Function at 0x10026d40
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011b5a4
mov eax, dword fs:[0]
push eax
sub esp, 0x28c
mov eax, dword [0x1019142c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x26c], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
je 0x10026d95
cmp dword [ebp - 0x270], 2
je 0x100270ca
jmp 0x10027270
push 0x10146b5c
mov ecx, dword [ebp - 0x26c]
call fcn.10027290
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x26c]
mov eax, dword [edx + 0x9f0]
mov ecx, dword [ebp - 0x26c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x9f0]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x278], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x278]
push edx
mov ecx, dword [ebp - 0x26c]
add ecx, 0x75c
call fcn.10070f84
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
lea eax, [ebp - 0x1e4]
push eax
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0x9f4]
mov eax, dword [ebp - 0x26c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x9f4]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x280], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x280]
push edx
mov ecx, dword [ebp - 0x26c]
add ecx, 0x7e0
call fcn.10070f84
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov ecx, dword [ebp - 0x26c]
add ecx, 0x75c
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx eax, al
test eax, eax
jne 0x10026eab
mov ecx, dword [ebp - 0x26c]
add ecx, 0x7e0
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx ecx, al
test ecx, ecx
je 0x10026f4a
mov ecx, dword [ebp - 0x26c]
add ecx, 0x75c
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx edx, al
test edx, edx
je 0x10026ef8
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 0xa04], 0
je 0x10026ef8
push 0x10146b60
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0xa04]
mov eax, dword [ebp - 0x26c]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa04]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10026f43
mov ecx, dword [ebp - 0x26c]
add ecx, 0x7e0
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx ecx, al
test ecx, ecx
je 0x10026f43
mov edx, dword [ebp - 0x26c]
cmp dword [edx + 0xa08], 0
je 0x10026f43
push 0x10146b70
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 0xa08]
mov edx, dword [ebp - 0x26c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0xa08]
mov edx, dword [eax + 0x2c]
call edx
jmp 0x10027270
mov ecx, dword [ebp - 0x26c]
add ecx, 0x75c
call sym.UserAndPayClient.dll_public:_int___thiscall_xx_DuiLib::CDuiString::GetLength_void_const
cmp eax, 0xb
je 0x10026f98
mov eax, dword [ebp - 0x26c]
cmp dword [eax + 0xa04], 0
je 0x10026f93
push 0x10146b80
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0xa04]
mov eax, dword [ebp - 0x26c]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa04]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10027270
push 0x10146b94
mov ecx, dword [ebp - 0x26c]
add ecx, 0x7e0
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x26c]
add ecx, 0x6d8
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x26c]
add ecx, 0x75c
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
push 0x10146b9c
push 0x10146ba4
push str._s_api_client_phone_login_soft_sphoneNo_smn_scaptcha_sresphtmlv2enc1uid_s
mov ecx, dword [ebp - 0x26c]
add ecx, 0x96c
push ecx
call sym.UserAndPayClient.dll_public:_int___cdecl_xx_DuiLib::CDuiString::Format_wchar_t_const__
add esp, 0x20
push 0
mov ecx, dword [ebp - 0x26c]
add ecx, 0x96c
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea edx, [ebp - 0x40]
push edx
call fcn.1003c6c0
add esp, 0xc
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x284]
call fcn.10021de0
push eax
push 0x10146c8c
call fcn.1001f8a0
add esp, 8
lea ecx, [ebp - 0x40]
call fcn.10022960
mov ecx, dword [ebp - 0x26c]
add ecx, 0x96c
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 0xa10]
call fcn.10061360
push 0
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0x9fc]
mov eax, dword [ebp - 0x26c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x9fc]
mov eax, dword [edx + 0x118]
call eax
push 0x10146c9c
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 0x9fc]
mov eax, dword [ebp - 0x26c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x9fc]
mov eax, dword [edx + 0x2c]
call eax
push 0
push 0xc8
push 0x929
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10027270
lea ecx, [ebp - 0x268]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_void_
mov dword [ebp - 4], 2
push 0
call fcn.1001e470
add esp, 4
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
lea eax, [ebp - 0x298]
push eax
call fcn.1001e470
add esp, 4
mov dword [ebp - 0x290], eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x26c]
add ecx, 0x864
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
push 0x10146cac
mov ecx, dword [ebp - 0x26c]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x20
jae 0x10027199
push str.url.dll_FileProtocolHandler
lea ecx, [ebp - 0x28]
call fcn.10022620
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x26c]
add ecx, 0x864
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea ecx, [ebp - 0x28]
call fcn.10028ec0
push 1
push 0
lea ecx, [ebp - 0x28]
call fcn.100226d0
push eax
push str.rundll32.exe
push 0x10146d10
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x28]
call fcn.10022b70
push 0
mov ecx, dword [ebp - 0x26c]
add ecx, 0x864
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1003c6c0
add esp, 0xc
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x28c]
call fcn.10021de0
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._d__s_n
call fcn.1001f8a0
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.10022960
lea ecx, [ebp - 0xdc]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_void_
mov byte [ebp - 4], 4
push 0x10146d24
mov ecx, dword [ebp - 0x290]
push ecx
mov ecx, dword [ebp - 0x26c]
add ecx, 0x6d8
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
push 0x10146d2c
push 0x10146d34
push str._s_oauth_wait_qq__s__s_t_d_v2enc1uid_s
lea edx, [ebp - 0xdc]
push edx
call sym.UserAndPayClient.dll_public:_int___cdecl_xx_DuiLib::CDuiString::Format_wchar_t_const__
add esp, 0x1c
lea ecx, [ebp - 0xdc]
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 0xa14]
call fcn.10061360
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xdc]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ddfee
mov esp, ebp
pop ebp
ret 4