Function at 0x407a80
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x4f5552
mov eax, dword fs:[0]
push eax
sub esp, 0x83c
mov eax, dword [0x545628]
xor eax, esp
mov dword [esp + 0x838], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x545628]
xor eax, esp
push eax
lea eax, [esp + 0x850]
mov dword fs:[0], eax
mov eax, dword [esp + 0x860]
mov ebx, ecx
lea ecx, [esp + 0x4ac]
mov edi, edx
mov dword [esp + 0x14], eax
call fcn.00410c10
lea ecx, [esp + 0x864]
push ecx
lea edx, [esp + 0x140]
push edx
push str.UserManager
mov dword [esp + 0x864], 0
call fcn.004049b0
add esp, 4
mov ecx, eax
call fcn.0048a5c0
mov esi, eax
lea ecx, [esp + 0x384]
call fcn.00410c10
cmp byte [esi + 0x11c], 0
je 0x407b21
add esi, 0xc
jmp 0x407b24
mov esi, dword [esi + 8]
lea eax, [esi + 4]
lea edx, [esp + 0x384]
call fcn.00410e40
mov byte [esp + 0x858], 9
cmp byte [esp + 0x258], 0
mov ebp, vtable.t_str.0
mov dword [esp + 0x13c], ebp
jne 0x407b6c
mov eax, dword [esp + 0x144]
lea ecx, [esp + 0x148]
cmp eax, ecx
je 0x407b6c
push eax
call fcn.004d1d15
add esp, 4
push 0
push 0
push 0
push 0
push 0
push str.RandSkin
lea ecx, [esp + 0x30]
call fcn.00415c40
cmp byte [esp + 0x134], 0
lea eax, [esp + 0x24]
jne 0x407b96
mov eax, dword [esp + 0x20]
cmp word [eax + 4], 0x2e
lea ecx, [esp + 0x384]
jne 0x407bb0
lea edx, [esp + 0x18]
push edx
call fcn.00417080
jmp 0x407bba
lea eax, [esp + 0x18]
push eax
call fcn.00416320
cmp byte [esp + 0x134], 0
mov dword [esp + 0x18], ebp
jne 0x407bdd
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x24]
cmp eax, ecx
je 0x407bdd
push eax
call fcn.004d1d15
add esp, 4
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x407bf5
mov eax, dword [esp + 0x38c]
push 0
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x407c56
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x407c1d
mov eax, dword [esp + 0x38c]
push 0x10000000
add eax, 4
push 1
push eax
call fcn.00418ce0
add esp, 0xc
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x407c48
mov eax, dword [esp + 0x38c]
add eax, 4
push 1
push eax
call fcn.00418f70
add esp, 8
push 0
push 0
push 0
push 0
push 0
push 0x527084
lea ecx, [esp + 0x30]
call fcn.00415c40
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x264]
push eax
lea ecx, [esp + 0x38c]
mov byte [esp + 0x860], 0xa
call fcn.004163e0
cmp byte [eax + 0x11c], 0
je 0x407c9d
add eax, 0xc
jmp 0x407ca0
mov eax, dword [eax + 8]
add eax, 4
mov edx, edi
call fcn.00410e40
cmp byte [esp + 0x37c], 0
mov dword [esp + 0x260], ebp
jne 0x407cd6
mov eax, dword [esp + 0x268]
lea ecx, [esp + 0x26c]
cmp eax, ecx
je 0x407cd6
push eax
call fcn.004d1d15
add esp, 4
cmp byte [esp + 0x134], 0
mov dword [esp + 0x18], ebp
jne 0x407cf9
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x24]
cmp eax, edx
je 0x407cf9
push eax
call fcn.004d1d15
add esp, 4
lea esi, [esp + 0x5d4]
call fcn.00423820
mov eax, str.http:__config.pinyin.sogou.com_skins_rand.ssf
mov edx, esi
mov byte [esp + 0x858], 0xb
call fcn.00410e40
cmp byte [edi + 0x11c], 0
lea eax, [edi + 0xc]
jne 0x407d28
mov eax, dword [edi + 8]
add eax, 4
lea edx, [esp + 0x6f8]
call fcn.00410e40
lea eax, [esp + 0x5d4]
mov dword [esp + 0x828], 0x51ba2c
mov dword [esp + 0x81c], 0x14
mov dword [esp + 0x824], 2
mov dword [esp + 0x820], 0x84200000
call fcn.00424100
test al, al
jne 0x407e3c
mov ecx, ebx
call fcn.0040fa50
push 0x51a790
push 0x52a3bc
mov edx, eax
call fcn.004114a0
add esp, 8
mov ecx, ebx
call fcn.0040fa50
mov esi, eax
push 0x51a7a0
push 0x52a3bc
mov edx, esi
call fcn.004114a0
push 0x52a198
push 0x52a3bc
mov edx, esi
call fcn.004114a0
push 0x51a7b4
push 0x52a3bc
mov edx, esi
call fcn.004114a0
add esp, 0x18
lea eax, [esp + 0x5d4]
call fcn.00423880
cmp byte [esp + 0x4a0], 0
mov dword [esp + 0x384], ebp
jne 0x407e09
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x390]
cmp eax, ecx
je 0x407e09
push eax
call fcn.004d1d15
add esp, 4
cmp byte [esp + 0x5c8], 0
mov dword [esp + 0x4ac], ebp
jne 0x407e35
mov eax, dword [esp + 0x4b4]
lea edx, [esp + 0x4b8]
cmp eax, edx
je 0x407e35
push eax
call fcn.004d1d15
add esp, 4
xor al, al
jmp 0x407f76
cmp byte [esp + 0x6f0], 0
lea eax, [esp + 0x5e0]
jne 0x407e54
mov eax, dword [esp + 0x5dc]
add eax, 4
lea edx, [esp + 0x4ac]
call fcn.00410e40
mov edx, dword [esp + 0x4b0]
mov edi, 0x51a6a0
test edx, edx
jbe 0x407f01
cmp byte [esp + 0x5c8], 0
lea ecx, [esp + 0x4b8]
jne 0x407e8f
mov ecx, dword [esp + 0x4b4]
xor eax, eax
mov esi, 0x3f
cmp word [ecx + eax*2 + 4], si
je 0x407ea4
inc eax
cmp eax, edx
jb 0x407e96
jmp 0x407f01
cmp eax, 0xffffffff
je 0x407f01
mov esi, 0x3d
lea ecx, [esp + 0x4ac]
call fcn.00411410
mov ebx, eax
cmp ebx, 0xffffffff
je 0x407f01
mov esi, 0x26
lea ecx, [esp + 0x4ac]
call fcn.00411410
cmp eax, 0xffffffff
je 0x407ee5
mov edi, eax
lea eax, [esp + 0x4ac]
call fcn.004112e0
cmp byte [esp + 0x5c8], 0
lea eax, [esp + 0x4b8]
jne 0x407efd
mov eax, dword [esp + 0x4b4]
lea edi, [eax + ebx*2 + 6]
mov eax, dword [esp + 0x14]
push eax
mov ebx, edi
call fcn.00423040
add esp, 4
lea eax, [esp + 0x5d4]
call fcn.00423880
cmp byte [esp + 0x4a0], 0
mov dword [esp + 0x384], ebp
jne 0x407f48
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x390]
cmp eax, ecx
je 0x407f48
push eax
call fcn.004d1d15
add esp, 4
cmp byte [esp + 0x5c8], 0
mov dword [esp + 0x4ac], ebp
jne 0x407f74
mov eax, dword [esp + 0x4b4]
lea edx, [esp + 0x4b8]
cmp eax, edx
je 0x407f74
push eax
call fcn.004d1d15
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x850]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x838]
xor ecx, esp
call fcn.004d158d
add esp, 0x848
ret