Function at 0x14008b8ca
Capabilities:
Create directory
Get common file path
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x868210e2
pushf
not eax
add eax, 0x78a2777b
xor eax, 0x3241a9af
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x3d23a97c
xor eax, 0x2ea9eb78
rol eax, 0x5d
popf
cmp eax, 0xc
jne 0x14008b907
popf
pop rax
jmp 0x14008c1d0
cmp eax, 0xe
jne 0x14008b916
popf
pop rax
jmp 0x14008c28e
cmp eax, 0x11
jne 0x14008b925
popf
pop rax
jmp 0x14008c430
cmp eax, 0x12
jne 0x14008b934
popf
pop rax
jmp 0x14008c48e
cmp eax, 0xa
jne 0x14008b943
popf
pop rax
jmp 0x14008c13c
cmp eax, 7
jne 0x14008b952
popf
pop rax
jmp 0x14008bf70
cmp eax, 9
jne 0x14008b961
popf
pop rax
jmp 0x14008c054
cmp eax, 6
jne 0x14008b970
popf
pop rax
jmp 0x14008bece
cmp eax, 4
jne 0x14008b97f
popf
pop rax
jmp 0x14008bce1
cmp eax, 0xf
jne 0x14008b98e
popf
pop rax
jmp 0x14008c361
cmp eax, 5
jne 0x14008b99d
popf
pop rax
jmp 0x14008bd5f
cmp eax, 0xd
jne 0x14008b9ac
popf
pop rax
jmp 0x14008c20b
cmp eax, 2
jne 0x14008b9bb
popf
pop rax
jmp 0x14008bbbd
cmp eax, 0
jne 0x14008b9ca
popf
pop rax
jmp 0x14008ba15
cmp eax, 0xb
jne 0x14008b9d9
popf
pop rax
jmp 0x14008c19b
cmp eax, 0x10
jne 0x14008b9e8
popf
pop rax
jmp 0x14008c3dd
cmp eax, 3
jne 0x14008b9f7
popf
pop rax
jmp 0x14008bc71
cmp eax, 1
jne 0x14008ba06
popf
pop rax
jmp 0x14008bb16
cmp eax, 8
jne 0x14008ba15
popf
pop rax
jmp 0x14008c01c
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0x60b60a4
pushf
not eax
add eax, 0x3eed3a3a
xor eax, 0x1839d17f
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x2a747331
xor eax, 0x98a5248
rol eax, 0xe9
popf
call fcn.14009b7ed
sub rsp, rax
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rsp + 0x2040], rax
xor r14d, r14d
mov rbp, rcx
cmp qword [rcx + 0x3068], r14
je 0x14008bad0
push rax
pushf
mov eax, 0xf7efa0e7
pushf
not eax
add eax, 0x2c749a44
xor eax, 0x103fd7a7
rol eax, 0x84
popf
pushf
not eax
add eax, 0x59cac9f9
xor eax, 0x7c7669fa
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x2654c91c
xor eax, 0x3eaaa6d6
rol eax, 0x13
popf
pushf
not eax
add eax, 0x3692b5ff
xor eax, 0x1ba1871c
rol eax, 0xf7
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0xe9c98159
pushf
not eax
add eax, 0x24215a6f
xor eax, 0x30442723
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x3162aa5d
xor eax, 0x60df67e9
rol eax, 2
popf
pushf
not eax
add eax, 0x6061e05c
xor eax, 0x5364d59c
rol eax, 0x9e
popf
jmp 0x14008b8f8
lea rcx, [0x197a752c4]
pushf
sub rcx, 0x57a47a8c
popf
call fcn.14008c4b8
mov rcx, qword [rbp + 0x3068]
mov r14, rax
call fcn.14008872b
mov rdi, rax
test rax, rax
je 0x14008bb77
push rax
pushf
mov eax, 0x4b6e2e9d
pushf
not eax
add eax, 0x11498b28
xor eax, 0xa45dc19
rol eax, 9
popf
pushf
not eax
add eax, 0x6231905b
xor eax, 0x253048bb
rol eax, 0x94
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0x587d7682
pushf
not eax
add eax, 0x220a02bd
xor eax, 0x7f59d99d
rol eax, 0x48
popf
pushf
not eax
add eax, 0x4eb5b84b
xor eax, 0x1532767b
rol eax, 0x98
popf
pushf
not eax
add eax, 0x43722cdc
xor eax, 0x5405da71
rol eax, 0xe0
popf
jmp 0x14008b8f8
mov rdx, rax
lea rcx, [0x1af6ce500]
pushf
sub rcx, 0x6f6a0cc0
popf
call fcn.1401023f6
mov rcx, rdi
mov ebx, eax
call fcn.1400e5748
test ebx, ebx
je 0x14008bc2b
push rax
pushf
mov eax, 0xb87837ac
pushf
not eax
add eax, 0xee84578
xor eax, 0x4d82ccc8
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x3e8438bc
xor eax, 0x16b0a413
rol eax, 0xf
popf
pushf
not eax
add eax, 0x18bc092
xor eax, 0x4ef44828
rol eax, 0xc7
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0xe56038c
pushf
not eax
add eax, 0x2a27388a
xor eax, 0x16dbc45c
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x72b59a04
xor eax, 0x11290a4e
rol eax, 0x70
popf
pushf
not eax
add eax, 0x755bcdc5
xor eax, 0x111bce1c
rol eax, 0x8c
popf
jmp 0x14008b8f8
lea rcx, [0x1a2963fa5]
pushf
sub rcx, 0x62936755
popf
call fcn.14006f976
push rax
pushf
mov eax, 0xbba25e6c
pushf
not eax
add eax, 0x17343d24
xor eax, 0x1cd3f263
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x3f2cabd9
xor eax, 0x68887d7a
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x7ee60766
xor eax, 0x450571e6
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x5ec58a74
xor eax, 0x6116c245
rol eax, 0x6c
popf
jmp 0x14008b8f8
mov rcx, r14
call fcn.1400e5748
mov eax, 0x21557890
pushf
not eax
add eax, 0x5a8b73f2
xor eax, 0x16a6ac34
rol eax, 0x19
popf
pushf
not eax
add eax, 0x31c7fa80
xor eax, 0x78972c2e
rol eax, 0x3d
popf
jmp 0x14008c490
lea rdx, [rsp + 0x40]
mov ecx, 0xcad1b161
pushf
not ecx
add ecx, 0x13d16fd2
xor ecx, 0x487d6ce3
rol ecx, 0x30
popf
pushf
not ecx
add ecx, 0x149035fa
xor ecx, 0x5a84209b
rol ecx, 0x8e
popf
pushf
not ecx
add ecx, 0x7962a6fc
xor ecx, 0x172a03e0
rol ecx, 0xc8
popf
pushf
not ecx
add ecx, 0x3b7d8c7f
xor ecx, 0x6dd9875a
rol ecx, 0x21
popf
jmp 0x14008bdbe
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
call fcn.1400e6e69
mov r9d, eax
lea r8, [0x180c7c353]
pushf
sub r8, 0x40c4ea93
popf
mov edx, 0x8b08944e
pushf
not edx
add edx, 0x4373e7fc
xor edx, 0x3143a484
rol edx, 0x7c
popf
pushf
not edx
add edx, 0x3ca5a75
xor edx, 0x4e9b6cd8
rol edx, 0xba
popf
pushf
not edx
add edx, 0x23419f85
xor edx, 0x4d92bf08
rol edx, 0x8a
popf
pushf
not edx
add edx, 0x6cb1191
xor edx, 0x257b59b5
rol edx, 0x44
popf
lea rcx, [rsp + 0x20]
call fcn.14006f1b4
xor ebx, ebx
mov esi, 0x861ae69c
pushf
not esi
add esi, 0x7ebccfe3
xor esi, 0x301d15a7
rol esi, 0x85
popf
pushf
not esi
add esi, 0x4a077dbc
xor esi, 0x59450740
rol esi, 0x78
popf
pushf
not esi
add esi, 0x552c3d5b
xor esi, 0x6d3ee58b
rol esi, 0x9f
popf
nop
push rax
pushf
mov eax, 0xeae8e33d
pushf
not eax
add eax, 0x7170b9e8
xor eax, 0x5cefc248
rol eax, 0xda
popf
pushf
not eax
add eax, 0x32900706
xor eax, 0x11aed48b
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x72a71632
xor eax, 0x180a3aed
rol eax, 0x8a
popf
jmp 0x14008b8f8
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.140107763
mov rdx, qword [rbp + 0x3038]
mov rcx, rax
mov rdi, rax
jmp 0x14008beeb
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov rcx, rdi
test eax, eax
jne 0x14008bf2a
push rax
pushf
mov eax, 0xce012d3d
pushf
not eax
add eax, 0x7b7d26f0
xor eax, 0xbf529d3
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x5b1f504d
xor eax, 0x7d7e81f
rol eax, 1
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0xf60ff53
pushf
not eax
add eax, 0x5e165f7b
xor eax, 0x42ba4065
rol eax, 0xea
popf
pushf
not eax
add eax, 0x5062242a
xor eax, 0x29c3cb00
rol eax, 0x95
popf
pushf
not eax
add eax, 0x4a7fecb9
xor eax, 0x2b58acde
rol eax, 0x19
popf
jmp 0x14008b8f8
call fcn.1400e5748
jmp 0x14008bf76
inc ebx
cmp ebx, 5
jl 0x14008bfc3
push rax
pushf
mov eax, 0x7b5ee093
pushf
not eax
add eax, 0xfbc4cf4
xor eax, 0x2093d452
rol eax, 0x33
popf
pushf
not eax
add eax, 0x6b730892
xor eax, 0x4624cbc3
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x62cabe0f
xor eax, 0x64cb88d2
rol eax, 0xa3
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0x92d50c46
pushf
not eax
add eax, 0x79566817
xor eax, 0x61f34fef
rol eax, 0x57
popf
pushf
not eax
add eax, 0x377715ba
xor eax, 0x40113d3a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x3844ca29
xor eax, 0x35129bb9
rol eax, 0x69
popf
pushf
not eax
add eax, 0x78a50e6c
xor eax, 0x67a3d3eb
rol eax, 0x92
popf
jmp 0x14008b8f8
jmp 0x14008c20b
lea rdx, [rbp + 0x2022]
mov r8d, 0x91a4bd91
pushf
not r8d
add r8d, 0xe5bf246
xor r8d, 0x52b0b174
rol r8d, 0xdf
popf
pushf
not r8d
add r8d, 0x43203602
xor r8d, 0x3c1c7321
rol r8d, 0xd0
popf
call fcn.14009026d
test rax, rax
jne 0x14008c0e3
push rax
pushf
mov eax, 0x8f9d2505
pushf
not eax
add eax, 0x6d093c65
xor eax, 0x178cd2d1
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x1296e56
xor eax, 0xa9973aa
rol eax, 0xa
popf
pushf
not eax
add eax, 0x481f358b
xor eax, 0xb18037
rol eax, 0x9c
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0x5e8ba9eb
pushf
not eax
add eax, 0x5276998e
xor eax, 0x34954695
rol eax, 0x36
popf
pushf
not eax
add eax, 0x425cf0fc
xor eax, 0x11dc606f
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xb31ca61
xor eax, 0x1dfd0e4c
rol eax, 5
popf
pushf
not eax
add eax, 0x4ef5224e
xor eax, 0x6f7fcd9
rol eax, 0x3c
popf
jmp 0x14008b8f8
lea rcx, [0x18007b566]
pushf
sub rcx, 0x4004dc96
popf
call fcn.14006f976
jmp 0x14008c1d0
xor esi, esi
push rax
pushf
mov eax, 0x5b5ebf6b
pushf
not eax
add eax, 0x2a66a7a9
xor eax, 0x7a502724
rol eax, 0xab
popf
pushf
not eax
add eax, 0x1d3aafa6
xor eax, 0x5ea1e1fb
rol eax, 0x4d
popf
jmp 0x14008b8f8
mov rcx, rdi
call fcn.1400e5748
push rax
pushf
mov eax, 0x4bf90937
pushf
not eax
add eax, 0x6d0edbf0
xor eax, 0x3917d2fc
rol eax, 0x50
popf
pushf
not eax
add eax, 0x7bee6a9e
xor eax, 0x76aa529b
rol eax, 0x48
popf
jmp 0x14008b8f8
cmp qword [rbp + 0x3068], 0
je 0x14008c25b
push rax
pushf
mov eax, 0xd8d32efb
pushf
not eax
add eax, 0x4bb7b07b
xor eax, 0x3786ecc3
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x5e7b8b1
xor eax, 0x14900cc8
rol eax, 0xba
popf
pushf
not eax
add eax, 0x3ac3d488
xor eax, 0x72c2f3ff
rol eax, 0x96
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0x45d59b5d
pushf
not eax
add eax, 0x63120409
xor eax, 0x664421a7
rol eax, 0x99
popf
pushf
not eax
add eax, 0x22834198
xor eax, 0x98c1905
rol eax, 0xf6
popf
jmp 0x14008b8f8
xor r8d, r8d
lea rcx, [0x1bf315760]
pushf
sub rcx, 0x7f2e7f28
popf
xor edx, edx
call fcn.14008fbd5
test r14, r14
je 0x14008c308
push rax
pushf
mov eax, 0xf88988e6
pushf
not eax
add eax, 0x23636a6
xor eax, 0x7d4fc3b2
rol eax, 0x11
popf
pushf
not eax
add eax, 0xf5f246b
xor eax, 0x3b1f605d
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x21d40c7d
xor eax, 0x1aa940ed
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x6a4c19e2
xor eax, 0x313f381c
rol eax, 5
popf
jmp 0x14008b8f8
push rax
pushf
mov eax, 0x31b7010c
pushf
not eax
add eax, 0x31512857
xor eax, 0xdc4a4cc
rol eax, 0x88
popf
pushf
not eax
add eax, 0x386ff1e6
xor eax, 0x2cb783d8
rol eax, 0x45
popf
pushf
not eax
add eax, 0x7f24afac
xor eax, 0x3827669e
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x43e9729
xor eax, 0x2ad6c007
rol eax, 0xff
popf
jmp 0x14008b8f8
xor r8d, r8d
xor edx, edx
mov rcx, r14
mov rdi, rax
call fcn.14008fbd5
mov rdx, rax
mov rcx, rdi
mov rbx, rax
call fcn.1401023f6
mov rcx, rdi
call fcn.1400e5748
mov rcx, rbx
call fcn.1400e5748
mov rcx, r14
jmp 0x14008c430
lea rdx, [0x185a19420]
pushf
sub rdx, 0x459ebecc
popf
mov rcx, rax
mov rbx, rax
call fcn.1401023f6
mov rcx, rbx
push rax
pushf
mov eax, 0xba6b49e2
pushf
not eax
add eax, 0x4eab19a2
xor eax, 0x288c796e
rol eax, 0x33
popf
pushf
not eax
add eax, 0x1866a2a9
xor eax, 0x61d9ad0b
rol eax, 0xd4
popf
jmp 0x14008b8f8
call fcn.1400e5748
push rax
pushf
mov eax, 0xecd711ce
pushf
not eax
add eax, 0x704df9cb
xor eax, 0x34e1659
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x155d8f8b
xor eax, 0x11714eff
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x31d00370
xor eax, 0x68684776
rol eax, 0x56
popf
pushf
not eax
add eax, 0x10f7944a
xor eax, 0x5c19f133
rol eax, 0x3c
popf
jmp 0x14008b8f8
mov eax, esi
mov rcx, qword [rsp + 0x2040]
xor rcx, rsp
call fcn.140098ae9
lea r11, [rsp + 0x2050]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret