Function at 0x10103760
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push ebx
add eax, 0xffff6343
mov ebx, ecx
push esi
push edi
cmp eax, 5
ja case.default.0x10103779
jmp dword [eax*4 + 0x101039d8]
call sym.HncOfficeFramework.dll_public:_unsigned_long_int___thiscall_CHDCListCtrl::GetViewType_void_const
test eax, eax
je case.default.0x10103779
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x5c]
test eax, eax
je 0x1010379f
mov dword [eax + 0x2c], 0x25
push 0
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHDCListCtrl::SetViewType_unsigned_long_int_
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
pop edi
pop esi
pop ebx
pop ebp
ret 4
call sym.HncOfficeFramework.dll_public:_unsigned_long_int___thiscall_CHDCListCtrl::GetViewType_void_const
cmp eax, 3
je case.default.0x10103779
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x5c]
test eax, eax
je 0x101037da
mov dword [eax + 0x2c], 0xa
mov eax, dword [ebx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101039c6
mov ecx, dword [eax + 0x5c]
test ecx, ecx
je 0x101039c6
test eax, eax
je 0x10103826
test ecx, ecx
je 0x10103826
test eax, eax
je 0x10103802
mov eax, dword [eax + 8]
and eax, 3
jne 0x10103828
mov edx, dword [ecx + 0x13c]
cmp edx, 1
jne 0x10103817
lea eax, [edx + 4]
jmp 0x10103828
xor eax, eax
mov esi, 6
cmp edx, 2
cmove eax, esi
jmp 0x10103828
xor eax, eax
mov dword [ecx + 0x13c], 5
cmp eax, 3
je 0x101039c6
mov ecx, dword [ebx + 4]
mov eax, dword [ecx + 4]
test eax, eax
je 0x1010384c
or dword [eax + 8], 3
mov ecx, dword [ebx + 4]
mov eax, dword [ecx + 4]
test eax, eax
je 0x10103867
mov eax, dword [eax + 0x5c]
test eax, eax
je 0x10103867
mov dword [eax + 0x130], 0
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
pop edi
pop esi
pop ebx
pop ebp
ret 4
call sym.HncOfficeFramework.dll_public:_unsigned_long_int___thiscall_CHDCListCtrl::GetViewType_void_const
cmp eax, 1
je case.default.0x10103779
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x5c]
test eax, eax
je 0x101038a1
mov dword [eax + 0x2c], 0xa
push 1
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHDCListCtrl::SetViewType_unsigned_long_int_
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
pop edi
pop esi
pop ebx
pop ebp
ret 4
push 4
call sym.HncOfficeFramework.dll_unsigned_short_int_const____cdecl_HncAtlVfsExt::GetAuthServerUrl_unsigned_int_
add esp, 4
push 1
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
pop edi
pop esi
pop ebx
pop ebp
ret 4
mov eax, dword [ebx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x101038f1
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
push 0
push 0
push 0x44
push 0x9cc3
push 0x9cc4
push dword [0x1023c868]
push eax
call sym.HncOfficeFramework.dll_int___cdecl_HncMessageBoxUsingRC_struct_HWND_____struct_HINSTANCE_____unsigned_int__unsigned_int__unsigned_int__char_const___int_
add esp, 0x1c
cmp eax, 6
jne case.default.0x10103779
call dword [sym.imp.HncVfs.dll_struct_IHncVfsManager____cdecl_HncGetVfsManager_void_]
mov ecx, dword [ebx + 0x4d8]
mov esi, eax
mov edx, dword [ecx]
mov edi, dword [esi]
call dword [edx]
push eax
mov ecx, esi
call dword [edi + 0x18]
mov esi, eax
mov dword [ebp + 8], esi
test esi, esi
je case.default.0x10103779
push 2
push 0xffffffffffffffff
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHDCListCtrl::GetNextItem_int__int_const
mov edi, eax
cmp edi, 0xffffffff
je case.0x10103779.40127
push edi
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_struct_IHncVfsShellPidl____thiscall_CHncShellListCtrlVL::GetFileItemData_int_
mov esi, dword [esi]
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
mov ecx, dword [ebp + 8]
push eax
call dword [esi + 0x20]
test eax, eax
jne 0x1010399c
mov eax, dword [ebx + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x1010397d
mov eax, dword [eax + 0x5c]
mov eax, dword [eax + 8]
push 0
push 0
push 0x30
push 0x9cc3
push 0x9cc5
push dword [0x1023c868]
push eax
call sym.HncOfficeFramework.dll_int___cdecl_HncMessageBoxUsingRC_struct_HWND_____struct_HINSTANCE_____unsigned_int__unsigned_int__unsigned_int__char_const___int_
add esp, 0x1c
push 2
push edi
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHDCListCtrl::GetNextItem_int__int_const
mov esi, dword [ebp + 8]
mov edi, eax
cmp edi, 0xffffffff
jne 0x10103952
mov ecx, dword [ebx + 0x4d8]
test ecx, ecx
je 0x101039bf
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, ebx
call sym.HncOfficeFramework.dll_public:_int___thiscall_CHncShellListCtrlVL::InitItems_void_
mov ecx, dword [ebx + 4]
mov ecx, dword [ecx + 4]
call fcn.1001bbc0
pop edi
pop esi
pop ebx
pop ebp
ret 4