
mov ecx, 6
call fcn.00401105
add esp, 0x18
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40e8f6
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
push 1
push 1
push 1
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.004079c7
mov dword [ebp - 0x2c], eax
push 0x4c5c05
push dword [ebp - 8]
push str.timestamp
mov ebx, dword [ebp + 0x18]
push dword [ebx]
push str.orderno
push dword [ebp - 0x2c]
push str.Proxy_Authorization:sign
mov ecx, 7
call fcn.00401105
add esp, 0x1c
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40e95f
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40e973
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 1
mov eax, str.1234567890
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 1
push dword [ebp + 0xc]
mov eax, str.test
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, str.var_CryptoJS__CryptoJS__r_nfunction_u__l___r_nvar_d____r_nn__d.lib____r_np__function_____r_ns__n.Base___r_n____extend:_function_a___r_n________p.prototype__this__r_n________var_c__new_p__r_n________a__c.mixIn_a___r_n________c.hasOwnProperty__init_____c.init__function____r_n____________c._super.init.apply_this__arguments__r_n___________r_n________c.init.prototype__c__r_n________c._super__this__r_n________return_c_r_n______r_n____create:_function____r_n________var_a__this.extend____r_n________a.init.apply_a__arguments___r_n________return_a_r_n______r_n____init:_function_____r_n____mixIn:_function_a___r_n________for__var_c_in_a__a.hasOwnProperty_c____this_c___a_c____r_n________a.hasOwnProperty__toString_____this.toString__a.toString__r_n______r_n____clone:_function____r_n________return_this.init.prototype.extend_this__r_n_____r_n__r_nq__n.WordArray__s.extend__r_n____init:_function_a__c___r_n________a__this.words__a______r_n________this.sigBytes__c___l___c:_4__a.length_r_n______r_n____toString:_function_a___r_n________return__a__v_.stringify_this__r_n______r_n____concat:_function_a___r_n________var_c__this.words__r_n________m__a.words__r_n________f__this.sigBytes__r_n________a__a.sigBytes__r_n________this.clamp____r_n________if__f___4__for__var_t__0__t___a__t__c_f__t_____2____m_t_____2______24___8___t___4___255_____24___8____f__t____4___r_n________else_if__65535___m.length__for__t__0__t___a__t__4__c_f__t_____2___m_t_____2___r_n________else_c.push.apply_c__m___r_n________this.sigBytes__a__r_n________return_this_r_n______r_n____clamp:_function____r_n________var_a__this.words__r_n________c__this.sigBytes__r_n________a_c_____2___4294967295____32___8___c___4___r_n________a.length__u.ceil_c___4__r_n______r_n____clone:_function____r_n________var_a__s.clone.call_this___r_n________a.words__this.words.slice_0___r_n________return_a_r_n______r_n____random:_function_a___r_n________for__var_c______m__0__m___a__m__4__c.push_4294967296__u.random____0___r_n________return_new_q.init_c__a__r_n_____r_n___r_nw__d.enc____r_nv__w.Hex___r_n____stringify:_function_a___r_n________var_c__a.words__r_n________a__a.sigBytes__r_n________for__var_m______f__0__f___a__f___r_n____________var_t__c_f_____2______24___8___f___4___255__r_n____________m.push__t_____4_.toString_16____r_n____________m.push__t__15_.toString_16___r_n_________r_n________return_m.join_____r_n______r_n____parse:_function_a___r_n________for__var_c__a.length__r_n________m______f__0__f___c__f__2__m_f_____3___parseInt_a.substr_f__2___16_____24___4___f___8___r_n________return_new_q.init_m__c___2__r_n_____r_n__r_nb__w.Latin1___r_n____stringify:_function_a___r_n________var_c__a.words__r_n________a__a.sigBytes__r_n________for__var_m______f__0__f___a__f__m.push_String.fromCharCode_c_f_____2______24___8___f___4___255____r_n________return_m.join_____r_n______r_n____parse:_function_a___r_n________for__var_c__a.length__r_n________m______f__0__f___c__f__m_f_____2____a.charCodeAt_f___255_____24___8___f___4___r_n________return_new_q.init_m__c__r_n_____r_n__r_nx__w.Utf8___r_n____stringify:_function_a___r_n________try__r_n____________return_decodeURIComponent_escape_b.stringify_a____r_n_________catch_c___r_n____________throw_Error__Malformed_UTF_8_data____r_n_________r_n______r_n____parse:_function_a___r_n________return_b.parse_unescape_encodeURIComponent_a____r_n_____r_n__r_nr__n.BufferedBlockAlgorithm__s.extend__r_n____reset:_function____r_n________this._data__new_q.init__r_n________this._nDataBytes__0_r_n______r_n_____append:_function_a___r_n_________string___typeof_a___a__x.parse_a____r_n________this._data.concat_a___r_n________this._nDataBytes__a.sigBytes_r_n______r_n_____process:_function_a___r_n________var_c__this._data__r_n________m__c.words__r_n________f__c.sigBytes__r_n________t__this.blockSize__r_n________b__f____4__t___r_n________b__a___u.ceil_b__:_u.max__b__0____this._minBufferSize__0___r_n
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.0040ddc3
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40e9d4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40e9e4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40e9f4
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40ea04
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40ea14
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ea28
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov eax, str.http:__wap.js.10086.cn_wechatLogin.thtml
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ea42
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
push 8
call fcn.004182ca
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x50], 0
push 0
push dword [ebp - 0x50]
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00409787
mov ebx, eax
test ebx, ebx
je 0x40eb4d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x40eb5d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40eb6d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x40eb7d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x40eb8d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x40eb9d
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40ebad
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x40ebbd
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40ebcd
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x41beb0
call fcn.004182d6
add esp, 0x10
call fcn.004182d0
add esp, 4
xor ecx, ecx
inc ecx
push ecx
cmp ecx, 5
jg 0x40ee91
mov eax, str.http:__wap.js.10086.cn_actionDispatcher.do
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ec13
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push dword [ebp - 0x14]
push str.password
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.reqUrlWeChatLoginbusiNumwechatLoginmobile
mov ecx, 4
call fcn.00401105
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ec4d
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
call fcn.00408c0e
mov dword [ebp - 0x28], eax
push str._r_nHost:_wap.js.10086.cn_r_nConnection:_keep_alive_r_nPragma:_no_cache_r_nCache_Control:_no_cache_r_nUpgrade_Insecure_Requests:_1_r_nUser_Agent:_Mozilla_5.0__Linux__Android_6.0__Nexus_5_Build_MRA58N__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_63.0.3239.132_Mobile_Safari_537.36_r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9_image_webp_image_apng___q0.8_r_nReferer:_http:__wap.js.10086.cn_wquestionnaire_wquestionnaire_page_login.jsp_backurl_r_n
push dword [ebp - 0x28]
mov ecx, 2
call fcn.00401105
add esp, 8
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40ec81
push ebx
call fcn.004182d0
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 8
call fcn.004182ca
add esp, 4
mov dword [ebp - 0x3c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
mov dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0
push 0
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x4c], 0
push 0
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], 0
push 0
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x54], 0
push 0
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x60], 0
push 0
lea eax, [ebp - 0x60]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x64], 0
push 0
lea eax, [ebp - 0x64]
push eax
push 1
lea eax, [ebp - 0x20]
push eax
push 1
push 1
lea eax, [ebp - 0x18]
push eax
call fcn.00409787
mov dword [ebp - 0x68], eax
mov ebx, dword [ebp - 0x64]
test ebx, ebx
je 0x40ed7e
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40ed8e
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x40ed9e
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x40edae
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x40edbe
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x40edce
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x40edde
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x41beb0
call fcn.004182d6
add esp, 0x10
call fcn.004182d0
add esp, 4
lea eax, [ebp - 0x68]
push eax
call fcn.0040dab8
mov dword [ebp - 0x6c], eax
mov ebx, dword [ebp - 0x68]
test ebx, ebx
je 0x40ee1d
push ebx
call fcn.004182d0
add esp, 4
mov eax, dword [ebp - 0x6c]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40ee31
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push str.resultMsg
push getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x40ee66
mov eax, 0x4c5bfc
push eax
push 4
mov ebx, 0x418b30
call fcn.004182d6
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
je 0x40ee8b
jmp 0x40ee91
pop ecx
jmp 0x40ebf2
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push getpeername
push 0
push str._js.ac.10086.cn
push getpeername
push 0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x40eec5
mov eax, 0x4c5bfc
push eax
push 4
mov ebx, 0x418b30
call fcn.004182d6
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x40eef4
mov eax, 0x4d152e
jmp 0x40ef15
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40ef10
push eax
mov ebx, eax
call fcn.0040109a
inc eax
push eax
call fcn.004182ca
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40ef15
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40ef26
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40ef36
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40ef46
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40ef56
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40ef66
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40ef76
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40ef86
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40ef96
push ebx
call fcn.004182d0
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x40efa6
push ebx
call fcn.004182d0
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x20