joyce8/EMBER2024-capa huggingface dataset:
Function at 0x438ed0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b96de
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CPlayListViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x438f1a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x438f30
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x438f42
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x438f77
mov edx, dword [eax + 8]
test edx, edx
jne 0x438f77
cmp byte [eax], bl
je 0x438f77
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x439320
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9738
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.00435c20
mov eax, dword [esp + 0x20]
xor edi, edi
push 0xffffffffffffffff
lea ecx, [esi + 8]
mov dword [esi], vtable.CViewInfo_class_CVideoViewDisp_.0
push edi
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edi
push eax
mov dword [esp + 0x24], edi
mov word [ecx + 4], di
call fcn.00405dc0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esi + 0x24], ecx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0xc
Function at 0x43a1e0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b983e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CVideoViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x43a22a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x43a240
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x43a252
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x43a287
mov edx, dword [eax + 8]
test edx, edx
jne 0x43a287
cmp byte [eax], bl
je 0x43a287
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x43a630
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9898
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.00435c20
mov eax, dword [esp + 0x20]
xor edi, edi
push 0xffffffffffffffff
lea ecx, [esi + 8]
mov dword [esi], vtable.CViewInfo_class_CTrayViewDisp_.0
push edi
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edi
push eax
mov dword [esp + 0x24], edi
mov word [ecx + 4], di
call fcn.00405dc0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esi + 0x24], ecx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0xc
Function at 0x43b4f0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b999e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CTrayViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x43b53a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x43b550
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x43b562
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x43b597
mov edx, dword [eax + 8]
test edx, edx
jne 0x43b597
cmp byte [eax], bl
je 0x43b597
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x43b940
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b99f8
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.00435c20
mov eax, dword [esp + 0x20]
xor edi, edi
push 0xffffffffffffffff
lea ecx, [esi + 8]
mov dword [esi], vtable.CViewInfo_class_CLeftTopOSDViewDisp_.0
push edi
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edi
push eax
mov dword [esp + 0x24], edi
mov word [ecx + 4], di
call fcn.00405dc0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esi + 0x24], ecx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0xc
Function at 0x43c800
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9afe
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CLeftTopOSDViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x43c84a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x43c860
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x43c872
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x43c8a7
mov edx, dword [eax + 8]
test edx, edx
jne 0x43c8a7
cmp byte [eax], bl
je 0x43c8a7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x43cc50
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9b58
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.00435c20
mov eax, dword [esp + 0x20]
xor edi, edi
push 0xffffffffffffffff
lea ecx, [esi + 8]
mov dword [esi], vtable.CViewInfo_class_CRightTopOSDViewDisp_.0
push edi
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], edi
push eax
mov dword [esp + 0x24], edi
mov word [ecx + 4], di
call fcn.00405dc0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esi + 0x24], ecx
mov dword [esi + 0x28], edx
mov dword [esi + 0x2c], edi
mov dword [esi + 0x30], edi
mov eax, esi
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x10
ret 0xc
Function at 0x43db10
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9c5e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CRightTopOSDViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x43db5a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x43db70
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x43db82
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x43dbb7
mov edx, dword [eax + 8]
test edx, edx
jne 0x43dbb7
cmp byte [eax], bl
je 0x43dbb7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x43ee20
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9dbe
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CAboutUsViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x43ee6a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x43ee80
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x43ee92
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x43eec7
mov edx, dword [eax + 8]
test edx, edx
jne 0x43eec7
cmp byte [eax], bl
je 0x43eec7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x440130
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4b9f1e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CPlayListDelsViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x44017a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x440190
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x4401a2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x4401d7
mov edx, dword [eax + 8]
test edx, edx
jne 0x4401d7
cmp byte [eax], bl
je 0x4401d7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x441440
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba07e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CDownloadMgrViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x44148a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x4414a0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x4414b2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x4414e7
mov edx, dword [eax + 8]
test edx, edx
jne 0x4414e7
cmp byte [eax], bl
je 0x4414e7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x442750
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba1de
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_COpenUrlViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x44279a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x4427b0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x4427c2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x4427f7
mov edx, dword [eax + 8]
test edx, edx
jne 0x4427f7
cmp byte [eax], bl
je 0x4427f7
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x443a60
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba33e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CFileInfoViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x443aaa
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x443ac0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x443ad2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x443b07
mov edx, dword [eax + 8]
test edx, edx
jne 0x443b07
cmp byte [eax], bl
je 0x443b07
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x444d70
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba49e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CFileMoreInfoViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x444dba
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x444dd0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x444de2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x444e17
mov edx, dword [eax + 8]
test edx, edx
jne 0x444e17
cmp byte [eax], bl
je 0x444e17
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x446080
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba5fe
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CFullDiskHintViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x4460ca
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x4460e0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x4460f2
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x446127
mov edx, dword [eax + 8]
test edx, edx
jne 0x446127
cmp byte [eax], bl
je 0x446127
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x447390
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba75e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CExitBoxViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x4473da
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x4473f0
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x447402
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x447437
mov edx, dword [eax + 8]
test edx, edx
jne 0x447437
cmp byte [eax], bl
je 0x447437
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x4486a0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4ba8be
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CCutPicViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x4486ea
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x448700
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x448712
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x448747
mov edx, dword [eax + 8]
test edx, edx
jne 0x448747
cmp byte [eax], bl
je 0x448747
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret
Function at 0x4499b0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4baa1e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CBottomToolBarViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x4499fa
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x449a10
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x449a22
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x449a57
mov edx, dword [eax + 8]
test edx, edx
jne 0x449a57
cmp byte [eax], bl
je 0x449a57
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret

Function at 0x44acc0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4bab7e
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
mov eax, dword [0x519b14]
xor eax, esp
push eax
lea eax, [esp + 0x10]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc], esi
mov dword [esi], vtable.CViewInfo_class_CTopToolBarViewDisp_.0
mov ecx, dword [esi + 0x30]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x18], 2
je 0x44ad0a
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x30], ebx
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
mov byte [esp + 0x18], 1
je 0x44ad20
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov dword [esi + 0x2c], ebx
cmp dword [esi + 0x20], 8
jb 0x44ad32
mov eax, dword [esi + 0xc]
push eax
call fcn.0048c112
add esp, 4
mov dword [esi + 0x20], 7
mov dword [esi + 0x1c], ebx
mov word [esi + 0xc], bx
mov eax, dword [esi + 4]
mov dword [esi], vtable.CViewInfoBase.0
mov ecx, dword [eax + 4]
test ecx, ecx
mov byte [eax], 1
jne 0x44ad67
mov edx, dword [eax + 8]
test edx, edx
jne 0x44ad67
cmp byte [eax], bl
je 0x44ad67
push eax
call fcn.0048c112
add esp, 4
mov dword [esi], vtable.RefObject.0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x10
ret