Function at 0x41f000
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b526e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x160
mov eax, dword [0x4e5070]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x164], esi
cmp dword [esi + 4], 0
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x160], edx
je 0x4212b2
nop
cmp dword [esi + 0x570], 0
jle 0x41f171
mov eax, dword [esi + 0x56c]
mov edi, dword [eax]
test edi, edi
je 0x41f171
mov eax, dword [esi + 0x570]
test eax, eax
jle 0x41f0b9
dec eax
mov dword [esi + 0x570], eax
test eax, eax
jle 0x41f0b9
mov ecx, dword [esi + 0x56c]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.00496320
add esp, 0xc
mov ecx, dword [edi + 0x110]
test ecx, ecx
je 0x41f0da
cmp dword [ecx + 0x38], 0
jle 0x41f0da
push edi
add ecx, 0x34
call fcn.0041d4b0
test al, al
jne 0x41f162
xor ecx, ecx
mov dword [ebp - 0x154], ecx
cmp dword [esi + 0x528], ecx
jle 0x41f113
nop word [eax + eax]
mov eax, dword [esi + 0x524]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x154]
inc ecx
mov dword [ebp - 0x154], ecx
cmp ecx, dword [esi + 0x528]
jl 0x41f0f0
mov ecx, dword [edi + 0x8c]
lea eax, [edi + 0x90]
mov dword [edi + 0x88], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x41f136
push ecx
call fcn.0049b90f
add esp, 4
mov ecx, dword [edi + 4]
lea eax, [edi + 8]
mov dword [edi], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x41f14f
push ecx
call fcn.0049b90f
add esp, 4
push 0x128
push edi
call fcn.004933d3
add esp, 8
jmp 0x41f070
push ecx
mov ecx, edi
call fcn.0041e1f0
mov al, 1
jmp 0x4212b4
mov edi, dword [ebp - 0x168]
xor ecx, ecx
mov dword [ebp - 0x154], ecx
cmp dword [esi + 0x54c], ecx
jle 0x41f1d9
nop word [eax + eax]
mov eax, dword [esi + 0x548]
lea edx, [ebp - 0x155]
mov byte [ebp - 0x155], 0
push edx
push dword [ebp - 0x15c]
mov ecx, dword [eax + ecx*4]
push edi
push dword [ebx + 8]
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
cmp byte [ebp - 0x155], 0
jne 0x41fdac
mov ecx, dword [ebp - 0x154]
inc ecx
mov dword [ebp - 0x154], ecx
cmp ecx, dword [esi + 0x54c]
jl 0x41f190
mov ecx, dword [ebx + 8]
cmp ecx, 0x100
ja 0x41fe90
je 0x41fdbb
lea eax, [ecx - 3]
cmp eax, 0x9e
ja case.default.0x420eeb
movzx eax, byte [eax + 0x421304]
jmp dword [eax*4 + 0x4212d4]
mov eax, dword [esi + 0x438]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe4], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [esi + 0x43c]
movups xmmword [ebp - 0xf4], xmm0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x42c]
mov dword [ebp - 0xe8], eax
test ecx, ecx
je 0x41f272
mov dword [ebp - 0xf4], 0xa
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xec], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x184]
push 0
mov ecx, esi
call fcn.00421be0
push 4
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je case.default.0x420eeb
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.default.0x420eeb
mov ecx, dword [ebp - 0x160]
mov al, 1
mov dword [ecx], 1
jmp 0x4212b4
push 0
lea eax, [ebp - 0x24]
xorps xmm0, xmm0
push eax
push dword [esi + 4]
movups xmmword [ebp - 0x24], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x41f16a
cmp dword [esi + 0x41c], 0
jne 0x41f30e
push 0x40
lea eax, [ebp - 0x150]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x150]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x150]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_EndPaint]
mov al, 1
jmp 0x4212b4
cmp byte [esi + 0x485], 0
je 0x41f424
lea eax, [ebp - 0x48]
mov byte [esi + 0x485], 0
push eax
push dword [esi + 4]
xorps xmm0, xmm0
movups xmmword [ebp - 0x48], xmm0
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x41f424
mov ecx, dword [esi + 0x41c]
cmp byte [ecx + 0x1e4], al
je 0x41f374
movups xmm0, xmmword [ebp - 0x48]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
movups xmmword [eax], xmm0
call dword [edx + 0x48]
mov ecx, dword [esi + 0x69c]
mov eax, dword [ecx]
call dword [eax + 0x24]
jmp 0x41f3dc
mov eax, dword [ecx]
push SysReAllocString
push 0
push 0x4238d0
mov eax, dword [eax + 0x174]
call eax
mov edi, eax
test edi, edi
je 0x41f3dc
mov ecx, dword [edi]
mov eax, dword [ecx + 0x44]
cmp eax, method.UiLib::CCheckBoxUI.virtual_68
jne 0x41f3a4
lea eax, [edi + 0x1ec]
jmp 0x41f3a8
mov ecx, edi
call eax
movups xmm0, xmmword [eax]
mov edx, dword [edi]
sub esp, 0x10
mov ecx, esp
movups xmmword [ecx], xmm0
mov ecx, edi
call dword [edx + 0x48]
mov ecx, dword [esi + 0x41c]
push SysReAllocString
push 0
push 0x4238d0
mov eax, dword [ecx]
mov eax, dword [eax + 0x174]
call eax
mov edi, eax
test edi, edi
jne 0x41f390
cmp byte [esi + 0x484], 0
je 0x41f424
cmp byte [esi + 0x48c], 0
mov byte [esi + 0x484], 0
je 0x41f40d
mov eax, dword [esi]
test eax, eax
je 0x41f40d
push 0
push 0
push 0x8002
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
push 0
push 0
push str.windowinit
push dword [esi + 0x41c]
mov ecx, esi
call fcn.004229a0
cmp byte [esi + 0x486], 0
je 0x41f44f
mov eax, dword [esi + 0x424]
mov ecx, esi
test eax, eax
je 0x41f448
push eax
call fcn.00421be0
mov byte [esi + 0x486], 0
jmp 0x41f44f
push 1
call fcn.00422380
cmp byte [0x4e91e4], 0
jne 0x41f5d4
call fcn.00435090
test al, al
jne 0x41f5d4
push 0x40
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x110]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_BeginPaint]
mov ecx, dword [esi + 0x69c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
cmp eax, method.UiLib::CUIRenderCore.virtual_16
jne 0x41f4b0
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x41f4b6
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push edx
call dword [eax + 0x28]
jmp 0x41f4b6
lea edx, [ebp - 0x24]
push edx
call eax
mov ecx, dword [esi + 0x41c]
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ecx]
call dword [eax + 0x1a8]
xor edi, edi
cmp dword [esi + 0x558], edi
jle 0x41f4f0
mov eax, dword [esi + 0x554]
lea edx, [ebp - 0x24]
push edx
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x1c4]
inc edi
cmp edi, dword [esi + 0x558]
jl 0x41f4d2
cmp dword [esi], 0
movups xmm0, xmmword [ebp - 0x24]
movups xmmword [ebp - 0x108], xmm0
je 0x41f537
mov ecx, dword [esi + 0x69c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x1c]
cmp eax, method.UiLib::CUIRenderCore.virtual_28
jne 0x41f51e
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x41f55e
mov eax, dword [ecx]
mov eax, dword [eax + 0x34]
push 1
call eax
mov ecx, eax
mov edx, dword [esi]
mov eax, dword [edx]
mov eax, dword [eax + 8]
cmp eax, fcn.00404ae0
je 0x41f537
push ecx
mov ecx, edx
call eax
mov ecx, dword [esi + 0x69c]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
cmp eax, method.UiLib::CUIRenderCore.virtual_20
jne 0x41f562
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x41f56b
mov eax, dword [ecx]
lea edx, [ebp - 0x110]
push edx
call dword [eax + 0x2c]
jmp 0x41f56b
xor ecx, ecx
jmp 0x41f524
lea edx, [ebp - 0x110]
push edx
call eax
cmp byte [esi + 0x48a], 0
je 0x41f5c2
push dword [0x4e90c4]
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0x110]
call edi
push 5
mov esi, eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp - 0x110]
call edi
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0x110]
call dword [sym.imp.GDI32.dll_Rectangle]
push esi
push dword [ebp - 0x110]
call edi
mov esi, dword [ebp - 0x164]
lea eax, [ebp - 0x110]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x41f5e6
push 0
push 0
push 0xa90
push dword [esi + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
cmp byte [esi + 0x485], 0
je 0x41f16a
push 0
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x4212b4
mov eax, dword [esi + 0x440]
mov edx, dword [ebp - 0x15c]
test eax, eax
jle 0x41f61a
mov dword [edx + 0x18], eax
mov eax, dword [esi + 0x444]
test eax, eax
jle 0x41f627
mov dword [edx + 0x1c], eax
mov eax, dword [esi + 0x448]
test eax, eax
jle 0x41f634
mov dword [edx + 0x20], eax
mov eax, dword [esi + 0x44c]
test eax, eax
jle case.default.0x420eeb
mov dword [edx + 0x24], eax
jmp case.default.0x420eeb
mov eax, dword [esi + 0x51c]
mov dword [ebp - 0x154], eax
test eax, eax
je case.default.0x420eeb
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0x17
movups xmmword [ebp - 0xf0], xmm0
movups xmmword [ebp - 0xe0], xmm0
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x420]
mov dword [ebp - 0xe8], eax
test ecx, ecx
je 0x41f69e
mov eax, dword [ecx]
lea edx, [ebp - 0xf4]
push edx
call dword [eax + 0x184]
xor edi, edi
cmp dword [ebp - 0x154], edi
jle case.default.0x420eeb
nop dword [eax]
mov eax, dword [esi + 0x518]
lea edx, [ebp - 0xf4]
push edx
mov ecx, dword [eax + edi*4]
mov dword [ebp - 0xec], ecx
mov eax, dword [ecx]
call dword [eax + 0x184]
inc edi
cmp edi, dword [ebp - 0x154]
jl 0x41f6b0
jmp case.default.0x420eeb
mov ecx, dword [esi + 0x69c]
test ecx, ecx
je 0x41f702
mov eax, dword [ecx]
mov eax, dword [eax + 0x3c]
cmp eax, method.UiLib::CUIRenderCore.virtual_60
jne 0x41f700
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x41f702
mov eax, dword [ecx]
call dword [eax + 0x5c]
jmp 0x41f702
call eax
mov eax, dword [esi + 0x51c]
mov ecx, dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0x154], eax
test eax, eax
je 0x41f78f
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0x18
movups xmmword [ebp - 0xf0], xmm0
movups xmmword [ebp - 0xe0], xmm0
call ecx
mov ecx, dword [esi + 0x420]
mov dword [ebp - 0xe8], eax
test ecx, ecx
je 0x41f758
mov eax, dword [ecx]
lea edx, [ebp - 0xf4]
push edx
call dword [eax + 0x184]
xor edi, edi
cmp dword [ebp - 0x154], edi
jle 0x41f789
mov eax, dword [esi + 0x518]
lea edx, [ebp - 0xf4]
push edx
mov ecx, dword [eax + edi*4]
mov dword [ebp - 0xec], ecx
mov eax, dword [ecx]
call dword [eax + 0x184]
inc edi
cmp edi, dword [ebp - 0x154]
jl 0x41f762
mov ecx, dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov eax, dword [esi + 0x420]
test eax, eax
je 0x41f7d7
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0x18
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xec], eax
movups xmmword [ebp - 0xe0], xmm0
call ecx
mov ecx, dword [esi + 0x420]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
cmp byte [0x4e91e4], 0
je 0x41f7e5
call fcn.00434fa0
mov ecx, dword [esi + 0x69c]
mov byte [esi + 0x485], 1
test ecx, ecx
je 0x41f815
mov ecx, dword [ecx + 4]
test ecx, ecx
je 0x41f815
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x41f815
push 0
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov ecx, dword [esi + 0x41c]
test ecx, ecx
je 0x41f16a
mov eax, dword [ecx]
call dword [eax + 0x178]
mov al, 1
jmp 0x4212b4
cmp byte [esi + 0x487], 0
jne 0x41f892
mov eax, dword [esi + 4]
xorps xmm0, xmm0
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 0x30], 0x13
test eax, eax
jne 0x41f86e
mov dword [ebp - 0x28], 0x190
jmp 0x41f881
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [esi + 0x487], 1
mov ecx, dword [ebp - 0x15c]
movsx eax, cx
mov dword [ebp - 0x1c], eax
shr ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, dword [esi + 0x438]
jne 0x41f8ce
cmp eax, dword [esi + 0x43c]
je case.default.0x420eeb
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0
movups xmmword [ebp - 0xe4], xmm0
mov dword [esi + 0x438], ecx
movups xmmword [ebp - 0xf4], xmm0
mov dword [esi + 0x43c], eax
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x428]
mov dword [ebp - 0xe8], eax
test ecx, ecx
je 0x41fa32
mov dword [ebp - 0xf4], 9
mov dword [ebp - 0xec], ecx
mov eax, dword [ecx]
lea edx, [ebp - 0xf4]
push edx
call dword [eax + 0x184]
nop word [eax + eax]
cmp dword [esi + 0x570], 0
jle 0x4212b2
mov eax, dword [esi + 0x56c]
mov edi, dword [eax]
test edi, edi
je 0x4212b2
mov eax, dword [esi + 0x570]
test eax, eax
jle 0x41f989
dec eax
mov dword [esi + 0x570], eax
test eax, eax
jle 0x41f989
mov ecx, dword [esi + 0x56c]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.00496320
add esp, 0xc
mov ecx, dword [edi + 0x110]
test ecx, ecx
je 0x41f9aa
cmp dword [ecx + 0x38], 0
jle 0x41f9aa
push edi
add ecx, 0x34
call fcn.0041d4b0
test al, al
jne 0x421264
xor ecx, ecx
mov dword [ebp - 0x154], ecx
cmp dword [esi + 0x528], ecx
jle 0x41f9e3
nop word [eax + eax]
mov eax, dword [esi + 0x524]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x154]
inc ecx
mov dword [ebp - 0x154], ecx
cmp ecx, dword [esi + 0x528]
jl 0x41f9c0
mov ecx, dword [edi + 0x8c]
lea eax, [edi + 0x90]
mov dword [edi + 0x88], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x41fa06
push ecx
call fcn.0049b90f
add esp, 4
mov ecx, dword [edi + 4]
lea eax, [edi + 8]
mov dword [edi], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x41fa1f
push ecx
call fcn.0049b90f
add esp, 4
push 0x128
push edi
call fcn.004933d3
add esp, 8
jmp case.default.0x420eeb
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x40]
mov ecx, dword [esi + 0x41c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x423790
mov eax, dword [eax + 0x174]
call eax
mov edi, eax
test edi, edi
je 0x41fa7c
mov ecx, dword [edi]
mov eax, dword [ecx + 0x1c]
cmp eax, method.UiLib::CCheckBoxUI.virtual_28
jne 0x41fa70
mov eax, dword [edi + 0x40]
jmp 0x41fa74
mov ecx, edi
call eax
cmp eax, esi
jne case.default.0x420eeb
mov eax, dword [esi + 0x42c]
cmp edi, eax
je case.default.0x420eeb
test edi, edi
je 0x41fb7d
push edi
push eax
mov ecx, esi
mov byte [ebp - 0x155], 1
call fcn.00423980
test al, al
jne 0x41fac0
mov byte [ebp - 0x155], al
mov ecx, esi
lea eax, [ebp - 0xf4]
push eax
push dword [esi + 0x42c]
call fcn.00424260
push dword [esi + 0x42c]
mov ecx, esi
push edi
call fcn.00423980
mov ecx, esi
test al, al
je 0x41fae5
push 1
lea eax, [ebp - 0xf4]
push eax
push edi
call fcn.00424130
jmp 0x41fb54
lea eax, [ebp - 0x154]
mov dword [ebp - 0x154], 0
push eax
lea eax, [ebp - 0xf4]
push eax
push edi
call fcn.004242f0
cmp byte [ebp - 0x155], 0
jne 0x41fb54
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x164], eax
test eax, eax
je 0x41fb54
mov ecx, dword [esi + 0x42c]
test ecx, ecx
je 0x41fb54
cmp ecx, eax
je 0x41fb54
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
cmp eax, method.UiLib::CCheckBoxUI.virtual_36
jne 0x41fb3b
mov eax, dword [ecx + 0x48]
jmp 0x41fb3d
call eax
push 0
lea ecx, [ebp - 0xf4]
push ecx
push dword [ebp - 0x164]
mov ecx, esi
push eax
call fcn.004241d0
mov dword [esi + 0x42c], edi
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xf4], 9
mov dword [ebp - 0xec], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x184]
jmp 0x41fb94
lea ecx, [ebp - 0xf4]
push ecx
push eax
call fcn.00424380
mov dword [esi + 0x42c], 0
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x420dc8
lea eax, [esi + 0x10]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov byte [esi + 0x487], 0
jmp case.default.0x420eeb
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x41fbd6
lea eax, [esi + 0x10]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
mov ecx, esi
call fcn.00421be0
jmp case.default.0x420eeb
mov edx, dword [ebp - 0x15c]
movsx eax, dx
mov dword [ebp - 0x1c], eax
shr edx, 0x10
movsx eax, dx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [esi + 0x430], 0
mov eax, dword [ebp - 0x1c]
mov dword [esi + 0x438], eax
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x43c], eax
je case.default.0x420eeb
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x1c]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x430]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x18]
movups xmmword [ebp - 0xe0], xmm0
mov dword [esi + 0x428], 0
mov byte [esi + 0x488], 0
mov dword [ebp - 0xf4], 0x12
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
mov dword [ebp - 0xd4], ecx
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x430]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
mov dword [esi + 0x430], 0
jmp case.default.0x420eeb
cmp word [ebp - 0x15c], 1
jne case.default.0x420eeb
cmp byte [esi + 0x488], 0
jne 0x41f16a
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push eax
mov dword [ebp - 0x28], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x2c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x28]
mov ecx, esi
push dword [ebp - 0x2c]
call fcn.004236c0
mov dword [ebp - 0x154], eax
test eax, eax
je case.default.0x420eeb
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x14]
call edx
test al, 2
je case.default.0x420eeb
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x2c]
movups xmmword [ebp - 0x130], xmm0
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x134], 0x19
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x120], eax
call fcn.00427d90
mov word [ebp - 0x11a], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebp - 0x154]
lea edx, [ebp - 0x134]
mov dword [ebp - 0x128], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
mov al, 1
jmp 0x4212b4
mov edx, dword [ebp - 0x15c]
test edx, edx
je 0x41fdb4
push edx
push edi
lea eax, [ecx + 0x2000]
push eax
push dword [edx]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x160]
mov dword [ecx], eax
mov al, 1
jmp 0x4212b4
cmp dword [esi + 0x420], 0
je case.default.0x420eeb
mov eax, dword [esi + 0x438]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [esi + 0x43c]
movups xmmword [ebp - 0xe0], xmm0
mov word [ebp - 0xdc], di
xor edi, edi
push 0x11
mov dword [ebp - 0xf4], 3
mov dword [ebp - 0xe0], eax
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov ecx, 8
push 2
cmovs edi, ecx
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x41fe27
or edi, 1
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x41fe37
or edi, 2
push 0x10
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x41fe47
or edi, 4
push 0x12
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x41fe57
or edi, 0x20
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x420]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
mov eax, dword [esi + 0x420]
mov dword [esi + 0x434], eax
jmp case.default.0x420eeb
cmp ecx, 0x111
ja 0x41ffca
je 0x41ff9f
sub ecx, 0x101
je 0x41ff1c
sub ecx, 1
jne case.default.0x420eeb
cmp dword [esi + 0x420], ecx
je case.default.0x420eeb
mov eax, dword [esi + 0x438]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [esi + 0x43c]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf4], 5
mov word [ebp - 0xdc], di
mov dword [ebp - 0xe0], eax
call fcn.00427d90
mov word [ebp - 0xda], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x420]
mov dword [ebp - 0xe8], eax
jmp 0x41f92b
cmp dword [esi + 0x434], 0
je case.default.0x420eeb
mov eax, dword [esi + 0x438]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [esi + 0x43c]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf4], 4
mov word [ebp - 0xdc], di
mov dword [ebp - 0xe0], eax
call fcn.00427d90
mov word [ebp - 0xda], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x434]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
mov dword [esi + 0x434], 0
jmp case.default.0x420eeb
mov edx, dword [ebp - 0x15c]
test edx, edx
je case.default.0x420eeb
push edx
push edi
push 0x2111
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x160]
mov dword [ecx], eax
mov al, 1
jmp 0x4212b4
cmp ecx, 0x2a0
ja 0x420979
je 0x42075a
add ecx, 0xfffffeed
cmp ecx, 0xf7
ja case.default.0x420eeb
movzx eax, byte [ecx + 0x4213cc]
jmp dword [eax*4 + 0x4213a4]
xor edx, edx
cmp dword [esi + 0x534], edx
jle case.default.0x420eeb
mov ecx, dword [esi + 0x530]
mov eax, dword [esi + 4]
mov dword [ebp - 0x154], ecx
nop dword [eax]
mov ecx, dword [ecx]
mov dword [ebp - 0x164], ecx
cmp dword [ecx + 8], eax
jne 0x42003e
movzx eax, di
cmp dword [ecx + 0xc], eax
jne 0x42003b
cmp byte [ecx + 0x10], 0
je 0x42005b
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 0x154]
inc edx
add ecx, 4
mov dword [ebp - 0x154], ecx
cmp edx, dword [esi + 0x534]
jl 0x420020
jmp case.default.0x420eeb
mov eax, dword [ecx]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xec], eax
mov eax, dword [ecx + 4]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf4], 0x1a
mov dword [ebp - 0xd8], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xe8], eax
mov ecx, dword [ecx]
jmp 0x41f92b
cmp byte [esi + 0x487], 0
jne 0x420100
mov eax, dword [esi + 4]
xorps xmm0, xmm0
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 0x30], 3
test eax, eax
jne 0x4200dc
mov dword [ebp - 0x28], 0x190
jmp 0x4200ef
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [esi + 0x487], 1
mov eax, dword [ebp - 0x15c]
movsx ecx, ax
shr eax, 0x10
mov dword [ebp - 0x154], ecx
movsx edi, ax
cmp ecx, dword [esi + 0x438]
jne 0x420129
cmp edi, dword [esi + 0x43c]
je case.default.0x420eeb
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0
movups xmmword [ebp - 0xe4], xmm0
mov dword [esi + 0x438], ecx
movups xmmword [ebp - 0xf4], xmm0
mov dword [esi + 0x43c], edi
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], edi
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x428]
mov dword [ebp - 0xe8], eax
test ecx, ecx
jne 0x41f91b
push edi
push dword [ebp - 0x154]
mov ecx, esi
call fcn.004236c0
mov edi, eax
test edi, edi
je 0x41fa7c
mov ecx, dword [edi]
mov eax, dword [ecx + 0x1c]
cmp eax, method.UiLib::CCheckBoxUI.virtual_28
jne 0x41fa70
mov eax, dword [edi + 0x40]
jmp 0x41fa74
mov ecx, dword [ebp - 0x15c]
mov eax, ecx
shr eax, 0x10
cwde
movsx edx, cx
mov ecx, esi
push eax
push edx
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x164], eax
mov dword [esi + 0x438], edx
mov dword [esi + 0x43c], eax
call fcn.004236c0
mov edx, eax
mov dword [ebp - 0x160], edx
test edx, edx
je case.default.0x420eeb
mov ecx, dword [edx]
mov eax, dword [ecx + 0x1c]
cmp eax, method.UiLib::CCheckBoxUI.virtual_28
jne 0x4201f7
mov eax, dword [edx + 0x40]
jmp 0x420201
mov ecx, edx
call eax
mov edx, dword [ebp - 0x160]
cmp eax, esi
jne case.default.0x420eeb
mov dword [esi + 0x430], edx
mov ecx, edx
mov eax, dword [edx]
call dword [eax + 0x134]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetCapture]
mov edx, dword [ebp - 0x160]
mov ecx, esi
push edx
call fcn.00422340
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x154]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf4], 0xd
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebp - 0x160]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
call fcn.00434fa0
jmp case.default.0x420eeb
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x15c]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x164], ecx
mov dword [esi + 0x438], ecx
push ecx
mov ecx, esi
mov dword [ebp - 0x160], eax
mov dword [esi + 0x43c], eax
call fcn.004236c0
mov dword [ebp - 0x154], eax
test eax, eax
je case.default.0x420eeb
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
cmp edx, method.UiLib::CCheckBoxUI.virtual_28
jne 0x420304
mov eax, dword [eax + 0x40]
jmp 0x420308
mov ecx, eax
call edx
cmp eax, esi
jne case.default.0x420eeb
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetCapture]
mov edx, dword [ebp - 0x154]
mov ecx, esi
push edx
call fcn.00422340
mov eax, dword [ebp - 0x164]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xf4], 0x11
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, dword [ebp - 0x154]
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push ecx
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x184]
mov dword [esi + 0x430], edi
jmp case.default.0x420eeb
mov ecx, dword [ebp - 0x15c]
mov eax, ecx
movsx edx, cx
mov ecx, esi
shr eax, 0x10
cwde
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x164], eax
mov dword [esi + 0x438], edx
mov dword [esi + 0x43c], eax
call fcn.00422360
mov eax, dword [esi + 0x430]
test eax, eax
je case.default.0x420eeb
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0xe
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x15c]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x430]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
mov dword [esi + 0x430], 0
jmp case.default.0x420eeb
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x15c]
movsx ecx, ax
shr eax, 0x10
cwde
push eax
mov dword [ebp - 0x154], ecx
mov dword [esi + 0x438], ecx
push ecx
mov ecx, esi
mov dword [ebp - 0x164], eax
mov dword [esi + 0x43c], eax
call fcn.004236c0
mov edx, eax
mov dword [ebp - 0x160], edx
test edx, edx
je case.default.0x420eeb
mov ecx, dword [edx]
mov eax, dword [ecx + 0x1c]
cmp eax, method.UiLib::CCheckBoxUI.virtual_28
jne 0x4204ab
mov eax, dword [edx + 0x40]
jmp 0x4204b5
mov ecx, edx
call eax
mov edx, dword [ebp - 0x160]
cmp eax, esi
jne case.default.0x420eeb
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x134]
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetCapture]
mov edx, dword [ebp - 0x160]
mov ecx, esi
push edx
call fcn.00422340
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x154]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf4], 0xf
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edi, dword [ebp - 0x160]
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push ecx
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x184]
mov dword [esi + 0x430], edi
jmp case.default.0x420eeb
mov ecx, dword [ebp - 0x15c]
mov eax, ecx
shr eax, 0x10
cmp dword [esi + 0x430], 0
movsx edx, cx
cwde
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x164], eax
mov dword [esi + 0x438], edx
mov dword [esi + 0x43c], eax
je case.default.0x420eeb
mov ecx, esi
call fcn.00422360
mov eax, dword [esi + 0x430]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x15c]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf4], 0x10
mov dword [ebp - 0xd8], edi
mov dword [ebp - 0xe0], eax
mov word [ebp - 0xda], di
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x430]
mov dword [ebp - 0xe8], eax
jmp 0x41f92b
mov ecx, dword [ebp - 0x15c]
movsx eax, cx
mov dword [ebp - 0x1c], eax
mov eax, ecx
shr eax, 0x10
cwde
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
push eax
mov dword [esi + 0x438], ecx
push ecx
mov ecx, esi
mov dword [esi + 0x43c], eax
call fcn.004236c0
mov edx, eax
mov dword [ebp - 0x154], edx
test edx, edx
je case.default.0x420eeb
mov ecx, dword [edx]
mov eax, dword [ecx + 0x1c]
cmp eax, method.UiLib::CCheckBoxUI.virtual_28
jne 0x420666
mov eax, dword [edx + 0x40]
jmp 0x420670
mov ecx, edx
call eax
mov edx, dword [ebp - 0x154]
cmp eax, esi
jne case.default.0x420eeb
shr edi, 0x10
xor ecx, ecx
movsx eax, di
xorps xmm0, xmm0
test eax, eax
mov dword [ebp - 0xf4], 0x13
movzx eax, ax
sets cl
shl eax, 0x10
or ecx, eax
mov eax, dword [ebp - 0x15c]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], ecx
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xd4], eax
call fcn.00427d90
mov word [ebp - 0xda], ax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [ebp - 0x154]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
movzx ecx, word [esi + 0x43c]
movzx eax, word [esi + 0x438]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x200
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.default.0x420eeb
mov edx, dword [ebp - 0x15c]
test edx, edx
je case.default.0x420eeb
push edx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41fdb4
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebx + 8]
push ecx
push edi
add eax, 0x2000
push eax
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x160]
mov dword [ecx], eax
mov al, 1
jmp 0x4212b4
mov edx, dword [ebp - 0x15c]
movsx eax, dx
mov dword [ebp - 0x1c], eax
shr edx, 0x10
movsx eax, dx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 4]
mov byte [esi + 0x487], 1
call dword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x40]
mov ecx, dword [esi + 0x41c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x423790
mov eax, dword [eax + 0x174]
call eax
mov edi, eax
test edi, edi
je case.default.0x420eeb
mov ecx, dword [ebp - 0x1c]
xorps xmm0, xmm0
mov eax, dword [ebp - 0x18]
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], ecx
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf4], 0xc
mov dword [ebp - 0xec], edi
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0xf4]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x184]
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
mov eax, dword [edi]
call dword [eax + 0xbc]
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xcc]
cmp word [eax], 0
jne 0x42084c
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xd0], vtable.UiLib::CDuiString.0
cmp eax, ecx
je 0x420845
push eax
call fcn.0049b90f
add esp, 4
mov al, 1
jmp 0x4212b4
push 0x30
lea eax, [esi + 0x10]
push 0
push eax
call fcn.00498020
mov eax, dword [esi + 4]
add esp, 0xc
mov ecx, dword [0x4e90bc]
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0xcc]
mov dword [esi + 0x34], eax
mov dword [esi + 0x10], 0x30
mov dword [esi + 0x14], 1
mov dword [esi + 0x30], ecx
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
cmp eax, method.UiLib::CCheckBoxUI.virtual_68
jne 0x420899
lea eax, [edi + 0x1ec]
jmp 0x4208a3
mov ecx, edi
call eax
mov ecx, dword [0x4e90bc]
cmp dword [esi + 0xc], 0
movups xmm0, xmmword [eax]
movups xmmword [esi + 0x20], xmm0
jne 0x4208f5
push 0
push ecx
push 0
push dword [esi + 4]
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push reloc.WS2_32.dll_closesocket
push 0
push str.Tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [esi + 0x10]
mov dword [esi + 0xc], eax
push ecx
push 0
push 0x432
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi]
mov eax, dword [eax + 0xc8]
cmp eax, method.UiLib::CCheckBoxUI.virtual_200
jne 0x42090c
mov eax, dword [edi + 0xc18]
jmp 0x420910
mov ecx, edi
call eax
push eax
push 0
push 0x418
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea edi, [esi + 0x10]
push edi
push 0
push 0x436
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
push 1
push 0x411
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd0], vtable.UiLib::CDuiString.0
cmp eax, ecx
je case.default.0x420eeb
push eax
call fcn.0049b90f
add esp, 4
jmp case.default.0x420eeb
cmp ecx, 0xa90
ja 0x420edc
je 0x420e44
add ecx, 0xfffffd5f
cmp ecx, 0x77
ja case.default.0x420eeb
movzx eax, byte [ecx + 0x4214d8]
jmp dword [eax*4 + 0x4214c4]
lea eax, [ebp - 0x24]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [edi]
push eax
mov dword [ebp - 0x168], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov edx, dword [esi + 0x69c]
mov dword [ebp - 0x154], eax
mov ecx, dword [edx]
mov eax, dword [ecx + 0x18]
cmp eax, method.UiLib::CUIRenderCore.virtual_24
jne 0x4209ef
mov ecx, dword [edx + 4]
test ecx, ecx
je 0x4209f8
mov eax, dword [ecx]
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
call dword [eax + 0x30]
jmp 0x4209f8
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
mov ecx, edx
call eax
mov ecx, dword [esi + 0x41c]
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ecx]
call dword [eax + 0x1a8]
mov ecx, dword [esi + 0x69c]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov eax, dword [esi + 0x69c]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x420a7a
mov eax, dword [ecx]
mov eax, dword [eax + 0x20]
call eax
test al, al
je 0x420a7a
push 0xffffffffffffffec
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfff7ffff
push eax
push 0xffffffffffffffec
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push 0xcc0020
push 0
push 0
push dword [ebp - 0x168]
push eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
push eax
push 0
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
test byte [ebp - 0x15c], 0x10
je 0x420b14
push 5
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x160], eax
test eax, eax
je 0x420b14
or dword [ebp - 0x15c], 2
lea ecx, [ebp - 0x34]
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x34], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea eax, [ebp - 0x34]
push eax
push dword [esi + 4]
push 0
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x30]
push 0
neg eax
push eax
mov eax, dword [ebp - 0x34]
neg eax
push eax
push dword [ebp - 0x168]
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push dword [ebp - 0x15c]
push edi
push 0x317
push dword [ebp - 0x160]
call dword [sym.imp.USER32.dll_SendMessageW]
push 2
push dword [ebp - 0x160]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x160], eax
test eax, eax
jne 0x420aa7
push dword [ebp - 0x154]
push dword [ebp - 0x168]
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp case.default.0x420eeb
mov edx, dword [ebp - 0x15c]
movsx eax, dx
shr edx, 0x10
movsx ecx, dx
push ecx
mov dword [ebp - 0x164], ecx
mov ecx, esi
push eax
mov byte [esi + 0x487], 1
mov dword [ebp - 0x154], eax
call fcn.004236c0
mov edi, eax
test edi, edi
je case.default.0x420eeb
mov eax, dword [ebp - 0x154]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x164]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf4], 0xc
mov dword [ebp - 0xec], edi
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov dword [ebp - 0xe8], eax
lea ecx, [ebp - 0xf4]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x184]
lea eax, [ebp - 0xd0]
mov ecx, edi
push eax
mov eax, dword [edi]
call dword [eax + 0xbc]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0xcc]
cmp word [eax], 0
je 0x420cd8
push 0x30
lea eax, [esi + 0x10]
push 0
push eax
call fcn.00498020
mov eax, dword [esi + 4]
add esp, 0xc
mov ecx, dword [0x4e90bc]
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0xcc]
mov dword [esi + 0x34], eax
mov dword [esi + 0x10], 0x30
mov dword [esi + 0x14], 1
mov dword [esi + 0x30], ecx
mov eax, dword [edi]
mov eax, dword [eax + 0x44]
cmp eax, method.UiLib::CCheckBoxUI.virtual_68
jne 0x420c2b
lea eax, [edi + 0x1ec]
jmp 0x420c35
mov ecx, edi
call eax
mov ecx, dword [0x4e90bc]
cmp dword [esi + 0xc], 0
movups xmm0, xmmword [eax]
movups xmmword [esi + 0x20], xmm0
jne 0x420c87
push 0
push ecx
push 0
push dword [esi + 4]
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push reloc.WS2_32.dll_closesocket
push 0
push str.Tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [esi + 0x10]
mov dword [esi + 0xc], eax
push ecx
push 0
push 0x432
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi]
mov eax, dword [eax + 0xc8]
cmp eax, method.UiLib::CCheckBoxUI.virtual_200
jne 0x420c9e
mov eax, dword [edi + 0xc18]
jmp 0x420ca2
mov ecx, edi
call eax
push eax
push 0
push 0x418
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea edi, [esi + 0x10]
push edi
push 0
push 0x436
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
push edi
push 1
push 0x411
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0xd0]
call fcn.00424110
mov al, 1
jmp 0x4212b4
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
mov dword [ebp - 0x18], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x48]
xorps xmm0, xmm0
push eax
push dword [esi + 4]
movups xmmword [ebp - 0x48], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_InflateRect]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x420d3d
lea eax, [esi + 0x10]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push dword [ebp - 0x18]
lea eax, [ebp - 0x48]
push dword [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x420dc8
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
movsx ecx, ax
shr eax, 0x10
cwde
movups xmmword [ebp - 0xe4], xmm0
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0xf4]
push eax
push dword [esi + 0x42c]
movups xmmword [ebp - 0xf4], xmm0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xe4], ecx
call fcn.00424380
cmp dword [esi + 0x430], 0
mov dword [esi + 0x42c], 0
je 0x420db8
mov dword [esi + 0x430], 0
cmp dword [esi + 0x428], 0
jne 0x420dc8
mov byte [esi + 0x488], 0
mov byte [esi + 0x487], 0
jmp case.default.0x420eeb
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
mov dword [ebp - 0x18], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x48]
xorps xmm0, xmm0
push eax
push dword [esi + 4]
movups xmmword [ebp - 0x48], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_InflateRect]
push dword [ebp - 0x18]
lea eax, [ebp - 0x48]
push dword [ebp - 0x1c]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x420dc8
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x420d55
lea eax, [esi + 0x10]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x420d55
cmp byte [0x4e91e4], 0
je 0x420e99
call fcn.00435280
push 0x40
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.00498020
add esp, 0xc
lea eax, [ebp - 0x110]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x110]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_EndPaint]
push 0
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x4212b4
mov eax, dword [0x4e91ec]
sub eax, dword [0x4e91e8]
sar eax, 2
test eax, eax
je 0x41f16a
push dword [esi + 4]
call fcn.00434c70
push dword [esi + 4]
call fcn.004350c0
test al, al
jne 0x420ec8
call fcn.00434fa0
push 1
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x4212b4
add ecx, 0xffff7fff
cmp ecx, 3
ja case.default.0x420eeb
jmp dword [ecx*4 + 0x421550]
xor edi, edi
cmp dword [esi + 0x564], edi
jle 0x420f1c
nop dword [eax]
mov eax, dword [esi + 0x560]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x420f13
mov eax, dword [ecx]
push 1
call dword [eax]
inc edi
cmp edi, dword [esi + 0x564]
jl 0x420f00
mov eax, dword [esi + 0x560]
test eax, eax
je 0x420f2f
push eax
call fcn.0049b90f
add esp, 4
mov dword [esi + 0x560], 0
mov dword [esi + 0x568], 0
mov dword [esi + 0x564], 0
jmp case.default.0x420eeb
mov ecx, dword [esi + 0x420]
test ecx, ecx
jne 0x420f6e
push dword [esi + 0x424]
mov ecx, esi
call fcn.00421be0
jmp case.default.0x420eeb
mov eax, dword [ecx]
push str.Edit
mov eax, dword [eax + 0x10]
call eax
test eax, eax
jne 0x420f98
mov ecx, dword [esi + 0x420]
push str.ComboBox
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
call eax
test eax, eax
je case.default.0x420eeb
mov eax, dword [esi + 0x420]
xorps xmm0, xmm0
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xf4], 0x16
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xec], eax
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov ecx, dword [esi + 0x420]
lea edx, [ebp - 0xf4]
mov dword [ebp - 0xe8], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x184]
push ecx
push 0
push 0
push str.setfocus
push dword [esi + 0x420]
mov ecx, esi
call fcn.004229a0
jmp case.default.0x420eeb
mov eax, dword [esi + 0x6a4]
mov ecx, dword [eax]
mov dword [ebp - 0x154], ecx
cmp ecx, eax
je 0x4210db
cmp dword [edi + 0x14], 8
jb 0x42101c
mov eax, dword [edi]
jmp 0x42101e
mov eax, edi
mov ecx, dword [ecx + 0x14]
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x421047
test dx, dx
je 0x421043
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x421047
add ecx, 4
add eax, 4
test dx, dx
jne 0x421021
xor eax, eax
jmp 0x42104c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4210be
mov edi, dword [edi + 0x18]
test edi, edi
je 0x41f16a
push dword [edi + 0xc]
lea eax, [edi + 0x40]
mov ecx, esi
push dword [edi + 8]
push eax
call fcn.00423370
test eax, eax
je 0x4210b8
mov eax, dword [edi + 8]
test eax, eax
je 0x421087
push eax
call fcn.00493645
add esp, 4
mov dword [edi + 8], 0
cmp dword [edi + 0x34], 0
mov byte [edi + 0x21], 1
mov dword [ebp - 0x160], 0
jle 0x4210b8
mov esi, dword [ebp - 0x160]
mov ecx, dword [edi + 0x30]
mov ecx, dword [ecx + esi*4]
call fcn.00441240
inc esi
cmp esi, dword [edi + 0x34]
jl 0x4210a1
mov esi, dword [ebp - 0x164]
mov edi, dword [ebp - 0x168]
lea ecx, [ebp - 0x154]
call fcn.00404200
mov ecx, dword [ebp - 0x154]
cmp ecx, dword [esi + 0x6a4]
jne 0x421012
mov ecx, dword [esi + 0x6b0]
test ecx, ecx
je 0x41f16a
push edi
call fcn.00434ae0
mov al, 1
jmp 0x4212b4
mov eax, dword [esi + 0x6a4]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
cmp eax, dword [esi + 0x6a4]
je 0x4210db
nop dword [eax]
cmp dword [edi + 0x14], 8
jb 0x42111a
mov ecx, dword [edi]
jmp 0x42111c
mov ecx, edi
mov eax, dword [eax + 0x14]
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x421146
test dx, dx
je 0x421142
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x421146
add eax, 4
add ecx, 4
test dx, dx
jne 0x421120
xor eax, eax
jmp 0x42114b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x421242
mov eax, dword [edi + 0x18]
mov dword [ebp - 0x16c], eax
test eax, eax
je 0x41f16a
xor ecx, ecx
mov dword [ebp - 0x154], ecx
cmp dword [eax + 0x34], ecx
jle 0x421242
cmp dword [ebp - 0x15c], ecx
mov esi, eax
setne al
mov byte [ebp - 0x3c], al
lea edx, [esi + 0x54]
mov eax, dword [esi + 0x30]
sub esp, 0x18
mov dword [ebp - 0x18], esp
mov eax, dword [eax + ecx*4]
mov ecx, esp
mov dword [ebp - 0x16c], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x4211c0
mov eax, dword [ecx]
jmp 0x4211c2
mov eax, ecx
push 0xffffffffffffffff
xor edi, edi
push edi
push edx
mov word [eax], di
call fcn.004037e0
sub esp, 0x18
mov dword [ebp - 4], edi
mov ecx, esp
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], edi
jb 0x4211f2
mov eax, dword [ecx]
jmp 0x4211f4
mov eax, ecx
mov edi, dword [ebp - 0x168]
xor edx, edx
push 0xffffffffffffffff
push edx
push edi
mov word [eax], dx
call fcn.004037e0
mov ecx, dword [ebp - 0x16c]
push dword [esi + 0x2c]
push dword [ebp - 0x3c]
mov eax, dword [ecx]
mov dword [ebp - 4], 0xffffffff
call dword [eax + 0x170]
mov ecx, dword [ebp - 0x154]
lea edx, [esi + 0x54]
inc ecx
mov dword [ebp - 0x154], ecx
cmp ecx, dword [esi + 0x34]
jl 0x421186
mov esi, dword [ebp - 0x164]
lea ecx, [ebp - 0x160]
call fcn.00404200
mov eax, dword [ebp - 0x160]
cmp eax, dword [esi + 0x6a4]
jne 0x421110
jmp 0x4210db
mov ecx, dword [edi + 0x8c]
lea eax, [edi + 0x90]
mov dword [edi + 0x88], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x421287
push ecx
call fcn.0049b90f
add esp, 4
mov ecx, dword [edi + 4]
lea eax, [edi + 8]
mov dword [edi], vtable.UiLib::CDuiString.0
cmp ecx, eax
je 0x4212a0
push ecx
call fcn.0049b90f
add esp, 4
push 0x128
push edi
call fcn.004933d3
add esp, 8
mov al, 1
jmp 0x4212b4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00493122
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10