Function at 0x100bc140
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x1012e7c1
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push ebp
push edi
mov eax, dword [0x103b2018]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov edi, ecx
lea ecx, [esp + 0x14]
call dword [0x1013762c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x34], 0
call dword [0x1013762c]
mov ebx, 1
mov ecx, esi
mov byte [esp + 0x34], bl
call sym.NirvanaBiz.dll_public:_void___thiscall_SyncReq_HTML::Reset_void_
push str.fengchao.baidu.com
lea ecx, [esi + 0xc]
call dword [0x10137600]
mov ecx, dword [edi + 0x98]
mov edx, dword [ecx + 4]
add ecx, 4
lea eax, [esp + 0x18]
push eax
mov eax, dword [edx + 0x5c]
call eax
mov ecx, eax
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetBaiduID_void_
mov byte [esp + 0x34], 2
mov ecx, dword [eax]
push ecx
lea edx, [esi + 0x10]
push str._nirvana_request.ajax_pathMOD_keyword_diffbiduserid_s
push edx
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [edi + 0x98]
mov ecx, dword [ecx + 0x630]
lea eax, [esp + 0x18]
push eax
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetFirstBGLoginCookie_void_
lea ebp, [esi + 0x14]
push eax
mov ecx, ebp
mov byte [esp + 0x38], 3
call dword [0x101375f4]
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x1036dca8
call dword [0x10137604]
push ecx
mov byte [esp + 0x3c], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x1036ddf0
call dword [0x10137604]
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push ebp
mov byte [esp + 0x44], 5
call dword [0x1013761c]
lea edx, [esp + 0x24]
push edx
mov byte [esp + 0x44], bl
call sub.NirvanaUtils.dll_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______cdecl_GFindInTagFLFR_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t_____class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t____
add esp, 0x10
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], 6
call dword [0x101375f4]
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov byte [esi + 0x48], bl
mov ecx, dword [edi + 0x98]
mov ecx, dword [ecx + 0x630]
lea eax, [esp + 0x18]
push eax
call sym.NirvanaBiz.dll_public:_class_ATL::CStringT_wchar_t__class_StrTraitMFC_DLL_wchar_t__class_ATL::ChTraitsCRT_wchar_t______thiscall_CBaiduUser::GetBaiduID_void_
mov byte [esp + 0x34], 7
mov edx, dword [esp + 0x14]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x18]
push str.pathMOD__2Fkeyword__2Fdiffbiduserid_stoken_sparams
push ecx
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
add esp, 0x10
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push str._winfoid2bid_:
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CSimpleStringT_wchar_t_1_::Append]
mov ebp, dword [esp + 0x3c]
mov eax, dword [ebp + 8]
xor edi, edi
test eax, eax
jle 0x100bc332
test edi, edi
jl 0x100bc3b7
cmp edi, eax
jge 0x100bc3b7
mov edx, dword [ebp + 4]
mov ecx, dword [edx + edi*4]
fld qword [ecx + 0x10]
lea eax, [edx + edi*4]
sub esp, 8
mov eax, ecx
fstp qword [esp]
mov edx, dword [eax + 0xc]
mov eax, dword [eax + 8]
push edx
push eax
lea ecx, [esp + 0x20]
push str.__I64d_:_.2f_
push ecx
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::AppendFormat]
mov eax, dword [ebp + 8]
add edi, ebx
add esp, 0x18
cmp edi, eax
jl 0x100bc2ea
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 0xc]
dec eax
push eax
push 0
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Mid_1]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x38], 8
call dword [0x101375f4]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x34], bl
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push 0x1037ea30
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CSimpleStringT_wchar_t_1_::Append]
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x28]
call dword [0x101375f4]
lea ecx, [esp + 0x10]
mov dword [esi + 0x44], 0xfde9
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
add esp, 0x28
ret 4
call sub.mfc90u.dll_AfxThrowInvalidArgException
int3