Function at 0x4c2940
Capabilities:
Create process on windows
Create thread
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fcc16
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x6b000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1ac], ebx
test ebx, ebx
je 0x4c3637
mov esi, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CStdString::constructor_wchar_t_const___int_]
lea ecx, [ebp - 0x98]
push 0xffffffffffffffff
push ebx
call esi
mov dword [ebp - 4], 0
lea eax, [ebx + 0x200]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x120]
call esi
mov byte [ebp - 4], 1
lea eax, [ebx + 0xa00]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x1a8]
call esi
mov byte [ebp - 4], 2
lea ebx, [edi + 0x34]
push dword [ebp - 0x1ac]
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CPaintManagerUI::DeletePtr_void__]
mov esi, dword [sym.imp.ycomuiu.dll_public:_int___thiscall_DuiLib::CStdString::CompareNoCase_wchar_t_const__const]
lea ecx, [ebp - 0x120]
push str.menuLang
call esi
lea ecx, [ebp - 0x98]
test eax, eax
jne 0x4c2a08
call dword [sym.imp.ycomuiu.dll_public:_wchar_t_const____thiscall_DuiLib::CStdString::operator_wchar_t_const__void_const]
push eax
lea ecx, [edi + 0xb80]
call fcn.0053c9a0
jmp 0x4c360a
push str.menuResetPass
call esi
test eax, eax
jne 0x4c2ab4
push eax
push eax
push ecx
push str.OnResetPassword
call fcn.00469e40
push 0x900
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 3
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 4
mov dword [esi], vtable.CResetPassDlg.2.0
mov dword [esi + 0x10], vtable.CResetPassDlg.5.0
mov dword [esi + 0x24], vtable.CResetPassDlg.4.0
mov dword [esi + 0x28], vtable.CResetPassDlg.1.0
mov dword [esi + 0x2c], vtable.CResetPassDlg.3.0
mov dword [esi + 0x30], vtable.CResetPassDlg.0
mov byte [ebp - 4], 2
mov ecx, esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0x96c80000
push 0x639ee0
push dword [edi + 4]
call dword [sym.imp.ycomuiu.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax + 0x1c]
jmp 0x4c360a
push str.menuLogout
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2bbb
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push 0x6b10b8
call fcn.00420d90
mov byte [ebp - 4], 5
push 0
mov byte [ebp - 4], 2
mov edx, 4
mov ecx, dword [edi + 4]
call fcn.004e0d20
add esp, 0x1c
cmp eax, 7
je 0x4c360a
call fcn.00554fb0
mov esi, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
test eax, eax
je 0x4c2b1b
push 1
push str.HintArea
mov ecx, edi
call esi
call fcn.0055aaa0
push 0
push str.labelUserName
mov ecx, edi
call esi
push 0
push str.btnPay
mov ecx, edi
call esi
push 1
push str.btnReg
mov ecx, edi
call esi
mov ecx, edi
call fcn.004c3900
mov esi, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push 4
push 0x6b6c1b
push 4
push str.memid
push 0x650fc8
push SysReAllocString
mov dword [edi + 0xec0], 0
mov dword [edi + 0xec4], 0
mov dword [edi + 0xec8], 0
mov dword [edi + 0xecc], 0
call esi
push 4
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], 0
push eax
push 4
push str.CheckNet
push 0x650fc8
push SysReAllocString
call esi
jmp 0x4c360a
push str.menuRestore
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2bd8
mov ecx, edi
call fcn.004baf60
jmp 0x4c360a
push str.menuEditProfile
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2c5a
push 0x90c
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 7
mov dword [esi], vtable.CEditProfileDlg.1.0
mov dword [esi + 0x10], vtable.CEditProfileDlg.5.0
mov dword [esi + 0x24], vtable.CEditProfileDlg.0
mov dword [esi + 0x28], vtable.CEditProfileDlg.2.0
mov dword [esi + 0x2c], vtable.CEditProfileDlg.3.0
mov dword [esi + 0x30], vtable.CEditProfileDlg.4.0
mov byte [esi + 0x900], 0
mov dword [esi + 0x904], 0
mov dword [esi + 0x908], 0
mov byte [ebp - 4], 2
jmp 0x4c35d9
push str.menuUpdate
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2d44
push 0xc9
push dword [0x6b513c]
call dword [sym.imp.USER32.dll_LoadIconW]
mov ecx, dword [0x6b1b8c]
mov ebx, eax
mov esi, dword [edi + 4]
test ecx, ecx
je 0x4c2cb5
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x4c2cc8
push dword [0x6b1b8c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x6b1b8c], 0
call fcn.00554410
test eax, eax
je 0x4c2cfb
call fcn.00554540
jmp 0x4c360a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push 0x6b1580
call fcn.00420d90
mov byte [ebp - 4], 8
push 0
mov byte [ebp - 4], 2
mov edx, 0x40
mov ecx, esi
call fcn.004e0d20
add esp, 0x1c
jmp 0x4c360a
lea eax, [ebp - 0x1ac]
mov dword [0x6b1b9c], ebx
push eax
push 0
push 0x6b1b80
push 0x553ce0
push 0
push 0
mov dword [0x6b1b98], esi
mov dword [0x6b1b94], 0
mov dword [0x6b1b90], 0
call fcn.005b6ff3
add esp, 0x18
mov dword [0x6b1b8c], eax
jmp 0x4c360a
push str.menuSetting
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2e1f
push 0x914
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 9
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 0xa
mov dword [esi], vtable.CSettingDlg.2.0
mov dword [esi + 0x10], vtable.CSettingDlg.4.0
mov dword [esi + 0x24], vtable.CSettingDlg.5.0
mov dword [esi + 0x28], vtable.CSettingDlg.3.0
mov dword [esi + 0x2c], vtable.CSettingDlg.1.0
mov dword [esi + 0x30], vtable.CSettingDlg.0
mov dword [esi + 0x900], 0
mov dword [esi + 0x904], 0
mov dword [esi + 0x908], 0
mov dword [esi + 0x90c], 0
mov dword [esi + 0x910], 0
mov byte [ebp - 4], 2
mov ecx, esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0x96c80000
push 0x639ee0
push dword [edi + 4]
call dword [sym.imp.ycomuiu.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
push dword [0x6b8f90]
mov ecx, edi
call fcn.004daf50
jmp 0x4c360a
push str.menuPrivacy
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2eae
push eax
push eax
push ecx
push str.Privacy
call fcn.00469e40
cmp byte [0x6b9739], 0
mov esi, dword [edi + 4]
push ecx
je 0x4c2e73
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push str.http:__www.wnhuifu.com_privacy.html
call fcn.0040c380
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.004dd360
add esp, 4
jmp 0x4c360a
mov dword [esp], 0
push 0x258
push ecx
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push str.http:__www.wnhuifu.com_pdf_privacy.html
call fcn.0040c380
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 2
mov edx, 0x3fc
mov ecx, esi
call fcn.004dd3f0
add esp, 0xc
jmp 0x4c360a
push str.menuManualRecover
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2ef9
push eax
push eax
push ecx
push str.ManMake
call fcn.00469e40
mov esi, dword [edi + 4]
push ecx
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push str.http:__www.wnhuifu.com_service.html
call fcn.0040c380
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 2
mov ecx, esi
call fcn.004dd360
add esp, 4
jmp 0x4c360a
push str.menuFeedback
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2f60
push 0x900
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 0xf
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 0x10
mov dword [esi], vtable.CFeedbackDlg.0
mov dword [esi + 0x10], vtable.CFeedbackDlg.5.0
mov dword [esi + 0x24], vtable.CFeedbackDlg.1.0
mov dword [esi + 0x28], vtable.CFeedbackDlg.2.0
mov dword [esi + 0x2c], vtable.CFeedbackDlg.4.0
mov dword [esi + 0x30], vtable.CFeedbackDlg.3.0
mov byte [ebp - 4], 2
jmp 0x4c35d9
push str.menuAbout
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2fc7
push 0x900
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 0x11
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 0x12
mov dword [esi], vtable.CAboutDlg.3.0
mov dword [esi + 0x10], vtable.CAboutDlg.4.0
mov dword [esi + 0x24], vtable.CAboutDlg.0
mov dword [esi + 0x28], vtable.CAboutDlg.2.0
mov dword [esi + 0x2c], vtable.CAboutDlg.1.0
mov dword [esi + 0x30], vtable.CAboutDlg.5.0
mov byte [ebp - 4], 2
jmp 0x4c35d9
push str.menuTrial
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c2fe5
mov ecx, dword [edi + 4]
call fcn.004e2480
jmp 0x4c360a
push str.menuLicenseCode
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c30e5
mov eax, dword [0x6b9698]
mov edi, dword [edi + 4]
cmp dword [eax - 0xc], 0
jne 0x4c3025
push 1
xor edx, edx
mov ecx, edi
call fcn.004dce30
mov eax, dword [0x6b9698]
add esp, 4
cmp dword [eax - 0xc], 0
je 0x4c360a
cmp byte [0x6b6c1b], 0
jne 0x4c360a
push 0x904
call fcn.00560437
mov esi, eax
add esp, 4
mov dword [ebp - 0x1ac], esi
mov byte [ebp - 4], 0x13
mov ecx, esi
call fcn.004dacb0
mov byte [ebp - 4], 0x14
mov dword [esi], vtable.CLicenseCodeDlg.3.0
mov dword [esi + 0x10], vtable.CLicenseCodeDlg.0
mov dword [esi + 0x24], vtable.CLicenseCodeDlg.4.0
mov dword [esi + 0x28], vtable.CLicenseCodeDlg.2.0
mov dword [esi + 0x2c], vtable.CLicenseCodeDlg.1.0
mov dword [esi + 0x30], vtable.CLicenseCodeDlg.5.0
mov byte [esi + 0x900], 0
mov byte [ebp - 4], 2
mov ecx, esi
push 0
push 0
push 0
push 0
push 0
push 0
push 0x96c80000
push 0x639ee0
push edi
call dword [sym.imp.ycomuiu.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
mov eax, dword [esi]
mov ecx, esi
mov bl, byte [esi + 0x900]
push 1
call dword [eax + 0x1c]
test bl, bl
je 0x4c360a
push 0
push 0
push 0x40a
push edi
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4c360a
push str.menuHelp
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3150
push eax
push eax
push ecx
push str.OnMenuHelp
call fcn.00469e40
mov edi, dword [edi + 4]
push ecx
mov esi, esp
mov dword [ebp - 0x1ac], esp
mov dword [ebp - 0x1b0], esi
cmp dword [0x6b0c60], 0x3a8
mov ecx, dword [0x6b9730]
cmovne ecx, dword [0x6ba038]
sub ecx, 0x10
call fcn.0040c950
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 2
mov ecx, edi
call fcn.004dd360
add esp, 4
jmp 0x4c360a
push str.menuReView
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3175
push eax
push eax
push 0x402
mov ecx, edi
call dword [sym.imp.ycomuiu.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
jmp 0x4c360a
push str.menuSortName
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3197
push str.FileName
mov ecx, edi
call fcn.004ba8c0
jmp 0x4c360a
push str.menuSortSize
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c31b9
push str.FileSize
mov ecx, edi
call fcn.004ba8c0
jmp 0x4c360a
push str.menuSortPath
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c31db
push str.FilePath
mov ecx, edi
call fcn.004ba8c0
jmp 0x4c360a
push str.menuSortTime
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c31fd
push str.LastModify
mov ecx, edi
call fcn.004ba8c0
jmp 0x4c360a
push str.menuSortResoluion
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c321f
push str.Resoluion
mov ecx, edi
call fcn.004ba8c0
jmp 0x4c360a
push str.menuSortAsce
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c323e
push 1
mov ecx, edi
call fcn.004c3660
jmp 0x4c360a
push str.menuSortDesce
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c325c
push eax
mov ecx, edi
call fcn.004c3660
jmp 0x4c360a
push str.menuSelectAll
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c32b0
push str.checkSelectAll
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov esi, eax
test esi, esi
je 0x4c360a
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_bool___thiscall_DuiLib::COptionUI::IsSelected_void_const]
cmp al, 1
je 0x4c360a
mov ecx, edi
call fcn.004ba500
mov eax, dword [esi]
mov ecx, esi
push 1
push 1
push 1
call dword [eax + 0x1dc]
jmp 0x4c360a
push str.menuUnSelect
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3310
push str.checkSelectAll
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
mov esi, eax
test esi, esi
je 0x4c360a
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_bool___thiscall_DuiLib::COptionUI::IsSelected_void_const]
test al, al
jne 0x4c32f4
mov eax, dword [esi]
mov ecx, esi
push 1
push 1
push 1
call dword [eax + 0x1dc]
mov ecx, edi
call fcn.004ba500
mov eax, dword [esi]
mov ecx, esi
push 1
push 1
push 0
call dword [eax + 0x1dc]
jmp 0x4c360a
push str.menuShowHidenDisk
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c33e9
cmp dword [0x6b8f6c], eax
mov ecx, 0x6b8f68
push 1
sete al
push eax
push str.ShowHidenDisk
push str.Setting
mov dword [0x6b8f6c], eax
call fcn.0048e650
cmp dword [0x6b8f6c], 0
setne al
movzx eax, al
push eax
push str.menuSortAsce
call dword [sym.imp.ycomuiu.dll_public:_static_struct_DuiLib::MenuItemInfo____cdecl_DuiLib::CMenuWnd::SetMenuItemInfoW_wchar_t_const___bool_]
add esp, 8
mov ecx, ebx
cmp dword [0x6b8f6c], 0
setne byte [ebp - 0x1ac]
push str.listDisk
call dword [sym.imp.ycomuiu.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
test eax, eax
je 0x4c360a
lea edi, [eax + 0x5f0]
xor ebx, ebx
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
test eax, eax
jle 0x4c360a
mov eax, dword [edi]
mov ecx, edi
push ebx
call dword [eax]
mov esi, eax
test esi, esi
je 0x4c33d8
mov edx, dword [esi]
mov ecx, esi
push str.HidenDisk
call dword [edx + 0x11c]
mov ecx, eax
call dword [sym.imp.ycomuiu.dll_public:_bool___thiscall_DuiLib::CStdString::operator_wchar_t_const__const]
test al, al
je 0x4c33d8
mov eax, dword [esi]
mov ecx, esi
push dword [ebp - 0x1ac]
call dword [eax + pe_nt_image_headers32]
mov eax, dword [edi]
mov ecx, edi
inc ebx
call dword [eax + 0xc]
cmp ebx, eax
jl 0x4c33a0
jmp 0x4c360a
push str.menuDeepScan
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3439
mov eax, dword [edi + 0xe6c]
test eax, eax
jne 0x4c341a
mov ecx, edi
call fcn.004c0530
mov dword [0x6b0c54], 1
jmp 0x4c360a
cmp eax, 1
jne 0x4c360a
mov ecx, edi
call fcn.004c0850
mov dword [0x6b0c54], 1
jmp 0x4c360a
push str.menuReloadDisk
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3458
push 1
mov ecx, edi
call fcn.004bf190
jmp 0x4c360a
push str.menuInverseSelect
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3475
mov ecx, edi
call fcn.004c24f0
jmp 0x4c360a
push str.menuDiskMg
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c349c
push 1
push eax
push eax
push str.diskmgmt.msc
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4c360a
push str.menuDevMg
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c34c3
push 1
push eax
push eax
push str.devmgmt.msc
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4c360a
push str.menuSysInfo
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c34ea
push 1
push eax
push eax
push str.msinfo32.exe
push eax
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x4c360a
push str.menuDiskInfo
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3563
push str.listDisk
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const]
test eax, eax
je 0x4c360a
mov edi, dword [eax + 0x5f0]
lea ecx, [eax + 0x678]
lea esi, [eax + 0x5f0]
mov eax, dword [ecx]
call dword [eax + 8]
push eax
mov ecx, esi
call dword [edi]
test eax, eax
je 0x4c360a
push str.btnShowDiskInfo
push eax
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindSubControlByName_class_DuiLib::CControlUI___wchar_t_const__const]
test eax, eax
je 0x4c360a
push 0
push 0
push 0
push str.click
push eax
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CPaintManagerUI::SendNotify_class_DuiLib::CControlUI___wchar_t_const___unsigned_int__long_int__bool_]
jmp 0x4c360a
push str.menuUpdateUser
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c3588
mov ecx, dword [edi + 4]
lea edx, [eax + 1]
push eax
call fcn.004dce30
add esp, 4
jmp 0x4c360a
push str.menuUserCenter
lea ecx, [ebp - 0x98]
call esi
test eax, eax
jne 0x4c360a
push 0x910
call fcn.00560437
add esp, 4
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 4], 0x17
mov ecx, eax
push dword [edi + 0xecc]
push dword [edi + 0xec8]
push dword [edi + 0xec4]
push dword [edi + 0xec0]
call fcn.00556b20
mov esi, eax
mov byte [ebp - 4], 2
test esi, esi
je 0x4c360a
push 0
push 0
push 0
push 0
push 0
push 0
push 0x96c80000
push 0x639ee0
push dword [edi + 4]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
mov ecx, esi
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::CWindowWnd::ShowModal_void_]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
mov esi, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::CStdString::destructor_void_]
call esi
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x120]
call esi
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055f9be
mov esp, ebp
pop ebp
ret 4