Function at 0x10028eb0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101208c0
mov eax, dword fs:[0]
push eax
sub esp, 0x34c
mov eax, dword [0x1019742c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2fc], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
je 0x10028f05
cmp dword [ebp - 0x300], 2
je 0x1002931d
jmp 0x100295b2
push 0x1014b998
mov ecx, dword [ebp - 0x2fc]
call fcn.100295d0
lea ecx, [ebp - 0x2f8]
push ecx
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 0x9fc]
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x9fc]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x308], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x308]
push edx
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x768
call fcn.10076016
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
lea eax, [ebp - 0x274]
push eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xa00]
mov eax, dword [ebp - 0x2fc]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa00]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x30c], eax
mov ecx, dword [ebp - 0x30c]
mov dword [ebp - 0x310], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x310]
push edx
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x7ec
call fcn.10076016
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x768
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx eax, al
test eax, eax
jne 0x1002901b
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x7ec
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx ecx, al
test ecx, ecx
je 0x100290ba
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x768
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx edx, al
test edx, edx
je 0x10029068
mov eax, dword [ebp - 0x2fc]
cmp dword [eax + 0xa10], 0
je 0x10029068
push 0x1014b99c
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xa10]
mov eax, dword [ebp - 0x2fc]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa10]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x100290b3
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x7ec
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::IsEmpty_void_const
movzx ecx, al
test ecx, ecx
je 0x100290b3
mov edx, dword [ebp - 0x2fc]
cmp dword [edx + 0xa14], 0
je 0x100290b3
push 0x1014b9ac
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax + 0xa14]
mov edx, dword [ebp - 0x2fc]
mov eax, dword [ecx]
mov ecx, dword [edx + 0xa14]
mov edx, dword [eax + 0x2c]
call edx
jmp 0x100295b2
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x768
call sym.UserAndPayClient.dll_public:_int___thiscall_xx_DuiLib::CDuiString::GetLength_void_const
cmp eax, 0xb
je 0x10029108
mov eax, dword [ebp - 0x2fc]
cmp dword [eax + 0xa10], 0
je 0x10029103
push 0x1014b9bc
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xa10]
mov eax, dword [ebp - 0x2fc]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa10]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x100295b2
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x6d0]
add edx, 0x280
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x340], ecx
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 0x6d0]
add eax, 0x280
push eax
lea ecx, [ebp - 0x70]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x348], eax
mov edx, dword [ebp - 0x348]
mov dword [ebp - 0x33c], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax + 0x6d0]
add ecx, 0x298
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x340]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x7ec
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x6e4
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x768
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x33c]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x338]
call fcn.10023620
push eax
push str._s_api_client_phone_login_soft_sphoneNo_smn_scaptcha_sresphtmlv2enc1uid_s
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x978
push ecx
call sym.UserAndPayClient.dll_public:_int___cdecl_xx_DuiLib::CDuiString::Format_wchar_t_const__
add esp, 0x20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x88]
call fcn.10023ac0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x70]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023ac0
push 0
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x978
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea edx, [ebp - 0x40]
push edx
call fcn.1003ebe0
add esp, 0xc
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
call fcn.10023550
push eax
push 0x1014ba84
call fcn.10020a00
add esp, 8
lea ecx, [ebp - 0x40]
call fcn.100238b0
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x978
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax + 0xa1c]
call fcn.10066420
push 0
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xa08]
mov eax, dword [ebp - 0x2fc]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa08]
mov eax, dword [edx + 0x118]
call eax
push 0x1014ba94
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xa08]
mov eax, dword [ebp - 0x2fc]
mov edx, dword [edx]
mov ecx, dword [eax + 0xa08]
mov eax, dword [edx + 0x2c]
call eax
push 0
push 0xc8
push 0x929
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x100295b2
lea ecx, [ebp - 0x1f0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_void_
mov dword [ebp - 4], 5
push 0
call fcn.1001f100
add esp, 4
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
lea eax, [ebp - 0x358]
push eax
call fcn.1001f100
add esp, 4
mov dword [ebp - 0x314], eax
push 1
push 0
push 0
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x870
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
push 0x1014baa4
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x20
jae 0x100293ec
push str.url.dll_FileProtocolHandler
lea ecx, [ebp - 0x28]
call fcn.1001fdb0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x870
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea ecx, [ebp - 0x28]
call fcn.1002b290
push 1
push 0
lea ecx, [ebp - 0x28]
call fcn.10023620
push eax
push str.rundll32.exe
push 0x1014bb08
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.10023ac0
push 0
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x870
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1003ebe0
add esp, 0xc
mov dword [ebp - 0x32c], eax
mov ecx, dword [ebp - 0x32c]
call fcn.10023550
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._d__s_n
call fcn.10020a00
add esp, 0xc
lea ecx, [ebp - 0xe8]
call fcn.100238b0
lea ecx, [ebp - 0x16c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_void_
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x6d0]
add edx, 0x280
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
mov dword [ebp - 0x350], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x2fc]
mov eax, dword [edx + 0x6d0]
add eax, 0x280
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x324], eax
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x318], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax + 0x6d0]
add ecx, 0x298
push ecx
lea edx, [ebp - 0xd0]
push edx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x350]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x314]
push ecx
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x6e4
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov ecx, dword [ebp - 0x318]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x31c]
call fcn.10023620
push eax
push str._s_oauth_wait_qq__s__s_t_d_v2enc1uid_s
lea edx, [ebp - 0x16c]
push edx
call sym.UserAndPayClient.dll_public:_int___cdecl_xx_DuiLib::CDuiString::Format_wchar_t_const__
add esp, 0x1c
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd0]
call fcn.10023ac0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb8]
call fcn.10023ac0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa0]
call fcn.10023ac0
lea ecx, [ebp - 0x16c]
call sym.UserAndPayClient.dll_public:_wchar_t_const____thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [eax + 0xa20]
call fcn.10066420
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x16c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e3069
mov esp, ebp
pop ebp
ret 4