Function at 0x140047a08
Capabilities:
Get common file path

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r13
push r15
lea rbp, [rax - 0x4e8]
sub rsp, 0x5d0
mov rax, qword [0x14012bd38]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
mov rsi, rcx
call fcn.140077d4c
mov rcx, rax
xor r15d, r15d
test rax, rax
je 0x140048943
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x48], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x14004894e
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x40], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x140048959
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rbp - 0x80], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x140048964
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x60], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x14004896f
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x58], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x14004897a
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x78], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x140048985
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x50], rax
call fcn.140077d4c
mov rcx, rax
test rax, rax
je 0x140048938
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x70], 0x11c
mov qword [rbp - 0x68], r15
mov dword [rbp - 0x60], r15d
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp - 0x5c]
call fcn.1400b15e0
mov qword [rbp + 0xa4], r15
lea rcx, [rbp - 0x70]
call fcn.140048990
mov eax, dword [rbp - 0x60]
sub eax, 1
je 0x14004870f
cmp eax, 1
jne 0x140048810
mov r8d, dword [rbp - 0x6c]
cmp r8d, 3
jne 0x140047baa
mov r8d, dword [rbp - 0x68]
lea rdx, str.Windows_NT3._d
lea rcx, [rsp + 0x48]
call fcn.140002f84
jmp 0x140047da1
mov r9d, dword [rbp - 0x68]
cmp r8d, 4
jne 0x140047bd8
test r9d, r9d
jne 0x140047d90
lea rcx, str.Windows_NT4
call fcn.1400b6ca8
mov r8d, eax
lea rdx, str.Windows_NT4
jmp 0x140047d84
cmp r8d, 5
jne 0x140047c86
test r9d, r9d
jne 0x140047c02
lea rcx, str.Windows_2000
call fcn.1400b6ca8
mov r8d, eax
lea rdx, str.Windows_2000
jmp 0x140047d84
cmp r9d, 1
jne 0x140047c1f
lea rdi, str.Windows_XP
mov rcx, rdi
call fcn.1400b6ca8
mov r8d, eax
jmp 0x140047d81
cmp r9d, 2
jne 0x140047d90
lea ecx, [r9 + 0x57]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x140047c43
lea rdi, str.Windows_Server_2003_R2
jmp 0x140047d76
mov eax, 0x2000
cmp word [rbp + 0xa8], ax
jne 0x140047c5d
lea rdi, str.Windows_Storage_Server_2003
jmp 0x140047d76
cmp byte [rbp + 0xaa], 1
jne 0x140047c7a
call fcn.14004922c
test eax, eax
lea rdi, str.Windows_XP
jne 0x140047d76
lea rdi, str.Windows_Server_2003
jmp 0x140047d76
cmp r8d, 6
jne 0x140047d23
test r9d, r9d
jne 0x140047cb5
cmp byte [rbp + 0xaa], 1
lea rdi, str.Windows_Server_2008
jne 0x140047d76
lea rdi, str.Windows_Vista
jmp 0x140047d76
cmp r9d, 1
jne 0x140047cdb
cmp byte [rbp + 0xaa], r9b
lea rdi, str.Windows_Server_2008_R2
jne 0x140047d76
lea rdi, str.Windows_7
jmp 0x140047d76
cmp r9d, 2
jne 0x140047cfe
cmp byte [rbp + 0xaa], 1
lea rdi, str.Windows_Server_2012
jne 0x140047d76
lea rdi, str.Windows_8
jmp 0x140047d76
cmp r9d, 3
jne 0x140047d1d
cmp byte [rbp + 0xaa], 1
lea rdi, str.Windows_Server_2012_R2
jne 0x140047d76
lea rdi, str.Windows_8.1
jmp 0x140047d76
cmp r9d, 4
je 0x140047d29
cmp r8d, 0xa
jb 0x140047d90
cmp byte [rbp + 0xaa], 1
je 0x140047d5f
cmp dword [rbp - 0x64], 0x4f78
jb 0x140047d44
lea rdi, str.Windows_Server_2022
jmp 0x140047d76
cmp dword [rbp - 0x64], 0x4563
jb 0x140047d56
lea rdi, str.Windows_Server_2019
jmp 0x140047d76
lea rdi, str.Windows_Server_2016
jmp 0x140047d76
cmp dword [rbp - 0x64], 0x55ec
lea rdi, str.Windows_11
jae 0x140047d76
lea rdi, str.Windows_10
mov rcx, rdi
call fcn.1400b6ca8
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140002188
jmp 0x140047da1
lea rdx, str.Windows_NT__d._d
lea rcx, [rsp + 0x48]
call fcn.140002f84
cmp dword [rbp - 0x6c], 6
jb 0x14004829c
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x14004858e
lea rdx, str.GetProductInfo
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14004858e
mov dword [rsp + 0x68], r15d
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rbp - 0x68]
mov ecx, dword [rbp - 0x6c]
call rax
mov eax, dword [rsp + 0x68]
mov ecx, RegisterTypeLib
cmp eax, ecx
ja 0x14004821c
je 0x140048204
cmp eax, 0x11
ja 0x14004802b
je 0x140048013
cmp eax, 9
ja 0x140047f3c
je 0x140047f24
sub eax, 1
je 0x140047f0c
sub eax, 1
je 0x140047ef4
sub eax, 1
je 0x140047edc
sub eax, 1
je 0x140047ec4
sub eax, 1
je 0x140047eac
sub eax, 1
je 0x140047e94
sub eax, 1
je 0x140047e7c
cmp eax, 1
jne 0x14004858e
lea rcx, str.Datacenter__Full_installation_
call fcn.1400b6ca8
lea rdx, str.Datacenter__Full_installation_
jmp 0x140048581
lea rcx, str.Server_Standard__full_installation_
call fcn.1400b6ca8
lea rdx, str.Server_Standard__full_installation_
jmp 0x140048581
lea rcx, str.Business
call fcn.1400b6ca8
lea rdx, str.Business
jmp 0x140048581
lea rcx, str.Home_Basic_N
call fcn.1400b6ca8
lea rdx, str.Home_Basic_N
jmp 0x140048581
lea rcx, str.Enterprise
call fcn.1400b6ca8
lea rdx, str.Enterprise
jmp 0x140048581
lea rcx, str.Home_Premium
call fcn.1400b6ca8
lea rdx, str.Home_Premium
jmp 0x140048581
lea rcx, str.Home_Basic
call fcn.1400b6ca8
lea rdx, str.Home_Basic
jmp 0x140048581
lea rcx, str.Ultimate
call fcn.1400b6ca8
lea rdx, str.Ultimate
jmp 0x140048581
lea rcx, str.Small_Business_Server
call fcn.1400b6ca8
lea rdx, str.Small_Business_Server
jmp 0x140048581
sub eax, 0xa
je 0x140047ffb
sub eax, 1
je 0x140047fe3
sub eax, 1
je 0x140047fcb
sub eax, 1
je 0x140047fb3
sub eax, 1
je 0x140047f9b
sub eax, 1
je 0x140047f83
cmp eax, 1
jne 0x14004858e
lea rcx, str.Business_N
call fcn.1400b6ca8
lea rdx, str.Business_N
jmp 0x140048581
lea rcx, str.Datacenter_Enterprise_for_Itanium_based_Systems
call fcn.1400b6ca8
lea rdx, str.Datacenter_Enterprise_for_Itanium_based_Systems
jmp 0x140048581
lea rcx, str.Enterprise__Server_Core_installation_
call fcn.1400b6ca8
lea rdx, str.Enterprise__Server_Core_installation_
jmp 0x140048581
lea rcx, str.Server_Standard__core_installation_
call fcn.1400b6ca8
lea rdx, str.Server_Standard__core_installation_
jmp 0x140048581
lea rcx, str.Datacenter__Server_Core_installation_
call fcn.1400b6ca8
lea rdx, str.Datacenter__Server_Core_installation_
jmp 0x140048581
lea rcx, str.Starter
call fcn.1400b6ca8
lea rdx, str.Starter
jmp 0x140048581
lea rcx, str.Enterprise__Full_installation_
call fcn.1400b6ca8
lea rdx, str.Enterprise__Full_installation_
jmp 0x140048581
lea rcx, str.Web_Server
call fcn.1400b6ca8
lea rdx, str.Web_Server
jmp 0x140048581
cmp eax, 0x3c
ja 0x1400481de
je 0x1400481ec
cmp eax, 0x18
ja 0x140048117
je 0x1400480ff
sub eax, 0x12
je 0x1400480e7
sub eax, 1
je 0x1400480cf
sub eax, 1
je 0x1400480b7
sub eax, 1
je 0x14004809f
sub eax, 1
je 0x140048087
cmp eax, 1
jne 0x14004858e
lea rcx, str.Storage_Server_Enterprise
call fcn.1400b6ca8
lea rdx, str.Storage_Server_Enterprise
jmp 0x140048581
lea rcx, str.Storage_Server_Workgroup
call fcn.1400b6ca8
lea rdx, str.Storage_Server_Workgroup
jmp 0x140048581
lea rcx, str.Storage_Server_Standard
call fcn.1400b6ca8
lea rdx, str.Storage_Server_Standard
jmp 0x140048581
lea rcx, str.Storage_Server_Express
call fcn.1400b6ca8
lea rdx, str.Storage_Server_Express
jmp 0x140048581
lea rcx, str.Home_Server
call fcn.1400b6ca8
lea rdx, str.Home_Server
jmp 0x140048581
lea rcx, str.Cluster_Server
call fcn.1400b6ca8
lea rdx, str.Cluster_Server
jmp 0x140048581
lea rcx, str.Server_for_Small_Business
call fcn.1400b6ca8
lea rdx, str.Server_for_Small_Business
jmp 0x140048581
sub eax, 0x19
je 0x1400481c6
sub eax, 1
je 0x1400481ae
sub eax, 1
je 0x140048196
sub eax, 1
je 0x14004817e
sub eax, 0x14
je 0x140048168
cmp eax, 1
jne 0x14004858e
cmp dword [rbp - 0x68], 2
lea rdi, str.Pro_N
jae 0x140048155
lea rdi, str.Professional_N
mov rcx, rdi
call fcn.1400b6ca8
mov r8, rax
mov rdx, rdi
jmp 0x140048584
cmp dword [rbp - 0x68], 2
lea rdi, [0x1400f33b0]
jae 0x140048155
lea rdi, str.Professional
jmp 0x140048155
lea rcx, str.Ultimate_N
call fcn.1400b6ca8
lea rdx, str.Ultimate_N
jmp 0x140048581
lea rcx, str.Enterprise_N
call fcn.1400b6ca8
lea rdx, str.Enterprise_N
jmp 0x140048581
lea rcx, str.Home_Premium_N
call fcn.1400b6ca8
lea rdx, str.Home_Premium_N
jmp 0x140048581
lea rcx, str.Small_Business_Server_Premium
call fcn.1400b6ca8
lea rdx, str.Small_Business_Server_Premium
jmp 0x140048581
sub eax, 0x3d
je 0x1400481ec
cmp eax, 1
jne 0x14004858e
lea rcx, str.Essentials_Server
call fcn.1400b6ca8
lea rdx, str.Essentials_Server
jmp 0x140048581
lea rcx, str.Pro_for_Workstation
call fcn.1400b6ca8
lea rdx, str.Pro_for_Workstation
jmp 0x140048581
cmp eax, 0xa2
je 0x140048284
cmp eax, 0xa4
je 0x14004826c
cmp eax, 0xa5
je 0x140048254
cmp eax, 0xabcdabcd
jne 0x14004858e
lea rcx, str.Unlicensed
call fcn.1400b6ca8
lea rdx, str.Unlicensed
jmp 0x140048581
lea rcx, str.Pro_for_Education_N
call fcn.1400b6ca8
lea rdx, str.Pro_for_Education_N
jmp 0x140048581
lea rcx, str.Pro_for_Education
call fcn.1400b6ca8
lea rdx, str.Pro_for_Education
jmp 0x140048581
lea rcx, str.Pro_for_Workstation_N
call fcn.1400b6ca8
lea rdx, str.Pro_for_Workstation_N
jmp 0x140048581
cmp dword [rbp - 0x6c], 5
jne 0x14004858e
mov eax, dword [rbp - 0x68]
test eax, eax
jne 0x14004832c
mov al, byte [rbp + 0xaa]
cmp al, 1
jne 0x1400482ce
lea rdi, str.Professional
mov rcx, rdi
call fcn.1400b6ca8
mov rdx, rdi
jmp 0x140048581
cmp al, 3
jne 0x14004858e
mov al, byte [rbp + 0xa8]
test al, al
jns 0x1400482f8
lea rcx, str.DataCenter_Server
call fcn.1400b6ca8
lea rdx, str.DataCenter_Server
jmp 0x140048581
test al, 2
je 0x140048314
lea rcx, str.Advanced_Server
call fcn.1400b6ca8
lea rdx, str.Advanced_Server
jmp 0x140048581
lea rcx, str.Server
call fcn.1400b6ca8
lea rdx, str.Server
jmp 0x140048581
cmp eax, 1
jb 0x14004858e
movzx eax, word [rbp + 0xa8]
mov r13d, 0x200
test r13w, ax
je 0x14004835d
lea rcx, str.Home_Edition
call fcn.1400b6ca8
lea rdx, str.Home_Edition
jmp 0x1400483c6
test al, al
jns 0x140048376
lea rcx, str.Datacenter_Edition
call fcn.1400b6ca8
lea rdx, str.Datacenter_Edition
jmp 0x1400483c6
test al, 2
je 0x14004838f
lea rcx, str.Enterprise_Edition
call fcn.1400b6ca8
lea rdx, str.Enterprise_Edition
jmp 0x1400483c6
bt ax, 0xa
jae 0x1400483ab
lea rcx, str.Web_Edition
call fcn.1400b6ca8
lea rdx, str.Web_Edition
jmp 0x1400483c6
cmp byte [rbp + 0xaa], 1
jne 0x1400483d3
lea rdi, str.Professional
mov rcx, rdi
call fcn.1400b6ca8
mov rdx, rdi
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140002188
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x14004855f
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x2b0]
call fcn.1400b15e0
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0xb0]
call fcn.1400b15e0
mov edx, 0x104
lea rcx, [rbp + 0x2b0]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov edi, eax
lea r8, str.ehomeehshell.exe
mov edx, 0x104
lea rcx, [rbp + 0x2b0]
call fcn.1400c0a48
test edi, edi
je 0x14004858e
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x2b0]
call fcn.14004ba30
test eax, eax
je 0x14004858e
lea rcx, [rbp + 0xb0]
call fcn.1400b6ca8
mov r8d, eax
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x70]
call fcn.140002188
mov rbx, qword [rsp + 0x70]
cmp dword [rbx - 0x10], r15d
jl 0x14004858e
lea rdx, [0x1400f35e0]
mov rcx, rbx
call fcn.1400b2918
test rax, rax
je 0x14004858e
sub rax, rbx
sar rax, 1
test eax, eax
jne 0x14004858e
lea rcx, str.Media_Center
call fcn.1400b6ca8
mov r8d, eax
lea rdx, str.Media_Center
lea rcx, [rsp + 0x40]
call fcn.140002188
lea r8, [0x1400e02c0]
lea rdx, str.5.1.
lea rcx, [rsp + 0x70]
call fcn.14000acb0
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
call fcn.1400c48fc
movaps xmm2, xmm0
movsd xmm1, qword [str._npP]
comisd xmm1, xmm0
jb 0x14004851a
lea rcx, str.2002
call fcn.1400b6ca8
lea rdx, str.2002
jmp 0x140048550
movsd xmm0, qword [0x1400f3738]
comisd xmm0, xmm2
jb 0x14004853d
lea rcx, str.2004
call fcn.1400b6ca8
lea rdx, str.2004
jmp 0x140048550
lea rcx, str.2005
call fcn.1400b6ca8
lea rdx, str.2005
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140002e70
jmp 0x14004858e
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x14004858e
lea rcx, str.Tablet_PC
call fcn.1400b6ca8
lea rdx, str.Tablet_PC
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140002188
lea rcx, [rbp - 0x5c]
call fcn.1400b6ca8
mov r8d, eax
lea rdx, [rbp - 0x5c]
lea rcx, [rbp - 0x80]
call fcn.140002188
lea r8, [0x1400f365c]
lea rdx, str.Service_Pack
lea rcx, [rbp - 0x80]
call fcn.14000acb0
mov r9d, dword [rbp - 0x68]
mov r8d, dword [rbp - 0x6c]
lea rdx, str._d._d
lea rcx, [rsp + 0x60]
call fcn.140002f84
mov r8d, dword [rbp - 0x64]
lea rdx, [0x1400e1360]
lea rcx, [rsp + 0x58]
call fcn.140002f84
call fcn.14004922c
test eax, eax
je 0x14004860a
lea rcx, [0x1400e0f28]
call fcn.1400b6ca8
lea rdx, [0x1400e0f28]
jmp 0x140048677
call fcn.1400489fc
test eax, eax
je 0x140048628
lea rcx, str.ARM32
call fcn.1400b6ca8
lea rdx, str.ARM32
jmp 0x140048677
call fcn.140048a74
test eax, eax
je 0x140048646
lea rcx, str.ARM64
call fcn.1400b6ca8
lea rdx, str.ARM64
jmp 0x140048677
call fcn.140048e30
test eax, eax
je 0x140048664
lea rcx, str.IA64
call fcn.1400b6ca8
lea rdx, str.IA64
jmp 0x140048677
lea rcx, [0x1400f36b8]
call fcn.1400b6ca8
lea rdx, [0x1400f36b8]
mov r8d, eax
lea rcx, [rsp + 0x50]
call fcn.140002188
mov rax, qword [rbp - 0x80]
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
cmp dword [rax - 0x10], r15d
je 0x1400486ce
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rdx, str._s__s__s___s_Build__s____s_
lea rcx, [rsp + 0x78]
call fcn.140002f84
jmp 0x1400486fd
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
lea rdx, str._s__s___s_Build__s____s_
lea rcx, [rsp + 0x78]
call fcn.140002f84
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.14000179c
jmp 0x140048810
mov eax, dword [rbp - 0x68]
test eax, eax
je 0x140048763
cmp eax, 0xa
je 0x140048732
cmp eax, 0x5a
je 0x140048729
lea rdi, str.Windows_9x
jmp 0x1400487a5
lea rdi, str.Windows_Me
jmp 0x1400487a5
mov eax, 0x8ae
cmp word [rbp - 0x64], ax
jb 0x140048746
lea rdi, str.Windows_98_SE
jmp 0x1400487a5
mov eax, 0x7d0
cmp word [rbp - 0x64], ax
jb 0x14004875a
lea rdi, str.Windows_98_SP1
jmp 0x1400487a5
lea rdi, str.Windows_98
jmp 0x1400487a5
mov ecx, 0x4be
movzx eax, word [rbp - 0x64]
cmp ax, cx
jb 0x14004877a
lea rdi, str.Windows_95_OSR2.5
jmp 0x1400487a5
mov ecx, 0x4bc
cmp ax, cx
jb 0x14004878d
lea rdi, str.Windows_95_OSR2.1
jmp 0x1400487a5
mov ecx, 0x457
cmp ax, cx
lea rdi, str.Windows_95_OSR2
je 0x1400487a5
lea rdi, str.Windows_95
mov rcx, rdi
call fcn.1400b6ca8
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140002188
mov r9d, dword [rbp - 0x68]
mov r8d, dword [rbp - 0x6c]
lea rdx, str._d._d
lea rcx, [rsp + 0x60]
call fcn.140002f84
movzx r8d, word [rbp - 0x64]
lea rdx, [0x1400e1360]
lea rcx, [rsp + 0x58]
call fcn.140002f84
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x60]
mov r8, qword [rsp + 0x48]
lea rdx, str._s___s_Build__s_
mov rcx, rsi
call fcn.140002f84
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14004882e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14004884e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14004886e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14004888e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400488ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400488cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400488ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14004890c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.1400b0010
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop rbp
ret
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
nop
mov ecx, 0x80004005
call fcn.140001860
int3