Function at 0x140025028
Capabilities:
Get common file path
Get program files directory

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x19e8]
mov eax, 0x1ac0
call fcn.1401c1f10
sub rsp, rax
mov rax, qword [0x1402f2208]
xor rax, rsp
mov qword [rbp + 0x19b0], rax
mov r12, rdx
lea rdx, [rbp + 0x140]
mov r8d, 0x103
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rbp + 0x140]
mov edx, 0x5c
call fcn.1401c1c68
mov edi, 0x104
lea r8, [rbp + 0x140]
lea rcx, [rbp + 0x560]
xor r15d, r15d
mov edx, edi
mov word [rax], r15w
call fcn.1401c1f60
lea r8, str._nvCplUI.exe
lea rcx, [rbp + 0x560]
mov edx, edi
call fcn.1401c28ec
lea r8, [rbp + 0x140]
lea rcx, [rbp + 0x768]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvExpBar.dll
lea rcx, [rbp + 0x768]
mov edx, edi
call fcn.1401c28ec
lea r8, [rbp + 0x140]
lea rcx, [rbp + 0x970]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvCpl.cpl
lea rcx, [rbp + 0x970]
mov edx, edi
call fcn.1401c28ec
lea r8, [rbp + 0x140]
lea rcx, [rbp + 0xb78]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvCplUIR.dll
lea rcx, [rbp + 0xb78]
mov edx, edi
call fcn.1401c28ec
mov ebx, 0x206
lea rcx, [rbp + 0x352]
mov r8d, ebx
xor edx, edx
mov word [rbp + 0x350], r15w
call fcn.1401c1930
lea edx, [rbx + 2]
lea rcx, [rbp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea r8, [rbp + 0x350]
lea rcx, [rbp + 0xd80]
mov edx, edi
call fcn.1401c1f60
lea r8, [0x14022fd90]
lea rcx, [rbp + 0xd80]
mov edx, edi
call fcn.1401c28ec
lea rcx, [rsp + 0x32]
mov r8d, ebx
xor edx, edx
mov word [rsp + 0x30], r15w
call fcn.1401c1930
lea r11, [rsp + 0x30]
lea edx, [r15 + 0x26]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x20], r11
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea r8, str.NVIDIA_CorporationDisplay
lea rcx, [rsp + 0x30]
mov edx, edi
call fcn.1401c28ec
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0xf88]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvxdapix.dll
lea rcx, [rbp + 0xf88]
mov edx, edi
call fcn.1401c28ec
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x1190]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvxdbat.dll
lea rcx, [rbp + 0x1190]
mov edx, edi
call fcn.1401c28ec
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x1398]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvxdplcy.dll
lea rcx, [rbp + 0x1398]
mov edx, edi
call fcn.1401c28ec
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x15a0]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvxdsync.exe
lea rcx, [rbp + 0x15a0]
mov edx, edi
call fcn.1401c28ec
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x17a8]
mov edx, edi
call fcn.1401c1f60
lea r8, str._nvui.dll
lea rcx, [rbp + 0x17a8]
mov edx, edi
call fcn.1401c28ec
test r12, r12
jne 0x1400252b5
mov eax, 0x80004003
jmp 0x14002535d
mov ecx, 0x50
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [r12 + 8], rax
test rax, rax
jne 0x1400252d4
mov eax, 0x8007000e
jmp 0x14002535d
mov r13d, r15d
mov rsi, r15
lea rdi, [rbp + 0x560]
mov r14d, 0xa
mov rcx, rdi
mov rbx, r15
call fcn.140056f20
test eax, eax
je 0x140025342
mov rcx, rdi
call fcn.1401c0bf0
mov r11, rax
inc r11
jne 0x14002538d
mov r11, r15
mov ecx, r11d
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rbx, rax
test rax, rax
je 0x140025342
mov rcx, qword [r12 + 8]
mov rdx, rdi
mov rbx, r15
mov qword [rsi + rcx], rax
mov rcx, qword [r12 + 8]
mov rcx, qword [rcx + rsi]
call fcn.1401c25d8
inc r13d
add rsi, 8
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
add rdi, 0x208
dec r14
jne 0x1400252e7
mov dword [r12], r13d
xor eax, eax
mov rcx, qword [rbp + 0x19b0]
xor rcx, rsp
call fcn.1401c0410
lea r11, [rsp + 0x1ac0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
or rax, 0xffffffffffffffff
div r11
cmp rax, 2
jb 0x140025342
add r11, r11
cmp r11, 0x7fffffff
jbe 0x14002530d
mov rax, r15
jmp 0x140025316