Function at 0x4447ee
Capabilities:
Create directory
Get file system object information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f0
push ebx
push esi
xor esi, esi
mov dword [ebp - 0xc], 0xa48bbca6
inc esi
mov bl, dl
push edi
mov dword [ebp - 0x30], esi
mov edi, ecx
xor edx, edx
mov dword [ebp - 0x1c], 0xfffffffa
mov byte [ebp - 0x29], bl
mov dword [ebp - 0x24], edi
mov dword [ebp - 0xc], edx
jmp 0x444830
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x154], 0xe62699ff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x44481f
mov dword [ebp - 0xc], 0xfffffff3
cmp dword [ebp - 0xc], 6
push 0xffffffffffffffff
pop ecx
jl 0x444977
mov edi, 0xffff
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], edx
jmp 0x444864
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb0], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x444857
mov dword [ebp - 4], edx
jmp 0x444880
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x98], 0x3ed2
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x44486f
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x444896
call dword [sym.imp.USER32.dll_GetMessageTime]
xor edx, edx
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xa8]
jl 0x444923
mov dword [ebp - 0x20], 0x412894f
xor edx, edx
mov dword [ebp - 0x14], 0x814b11f3
mov dword [ebp - 0x20], esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setg dl
imul edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
cmp edi, edx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setne dl
sub eax, edx
imul eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
add eax, 0x11b300eb
je 0x4448eb
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x98], 0xfffc
jbe 0x44490f
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x30], eax
je 0x444911
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0xb0], ecx
jmp 0x444961
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 4], esi
dec dword [ebp - 0x150]
mov dword [ebp - 0x10], edx
jmp 0x44495b
mov dword [ebp - 4], edx
jmp 0x444952
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x44494f
push edx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x44493d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xe
jle 0x444938
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 6
push 0
pop edx
push 0xffffffffffffffff
pop ecx
jge 0x44484f
mov edi, dword [ebp - 0x24]
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x44498a
push 0x68
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor edx, edx
mov dword [ebp - 0x20], 0xfff8
mov dword [ebp - 0x18], 0x9827
mov dword [ebp - 0x20], 0x4dbf0cf
mov dword [ebp - 0x30], 0x335c22c9
mov dword [ebp - 4], edx
jmp 0x4449bc
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa4], 0xe8f21009
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x4449ab
mov dword [ebp - 4], edx
jmp 0x4449d7
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x8c], 0xfffffff9
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x4449c6
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
jne 0x4449f0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x20], edx
xor edx, edx
mov eax, dword [ebp - 0x88]
cmp eax, esi
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 0xd04c
setge al
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x88], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 3
mov dword [ebp - 0x30], 0x68dd2ac3
mov dword [ebp - 0x10], ecx
jmp 0x444a62
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1a0], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x444a51
mov dword [ebp - 4], ecx
jmp 0x444aa8
mov dword [ebp - 0x10], ecx
jmp 0x444a83
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x188], 0x7ca0029b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x444a72
mov byte [ebp - 5], cl
cmp byte [ebp - 5], 0
je 0x444a9d
push ecx
push ecx
push ecx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
xor ecx, ecx
cmp dword [ebp - 0x184], ecx
jne 0x444aae
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffffa
jg 0x444a6d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], ecx
jne 0x444af2
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 4]
jge 0x444ace
mov eax, ecx
cmp dword [ebp - 0xc], ecx
je 0x444ad0
mov eax, esi
cmp esi, eax
mov eax, dword [ebp - 4]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x6e3e
setg al
cmp eax, esi
jae 0x444af2
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x198]
mov edx, dword [0x49b90c]
xor eax, eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x1c], 0xbb6748f6
mov dword [ebp - 0x1c], 0x814b733c
mov dword [ebp - 0x1c], 0x46b6eb6
mov dword [ebp - 0x20], 0xb49d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x10], esi
jge 0x444b61
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x124], 0xfffffffc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x444b49
xor eax, eax
mov ecx, dword [ebp + 8]
dec dword [ebp - 0x20]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
test bl, bl
je 0x444d34
cmp edx, esi
jne 0x444d34
mov dword [ebp - 0xc], 0xfffffff8
mov dword [ebp - 0x28], 0xab274bf9
mov dword [ebp - 0x1c], 0x86bd085
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x20], 0x1a35
mov dword [ebp - 0x20], 0x2a26f3f1
mov dword [ebp - 0x20], 0x41637c1d
mov dword [ebp - 0x20], 0xd70512a3
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x20], eax
push 2
mov dword [ebp - 0x10], eax
pop ebx
cmp dword [ebp - 0x10], ebx
jge 0x444be3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x108], 0xbc0d133f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x444bcb
xor eax, eax
mov dword [ebp - 0xc], 0x14
jmp 0x444c52
mov dword [ebp - 0x18], 0x3250e6da
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0x50315362
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], 0x32a17d0b
mov dword [ebp - 0x18], 0xba13b288
mov dword [ebp - 4], eax
cmp dword [ebp - 4], ebx
jge 0x444c2a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x178], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jl 0x444c16
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x444c4c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1e0], 0xc4a87fce
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x444c33
xor eax, eax
dec dword [ebp - 0x20]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe2
jg 0x444bec
mov dword [ebp - 0xc], 0xfffffff3
cmp dword [ebp - 0xc], 0xffffffe6
jne 0x444cdc
or ebx, 0xffffffff
mov dword [ebp - 0x20], 0x426ae69e
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xfffffff7
cmp dword [ebp - 0x28], eax
jne 0x444cd3
cmp dword [ebp - 0x20], eax
jne 0x444c9c
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
xor edi, edi
mov dword [ebp - 0x18], edx
mov eax, edi
cmp dword [ebp - 0x18], edi
je 0x444c9e
mov eax, esi
add eax, 0xffff03ad
xor ecx, ecx
imul eax, eax, 5
push 0
cmp eax, ebx
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x104]
setl dl
xor ecx, ecx
cmp edx, eax
pop eax
setge cl
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe6
je 0x444c68
mov ecx, dword [ebp + 8]
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], esi
push 4
pop ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xbb6748f6
mov dword [ebp - 0x1c], 0x814b733c
mov dword [ebp - 0x1c], 0x46b6eb6
mov dword [ebp - 0x20], 0xb49d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], eax
mov dword [ecx + 8], ebx
cmp dword [ebp - 0x10], esi
jge 0x444d2a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf8], 0xfffffffc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x444d12
xor eax, eax
dec dword [ebp - 0x20]
mov dword [ecx + 0xc], 0x49b90c
cmp edi, edx
jge 0x445b7d
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], 0xa4c8
mov dword [ebp - 0xc], 0xfffffffa
jmp 0x444ec7
mov dword [ebp - 4], 0xffff
mov dword [ebp - 0x1c], 0x1e1c5a3d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x444d88
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf4], 0x1188
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x444d6f
xor eax, eax
cmp dword [ebp - 0xc], eax
jne 0x444d97
mov edx, eax
cmp dword [ebp - 0xf4], eax
je 0x444d99
mov edx, esi
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp eax, 0x891c
setl cl
add ecx, edx
je 0x444dc1
mov dword [ebp - 0x1c], 0x32cf415d
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x444ed1
jmp 0x444ec4
mov dword [ebp - 0x14], 0xfffffff6
xor edx, edx
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x10], edx
jmp 0x444de3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b8], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x444dd6
mov eax, dword [ebp - 4]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0x23a266d2
setl cl
imul eax, ecx, 0xb96
test eax, eax
je 0x444e45
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 4], 0xfffffff7
jmp 0x444e3d
inc dword [ebp - 0x14]
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x444e3a
push 0x1e3d
push edx
call ebx
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xa
jg 0x444e1a
jmp 0x444e59
mov byte [ebp - 5], dl
cmp byte [ebp - 5], dl
je 0x444e59
push 0x1c8d
push edx
call dword [sym.imp.USER32.dll_GetSubMenu]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
add ecx, 0xac1e
cmp ecx, eax
setl dl
xor eax, eax
add edx, 0xd2e9
cmp edx, 0x72d5
setl al
xor edx, edx
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setne dl
xor ecx, ecx
cmp edx, 0x7d04
setl cl
xor eax, eax
cmp ecx, 0xfffffffd
setge al
imul eax, eax, 0x1c8
test eax, eax
je 0x444eba
cmp dword [ebp - 0x18], 0
je 0x444eba
mov eax, esi
jmp 0x444ebc
xor eax, eax
mov dword [ebp - 0x1b8], eax
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x12
jge 0x444d58
mov dword [ebp - 4], 0xe0648261
or eax, 0xffffffff
mov dword [ebp - 0x14], 0x87a5eafb
xor edx, edx
mov dword [ebp - 0x20], eax
mov esi, 0x49b910
xor ecx, ecx
mov dword [ebp - 0x20], 0xfefb659b
mov dword [ebp - 0x18], esi
inc ecx
mov dword [ebp - 0x10], edx
jmp 0x444f0c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4c], 0x5e04a276
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x444efe
mov dword [ebp - 4], 0xffffffeb
cmp dword [ebp - 4], 0xfffffff2
jle 0x445056
xor edi, edi
inc edi
or esi, 0xffffffff
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x10], 0x99da9727
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
xor eax, eax
cmp ecx, 0xa14c
setg al
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x1c]
sets cl
add eax, 4
add eax, ecx
je 0x444f5c
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setg dl
xor ecx, ecx
cmp edx, 4
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setge dl
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
xor edx, edx
cmp ecx, dword [ebp - 0xc]
jge 0x444f9d
mov eax, edi
cmp dword [ebp - 0x10], edx
jne 0x444f9f
mov eax, edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edx
jne 0x444fae
mov ecx, edx
cmp dword [ebp - 0xc], edx
je 0x444fb0
mov ecx, edi
mov eax, esi
mov dword [ebp - 0x4c], ecx
sub eax, ecx
mov dword [ebp - 0x10], eax
je 0x444fc3
mov eax, edi
cmp dword [ebp - 0x4c], edx
jne 0x444fc5
mov eax, edx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x4c], edx
je 0x44500b
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x445041
push edx
push 0xd2d
push 0x2052
push 0x167b
push 0x21e2
push 0x1e8a
push 0xf5e
push 0xac9
push 0x1cde
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
xor edx, edx
jmp 0x445041
mov dword [ebp - 0xc], edx
jmp 0x44503b
mov dword [ebp - 0x10], edx
jmp 0x445022
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x170], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x445015
mov eax, dword [ebp - 0x168]
xor ecx, ecx
cmp eax, esi
setl cl
mov dword [ebp - 0x10], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 7
jle 0x445010
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xfffffff2
jg 0x444f28
mov edi, dword [ebp - 0x24]
mov esi, 0x49b910
mov dword [ebp - 4], 0x13
jmp 0x44507d
cmp dword [ebp - 0x20], edx
jne 0x445083
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x44507a
push edx
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
xor edx, edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x13
jl 0x44505f
mov dword [ebp - 0x28], edx
test edi, edi
jle 0x4456b5
xor edi, edi
inc edi
jmp 0x445099
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x10], 0x8555145c
mov dword [ebp - 0xc], 0xdca27289
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 4], edx
cmp dword [ebp - 4], edi
jge 0x4450c8
or ecx, 0xffffffff
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x3c], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x4450b9
mov dword [ebp - 4], edx
jmp 0x4450de
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xbc], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x4450cd
cmp dword [ebp - 0x3c], edx
jne 0x445102
cmp dword [ebp - 0x10], edx
jne 0x4450fa
cmp dword [ebp - 0xc], edx
jne 0x4450fa
mov eax, edx
cmp dword [ebp - 0x3c], edx
je 0x4450fc
mov eax, edi
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, 0xffff3497
mov eax, dword [ebp - 0x10]
setge cl
add eax, ecx
cmp eax, 0xffff
sbb eax, eax
neg eax
cmp eax, 0xd1aa12af
ja 0x4451eb
mov dword [ebp - 0x20], 0x58d83f7c
mov dword [ebp - 4], edx
jmp 0x445142
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x48], 0x122
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x445134
mov dword [ebp - 4], edx
jmp 0x44515d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0xfffffff7
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x44514c
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x445177
push 0x9b7
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setle dl
xor ecx, ecx
dec edx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setne cl
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0xb4], edx
mov eax, dword [ebp - 0x48]
add eax, edx
je 0x4451b9
cmp dword [ebp - 0x3c], 0
je 0x4451b9
mov esi, edi
jmp 0x4451bb
xor esi, esi
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
push 0
setle dl
xor eax, eax
cmp edx, esi
mov esi, dword [ebp - 0x18]
setge al
sub eax, dword [ebp - 0x20]
pop eax
setns al
xor edx, edx
mov dword [ebp - 0x114], eax
jmp 0x44520d
mov dword [ebp - 0xc], edx
jmp 0x445207
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xbc], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jle 0x4451f0
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x445222
push edx
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
xor edx, edx
mov ebx, dword [esi]
mov eax, 0xad386cce
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x14], 0x885dc1b6
push 2
mov dword [ebp - 0xc], 0x7d6b5922
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 4], edx
jmp 0x44526a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x100], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44525d
mov dword [ebp - 4], edx
jmp 0x445285
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xec], 0xf06702e6
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x445274
mov dword [ebp - 4], edx
jmp 0x44529e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], 0xd9140931
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x445290
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], edi
jg 0x4453ea
or ebx, 0xffffffff
mov dword [ebp - 4], 0x83200138
mov dword [ebp - 0x1c], 0x98a80146
mov dword [ebp - 0x1c], 0x7f0936a
mov dword [ebp - 0x10], edx
jmp 0x4452df
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x64], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x4452d5
mov dword [ebp - 0x14], edx
jmp 0x4453b6
mov dword [ebp - 0x18], 0xc8cbf698
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], edx
jmp 0x44530c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 0x5fca
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x4452fb
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0xe8], edx
je 0x4453ae
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp eax, dword [ebp - 0xfc]
jge 0x445341
mov eax, dword [ebp - 0xc]
mov ecx, edi
cmp dword [ebp + eax*4 - 0xe8], edx
jne 0x445343
mov ecx, edx
xor eax, eax
cmp ecx, ebx
setg al
cmp ebx, eax
mov eax, dword [ebp - 0x18]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + eax*4 - 0xe8]
mov eax, dword [ebp - 0x10]
cmp eax, 0x5d2300b6
mov eax, dword [ebp - 0x64]
setne cl
add edx, ecx
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 8
setle al
xor edx, edx
lea ecx, [eax - 2]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, edi
setge cl
xor edx, edx
cmp ecx, dword [ebp - 0x18]
jne 0x4453b0
mov eax, edx
mov dword [ebp - 4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x4452ec
mov dword [ebp - 4], edx
jmp 0x4453d2
mov dword [ebp - 0x1c], 9
dec dword [ebp - 0x68]
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jle 0x4453c5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jle 0x4452bb
mov ebx, dword [ebp - 0x20]
push 2
pop ecx
mov edi, dword [esi + 4]
mov dword [ebp - 0xc], 0xac204e2d
mov dword [ebp - 0x1c], 0xe4438bea
mov dword [ebp - 0x14], edx
jmp 0x445411
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x144], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x445400
mov dword [ebp - 0xc], 0xf
jmp 0x44543c
mov dword [ebp - 0x1c], 0x29bf3901
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x138], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x12
je 0x445420
mov eax, dword [ebp - 0x140]
add esi, 8
mov dword [ebp - 0x138], eax
or eax, 0xffffffff
mov dword [ebp - 0x1c], 1
mov dword [ebp - 4], eax
mov dword [ebp - 0x78], 0x6ca2cb51
mov dword [ebp - 0x74], 0x6ca2cb51
mov dword [ebp - 0x70], 0x6ca2cb51
mov dword [ebp - 0x6c], 0x6ca2cb51
mov dword [ebp - 0x18], 0x8fdadf86
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], edx
jmp 0x44549d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], 0xfffffffe
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x44548c
mov dword [ebp - 4], edx
jmp 0x4454b8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0x87e91c17
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x4454a7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 4], edx
jl 0x445563
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 4]
xor ecx, ecx
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x9c]
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x78]
cmp eax, ebx
setne cl
mov dword [ebp - 0x70], ecx
lea eax, [ecx + 0xf8d3]
mov dword [ebp - 0x10c], eax
dec dword [ebp - 4]
jns 0x4454d6
mov ebx, dword [ebp - 0x20]
xor edx, edx
push 2
pop ecx
test edi, edi
jne 0x44556a
add esi, 8
mov dword [ebp - 0x18], 0x4f833fcb
or eax, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xfffffffd
mov dword [ebp - 0x14], edx
jmp 0x445591
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x44], 0x471dfd94
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x445583
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x4455bc
push 0x63f
push 0x1497
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
push 2
xor edx, edx
pop ecx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
je 0x4455f5
mov dword [ebp - 0x1c], 0x6887
mov dword [ebp - 0x14], edx
jmp 0x4455e1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f0], 0x210e164c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4455d0
inc dword [ebp - 4]
xor edi, edi
inc dword [ebp - 0x44]
inc edi
jmp 0x4456a0
mov dword [ebp - 4], edx
jmp 0x44560b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xdc], 0x11e0
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x4455fa
mov dword [ebp - 4], edx
jmp 0x445627
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x120], 0xa7ef23e4
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x445616
xor edi, edi
mov dword [ebp - 4], edx
inc edi
cmp dword [ebp - 4], edi
jg 0x4456a0
or ebx, 0xffffffff
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xc31e13ca
cmp dword [ebp - 4], edx
je 0x445678
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x11c], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jle 0x44563a
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
add esi, ebx
inc eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], eax
cmp eax, dword [ebp - 0x24]
jl 0x445093
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 4], edx
inc ecx
cmp dword [ebp - 4], 2
jge 0x4456d4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x60], ecx
inc dword [ebp - 4]
jmp 0x4456c2
mov dword [ebp - 4], edx
jmp 0x4456e7
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0x3c633843
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x4456d9
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x50], eax
test eax, eax
je 0x44570a
cmp dword [ebp - 0x60], edx
je 0x4456fe
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x14], 0x10
jmp 0x44572a
mov dword [ebp - 0x28], 0xcad
inc dword [ebp - 0x28]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff1
jge 0x44571d
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x445746
push edx
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor ecx, ecx
xor edx, edx
inc ecx
mov edi, dword [esi]
or ebx, 0xffffffff
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], 0x6a08376f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x1c], 0x3d88101a
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x14], edx
jmp 0x445780
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34], 0xf6af1124
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x445772
mov dword [ebp - 0x34], 0xffffffe2
cmp dword [ebp - 0x34], ebx
jne 0x445850
or esi, 0xffffffff
mov dword [ebp - 0xc], 0x3d4e
mov dword [ebp - 0x24], 0xadf890ba
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x34]
test eax, eax
jne 0x4457ba
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
imul ecx, eax
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0xc]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x24], edx
xor edx, edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], 0x49c9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setle bl
xor ecx, ecx
sub ebx, eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x24]
cmp ebx, eax
mov eax, dword [ebp - 0x34]
setl cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x54fd
setg cl
xor edx, edx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x34], edx
jne 0x44584a
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
je 0x445798
mov esi, dword [ebp - 0x18]
xor ecx, ecx
inc ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], edx
jmp 0x445866
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 0x5c68ec0a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x445858
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0xfffffffe
jge 0x4458b5
mov dword [ebp - 0x14], 0x386cce57
mov dword [ebp - 0x14], edx
jmp 0x44588a
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1d
jle 0x445881
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x4458a9
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
xor edx, edx
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xfffffffe
jl 0x445875
xor ecx, ecx
inc ecx
mov dword [ebp - 0xc], edx
jmp 0x4458c8
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x58], 6
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x4458ba
mov ebx, dword [esi + 4]
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], edx
jmp 0x4458ee
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], 0x976ff55e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x4458e0
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x445921
push 0x129a
push edx
push edx
push edx
push edx
push 0x950
push 0x1334
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
xor ecx, ecx
xor edx, edx
inc ecx
imul eax, dword [ebp - 0x38], 0xcf95
sub eax, 0x306bcf95
je 0x445934
cmp dword [ebp - 0x38], edx
jne 0x445936
mov ecx, edx
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setle dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
setle cl
sub edx, ecx
neg edx
sbb edx, edx
inc edx
imul eax, edx
imul eax, eax, 0xfbd3
test eax, eax
je 0x445a08
xor ecx, ecx
mov dword [ebp - 0xc], 0x6df7e441
mov dword [ebp - 0x14], ecx
jmp 0x445987
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x160], 0xf1bb1300
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x445976
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xc], ecx
je 0x4459ff
mov eax, dword [ebp - 0xc]
xor edx, edx
cmp eax, 0x424
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 0xffffffff
setge al
cmp eax, 0xffff
mov eax, dword [ebp - 0xc]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xc]
setl dl
xor ebx, ebx
sub edx, 0x645a1f4e
cmp edx, eax
setle bl
xor ecx, ecx
sub ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp ebx, eax
setg cl
cmp ecx, dword [ebp - 0x38]
jle 0x4459fd
xor ecx, ecx
cmp dword [ebp - 0x38], ecx
je 0x4459ff
xor eax, eax
inc eax
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x15c], eax
jmp 0x445a2c
xor ecx, ecx
cmp dword [ebp - 0x38], ecx
jne 0x4459ef
mov eax, ecx
jmp 0x4459f2
xor eax, eax
mov byte [ebp - 5], al
cmp byte [ebp - 5], al
je 0x445a29
push 0x1577
push 0x6d0
push eax
push 0x2177
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
dec dword [ebp - 0x28]
mov eax, 0xb55bb2c2
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], 0
jl 0x445a9e
xor ebx, ebx
mov dword [ebp - 0x24], 0xe1879501
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x445a96
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x445a82
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x445a91
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
dec dword [ebp - 0x24]
jns 0x445a72
dec dword [ebp - 0x18]
jns 0x445a5f
mov ebx, dword [ebp - 0x20]
test ebx, ebx
jne 0x445b81
cmp byte [ebp - 0x29], bl
je 0x445aba
cmp dword [ebp - 0x30], 1
jne 0x445aba
mov ecx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [ecx + 8], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi + 0xc]
add esi, 0x10
push edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], esi
call fcn.00482d8a
mov ebx, eax
xor eax, eax
pop ecx
mov dword [ebp - 0x94], eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x94]
push eax
push edi
mov dword [ebp - 0x28], ebx
call fcn.0046abd3
mov esi, dword [ebp - 0x84]
xor ecx, ecx
test edi, edi
jle 0x445b5a
mov eax, ecx
and eax, 0x80000001
jns 0x445b19
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x1c]
add eax, ecx
add eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x30]
cdq
idiv edi
xor eax, eax
cmp word [esi + edx*2], ax
je 0x445b45
xor ebx, ebx
lea eax, [edx + 1]
cdq
idiv edi
cmp word [esi + edx*2], bx
jne 0x445b36
mov ebx, dword [ebp - 0x28]
xor eax, eax
inc eax
mov word [esi + edx*2], ax
mov eax, dword [ebp - 0x18]
mov al, byte [edx + eax]
mov byte [ecx + ebx], al
inc ecx
cmp ecx, edi
jl 0x445b0b
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov dword [eax + 4], ebx
test esi, esi
je 0x445b81
push esi
call fcn.00483936
pop ecx
xor ecx, ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x7c], ecx
jmp 0x445b83
xor ecx, ecx
jmp 0x445b86
xor ecx, ecx
xor esi, esi
inc esi
mov dword [ebp - 0x14], 0xc29000d4
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], ecx
jmp 0x445bb3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a8], 0x13b91020
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x445ba2
mov dword [ebp - 4], ecx
jmp 0x445bcf
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1d0], 0x4dbf0cf
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x445bbe
mov dword [ebp - 0x14], ecx
jmp 0x445c66
mov dword [ebp - 0x24], 0x62751c76
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x1c], 0x65cd3860
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], 0x91b0
mov dword [ebp - 0x18], ecx
jmp 0x445c11
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x445c04
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ecx
jl 0x445c63
mov dword [ebp - 0x1c], 0xab59
mov dword [ebp - 0x1c], 0x2a82a10a
mov dword [ebp - 0x18], ecx
jmp 0x445c43
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x190], 0x4c38b6b0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x445c32
inc dword [ebp - 0x30]
mov byte [ebp - 0x29], cl
cmp byte [ebp - 0x29], 0
je 0x445c5e
push ecx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
xor ecx, ecx
dec dword [ebp - 0x24]
jns 0x445c1f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jle 0x445bdd
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret