Function at 0x1005b120
Capabilities:
Copy file
Delete file
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011ed31
mov eax, dword fs:[0]
push eax
sub esp, 0xb50
mov eax, dword [0x1019142c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa04], ecx
mov dword [ebp - 0xa0c], 0
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CDPI____thiscall_xx_DuiLib::CPaintManagerUI::GetDPIObj_void_
call sym.UserAndPayClient.dll_public:_static_int___cdecl_xx_DuiLib::CDPI::GetMainMonitorDPI_void_
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xa74]
push eax
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CPaintManagerUI::SetDPI_int_
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xa04]
add ecx, 0x598
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_void___thiscall_Talk2Svr::CTalk2Svr::GetVipMsg_struct_tag_Pay_plan_Info___int__bool_
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x598], 1
jge 0x1005b1dd
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xa04]
add ecx, 0x598
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_void___thiscall_Talk2Svr::CTalk2Svr::GetVipMsg_struct_tag_Pay_plan_Info___int__bool_
push str.menu_phone
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x69c], eax
push str.Picture
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x6a0], eax
push str.UserID
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x6a4], eax
push str.menu_enddate
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x6c0], eax
push str.buyvipType
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x6c4], eax
push 0x1014ebe8
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x74c], eax
push 0x1014ebfc
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x750], eax
push str.wxInfo
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x754], eax
push str.QQInfo
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x758], eax
push str.QQPicture
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x75c], eax
push str.phoneSevice
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x760], eax
push str.IDname
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x764], eax
push str.VIPID
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x768], eax
push str.SeviceTime
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x76c], eax
push str.fengexian
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x770], eax
push str.fengexian2
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x774], eax
push str.vipPic
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x778], eax
push str.LoginPicType
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x77c], eax
push 0x1014ecf4
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x780], eax
push 0x1014ed14
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x784], eax
push 0x1014ed34
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x788], eax
push 0x1014ed48
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x78c], eax
push 0x1014ed68
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x790], eax
push 0x1014ed74
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x794], eax
push 0x1014ed7c
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x798], eax
push 0x1014ed98
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x79c], eax
push str.left1
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7a0], eax
push str.left2
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7a4], eax
push str.left3
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7a8], eax
push str.left4
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7ac], eax
push str.lefttext1
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7b0], eax
push str.lefttext2
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7b4], eax
push str.lefttext3
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7b8], eax
push str.lefttext4
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7bc], eax
push 0x1014ee24
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7c0], eax
push 0x1014ee3c
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7c4], eax
push str.vipid
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0xa04]
mov dword [ecx + 0x7c8], eax
push 0x1014ee58
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0xa04]
mov dword [edx + 0x7cc], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb28], esp
push str.Show
call fcn.100213a0
mov dword [ebp - 0xa70], eax
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0xb2c], eax
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb30], esp
push str.wxdkjt
call fcn.100213a0
mov dword [ebp - 0xb34], eax
lea ecx, [ebp - 0x410]
push ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xb38], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x410]
call fcn.100185f0
movzx eax, al
test eax, eax
jne 0x1005b719
push 0x1014ee74
lea ecx, [ebp - 0x410]
push ecx
call fcn.1001b8e0
add esp, 8
movzx edx, al
test edx, edx
je 0x1005b781
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x7c0], 0
je 0x1005b74c
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7c0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c0]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x7c4], 0
je 0x1005b77f
push 1
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7c4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c4]
mov eax, dword [edx + 0x104]
call eax
jmp 0x1005b7e7
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x7c0], 0
je 0x1005b7b4
push 1
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7c0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c0]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x7c4], 0
je 0x1005b7e7
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7c4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c4]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x79c], 0
je 0x1005b91b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb24], esp
push str.Info
call fcn.100213a0
mov dword [ebp - 0xb14], eax
mov edx, dword [ebp - 0xb14]
mov dword [ebp - 0xb3c], edx
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb40], esp
push str.gjkjzq
call fcn.100213a0
mov dword [ebp - 0xb44], eax
lea eax, [ebp - 0x5fc]
push eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xb0c], eax
mov edx, dword [ebp - 0xb0c]
mov dword [ebp - 0xb08], edx
mov eax, dword [ebp - 0xb08]
push eax
lea ecx, [ebp - 0x410]
call fcn.10018890
lea ecx, [ebp - 0x5fc]
call fcn.10022960
push 0x1014ee88
lea ecx, [ebp - 0x410]
push ecx
call fcn.1001b8e0
add esp, 8
movzx edx, al
test edx, edx
je 0x1005b91b
push 0x1014ee98
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x18c]
call edx
push str.fileop1.png_dest12_17_27_32
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x194]
call edx
push str.fileop2.png_dest12_17_27_32
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x19c]
call edx
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x7d0], 3
jne 0x1005b95d
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x74c], 0
je 0x1005b95d
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x74c]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x74c]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x7d0], 1
je 0x1005b97b
mov edx, dword [ebp - 0xa04]
cmp dword [edx + 0x7d0], 2
jne 0x1005b9b6
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x74c], 0
je 0x1005b9b6
push 0xff07c362
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x74c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CButtonUI::SetHotTextColor_unsigned_long_int_
push 0xff07c362
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x74c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CButtonUI::SetPushedTextColor_unsigned_long_int_
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x69c], 0
je 0x1005e6c6
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x6a0], 0
je 0x1005e6c6
mov edx, dword [ebp - 0xa04]
cmp dword [edx + 0x6a4], 0
je 0x1005e6c6
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x6c4], 0
je 0x1005e6c6
push 0x1014ee8c
lea ecx, [ebp - 0x458]
call fcn.10022620
mov byte [ebp - 4], 3
mov dword [ebp - 0xb48], 0
lea ecx, [ebp - 0x614]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_Talk2Svr::CTalk2Svr::GetCurrentPathW_void_
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0xb04]
mov dword [ebp - 0xb00], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xb00]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x614]
call fcn.10022b70
push 0
push 0x1014ee94
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10028e60
cmp eax, 0xffffffff
je 0x1005bafb
xor ecx, ecx
mov word [ebp - 0x218], cx
push 0x206
push 0
lea edx, [ebp - 0x216]
push edx
call fcn.100db6b0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
push str.SYSTEMROOT
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea ecx, [ebp - 0x218]
push ecx
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
push str.Temp
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018620
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
mov ecx, dword [eax + 0x34]
push ecx
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
push str._sAvatar___d__.png
lea edx, [ebp - 0x470]
push edx
call fcn.1003d290
add esp, 0x10
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x34]
push edx
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
push str._sAvatar___d_.png
lea eax, [ebp - 0x62c]
push eax
call fcn.1003d290
add esp, 0x10
mov dword [ebp - 0xafc], eax
mov ecx, dword [ebp - 0xafc]
push ecx
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018670
lea ecx, [ebp - 0x62c]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
call fcn.1004fb20
add esp, 4
test eax, eax
jne 0x1005bc3a
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x120], 1
je 0x1005bc3a
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb4c], esp
push eax
call fcn.10022620
mov dword [ebp - 0xaf8], eax
mov ecx, dword [ebp - 0xaf8]
mov dword [ebp - 0xb50], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x50
call fcn.100226d0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb54], esp
push eax
call fcn.10022620
mov dword [ebp - 0xb58], eax
mov byte [ebp - 4], 5
call fcn.1004fc60
add esp, 0x30
lea ecx, [ebp - 0x470]
call fcn.100226d0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
lea ecx, [ebp - 0x470]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
push str.file_s_dest0_4_38_42
lea eax, [ebp - 0x644]
push eax
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xaf4], eax
mov ecx, dword [ebp - 0xaf4]
push ecx
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018670
lea ecx, [ebp - 0x644]
call fcn.10022b70
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
add eax, 0x38
push eax
lea ecx, [ebp - 0x428]
call fcn.10021b20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3f8]
call fcn.10018760
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
cmp dword [edx + 0x120], 1
jne 0x1005bd2c
push 0x1014f014
lea ecx, [ebp - 0x3f8]
call fcn.10018650
push str.shouji.png
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
jmp 0x1005bda4
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
cmp dword [edx + 0x120], 2
jne 0x1005bd69
push 0x1014f034
lea ecx, [ebp - 0x3f8]
call fcn.10018650
push str.qq.png
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
jmp 0x1005bda4
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
cmp dword [edx + 0x120], 3
jne 0x1005bda4
push 0x1014f04c
lea ecx, [ebp - 0x3f8]
call fcn.10018650
push str.weixin.png
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push str.filevvip_fore.png_dest0_4_38_42
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x6a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetForeImage_wchar_t_const__
lea ecx, [ebp - 0x428]
call fcn.100226d0
push eax
lea ecx, [ebp - 0x3f8]
call fcn.100226d0
push eax
push 0x1014f06c
lea edx, [ebp - 0x554]
push edx
call fcn.1003d290
add esp, 0x10
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0xaf0]
push eax
lea ecx, [ebp - 0x428]
call fcn.10018670
lea ecx, [ebp - 0x554]
call fcn.10022b70
lea ecx, [ebp - 0x428]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x69c]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x69c]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x50
call fcn.100185f0
movzx edx, al
test edx, edx
je 0x1005c0e3
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x120], 1
jne 0x1005c0e3
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x38
call fcn.100226d0
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10022620
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3e0]
call fcn.100185f0
movzx eax, al
test eax, eax
jne 0x1005c0d2
push 4
lea ecx, [ebp - 0x3e0]
push ecx
lea edx, [ebp - 0x68c]
push edx
call fcn.1001be60
add esp, 0xc
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0xae4], eax
mov byte [ebp - 4], 0xa
push 3
lea ecx, [ebp - 0x3e0]
push ecx
lea edx, [ebp - 0x674]
push edx
call fcn.1003d530
add esp, 0xc
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0xae0], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xae4]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xae0]
call fcn.100226d0
push eax
push 0x1014f0c4
lea ecx, [ebp - 0x65c]
push ecx
call fcn.1003d290
add esp, 0x10
mov dword [ebp - 0xadc], eax
mov edx, dword [ebp - 0xadc]
push edx
lea ecx, [ebp - 0x3e0]
call fcn.10018670
lea ecx, [ebp - 0x65c]
call fcn.10022b70
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x674]
call fcn.10022b70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x68c]
call fcn.10022b70
push 0x1014f0dc
lea ecx, [ebp - 0x458]
call fcn.1001a390
test eax, eax
jne 0x1005c062
push 4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x38
push ecx
lea edx, [ebp - 0x6bc]
push edx
call fcn.1001be60
add esp, 0xc
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0xad8]
mov dword [ebp - 0xad0], eax
mov byte [ebp - 4], 0xc
push 3
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
add edx, 0x38
push edx
lea eax, [ebp - 0x764]
push eax
call fcn.1003d530
add esp, 0xc
mov dword [ebp - 0xad4], eax
mov ecx, dword [ebp - 0xad4]
mov dword [ebp - 0xacc], ecx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xad0]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xacc]
call fcn.100226d0
push eax
push str.Kb:g
lea edx, [ebp - 0x6a4]
push edx
call fcn.1003d290
add esp, 0x10
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xac8]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10018670
lea ecx, [ebp - 0x6a4]
call fcn.10022b70
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x764]
call fcn.10022b70
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6bc]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x2f9]
test eax, eax
je 0x1005c091
push 0x1014f110
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
jmp 0x1005c0a7
push 0x1014f168
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
lea ecx, [ebp - 0x3e0]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x69c]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x69c]
mov eax, dword [edx + 0x2c]
call eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3e0]
call fcn.10022b70
jmp 0x1005c158
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x50
call fcn.100185f0
movzx edx, al
test edx, edx
je 0x1005c158
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x120], 1
je 0x1005c158
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x2f9]
test ecx, ecx
je 0x1005c142
push str.filemorentouxiang32.png_dest0_4_38_42
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
jmp 0x1005c158
push str.filemorentouxiang.png_dest0_4_38_42
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.10018650
push 0xffffffffffffffff
push str.696969
lea ecx, [ebp - 0xa00]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x488]
call fcn.10018760
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x258]
call fcn.10018760
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.10018760
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
mov ecx, dword [eax + 0x34]
push ecx
push 0x1014f284
lea edx, [ebp - 0x6d4]
push edx
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0xac4]
push eax
lea ecx, [ebp - 0x488]
call fcn.10018670
lea ecx, [ebp - 0x6d4]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x104
call fcn.100226d0
push eax
push 0x1014f294
lea edx, [ebp - 0x6ec]
push edx
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
push eax
lea ecx, [ebp - 0x230]
call fcn.10018670
lea ecx, [ebp - 0x6ec]
call fcn.10022b70
lea ecx, [ebp - 0x230]
call fcn.100185f0
movzx ecx, al
test ecx, ecx
je 0x1005c260
mov ecx, dword [ebp - 0xa04]
add ecx, 0x5cc
call fcn.100226d0
push eax
lea ecx, [ebp - 0x230]
call fcn.10018650
lea ecx, [ebp - 0x230]
call fcn.100185f0
movzx edx, al
test edx, edx
je 0x1005c34f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb5c], esp
push str.name
call fcn.100213a0
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xb20], eax
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xb18], esp
push str.viptype
call fcn.100213a0
mov dword [ebp - 0xb1c], eax
lea ecx, [ebp - 0x71c]
push ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xab4], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xab4]
push ecx
lea edx, [ebp - 0x704]
push edx
call fcn.1003c430
add esp, 8
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0xaac], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0xaac]
call fcn.100226d0
push eax
lea ecx, [ebp - 0x230]
call fcn.10018650
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x704]
call fcn.10022b70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x71c]
call fcn.10022960
lea ecx, [ebp - 0x230]
call fcn.100185f0
movzx ecx, al
test ecx, ecx
je 0x1005c3a4
push 0x1014f104
lea ecx, [ebp - 0x74c]
call fcn.10022620
mov dword [ebp - 0xaa8], eax
mov edx, dword [ebp - 0xaa8]
mov dword [ebp - 0xb10], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xa0c]
or eax, 1
mov dword [ebp - 0xa0c], eax
mov ecx, dword [ebp - 0xb10]
mov dword [ebp - 0xa64], ecx
jmp 0x1005c3d7
lea edx, [ebp - 0x230]
push edx
lea ecx, [ebp - 0x734]
call fcn.10021b20
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xa0c]
or eax, 2
mov dword [ebp - 0xa0c], eax
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp - 0xa64], ecx
mov edx, dword [ebp - 0xa64]
mov dword [ebp - 0xaa0], edx
mov eax, dword [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0x230]
call fcn.10018670
mov ecx, dword [ebp - 0xa0c]
and ecx, 2
je 0x1005c412
and dword [ebp - 0xa0c], 0xfffffffd
lea ecx, [ebp - 0x734]
call fcn.10022b70
mov dword [ebp - 4], 0x11
mov edx, dword [ebp - 0xa0c]
and edx, 1
je 0x1005c436
and dword [ebp - 0xa0c], 0xfffffffe
lea ecx, [ebp - 0x74c]
call fcn.10022b70
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x9c], 0
jge 0x1005c5d8
lea ecx, [ebp - 0x230]
call fcn.100185f0
movzx edx, al
test edx, edx
jne 0x1005c4a4
lea ecx, [ebp - 0x230]
call fcn.100226d0
push eax
push 0x1014f2ac
lea eax, [ebp - 0x5e4]
push eax
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xa9c], eax
mov ecx, dword [ebp - 0xa9c]
push ecx
lea ecx, [ebp - 0x230]
call fcn.10018670
lea ecx, [ebp - 0x5e4]
call fcn.10022b70
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0xb8
call fcn.100226d0
push eax
lea ecx, [ebp - 0x258]
call fcn.10018650
push 0x1014f2bc
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov dword [ebp - 0xa4c], eax
push 0xa
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x77c]
push ecx
call fcn.1003d530
add esp, 0xc
mov dword [ebp - 0xa98], eax
mov edx, dword [ebp - 0xa98]
mov dword [ebp - 0xa94], edx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xa94]
call fcn.100226d0
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10022620
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x77c]
call fcn.10022b70
lea ecx, [ebp - 0x4b8]
call fcn.100226d0
push eax
mov eax, dword [ebp - 0xa4c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xa4c]
mov eax, dword [edx + 0x2c]
call eax
push 1
mov ecx, dword [ebp - 0xa4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa4c]
mov eax, dword [edx + 0x104]
call eax
push 0x1014f1bc
lea ecx, [ebp - 0x258]
call fcn.10018650
push str.hideEnd
mov ecx, dword [ebp - 0xa04]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov dword [ebp - 0xa44], eax
push 0x1014f2e4
mov ecx, dword [ebp - 0xa44]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa44]
mov eax, dword [edx + 0x2c]
call eax
push 1
mov ecx, dword [ebp - 0xa44]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa44]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4b8]
call fcn.10022b70
jmp 0x1005c6d0
lea ecx, [ebp - 0x230]
call fcn.100185f0
movzx ecx, al
test ecx, ecx
jne 0x1005c62d
lea ecx, [ebp - 0x230]
call fcn.100226d0
push eax
push 0x1014f2f0
lea edx, [ebp - 0x56c]
push edx
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xa78]
push eax
lea ecx, [ebp - 0x230]
call fcn.10018670
lea ecx, [ebp - 0x56c]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0xb8
call fcn.100226d0
push eax
lea ecx, [ebp - 0x258]
call fcn.10018650
push 0xa
lea edx, [ebp - 0x258]
push edx
lea eax, [ebp - 0x5b4]
push eax
call fcn.1003d530
add esp, 0xc
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
mov dword [ebp - 0xa8c], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0xa8c]
call fcn.100226d0
push eax
push 0x1014f300
lea edx, [ebp - 0x59c]
push edx
call fcn.1003d290
add esp, 0xc
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xa88]
push eax
lea ecx, [ebp - 0x258]
call fcn.10018670
lea ecx, [ebp - 0x59c]
call fcn.10022b70
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5b4]
call fcn.10022b70
push 0
push 0x1014f310
lea ecx, [ebp - 0x230]
call fcn.10028e60
cmp eax, 0xffffffff
je 0x1005c7d8
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0xb8
call fcn.100185f0
movzx edx, al
test edx, edx
je 0x1005c740
push 0x1014f328
lea eax, [ebp - 0x584]
push eax
call fcn.1003d290
add esp, 8
mov dword [ebp - 0xa84], eax
mov ecx, dword [ebp - 0xa84]
push ecx
lea ecx, [ebp - 0x258]
call fcn.10018670
lea ecx, [ebp - 0x584]
call fcn.10022b70
push str.fylpds
lea ecx, [ebp - 0x458]
call fcn.1001a390
test eax, eax
jne 0x1005c7d8
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0xb8
call fcn.100185f0
movzx eax, al
test eax, eax
je 0x1005c7ad
push 0x1014f350
lea ecx, [ebp - 0x5cc]
push ecx
call fcn.1003d290
add esp, 8
mov dword [ebp - 0xa80], eax
mov edx, dword [ebp - 0xa80]
push edx
lea ecx, [ebp - 0x258]
call fcn.10018670
lea ecx, [ebp - 0x5cc]
call fcn.10022b70
lea ecx, [ebp - 0x258]
call fcn.100226d0
push eax
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x6c0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x6c0]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f9]
test edx, edx
jne 0x1005c804
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x9c], 0
jge 0x1005c85c
lea ecx, [ebp - 0x258]
call fcn.100226d0
push eax
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x6c0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x6c0]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x2f9]
test eax, eax
je 0x1005c85c
push str.vippic.png
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x778]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
lea ecx, [ebp - 0x230]
call fcn.100226d0
push eax
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x6c4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x6c4]
mov eax, dword [edx + 0x2c]
call eax
lea ecx, [ebp - 0x488]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x6a4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x6a4]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0xa04]
add ecx, 0x6a8
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x6a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
add eax, 0x124
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x9c]
push eax
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
add edx, 0x13c
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x9c]
push edx
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
mov dword [ebp - 0xa68], ecx
lea edx, [ebp - 0xa50]
push edx
mov ecx, dword [ebp - 0xa68]
call fcn.10018280
lea eax, [ebp - 0xa7c]
push eax
mov ecx, dword [ebp - 0xa68]
call fcn.10018220
jmp 0x1005c985
lea ecx, [ebp - 0xa50]
call fcn.100181c0
lea ecx, [ebp - 0xa7c]
push ecx
lea ecx, [ebp - 0xa50]
call fcn.10018150
movzx edx, al
test edx, edx
je 0x1005caec
lea ecx, [ebp - 0xa50]
call fcn.100181e0
push eax
lea ecx, [ebp - 0x87c]
call fcn.10021bb0
mov byte [ebp - 4], 0x1a
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
mov edx, dword [ebp - 0x87c]
cmp edx, dword [ecx + 0x9c]
jne 0x1005cad8
cmp dword [ebp - 0x850], 0
jg 0x1005c9fa
cmp dword [ebp - 0x818], 0
jg 0x1005c9fa
cmp dword [ebp - 0x84c], 0
jle 0x1005cad8
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x1005cad8
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x87c]
call fcn.10022bc0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.10022b70
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x258]
call fcn.10022b70
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x488]
call fcn.10022b70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa00]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3f8]
call fcn.10022b70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x428]
call fcn.10022b70
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x470]
call fcn.10022b70
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x458]
call fcn.10022b70
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.10022960
jmp 0x1005f0fc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x87c]
call fcn.10022bc0
jmp 0x1005c97a
cmp dword [ebp - 0xa10], 0xffffffff
jne 0x1005ce48
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa2c], eax
je 0x1005cda4
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx eax, al
test eax, eax
je 0x1005cd9f
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0xa30], 0
jle 0x1005cd9f
mov edx, dword [ebp - 0xa30]
sub edx, 1
mov dword [ebp - 0xa30], edx
js 0x1005cd9a
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa30], eax
ja 0x1005cd9a
mov ecx, dword [ebp - 0xa30]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005cd9a
mov eax, dword [ebp - 0xa2c]
cmp eax, dword [ebp - 0xa30]
jl 0x1005cc21
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov esi, dword [ebp - 0xa2c]
add esi, 1
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp esi, eax
ja 0x1005cd98
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.1001e850
mov ecx, dword [ebp - 0xa2c]
add ecx, 1
cmp eax, ecx
jbe 0x1005cd98
mov byte [ebp - 0xa07], 0
mov edx, dword [ebp - 0xa2c]
add edx, 1
mov dword [ebp - 0xa40], edx
jmp 0x1005cc9b
mov eax, dword [ebp - 0xa40]
add eax, 1
mov dword [ebp - 0xa40], eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
cmp dword [ebp - 0xa40], eax
jae 0x1005cd69
mov edx, dword [ebp - 0xa40]
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005cd64
mov ecx, dword [ebp - 0xa40]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0x20], 0
jne 0x1005cd64
mov eax, dword [ebp - 0xa40]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
jne 0x1005cd5d
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x2f9]
test ecx, ecx
jne 0x1005cd5b
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x2f4]
test ecx, ecx
je 0x1005cd5d
jmp 0x1005cd64
mov byte [ebp - 0xa07], 1
jmp 0x1005cc8c
movzx edx, byte [ebp - 0xa07]
test edx, edx
jne 0x1005cd98
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x1005cd9f
jmp 0x1005cb7c
jmp 0x1005ce43
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa2c], eax
jne 0x1005ce43
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
test eax, eax
jbe 0x1005ce07
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
jmp 0x1005ce43
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x1005ce43
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x1005d1c8
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa10], eax
je 0x1005d129
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x1005d124
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.1001e850
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 0
jle 0x1005d124
mov ecx, dword [ebp - 0xa34]
sub ecx, 1
mov dword [ebp - 0xa34], ecx
js 0x1005d11f
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa34], eax
ja 0x1005d11f
mov eax, dword [ebp - 0xa34]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005d11f
mov edx, dword [ebp - 0xa10]
cmp edx, dword [ebp - 0xa34]
jl 0x1005cf75
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x1005d124
mov esi, dword [ebp - 0xa10]
add esi, 1
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp esi, eax
ja 0x1005d11d
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
mov edx, dword [ebp - 0xa10]
add edx, 1
cmp eax, edx
jbe 0x1005d11d
mov byte [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0xa1c], eax
jmp 0x1005cfec
mov ecx, dword [ebp - 0xa1c]
add ecx, 1
mov dword [ebp - 0xa1c], ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.1001e850
cmp dword [ebp - 0xa1c], eax
jae 0x1005d0c0
mov eax, dword [ebp - 0xa1c]
cmp eax, dword [ebp - 0xa10]
jle 0x1005d095
mov ecx, dword [ebp - 0xa1c]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x20], 0
jne 0x1005d095
mov eax, dword [ebp - 0xa1c]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005d095
mov edx, dword [ebp - 0xa1c]
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
je 0x1005d095
mov byte [ebp - 0xa08], 1
jmp 0x1005d0c0
mov ecx, dword [ebp - 0xa1c]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
jne 0x1005d0bb
jmp 0x1005d0c0
jmp 0x1005cfdd
movzx eax, byte [ebp - 0xa08]
test eax, eax
jne 0x1005d11d
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x2f9]
test eax, eax
jne 0x1005d0f9
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x2f4]
test eax, eax
je 0x1005d11d
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
jmp 0x1005d124
jmp 0x1005cecb
jmp 0x1005d1c8
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa10], eax
jne 0x1005d1c8
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.1001e850
test eax, eax
jbe 0x1005d18c
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x1005d1c8
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x1005d1c8
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
add edx, 0x124
mov dword [ebp - 0xa58], edx
lea eax, [ebp - 0xa54]
push eax
mov ecx, dword [ebp - 0xa58]
call fcn.10018280
lea ecx, [ebp - 0xa6c]
push ecx
mov ecx, dword [ebp - 0xa58]
call fcn.10018220
jmp 0x1005d211
lea ecx, [ebp - 0xa54]
call fcn.100181c0
lea edx, [ebp - 0xa6c]
push edx
lea ecx, [ebp - 0xa54]
call fcn.10018150
movzx eax, al
test eax, eax
je 0x1005d2be
lea ecx, [ebp - 0xa54]
call fcn.100181e0
push eax
lea ecx, [ebp - 0x97c]
call fcn.10021bb0
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x9c]
cmp eax, dword [ebp - 0x97c]
jne 0x1005d2aa
cmp dword [ebp - 0x950], 0
jg 0x1005d275
cmp dword [ebp - 0x954], 0
jle 0x1005d2aa
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x97c]
call fcn.10022bc0
jmp 0x1005d2be
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x97c]
call fcn.10022bc0
jmp 0x1005d206
cmp dword [ebp - 0xa2c], 0xffffffff
jne 0x1005d345
cmp dword [ebp - 0xa10], 0xffffffff
jne 0x1005d345
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x2f4]
test eax, eax
je 0x1005d345
push 1
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
push 0x1014f380
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x2c]
call eax
push 0xff715935
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x750]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CLabelUI::SetTextColor_unsigned_long_int_
call sym.UserAndPayClient.dll_public:_static_void___cdecl_xx_DuiLib::CPaintManagerUI::ReloadSkin_void_
push 0x1014f38c
lea ecx, [ebp - 0x440]
call fcn.10022620
mov byte [ebp - 4], 0x1c
push 0xffffffffffffffff
push 0x1014f394
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov byte [ebp - 4], 0x1d
push 0x1014f3a8
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx edx, al
test edx, edx
jne 0x1005d3a6
push 0x1014f3b8
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
je 0x1005d50d
push 0x1014f3c8
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a0]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f3e0
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x338], 0x1c
xor edx, edx
mov dword [ebp - 0x334], edx
mov dword [ebp - 0x330], edx
mov dword [ebp - 0x32c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x338]
mov dword [eax], ecx
mov edx, dword [ebp - 0x334]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x330]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x32c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x1014f3f8
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b0]
mov edx, dword [eax + 0x2c]
call edx
push 0x1014f404
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x2a8], 0x14
xor eax, eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x2a8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2a4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2a0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x29c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f410
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
jne 0x1005d53f
push 0x1014f424
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx edx, al
test edx, edx
je 0x1005d6ca
push 0x1014f438
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a0]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f450
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x2c8], 0x1c
xor edx, edx
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0x2bc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x2c8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2c4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2c0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x2bc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b0]
mov edx, dword [eax + 0x78]
call edx
push 0x1014f468
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b0]
mov edx, dword [eax + 0x2c]
call edx
push 0x1014f474
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
push 0x1c
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a8]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a8]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x2b8], 0x13
xor eax, eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x2b8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2b4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2b0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2ac]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f480
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
jne 0x1005d6f8
push 0x1014f494
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx edx, al
test edx, edx
je 0x1005d737
push 0x1014f4a4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1014f4b8
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x1005e630
push str.4lpS
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1005d942
push 0x1014f4d0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f4dc
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x2d8], 0x15
xor edx, edx
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2d0], edx
mov dword [ebp - 0x2cc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x2d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x2cc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x1014f4f4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x1014f500
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f514
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x3a8], 0x14
xor ecx, ecx
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0x39c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x3a8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3a4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x3a0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x39c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x2e8], 0x14
xor ecx, ecx
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x2e8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2e4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2e0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x2dc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f520
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1005db4d
push 0x1014f52c
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a4]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x2f8], 0x15
xor eax, eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x2f8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2f4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2f0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2ec]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
push 0x1014f540
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f54c
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f564
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x308], 0x14
xor ecx, ecx
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x300], ecx
mov dword [ebp - 0x2fc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x308]
mov dword [edx], eax
mov ecx, dword [ebp - 0x304]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x300]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x2fc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x318], 0x15
xor ecx, ecx
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x30c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x318]
mov dword [edx], eax
mov ecx, dword [ebp - 0x314]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x310]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x30c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f570
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1005dcb9
push 0x1014f580
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f58c
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x328], 0x15
xor edx, edx
mov dword [ebp - 0x324], edx
mov dword [ebp - 0x320], edx
mov dword [ebp - 0x31c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
mov edx, dword [ebp - 0x324]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x320]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x31c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x1014f5a4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x1014f5b0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x298], 0x18
xor eax, eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x298]
mov dword [ecx], edx
mov eax, dword [ebp - 0x294]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x290]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x28c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f5bc
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1005de25
push 0x1014f5cc
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f5d8
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x348], 0x15
xor edx, edx
mov dword [ebp - 0x344], edx
mov dword [ebp - 0x340], edx
mov dword [ebp - 0x33c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x348]
mov dword [eax], ecx
mov edx, dword [ebp - 0x344]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x340]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x33c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x1014f5f0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x1014f5fc
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x358], 0x18
xor eax, eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x358]
mov dword [ecx], edx
mov eax, dword [ebp - 0x354]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x350]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x34c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push 0x1014f608
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1005df66
push 0x1014f61c
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a0]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x368], 0x1d
xor eax, eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x368]
mov dword [ecx], edx
mov eax, dword [ebp - 0x364]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x360]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x35c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x78]
call eax
push 0x1014f630
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push str.Clear.png
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x21
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f650
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x1005e630
push str.dkpc
lea ecx, [ebp - 0x440]
push ecx
call fcn.10019590
add esp, 8
movzx edx, al
test edx, edx
je 0x1005e2af
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a0]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a0]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0xa60], eax
push 0x24
mov eax, dword [ebp - 0xa60]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xa60]
mov eax, dword [edx + 0x94]
call eax
push 0x24
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a0]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7ac]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7ac]
mov eax, dword [edx + 0x8c]
call eax
push 0x1014f668
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1014f67c
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1014f68c
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1014f69c
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7ac]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1014f6b0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f6bc
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f6c4
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x378], 0x22
xor ecx, ecx
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x370], ecx
mov dword [ebp - 0x36c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x378]
mov dword [edx], eax
mov ecx, dword [ebp - 0x374]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x370]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x36c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x388], 0x22
xor ecx, ecx
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x388]
mov dword [edx], eax
mov ecx, dword [ebp - 0x384]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x380]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x37c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x398], 0x22
xor ecx, ecx
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0x38c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x398]
mov dword [edx], eax
mov ecx, dword [ebp - 0x394]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x390]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x38c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x3b8], 0x1c
xor ecx, ecx
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x3b8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3b4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x3b0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x3ac]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x1005e630
push str.fywjjm
lea ecx, [ebp - 0x440]
push ecx
call fcn.10019590
add esp, 8
movzx edx, al
test edx, edx
je 0x1005e379
push 0x1014f6e0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x20
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x20
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x94]
call eax
push 0x1014f6f8
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f704
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x1005e630
push str.dsrw
lea ecx, [ebp - 0x440]
push ecx
call fcn.10019590
add esp, 8
movzx edx, al
test edx, edx
je 0x1005e630
push 0x1014f71c
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x3c8], 0x24
xor ecx, ecx
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x3c8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3c4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x3c0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x3bc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a4]
mov eax, dword [edx + 0x78]
call eax
push 0x21
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x8c]
call eax
push 0x21
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x94]
call eax
mov dword [ebp - 0x268], 0x15
xor ecx, ecx
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x25c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x268]
mov dword [edx], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x260]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x25c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
push 0x1014f730
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x1014f73c
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1f
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x20
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x94]
call eax
mov dword [ebp - 0x278], 0x26
xor ecx, ecx
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x270], ecx
mov dword [ebp - 0x26c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x278]
mov dword [edx], eax
mov ecx, dword [ebp - 0x274]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x270]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x78]
call eax
push 0x1014f750
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x288], 0x14
xor ecx, ecx
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x27c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x288]
mov dword [edx], eax
mov ecx, dword [ebp - 0x284]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x280]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x27c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x440]
call fcn.10022b70
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
call fcn.10022b70
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x258]
call fcn.10022b70
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x488]
call fcn.10022b70
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa00]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3f8]
call fcn.10022b70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x428]
call fcn.10022b70
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x470]
call fcn.10022b70
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x458]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x7c8], 0
je 0x1005e7bc
mov edx, dword [ebp - 0xa04]
cmp dword [edx + 0x7cc], 0
je 0x1005e7bc
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x34]
push edx
push 0x1014f75c
lea eax, [ebp - 0x4a0]
push eax
call fcn.1003d290
add esp, 0xc
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x4a0]
call fcn.100185f0
movzx ecx, al
test ecx, ecx
jne 0x1005e738
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x34], 0
jne 0x1005e782
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7c8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c8]
mov eax, dword [edx + 0x104]
call eax
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7cc]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7cc]
mov eax, dword [edx + 0x104]
call eax
jmp 0x1005e7ad
lea ecx, [ebp - 0x4a0]
call fcn.100226d0
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x7c8]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c8]
mov eax, dword [edx + 0x2c]
call eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a0]
call fcn.10022b70
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x780], 0
je 0x1005f0ea
mov edx, dword [ebp - 0xa04]
cmp dword [edx + 0x784], 0
je 0x1005f0ea
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x788], 0
je 0x1005f0ea
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x78c], 0
je 0x1005f0ea
mov edx, dword [ebp - 0xa04]
cmp dword [edx + 0x790], 0
je 0x1005f0ea
mov eax, dword [ebp - 0xa04]
cmp dword [eax + 0x794], 0
je 0x1005f0ea
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x798], 0
je 0x1005f0ea
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x698]
add eax, 0x124
push eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x9c]
push eax
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0xa20], eax
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x698]
add edx, 0x13c
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x9c]
push edx
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0xa14], 0xffffffff
jne 0x1005ec04
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa20], eax
je 0x1005eb60
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x1005eb5b
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.1001e850
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0xa28], 0
jle 0x1005eb5b
mov ecx, dword [ebp - 0xa28]
sub ecx, 1
mov dword [ebp - 0xa28], ecx
js 0x1005eb56
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa28], eax
ja 0x1005eb56
mov eax, dword [ebp - 0xa28]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005eb56
mov edx, dword [ebp - 0xa20]
cmp edx, dword [ebp - 0xa28]
jl 0x1005e9dd
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
mov esi, dword [ebp - 0xa20]
add esi, 1
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp esi, eax
ja 0x1005eb54
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
mov edx, dword [ebp - 0xa20]
add edx, 1
cmp eax, edx
jbe 0x1005eb54
mov byte [ebp - 0xa05], 0
mov eax, dword [ebp - 0xa20]
add eax, 1
mov dword [ebp - 0xa3c], eax
jmp 0x1005ea57
mov ecx, dword [ebp - 0xa3c]
add ecx, 1
mov dword [ebp - 0xa3c], ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.1001e850
cmp dword [ebp - 0xa3c], eax
jae 0x1005eb25
mov eax, dword [ebp - 0xa3c]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005eb20
mov edx, dword [ebp - 0xa3c]
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0x20], 0
jne 0x1005eb20
mov ecx, dword [ebp - 0xa3c]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
jne 0x1005eb19
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f9]
test edx, edx
jne 0x1005eb17
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f4]
test edx, edx
je 0x1005eb19
jmp 0x1005eb20
mov byte [ebp - 0xa05], 1
jmp 0x1005ea48
movzx eax, byte [ebp - 0xa05]
test eax, eax
jne 0x1005eb54
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x1005eb5b
jmp 0x1005e938
jmp 0x1005ebff
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x124
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa20], eax
jne 0x1005ebff
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x124
call fcn.1001e850
test eax, eax
jbe 0x1005ebc3
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
jmp 0x1005ebff
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x1005ebff
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x1005ef7f
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa14], eax
je 0x1005eee0
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx eax, al
test eax, eax
je 0x1005eedb
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0xa24], 0
jle 0x1005eedb
mov edx, dword [ebp - 0xa24]
sub edx, 1
mov dword [ebp - 0xa24], edx
js 0x1005eed6
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa24], eax
ja 0x1005eed6
mov ecx, dword [ebp - 0xa24]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005eed6
mov eax, dword [ebp - 0xa14]
cmp eax, dword [ebp - 0xa24]
jl 0x1005ed2c
push 0
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
mov esi, dword [ebp - 0xa14]
add esi, 1
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp esi, eax
ja 0x1005eed4
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.1001e850
mov ecx, dword [ebp - 0xa14]
add ecx, 1
cmp eax, ecx
jbe 0x1005eed4
mov byte [ebp - 0xa06], 0
mov edx, dword [ebp - 0xa14]
mov dword [ebp - 0xa18], edx
jmp 0x1005eda3
mov eax, dword [ebp - 0xa18]
add eax, 1
mov dword [ebp - 0xa18], eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
cmp dword [ebp - 0xa18], eax
jae 0x1005ee77
mov edx, dword [ebp - 0xa18]
cmp edx, dword [ebp - 0xa14]
jle 0x1005ee4c
mov eax, dword [ebp - 0xa18]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x20], 0
jne 0x1005ee4c
mov edx, dword [ebp - 0xa18]
push edx
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0xa0], 1
jne 0x1005ee4c
mov ecx, dword [ebp - 0xa18]
push ecx
mov edx, dword [ebp - 0xa04]
mov ecx, dword [edx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
je 0x1005ee4c
mov byte [ebp - 0xa06], 1
jmp 0x1005ee77
mov eax, dword [ebp - 0xa18]
push eax
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.10018200
cmp dword [eax + 0x68], 0xffffffff
jne 0x1005ee72
jmp 0x1005ee77
jmp 0x1005ed94
movzx edx, byte [ebp - 0xa06]
test edx, edx
jne 0x1005eed4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f9]
test edx, edx
jne 0x1005eeb0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f4]
test edx, edx
je 0x1005eed4
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
jmp 0x1005eedb
jmp 0x1005ec87
jmp 0x1005ef7f
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
add ecx, 0x13c
call fcn.1001e850
sub eax, 1
cmp dword [ebp - 0xa14], eax
jne 0x1005ef7f
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
add ecx, 0x13c
call fcn.1001e850
test eax, eax
jbe 0x1005ef43
push 0
mov edx, dword [ebp - 0xa04]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0xa04]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x1005ef7f
mov ecx, dword [ebp - 0xa04]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x1005ef7f
push 0
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
cmp dword [ebp - 0xa20], 0xffffffff
jne 0x1005efcc
cmp dword [ebp - 0xa14], 0xffffffff
jne 0x1005efcc
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x2f4]
test edx, edx
je 0x1005efcc
push 0x1014f764
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0xa04]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x2c]
call edx
call fcn.1004fb80
movzx eax, al
test eax, eax
je 0x1005f0ea
mov ecx, dword [ebp - 0xa04]
mov edx, dword [ecx + 0x780]
mov eax, dword [ebp - 0xa04]
mov edx, dword [edx]
mov ecx, dword [eax + 0x780]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0xa48], eax
mov dword [ebp - 0xa38], 0
jmp 0x1005f01c
mov ecx, dword [ebp - 0xa38]
add ecx, 1
mov dword [ebp - 0xa38], ecx
mov ecx, dword [ebp - 0xa48]
add ecx, 0x608
mov edx, dword [ebp - 0xa48]
mov eax, dword [edx + 0x608]
mov edx, dword [eax + 0xc]
call edx
cmp dword [ebp - 0xa38], eax
jge 0x1005f0ea
mov eax, dword [ebp - 0xa38]
push eax
mov ecx, dword [ebp - 0xa48]
add ecx, 0x608
mov edx, dword [ebp - 0xa48]
mov eax, dword [edx + 0x608]
mov edx, dword [eax]
call edx
mov dword [ebp - 0xa5c], eax
lea eax, [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0xa5c]
call sym.UserAndPayClient.dll_public:_struct_tagRECT___thiscall_xx_DuiLib::CLabelUI::GetTextPadding_void_
cmp dword [ebp - 0xa38], 0
je 0x1005f092
cmp dword [ebp - 0xa38], 2
jne 0x1005f0a3
mov ecx, dword [ebp - 0x23c]
add ecx, 2
mov dword [ebp - 0x23c], ecx
jmp 0x1005f0b2
mov edx, dword [ebp - 0x23c]
add edx, 3
mov dword [ebp - 0x23c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
mov edx, dword [ebp - 0x23c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x238]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x234]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0xa5c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CLabelUI::SetTextPadding_struct_tagRECT_
jmp 0x1005f00d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.10022960
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100ddfee
mov esp, ebp
pop ebp
ret