Function at 0x14001e350
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov r14, rdx
mov r13, rcx
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], bx
lea r8d, [rbx + 7]
lea rdx, str.Crash_
lea rcx, [rsp + 0x70]
call fcn.140014b30
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp - 0x50]
call fcn.140043b10
movzx eax, word [rbp - 0x62]
movzx ecx, word [rbp - 0x64]
movzx edx, word [rbp - 0x66]
movzx r8d, word [rbp - 0x68]
movzx r10d, word [rbp - 0x6a]
movzx r11d, word [rbp - 0x6e]
movzx r9d, word [rbp - 0x70]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
lea r8, str._04d__02d__02d__02d_02d_02d_03d
mov edx, 0x200
lea rcx, [rbp - 0x50]
call fcn.140014d00
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
lea rax, [rbp - 0x50]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001e430
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140014b30
nop
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.14002c320
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e4ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e4a8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e7fb
mov rcx, r8
call fcn.14003f8c0
mov r12, qword [r13 + 0x10]
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
test r12, r12
je 0x14001e640
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r12
mov rcx, qword [rbp - 0x80]
cmp rax, rcx
jb 0x14001e7f5
cmp qword [r13 + 0x18], 8
jb 0x14001e4eb
mov r13, qword [r13]
lea rax, [rsp + 0x70]
cmp r15, 8
cmovae rax, rdi
mov qword [rbp - 0x70], rax
add rcx, r12
mov qword [rbp + 0x408], rcx
mov ebx, 7
lea rax, [rsp + 0x50]
mov qword [rbp + 0x400], rax
cmp rcx, rbx
jbe 0x14001e55a
mov rbx, rcx
or rbx, 7
cmp rbx, rdx
jbe 0x14001e52d
mov rbx, rdx
jmp 0x14001e539
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x50]
call fcn.140014940
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp + 0x408]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rbx
lea rbx, [r12 + r12]
mov r8, rbx
mov rdx, r13
mov rcx, rax
call fcn.140043700
mov r12, qword [rbp + 0x400]
lea rcx, [rbx + r12]
mov rbx, qword [rbp - 0x80]
lea r8, [rbx + rbx]
mov rdx, qword [rbp - 0x70]
call fcn.140043700
mov rax, qword [rbp + 0x408]
xor r13d, r13d
mov word [r12 + rax*2], r13w
lea rax, [rsp + 0x50]
cmp r14, rax
je 0x14001e5c8
mov rcx, r14
call fcn.140012400
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [r14 + 0x10], xmm1
jmp 0x14001e60a
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e60a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e605
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e7fb
mov rcx, r8
call fcn.14003f8c0
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x14001e617
mov rdx, qword [r14]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
test eax, eax
je 0x14001e792
cmp eax, 0xb7
je 0x14001e792
cmp eax, 0x50
je 0x14001e792
jmp 0x14001e647
mov rbx, qword [rbp - 0x80]
xor r13d, r13d
lea rdx, [rbp - 0x50]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp - 0x50]
nop
inc rsi
cmp word [rax + rsi*2], 0
jne 0x14001e670
mov r8, rsi
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140014b30
nop
lea rdx, [rsp + 0x70]
cmp r15, 8
cmovae rdx, rdi
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.14002c320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.14001ceb0
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14001e712
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
cmp rdx, 0x1000
jb 0x14001e70c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e801
mov rcx, r8
call fcn.14003f8c0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e754
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e74f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e7e9
mov rcx, r8
call fcn.14003f8c0
cmp qword [r14 + 0x18], 8
jb 0x14001e75e
mov r14, qword [r14]
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
test eax, eax
je 0x14001e789
cmp eax, 0xb7
je 0x14001e789
cmp eax, 0x50
je 0x14001e789
xor bl, bl
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
jmp 0x14001e794
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
mov bl, 1
cmp r15, 8
jb 0x14001e7cb
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x14001e7c3
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x14001e7ef
mov rdi, rcx
mov rcx, rdi
call fcn.14003f8c0
movzx eax, bl
mov rbx, qword [rsp + 0x4f0]
add rsp, 0x4b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004df0c
nop
call fcn.14004df0c
nop
call fcn.1400119b0
int3
call fcn.14004df0c
nop
call fcn.14004df0c
int3