Function at 0x487f00
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
mov edx, str.WS_OVERLAPPED
mov ecx, eax
push esi
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x487f36
test si, si
je 0x487f32
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x487f36
add ecx, 4
add edx, 4
test si, si
jne 0x487f10
xor ecx, ecx
jmp 0x487f3b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x488886
mov edx, str.WS_POPUP
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x487f76
test si, si
je 0x487f72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x487f76
add ecx, 4
add edx, 4
test si, si
jne 0x487f50
xor ecx, ecx
jmp 0x487f7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x487f89
mov esi, SysReAllocStringLen
jmp 0x488888
mov edx, str.WS_CHILD
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x487fb6
test si, si
je 0x487fb2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x487fb6
add ecx, 4
add edx, 4
test si, si
jne 0x487f90
xor ecx, ecx
jmp 0x487fbb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x487fc9
mov esi, 0x40000000
jmp 0x488888
mov edx, str.WS_MINIMIZE
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x487ff6
test si, si
je 0x487ff2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x487ff6
add ecx, 4
add edx, 4
test si, si
jne 0x487fd0
xor ecx, ecx
jmp 0x487ffb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488009
mov esi, 0x20000000
jmp 0x488888
mov edx, str.WS_VISIBLE
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488036
test si, si
je 0x488032
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488036
add ecx, 4
add edx, 4
test si, si
jne 0x488010
xor ecx, ecx
jmp 0x48803b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488049
mov esi, 0x10000000
jmp 0x488888
mov edx, str.WS_DISABLED
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488076
test si, si
je 0x488072
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488076
add ecx, 4
add edx, 4
test si, si
jne 0x488050
xor ecx, ecx
jmp 0x48807b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488089
mov esi, 0x8000000
jmp 0x488888
mov edx, str.WS_CLIPSIBLINGS
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4880b6
test si, si
je 0x4880b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4880b6
add ecx, 4
add edx, 4
test si, si
jne 0x488090
xor ecx, ecx
jmp 0x4880bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4880c9
mov esi, 0x4000000
jmp 0x488888
mov edx, str.WS_CLIPCHILDREN
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4880f6
test si, si
je 0x4880f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4880f6
add ecx, 4
add edx, 4
test si, si
jne 0x4880d0
xor ecx, ecx
jmp 0x4880fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488109
mov esi, 0x2000000
jmp 0x488888
mov edx, str.WS_MAXIMIZE
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488136
test si, si
je 0x488132
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488136
add ecx, 4
add edx, 4
test si, si
jne 0x488110
xor ecx, ecx
jmp 0x48813b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488149
mov esi, 0x1000000
jmp 0x488888
mov edx, str.WS_CAPTION
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488176
test si, si
je 0x488172
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488176
add ecx, 4
add edx, 4
test si, si
jne 0x488150
xor ecx, ecx
jmp 0x48817b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488189
mov esi, 0xc00000
jmp 0x488888
mov edx, str.WS_BORDER
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4881b6
test si, si
je 0x4881b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4881b6
add ecx, 4
add edx, 4
test si, si
jne 0x488190
xor ecx, ecx
jmp 0x4881bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4881c9
mov esi, 0x800000
jmp 0x488888
mov edx, str.WS_DLGFRAME
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4881f6
test si, si
je 0x4881f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4881f6
add ecx, 4
add edx, 4
test si, si
jne 0x4881d0
xor ecx, ecx
jmp 0x4881fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488209
mov esi, 0x400000
jmp 0x488888
mov edx, str.WS_VSCROLL
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488236
test si, si
je 0x488232
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488236
add ecx, 4
add edx, 4
test si, si
jne 0x488210
xor ecx, ecx
jmp 0x48823b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488249
mov esi, 0x200000
jmp 0x488888
mov edx, str.WS_HSCROLL
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488276
test si, si
je 0x488272
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488276
add ecx, 4
add edx, 4
test si, si
jne 0x488250
xor ecx, ecx
jmp 0x48827b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488289
mov esi, 0x100000
jmp 0x488888
mov edx, str.WS_SYSMENU
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4882b6
test si, si
je 0x4882b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4882b6
add ecx, 4
add edx, 4
test si, si
jne 0x488290
xor ecx, ecx
jmp 0x4882bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4882c9
mov esi, 0x80000
jmp 0x488888
mov edx, str.WS_THICKFRAME
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4882f6
test si, si
je 0x4882f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4882f6
add ecx, 4
add edx, 4
test si, si
jne 0x4882d0
xor ecx, ecx
jmp 0x4882fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488309
mov esi, 0x40000
jmp 0x488888
mov edx, str.WS_GROUP
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488336
test si, si
je 0x488332
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488336
add ecx, 4
add edx, 4
test si, si
jne 0x488310
xor ecx, ecx
jmp 0x48833b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488349
mov esi, 0x20000
jmp 0x488888
mov edx, str.WS_TABSTOP
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488376
test si, si
je 0x488372
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488376
add ecx, 4
add edx, 4
test si, si
jne 0x488350
xor ecx, ecx
jmp 0x48837b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488389
mov esi, 0x10000
jmp 0x488888
mov edx, str.WS_MINIMIZEBOX
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4883b6
test si, si
je 0x4883b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4883b6
add ecx, 4
add edx, 4
test si, si
jne 0x488390
xor ecx, ecx
jmp 0x4883bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4883c9
mov esi, 0x20000
jmp 0x488888
mov edx, str.WS_MAXIMIZEBOX
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4883f6
test si, si
je 0x4883f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4883f6
add ecx, 4
add edx, 4
test si, si
jne 0x4883d0
xor ecx, ecx
jmp 0x4883fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488409
mov esi, 0x10000
jmp 0x488888
mov edx, str.WS_TILED
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488436
test si, si
je 0x488432
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488436
add ecx, 4
add edx, 4
test si, si
jne 0x488410
xor ecx, ecx
jmp 0x48843b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x488886
mov edx, str.WS_ICONIC
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x488476
test si, si
je 0x488472
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488476
add ecx, 4
add edx, 4
test si, si
jne 0x488450
xor ecx, ecx
jmp 0x48847b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488489
mov esi, 0x20000000
jmp 0x488888
mov edx, str.WS_SIZEBOX
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4884b6
test si, si
je 0x4884b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4884b6
add ecx, 4
add edx, 4
test si, si
jne 0x488490
xor ecx, ecx
jmp 0x4884bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4884c9
mov esi, 0x40000
jmp 0x488888
mov edx, str.WS_TILEDWINDOW
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4884f6
test si, si
je 0x4884f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4884f6
add ecx, 4
add edx, 4
test si, si
jne 0x4884d0
xor ecx, ecx
jmp 0x4884fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488509
mov esi, 0xcf0000
jmp 0x488888
mov edx, str.ES_LEFT
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488536
test si, si
je 0x488532
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488536
add ecx, 4
add edx, 4
test si, si
jne 0x488510
xor ecx, ecx
jmp 0x48853b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x488886
mov edx, str.ES_CENTER
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x488576
test si, si
je 0x488572
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488576
add ecx, 4
add edx, 4
test si, si
jne 0x488550
xor ecx, ecx
jmp 0x48857b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488587
lea esi, [ecx + 1]
jmp 0x488888
mov edx, str.ES_RIGHT
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x4885b6
test si, si
je 0x4885b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4885b6
add ecx, 4
add edx, 4
test si, si
jne 0x488590
xor ecx, ecx
jmp 0x4885bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4885c7
lea esi, [ecx + 2]
jmp 0x488888
mov edx, str.ES_MULTILINE
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x4885f6
test si, si
je 0x4885f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4885f6
add ecx, 4
add edx, 4
test si, si
jne 0x4885d0
xor ecx, ecx
jmp 0x4885fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488607
lea esi, [ecx + 4]
jmp 0x488888
mov edx, str.ES_UPPERCASE
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x488636
test si, si
je 0x488632
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488636
add ecx, 4
add edx, 4
test si, si
jne 0x488610
xor ecx, ecx
jmp 0x48863b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488647
lea esi, [ecx + 8]
jmp 0x488888
mov edx, str.ES_LOWERCASE
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x488676
test si, si
je 0x488672
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488676
add ecx, 4
add edx, 4
test si, si
jne 0x488650
xor ecx, ecx
jmp 0x48867b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488687
lea esi, [ecx + 0x10]
jmp 0x488888
mov edx, str.ES_PASSWORD
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x4886b6
test si, si
je 0x4886b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4886b6
add ecx, 4
add edx, 4
test si, si
jne 0x488690
xor ecx, ecx
jmp 0x4886bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4886c7
lea esi, [ecx + 0x20]
jmp 0x488888
mov edx, str.ES_AUTOVSCROLL
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x4886f6
test si, si
je 0x4886f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4886f6
add ecx, 4
add edx, 4
test si, si
jne 0x4886d0
xor ecx, ecx
jmp 0x4886fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488707
lea esi, [ecx + 0x40]
jmp 0x488888
mov edx, str.ES_AUTOHSCROLL
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x488736
test si, si
je 0x488732
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488736
add ecx, 4
add edx, 4
test si, si
jne 0x488710
xor ecx, ecx
jmp 0x48873b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488749
mov esi, 0x80
jmp 0x488888
mov edx, str.ES_NOHIDESEL
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488776
test si, si
je 0x488772
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488776
add ecx, 4
add edx, 4
test si, si
jne 0x488750
xor ecx, ecx
jmp 0x48877b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488789
mov esi, 0x100
jmp 0x488888
mov edx, str.ES_OEMCONVERT
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4887b6
test si, si
je 0x4887b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4887b6
add ecx, 4
add edx, 4
test si, si
jne 0x488790
xor ecx, ecx
jmp 0x4887bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x4887c9
mov esi, 0x400
jmp 0x488888
mov edx, str.ES_READONLY
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x4887f6
test si, si
je 0x4887f2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x4887f6
add ecx, 4
add edx, 4
test si, si
jne 0x4887d0
xor ecx, ecx
jmp 0x4887fb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488809
mov esi, 0x800
jmp 0x488888
mov edx, str.ES_WANTRETURN
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488836
test si, si
je 0x488832
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488836
add ecx, 4
add edx, 4
test si, si
jne 0x488810
xor ecx, ecx
jmp 0x48883b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488849
mov esi, 0x1000
jmp 0x488888
mov edx, str.ES_NUMBER
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x488876
test si, si
je 0x488872
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x488876
add ecx, 4
add edx, 4
test si, si
jne 0x488850
xor ecx, ecx
jmp 0x48887b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x488886
mov esi, 0x2000
jmp 0x488888
xor esi, esi
add eax, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [eax + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4888a0
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
pop esi
pop ebp
ret