Function at 0x4fabd0
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x158
push ebx
push ecx
push edx
push esi
push edi
push ebp
mov esi, eax
mov dword [esp + 0x1e], esi
mov eax, ebx
mov dword [esp + 0x2a], eax
mov ebp, ecx
mov ebx, edx
mov dword [esp + 0x26], ebx
mov edi, dword [esp + 0x174]
mov dword [edi], 0
cmp eax, 0x82
jne 0x4fac43
push 1
push 0x241b
push 0x241b
mov eax, dword [esi + 0x7f]
push eax
lea eax, [esp + 0x164]
push eax
call sub.USER32.dll_PeekMessageA
cmp eax, 0
je 0x4fac39
mov eax, dword [esp + 0x160]
cmp eax, 0
je 0x4fac04
mov ebx, dword [eax]
call dword [ebx + 4]
jmp 0x4fac04
mov eax, 0
jmp 0x4fb441
cmp eax, 0x120
jne 0x4faca7
mov eax, esi
mov ecx, dword [eax + 4]
call dword [ecx + 0xb4]
cmp eax, 0
je 0x4fac9d
mov ecx, ebp
mov edx, dword [eax + 0x11]
cmp ebx, edx
jne 0x4fac76
mov bl, cl
call fcn.00506804
mov dword [edi], eax
mov eax, 1
jmp 0x4fb441
call fcn.0050666c
cmp eax, 0
je 0x4fac9d
cmp eax, 0
jne 0x4fac87
jmp 0x4fac8a
add eax, 0x7c
mov bl, cl
call fcn.00506804
mov dword [edi], eax
mov eax, 1
jmp 0x4fb441
mov eax, 0
jmp 0x4fb441
cmp eax, 0x2c
jne 0x4facc9
cmp dword [ebx], 1
jne 0x4facbf
mov eax, dword [ebx + 0x14]
call fcn.0050e664
mov dword [edi], 1
mov eax, 1
jmp 0x4fb441
cmp eax, 0x2b
jne 0x4faceb
cmp dword [ebx], 1
jne 0x4face1
mov eax, dword [ebx + 0x2c]
call fcn.0050e27c
mov dword [edi], 1
mov eax, 1
jmp 0x4fb441
cmp eax, 0x11
jne 0x4fad62
push 0x104
lea ebx, [esp + 0x32]
push ebx
push dword [0x59605c]
call sub.KERNEL32.dll_GetModuleFileNameA
push 0
mov eax, ebx
lea ebp, [esp + 0x136]
mov edx, ebp
mov ebx, 0
mov ecx, 0
call fcn.004eb424
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_BringWindowToTop
mov eax, dword [0x5d5c00]
and eax, 8
cmp eax, 0
je 0x4fad3e
mov ebp, 0x5d369c
jmp 0x4fad3e
push 0x1030
push ebp
push str.Application_still_active._n_nQuit_the_application_before_quitting_Windows.
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_MessageBoxA
mov dword [edi], 0
mov eax, 1
jmp 0x4fb441
cmp eax, 0xa1
jne 0x4fae71
cmp dword [0x595d0c], 0
je 0x4fad8d
push 0
push 0
push 0x14f
mov eax, dword [0x595d0c]
mov eax, dword [eax + 0x5b]
push eax
call sub.USER32.dll_SendMessageA
push ebx
push 0
push 0x84
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_SendMessageA
cmp eax, 0xf
jne 0x4fadaf
mov dword [esi + 0x148], 6
jmp 0x4fae24
cmp eax, 0x10
jne 0x4fadc0
mov dword [esi + 0x148], 7
jmp 0x4fae24
cmp eax, 0x11
jne 0x4fadd1
mov dword [esi + 0x148], 8
jmp 0x4fae24
cmp eax, 0xa
jne 0x4fade2
mov dword [esi + 0x148], 1
jmp 0x4fae24
cmp eax, 0xb
jne 0x4fadf3
mov dword [esi + 0x148], 2
jmp 0x4fae24
cmp eax, 0xc
jne 0x4fae04
mov dword [esi + 0x148], 3
jmp 0x4fae24
cmp eax, 0xd
jne 0x4fae15
mov dword [esi + 0x148], 4
jmp 0x4fae24
cmp eax, 0xe
jne 0x4fae24
mov dword [esi + 0x148], 5
cmp dword [esi + 0x148], 0
je 0x4fae50
push ebx
push ebp
push dword [esp + 0x32]
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_DefWindowProcA
mov dword [esi + 0x148], 0
mov eax, 1
jmp 0x4fb441
mov eax, 0
jmp 0x4fb441
push 0xfffffffffffffff0
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetWindowLongA
and eax, 0x20000000
cmp eax, 0
je 0x4fae85
jmp 0x4faebb
cmp eax, 3
jne 0x4fae98
mov eax, dword [esi + 0xc]
and eax, 0x800
cmp eax, 0
jne 0x4fae5a
jmp 0x4faebb
mov eax, esi
mov ebx, 0x1630
mov ecx, 0
call fcn.004fcdfc
jmp 0x4faebb
cmp eax, 0x201
je 0x4faebb
cmp eax, 0x207
je 0x4faebb
cmp eax, 0x204
je 0x4faebb
cmp eax, 0xa7
je 0x4faebb
cmp eax, 0xa4
jne 0x4faee5
cmp dword [0x595d0c], 0
je 0x4faedb
push 0
push 0
push 0x14f
mov eax, dword [0x595d0c]
mov eax, dword [eax + 0x5b]
push eax
call sub.USER32.dll_SendMessageA
mov eax, 0
jmp 0x4fb441
cmp eax, 0x20
jne 0x4faf44
cmp bx, 1
jne 0x4faf3a
cmp dword [0x5d5cb4], 0
je 0x4faf14
push dword [0x5d5cb4]
call sub.USER32.dll_SetCursor
mov dword [edi], 1
mov eax, 1
jmp 0x4fb441
push 0xfffffffffffffff4
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetClassLongA
cmp eax, 0
je 0x4faf3a
push eax
call sub.USER32.dll_SetCursor
mov dword [edi], 1
mov eax, 1
jmp 0x4fb441
mov eax, 0
jmp 0x4fb441
cmp eax, 0x9999
je 0x4faf56
cmp eax, 0x112
jne 0x4fafe7
mov eax, dword [esi + 0xc]
and eax, 0x800
cmp eax, 0
je 0x4fafdd
mov ebx, 0x1620
push 0xfffffffffffffff0
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetWindowLongA
and eax, 0x20000000
cmp eax, 0
sete al
movzx eax, al
and ebp, 0xfff0
cmp ebp, 0xf020
jne 0x4faf92
inc ebx
jmp 0x4faf9a
cmp ebp, 0xf030
jne 0x4faf9d
inc ebx
jmp 0x4fafa5
cmp ebp, 0xf120
jne 0x4fafad
inc ebx
mov eax, 1
jmp 0x4fafb5
cmp ebp, 0xf000
jne 0x4fafd0
inc ebx
jmp 0x4fafd8
mov eax, esi
call fcn.004fc7f8
cmp eax, 1
je 0x4fafc6
jmp 0x4fafdd
mov eax, 1
jmp 0x4fb441
cmp ebp, 0xf010
jne 0x4fafdd
cmp eax, 0
jne 0x4fafb8
mov eax, 0
jmp 0x4fb441
cmp eax, 0x3e0
jne 0x4fb096
lea edx, [esi + 0x1e3]
mov eax, edx
mov eax, dword [eax + 4]
mov dword [esp + 0x1a], eax
mov eax, dword [esp + 0x1a]
cmp eax, 0
je 0x4fb023
dec eax
mov dword [esp + 0x1a], eax
mov ebx, edx
mov ebx, dword [ebx]
mov eax, dword [ebx + eax*4]
mov ebx, ebp
mov ecx, dword [esp + 0x26]
mov edi, dword [eax]
call dword [edi + 0x14]
jmp 0x4fb001
mov eax, esi
mov ebx, dword [eax + 4]
call dword [ebx + 0x60]
cmp eax, 0
je 0x4fb081
mov ebx, 0x3f
cmp ebx, 0
jl 0x4fb081
mov eax, ebx
imul eax, eax, 0x3e
mov esi, dword [eax + 0x5d4b90]
mov dword [esp + 0x22], esi
cmp esi, 0
je 0x4fb07e
mov eax, esi
mov ecx, dword [esi + 4]
mov eax, dword [esp + 0x22]
call dword [ecx + 0x5c]
cmp eax, 0
je 0x4fb072
push dword [esp + 0x26]
push ebp
push 0x3e0
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_SendMessageA
mov esi, dword [esi + 0x1ae]
mov dword [esp + 0x22], esi
jmp 0x4fb049
dec ebx
jmp 0x4fb035
mov eax, 0
jmp 0x4fb441
cmp dword [esi + 0x17a], 0
je 0x4fb0a4
jmp 0x4fb0b5
cmp eax, 0x113
jne 0x4fb0bf
cmp ebp, 1
je 0x4fb08b
jmp 0x4fb0b5
mov eax, esi
mov ebx, 0x160b
mov ecx, 0
call fcn.004fcdfc
mov eax, 0
jmp 0x4fb441
cmp eax, 0x233
jne 0x4fb1b1
cmp esi, 0
jne 0x4fb0d3
mov eax, esi
jmp 0x4fb0da
mov eax, esi
add eax, 0xfb
mov ebx, ebp
mov ecx, esi
mov edx, 0
call fcn.00432a30
mov eax, esi
mov ebx, 0x1413
mov ecx, 0
call fcn.004fcdfc
mov eax, 0
jmp 0x4fb441
push 0x10
mov eax, ebx
push eax
call sub.KERNEL32.dll_IsBadReadPtr
cmp eax, 0
je 0x4fb117
jmp 0x4fb1c9
mov esi, ebx
mov eax, dword [esi + 8]
sub eax, dword [esi]
mov dword [esp + 0x150], eax
mov eax, dword [esi + 0xc]
sub eax, dword [esi + 4]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x1e]
lea ebx, [esp + 0x150]
lea ecx, [esp + 0x14c]
mov edx, ebp
call fcn.004feab0
mov eax, ebp
cmp eax, 3
je 0x4fb15c
cmp eax, 4
je 0x4fb15c
cmp eax, 5
jne 0x4fb16b
mov eax, dword [esi + 0xc]
sub eax, dword [esp + 0x14c]
mov dword [esi + 4], eax
jmp 0x4fb178
mov eax, dword [esi + 4]
add eax, dword [esp + 0x14c]
mov dword [esi + 0xc], eax
cmp ebp, 1
je 0x4fb187
cmp ebp, 4
je 0x4fb187
cmp ebp, 7
jne 0x4fb195
mov eax, dword [esi + 8]
sub eax, dword [esp + 0x150]
mov dword [esi], eax
jmp 0x4fb1a1
mov eax, dword [esi]
add eax, dword [esp + 0x150]
mov dword [esi + 8], eax
mov dword [edi], 1
mov eax, 1
jmp 0x4fb441
cmp eax, 0x214
jne 0x4fb293
cmp dword [esi + 0x144], 0
jne 0x4fb103
mov eax, 0
jmp 0x4fb441
cmp dword [esi + 0x148], 0
jne 0x4fb1e1
jmp 0x4fb2c4
lea eax, [esp + 0x13c]
push eax
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetWindowRect
push 0xfffffffffffffff0
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetWindowLongA
and eax, 0x40000000
cmp eax, 0
je 0x4fb22e
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetParent
mov ebx, eax
lea eax, [esp + 0x13c]
push eax
push ebx
call sub.USER32.dll_ScreenToClient
lea eax, [esp + 0x144]
push eax
push ebx
call sub.USER32.dll_ScreenToClient
mov eax, esi
lea ebx, [edi + 0x10]
lea ecx, [edi + 0x14]
mov edx, dword [esi + 0x148]
mov eax, dword [esp + 0x1e]
call fcn.004feab0
mov eax, dword [esi + 0x148]
cmp eax, 3
je 0x4fb25a
cmp eax, 4
je 0x4fb25a
cmp eax, 5
jne 0x4fb267
mov eax, dword [esp + 0x148]
sub eax, dword [edi + 0x14]
mov dword [edi + 0xc], eax
mov eax, dword [esi + 0x148]
cmp eax, 1
je 0x4fb27c
cmp eax, 4
je 0x4fb27c
cmp eax, 7
jne 0x4fb289
mov eax, dword [esp + 0x144]
sub eax, dword [edi + 0x10]
mov dword [edi + 8], eax
mov eax, 1
jmp 0x4fb441
cmp eax, 0x46
jne 0x4fb2ce
mov edi, ebx
cmp dword [0x595fd7], 0
je 0x4fb2b7
mov eax, dword [edi + 0x18]
and eax, 0xffffffbf
or eax, 0x80
or eax, 0x10
or eax, 4
mov dword [edi + 0x18], eax
cmp dword [esi + 0x144], 0
jne 0x4fb1d3
mov eax, 0
jmp 0x4fb441
cmp eax, 0x47
jne 0x4fb363
push 0xfffffffffffffff0
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_GetWindowLongA
mov ebx, eax
and ebx, 0x1000000
cmp ebx, 0
je 0x4fb2fb
mov edx, 0x4000
mov ebx, 0x1633
jmp 0x4fb31b
and eax, 0x20000000
cmp eax, 0
je 0x4fb311
mov edx, 0x8000
mov ebx, 0x1634
jmp 0x4fb31b
mov edx, 0
mov ebx, 0x1632
mov eax, dword [esi + 0xc]
and eax, 0x800
cmp eax, 0
je 0x4fb346
mov ecx, dword [esi + 0x1ca]
and ecx, 0xc000
mov eax, edx
cmp ecx, eax
je 0x4fb346
mov eax, esi
mov ecx, 0
call fcn.004fcdfc
mov eax, dword [esi + 0x1ca]
and eax, 0xffff3fff
or eax, edx
mov dword [esi + 0x1ca], eax
mov eax, 0
jmp 0x4fb441
cmp eax, 5
jne 0x4fb39c
mov eax, esi
mov ebx, dword [esi + 4]
mov eax, dword [esp + 0x1e]
call dword [ebx + 0x70]
cmp dword [esi + 0x1be], 0
je 0x4fb392
mov eax, dword [esi + 0x1be]
mov eax, dword [esi + 0x1be]
mov ebx, dword [eax + 4]
call dword [ebx + 0x138]
mov eax, 0
jmp 0x4fb441
cmp eax, 0x15
jne 0x4fb3b5
call fcn.004f2484
call fcn.004f6304
mov eax, 0
jmp 0x4fb441
cmp eax, 2
jne 0x4fb3eb
cmp dword [esi + 0x19e], 0
je 0x4fb3cb
mov eax, dword [esi + 0x7f]
call fcn.005022b4
cmp dword [esi + 0x196], 0
je 0x4fb3e4
mov eax, dword [esi + 0x196]
push eax
mov eax, dword [esi + 0x7f]
push eax
call sub.USER32.dll_KillTimer
mov eax, 0
jmp 0x4fb441
cmp eax, 7
jne 0x4fb414
mov eax, dword [esi + 0x1ca]
and eax, 0x400
cmp eax, 0
jne 0x4fb40d
mov eax, dword [esi + 0x7f]
mov dword [0x5d5bd4], eax
call fcn.0044c8a8
mov eax, 0
jmp 0x4fb441
cmp eax, 8
jne 0x4fb43c
cmp dword [0x5d5c10], 0
je 0x4fb435
mov eax, dword [0x5d5c10]
mov ebx, dword [eax + 4]
mov eax, dword [0x5d5c10]
call dword [ebx + 0x120]
mov eax, 0
jmp 0x4fb441
mov eax, 0
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
add esp, 0x158
ret 4