Function at 0x14001fff0
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x7a0]
sub rsp, 0x8a0
mov rbx, rcx
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::constructor_void____ptr64]
lea rcx, [rbp + 0x7c0]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::constructor_void____ptr64]
mov edx, 0x3ff
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea r8, [rbp + 0x3a0]
lea rdx, str._sdriversetc_services
lea rcx, [rbp - 0x60]
call fcn.140002150
cmp dword [0x14003abdc], 0
je 0x140020079
lea rcx, str.ADL_ODT_TMP
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
test rax, rax
je 0x140020079
mov r8, rax
lea rdx, str._s_services
lea rcx, [rbp - 0x60]
call fcn.140002150
cmp word [0x14003c234], 0
jne 0x140020170
cmp word [0x14003c238], 0
lea rax, [rbp + 0x7b8]
mov edx, dword [rbx + 0x1b4]
lea r9, [rbp - 0x60]
mov ecx, dword [rbx + 0x1b0]
mov qword [rsp + 0x20], rax
jne 0x14002016b
mov r8d, dword [rbx + 0x1b8]
call qword [sym.imp.CXINSTUTIL.dll_int___cdecl_UpdatePorts_int__int__int__char____ptr64__class_CATUnicodeString____ptr64_]
cmp eax, 0xffffffff
je 0x14002025a
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x7c0]
call qword [sym.imp.JS0GROUP.dll_public:_class_CATUnicodeString____ptr64___cdecl_CATUnicodeString::operator_char_const____ptr64____ptr64]
xor edx, edx
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::constructor_char_const__const___ptr64____ptr64]
lea rdx, str.FileUpdateOK
lea rcx, [rsp + 0x68]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::constructor_char_const__const___ptr64____ptr64]
lea rdx, str.CATInstallation
lea rcx, [rsp + 0x38]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::constructor_char_const__const___ptr64____ptr64]
lea rax, [rbp + 0x7c8]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x7c0]
lea r8, [rsp + 0x68]
mov dword [rsp + 0x20], 1
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x30]
call qword [sym.imp.JS0GROUP.dll_public:_static_class_CATUnicodeString___cdecl_CATMsgCatalog::BuildMessage_class_CATString_const____ptr64__class_CATString_const____ptr64__class_CATUnicodeString____ptr64__int__class_CATUnicodeString_const____ptr64_const]
mov rdx, rax
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.JS0GROUP.dll_public:_class_CATUnicodeString____ptr64___cdecl_CATUnicodeString::operator_class_CATUnicodeString_const____ptr64____ptr64]
lea rcx, [rsp + 0x30]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::destructor_void____ptr64]
lea rcx, [rsp + 0x38]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::destructor_void____ptr64]
lea rcx, [rsp + 0x68]
jmp 0x140020247
xor r8d, r8d
jmp 0x140020199
cmp word [0x14003c238], 0
jne 0x140020273
mov r8d, dword [rbx + 0x1b8]
lea rax, [rbp + 0x7b8]
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r9, [rbp - 0x60]
call qword [sym.imp.CXINSTUTIL.dll_int___cdecl_UpdatePorts_int__int__int__char____ptr64__class_CATUnicodeString____ptr64_]
cmp eax, 0xffffffff
je 0x14002025a
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x7c0]
call qword [sym.imp.JS0GROUP.dll_public:_class_CATUnicodeString____ptr64___cdecl_CATUnicodeString::operator_char_const____ptr64____ptr64]
lea rcx, [rbp + 0x7c8]
xor edx, edx
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::constructor_char_const__const___ptr64____ptr64]
lea rdx, str.FileUpdateOK
lea rcx, [rsp + 0x38]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::constructor_char_const__const___ptr64____ptr64]
lea rdx, str.CATInstallation
lea rcx, [rsp + 0x68]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::constructor_char_const__const___ptr64____ptr64]
lea rax, [rbp + 0x7c8]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x7c0]
lea r8, [rsp + 0x38]
mov dword [rsp + 0x20], 1
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x30]
call qword [sym.imp.JS0GROUP.dll_public:_static_class_CATUnicodeString___cdecl_CATMsgCatalog::BuildMessage_class_CATString_const____ptr64__class_CATString_const____ptr64__class_CATUnicodeString____ptr64__int__class_CATUnicodeString_const____ptr64_const]
mov rdx, rax
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.JS0GROUP.dll_public:_class_CATUnicodeString____ptr64___cdecl_CATUnicodeString::operator_class_CATUnicodeString_const____ptr64____ptr64]
lea rcx, [rsp + 0x30]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::destructor_void____ptr64]
lea rcx, [rsp + 0x68]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::destructor_void____ptr64]
lea rcx, [rsp + 0x38]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATString::destructor_void____ptr64]
lea rcx, [rbp + 0x7c8]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::destructor_void____ptr64]
mov rcx, qword [0x14003abc8]
test rcx, rcx
je 0x140020273
lea rdx, [rbp + 0x7b8]
call qword [sym.imp.CXINSTUTIL.dll_public:_void___cdecl_CATInstallLog::WriteLogFile_class_CATUnicodeString____ptr64____ptr64]
lea rcx, [rbp + 0x7c0]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::destructor_void____ptr64]
lea rcx, [rbp + 0x7b8]
call qword [sym.imp.JS0GROUP.dll_public:_void___cdecl_CATUnicodeString::destructor_void____ptr64]
mov rbx, qword [rsp + 0x8b0]
add rsp, 0x8a0
pop rbp
ret