Function at 0x100601a0
Capabilities:
Copy file
Delete file
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10124347
mov eax, dword fs:[0]
push eax
sub esp, 0xaa4
mov eax, dword [0x1019742c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x94c], ecx
mov dword [ebp - 0x954], 0
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CDPI____thiscall_xx_DuiLib::CPaintManagerUI::GetDPIObj_void_
call sym.UserAndPayClient.dll_public:_static_int___cdecl_xx_DuiLib::CDPI::GetMainMonitorDPI_void_
mov dword [ebp - 0x9bc], eax
mov eax, dword [ebp - 0x9bc]
push eax
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CPaintManagerUI::SetDPI_int_
push 1
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x94c]
add ecx, 0x598
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_void___thiscall_Talk2Svr::CTalk2Svr::GetVipMsg_struct_tag_Pay_plan_Info___int__bool_
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x598], 1
jge 0x1006025d
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x94c]
add ecx, 0x598
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_void___thiscall_Talk2Svr::CTalk2Svr::GetVipMsg_struct_tag_Pay_plan_Info___int__bool_
push str.menu_phone
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x69c], eax
push str.Picture
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x6a0], eax
push str.UserID
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x6a4], eax
push str.menu_enddate
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x6c0], eax
push str.buyvipType
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x6c4], eax
push 0x10154038
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x74c], eax
push 0x1015404c
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x750], eax
push str.wxInfo
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x754], eax
push str.QQInfo
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x758], eax
push str.QQPicture
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x75c], eax
push str.phoneSevice
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x760], eax
push str.IDname
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x764], eax
push str.VIPID
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x768], eax
push str.SeviceTime
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x76c], eax
push str.fengexian
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x770], eax
push str.fengexian2
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x774], eax
push str.vipPic
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x778], eax
push str.LoginPicType
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x77c], eax
push 0x10154144
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x780], eax
push 0x10154164
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x784], eax
push 0x10154184
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x788], eax
push 0x10154198
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x78c], eax
push 0x101541b8
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x790], eax
push 0x101541c4
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x794], eax
push 0x101541cc
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x798], eax
push 0x101541e8
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x79c], eax
push str.left1
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7a0], eax
push str.left2
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7a4], eax
push str.left3
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7a8], eax
push str.left4
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7ac], eax
push str.lefttext1
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7b0], eax
push str.lefttext2
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7b4], eax
push str.lefttext3
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7b8], eax
push str.lefttext4
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7bc], eax
push 0x10154274
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7c0], eax
push 0x1015428c
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7c4], eax
push str.vipid
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [ebp - 0x94c]
mov dword [ecx + 0x7c8], eax
push 0x101542a8
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov edx, dword [ebp - 0x94c]
mov dword [edx + 0x7cc], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa7c], esp
push str.Show
call fcn.10022500
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0xa84], eax
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa88], esp
push str.wxdkjt
call fcn.10022500
mov dword [ebp - 0xa8c], eax
lea ecx, [ebp - 0x410]
push ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xa78], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x410]
call fcn.100192c0
movzx eax, al
test eax, eax
jne 0x10060799
push 0x101542c4
lea ecx, [ebp - 0x410]
push ecx
call fcn.1001a350
add esp, 8
movzx edx, al
test edx, edx
je 0x10060801
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x7c0], 0
je 0x100607cc
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7c0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c0]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x7c4], 0
je 0x100607ff
push 1
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7c4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c4]
mov eax, dword [edx + 0x104]
call eax
jmp 0x10060867
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x7c0], 0
je 0x10060834
push 1
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7c0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c0]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x7c4], 0
je 0x10060867
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7c4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7c4]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x79c], 0
je 0x1006099b
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa80], esp
push str.Info
call fcn.10022500
mov dword [ebp - 0x9b4], eax
mov edx, dword [ebp - 0x9b4]
mov dword [ebp - 0xa94], edx
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa98], esp
push str.gjkjzq
call fcn.10022500
mov dword [ebp - 0xa9c], eax
lea eax, [ebp - 0x5e4]
push eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xa24], eax
mov edx, dword [ebp - 0xa24]
mov dword [ebp - 0x9b0], edx
mov eax, dword [ebp - 0x9b0]
push eax
lea ecx, [ebp - 0x410]
call fcn.10019560
lea ecx, [ebp - 0x5e4]
call fcn.100238b0
push 0x101542d8
lea ecx, [ebp - 0x410]
push ecx
call fcn.1001a350
add esp, 8
movzx edx, al
test edx, edx
je 0x1006099b
push 0x101542e0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x18c]
call edx
push str.fileop1.png_dest12_17_27_32
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x194]
call edx
push str.fileop2.png_dest12_17_27_32
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x79c]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x79c]
mov edx, dword [eax + 0x19c]
call edx
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x7d0], 3
jne 0x100609dd
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x74c], 0
je 0x100609dd
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x74c]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x74c]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x7d0], 1
je 0x100609fb
mov edx, dword [ebp - 0x94c]
cmp dword [edx + 0x7d0], 2
jne 0x10060a36
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x74c], 0
je 0x10060a36
push 0xff07c362
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x74c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CButtonUI::SetHotTextColor_unsigned_long_int_
push 0xff07c362
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x74c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CButtonUI::SetPushedTextColor_unsigned_long_int_
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x69c], 0
je 0x1006378c
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x6a0], 0
je 0x1006378c
mov edx, dword [ebp - 0x94c]
cmp dword [edx + 0x6a4], 0
je 0x1006378c
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x6c4], 0
je 0x1006378c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
add edx, 0x280
push edx
lea eax, [ebp - 0x5b4]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa68]
mov dword [ebp - 0xa64], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xa64]
call fcn.10023620
push eax
lea ecx, [ebp - 0x458]
call fcn.1001fdb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5b4]
call fcn.10023ac0
mov dword [ebp - 0xaa0], 0
lea edx, [ebp - 0x59c]
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_Talk2Svr::CTalk2Svr::GetCurrentPathW_void_
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp - 0xa58], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xa58]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x59c]
call fcn.10023ac0
push 0
push 0x101542dc
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.1002b230
cmp eax, 0xffffffff
je 0x10060bc5
xor edx, edx
mov word [ebp - 0x218], dx
push 0x206
push 0
lea eax, [ebp - 0x216]
push eax
call fcn.100e0740
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push str.SYSTEMROOT
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
lea edx, [ebp - 0x218]
push edx
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
push str.Temp
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.100192f0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x34]
push edx
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
push str._sAvatar___d__.png
lea eax, [ebp - 0x470]
push eax
call fcn.1003f7b0
add esp, 0x10
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
push str._sAvatar___d_.png
lea ecx, [ebp - 0x584]
push ecx
call fcn.1003f7b0
add esp, 0x10
mov dword [ebp - 0xa54], eax
mov edx, dword [ebp - 0xa54]
push edx
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019340
lea ecx, [ebp - 0x584]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
call fcn.100545f0
add esp, 4
test eax, eax
jne 0x10060d04
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x120], 1
je 0x10060d04
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xaa4], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0xa50], eax
mov edx, dword [ebp - 0xa50]
mov dword [ebp - 0xaa8], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x50
call fcn.10023620
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xaac], esp
push eax
call fcn.1001fdb0
mov dword [ebp - 0xab0], eax
mov byte [ebp - 4], 7
call fcn.10054730
add esp, 0x30
lea ecx, [ebp - 0x470]
call fcn.10023620
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
lea ecx, [ebp - 0x470]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
push str.file_s_dest0_4_38_42
lea ecx, [ebp - 0x56c]
push ecx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0xa4c], eax
mov edx, dword [ebp - 0xa4c]
push edx
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019340
lea ecx, [ebp - 0x56c]
call fcn.10023ac0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x38
push ecx
lea ecx, [ebp - 0x440]
call fcn.10023290
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x428]
call fcn.10019430
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x120], 1
jne 0x10060df6
push 0x1015445c
lea ecx, [ebp - 0x428]
call fcn.10019320
push str.shouji.png
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
jmp 0x10060e6e
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x120], 2
jne 0x10060e33
push 0x1015447c
lea ecx, [ebp - 0x428]
call fcn.10019320
push str.qq.png
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
jmp 0x10060e6e
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x120], 3
jne 0x10060e6e
push 0x10154494
lea ecx, [ebp - 0x428]
call fcn.10019320
push str.weixin.png
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x77c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push str.filevvip_fore.png_dest0_4_38_42
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x6a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetForeImage_wchar_t_const__
lea ecx, [ebp - 0x440]
call fcn.10023620
push eax
lea ecx, [ebp - 0x428]
call fcn.10023620
push eax
push 0x101544b4
lea eax, [ebp - 0x554]
push eax
call fcn.1003f7b0
add esp, 0x10
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
push ecx
lea ecx, [ebp - 0x440]
call fcn.10019340
lea ecx, [ebp - 0x554]
call fcn.10023ac0
lea ecx, [ebp - 0x440]
call fcn.10023620
push eax
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x69c]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x69c]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x50
call fcn.100192c0
movzx edx, al
test edx, edx
je 0x100611ad
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x120], 1
jne 0x100611ad
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x38
call fcn.10023620
push eax
lea ecx, [ebp - 0x3e0]
call fcn.1001fdb0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3e0]
call fcn.100192c0
movzx eax, al
test eax, eax
jne 0x1006119c
push 4
lea ecx, [ebp - 0x3e0]
push ecx
lea edx, [ebp - 0x71c]
push edx
call fcn.1001caf0
add esp, 0xc
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa44]
mov dword [ebp - 0xa3c], eax
mov byte [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0x3e0]
push ecx
lea edx, [ebp - 0x734]
push edx
call fcn.1003fe40
add esp, 0xc
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xa38], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xa3c]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0xa38]
call fcn.10023620
push eax
push 0x1015450c
lea ecx, [ebp - 0x7ac]
push ecx
call fcn.1003f7b0
add esp, 0x10
mov dword [ebp - 0xa34], eax
mov edx, dword [ebp - 0xa34]
push edx
lea ecx, [ebp - 0x3e0]
call fcn.10019340
lea ecx, [ebp - 0x7ac]
call fcn.10023ac0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x734]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x71c]
call fcn.10023ac0
push 0x10154524
lea ecx, [ebp - 0x458]
call fcn.1002b1f0
test eax, eax
jne 0x1006112c
push 4
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x38
push ecx
lea edx, [ebp - 0x5cc]
push edx
call fcn.1001caf0
add esp, 0xc
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0xa28], eax
mov byte [ebp - 4], 0xe
push 3
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
add edx, 0x38
push edx
lea eax, [ebp - 0x7c4]
push eax
call fcn.1003fe40
add esp, 0xc
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
mov dword [ebp - 0x9c0], ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0xa28]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x9c0]
call fcn.10023620
push eax
push str.Kb:g
lea edx, [ebp - 0x704]
push edx
call fcn.1003f7b0
add esp, 0x10
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.10019340
lea ecx, [ebp - 0x704]
call fcn.10023ac0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x7c4]
call fcn.10023ac0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5cc]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x3f5]
test eax, eax
je 0x1006115b
push 0x10154558
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
jmp 0x10061171
push 0x101545b0
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
lea ecx, [ebp - 0x3e0]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x69c]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x69c]
mov eax, dword [edx + 0x2c]
call eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3e0]
call fcn.10023ac0
jmp 0x10061222
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x50
call fcn.100192c0
movzx edx, al
test edx, edx
je 0x10061222
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x120], 1
je 0x10061222
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x3f5]
test ecx, ecx
je 0x1006120c
push str.filemorentouxiang32.png_dest0_4_38_42
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
jmp 0x10061222
push str.filemorentouxiang.png_dest0_4_38_42
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10019320
push 0xffffffffffffffff
push str.696969
lea ecx, [ebp - 0x948]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x488]
call fcn.10019430
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x258]
call fcn.10019430
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x230]
call fcn.10019430
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
mov ecx, dword [eax + 0x34]
push ecx
push 0x101546cc
lea edx, [ebp - 0x6ec]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x488]
call fcn.10019340
lea ecx, [ebp - 0x6ec]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x104
call fcn.10023620
push eax
push 0x101546dc
lea edx, [ebp - 0x6d4]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0xa18]
push eax
lea ecx, [ebp - 0x230]
call fcn.10019340
lea ecx, [ebp - 0x6d4]
call fcn.10023ac0
lea ecx, [ebp - 0x230]
call fcn.100192c0
movzx ecx, al
test ecx, ecx
je 0x1006132a
mov ecx, dword [ebp - 0x94c]
add ecx, 0x5cc
call fcn.10023620
push eax
lea ecx, [ebp - 0x230]
call fcn.10019320
lea ecx, [ebp - 0x230]
call fcn.100192c0
movzx edx, al
test edx, edx
je 0x10061419
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa90], esp
push str.name
call fcn.10022500
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xa6c], eax
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xa70], esp
push str.viptype
call fcn.10022500
mov dword [ebp - 0xa74], eax
lea ecx, [ebp - 0x6a4]
push ecx
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_Talk2Svr::CTalk2Svr::GetValueByIni_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0xa0c], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0xa0c]
push ecx
lea edx, [ebp - 0x6bc]
push edx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0xa04], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xa04]
call fcn.10023620
push eax
lea ecx, [ebp - 0x230]
call fcn.10019320
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x6bc]
call fcn.10023ac0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x6a4]
call fcn.100238b0
lea ecx, [ebp - 0x230]
call fcn.100192c0
movzx ecx, al
test ecx, ecx
je 0x1006146e
push 0x1015454c
lea ecx, [ebp - 0x674]
call fcn.1001fdb0
mov dword [ebp - 0xa00], eax
mov edx, dword [ebp - 0xa00]
mov dword [ebp - 0x9fc], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x954]
or eax, 1
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x9fc]
mov dword [ebp - 0x99c], ecx
jmp 0x100614a1
lea edx, [ebp - 0x230]
push edx
lea ecx, [ebp - 0x68c]
call fcn.10023290
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x954]
or eax, 2
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp - 0x99c], ecx
mov edx, dword [ebp - 0x99c]
mov dword [ebp - 0xa60], edx
mov eax, dword [ebp - 0xa60]
push eax
lea ecx, [ebp - 0x230]
call fcn.10019340
mov ecx, dword [ebp - 0x954]
and ecx, 2
je 0x100614dc
and dword [ebp - 0x954], 0xfffffffd
lea ecx, [ebp - 0x68c]
call fcn.10023ac0
mov dword [ebp - 4], 0x13
mov edx, dword [ebp - 0x954]
and edx, 1
je 0x10061500
and dword [ebp - 0x954], 0xfffffffe
lea ecx, [ebp - 0x674]
call fcn.10023ac0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x9c], 0
jge 0x100616a2
lea ecx, [ebp - 0x230]
call fcn.100192c0
movzx edx, al
test edx, edx
jne 0x1006156e
lea ecx, [ebp - 0x230]
call fcn.10023620
push eax
push 0x101546f4
lea eax, [ebp - 0x65c]
push eax
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x9f4], eax
mov ecx, dword [ebp - 0x9f4]
push ecx
lea ecx, [ebp - 0x230]
call fcn.10019340
lea ecx, [ebp - 0x65c]
call fcn.10023ac0
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0xb8
call fcn.10023620
push eax
lea ecx, [ebp - 0x258]
call fcn.10019320
push 0x10154704
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov dword [ebp - 0x990], eax
push 0xa
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x644]
push ecx
call fcn.1003fe40
add esp, 0xc
mov dword [ebp - 0x9f0], eax
mov edx, dword [ebp - 0x9f0]
mov dword [ebp - 0x9ec], edx
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x9ec]
call fcn.10023620
push eax
lea ecx, [ebp - 0x4b8]
call fcn.1001fdb0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x644]
call fcn.10023ac0
lea ecx, [ebp - 0x4b8]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x990]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x990]
mov eax, dword [edx + 0x2c]
call eax
push 1
mov ecx, dword [ebp - 0x990]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x990]
mov eax, dword [edx + 0x104]
call eax
push 0x10154604
lea ecx, [ebp - 0x258]
call fcn.10019320
push str.hideEnd
mov ecx, dword [ebp - 0x94c]
add ecx, 0x30
call sym.UserAndPayClient.dll_public:_class_xx_DuiLib::CControlUI____thiscall_xx_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov dword [ebp - 0x98c], eax
push 0x1015472c
mov ecx, dword [ebp - 0x98c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x98c]
mov eax, dword [edx + 0x2c]
call eax
push 1
mov ecx, dword [ebp - 0x98c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x98c]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x4b8]
call fcn.10023ac0
jmp 0x1006179a
lea ecx, [ebp - 0x230]
call fcn.100192c0
movzx ecx, al
test ecx, ecx
jne 0x100616f7
lea ecx, [ebp - 0x230]
call fcn.10023620
push eax
push 0x10154738
lea edx, [ebp - 0x62c]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
push eax
lea ecx, [ebp - 0x230]
call fcn.10019340
lea ecx, [ebp - 0x62c]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0xb8
call fcn.10023620
push eax
lea ecx, [ebp - 0x258]
call fcn.10019320
push 0xa
lea edx, [ebp - 0x258]
push edx
lea eax, [ebp - 0x5fc]
push eax
call fcn.1003fe40
add esp, 0xc
mov dword [ebp - 0x9e4], eax
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp - 0x9e0], ecx
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x9e0]
call fcn.10023620
push eax
push 0x10154748
lea edx, [ebp - 0x614]
push edx
call fcn.1003f7b0
add esp, 0xc
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x9dc]
push eax
lea ecx, [ebp - 0x258]
call fcn.10019340
lea ecx, [ebp - 0x614]
call fcn.10023ac0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x5fc]
call fcn.10023ac0
push 0
push 0x10154758
lea ecx, [ebp - 0x230]
call fcn.1002b230
cmp eax, 0xffffffff
je 0x100618a2
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0xb8
call fcn.100192c0
movzx edx, al
test edx, edx
je 0x1006180a
push 0x10154770
lea eax, [ebp - 0x74c]
push eax
call fcn.1003f7b0
add esp, 8
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9ac]
push ecx
lea ecx, [ebp - 0x258]
call fcn.10019340
lea ecx, [ebp - 0x74c]
call fcn.10023ac0
push str.fylpds
lea ecx, [ebp - 0x458]
call fcn.1002b1f0
test eax, eax
jne 0x100618a2
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0xb8
call fcn.100192c0
movzx eax, al
test eax, eax
je 0x10061877
push 0x10154798
lea ecx, [ebp - 0x764]
push ecx
call fcn.1003f7b0
add esp, 8
mov dword [ebp - 0x9d8], eax
mov edx, dword [ebp - 0x9d8]
push edx
lea ecx, [ebp - 0x258]
call fcn.10019340
lea ecx, [ebp - 0x764]
call fcn.10023ac0
lea ecx, [ebp - 0x258]
call fcn.10023620
push eax
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x6c0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x6c0]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f5]
test edx, edx
jne 0x100618ce
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
cmp dword [ecx + 0x9c], 0
jge 0x10061926
lea ecx, [ebp - 0x258]
call fcn.10023620
push eax
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x6c0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x6c0]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x3f5]
test eax, eax
je 0x10061926
push str.vippic.png
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x778]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
lea ecx, [ebp - 0x230]
call fcn.10023620
push eax
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x6c4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x6c4]
mov eax, dword [edx + 0x2c]
call eax
lea ecx, [ebp - 0x488]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x6a4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x6a4]
mov eax, dword [edx + 0x2c]
call eax
mov ecx, dword [ebp - 0x94c]
add ecx, 0x6a8
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x6a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
add eax, 0x130
push eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x9c]
push eax
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
add edx, 0x148
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x9c]
push edx
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x978], 0xffffffff
jne 0x10061a8d
cmp dword [ebp - 0x95c], 0xffffffff
jne 0x10061a8d
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f0]
test edx, edx
je 0x10061a8d
push 1
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
push 0x101547c8
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x2c]
call edx
push 0xff715935
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CLabelUI::SetTextColor_unsigned_long_int_
call sym.UserAndPayClient.dll_public:_static_void___cdecl_xx_DuiLib::CPaintManagerUI::ReloadSkin_void_
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
add edx, 0x280
push edx
lea eax, [ebp - 0x77c]
push eax
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x9d4], eax
mov ecx, dword [ebp - 0x9d4]
mov dword [ebp - 0x9d0], ecx
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x9d0]
call fcn.10023620
push eax
lea ecx, [ebp - 0x3f8]
call fcn.1001fdb0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x77c]
call fcn.10023ac0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
add eax, 0x2b0
push eax
lea ecx, [ebp - 0x794]
push ecx
call fcn.1003e950
add esp, 8
mov dword [ebp - 0x9cc], eax
mov edx, dword [ebp - 0x9cc]
mov dword [ebp - 0x9c8], edx
mov byte [ebp - 4], 0x1f
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x9c8]
call fcn.10023620
push eax
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::constructor_wchar_t_const___int_
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x794]
call fcn.10023ac0
push 0x101547d4
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx eax, al
test eax, eax
jne 0x10061b81
push 0x101547e4
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x10061ce8
push 0x101547f4
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a0]
mov edx, dword [eax + 0x8c]
call edx
push 0x1015480c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x268], 0x1c
xor ecx, ecx
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x25c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x268]
mov dword [edx], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x260]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x25c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
push 0x10154824
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154830
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x3c8], 0x14
xor ecx, ecx
mov dword [ebp - 0x3c4], ecx
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x3c8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x3c4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x3c0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x3bc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x1015483c
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
jne 0x10061d1a
push 0x10154850
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx edx, al
test edx, edx
je 0x10061ea5
push 0x10154864
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a0]
mov eax, dword [edx + 0x8c]
call eax
push 0x1015487c
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x3b8], 0x1c
xor edx, edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], edx
mov dword [ebp - 0x3ac], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x3b8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x3b4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x3b0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x3ac]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b0]
mov edx, dword [eax + 0x78]
call edx
push 0x10154894
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b0]
mov edx, dword [eax + 0x2c]
call edx
push 0x101548a0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
push 0x1c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a8]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a8]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x2e8], 0x13
xor eax, eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x2e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2e4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2e0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2dc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x101548ac
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
jne 0x10061ed3
push 0x101548c0
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx edx, al
test edx, edx
je 0x10061f12
push 0x101548d0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x101548e4
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10062e4c
push str.4lpS
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x1006211d
push 0x101548fc
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154908
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x3a8], 0x15
xor edx, edx
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x3a0], edx
mov dword [ebp - 0x39c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x3a8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x3a4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x3a0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x39c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x10154920
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x1015492c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x10154940
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x398], 0x14
xor ecx, ecx
mov dword [ebp - 0x394], ecx
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0x38c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x398]
mov dword [edx], eax
mov ecx, dword [ebp - 0x394]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x390]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x38c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x298], 0x14
xor ecx, ecx
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x28c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x298]
mov dword [edx], eax
mov ecx, dword [ebp - 0x294]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x290]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x28c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x1015494c
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x10062328
push 0x10154958
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a4]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x388], 0x15
xor eax, eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x388]
mov dword [ecx], edx
mov eax, dword [ebp - 0x384]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x380]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x37c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
push 0x1015496c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154978
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x10154990
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x378], 0x14
xor ecx, ecx
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x370], ecx
mov dword [ebp - 0x36c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x378]
mov dword [edx], eax
mov ecx, dword [ebp - 0x374]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x370]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x36c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x368], 0x15
xor ecx, ecx
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0x35c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x368]
mov dword [edx], eax
mov ecx, dword [ebp - 0x364]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x360]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x35c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x1015499c
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x10062494
push 0x101549ac
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x101549b8
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x358], 0x15
xor edx, edx
mov dword [ebp - 0x354], edx
mov dword [ebp - 0x350], edx
mov dword [ebp - 0x34c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
mov edx, dword [ebp - 0x354]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x350]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x34c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x101549d0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x101549dc
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x2f8], 0x18
xor eax, eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x2f8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x2f4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x2f0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x2ec]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x101549e8
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x10062600
push 0x101549f8
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154a04
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x308], 0x15
xor edx, edx
mov dword [ebp - 0x304], edx
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x2fc], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x308]
mov dword [eax], ecx
mov edx, dword [ebp - 0x304]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x300]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x2fc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x78]
call edx
push 0x10154a1c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b4]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b4]
mov edx, dword [eax + 0x2c]
call edx
push 0x10154a28
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x318], 0x18
xor eax, eax
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x318]
mov dword [ecx], edx
mov eax, dword [ebp - 0x314]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x310]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x30c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push 0x10154a34
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_bool___thiscall_xx_DuiLib::CDuiString::operator_wchar_t_const__const
movzx ecx, al
test ecx, ecx
je 0x10062741
push 0x10154a48
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a0]
mov edx, dword [eax + 0x8c]
call edx
mov dword [ebp - 0x328], 0x1d
xor eax, eax
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x328]
mov dword [ecx], edx
mov eax, dword [ebp - 0x324]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x320]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x31c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x78]
call eax
push 0x10154a5c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154a68
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x21
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x10154a7c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10062e4c
push str.dkpc
lea ecx, [ebp - 0x3f8]
push ecx
call fcn.1002b830
add esp, 8
movzx edx, al
test edx, edx
je 0x10062a8a
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a0]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7a0]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x9a0], eax
push 0x24
mov eax, dword [ebp - 0x9a0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x9a0]
mov eax, dword [edx + 0x94]
call eax
push 0x24
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a0]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x24
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7ac]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7ac]
mov eax, dword [edx + 0x8c]
call eax
push 0x10154a94
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a0]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x10154aa8
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x10154ab8
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x10154ac8
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7ac]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x10154adc
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154ae8
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154af0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x338], 0x22
xor ecx, ecx
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x32c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x338]
mov dword [edx], eax
mov ecx, dword [ebp - 0x334]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x330]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x32c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b0]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b0]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x348], 0x22
xor ecx, ecx
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0x33c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x348]
mov dword [edx], eax
mov ecx, dword [ebp - 0x344]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x340]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x33c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x278], 0x22
xor ecx, ecx
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x270], ecx
mov dword [ebp - 0x26c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x278]
mov dword [edx], eax
mov ecx, dword [ebp - 0x274]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x270]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
mov dword [ebp - 0x288], 0x1c
xor ecx, ecx
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x27c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x288]
mov dword [edx], eax
mov ecx, dword [ebp - 0x284]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x280]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x27c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7bc]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7bc]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push str.fywjjm
lea ecx, [ebp - 0x3f8]
push ecx
call fcn.1002b830
add esp, 8
movzx edx, al
test edx, edx
je 0x10062b54
push 0x10154b0c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x20
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x20
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x94]
call eax
push 0x10154b24
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b0]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b0]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154b30
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
jmp 0x10062e4c
push str.dsrw
lea ecx, [ebp - 0x3f8]
push ecx
call fcn.1002b830
add esp, 8
movzx edx, al
test edx, edx
je 0x10062e0d
push 0x10154b48
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7a4]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
mov dword [ebp - 0x2a8], 0x24
xor ecx, ecx
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0x29c], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x2a8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2a0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x29c]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7a4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a4]
mov eax, dword [edx + 0x78]
call eax
push 0x21
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x8c]
call eax
push 0x21
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a4]
mov eax, dword [edx + 0x94]
call eax
mov dword [ebp - 0x2b8], 0x15
xor ecx, ecx
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2ac], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x2b8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2b4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2b0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x2ac]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b4]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b4]
mov eax, dword [edx + 0x78]
call eax
push 0x10154b5c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b4]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b4]
mov eax, dword [edx + 0x2c]
call eax
push 0x10154b68
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x7a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CControlUI::SetBkImage_wchar_t_const__
push 0x1f
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x8c]
call eax
push 0x20
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7a8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7a8]
mov eax, dword [edx + 0x94]
call eax
mov dword [ebp - 0x2c8], 0x26
xor ecx, ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x2c8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2c4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2c0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x2bc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7a8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7a8]
mov eax, dword [edx + 0x78]
call eax
push 0x10154b7c
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7b8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7b8]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x2d8], 0x14
xor ecx, ecx
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2cc], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x2d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x2d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x2cc]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x7b8]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x7b8]
mov eax, dword [edx + 0x78]
call eax
jmp 0x10062e4c
push str.fyhfds
lea ecx, [ebp - 0x3f8]
push ecx
call fcn.1002b830
add esp, 8
movzx edx, al
test edx, edx
je 0x10062e4c
push 0x10154b98
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x7b8]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x7b8]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
mov dword [ebp - 0x9a4], ecx
lea edx, [ebp - 0x998]
push edx
mov ecx, dword [ebp - 0x9a4]
call fcn.10018e90
lea eax, [ebp - 0x9c4]
push eax
mov ecx, dword [ebp - 0x9a4]
call fcn.10018e30
jmp 0x10062e95
lea ecx, [ebp - 0x998]
call fcn.10018dd0
lea ecx, [ebp - 0x9c4]
push ecx
lea ecx, [ebp - 0x998]
call fcn.10018d60
movzx edx, al
test edx, edx
je 0x1006301a
lea ecx, [ebp - 0x998]
call fcn.10018df0
push eax
lea ecx, [ebp - 0x8c4]
call fcn.10023320
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
mov edx, dword [ebp - 0x8c4]
cmp edx, dword [ecx + 0x9c]
jne 0x10063006
cmp dword [ebp - 0x898], 0
jg 0x10062f0a
cmp dword [ebp - 0x860], 0
jg 0x10062f0a
cmp dword [ebp - 0x894], 0
jle 0x10063006
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x10063006
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x8c4]
call fcn.10023b10
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3f8]
call fcn.10023ac0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x230]
call fcn.10023ac0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x258]
call fcn.10023ac0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x488]
call fcn.10023ac0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x948]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x428]
call fcn.10023ac0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x440]
call fcn.10023ac0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x470]
call fcn.10023ac0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x458]
call fcn.10023ac0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.100238b0
jmp 0x100641c2
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x8c4]
call fcn.10023b10
jmp 0x10062e8a
cmp dword [ebp - 0x95c], 0xffffffff
jne 0x10063376
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x978], eax
je 0x100632d2
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx eax, al
test eax, eax
je 0x100632cd
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 0
jle 0x100632cd
mov edx, dword [ebp - 0x97c]
sub edx, 1
mov dword [ebp - 0x97c], edx
js 0x100632c8
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x97c], eax
ja 0x100632c8
mov ecx, dword [ebp - 0x97c]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x100632c8
mov eax, dword [ebp - 0x978]
cmp eax, dword [ebp - 0x97c]
jl 0x1006314f
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov esi, dword [ebp - 0x978]
add esi, 1
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp esi, eax
ja 0x100632c6
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
mov ecx, dword [ebp - 0x978]
add ecx, 1
cmp eax, ecx
jbe 0x100632c6
mov byte [ebp - 0x94d], 0
mov edx, dword [ebp - 0x978]
add edx, 1
mov dword [ebp - 0x980], edx
jmp 0x100631c9
mov eax, dword [ebp - 0x980]
add eax, 1
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
cmp dword [ebp - 0x980], eax
jae 0x10063297
mov edx, dword [ebp - 0x980]
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x10063292
mov ecx, dword [ebp - 0x980]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0x20], 0
jne 0x10063292
mov eax, dword [ebp - 0x980]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
jne 0x1006328b
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x3f5]
test ecx, ecx
jne 0x10063289
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
movzx ecx, byte [eax + 0x3f0]
test ecx, ecx
je 0x1006328b
jmp 0x10063292
mov byte [ebp - 0x94d], 1
jmp 0x100631ba
movzx edx, byte [ebp - 0x94d]
test edx, edx
jne 0x100632c6
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x100632cd
jmp 0x100630aa
jmp 0x10063371
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x978], eax
jne 0x10063371
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
test eax, eax
jbe 0x10063335
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
jmp 0x10063371
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x10063371
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x100636f6
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x95c], eax
je 0x10063657
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x10063652
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.1001f7a0
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x974], 0
jle 0x10063652
mov ecx, dword [ebp - 0x974]
sub ecx, 1
mov dword [ebp - 0x974], ecx
js 0x1006364d
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x974], eax
ja 0x1006364d
mov eax, dword [ebp - 0x974]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x1006364d
mov edx, dword [ebp - 0x95c]
cmp edx, dword [ebp - 0x974]
jl 0x100634a3
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x10063652
mov esi, dword [ebp - 0x95c]
add esi, 1
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp esi, eax
ja 0x1006364b
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
mov edx, dword [ebp - 0x95c]
add edx, 1
cmp eax, edx
jbe 0x1006364b
mov byte [ebp - 0x950], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x964], eax
jmp 0x1006351a
mov ecx, dword [ebp - 0x964]
add ecx, 1
mov dword [ebp - 0x964], ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
cmp dword [ebp - 0x964], eax
jae 0x100635ee
mov eax, dword [ebp - 0x964]
cmp eax, dword [ebp - 0x95c]
jle 0x100635c3
mov ecx, dword [ebp - 0x964]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x20], 0
jne 0x100635c3
mov eax, dword [ebp - 0x964]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x100635c3
mov edx, dword [ebp - 0x964]
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
je 0x100635c3
mov byte [ebp - 0x950], 1
jmp 0x100635ee
mov ecx, dword [ebp - 0x964]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
jne 0x100635e9
jmp 0x100635ee
jmp 0x1006350b
movzx eax, byte [ebp - 0x950]
test eax, eax
jne 0x1006364b
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x3f5]
test eax, eax
jne 0x10063627
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
movzx eax, byte [edx + 0x3f0]
test eax, eax
je 0x1006364b
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x104]
call eax
jmp 0x10063652
jmp 0x100633f9
jmp 0x100636f6
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x95c], eax
jne 0x100636f6
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
test eax, eax
jbe 0x100636ba
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x104]
call edx
jmp 0x100636f6
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x100636f6
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x104]
call eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x53c]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3f8]
call fcn.10023ac0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x230]
call fcn.10023ac0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x258]
call fcn.10023ac0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x488]
call fcn.10023ac0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x948]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CDuiString::destructor_void_
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x428]
call fcn.10023ac0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x440]
call fcn.10023ac0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x470]
call fcn.10023ac0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x458]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x7c8], 0
je 0x10063882
mov edx, dword [ebp - 0x94c]
cmp dword [edx + 0x7cc], 0
je 0x10063882
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x34]
push edx
push 0x10154ba4
lea eax, [ebp - 0x4a0]
push eax
call fcn.1003f7b0
add esp, 0xc
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x4a0]
call fcn.100192c0
movzx ecx, al
test ecx, ecx
jne 0x100637fe
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
cmp dword [eax + 0x34], 0
jne 0x10063848
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7c8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c8]
mov eax, dword [edx + 0x104]
call eax
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7cc]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7cc]
mov eax, dword [edx + 0x104]
call eax
jmp 0x10063873
lea ecx, [ebp - 0x4a0]
call fcn.10023620
push eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x7c8]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x7c8]
mov eax, dword [edx + 0x2c]
call eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a0]
call fcn.10023ac0
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x780], 0
je 0x100641b0
mov edx, dword [ebp - 0x94c]
cmp dword [edx + 0x784], 0
je 0x100641b0
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x788], 0
je 0x100641b0
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x78c], 0
je 0x100641b0
mov edx, dword [ebp - 0x94c]
cmp dword [edx + 0x790], 0
je 0x100641b0
mov eax, dword [ebp - 0x94c]
cmp dword [eax + 0x794], 0
je 0x100641b0
mov ecx, dword [ebp - 0x94c]
cmp dword [ecx + 0x798], 0
je 0x100641b0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x698]
add eax, 0x130
push eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
mov eax, dword [edx + 0x9c]
push eax
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0x968], eax
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x698]
add edx, 0x148
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
mov edx, dword [ecx + 0x9c]
push edx
call sym.UserAndPayClient.dll_public:_static_int___cdecl_Talk2Svr::CTalk2Svr::GetPlanIdIndex_int__class_std::vector_struct_tag_Pay_plan_Info__class_std::allocator_struct_tag_Pay_plan_Info____
add esp, 8
mov dword [ebp - 0x958], eax
cmp dword [ebp - 0x958], 0xffffffff
jne 0x10063cca
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x968], eax
je 0x10063c26
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x10063c21
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.1001f7a0
mov dword [ebp - 0x970], eax
cmp dword [ebp - 0x970], 0
jle 0x10063c21
mov ecx, dword [ebp - 0x970]
sub ecx, 1
mov dword [ebp - 0x970], ecx
js 0x10063c1c
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x970], eax
ja 0x10063c1c
mov eax, dword [ebp - 0x970]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x10063c1c
mov edx, dword [ebp - 0x968]
cmp edx, dword [ebp - 0x970]
jl 0x10063aa3
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
mov esi, dword [ebp - 0x968]
add esi, 1
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp esi, eax
ja 0x10063c1a
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
mov edx, dword [ebp - 0x968]
add edx, 1
cmp eax, edx
jbe 0x10063c1a
mov byte [ebp - 0x94f], 0
mov eax, dword [ebp - 0x968]
add eax, 1
mov dword [ebp - 0x988], eax
jmp 0x10063b1d
mov ecx, dword [ebp - 0x988]
add ecx, 1
mov dword [ebp - 0x988], ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
cmp dword [ebp - 0x988], eax
jae 0x10063beb
mov eax, dword [ebp - 0x988]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x10063be6
mov edx, dword [ebp - 0x988]
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0x20], 0
jne 0x10063be6
mov ecx, dword [ebp - 0x988]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
jne 0x10063bdf
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f5]
test edx, edx
jne 0x10063bdd
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f0]
test edx, edx
je 0x10063bdf
jmp 0x10063be6
mov byte [ebp - 0x94f], 1
jmp 0x10063b0e
movzx eax, byte [ebp - 0x94f]
test eax, eax
jne 0x10063c1a
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x10063c21
jmp 0x100639fe
jmp 0x10063cc5
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x968], eax
jne 0x10063cc5
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x130
call fcn.1001f7a0
test eax, eax
jbe 0x10063c89
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
jmp 0x10063cc5
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx ecx, al
test ecx, ecx
je 0x10063cc5
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x10064045
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x958], eax
je 0x10063fa6
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx eax, al
test eax, eax
je 0x10063fa1
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
mov dword [ebp - 0x96c], eax
cmp dword [ebp - 0x96c], 0
jle 0x10063fa1
mov edx, dword [ebp - 0x96c]
sub edx, 1
mov dword [ebp - 0x96c], edx
js 0x10063f9c
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x96c], eax
ja 0x10063f9c
mov ecx, dword [ebp - 0x96c]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x10063f9c
mov eax, dword [ebp - 0x958]
cmp eax, dword [ebp - 0x96c]
jl 0x10063df2
push 0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x750]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x750]
mov eax, dword [edx + 0x110]
call eax
mov esi, dword [ebp - 0x958]
add esi, 1
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp esi, eax
ja 0x10063f9a
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
mov ecx, dword [ebp - 0x958]
add ecx, 1
cmp eax, ecx
jbe 0x10063f9a
mov byte [ebp - 0x94e], 0
mov edx, dword [ebp - 0x958]
mov dword [ebp - 0x960], edx
jmp 0x10063e69
mov eax, dword [ebp - 0x960]
add eax, 1
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
cmp dword [ebp - 0x960], eax
jae 0x10063f3d
mov edx, dword [ebp - 0x960]
cmp edx, dword [ebp - 0x958]
jle 0x10063f12
mov eax, dword [ebp - 0x960]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x20], 0
jne 0x10063f12
mov edx, dword [ebp - 0x960]
push edx
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0xa0], 1
jne 0x10063f12
mov ecx, dword [ebp - 0x960]
push ecx
mov edx, dword [ebp - 0x94c]
mov ecx, dword [edx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
je 0x10063f12
mov byte [ebp - 0x94e], 1
jmp 0x10063f3d
mov eax, dword [ebp - 0x960]
push eax
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.10018e10
cmp dword [eax + 0x68], 0xffffffff
jne 0x10063f38
jmp 0x10063f3d
jmp 0x10063e5a
movzx edx, byte [ebp - 0x94e]
test edx, edx
jne 0x10063f9a
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f5]
test edx, edx
jne 0x10063f76
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f0]
test edx, edx
je 0x10063f9a
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
jmp 0x10063fa1
jmp 0x10063d4d
jmp 0x10064045
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
add ecx, 0x148
call fcn.1001f7a0
sub eax, 1
cmp dword [ebp - 0x958], eax
jne 0x10064045
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
add ecx, 0x148
call fcn.1001f7a0
test eax, eax
jbe 0x10064009
push 0
mov edx, dword [ebp - 0x94c]
mov eax, dword [edx + 0x750]
mov ecx, dword [ebp - 0x94c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x750]
mov eax, dword [edx + 0x110]
call eax
jmp 0x10064045
mov ecx, dword [ebp - 0x94c]
mov ecx, dword [ecx + 0x698]
call sym.UserAndPayClient.dll_public:_bool___thiscall_Talk2Svr::CTalk2Svr::CheckUserIsVip_void_
movzx edx, al
test edx, edx
je 0x10064045
push 0
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x110]
call edx
cmp dword [ebp - 0x968], 0xffffffff
jne 0x10064092
cmp dword [ebp - 0x958], 0xffffffff
jne 0x10064092
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x698]
movzx edx, byte [ecx + 0x3f0]
test edx, edx
je 0x10064092
push 0x10154bac
mov eax, dword [ebp - 0x94c]
mov ecx, dword [eax + 0x750]
mov edx, dword [ebp - 0x94c]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x750]
mov edx, dword [eax + 0x2c]
call edx
call fcn.10054650
movzx eax, al
test eax, eax
je 0x100641b0
mov ecx, dword [ebp - 0x94c]
mov edx, dword [ecx + 0x780]
mov eax, dword [ebp - 0x94c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x780]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x984], 0
jmp 0x100640e2
mov ecx, dword [ebp - 0x984]
add ecx, 1
mov dword [ebp - 0x984], ecx
mov ecx, dword [ebp - 0x994]
add ecx, 0x608
mov edx, dword [ebp - 0x994]
mov eax, dword [edx + 0x608]
mov edx, dword [eax + 0xc]
call edx
cmp dword [ebp - 0x984], eax
jge 0x100641b0
mov eax, dword [ebp - 0x984]
push eax
mov ecx, dword [ebp - 0x994]
add ecx, 0x608
mov edx, dword [ebp - 0x994]
mov eax, dword [edx + 0x608]
mov edx, dword [eax]
call edx
mov dword [ebp - 0x9a8], eax
lea eax, [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x9a8]
call sym.UserAndPayClient.dll_public:_struct_tagRECT___thiscall_xx_DuiLib::CLabelUI::GetTextPadding_void_
cmp dword [ebp - 0x984], 0
je 0x10064158
cmp dword [ebp - 0x984], 2
jne 0x10064169
mov ecx, dword [ebp - 0x23c]
add ecx, 2
mov dword [ebp - 0x23c], ecx
jmp 0x10064178
mov edx, dword [ebp - 0x23c]
add edx, 3
mov dword [ebp - 0x23c], edx
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
mov edx, dword [ebp - 0x23c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x238]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x234]
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x9a8]
call sym.UserAndPayClient.dll_public:_void___thiscall_xx_DuiLib::CLabelUI::SetTextPadding_struct_tagRECT_
jmp 0x100640d3
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.100238b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e3069
mov esp, ebp
pop ebp
ret