Function at 0x2005eb04
Capabilities:
Create directory

Disassembly:
mov eax, 0x200a1523
call fcn.2007d394
sub esp, 0x21c
mov eax, dword [0x200cc84c]
push ebx
xor eax, ebp
push edi
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x10], eax
call fcn.200026bf
xor ebx, ebx
mov dword [ebp - 4], ebx
push str.shfolder.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
je 0x2005eb4f
push str.SHGetFolderPathA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
jmp 0x2005eb51
xor edx, edx
push 0x40
xor eax, eax
cmp edx, ebx
mov byte [ebp - 0x218], bl
pop ecx
lea edi, [ebp - 0x217]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
je 0x2005eb7b
lea eax, [ebp - 0x218]
push eax
push ebx
push ebx
push 0x23
push ebx
call edx
jmp 0x2005eb81
mov byte [ebp - 0x218], bl
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x2005ecba
cmp dword [0x200cb90c], 0x10
mov eax, dword [0x200cb8f8]
jae 0x2005eba9
mov eax, 0x200cb8f8
push eax
lea ecx, [ebp - 0x220]
call fcn.20004f37
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x220]
call fcn.20008e10
push ebx
push 0x200aa460
lea ecx, [ebp - 0x220]
call fcn.20008c71
cmp eax, 0xffffffff
je 0x2005ec2b
push esi
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.20003052
push 0x200a6b48
lea ecx, [ebp - 0x21c]
call fcn.200037d8
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push ebx
push dword [ebp - 0x21c]
call esi
push str.Livetmp
lea ecx, [ebp - 0x21c]
call fcn.200037d8
push ebx
push dword [ebp - 0x21c]
call esi
pop esi
jmp 0x2005ed3d
push 0x40
pop ecx
xor eax, eax
mov byte [ebp - 0x114], bl
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x114]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x224]
call fcn.20004f37
mov byte [ebp - 4], 2
push 0x5c
lea ecx, [ebp - 0x224]
call fcn.2002e9fc
cmp eax, 0xffffffff
je 0x2005ecae
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x224]
call fcn.2002ea3a
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x21c]
call fcn.20015e97
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x228]
call fcn.200026ee
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x224]
jmp 0x2005ed38
push 0x40
pop ecx
xor eax, eax
mov byte [ebp - 0x114], bl
lea edi, [ebp - 0x113]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x114]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x220]
call fcn.20004f37
mov byte [ebp - 4], 4
push 0x5c
lea ecx, [ebp - 0x220]
call fcn.2002e9fc
cmp eax, 0xffffffff
je 0x2005ed3d
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x220]
call fcn.2002ea3a
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x21c]
call fcn.20015e97
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x228]
call fcn.200026ee
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x220]
call fcn.200026ee
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
pop edi
pop ebx
jne 0x2005ed68
push 0x200aa450
lea ecx, [ebp - 0x21c]
call fcn.20003052
push dword [ebp - 0x21c]
mov ecx, 0x200cb8d8
call fcn.20003a20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.200026ee
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.2007c9ae
leave
ret