Function at 0x44ad80
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x569e24
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi], vtable.CGlobal.0
mov dword [esp + 0x1c], 4
mov ecx, dword [esi + 8]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0xc]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x10]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x14]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x18]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x1c]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x20]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x24]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x28]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x2c]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x30]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x34]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x38]
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov ecx, dword [esi + 0x3c]
call sub.MFC71.DLL_CGdiObject::DeleteObject
lea ebp, [esi + 0xf4]
mov ecx, ebp
call sub.MFC71.DLL_CGdiObject::DeleteObject
mov eax, dword [esi + 0x138]
mov edi, dword [sym.imp.USER32.dll_DestroyCursor]
push eax
call edi
mov ecx, dword [esi + 0x13c]
push ecx
call edi
mov edx, dword [esi + 0x140]
push edx
call edi
mov eax, dword [esi + 0x144]
push eax
call edi
mov ecx, dword [esi + 0x148]
push ecx
call edi
mov edx, dword [esi + 0x150]
push edx
call edi
mov eax, dword [esi + 0x14c]
push eax
call edi
mov ecx, dword [esi + 0x154]
push ecx
call edi
mov edx, dword [esi + 0x158]
push edx
call edi
mov eax, dword [esi + 0x160]
push eax
call edi
mov ecx, dword [esi + 0x164]
push ecx
call edi
mov edx, dword [esi + 0x174]
push edx
call edi
mov ecx, dword [esi + 8]
xor ebx, ebx
cmp ecx, ebx
je 0x44aead
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0xc]
cmp ecx, ebx
je 0x44aebb
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x10]
cmp ecx, ebx
je 0x44aec9
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x14]
cmp ecx, ebx
je 0x44aed7
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x18]
cmp ecx, ebx
je 0x44aee5
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x1c]
cmp ecx, ebx
je 0x44aef3
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x20]
cmp ecx, ebx
je 0x44af01
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x24]
cmp ecx, ebx
je 0x44af0f
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x28]
cmp ecx, ebx
je 0x44af1d
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x2c]
cmp ecx, ebx
je 0x44af2b
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x30]
cmp ecx, ebx
je 0x44af39
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x34]
cmp ecx, ebx
je 0x44af47
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x38]
cmp ecx, ebx
je 0x44af55
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov ecx, dword [esi + 0x3c]
cmp ecx, ebx
je 0x44af63
mov edx, dword [ecx]
push 1
call dword [edx + 4]
mov ecx, dword [esi + 0x178]
cmp ecx, ebx
je 0x44af74
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov edi, dword [esi + 0x18c]
cmp edi, ebx
je 0x44af8d
push edi
call fcn.0047ab30
push edi
call sub.MFC71.DLL_operator_delete_1
add esp, 4
lea edi, [esi + 0x40]
mov ecx, edi
call sub.MFC71.DLL_CWnd::Detach
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [esi + 0x180]
cmp eax, ebx
je 0x44afb1
push eax
call sub.MFC71.DLL_operator_delete_1
add esp, 4
lea ecx, [esi + 0xfc]
push ecx
mov dword [esi + 0x180], ebx
mov dword [esi + 0x184], ebx
mov dword [esi + 0x188], ebx
mov byte [esp + 0x20], 2
call fcn.00496250
mov byte [esp + 0x1c], 1
mov ecx, ebp
mov dword [ebp], vtable.CGdiObject.0
call sub.MFC71.DLL_CGdiObject::DeleteObject
lea ecx, [esi + 0x94]
mov byte [esp + 0x1c], bl
call fcn.004ac9f0
mov ecx, edi
mov dword [esp + 0x1c], 0xffffffff
call sub.MFC71.DLL_CRichEditCtrl::CRichEditCtrl
mov ecx, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret