Function at 0x1007b070
Capabilities:
Contain obfuscated stackstrings
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100dfb38
mov eax, dword fs:[0]
push eax
sub esp, 0x2f0
mov eax, dword [0x1010e07c]
xor eax, esp
mov dword [esp + 0x2e8], eax
push ebx
push esi
push edi
mov eax, dword [0x1010e07c]
xor eax, esp
push eax
lea eax, [esp + 0x300]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov edi, edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ecx
cmp dword [edi + 0x10], ebx
jne 0x1007b0d7
or eax, 0xffffffff
jmp 0x1007baa0
push 1
push 2
lea ecx, [esp + 0x2c]
call fcn.100042d0
mov dword [esp + 0x308], ebx
push edi
push ecx
lea edx, [esp + 0x2c]
push str.url:
push edx
call fcn.10007530
add esp, 0xc
push eax
call fcn.1000f0c0
add esp, 8
push 0x17
mov edi, 0xf
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xe0]
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
call fcn.100065d0
mov byte [esp + 0x308], 1
push 0xd
push str.ReportMgr.cpp
lea ecx, [esp + 0xfc]
mov dword [esp + 0x110], edi
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
call fcn.100065d0
mov byte [esp + 0x308], 2
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x28]
call fcn.100043f0
mov byte [esp + 0x308], 3
push eax
lea ecx, [esp + 0xdc]
push ecx
push 0x10
lea edx, [esp + 0x100]
push edx
push 2
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [esp + 0x308], 2
cmp dword [esp + 0xd0], 8
jb 0x1007b1c9
mov eax, dword [esp + 0xbc]
push eax
call fcn.100b2678
add esp, 4
xor ecx, ecx
mov dword [esp + 0xd0], 7
mov dword [esp + 0xcc], ebx
mov word [esp + 0xbc], cx
mov byte [esp + 0x308], 1
cmp dword [esp + 0x108], 0x10
jb 0x1007b207
mov edx, dword [esp + 0xf4]
push edx
call fcn.100b2678
add esp, 4
mov dword [esp + 0x108], edi
mov dword [esp + 0x104], ebx
mov byte [esp + 0xf4], bl
mov byte [esp + 0x308], bl
cmp dword [esp + 0xec], 0x10
jb 0x1007b23d
mov eax, dword [esp + 0xd8]
push eax
call fcn.100b2678
add esp, 4
mov dword [esp + 0xec], edi
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xd8], bl
mov dword [esp + 0x308], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.100029c0
push 1
push 2
lea ecx, [esp + 0x2c]
call fcn.10004d10
mov dword [esp + 0x308], 4
push esi
push ecx
lea ecx, [esp + 0x2c]
push str.body:
push ecx
call fcn.10007790
add esp, 0xc
push eax
call fcn.100079e0
add esp, 8
push 0x17
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xfc]
mov dword [esp + 0x110], edi
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], bl
call fcn.100065d0
mov byte [esp + 0x308], 5
push 0xd
push str.ReportMgr.cpp
lea ecx, [esp + 0xe0]
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], bl
call fcn.100065d0
mov byte [esp + 0x308], 6
lea edx, [esp + 0xbc]
push edx
lea ecx, [esp + 0x28]
call fcn.10004e30
mov byte [esp + 0x308], 7
push eax
lea eax, [esp + 0xf8]
push eax
push 0x11
lea ecx, [esp + 0xe4]
push ecx
push 3
call fcn.10004af0
mov ecx, eax
call fcn.10058a20
mov byte [esp + 0x308], 6
cmp dword [esp + 0xd0], 0x10
jb 0x1007b357
mov edx, dword [esp + 0xbc]
push edx
call fcn.100b2678
add esp, 4
mov dword [esp + 0xd0], edi
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xbc], bl
mov byte [esp + 0x308], 5
cmp dword [esp + 0xec], 0x10
jb 0x1007b38e
mov eax, dword [esp + 0xd8]
push eax
call fcn.100b2678
add esp, 4
mov dword [esp + 0xec], edi
mov dword [esp + 0xe8], ebx
mov byte [esp + 0xd8], bl
mov byte [esp + 0x308], 4
cmp dword [esp + 0x108], 0x10
jb 0x1007b3c5
mov ecx, dword [esp + 0xf4]
push ecx
call fcn.100b2678
add esp, 4
mov dword [esp + 0x108], edi
mov dword [esp + 0x104], ebx
mov byte [esp + 0xf4], bl
mov dword [esp + 0x308], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.10002a50
lea edx, [esp + 0x12c]
push edx
mov edx, dword [esp + 0x20]
call fcn.10070460
mov dword [esp + 0x308], 8
push 0x10
push str.Content_Length:
lea ecx, [esp + 0x118]
mov dword [esp + 0x12c], edi
mov dword [esp + 0x128], ebx
mov byte [esp + 0x118], bl
call fcn.100065d0
mov byte [esp + 0x308], 9
mov eax, dword [esi + 0x10]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.1005f4b0
add esp, 8
mov byte [esp + 0x308], 0xa
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x11c]
call fcn.10005970
push 0x31
push str._r_nContent_Type:_application_x_www_form_urlencoded
mov ecx, eax
call fcn.10005a60
push 0x19
push str._r_nReferer:_www.client.com
mov ecx, eax
call fcn.10005a60
mov byte [esp + 0x308], 9
cmp dword [esp + 0xd0], 0x10
jb 0x1007b4a4
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.100b2678
add esp, 4
lea edx, [esp + 0x110]
push edx
lea eax, [esp + 0xc0]
push eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], ebx
mov byte [esp + 0xc4], bl
call fcn.1005ede0
add esp, 8
mov byte [esp + 0x308], 0xb
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x21c]
call fcn.10005f30
mov byte [esp + 0x308], 9
cmp dword [esp + 0xd0], 8
jb 0x1007b50b
mov ecx, dword [esp + 0xbc]
push ecx
call fcn.100b2678
add esp, 4
mov eax, dword [esi + 0x10]
xor edx, edx
mov edi, 7
mov dword [esp + 0xd0], edi
mov dword [esp + 0xcc], ebx
mov word [esp + 0xbc], dx
cmp eax, ebx
je 0x1007b67a
cmp dword [esi + 0x14], 0x10
jb 0x1007b53b
mov esi, dword [esi]
mov ebx, esi
mov edi, eax
lea esi, [esp + 0x12c]
call fcn.10071b30
test al, al
jne 0x1007b673
push 1
push 2
lea ecx, [esp + 0x2c]
call fcn.100042d0
mov byte [esp + 0x308], 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea eax, [esp + 0x2c]
push str.SADTS_FAILED._GetLastError_is:
push eax
call fcn.10007530
add esp, 0xc
mov ecx, eax
call fcn.1005be10
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xdc]
call fcn.100038c0
mov byte [esp + 0x308], 0x11
push str.ReportMgr.cpp
lea ecx, [esp + 0xc0]
call fcn.100038c0
mov bl, 0x12
mov byte [esp + 0x308], bl
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x28]
call fcn.100043f0
mov byte [esp + 0x308], 0x13
push eax
lea edx, [esp + 0xdc]
push edx
push 0x27
lea eax, [esp + 0xc8]
push eax
push 0
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [esp + 0x308], bl
lea ecx, [esp + 0xf4]
call fcn.100041b0
mov byte [esp + 0x308], 0x11
lea ecx, [esp + 0xbc]
call fcn.10003930
mov byte [esp + 0x308], 0x10
lea ecx, [esp + 0xd8]
call fcn.10003930
mov byte [esp + 0x308], 9
lea ecx, [esp + 0x24]
call fcn.100029c0
mov byte [esp + 0x308], 8
lea ecx, [esp + 0x110]
call fcn.10003930
mov dword [esp + 0x308], 0xffffffff
mov ecx, esi
push ecx
call fcn.100706c0
mov eax, 0xfffffffd
jmp 0x1007baa0
xor ebx, ebx
mov edi, 7
push 0x5a
xor edx, edx
push str.Mozilla_4.0__compatible__MSIE_8.0__Windows_NT_5.1__Trident_4.0__GTB7.4__FX1.0___like_Gecko
lea ecx, [esp + 0xe0]
mov dword [esp + 0xf4], edi
mov dword [esp + 0xf0], ebx
mov word [esp + 0xe0], dx
call fcn.10006a20
mov byte [esp + 0x308], 0x14
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xe0]
push eax
lea ecx, [esp + 0x274]
call fcn.10005f30
mov byte [esp + 0x308], 9
cmp dword [esp + 0xec], 8
jb 0x1007b6e6
mov ecx, dword [esp + 0xd8]
push ecx
call fcn.100b2678
add esp, 4
xor edx, edx
push 0x100f6850
lea ecx, [esp + 0xc0]
mov dword [esp + 0xf0], edi
mov dword [esp + 0xec], ebx
mov word [esp + 0xdc], dx
call fcn.1000b7d0
mov byte [esp + 0x308], 0x19
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xc4]
push eax
lea ecx, [esp + 0x1b0]
mov dword [esp + 0x20], 1
call fcn.10005f30
mov dword [esp + 0x308], 9
mov eax, 1
mov dword [esp + 0x14], eax
and eax, 0xfffffffe
lea ecx, [esp + 0xbc]
mov dword [esp + 0x14], eax
call fcn.100041b0
mov ecx, dword [esp + 0x18]
lea edi, [esp + 0x12c]
call fcn.100709e0
test al, al
jne 0x1007b894
push 1
push 2
lea ecx, [esp + 0x2c]
call fcn.100042d0
mov byte [esp + 0x308], 0x1e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ecx
lea ecx, [esp + 0x2c]
push str.SHR_FAILED._GetLastError_is:
push ecx
call fcn.10007530
add esp, 0xc
mov ecx, eax
call fcn.1005be10
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xdc]
call fcn.100038c0
mov byte [esp + 0x308], 0x1f
push str.ReportMgr.cpp
lea ecx, [esp + 0xc0]
call fcn.100038c0
mov byte [esp + 0x308], 0x20
lea edx, [esp + 0xf4]
push edx
lea ecx, [esp + 0x28]
call fcn.100043f0
mov byte [esp + 0x308], 0x21
push eax
lea eax, [esp + 0xdc]
push eax
push 0x3c
lea ecx, [esp + 0xc8]
push ecx
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [esp + 0x308], 0x20
lea ecx, [esp + 0xf4]
call fcn.100041b0
mov byte [esp + 0x308], 0x1f
lea ecx, [esp + 0xbc]
call fcn.10003930
mov byte [esp + 0x308], 0x1e
lea ecx, [esp + 0xd8]
call fcn.10003930
mov byte [esp + 0x308], 9
lea ecx, [esp + 0x24]
call fcn.100029c0
mov byte [esp + 0x308], 8
lea ecx, [esp + 0x110]
call fcn.10003930
mov dword [esp + 0x308], 0xffffffff
mov edx, edi
push edx
call fcn.100706c0
mov eax, 0xfffffffa
jmp 0x1007baa0
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x130]
call fcn.10071b80
mov byte [esp + 0x308], 0x22
mov ecx, dword [eax + 0x10]
push 3
push 0x100f71cc
push ecx
push ebx
mov ecx, eax
call fcn.10019730
test eax, eax
setne byte [esp + 0x13]
mov byte [esp + 0x308], 9
lea ecx, [esp + 0xbc]
call fcn.100041b0
cmp byte [esp + 0x13], bl
je 0x1007ba35
push 1
push 2
lea ecx, [esp + 0x2c]
call fcn.100042d0
mov byte [esp + 0x308], 0x23
lea edx, [esp + 0xbc]
push edx
lea ecx, [esp + 0x130]
call fcn.10071b80
mov byte [esp + 0x308], 0x24
push eax
push ecx
lea eax, [esp + 0x2c]
push str.code:
push eax
call fcn.10007530
add esp, 0xc
push eax
call fcn.1000f0c0
add esp, 8
mov byte [esp + 0x308], 0x23
lea ecx, [esp + 0xbc]
call fcn.100041b0
push str.CReportMgr::SendRequest
lea ecx, [esp + 0xdc]
call fcn.100038c0
mov byte [esp + 0x308], 0x25
push str.ReportMgr.cpp
lea ecx, [esp + 0xc0]
call fcn.100038c0
mov byte [esp + 0x308], 0x26
lea ecx, [esp + 0xf4]
push ecx
lea ecx, [esp + 0x28]
call fcn.100043f0
mov byte [esp + 0x308], 0x27
push eax
lea edx, [esp + 0xdc]
push edx
push 0x43
lea eax, [esp + 0xc8]
push eax
push ebx
call fcn.10004af0
mov ecx, eax
call fcn.10058f40
mov byte [esp + 0x308], 0x26
lea ecx, [esp + 0xf4]
call fcn.100041b0
mov byte [esp + 0x308], 0x25
lea ecx, [esp + 0xbc]
call fcn.10003930
mov byte [esp + 0x308], 0x23
lea ecx, [esp + 0xd8]
call fcn.10003930
mov byte [esp + 0x308], 9
lea ecx, [esp + 0x24]
call fcn.100029c0
mov byte [esp + 0x308], 8
lea ecx, [esp + 0x110]
call fcn.10003930
mov dword [esp + 0x308], 0xffffffff
lea ecx, [esp + 0x12c]
push ecx
call fcn.100706c0
mov eax, 0xfffffff9
jmp 0x1007baa0
lea edx, [esp + 0xbc]
push edx
lea ecx, [esp + 0x130]
call fcn.10071a50
mov byte [esp + 0x308], 0x28
mov ecx, dword [esp + 0x20]
push eax
call fcn.100070c0
mov byte [esp + 0x308], 9
lea ecx, [esp + 0xbc]
call fcn.100041b0
mov byte [esp + 0x308], 8
lea ecx, [esp + 0x110]
call fcn.10003930
mov dword [esp + 0x308], 0xffffffff
lea eax, [esp + 0x12c]
push eax
call fcn.100706c0
mov eax, 1
mov ecx, dword [esp + 0x300]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2e8]
xor ecx, esp
call fcn.100b2b2c
mov esp, ebp
pop ebp
ret