Function at 0x18009af50
Capabilities:
Get common file path
Get program files directory

Disassembly:
push rbp
push rsi
push r12
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x180128010]
xor rax, rsp
mov qword [rbp + 0xe0], rax
xor r9d, r9d
lea rax, [rbp - 0x30]
mov r12, rcx
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x26]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
xor esi, esi
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x30], rsi
lea rax, [rbp - 0x30]
mov qword [rsp + 0x40], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x18009afb3
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x30]
call fcn.1800c1060
mov r8d, 0x14
lea rdx, str.Mozilla_Thunderbird
lea rcx, [rsp + 0x30]
call fcn.1800c0730
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
cmp rdx, 0x10
jb 0x18009b03c
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009b037
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b604
call fcn.1800ce78c
mov qword [rsp + 0x228], rbx
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x230], rdi
mov rdi, qword [rbp - 0x40]
mov qword [rsp + 0x238], r13
mov r13, qword [rbp - 0x38]
mov qword [rsp + 0x1f8], r14
cmp r13, 0x10
mov qword [rsp + 0x1f0], r15
lea r14, [rbp - 0x50]
mov r15, qword [rbp - 0x50]
cmovae r14, r15
cmp rdi, 0x10
jae 0x18009b0ad
movups xmm0, xmmword [r14]
mov qword [rsp + 0x40], rdi
lea rsi, [rsp + 0x30]
mov qword [rsp + 0x48], 0xf
movups xmmword [rsp + 0x30], xmm0
jmp 0x18009b136
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18009b0f4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18009b60a
mov rcx, rax
call fcn.1800ce794
test rax, rax
je 0x18009b610
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18009b101
test rcx, rcx
je 0x18009b101
call fcn.1800ce794
mov rsi, rax
lea r8, [rdi + 1]
mov qword [rsp + 0x30], rsi
mov rdx, r14
mov rcx, rsi
call fcn.1800d1860
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x48], rbx
cmp rbx, 0x10
jb 0x18009b133
lea r14, [rsi + rdi]
mov rbx, rsi
jmp 0x18009b143
mov rsi, rcx
lea r14, [rsp + 0x30]
add r14, rdi
lea rbx, [rsp + 0x30]
cmp rbx, r14
je 0x18009b163
sub rsi, rbx
nop dword [rax + rax]
movzx ecx, byte [rbx]
call fcn.1800da850
mov byte [rsi + rbx], al
inc rbx
cmp rbx, r14
jne 0x18009b150
movups xmm0, xmmword [rsp + 0x30]
lea rdx, [0x18012b9b8]
movups xmm1, xmmword [rsp + 0x40]
lea rcx, [rsp + 0x70]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
call fcn.1800c0900
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.18008c600
test eax, eax
jg 0x18009b52f
cmp r13, 0x10
lea rsi, [rbp - 0x50]
cmovae rsi, r15
cmp rdi, 0x10
jae 0x18009b1c2
movups xmm0, xmmword [rsi]
mov qword [rsp + 0x48], 0xf
movups xmmword [rsp + 0x30], xmm0
jmp 0x18009b23d
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18009b216
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18009b616
mov rcx, rax
call fcn.1800ce794
mov rcx, rax
test rax, rax
je 0x18009b61c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18009b224
test rcx, rcx
je 0x18009b222
call fcn.1800ce794
jmp 0x18009b224
xor eax, eax
lea r8, [rdi + 1]
mov qword [rsp + 0x30], rax
mov rdx, rsi
mov rcx, rax
call fcn.1800d1860
mov qword [rsp + 0x48], rbx
mov rdx, r12
mov qword [rsp + 0x40], rdi
lea rcx, [rbp - 0x70]
call fcn.1800c0900
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x50]
call fcn.180098aa0
cmp qword [0x18012b630], 0x10
lea r8, [0x18012b618]
mov r9, qword [0x18012b628]
mov rcx, rax
cmovae r8, qword [0x18012b618]
call fcn.1800c5980
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x18012b630]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x30], xmm1
cmp rdx, 0x10
jb 0x18009b2f5
mov rcx, qword [0x18012b618]
inc rdx
cmp rdx, 0x1000
jb 0x18009b2e6
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b61c
mov rcx, r8
call fcn.1800ce78c
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x30]
mov rdx, qword [rsp + 0x68]
movups xmmword [0x18012b618], xmm0
movups xmmword [0x18012b628], xmm1
cmp rdx, 0x10
jb 0x18009b340
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009b33b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b61c
call fcn.1800ce78c
cmp r13, 0x10
lea r14, [rbp - 0x50]
cmovae r14, r15
cmp rdi, 0x10
jae 0x18009b37b
movups xmm0, xmmword [r14]
lea rbx, [rsp + 0x30]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 0xf
lea rsi, [rsp + 0x30]
movups xmmword [rsp + 0x30], xmm0
add rdi, rbx
jmp 0x18009b419
movabs rax, 0x7fffffffffffffff
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18009b3cc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18009b622
mov rcx, rax
call fcn.1800ce794
test rax, rax
je 0x18009b5f8
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18009b3dd
test rcx, rcx
je 0x18009b3db
call fcn.1800ce794
mov rsi, rax
jmp 0x18009b3dd
xor esi, esi
lea r8, [rdi + 1]
mov qword [rsp + 0x30], rsi
mov rdx, r14
mov rcx, rsi
call fcn.1800d1860
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x48], rbx
cmp rbx, 0x10
jb 0x18009b40e
add rdi, rsi
mov rbx, rsi
jmp 0x18009b41e
lea rax, [rsp + 0x30]
mov rsi, rcx
add rdi, rax
lea rbx, [rsp + 0x30]
cmp rbx, rdi
je 0x18009b439
sub rsi, rbx
movzx ecx, byte [rbx]
call fcn.1800da850
mov byte [rbx + rsi], al
inc rbx
cmp rbx, rdi
jne 0x18009b426
movups xmm0, xmmword [rsp + 0x30]
cmp qword [0x18012b9d0], 0x10
lea r8, [0x18012b9b8]
movups xmm1, xmmword [rsp + 0x40]
cmovae r8, qword [0x18012b9b8]
lea rcx, [rsp + 0x50]
mov r9, qword [0x18012b9c8]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
call fcn.1800c5980
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x18012b9d0]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x70], xmm1
cmp rdx, 0x10
jb 0x18009b4e4
mov rcx, qword [0x18012b9b8]
inc rdx
cmp rdx, 0x1000
jb 0x18009b4d5
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b5f8
mov rcx, r8
call fcn.1800ce78c
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
movups xmmword [0x18012b9b8], xmm0
movups xmmword [0x18012b9c8], xmm1
cmp rdx, 0x10
jb 0x18009b52f
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009b52a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b5f8
call fcn.1800ce78c
cmp r13, 0x10
jb 0x18009b566
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18009b55e
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b5fe
mov rcx, r15
call fcn.1800ce78c
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x18009b59e
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x18009b599
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b5fe
mov rcx, r8
call fcn.1800ce78c
mov r14, qword [rsp + 0x1f8]
mov r13, qword [rsp + 0x238]
mov rdi, qword [rsp + 0x230]
mov rbx, qword [rsp + 0x228]
mov r15, qword [rsp + 0x1f0]
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.1800ce4d0
add rsp, 0x200
pop r12
pop rsi
pop rbp
ret
call fcn.1800dd818
int3
call fcn.1800dd818
int3
call fcn.1800dd818
int3
call fcn.180088bd0
int3
call fcn.1800dd818
int3
call fcn.180088bd0
int3
call fcn.1800dd818
int3
call fcn.180088bd0
int3