Function at 0x18000dd40
Capabilities:
Get common file path

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rsp + 0x2c8], rbx
mov rax, qword [0x180075010]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rcx, r8
call fcn.18000bda0
mov rcx, r14
call fcn.18000e110
mov ebx, eax
test eax, eax
je 0x18000ddf9
lea r15, [rbx + rbx]
lea r10, [r15 + r14]
mov rcx, r10
call fcn.18000dc00
test al, al
je 0x18000ddf2
mov rdx, r10
lea rcx, [rsp + 0x40]
call fcn.18000bb80
nop
lea rcx, [rsp + 0x40]
call fcn.18000e650
test al, al
je 0x18000dde8
cmp ebx, dword [rdi + 8]
jae 0x18000ddda
mov dword [rdi + 8], ebx
mov rax, qword [rdi]
xor esi, esi
mov word [r15 + rax], si
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.18000bf20
nop
mov rcx, qword [rsp + 0x40]
call fcn.18002be68
mov al, 1
jmp 0x18000e01f
lea rcx, [rsp + 0x20]
call fcn.18000bc10
nop
xor esi, esi
test r15, r15
je 0x18000de1a
mov rdx, r15
lea rcx, [rsp + 0x20]
call fcn.18000bda0
jmp 0x18000de5a
mov dword [rsp + 0x28], esi
mov rax, qword [rsp + 0x20]
mov word [rax], si
mov word [rsp + 0x60], si
lea rdx, [rsp + 0x60]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ebx, eax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.18000bda0
lea eax, [rbx - 1]
cmp eax, 0x103
ja 0x18000e00d
mov ecx, dword [rsp + 0x28]
mov r10, qword [rsp + 0x20]
test ecx, ecx
je 0x18000deb2
mov eax, ecx
movzx edx, word [r10 + rcx*2 - 2]
cmp dx, 0x2f
je 0x18000deb2
cmp dx, 0x5c
je 0x18000deb2
cmp dword [rsp + 0x2c], ecx
jne 0x18000de94
lea rcx, [rsp + 0x20]
call fcn.18000c2b0
mov ecx, dword [rsp + 0x28]
mov r10, qword [rsp + 0x20]
mov eax, ecx
mov edx, 0x5c
mov word [r10 + rax*2], dx
inc ecx
mov eax, ecx
mov word [r10 + rcx*2], si
mov dword [rsp + 0x28], ecx
mov r10, qword [rsp + 0x20]
movzx ecx, word [r10]
cmp cx, 0x5c
je 0x18000dec2
cmp cx, 0x2f
jne 0x18000deff
movzx eax, word [r10 + 2]
cmp ax, 0x5c
je 0x18000ded3
cmp ax, 0x2f
jne 0x18000deff
cmp word [r10 + 4], 0x3f
jne 0x18000deff
movzx eax, word [r10 + 6]
cmp ax, 0x2f
je 0x18000deec
cmp ax, 0x5c
jne 0x18000deff
mov rcx, r10
call fcn.18000e2a0
mov ebx, eax
test eax, eax
jne 0x18000df6c
jmp 0x18000e012
lea eax, [rcx - 0x61]
cmp ax, 0x19
jbe 0x18000df11
lea eax, [rcx - 0x41]
cmp ax, 0x19
ja 0x18000df31
cmp word [r10 + 2], 0x3a
jne 0x18000df31
movzx eax, word [r10 + 4]
cmp ax, 0x2f
je 0x18000df2a
cmp ax, 0x5c
jne 0x18000df31
mov ebx, 3
jmp 0x18000df6c
cmp cx, 0x5c
je 0x18000df41
cmp cx, 0x2f
jne 0x18000e012
movzx eax, word [r10 + 2]
cmp ax, 0x5c
je 0x18000df56
cmp ax, 0x2f
jne 0x18000e012
lea rcx, [r10 + 4]
call fcn.18000e190
mov ebx, eax
test eax, eax
je 0x18000e012
add ebx, 2
lea rcx, [rsp + 0x30]
call fcn.18000bc10
nop
movzx eax, word [r14]
cmp ax, 0x5c
je 0x18000dfab
cmp ax, 0x2f
je 0x18000dfab
mov ecx, ebx
mov rax, qword [rsp + 0x20]
lea rdx, [rax + rcx*2]
lea rcx, [rsp + 0x30]
call fcn.18000c030
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.18000c030
jmp 0x18000dfb9
lea rdx, [r14 + 2]
lea rcx, [rsp + 0x30]
call fcn.18000bda0
lea rcx, [rsp + 0x30]
call fcn.18000e650
test al, al
jne 0x18000dfcb
xor bl, bl
jmp 0x18000dffc
cmp ebx, dword [rsp + 0x28]
jae 0x18000dfe0
mov dword [rsp + 0x28], ebx
mov ecx, ebx
mov rax, qword [rsp + 0x20]
mov word [rax + rcx*2], si
lea rdx, [rsp + 0x20]
mov rcx, rdi
call fcn.18000bc50
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.18000bf20
mov bl, 1
mov rcx, qword [rsp + 0x30]
call fcn.18002be68
mov r10, qword [rsp + 0x20]
jmp 0x18000e014
mov r10, qword [rsp + 0x20]
xor bl, bl
mov rcx, r10
call fcn.18002be68
movzx eax, bl
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.18002bf10
mov rbx, qword [rsp + 0x2c8]
add rsp, 0x280
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
jmp 0x18000dd40