Function at 0x10010f9d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1c8
mov eax, 0x100292f7
call fcn.10015c84
xor ebx, ebx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x130], 0x2e777777
mov dword [ebp - 0x12c], 0x316f6168
mov dword [ebp - 0x128], 0x632e3332
mov dword [ebp - 0x124], 0x6d6f
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
mov byte [ebp - 0x110], bl
call fcn.100087d4
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], ebx
call fcn.1000f7c7
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 1
call fcn.10007634
push str.__tn
lea ecx, [ebp - 0x14c]
mov byte [ebp - 0x150], 1
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 2
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x194]
mov esi, eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d0]
mov dword [eax], esi
mov eax, dword [esi + 4]
push ebx
push edi
lea ecx, [ebp - 0x14c]
mov dword [eax], esi
mov byte [ebp - 4], 1
call fcn.100052b4
push str._index.php_
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 3
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov esi, eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d0]
mov dword [eax], esi
mov eax, dword [esi + 4]
push ebx
mov dword [eax], esi
mov byte [ebp - 4], 1
push edi
lea ecx, [ebp - 0x14c]
call fcn.100052b4
mov esi, str._tn98071793_hao_pg
push esi
call fcn.100161f0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x188]
call fcn.10007f03
mov esi, str.98071793
push esi
call fcn.100161f0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov byte [ebp - 0x14f], bl
push dword [eax + 4]
mov esi, 0x10037184
push eax
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d0], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0xa0], 0x2e777777
mov dword [ebp - 0x9c], 0x35343332
mov dword [ebp - 0x98], 0x6d6f632e
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov byte [ebp - 0x80], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push 0x1002d02c
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 4
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str._24384_1361
call fcn.100161f0
pop ecx
push eax
push str._24384_1361
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.24384_1361
call fcn.100161f0
pop ecx
push eax
push str.24384_1361
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov word [ebp - 0x150], bx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x58], 0x2e777777
mov dword [ebp - 0x54], 0x61627564
mov dword [ebp - 0x50], 0x6d6f632e
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x38], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push 0x1002d02c
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 5
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
mov dword [ebp - 0x1d4], eax
push edi
lea ecx, [ebp - 0x194]
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str._un_361586_196974
call fcn.100161f0
pop ecx
push eax
push str._un_361586_196974
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.un_361586_196974
call fcn.100161f0
pop ecx
push eax
push str.un_361586_196974
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov word [ebp - 0x150], bx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x34], 0x2e333231
mov dword [ebp - 0x30], 0x6f676f73
mov dword [ebp - 0x2c], 0x6f632e75
mov dword [ebp - 0x28], 0x6d
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x14], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push 0x1002d02c
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 6
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str._11228_2496
call fcn.100161f0
pop ecx
push eax
push str._11228_2496
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.11228_2496
call fcn.100161f0
pop ecx
push eax
push str.11228_2496
lea ecx, [ebp - 0x16c]
call fcn.10007f03
push str.SOGO
push 0x100372a0
mov byte [ebp - 0x150], bl
call fcn.10015fd0
pop ecx
pop ecx
test eax, eax
setne al
mov byte [ebp - 0x14f], al
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 0x7c], 0x2e777777
mov dword [ebp - 0x78], 0x30303633
mov dword [ebp - 0x74], 0x6d6f632e
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov byte [ebp - 0x5c], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push str._index.php
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 7
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str.__srclm
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 8
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str._srclmlsn1f89a86e8f
call fcn.100161f0
pop ecx
push eax
push str._srclmlsn1f89a86e8f
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.lsn1f89a86e8f
call fcn.100161f0
pop ecx
push eax
push str.lsn1f89a86e8f
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov word [ebp - 0x150], bx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0x10c]
push eax
mov dword [ebp - 0x10c], 0x2e6f6168
mov dword [ebp - 0x108], 0x2e303633
mov dword [ebp - 0x104], 0x6e63
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov byte [ebp - 0xec], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push str._index.php
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 9
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str.__srclm
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
mov byte [ebp - 4], 0xa
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d0], eax
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
mov byte [ebp - 4], 1
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.100052b4
push str._srclmlsn1f89a86e8f
call fcn.100161f0
pop ecx
push eax
push str._srclmlsn1f89a86e8f
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.lsn1f89a86e8f
call fcn.100161f0
pop ecx
push eax
push str.lsn1f89a86e8f
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov word [ebp - 0x150], bx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0xe8]
push eax
mov dword [ebp - 0xe8], 0x2e777777
mov dword [ebp - 0xe4], 0x6f676f73
mov dword [ebp - 0xe0], 0x6f632e75
mov dword [ebp - 0xdc], 0x6d
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov byte [ebp - 0xc8], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push str._pidsogou_netb_a3788c8c64fd65c4_5558
call fcn.100161f0
pop ecx
push eax
push str._pidsogou_netb_a3788c8c64fd65c4_5558
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.a3788c8c64fd65c4_5558
call fcn.100161f0
pop ecx
push eax
push str.a3788c8c64fd65c4_5558
lea ecx, [ebp - 0x16c]
call fcn.10007f03
push str._index.htm_pid
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea eax, [ecx + 4]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1d0], eax
lea edx, [ebp - 0x14c]
push edx
push dword [eax]
push ecx
lea ecx, [ebp - 0x194]
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str.SOGO
push 0x100372a0
mov byte [ebp - 0x150], bl
call fcn.10015fd0
pop ecx
pop ecx
test eax, eax
setne al
mov byte [ebp - 0x14f], al
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea eax, [ebp - 0xc4]
push eax
mov dword [ebp - 0xc4], 0x2e777777
mov dword [ebp - 0xc0], 0x36386968
mov dword [ebp - 0xbc], 0x6f632e38
mov dword [ebp - 0xb8], 0x6d
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov byte [ebp - 0xa4], bl
call fcn.100161f0
pop ecx
push eax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x1cc]
call fcn.10007f03
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10007634
push 0x1002d02c
lea ecx, [ebp - 0x14c]
call fcn.100087d4
mov ecx, dword [ebp - 0x194]
lea edx, [ebp - 0x14c]
lea eax, [ecx + 4]
push edx
push dword [eax]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1d0], eax
push ecx
lea ecx, [ebp - 0x194]
call fcn.1000f446
push edi
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
call fcn.1000e46c
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
push ebx
mov dword [ecx], eax
push edi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 1
call fcn.100052b4
push str._88888_8888
call fcn.100161f0
pop ecx
push eax
push str._88888_8888
lea ecx, [ebp - 0x188]
call fcn.10007f03
push str.88888_8888
call fcn.100161f0
pop ecx
push eax
push str.88888_8888
lea ecx, [ebp - 0x16c]
call fcn.10007f03
mov eax, dword [0x10037184]
lea ecx, [ebp - 0x1b0]
push ecx
mov word [ebp - 0x150], bx
push dword [eax + 4]
mov ecx, esi
push eax
mov dword [ebp - 0x1d0], eax
call fcn.1000fab9
push edi
mov ecx, esi
mov dword [ebp - 0x1d4], eax
call fcn.1000e495
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
lea ecx, [ebp - 0x1b0]
call fcn.1000f811
push ebx
push edi
lea ecx, [ebp - 0x1cc]
call fcn.100052b4
mov al, 1
call fcn.10015d07
ret