Function at 0x1800671a0
Capabilities:
Get common file path
Get program files directory

Disassembly:
push rbp
push r12
push r13
lea rbp, [rsp - 0xf70]
mov eax, 0x1070
call fcn.18007fc70
sub rsp, rax
mov qword [rsp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0x1090], rbx
mov qword [rsp + 0x1098], rsi
mov qword [rsp + 0x10a0], rdi
mov rax, qword [0x1800d1eb0]
xor rax, rsp
mov qword [rbp + 0xf60], rax
lea r13, [0x1800d9c28]
mov qword [rsp + 0x20], r13
mov rcx, r13
call fcn.1800604a0
nop
xor r12d, r12d
mov word [rsp + 0x60], r12w
xor edx, edx
mov r8d, 0xffe
lea rcx, [rsp + 0x62]
call fcn.18007e840
xor r9d, r9d
lea r8d, [r12 + 0x1a]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
movabs rsi, 0x666666666666665
test eax, eax
je 0x1800672e9
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rbx, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.180060600
mov rdi, rax
mov rcx, rsi
mov rdx, qword [0x1800d9c30]
sub rcx, rdx
cmp rcx, 1
jae 0x1800672c2
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rdx
mov qword [0x1800d9c30], rdx
mov qword [rbx + 8], rax
mov rax, qword [rax + 8]
mov qword [rax], rdi
cmp qword [rsp + 0x48], 8
jb 0x1800672e9
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
movzx eax, r12w
lea rdi, [rsp + 0x60]
mov ecx, 0x800
rep stosw word [rdi], ax
xor r9d, r9d
lea r8d, [r9 + 0x1c]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x1800673bb
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rbx, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.180060600
mov rdi, rax
mov rcx, rsi
mov rdx, qword [0x1800d9c30]
sub rcx, rdx
cmp rcx, 1
jae 0x180067394
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rdx
mov qword [0x1800d9c30], rdx
mov qword [rbx + 8], rax
mov rax, qword [rax + 8]
mov qword [rax], rdi
cmp qword [rsp + 0x48], 8
jb 0x1800673bb
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
movzx eax, r12w
lea rdi, [rsp + 0x60]
mov ecx, 0x800
rep stosw word [rdi], ax
xor r9d, r9d
lea r8d, [r9 + 0x23]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x18006748d
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rbx, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.180060600
mov rdi, rax
mov rcx, rsi
mov rdx, qword [0x1800d9c30]
sub rcx, rdx
cmp rcx, 1
jae 0x180067466
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rdx
mov qword [0x1800d9c30], rdx
mov qword [rbx + 8], rax
mov rax, qword [rax + 8]
mov qword [rax], rdi
cmp qword [rsp + 0x48], 8
jb 0x18006748d
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
movzx eax, r12w
lea rdi, [rsp + 0x60]
mov ecx, 0x800
rep stosw word [rdi], ax
xor r9d, r9d
lea r8d, [r9 + 0x26]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x18006755f
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rbx, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.180060600
mov rdi, rax
mov rcx, rsi
mov rdx, qword [0x1800d9c30]
sub rcx, rdx
cmp rcx, 1
jae 0x180067538
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rdx
mov qword [0x1800d9c30], rdx
mov qword [rbx + 8], rax
mov rax, qword [rax + 8]
mov qword [rax], rdi
cmp qword [rsp + 0x48], 8
jb 0x18006755f
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
movzx eax, r12w
lea rdi, [rsp + 0x60]
mov ecx, 0x800
rep stosw word [rdi], ax
xor r9d, r9d
lea r8d, [r9 + 0x2b]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x180067631
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rbx, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, rbx
call fcn.180060600
mov rdi, rax
mov rcx, rsi
mov rdx, qword [0x1800d9c30]
sub rcx, rdx
cmp rcx, 1
jae 0x18006760a
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rdx
mov qword [0x1800d9c30], rdx
mov qword [rbx + 8], rax
mov rax, qword [rax + 8]
mov qword [rax], rdi
cmp qword [rsp + 0x48], 8
jb 0x180067631
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
movzx eax, r12w
lea rdi, [rsp + 0x60]
mov ecx, 0x800
rep stosw word [rdi], ax
xor r9d, r9d
lea r8d, [r9 + 0x2c]
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x1800676fe
lea rcx, [rsp + 0x60]
call fcn.18007eee8
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x60]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.180004cc0
nop
mov rdi, qword [0x1800d9c28]
lea r8, [rsp + 0x30]
mov rdx, qword [rdi + 8]
mov rcx, rdi
call fcn.180060600
mov rcx, qword [0x1800d9c30]
sub rsi, rcx
cmp rsi, 1
jae 0x1800676d6
lea rcx, str.list_T__too_long
call fcn.180078320
int3
inc rcx
mov qword [0x1800d9c30], rcx
mov qword [rdi + 8], rax
mov rcx, qword [rax + 8]
mov qword [rcx], rax
cmp qword [rsp + 0x48], 8
jb 0x1800676fe
mov rcx, qword [rsp + 0x30]
call fcn.18007a7a4
nop
mov rax, r13
mov rcx, qword [rbp + 0xf60]
xor rcx, rsp
call fcn.18007a7c0
lea r11, [rsp + 0x1070]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rbp
ret