Function at 0x140001c10
Capabilities:
Create process on windows
Get common file path

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r15, rdx
mov qword [rbp - 0x48], rcx
xor edi, edi
mov r12, qword [0x140006738]
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0xd
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rbp + 0xb0]
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rax + rbx], dil
jne 0x140001c90
movabs r13, 0x7fffffffffffffff
cmp rbx, r13
ja 0x140002259
movabs rax, 0x8000000000000000
mov ecx, 0x16
cmp rbx, 0xf
ja 0x140001ced
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov r8, rbx
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x50], dil
jmp 0x140001d7c
mov rsi, rbx
or rsi, 0xf
cmp rsi, r13
jbe 0x140001d1b
mov rsi, r13
add rax, 0x27
mov rcx, rax
call fcn.1400028e0
test rax, rax
je 0x140001d48
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140001d57
cmp rsi, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140001d30
mov r14, rdi
jmp 0x140001d57
cmp rcx, 0x1000
jb 0x140001d4f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000224d
jmp 0x140001d00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400028e0
mov r14, rax
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rsi
mov r8, rbx
lea rdx, [rbp + 0xb0]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rbx], dil
mov r14, qword [r15 + 0x10]
mov rax, r13
sub rax, r14
cmp rax, 0x26
jb 0x140002247
cmp qword [r15 + 0x18], 0xf
jbe 0x140001d9a
mov r15, qword [r15]
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
lea r13, [r14 + 0x26]
mov ebx, 0xf
lea rsi, [rsp + 0x70]
cmp r13, rbx
jbe 0x140001e4a
mov rbx, r13
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140001e03
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400028e0
test rax, rax
je 0x140001e36
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001e45
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140001e1e
mov rsi, rdi
jmp 0x140001e45
cmp rcx, 0x1000
jb 0x140001e3d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140002253
jmp 0x140001de8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400028e0
mov rsi, rax
mov qword [rsp + 0x70], rsi
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], rbx
movups xmm0, xmmword [str.yt_dlp___extract_audio___audio_format]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400045e0]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [0x1400045f0]
mov dword [rsi + 0x20], eax
movzx eax, word [0x1400045f4]
mov word [rsi + 0x24], ax
lea rcx, [rsi + 0x26]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13], 0
mov r8d, 5
lea rdx, str.__o__
lea rcx, [rsp + 0x70]
call fcn.140002260
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rsp + 0x50]
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140002690
nop
mov r8d, 0x14
lea rdx, str.__title_s.__ext_s_
lea rcx, [rbp - 0x40]
call fcn.140002260
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rax, qword [rbp - 0x48]
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140001f2b
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x70]
call fcn.140002260
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140001fa3
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
movdqa xmm0, xmmword [0x140004640]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140001ffa
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001fed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001fed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
movdqa xmm0, xmmword [0x140004640]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140002049
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000203c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000203c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
movdqa xmm0, xmmword [0x140004640]
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002090
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002083
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002083
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
movdqa xmm0, xmmword [0x140004640]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400020da
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400020d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
mov dword [rbp + 0x40], 0x68
mov dword [rbp + 0x7c], 1
mov word [rbp + 0x80], di
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova rdx, qword [rbp + 0x18]
lea rax, [rbp]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140002175
lea rdx, str.Could_not_create_process_for_download._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x1400021d9
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 0xb
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8, rdi
mov edx, 0x402
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
add rdi, 0xa
sub rbx, 1
jne 0x1400021a2
lea rdx, str.Done__check_your_music_folder._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400022e0
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14000221d
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002218
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002218
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000291c
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1400028c0
mov rbx, qword [rsp + 0x320]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.1400011a0
int3