Function at 0x44e750
Capabilities:
Create directory

Disassembly:
sub esp, 0x83c
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x834], eax
push ebx
push ebp
push esi
push edi
mov edx, 0x4b406c
mov ecx, str.PRVCY
call fcn.00478640
mov edi, dword [sym.imp.SHLWAPI.dll_StrCpyW]
push eax
push 0x4d9f00
call edi
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push 0x4d9f00
push 1
push 0x40b
push dword [0x4e5c10]
call ebp
lea eax, [esp + 0x10]
push eax
push dword [0x4e5c10]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [esp + 0x10]
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetClientRect]
mov esi, dword [esp + 0x1c]
lea eax, [esp + 0x10]
sub esi, dword [esp + 0x14]
push eax
push 0
push 0x40a
push dword [0x4e5c10]
call ebp
mov ecx, dword [esp + 0x1c]
sub ecx, dword [esp + 0x14]
push 0
push dword [0x4e5c0c]
sub esi, ecx
push 0x2973
push dword [0x4e6030]
lea eax, [ecx - 4]
add esi, 2
push eax
push 0x132
push esi
push 2
push 0x50000000
push 0
push 0x4b39d8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
push 0
push 0
mov ebx, eax
push 0x402
push ebx
call ebp
push 0x120000
push 0
push 0x401
push ebx
call ebp
push 0
push 1
push 0x404
push ebx
call ebp
xor eax, eax
push 0x206
push eax
mov word [esp + 0x230], ax
lea eax, [esp + 0x232]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x228]
push 0x4e6040
push eax
call edi
push str.Prvc_
lea eax, [esp + 0x22c]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCatW]
push eax
call esi
xor eax, eax
push 0x206
push eax
mov word [esp + 0x28], ax
lea eax, [esp + 0x2a]
push eax
call fcn.0048fb10
add esp, 0xc
xor eax, eax
mov word [esp + 0x430], ax
push 0x206
push eax
lea eax, [esp + 0x43a]
push eax
call fcn.0048fb10
add esp, 0xc
lea eax, [esp + 0x228]
push eax
lea eax, [esp + 0x24]
push eax
call edi
push str.Control_Point__
lea eax, [esp + 0x434]
push eax
call edi
push 0
call fcn.00493a5c
add esp, 4
lea ecx, [esp + 0x228]
push 0xa
push 0x64
push ecx
push eax
call fcn.0049099e
add esp, 0x10
lea eax, [esp + 0x228]
push eax
lea eax, [esp + 0x434]
push eax
call esi
lea eax, [esp + 0x430]
push eax
lea eax, [esp + 0x24]
push eax
call esi
push 0
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x4ba360
push str.HKEY_CURRENT_USER
mov edx, 0x4ba3fc
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba408
push str.HKEY_CURRENT_USER
mov edx, 0x4ba4a0
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba4a8
push str.HKEY_CURRENT_USER
mov edx, 0x4ba53c
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba548
push str.HKEY_CURRENT_USER
mov edx, 0x4ba5c8
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba5d0
push str.HKEY_CURRENT_USER
mov edx, 0x4ba684
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba690
push str.HKEY_CURRENT_USER
mov edx, 0x4ba75c
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba768
push str.HKEY_CURRENT_USER
mov edx, 0x4ba834
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba840
push str.HKEY_CURRENT_USER
mov edx, 0x4ba8bc
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba8c8
push str.HKEY_CURRENT_USER
mov edx, 0x4ba95c
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba968
push str.HKEY_LOCAL_MACHINE
mov edx, 0x4b3314
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4ba968
push str.HKEY_LOCAL_MACHINE
mov edx, 0x4b361c
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4baa28
push str.HKEY_CURRENT_USER
mov edx, 0x4b3684
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4baa90
push str.HKEY_CURRENT_USER
mov edx, 0x4b36c0
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4baaf0
push str.HKEY_CURRENT_USER
mov edx, 0x4b37a0
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4baaf0
push str.HKEY_USERS
mov edx, 0x4b39ac
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4bab60
push str.HKEY_CURRENT_USER
mov edx, 0x4b39b4
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4baaf0
push str.HKEY_LOCAL_MACHINE
mov edx, 0x4b39fc
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
push 0x4babc0
push str.HKEY_LOCAL_MACHINE
mov edx, 0x4b3a04
lea ecx, [esp + 0x28]
call fcn.0044f770
add esp, 8
push 0
push 0
push 0x405
push ebx
call ebp
call fcn.0044f8e0
push ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
push 0x1004
push 0x295b
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call ebp
push eax
mov edx, 0x4b407c
mov ecx, str.PRVCY
call fcn.00478640
push eax
push 0x400
push 0x4d9f00
call fcn.0040a420
add esp, 0x10
push 0x4d9f00
push 1
push 0x40b
push dword [0x4e5c10]
call ebp
lea eax, [esp + 0x430]
mov edx, 0x4b454c
push eax
mov ecx, str.PRVCY
call fcn.00478640
push eax
lea eax, [esp + 0x640]
push 0x104
push eax
call fcn.0040a420
add esp, 0x10
mov edx, 0x4b3c04
mov ecx, str.PRVCY
push 0x30
call fcn.00478640
push eax
lea eax, [esp + 0x640]
push eax
push dword [0x4e6030]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0x844]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048ea75
add esp, 0x83c
ret