Function at 0x1800b8320
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x330]
sub rsp, 0x430
mov rax, qword [0x18029e198]
xor rax, rsp
mov qword [rbp + 0x320], rax
mov r15, rcx
mov qword [rsp + 0x68], rcx
xor r14d, r14d
mov rdi, qword [0x1802b1ec8]
mov qword [rsp + 0x58], rdi
test rdi, rdi
jne 0x1800b83c3
mov ecx, 0x8f8
call fcn.1801e60b0
mov rdi, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x1800b83b4
xor edx, edx
mov r8d, 0x8f8
mov rcx, rax
call fcn.18020be10
mov rcx, rdi
call fcn.1800907f0
nop
mov rcx, rdi
call fcn.1800a1050
nop
jmp 0x1800b83bc
mov rdi, r14
mov qword [rsp + 0x58], r14
mov qword [0x1802b1ec8], rdi
mov qword [rbp - 0x50], r14
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 9
xor r8d, r8d
lea rdx, [0x1800574e0]
mov rcx, 0xffffffff80000001
mov rax, qword [rdi + 0x820]
call qword [case.0x18009ccb8.0]
test eax, eax
jne 0x1800b84ec
lea rdx, [rbp + 0x20]
mov ecx, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
je 0x1800b84ec
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], sendto
mov byte [rbp], 0
lea r13, [0x1800567d8]
mov qword [rbp - 8], r13
mov r8d, 2
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 8]
call fcn.1800f15a0
nop
mov esi, r14d
mov dword [rsp + 0x64], esi
mov dword [rbp - 0x38], pe_nt_image_headers64
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x38]
lea r8, [rbp + 0x120]
mov edx, esi
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x8b0]
call qword [case.0x18009ccb8.0]
test eax, eax
je 0x1800b851c
sub eax, 0xea
je 0x1800b8602
cmp eax, 0x19
jne 0x1800b84ac
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x480]
call qword [case.0x18009ccb8.0]
nop
mov qword [rbp - 8], r13
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1800b84ec
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b84e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b89bb
call fcn.1801e60f0
nop
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.1801e67e0
lea r11, [rsp + 0x430]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [rbp - 0x48], r14
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 9
xor r8d, r8d
lea rdx, [rbp + 0x120]
mov rcx, qword [rbp - 0x50]
mov rax, qword [rdi + 0x820]
call qword [case.0x18009ccb8.0]
xor bl, bl
mov dword [rsp + 0x50], ebx
mov eax, r14d
mov dword [rbp - 0x40], r14d
mov dword [rsp + 0x60], eax
mov dword [rbp - 0x3c], pe_nt_image_headers64
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
lea r9, [rbp - 0x3c]
lea r8, [rbp + 0x220]
mov edx, eax
mov rcx, qword [rbp - 0x48]
mov rax, qword [rdi + 0x8c0]
call qword [case.0x18009ccb8.0]
test eax, eax
je 0x1800b8609
sub eax, 0xea
je 0x1800b89a4
cmp eax, 0x19
jne 0x1800b84ac
mov rcx, qword [rbp - 0x48]
mov rax, qword [rdi + 0x480]
call qword [case.0x18009ccb8.0]
test bl, bl
jne 0x1800b849a
mov rbx, qword [r15 + 0x90]
mov r8, qword [rbx + 8]
lea rdx, [r15 + 0x90]
lea rcx, [r15 + 0x90]
call fcn.18008f6f0
mov qword [rbx + 8], rbx
mov qword [rbx], rbx
mov qword [rbx + 0x10], rbx
mov qword [r15 + 0x98], r14
mov rdi, qword [rsp + 0x58]
mov esi, dword [rsp + 0x64]
inc esi
jmp 0x1800b8445
cmp dword [rbp - 0x40], 1
jne 0x1800b885c
cmp dword [rbp - 0x3c], 2
jb 0x1800b885c
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], sendto
mov byte [rbp - 0x28], 0
mov qword [rbp - 0x30], r13
mov r8d, 2
lea rdx, [rbp + 0x220]
lea rcx, [rbp - 0x30]
call fcn.1800f15a0
nop
mov edx, dword [rbp - 0x18]
test edx, edx
je 0x1800b8663
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rcx, qword [rbp - 0x28]
call qword [sym.imp.USER32.dll_CharUpperBuffA]
mov rsi, qword [rbp - 0x18]
cmp rsi, 1
jbe 0x1800b89b5
lea rax, [rbp - 0x28]
mov r14, qword [rbp - 0x28]
mov r13, qword [rbp - 0x10]
cmp r13, 0x10
cmovae rax, r14
cmp byte [rax + 1], 0x3a
jne 0x1800b8819
lea rdi, [r15 + 0x90]
mov qword [rsp + 0x70], rdi
mov r12, qword [rdi]
mov qword [rbp - 0x80], r12
mov rbx, qword [r12 + 8]
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x60], 0
mov r15, r12
cmp byte [rbx + 0x19], 0
jne 0x1800b8747
mov r12d, 1
nop word [rax + rax]
mov qword [rbp - 0x68], rbx
lea rdx, [rbp - 0x28]
cmp r13, 0x10
cmovae rdx, r14
lea rcx, [rbx + 0x28]
cmp qword [rbx + 0x40], 0x10
jb 0x1800b86ef
mov rcx, qword [rbx + 0x28]
mov rdi, qword [rbx + 0x38]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020bfb0
test eax, eax
jne 0x1800b871a
cmp rdi, rsi
jae 0x1800b8712
mov eax, 0xffffffff
jmp 0x1800b871a
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x1800b872e
mov dword [rbp - 0x60], 0
mov rbx, qword [rbx + 0x10]
jmp 0x1800b8738
mov dword [rbp - 0x60], r12d
mov r15, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800b86d0
mov r12, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x70]
cmp byte [r15 + 0x19], 0
jne 0x1800b879b
lea rdx, [r15 + 0x28]
cmp qword [r15 + 0x40], 0x10
jb 0x1800b875d
mov rdx, qword [r15 + 0x28]
lea rcx, [rbp - 0x28]
cmp r13, 0x10
cmovae rcx, r14
mov rbx, qword [r15 + 0x38]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020bfb0
test eax, eax
jne 0x1800b8794
cmp rsi, rbx
jae 0x1800b878c
mov eax, 0xffffffff
jmp 0x1800b8794
xor eax, eax
cmp rsi, rbx
seta al
shr eax, 0x1f
test al, al
je 0x1800b8814
movabs rax, 0x38e38e38e38e38e
cmp qword [rdi + 8], rax
je 0x1800b89c1
mov qword [rbp - 0x78], rdi
xor esi, esi
mov qword [rbp - 0x70], rsi
lea ecx, [rsi + 0x48]
call fcn.1801e60b0
mov rbx, rax
mov qword [rbp - 0x70], rax
lea rcx, [rax + 0x28]
lea rdx, [rbp - 0x28]
call fcn.1800905d0
lea rax, [0x1800567d8]
mov qword [rbx + 0x20], rax
mov qword [rbx], r12
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], r12
mov word [rbx + 0x18], si
mov qword [rbp - 0x70], rsi
movups xmm0, xmmword [rbp - 0x68]
movaps xmmword [rsp + 0x70], xmm0
mov r8, rbx
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.180098650
mov r13, qword [rbp - 0x10]
mov r14, qword [rbp - 0x28]
mov r15, qword [rsp + 0x68]
lea rax, [0x1800567d8]
mov qword [rbp - 0x30], rax
cmp r13, 0x10
jb 0x1800b885c
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800b8853
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b89af
mov rcx, r14
call fcn.1801e60f0
nop
mov edx, dword [rbp + 0x10]
test edx, edx
je 0x1800b8877
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
call qword [sym.imp.USER32.dll_CharUpperBuffA]
mov r14, qword [r15 + 0x90]
mov rbx, qword [r14 + 8]
mov r13, r14
mov r15, qword [rbp + 0x18]
mov rsi, qword [rbp + 0x10]
mov r12, qword [rbp]
cmp byte [rbx + 0x19], 0
jne 0x1800b88ff
nop word [rax + rax]
lea rdx, [rbp]
cmp r15, 0x10
cmovae rdx, r12
lea rcx, [rbx + 0x28]
cmp qword [rbx + 0x40], 0x10
jb 0x1800b88bb
mov rcx, qword [rbx + 0x28]
mov rdi, qword [rbx + 0x38]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020bfb0
test eax, eax
jne 0x1800b88e6
cmp rdi, rsi
jae 0x1800b88de
mov eax, 0xffffffff
jmp 0x1800b88e6
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x1800b88f3
mov rbx, qword [rbx + 0x10]
jmp 0x1800b88f9
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800b88a0
cmp byte [r14 + 0x19], 0
jne 0x1800b898c
lea rdx, [r14 + 0x28]
cmp qword [r14 + 0x40], 0x10
jb 0x1800b8919
mov rdx, qword [r14 + 0x28]
lea rcx, [rbp]
cmp r15, 0x10
cmovae rcx, r12
mov rbx, qword [r14 + 0x38]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020bfb0
test eax, eax
jne 0x1800b8950
cmp rsi, rbx
jae 0x1800b8948
mov eax, 0xffffffff
jmp 0x1800b8950
xor eax, eax
cmp rsi, rbx
seta al
shr eax, 0x1f
mov ebx, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
test al, al
jne 0x1800b899a
movzx ebx, bl
cmp r14, r13
mov eax, 1
cmovne ebx, eax
mov dword [rsp + 0x50], ebx
xor r14d, r14d
lea r13, [0x1800567d8]
mov eax, dword [rsp + 0x60]
inc eax
jmp 0x1800b8557
mov ebx, dword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
xor r14d, r14d
lea r13, [0x1800567d8]
mov eax, dword [rsp + 0x60]
inc eax
jmp 0x1800b8557
call fcn.18010f960
nop
call fcn.180099440
nop
call fcn.18010f960
nop
call fcn.1800992b0
int3