Function at 0x100010ac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x10018340
call fcn.100076b4
sub esp, 0xfc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
xor esi, esi
pop ebx
mov dword [ebp - 0x20], esi
push str.http
mov dword [ebp - 4], ebx
push dword [ebp + 8]
call fcn.10007098
pop ecx
test eax, eax
pop ecx
jl 0x10001716
push ecx
lea eax, [ebp + 8]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.100112ee
lea eax, [ebp - 0x18]
push eax
call fcn.100017c7
push 0x10026a70
mov byte [ebp - 4], 2
push dword [ebp - 0x18]
call fcn.1000722d
add esp, 0x10
test eax, eax
je 0x10001707
lea eax, [ebp + 0x10]
push eax
call fcn.10001000
mov edi, dword [ebp + 0xc]
pop ecx
push edi
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.100112ee
push ecx
lea eax, [ebp + 0x10]
mov ecx, esp
mov dword [ebp - 0x48], esp
push eax
mov byte [ebp - 4], 3
call fcn.100112ee
mov ecx, dword [ebp + 0x14]
mov byte [ebp - 4], 2
call fcn.1000314f
cmp eax, esi
mov dword [ebp - 0x20], eax
je 0x10001164
cmp dword [edi + 8], ebx
jge 0x10001707
lea ecx, [ebp - 0x78]
call fcn.100022fa
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x6c]
push str.select_siteid_fromcatchsitename_siteurl_LoginString_from_view_GetSiteLoginAll_where_siteurl_like__
push eax
call fcn.10011864
push str.__and_mainsiteid0_order_by_siteid
push eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 6
push eax
call fcn.100117f0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 8
call fcn.1001155b
push ecx
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.100112ee
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x78]
push eax
call fcn.100023dd
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 9
cmp dword [ebp - 0x14], esi
jne 0x100011d5
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
call fcn.10002010
cmp ax, si
jne 0x100016cf
cmp dword [ebp - 0x20], esi
jne 0x100011ee
mov dword [ebp - 0x20], ebx
mov ebx, str.siteid
mov word [ebp - 0x98], 8
push ebx
call fcn.1001026c
cmp eax, esi
mov dword [ebp - 0x90], eax
jne 0x1000121a
test ebx, ebx
je 0x1000121a
push 0x8007000e
call fcn.100103b1
cmp dword [ebp - 0x14], esi
mov byte [ebp - 4], 0xa
jne 0x1000122d
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.1000205c
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xb
call fcn.10001e48
mov ecx, dword [eax]
mov byte [ebp - 4], 0xc
cmp ecx, esi
je 0x10001261
call fcn.10001dec
jmp 0x10001263
xor eax, eax
push eax
lea ecx, [ebp - 0x30]
call fcn.100115c9
mov ecx, dword [ebp - 0x40]
cmp ecx, esi
je 0x1000127b
call fcn.10001dbf
mov dword [ebp - 0x40], esi
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0xf
push eax
call edi
cmp eax, esi
jge 0x10001292
push eax
call fcn.100103b1
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xe
push eax
call edi
cmp eax, esi
jge 0x100012a9
push eax
call fcn.100103b1
mov ebx, str.fromcatchsitename
mov word [ebp - 0xa8], 8
push ebx
call fcn.1001026c
cmp eax, esi
mov dword [ebp - 0xa0], eax
jne 0x100012d5
test ebx, ebx
je 0x100012d5
push 0x8007000e
call fcn.100103b1
cmp dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x11
jne 0x100012e8
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.1000205c
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x12
call fcn.10001e48
mov ecx, dword [eax]
mov byte [ebp - 4], 0x13
cmp ecx, esi
je 0x1000131c
call fcn.10001dec
jmp 0x1000131e
xor eax, eax
push eax
lea ecx, [ebp - 0x4c]
call fcn.100115c9
mov ecx, dword [ebp - 0x50]
cmp ecx, esi
je 0x10001336
call fcn.10001dbf
mov dword [ebp - 0x50], esi
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 0x16
push eax
call edi
cmp eax, esi
jge 0x1000134d
push eax
call fcn.100103b1
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x15
push eax
call edi
cmp eax, esi
jge 0x10001364
push eax
call fcn.100103b1
mov ebx, str.siteurl
mov word [ebp - 0xb8], 8
push ebx
call fcn.1001026c
cmp eax, esi
mov dword [ebp - 0xb0], eax
jne 0x10001390
test ebx, ebx
je 0x10001390
push 0x8007000e
call fcn.100103b1
cmp dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x18
jne 0x100013a3
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1000205c
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x19
call fcn.10001e48
mov ecx, dword [eax]
mov byte [ebp - 4], 0x1a
cmp ecx, esi
je 0x100013d7
call fcn.10001dec
jmp 0x100013d9
xor eax, eax
push eax
lea ecx, [ebp - 0x28]
call fcn.100115c9
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
je 0x100013f1
call fcn.10001dbf
mov dword [ebp - 0x2c], esi
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1d
push eax
call edi
cmp eax, esi
jge 0x10001408
push eax
call fcn.100103b1
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 0x1c
push eax
call edi
cmp eax, esi
jge 0x1000141f
push eax
call fcn.100103b1
mov ebx, str.LoginString
mov word [ebp - 0x88], 8
push ebx
call fcn.1001026c
cmp eax, esi
mov dword [ebp - 0x80], eax
jne 0x10001448
test ebx, ebx
je 0x10001448
push 0x8007000e
call fcn.100103b1
cmp dword [ebp - 0x14], esi
mov byte [ebp - 4], 0x1f
jne 0x1000145b
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.1000205c
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x20
call fcn.10001e48
mov ecx, dword [eax]
mov byte [ebp - 4], 0x21
cmp ecx, esi
je 0x1000148f
call fcn.10001dec
jmp 0x10001491
xor eax, eax
push eax
lea ecx, [ebp - 0x1c]
call fcn.100115c9
mov ecx, dword [ebp - 0x44]
cmp ecx, esi
je 0x100014a9
call fcn.10001dbf
mov dword [ebp - 0x44], esi
lea eax, [ebp - 0x108]
mov byte [ebp - 4], 0x24
push eax
call edi
cmp eax, esi
jge 0x100014c0
push eax
call fcn.100103b1
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 0x23
push eax
call edi
cmp eax, esi
jge 0x100014d7
push eax
call fcn.100103b1
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 8], esi
jle 0x100014ef
lea ecx, [ebp - 0x1c]
call fcn.10010a43
lea ecx, [ebp - 0x1c]
call fcn.100109f7
push 0x10020120
push dword [ebp - 0x1c]
call fcn.10007098
pop ecx
test eax, eax
pop ecx
mov eax, 0x1002011c
je 0x1000150c
mov eax, 0x10020118
push eax
lea ecx, [ebp - 0x3c]
call fcn.100115c9
mov esi, dword [ebp - 0x18]
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0x26
call fcn.100112ee
lea eax, [ebp - 0x58]
push eax
call fcn.100017c7
mov eax, dword [eax]
pop ecx
pop ecx
push esi
push eax
call fcn.10007098
mov ebx, eax
pop ecx
neg ebx
pop ecx
sbb bl, bl
lea ecx, [ebp - 0x58]
inc bl
call fcn.1001155b
test bl, bl
je 0x10001671
lea eax, [ebp - 0x3c]
mov esi, 0x10020114
push eax
push esi
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
call fcn.100112ee
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x24]
push eax
call fcn.10003b59
push eax
push esi
push ecx
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x34], esp
push eax
mov byte [ebp - 4], 0x27
call fcn.100112ee
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x48]
push eax
call fcn.10003b59
mov esi, eax
lea eax, [ebp - 0x30]
push 0x10020114
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x28
call fcn.100117f0
push esi
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x29
push eax
call fcn.1001178a
push eax
lea eax, [ebp - 0x5c]
push eax
mov byte [ebp - 4], 0x2a
call fcn.100117f0
push eax
lea eax, [ebp - 0x60]
push eax
mov byte [ebp - 4], 0x2b
call fcn.1001178a
push eax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 4], 0x2c
call fcn.100117f0
push eax
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0x2d
call fcn.1001178a
mov edx, dword [ebp + 0xc]
push eax
mov byte [ebp - 4], 0x2e
mov ecx, dword [edx + 8]
push ecx
mov ecx, edx
call fcn.10010cf6
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x2d
call fcn.1001155b
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x54]
call fcn.1001155b
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x2b
call fcn.1001155b
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x2a
call fcn.1001155b
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.1001155b
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x28
call fcn.1001155b
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x27
call fcn.1001155b
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x26
call fcn.1001155b
cmp dword [ebp - 0x14], 0
jne 0x10001681
push 0x80004003
call fcn.100103b1
mov ecx, dword [ebp - 0x14]
call fcn.10002038
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x23
call fcn.1001155b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1c
call fcn.1001155b
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x15
call fcn.1001155b
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xe
call fcn.1001155b
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 9
call fcn.1001155b
push 1
xor esi, esi
pop ebx
jmp 0x100011c6
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 8
cmp eax, esi
je 0x100016e0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.1001155b
lea ecx, [ebp - 0x78]
mov dword [ebp - 4], 4
call fcn.1000255a
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 2
call fcn.10001788
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.1001155b
mov esi, dword [ebp - 0x20]
and byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.1001155b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x10]
call fcn.1001155b
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret