Function at 0x100411b0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101225f9
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x1019842c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x158], 0
mov ecx, dword [ebp + 8]
call fcn.100237b0
push eax
mov ecx, dword [ebp - 0x14c]
add ecx, 0x440
call fcn.100197a0
mov eax, dword [ebp - 0x14c]
mov dword [0x1019df58], eax
push str.http:__fufei.ahhxwavi.cn
mov ecx, dword [ebp - 0x14c]
add ecx, 0x298
call fcn.100197a0
mov ecx, dword [ebp + 8]
call fcn.100237b0
push eax
mov ecx, dword [ebp - 0x14c]
add ecx, 0x280
call fcn.100197a0
push 0x1014ffe0
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x100412fb
push 0x1014ffe4
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x1014fff4
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.logo40.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x1015000c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.pdfCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150024
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.pdfCUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.tpcl
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100413b6
push 0x1015004c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x1015005c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x10150068
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x10150074
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.tpclwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150088
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.tpclCUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.xtcl
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x10041471
push 0x101500b0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x101500c0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x101500cc
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x101500d8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.xtclpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101500f0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.xtclUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.videoconverter
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x1004152c
push 0x10150120
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x10150130
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x1015013c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.FYVideo80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push 0x10150158
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150168
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push 0x10150178
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.cadreader
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100415e7
push 0x10150198
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x101501a8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x101501b4
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x101501c0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.videoCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101501e0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.videoCUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.shipinyasuo
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x100416a2
push 0x10150210
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x10150220
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.ComPress.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.ComPress80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.videoPpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x1015025c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.videoPUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.pdfeditor
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x1004175d
push 0x1015028c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x1015029c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.PDFEdit.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.PDFEdit80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.pdfEpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101502d0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.pdfEUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.cadconverter
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10041818
push 0x10150300
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x10150310
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.CADConvert.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.CADConvert80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.cadCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x1015034c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.cadCUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.sygj
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x100418d3
push 0x10150374
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.65_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.WaterMark.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.WaterMark80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.sygjpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101503b8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.sygjUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.audioconvert
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x1004198e
push 0x101503e8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x101503f8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x10150404
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.Music80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.musicpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150428
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.MusicUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.audioconverter
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10041a49
push 0x1015045c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.50_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.Audio.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.Audio80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.audiopaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150498
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.AudioUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.imageconverter
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x10041b04
push 0x101504c8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.20_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x101504e8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.PicConvert80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.imagePaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150518
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.imageUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.fyocr
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x10041bbf
push 0x10150544
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.62_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.Ocr.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.Ocr80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.OCRPaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150578
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.OCRUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.fylyds
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10041c7a
push 0x10150598
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x101505a8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.Record.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.Record80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push 0x101505d0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101505e0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.RECORDPaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x10150600
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x10041d35
push 0x10150608
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x10150618
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.Screen.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.Screen80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.ScreenPaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150650
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.ScreenUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x10150674
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x10041df0
push 0x1015067c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.38_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.FYCpan.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.FYCpan80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.CpanCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101506c0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.CpanUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x101506e0
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10041eab
push 0x101506e8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.92_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.DK40.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.DK80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.dkpcCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150724
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.dkpcUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.fykoutu
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x10041f66
push 0x10150748
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.94_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x10150760
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x1015076c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.fykoutuCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150788
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.fykoutuUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.wdfy
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x10042021
push 0x101507b0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x101507c0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x101507cc
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x101507d8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.fywdfyCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101507f4
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.fywdfyUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x10150818
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100420dc
push 0x10150820
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push 0x10150830
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x1015083c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x10150848
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.fyhfdsCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150864
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.fyhfdsUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.spjjw
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x10042197
push 0x10150890
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.49_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.fyspjjw40.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.fyspjjw80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.spjjwCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101508dc
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.spjjwUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x101508fc
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001a5b0
add esp, 8
movzx edx, al
test edx, edx
je 0x10042252
push 0x10150904
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.64_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push 0x10150920
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push 0x1015092c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.fywjjmCpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150948
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.fywjjmUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push 0x1015096c
mov eax, dword [ebp + 8]
push eax
call fcn.1001a5b0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x1004230d
push 0x10150974
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.35_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.dsrw40.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.dsrw80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.dsrwpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x101509b8
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.dsrwUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
jmp 0x100423c3
push str.gifzz
mov edx, dword [ebp + 8]
push edx
call fcn.1001a5b0
add esp, 8
movzx eax, al
test eax, eax
je 0x100423c3
push 0x101509e4
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2b0
call fcn.100197a0
push str.40_0_0_0
mov ecx, dword [ebp - 0x14c]
add ecx, 0x340
call fcn.100197a0
push str.GifMake40.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2e0
call fcn.100197a0
push str.GifMake80.png
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2f8
call fcn.100197a0
push str.gifpaywnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x358
call fcn.100197a0
push 0x10150a2c
mov ecx, dword [ebp - 0x14c]
add ecx, 0x328
call fcn.100197a0
push str.gifUnstallwnd
mov ecx, dword [ebp - 0x14c]
add ecx, 0x2c8
call fcn.100197a0
push 0x10150a4c
push 0x10150a58
push 0x10150a5c
push 0x10150a64
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
test eax, eax
je 0x100423ea
mov byte [ebp - 0x14e], 1
jmp 0x100423f1
mov byte [ebp - 0x14e], 0
mov cl, byte [ebp - 0x14e]
mov byte [ebp - 0x14d], cl
push 0x10150a6c
call fcn.10054c60
add esp, 4
test eax, eax
je 0x10042434
movzx edx, byte [ebp - 0x14d]
test edx, edx
je 0x10042434
push str..main.ini
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100197a0
jmp 0x100427ba
lea eax, [ebp - 0x70]
push eax
call fcn.1003f9f0
add esp, 4
mov dword [ebp - 0x1ac], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x1a8]
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.1003efe0
add esp, 8
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1a4]
push ecx
mov ecx, dword [ebp - 0x14c]
add ecx, 0x410
call fcn.100197c0
lea ecx, [ebp - 0xa0]
call fcn.10023b10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.10023d20
mov ecx, dword [ebp - 0x14c]
add ecx, 0x410
call fcn.100237b0
push eax
push 0x10150a90
lea edx, [ebp - 0x148]
push edx
call fcn.1003fd50
add esp, 0xc
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100197c0
lea ecx, [ebp - 0x148]
call fcn.10023b10
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100237b0
push eax
push 0x10150a9c
push 0x10150aa0
push 0x10150aa8
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
test eax, eax
je 0x1004252a
mov byte [ebp - 0x14f], 1
jmp 0x10042531
mov byte [ebp - 0x14f], 0
mov cl, byte [ebp - 0x14f]
mov byte [ebp - 0x14d], cl
mov edx, dword [ebp - 0x14c]
add edx, 0x428
push edx
lea eax, [ebp - 0x130]
push eax
call fcn.1003ee30
add esp, 8
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x194], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x158]
or edx, 1
mov dword [ebp - 0x158], edx
mov ecx, dword [ebp - 0x194]
call fcn.10023880
push eax
call fcn.10054c60
add esp, 4
test eax, eax
je 0x100425b0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x100425b0
mov dword [ebp - 0x15c], 0
jmp 0x100425ba
mov dword [ebp - 0x15c], 1
mov cl, byte [ebp - 0x15c]
mov byte [ebp - 0x151], cl
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x158]
and edx, 1
je 0x100425ea
and dword [ebp - 0x158], 0xfffffffe
lea ecx, [ebp - 0x130]
call fcn.10023d20
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x100427ba
lea ecx, [ebp - 0x118]
push ecx
call fcn.1003f9f0
add esp, 4
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x18c], edx
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x88]
push ecx
call fcn.1003f400
add esp, 8
mov dword [ebp - 0x188], eax
mov edx, dword [ebp - 0x188]
push edx
mov ecx, dword [ebp - 0x14c]
add ecx, 0x410
call fcn.100197c0
lea ecx, [ebp - 0x88]
call fcn.10023b10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.10023d20
mov ecx, dword [ebp - 0x14c]
add ecx, 0x410
call fcn.100237b0
push eax
push 0x10150ab0
lea eax, [ebp - 0x100]
push eax
call fcn.1003fd50
add esp, 0xc
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
push ecx
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100197c0
lea ecx, [ebp - 0x100]
call fcn.10023b10
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100237b0
push eax
push 0x10150abc
push 0x10150ac0
push str.test
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
test eax, eax
je 0x100426f5
mov byte [ebp - 0x150], 1
jmp 0x100426fc
mov byte [ebp - 0x150], 0
mov dl, byte [ebp - 0x150]
mov byte [ebp - 0x14d], dl
movzx eax, byte [ebp - 0x14d]
test eax, eax
jne 0x100427ba
lea ecx, [ebp - 0x58]
push ecx
call fcn.1003fe20
add esp, 4
mov dword [ebp - 4], 3
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.1003efe0
add esp, 8
mov dword [ebp - 0x180], eax
mov ecx, dword [ebp - 0x180]
mov dword [ebp - 0x17c], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x17c]
call fcn.100237b0
push eax
push str._smain.ini
lea edx, [ebp - 0xe8]
push edx
call fcn.1003fd50
add esp, 0xc
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
push eax
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100197c0
lea ecx, [ebp - 0xe8]
call fcn.10023b10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd0]
call fcn.10023b10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.10023d20
mov ecx, dword [ebp - 0x14c]
add ecx, 0x428
call fcn.100237b0
push eax
push 0x10150adc
call fcn.10020c60
add esp, 8
call fcn.10040980
mov ecx, dword [ebp - 0x14c]
call sym.UserAndPayClient.dll_public:_char____thiscall_Talk2Svr::CTalk2Svr::GetMacCode_void_
mov ecx, dword [ebp - 0x14c]
call sym.UserAndPayClient.dll_public:_char____thiscall_Talk2Svr::CTalk2Svr::GetPos_void_
mov ecx, dword [0x1019dee4]
push ecx
call sym.UserAndPayClient.dll_public:_static_void___cdecl_xx_DuiLib::CPaintManagerUI::SetInstance_struct_HINSTANCE____
add esp, 4
push 0x10150ae0
push 0x6c
mov edx, dword [0x1019dee4]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
push eax
mov ecx, dword [0x1019dee4]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x168], eax
mov edx, dword [ebp - 0x160]
push edx
mov eax, dword [0x1019dee4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x16c], eax
push 0
mov ecx, dword [ebp - 0x168]
push ecx
mov edx, dword [ebp - 0x16c]
push edx
call sym.UserAndPayClient.dll_public:_static_void___cdecl_xx_DuiLib::CPaintManagerUI::SetResourceZip_void___unsigned_int__wchar_t_const__
add esp, 0xc
push 0x100655e0
sub esp, 0x84
mov ecx, esp
mov dword [ebp - 0x1b0], esp
push 0xffffffffffffffff
push 0x10150aec
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 4], 5
call sym.UserAndPayClient.dll_public:_static_class_xx_DuiLib::CControlFactory____cdecl_xx_DuiLib::CControlFactory::GetInstance_void_
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlFactory::RegistControl_class_xx_DuiLib::CDuiString__class_xx_DuiLib::CControlUI_____cdecl___void__
call fcn.100665b0
push str.._netrequest.dll
push 0
mov ecx, 0x1019e218
call fcn.10033530
mov byte [ebp - 0x152], al
movzx ecx, byte [ebp - 0x152]
test ecx, ecx
jne 0x10042912
push 1
push str.netrequest.dll
push str.load_dll_error
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx + 0x3e0]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx + 0x3e0]
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
push str.http_init
lea ecx, [ebp - 0x40]
call fcn.10022760
mov dword [ebp - 4], 6
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x1019e218
call fcn.1003b490
mov dword [ebp - 0x164], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10023b10
push str.http_init_log
lea ecx, [ebp - 0x28]
call fcn.10022760
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x1019e218
call fcn.1003b490
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.10023b10
cmp dword [ebp - 0x164], 0
je 0x1004298f
call dword [ebp - 0x164]
push str..log
lea ecx, [ebp - 0xb8]
call fcn.10022760
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x1bc]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::STRINGorID::constructor_wchar_t_const__
push eax
lea ecx, [ebp - 0x1c4]
call fcn.100551f0
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x178]
call fcn.1001fe20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c4]
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb8]
call fcn.10023b10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e3849
mov esp, ebp
pop ebp
ret 4