Function at 0x14002d550
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x250
mov rax, qword [0x14035dc30]
xor rax, rsp
mov qword [rsp + 0x240], rax
mov rax, qword [rcx + 0x10]
xor ebx, ebx
mov rdi, rcx
test rax, rax
je 0x14002d586
cmp bx, word [rax]
je 0x14002d856
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x14002d856
cmp bx, word [rax]
je 0x14002d856
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x208
call fcn.14026c200
lea rax, [rsp + 0x30]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov edx, 0x8023
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x14002d856
mov qword [rsp + 0x268], rbp
lea r8, str.McAfee_
mov edx, 0x104
mov qword [rsp + 0x270], rsi
lea rcx, [rsp + 0x30]
call fcn.140278c0c
lea r8, [0x1402f73d8]
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.140278c0c
mov rbp, 0xffffffffffffffff
lea rcx, [rsp + 0x30]
mov rax, rbp
nop
cmp word [rcx + rax*2 + 2], bx
lea rax, [rax + 1]
jne 0x14002d620
lea esi, [rax + 1]
mov eax, 2
mul rsi
cmovo rax, rbp
mov rcx, rax
call fcn.14027bb00
mov qword [rdi + 0x40], rax
test rax, rax
je 0x14002d84f
lea r8, [rsi + rsi]
xor edx, edx
mov rcx, rax
call fcn.14026c200
mov rcx, qword [rdi + 0x40]
lea r8, [rsp + 0x30]
mov edx, esi
call fcn.140278ba4
lea r8, [0x1402f7cc4]
mov edx, 0x104
lea rcx, [rsp + 0x30]
call fcn.140278c0c
mov rax, qword [rdi + 0x10]
test rax, rax
je 0x14002d69d
mov rbx, rbp
nop
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14002d690
inc rbx
mov rcx, qword [rdi + 0x18]
mov rax, rbp
inc rax
cmp word [rcx + rax*2], 0
jne 0x14002d6a4
lea rdx, [rsp + 0x30]
mov rcx, rbp
inc rcx
cmp word [rdx + rcx*2], 0
jne 0x14002d6b6
add rbx, rax
inc rcx
add rbx, rcx
mov eax, 2
mov ebx, ebx
mul rbx
cmovo rax, rbp
mov rcx, rax
call fcn.14027bb00
mov qword [rdi + 0x38], rax
test rax, rax
je 0x14002d84f
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call fcn.14026c200
mov rdx, qword [rdi + 0x10]
lea r9, [rsp + 0x30]
mov rax, qword [rdi + 0x18]
mov rcx, qword [rdi + 0x38]
test rdx, rdx
je 0x14002d72a
mov qword [rsp + 0x28], rax
lea r8, [0x1402f8128]
mov qword [rsp + 0x20], rdx
mov edx, ebx
call fcn.1400263c0
jmp 0x14002d73e
lea r8, [0x1402f8118]
mov qword [rsp + 0x20], rax
mov rdx, rbx
call fcn.1400263c0
mov rcx, qword [rdi + 0x38]
mov rax, rbp
nop word [rax + rax]
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14002d750
lea ebx, [rax + 9]
mov eax, 2
mul rbx
cmovo rax, rbp
mov rcx, rax
call fcn.14027bb00
mov qword [rdi + 0x488], rax
test rax, rax
je 0x14002d84f
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call fcn.14026c200
mov r9, qword [rdi + 0x38]
lea rsi, str.log.ini
mov rcx, qword [rdi + 0x488]
lea r8, [0x1402f8040]
mov edx, ebx
mov qword [rsp + 0x20], rsi
call fcn.1400263c0
lea rdx, [rsp + 0x30]
mov rcx, rbp
nop
cmp word [rdx + rcx*2 + 2], 0
lea rcx, [rcx + 1]
jne 0x14002d7c0
lea ebx, [rcx + 8]
mov eax, 2
mul rbx
cmovo rax, rbp
mov rcx, rax
call fcn.14027bb00
mov qword [rdi + 0x480], rax
test rax, rax
je 0x14002d84f
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call fcn.14026c200
mov rcx, qword [rdi + 0x480]
lea r9, [rsp + 0x30]
lea r8, [0x1402f8118]
mov qword [rsp + 0x20], rsi
mov edx, ebx
call fcn.1400263c0
xor eax, eax
mov rbp, qword [rsp + 0x268]
mov rsi, qword [rsp + 0x270]
mov rcx, qword [rsp + 0x240]
xor rcx, rsp
call fcn.140269300
mov rbx, qword [rsp + 0x278]
add rsp, 0x250
pop rdi
ret
mov eax, select
jmp 0x14002d81e
mov eax, 0x57
jmp 0x14002d82e