Function at 0x180006880
Capabilities:
Get common file path

Disassembly:
sub rsp, 0x388
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x370], rax
cmp edx, 1
jne 0x180006b5b
call qword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
mov edx, 0x104
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea rdx, [0x180023e18]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x18002de30], rax
test rax, rax
jne 0x18000699f
lea r8, [rsp + 0x50]
lea rdx, [0x180023e28]
lea rcx, [rsp + 0x160]
call qword [sym.imp.USER32.dll_wsprintfA]
movabs rax, 0x7f1959903e96f4c2
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x160]
mov rax, qword [rsp + 0x20]
mov r9d, 0x10
mov qword [rsp + 0x40], rax
xor ecx, ecx
movabs rax, 0x171dbfc1600bcd85
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x48], rax
movabs rax, 0x1d7015f45ff39c83
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movabs rax, 0x171dbfc1600bb5c0
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x38], rax
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm0
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword [0x18002de30]
test rax, rax
je 0x180006b71
lea rcx, [0x180023e78]
call fcn.180006750
lea rcx, [0x180023e90]
mov qword [0x18002ddf8], rax
call fcn.180006750
lea rcx, [0x180023eb0]
mov qword [0x18002de08], rax
call fcn.180006750
lea rcx, [0x180023ec8]
mov qword [0x18002de18], rax
call fcn.180006750
lea rcx, [0x180023ee0]
mov qword [0x18002dd78], rax
call fcn.180006750
lea rcx, [0x180023ef0]
mov qword [0x18002dd70], rax
call fcn.180006750
lea rcx, [0x180023f08]
mov qword [0x18002de00], rax
call fcn.180006750
lea rcx, [0x180023f18]
mov qword [0x18002de20], rax
call fcn.180006750
lea rcx, [0x180023f28]
mov qword [0x18002ddd0], rax
call fcn.180006750
lea rcx, [0x180023f40]
mov qword [0x18002dd90], rax
call fcn.180006750
lea rcx, [0x180023f58]
mov qword [0x18002dd88], rax
call fcn.180006750
lea rcx, [0x180023f70]
mov qword [0x18002ddd8], rax
call fcn.180006750
lea rcx, [0x180023f88]
mov qword [0x18002dda0], rax
call fcn.180006750
lea rcx, [0x180023fa0]
mov qword [0x18002dd60], rax
call fcn.180006750
lea rcx, [0x180023fb0]
mov qword [0x18002ddb8], rax
call fcn.180006750
lea rcx, [0x180023fc8]
mov qword [0x18002dd98], rax
call fcn.180006750
lea rcx, [0x180023fe0]
mov qword [0x18002dd80], rax
call fcn.180006750
lea rcx, [0x180023ff0]
mov qword [0x18002dda8], rax
call fcn.180006750
lea rcx, [0x180024000]
mov qword [0x18002ddc8], rax
call fcn.180006750
lea rcx, [0x180024018]
mov qword [0x18002de10], rax
call fcn.180006750
lea rcx, [0x180024030]
mov qword [0x18002de28], rax
call fcn.180006750
lea rcx, [0x180024048]
mov qword [0x18002ddc0], rax
call fcn.180006750
lea rcx, [0x180024060]
mov qword [0x18002dde0], rax
call fcn.180006750
mov qword [0x18002dd68], rax
call fcn.180004f00
jmp 0x180006b71
test edx, edx
jne 0x180006b71
mov rcx, qword [0x18002de30]
test rcx, rcx
je 0x180006b71
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.1800085f0
add rsp, 0x388
ret