Function at 0x14000ab00
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0xb90]
sub rsp, 0xc90
mov rax, qword [0x1400c8090]
xor rax, rsp
mov qword [rbp + 0xb80], rax
xor edx, edx
lea rcx, [rbp + 0x130]
mov r8d, 0x208
call fcn.140042570
xor edx, edx
lea rcx, [rbp + 0x760]
mov r8d, 0x208
call fcn.140042570
xor edx, edx
lea rcx, [rbp + 0x550]
mov r8d, 0x208
call fcn.140042570
xor edx, edx
lea rcx, [rbp + 0x340]
mov r8d, 0x208
call fcn.140042570
lea rcx, str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall9F72EF8B_AEC9_4CA5_B483_143980AFD6FD
mov r8d, 0x152
movups xmm0, xmmword [rcx]
mov eax, dword [rcx + 0xb0]
lea rdx, [rbp + 0x970]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx + 0x80]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x90]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x20], xmm1
mov dword [rdx + 0x30], eax
movzx eax, word [rcx + 0xb4]
lea rcx, [rbp + 0xa26]
mov word [rdx + 0x34], ax
xor edx, edx
call fcn.140042570
movaps xmm0, xmmword [str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall]
lea rcx, [rbp - 0x78]
movaps xmm1, xmmword [0x1400a0280]
xor edx, edx
movaps xmmword [rsp + 0x20], xmm0
mov r8d, 0x1a0
movaps xmm0, xmmword [0x1400a0290]
movaps xmmword [rsp + 0x40], xmm0
movaps xmm0, xmmword [0x1400a02b0]
movaps xmmword [rsp + 0x30], xmm1
movaps xmm1, xmmword [0x1400a02a0]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm0, qword [0x1400a02d0]
movaps xmmword [rsp + 0x50], xmm1
movaps xmm1, xmmword [0x1400a02c0]
movsd qword [rbp - 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm1
call fcn.140042570
mov ebx, 0x104
lea rcx, [rbp + 0x760]
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea r8, [rbp + 0x760]
mov edx, ebx
lea rax, [rbp + 0x130]
sub r8, rax
lea rcx, [rbp + 0x130]
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000acd3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14000acd3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000acb0
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
xor edi, edi
mov rcx, rbx
mov word [rax], di
lea rax, [rbp + 0x130]
nop dword [rax]
cmp word [rax], di
je 0x14000acff
add rax, 2
sub rcx, 1
jne 0x14000acf0
mov rax, rbx
mov r8, rdi
sub rax, rcx
test rcx, rcx
cmovne r8, rax
je 0x14000ad67
mov rdx, rbx
lea rcx, [rbp + 0x130]
lea rcx, [rcx + r8*2]
sub rdx, r8
je 0x14000ad59
lea rax, [r8 + 0x7ffffefa]
add rax, rdx
lea r9, str.DellTPadUninstap.exe_ADDREMOVE
sub r9, rcx
test rax, rax
je 0x14000ad59
movzx r8d, word [r9 + rcx]
test r8w, r8w
je 0x14000ad59
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x14000ad38
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], di
lea r8, [rbp + 0x130]
mov ecx, 0x400
lea rdx, [0x14009ecc8]
call fcn.14000b010
lea r8, [rbp + 0x760]
mov rdx, rbx
lea rax, [rbp + 0x340]
sub r8, rax
lea rcx, [rbp + 0x340]
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000adc3
movzx eax, word [r8 + rcx]
test ax, ax
je 0x14000adc3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000ada0
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov rcx, rbx
mov word [rax], di
lea rax, [rbp + 0x340]
nop dword [rax + rax]
cmp word [rax], di
je 0x14000adef
add rax, 2
sub rcx, 1
jne 0x14000ade0
mov rax, rbx
mov r8, rdi
sub rax, rcx
test rcx, rcx
cmovne r8, rax
je 0x14000ae57
mov rdx, rbx
lea rcx, [rbp + 0x340]
lea rcx, [rcx + r8*2]
sub rdx, r8
je 0x14000ae49
lea rax, [r8 + 0x7ffffefa]
add rax, rdx
lea r9, str.DellTPadDellTPad.exe
sub r9, rcx
test rax, rax
je 0x14000ae49
movzx r8d, word [rcx + r9]
test r8w, r8w
je 0x14000ae49
mov word [rcx], r8w
dec rax
add rcx, 2
sub rdx, 1
jne 0x14000ae28
test rdx, rdx
lea rax, [rcx - 2]
cmovne rax, rcx
mov word [rax], di
lea r8, [rbp + 0x340]
mov ecx, 0x400
lea rdx, [0x14009ecc8]
call fcn.14000b010
lea r8, [rbp + 0x760]
mov rdx, rbx
lea rax, [rbp + 0x550]
sub r8, rax
lea rcx, [rbp + 0x550]
nop word [rax + rax]
lea rax, [rdx + 0x7ffffefa]
test rax, rax
je 0x14000aeb3
movzx eax, word [rcx + r8]
test ax, ax
je 0x14000aeb3
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x14000ae90
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov rcx, rbx
mov word [rax], di
lea rax, [rbp + 0x550]
nop dword [rax + rax]
cmp word [rax], di
je 0x14000aedf
add rax, 2
sub rcx, 1
jne 0x14000aed0
mov rax, rbx
mov rdx, rdi
sub rax, rcx
test rcx, rcx
cmovne rdx, rax
je 0x14000af43
lea r8, [rbp + 0x550]
lea r8, [r8 + rdx*2]
sub rbx, rdx
je 0x14000af35
lea rax, [rdx + 0x7ffffefa]
add rax, rbx
lea rdx, str.DellTPad
sub rdx, r8
test rax, rax
je 0x14000af35
movzx ecx, word [r8 + rdx]
test cx, cx
je 0x14000af35
mov word [r8], cx
dec rax
add r8, 2
sub rbx, 1
jne 0x14000af15
test rbx, rbx
lea rax, [r8 - 2]
cmovne rax, r8
mov word [rax], di
lea r8, [rbp + 0x550]
mov ecx, 0x400
lea rdx, [0x14009ecc8]
call fcn.14000b010
mov rcx, qword [0x1400ca5f0]
test rcx, rcx
je 0x14000afe0
lea r9, [rsp + 0x20]
mov r8, 0xffffffff80000002
lea rdx, [rsp + 0x20]
call fcn.140005530
lea r9, [rbp + 0x130]
mov rcx, 0xffffffff80000002
lea r8, str.UninstallString
lea rdx, [rbp + 0x970]
call fcn.14000da30
lea r9, [rbp + 0x340]
mov rcx, 0xffffffff80000002
lea r8, str.DisplayIcon
lea rdx, [rbp + 0x970]
call fcn.14000da30
lea r9, [rbp + 0x550]
mov rcx, 0xffffffff80000002
lea r8, str.InstallLocation
lea rdx, [rbp + 0x970]
call fcn.14000da30
mov rcx, qword [rbp + 0xb80]
xor rcx, rsp
call fcn.1400403f0
lea r11, [rsp + 0xc90]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret