Function at 0x1004a400
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10122ed9
mov eax, dword fs:[0]
push eax
sub esp, 0x92c
mov eax, dword [0x1019742c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x44c], 0
cmp dword [ebp + 8], 0
jne 0x1004a79b
lea ecx, [ebp - 0xb8]
call fcn.10019430
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x444]
add eax, 0x280
push eax
lea ecx, [ebp - 0x298]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x4b4], eax
mov edx, dword [ebp - 0x4b4]
mov dword [ebp - 0x4b8], edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4b8]
call fcn.10023620
push eax
push str._sMacCode
lea eax, [ebp - 0x2b0]
push eax
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x4bc], eax
mov ecx, dword [ebp - 0x4bc]
push ecx
lea ecx, [ebp - 0xb8]
call fcn.10019340
lea ecx, [ebp - 0x2b0]
call fcn.10023ac0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x298]
call fcn.10023ac0
lea ecx, [ebp - 0xb8]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7d0], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x4c0], eax
mov edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x8b0], edx
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8b4], esp
push 0x101506f0
call fcn.1001fdb0
mov dword [ebp - 0x8b8], eax
mov byte [ebp - 4], 0
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x44d], al
movzx eax, byte [ebp - 0x44d]
test eax, eax
je 0x1004a56c
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.10023ac0
mov eax, dword [ebp - 0x4c4]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x4e0], eax
mov byte [ebp - 4], 3
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8bc], esp
push 0xffffffffffffffff
push str.MacCode
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x4c8], eax
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp - 0x8c0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x444]
push edx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8c4], esp
push 0xffffffffffffffff
push 0x10150718
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x8c8], eax
mov byte [ebp - 4], 5
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8cc], esp
push 0xffffffffffffffff
push str._rY6R:ghV
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x4d0], eax
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x8d0], ecx
mov byte [ebp - 4], 6
push 0
mov ecx, dword [ebp - 0x444]
call sym.UserAndPayClient.dll_public:_char____thiscall_Talk2Svr::CTalk2Svr::GetMacCode_void_
push eax
lea edx, [ebp - 0x2c8]
push edx
call fcn.1003ea40
add esp, 0xc
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x4d8], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44c]
or ecx, 1
mov dword [ebp - 0x44c], ecx
sub esp, 0x84
mov esi, esp
mov dword [ebp - 0x8d4], esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x4d8]
call fcn.10023620
push eax
mov ecx, esi
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x4dc], eax
mov edx, dword [ebp - 0x4dc]
mov dword [ebp - 0x8d8], edx
mov dword [ebp - 4], 8
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8dc], esp
push 0xffffffffffffffff
push 0x10150728
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x8e0], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x4e0]
call fcn.1002d380
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x4b0], eax
jmp 0x1004a6e7
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x4e8], ecx
mov dword [ebp - 4], 0xa
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x480], edx
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x44c]
and eax, 1
je 0x1004a72a
and dword [ebp - 0x44c], 0xfffffffe
lea ecx, [ebp - 0x2c8]
call fcn.10023ac0
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0xb8]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x444]
mov edx, dword [ecx + 0x3e0]
push edx
mov ecx, dword [ebp - 0x480]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x480]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x480]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.10023ac0
jmp 0x1004c6ba
cmp dword [ebp + 8], 1
jne 0x1004ae57
lea ecx, [ebp - 0x58]
call fcn.10019430
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x444]
add eax, 0x280
push eax
lea ecx, [ebp - 0x268]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x4ec], eax
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f0], edx
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x4f0]
call fcn.10023620
push eax
push str._sVipRenewal
lea eax, [ebp - 0x280]
push eax
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f4]
push ecx
lea ecx, [ebp - 0x58]
call fcn.10019340
lea ecx, [ebp - 0x280]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x268]
call fcn.10023ac0
lea ecx, [ebp - 0x58]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8e4], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x4f8], eax
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x8e8], edx
mov byte [ebp - 4], 0xd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8ec], esp
push 0x10150750
call fcn.1001fdb0
mov dword [ebp - 0x8f0], eax
mov byte [ebp - 4], 0xb
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x44e], al
movzx eax, byte [ebp - 0x44e]
test eax, eax
je 0x1004a8bf
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023ac0
mov eax, dword [ebp - 0x4fc]
jmp 0x1004c6bc
mov ecx, dword [ebp - 0x444]
add ecx, 0xa0
call fcn.10023620
push eax
lea ecx, [ebp - 0x40]
call fcn.1001fdb0
mov byte [ebp - 4], 0xe
push 0xa
push 0
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x250]
push edx
call fcn.1001cb90
add esp, 0x10
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
push eax
lea ecx, [ebp - 0x40]
call fcn.10019340
lea ecx, [ebp - 0x250]
call fcn.10023ac0
mov ecx, dword [ebp - 0x444]
add ecx, 0xb8
call fcn.10023620
push eax
lea ecx, [ebp - 0x28]
call fcn.1001fdb0
mov byte [ebp - 4], 0xf
push 0xa
push 0
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x238]
push edx
call fcn.1001cb90
add esp, 0x10
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
push eax
lea ecx, [ebp - 0x28]
call fcn.10019340
lea ecx, [ebp - 0x238]
call fcn.10023ac0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8f4], esp
push 0x10150768
call fcn.1001fdb0
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x8f8], ecx
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x8fc], esp
push 0x1015076c
call fcn.1001fdb0
mov dword [ebp - 0x900], eax
lea edx, [ebp - 0x40]
push edx
mov byte [ebp - 4], 0xf
call fcn.1001a5e0
add esp, 0x34
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x904], esp
push 0x10150770
call fcn.1001fdb0
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x908], eax
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x90c], esp
push 0x10150774
call fcn.1001fdb0
mov dword [ebp - 0x910], eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 4], 0xf
call fcn.1001a5e0
add esp, 0x34
lea ecx, [ebp - 0x28]
call fcn.10023620
push eax
lea ecx, [ebp - 0x40]
call fcn.10023620
push eax
push 0x10150778
lea edx, [ebp - 0x100]
push edx
call fcn.1003f7b0
add esp, 0x10
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x444]
add eax, 0x358
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x510], eax
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x514], edx
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x514]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x914], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x918], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x91c], esp
push 0x10150794
call fcn.1001fdb0
mov dword [ebp - 0x920], eax
mov byte [ebp - 4], 0x13
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x44f], al
mov cl, byte [ebp - 0x44f]
mov byte [ebp - 0x450], cl
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x220]
call fcn.10023ac0
movzx edx, byte [ebp - 0x450]
test edx, edx
je 0x1004ab40
mov dword [ebp - 0x51c], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x100]
call fcn.10023ac0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x28]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023ac0
mov eax, dword [ebp - 0x51c]
jmp 0x1004c6bc
mov eax, dword [ebp - 0x444]
add eax, 0x280
push eax
lea ecx, [ebp - 0x1f0]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x520], eax
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x524], edx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x524]
call fcn.10023620
push eax
push 0x101507ac
lea eax, [ebp - 0x130]
push eax
call fcn.1003f7b0
add esp, 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1f0]
call fcn.10023ac0
lea ecx, [ebp - 0x130]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x924], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x528], eax
mov ecx, dword [ebp - 0x528]
mov dword [ebp - 0x928], ecx
mov byte [ebp - 4], 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x92c], esp
push 0x101507c0
call fcn.1001fdb0
mov dword [ebp - 0x930], eax
mov byte [ebp - 4], 0x17
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x451], al
movzx edx, byte [ebp - 0x451]
test edx, edx
je 0x1004ac64
mov dword [ebp - 0x52c], 0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x130]
call fcn.10023ac0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x100]
call fcn.10023ac0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x28]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023ac0
mov eax, dword [ebp - 0x52c]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x6c8], eax
mov byte [ebp - 4], 0x19
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x934], esp
push 0xffffffffffffffff
push str.VipRenewal
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x6d8], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x444]
push ecx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x6dc], esp
push 0xffffffffffffffff
push 0x101507f8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x534], eax
mov edx, dword [ebp - 0x534]
mov dword [ebp - 0x6e0], edx
mov byte [ebp - 4], 0x1b
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x6e4], esp
push 0xffffffffffffffff
push 0x101507fc
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6e8], eax
mov byte [ebp - 4], 0x1c
sub esp, 0x84
mov esi, esp
mov dword [ebp - 0x6ec], esp
push 0xffffffffffffffff
lea ecx, [ebp - 0x100]
call fcn.10023620
push eax
mov ecx, esi
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp - 0x6f0], ecx
mov byte [ebp - 4], 0x1d
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x6f4], esp
push 0xffffffffffffffff
push 0x10150804
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6f8], eax
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x6c8]
call fcn.1002d380
mov dword [ebp - 0x6c4], eax
mov edx, dword [ebp - 0x6c4]
mov dword [ebp - 0x488], edx
jmp 0x1004ad9a
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x6c0], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp - 0x47c], ecx
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0x58]
call fcn.10023620
push eax
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x3e0]
push eax
mov ecx, dword [ebp - 0x47c]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x47c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x47c]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x130]
call fcn.10023ac0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x100]
call fcn.10023ac0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x28]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023ac0
jmp 0x1004c6ba
cmp dword [ebp + 8], 2
jne 0x1004b170
mov ecx, dword [ebp - 0x444]
add ecx, 0x280
push ecx
lea edx, [ebp - 0x2f8]
push edx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x6b8]
call fcn.10023620
push eax
push str._sExitProgram
lea ecx, [ebp - 0x118]
push ecx
call fcn.1003f7b0
add esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2f8]
call fcn.10023ac0
lea ecx, [ebp - 0x118]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x6fc], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x6b4], eax
mov edx, dword [ebp - 0x6b4]
mov dword [ebp - 0x700], edx
mov byte [ebp - 4], 0x21
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x704], esp
push 0x10150834
call fcn.1001fdb0
mov dword [ebp - 0x708], eax
mov byte [ebp - 4], 0x20
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x452], al
movzx eax, byte [ebp - 0x452]
test eax, eax
je 0x1004af56
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.10023ac0
mov eax, dword [ebp - 0x6b0]
jmp 0x1004c6bc
mov ecx, dword [ebp - 0x444]
mov edx, dword [ecx + 0x3e0]
push edx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x1004af84
push 9
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x1004af99
push 8
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x3e0]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x69c], eax
mov byte [ebp - 4], 0x22
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x70c], esp
push 0xffffffffffffffff
push str.ExitProgram
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ebp - 0x710], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x444]
push edx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x714], esp
push 0xffffffffffffffff
push 0x10150864
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x718], eax
mov byte [ebp - 4], 0x24
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x71c], esp
push 0xffffffffffffffff
push 0x1015086c
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x720], ecx
mov byte [ebp - 4], 0x25
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x724], esp
push 0xffffffffffffffff
push 0x10150874
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x6a0], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x728], edx
mov byte [ebp - 4], 0x26
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x72c], esp
push 0xffffffffffffffff
push 0x10150878
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x730], eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x69c]
call fcn.1002d380
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x48c], eax
jmp 0x1004b0c6
mov ecx, dword [ebp - 0x48c]
mov dword [ebp - 0x694], ecx
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x694]
mov dword [ebp - 0x484], edx
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0x118]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x484]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x484]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x484]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 0x690], eax
mov edx, dword [ebp - 0x690]
mov dword [ebp - 0x68c], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.10023ac0
mov eax, dword [ebp - 0x68c]
jmp 0x1004c6bc
cmp dword [ebp + 8], 3
jne 0x1004b527
lea ecx, [ebp - 0xa0]
call fcn.10019430
mov dword [ebp - 4], 0x27
mov eax, dword [ebp - 0x444]
add eax, 0x280
push eax
lea ecx, [ebp - 0x1c0]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x688], eax
mov edx, dword [ebp - 0x688]
mov dword [ebp - 0x684], edx
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x684]
call fcn.10023620
push eax
push str._sAboutSoftware
lea eax, [ebp - 0x1d8]
push eax
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x680]
push ecx
lea ecx, [ebp - 0xa0]
call fcn.10019340
lea ecx, [ebp - 0x1d8]
call fcn.10023ac0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1c0]
call fcn.10023ac0
lea ecx, [ebp - 0xa0]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x734], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x67c], eax
mov edx, dword [ebp - 0x67c]
mov dword [ebp - 0x738], edx
mov byte [ebp - 4], 0x29
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x73c], esp
push 0x101508c8
call fcn.1001fdb0
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 0x27
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x458], al
movzx eax, byte [ebp - 0x458]
test eax, eax
je 0x1004b2a0
mov dword [ebp - 0x678], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.10023ac0
mov eax, dword [ebp - 0x678]
jmp 0x1004c6bc
mov ecx, dword [ebp - 0x444]
add ecx, 0x3c8
call fcn.10023620
push eax
push str.S_MRHr_g:
lea ecx, [ebp - 0x148]
push ecx
call fcn.1003f7b0
add esp, 0xc
mov byte [ebp - 4], 0x2a
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x658], eax
mov byte [ebp - 4], 0x2b
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x744], esp
push 0xffffffffffffffff
push str.AboutSoftware
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x674], eax
mov edx, dword [ebp - 0x674]
mov dword [ebp - 0x748], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x444]
push eax
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0xffffffffffffffff
push 0x10150910
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x670]
mov dword [ebp - 0x750], ecx
mov byte [ebp - 4], 0x2d
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x754], esp
push 0xffffffffffffffff
push 0x10150914
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x668], eax
mov edx, dword [ebp - 0x668]
mov dword [ebp - 0x758], edx
mov byte [ebp - 4], 0x2e
sub esp, 0x84
mov esi, esp
mov dword [ebp - 0x75c], esp
push 0xffffffffffffffff
lea ecx, [ebp - 0x148]
call fcn.10023620
push eax
mov ecx, esi
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x760], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x444]
add ecx, 0x328
push ecx
lea edx, [ebp - 0x1a8]
push edx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x65c], eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x44c]
or ecx, 2
mov dword [ebp - 0x44c], ecx
sub esp, 0x84
mov esi, esp
mov dword [ebp - 0x764], esp
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x65c]
call fcn.10023620
push eax
mov ecx, esi
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x768], eax
mov dword [ebp - 4], 0x31
mov ecx, dword [ebp - 0x658]
call fcn.1002d380
mov dword [ebp - 0x654], eax
mov edx, dword [ebp - 0x654]
mov dword [ebp - 0x490], edx
jmp 0x1004b44d
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x650], eax
mov dword [ebp - 4], 0x32
mov ecx, dword [ebp - 0x650]
mov dword [ebp - 0x468], ecx
mov dword [ebp - 4], 0x2a
mov edx, dword [ebp - 0x44c]
and edx, 2
je 0x1004b490
and dword [ebp - 0x44c], 0xfffffffd
lea ecx, [ebp - 0x1a8]
call fcn.10023ac0
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0xa0]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x468]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x468]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::operator_struct_HWND____void_const
mov edx, dword [ebp - 0x444]
mov dword [edx + 0x458], eax
mov ecx, dword [ebp - 0x468]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x468]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x148]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.10023ac0
jmp 0x1004c6ba
cmp dword [ebp + 8], 4
jne 0x1004b85f
lea ecx, [ebp - 0x88]
call fcn.10019430
mov dword [ebp - 4], 0x33
mov eax, dword [ebp - 0x444]
add eax, 0x280
push eax
lea ecx, [ebp - 0x178]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp - 0x64c]
mov dword [ebp - 0x604], edx
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x604]
call fcn.10023620
push eax
push str._sCopyRight
lea eax, [ebp - 0x190]
push eax
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x66c], eax
mov ecx, dword [ebp - 0x66c]
push ecx
lea ecx, [ebp - 0x88]
call fcn.10019340
lea ecx, [ebp - 0x190]
call fcn.10023ac0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x178]
call fcn.10023ac0
lea ecx, [ebp - 0x88]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x76c], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x538], eax
mov edx, dword [ebp - 0x538]
mov dword [ebp - 0x770], edx
mov byte [ebp - 4], 0x35
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x774], esp
push 0x10150930
call fcn.1001fdb0
mov dword [ebp - 0x778], eax
mov byte [ebp - 4], 0x33
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x453], al
movzx eax, byte [ebp - 0x453]
test eax, eax
je 0x1004b657
mov dword [ebp - 0x53c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.10023ac0
mov eax, dword [ebp - 0x53c]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x550], eax
mov byte [ebp - 4], 0x36
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x77c], esp
push 0xffffffffffffffff
push str.CopyRight
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x540]
mov dword [ebp - 0x780], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x444]
push edx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x784], esp
push 0xffffffffffffffff
push 0x1015095c
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x788], eax
mov byte [ebp - 4], 0x38
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x78c], esp
push 0xffffffffffffffff
push 0x10150960
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x548], eax
mov ecx, dword [ebp - 0x548]
mov dword [ebp - 0x790], ecx
mov byte [ebp - 4], 0x39
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x794], esp
push 0xffffffffffffffff
push 0x10150964
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x54c], eax
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0x798], edx
mov byte [ebp - 4], 0x3a
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x79c], esp
push 0xffffffffffffffff
push 0x10150968
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x550]
call fcn.1002d380
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x494], eax
jmp 0x1004b784
mov ecx, dword [ebp - 0x494]
mov dword [ebp - 0x558], ecx
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x464], edx
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1004b7ee
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0x88]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x444]
mov edx, dword [ecx + 0x458]
push edx
mov ecx, dword [ebp - 0x464]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
jmp 0x1004b832
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0x88]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x464]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x464]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x464]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.10023ac0
jmp 0x1004c6ba
cmp dword [ebp + 8], 5
jne 0x1004bb4a
lea ecx, [ebp - 0xe8]
call fcn.10019430
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp - 0x444]
add edx, 0x280
push edx
lea eax, [ebp - 0x340]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x560], ecx
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x560]
call fcn.10023620
push eax
push str._sUpGrade
lea edx, [ebp - 0x160]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
push eax
lea ecx, [ebp - 0xe8]
call fcn.10019340
lea ecx, [ebp - 0x160]
call fcn.10023ac0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x340]
call fcn.10023ac0
lea ecx, [ebp - 0xe8]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7a4], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x568], eax
mov ecx, dword [ebp - 0x568]
mov dword [ebp - 0x7a8], ecx
mov byte [ebp - 4], 0x3d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7ac], esp
push 0x10150980
call fcn.1001fdb0
mov dword [ebp - 0x7b0], eax
mov byte [ebp - 4], 0x3b
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x454], al
movzx edx, byte [ebp - 0x454]
test edx, edx
je 0x1004b990
mov dword [ebp - 0x56c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.10023ac0
mov eax, dword [ebp - 0x56c]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x580], eax
mov byte [ebp - 4], 0x3e
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7b4], esp
push 0xffffffffffffffff
push 0x10150998
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x7b8], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x444]
push ecx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7bc], esp
push 0xffffffffffffffff
push 0x101509a8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x574], eax
mov edx, dword [ebp - 0x574]
mov dword [ebp - 0x7c0], edx
mov byte [ebp - 4], 0x40
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7c4], esp
push 0xffffffffffffffff
push 0x101509ac
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x7c8], eax
mov byte [ebp - 4], 0x41
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7cc], esp
push 0xffffffffffffffff
push 0x101509b0
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x57c], eax
mov ecx, dword [ebp - 0x57c]
mov dword [ebp - 0x884], ecx
mov byte [ebp - 4], 0x42
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7d4], esp
push 0xffffffffffffffff
push 0x101509b4
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x7d8], eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x580]
call fcn.1002d380
mov dword [ebp - 0x584], eax
mov edx, dword [ebp - 0x584]
mov dword [ebp - 0x498], edx
jmp 0x1004babd
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x588], eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x588]
mov dword [ebp - 0x478], ecx
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0xe8]
call fcn.10023620
push eax
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x3e0]
push eax
mov ecx, dword [ebp - 0x478]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x478]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x478]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.10023ac0
jmp 0x1004c6ba
cmp dword [ebp + 8], 6
jne 0x1004be65
mov dword [ebp - 0x45c], 0
movzx ecx, byte [ebp + 0x14]
test ecx, ecx
je 0x1004bcbe
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x59c], eax
mov dword [ebp - 4], 0x43
push 1
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7dc], esp
push 0xffffffffffffffff
push 0x101509b8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x58c], eax
mov edx, dword [ebp - 0x58c]
mov dword [ebp - 0x7e0], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x444]
push eax
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7e4], esp
push 0xffffffffffffffff
push 0x101509d0
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x590], eax
mov ecx, dword [ebp - 0x590]
mov dword [ebp - 0x7e8], ecx
mov byte [ebp - 4], 0x45
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7ec], esp
push 0xffffffffffffffff
push 0x101509d4
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x594], eax
mov edx, dword [ebp - 0x594]
mov dword [ebp - 0x7f0], edx
mov byte [ebp - 4], 0x46
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7f4], esp
push 0xffffffffffffffff
push 0x101509d8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x7f8], eax
mov byte [ebp - 4], 0x47
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x7fc], esp
push 0xffffffffffffffff
push 0x101509dc
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x800], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x59c]
call fcn.1002d380
mov dword [ebp - 0x5a0], eax
mov ecx, dword [ebp - 0x5a0]
mov dword [ebp - 0x49c], ecx
jmp 0x1004bc9a
mov edx, dword [ebp - 0x49c]
mov dword [ebp - 0x5a4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x45c], eax
jmp 0x1004be0d
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 4], 0x48
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x804], esp
push 0xffffffffffffffff
push str.NewVersion
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
mov dword [ebp - 0x808], ecx
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x444]
push edx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x80c], esp
push 0xffffffffffffffff
push 0x101509f8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x810], eax
mov byte [ebp - 4], 0x4a
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x814], esp
push 0xffffffffffffffff
push 0x101509fc
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp - 0x818], ecx
mov byte [ebp - 4], 0x4b
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0xffffffffffffffff
push 0x10150a00
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5b4], eax
mov edx, dword [ebp - 0x5b4]
mov dword [ebp - 0x820], edx
mov byte [ebp - 4], 0x4c
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x824], esp
push 0xffffffffffffffff
push 0x10150a04
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x828], eax
mov byte [ebp - 4], 0x48
mov ecx, dword [ebp - 0x5b8]
call fcn.1002d380
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x4a0], eax
jmp 0x1004bdee
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x5c0]
mov dword [ebp - 0x45c], edx
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
push str.UpGrade
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x45c]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x45c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x45c]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
jmp 0x1004c6ba
cmp dword [ebp + 8], 8
jne 0x1004c16c
lea ecx, [ebp - 0xd0]
call fcn.10019430
mov dword [ebp - 4], 0x4d
mov edx, dword [ebp - 0x444]
add edx, 0x280
push edx
lea eax, [ebp - 0x208]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x5c4], eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp - 0x5c8], ecx
mov byte [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x5c8]
call fcn.10023620
push eax
push str._smessage
lea edx, [ebp - 0x328]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5cc]
push eax
lea ecx, [ebp - 0xd0]
call fcn.10019340
lea ecx, [ebp - 0x328]
call fcn.10023ac0
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x208]
call fcn.10023ac0
lea ecx, [ebp - 0xd0]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x82c], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x5d0], eax
mov ecx, dword [ebp - 0x5d0]
mov dword [ebp - 0x830], ecx
mov byte [ebp - 4], 0x4f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x834], esp
push 0x10150a2c
call fcn.1001fdb0
mov dword [ebp - 0x838], eax
mov byte [ebp - 4], 0x4d
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x455], al
movzx edx, byte [ebp - 0x455]
test edx, edx
je 0x1004bf96
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.10023ac0
mov eax, dword [ebp - 0x5d4]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x5e8], eax
mov byte [ebp - 4], 0x50
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x83c], esp
push 0xffffffffffffffff
push str.MessageWnd
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x840], eax
mov byte [ebp - 4], 0x51
mov ecx, dword [ebp - 0x444]
push ecx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x844], esp
push 0xffffffffffffffff
push 0x10150a5c
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5dc], eax
mov edx, dword [ebp - 0x5dc]
mov dword [ebp - 0x848], edx
mov byte [ebp - 4], 0x52
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x84c], esp
push 0xffffffffffffffff
push 0x10150a60
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 0x53
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x854], esp
push 0xffffffffffffffff
push 0x10150a64
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x5e4], eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp - 0x858], ecx
mov byte [ebp - 4], 0x54
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x85c], esp
push 0xffffffffffffffff
mov edx, dword [ebp + 0x10]
push edx
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x860], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x5e8]
call fcn.1002d380
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x4a4], eax
jmp 0x1004c0c2
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp - 0x5f0], ecx
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x5f0]
mov dword [ebp - 0x470], edx
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
lea ecx, [ebp - 0xd0]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x470]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov ecx, dword [ebp - 0x470]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x470]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 0x5f4], eax
mov edx, dword [ebp - 0x5f4]
mov dword [ebp - 0x5f8], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.10023ac0
mov eax, dword [ebp - 0x5f8]
jmp 0x1004c6bc
cmp dword [ebp + 8], 7
jne 0x1004c6ba
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x864], esp
push 0x10150a68
call fcn.10022500
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x868], eax
mov dword [ebp - 4], 0x55
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x10150a6c
call fcn.10022500
mov dword [ebp - 0x870], eax
lea ecx, [ebp - 0x70]
push ecx
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x444]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0x874], eax
mov dword [ebp - 4], 0x56
push 0x10150a74
lea ecx, [ebp - 0x70]
call fcn.1001ed10
test eax, eax
je 0x1004c204
mov edx, dword [ebp - 0x444]
movzx eax, byte [edx + 0x3f5]
test eax, eax
je 0x1004c228
mov dword [ebp - 0x600], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100238b0
mov eax, dword [ebp - 0x600]
jmp 0x1004c6bc
mov byte [ebp - 0x445], 0
mov ecx, dword [ebp - 0x444]
add ecx, 0x130
push ecx
mov edx, dword [ebp - 0x444]
mov eax, dword [edx + 0x9c]
push eax
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0x460], eax
mov esi, dword [ebp - 0x460]
add esi, 1
mov ecx, dword [ebp - 0x444]
add ecx, 0x130
call fcn.1001f7a0
cmp esi, eax
jb 0x1004c301
mov ecx, dword [ebp - 0x444]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp eax, dword [ebp - 0x460]
jb 0x1004c301
cmp dword [ebp - 0x460], 0
jl 0x1004c301
mov ecx, dword [ebp - 0x460]
push ecx
mov ecx, dword [ebp - 0x444]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0x20], 1
jne 0x1004c301
mov edx, dword [ebp - 0x460]
push edx
mov ecx, dword [ebp - 0x444]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x1004c301
mov dword [ebp - 0x6d4], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100238b0
mov eax, dword [ebp - 0x6d4]
jmp 0x1004c6bc
mov eax, dword [ebp - 0x444]
add eax, 0x130
mov dword [ebp - 0x4a8], eax
lea ecx, [ebp - 0x474]
push ecx
mov ecx, dword [ebp - 0x4a8]
call fcn.10018e90
lea edx, [ebp - 0x608]
push edx
mov ecx, dword [ebp - 0x4a8]
call fcn.10018e30
jmp 0x1004c343
lea ecx, [ebp - 0x474]
call fcn.10018dd0
lea eax, [ebp - 0x608]
push eax
lea ecx, [ebp - 0x474]
call fcn.10018d60
movzx ecx, al
test ecx, ecx
je 0x1004c3a6
lea ecx, [ebp - 0x474]
call fcn.10018df0
push eax
lea ecx, [ebp - 0x440]
call fcn.10023320
cmp dword [ebp - 0x420], 1
jne 0x1004c399
cmp dword [ebp - 0x3a0], 1
jne 0x1004c399
mov byte [ebp - 0x445], 1
lea ecx, [ebp - 0x440]
call fcn.10023b10
jmp 0x1004c3a6
lea ecx, [ebp - 0x440]
call fcn.10023b10
jmp 0x1004c338
movzx edx, byte [ebp - 0x445]
test edx, edx
jne 0x1004c3d5
mov dword [ebp - 0x60c], 2
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100238b0
mov eax, dword [ebp - 0x60c]
jmp 0x1004c6bc
mov eax, dword [ebp - 0x444]
add eax, 0x2c8
push eax
lea ecx, [ebp - 0x310]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x610], eax
mov edx, dword [ebp - 0x610]
mov dword [ebp - 0x614], edx
mov byte [ebp - 4], 0x57
mov ecx, dword [ebp - 0x614]
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x878], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x87c], eax
mov byte [ebp - 4], 0x58
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x880], esp
push 0x10150a78
call fcn.1001fdb0
mov dword [ebp - 0x938], eax
mov byte [ebp - 4], 0x57
call fcn.10040770
add esp, 0x30
mov byte [ebp - 0x456], al
mov cl, byte [ebp - 0x456]
mov byte [ebp - 0x457], cl
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x310]
call fcn.10023ac0
movzx edx, byte [ebp - 0x457]
test edx, edx
je 0x1004c4af
mov dword [ebp - 0x61c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100238b0
mov eax, dword [ebp - 0x61c]
jmp 0x1004c6bc
push 0xa10
call fcn.100e30b9
add esp, 4
mov dword [ebp - 0x630], eax
mov byte [ebp - 4], 0x59
push 0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x888], esp
push 0xffffffffffffffff
push str.UnInstall
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x88c], eax
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x444]
push ecx
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x890], esp
push 0xffffffffffffffff
push 0x10150aa4
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x624], eax
mov edx, dword [ebp - 0x624]
mov dword [ebp - 0x894], edx
mov byte [ebp - 4], 0x5b
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x898], esp
push 0xffffffffffffffff
push 0x10150aa8
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x89c], eax
mov byte [ebp - 4], 0x5c
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8a0], esp
push 0xffffffffffffffff
push 0x10150aac
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x62c]
mov dword [ebp - 0x8a4], ecx
mov byte [ebp - 4], 0x5d
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x8a8], esp
push 0xffffffffffffffff
mov edx, dword [ebp + 0x10]
push edx
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x8ac], eax
mov byte [ebp - 4], 0x59
mov ecx, dword [ebp - 0x630]
call fcn.1002d380
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x4ac], eax
jmp 0x1004c5db
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0x638], ecx
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x638]
mov dword [ebp - 0x46c], edx
mov eax, dword [ebp - 0x444]
add eax, 0x2c8
push eax
lea ecx, [ebp - 0x2e0]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x63c], eax
mov edx, dword [ebp - 0x63c]
mov dword [ebp - 0x640], edx
mov byte [ebp - 4], 0x5e
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0x80
push 0x90000000
mov ecx, dword [ebp - 0x640]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x3e0]
push ecx
mov ecx, dword [ebp - 0x46c]
call sym.UserAndPayClient.dll_public:_struct_HWND______thiscall_xx_DuiLib::CWindowWnd::Create_struct_HWND_____wchar_t_const___unsigned_long_int__unsigned_long_int__int__int__int__int__struct_HMENU____
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x2e0]
call fcn.10023ac0
mov ecx, dword [ebp - 0x46c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CWindowWnd::CenterWindow_void_
mov ecx, dword [ebp - 0x46c]
call sym.UserAndPayClient.dll_public:_unsigned_int___thiscall_xx_DuiLib::CWindowWnd::ShowModal_void_
mov dword [ebp - 0x644], eax
mov edx, dword [ebp - 0x644]
mov dword [ebp - 0x648], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100238b0
mov eax, dword [ebp - 0x648]
jmp 0x1004c6bc
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e3069
mov esp, ebp
pop ebp
ret 0x10