Function at 0x14000f6b0
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
mov rax, qword [0x1400691d8]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
lea rdx, [rbp + 0x2a0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
xor r13d, r13d
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r13w
lea rax, [rbp + 0x2a0]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x14000f730
lea rdx, [rbp + 0x2a0]
lea rcx, [rsp + 0x58]
call fcn.140006e00
nop
movabs rdi, 0x7ffffffffffffffe
mov rax, rdi
mov rcx, qword [rsp + 0x68]
sub rax, rcx
cmp rax, 0x12
jb 0x14000fedb
lea r9, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r9, qword [rsp + 0x58]
mov qword [rsp + 0x30], 0x12
lea rax, str.InstallManagerApp
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x58]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp + 0x48]
call fcn.140010860
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14000f7eb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f7e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ff11
call fcn.140025900
movups xmm0, xmmword [rbp + 0x48]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [rbp + 0x58]
movups xmmword [rsp + 0x68], xmm1
lea rcx, [rsp + 0x58]
movq rdx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 8
cmovae rcx, rdx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x90]
call fcn.140027ea0
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x60], 7
mov word [rbp + 0x48], r13w
xor r8d, r8d
lea rdx, [0x14005a2c4]
lea rcx, [rbp + 0x48]
call fcn.140006e00
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [rbp - 0x1c]
movzx ecx, word [rbp - 0x1e]
movzx edx, word [rbp - 0x20]
movzx r8d, word [rbp - 0x22]
movzx r10d, word [rbp - 0x26]
movzx r9d, word [rbp - 0x28]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r10d
lea r8, str._04d__02d__02d__02d__02d__02d
mov edx, 0x41
lea rcx, [rbp + 0x90]
call fcn.14000f580
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea rcx, [rbp + 0x68]
call fcn.140003e00
nop
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 7
mov word [rbp + 0x28], r13w
lea rax, [rbp + 0x90]
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14000f8e0
mov r8, rbx
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x28]
call fcn.140006e00
nop
mov rax, qword [rsp + 0x68]
sub rdi, rax
cmp rdi, 0x16
jb 0x14000fee1
lea r9, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r9, qword [rsp + 0x58]
mov qword [rsp + 0x30], 0x16
lea rcx, [0x14005a8f0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.140010860
nop
lea r9, [rbp + 0x68]
mov r14, qword [rbp + 0x68]
mov r12, qword [rbp + 0x80]
cmp r12, 8
cmovae r9, r14
mov rcx, qword [rbp - 8]
mov r8, qword [rbp]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0x78]
cmp rdx, rax
ja 0x14000f9ad
lea rdi, [rcx + rdx]
mov qword [rbp - 8], rdi
lea rbx, [rbp - 0x18]
cmp r8, 8
cmovae rbx, qword [rbp - 0x18]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.1400277f0
mov word [rbx + rdi*2], r13w
lea rax, [rbp - 0x18]
jmp 0x14000f9c6
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x18]
call fcn.1400075a0
mov r12, qword [rbp + 0x80]
mov r14, qword [rbp + 0x68]
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov r8, qword [rbp - 0x38]
mov r9, qword [rbp - 0x30]
mov rax, r9
sub rax, r8
lea rcx, [rbp - 0x48]
cmp rax, 1
jb 0x14000fa31
lea rdx, [r8 + 1]
mov qword [rbp - 0x38], rdx
cmp r9, 8
cmovae rcx, qword [rbp - 0x48]
movzx eax, word [0x14005a8ec]
mov word [rcx + r8*2], ax
mov word [rcx + rdx*2], r13w
lea rax, [rbp - 0x48]
jmp 0x14000fa4b
mov qword [rsp + 0x20], 1
lea r9, [0x14005a8ec]
mov edx, 1
call fcn.1400075a0
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea r9, [rbp + 0x28]
mov rsi, qword [rbp + 0x28]
mov r15, qword [rbp + 0x40]
cmp r15, 8
cmovae r9, rsi
mov rcx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x50]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0x38]
cmp rdx, rax
ja 0x14000fad1
lea rdi, [rcx + rdx]
mov qword [rbp - 0x58], rdi
lea rbx, [rbp - 0x68]
cmp r8, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.1400277f0
mov word [rbx + rdi*2], r13w
lea rax, [rbp - 0x68]
jmp 0x14000fae7
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x68]
call fcn.1400075a0
mov r15, qword [rbp + 0x40]
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov r8, qword [rbp - 0x78]
mov r9, qword [rbp - 0x70]
mov rax, r9
sub rax, r8
lea rcx, [rsp + 0x78]
cmp rax, 4
jb 0x14000fb56
lea rdx, [r8 + 4]
mov qword [rbp - 0x78], rdx
cmp r9, 8
cmovae rcx, qword [rsp + 0x78]
mov rax, qword [str..log]
mov qword [rcx + r8*2], rax
mov word [rcx + rdx*2], r13w
lea rax, [rsp + 0x78]
jmp 0x14000fb70
mov qword [rsp + 0x20], 4
lea r9, str..log
mov edx, 4
call fcn.1400075a0
mov qword [rbp + 8], r13
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14000fbdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fbd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fee7
call fcn.140025900
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x14000fc2e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fc29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000feed
call fcn.140025900
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r13w
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x14000fc7f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fc7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fef3
call fcn.140025900
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r13w
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x14000fcd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fccb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fef9
call fcn.140025900
mov qword [rbp - 8], r13
mov qword [rbp], 7
mov word [rbp - 0x18], r13w
lea rcx, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rcx, qword [rbp + 8]
mov r8d, 0x20
lea rdx, [0x14005a590]
call fcn.14002e330
mov qword [0x14006d5f8], rax
test rax, rax
je 0x14000fd35
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
lea rdx, str.Process_Id:_d_n
mov rcx, qword [0x14006d5f8]
call fcn.14000f530
mov rcx, qword [0x14006d5f8]
call fcn.14002e810
mov ecx, 0x50
call fcn.140025ba4
mov rbx, rax
mov edx, 2
mov rcx, rax
call fcn.140023cb4
mov qword [0x14006d5f0], rbx
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14000fd96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fd91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000feff
call fcn.140025900
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r13w
cmp r15, 8
jb 0x14000fde3
lea rdx, [r15*2 + 2]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000fdda
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ff05
mov rcx, rsi
call fcn.140025900
nop
cmp r12, 8
jb 0x14000fe1f
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000fe16
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ff0b
mov rcx, r14
call fcn.140025900
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x14000fe60
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ff11
call fcn.140025900
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14000fe9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000fed5
call fcn.140025900
lea rax, [0x14006d5f8]
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.1400258e0
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002e1d4
nop
call fcn.1400036c0
nop
call fcn.1400036c0
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
nop
call fcn.14002e1d4
int3