Function at 0x100943d8
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x194
mov eax, dword [0x1065e7ec]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
xor eax, eax
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
mov word [ebp - 0xcc], ax
push dword [esi + 0x18]
call edi
test eax, eax
je 0x1009441a
push 0x64
lea eax, [ebp - 0xcc]
push eax
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetClassNameW]
push dword [esi + 0x10]
lea eax, [ebp - 0xcc]
push dword [esi + 0x10]
push eax
push dword [esi + 0x18]
push str.Properties_for_HWND0x_x__s__LayerHost__h_d__d_h__:_n
push 0x40
pop ebx
push ebx
push 3
call fcn.10092625
push str._______________________________________________________________________________________n
push ebx
push 3
call fcn.10052e6b
cmp dword [esi + 0x18], 0
jne 0x1009445f
push str._none_
push ebx
push 3
call fcn.10052e6b
jmp 0x10094951
push dword [esi + 0x18]
call edi
test eax, eax
jne 0x1009446f
push str.IsWindow___returned_false__n
jmp 0x10094452
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_IsWindowVisible]
push eax
push str.IsWindowVisible_____d_n
push ebx
push 3
call fcn.10092597
lea eax, [ebp - 0x18c]
push eax
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetClientRect]
push dword [ebp - 0x180]
push dword [ebp - 0x184]
push str._nclient_rect:_L0__T0__R_d__B_d_n
push ebx
push 3
call fcn.1004473e
lea eax, [ebp - 0x18c]
push eax
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x180]
sub eax, dword [ebp - 0x188]
push eax
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x18c]
push eax
push dword [ebp - 0x180]
push dword [ebp - 0x184]
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
push str.window_rect:_L_d__T_d__R_d__B_d_width_d__height_d_n
call fcn.100926c2
push str._nstyle_bits:_n______________n
mov eax, 0x20000
mov dword [ebp - 0x168], str.WS_OVERLAPPED
mov ecx, 0x10000
mov dword [ebp - 0x164], VariantInit
push 0x40
xor ebx, ebx
mov dword [ebp - 0x160], str.WS_POPUP
push 3
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x15c], 0x40000000
mov dword [ebp - 0x158], str.WS_CHILD
mov dword [ebp - 0x154], 0x20000000
mov dword [ebp - 0x150], str.WS_MINIMIZE
mov dword [ebp - 0x14c], 0x10000000
mov dword [ebp - 0x148], str.WS_VISIBLE
mov dword [ebp - 0x144], 0x8000000
mov dword [ebp - 0x140], str.WS_DISABLED
mov dword [ebp - 0x13c], 0x4000000
mov dword [ebp - 0x138], str.WS_CLIPSIBLINGS
mov dword [ebp - 0x134], 0x2000000
mov dword [ebp - 0x130], str.WS_CLIPCHILDREN
mov dword [ebp - 0x12c], 0x1000000
mov dword [ebp - 0x128], str.WS_MAXIMIZE
mov dword [ebp - 0x124], 0xc00000
mov dword [ebp - 0x120], str.WS_CAPTION
mov dword [ebp - 0x11c], 0x800000
mov dword [ebp - 0x118], str.WS_BORDER
mov dword [ebp - 0x114], 0x400000
mov dword [ebp - 0x110], str.WS_DLGFRAME
mov dword [ebp - 0x10c], 0x200000
mov dword [ebp - 0x108], str.WS_VSCROLL
mov dword [ebp - 0x104], 0x100000
mov dword [ebp - 0x100], str.WS_HSCROLL
mov dword [ebp - 0xfc], 0x80000
mov dword [ebp - 0xf8], str.WS_SYSMENU
mov dword [ebp - 0xf4], 0x40000
mov dword [ebp - 0xf0], str.WS_THICKFRAME
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], str.WS_GROUP
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xe0], str.WS_TABSTOP
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], str.WS_MINIMIZEBOX
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xd0], str.WS_MAXIMIZEBOX
call fcn.10052e6b
push 0xfffffffffffffff0
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edx, eax
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x194], edx
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp + edi*8 - 0x16c]
and ecx, edx
cmp ecx, dword [ebp + edi*8 - 0x16c]
jne 0x100946ee
push dword [ebp + edi*8 - 0x168]
push 0x1035a9d8
push 0x40
push 3
call fcn.1005c548
mov eax, dword [ebp - 0x190]
or eax, dword [ebp + edi*8 - 0x16c]
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x190], eax
inc edi
cmp edi, 0x14
jb 0x100946ae
xor eax, edx
je 0x10094707
push eax
push str._UNKNOWN:__x__n
push 0x40
push 3
call fcn.10092597
push str._nextended_style_bits:_n______________n
push 0x40
push 3
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0x178], str.WS_EX_DLGMODALFRAME
mov dword [ebp - 0x174], 4
mov dword [ebp - 0x170], str.WS_EX_NOPARENTNOTIFY
mov dword [ebp - 0x16c], 8
mov dword [ebp - 0x168], str.WS_EX_TOPMOST
mov dword [ebp - 0x164], 0x10
mov dword [ebp - 0x160], str.WS_EX_ACCEPTFILES
mov dword [ebp - 0x15c], 0x20
mov dword [ebp - 0x158], str.WS_EX_TRANSPARENT
mov dword [ebp - 0x154], 0x40
mov dword [ebp - 0x150], str.WS_EX_MDICHILD
mov dword [ebp - 0x14c], 0x80
mov dword [ebp - 0x148], str.WS_EX_TOOLWINDOW
mov dword [ebp - 0x144], 0x100
mov dword [ebp - 0x140], str.WS_EX_WINDOWEDGE
mov dword [ebp - 0x13c], 0x200
mov dword [ebp - 0x138], str.WS_EX_CLIENTEDGE
mov dword [ebp - 0x134], 0x400
mov dword [ebp - 0x130], str.WS_EX_CONTEXTHELP
mov dword [ebp - 0x12c], 0x1000
mov dword [ebp - 0x128], str.WS_EX_RIGHT
mov dword [ebp - 0x124], 0x2000
mov dword [ebp - 0x120], str.WS_EX_RTLREADING
mov dword [ebp - 0x11c], 0x4000
mov dword [ebp - 0x118], str.WS_EX_LEFTSCROLLBAR
mov dword [ebp - 0x114], 0x10000
mov dword [ebp - 0x110], str.WS_EX_CONTROLPARENT
mov dword [ebp - 0x10c], 0x20000
mov dword [ebp - 0x108], str.WS_EX_STATICEDGE
mov dword [ebp - 0x104], 0x40000
mov dword [ebp - 0x100], str.WS_EX_APPWINDOW
mov dword [ebp - 0xfc], 0x80000
mov dword [ebp - 0xf8], str.WS_EX_LAYERED
mov dword [ebp - 0xf4], 0x100000
mov dword [ebp - 0xf0], str.WS_EX_NOINHERITLAYOUT
mov dword [ebp - 0xec], 0x200000
mov dword [ebp - 0xe8], str.WS_EX_NOREDIRECTIONBITMAP
mov dword [ebp - 0xe4], 0x400000
mov dword [ebp - 0xe0], str.WS_EX_LAYOUTRTL
mov dword [ebp - 0xdc], 0x2000000
mov dword [ebp - 0xd8], str.WS_EX_COMPOSITED
mov dword [ebp - 0xd4], 0x8000000
mov dword [ebp - 0xd0], str.WS_EX_NOACTIVATE
call fcn.10052e6b
push 0xffffffffffffffec
push dword [esi + 0x18]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov esi, eax
test esi, esi
je 0x1009492b
mov edi, ebx
mov eax, dword [ebp + edi*8 - 0x17c]
and eax, esi
cmp eax, dword [ebp + edi*8 - 0x17c]
jne 0x1009490e
push dword [ebp + edi*8 - 0x178]
push 0x1035a9d8
push 0x40
push 3
call fcn.1005c548
or ebx, dword [ebp + edi*8 - 0x17c]
inc edi
cmp edi, 0x16
jb 0x100948e0
cmp esi, ebx
je 0x10094939
xor esi, ebx
push esi
push str._UNKNOWN:__x__n
push 0x40
push 3
call fcn.10092597
jmp 0x10094939
push str._NONE__n
push 0x40
push 3
call fcn.10052e6b
mov eax, dword [0x10666f58]
mov ecx, 0x10666f58
call dword [eax + 0x64]
test eax, eax
je 0x10094951
mov ecx, eax
call fcn.100c4671
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.102790a9
mov esp, ebp
pop ebp
ret