Function at 0x428520
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49b4fa
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x4c56f0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, ecx
mov ecx, 0x3e8
mov dword [ebp - 0x290], ebx
cmp ax, cx
jne 0x428626
mov edi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
lea edx, [ebp - 0x8c]
push edx
mov ecx, ebx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [ebp - 0x84]
mov ecx, dword [0x4d55a4]
sub esi, dword [ebp - 0x8c]
xor eax, eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xac]
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xac]
cmp eax, esi
jge 0x428611
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x8c]
push 0
push 0x1c2
add eax, 0x14
push eax
push ecx
mov ecx, dword [0x4d55a0]
push edx
call edi
mov ecx, dword [0x4d55a4]
push eax
call edi
jmp 0x4286a3
push 0x3e8
mov ecx, ebx
call edi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4286aa
mov ecx, 0x7d0
cmp ax, cx
jne 0x428b31
mov esi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
lea edx, [ebp - 0x8c]
push edx
mov ecx, ebx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
call esi
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
push eax
call edi
mov eax, dword [ebx + 0x314]
test eax, eax
jle 0x4289dc
mov ecx, dword [ebp - 0x8c]
push 0x40
add eax, 0xffffffec
push 0x1c2
push eax
mov dword [ebx + 0x314], eax
mov eax, dword [ebp - 0x88]
push eax
push ecx
mov ecx, dword [0x4d5598]
call esi
mov ecx, dword [0x4d55a0]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
cmp dword [ebp + 8], 0xa
jne 0x4289bc
cmp byte [0x4d5542], 0
je 0x4289bc
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_char_const___int_]
push 0xffffffffffffffff
push 0x4a1520
lea ecx, [ebp - 0x20c]
call esi
push 0xffffffffffffffff
push 0x4a1520
lea ecx, [ebp - 0x254]
mov dword [ebp - 4], 8
call esi
sub esp, 0x44
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x294], esp
push 0xffffffffffffffff
push str.http:__load.yinyue.fm_API_GetNavgate_paramv2
call esi
mov byte [ebp - 4], 0xa
call fcn.00401820
lea esi, [ebp - 0x114]
mov byte [ebp - 4], 9
call fcn.004304a0
push 0
push 0x4a5b3c
mov ecx, esi
mov byte [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_int___thiscall_DuiLib::CDuiString::Find_char_const___int_const]
mov edi, dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::operator_char_const__void_const]
mov esi, eax
cmp esi, 0xffffffff
je 0x4287ab
push esi
push 0
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0xc
call edi
push eax
lea ecx, [ebp - 0x254]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::Assign_char_const___int_]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
push 0xffffffffffffffff
inc esi
push esi
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0xd
call edi
push eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::Assign_char_const___int_]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
push 0
push 0x4a5b3c
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_int___thiscall_DuiLib::CDuiString::Find_char_const___int_const]
mov esi, eax
cmp esi, 0xffffffff
je 0x428834
push esi
push 0
lea edx, [ebp - 0x5c]
push edx
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0xe
call edi
push eax
lea ecx, [ebx + 0x318]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::Assign_char_const___int_]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
push 0xffffffffffffffff
inc esi
push esi
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::Mid_int__int_]
push 0xffffffffffffffff
mov ecx, eax
mov byte [ebp - 4], 0xf
call edi
push eax
lea ecx, [ebp - 0x20c]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::Assign_char_const___int_]
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xb
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
mov edi, dword [sym.imp.DuiLib.dll_public:_bool___thiscall_DuiLib::CDuiString::IsEmpty_void_const]
lea ecx, [ebp - 0x254]
call edi
test al, al
jne 0x42898f
lea ecx, [ebx + 0x318]
call edi
test al, al
jne 0x42898f
lea ecx, [ebp - 0x20c]
call edi
test al, al
jne 0x42898f
mov eax, dword [0x4d5548]
test eax, eax
je 0x428883
push eax
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov edi, dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::GetData_void_const]
lea ecx, [ebx + 0x318]
call edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x294], esp
push eax
call fcn.00409ed0
lea esi, [ebp - 0x28c]
call fcn.00431740
push str.GB2312
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x10
call fcn.00409ed0
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x11
call edi
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00409ed0
lea ecx, [ebp - 0x2c0]
push ecx
lea ecx, [ebp - 0x1c0]
lea edi, [ebp - 0xc8]
mov byte [ebp - 4], 0x12
call fcn.004318a0
lea ecx, [ebp - 0x1c0]
call fcn.00409f10
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x15
call fcn.00409f10
cmp dword [ebp - 0xb4], 0x10
mov eax, dword [ebp - 0xc8]
jae 0x428920
mov eax, edi
sub esp, 0x44
mov ecx, esp
mov dword [ebp - 0x294], esp
push 0xffffffffffffffff
push eax
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_char_const___int_]
push 1
lea ecx, [ebp - 0x28c]
call fcn.00431990
lea ecx, [ebp - 0x20c]
call dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::GetData_void_const]
push eax
call fcn.0046eb02
imul eax, eax, 0xea60
lea esi, [ebx + 0x360]
mov ecx, 0x429510
xor edx, edx
mov dword [esi + 0xc], ebx
add esp, 4
mov ebx, eax
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], edx
call fcn.00424e40
lea ecx, [ebp - 0xc8]
call fcn.00409f10
lea esi, [ebp - 0x28c]
call fcn.00431850
mov byte [ebp - 4], 9
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [ebp - 0x114]
call esi
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 8
call esi
lea ecx, [ebp - 0x20c]
mov dword [ebp - 4], 0xffffffff
call esi
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046eadd
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x4d5598]
push 0
push 0
push 0
push edx
push eax
call esi
mov ecx, dword [0x4d55a0]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [0x4d5598]
mov dword [ebx + 0x314], 0
push 1
mov byte [ecx + 0x231], 0
mov ecx, dword [0x4d55a8]
push 1
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
xor eax, eax
mov byte [ebx + 0x2f8], 1
cmp dword [0x4d55a8], eax
je 0x428b1c
mov ecx, dword [0x4d5598]
lea edx, [ebp - 0x9c]
push edx
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
call esi
push eax
call edi
mov ecx, dword [0x4d55a8]
xor eax, eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xac]
push eax
call esi
push eax
call edi
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa8]
mov ecx, dword [0x4d5598]
mov edi, dword [ebp - 0xa4]
sub edi, dword [ebp - 0xac]
push str.VerLrc
add ecx, 0x2c
mov dword [ebp - 0x290], eax
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x30]
call eax
mov edx, dword [eax + 8]
mov ecx, dword [eax]
mov dword [ebp - 0x2a4], ecx
mov ecx, dword [eax + 4]
add ecx, dword [ebp - 0x98]
mov eax, dword [eax + 0xc]
push 1
mov dword [ebp - 0x29c], edx
mov edx, dword [ebp - 0x290]
push edx
push edi
push ecx
mov ecx, dword [ebp - 0x9c]
add ecx, 0xd
push ecx
mov ecx, dword [0x4d55a8]
mov dword [ebp - 0x298], eax
call esi
push eax
call dword [sym.imp.USER32.dll_MoveWindow]
push 0x7d0
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4286aa
mov edx, 0xbb8
cmp ax, dx
jne 0x428c62
push str.HorTopMenu
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
mov esi, eax
mov eax, 0x23
mov dword [ebp - 0x290], esi
cmp dword [ebx + 0x310], eax
jl 0x428c3e
test esi, esi
je 0x428b86
mov dword [ebx + 0x310], eax
mov eax, dword [esi]
mov edx, dword [eax + 0x108]
push 0x4a521c
push str.height
mov ecx, esi
call edx
push str.BtnMini
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
test eax, eax
je 0x428ba6
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov eax, dword [0x4d5598]
cmp byte [eax + 0x230], 0
je 0x428be8
mov ecx, ebx
mov byte [eax + 0x230], 0
lea edi, [ebx + 0x2fa]
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
mov esi, eax
call fcn.0042a480
mov ecx, dword [0x4d55ac]
push 1
push 0
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
mov esi, dword [ebp - 0x290]
jmp 0x428c2a
mov eax, dword [0x4d55b8]
cmp byte [eax + 0x23c], 0
je 0x428c2a
mov byte [eax + 0x23c], 0
mov al, byte [eax + 0x230]
test al, al
sete cl
movzx edx, cl
mov ecx, dword [0x4d55a0]
push 1
push edx
push ecx
call fcn.0042be90
mov ecx, dword [0x4d55ac]
push 1
push 0
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
push 0xbb8
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
test esi, esi
je 0x4286aa
add dword [ebx + 0x310], 5
mov eax, dword [ebx + 0x310]
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x64]
mov ecx, esi
call eax
jmp 0x4286aa
mov ecx, 0xfa0
cmp ax, cx
jne 0x428d1f
push str.HorTopMenu
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
cmp dword [ebx + 0x310], 5
mov esi, eax
jne 0x428cef
test esi, esi
je 0x428cbb
mov dword [ebx + 0x310], 0
mov edx, dword [esi]
mov eax, dword [edx + 0x108]
push 0x4a1c68
push str.height
mov ecx, esi
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc4]
push 0
mov ecx, esi
call eax
push str.BtnRighTop
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
test eax, eax
je 0x428cdb
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc4]
push 1
call eax
push 0xfa0
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
test esi, esi
je 0x4286aa
add dword [ebx + 0x310], 0xfffffffb
jns 0x428d0a
mov dword [ebx + 0x310], 1
mov edx, dword [esi]
mov eax, dword [ebx + 0x310]
mov edx, dword [edx + 0x64]
push eax
mov ecx, esi
call edx
jmp 0x4286aa
mov ecx, 0x1388
cmp ax, cx
jne 0x428e58
mov esi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
lea edx, [ebp - 0x8c]
push edx
mov ecx, ebx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x80]
mov ecx, dword [0x4d5594]
sub edi, dword [ebp - 0x88]
mov dword [ebp - 0x290], eax
xor eax, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x9c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
add edi, 0xffffffdd
push 0
cmp eax, edi
jge 0x428dec
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x88]
add eax, 0x14
push eax
mov eax, dword [ebp - 0x8c]
push ecx
mov ecx, dword [0x4d55a0]
add edx, 0x23
push edx
push eax
call esi
mov ecx, dword [0x4d5594]
push eax
jmp 0x4286a1
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp - 0x8c]
push 0x19f
push 0x140
add ecx, 0x23
push ecx
mov ecx, dword [0x4d55a0]
push edx
call esi
mov ecx, dword [0x4d5594]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x1388
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push str.BtnSteup
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
test eax, eax
je 0x4286aa
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
jmp 0x4286aa
mov ecx, 0x1770
cmp ax, cx
jne 0x428f35
mov esi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
lea edx, [ebp - 0xac]
push edx
mov ecx, ebx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [ebp - 0xa4]
mov ecx, dword [0x4d5594]
sub edi, dword [ebp - 0xac]
xor eax, eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x9c]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
test eax, eax
jle 0x428f10
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xac]
push 0
add eax, 0xffffffec
push eax
push edi
add ecx, 0x23
push ecx
mov ecx, dword [0x4d55a0]
push edx
call esi
mov ecx, dword [0x4d5594]
push eax
jmp 0x4286a1
push 0x1770
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4d5594]
push 1
push 0
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
jmp 0x428e2f
mov ecx, 0x1f40
cmp ax, cx
jne 0x428f9f
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_char_const___int_]
push 0
sub esp, 0x44
mov ecx, esp
mov dword [ebp - 0x290], esp
push 0xffffffffffffffff
push 0x4a1520
call esi
sub esp, 0x44
mov dword [ebp - 4], 0
mov ecx, esp
mov dword [ebp - 0x294], esp
push 0xffffffffffffffff
push 0x4a1d90
call esi
lea edx, [ebp - 0x5c]
push edx
mov byte [ebp - 4], 1
call fcn.00401820
mov ecx, eax
mov dword [ebp - 4], 0xffffffff
call fcn.0042ff70
lea ecx, [ebp - 0x5c]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
jmp 0x4286aa
mov ecx, 0x8ae
cmp ax, cx
jne 0x429061
lea ebx, [ebp - 0x1a4]
call fcn.00429f30
push str.BoxNews.exe
lea ebx, [ebp - 0x7c]
mov edi, str.RunSetup
mov dword [ebp - 4], 2
call fcn.00402010
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::Append_char_const__]
add esp, 4
mov edx, ebx
push edx
lea ecx, [ebp - 0x1a4]
call esi
push 5
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::GetData_void_const]
mov edi, dword [sym.imp.KERNEL32.dll_WinExec]
push eax
call edi
lea ebx, [ebp - 0x15c]
call fcn.00429f30
push str.apnews.exe
mov ecx, ebx
mov byte [ebp - 4], 3
call esi
push 5
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::GetData_void_const]
push eax
call edi
mov ecx, dword [ebp - 0x290]
push 0x8ae
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov byte [ebp - 4], 2
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
mov ecx, ebx
call esi
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 4], 0xffffffff
call esi
mov ebx, dword [ebp - 0x290]
jmp 0x4286aa
mov ecx, 0xd05
cmp ax, cx
jne 0x4290c3
cmp dword [0x4d5594], 0
je 0x4286aa
call fcn.00404120
test al, al
je 0x42909a
push 0xd05
mov ecx, ebx
call dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x4286aa
mov ebx, 0x4a1738
mov edi, str.AutoStart
call fcn.004020f0
mov ecx, dword [0x4d5594]
push 1
push 1
call fcn.00403540
mov ebx, dword [ebp - 0x290]
jmp 0x4286aa
mov edx, 0x2328
cmp ax, dx
jne 0x429232
mov esi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x8c]
push eax
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x80]
sub edi, dword [ebp - 0x88]
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x290], eax
xor eax, eax
push ecx
mov ecx, dword [0x4d55b8]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
add edi, 0xffffffdd
push 0
cmp eax, edi
jge 0x429190
mov edx, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x8c]
add eax, 0x14
push eax
mov eax, dword [ebp - 0x88]
push edx
add eax, 0x23
push eax
push ecx
mov ecx, dword [0x4d55a0]
call esi
mov ecx, dword [0x4d55b8]
push eax
jmp 0x4286a1
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x4d55a0]
push 0x19f
push 0x140
add edx, 0x23
push edx
push eax
call esi
mov ecx, dword [0x4d55b8]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x2328
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4d55a0]
mov esi, dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
push str.BtnFeedBack
add ecx, 0x2c
call esi
test eax, eax
je 0x4291fb
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov ecx, dword [0x4d5598]
push str.BtnFeedBack
add ecx, 0x2c
call esi
test eax, eax
je 0x42921d
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov ecx, dword [0x4d55a4]
push str.BtnFeedBack
add ecx, 0x2c
call esi
jmp 0x428e3d
cmp eax, 0x2710
jne 0x4293bd
mov esi, dword [sym.imp.DuiLib.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
xor eax, eax
lea ecx, [ebp - 0xac]
push ecx
mov ecx, ebx
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [ebp - 0xa4]
mov ecx, dword [0x4d55b8]
sub edi, dword [ebp - 0xac]
xor eax, eax
lea edx, [ebp - 0x9c]
push edx
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x98]
test eax, eax
jle 0x4292f0
mov ecx, dword [ebp - 0xac]
push 0
add eax, 0xffffffec
push eax
mov eax, dword [ebp - 0xa8]
push edi
add eax, 0x23
push eax
push ecx
mov ecx, dword [0x4d55a0]
call esi
mov ecx, dword [0x4d55b8]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x4289bc
push 0x2710
mov ecx, ebx
call esi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, dword [0x4d55b8]
push 1
push 0
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
mov ecx, dword [0x4d55a0]
mov esi, dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
push str.BtnFeedBack
add ecx, 0x2c
call esi
test eax, eax
je 0x429338
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov ecx, dword [0x4d5598]
push str.BtnFeedBack
add ecx, 0x2c
call esi
test eax, eax
je 0x42935a
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov ecx, dword [0x4d55a4]
push str.BtnFeedBack
add ecx, 0x2c
call esi
test eax, eax
je 0x42937c
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xd0]
push 1
call eax
mov ecx, dword [0x4d55b8]
mov edi, dword [ecx + 0x238]
lea esi, [ebp - 0x5c]
mov eax, edi
call fcn.0041cdd0
mov ecx, eax
mov dword [ebp - 4], 4
call dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::operator_char_const__void_const]
mov esi, edi
call fcn.0041cb10
lea ecx, [ebp - 0x5c]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
jmp 0x4289bc
mov edx, 0x2af8
cmp ax, dx
jne 0x4293ff
mov eax, dword [ebx + 0x304]
test eax, eax
je 0x4293f3
cmp dword [0x4d55bc], 0
je 0x4293f3
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x4d55bc]
push 1
push 0
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CWindowWnd::ShowWindow_bool__bool_]
mov byte [ebx + 0x2fb], 0
jmp 0x4286aa
mov ecx, 0x270f
cmp ax, cx
jne 0x4286aa
push str.loading
lea ecx, [ebx + 0x2c]
call dword [sym.imp.DuiLib.dll_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_char_const__const]
mov esi, eax
test esi, esi
je 0x4289bc
mov edx, dword [esi]
mov eax, dword [edx + 0xb0]
mov ecx, esi
call eax
push eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_class_DuiLib::CDuiString_const__]
mov dword [ebp - 4], 5
mov ebx, dword [sym.imp.DuiLib.dll_public:_char_const____thiscall_DuiLib::CDuiString::GetData_void_const]
lea ecx, [ebp - 0x5c]
call ebx
push eax
call fcn.0046eb02
lea edi, [eax + 1]
add esp, 4
cmp edi, 4
jle 0x429463
mov edi, 1
lea ecx, [ebp - 0x15c]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
push edi
lea ecx, [ebp - 0x15c]
push str.fileloading0_d.png
push ecx
mov byte [ebp - 4], 6
call dword [sym.imp.DuiLib.dll_public:_int___cdecl_DuiLib::CDuiString::Format_char_const__]
mov edx, dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x290], edx
call ebx
push eax
mov eax, dword [ebp - 0x290]
mov edx, dword [eax + 0x108]
push str.bkimage
mov ecx, esi
call edx
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::constructor_void_]
push edi
lea eax, [ebp - 0x1a4]
push 0x4a5b08
push eax
mov byte [ebp - 4], 7
call dword [sym.imp.DuiLib.dll_public:_int___cdecl_DuiLib::CDuiString::Format_char_const__]
mov edi, dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x1a4]
call ebx
mov edx, dword [edi + 0xb4]
push eax
mov ecx, esi
call edx
mov byte [ebp - 4], 6
mov esi, dword [sym.imp.DuiLib.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [ebp - 0x1a4]
call esi
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 5
call esi
lea ecx, [ebp - 0x5c]
jmp 0x4289b3