Function at 0x429010
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ff7eb
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push esi
push edi
mov eax, dword [0x5503c8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [ebp - 0xd]
call fcn.00404b90
mov ecx, dword [esi + 0x6d4]
push 0x506968
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.welcome_temp
mov dword [esi + 0x700], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x5069a0
mov dword [esi + 0x704], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x5069a8
mov dword [esi + 0x708], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.choose_region
mov dword [esi + 0x70c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_region
mov dword [esi + 0x710], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_region
mov dword [esi + 0x714], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x506a04
mov dword [esi + 0x718], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x503ebc
mov dword [esi + 0x71c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x506a14
mov dword [esi + 0x720], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.progress_text
mov dword [esi + 0x724], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push 0x506a40
mov dword [esi + 0x728], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.progress_bk
mov dword [esi + 0x730], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_version
mov dword [esi + 0x72c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_price
mov dword [esi + 0x734], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_wx
mov dword [esi + 0x738], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_zfb
mov dword [esi + 0x73c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_yl
mov dword [esi + 0x740], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_zfbbk
mov dword [esi + 0x744], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_wxbk
mov dword [esi + 0x748], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_ylbk
mov dword [esi + 0x74c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_zfb
mov dword [esi + 0x750], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_wx
mov dword [esi + 0x754], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_yl
mov dword [esi + 0x758], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_zfblogo
mov dword [esi + 0x75c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_wxlogo
mov dword [esi + 0x760], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_yllogo
mov dword [esi + 0x764], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_zfb1
mov dword [esi + 0x768], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_wx1
mov dword [esi + 0x76c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_type_yl1
mov dword [esi + 0x770], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_sao
mov dword [esi + 0x774], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_code
mov dword [esi + 0x778], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.pay_back
mov dword [esi + 0x77c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_version
mov dword [esi + 0x784], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_path
mov dword [esi + 0x788], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_browse
mov dword [esi + 0x78c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_download
mov dword [esi + 0x790], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_text
mov dword [esi + 0x794], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_progress_bk
mov dword [esi + 0x798], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.download_progress
mov dword [esi + 0x79c], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov dword [esi + 0x7a0], eax
mov ecx, dword [esi + 0x6d4]
push str.welcome_soft_label
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.welcome_temp_label
mov dword [esi + 0x7a4], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.temp_class
mov dword [esi + 0x7a8], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.temp_list
mov dword [esi + 0x7ac], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [esi + 0x6d4]
push str.search_edit
mov dword [esi + 0x7b0], eax
call sym.Office2.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
lea ecx, [ebp - 0xd]
mov dword [esi + 0x7b4], eax
call fcn.00404c50
mov ecx, dword [esi + 0x7a8]
test ecx, ecx
je 0x42943b
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x704]
test ecx, ecx
je 0x42944f
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x70c]
test ecx, ecx
je 0x429463
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x714]
test ecx, ecx
je 0x429477
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x718]
test ecx, ecx
je 0x42948b
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x71c]
mov dword [esi + 0x7bc], 0
test ecx, ecx
je 0x4294aa
mov eax, dword [ecx]
push dword [0x55003c]
call dword [eax + 0x3c]
mov ecx, dword [esi + 0x720]
test ecx, ecx
je 0x4294bf
mov eax, dword [ecx]
push dword [0x550038]
call dword [eax + 0x3c]
mov ecx, dword [esi + 0x7b4]
test ecx, ecx
je 0x4294d4
mov eax, dword [ecx]
push dword [0x550040]
call dword [eax + 0x3c]
mov ecx, dword [esi + 0x728]
test ecx, ecx
je 0x4294e8
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x72c]
test ecx, ecx
je 0x4294fc
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x730]
test ecx, ecx
je 0x429510
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x798]
test ecx, ecx
je 0x429524
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x79c]
test ecx, ecx
je 0x429538
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov ecx, dword [esi + 0x7a0]
test ecx, ecx
je 0x42954c
mov eax, dword [ecx]
push 0
call dword [eax + 0xe0]
mov eax, dword [0x5522f0]
test eax, eax
jne 0x429599
push 0x1b4
call fcn.004cf87e
mov edi, eax
add esp, 4
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 0
test edi, edi
je 0x42958b
push 0x1b4
push 0
push edi
call fcn.004d1960
add esp, 0xc
mov ecx, edi
call fcn.0041af80
jmp 0x42958d
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x5522f0], eax
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.0041be50
mov edi, eax
lea eax, [esi + 0x848]
cmp eax, edi
je 0x4295df
mov ecx, eax
call fcn.00403630
movups xmm0, xmmword [edi]
movups xmmword [esi + 0x848], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x858], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, 0x10
jb 0x429613
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429609
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42978c
push ecx
push edx
call fcn.004cf8ae
add esp, 8
push 0xa
push str.config.ini
lea ecx, [esi + 0x848]
call fcn.00402540
lea ecx, [ebp - 0xe]
call fcn.00404c50
push 0x7b8
call fcn.004cf87e
mov edi, eax
add esp, 4
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], 1
test edi, edi
je 0x429665
push 0x7b8
push 0
push edi
call fcn.004d1960
add esp, 0xc
mov ecx, edi
call fcn.0041a490
mov edx, eax
jmp 0x429667
xor edx, edx
mov ecx, dword [esi + 0x714]
add ecx, 0x658
mov dword [esi + 0x780], edx
push edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [esi + 0x780]
push 1
mov eax, dword [ecx]
call dword [eax + 0x10c]
mov ecx, dword [esi + 0x780]
movaps xmm0, xmmword [str.x]
push 1
sub esp, 0x10
mov edx, dword [ecx]
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x4c]
mov ecx, dword [esi + 0x780]
push 0x73
mov eax, dword [ecx]
call dword [eax + 0x80]
mov ecx, dword [esi + 0x780]
push 0x73
mov eax, dword [ecx]
call dword [eax + 0x88]
mov ecx, dword [esi + 0x780]
push 0
call sym.Office2.exe_public:_void___thiscall_DuiLib::CActiveXUI::SetDelayCreate_bool_
mov ecx, dword [esi + 0x780]
push 0
mov eax, dword [ecx]
call dword [eax + 0xe0]
mov ecx, esi
lea eax, [esi + 0x6f4]
neg ecx
sbb ecx, ecx
and ecx, eax
push ecx
mov ecx, dword [esi + 0x780]
call fcn.0041a7b0
mov ecx, esi
call fcn.00425740
push 0
push 0
push esi
push 0x430560
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edi, eax
mov eax, dword [0x5522f0]
test eax, eax
jne 0x429773
push 0x1b4
call fcn.004cf87e
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 2
test esi, esi
je 0x429765
push 0x1b4
push 0
push esi
call fcn.004d1960
add esp, 0xc
mov ecx, esi
call fcn.0041af80
jmp 0x429767
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x5522f0], eax
push edi
mov ecx, eax
call fcn.0041c540
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.004d54df
int3