Function at 0x18009abc0
Capabilities:
Get common file path
Get program files directory

Disassembly:
push rbp
push rsi
push r12
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
xor r9d, r9d
lea rax, [rbp - 0x40]
mov r12, rcx
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x26]
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
xor esi, esi
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x40], rsi
lea rax, [rbp - 0x40]
mov byte [rsp + 0x30], sil
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], sil
jne 0x18009ac12
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x30]
call fcn.1800b8fb0
mov r8d, 0x14
lea rdx, str.Mozilla_Thunderbird
lea rcx, [rsp + 0x30]
call fcn.1800b8790
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov rdx, qword [rsp + 0x48]
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm1
cmp rdx, 0x10
jb 0x18009ac9d
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009ac98
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b0cf
call fcn.1800c1180
mov qword [rsp + 0x200], rbx
movabs rax, 0x7fffffffffffffff
mov rbx, qword [rsp + 0x60]
mov qword [rsp + 0x208], rdi
mov rdi, qword [rsp + 0x50]
mov qword [rsp + 0x1d8], r14
mov r14, qword [rsp + 0x68]
cmp r14, 0x10
mov qword [rsp + 0x1d0], r15
lea r15, [rsp + 0x50]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x18009acfd
movups xmm0, xmmword [r15]
mov qword [rsp + 0x48], 0xf
movups xmmword [rsp + 0x30], xmm0
jmp 0x18009ad70
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18009ad47
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18009b0d5
mov rcx, rax
call fcn.1800c1188
mov rcx, rax
test rax, rax
je 0x18009b0db
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18009ad55
test rcx, rcx
je 0x18009ad53
call fcn.1800c1188
jmp 0x18009ad55
xor eax, eax
lea r8, [rbx + 1]
mov qword [rsp + 0x30], rax
mov rdx, r15
mov rcx, rax
call fcn.1800c41f0
mov qword [rsp + 0x48], rsi
xor esi, esi
mov qword [rsp + 0x210], r13
lea rcx, [rbp - 0x80]
lea r13, [0x180117338]
mov qword [rsp + 0x40], rbx
mov rdx, r13
call fcn.1800b8a30
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.18008c300
test eax, eax
jg 0x18009b00d
cmp r14, 0x10
lea r15, [rsp + 0x50]
cmovae r15, rdi
cmp rbx, 0x10
jae 0x18009adcc
movups xmm0, xmmword [r15]
mov qword [rsp + 0x48], 0xf
movups xmmword [rsp + 0x30], xmm0
jmp 0x18009ae49
movabs rax, 0x7fffffffffffffff
mov rsi, rbx
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18009ae20
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18009b0e1
mov rcx, rax
call fcn.1800c1188
mov rcx, rax
test rax, rax
je 0x18009b0e7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18009ae2e
test rcx, rcx
je 0x18009ae2c
call fcn.1800c1188
jmp 0x18009ae2e
xor eax, eax
lea r8, [rbx + 1]
mov qword [rsp + 0x30], rax
mov rdx, r15
mov rcx, rax
call fcn.1800c41f0
mov qword [rsp + 0x48], rsi
xor esi, esi
mov rdx, r12
mov qword [rsp + 0x40], rbx
lea rcx, [rbp - 0x60]
call fcn.1800b8a30
mov r8, rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x80]
call fcn.180098c90
cmp qword [0x180117150], 0x10
lea r8, [0x180117138]
mov r9, qword [0x180117148]
mov rcx, rax
cmovae r8, qword [0x180117138]
call fcn.1800ba920
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x180117150]
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rsp + 0x30], xmm1
cmp rdx, 0x10
jb 0x18009aefc
mov rcx, qword [0x180117138]
inc rdx
cmp rdx, 0x1000
jb 0x18009aeed
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b0e7
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x30]
mov rdx, qword [rbp - 0x68]
movups xmmword [0x180117138], xmm0
movups xmmword [0x180117148], xmm1
cmp rdx, 0x10
jb 0x18009af45
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18009af40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b0e7
call fcn.1800c1180
mov rdx, qword [0x180117348]
lea rcx, [rsp + 0x30]
add rdx, rbx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
call fcn.1800ba640
cmp qword [0x180117350], 0x10
lea rcx, [rsp + 0x30]
mov r8, qword [0x180117348]
cmovae r13, qword [0x180117338]
mov rdx, r13
call fcn.1800b8790
cmp r14, 0x10
lea rdx, [rsp + 0x50]
mov r8, rbx
lea rcx, [rsp + 0x30]
cmovae rdx, rdi
call fcn.1800b8790
mov rdx, qword [0x180117350]
cmp rdx, 0x10
jb 0x18009afeb
mov rcx, qword [0x180117338]
inc rdx
cmp rdx, 0x1000
jb 0x18009afe6
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b0c3
mov rcx, r8
call fcn.1800c1180
movups xmm0, xmmword [rsp + 0x30]
mov r14, qword [rsp + 0x68]
movups xmm1, xmmword [rsp + 0x40]
mov rdi, qword [rsp + 0x50]
movups xmmword [0x180117338], xmm0
movups xmmword [0x180117348], xmm1
cmp r14, 0x10
jb 0x18009b044
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18009b03c
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18009b0c9
mov rcx, rdi
call fcn.1800c1180
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x18009b07c
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x18009b077
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18009b0c9
mov rcx, r8
call fcn.1800c1180
mov r13, qword [rsp + 0x210]
mov r14, qword [rsp + 0x1d8]
mov rdi, qword [rsp + 0x208]
mov rbx, qword [rsp + 0x200]
mov r15, qword [rsp + 0x1d0]
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
add rsp, 0x1e0
pop r12
pop rsi
pop rbp
ret
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.1800cc350
int3
call fcn.180089550
int3
call fcn.1800cc350
int3
call fcn.180089550
int3
call fcn.1800cc350
int3