Function at 0x407400
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x47415d
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x4c40a0]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c40a0]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
mov edi, ecx
mov eax, 7
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ebp
mov word [esp + 0x8c], cx
mov dword [esp + 0xe8], ebp
xor edx, edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ebp
mov word [esp + 0x54], dx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ebp
mov word [esp + 0x38], cx
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ebp
mov word [esp + 0x70], dx
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe8], 3
call fcn.0040daa0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe8], 4
call fcn.0040dc20
push 5
mov eax, 0x497c60
lea ecx, [esp + 0xa8]
mov byte [esp + 0xec], 5
call fcn.0040a010
mov eax, dword [esp + 0xa8]
mov esi, 8
cmp dword [esp + 0xbc], esi
jae 0x4074f5
lea eax, [esp + 0xa8]
push ebp
push eax
call fcn.0046200a
add esp, 8
test eax, eax
je 0x407522
mov eax, dword [esp + 0xa8]
cmp dword [esp + 0xbc], esi
jae 0x40751a
lea eax, [esp + 0xa8]
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp dword [edi + 0x1e4], ebp
jne 0x40770b
mov edi, dword [esp + 0x30]
add edi, 0x170
push edi
mov ebx, str._sohu.ico
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 6
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x40757d
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
push edi
mov ebx, 0x4989c8
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 7
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4075bf
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
push 7
mov eax, 0x4989e4
lea esi, [esp + 0x70]
call fcn.0040a600
lea edx, [esp + 0xc0]
push edx
mov ebx, 0x498914
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
mov ebx, 8
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], bl
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], ebx
jb 0x40761b
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], ebx
jae 0x407629
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], ebx
jae 0x407640
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], ebx
jae 0x407651
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], ebx
jae 0x40765f
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
lea ecx, [esp + 0xb0]
push ecx
mov ebx, 0x498914
lea esi, [esp + 0x24]
call fcn.0040ad70
add esp, 0x10
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 9
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4076b6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x4076c4
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x4076db
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x4076ec
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x4076fa
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
mov edi, dword [esp + 0x3c]
add esp, 0xc
cmp dword [edi + 0x1f0], ebp
jne 0x40785d
mov edi, dword [esp + 0x30]
add edi, 0x170
push edi
mov ebx, str.hotgame.ico
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0xa
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407766
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
push edi
mov ebx, 0x498a10
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0xb
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4077a8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
push 6
mov eax, 0x498a2c
lea esi, [esp + 0x70]
call fcn.0040a600
lea edx, [esp + 0xc0]
push edx
mov ebx, 0x498a3c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0xc
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x407805
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407813
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40782a
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40783b
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x407849
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str.HotGameQuickLunch
call fcn.0040d990
mov edi, dword [esp + 0x3c]
add esp, 0xc
cmp dword [edi + 0x1e8], ebp
je 0x407a47
mov edi, dword [esp + 0x30]
add edi, 0x170
push edi
mov ebx, str._sogou.ico
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0xd
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4078b8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
push edi
mov ebx, 0x498a94
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0xe
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4078fa
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
push 4
mov eax, 0x498aa8
lea esi, [esp + 0x70]
call fcn.0040a600
lea eax, [esp + 0xc0]
push eax
mov ebx, 0x498900
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0xf
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x407957
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407965
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40797c
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40798d
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x40799b
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
lea edx, [esp + 0xb0]
push edx
mov ebx, 0x498900
lea esi, [esp + 0x24]
call fcn.0040ad70
add esp, 0x10
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x10
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4079f2
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407a00
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x407a17
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x407a28
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x407a36
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
mov edi, dword [esp + 0x3c]
add esp, 0xc
lea ebp, [edi + 0x170]
push ebp
mov ebx, str.uninstall.ico
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x11
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407a93
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
push ebp
mov ebx, str.uninstall.exe
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x12
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407ad6
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
push 6
mov eax, 0x498af4
lea esi, [esp + 0x70]
call fcn.0040a600
lea eax, [esp + 0xa4]
push eax
mov ebx, 0x498b04
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x13
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x407b34
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407b42
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x407b59
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x407b6a
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x407b78
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
push ebp
mov ebx, str.logo.ico
lea esi, [esp + 0x24]
call fcn.0040ad70
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x14
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407bc8
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
push ebp
mov ebx, 0x498a10
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x15
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407c0b
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
push 4
mov eax, 0x497c54
lea esi, [esp + 0x70]
call fcn.0040a600
lea ecx, [esp + 0xc0]
push ecx
mov ebx, 0x4988d8
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x16
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x407c69
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407c77
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x407c8e
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x407c9f
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x407cad
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str._DeskTop
call fcn.0040d990
lea eax, [esp + 0xb0]
push eax
mov ebx, 0x4988d8
lea esi, [esp + 0x24]
call fcn.0040ad70
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x17
call fcn.0040a0f0
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x407d08
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x407d16
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x407d2d
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x407d3e
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x407d4c
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str._StartMenu
call fcn.0040d990
push ebp
mov ebx, str.hotgame.ico
lea esi, [esp + 0x24]
call fcn.0040ad70
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x18
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407d9f
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
push ebp
mov ebx, 0x498b5c
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x19
call fcn.0040a0f0
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x407de2
mov eax, dword [esp + 0x18]
push eax
call fcn.0046190e
add esp, 4
push 6
mov eax, 0x498b74
lea esi, [esp + 0x70]
call fcn.0040a600
lea ecx, [esp + 0xa4]
push ecx
mov ebx, 0x498b84
lea esi, [esp + 0x18]
call fcn.0040ad70
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x1a
call fcn.0040a0f0
mov ebx, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], ebx
jb 0x407e40
mov edx, dword [esp + 0x18]
push edx
call fcn.0046190e
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], ebx
jae 0x407e4e
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], ebx
jae 0x407e65
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], ebx
jae 0x407e76
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], ebx
jae 0x407e84
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.0040d990
add esp, 0xc
cmp dword [esp + 0xbc], ebx
jb 0x407eaa
mov eax, dword [esp + 0xa8]
push eax
call fcn.0046190e
add esp, 4
xor esi, esi
xor ecx, ecx
mov edi, 7
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], cx
cmp dword [esp + 0xd8], ebx
jb 0x407ee2
mov edx, dword [esp + 0xc4]
push edx
call fcn.0046190e
add esp, 4
xor eax, eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], esi
mov word [esp + 0xc4], ax
cmp dword [esp + 0x84], ebx
jb 0x407f10
mov ecx, dword [esp + 0x70]
push ecx
call fcn.0046190e
add esp, 4
xor edx, edx
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], esi
mov word [esp + 0x70], dx
cmp dword [esp + 0x4c], ebx
jb 0x407f38
mov eax, dword [esp + 0x38]
push eax
call fcn.0046190e
add esp, 4
xor ecx, ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], esi
mov word [esp + 0x38], cx
cmp dword [esp + 0x68], ebx
jb 0x407f5a
mov edx, dword [esp + 0x54]
push edx
call fcn.0046190e
add esp, 4
xor eax, eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], esi
mov word [esp + 0x54], ax
cmp dword [esp + 0xa0], ebx
jb 0x407f82
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.0046190e
add esp, 4
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.00461919
add esp, 0xd8
ret