Function at 0x1800b8400
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x18029e198]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov r15, rcx
mov qword [rsp + 0x68], rcx
xor r14d, r14d
mov rdi, qword [0x1802b1ec8]
mov qword [rsp + 0x58], rdi
test rdi, rdi
jne 0x1800b84a3
mov ecx, 0x8f8
call fcn.1801e6190
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1800b8494
xor edx, edx
mov r8d, 0x8f8
mov rcx, rax
call fcn.18020bef0
mov rcx, rdi
call fcn.1800907f0
nop
mov rcx, rdi
call fcn.1800a1050
nop
jmp 0x1800b849c
mov rdi, r14
mov qword [rsp + 0x58], r14
mov qword [0x1802b1ec8], rdi
mov qword [rbp - 0x50], r14
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 9
xor r8d, r8d
lea rdx, [0x1800574e0]
mov rcx, 0xffffffff80000001
mov rax, qword [rdi + 0x820]
call qword [case.0x18009ccb8.0]
test eax, eax
jne 0x1800b85cc
lea rdx, [rbp + 0x20]
mov ecx, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
je 0x1800b85cc
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], sendto
mov byte [rbp], 0
lea r13, [0x1800567d8]
mov qword [rbp - 8], r13
mov r8d, 2
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 8]
call fcn.1800f1680
nop
mov esi, r14d
mov dword [rsp + 0x64], esi
mov dword [rbp - 0x38], pe_nt_image_headers64
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x38]
lea r8, [rbp + 0x120]
mov edx, esi
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x8b0]
call qword [case.0x18009ccb8.0]
test eax, eax
je 0x1800b85fc
sub eax, 0xea
je 0x1800b86e2
cmp eax, 0x19
jne 0x1800b858c
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x480]
call qword [case.0x18009ccb8.0]
nop
mov qword [rbp - 8], r13
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1800b85cc
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b85c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b8a9b
call fcn.1801e61d0
nop
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1801e68c0
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rbp - 0x48], r14
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 9
xor r8d, r8d
lea rdx, [rbp + 0x120]
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x820]
call qword [case.0x18009ccb8.0]
xor bl, bl
mov dword [rsp + 0x50], ebx
mov eax, r14d
mov dword [rbp - 0x40], r14d
mov dword [rsp + 0x60], eax
mov dword [rbp - 0x3c], pe_nt_image_headers64
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x3c]
lea r8, [rbp + 0x220]
mov edx, eax
mov rcx, qword [rbp - 0x48]
mov rax, qword [rdi + 0x8c0]
call qword [case.0x18009ccb8.0]
test eax, eax
je 0x1800b86e9
sub eax, 0xea
je 0x1800b8a84
cmp eax, 0x19
jne 0x1800b858c
mov rcx, qword [rbp - 0x48]
mov rax, qword [rdi + 0x480]
call qword [case.0x18009ccb8.0]
test bl, bl
jne 0x1800b857a
mov rbx, qword [r15 + 0x90]
mov r8, qword [rbx + 8]
lea rdx, [r15 + 0x90]
lea rcx, [r15 + 0x90]
call fcn.18008f6f0
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [r15 + 0x98], r14
mov rdi, qword [rsp + 0x58]
mov esi, dword [rsp + 0x64]
inc esi
jmp 0x1800b8525
cmp dword [rbp - 0x40], 1
jne 0x1800b893c
cmp dword [rbp - 0x3c], 2
jb 0x1800b893c
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], sendto
mov byte [rbp - 0x28], 0
mov qword [rbp - 0x30], r13
mov r8d, 2
lea rdx, [rbp + 0x220]
lea rcx, [rbp - 0x30]
call fcn.1800f1680
nop
mov edx, dword [rbp - 0x18]
test edx, edx
je 0x1800b8743
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.USER32.dll_CharUpperBuffA]
mov rsi, qword [rbp - 0x18]
cmp rsi, 1
jbe 0x1800b8a95
lea rax, [rbp - 0x28]
mov r14, qword [rbp - 0x28]
mov r13, qword [rbp - 0x10]
cmp r13, 0x10
cmovae rax, r14
cmp byte [rax + 1], 0x3a
jne 0x1800b88f9
lea rdi, [r15 + 0x90]
mov qword [rsp + 0x70], rdi
mov r12, qword [rdi]
mov qword [rbp - 0x80], r12
mov rbx, qword [r12 + 8]
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x60], 0
mov r15, r12
cmp byte [rbx + 0x19], 0
jne 0x1800b8827
mov r12d, 1
nop word [rax + rax]
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x28]
cmp r13, 0x10
cmovae rdx, r14
lea rcx, [rbx + 0x28]
cmp qword [rbx + 0x40], 0x10
jb 0x1800b87cf
mov rcx, qword [rbx + 0x28]
mov rdi, qword [rbx + 0x38]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020c090
test eax, eax
jne 0x1800b87fa
cmp rdi, rsi
jae 0x1800b87f2
mov eax, 0xffffffff
jmp 0x1800b87fa
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x1800b880e
mov dword [rbp - 0x60], 0
mov rbx, qword [rbx + 0x10]
jmp 0x1800b8818
mov dword [rbp - 0x60], r12d
mov r15, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800b87b0
mov r12, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x70]
cmp byte [r15 + 0x19], 0
jne 0x1800b887b
lea rdx, [r15 + 0x28]
cmp qword [r15 + 0x40], 0x10
jb 0x1800b883d
mov rdx, qword [r15 + 0x28]
lea rcx, [rbp - 0x28]
cmp r13, 0x10
cmovae rcx, r14
mov rbx, qword [r15 + 0x38]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020c090
test eax, eax
jne 0x1800b8874
cmp rsi, rbx
jae 0x1800b886c
mov eax, 0xffffffff
jmp 0x1800b8874
xor eax, eax
cmp rsi, rbx
seta al
shr eax, 0x1f
test al, al
je 0x1800b88f4
movabs rax, 0x38e38e38e38e38e
cmp qword [rdi + 8], rax
je 0x1800b8aa1
mov qword [rbp - 0x78], rdi
xor esi, esi
mov qword [rbp - 0x70], rsi
lea ecx, [rsi + 0x48]
call fcn.1801e6190
mov rbx, rax
mov qword [rbp - 0x70], rax
lea rcx, [rax + 0x28]
lea rdx, [rbp - 0x28]
call fcn.1800905d0
lea rax, [0x1800567d8]
mov qword [rbx + 0x20], rax
mov qword [rbx], r12
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], r12
mov word [rbx + 0x18], si
mov qword [rbp - 0x70], rsi
movups xmm0, xmmword [rbp - 0x68]
movaps xmmword [rsp + 0x70], xmm0
mov r8, rbx
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.180098650
mov r13, qword [rbp - 0x10]
mov r14, qword [rbp - 0x28]
mov r15, qword [rsp + 0x68]
lea rax, [0x1800567d8]
mov qword [rbp - 0x30], rax
cmp r13, 0x10
jb 0x1800b893c
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800b8933
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b8a8f
mov rcx, r14
call fcn.1801e61d0
nop
mov edx, dword [rbp + 0x10]
test edx, edx
je 0x1800b8957
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
call qword [sym.imp.USER32.dll_CharUpperBuffA]
mov r14, qword [r15 + 0x90]
mov rbx, qword [r14 + 8]
mov r13, r14
mov r15, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x10]
mov r12, qword [rbp]
cmp byte [rbx + 0x19], 0
jne 0x1800b89df
nop word [rax + rax]
lea rdx, [rbp]
cmp r15, 0x10
cmovae rdx, r12
lea rcx, [rbx + 0x28]
cmp qword [rbx + 0x40], 0x10
jb 0x1800b899b
mov rcx, qword [rbx + 0x28]
mov rdi, qword [rbx + 0x38]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020c090
test eax, eax
jne 0x1800b89c6
cmp rdi, rsi
jae 0x1800b89be
mov eax, 0xffffffff
jmp 0x1800b89c6
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x1800b89d3
mov rbx, qword [rbx + 0x10]
jmp 0x1800b89d9
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800b8980
cmp byte [r14 + 0x19], 0
jne 0x1800b8a6c
lea rdx, [r14 + 0x28]
cmp qword [r14 + 0x40], 0x10
jb 0x1800b89f9
mov rdx, qword [r14 + 0x28]
lea rcx, [rbp]
cmp r15, 0x10
cmovae rcx, r12
mov rbx, qword [r14 + 0x38]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020c090
test eax, eax
jne 0x1800b8a30
cmp rsi, rbx
jae 0x1800b8a28
mov eax, 0xffffffff
jmp 0x1800b8a30
xor eax, eax
cmp rsi, rbx
seta al
shr eax, 0x1f
mov ebx, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
test al, al
jne 0x1800b8a7a
movzx ebx, bl
cmp r14, r13
mov eax, 1
cmovne ebx, eax
mov dword [rsp + 0x50], ebx
xor r14d, r14d
lea r13, [0x1800567d8]
mov eax, dword [rsp + 0x60]
inc eax
jmp 0x1800b8637
mov ebx, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
xor r14d, r14d
lea r13, [0x1800567d8]
mov eax, dword [rsp + 0x60]
inc eax
jmp 0x1800b8637
call fcn.18010fa40
nop
call fcn.180099440
nop
call fcn.18010fa40
nop
call fcn.1800992b0
int3