Function at 0x4ca4f1
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c25a2
mov eax, dword fs:[0]
push eax
mov eax, 0x16fc
call fcn.005a41d0
mov eax, dword [0x61dc40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, 0x801d
mov ebx, ecx
push 9
mov dword [ebp - 0x1678], ebx
pop edi
cmp esi, eax
ja 0x4cb41f
je 0x4cc36f
mov eax, 0x872
cmp esi, eax
ja 0x4cad00
je 0x4cbb49
add eax, 0xffffff83
cmp esi, eax
ja 0x4cabb4
je 0x4caba4
cmp esi, 0x4ba
ja 0x4ca9ae
cmp esi, 0x4b1
jae 0x4ca840
mov eax, esi
sub eax, edi
je 0x4ca715
sub eax, 0xb3
je case.0x4cbdf0.40052
sub eax, 0x68
je 0x4ca5cb
sub eax, 6
je 0x4ca5ad
dec eax
jne case.0x4cbdf0.40031
push str._rY6R
jmp 0x4ca5b2
push 0x5f51ec
push dword [ebx + 4]
mov edi, dword [ebx + 0x142c]
lea eax, [ebx + 0x14c4]
call fcn.004e3de4
jmp 0x4cc3b0
call fcn.0044612c
xor eax, eax
xor esi, esi
cmp word [section..JuziBro], si
setne al
cmp eax, esi
je 0x4ca6c1
lea edi, [ebp - 0x16e0]
call fcn.00445e4a
mov dword [ebp - 4], 4
cmp dword [0x6b44c0], esi
je 0x4ca62b
call fcn.0044612c
mov esi, 0x6baf08
call fcn.00447eab
test eax, eax
je 0x4ca62b
push 1
call fcn.0044612c
mov ecx, eax
call fcn.00447dd8
test eax, eax
je 0x4ca62b
cmp word [eax], 0
jne 0x4ca63e
cmp dword [ebx + 0x1420], 4
mov eax, str.head_xiaohao
je 0x4ca63e
mov eax, str.head
push eax
lea eax, [ebp - 0x16e0]
push eax
call fcn.00407af8
lea eax, [ebx + 0x44]
test eax, eax
je 0x4ca657
lea esi, [ebx + 0x48]
jmp 0x4ca659
xor esi, esi
lea edi, [ebp - 0x16dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x16dc]
call fcn.0051395f
call fcn.0044612c
mov edi, eax
lea eax, [ebp - 0x16e0]
call fcn.00447f23
lea eax, [ebp - 0x16cc]
push eax
call fcn.0044612c
mov edx, eax
call fcn.00447f10
test ebx, ebx
je 0x4ca69f
lea esi, [ebx + 0x13f0]
jmp 0x4ca6a1
xor esi, esi
call fcn.004aeb22
mov dword [eax], esi
call fcn.004aeb22
mov ecx, dword [ebx + 4]
push eax
lea edx, [ebp - 0x16e0]
call fcn.004aeb6a
jmp 0x4caf71
call fcn.004a7f16
cmp dword [eax + 0x58], esi
jne 0x4cb0cf
call fcn.004a7f16
cmp dword [eax + 0x5c], esi
jne 0x4cb0cf
push ebx
lea ebx, [ebp - 0x198]
call fcn.004c51ed
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x1678]
push dword [eax + 4]
lea ebx, [ebp - 0x198]
call fcn.00485ede
or dword [ebp - 4], 0xffffffff
mov eax, ebx
push eax
call fcn.004c52bd
jmp 0x4cc3b0
lea ecx, [ebx + 0x5ac]
push 0
mov ebx, 0x88e
call fcn.00526e6c
test eax, eax
je 0x4cc3b0
cmp dword [eax + 0x4c], 0
je 0x4cc3b0
add eax, 4
push eax
lea eax, [ebp - 0x1688]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov esi, dword [ebp - 0x1678]
push dword [esi + 0x5b4]
mov eax, dword [esi + 0x5b0]
push eax
lea eax, [ebp - 0x1688]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea edi, [esi + 4]
lea eax, [ebp - 0x1688]
call fcn.004a20f1
lea ecx, [esi + 0x360]
push 0
mov ebx, 0x80ca
mov dword [ebp - 0x1694], ecx
call fcn.00526e6c
mov dword [ebp - 0x1674], eax
test eax, eax
je 0x4cc3b0
call fcn.0052cdb1
push dword [ebp - 0x1674]
lea ebx, [esi + 0x13f0]
push dword [ebp - 0x1694]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc]
push dword [ebp - 0x1674]
lea esi, [ebp - 0x16a0]
call fcn.00530d66
mov dword [ebp - 4], 0xd
mov esi, dword [ebp - 0x169c]
test esi, esi
je 0x4ca7ee
mov eax, dword [ebp - 0x1694]
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x38], eax
and dword [esi + 0x70], 0
add dword [ebp - 0x1688], 2
inc dword [ebp - 0x1684]
push dword [edi]
dec dword [ebp - 0x167c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edi, dword [edi]
test esi, esi
je 0x4ca82c
push 0
lea eax, [ebp - 0x1688]
push eax
push edi
push dword [ebp - 0x167c]
mov ecx, esi
push dword [ebp - 0x1680]
call fcn.0052cdd4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16a0]
call fcn.00530dc4
jmp 0x4cc3b0
cmp dword [0x63a5b4], 0
jne 0x4cc3b0
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], 0xf
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
mov eax, dword [0x6b4474]
and dword [ebp - 0x1674], 0
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
sar eax, 2
test eax, eax
jbe 0x4cbd98
mov edi, dword [ebp - 0x1674]
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
lea eax, [esi + 0x1428]
call fcn.004b21cf
mov ecx, eax
test ecx, ecx
je 0x4ca8c8
mov eax, dword [ebp + 8]
call fcn.0049d8c3
mov eax, dword [ebp - 0x169c]
cmp eax, dword [0x6b4474]
je 0x4ca988
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1694], eax
lea edi, [esi + 0xfac]
push 0
mov ebx, 0x871
mov ecx, edi
mov byte [ebp - 4], 0x10
call fcn.00526e6c
mov ebx, eax
test ebx, ebx
je 0x4ca93c
push dword [0x6b4474]
lea eax, [ebp - 0x1694]
push 0x5f51a4
call fcn.00404f66
mov eax, dword [ebx]
pop ecx
pop ecx
push 0
push dword [ebp - 0x1694]
mov ecx, ebx
call dword [eax + 0x64]
mov eax, edi
call fcn.00527450
cmp esi, dword [ebp - 0x1678]
jne 0x4ca976
push dword [0x6b4474]
lea eax, [ebp - 0x1694]
push 0x5f51b8
call fcn.00404f66
mov edi, dword [esi + 0x142c]
pop ecx
pop ecx
push dword [ebp - 0x1694]
lea eax, [esi + 0x14c4]
push dword [esi + 4]
call fcn.004e3de4
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1694]
add eax, 0xfffffff0
call fcn.00407b6b
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc dword [ebp - 0x1674]
sar eax, 2
cmp dword [ebp - 0x1674], eax
jb 0x4ca89c
jmp 0x4cbd98
mov eax, esi
sub eax, 0x7ee
je 0x4cb29a
dec eax
je 0x4caab2
dec eax
je 0x4caa01
dec eax
je 0x4ca9e7
dec eax
jne case.0x4cbdf0.40031
cmp dword [0x6b448c], eax
mov edx, 0x6b448c
sete al
mov dword [0x6b448c], eax
jmp 0x4cb530
xor eax, eax
cmp dword [0x6b4490], eax
mov edx, 0x6b4490
sete al
mov dword [0x6b4490], eax
jmp 0x4cb530
call fcn.00486d6a
mov ebx, dword [eax]
mov eax, dword [ebp - 0x1678]
mov ecx, dword [eax + 0x1458]
call fcn.00536514
push eax
call fcn.004983d6
mov ebx, eax
xor esi, esi
pop ecx
cmp ebx, esi
je 0x4cc3b0
mov ecx, ebx
call fcn.004410b2
mov edi, eax
cmp edi, esi
je 0x4cc3b0
call fcn.00486d6a
mov eax, dword [eax + 4]
mov ecx, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4caa6d
cmp dx, si
je 0x4caa69
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4caa6d
add ecx, 4
add eax, 4
cmp dx, si
jne 0x4caa47
xor eax, eax
jmp 0x4caa72
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, esi
jne 0x4cc3b0
call fcn.0046cd13
push esi
mov ecx, edi
call fcn.0046cf1e
lea eax, [ebx + 0x671c]
call fcn.0045168e
lea edi, [ebx + 0x6734]
call fcn.0051562f
push esi
push esi
push dword [ebp - 0x1678]
call fcn.004d2693
push esi
mov eax, ebx
jmp 0x4cad90
call fcn.00486d6a
mov esi, dword [ebp - 0x1678]
mov ebx, dword [eax]
mov ecx, dword [esi + 0x1458]
call fcn.00536514
push eax
call fcn.004983d6
mov ebx, eax
pop ecx
test ebx, ebx
je 0x4cc3b0
mov ecx, ebx
call fcn.004410b2
mov edi, eax
test edi, edi
je 0x4cc3b0
call fcn.00486d6a
mov eax, dword [eax + 4]
mov ecx, edi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x4cab1c
test dx, dx
je 0x4cab18
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x4cab1c
add ecx, 4
add eax, 4
test dx, dx
jne 0x4caaf6
xor eax, eax
jmp 0x4cab21
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4cc3b0
add ebx, 0x671c
push ebx
lea eax, [ebp - 0x1690]
push eax
call fcn.004a6e22
mov dword [ebp - 4], 0x13
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
xor edi, edi
sar eax, 2
test eax, eax
jbe 0x4cab8c
lea ebx, [esi + 0x1428]
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov edx, dword [eax]
push 0
push 0
push ebx
push 5
pop ecx
call fcn.004ba26b
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc edi
sar eax, 2
cmp edi, eax
jb 0x4cab5e
lea esi, [ebp - 0x1690]
call fcn.00420353
push dword [ebp - 0x1690]
call fcn.0058f3c4
jmp 0x4cac13
lea eax, [ebx + 0x1570]
call fcn.004dcdab
jmp 0x4cc3b0
mov eax, 0x803
cmp esi, eax
ja 0x4cac38
je 0x4cac2e
mov eax, esi
sub eax, 0x7f6
je 0x4cac19
sub eax, 6
je 0x4cac09
sub eax, 4
je 0x4cabf0
dec eax
je 0x4cabe6
dec eax
jne case.0x4cbdf0.40031
mov edx, str.http:__soft.123juzi.com_go.php_leafticket
jmp 0x4cb0f0
mov edx, str.http:__www.12306.cn_mormhweb_kyfw_question_201204_t20120427_701.html
jmp 0x4cb0f0
call fcn.0044410a
push 1
push 0x40d
push 0x405
push dword [eax + 4]
jmp 0x4cac8b
mov ecx, dword [ebx + 4]
push 1
call fcn.00480f1f
pop ecx
jmp 0x4cc3b0
lea eax, [ebx + 0x1570]
call fcn.004dcdab
mov edx, str.http:__soft.123juzi.com_go.php_leafsetdef
jmp 0x4cb0f0
mov edx, str.http:__soft.123juzi.com_go.php_leafticket2
jmp 0x4cb0f0
mov eax, esi
sub eax, 0x858
je 0x4caccd
dec eax
je 0x4caca9
dec eax
dec eax
je case.0x4cbdf0.40030
sub eax, 6
je 0x4cac7c
dec eax
jne case.0x4cbdf0.40031
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsZoomed]
neg eax
sbb eax, eax
and eax, 0xf0
push 0
add eax, 0xf030
push eax
push 0x112
push dword [ebx + 4]
jmp 0x4cac8b
push 0
push 0xf020
push 0x112
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x4cc3b0
push 0
add ebx, 0x1428
push ebx
call fcn.004b9ad0
jmp 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
cmp dword [eax + 0x6658], 0
je 0x4cc3b0
push 1
jmp 0x4cacef
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
cmp dword [eax + 0x6658], 0
je 0x4cc3b0
push 0xffffffffffffffff
push 0x1fb
mov esi, eax
call fcn.0049a4cf
jmp 0x4cc3b0
mov eax, 0xbe0
cmp esi, eax
ja 0x4cb16a
je 0x4cb10c
add eax, 0xffffffeb
cmp esi, eax
ja 0x4caec8
je 0x4cae9c
mov eax, esi
sub eax, 0x87a
je case.0x4cbdf0.40039
sub eax, 0xa
je 0x4cae7f
sub eax, 9
je 0x4cae4a
dec eax
je 0x4cad9a
sub eax, 5
jne case.0x4cbdf0.40031
lea eax, [ebx + 0x1428]
call fcn.004b21cf
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x4cc3b0
mov eax, dword [esi + 0x6638]
lea ecx, [ebx + 0x664]
push edi
mov ebx, eax
call fcn.00526e6c
cmp eax, edi
je 0x4cad8d
cmp dword [eax + 0x158], edi
je 0x4cad8d
mov eax, esi
jmp 0x4cae92
push edi
mov eax, esi
call fcn.004987de
jmp 0x4cc3b0
lea ecx, [ebx + 0x5ac]
push 0
mov ebx, 0x88e
mov dword [ebp - 0x1674], ecx
call fcn.00526e6c
mov esi, eax
test esi, esi
je 0x4cc3b0
cmp dword [esi + 0x4c], 0
je 0x4cc3b0
call fcn.0052cdb1
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x1688]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov ebx, dword [ebp - 0x1678]
push dword [ebx + 0x5b4]
mov eax, dword [ebx + 0x5b0]
push eax
lea eax, [ebp - 0x1688]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea edi, [ebx + 4]
lea eax, [ebp - 0x1688]
call fcn.004a20f1
push esi
push dword [ebp - 0x1674]
add ebx, 0x13f0
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0xc]
push esi
lea esi, [ebp - 0x16a0]
call fcn.00530d66
mov dword [ebp - 4], 0xe
mov esi, dword [ebp - 0x169c]
test esi, esi
je 0x4ca7ee
mov eax, dword [ebp - 0x1674]
jmp 0x4ca7e4
call fcn.0052cdb1
lea ecx, [ebx + 0x9ac]
mov eax, dword [ecx]
call dword [eax + 0x18]
xor esi, esi
inc esi
push esi
push 0
push 0xffffffffffffffff
push ebx
call fcn.004ceb4a
mov dword [ebx + 0x1518], esi
mov dword [ebx + 0x151c], esi
mov dword [ebx + 0x1520], esi
jmp 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
call fcn.004987c4
jmp 0x4cc3b0
mov ecx, dword [ebp + 0xc]
or dword [ebp - 0x1674], 0xffffffff
lea edi, [ebp - 0x1674]
mov edx, ebx
call fcn.004ceddc
test eax, eax
je 0x4cc3b0
push 1
push dword [ebp - 0x1674]
jmp 0x4cc373
mov eax, esi
sub eax, 0xbce
je 0x4cc3b0
dec eax
je 0x4cb0eb
dec eax
je 0x4caf81
dec eax
je 0x4caf00
dec eax
dec eax
jne case.0x4cbdf0.40031
call fcn.004aeb22
add eax, 4
call fcn.0052a724
jmp 0x4cc3b0
call fcn.0044612c
mov ebx, eax
xor ecx, ecx
inc ecx
mov edx, ebx
call fcn.00448635
test eax, eax
jg 0x4caf3c
push 1
mov ecx, str.juzimanual
call fcn.0044718d
test eax, eax
je 0x4caf3c
xor ecx, ecx
inc ecx
push ecx
mov edx, ebx
call fcn.0044865f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x90], eax
lea edi, [ebp - 0x16e0]
call fcn.00445e4a
mov dword [ebp - 4], 2
call fcn.0044612c
mov edi, eax
lea eax, [ebp - 0x16e0]
call fcn.00447f23
lea eax, [ebp - 0x16e0]
push eax
call fcn.004aeb22
call fcn.004af235
lea esi, [ebp - 0x16e0]
call fcn.00447932
jmp 0x4cc3b0
call fcn.004aeb22
add eax, 4
call fcn.0052a724
call fcn.0044612c
xor esi, esi
cmp word [section..JuziBro], si
je 0x4cc3b0
call fcn.004a7f16
cmp dword [eax + 0x58], esi
jne 0x4cb0cf
call fcn.004a7f16
cmp dword [eax + 0x5c], esi
jne 0x4cb0cf
lea eax, [ebp - 0x138]
push eax
call fcn.004866b6
push 0x186
lea eax, [ebp - 0x138]
push eax
mov eax, 0xa6
mov dword [ebp - 0x138], 0x5f6964
mov dword [ebp - method.CDhTipWnd.1.virtual_12], 0x5f6c28
call fcn.00485f6e
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], esi
push dword [ebx + 4]
lea ebx, [ebp - 0x138]
call fcn.00485ede
cmp eax, 1
jne 0x4cb0a7
push section..JuziBro
lea eax, [ebp - 0x1674]
push eax
call fcn.00407b16
mov byte [ebp - 4], 1
call fcn.0044612c
mov ecx, eax
call fcn.0044901d
mov ecx, dword [ebp - 0x1678]
mov eax, 0x5f5160
call fcn.004d2f8a
cmp dword [ebp - 0x1c], esi
je 0x4cb099
mov ebx, 0x20a
push ebx
call fcn.0058e040
mov edi, eax
pop ecx
cmp edi, esi
je 0x4cb099
push ebx
push esi
push edi
call fcn.00596530
add esp, 0xc
push dword [ebp - 0x1674]
push 0x5db9e0
push 0x104
push edi
call fcn.0058f42f
add esp, 0x10
call fcn.0044410a
push edi
push 0x40e
push 0x405
push dword [eax + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x1674]
add eax, 0xfffffff0
call fcn.00407b6b
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x138], 0x5f6964
mov dword [ebp - method.CDhTipWnd.1.virtual_12], 0x5f6c28
lea ecx, [ebp - 0x138]
call fcn.00485f94
jmp 0x4cc3b0
mov ecx, dword [ebx + 4]
push 0x5efbd0
push esi
push esi
push 0x5f512c
call fcn.00485e3a
add esp, 0x10
jmp 0x4cc3b0
mov edx, str.http:__i.baidu.com_
xor ecx, ecx
push ecx
xor eax, eax
inc eax
push eax
push ecx
push eax
push eax
push eax
push ecx
lea ecx, [ebx + 0x1428]
call fcn.004ba40b
jmp 0x4cc3b0
lea eax, [ebx + 0x1594]
call fcn.0048f902
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4cb128
push 9
jmp 0x4cb137
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4cb140
push 5
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push ebx
lea ebx, [ebp - 0x198]
call fcn.004c51ed
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x1678]
push dword [eax + 4]
jmp 0x4ca6f9
mov eax, 0x8003
cmp esi, eax
ja 0x4cb276
je 0x4cb247
mov eax, esi
sub eax, 0xbe1
je 0x4cb237
dec eax
je 0x4cb213
dec eax
je 0x4cb203
dec eax
je 0x4cb1ae
dec eax
jne case.0x4cbdf0.40031
lea eax, [ebx + 0x15b4]
call fcn.0048f902
jmp 0x4cc3b0
lea eax, [ebx + 0x15a4]
call fcn.0048f902
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4cb1ca
push 9
jmp 0x4cb1d9
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x4cb1e2
push 5
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
push ebx
lea ebx, [ebp - 0x198]
call fcn.004c51ed
mov dword [ebp - 4], 7
jmp 0x4cb15c
lea eax, [ebx + 0x15a4]
call fcn.0048f902
jmp 0x4cc3b0
xor eax, eax
cmp dword [0x6b44c0], eax
mov edx, 0x6b44c0
sete al
mov dword [0x6b44c0], eax
call fcn.0045d29a
call fcn.004d63e1
jmp 0x4cc3b0
lea eax, [ebx + 0x1594]
call fcn.0048f902
jmp 0x4cc3b0
xor edx, edx
push edx
cmp dword [ebx + 0x13a0], edx
je 0x4cb25a
push edx
push 0x10
jmp 0x4cac88
cmp dword [0x6bb4a4], edx
jne 0x4cb252
mov eax, dword [ebx + 0x1458]
mov ecx, dword [eax + 0x64]
push ecx
call fcn.00535f81
jmp 0x4cc3b0
mov eax, esi
sub eax, 0x8004
je 0x4cb406
dec eax
dec eax
je 0x4cb31b
dec eax
je 0x4cb2cf
sub eax, 0x13
je 0x4cb2b0
dec eax
jne case.0x4cbdf0.40031
push 0
xor eax, eax
inc eax
push eax
push eax
push eax
push eax
push eax
push 0
mov edx, str.juzi:settings
jmp 0x4cb0fc
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 8
call fcn.0049db07
jmp 0x4cc3b0
mov eax, dword [ebx + 0x13a0]
neg eax
sbb eax, eax
not eax
and eax, ebx
push eax
push 0xffffffffffffffff
push 1
call fcn.004ab9aa
mov ebx, eax
xor eax, eax
call fcn.004abdce
push 0
test eax, eax
je 0x4cb30a
mov ecx, dword [ebp - 0x1678]
mov ecx, dword [ecx + 0x1524]
mov dword [eax + 0x1524], ecx
jmp 0x4cb310
mov eax, dword [ebp - 0x1678]
add eax, 0x1428
push eax
jmp 0x4cac9f
xor eax, eax
push 0x1046
push eax
mov word [ebp - 0x1670], ax
lea eax, [ebp - 0x166e]
push eax
call fcn.00596530
add esp, 0xc
cmp dword [0x6b44bc], 0
mov edi, str.juzi:newtab
mov esi, 0x823
lea eax, [ebp - 0x1670]
je 0x4cb359
call fcn.0045e4ff
jmp 0x4cb369
push edi
push 0x5db9e0
push esi
push eax
call fcn.0058f42f
add esp, 0x10
xor eax, eax
cmp ax, word [ebp - 0x1670]
jne 0x4cb38a
push edi
push 0x5db9e0
lea eax, [ebp - 0x1670]
push esi
push eax
call fcn.0058f42f
add esp, 0x10
xor esi, esi
cmp dword [0x6bb4a4], esi
je 0x4cb3df
push ebx
push 0xffffffffffffffff
push 1
call fcn.004ab9aa
mov ebx, eax
xor eax, eax
call fcn.004abdce
cmp eax, esi
je 0x4cc3b0
mov ecx, dword [ebp - 0x1678]
mov ecx, dword [ecx + 0x1524]
push 1
push esi
push esi
push 1
push dword [0x6394f8]
mov dword [eax + 0x1524], ecx
push 1
push esi
lea ecx, [ebp - 0x1670]
push ecx
add eax, 0x1428
push eax
jmp 0x4cb3fc
push 1
push esi
push esi
push 1
push dword [0x6394f8]
lea eax, [ebp - 0x1670]
push 1
push esi
push eax
add ebx, 0x1428
push ebx
call fcn.004ba6bb
jmp 0x4cc3b0
cmp dword [ebx + 0x2bc], 0
je 0x4cc3b0
mov edi, ebx
call fcn.004d0cad
jmp 0x4cc3b0
mov eax, 0x9c5b
cmp esi, eax
ja 0x4cbdc7
je 0x4cbda8
mov eax, 0x80a9
cmp esi, eax
ja 0x4cb981
je 0x4cb977
add eax, 0xffffffb4
cmp esi, eax
ja 0x4cb561
je case.0x4cbdf0.40053
mov eax, esi
sub eax, 0x8030
je 0x4cb53a
push 3
pop edi
sub eax, edi
je 0x4cb4f7
sub eax, edi
je 0x4cb4ac
sub eax, 0x11
je 0x4cb496
sub eax, edi
jne case.0x4cbdf0.40031
cmp dword [ebx + 0x2bc], eax
je 0x4cc3b0
push ebx
call fcn.004d1f40
jmp 0x4cc3b0
push 0
xor eax, eax
inc eax
push eax
push eax
push eax
push eax
push eax
push 0
mov edx, str.juzi:clear
jmp 0x4cb0fc
call fcn.0044612c
xor eax, eax
xor esi, esi
cmp word [section..JuziBro], si
setne al
cmp eax, esi
jne 0x4cc3b0
call fcn.004a7f16
cmp dword [eax + 0x58], esi
jne 0x4cb0cf
call fcn.004a7f16
cmp dword [eax + 0x5c], esi
jne 0x4cb0cf
push ebx
lea ebx, [ebp - 0x198]
call fcn.004c51ed
mov dword [ebp - 4], edi
jmp 0x4ca6f0
call fcn.0044410a
push 0x20001
push 0x404
push 0x405
push dword [eax + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [0x6b4484], 0
jne 0x4cc3b0
mov dword [0x6b4484], 1
mov edx, 0x6b4484
call fcn.0045d29a
jmp 0x4cc3b0
call fcn.00480785
test eax, eax
jne 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 0xa
jmp 0x4cb2c5
mov eax, esi
sub eax, 0x8077
je 0x4cb6cb
sub eax, 4
je 0x4cb6b5
sub eax, 0x12
je 0x4cb5be
sub eax, 0x1a
je 0x4cb592
dec eax
jne case.0x4cbdf0.40031
push 0x878
jmp 0x4cc1eb
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
cmp dword [eax + 0x6658], 0
je 0x4cc3b0
push 0
push 0x204
jmp 0x4cacf4
xor eax, eax
cmp dword [0x6b4428], eax
mov edx, 0x6b4428
sete al
mov dword [0x6b4428], eax
call fcn.0045d29a
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], 0xb
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
and dword [ebp - 0x1674], 0
sar eax, 2
test eax, eax
jbe 0x4cbd98
mov edi, dword [ebp - 0x1674]
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
mov eax, dword [esi + 0xfe8]
sub eax, dword [esi + 0xfe4]
test eax, 0xfffffffc
jne 0x4cb648
push esi
call fcn.004cd909
mov eax, dword [0x6b4428]
lea ebx, [esi + 0xfac]
mov ecx, ebx
call fcn.0052701e
xor edi, edi
cmp dword [esi + 0x139c], edi
jne 0x4cb68f
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4cb679
mov dword [esi + 0x14a4], edi
jmp 0x4cb681
push edi
mov eax, esi
call fcn.004d6e85
mov eax, dword [ebx]
add esi, 0x1398
push esi
mov ecx, ebx
call dword [eax + 0x2c]
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc dword [ebp - 0x1674]
sar eax, 2
cmp dword [ebp - 0x1674], eax
jb 0x4cb61c
jmp 0x4cbd98
push 0
xor eax, eax
inc eax
push eax
push eax
push eax
push eax
push eax
push 0
mov edx, str.juzi:history
jmp 0x4cb0fc
call fcn.0048fe76
add eax, 4
push dword [eax]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
jne 0x4cb950
xor esi, esi
push esi
push 0x6bb480
mov dword [ebp - 0x16b0], esi
mov dword [ebp - 0x16ac], esi
mov dword [ebp - 0x16a8], esi
mov dword [ebp - 0x16a4], esi
call dword [sym.imp.USER32.dll_MonitorFromRect]
mov ebx, dword [sym.imp.USER32.dll_CopyRect]
mov edx, eax
cmp edx, esi
je 0x4cb74a
push 9
pop ecx
xor eax, eax
mov dword [ebp - 0x1708], 0x28
lea edi, [ebp - 0x1704]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x1708]
push eax
push edx
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
lea eax, [ebp - 0x16f4]
push eax
lea eax, [ebp - 0x16b0]
push eax
call ebx
lea eax, [ebp - 0x16b0]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
je 0x4cb784
push esi
lea eax, [ebp - 0x16b0]
push eax
push esi
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
jne 0x4cb784
lea eax, [ebp - 0x16b0]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
xor eax, eax
push 0xa
pop ecx
mov dword [ebp - 0x16dc], esi
lea edi, [ebp - 0x16d8]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1688], esi
lea edi, [ebp - 0x1684]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x16dc]
push eax
mov ecx, 0x5e8dc0
mov dword [ebp - 0x169c], 5
call fcn.00480c74
pop ecx
test eax, eax
je 0x4cb7e2
lea eax, [ebp - 0x16c0]
push eax
lea eax, [ebp - 0x1688]
push eax
call ebx
mov eax, dword [ebp - 0x16d4]
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x1688]
fld qword [0x5fdc30]
mov esi, dword [ebp - 0x1680]
mov edi, dword [ebp - 0x167c]
mov ebx, dword [ebp - 0x1684]
and dword [ebp - 0x1674], 0
sub esi, eax
mov dword [ebp - 0x1698], eax
mov eax, dword [ebp - 0x16a8]
sub eax, dword [ebp - 0x16b0]
sub edi, ebx
cmp esi, eax
mov dword [ebp - 0x1694], eax
jg 0x4cb82b
test esi, esi
jg 0x4cb844
fild dword [ebp - 0x1694]
fmul st(1)
call fcn.005969a0
mov esi, eax
mov dword [ebp - 0x1674], 1
mov eax, dword [ebp - 0x16a4]
sub eax, dword [ebp - 0x16ac]
cmp edi, eax
mov dword [ebp - 0x1678], eax
jg 0x4cb85e
test edi, edi
jg 0x4cb877
fimul dword [ebp - 0x1678]
call fcn.005969a0
mov edi, eax
mov dword [ebp - 0x1674], 1
jmp 0x4cb879
fstp st(0)
mov eax, dword [ebp - 0x1688]
lea eax, [esi + eax - 0x64]
cmp eax, dword [ebp - 0x16b0]
jl 0x4cb8a5
mov eax, dword [ebp - 0x16a8]
add eax, 0xffffff9c
cmp dword [ebp - 0x1688], eax
jg 0x4cb8a5
cmp dword [ebp - 0x1674], 0
je 0x4cb8be
mov eax, dword [ebp - 0x1694]
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x16b0]
mov dword [ebp - 0x1698], eax
cmp ebx, dword [ebp - 0x16ac]
jl 0x4cb8d7
cmp ebx, dword [ebp - 0x16a4]
jge 0x4cb8d7
cmp dword [ebp - 0x1674], 0
je 0x4cb8ec
mov eax, dword [ebp - 0x1678]
sub eax, edi
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
add ebx, dword [ebp - 0x16ac]
mov eax, dword [ebp - 0x1698]
mov dword [ebp - 0x1688], eax
add eax, esi
push ecx
mov dword [ebp - 0x1684], ebx
mov dword [ebp - 0x1680], eax
mov eax, esp
add ebx, edi
mov dword [ebp - 0x167c], ebx
and dword [eax], 0
mov dword [ebp - 0x1698], esp
push ecx
mov eax, esp
lea ecx, [ebp - 0x1688]
mov dword [ebp - 0x1698], esp
mov dword [eax], ecx
call fcn.0048fe76
call fcn.0049704d
call fcn.0048fe76
push dword [ebp - 0x169c]
add eax, 4
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4cc3b0
call fcn.0048fe76
add eax, 4
push 9
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.0048fe76
add eax, 4
push dword [eax]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x4cc3b0
mov edx, str.http:__soft.123juzi.com_go.php_leaffeedbacksrcjzbrw
jmp 0x4cb0f0
mov eax, 0x80d9
cmp esi, eax
ja 0x4cbb71
je 0x4cbb63
cmp esi, 0x80b6
je 0x4cbb49
cmp esi, 0x80bc
jbe case.0x4cbdf0.40031
cmp esi, 0x80c5
jbe 0x4cbb36
cmp esi, 0x80cb
je 0x4cba4f
cmp esi, 0x80cd
je 0x4cb9f0
cmp esi, 0x80d5
jbe case.0x4cbdf0.40031
cmp esi, 0x80d8
ja case.0x4cbdf0.40031
mov eax, esi
call fcn.004d9701
jmp 0x4cc3b0
mov eax, dword [ebp + 0xc]
dec eax
je 0x4cba1b
dec eax
jne 0x4cc3b0
mov eax, 0x5f5260
call fcn.004d2f8a
push 0
push 9
push 0x2504
push dword [0x6394fc]
jmp 0x4cac8b
mov eax, 0x5f5260
call fcn.004d2f8a
xor esi, esi
push esi
push 9
push 0x2504
push dword [0x6394fc]
call dword [sym.imp.USER32.dll_PostMessageW]
push esi
xor eax, eax
inc eax
push eax
push esi
push eax
push eax
push eax
push esi
mov edx, str.http:__soft.123juzi.com_go.php_leafticket
jmp 0x4cb0fc
call fcn.004096fe
push eax
call fcn.00409729
test eax, eax
je 0x4cba85
cmp dword [0x6b4484], 0
jne 0x4cba7b
mov edx, 0x6b4484
mov dword [0x6b4484], 1
call fcn.0045d29a
push 0x5f5204
jmp 0x4ca5b2
cmp dword [ebp + 0xc], 1
je 0x4cba97
cmp dword [ebp + 0xc], 2
je 0x4cba97
cmp dword [ebp + 0xc], 3
jne 0x4cbab3
xor esi, esi
cmp dword [0x6b4484], esi
je 0x4cbab5
mov edx, 0x6b4484
mov dword [0x6b4484], esi
call fcn.0045d29a
jmp 0x4cbab5
xor esi, esi
push 1
lea edx, [ebp - 0x1688]
lea ecx, [ebx + 0xfac]
mov eax, dword [ecx]
push edx
push 0x8033
mov dword [ebp - 0x1688], esi
mov dword [ebp - 0x1684], esi
mov dword [ebp - 0x1680], esi
mov dword [ebp - 0x167c], esi
call dword [eax + 0x14]
test eax, eax
je 0x4cc3b0
lea edi, [ebx + 4]
lea eax, [ebp - 0x1688]
call fcn.004a20f1
lea eax, [ebx + 0x13f0]
lea esi, [ebx + 0x1570]
mov dword [ebx + 0x1588], eax
call fcn.004dc860
push dword [edi]
push dword [ebp - 0x1684]
push 8
pop eax
call fcn.005138c4
add eax, dword [ebp - 0x1680]
mov edi, esi
push eax
call fcn.004dc89c
jmp 0x4cc3b0
mov edx, dword [ebp + 8]
lea esi, [ebx + 0x1428]
call fcn.004b9a06
jmp 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 0
jmp 0x4cad90
push 1
mov eax, ebx
call fcn.004d6e85
jmp 0x4cc3b0
mov eax, esi
sub eax, 0x80e4
je 0x4cbcee
sub eax, 0x1b6b
je 0x4cbcd5
dec eax
je 0x4cbc91
sub eax, 5
je 0x4cbc85
sub eax, 5
jne case.0x4cbdf0.40031
mov esi, 0x206
push esi
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.00596530
add esp, 0xc
xor eax, eax
push esi
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call fcn.00596530
mov ebx, dword [sym.imp.USER32.dll_LoadStringW]
add esp, 0xc
mov edi, 0x104
push edi
lea eax, [ebp - 0x218]
push eax
push 0x873
push dword [0x63950c]
call ebx
push edi
lea eax, [ebp - 0x628]
push eax
push 0x874
push dword [0x63950c]
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.00476687
pop ecx
xor eax, eax
push esi
mov word [ebp - 0x420], ax
xor edi, edi
lea eax, [ebp - 0x41e]
push edi
push eax
call fcn.00596530
mov esi, dword [ebp - 0x1678]
mov ecx, dword [esi + 4]
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x218]
push eax
lea ebx, [ebp - 0x628]
call fcn.0047670b
pop ecx
pop ecx
test eax, eax
je 0x4cc3b0
lea ecx, [ebp - 0x420]
call fcn.00465fea
push edi
xor ecx, ecx
inc ecx
push ecx
push edi
push ecx
push ecx
push ecx
push edi
lea ecx, [esi + 0x1428]
mov edx, eax
jmp 0x4cb102
push 0
push 0xf060
jmp 0x4cac83
xor esi, esi
cmp dword [0x63a5b4], esi
jne 0x4cc3b0
cmp dword [0x63a5b8], esi
jne 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
cmp eax, esi
je 0x4cc3b0
cmp dword [eax + 0x6658], esi
je 0x4cc3b0
push esi
push 0x208
jmp 0x4cacf4
cmp dword [ebx + 0x13a0], 0
jne 0x4cc3b0
mov esi, ebx
call fcn.004d77ee
jmp 0x4cc3b0
xor eax, eax
xor edi, edi
cmp dword [0x6b4414], edi
mov edx, 0x6b4414
sete al
mov dword [0x6b4414], eax
call fcn.0045d29a
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], 8
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
sar eax, 2
test eax, eax
jbe 0x4cbd98
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
mov eax, dword [0x6b4414]
lea ecx, [esi + 0x44]
call fcn.0052701e
xor ebx, ebx
cmp dword [esi + 0x139c], ebx
jne 0x4cbd84
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4cbd7c
mov dword [esi + 0x14a4], ebx
jmp 0x4cbd84
push ebx
mov eax, esi
call fcn.004d6e85
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc edi
sar eax, 2
cmp edi, eax
jb 0x4cbd43
lea esi, [ebp - 0x1690]
call fcn.0047509e
jmp 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 4
call fcn.004c6af4
jmp 0x4cc3b0
mov eax, 0x9c7d
cmp esi, eax
ja 0x4cc18c
je 0x4cc182
lea eax, [esi - 0x9c5e]
cmp eax, 0x1d
ja case.0x4cbdf0.40031
movzx eax, byte [eax + 0x4cc401]
jmp dword [eax*4 + 0x4cc3d1]
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
mov eax, dword [eax + 0x6638]
mov esi, dword [ebx + 0x1458]
cmp eax, 0xffffffff
je 0x4cbe24
mov ebx, eax
mov ecx, esi
call fcn.00526ec6
call fcn.00536169
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
xor edi, edi
sar eax, 2
test eax, eax
jbe 0x4cbe50
push 0
push edi
mov eax, esi
call fcn.00535f81
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
inc edi
sar eax, 2
cmp edi, eax
jb 0x4cbe38
mov edi, esi
call fcn.0053617e
jmp 0x4cc3b0
push ebx
call fcn.004c9f0f
jmp 0x4cc3b0
xor eax, eax
cmp dword [0x6b441c], eax
mov edx, 0x6b441c
sete al
mov dword [0x6b441c], eax
call fcn.0045d29a
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], edi
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
call fcn.0045e6bb
and dword [ebp - 0x1674], 0
mov dword [ebp - 0x169c], eax
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
sar eax, 2
test eax, eax
jbe 0x4cbd98
mov edi, dword [ebp - 0x1674]
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
mov ecx, dword [0x6b441c]
xor edi, edi
lea eax, [esi + 0x360]
push edi
push eax
call fcn.0053ed8f
cmp dword [0x6b441c], edi
je 0x4cbf08
cmp dword [ebp - 0x169c], edi
jne 0x4cbf08
xor eax, eax
jmp 0x4cbf0b
xor eax, eax
inc eax
xor ecx, ecx
lea edi, [esi + 0x139c]
cmp dword [edi], ecx
lea ebx, [esi + 0x5ac]
sete cl
push ecx
push eax
push 0x88e
call fcn.00526f0a
cmp dword [edi], 0
jne 0x4cbf41
lea ecx, [esi + 0x360]
mov eax, dword [ecx]
add esi, 0x1398
push esi
call dword [eax + 0x2c]
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc dword [ebp - 0x1674]
sar eax, 2
cmp dword [ebp - 0x1674], eax
jb 0x4cbecc
jmp 0x4cbd98
xor eax, eax
xor edi, edi
cmp dword [0x6b4424], edi
mov edx, 0x6b4424
sete al
mov dword [0x6b4424], eax
call fcn.0045d29a
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], 0xa
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
sar eax, 2
test eax, eax
jbe 0x4cbd98
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
push 1
push dword [0x6b4424]
mov eax, esi
call fcn.004d6cc7
cmp dword [esi + 0x139c], 0
jne 0x4cbff7
lea ecx, [esi + 0x29c]
mov eax, dword [ecx]
add esi, 0x1398
push esi
call dword [eax + 0x2c]
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc edi
sar eax, 2
cmp edi, eax
jb 0x4cbfc0
jmp 0x4cbd98
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [ebx + 4]
je 0x4cc3b0
xor eax, eax
cmp dword [0x6b4420], eax
mov edx, 0x6b4420
sete al
mov dword [0x6b4420], eax
call fcn.0045d29a
lea eax, [ebp - 0x1690]
push eax
call fcn.00440517
lea eax, [ebp - 0x1690]
push eax
mov dword [ebp - 4], 0xc
call fcn.004ab9aa
mov ebx, eax
call fcn.004ac52f
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
and dword [ebp - 0x1674], 0
sar eax, 2
test eax, eax
jbe 0x4cbd98
mov edi, dword [ebp - 0x1674]
lea esi, [ebp - 0x1690]
call fcn.004750c1
mov esi, dword [eax]
mov eax, dword [0x6b4420]
lea ecx, [esi + 0x9ac]
call fcn.0052701e
xor eax, eax
xor edi, edi
cmp dword [0x6b4420], edi
push edi
sete al
lea ebx, [esi + 0x29c]
push eax
push 0x80ca
call fcn.00526f0a
cmp dword [esi + 0x139c], edi
jne 0x4cc0e4
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x4cc0dc
mov dword [esi + 0x14a4], edi
jmp 0x4cc0e4
push edi
mov eax, esi
call fcn.004d6e85
mov eax, dword [ebp - 0x1680]
sub eax, dword [ebp - 0x1684]
inc dword [ebp - 0x1674]
sar eax, 2
cmp dword [ebp - 0x1674], eax
jb 0x4cc07d
jmp 0x4cbd98
push 1
push 1
mov eax, ebx
call fcn.004d6cc7
jmp 0x4cc3b0
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 1
jmp 0x4cad90
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 8
jmp 0x4cbdbd
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 6
jmp 0x4cbdbd
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 7
jmp 0x4cbdbd
mov edx, str.http:__soft.123juzi.com_go.php_leafweibo
jmp 0x4cb0f0
mov eax, 0x9c8c
cmp esi, eax
ja 0x4cc284
je 0x4cc27d
mov eax, esi
sub eax, 0x9c7e
je 0x4cc23e
dec eax
dec eax
je 0x4cc208
dec eax
je 0x4cc1e6
dec eax
je 0x4cc1dc
sub eax, 6
jne case.0x4cbdf0.40031
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
push 0x9c88
jmp 0x4cb2c5
mov edx, str.http:__www.123juzi.com_hao123_
jmp 0x4cb0f0
push 0x876
call fcn.0047e8f4
pop ecx
xor esi, esi
push esi
xor ecx, ecx
inc ecx
push ecx
push esi
push ecx
push ecx
push ecx
push esi
lea ecx, [ebx + 0x1428]
jmp 0x4cbc7e
lea esi, [ebp - 0x130]
call fcn.00486ab1
mov dword [ebp - 4], 0x12
push dword [ebx + 4]
mov ebx, esi
call fcn.00485ede
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x130], 0x5ef2a0
mov dword [ebp - method.CDhTipWnd.1.virtual_12], 0x5ef2c0
jmp 0x4cc272
lea esi, [ebp - 0x130]
call fcn.004ea730
mov dword [ebp - 4], 0x11
push dword [ebx + 4]
mov ebx, esi
call fcn.00485ede
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x130], 0x5f8194
mov dword [ebp - method.CDhTipWnd.1.virtual_12], 0x5ef2c0
lea ecx, [ebp - 0x130]
jmp 0x4cb0c5
push 0
jmp 0x4cc3a5
cmp esi, 0x9c8d
je 0x4cc3a3
cmp esi, 0xa093
je 0x4cc399
cmp esi, 0xea64
je 0x4cc382
cmp esi, 0xff01
je 0x4cc36f
cmp esi, 0xcf81
jb 0x4cc2f3
cmp esi, 0xcf94
ja 0x4cc2f3
lea eax, [ebx + 0x1428]
call fcn.004b21cf
test eax, eax
je 0x4cc3b0
cmp dword [eax + 0x6658], 0
je 0x4cc3b0
add esi, 0x3076
movsx ecx, si
push ecx
jmp 0x4cacef
cmp esi, 0x807d
jb 0x4cc303
cmp esi, 0x808a
jbe 0x4cc313
cmp esi, 0x808b
jb 0x4cc324
cmp esi, 0x808c
ja 0x4cc324
mov ecx, dword [ebx + 4]
push 1
push esi
call fcn.004d02c5
pop ecx
jmp 0x4cac13
and dword [ebp - 0x1698], 0
and dword [ebp - 0x169c], 0
lea edi, [ebp - 0x1698]
mov ecx, esi
mov edx, ebx
call fcn.004ceddc
test eax, eax
je 0x4cc3b0
mov ecx, dword [ebp + 0xc]
lea edi, [ebp - 0x169c]
call fcn.004ceddc
test eax, eax
je 0x4cc3b0
push 0
push 0
push dword [ebp - 0x169c]
push dword [ebp - 0x1698]
push ebx
call fcn.004c77eb
jmp 0x4cc3b0
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
xor ecx, ecx
mov edi, ebx
call fcn.004ceea0
jmp 0x4cc3b0
call fcn.004af560
push eax
call fcn.004af59c
call fcn.004af560
call fcn.004af9b9
jmp 0x4cc3b0
push 0x877
jmp 0x4cc1eb
push 1
mov esi, dword [ebx + 0x1458]
call fcn.005363eb
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0058f3cf
leave
ret 8