Function at 0x408870
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59885f
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x60f074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x74], ecx
mov edi, dword [ebp + 8]
push 0x14
call fcn.00550175
mov ebx, eax
add esp, 4
mov dword [ebp - 0x78], ebx
mov dword [ebp - 4], 0
mov byte [ebx + 4], 0
mov dword [ebx + 8], 6
mov byte [ebp - 4], 1
lea esi, [ebx + 0xc]
mov dword [ebx], vtable.base::DictionaryValue.0
mov dword [ebp - 0x7c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00474cb0
mov dword [esi], eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], 0xffffffff
push dword [edi + 0x34]
push dword [edi + 0x30]
call fcn.004719d0
add esp, 8
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x40]
push 2
push 0x5c2090
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00403690
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call fcn.004731c0
push eax
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x408976
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40896c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f7a
push edx
push ecx
call fcn.0055053d
add esp, 8
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
push 4
push str.name
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov esi, eax
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00403690
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.004732a0
push eax
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x4089ee
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4089e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f7f
push edx
push ecx
call fcn.0055053d
add esp, 8
push 0xa
push str.date_added
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00403690
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
push dword [edi + 0xd4]
push dword [edi + 0xd0]
call fcn.004719d0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.004731c0
push eax
lea eax, [ebp - 0x40]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x408a79
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408a6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f84
push edx
push ecx
call fcn.0055053d
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x408ac3
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408ab9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f89
push edx
push ecx
call fcn.0055053d
add esp, 8
cmp dword [edi + 0xcc], 0
jne 0x408ca0
push 3
push 0x5c20b0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00403690
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x58]
push 4
push str.type
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00403690
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 8
call fcn.004731c0
push eax
lea eax, [ebp - 0x58]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x408b66
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b5c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f8e
push edx
push ecx
call fcn.0055053d
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x408b9e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b94
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f93
push edx
push ecx
call fcn.0055053d
add esp, 8
lea eax, [edi + 0x68]
push eax
lea ecx, [ebp - 0x40]
call fcn.004035d0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
lea edx, [ebp - 0x80]
push 0x3a8
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x7c], eax
call fcn.00472ad0
add esp, 4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
push 3
push 0x5c20b0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00403690
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xb
call fcn.004732a0
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x408c4a
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f98
push edx
push ecx
call fcn.0055053d
add esp, 8
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x40]
push eax
push esi
lea eax, [ebp - 0x70]
push eax
call fcn.0040a290
lea ecx, [ebp - 0x58]
call fcn.00405c10
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x408f2a
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408f9d
push edx
push ecx
call fcn.0055053d
add esp, 8
jmp 0x408f2a
push 6
push str.folder
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
call fcn.00403690
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
push 4
push str.type
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00403690
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.004731c0
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x408d36
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408d2c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fa2
push edx
push ecx
call fcn.0055053d
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x408d6e
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408d64
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fa7
push edx
push ecx
call fcn.0055053d
add esp, 8
push 0xd
push str.date_modified
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00403690
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
push dword [edi + 0xdc]
push dword [edi + 0xd8]
call fcn.004719d0
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.004731c0
push eax
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004740a0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x408df9
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408def
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fac
push edx
push ecx
call fcn.0055053d
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x408e43
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408e39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fb1
push edx
push ecx
call fcn.0055053d
add esp, 8
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
push esi
push eax
call fcn.0040a390
push 0x18
call fcn.00550175
mov ebx, eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x7c], ebx
add esp, 4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebx + 4], 0
mov dword [ebx + 8], 7
mov dword [ebx], vtable.base::ListValue.0
push 8
push str.children
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov byte [ebp - 0x28], 0
call fcn.00403690
push ebx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x78]
push eax
call fcn.004740a0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x408eef
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408ee5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fb6
push edx
push ecx
call fcn.0055053d
add esp, 8
mov eax, dword [edi + 0x24]
xor esi, esi
sub eax, dword [edi + 0x20]
test eax, 0xfffffffc
jle 0x408f27
nop
push esi
mov ecx, edi
call fcn.0040a5f0
mov ecx, dword [ebp - 0x74]
push eax
call fcn.00408870
push eax
mov ecx, ebx
call fcn.004748d0
mov eax, dword [edi + 0x24]
inc esi
sub eax, dword [edi + 0x20]
sar eax, 2
cmp esi, eax
jl 0x408f00
mov ebx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x408f5a
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408f50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408fbb
push edx
push ecx
call fcn.0055053d
add esp, 8
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
call fcn.00572795
int3