Function at 0x140006b30
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x140050040]
xor rax, rsp
mov qword [rbp + 0x160], rax
mov rsi, rdx
mov r15, rcx
mov qword [rbp - 0x18], rdx
xor edi, edi
cmp byte [0x1400b0f70], dil
jne 0x140006b9c
call fcn.1400061c0
test al, al
jne 0x140006b9c
xor r9d, r9d
lea r8, str.Fatal_Error
lea rdx, str.Failed_to_read_meta_data
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x140007037
xor r9d, r9d
lea r8d, [r9 + 0x1a]
lea rdx, [rbp + 0x50]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
lea rax, [rbp + 0x50]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006bd0
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x58]
call fcn.140002150
nop
mov r8d, 1
lea rdx, [0x140044de8]
lea rcx, [rbp - 0x58]
call fcn.140013240
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x140006c32
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.140013240
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x140006cb6
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006cb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006cb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140006d07
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006d02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006d02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov r13, qword [rbp]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 1
jb 0x140007293
lea rax, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rax, qword [rbp - 0x10]
mov qword [rsp + 0x20], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x38], xmm1
lea r12, [r13 + 1]
mov edi, 0xf
lea r14, [rsp + 0x28]
cmp r12, rdi
jbe 0x140006df9
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x140006dae
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14003d500
test rax, rax
je 0x140006dd6
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rax, qword [rsp + 0x20]
jmp 0x140006df4
mov ecx, 0x16
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140006ddd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007299
jmp 0x140006d8e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006df1
call fcn.14003d500
mov r14, rax
mov rax, qword [rsp + 0x20]
jmp 0x140006df4
xor r14d, r14d
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rdi
mov r8, r13
mov rdx, rax
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + r13], 0x5c
mov byte [r14 + r12], 0
mov r8, rbx
nop
inc r8
cmp byte [r15 + r8], 0
jne 0x140006e20
mov rdx, r15
lea rcx, [rsp + 0x28]
call fcn.140013240
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea r8d, [rdi + 4]
lea rdx, str..dll
lea rcx, [rsp + 0x68]
call fcn.140013240
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140006eeb
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ee6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006ee6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x140006f3e
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rsp + 0x38], xmm0
mov byte [rsp + 0x28], 0
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rcx, qword [rbp - 0x10]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x14000705a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x14000705a
xor r9d, r9d
lea r8, str.Fatal_Error
lea rdx, str.Failed_to_create_directory
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x140006fd8
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006fd3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140007027
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007022
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007022
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x140007050
cmp rcx, rsi
mov rax, qword [rcx]
setne dl
call qword [rax + 0x20]
mov qword [rsi + 0x38], rdi
mov eax, 0x80004005
jmp 0x140007269
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov r8d, 0x1e
lea rdx, str.https:__axion.systems_api_lib_
lea rcx, [rbp - 0x78]
call fcn.140002150
nop
lea rdx, [0x1400b0f90]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140007087
mov r8, rbx
lea rcx, [rbp - 0x78]
call fcn.140013240
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140007107
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007102
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007102
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x20], rdi
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x14000713b
mov rax, qword [rcx]
lea rdx, [rbp - 0x58]
call qword [rax]
mov qword [rbp - 0x20], rax
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rcx, qword [rbp + 0x30]
lea r8, [rbp - 0x58]
call fcn.140006060
mov ebx, eax
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x1400071a0
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000719b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000719b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1400071ef
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400071ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
movdqa xmm0, xmmword [0x140046010]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14000723e
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007239
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007239
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14003d544
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x140007267
mov rax, qword [rcx]
cmp rcx, rsi
setne dl
call qword [rax + 0x20]
mov qword [rsi + 0x38], rdi
mov eax, ebx
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.14003d4e0
mov rbx, qword [rsp + 0x2c0]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001850
nop
call fcn.1400017b0
int3