Function at 0x14001e450
Capabilities:
Create directory
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov r14, rdx
mov r13, rcx
xor ebx, ebx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], bx
lea r8d, [rbx + 7]
lea rdx, str.Crash_
lea rcx, [rsp + 0x70]
call fcn.140014c30
nop
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp - 0x50]
call fcn.140043980
movzx eax, word [rbp - 0x62]
movzx ecx, word [rbp - 0x64]
movzx edx, word [rbp - 0x66]
movzx r8d, word [rbp - 0x68]
movzx r10d, word [rbp - 0x6a]
movzx r11d, word [rbp - 0x6e]
movzx r9d, word [rbp - 0x70]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r11d
lea r8, str._04d__02d__02d__02d_02d_02d_03d
mov edx, 0x200
lea rcx, [rbp - 0x50]
call fcn.140014e00
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
lea rax, [rbp - 0x50]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001e530
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140014c30
nop
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x70]
call fcn.14002c3f0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e5ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e5a8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e8fb
mov rcx, r8
call fcn.14003f840
mov r12, qword [r13 + 0x10]
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
test r12, r12
je 0x14001e740
movabs rdx, 0x7ffffffffffffffe
mov rax, rdx
sub rax, r12
mov rcx, qword [rbp - 0x80]
cmp rax, rcx
jb 0x14001e8f5
cmp qword [r13 + 0x18], 8
jb 0x14001e5eb
mov r13, qword [r13]
lea rax, [rsp + 0x70]
cmp r15, 8
cmovae rax, rdi
mov qword [rbp - 0x70], rax
add rcx, r12
mov qword [rbp + 0x408], rcx
mov ebx, 7
lea rax, [rsp + 0x50]
mov qword [rbp + 0x400], rax
cmp rcx, rbx
jbe 0x14001e65a
mov rbx, rcx
or rbx, 7
cmp rbx, rdx
jbe 0x14001e62d
mov rbx, rdx
jmp 0x14001e639
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x50]
call fcn.140014a40
mov qword [rbp + 0x400], rax
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp + 0x408]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rbx
lea rbx, [r12 + r12]
mov r8, rbx
mov rdx, r13
mov rcx, rax
call fcn.140043570
mov r12, qword [rbp + 0x400]
lea rcx, [rbx + r12]
mov rbx, qword [rbp - 0x80]
lea r8, [rbx + rbx]
mov rdx, qword [rbp - 0x70]
call fcn.140043570
mov rax, qword [rbp + 0x408]
xor r13d, r13d
mov word [r12 + rax*2], r13w
lea rax, [rsp + 0x50]
cmp r14, rax
je 0x14001e6c8
mov rcx, r14
call fcn.1400123f0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [r14 + 0x10], xmm1
jmp 0x14001e70a
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e70a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e705
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e8fb
mov rcx, r8
call fcn.14003f840
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x14001e717
mov rdx, qword [r14]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
test eax, eax
je 0x14001e892
cmp eax, 0xb7
je 0x14001e892
cmp eax, 0x50
je 0x14001e892
jmp 0x14001e747
mov rbx, qword [rbp - 0x80]
xor r13d, r13d
lea rdx, [rbp - 0x50]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
lea rax, [rbp - 0x50]
nop
inc rsi
cmp word [rax + rsi*2], 0
jne 0x14001e770
mov r8, rsi
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140014c30
nop
lea rdx, [rsp + 0x70]
cmp r15, 8
cmovae rdx, rdi
mov r8, rbx
lea rcx, [rsp + 0x50]
call fcn.14002c3f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.14001cfb0
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x14001e812
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
cmp rdx, 0x1000
jb 0x14001e80c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e901
mov rcx, r8
call fcn.14003f840
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001e854
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
cmp rdx, 0x1000
jb 0x14001e84f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001e8e9
mov rcx, r8
call fcn.14003f840
cmp qword [r14 + 0x18], 8
jb 0x14001e85e
mov r14, qword [r14]
xor r8d, r8d
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
test eax, eax
je 0x14001e889
cmp eax, 0xb7
je 0x14001e889
cmp eax, 0x50
je 0x14001e889
xor bl, bl
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
jmp 0x14001e894
mov r15, qword [rbp - 0x78]
mov rdi, qword [rsp + 0x70]
mov bl, 1
cmp r15, 8
jb 0x14001e8cb
lea rdx, [r15*2 + 2]
cmp rdx, 0x1000
jb 0x14001e8c3
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x14001e8ef
mov rdi, rcx
mov rcx, rdi
call fcn.14003f840
movzx eax, bl
mov rbx, qword [rsp + 0x4f0]
add rsp, 0x4b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004dd7c
nop
call fcn.14004dd7c
nop
call fcn.1400119a0
int3
call fcn.14004dd7c
nop
call fcn.14004dd7c
int3