Function at 0x425220
Capabilities:
Capture webcam image
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4a1761
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x147c
call fcn.00497d20
mov eax, dword [0x4cc99c]
xor eax, esp
mov dword [esp + 0x1478], eax
push ebx
push esi
push edi
mov eax, dword [0x4cc99c]
xor eax, esp
push eax
lea eax, [esp + 0x1490]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, ecx
mov dword [esp + 0x20], 0
mov ebx, dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdString::operator_wchar_t_const__const]
push str.windowinit
mov ecx, edi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
call ebx
test al, al
je 0x4257e8
lea edi, [esi + 4]
mov ecx, edi
mov dword [esp + 0x20], edi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426d86
push str.homepage
mov ecx, edi
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
xor ebx, ebx
mov dword [esp + 0x24], 5
mov dword [esp + 0x28], 0x12c
mov dword [esp + 0x2c], 0xc8
mov dword [esp + 0x30], 0x190
cmp eax, ebx
je 0x425318
mov edx, dword [eax]
mov edx, dword [edx + 0x9c]
lea ecx, [esp + 0x34]
push ecx
mov ecx, eax
call edx
mov ecx, dword [eax]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 4]
mov dword [esp + 0x28], ecx
mov edx, dword [eax + 8]
mov dword [esp + 0x2c], edx
mov eax, dword [eax + 0xc]
sub edx, 4
sub ecx, 0x1e
add eax, 0x1e
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x30], eax
cmp dword [esi + 0x2308], ebx
jne 0x425406
push 7
xor edx, edx
push 0x4acbdc
lea ecx, [esp + 0x3c]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], dx
call fcn.004027c0
lea edi, [esi + 0x2318]
lea ecx, [esp + 0x34]
mov dword [esp + 0x1498], ebx
call fcn.0043d110
mov eax, dword [eax]
or edi, 0xffffffff
mov dword [esp + 0x1498], edi
cmp dword [esp + 0x48], 8
mov dword [esi + 0x2308], eax
jb 0x425384
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esi + 0x2308]
cmp eax, ebx
je 0x425406
lea esi, [esp + 0x484]
mov dword [eax + 0xa4], 2
call fcn.00425180
mov edx, esi
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4253bf
push 0x8007000e
call fcn.00401050
mov esi, dword [esp + 0x18]
push 1
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esi - 0x10]
mov dword [esp + 0x14a4], 1
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::GetHWND_void_const]
mov edx, dword [esi + 0x2308]
push eax
mov ecx, 1
call fcn.00417f70
mov dword [esp + 0x1498], edi
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp byte [esi + 0x2684], 0
lea ebx, [esi - 0x10]
jne 0x42541d
push 1
push 0
push 0
call fcn.0041e0d0
push 1
push 0
mov ecx, ebx
call fcn.0041f200
mov eax, dword [esi + 0x26b0]
push 0
lea edi, [esi + 0x26a0]
push 0x4ab248
push eax
push 0
mov ecx, edi
call fcn.00409200
test eax, eax
je 0x4254a5
mov ecx, dword [edi + 0x10]
push 1
push 0x4b07fc
push ecx
push 0
mov ecx, edi
call fcn.00409200
test eax, eax
jne 0x425483
lea ecx, [ebx + 0x14]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x425569
mov edx, str.gamevideo
mov ecx, ebx
call fcn.00438c50
jmp 0x425569
mov esi, 0x4b1a24
mov ecx, edi
call fcn.00408e30
test al, al
je 0x425569
push 0
mov esi, ebx
call fcn.00435000
jmp 0x425569
call fcn.00405b40
lea esi, [esp + 0x34]
mov ecx, eax
call fcn.004079d0
push 7
mov dword [esp + 0x149c], 2
mov edx, dword [esp + 0x48]
push 0x4acbdc
push edx
push 0
mov ecx, esi
call fcn.00409200
test eax, eax
jne 0x4254e2
mov ecx, ebx
call fcn.00435f80
jmp 0x425549
mov eax, dword [esp + 0x44]
push 7
push str.gamelib
push eax
push 0
lea ecx, [esp + 0x44]
call fcn.00409200
test eax, eax
jne 0x425507
push eax
mov ecx, ebx
call fcn.00434c30
jmp 0x425549
mov esi, str.gamelive
lea ecx, [esp + 0x34]
call fcn.00408e30
test al, al
je 0x425524
push 0
mov esi, ebx
call fcn.00435000
jmp 0x425549
cmp dword [esp + 0x48], 8
mov esi, dword [esp + 0x34]
jae 0x425533
lea esi, [esp + 0x34]
lea ecx, [ebx + 0x14]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x425549
mov edx, esi
mov ecx, ebx
call fcn.00438c50
mov dword [esp + 0x1498], 0xffffffff
cmp dword [esp + 0x48], 8
jb 0x425569
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, dword [esp + 0x18]
mov edx, dword [esi - 0xc]
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, dword [esp + 0x20]
push 0x927c0
push 0x839
xor ebx, ebx
push ebx
mov dword [esi + 0x2690], eax
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::SetTimer_class_CControlUI___unsigned_int__unsigned_int_]
cmp byte [esi + 0x2685], bl
je 0x4255af
mov eax, dword [esi - 0xc]
push ebx
push ebx
push 0x419
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0xffffffffffffffff
xor ecx, ecx
push ebx
mov word [esp + 0x58], cx
push 0x4cb564
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], ebx
call fcn.00402530
mov dword [esp + 0x1498], 3
mov eax, dword [esp + 0x50]
mov edi, 8
cmp dword [esp + 0x64], edi
jae 0x4255f1
lea eax, [esp + 0x50]
mov edx, dword [esi - 0xc]
push eax
push edx
call dword [sym.imp.USER32.dll_SetWindowTextW]
lea eax, [esp + 0x6c]
push eax
call fcn.0047b400
add esp, 4
push eax
lea ecx, [esp + 0x134]
push ecx
mov byte [esp + 0x14a0], 4
call fcn.0047af30
add esp, 8
mov byte [esp + 0x1498], 6
cmp dword [esp + 0x80], edi
jb 0x425641
mov edx, dword [esp + 0x6c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0x4b2400
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x264]
xor eax, eax
mov esi, 7
push edx
mov dword [esp + 0x8c], esi
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], ax
call fcn.00408d40
add esp, 0xc
lea ecx, [esp + 0x130]
push ecx
push eax
lea edx, [esp + 0x90]
push edx
mov byte [esp + 0x14a4], 7
call fcn.00408f80
add esp, 0xc
push 0x4b23fc
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x14a4], 8
call fcn.00408f20
add esp, 0xc
push eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x149c], 9
call fcn.004085c0
cmp dword [esp + 0x48], edi
jb 0x4256d7
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edx, edx
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], ebx
mov word [esp + 0x34], dx
cmp dword [esp + 0x9c], edi
jb 0x425700
mov eax, dword [esp + 0x88]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ecx, ecx
mov byte [esp + 0x1498], 6
mov dword [esp + 0x9c], esi
mov dword [esp + 0x98], ebx
mov word [esp + 0x88], cx
cmp dword [esp + 0x270], edi
jb 0x42573a
mov edx, dword [esp + 0x25c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ecx, dword [esp + 0x20]
push 0x4b2404
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
mov esi, eax
cmp esi, ebx
je 0x425795
mov eax, dword [esi]
mov edx, dword [eax + 0x34]
lea ecx, [esp + 0xa4]
push ecx
mov ecx, esi
call edx
mov byte [esp + 0x1498], 0xa
mov eax, dword [esp + 0x50]
cmp dword [esp + 0x64], edi
jae 0x425776
lea eax, [esp + 0x50]
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0x38]
mov ecx, esi
call eax
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1498], 6
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
cmp dword [esp + 0x144], edi
jb 0x4257af
mov ecx, dword [esp + 0x130]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edx, edx
mov dword [esp + 0x144], 7
mov dword [esp + 0x140], ebx
mov word [esp + 0x130], dx
cmp dword [esp + 0x64], edi
jb 0x426d86
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x426d86
push str.windowtimer
mov ecx, edi
call ebx
test al, al
je 0x425815
mov ecx, dword [edi + 0x98]
push ecx
lea edx, [esi - 0x10]
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], 0
call fcn.0041e6d0
jmp 0x426d86
push str.click
mov ecx, edi
call ebx
test al, al
jne 0x426d86
push str.pngimagepanelmove
mov ecx, edi
call ebx
test al, al
je 0x425973
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
mov dword [esp + 0x1498], 0xb
mov ebx, dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdString::operator__wchar_t_const__const]
push str.accl
mov ecx, eax
call ebx
mov dword [esp + 0x1498], 0xffffffff
mov esi, dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
call esi
cmp byte [esp + 0x17], 0
je 0x4258a5
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x25ec]
test eax, eax
je 0x4258a5
mov ecx, dword [eax + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.setting
mov ecx, eax
mov dword [esp + 0x149c], 0xc
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425907
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x25f4]
test eax, eax
je 0x425907
mov ecx, dword [eax + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [edi + 0x88]
mov edx, dword [edi]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
mov ecx, edi
call edx
push str.bonus
mov ecx, eax
mov dword [esp + 0x149c], 0xd
call ebx
lea ecx, [esp + 0xa4]
mov bl, al
mov dword [esp + 0x1498], 0xffffffff
call esi
test bl, bl
je 0x426d86
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x25f0]
test eax, eax
je 0x426d86
mov ecx, dword [eax + 4]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x426d86
push 0x4ab1e0
mov ecx, edi
call ebx
test al, al
je 0x426d86
cmp dword [edi + 0x88], 0
je 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.close
mov ecx, eax
mov dword [esp + 0x149c], 0xe
call ebx
mov dword [esp + 0x1498], 0xffffffff
mov esi, dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
call esi
cmp byte [esp + 0x17], 0
je 0x4259ff
mov eax, dword [esp + 0x18]
mov ecx, 1
lea edx, [eax - 0x10]
cmp dword [eax + 0x23b8], ecx
jle 0x4259f5
xor cl, cl
call fcn.00428490
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push str.gamelib
mov ecx, eax
mov dword [esp + 0x149c], 0xf
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425a5a
mov ecx, dword [esp + 0x18]
push 1
add ecx, 0xfffffff0
call fcn.00434c30
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.gamelive
mov ecx, eax
mov dword [esp + 0x149c], 0x10
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425ab5
mov esi, dword [esp + 0x18]
push 1
add esi, 0xfffffff0
call fcn.00435000
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push 0x4acbdc
mov ecx, eax
mov dword [esp + 0x149c], 0x11
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
jne 0x4269d4
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.bonus
mov ecx, eax
mov dword [esp + 0x149c], 0x12
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425bfa
mov esi, dword [esp + 0x18]
lea eax, [esi + 0x2350]
lea edi, [esi + 0x23b0]
call fcn.0043d230
mov eax, dword [eax]
mov eax, dword [eax + 0x3af4]
push eax
lea ecx, [esi - 0x10]
call fcn.00427580
lea ecx, [esi + 4]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426d86
push str.bonus
lea ecx, [esi + 4]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
test eax, eax
je 0x426d86
mov edx, dword [eax]
mov edx, dword [edx + 0x9c]
lea ecx, [esp + 0x50]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
add eax, 8
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], ecx
push eax
lea ecx, [esi - 0x10]
mov dword [esp + 0x40], edx
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
mov eax, dword [esi + 0x25f0]
push ecx
push edx
push 1
call fcn.00445db0
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push str.boss
mov ecx, eax
mov dword [esp + 0x149c], 0x13
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425c87
call fcn.00465a70
test eax, eax
jne 0x425c5d
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
push ecx
call fcn.00427e10
jmp 0x426d86
mov esi, dword [esp + 0x18]
lea ecx, [esi - 0x10]
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
sete dl
movzx eax, dl
push eax
lea eax, [esi - 0x10]
call fcn.00429bb0
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.full
mov ecx, eax
mov dword [esp + 0x149c], 0x14
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425ce2
mov ecx, dword [esp + 0x18]
push 1
add ecx, 0xfffffff0
call fcn.00429a30
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push str.accl
mov ecx, eax
mov dword [esp + 0x149c], 0x15
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425e2f
mov esi, dword [esp + 0x18]
cmp dword [esi + 0x25ec], 0
je 0x426d86
lea ecx, [esi + 4]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426d86
push str.accl
lea ecx, [esi + 4]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
test eax, eax
je 0x426d86
mov edx, dword [eax]
mov edx, dword [edx + 0x9c]
lea ecx, [esp + 0x50]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
add eax, 8
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], ecx
push eax
lea ecx, [esi - 0x10]
mov dword [esp + 0x40], edx
call dword [sym.imp.HFUILib.dll_public:_struct_HWND______thiscall_CWindowWnd::GetHWND_void_const]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
lea eax, [esi + 0x2350]
lea edi, [esi + 0x23b0]
call fcn.0043d230
mov edi, dword [eax]
push str.resetaccelmenu
call fcn.00465e80
add esp, 4
test eax, eax
je 0x425ddd
mov ecx, dword [esi + 0x25ec]
mov dword [ecx + 0x40], 1
jmp 0x425dec
mov edx, dword [esi + 0x25ec]
mov eax, dword [edi + 0x38a0]
mov dword [edx + 0x40], eax
mov esi, dword [esi + 0x25ec]
cmp dword [esi + 0x34], 0
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
je 0x426d86
call fcn.00444f10
mov ecx, dword [esi + 0x34]
mov eax, dword [ecx + 0x24]
sub eax, dword [ecx + 0x1c]
mov ecx, dword [esi + 0x38]
mov edx, dword [esi + 4]
imul ecx, ecx, 0x19
push 0x50
push ecx
push eax
push ebx
push edi
push 0xffffffffffffffff
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push str.refresh
mov ecx, eax
mov dword [esp + 0x149c], 0x16
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425edb
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x2350], 0
lea eax, [ecx + 0x2350]
je 0x425eb1
lea edi, [ecx + 0x23b0]
call fcn.0043d230
mov eax, dword [eax]
test eax, eax
je 0x426d86
push eax
mov dword [eax + 0x10], 0xe
call fcn.0041e080
jmp 0x426d86
lea esi, [esp + 0x484]
call fcn.00425180
mov ecx, dword [esp + 0x18]
mov esi, dword [ecx + 0x2308]
cmp dword [esi + 0x3c], 0
je 0x426d86
call fcn.00417550
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push str.setting
mov ecx, eax
mov dword [esp + 0x149c], 0x17
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x425f35
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
push eax
call fcn.00427f40
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
push 0x4b184c
mov ecx, eax
mov dword [esp + 0x149c], 0x18
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x426212
mov ebx, dword [esp + 0x18]
cmp dword [ebx + 0x2370], 0
jne 0x4260cc
push 0x9c
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x425fad
mov esi, eax
call fcn.0040ffe0
jmp 0x425faf
xor eax, eax
mov edi, dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
mov dword [ebx + 0x2370], eax
mov esi, dword [eax]
call edi
mov ecx, dword [0x4aebd0]
mov edx, dword [0x4aebd4]
push eax
mov eax, dword [ebx - 0xc]
push eax
push 0x94000000
push 0x80000
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [0x4aebd8]
mov dword [eax + 4], edx
mov edx, dword [0x4aebdc]
mov dword [eax + 8], ecx
mov ecx, dword [ebx + 0x2370]
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0x28]
call eax
mov ecx, dword [str.addfav.swf]
mov edx, dword [0x4b246c]
mov eax, dword [0x4b2470]
mov dword [esp + 0x50], ecx
mov ecx, dword [0x4b2474]
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x54], edx
mov edx, dword [0x4b2478]
mov dword [esp + 0x58], eax
mov ax, word [0x4b247c]
lea ecx, [esp + 0x27c]
push 0x104
push ecx
mov dword [esp + 0x68], edx
mov word [esp + 0x6c], ax
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4260aa
lea edx, [esp + 0x27c]
push 0x5c
push edx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
add esp, 8
add eax, 2
je 0x4260aa
lea ecx, [esp + 0x50]
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x426076
sub ecx, esi
sar ecx, 1
push ecx
lea ecx, [esp + 0x54]
push ecx
mov edx, eax
lea ecx, [esp + 0x284]
sub edx, ecx
sar edx, 1
mov ecx, 0x104
sub ecx, edx
push ecx
push eax
call dword [sym.imp.MSVCR100.dll_wcsncpy_s]
add esp, 0x10
push ecx
mov edx, esp
mov dword [esp + 0x20], esp
push edx
lea edi, [esp + 0x284]
call fcn.0040fce0
mov eax, dword [ebx + 0x2370]
mov ecx, dword [eax + 0x20]
call fcn.0040ff30
push 0x4b184c
lea ecx, [ebx + 4]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
test eax, eax
je 0x42614f
mov edx, dword [eax]
mov edx, dword [edx + 0x9c]
lea ecx, [esp + 0x50]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx - 0xc]
push eax
push ecx
mov dword [esp + 0x44], edx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov ecx, dword [ebx + 0x2370]
push 0x14
push 0x32
push 0x32
add edx, 0xffffffc9
push edx
mov edx, dword [ecx + 0x40]
add eax, 0xf
push eax
push 0
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebx + 0x2370]
mov edi, dword [eax + 0x20]
call fcn.0041cb20
lea eax, [ebx + 0x2350]
lea edi, [ebx + 0x23b0]
call fcn.0043d230
mov ecx, dword [eax]
mov eax, dword [ebx + 0x238c]
cmp eax, dword [eax]
je 0x426d86
add ecx, 0x38a4
mov dword [esp + 0x1c], ecx
mov edi, dword [eax + 4]
mov esi, dword [edi + 8]
mov ecx, dword [esp + 0x1c]
lea eax, [esi + 0x100]
lea ebx, [ebx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4261b6
test dx, dx
je 0x4261b2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4261b6
add eax, 4
add ecx, 4
test dx, dx
jne 0x426190
xor eax, eax
jmp 0x4261bb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4261d0
mov ecx, dword [ebx + 0x238c]
mov eax, edi
cmp eax, dword [ecx]
jne 0x42617a
jmp 0x426d86
push 2
lea edx, [esi + 0x100]
push str.installstate
push edx
mov dword [esi + 0xd8a4], 1
mov dword [esi + 0xd8a8], 2
call fcn.00460cd0
mov edx, dword [esp + 0x24]
add esp, 0xc
add edx, 0xfffffff0
mov ecx, 1
mov ebx, esi
call fcn.00429e90
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
push str.desktop
mov ecx, eax
mov dword [esp + 0x149c], 0x19
call ebx
lea ecx, [esp + 0xa4]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x42654f
mov ebx, dword [esp + 0x18]
lea ecx, [ebx + 4]
mov dword [esp + 0x20], ecx
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426d86
cmp dword [ebx + 0x236c], 0
jne 0x4263a7
push 0x9c
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
test eax, eax
je 0x42629f
mov esi, eax
call fcn.0040ffe0
jmp 0x4262a1
xor eax, eax
mov dword [ebx + 0x236c], eax
mov esi, dword [eax]
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
mov ecx, dword [ebx - 0xc]
mov edx, dword [0x4aebd0]
push eax
push ecx
mov ecx, dword [0x4aebd4]
push 0x94000000
push 0x80000
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [0x4aebd8]
mov dword [eax + 4], ecx
mov ecx, dword [0x4aebdc]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x28]
mov dword [eax + 0xc], ecx
mov ecx, dword [ebx + 0x236c]
call edx
mov ecx, 7
mov esi, str.putdesktop.swf
lea edi, [esp + 0x25c]
rep movsd dword es:[edi], dword [esi]
lea eax, [esp + 0x27c]
push 0x104
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4263a3
lea ecx, [esp + 0x27c]
push 0x5c
push ecx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
add esp, 8
add eax, 2
je 0x42637d
lea ecx, [esp + 0x25c]
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x426346
sub ecx, esi
sar ecx, 1
push ecx
lea edx, [esp + 0x260]
push edx
mov ecx, eax
lea edx, [esp + 0x284]
sub ecx, edx
sar ecx, 1
mov edx, 0x104
sub edx, ecx
push edx
push eax
call dword [sym.imp.MSVCR100.dll_wcsncpy_s]
add esp, 0x10
push ecx
mov eax, esp
mov dword [esp + 0x20], esp
push eax
lea edi, [esp + 0x284]
call fcn.0040fce0
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + 0x236c]
mov ecx, dword [edx + 0x20]
call fcn.0040ff30
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
push str.desktop
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
test eax, eax
je 0x42642b
mov edx, dword [eax]
mov edx, dword [edx + 0x9c]
lea ecx, [esp + 0x50]
push ecx
mov ecx, eax
call edx
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov dword [esp + 0x38], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx - 0xc]
push eax
push ecx
mov dword [esp + 0x44], edx
call dword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [ebx + 0x236c]
mov eax, dword [edx + 0x40]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
push 0x14
push 0x32
push 0x32
add ecx, 0xffffffc9
push ecx
add edx, 0xf
push edx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebx + 0x236c]
mov edi, dword [eax + 0x20]
call fcn.0041cb20
lea eax, [ebx + 0x2350]
lea edi, [ebx + 0x23b0]
call fcn.0043d230
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x426d86
mov eax, dword [ebx + 0x238c]
cmp eax, dword [eax]
je 0x4264f4
jmp 0x426460
mov edi, dword [eax + 4]
mov esi, dword [edi + 8]
mov ecx, dword [esp + 0x1c]
add ecx, 0x38a4
lea eax, [esi + 0x100]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x42649c
test dx, dx
je 0x426498
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x42649c
add eax, 4
add ecx, 4
test dx, dx
jne 0x426476
xor eax, eax
jmp 0x4264a1
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x4264b3
mov ecx, dword [ebx + 0x238c]
mov eax, edi
cmp eax, dword [ecx]
jne 0x426460
jmp 0x4264f4
push 2
lea ecx, [esi + 0x100]
push str.installstate
push ecx
mov dword [esi + 0xd8a4], 1
mov dword [esi + 0xd8a8], 2
call fcn.00460cd0
mov edx, dword [esp + 0x24]
add esp, 0xc
add edx, 0xfffffff0
mov ecx, 1
mov ebx, esi
call fcn.00429e90
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
add eax, 0x814
cmp word [eax], 0
je 0x426517
push str.desktopput
push eax
add ebx, 0xfffffff0
push ebx
call fcn.00432440
jmp 0x426d86
push 0x4ab248
lea ecx, [esp + 0x260]
call fcn.00402480
lea edx, [esp + 0x25c]
push edx
lea ecx, [ebx - 0x10]
mov dword [esp + 0x149c], 0x1a
call fcn.00431d70
lea ecx, [esp + 0x25c]
jmp 0x426d81
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x14c]
push edx
call eax
mov dword [esp + 0x1498], 0x1b
push str.head
mov ecx, eax
mov dword [esp + 0x24], 1
call ebx
test al, al
jne 0x4265be
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0xa4]
push eax
call edx
mov dword [esp + 0x1498], 0x1c
push str.logintip
mov ecx, eax
mov dword [esp + 0x24], 3
call ebx
mov byte [esp + 0x17], 0
test al, al
je 0x4265c3
mov byte [esp + 0x17], 1
mov dword [esp + 0x1498], 0x1b
test byte [esp + 0x20], 2
je 0x4265e3
and dword [esp + 0x20], 0xfffffffd
lea ecx, [esp + 0xa4]
call esi
mov dword [esp + 0x1498], 0xffffffff
test byte [esp + 0x20], 1
je 0x4265fe
lea ecx, [esp + 0x14c]
call esi
cmp byte [esp + 0x17], 0
jne 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x14c]
push edx
call eax
push str.loginexit
mov ecx, eax
mov dword [esp + 0x149c], 0x1d
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x4266bd
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x4ab248
call fcn.00402480
sub esp, 0x1c
mov dword [esp + 0x14d0], 0x1e
mov ecx, esp
mov dword [esp + 0x58], esp
push str.__QQ
call fcn.00402480
sub esp, 0x1c
mov byte [esp + 0x14ec], 0x1f
mov ecx, esp
mov dword [esp + 0x78], esp
push str.head
call fcn.00402480
mov ecx, dword [esp + 0x6c]
push 0
push 0
add ecx, 0xfffffff0
mov dword [esp + 0x14f4], 0xffffffff
call fcn.004297b0
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
push str.restore
mov ecx, eax
mov dword [esp + 0x149c], 0x20
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x426723
mov ecx, dword [esp + 0x18]
push 1
push 0xf120
push 0x112
add ecx, 0xfffffff0
call dword [sym.imp.HFUILib.dll_protected:_long_int___thiscall_CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x14c]
push edx
call eax
push 0x4b2520
mov ecx, eax
mov dword [esp + 0x149c], 0x21
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x42677d
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
push ecx
call fcn.00426db0
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
push str.minimize
mov ecx, eax
mov dword [esp + 0x149c], 0x22
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x426850
mov ebx, dword [esp + 0x18]
mov eax, dword [ebx - 0xc]
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0
push 0xf020
push 0x112
lea ecx, [ebx - 0x10]
mov dword [ebx + 0x2690], eax
call dword [sym.imp.HFUILib.dll_protected:_long_int___thiscall_CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
mov edi, dword [ebx + 0x2678]
test edi, edi
je 0x42681c
mov ecx, dword [edi + 4]
push 0x291
push 0
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.00442ae0
mov eax, dword [ebx + 0x23b4]
mov esi, dword [eax]
cmp esi, eax
je 0x426d86
mov edi, 0x1a
mov eax, dword [esi + 0xc]
test eax, eax
je 0x426841
push eax
mov dword [eax + 0x10], edi
call fcn.0041e080
mov esi, dword [esi]
cmp esi, dword [ebx + 0x23b4]
jne 0x426831
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
push str.maximize
mov ecx, eax
mov dword [esp + 0x149c], 0x23
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x42697c
mov edi, dword [esp + 0x18]
lea ecx, [edi + 4]
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426d86
mov eax, dword [edi - 0xc]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
lea ecx, [edi - 0x10]
test eax, eax
je 0x42691f
push 1
push 0xf120
push 0x112
call dword [sym.imp.HFUILib.dll_protected:_long_int___thiscall_CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
push str.maximize
lea ecx, [edi + 4]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
mov esi, eax
test esi, esi
je 0x426d86
push 0
push 0
push 0
push str.max.png
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImage_wchar_t_const___bool__int__int_]
push str.maxhover.png
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImageHot_wchar_t_const__]
mov edx, dword [esi]
mov eax, dword [edx + 0x38]
push 0x4b257c
mov ecx, esi
call eax
jmp 0x426d86
push 0
push 0xf030
push 0x112
call dword [sym.imp.HFUILib.dll_protected:_long_int___thiscall_CWindowWnd::SendMessageW_unsigned_int__unsigned_int__long_int_]
push str.maximize
lea ecx, [edi + 4]
call dword [sym.imp.HFUILib.dll_public:_class_CControlUI____thiscall_CPaintManagerUI::FindControl1_wchar_t_const__]
mov esi, eax
test esi, esi
je 0x426d86
push 0
push 0
push 0
push str.restore.png
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImage_wchar_t_const___bool__int__int_]
push str.restore_hover.png
mov ecx, esi
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPngImagePanelUI::SetImageHot_wchar_t_const__]
mov edx, dword [esi]
mov eax, dword [edx + 0x38]
push 0x4b25c0
mov ecx, esi
call eax
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
mov dword [esp + 0x1498], 0x24
cmp dword [0x4cb5b0], 8
mov ecx, dword [0x4cb59c]
jae 0x4269b0
mov ecx, 0x4cb59c
push ecx
mov ecx, eax
call ebx
lea ecx, [esp + 0x14c]
mov byte [esp + 0x17], al
mov dword [esp + 0x1498], 0xffffffff
call esi
cmp byte [esp + 0x17], 0
je 0x4269e5
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00435f80
jmp 0x426d86
mov ecx, dword [edi + 0x88]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x14c]
push edx
call eax
mov dword [esp + 0x1498], 0x25
cmp dword [0x4cb5cc], 8
mov ecx, dword [0x4cb5b8]
jae 0x426a19
mov ecx, 0x4cb5b8
push ecx
mov ecx, eax
call ebx
lea ecx, [esp + 0x14c]
mov bl, al
mov dword [esp + 0x1498], 0xffffffff
call esi
test bl, bl
je 0x426a4b
mov ecx, dword [esp + 0x18]
push 0
add ecx, 0xfffffff0
call fcn.00434c30
jmp 0x426d86
mov edi, dword [edi + 0x88]
mov dword [esp + 0x20], edi
test edi, edi
je 0x426d86
mov ecx, edi
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
mov ecx, eax
mov dword [esp + 0x1498], 0x26
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::GetData_void_]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00402480
call fcn.00405b40
lea edi, [esp + 0xa4]
mov ebx, eax
call fcn.00407d10
lea ecx, [esp + 0x14c]
mov byte [esp + 0x1498], 0x28
call esi
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0xa4]
push edx
call eax
mov ecx, eax
mov byte [esp + 0x1498], 0x29
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::GetData_void_]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00402480
call fcn.00405b40
lea edi, [esp + 0x88]
mov ebx, eax
call fcn.00407f50
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1498], 0x2b
call esi
mov esi, 0x4ab248
lea ecx, [esp + 0x88]
call fcn.00409010
test al, al
je 0x426bcd
cmp dword [esp + 0x9c], 8
jb 0x426ba7
mov eax, dword [esp + 0x88]
test eax, eax
jne 0x426bae
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov byte [esp + 0x1498], 0x2c
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
lea eax, [esp + 0x14c]
push eax
call edx
mov ecx, eax
mov byte [esp + 0x1498], 0x2d
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::GetData_void_]
mov esi, dword [esp + 0x18]
lea ecx, [esi + 4]
mov edi, eax
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CPaintManagerUI::IsEmpty_void_]
test al, al
jne 0x426b86
mov edx, edi
lea ecx, [esi - 0x10]
call fcn.00438c50
lea ecx, [esp + 0x14c]
mov byte [esp + 0x1498], 0x2c
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x426d71
lea eax, [esp + 0x88]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ebx, eax
mov dword [esp + 0x1c], ebx
test ebx, ebx
jne 0x426b3e
push 0x8007000e
call fcn.00401050
mov esi, 0x4ab248
lea ecx, [esp + 0x6c]
call fcn.00409010
test al, al
je 0x426d11
cmp dword [esp + 0x80], 8
jb 0x426c86
mov eax, dword [esp + 0x6c]
test eax, eax
jne 0x426c8a
mov dword [esp + 0x1c], eax
mov bl, 0x2e
mov byte [esp + 0x1498], bl
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x14c]
push edx
call eax
mov ecx, eax
mov byte [esp + 0x1498], 0x2f
call dword [sym.imp.HFUILib.dll_public:_wchar_t_const____thiscall_CStdString::GetData_void_]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00402480
call fcn.00405b40
mov edi, eax
call fcn.004080f0
lea ecx, [esp + 0x14c]
mov esi, eax
mov byte [esp + 0x1498], bl
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
test esi, esi
jne 0x426ce9
mov edi, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
call fcn.0040fce0
mov byte [esp + 0x1498], 0x30
mov eax, dword [eax]
test eax, eax
je 0x426ca7
mov edi, dword [eax]
jmp 0x426ca9
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x426c01
push 0x8007000e
call fcn.00401050
xor edi, edi
mov esi, dword [esp + 0x18]
push 0xffffffffffffffff
push 3
add esi, 0xfffffff0
push edi
mov ecx, esi
call fcn.00423b90
test eax, eax
jne 0x426cd0
push eax
push 0xffffffffffffffff
push esi
mov ecx, 0x4ab248
mov edx, edi
call fcn.00420810
lea edi, [esp + 0x20]
call fcn.0040fd80
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x426d71
cmp dword [esp + 0x80], 8
mov eax, dword [esp + 0x6c]
jae 0x426cfb
lea eax, [esp + 0x6c]
push eax
call fcn.00473d60
mov edx, dword [esp + 0x20]
add esp, 4
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x426d71
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
test eax, eax
je 0x426d71
mov edx, dword [eax]
mov edx, dword [edx + 8]
lea ecx, [esp + 0x1d4]
push ecx
mov ecx, eax
call edx
push str.headltop
mov ecx, eax
mov byte [esp + 0x149c], 0x31
call dword [sym.imp.HFUILib.dll_public:_bool___thiscall_CStdString::operator_wchar_t_const__const]
lea ecx, [esp + 0x1d4]
mov bl, al
mov byte [esp + 0x1498], 0x2b
call dword [sym.imp.HFUILib.dll_public_virtual:_void___thiscall_CStdString::destructor_void_]
test bl, bl
je 0x426d71
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.00424500
lea ecx, [esp + 0x6c]
call fcn.004024d0
lea ecx, [esp + 0x88]
call fcn.004024d0
mov ecx, dword [esp + 0x1490]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1478]
xor ecx, esp
call fcn.00497792
mov esp, ebp
pop ebp
ret 4