Function at 0x407eb0
Capabilities:
Create directory

Disassembly:
push 0xffffffffffffffff
push 0x490d0d
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x4ed394]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ed394]
xor eax, esp
push eax
lea eax, [esp + 0xe0]
mov dword fs:[0], eax
mov edi, ecx
mov eax, 7
xor ebp, ebp
xor ecx, ecx
mov dword [esp + 0x30], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 0x9c], ebp
mov word [esp + 0x8c], cx
mov dword [esp + 0xe8], ebp
xor edx, edx
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ebp
mov word [esp + 0x54], dx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ebp
mov word [esp + 0x38], cx
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], ebp
mov word [esp + 0x70], dx
lea ecx, [esp + 0xc0]
mov byte [esp + 0xe8], 3
call fcn.004108d0
lea ecx, [esp + 0xa4]
mov byte [esp + 0xe8], 4
call fcn.00410990
push 5
mov eax, 0x4bc91c
lea ecx, [esp + 0xa8]
mov byte [esp + 0xec], 5
call fcn.0040baa0
mov eax, dword [esp + 0xa8]
mov esi, 8
cmp dword [esp + 0xbc], esi
jae 0x407fa5
lea eax, [esp + 0xa8]
push ebp
push eax
call fcn.0047a38b
add esp, 8
test eax, eax
je 0x407fd2
mov eax, dword [esp + 0xa8]
cmp dword [esp + 0xbc], esi
jae 0x407fca
lea eax, [esp + 0xa8]
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp dword [edi + 0x250], ebp
jne 0x4081bb
mov edi, dword [esp + 0x30]
add edi, 0x1a8
push edi
mov ebx, str._sohu.ico
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 6
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x40802d
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
push edi
mov ebx, 0x4be0ac
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 7
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x40806f
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
push 7
mov eax, 0x4be0c8
lea esi, [esp + 0x70]
call fcn.0040c300
lea edx, [esp + 0xc0]
push edx
mov ebx, 0x4bdff8
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
mov ebx, 8
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], bl
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], ebx
jb 0x4080cb
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], ebx
jae 0x4080d9
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], ebx
jae 0x4080f0
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], ebx
jae 0x408101
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], ebx
jae 0x40810f
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
lea ecx, [esp + 0xb0]
push ecx
mov ebx, 0x4bdff8
lea esi, [esp + 0x24]
call fcn.0040d170
add esp, 0x10
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 9
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x408166
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x408174
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40818b
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40819c
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x4081aa
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
mov edi, dword [esp + 0x3c]
add esp, 0xc
cmp dword [edi + 0x25c], ebp
jne 0x40830d
mov edi, dword [esp + 0x30]
add edi, 0x1a8
push edi
mov ebx, str.hotgame.ico
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0xa
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408216
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
push edi
mov ebx, 0x4be0f4
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0xb
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408258
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
push 8
mov eax, 0x4be110
lea esi, [esp + 0x70]
call fcn.0040c300
lea edx, [esp + 0xc0]
push edx
mov ebx, 0x4be124
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0xc
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4082b5
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x4082c3
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x4082da
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x4082eb
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x4082f9
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str.HotGameQuickLunch
call fcn.004107c0
mov edi, dword [esp + 0x3c]
add esp, 0xc
cmp dword [edi + 0x254], ebp
je 0x4084f7
mov edi, dword [esp + 0x30]
add edi, 0x1a8
push edi
mov ebx, str._sogou.ico
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0xd
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408368
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
push edi
mov ebx, 0x4be180
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0xe
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4083aa
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
push 4
mov eax, 0x4be194
lea esi, [esp + 0x70]
call fcn.0040c300
lea eax, [esp + 0xc0]
push eax
mov ebx, 0x4bdfe4
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0xf
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x408407
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x408415
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40842c
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40843d
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x40844b
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
lea edx, [esp + 0xb0]
push edx
mov ebx, 0x4bdfe4
lea esi, [esp + 0x24]
call fcn.0040d170
add esp, 0x10
push 0xffffffffffffffff
push ebp
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x10
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4084a2
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x4084b0
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x4084c7
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x4084d8
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x4084e6
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
mov edi, dword [esp + 0x3c]
add esp, 0xc
lea ebp, [edi + 0x1a8]
push ebp
mov ebx, str.uninstall.ico
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x11
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408543
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
push ebp
mov ebx, str.SHUninstall.exe
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x12
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408586
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
push 6
mov eax, 0x4be1e4
lea esi, [esp + 0x70]
call fcn.0040c300
lea eax, [esp + 0xa4]
push eax
mov ebx, 0x4be1f4
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x13
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4085e4
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x4085f2
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x408609
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40861a
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x408628
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
push ebp
mov ebx, str.logo.ico
lea esi, [esp + 0x24]
call fcn.0040d170
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x14
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408678
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
push ebp
mov ebx, 0x4be0f4
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x15
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x4086bb
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
push 4
mov eax, 0x4bc910
lea esi, [esp + 0x70]
call fcn.0040c300
lea ecx, [esp + 0xc0]
push ecx
mov ebx, 0x4bdfbc
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x16
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x408719
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x408727
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x40873e
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x40874f
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x40875d
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str._DeskTop
call fcn.004107c0
lea eax, [esp + 0xb0]
push eax
mov ebx, 0x4bdfbc
lea esi, [esp + 0x24]
call fcn.0040d170
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x17
call fcn.0040bb80
mov esi, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], esi
jb 0x4087b8
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], esi
jae 0x4087c6
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], esi
jae 0x4087dd
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], esi
jae 0x4087ee
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], esi
jae 0x4087fc
lea eax, [esp + 0x54]
push edx
push ecx
push eax
mov esi, str._StartMenu
call fcn.004107c0
push ebp
mov ebx, str.hotgame.ico
lea esi, [esp + 0x24]
call fcn.0040d170
add esp, 0x10
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x90]
mov byte [esp + 0xf0], 0x18
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x40884f
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
push ebp
mov ebx, 0x4be24c
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x58]
mov byte [esp + 0xf0], 0x19
call fcn.0040bb80
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], 8
jb 0x408892
mov eax, dword [esp + 0x18]
push eax
call fcn.00479461
add esp, 4
push 6
mov eax, 0x4be264
lea esi, [esp + 0x70]
call fcn.0040c300
lea ecx, [esp + 0xa4]
push ecx
mov ebx, 0x4be274
lea esi, [esp + 0x18]
call fcn.0040d170
add esp, 4
push 0xffffffffffffffff
push 0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xf0], 0x1a
call fcn.0040bb80
mov ebx, 8
mov byte [esp + 0xe8], 5
cmp dword [esp + 0x2c], ebx
jb 0x4088f0
mov edx, dword [esp + 0x18]
push edx
call fcn.00479461
add esp, 4
mov edx, dword [esp + 0x38]
cmp dword [esp + 0x4c], ebx
jae 0x4088fe
lea edx, [esp + 0x38]
mov edi, dword [esp + 0x8c]
cmp dword [esp + 0xa0], ebx
jae 0x408915
lea edi, [esp + 0x8c]
mov ecx, dword [esp + 0x70]
cmp dword [esp + 0x84], ebx
jae 0x408926
lea ecx, [esp + 0x70]
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x68], ebx
jae 0x408934
lea eax, [esp + 0x54]
push edx
push ecx
push eax
xor esi, esi
call fcn.004107c0
add esp, 0xc
cmp dword [esp + 0xbc], ebx
jb 0x40895a
mov eax, dword [esp + 0xa8]
push eax
call fcn.00479461
add esp, 4
xor esi, esi
xor ecx, ecx
mov edi, 7
mov dword [esp + 0xbc], edi
mov dword [esp + 0xb8], esi
mov word [esp + 0xa8], cx
cmp dword [esp + 0xd8], ebx
jb 0x408992
mov edx, dword [esp + 0xc4]
push edx
call fcn.00479461
add esp, 4
xor eax, eax
mov dword [esp + 0xd8], edi
mov dword [esp + 0xd4], esi
mov word [esp + 0xc4], ax
cmp dword [esp + 0x84], ebx
jb 0x4089c0
mov ecx, dword [esp + 0x70]
push ecx
call fcn.00479461
add esp, 4
xor edx, edx
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], esi
mov word [esp + 0x70], dx
cmp dword [esp + 0x4c], ebx
jb 0x4089e8
mov eax, dword [esp + 0x38]
push eax
call fcn.00479461
add esp, 4
xor ecx, ecx
mov dword [esp + 0x4c], edi
mov dword [esp + 0x48], esi
mov word [esp + 0x38], cx
cmp dword [esp + 0x68], ebx
jb 0x408a0a
mov edx, dword [esp + 0x54]
push edx
call fcn.00479461
add esp, 4
xor eax, eax
mov dword [esp + 0x68], edi
mov dword [esp + 0x64], esi
mov word [esp + 0x54], ax
cmp dword [esp + 0xa0], ebx
jb 0x408a32
mov ecx, dword [esp + 0x8c]
push ecx
call fcn.00479461
add esp, 4
mov ecx, dword [esp + 0xe0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.0047946c
add esp, 0xd8
ret