Function at 0x14000b530
Capabilities:
Create thread
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
xor ebx, ebx
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1a
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea rax, [rbp - 0x50]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], bx
jne 0x14000b592
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140003ca0
nop
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
lea r8, [rdx + rax*2]
lea rdx, [rsp + 0x30]
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.140003a80
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14000b620
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b61a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b61a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
nop
movabs rax, 0x7fffffffffffffff
mov r12, rax
mov r8, qword [rbp - 0x60]
sub r12, r8
cmp r12, 6
jb 0x14000bf2e
lea r13, [rbp - 0x70]
mov r14, qword [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
lea r15, [r8 + 6]
mov esi, 0xf
mov ebx, esi
lea rdi, [rsp + 0x30]
movabs rcx, 0x8000000000000000
mov edx, 0x16
cmp r15, rbx
jbe 0x14000b6ef
mov rbx, r15
or rbx, rsi
cmp rbx, rax
jbe 0x14000b6b6
mov rbx, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.14006d3a8
test rax, rax
je 0x14000b802
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000b6ea
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000b6ca
xor edi, edi
jmp 0x14000b6ea
cmp rcx, 0x1000
jb 0x14000b6e2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bf16
jmp 0x14000b697
call fcn.14006d3a8
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rbx
mov rbx, qword [rbp - 0x60]
mov r8, rbx
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str._senex]
mov dword [rdi + rbx], eax
movzx eax, word [0x140098abc]
mov word [rdi + rbx + 4], ax
mov byte [rdi + r15], 0
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
call fcn.14006e5d8
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.140004ed0
nop
lea rcx, [rsp + 0x60]
call fcn.14000ac20
movzx edi, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000b7b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b7b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b7b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], ax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000b810
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b809
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b809
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
test dil, dil
jne 0x14000b9fe
lea r13, [rbp - 0x70]
cmp qword [rbp - 0x58], 0xf
cmova r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rbx, rsi
lea rdi, [rsp + 0x30]
cmp r15, rbx
jbe 0x14000b8ca
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14000b88f
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006d3a8
test rax, rax
je 0x14000b9f2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000b8c5
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x14000b8c2
cmp rcx, 0x1000
jb 0x14000b8bd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bf1c
jmp 0x14000b870
call fcn.14006d3a8
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rbx
mov rbx, qword [rbp - 0x60]
mov r8, rbx
mov rdx, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [str._senex]
mov dword [rdi + rbx], eax
movzx eax, word [0x140098abc]
mov word [rdi + rbx + 4], ax
mov byte [rdi + r15], 0
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
call fcn.14006e5d8
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.140004ed0
nop
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 7
cmova rcx, qword [rsp + 0x60]
call fcn.14006e838
shr rax, 0x20
test eax, eax
jne 0x14000bf34
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000b9a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], ax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000ba00
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
cmp r12, 0xe
jb 0x14000bf48
lea r12, [rbp - 0x70]
mov r13, qword [rbp - 0x58]
cmp r13, 0xf
cmova r12, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
lea r15, [rbx + 0xe]
mov rbx, rsi
lea rdi, [rsp + 0x30]
cmp r15, rbx
jbe 0x14000bac2
mov rbx, r15
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x14000ba87
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006d3a8
test rax, rax
je 0x14000bbe7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000babd
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x14000baba
cmp rcx, 0x1000
jb 0x14000bab5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bf22
jmp 0x14000ba68
call fcn.14006d3a8
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rbx
mov r8, qword [rbp - 0x60]
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._senexconfigs]
mov r12, qword [rbp - 0x60]
movsd qword [rdi + r12], xmm0
mov eax, dword [0x140098ab0]
mov dword [rdi + r12 + 8], eax
movzx eax, word [0x140098ab4]
mov word [rdi + r12 + 0xc], ax
mov byte [rdi + r15], 0
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
call fcn.14006e5d8
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.140004ed0
nop
lea rcx, [rsp + 0x60]
call fcn.14000ac20
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000bb9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bb99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bb99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], ax
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000bbf5
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bbee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bbee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor eax, eax
test bl, bl
jne 0x14000bdee
lea rdi, [rbp - 0x70]
cmp r13, 0xf
cmova rdi, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x30]
cmp r15, 0xf
jbe 0x14000bcab
mov rsi, r15
or rsi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rsi, rcx
jbe 0x14000bc70
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006d3a8
test rax, rax
je 0x14000bde0
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14000bca6
cmp rsi, 0x16
mov ecx, 0x16
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
je 0x14000bca3
cmp rcx, 0x1000
jb 0x14000bc9e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000bf28
jmp 0x14000bc51
call fcn.14006d3a8
mov rbx, rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rsi
mov r8, r12
mov rdx, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._senexconfigs]
movsd qword [rbx + r12], xmm0
mov eax, dword [0x140098ab0]
mov dword [rbx + r12 + 8], eax
movzx eax, word [0x140098ab4]
mov word [rbx + r12 + 0xc], ax
mov byte [rbx + r15], 0
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rax, qword [rsp + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x58], rax
call fcn.14006e5d8
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x50]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.140004ed0
nop
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 7
cmova rcx, qword [rsp + 0x60]
call fcn.14006e838
shr rax, 0x20
test eax, eax
jne 0x14000bf02
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14000bd97
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bd92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bd92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
xor edi, edi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], di
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000bdf0
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bde7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bde7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006d6fc
jmp 0x14000bdf0
xor edi, edi
mov ecx, 8
call fcn.14006d3a8
lea rcx, [0x14000b490]
mov qword [rax], rcx
mov qword [rbp + 0x1f0], rax
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x14000bf70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp - 0x80], rax
test rax, rax
je 0x14000bef3
call fcn.140007480
cmp dword [rbp - 0x78], 0
jne 0x14000be50
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
cmp dword [rbp - 0x78], eax
jne 0x14000be67
mov ecx, 5
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rsp + 0x50], xmm0
xor edx, edx
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_join]
test eax, eax
je 0x14000be8e
mov ecx, 2
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
cmp r13, 0xf
jbe 0x14000bed0
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000bec8
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bec8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14006d6fc
xor eax, eax
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp - 0x78], edi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.create_directory
call fcn.140005850
nop
call fcn.140001d10
int3
call fcn.140001d10
int3
call fcn.140001d10
int3
call fcn.140001d10
int3
call fcn.140001db0
nop
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, str.create_directory
call fcn.140005850
nop
call fcn.140001db0
int3