Function at 0x164fa01a0
Capabilities:
Get common file path

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rbx
mov byte [r11 + 0x18], r8b
mov dword [rsp + 0x10], edx
mov qword [r11 + 8], rcx
push rdi
sub rsp, 0x360
mov rax, qword [0x16514b200]
xor rax, rsp
mov qword [rsp + 0x350], rax
mov edi, dword [r11 + 0x10]
mov rbx, rcx
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x138], edi
lea rax, [r11 - 0x228]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, edi
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edx, eax
test eax, eax
jns 0x164fa034c
mov eax, edi
and eax, 0xffff00ff
and edi, 0xffff00ff
cmp edi, 0x24
jne 0x164fa0243
mov edx, 0x104
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x164fa04bc
cmp eax, 0x104
ja 0x164fa0502
jmp 0x164fa034c
cmp eax, 0x25
jne 0x164fa0273
mov edx, 0x104
lea rcx, [rsp + 0x140]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x164fa0545
cmp eax, 0x104
ja 0x164fa0591
jmp 0x164fa034c
cmp eax, 0x26
jne 0x164fa0285
mov rcx, rbx
call fcn.164fa0670
jmp 0x164fa038c
cmp eax, 0x2b
jne 0x164fa0297
mov rcx, rbx
call fcn.164fa06e0
jmp 0x164fa038c
cmp eax, 0x23
jne 0x164fa02ce
lea rax, str.Common_AppData
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 0xe
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.164fa0090
jmp 0x164fa038c
cmp eax, 0x1a
jne 0x164fa03d5
lea rax, str.AppData
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 7
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.164fa0090
mov rax, rbx
jmp 0x164fa038f
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0
lea rax, [rsp + 0x140]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x164fa0371
lea rdx, [rsp + 0x140]
mov rcx, rbx
call fcn.164e485e0
mov rax, rbx
mov rcx, qword [rsp + 0x350]
xor rcx, rsp
call fcn.165001080
mov rbx, qword [rsp + 0x388]
add rsp, 0x360
pop rdi
ret
cmp eax, 0x1c
jne 0x164fa0478
lea rax, str.Local_AppData
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], reloc.OLEAUT32.dll_DosDateTimeToVariantTime
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.164fa0090
mov rax, rbx
jmp 0x164fa038f
lea rcx, str.Unable_to_retrieve_a_path_of_the_known_folder____
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], 0x33
lea r9, [rsp + 0x138]
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x118]
call fcn.164fa0750
lea rdx, [0x165147178]
lea rcx, [rsp + 0x118]
call fcn.165003be0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_retrieve_a_path_of_the_known_folder____
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], 0x33
lea r9, [rsp + 0x138]
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x58]
call fcn.164fa0750
lea rdx, [0x165147178]
lea rcx, [rsp + 0x58]
call fcn.165003be0
int3
lea rcx, str.Unable_to_retrieve_a_path_of_the_known_folder____
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], 0x33
lea r9, [rsp + 0x138]
lea r8, [rsp + 0x40]
mov edx, 0xea
lea rcx, [rsp + 0x78]
call fcn.164fa0750
lea rdx, [0x165147178]
lea rcx, [rsp + 0x78]
call fcn.165003be0
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Unable_to_retrieve_a_path_of_the_known_folder____
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], 0x33
lea r9, [rsp + 0x138]
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x98]
call fcn.164fa0750
lea rdx, [0x165147178]
lea rcx, [rsp + 0x98]
call fcn.165003be0
int3
lea rcx, str.Unable_to_retrieve_a_path_of_the_known_folder____
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], 0x33
lea r9, [rsp + 0x138]
lea r8, [rsp + 0x40]
mov edx, 0xea
lea rcx, [rsp + 0xb8]
call fcn.164fa0750
lea rdx, [0x165147178]
lea rcx, [rsp + 0xb8]
call fcn.165003be0
int3