Function at 0x404b00
Capabilities:
Create directory

Disassembly:
mov eax, 0x41aab1
call fcn.004081d8
sub esp, 0x21c
mov eax, dword [0x422980]
push ebx
push esi
xor eax, ebp
push edi
mov dword [ebp - 0x10], eax
call fcn.004148ce
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x21c], eax
xor ebx, ebx
push str.shfolder.dll
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
je 0x404b56
push str.SHGetFolderPathA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
jmp 0x404b58
xor edx, edx
push 0x40
xor eax, eax
cmp edx, ebx
mov byte [ebp - 0x218], bl
pop ecx
lea edi, [ebp - 0x217]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
je 0x404b82
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x23
push ebx
call edx
jmp 0x404b88
mov byte [ebp - 0x218], bl
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x404cba
cmp dword [0x422174], 0x10
mov eax, dword [0x422160]
jae 0x404bb0
mov eax, 0x422160
push eax
lea ecx, [ebp - 0x220]
call fcn.00402ad9
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 1
call fcn.00404a28
push ebx
push 0x41b958
lea ecx, [ebp - 0x220]
call fcn.00402eb0
cmp eax, 0xffffffff
je 0x404c30
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00402a18
push str.PPStream
lea ecx, [ebp - 0x21c]
call fcn.00404adb
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push ebx
push dword [ebp - 0x21c]
call esi
push str.Livetmp
lea ecx, [ebp - 0x21c]
call fcn.00404adb
push ebx
push dword [ebp - 0x21c]
call esi
jmp 0x404d3c
push 0x40
pop ecx
xor eax, eax
mov byte [ebp - 0x114], bl
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x114]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402ad9
push 0x5c
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 2
call fcn.00404a06
cmp eax, 0xffffffff
je 0x404cb2
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x224]
call fcn.00404a4b
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 3
call fcn.00402f69
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.00402628
mov ecx, dword [ebp - 0x224]
jmp 0x404d34
push 0x40
pop ecx
xor eax, eax
mov byte [ebp - 0x114], bl
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x114]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x220]
call fcn.00402ad9
push 0x5c
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 4
call fcn.00404a06
cmp eax, 0xffffffff
je 0x404d3c
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x220]
call fcn.00404a4b
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 5
call fcn.00402f69
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.00402628
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
mov byte [ebp - 4], bl
call fcn.00402628
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
jne 0x404d68
push 0x41b93c
lea ecx, [ebp - 0x21c]
call fcn.00402a18
mov esi, dword [ebp - 0x21c]
push esi
mov ecx, 0x422140
call fcn.00401be4
lea ecx, [esi - 0x10]
call fcn.00402628
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
pop ebx
call fcn.00408280
leave
ret