Function at 0x6906c150
Capabilities:
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, ecx
push esi
push ebx
mov ebx, edx
sub esp, 0x26c
mov dword [ebp - 0x22c], eax
mov eax, dword [ecx + 4]
mov esi, dword [sym.imp.ucrtbase.dll_free]
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x230], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x238], esi
mov dword [esp], eax
call esi
mov eax, dword [edi + 0xc]
mov dword [esp], eax
call esi
lea eax, [ebp - 0x21c]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.winspool.drv_OpenPrinterA
sub esp, 0xc
test eax, eax
jne 0x6906c1d0
test byte [0x690760c0], 2
jne 0x6906c7f8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x21c]
lea ebx, [ebp - 0x220]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterA
mov esi, dword [ebp - 0x220]
mov eax, dword [sym.imp.ucrtbase.dll_malloc]
sub esp, 0x14
mov dword [esp], esi
mov dword [ebp - 0x23c], eax
call eax
mov dword [edi + 8], eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x21c]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterA
mov eax, dword [ebp - 0x21c]
sub esp, 0x14
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverA
mov esi, dword [ebp - 0x220]
mov eax, dword [ebp - 0x23c]
sub esp, 0x18
mov dword [esp], esi
call eax
mov dword [edi + 0xc], eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x21c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverA
sub esp, 0x18
test eax, eax
jne 0x6906c300
test byte [0x690760c0], 2
je 0x6906c1bf
mov eax, dword [edi + 8]
mov eax, dword [eax + 4]
mov dword [esp + 0xc], str.GetPrinterDriverA_failed_for__s__fix_your_config__n
mov dword [esp + 8], str.PRINTDLG_ChangePrinterA
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x690760c0
mov dword [esp], 1
call fcn.6906acc0
jmp 0x6906c1bf
mov eax, dword [ebp - 0x21c]
xor ebx, ebx
mov dword [esp], eax
call sub.winspool.drv_ClosePrinter
mov byte [ebp - 0x218], 0
mov esi, dword [edi + 8]
mov edx, 1
mov dword [ebp - 0x240], edi
mov eax, dword [0x6908d004]
sub esp, 4
jmp 0x6906c338
add ebx, 1
cmp ebx, 0x19
je 0x6906c398
mov ecx, ebx
mov edi, edx
shl edi, cl
mov ecx, edi
and ecx, dword [esi + 0x48]
je 0x6906c330
lea edx, [ebp - 0x118]
lea ecx, [ebx + 0x601]
mov dword [esp], eax
add ebx, 1
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 0xff
call dword [sym.imp.user32.dll_LoadStringA]
lea eax, [ebp - 0x118]
sub esp, 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0x218]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcat]
mov eax, dword [0x6908d004]
mov edx, 1
cmp ebx, 0x19
jne 0x6906c338
lea edx, [ebp - 0x118]
mov dword [esp], eax
mov edi, dword [ebp - 0x240]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xff
mov dword [esp + 4], 0x600
call dword [sym.imp.user32.dll_LoadStringA]
lea eax, [ebp - 0x118]
sub esp, 0x10
mov dword [esp + 4], eax
lea eax, [ebp - 0x218]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcat]
lea eax, [ebp - 0x218]
mov ebx, dword [sym.imp.user32.dll_SetDlgItemTextA]
mov dword [esp + 4], 0x44b
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp], eax
call ebx
mov eax, dword [esi + 0x10]
sub esp, 0xc
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x44a
mov dword [esp], eax
call ebx
mov eax, dword [esi + 0x18]
sub esp, 0xc
test eax, eax
je 0x6906c42c
cmp byte [eax], 0
jne 0x6906c42f
mov eax, dword [esi + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x44d
mov dword [esp], eax
call ebx
mov eax, dword [esi + 0x14]
mov edx, 0x6907d116
sub esp, 0xc
test eax, eax
mov dword [esp + 4], 0x44c
cmove eax, edx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp], eax
call ebx
mov eax, dword [edi]
sub esp, 0xc
mov dword [esp], eax
mov eax, dword [ebp - 0x238]
call eax
mov eax, dword [ebp - 0x234]
mov dword [edi], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.winspool.drv_DocumentPropertiesA
sub esp, 0x18
cmp eax, 0xffffffff
je 0x6906c830
mov dword [esp], eax
mov eax, dword [ebp - 0x23c]
call eax
mov dword [edi], eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x234]
mov dword [esp + 0x14], 2
mov dword [esp + 0x10], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.winspool.drv_DocumentPropertiesA
mov eax, dword [ebp - 0x230]
sub esp, 0x18
mov eax, dword [eax + 8]
test eax, eax
je 0x6906c555
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GlobalLock]
sub esp, 4
mov ebx, eax
test eax, eax
je 0x6906c555
mov eax, dword [edi]
mov dword [esp], ebx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_lstrcmpA]
sub esp, 8
test eax, eax
je 0x6906cf02
mov eax, dword [ebp - 0x230]
mov eax, dword [eax + 8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GlobalUnlock]
sub esp, 4
mov edx, dword [ebp - 0x230]
mov esi, dword [edi]
mov eax, dword [edx + 0x14]
mov dword [ebp - 0x234], eax
and eax, 0x40
mov dword [ebp - 0x250], eax
jne 0x6906c8b3
movzx eax, word [edx + 0x18]
cmp ax, 0xffff
je 0x6906c5a5
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x480
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetDlgItemInt]
sub esp, 0x10
mov eax, dword [ebp - 0x230]
movzx eax, word [eax + 0x1a]
cmp ax, 0xffff
je 0x6906c5db
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x481
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetDlgItemInt]
sub esp, 0x10
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0x420
mov dword [esp + 8], 0x422
mov ebx, dword [sym.imp.user32.dll_CheckRadioButton]
mov dword [esp + 4], 0x420
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 0x10
mov eax, dword [eax + 0x14]
test al, 4
jne 0x6906cd33
mov edx, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [ebp - 0x234], edx
test al, 1
jne 0x6906cbaa
test al, 8
jne 0x6906cde9
test al, 2
jne 0x6906cb76
test al, 0x10
je 0x6906c875
mov eax, dword [edi + 0x14]
mov ebx, dword [ebp - 0x22c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x172
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x43e
mov dword [esp], ebx
call dword [sym.imp.user32.dll_SendDlgItemMessageA]
sub esp, 0x14
mov dword [esp + 8], 1
mov dword [esp], ebx
mov ebx, dword [sym.imp.user32.dll_CheckDlgButton]
mov dword [esp + 4], 0x411
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 0xc
test byte [eax + 0x16], 4
je 0x6906c6a9
test byte [esi + 0x29], 0x80
je 0x6906cc10
mov eax, dword [ebp - 0x230]
mov edx, dword [eax + 8]
test edx, edx
je 0x6906ced9
movsx edx, word [esi + 0x36]
mov eax, 1
test edx, edx
je 0x6906c6cf
mov eax, 0x270f
cmovns eax, edx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x482
mov dword [esp], eax
call dword [sym.imp.user32.dll_SetDlgItemInt]
mov eax, dword [ebp - 0x230]
sub esp, 0x10
mov eax, dword [eax + 0x14]
test eax, 0x40000
je 0x6906c70f
test byte [esi + 0x29], 1
je 0x6906cc7f
shr eax, 5
mov dword [esp + 4], 0x410
and eax, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 0xc
mov eax, dword [eax + 0x14]
test eax, 0x80000
jne 0x6906cdab
test eax, 0x100000
jne 0x6906cd76
mov ebx, dword [ebp - 0x22c]
mov dword [esp + 4], 0x470
mov eax, dword [ebp - 0x234]
mov dword [esp], ebx
call eax
sub esp, 8
test eax, eax
je 0x6906c7b0
mov eax, dword [edi + 8]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xd
mov edx, dword [eax + 0xc]
mov dword [esp + 4], edx
mov eax, dword [eax + 4]
mov dword [esp], eax
call sub.winspool.drv_DeviceCapabilitiesA
sub esp, 0x14
cmp eax, 0xffffffff
mov dword [ebp - 0x240], eax
jne 0x6906c961
lea esi, [esi]
mov eax, dword [ebp - 0x230]
test byte [eax + 0x15], 8
jne 0x6906c1bf
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x40e
mov dword [esp], eax
call dword [sym.imp.user32.dll_GetDlgItem]
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
jmp 0x6906c1bf
mov eax, dword [ebp - 0x234]
mov dword [esp + 0xc], str.Cant_open_printer__s_n
mov dword [esp + 8], str.PRINTDLG_ChangePrinterA
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x690760c0
mov dword [esp], 1
call fcn.6906acc0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x690760c0], 2
je 0x6906c1bf
mov eax, dword [ebp - 0x234]
call fcn.6906aa20
mov dword [esp + 0xc], str.DocumentProperties_fails_on__s_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.PRINTDLG_ChangePrinterA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 1
call fcn.6906acc0
jmp 0x6906c1bf
mov eax, dword [edi + 0x18]
mov ebx, dword [ebp - 0x22c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x172
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x43e
mov dword [esp], ebx
call dword [sym.imp.user32.dll_SendDlgItemMessageA]
sub esp, 0x14
mov dword [esp + 8], 0
jmp 0x6906c67d
mov eax, dword [edi + 8]
movzx ebx, word [esi + 0x2c]
mov edx, 0x471
mov ecx, dword [eax + 4]
mov dword [esp + 4], esi
mov eax, dword [eax + 0xc]
mov dword [esp], eax
mov eax, dword [ebp - 0x22c]
call fcn.6906bca0
mov eax, dword [edi + 8]
mov edx, 0x472
mov ecx, dword [eax + 4]
mov dword [esp + 4], esi
mov eax, dword [eax + 0xc]
mov dword [esp], eax
mov eax, dword [ebp - 0x22c]
call fcn.6906bca0
cmp bx, 1
je 0x6906cbde
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0x421
mov dword [esp + 8], 0x421
mov dword [esp + 4], 0x420
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckRadioButton]
mov eax, dword [edi + 0x20]
sub esp, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x172
mov dword [esp + 4], 0x43c
mov dword [esp], eax
call dword [sym.imp.user32.dll_SendDlgItemMessageA]
sub esp, 0x14
jmp 0x6906c7b0
mov dword [esp], ebx
mov eax, dword [ebp - 0x234]
mov dword [esp + 4], 0x470
call eax
mov dword [ebp - 0x234], eax
mov eax, dword [edi + 8]
sub esp, 8
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov ecx, dword [eax + 4]
mov dword [esp + 4], ecx
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_CreateDCA]
mov edx, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x23c]
sub esp, 0x10
mov ebx, eax
lea eax, [edx*8]
mov dword [ebp - 0x248], edx
mov dword [esp], eax
call ecx
mov edx, eax
mov dword [ebp - 0x240], eax
mov eax, dword [edi + 8]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], esi
mov dword [esp + 8], 0xd
mov ecx, dword [eax + 0xc]
mov dword [esp + 4], ecx
mov eax, dword [eax + 4]
mov dword [esp], eax
call sub.winspool.drv_DeviceCapabilitiesA
mov esi, dword [sym.imp.gdi32.dll_GetDeviceCaps]
sub esp, 0x14
mov dword [esp + 4], 0x58
mov dword [esp], ebx
call esi
sub esp, 8
mov dword [ebp - 0x244], eax
mov dword [esp + 4], 0x5a
mov dword [esp], ebx
call esi
sub esp, 8
mov edi, eax
mov dword [ebp - 0x254], eax
mov dword [esp], ebx
call dword [sym.imp.gdi32.dll_DeleteDC]
mov edx, dword [ebp - 0x234]
mov esi, dword [sym.imp.user32.dll_SendMessageA]
sub esp, 4
mov dword [esp], edx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x14b
call esi
movzx ecx, word [ebp - 0x244]
mov edx, dword [ebp - 0x248]
mov eax, edi
shl eax, 0x10
sub esp, 0x10
mov edi, ecx
or edi, eax
add edx, edx
mov dword [ebp - 0x248], edx
je 0x6906ceec
mov dword [ebp - 0x24c], edi
mov ebx, dword [ebp - 0x250]
jmp 0x6906cb2e
mov dword [esp + 8], eax
lea eax, [ebp - 0x118]
xor ecx, ecx
mov edi, dword [ebp - 0x23c]
mov dword [esp + 0xc], edx
cmp dword [ebp - 0x254], edx
mov dword [esp + 4], str._ld_dpi_x__ld_dpi
sete cl
mov dword [esp], eax
and edi, ecx
call fcn.6906ac10
lea eax, [ebp - 0x118]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x234]
mov dword [esp + 4], 0x143
mov dword [esp], eax
call esi
sub esp, 0x10
mov edx, eax
test edi, edi
jne 0x6906cd00
mov eax, dword [ebp - 0x24c]
mov dword [esp + 8], edx
add ebx, 2
mov dword [esp + 4], 0x151
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x234]
mov dword [esp], eax
call esi
sub esp, 0x10
cmp ebx, dword [ebp - 0x248]
jae 0x6906ceec
mov edx, dword [ebp - 0x240]
mov eax, dword [edx + ebx*4]
mov edx, dword [edx + ebx*4 + 4]
cmp dword [ebp - 0x244], eax
sete byte [ebp - 0x23c]
cmp eax, edx
jne 0x6906ca98
mov dword [esp + 8], eax
lea eax, [ebp - 0x118]
movzx edi, byte [ebp - 0x23c]
mov dword [esp + 4], str._ld_dpi
mov dword [esp], eax
call fcn.6906ac10
jmp 0x6906cac9
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0x422
mov dword [esp + 8], 0x422
mov dword [esp + 4], 0x420
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 0x10
mov eax, dword [eax + 0x14]
jmp 0x6906c63c
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0x421
mov dword [esp + 8], 0x422
mov dword [esp + 4], 0x420
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 0x10
mov eax, dword [eax + 0x14]
jmp 0x6906c62c
mov eax, dword [ebp - 0x22c]
mov dword [esp + 0xc], 0x420
mov dword [esp + 8], 0x421
mov dword [esp + 4], 0x420
mov dword [esp], eax
call dword [sym.imp.user32.dll_CheckRadioButton]
mov eax, dword [edi + 0x1c]
sub esp, 0x10
jmp 0x6906c92e
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
mov dword [esp + 4], 0x411
mov dword [esp], eax
call edx
mov edx, dword [sym.imp.user32.dll_EnableWindow]
sub esp, 8
mov dword [ebp - 0x240], edx
mov dword [esp + 4], 0
mov dword [esp], eax
call edx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x43e
mov dword [esp], eax
call edx
mov edx, dword [ebp - 0x240]
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call edx
sub esp, 8
jmp 0x6906c6a9
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
mov dword [esp + 4], 0x482
mov dword [esp], eax
call edx
mov edx, dword [sym.imp.user32.dll_EnableWindow]
sub esp, 8
mov dword [ebp - 0x240], edx
mov dword [esp + 4], 0
mov dword [esp], eax
call edx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x444
mov dword [esp], eax
call edx
mov edx, dword [ebp - 0x240]
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call edx
mov eax, dword [ebp - 0x230]
sub esp, 8
mov eax, dword [eax + 0x14]
jmp 0x6906c70f
mov dword [esp + 8], eax
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x234]
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x14e
mov dword [esp], eax
call esi
mov edx, dword [ebp - 0x23c]
sub esp, 0x10
jmp 0x6906cafb
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x421
mov dword [esp], eax
mov eax, dword [sym.imp.user32.dll_GetDlgItem]
mov dword [ebp - 0x234], eax
call eax
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_EnableWindow]
mov eax, dword [ebp - 0x230]
sub esp, 8
mov eax, dword [eax + 0x14]
jmp 0x6906c62c
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x410
mov dword [esp], eax
mov eax, dword [ebp - 0x234]
call eax
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_ShowWindow]
sub esp, 8
jmp 0x6906c74e
mov eax, dword [ebp - 0x22c]
mov dword [esp + 4], 0x410
mov dword [esp], eax
mov eax, dword [ebp - 0x234]
call eax
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.user32.dll_EnableWindow]
mov eax, dword [ebp - 0x230]
sub esp, 8
mov eax, dword [eax + 0x14]
jmp 0x6906c743
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
mov dword [esp + 4], 0x422
mov dword [esp], eax
call edx
mov ebx, dword [sym.imp.user32.dll_EnableWindow]
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x441
mov dword [esp], eax
call edx
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x480
mov dword [esp], eax
call edx
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x442
mov dword [esp], eax
call edx
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x22c]
mov edx, dword [ebp - 0x234]
sub esp, 8
mov dword [esp + 4], 0x481
mov dword [esp], eax
call edx
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x230]
sub esp, 8
mov eax, dword [eax + 0x14]
jmp 0x6906c63c
movzx eax, word [eax + 0x20]
mov edx, 1
test eax, eax
cmove eax, edx
jmp 0x6906c6cf
mov eax, dword [ebp - 0x240]
mov dword [esp], eax
mov eax, dword [ebp - 0x238]
call eax
jmp 0x6906c7b0
mov dword [esp + 0x14], 0xa
mov dword [esp + 0x10], ebx
mov eax, dword [edi]
mov dword [esp + 4], 0
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x234]
mov dword [esp], 0
mov dword [esp + 8], eax
call sub.winspool.drv_DocumentPropertiesA
sub esp, 0x18
jmp 0x6906c540