微信加好友CALL地址 3.4.5.27

基址：5E8F0000

5EBAAA50 55 push ebp
5EBAAA51 8BEC mov ebp,esp
5EBAAA53 6A FF push -0x1
5EBAAA55 68 3E530560 push WeChatWi.6005533E
5EBAAA5A 64:A1 00000000 mov eax,dword ptr fs:[0]
5EBAAA60 50 push eax
5EBAAA61 81EC 24010000 sub esp,0x124
5EBAAA67 A1 A09B6D60 mov eax,dword ptr ds:[0x606D9BA0]
5EBAAA6C 33C5 xor eax,ebp
5EBAAA6E 8945 F0 mov dword ptr ss:[ebp-0x10],eax
5EBAAA71 53 push ebx
5EBAAA72 56 push esi
5EBAAA73 57 push edi
5EBAAA74 50 push eax
5EBAAA75 8D45 F4 lea eax,dword ptr ss:[ebp-0xC]
5EBAAA78 64:A3 00000000 mov dword ptr fs:[0],eax
5EBAAA7E 8BD9 mov ebx,ecx
5EBAAA80 899D 1CFFFFFF mov dword ptr ss:[ebp-0xE4],ebx
5EBAAA86 837D 08 01 cmp dword ptr ss:[ebp+0x8],0x1
5EBAAA8A 0F85 CB030000 jnz WeChatWi.5EBAAE5B
5EBAAA90 6A FF push -0x1
5EBAAA92 0F57C0 xorps xmm0,xmm0
5EBAAA95 C785 08FFFFFF 0>mov dword ptr ss:[ebp-0xF8],0x0
5EBAAA9F 68 D8F33C60 push WeChatWi.603CF3D8
5EBAAAA4 8D8D F8FEFFFF lea ecx,dword ptr ss:[ebp-0x108]
5EBAAAAA 0F1185 F8FEFFFF movups dqword ptr ss:[ebp-0x108],xmm0
5EBAAAB1 E8 4AE43700 call WeChatWi.5EF28F00
5EBAAAB6 C745 FC 0000000>mov dword ptr ss:[ebp-0x4],0x0
5EBAAABD C785 0CFFFFFF 0>mov dword ptr ss:[ebp-0xF4],0x0
5EBAAAC7 C785 10FFFFFF 0>mov dword ptr ss:[ebp-0xF0],0x0
5EBAAAD1 C785 14FFFFFF 0>mov dword ptr ss:[ebp-0xEC],0x0
5EBAAADB 8D85 0CFFFFFF lea eax,dword ptr ss:[ebp-0xF4]
5EBAAAE1 C645 FC 01 mov byte ptr ss:[ebp-0x4],0x1
5EBAAAE5 8B8B FC070000 mov ecx,dword ptr ds:[ebx+0x7FC]
5EBAAAEB 50 push eax
5EBAAAEC E8 3FFAE5FF call WeChatWi.5EA0A530
5EBAAAF1 8B8D 10FFFFFF mov ecx,dword ptr ss:[ebp-0xF0]
5EBAAAF7 B8 398EE338 mov eax,0x38E38E39
5EBAAAFC 8BB5 0CFFFFFF mov esi,dword ptr ss:[ebp-0xF4]
5EBAAB02 2BCE sub ecx,esi
5EBAAB04 F7E9 imul ecx
5EBAAB06 C1FA 04 sar edx,0x4
5EBAAB09 8BC2 mov eax,edx
5EBAAB0B C1E8 1F shr eax,0x1F
5EBAAB0E 03C2 add eax,edx
5EBAAB10 74 26 je short WeChatWi.5EBAAB38
5EBAAB12 833E 01 cmp dword ptr ds:[esi],0x1
5EBAAB15 75 21 jnz short WeChatWi.5EBAAB38
5EBAAB17 8B46 04 mov eax,dword ptr ds:[esi+0x4]
5EBAAB1A 85C0 test eax,eax
5EBAAB1C 74 06 je short WeChatWi.5EBAAB24
5EBAAB1E 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAAB22 75 05 jnz short WeChatWi.5EBAAB29
5EBAAB24 B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAAB29 FF76 08 push dword ptr ds:[esi+0x8]
5EBAAB2C 8D8D F8FEFFFF lea ecx,dword ptr ss:[ebp-0x108]
5EBAAB32 50 push eax
5EBAAB33 E8 C8E33700 call WeChatWi.5EF28F00
5EBAAB38 8B85 F8FEFFFF mov eax,dword ptr ss:[ebp-0x108]
5EBAAB3E 85C0 test eax,eax
5EBAAB40 74 06 je short WeChatWi.5EBAAB48
5EBAAB42 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAAB46 75 05 jnz short WeChatWi.5EBAAB4D
5EBAAB48 B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAAB4D FFB5 FCFEFFFF push dword ptr ss:[ebp-0x104] ; 13
5EBAAB53 8D8B 4C080000 lea ecx,dword ptr ds:[ebx+0x84C]
5EBAAB59 50 push eax ; 消息内容
5EBAAB5A E8 A1E33700 call WeChatWi.5EF28F00
5EBAAB5F 8DB3 A4030000 lea esi,dword ptr ds:[ebx+0x3A4]
5EBAAB65 8BCE mov ecx,esi
5EBAAB67 E8 244A7600 call WeChatWi.5F30F590
5EBAAB6C 84C0 test al,al
5EBAAB6E 74 38 je short WeChatWi.5EBAABA8
5EBAAB70 6A 00 push 0x0
5EBAAB72 8D83 1C080000 lea eax,dword ptr ds:[ebx+0x81C]
5EBAAB78 50 push eax
5EBAAB79 8D8D E4FEFFFF lea ecx,dword ptr ss:[ebp-0x11C]
5EBAAB7F E8 0CE13700 call WeChatWi.5EF28C90
5EBAAB84 8D85 E4FEFFFF lea eax,dword ptr ss:[ebp-0x11C]
5EBAAB8A C645 FC 02 mov byte ptr ss:[ebp-0x4],0x2
5EBAAB8E 50 push eax
5EBAAB8F 8D85 F8FEFFFF lea eax,dword ptr ss:[ebp-0x108]
5EBAAB95 50 push eax
5EBAAB96 56 push esi
5EBAAB97 E8 042BE1FF call WeChatWi.5E9BD6A0
5EBAAB9C 8BC8 mov ecx,eax
5EBAAB9E E8 4D557600 call WeChatWi.5F3100F0
5EBAABA3 E9 8B020000 jmp WeChatWi.5EBAAE33
5EBAABA8 8B8B C0000000 mov ecx,dword ptr ds:[ebx+0xC0]
5EBAABAE 8D95 24FFFFFF lea edx,dword ptr ss:[ebp-0xDC]
5EBAABB4 52 push edx
5EBAABB5 8B01 mov eax,dword ptr ds:[ecx]
5EBAABB7 FF50 44 call dword ptr ds:[eax+0x44]
5EBAABBA 8BC8 mov ecx,eax
5EBAABBC E8 EF9F9E00 call WeChatWi.5F594BB0
5EBAABC1 6A FF push -0x1
5EBAABC3 0F57C0 xorps xmm0,xmm0
5EBAABC6 C785 F4FEFFFF 0>mov dword ptr ss:[ebp-0x10C],0x0
5EBAABD0 50 push eax
5EBAABD1 8D8D E4FEFFFF lea ecx,dword ptr ss:[ebp-0x11C]
5EBAABD7 0F1185 E4FEFFFF movups dqword ptr ss:[ebp-0x11C],xmm0
5EBAABDE E8 1DE33700 call WeChatWi.5EF28F00
5EBAABE3 8D8D 24FFFFFF lea ecx,dword ptr ss:[ebp-0xDC]
5EBAABE9 C645 FC 03 mov byte ptr ss:[ebp-0x4],0x3
5EBAABED E8 57A09E00 call WeChatWi.5F594C49
5EBAABF2 8D45 A8 lea eax,dword ptr ss:[ebp-0x58]
5EBAABF5 50 push eax
5EBAABF6 8D8B 4C080000 lea ecx,dword ptr ds:[ebx+0x84C]
5EBAABFC E8 CF9DE1FF call WeChatWi.5E9C49D0
5EBAAC01 8985 20FFFFFF mov dword ptr ss:[ebp-0xE0],eax
5EBAAC07 8D85 D0FEFFFF lea eax,dword ptr ss:[ebp-0x130]
5EBAAC0D C645 FC 04 mov byte ptr ss:[ebp-0x4],0x4
5EBAAC11 50 push eax
5EBAAC12 8BCB mov ecx,ebx
5EBAAC14 E8 67F0FFFF call WeChatWi.5EBA9C80
5EBAAC19 8D45 C0 lea eax,dword ptr ss:[ebp-0x40]
5EBAAC1C C645 FC 05 mov byte ptr ss:[ebp-0x4],0x5
5EBAAC20 50 push eax
5EBAAC21 8D8D E4FEFFFF lea ecx,dword ptr ss:[ebp-0x11C]
5EBAAC27 E8 A49DE1FF call WeChatWi.5E9C49D0
5EBAAC2C 8BD8 mov ebx,eax
5EBAAC2E 8D45 D8 lea eax,dword ptr ss:[ebp-0x28]
5EBAAC31 C645 FC 06 mov byte ptr ss:[ebp-0x4],0x6
5EBAAC35 50 push eax
5EBAAC36 8BCE mov ecx,esi
5EBAAC38 E8 939DE1FF call WeChatWi.5E9C49D0 ; A-添加好友断点
5EBAAC3D 8BF8 mov edi,eax
5EBAAC3F C645 FC 07 mov byte ptr ss:[ebp-0x4],0x7
5EBAAC43 E8 18F5FFFF call WeChatWi.5EBAA160
5EBAAC48 8BF0 mov esi,eax
5EBAAC4A 8B85 1CFFFFFF mov eax,dword ptr ss:[ebp-0xE4]
5EBAAC50 8A88 14080000 mov cl,byte ptr ds:[eax+0x814]
5EBAAC56 888D 18FFFFFF mov byte ptr ss:[ebp-0xE8],cl
5EBAAC5C 6A 01 push 0x1
5EBAAC5E C645 FC 0A mov byte ptr ss:[ebp-0x4],0xA
5EBAAC62 8D85 D0FEFFFF lea eax,dword ptr ss:[ebp-0x130]
5EBAAC68 FFB5 18FFFFFF push dword ptr ss:[ebp-0xE8]
5EBAAC6E FFB5 20FFFFFF push dword ptr ss:[ebp-0xE0]
5EBAAC74 83EC 0C sub esp,0xC
5EBAAC77 8BCC mov ecx,esp
5EBAAC79 50 push eax
5EBAAC7A E8 F1ABFFFF call WeChatWi.5EBA5870
5EBAAC7F 53 push ebx
5EBAAC80 57 push edi
5EBAAC81 8BCE mov ecx,esi
5EBAAC83 E8 A896FFFF call WeChatWi.5EBA4330
5EBAAC88 8D8D D0FEFFFF lea ecx,dword ptr ss:[ebp-0x130]
5EBAAC8E C645 FC 0B mov byte ptr ss:[ebp-0x4],0xB
5EBAAC92 E8 2991F8FF call WeChatWi.5EB33DC0
5EBAAC97 8B45 EC mov eax,dword ptr ss:[ebp-0x14] ; WeChatWi.5F594F8F
5EBAAC9A 83F8 10 cmp eax,0x10
5EBAAC9D 72 0F jb short WeChatWi.5EBAACAE
5EBAAC9F 40 inc eax
5EBAACA0 6A 01 push 0x1
5EBAACA2 50 push eax
5EBAACA3 FF75 D8 push dword ptr ss:[ebp-0x28] ; WeChatWi.5F594D63
5EBAACA6 E8 65CEDCFF call WeChatWi.5E977B10
5EBAACAB 83C4 0C add esp,0xC
5EBAACAE 8B45 D4 mov eax,dword ptr ss:[ebp-0x2C]
5EBAACB1 C745 EC 0F00000>mov dword ptr ss:[ebp-0x14],0xF
5EBAACB8 C745 E8 0000000>mov dword ptr ss:[ebp-0x18],0x0
5EBAACBF C645 D8 00 mov byte ptr ss:[ebp-0x28],0x0
5EBAACC3 83F8 10 cmp eax,0x10
5EBAACC6 72 0F jb short WeChatWi.5EBAACD7
5EBAACC8 40 inc eax
5EBAACC9 6A 01 push 0x1
5EBAACCB 50 push eax
5EBAACCC FF75 C0 push dword ptr ss:[ebp-0x40]
5EBAACCF E8 3CCEDCFF call WeChatWi.5E977B10
5EBAACD4 83C4 0C add esp,0xC
5EBAACD7 C645 FC 03 mov byte ptr ss:[ebp-0x4],0x3
5EBAACDB 8B45 BC mov eax,dword ptr ss:[ebp-0x44]
5EBAACDE C745 D4 0F00000>mov dword ptr ss:[ebp-0x2C],0xF
5EBAACE5 C745 D0 0000000>mov dword ptr ss:[ebp-0x30],0x0
5EBAACEC C645 C0 00 mov byte ptr ss:[ebp-0x40],0x0
5EBAACF0 83F8 10 cmp eax,0x10
5EBAACF3 72 0F jb short WeChatWi.5EBAAD04
5EBAACF5 40 inc eax
5EBAACF6 6A 01 push 0x1
5EBAACF8 50 push eax
5EBAACF9 FF75 A8 push dword ptr ss:[ebp-0x58]
5EBAACFC E8 0FCEDCFF call WeChatWi.5E977B10
5EBAAD01 83C4 0C add esp,0xC
5EBAAD04 83EC 18 sub esp,0x18
5EBAAD07 8BCC mov ecx,esp
5EBAAD09 89A5 20FFFFFF mov dword ptr ss:[ebp-0xE0],esp
5EBAAD0F 68 58F62E60 push WeChatWi.602EF658
5EBAAD14 E8 A7FEDCFF call WeChatWi.5E97ABC0
5EBAAD19 83EC 18 sub esp,0x18
5EBAAD1C C645 FC 0C mov byte ptr ss:[ebp-0x4],0xC
5EBAAD20 8B9D 1CFFFFFF mov ebx,dword ptr ss:[ebp-0xE4]
5EBAAD26 8BCC mov ecx,esp
5EBAAD28 89A5 18FFFFFF mov dword ptr ss:[ebp-0xE8],esp
5EBAAD2E C741 14 0F00000>mov dword ptr ds:[ecx+0x14],0xF
5EBAAD35 8D93 1C080000 lea edx,dword ptr ds:[ebx+0x81C]
5EBAAD3B C741 10 0000000>mov dword ptr ds:[ecx+0x10],0x0
5EBAAD42 8379 14 10 cmp dword ptr ds:[ecx+0x14],0x10
5EBAAD46 72 04 jb short WeChatWi.5EBAAD4C
5EBAAD48 8B01 mov eax,dword ptr ds:[ecx]
5EBAAD4A EB 02 jmp short WeChatWi.5EBAAD4E
5EBAAD4C 8BC1 mov eax,ecx
5EBAAD4E 6A FF push -0x1
5EBAAD50 6A 00 push 0x0
5EBAAD52 52 push edx
5EBAAD53 C600 00 mov byte ptr ds:[eax],0x0
5EBAAD56 E8 0500DDFF call WeChatWi.5E97AD60
5EBAAD5B 8BCB mov ecx,ebx
5EBAAD5D C645 FC 0D mov byte ptr ss:[ebp-0x4],0xD
5EBAAD61 E8 4AEFFFFF call WeChatWi.5EBA9CB0
5EBAAD66 50 push eax
5EBAAD67 8B85 F8FEFFFF mov eax,dword ptr ss:[ebp-0x108]
5EBAAD6D FFB3 18080000 push dword ptr ds:[ebx+0x818]
5EBAAD73 85C0 test eax,eax
5EBAAD75 74 06 je short WeChatWi.5EBAAD7D
5EBAAD77 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAAD7B 75 05 jnz short WeChatWi.5EBAAD82
5EBAAD7D B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAAD82 83EC 14 sub esp,0x14
5EBAAD85 8BCC mov ecx,esp
5EBAAD87 89A5 1CFFFFFF mov dword ptr ss:[ebp-0xE4],esp
5EBAAD8D 6A FF push -0x1
5EBAAD8F C701 00000000 mov dword ptr ds:[ecx],0x0
5EBAAD95 C741 04 0000000>mov dword ptr ds:[ecx+0x4],0x0
5EBAAD9C C741 08 0000000>mov dword ptr ds:[ecx+0x8],0x0
5EBAADA3 50 push eax
5EBAADA4 C741 0C 0000000>mov dword ptr ds:[ecx+0xC],0x0
5EBAADAB C741 10 0000000>mov dword ptr ds:[ecx+0x10],0x0
5EBAADB2 E8 49E13700 call WeChatWi.5EF28F00
5EBAADB7 FFB3 10080000 push dword ptr ds:[ebx+0x810]
5EBAADBD 83EC 14 sub esp,0x14
5EBAADC0 8BCC mov ecx,esp
5EBAADC2 89A5 E0FEFFFF mov dword ptr ss:[ebp-0x120],esp
5EBAADC8 6A FF push -0x1
5EBAADCA C701 00000000 mov dword ptr ds:[ecx],0x0
5EBAADD0 C741 04 0000000>mov dword ptr ds:[ecx+0x4],0x0
5EBAADD7 C741 08 0000000>mov dword ptr ds:[ecx+0x8],0x0
5EBAADDE C741 0C 0000000>mov dword ptr ds:[ecx+0xC],0x0
5EBAADE5 C741 10 0000000>mov dword ptr ds:[ecx+0x10],0x0
5EBAADEC FFB3 A4030000 push dword ptr ds:[ebx+0x3A4]
5EBAADF2 E8 09E13700 call WeChatWi.5EF28F00
5EBAADF7 C645 FC 0F mov byte ptr ss:[ebp-0x4],0xF
5EBAADFB A1 606D7660 mov eax,dword ptr ds:[0x60766D60]
5EBAAE00 85C0 test eax,eax
5EBAAE02 75 24 jnz short WeChatWi.5EBAAE28
5EBAAE04 6A 48 push 0x48
5EBAAE06 E8 AF520E01 call WeChatWi.5FC900BA
5EBAAE0B 83C4 04 add esp,0x4
5EBAAE0E 8985 DCFEFFFF mov dword ptr ss:[ebp-0x124],eax
5EBAAE14 8BC8 mov ecx,eax
5EBAAE16 C645 FC 10 mov byte ptr ss:[ebp-0x4],0x10
5EBAAE1A E8 01EF0E00 call WeChatWi.5EC99D20
5EBAAE1F C645 FC 0F mov byte ptr ss:[ebp-0x4],0xF
5EBAAE23 A3 606D7660 mov dword ptr ds:[0x60766D60],eax
5EBAAE28 8BC8 mov ecx,eax
5EBAAE2A C645 FC 03 mov byte ptr ss:[ebp-0x4],0x3
5EBAAE2E E8 6DF50E00 call WeChatWi.5EC9A3A0
5EBAAE33 8D8D E4FEFFFF lea ecx,dword ptr ss:[ebp-0x11C]
5EBAAE39 E8 B2DF3700 call WeChatWi.5EF28DF0
5EBAAE3E 8D8D 0CFFFFFF lea ecx,dword ptr ss:[ebp-0xF4]
5EBAAE44 C683 98080000 0>mov byte ptr ds:[ebx+0x898],0x1
5EBAAE4B E8 403CE6FF call WeChatWi.5EA0EA90
5EBAAE50 8D8D F8FEFFFF lea ecx,dword ptr ss:[ebp-0x108]
5EBAAE56 E8 95DF3700 call WeChatWi.5EF28DF0
5EBAAE5B 8B4D F4 mov ecx,dword ptr ss:[ebp-0xC]
5EBAAE5E 64:890D 0000000>mov dword ptr fs:[0],ecx
5EBAAE65 59 pop ecx ; 0040ECA0
5EBAAE66 5F pop edi ; 0040ECA0
5EBAAE67 5E pop esi ; 0040ECA0
5EBAAE68 5B pop ebx ; 0040ECA0
5EBAAE69 8B4D F0 mov ecx,dword ptr ss:[ebp-0x10]
5EBAAE6C 33CD xor ecx,ebp
5EBAAE6E E8 36520E01 call WeChatWi.5FC900A9
5EBAAE73 8BE5 mov esp,ebp
5EBAAE75 5D pop ebp ; 0040ECA0
5EBAAE76 C2 0400 retn 0x4
5EBAAE79 CC int3
5EBAAE7A CC int3
5EBAAE7B CC int3
5EBAAE7C CC int3
5EBAAE7D CC int3
5EBAAE7E CC int3
5EBAAE7F CC int3
5EBAAE80 55 push ebp
5EBAAE81 8BEC mov ebp,esp
5EBAAE83 6A FF push -0x1
5EBAAE85 68 3F540560 push WeChatWi.6005543F
5EBAAE8A 64:A1 00000000 mov eax,dword ptr fs:[0]
5EBAAE90 50 push eax
5EBAAE91 81EC EC050000 sub esp,0x5EC
5EBAAE97 A1 A09B6D60 mov eax,dword ptr ds:[0x606D9BA0]
5EBAAE9C 33C5 xor eax,ebp
5EBAAE9E 8945 F0 mov dword ptr ss:[ebp-0x10],eax
5EBAAEA1 56 push esi
5EBAAEA2 57 push edi
5EBAAEA3 50 push eax
5EBAAEA4 8D45 F4 lea eax,dword ptr ss:[ebp-0xC]
5EBAAEA7 64:A3 00000000 mov dword ptr fs:[0],eax
5EBAAEAD 8BF1 mov esi,ecx
5EBAAEAF 8B8E FC070000 mov ecx,dword ptr ds:[esi+0x7FC]
5EBAAEB5 6A 28 push 0x28
5EBAAEB7 E8 2DB6A000 call WeChatWi.5F5B64E9
5EBAAEBC 8B96 FC070000 mov edx,dword ptr ds:[esi+0x7FC]
5EBAAEC2 8B8A E00A0000 mov ecx,dword ptr ds:[edx+0xAE0]
5EBAAEC8 85C9 test ecx,ecx
5EBAAECA 74 07 je short WeChatWi.5EBAAED3
5EBAAECC 6A 14 push 0x14
5EBAAECE E8 9D78A200 call WeChatWi.5F5D2770
5EBAAED3 8B8A E40A0000 mov ecx,dword ptr ds:[edx+0xAE4]
5EBAAED9 85C9 test ecx,ecx
5EBAAEDB 74 07 je short WeChatWi.5EBAAEE4
5EBAAEDD 6A 14 push 0x14
5EBAAEDF E8 8C78A200 call WeChatWi.5F5D2770
5EBAAEE4 8B8E FC070000 mov ecx,dword ptr ds:[esi+0x7FC]
5EBAAEEA E8 A1E6E5FF call WeChatWi.5EA09590
5EBAAEEF 8B86 FC070000 mov eax,dword ptr ds:[esi+0x7FC]
5EBAAEF5 8DBE 34080000 lea edi,dword ptr ds:[esi+0x834]
5EBAAEFB C680 A40E0000 0>mov byte ptr ds:[eax+0xEA4],0x1
5EBAAF02 837F 10 00 cmp dword ptr ds:[edi+0x10],0x0
5EBAAF06 0F84 77020000 je WeChatWi.5EBAB183
5EBAAF0C 8D8D 48FEFFFF lea ecx,dword ptr ss:[ebp-0x1B8]
5EBAAF12 E8 29F02E00 call WeChatWi.5EE99F40
5EBAAF17 C745 FC 0000000>mov dword ptr ss:[ebp-0x4],0x0
5EBAAF1E 0F57C0 xorps xmm0,xmm0
5EBAAF21 0F1185 34FAFFFF movups dqword ptr ss:[ebp-0x5CC],xmm0
5EBAAF28 C785 44FAFFFF 0>mov dword ptr ss:[ebp-0x5BC],0x0
5EBAAF32 0F1185 48FAFFFF movups dqword ptr ss:[ebp-0x5B8],xmm0
5EBAAF39 C785 58FAFFFF 0>mov dword ptr ss:[ebp-0x5A8],0x0
5EBAAF43 8D8D 60FAFFFF lea ecx,dword ptr ss:[ebp-0x5A0]
5EBAAF49 C645 FC 02 mov byte ptr ss:[ebp-0x4],0x2
5EBAAF4D E8 0EC52F00 call WeChatWi.5EEA7460
5EBAAF52 8D85 60FAFFFF lea eax,dword ptr ss:[ebp-0x5A0]
5EBAAF58 50 push eax
5EBAAF59 83EC 14 sub esp,0x14
5EBAAF5C 8BCC mov ecx,esp
5EBAAF5E 89A5 1CFAFFFF mov dword ptr ss:[ebp-0x5E4],esp
5EBAAF64 6A 00 push 0x0
5EBAAF66 57 push edi
5EBAAF67 E8 24DD3700 call WeChatWi.5EF28C90
5EBAAF6C C645 FC 04 mov byte ptr ss:[ebp-0x4],0x4
5EBAAF70 833D 606D7660 0>cmp dword ptr ds:[0x60766D60],0x0
5EBAAF77 75 24 jnz short WeChatWi.5EBAAF9D
5EBAAF79 6A 48 push 0x48
5EBAAF7B E8 3A510E01 call WeChatWi.5FC900BA
5EBAAF80 83C4 04 add esp,0x4
5EBAAF83 8985 5CFAFFFF mov dword ptr ss:[ebp-0x5A4],eax
5EBAAF89 8BC8 mov ecx,eax
5EBAAF8B C645 FC 05 mov byte ptr ss:[ebp-0x4],0x5
5EBAAF8F E8 8CED0E00 call WeChatWi.5EC99D20
5EBAAF94 C645 FC 04 mov byte ptr ss:[ebp-0x4],0x4
5EBAAF98 A3 606D7660 mov dword ptr ds:[0x60766D60],eax
5EBAAF9D C645 FC 03 mov byte ptr ss:[ebp-0x4],0x3
5EBAAFA1 E8 2A0F0F00 call WeChatWi.5EC9BED0
5EBAAFA6 84C0 test al,al
5EBAAFA8 74 23 je short WeChatWi.5EBAAFCD
5EBAAFAA 8D45 C4 lea eax,dword ptr ss:[ebp-0x3C]
5EBAAFAD 50 push eax
5EBAAFAE 8D8D 60FAFFFF lea ecx,dword ptr ss:[ebp-0x5A0]
5EBAAFB4 E8 B7F32F00 call WeChatWi.5EEAA370
5EBAAFB9 50 push eax
5EBAAFBA 8D8D 48FAFFFF lea ecx,dword ptr ss:[ebp-0x5B8]
5EBAAFC0 E8 7BE83700 call WeChatWi.5EF29840
5EBAAFC5 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAAFC8 E8 23DE3700 call WeChatWi.5EF28DF0
5EBAAFCD 83BD 4CFAFFFF 0>cmp dword ptr ss:[ebp-0x5B4],0x0
5EBAAFD4 0F9EC0 setle al
5EBAAFD7 84C0 test al,al
5EBAAFD9 0F85 78010000 jnz WeChatWi.5EBAB157
5EBAAFDF 8D45 D8 lea eax,dword ptr ss:[ebp-0x28]
5EBAAFE2 50 push eax
5EBAAFE3 E8 C817DEFF call WeChatWi.5E98C7B0
5EBAAFE8 8BC8 mov ecx,eax
5EBAAFEA E8 21CF2B00 call WeChatWi.5EE67F10
5EBAAFEF 6A 00 push 0x0
5EBAAFF1 50 push eax
5EBAAFF2 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAAFF5 E8 96DC3700 call WeChatWi.5EF28C90
5EBAAFFA C645 FC 06 mov byte ptr ss:[ebp-0x4],0x6
5EBAAFFE 8B45 EC mov eax,dword ptr ss:[ebp-0x14] ; WeChatWi.5F594F8F
5EBAB001 83F8 10 cmp eax,0x10
5EBAB004 72 0F jb short WeChatWi.5EBAB015
5EBAB006 40 inc eax
5EBAB007 6A 01 push 0x1
5EBAB009 50 push eax
5EBAB00A FF75 D8 push dword ptr ss:[ebp-0x28] ; WeChatWi.5F594D63
5EBAB00D E8 FECADCFF call WeChatWi.5E977B10
5EBAB012 83C4 0C add esp,0xC
5EBAB015 833D 606D7660 0>cmp dword ptr ds:[0x60766D60],0x0
5EBAB01C C745 EC 0F00000>mov dword ptr ss:[ebp-0x14],0xF
5EBAB023 C745 E8 0000000>mov dword ptr ss:[ebp-0x18],0x0
5EBAB02A C645 D8 00 mov byte ptr ss:[ebp-0x28],0x0
5EBAB02E 75 20 jnz short WeChatWi.5EBAB050
5EBAB030 6A 48 push 0x48
5EBAB032 E8 83500E01 call WeChatWi.5FC900BA
5EBAB037 83C4 04 add esp,0x4
5EBAB03A 8985 5CFAFFFF mov dword ptr ss:[ebp-0x5A4],eax
5EBAB040 8BC8 mov ecx,eax
5EBAB042 C645 FC 07 mov byte ptr ss:[ebp-0x4],0x7
5EBAB046 E8 D5EC0E00 call WeChatWi.5EC99D20
5EBAB04B A3 606D7660 mov dword ptr ds:[0x60766D60],eax
5EBAB050 6A 00 push 0x0
5EBAB052 57 push edi
5EBAB053 8D8D 20FAFFFF lea ecx,dword ptr ss:[ebp-0x5E0]
5EBAB059 E8 32DC3700 call WeChatWi.5EF28C90
5EBAB05E 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB064 C645 FC 08 mov byte ptr ss:[ebp-0x4],0x8
5EBAB068 51 push ecx
5EBAB069 8BD0 mov edx,eax
5EBAB06B 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAB06E E8 8D220F00 call WeChatWi.5EC9D300
5EBAB073 83C4 04 add esp,0x4
5EBAB076 8D8D 20FAFFFF lea ecx,dword ptr ss:[ebp-0x5E0]
5EBAB07C E8 6FDD3700 call WeChatWi.5EF28DF0
5EBAB081 0F57C0 xorps xmm0,xmm0
5EBAB084 C785 30FAFFFF 0>mov dword ptr ss:[ebp-0x5D0],0x0
5EBAB08E 0F1185 20FAFFFF movups dqword ptr ss:[ebp-0x5E0],xmm0
5EBAB095 8B8D 34FAFFFF mov ecx,dword ptr ss:[ebp-0x5CC]
5EBAB09B 85C9 test ecx,ecx
5EBAB09D 74 06 je short WeChatWi.5EBAB0A5
5EBAB09F 66:8339 00 cmp word ptr ds:[ecx],0x0
5EBAB0A3 75 05 jnz short WeChatWi.5EBAB0AA
5EBAB0A5 B9 D8F33C60 mov ecx,WeChatWi.603CF3D8
5EBAB0AA 8B85 48FAFFFF mov eax,dword ptr ss:[ebp-0x5B8]
5EBAB0B0 85C0 test eax,eax
5EBAB0B2 74 06 je short WeChatWi.5EBAB0BA
5EBAB0B4 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAB0B8 75 05 jnz short WeChatWi.5EBAB0BF
5EBAB0BA B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAB0BF 51 push ecx
5EBAB0C0 50 push eax
5EBAB0C1 8D85 20FAFFFF lea eax,dword ptr ss:[ebp-0x5E0]
5EBAB0C7 68 087C3660 push WeChatWi.60367C08 ; UNICODE “我是群聊“%s”的%s”
5EBAB0CC 50 push eax
5EBAB0CD E8 EEE63700 call WeChatWi.5EF297C0
5EBAB0D2 83C4 10 add esp,0x10
5EBAB0D5 C745 E4 0000000>mov dword ptr ss:[ebp-0x1C],0x0
5EBAB0DC C745 E8 0000000>mov dword ptr ss:[ebp-0x18],0x0
5EBAB0E3 C745 EC 0000000>mov dword ptr ss:[ebp-0x14],0x0
5EBAB0EA 8D95 20FAFFFF lea edx,dword ptr ss:[ebp-0x5E0]
5EBAB0F0 C645 FC 0A mov byte ptr ss:[ebp-0x4],0xA
5EBAB0F4 8D4D E4 lea ecx,dword ptr ss:[ebp-0x1C]
5EBAB0F7 E8 04DAEEFF call WeChatWi.5EA98B00
5EBAB0FC 8B8E FC070000 mov ecx,dword ptr ds:[esi+0x7FC]
5EBAB102 8D45 E4 lea eax,dword ptr ss:[ebp-0x1C]
5EBAB105 50 push eax
5EBAB106 E8 4514E6FF call WeChatWi.5EA0C550
5EBAB10B 8D4D E4 lea ecx,dword ptr ss:[ebp-0x1C]
5EBAB10E E8 6D38E6FF call WeChatWi.5EA0E980
5EBAB113 8D8D 20FAFFFF lea ecx,dword ptr ss:[ebp-0x5E0]
5EBAB119 E8 D2DC3700 call WeChatWi.5EF28DF0
5EBAB11E 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAB121 E8 CADC3700 call WeChatWi.5EF28DF0
5EBAB126 8D8D 60FAFFFF lea ecx,dword ptr ss:[ebp-0x5A0]
5EBAB12C E8 0FCC2F00 call WeChatWi.5EEA7D40
5EBAB131 8D8D 48FAFFFF lea ecx,dword ptr ss:[ebp-0x5B8]
5EBAB137 E8 B4DC3700 call WeChatWi.5EF28DF0
5EBAB13C 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB142 E8 A9DC3700 call WeChatWi.5EF28DF0
5EBAB147 8D8D 48FEFFFF lea ecx,dword ptr ss:[ebp-0x1B8]
5EBAB14D E8 EEEF2E00 call WeChatWi.5EE9A140
5EBAB152 E9 66020000 jmp WeChatWi.5EBAB3BD
5EBAB157 8D8D 60FAFFFF lea ecx,dword ptr ss:[ebp-0x5A0]
5EBAB15D E8 DECB2F00 call WeChatWi.5EEA7D40
5EBAB162 8D8D 48FAFFFF lea ecx,dword ptr ss:[ebp-0x5B8]
5EBAB168 E8 83DC3700 call WeChatWi.5EF28DF0
5EBAB16D 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB173 E8 78DC3700 call WeChatWi.5EF28DF0
5EBAB178 8D8D 48FEFFFF lea ecx,dword ptr ss:[ebp-0x1B8]
5EBAB17E E8 BDEF2E00 call WeChatWi.5EE9A140
5EBAB183 0F57C0 xorps xmm0,xmm0
5EBAB186 C785 44FAFFFF 0>mov dword ptr ss:[ebp-0x5BC],0x0
5EBAB190 0F1185 34FAFFFF movups dqword ptr ss:[ebp-0x5CC],xmm0
5EBAB197 BA 25050000 mov edx,0x525
5EBAB19C C745 FC 0B00000>mov dword ptr ss:[ebp-0x4],0xB
5EBAB1A3 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAB1A6 E8 05EA3700 call WeChatWi.5EF29BB0
5EBAB1AB 50 push eax
5EBAB1AC 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB1B2 E8 89E63700 call WeChatWi.5EF29840
5EBAB1B7 8D4D C4 lea ecx,dword ptr ss:[ebp-0x3C]
5EBAB1BA E8 31DC3700 call WeChatWi.5EF28DF0
5EBAB1BF 0F57C0 xorps xmm0,xmm0
5EBAB1C2 C785 18FAFFFF 0>mov dword ptr ss:[ebp-0x5E8],0x0
5EBAB1CC 0F1185 08FAFFFF movups dqword ptr ss:[ebp-0x5F8],xmm0
5EBAB1D3 8D45 C0 lea eax,dword ptr ss:[ebp-0x40]
5EBAB1D6 C645 FC 0C mov byte ptr ss:[ebp-0x4],0xC
5EBAB1DA 50 push eax
5EBAB1DB E8 D015DEFF call WeChatWi.5E98C7B0
5EBAB1E0 8BC8 mov ecx,eax
5EBAB1E2 E8 29CD2B00 call WeChatWi.5EE67F10
5EBAB1E7 6A 00 push 0x0
5EBAB1E9 50 push eax
5EBAB1EA 8D8D 08FAFFFF lea ecx,dword ptr ss:[ebp-0x5F8]
5EBAB1F0 E8 8BDE3700 call WeChatWi.5EF29080
5EBAB1F5 8B45 D4 mov eax,dword ptr ss:[ebp-0x2C]
5EBAB1F8 83F8 10 cmp eax,0x10
5EBAB1FB 72 0F jb short WeChatWi.5EBAB20C
5EBAB1FD 40 inc eax
5EBAB1FE 6A 01 push 0x1
5EBAB200 50 push eax
5EBAB201 FF75 C0 push dword ptr ss:[ebp-0x40]
5EBAB204 E8 07C9DCFF call WeChatWi.5E977B10
5EBAB209 83C4 0C add esp,0xC
5EBAB20C 0F57C0 xorps xmm0,xmm0
5EBAB20F C785 58FAFFFF 0>mov dword ptr ss:[ebp-0x5A8],0x0
5EBAB219 0F1185 48FAFFFF movups dqword ptr ss:[ebp-0x5B8],xmm0
5EBAB220 C645 FC 0D mov byte ptr ss:[ebp-0x4],0xD
5EBAB224 833D 606D7660 0>cmp dword ptr ds:[0x60766D60],0x0
5EBAB22B 75 24 jnz short WeChatWi.5EBAB251
5EBAB22D 6A 48 push 0x48
5EBAB22F E8 864E0E01 call WeChatWi.5FC900BA
5EBAB234 83C4 04 add esp,0x4
5EBAB237 8985 5CFAFFFF mov dword ptr ss:[ebp-0x5A4],eax
5EBAB23D 8BC8 mov ecx,eax
5EBAB23F C645 FC 0E mov byte ptr ss:[ebp-0x4],0xE
5EBAB243 E8 D8EA0E00 call WeChatWi.5EC99D20
5EBAB248 C645 FC 0D mov byte ptr ss:[ebp-0x4],0xD
5EBAB24C A3 606D7660 mov dword ptr ds:[0x60766D60],eax
5EBAB251 6A 01 push 0x1
5EBAB253 8D95 48FAFFFF lea edx,dword ptr ss:[ebp-0x5B8]
5EBAB259 8D8D 08FAFFFF lea ecx,dword ptr ss:[ebp-0x5F8]
5EBAB25F E8 7C1B0F00 call WeChatWi.5EC9CDE0
5EBAB264 8B85 48FAFFFF mov eax,dword ptr ss:[ebp-0x5B8]
5EBAB26A 83C4 04 add esp,0x4
5EBAB26D 85C0 test eax,eax
5EBAB26F 74 06 je short WeChatWi.5EBAB277
5EBAB271 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAB275 75 05 jnz short WeChatWi.5EBAB27C
5EBAB277 B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAB27C 50 push eax
5EBAB27D 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB283 E8 68DE3700 call WeChatWi.5EF290F0
5EBAB288 8B85 34FAFFFF mov eax,dword ptr ss:[ebp-0x5CC]
5EBAB28E 85C0 test eax,eax
5EBAB290 74 06 je short WeChatWi.5EBAB298
5EBAB292 66:8338 00 cmp word ptr ds:[eax],0x0
5EBAB296 75 05 jnz short WeChatWi.5EBAB29D
5EBAB298 B8 D8F33C60 mov eax,WeChatWi.603CF3D8
5EBAB29D 50 push eax
5EBAB29E 8D4D A8 lea ecx,dword ptr ss:[ebp-0x58]
5EBAB2A1 E8 FA14E0FF call WeChatWi.5E9AC7A0
5EBAB2A6 C645 FC 0F mov byte ptr ss:[ebp-0x4],0xF
5EBAB2AA 8D45 C0 lea eax,dword ptr ss:[ebp-0x40]
5EBAB2AD FF75 B8 push dword ptr ss:[ebp-0x48]
5EBAB2B0 8D4D A8 lea ecx,dword ptr ss:[ebp-0x58]
5EBAB2B3 6A 00 push 0x0
5EBAB2B5 50 push eax
5EBAB2B6 E8 05E1EEFF call WeChatWi.5EA993C0
5EBAB2BB 8378 14 08 cmp dword ptr ds:[eax+0x14],0x8
5EBAB2BF 72 02 jb short WeChatWi.5EBAB2C3
5EBAB2C1 8B00 mov eax,dword ptr ds:[eax] ; WeChatWi.5F594D63
5EBAB2C3 6A FF push -0x1
5EBAB2C5 0F57C0 xorps xmm0,xmm0
5EBAB2C8 C785 30FAFFFF 0>mov dword ptr ss:[ebp-0x5D0],0x0
5EBAB2D2 50 push eax
5EBAB2D3 8D8D 20FAFFFF lea ecx,dword ptr ss:[ebp-0x5E0]
5EBAB2D9 0F1185 20FAFFFF movups dqword ptr ss:[ebp-0x5E0],xmm0
5EBAB2E0 E8 1BDC3700 call WeChatWi.5EF28F00
5EBAB2E5 8B45 D4 mov eax,dword ptr ss:[ebp-0x2C]
5EBAB2E8 83F8 08 cmp eax,0x8
5EBAB2EB 72 0F jb short WeChatWi.5EBAB2FC
5EBAB2ED 40 inc eax
5EBAB2EE 6A 02 push 0x2
5EBAB2F0 50 push eax
5EBAB2F1 FF75 C0 push dword ptr ss:[ebp-0x40]
5EBAB2F4 E8 17C8DCFF call WeChatWi.5E977B10
5EBAB2F9 83C4 0C add esp,0xC
5EBAB2FC C745 E4 0000000>mov dword ptr ss:[ebp-0x1C],0x0
5EBAB303 C745 E8 0000000>mov dword ptr ss:[ebp-0x18],0x0
5EBAB30A C745 EC 0000000>mov dword ptr ss:[ebp-0x14],0x0
5EBAB311 8D95 20FAFFFF lea edx,dword ptr ss:[ebp-0x5E0]
5EBAB317 C645 FC 11 mov byte ptr ss:[ebp-0x4],0x11
5EBAB31B 8D4D E4 lea ecx,dword ptr ss:[ebp-0x1C]
5EBAB31E E8 DDD7EEFF call WeChatWi.5EA98B00
5EBAB323 8B8E FC070000 mov ecx,dword ptr ds:[esi+0x7FC]
5EBAB329 8D45 E4 lea eax,dword ptr ss:[ebp-0x1C]
5EBAB32C 50 push eax
5EBAB32D E8 1E12E6FF call WeChatWi.5EA0C550
5EBAB332 8B75 E4 mov esi,dword ptr ss:[ebp-0x1C]
5EBAB335 85F6 test esi,esi
5EBAB337 74 2D je short WeChatWi.5EBAB366
5EBAB339 8B55 E8 mov edx,dword ptr ss:[ebp-0x18]
5EBAB33C 51 push ecx
5EBAB33D 8BCE mov ecx,esi
5EBAB33F E8 BC48E6FF call WeChatWi.5EA0FC00
5EBAB344 8B4D EC mov ecx,dword ptr ss:[ebp-0x14] ; WeChatWi.5F594F8F
5EBAB347 B8 398EE338 mov eax,0x38E38E39
5EBAB34C 2BCE sub ecx,esi
5EBAB34E F7E9 imul ecx
5EBAB350 6A 48 push 0x48
5EBAB352 C1FA 04 sar edx,0x4
5EBAB355 8BC2 mov eax,edx
5EBAB357 C1E8 1F shr eax,0x1F
5EBAB35A 03C2 add eax,edx
5EBAB35C 50 push eax
5EBAB35D 56 push esi
5EBAB35E E8 ADC7DCFF call WeChatWi.5E977B10
5EBAB363 83C4 10 add esp,0x10
5EBAB366 8D8D 20FAFFFF lea ecx,dword ptr ss:[ebp-0x5E0]
5EBAB36C E8 7FDA3700 call WeChatWi.5EF28DF0
5EBAB371 8B45 BC mov eax,dword ptr ss:[ebp-0x44]
5EBAB374 83F8 08 cmp eax,0x8
5EBAB377 72 0F jb short WeChatWi.5EBAB388
5EBAB379 6A 02 push 0x2
5EBAB37B 40 inc eax
5EBAB37C 50 push eax
5EBAB37D FF75 A8 push dword ptr ss:[ebp-0x58]
5EBAB380 E8 8BC7DCFF call WeChatWi.5E977B10
5EBAB385 83C4 0C add esp,0xC
5EBAB388 33C0 xor eax,eax
5EBAB38A C745 BC 0700000>mov dword ptr ss:[ebp-0x44],0x7
5EBAB391 8D8D 48FAFFFF lea ecx,dword ptr ss:[ebp-0x5B8]
5EBAB397 C745 B8 0000000>mov dword ptr ss:[ebp-0x48],0x0
5EBAB39E 66:8945 A8 mov word ptr ss:[ebp-0x58],ax
5EBAB3A2 E8 49DA3700 call WeChatWi.5EF28DF0
5EBAB3A7 8D8D 08FAFFFF lea ecx,dword ptr ss:[ebp-0x5F8]
5EBAB3AD E8 3EDA3700 call WeChatWi.5EF28DF0
5EBAB3B2 8D8D 34FAFFFF lea ecx,dword ptr ss:[ebp-0x5CC]
5EBAB3B8 E8 33DA3700 call WeChatWi.5EF28DF0
5EBAB3BD 8B4D F4 mov ecx,dword ptr ss:[ebp-0xC]
5EBAB3C0 64:890D 0000000>mov dword ptr fs:[0],ecx
5EBAB3C7 59 pop ecx ; 0040ECA0
5EBAB3C8 5F pop edi ; 0040ECA0
5EBAB3C9 5E pop esi ; 0040ECA0
5EBAB3CA 8B4D F0 mov ecx,dword ptr ss:[ebp-0x10]
5EBAB3CD 33CD xor ecx,ebp
5EBAB3CF E8 D54C0E01 call WeChatWi.5FC900A9
5EBAB3D4 8BE5 mov esp,ebp
5EBAB3D6 5D pop ebp ; 0040ECA0
5EBAB3D7 C3 retn