Function at 0x49dafd
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x118
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov esi, dword [ebp + 8]
lea edi, [ebp - 0x60]
cld
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xbc], 0x5c
mov dword [ebp - reloc.gdi32.dll_AbortDoc], 0x5c
lea eax, [ebp - 0xbc]
push eax
push ecx
push 0x43a
push ebx
call sub.user32.dll_SendMessageW
lea eax, reloc.gdi32.dll_AbortDoc
push eax
push 1
push 0x43a
push ebx
call sub.user32.dll_SendMessageW
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 0x20000000
cmp eax, 0x20000000
jne 0x49db6f
lea esi, [ebp - 0xfe]
jmp 0x49db87
mov eax, dword [ebp - 0xb8]
and eax, 0x20000000
cmp eax, 0x20000000
jne 0x49db94
lea esi, [ebp - 0xa2]
lea edi, [ebp - 0x44]
cld
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
jmp 0x49dba9
mov dword [ebp - 0x44], 0x720041
mov dword [ebp - 0x40], 0x610069
mov dword [ebp - 0x3c], 0x6c
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 0x8000000
cmp eax, 0x8000000
jne 0x49dbc3
mov al, byte [ebp - 0x100]
jmp 0x49dbe4
mov eax, dword [ebp - 0xb8]
and eax, 0x8000000
cmp eax, 0x8000000
jne 0x49dbdd
mov al, byte [ebp - 0xa4]
jmp 0x49dbe4
push 1
call fcn.00426edc
mov byte [ebp - 0x49], al
mov dword [ebp - 0x50], 0x190
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 1
cmp eax, 1
jne 0x49dc04
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
jmp 0x49dc18
mov eax, dword [ebp - 0xb8]
and eax, 1
cmp eax, 1
jne 0x49dc27
mov eax, dword [ebp - 0xb4]
and eax, 1
cmp eax, 1
jne 0x49dc27
mov dword [ebp - 0x50], reloc.gdi32.dll_AbortDoc
push ebx
call sub.user32.dll_GetDC
mov esi, eax
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 0x80000000
cmp eax, 0x80000000
jne 0x49dc57
push 0x5a0
push 0x5a
push esi
call sub.gdi32.dll_GetDeviceCaps
push eax
push dword [ebp - 0x10c]
jmp 0x49dc8a
mov eax, dword [ebp - 0xb8]
and eax, 0x80000000
cmp eax, 0x80000000
push 0x5a0
push 0x5a
push esi
jne 0x49dc7f
call sub.gdi32.dll_GetDeviceCaps
push eax
push dword [ebp - 0xb0]
jmp 0x49dc8a
call sub.gdi32.dll_GetDeviceCaps
push eax
push 0xc8
call sub.KernelBase.dll_MulDiv
neg eax
mov dword [ebp - 0x60], eax
push esi
push ebx
call sub.user32.dll_ReleaseDC
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 2
cmp eax, 2
jne 0x49dcb1
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
jmp 0x49dcc5
mov eax, dword [ebp - 0xb8]
and eax, 2
cmp eax, 2
jne 0x49dcd1
mov eax, dword [ebp - 0xb4]
and eax, 2
cmp eax, 2
sete byte [ebp - 0x4c]
jmp 0x49dcd4
mov byte [ebp - 0x4c], ah
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 8
cmp eax, 8
jne 0x49dcea
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
jmp 0x49dcfe
mov eax, dword [ebp - 0xb8]
and eax, 8
cmp eax, 8
jne 0x49dd0a
mov eax, dword [ebp - 0xb4]
and eax, 8
cmp eax, 8
sete byte [ebp - 0x4a]
jmp 0x49dd0d
mov byte [ebp - 0x4a], ah
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 4
cmp eax, 4
jne 0x49dd23
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
jmp 0x49dd37
mov eax, dword [ebp - 0xb8]
and eax, 4
cmp eax, 4
jne 0x49dd43
mov eax, dword [ebp - 0xb4]
and eax, 4
cmp eax, 4
sete byte [ebp - 0x4b]
jmp 0x49dd46
mov byte [ebp - 0x4b], ah
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
and eax, 0x40000000
cmp eax, 0x40000000
jne 0x49dd60
mov eax, dword [ebp - reloc.gdi32.dll_AbortDoc]
jmp 0x49dd81
mov eax, dword [ebp - 0xb8]
and eax, 0x40000000
cmp eax, 0x40000000
jne 0x49dd7a
mov eax, dword [ebp - 0xa8]
jmp 0x49dd81
push 8
call sub.user32.dll_GetSysColor
mov dword [ebp - 4], eax
push 9
lea eax, [ebp - 0x60]
push eax
add eax, 0x5c
push eax
call fcn.00487c0d
test al, al
je 0x49deab
mov dword [ebp - 0xbc], 0x5c
mov dword [ebp - 0xb8], 0xf000001f
mov dword [ebp - 0xb4], 0
mov edi, dword [ebp - 4]
push 8
call sub.user32.dll_GetSysColor
cmp edi, eax
jne 0x49ddd1
mov dword [ebp - 0xb4], reloc.gdi32.dll_AbortDoc
cmp byte [ebp - 0x4c], 0
je 0x49ddde
or byte [ebp - 0xb4], 2
cmp byte [ebp - 0x4b], 0
je 0x49ddeb
or byte [ebp - 0xb4], 4
cmp byte [ebp - 0x4a], 0
je 0x49ddf8
or byte [ebp - 0xb4], 8
cmp dword [ebp - 0x50], reloc.gdi32.dll_AbortDoc
jle 0x49de08
or byte [ebp - 0xb4], 1
push ebx
call sub.user32.dll_GetDC
mov esi, eax
push 0x5a
push eax
call sub.gdi32.dll_GetDeviceCaps
push eax
push 0x5a0
push dword [ebp - 0x60]
call sub.KernelBase.dll_MulDiv
neg eax
mov dword [ebp - 0xb0], eax
push esi
push ebx
call sub.user32.dll_ReleaseDC
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], edi
mov al, byte [ebp - 0x49]
mov ah, byte [ebp - 0x45]
mov word [ebp - 0xa4], ax
lea esi, [ebp - 0x44]
lea edi, [ebp - 0xa2]
cld
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xbc]
push eax
push 1
push 0x444
push ebx
call sub.user32.dll_SendMessageW
mov dword [ebp - 0xb8], 0x8000000
lea eax, [ebp - 0xbc]
push eax
push 1
push 0x444
push ebx
call sub.user32.dll_SendMessageW
mov edi, 0x5cd1ac
lea esi, [ebp - 0x60]
cld
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
push ebx
call sub.user32.dll_SetFocus
pop edi
pop esi
pop ebx
leave
ret 8