Function at 0x180060510
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x180
mov rax, qword [0x180087e88]
xor rax, rsp
mov qword [rsp + 0x170], rax
movzx ebx, byte [rsp + 0x30]
xor edi, edi
imul eax, ecx, 0xea
mov r14, r8
mov r15, rdx
mov r13d, ecx
mov esi, ecx
mov dword [rsp + 0x3c], eax
cmp ecx, eax
ja 0x180060847
mov r12d, dword [rsp + 0x3c]
movzx ebp, byte [rsp + 0x30]
nop word [rax + rax]
cmp esi, 0x5b4
ja 0x180060795
je 0x180060788
cmp esi, 0x17c
ja 0x1800606dc
je 0x1800606c6
cmp esi, 0x14
je 0x1800606ac
cmp esi, 0x5a
je 0x180060640
cmp esi, 0x103
jne 0x1800608c7
xor r8d, r8d
nop word [rax + rax]
mov edx, 0x9c
mov eax, edx
sub eax, 0x9c
je 0x180060609
sub eax, 1
je 0x1800605dd
cmp eax, 1
jne 0x18006061d
inc qword [r15]
jmp 0x18006061d
lea eax, [rbp - 0x67]
cmp al, 0x13
jbe 0x18006061d
mov eax, 0x112
nop dword [rax]
cmp eax, 0x112
je 0x1800608e4
add eax, 0xac
cmp eax, 0x1be
jb 0x1800605f0
jmp 0x18006061d
cmp qword [r14 + 0x18], 0x10
mov rcx, r14
jb 0x180060616
mov rcx, qword [r14]
mov rax, qword [r15]
movzx ebp, byte [rcx + rax]
inc edx
cmp edx, 0x9f
jb 0x1800605c5
inc r8
cmp r8, 4
jb 0x1800605c0
mov bl, 1
jmp 0x1800608c7
mov esi, ILFree
cmp esi, 0x99
je 0x180060674
cmp esi, 0x41be
jne 0x18006069c
mov rcx, qword [r14]
mov edx, 0x1388
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x18006069c
mov esi, 0x6ae
jmp 0x1800608c7
mov rdx, qword [0x180087f68]
mov r8d, 0x58
xor ecx, ecx
call fcn.18005cb10
mov rdx, qword [0x180087f68]
xor r8d, r8d
mov ecx, 0x110
call fcn.18005b340
add esi, 0x4125
cmp esi, 0x824a
jbe 0x180060645
jmp 0x180060640
xor edx, edx
mov byte [rsp + 0x31], 1
xor r8d, r8d
lea ecx, [rdx + 0x7d]
call fcn.1800491b0
mov r12d, eax
jmp 0x1800608c7
mov qword [rsp + 0x50], 0
mov dword [rsp + 0x38], 0x36
jmp 0x1800608c7
cmp esi, 0x2e4
je 0x1800606fe
cmp esi, 0x44c
jne 0x1800608c7
mov qword [rsp + 0x48], 0
jmp 0x1800608c7
mov rcx, qword [r14 + 8]
mov r9, qword [r14]
mov r8, rcx
sub r8, r9
mov edx, r12d
sar r8, 4
mov byte [rsp + 0x30], 0
cmp rdx, r8
jae 0x18006072c
shl rdx, 4
add rdx, r9
mov qword [r14 + 8], rdx
jmp 0x1800608c7
jbe 0x1800608c7
mov rax, qword [r14 + 0x10]
sub rax, r9
sar rax, 4
cmp rdx, rax
jbe 0x180060754
lea r8, [rsp + 0x30]
mov rcx, r14
call fcn.180045010
jmp 0x1800608c7
sub rdx, r8
je 0x18006077f
nop dword [rax]
mov qword [rcx], 0
mov dword [rcx + 8], 0xffffffff
mov dword [rcx + 0xc], 0
add rcx, 0x10
sub rdx, 1
jne 0x180060760
mov qword [r14 + 8], rcx
jmp 0x1800608c7
mov dword [rsp + 0x34], 0
jmp 0x1800608c7
cmp esi, 0x9ec
ja 0x180060833
je 0x18006081c
mov eax, esi
sub eax, 0x6ae
je 0x18006066a
sub eax, 0x6e
je 0x180060814
cmp eax, 0x168
jne 0x1800608c7
mov r9d, dword [rsp + 0x34]
lea rax, [rsp + 0x60]
mov r8, qword [rsp + 0x48]
mov edx, dword [rsp + 0x38]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x20], rax
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
xor ecx, ecx
mov dword [rsp + 0x40], eax
test r12d, r12d
je 0x1800608c7
nop dword [rax]
nop word [rax + rax]
mov dword [rdi + 8], ecx
add rdi, 0x10
add ecx, 2
cmp ecx, r12d
jb 0x180060800
jmp 0x1800608c7
mov rdi, qword [r14]
jmp 0x1800608c7
movzx eax, byte [rsp + 0x31]
xor ecx, ecx
cmp dword [rsp + 0x40], ecx
cmove ecx, eax
mov byte [rsp + 0x31], cl
jmp 0x1800608c7
cmp esi, 0xb54
je 0x180060875
cmp esi, 0x1339
jne 0x1800608c7
movzx eax, bl
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.180079740
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp byte [rsp + 0x31], 0
je 0x180060895
mov r8d, dword [rsp + 0x34]
lea r9, [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
mov ecx, dword [rsp + 0x38]
call qword [sym.imp.SHELL32.dll_SHSetFolderPathA]
mov ecx, 1
cmp r12d, ecx
jbe 0x1800608c7
nop
mov eax, 0x84
cmp eax, 0x84
jne 0x1800608b3
mov dword [rdi + 8], ecx
add rdi, 0x10
add eax, 0x9e
cmp eax, 0x122
jb 0x1800608a5
add ecx, 2
cmp ecx, r12d
jb 0x1800608a0
lea eax, [r13*8]
add eax, r13d
lea esi, [rsi + rax*2]
cmp esi, dword [rsp + 0x3c]
jbe 0x180060570
jmp 0x180060847
xor al, al
jmp 0x18006084a