Function at 0x47bf10
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5139d4
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x570be0]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
push esi
push edi
mov eax, dword [0x570be0]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x30], esi
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x3c], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x44], eax
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
mov dword [esp + 0x48], ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, str._iMarginY
mov dword [esp + 0xa0], 0
test eax, 0xffff0000
jne 0x47bfbf
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47bfcd
push edi
push eax
lea ecx, [esp + 0x1c]
call fcn.00420bb0
jmp 0x47bfcd
push str._iMarginY
lea ecx, [esp + 0x18]
call fcn.00420650
mov dword [esp + 0xa0], 1
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov eax, str._iMarginX
mov byte [esp + 0xa0], 2
test eax, 0xffff0000
jne 0x47c01b
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47c029
push edi
push eax
lea ecx, [esp + 0x2c]
call fcn.00420bb0
jmp 0x47c029
push str._iMarginX
lea ecx, [esp + 0x28]
call fcn.00420650
mov byte [esp + 0xa0], 3
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x34], eax
mov eax, str._strBgImagePath
mov byte [esp + 0xa0], 4
test eax, 0xffff0000
jne 0x47c074
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47c082
push edi
push eax
lea ecx, [esp + 0x3c]
call fcn.00420bb0
jmp 0x47c082
push str._strBgImagePath
lea ecx, [esp + 0x38]
call fcn.00420650
mov byte [esp + 0xa0], 5
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, str._iHeight
mov byte [esp + 0xa0], 6
test eax, 0xffff0000
jne 0x47c0cd
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47c0db
push edi
push eax
lea ecx, [esp + 0x20]
call fcn.00420bb0
jmp 0x47c0db
push str._iHeight
lea ecx, [esp + 0x1c]
call fcn.00420650
mov byte [esp + 0xa0], 7
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x20], eax
mov eax, str.iWidth
mov byte [esp + 0xa0], 8
test eax, 0xffff0000
jne 0x47c126
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47c134
push edi
push eax
lea ecx, [esp + 0x28]
call fcn.00420bb0
jmp 0x47c134
push str.iWidth
lea ecx, [esp + 0x24]
call fcn.00420650
push str.resizeNotification
lea ecx, [esp + 0x20]
mov byte [esp + 0xa4], 9
call fcn.004204a0
mov byte [esp + 0xa0], 0xa
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x40], edi
lea eax, [esp + 0x20]
push eax
lea edx, [esp + 0x44]
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 0xb
call fcn.004215a0
add esp, 4
push dword [esp + 0x28]
mov edx, eax
lea ecx, [esp + 0x50]
mov byte [esp + 0xa4], 0xc
call fcn.00421510
add esp, 4
lea ecx, [esp + 0x18]
push ecx
mov edx, eax
lea ecx, [esp + 0x58]
mov byte [esp + 0xa4], 0xd
call fcn.004215a0
add esp, 4
push ebx
mov edx, eax
lea ecx, [esp + 0x70]
mov byte [esp + 0xa4], 0xe
call fcn.00421510
add esp, 4
lea ecx, [esp + 0x34]
push ecx
mov edx, eax
lea ecx, [esp + 0x54]
mov byte [esp + 0xa4], 0xf
call fcn.004215a0
add esp, 4
push dword [esp + 0x44]
mov edx, eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa4], 0x10
call fcn.004215a0
add esp, 4
lea ecx, [esp + 0x24]
push ecx
mov edx, eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa4], 0x11
call fcn.004215a0
add esp, 4
push dword [esp + 0x38]
mov edx, eax
lea ecx, [esp + 0x68]
mov byte [esp + 0xa4], 0x12
call fcn.00421510
add esp, 4
lea ecx, [esp + 0x14]
push ecx
mov edx, eax
lea ecx, [esp + 0x60]
mov byte [esp + 0xa4], 0x13
call fcn.004215a0
add esp, 4
push dword [esp + 0x3c]
mov edx, eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xa4], 0x14
call fcn.00421510
add esp, 4
mov byte [esp + 0xa0], 0x15
cmp dword [esi + 0x24], 0
je 0x47c28d
push 0
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esi + 0x20]
push eax
call fcn.004216b0
mov byte [esp + 0xa0], 0x14
mov edx, dword [esp + 0x60]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x47c2b5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x13
mov edx, dword [esp + 0x5c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c2da
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x12
mov edx, dword [esp + 0x64]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c2ff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x11
mov edx, dword [esp + 0x58]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c324
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x10
mov edx, dword [esp + 0x68]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c349
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0xf
mov edx, dword [esp + 0x50]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c36e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0xe
mov edx, dword [esp + 0x6c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c393
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0xd
mov edx, dword [esp + 0x54]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c3b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0xc
mov edx, dword [esp + 0x4c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c3dd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0xb
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c402
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [esp + 0xa0], 0xa
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c423
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 9
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c448
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 7
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c46d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 5
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c492
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 3
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c4b7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 1
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c4dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0xa0], 0xffffffff
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c504
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esi + 0x28], 0
je 0x47ca7a
mov eax, dword [esp + 0x28]
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov dword [esi + 0xb4], eax
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x24]
mov dword [esi + 0xb8], edi
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
call fcn.004943e0
mov eax, dword [esp + 0x2c]
add esp, 4
cmp dword [esp + 0x20], eax
jle 0x47c55b
cmp dword [esp + 0x18], edi
jg 0x47c6b3
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, str.error_width_of_control_and_image_problem
mov dword [esp + 0xa0], 0x16
test eax, 0xffff0000
jne 0x47c5a1
movzx edi, ax
mov ecx, edi
call fcn.0041fcd0
test eax, eax
je 0x47c5af
push edi
push eax
lea ecx, [esp + 0x1c]
call fcn.00420bb0
jmp 0x47c5af
push str.error_width_of_control_and_image_problem
lea ecx, [esp + 0x18]
call fcn.00420650
push str.resizeNotification
lea ecx, [esp + 0x20]
mov dword [esp + 0xa4], 0x17
call fcn.004204a0
mov byte [esp + 0xa0], 0x18
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x2c], edi
lea eax, [esp + 0x14]
push eax
lea edx, [esp + 0x30]
lea ecx, [esp + 0x50]
mov byte [esp + 0xa4], 0x19
call fcn.004215a0
add esp, 4
mov byte [esp + 0xa0], 0x1a
cmp dword [esi + 0x24], 0
je 0x47c620
push 2
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esi + 0x20]
push eax
call fcn.004216b0
mov byte [esp + 0xa0], 0x19
mov edx, dword [esp + 0x4c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c645
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [esp + 0xa0], 0x18
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c666
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x17
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c68b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0xa0], 0xffffffff
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c6b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
lea eax, [esp + 0x84]
push eax
push 0
push 0x30
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
mov edi, eax
push 1
mov dword [esp + 0x20], edi
call esi
mov dword [esp + 0x24], eax
call fcn.00443780
test al, al
je 0x47c778
push 0
push str.ImmersiveGutter
push 0
push 0
call dword [sym.imp.USER32.dll_FindWindowExW]
test eax, eax
je 0x47c778
lea ecx, [esp + 0x70]
push ecx
xorps xmm0, xmm0
push eax
mov dword [esp + 0x78], 0
movq qword [esp + 0x7c], xmm0
mov dword [esp + 0x84], 0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x80]
cmp ecx, eax
jle 0x47c768
mov edi, ecx
mov dword [esp + 0x1c], edi
jmp 0x47c778
xor ecx, ecx
cmp dword [esp + 0x78], eax
cmove eax, ecx
mov dword [esp + 0x80], eax
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [esp + 0x2c], esi
mov dword [esp + 0xa0], 0x1b
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
xor ebx, ebx
xorps xmm0, xmm0
mov dword [esp + 0x70], ebx
movq qword [esp + 0x74], xmm0
mov dword [esp + 0x7c], ebx
test eax, eax
je 0x47c7e4
test ecx, ecx
jne 0x47c7e4
mov edi, dword [esp + 0x8c]
sub edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x38]
sub edi, edx
add ebx, eax
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
jmp 0x47c878
mov edx, dword [esp + 0x88]
sub edx, eax
cmp edx, edi
mov edi, dword [esp + 0x8c]
jne 0x47c7fe
cmp edi, dword [esp + 0x24]
jb 0x47c81a
mov dword [esp + 0x14], edi
sub dword [esp + 0x14], ecx
cmp edx, dword [esp + 0x1c]
je 0x47c843
mov edx, dword [esp + 0x24]
cmp dword [esp + 0x14], edx
jne 0x47c843
test eax, eax
jne 0x47c870
sub edi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x88]
sub ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
sub edi, ecx
sub ebx, eax
mov eax, dword [esp + 0x20]
sub edi, edx
sub ebx, eax
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
jmp 0x47c87c
test eax, eax
jne 0x47c870
test ecx, ecx
je 0x47c870
mov ebx, dword [esp + 0x88]
mov edi, dword [esp + 0x3c]
sub ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
add edi, ecx
sub ebx, eax
mov dword [esp + 0x74], edi
mov dword [esp + 0x70], ebx
jmp 0x47c87c
mov edi, dword [esp + 0x74]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
lea ecx, [ebx + eax]
sub eax, dword [esp + 0x28]
mov dword [esp + 0x78], ecx
lea ecx, [edi + edx]
cdq
sub eax, edx
sar eax, 1
mov dword [esp + 0x7c], ecx
lea ecx, [eax + ebx]
mov eax, dword [esp + 0x18]
sub eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x30]
cdq
sub eax, edx
mov edx, dword [esp + 0x30]
push 0
sar eax, 1
add eax, edi
mov edi, dword [esp + 0x4c]
push edi
push dword [esp + 0x30]
add ebx, 0x30
push eax
push ecx
push 0
push dword [edx - 0x58]
mov dword [ebx], ecx
mov dword [edx + 0x34], eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esp + 0x30]
mov eax, dword [ecx + 0x34]
add eax, edi
mov edi, dword [esp + 0x28]
add edi, dword [ebx]
mov dword [ecx + 0x3c], eax
mov eax, dword [ecx + 0x28]
mov dword [ecx + 0x38], edi
sub edi, dword [ebx]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x68]
mov edi, dword [esp + 0x30]
mov eax, dword [edi + 0x3c]
mov ecx, dword [edi + 0x28]
sub eax, dword [edi + 0x34]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x70]
push dword [esp + 0x44]
mov ecx, dword [edi + 0x6c]
push ebx
lea eax, [esp + 0x78]
push eax
call fcn.00445610
test al, al
jne 0x47ca31
push str.installer_runs_close_this_one
lea ecx, [esp + 0x28]
call fcn.00420550
push str.init
lea ecx, [esp + 0x18]
mov byte [esp + 0xa4], 0x1c
call fcn.004204a0
mov byte [esp + 0xa0], 0x1d
mov eax, dword [0x571ba4]
mov ecx, 0x571ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x24]
push eax
lea edx, [esp + 0x20]
lea ecx, [esp + 0x44]
mov byte [esp + 0xa4], 0x1e
call fcn.004215a0
add esp, 4
mov byte [esp + 0xa0], 0x1f
cmp dword [edi + 0x24], 0
je 0x47c998
push 1
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [edi + 0x20]
push eax
call fcn.004216b0
mov byte [esp + 0xa0], 0x1e
mov edx, dword [esp + 0x40]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c9c0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x1d
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47c9e5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x1c
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ca0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xa0], 0x1b
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x47ca34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x47ca34
or ebx, 0xffffffff
mov edi, dword [edi + 0x6c]
push 0
mov ecx, dword [edi + 0x20]
mov eax, dword [edi + 0x28]
mov edx, dword [edi + 0x1c]
sub eax, ecx
push eax
mov eax, dword [edi + 0x24]
sub eax, edx
push eax
push ecx
push edx
push 0
push dword [edi + 0x10]
call dword [sym.imp.USER32.dll_SetWindowPos]
add esi, 0xfffffff0
mov dword [esp + 0xa0], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x47ca7a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x80]
xor ecx, esp
call fcn.004e6e0a
mov esp, ebp
pop ebp
ret 0x18