Function at 0x10013af0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100551ba
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push esi
mov eax, dword [0x101c200c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
mov eax, dword [0x101c2b48]
mov dword [0x101c2b38], 0
test eax, eax
je 0x10013b41
push eax
mov eax, dword [0x101c2b3c]
mov ecx, 0x101c2b3c
call dword [eax + 0xc]
push str.http:__zhzsoft.com_code_code.php_data
mov ecx, 0x101c2b3c
mov dword [0x101c2b48], 0
mov dword [0x101c2b50], 0
mov dword [0x101c2b4c], 0
call fcn.10036bc0
mov eax, dword [0x101c2b74]
mov dword [0x101c2b64], 0
test eax, eax
je 0x10013b8f
push eax
mov eax, dword [0x101c2b68]
mov ecx, 0x101c2b68
call dword [eax + 0xc]
push str.http:__zhzsoft.com_wxpay_openid.php_id
mov ecx, 0x101c2b68
mov dword [0x101c2b74], 0
mov dword [0x101c2b7c], 0
mov dword [0x101c2b78], 0
call fcn.10036bc0
mov eax, dword [0x101c2ba0]
mov dword [0x101c2b90], 0
test eax, eax
je 0x10013bdd
push eax
mov eax, dword [0x101c2b94]
mov ecx, 0x101c2b94
call dword [eax + 0xc]
push str.http:__zhzsoft.com_wxpay_cxopenid.php_uid
mov ecx, 0x101c2b94
mov dword [0x101c2ba0], 0
mov dword [0x101c2ba8], 0
mov dword [0x101c2ba4], 0
call fcn.10036bc0
mov eax, dword [0x101c2bcc]
mov dword [0x101c2bbc], 0
test eax, eax
je 0x10013c2b
push eax
mov eax, dword [0x101c2bc0]
mov ecx, 0x101c2bc0
call dword [eax + 0xc]
push str.http:__zhzsoft.com_onepay_onepay1.php_
mov ecx, 0x101c2bc0
mov dword [0x101c2bcc], 0
mov dword [0x101c2bd4], 0
mov dword [0x101c2bd0], 0
call fcn.10036bc0
mov eax, dword [0x101c2bf8]
mov dword [0x101c2be8], 0
test eax, eax
je 0x10013c79
push eax
mov eax, dword [0x101c2bec]
mov ecx, 0x101c2bec
call dword [eax + 0xc]
push str.http:__zhzsoft.com_wxpay_cx.php_
mov ecx, 0x101c2bec
mov dword [0x101c2bf8], 0
mov dword [0x101c2c00], 0
mov dword [0x101c2bfc], 0
call fcn.10036bc0
mov eax, dword [0x101c2c24]
mov dword [0x101c2c14], 0
test eax, eax
je 0x10013cc7
push eax
mov eax, dword [0x101c2c18]
mov ecx, 0x101c2c18
call dword [eax + 0xc]
push str.http:__zhzsoft.com_onepay_taocan_
mov ecx, 0x101c2c18
mov dword [0x101c2c24], 0
mov dword [0x101c2c2c], 0
mov dword [0x101c2c28], 0
call fcn.10036bc0
lea ecx, [ebp - 0x3c]
call fcn.10015190
mov esi, eax
mov dword [ebp - 4], 0
mov ecx, 0x101c2a7c
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2a80], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2a84], ecx
mov ecx, 0x101c2a8c
mov eax, dword [esi + 0xc]
mov dword [0x101c2a88], eax
mov eax, dword [0x101c2a8c]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2a8c
push eax
call fcn.10003200
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.10002af0
lea ecx, [ebp - 0x68]
call fcn.1002dab0
mov dword [ebp - 4], 1
mov edx, eax
push str.date.ini
lea ecx, [ebp - 0x3c]
call fcn.10039340
add esp, 4
mov esi, eax
mov byte [ebp - 4], 2
mov ecx, 0x101c2ad4
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2ad8], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2adc], ecx
mov ecx, 0x101c2ae4
mov eax, dword [esi + 0xc]
mov dword [0x101c2ae0], eax
mov eax, dword [0x101c2ae4]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2ae4
push eax
call fcn.10003200
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x3c]
call fcn.10002df0
lea edx, [ebp - 0x3c]
mov dword [ebp - 0x10], 1
call fcn.10033d60
push str.config.ini
lea edx, [ebp - 0x3c]
lea ecx, [ebp - 0x68]
call fcn.10039340
add esp, 4
mov esi, eax
mov byte [ebp - 4], 4
mov ecx, 0x101c2b00
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2b04], ecx
mov ecx, 0x101c2b10
mov eax, dword [esi + 8]
mov dword [0x101c2b08], eax
mov eax, dword [esi + 0xc]
mov dword [0x101c2b0c], eax
mov eax, dword [0x101c2b10]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2b10
push eax
call fcn.10003200
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov eax, 1
mov dword [ebp - 0x10], eax
and eax, 0xfffffffe
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.10002af0
lea ecx, [ebp - 0x3c]
call fcn.10002df0
mov dword [ebp - 4], 5
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], 0x101afdf4
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x68]
call fcn.10002df0
mov byte [ebp - 4], 7
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], 0x101b0390
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x94]
call fcn.10002df0
mov byte [ebp - 4], 9
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], str.soft
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x68]
mov edx, 0x101c2b00
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0xc0]
call fcn.1002d840
mov esi, eax
mov byte [ebp - 4], 0xb
mov ecx, 0x101c2c34
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2c38], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2c3c], ecx
mov ecx, 0x101c2c44
mov eax, dword [esi + 0xc]
mov dword [0x101c2c40], eax
mov eax, dword [0x101c2c44]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2c44
push eax
call fcn.10003200
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc0]
call fcn.10002af0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x94]
call fcn.10002af0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.10002af0
lea ecx, [ebp - 0x94]
call fcn.10002df0
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x101afdf4
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x68]
call fcn.10002df0
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], str.openid
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c]
call fcn.10002df0
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.soft
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x68]
mov edx, 0x101c2b00
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.1002d840
mov esi, eax
mov byte [ebp - 4], 0x15
mov ecx, 0x101c2aa8
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2aac], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2ab0], ecx
mov ecx, 0x101c2ab8
mov eax, dword [esi + 0xc]
mov dword [0x101c2ab4], eax
mov eax, dword [0x101c2ab8]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2ab8
push eax
call fcn.10003200
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xc0]
call fcn.10002af0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3c]
call fcn.10002af0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10002af0
lea ecx, [ebp - 0x94]
call fcn.10002df0
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x101afdf4
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x68]
call fcn.10002df0
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], str.appid
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3c]
call fcn.10002df0
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.soft
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x68]
mov edx, 0x101c2b00
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.1002d840
mov esi, eax
mov byte [ebp - 4], 0x1f
mov ecx, 0x101c2e70
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2e74], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2e78], ecx
mov ecx, 0x101c2e80
mov eax, dword [esi + 0xc]
mov dword [0x101c2e7c], eax
mov eax, dword [0x101c2e80]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2e80
push eax
call fcn.10003200
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
call fcn.10002af0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3c]
call fcn.10002af0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10002af0
lea ecx, [ebp - 0x94]
call fcn.10002df0
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x101afdf4
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x68]
call fcn.10002df0
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], str.userid
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3c]
call fcn.10002df0
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.soft
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x68]
mov edx, 0x101c2b00
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.1002d840
mov esi, eax
mov byte [ebp - 4], 0x29
mov ecx, 0x101c2e9c
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2ea0], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2ea4], ecx
mov ecx, 0x101c2eac
mov eax, dword [esi + 0xc]
mov dword [0x101c2ea8], eax
mov eax, dword [0x101c2eac]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2eac
push eax
call fcn.10003200
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xc0]
call fcn.10002af0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3c]
call fcn.10002af0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10002af0
lea ecx, [ebp - 0x94]
call fcn.10002df0
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x94], vtable.CWConstString.0
mov dword [ebp - 0x88], 0x101afdf4
mov dword [ebp - 4], 0x2e
lea ecx, [ebp - 0x68]
call fcn.10002df0
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x68], vtable.CWConstString.0
mov dword [ebp - 0x5c], str.exename
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x3c]
call fcn.10002df0
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x3c], vtable.CWConstString.0
mov dword [ebp - 0x30], str.soft
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x68]
mov edx, 0x101c2b00
push eax
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.1002d840
mov esi, eax
mov byte [ebp - 4], 0x33
mov ecx, 0x101c2c8c
mov edx, dword [vtable.CVolCommonBaseWithMemManager.0]
call dword [edx + 0x44]
mov ecx, dword [esi + 4]
mov dword [0x101c2c90], ecx
mov ecx, dword [esi + 8]
mov dword [0x101c2c94], ecx
mov ecx, 0x101c2c9c
mov eax, dword [esi + 0xc]
mov dword [0x101c2c98], eax
mov eax, dword [0x101c2c9c]
call dword [eax + 0x44]
lea eax, [esi + 0x10]
mov ecx, 0x101c2c9c
push eax
call fcn.10003200
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xc0]
call fcn.10002af0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x3c]
call fcn.10002af0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x68]
call fcn.10002af0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10002af0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret