Function at 0x47351d
Capabilities:
Get graphical window text

Disassembly:
push 0x2d8
mov eax, 0x562f1b
call fcn.00539a44
mov eax, dword [ebp + 8]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x290], eax
push str.show
lea edi, [ebp - 0x260]
lea eax, [ebp + 0xc]
call fcn.004ba55c
xor ebx, ebx
push ebx
mov eax, edi
call fcn.004ba41b
mov esi, eax
push str.height
lea edi, [ebp - 0x260]
lea eax, [ebp + 0xc]
call fcn.004ba55c
push ebx
mov eax, edi
call fcn.004ba41b
mov dword [ebp - 0x264], eax
push str.bottom
lea edi, [ebp - 0x260]
lea eax, [ebp + 0xc]
call fcn.004ba55c
push ebx
mov eax, edi
call fcn.004ba41b
cmp esi, ebx
jle 0x473963
push ebx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x228], 0xf
call fcn.004031f2
lea eax, [ebp - 0x264]
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], ebx
call fcn.004ba622
mov eax, dword [ebp - 0x264]
jmp 0x47393e
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x2a0]
push ecx
lea ecx, [ebp - 0x290]
push ecx
push eax
lea esi, [ebp - 0x240]
call fcn.00474369
test al, al
je 0x473925
push str.style
lea edi, [ebp - 0x28c]
lea eax, [ebp - 0x264]
call fcn.004ba55c
call fcn.004ba4a4
push eax
lea ecx, [ebp - 0x25c]
call fcn.0040319e
push ebx
push str.show
lea edi, [ebp - 0x288]
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 1
call fcn.004ba55c
call fcn.004ba41b
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x26c]
mov edi, dword [eax + 4]
mov eax, edi
call fcn.00472fe8
test eax, eax
je 0x473678
mov eax, edi
call fcn.00472fe8
jmp 0x47367d
mov eax, 0x577673
cmp dword [ebp - 0x228], 0x10
mov esi, dword [ebp - 0x23c]
jae 0x473692
lea esi, [ebp - 0x23c]
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x4736b0
cmp cl, bl
je 0x4736ac
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x4736b0
inc eax
inc eax
inc esi
inc esi
cmp cl, bl
jne 0x473692
xor eax, eax
jmp 0x4736b5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x4736c1
mov dword [ebp - 0x270], edi
jmp 0x4736e6
cmp dword [ebp - 0x228], 0x10
mov eax, dword [ebp - 0x23c]
jae 0x4736d6
lea eax, [ebp - 0x23c]
push 1
push eax
mov ecx, edi
call fcn.004bb867
mov dword [ebp - 0x270], eax
mov esi, dword [ebp - 0x270]
xor eax, eax
cmp dword [ebp - 0x260], ebx
setne al
xor ebx, ebx
push eax
push 0x18
call fcn.004bb4fc
cmp dword [ebp - 0x248], ebx
jbe 0x473838
lea eax, [ebp - 0x2d8]
push eax
call fcn.004b213d
mov byte [ebp - 4], 2
cmp dword [ebp - 0x244], 0x10
mov ebx, dword [ebp - 0x258]
jae 0x473732
lea ebx, [ebp - 0x258]
push 0x3b
lea edi, [ebp - 0x2d8]
call fcn.00473440
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x2cc]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
and dword [ebp - 0x268], 0
test eax, eax
jbe 0x47381d
lea eax, [ebp - 0x2bc]
push eax
call fcn.004b213d
push dword [ebp - 0x268]
lea esi, [ebp - 0x2d8]
mov byte [ebp - 4], 3
call fcn.0047448e
cmp dword [eax + 0x18], 0x10
jb 0x47378d
mov eax, dword [eax + 4]
jmp 0x473790
add eax, 4
push 0x3d
lea edi, [ebp - 0x2bc]
mov ebx, eax
call fcn.00473440
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0x2b0]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
cmp eax, 2
jne 0x4737de
mov ebx, dword [ebp - 0x270]
mov edi, dword [ebx]
push 0
push 1
lea esi, [ebp - 0x2bc]
add edi, 0x14
call fcn.0047448e
push eax
push 0
call fcn.0047448e
push eax
mov ecx, ebx
call dword [edi]
lea esi, [ebp - 0x2bc]
mov byte [ebp - 4], 2
call fcn.004746c5
push dword [ebp - 0x2bc]
call fcn.0052f7c5
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x2cc]
pop ecx
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x268]
cmp dword [ebp - 0x268], eax
jb 0x473761
lea esi, [ebp - 0x2d8]
mov byte [ebp - 4], 1
call fcn.004746c5
push dword [ebp - 0x2d8]
call fcn.0052f7c5
pop ecx
mov edx, dword [ebp - 0x22c]
push str.sys_maxbtn
push 0xa
pop ebx
lea eax, [ebp - 0x240]
call fcn.004052b6
test eax, eax
jne 0x4738de
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
xor esi, esi
cmp eax, esi
je 0x47386d
add eax, 0xffffffe4
jmp 0x47386f
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
je 0x4738de
push 0x585f1c
lea ecx, [ebp - 0x2c0]
call fcn.0040319e
push 0x580b7c
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 4
call fcn.0040319e
mov ecx, dword [ebp - 0x270]
push esi
lea edx, [ebp - 0x2c0]
push edx
lea edx, [ebp - 0x2dc]
mov byte [ebp - 4], 5
mov eax, dword [ecx]
push edx
call dword [eax + 0x14]
push esi
push 1
lea ecx, [ebp - 0x2dc]
call fcn.00403211
push esi
push 1
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 1
call fcn.00403211
mov edx, dword [ebp - 0x22c]
push str.searchbar
push 9
pop ebx
lea eax, [ebp - 0x240]
call fcn.004052b6
test eax, eax
jne 0x473910
push dword [0x64a624]
mov esi, dword [ebp - 0x270]
push 0x18
xor ebx, ebx
call fcn.004bb4fc
push 0
push 1
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0
call fcn.00403211
xor ebx, ebx
lea eax, [ebp - 0x280]
lea ecx, [ebp - 0x264]
call fcn.004ba5d0
mov eax, dword [eax]
mov dword [ebp - 0x264], eax
mov ecx, eax
neg ecx
sbb ecx, ecx
test ecx, fcn.00489238
jne 0x4735e5
push ebx
push 1
lea ecx, [ebp - 0x240]
call fcn.00403211
jmp 0x474361
cmp dword [ebp - 0x264], ebx
jle 0x474361
push ebx
cmp eax, ebx
push str.left
lea eax, [ebp + 0xc]
jle 0x473de9
lea edi, [ebp - 0x260]
call fcn.004ba55c
call fcn.004ba41b
push ebx
mov dword [ebp - 0x268], eax
push str.right
lea edi, [ebp - 0x260]
lea eax, [ebp + 0xc]
call fcn.004ba55c
call fcn.004ba41b
push ebx
mov dword [ebp - 0x294], eax
push str.zoom
lea edi, [ebp - 0x260]
lea eax, [ebp + 0xc]
call fcn.004ba55c
call fcn.004ba41b
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x278]
lea ecx, [ebp + 0xc]
mov byte [ebp - 0x271], bl
mov dword [ebp - 0x28c], ebx
call fcn.004ba622
mov eax, dword [ebp - 0x278]
neg eax
sbb eax, eax
test eax, fcn.00489238
je 0x473daf
inc dword [ebp - 0x28c]
push ebx
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x244], 0xf
call fcn.004031f2
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x260]
push eax
mov dword [ebp - 4], 6
lea eax, [ebp - 0x2a0]
push eax
push dword [ebp - 0x278]
lea esi, [ebp - 0x25c]
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x27c], ebx
call fcn.00474369
test al, al
je 0x473d61
cmp dword [ebp - 0x244], 0x10
mov eax, dword [ebp - 0x258]
jae 0x473a7b
lea eax, [ebp - 0x258]
mov esi, dword [ebp - 0x26c]
mov ecx, dword [esi + 4]
push 1
push eax
call fcn.004bb867
lea ecx, [ebp - 0x25c]
push ecx
push esi
mov dword [ebp - 0x284], eax
call fcn.004743ed
push ebx
test eax, eax
je 0x473d62
push str.layout_y
lea edi, [ebp - 0x2e4]
lea eax, [ebp - 0x278]
call fcn.004ba55c
call fcn.004ba41b
mov dword [ebp - 0x288], eax
mov byte [ebp - 0x271], 1
cmp dword [ebp - 0x2a0], ebx
jne 0x473cb8
push dword [ebp - 0x270]
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx]
lea edx, [ebp - 0x29c]
push edx
call dword [eax + 0x78]
mov esi, dword [ebp - 0x270]
cmp dword [ebp - 0x260], ebx
jne 0x473bea
mov eax, dword [ebp - 0x268]
lea edi, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x234]
add eax, ecx
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x290]
mov eax, dword [eax]
sub dword [ebp - 0x228], eax
cmp dword [ebp - 0x27c], ebx
jne 0x473b5a
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x298]
add dword [ebp - 0x230], eax
jmp 0x473b7c
jge 0x473b6a
mov eax, dword [ebp - 0x264]
sub dword [ebp - 0x228], eax
jmp 0x473b7c
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x27c]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x473b8e
add eax, 0xffffffe4
jmp 0x473b90
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x473ba9
mov eax, dword [ebp - 0x280]
add dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x288]
cmp eax, ebx
jle 0x473bbf
add dword [ebp - 0x230], eax
add dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
mov eax, dword [ebp - 0x29c]
add dword [ebp - 0x268], eax
jmp 0x473d61
lea edi, [ebp - 0x2b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0x294]
mov esi, dword [ebp - 0x2b0]
mov dword [ebp - 0x2ac], eax
sub eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2a4]
add esi, dword [eax]
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x2b0], esi
cmp eax, ebx
jne 0x473c38
mov eax, dword [ebp - 0x298]
jmp 0x473c40
jge 0x473c40
mov eax, dword [ebp - 0x264]
add eax, esi
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x473c5a
add eax, 0xffffffe4
jmp 0x473c5c
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x473c75
add esi, dword [ebp - 0x280]
mov dword [ebp - 0x2b0], esi
mov eax, dword [ebp - 0x288]
cmp eax, ebx
jle 0x473c8d
add esi, eax
add dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2b0], esi
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
mov eax, dword [ebp - 0x29c]
add dword [ebp - 0x294], eax
jmp 0x473d61
mov esi, dword [ebp - 0x270]
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x290]
lea edi, [ebp - 0x2d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x294]
sub dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c4]
sub eax, dword [ecx]
mov esi, eax
sub esi, dword [ebp - 0x264]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x288]
cmp eax, ebx
mov dword [ebp - 0x2cc], esi
jle 0x473d1a
add esi, eax
add dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2cc], esi
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x473d2c
add eax, 0xffffffe4
jmp 0x473d2e
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x473d47
add esi, dword [ebp - 0x280]
mov dword [ebp - 0x2cc], esi
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
push ebx
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x25c]
call fcn.00403211
lea eax, [ebp - 0x2e0]
lea ecx, [ebp - 0x278]
call fcn.004ba5d0
mov eax, dword [eax]
mov dword [ebp - 0x278], eax
neg eax
sbb eax, eax
test eax, fcn.00489238
jne 0x473a03
cmp byte [ebp - 0x271], bl
jne 0x473daf
cmp dword [ebp - 0x28c], ebx
jne 0x474361
mov eax, dword [ebp - 0x264]
mov esi, dword [ebp - 0x290]
add dword [esi], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x473dcd
lea ebx, [eax - 0x1c]
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x474361
mov eax, dword [ebp - 0x280]
jmp 0x47435f
lea edi, [ebp - 0x2e0]
call fcn.004ba55c
call fcn.004ba41b
push ebx
mov dword [ebp - 0x28c], eax
push str.right
lea edi, [ebp - 0x2e0]
lea eax, [ebp + 0xc]
call fcn.004ba55c
call fcn.004ba41b
push ebx
mov dword [ebp - 0x284], eax
push str.zoom
lea edi, [ebp - 0x2e0]
lea eax, [ebp + 0xc]
call fcn.004ba55c
call fcn.004ba41b
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x27c]
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x288], ebx
call fcn.004ba622
mov eax, dword [ebp - 0x27c]
neg eax
sbb eax, eax
test eax, fcn.00489238
je 0x47432e
inc dword [ebp - 0x288]
push ebx
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x244], 0xf
call fcn.004031f2
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x2a0]
push eax
mov dword [ebp - 4], 7
lea eax, [ebp - 0x260]
push eax
push dword [ebp - 0x27c]
lea esi, [ebp - 0x25c]
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x290], ebx
call fcn.00474369
test al, al
je 0x4742e4
cmp dword [ebp - 0x244], 0x10
mov eax, dword [ebp - 0x258]
jae 0x473ee4
lea eax, [ebp - 0x258]
push 1
push eax
mov eax, dword [ebp - 0x26c]
mov ecx, dword [eax + 4]
call fcn.004bb867
mov edx, dword [ebp - 0x248]
push str.browsertitle
mov esi, eax
push 0xc
pop ebx
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x278], esi
call fcn.004052b6
test eax, eax
jne 0x473f6d
push 0x208
push eax
mov word [ebp - 0x224], ax
lea eax, [ebp - 0x222]
push eax
call fcn.00537010
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
add esp, 0xc
test eax, eax
je 0x473f48
add eax, 0xffffffe4
jmp 0x473f4a
xor eax, eax
push 0x104
lea ecx, [ebp - 0x224]
push ecx
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea eax, [ebp - 0x224]
push eax
mov ecx, esi
call fcn.004bb3ba
lea eax, [ebp - 0x25c]
push eax
push dword [ebp - 0x26c]
mov eax, esi
call fcn.004743ed
push 0
test eax, eax
jne 0x473f9f
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x25c]
call fcn.00403211
xor ebx, ebx
jmp 0x4742f6
push str.layout_y
lea edi, [ebp - 0x2e0]
lea eax, [ebp - 0x27c]
call fcn.004ba55c
call fcn.004ba41b
cmp dword [ebp - 0x260], 0
mov ebx, eax
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x294], 1
jne 0x47423f
mov eax, dword [esi]
mov esi, dword [ebp - 0x270]
push esi
lea ecx, [ebp - 0x29c]
push ecx
mov ecx, dword [ebp - 0x278]
call dword [eax + 0x78]
cmp dword [ebp - 0x2a0], 0
jne 0x4740d6
mov ebx, dword [ebp - 0x28c]
mov eax, dword [ebp - 0x29c]
lea edi, [ebp - 0x2b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x2b4], ebx
mov ecx, dword [ebp - 0x2b4]
mov esi, dword [ebp - 0x2b0]
add eax, ecx
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2a4]
add esi, dword [eax]
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x2b0], esi
test eax, eax
jne 0x47404f
mov eax, dword [ebp - 0x298]
jmp 0x474057
jge 0x474057
mov eax, dword [ebp - 0x264]
add eax, esi
cmp dword [ebp - 0x280], 0
mov dword [ebp - 0x2a8], eax
jle 0x4740ab
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
test eax, eax
je 0x47407a
add eax, 0xffffffe4
jmp 0x47407c
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x474097
mov eax, dword [ebp - 0x268]
add esi, eax
add dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x280]
add esi, eax
add dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2b0], esi
mov ecx, dword [ebp - 0x278]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x2b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
add ebx, dword [ebp - 0x29c]
mov dword [ebp - 0x28c], ebx
jmp 0x4742e2
mov edx, dword [ebp - 0x248]
lea edi, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push str.mainline
movsd dword es:[edi], dword [esi]
push 8
pop ebx
lea eax, [ebp - 0x25c]
movsd dword es:[edi], dword [esi]
call fcn.004052b6
test eax, eax
mov eax, dword [ebp - 0x22c]
jne 0x47417d
sub eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x230]
lea esi, [eax + ecx]
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x228], esi
test eax, eax
je 0x474136
add eax, 0xffffffe4
jmp 0x474138
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x474151
add esi, dword [ebp - 0x268]
mov dword [ebp - 0x228], esi
lea eax, [esi - 1]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x280]
test eax, eax
jle 0x474172
add dword [ebp - 0x230], eax
add esi, eax
mov dword [ebp - 0x228], esi
lea esi, [ebp - 0x234]
jmp 0x4742ce
mov ebx, dword [ebp - 0x284]
mov esi, dword [ebp - 0x230]
sub eax, ebx
mov dword [ebp - 0x22c], eax
sub eax, dword [ebp - 0x29c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x2a4]
add esi, dword [eax]
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x230], esi
test eax, eax
jne 0x4741bd
mov eax, dword [ebp - 0x298]
jmp 0x4741c5
jge 0x4741c5
mov eax, dword [ebp - 0x264]
mov edi, dword [ebp - 0x280]
add eax, esi
mov dword [ebp - 0x228], eax
test edi, edi
jle 0x474214
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
test eax, eax
je 0x4741e9
add eax, 0xffffffe4
jmp 0x4741eb
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x474206
mov eax, dword [ebp - 0x268]
add esi, eax
add dword [ebp - 0x228], eax
add esi, edi
add dword [ebp - 0x228], edi
mov dword [ebp - 0x230], esi
mov ecx, dword [ebp - 0x278]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
add ebx, dword [ebp - 0x29c]
mov dword [ebp - 0x284], ebx
jmp 0x4742e2
mov esi, dword [ebp - 0x270]
mov eax, dword [ebp - 0x28c]
lea edi, [ebp - 0x2d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x284]
sub dword [ebp - 0x2c8], eax
mov esi, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x2a4]
add esi, dword [eax]
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2cc], esi
test eax, eax
je 0x47428d
add eax, 0xffffffe4
jmp 0x47428f
xor eax, eax
push dword [eax + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x4742a8
add esi, dword [ebp - 0x268]
mov dword [ebp - 0x2cc], esi
mov eax, dword [ebp - 0x264]
add eax, esi
mov dword [ebp - 0x2c4], eax
test ebx, ebx
jle 0x4742c8
add esi, ebx
add dword [ebp - 0x2c4], ebx
mov dword [ebp - 0x2cc], esi
lea esi, [ebp - 0x2d0]
mov ecx, dword [ebp - 0x278]
mov eax, dword [ecx]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x4c]
xor ebx, ebx
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.00403211
lea eax, [ebp - 0x2e4]
lea ecx, [ebp - 0x27c]
call fcn.004ba5d0
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
neg eax
sbb eax, eax
test eax, fcn.00489238
jne 0x473e6c
cmp dword [ebp - 0x294], ebx
jne 0x47432e
cmp dword [ebp - 0x288], ebx
jne 0x474361
mov eax, dword [ebp - 0x264]
mov esi, dword [ebp - 0x2a4]
add dword [esi], eax
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax + 4]
cmp eax, ebx
je 0x47434c
lea ebx, [eax - 0x1c]
push dword [ebx + 0x10]
call dword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jne 0x474361
mov eax, dword [ebp - 0x268]
add dword [esi], eax
call fcn.00539ac7
ret 0x14