Function at 0x504ccf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x104
push ebx
push ebp
mov ebp, dword [esp + 0x110]
push esi
mov esi, ecx
mov al, byte [esi + 0x185]
xor ebx, ebx
mov byte [esi + 0x184], al
push edi
mov dword [0x6b95ec], ebx
mov edi, dword [ebp + 4]
cmp edi, 0x200
mov byte [esp + 0x13], bl
mov byte [esp + 0x12], bl
mov dword [esp + 0x14], ebx
jg 0x505244
je 0x504e85
cmp edi, 0x10d
jg 0x504dba
je case.0x50525c.642
lea eax, [edi - 6]
cmp eax, 0x4b
ja case.0x50525c.517
movzx ecx, byte [eax + 0x5063b4]
jmp dword [ecx*4 + 0x50639c]
mov eax, dword [ebp + 8]
cmp ax, 1
je 0x504d47
cmp ax, 2
jne case.0x50525c.514
mov eax, dword [esi + 0x150]
cmp eax, ebx
je 0x504d59
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x6c]
mov eax, 0xf4240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
mov edi, dword [0x6bd784]
cmp edi, ebx
je 0x504d89
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
cmp edi, dword [eax + 0x5c]
je 0x504d89
push edi
mov ecx, esi
call fcn.0050a5c0
mov dword [0x6bd784], ebx
jmp case.0x50525c.517
cmp dword [0x6b9444], ebx
je case.0x50525c.517
mov ecx, dword [0x6b87a4]
mov byte [ecx], bl
mov eax, 0xf4240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
add edi, 0xfffffef1
cmp edi, 0x12
ja case.0x50525c.517
movzx edx, byte [edi + 0x506414]
jmp dword [edx*4 + 0x506400]
push 1
mov byte [0x6bd150], bl
call fcn.004c9380
add esp, 4
test al, al
je 0x504e60
mov eax, dword [ebp + 8]
mov dword [0x6bd154], eax
jmp case.0x50525c.517
cmp dword [0x6bd154], ebx
je case.0x50525c.517
cmp dword [ebp + 8], 2
jne case.0x50525c.517
push 1
call fcn.004c9380
add esp, 4
test al, al
jne case.0x50525c.517
cmp byte [0x6bd150], bl
je 0x504e60
push ebx
push str.32768
push ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowExA]
mov edi, eax
cmp edi, ebx
je 0x504e60
mov ebp, dword [sym.imp.USER32.dll_PostMessageA]
push 0x11c0001
push 0xd
push pe_nt_image_headers32
push edi
call ebp
push 0xc11c0001
push 0xd
push 0x101
push edi
call ebp
mov dword [0x6bd154], ebx
jmp case.0x50525c.517
xor ecx, ecx
mov cx, word [ebp + 0xa]
test ecx, 0x8000
seta dl
mov byte [0x6bd150], dl
jmp case.0x50525c.517
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x504e9d
cmp eax, edi
jne 0x504e9d
inc dword [esi + 0x18]
jmp 0x504ebb
cmp byte [esi + 5], bl
je 0x504eae
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x504eb5
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
mov ecx, dword [esi + 0x54]
cmp ecx, ebx
lea eax, [esi + 0x54]
lea edi, [esi + 0x4c]
je 0x504eca
mov edi, eax
mov ecx, dword [esi + 0x50]
cmp ecx, ebx
lea eax, [esi + 0x50]
je 0x504ed6
mov edi, eax
mov eax, dword [edi]
cmp eax, ebx
je 0x50508d
mov dword [esp + 0x14], eax
cmp byte [eax + 0x213], bl
jne 0x504ef4
cmp dword [eax + 0x244], ebx
jne 0x504ef8
mov dword [esp + 0x14], ebx
movsx eax, word [ebp + 0xc]
movsx ecx, word [ebp + 0xe]
mov dword [esp + 0x18], eax
mov dword [esp + 0x48], 0x3f800000
fild dword [esp + 0x18]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x28]
fstp dword [esp + 0x1c]
mov dword [esp + 0x4c], 0
fild dword [esp + 0x18]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], vtable.ytUIEvent.0
call fcn.004e1fa0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x7c], edx
mov dword [esp + 0x30], 3
je 0x50505b
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x505057
mov ebp, dword [esp + 0x14]
mov ecx, dword [edi]
cmp ebp, ecx
mov byte [esp + 0x12], 1
je 0x505008
cmp ecx, ebx
je 0x504ffb
mov edx, dword [ecx]
call dword [edx + 4]
cmp ebp, ebx
mov dword [edi], ebp
je 0x505008
mov eax, dword [ebp]
mov ecx, ebp
call dword [eax]
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], vtable.ytUIEvent.0
call fcn.004039f0
mov dword [esp + 0x88], ebx
cmp dword [esi + 0x18], ebx
je 0x50503c
cmp dword [esi + 0x14], ebx
je 0x50503c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x14], eax
je 0x5058fe
mov dword [esi + 0x14], ebx
cmp byte [esi + 5], bl
je 0x505238
lea ecx, [esi + 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x50525c.517
mov eax, dword [esp + 0x14]
mov ecx, dword [edi]
cmp eax, ecx
mov ebp, eax
je 0x505079
cmp ecx, ebx
je 0x50506c
mov eax, dword [ecx]
call dword [eax + 4]
cmp ebp, ebx
mov dword [edi], ebp
je 0x505079
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx]
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], vtable.ytUIEvent.0
call fcn.004039f0
cmp dword [esi + 0x140], ebx
je 0x5051c1
mov eax, dword [esi + 0x4c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x18], ecx
mov ebp, vtable.ytUIEvent.0
fild dword [esp + 0x18]
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x28]
fstp dword [esp + 0x1c]
mov dword [esp + 0x48], 0x3f800000
fild dword [esp + 0x18]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], ebp
call fcn.004e1fa0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x14]
mov dword [esp + 0x7c], eax
push edx
lea eax, [esp + 0x2c]
mov dword [esp + 0x84], ecx
mov ecx, dword [esi + 0x140]
push eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x38], 2
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x505190
mov byte [esp + 0x12], 1
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x4c]
cmp edi, ecx
je 0x5051b1
cmp ecx, ebx
je 0x5051a4
mov edx, dword [ecx]
call dword [edx + 4]
cmp edi, ebx
mov dword [esi + 0x4c], edi
je 0x5051b1
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], ebp
call fcn.004039f0
mov eax, dword [esp + 0x118]
mov edx, dword [esi]
lea ecx, [esp + 0x104]
mov byte [esi + 0x186], bl
movsx edi, word [eax + 0xc]
movsx ebp, word [eax + 0xe]
push ecx
mov ecx, esi
call dword [edx + 0x1c]
mov ecx, eax
call fcn.004d7d40
cmp edi, dword [eax]
jl 0x505204
cmp edi, dword [eax + 8]
jge 0x505204
cmp ebp, dword [eax + 4]
jl 0x505204
cmp ebp, dword [eax + 0xc]
mov byte [esp + 0x13], 1
jl 0x505208
mov byte [esp + 0x13], bl
cmp dword [esi + 0x18], ebx
je 0x505221
cmp dword [esi + 0x14], ebx
je 0x505221
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x14], eax
je 0x5058fe
mov dword [esi + 0x14], ebx
cmp byte [esi + 5], bl
je 0x505238
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp case.0x50525c.517
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
jmp case.0x50525c.517
lea eax, [edi - 0x201]
cmp eax, 0x87
ja case.0x50525c.517
movzx eax, byte [eax + 0x506448]
jmp dword [eax*4 + 0x506428]
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call ebp
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x50527d
cmp eax, edi
jne 0x50527d
inc dword [esi + 0x18]
jmp 0x50529b
cmp byte [esi + 5], bl
je 0x50528e
lea ecx, [esi + 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x505295
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
je 0x5052aa
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esi + 0x4c], ebx
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x28]
fild dword [esp + 0x18]
mov dword [esp + 0x18], edx
mov dword [esp + 0x48], 0x3f800000
fstp dword [esp + 0x1c]
mov dword [esp + 0x4c], 0
fild dword [esp + 0x18]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], vtable.ytUIEvent.0
call fcn.004e1fa0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x80], ecx
mov ecx, dword [esi + 0x140]
cmp ecx, ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x30], 0xd
je 0x5053b6
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x5053b6
cmp dword [esp + 0x14], ebx
mov byte [esp + 0x12], 1
je 0x5053b6
mov eax, dword [esi + 0x40]
cmp eax, ebx
je 0x5053bc
mov ecx, dword [eax + 0x5c]
push ecx
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x5053bc
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x4c]
cmp edi, ecx
je 0x5053dd
cmp ecx, ebx
je 0x5053d0
mov edx, dword [ecx]
call dword [edx + 4]
cmp edi, ebx
mov dword [esi + 0x4c], edi
je 0x5053dd
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lea ecx, [esp + 0x88]
mov byte [esp + 0x13], 1
mov dword [esp + 0x28], vtable.ytUIEvent.0
call fcn.004039f0
mov dword [esp + 0x88], ebx
cmp dword [esi + 0x18], ebx
je 0x50503c
cmp dword [esi + 0x14], ebx
je 0x50503c
call ebp
cmp dword [esi + 0x14], eax
jne 0x50503c
jmp 0x5058fe
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x505437
cmp eax, edi
jne 0x505437
inc dword [esi + 0x18]
jmp 0x505455
cmp byte [esi + 5], bl
je 0x505448
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x50544f
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
je 0x505464
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esi + 0x4c], ebx
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x18], ecx
mov ebp, vtable.ytUIEvent.0
fild dword [esp + 0x18]
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x28]
fstp dword [esp + 0x1c]
mov dword [esp + 0x48], 0x3f800000
fild dword [esp + 0x18]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], ebp
call fcn.004e1fa0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x80], ecx
mov ecx, dword [esi + 0x140]
cmp ecx, ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x30], 1
je 0x50556f
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x50556f
cmp dword [esp + 0x14], ebx
je 0x50556a
mov eax, dword [esi + 0x40]
cmp eax, ebx
je 0x50556a
mov ecx, dword [eax + 0x5c]
push ecx
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [esp + 0x12], 1
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x4c]
cmp edi, ecx
je 0x505590
cmp ecx, ebx
je 0x505583
mov edx, dword [ecx]
call dword [edx + 4]
cmp edi, ebx
mov dword [esi + 0x4c], edi
je 0x505590
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lea ecx, [esp + 0x88]
mov byte [esp + 0x13], 1
mov dword [esp + 0x28], ebp
call fcn.004039f0
mov dword [esp + 0x88], ebx
cmp dword [esi + 0x18], ebx
je 0x50503c
cmp dword [esi + 0x14], ebx
je 0x50503c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x14], eax
jne 0x50503c
jmp 0x5058fe
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call ebp
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x5055ec
cmp eax, edi
jne 0x5055ec
inc dword [esi + 0x18]
jmp 0x50560a
cmp byte [esi + 5], bl
je 0x5055fd
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x505604
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
cmp dword [esi + 0x4c], ebx
je 0x505628
cmp dword [esi + 0x18], ebx
je 0x505221
cmp dword [esi + 0x14], ebx
je 0x505221
call ebp
jmp 0x505218
mov ecx, dword [esi + 0x54]
cmp ecx, ebx
je 0x505637
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esi + 0x54], ebx
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x18], ecx
mov ebp, vtable.ytUIEvent.0
fild dword [esp + 0x18]
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x28]
fstp dword [esp + 0x1c]
mov dword [esp + 0x48], 0x3f800000
fild dword [esp + 0x18]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], ebp
call fcn.004e1fa0
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x80], ecx
mov ecx, dword [esi + 0x140]
cmp ecx, ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x30], 7
je 0x505742
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x505742
cmp dword [esp + 0x14], ebx
je 0x50573d
mov eax, dword [esi + 0x40]
cmp eax, ebx
je 0x50573d
mov ecx, dword [eax + 0x5c]
push ecx
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [esp + 0x12], 1
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x54]
cmp edi, ecx
je 0x505763
cmp ecx, ebx
je 0x505756
mov edx, dword [ecx]
call dword [edx + 4]
cmp edi, ebx
mov dword [esi + 0x54], edi
je 0x505763
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, dword [esi + 0x4c]
cmp eax, ebx
mov byte [esp + 0x13], 1
je 0x5058c6
mov dword [esp + 0x14], eax
cmp dword [0x6b9444], ebx
jne 0x5058b7
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x94]
fild dword [esp + 0x18]
mov dword [esp + 0x18], edx
mov dword [esp + 0xb4], 0x3f800000
fstp dword [esp + 0x1c]
mov dword [esp + 0xb8], 0
fild dword [esp + 0x18]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
fstp dword [esp + 0x20]
mov dword [esp + 0xc4], 0x3f800000
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0x3f800000
mov byte [esp + 0xd8], 1
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x94], ebp
call fcn.004e1fa0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x14]
mov dword [esp + 0xe8], eax
push edx
lea eax, [esp + 0x98]
mov dword [esp + 0xf0], ecx
mov ecx, dword [esi + 0x4c]
push eax
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xa4], 4
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x5058a4
mov byte [esp + 0x12], 1
lea ecx, [esp + 0xf4]
mov dword [esp + 0x94], ebp
call fcn.004039f0
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
je 0x5058c6
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [esi + 0x4c], ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], ebp
call fcn.004039f0
mov dword [esp + 0x88], ebx
cmp dword [esi + 0x18], ebx
je 0x505221
cmp dword [esi + 0x14], ebx
je 0x505221
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x14], eax
jne 0x505221
dec dword [esi + 0x18]
mov ecx, dword [esi + 0x170]
cmp ecx, ebx
je case.0x50592c.72
mov edx, dword [esp + 0x118]
mov eax, dword [edx + 4]
add eax, 0xffffffb9
cmp eax, 0x5b
ja case.0x50592c.72
movzx eax, byte [eax + 0x5064d8]
jmp dword [eax*4 + 0x5064d0]
cmp edi, 0x204
sete byte [esp + 0x93]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebp, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x505959
cmp eax, ebp
jne 0x505959
inc dword [esi + 0x18]
jmp 0x505977
cmp byte [esi + 5], bl
je 0x50596a
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x505971
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], ebp
cmp edi, 0x1c
jne 0x505a15
mov eax, dword [esp + 0x118]
mov eax, dword [eax + 8]
cmp eax, ebx
mov byte [0x6b9434], al
jne 0x5059a9
mov eax, dword [esi + 0x14c]
cmp eax, ebx
je 0x5059a9
push eax
lea ecx, [esi + 0x150]
call fcn.0044dc50
cmp dword [esi + 0x4c], ebx
jne 0x505a15
cmp dword [esi + 0x18], ebx
je 0x5059d8
cmp dword [esi + 0x14], ebx
je 0x5059d8
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x14], eax
jne 0x5059d8
dec dword [esi + 0x18]
mov eax, 0xf4240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
cmp byte [esi + 5], bl
mov dword [esi + 0x14], ebx
je 0x5059fc
add esi, 0x1c
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, 0xf4240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
mov eax, 0xf4240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
call dword [sym.imp.USER32.dll_ReleaseCapture]
cmp edi, 6
mov cl, byte [0x6b9444]
je 0x505a2b
cmp edi, 0x1c
jne 0x505a2d
xor cl, cl
mov eax, dword [esi + 0x4c]
cmp eax, ebx
je 0x505b80
cmp cl, bl
jne 0x505b80
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], ebx
call fcn.0044dc50
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
je 0x505a5d
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esi + 0x4c], ebx
mov ebp, dword [esp + 0x118]
movsx ecx, word [ebp + 0xc]
movsx edx, word [ebp + 0xe]
mov dword [esp + 0x24], ecx
mov edi, vtable.ytUIEvent.0
fild dword [esp + 0x24]
mov dword [esp + 0x24], edx
lea ecx, [esp + 0x28]
fstp dword [esp + 0x1c]
mov dword [esp + 0x48], 0x3f800000
fild dword [esp + 0x24]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
fstp dword [esp + 0x20]
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x3f800000
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], edi
call fcn.004e1fa0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x14]
mov dword [esp + 0x7c], eax
push edx
lea eax, [esp + 0x2c]
mov dword [esp + 0x84], ecx
mov ecx, dword [esp + 0x1c]
push eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x38], 4
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x505b4b
mov byte [esp + 0x12], 1
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
je 0x505b5a
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [esi + 0x4c], ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], edi
call fcn.004039f0
mov ecx, dword [esp + 0x18]
cmp ecx, ebx
mov dword [esp + 0x88], ebx
je 0x505b8c
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x505b8c
mov ebp, dword [esp + 0x118]
mov edi, vtable.ytUIEvent.0
cmp dword [esi + 0x4c], ebx
jne 0x505ba1
cmp dword [ebp + 4], 0x202
jne 0x505ba1
mov byte [esi + 0x184], 1
cmp byte [esp + 0x93], bl
mov byte [esp + 0x13], 1
je 0x5055ac
mov ecx, dword [esi + 0x50]
cmp ecx, ebx
mov dword [esp + 0x14], ebx
je 0x505bc6
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [esi + 0x50], ebx
movsx eax, word [ebp + 0xc]
movsx ecx, word [ebp + 0xe]
mov dword [esp + 0x24], eax
mov dword [esp + 0xb4], 0x3f800000
fild dword [esp + 0x24]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x94]
fstp dword [esp + 0x1c]
mov dword [esp + 0xb8], 0
fild dword [esp + 0x24]
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
fstp dword [esp + 0x20]
mov dword [esp + 0xc4], 0x3f800000
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0x3f800000
mov byte [esp + 0xd8], 1
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x94], edi
call fcn.004e1fa0
mov ecx, dword [esi + 0x140]
cmp ecx, ebx
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xe8], edx
mov dword [esp + 0xec], eax
mov dword [esp + 0x9c], 5
je 0x505cea
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x98]
push eax
call fcn.004e0f40
cmp eax, 0xf4242
jne 0x505cea
xor edi, edi
mov dword [esp + 0x14], edi
jmp 0x505cee
mov edi, dword [esp + 0x14]
mov ecx, dword [esi + 0x50]
cmp edi, ecx
je 0x505d0b
cmp ecx, ebx
je 0x505cfe
mov edx, dword [ecx]
call dword [edx + 4]
cmp edi, ebx
mov dword [esi + 0x50], edi
je 0x505d0b
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
mov eax, dword [esi + 0x50]
cmp eax, ebx
je 0x505d33
mov edx, dword [esi]
push eax
push ebp
mov ecx, esi
mov dword [esp + 0x1c], eax
call dword [edx + 0x44]
mov ecx, dword [esi + 0x50]
cmp ecx, ebx
je 0x505d2e
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esi + 0x50], ebx
mov byte [esp + 0x12], 1
lea ecx, [esp + 0xf4]
mov byte [esp + 0x13], 1
mov dword [esp + 0x94], vtable.ytUIEvent.0
call fcn.004039f0
jmp 0x5055ac
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call ebp
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x505d6e
cmp eax, edi
jne 0x505d6e
inc dword [esi + 0x18]
jmp 0x505d8c
cmp byte [esi + 5], bl
je 0x505d7f
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x505d86
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
cmp dword [esi + 0x54], ebx
je 0x505eea
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esi + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xc]
movsx edx, word [eax + 0xe]
mov dword [esp + 0x24], ecx
mov edi, vtable.ytUIEvent.0
fild dword [esp + 0x24]
mov dword [esp + 0x24], edx
lea ecx, [esp + 0x94]
fstp dword [esp + 0x1c]
mov dword [esp + 0xb4], 0x3f800000
fild dword [esp + 0x24]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
fstp dword [esp + 0x20]
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0x3f800000
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0x3f800000
mov byte [esp + 0xd8], 1
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 0
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x94], edi
call fcn.004e1fa0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x14]
mov dword [esp + 0xe8], eax
push edx
lea eax, [esp + 0x98]
mov dword [esp + 0xf0], ecx
mov ecx, dword [esi + 0x54]
push eax
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xa4], 8
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x505ec8
mov byte [esp + 0x12], 1
mov ecx, dword [esi + 0x54]
cmp ecx, ebx
je 0x505ed7
mov edx, dword [ecx]
call dword [edx + 4]
mov dword [esi + 0x54], ebx
lea ecx, [esp + 0xf4]
mov dword [esp + 0x94], edi
call fcn.004039f0
cmp dword [esi + 0x18], ebx
mov byte [esp + 0x13], 1
je 0x505221
cmp dword [esi + 0x14], ebx
je 0x505221
call ebp
jmp 0x5058f5
push 1
call fcn.004c9380
add esp, 4
test al, al
jne case.0x50525c.517
push 1
call fcn.004c93d0
add esp, 4
test al, al
jne case.0x50525c.517
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call ebp
mov edi, eax
mov eax, dword [esi + 0x14]
cmp eax, ebx
je 0x505f46
cmp eax, edi
jne 0x505f46
inc dword [esi + 0x18]
jmp 0x505f64
cmp byte [esi + 5], bl
je 0x505f57
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x505f5e
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x10]
mov dword [esi + 0x18], ebx
mov dword [esi + 0x14], edi
mov eax, dword [esp + 0x118]
movsx ecx, word [eax + 0xa]
movsx edx, word [eax + 0xc]
movsx eax, word [eax + 0xe]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
fild dword [esp + 0x24]
mov eax, dword [esi + 0x40]
cmp eax, ebx
mov dword [esp + 0x1c], edx
fmul dword [0x662a9c]
fstp dword [esp + 0x24]
je 0x505fa7
mov edx, dword [eax + 0x5c]
lea ecx, [esp + 0x1c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ScreenToClient]
fild dword [esp + 0x1c]
mov edi, vtable.ytUIEvent.0
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], 0x3f800000
fstp dword [esp + 0xfc]
mov dword [esp + 0x4c], 0
fild dword [esp + 0x20]
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0x3f800000
fstp dword [esp + 0x100]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0x3f800000
mov byte [esp + 0x6c], 1
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], ebx
mov dword [esp + 0x28], edi
call fcn.004e1fa0
fld dword [esp + 0x24]
mov ecx, dword [esp + 0x100]
fstp qword [esp + 0x38]
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x80], ecx
mov ecx, dword [esi + 0x140]
cmp ecx, ebx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x30], 0xe
je 0x506094
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x2c]
push eax
call fcn.004e0f40
cmp eax, 0xf4240
jne 0x506094
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x88]
mov dword [esp + 0x28], edi
call fcn.004039f0
mov dword [esp + 0x88], ebx
cmp dword [esi + 0x18], ebx
je 0x50503c
cmp dword [esi + 0x14], ebx
je 0x50503c
call ebp
jmp 0x5055c4
mov ecx, dword [esi + 0x168]
cmp ecx, ebx
je case.0x50525c.517
lea edx, [esp + 0x24]
push edx
lea edx, [esp + 0x2c]
mov dword [esp + 0x3c], 0
mov esi, vtable.ytUIEvent.0
push edx
mov dword [esp + 0x50], 0x3f800000
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0x3f800000
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0x3f800000
mov byte [esp + 0x74], 1
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x90], ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x44], 0
mov byte [esp + 0x94], bl
mov byte [esp + 0x95], bl
mov byte [esp + 0x8c], bl
mov dword [esp + 0x78], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x38], 0x1a
mov dword [esp + 0x2c], ebx
mov eax, dword [ecx]
push ecx
call dword [eax + 0x74]
mov dword [esp + 0x28], esi
mov edi, eax
mov eax, dword [esp + 0x88]
cmp eax, ebx
je 0x50630a
mov ecx, dword [eax]
and ecx, 0xff
cmp ecx, 0x80
mov esi, eax
jae 0x50630a
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
and eax, 0xff
cmp eax, 0x7f
jne 0x5062f6
mov edx, dword [esi]
and edx, 0xff
cmp edx, 0x80
jae 0x5062f1
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
and eax, 0xff
jmp 0x5062f6
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x3c], 0
push eax
mov dword [esp + 0x50], 0x3f800000
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0x3f800000
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0x3f800000
mov byte [esp + 0x74], 1
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x90], ebx
mov dword [esp + 0x30], vtable.ytUIEvent.0
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x44], 0
mov byte [esp + 0x94], bl
mov byte [esp + 0x95], bl
mov byte [esp + 0x8c], bl
mov dword [esp + 0x78], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x40], edx
mov dword [esp + 0x38], 0x19
mov dword [esp + 0x2c], ebx
mov edx, dword [ecx]
push ecx
call dword [edx + 0x74]
mov dword [esp + 0x28], vtable.ytUIEvent.0
jmp 0x5061ad
mov eax, 0xff
cmp eax, ebx
jne 0x50630a
mov eax, dword [esp + 0x88]
push eax
call fcn.00499410
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104
ret 4
cmp byte [esp + 0x13], bl
je 0x506336
cmp byte [esi + 0x184], bl
jne 0x506336
cmp byte [esi + 0x186], bl
jne 0x506336
mov ecx, esi
call fcn.00509830
cmp byte [esi + 0x164], bl
je 0x50635b
mov ecx, dword [esi + 0x40]
cmp ecx, ebx
je 0x50635b
call fcn.004d7f70
test al, al
jne 0x50635b
mov edx, dword [esi]
mov ecx, esi
mov byte [esi + 0x164], bl
call dword [edx + 0x70]
cmp byte [esp + 0x12], bl
je 0x50638a
push 1
push ebx
push 1
push 1
mov eax, 0xffffffff
sub esp, 0x10
mov ebx, esp
mov dword [ebx], eax
or ecx, eax
mov dword [ebx + 4], ecx
or edx, eax
or edi, eax
mov dword [ebx + 8], edx
mov ecx, esi
mov dword [ebx + 0xc], edi
call fcn.00506ef0
pop edi
pop esi
pop ebp
mov eax, 0xf4241
pop ebx
add esp, 0x104
ret 4