Function at 0x409c50
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x5128d2
mov eax, dword fs:[0]
push eax
sub esp, 0x83c
mov eax, dword [0x56957c]
xor eax, esp
mov dword [esp + 0x838], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x56957c]
xor eax, esp
push eax
lea eax, [esp + 0x850]
mov dword fs:[0], eax
mov eax, dword [esp + 0x860]
mov ebx, ecx
lea ecx, [esp + 0x4ac]
mov edi, edx
mov dword [esp + 0x14], eax
call fcn.004174b0
lea ecx, [esp + 0x864]
push ecx
lea edx, [esp + 0x140]
push edx
push str.UserManager
mov dword [esp + 0x864], 0
call fcn.00405400
add esp, 4
mov ecx, eax
call fcn.004a50b0
mov esi, eax
lea ecx, [esp + 0x384]
call fcn.004174b0
cmp byte [esi + 0x11c], 0
je 0x409cf1
add esi, 0xc
jmp 0x409cf4
mov esi, dword [esi + 8]
lea eax, [esi + 4]
lea edx, [esp + 0x384]
call fcn.00417710
mov byte [esp + 0x858], 9
cmp byte [esp + 0x258], 0
mov ebp, vtable.t_str.0
mov dword [esp + 0x13c], ebp
jne 0x409d3c
mov eax, dword [esp + 0x144]
lea ecx, [esp + 0x148]
cmp eax, ecx
je 0x409d3c
push eax
call fcn.004ed7b6
add esp, 4
push 0
push 0
push 0
push 0
push 0
push str.RandSkin
lea ecx, [esp + 0x30]
call fcn.0041dc60
cmp byte [esp + 0x134], 0
lea eax, [esp + 0x24]
jne 0x409d66
mov eax, dword [esp + 0x20]
cmp word [eax + 4], 0x2e
lea ecx, [esp + 0x384]
jne 0x409d80
lea edx, [esp + 0x18]
push edx
call fcn.0041f1b0
jmp 0x409d8a
lea eax, [esp + 0x18]
push eax
call fcn.0041e2f0
cmp byte [esp + 0x134], 0
mov dword [esp + 0x18], ebp
jne 0x409dad
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x24]
cmp eax, ecx
je 0x409dad
push eax
call fcn.004ed7b6
add esp, 4
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x409dc5
mov eax, dword [esp + 0x38c]
push 0
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x409e26
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x409ded
mov eax, dword [esp + 0x38c]
push 0x10000000
add eax, 4
push 1
push eax
call fcn.00423ee0
add esp, 0xc
cmp byte [esp + 0x4a0], 0
lea eax, [esp + 0x390]
jne 0x409e18
mov eax, dword [esp + 0x38c]
add eax, 4
push 1
push eax
call fcn.00424280
add esp, 8
push 0
push 0
push 0
push 0
push 0
push 0x544ac8
lea ecx, [esp + 0x30]
call fcn.0041dc60
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x264]
push eax
lea ecx, [esp + 0x38c]
mov byte [esp + 0x860], 0xa
call fcn.0041e3b0
cmp byte [eax + 0x11c], 0
je 0x409e6d
add eax, 0xc
jmp 0x409e70
mov eax, dword [eax + 8]
add eax, 4
mov edx, edi
call fcn.00417710
cmp byte [esp + 0x37c], 0
mov dword [esp + 0x260], ebp
jne 0x409ea6
mov eax, dword [esp + 0x268]
lea ecx, [esp + 0x26c]
cmp eax, ecx
je 0x409ea6
push eax
call fcn.004ed7b6
add esp, 4
cmp byte [esp + 0x134], 0
mov dword [esp + 0x18], ebp
jne 0x409ec9
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x24]
cmp eax, edx
je 0x409ec9
push eax
call fcn.004ed7b6
add esp, 4
lea esi, [esp + 0x5d4]
call fcn.0042d8f0
mov eax, str.http:__config.pinyin.sogou.com_skins_rand.ssf
mov edx, esi
mov byte [esp + 0x858], 0xb
call fcn.00417710
cmp byte [edi + 0x11c], 0
lea eax, [edi + 0xc]
jne 0x409ef8
mov eax, dword [edi + 8]
add eax, 4
lea edx, [esp + 0x6f8]
call fcn.00417710
lea eax, [esp + 0x5d4]
mov dword [esp + 0x828], 0x54623c
mov dword [esp + 0x81c], 0x14
mov dword [esp + 0x824], 2
mov dword [esp + 0x820], 0x84200000
call fcn.0042e180
test al, al
jne 0x40a00c
mov ecx, ebx
call fcn.00416430
push 0x544c44
push 0x549858
mov edx, eax
call fcn.00417ed0
add esp, 8
mov ecx, ebx
call fcn.00416430
mov esi, eax
push 0x544c54
push 0x549858
mov edx, esi
call fcn.00417ed0
push 0x54964c
push 0x549858
mov edx, esi
call fcn.00417ed0
push 0x546420
push 0x549858
mov edx, esi
call fcn.00417ed0
add esp, 0x18
lea eax, [esp + 0x5d4]
call fcn.00411620
cmp byte [esp + 0x4a0], 0
mov dword [esp + 0x384], ebp
jne 0x409fd9
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x390]
cmp eax, ecx
je 0x409fd9
push eax
call fcn.004ed7b6
add esp, 4
cmp byte [esp + 0x5c8], 0
mov dword [esp + 0x4ac], ebp
jne 0x40a005
mov eax, dword [esp + 0x4b4]
lea edx, [esp + 0x4b8]
cmp eax, edx
je 0x40a005
push eax
call fcn.004ed7b6
add esp, 4
xor al, al
jmp 0x40a146
cmp byte [esp + 0x6f0], 0
lea eax, [esp + 0x5e0]
jne 0x40a024
mov eax, dword [esp + 0x5dc]
add eax, 4
lea edx, [esp + 0x4ac]
call fcn.00417710
mov edx, dword [esp + 0x4b0]
mov edi, 0x544b54
test edx, edx
jbe 0x40a0d1
cmp byte [esp + 0x5c8], 0
lea ecx, [esp + 0x4b8]
jne 0x40a05f
mov ecx, dword [esp + 0x4b4]
xor eax, eax
mov esi, 0x3f
cmp word [ecx + eax*2 + 4], si
je 0x40a074
inc eax
cmp eax, edx
jb 0x40a066
jmp 0x40a0d1
cmp eax, 0xffffffff
je 0x40a0d1
mov esi, 0x3d
lea ecx, [esp + 0x4ac]
call fcn.00417e10
mov ebx, eax
cmp ebx, 0xffffffff
je 0x40a0d1
mov esi, 0x26
lea ecx, [esp + 0x4ac]
call fcn.00417e10
cmp eax, 0xffffffff
je 0x40a0b5
mov edi, eax
lea eax, [esp + 0x4ac]
call fcn.00417c60
cmp byte [esp + 0x5c8], 0
lea eax, [esp + 0x4b8]
jne 0x40a0cd
mov eax, dword [esp + 0x4b4]
lea edi, [eax + ebx*2 + 6]
mov eax, dword [esp + 0x14]
push eax
mov ebx, edi
call fcn.0042cdd0
add esp, 4
lea eax, [esp + 0x5d4]
call fcn.00411620
cmp byte [esp + 0x4a0], 0
mov dword [esp + 0x384], ebp
jne 0x40a118
mov eax, dword [esp + 0x38c]
lea ecx, [esp + 0x390]
cmp eax, ecx
je 0x40a118
push eax
call fcn.004ed7b6
add esp, 4
cmp byte [esp + 0x5c8], 0
mov dword [esp + 0x4ac], ebp
jne 0x40a144
mov eax, dword [esp + 0x4b4]
lea edx, [esp + 0x4b8]
cmp eax, edx
je 0x40a144
push eax
call fcn.004ed7b6
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x850]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x838]
xor ecx, esp
call fcn.004ecddb
add esp, 0x848
ret