Function at 0x140003d30
Capabilities:
Delete file
Get common file path
Print debug messages
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0xa88
mov rax, qword [0x140049fa0]
xor rax, rsp
mov qword [rsp + 0x9f0], rax
mov rax, qword [0x14004c138]
test rax, rax
je 0x140005162
cmp dword [rax + 0x2c], 1
jb 0x140005162
lea rdx, [rsp + 0x8e0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x140005155
lea r9, [rsp + 0x8e0]
lea rdx, str.TxSnp
lea rcx, [rsp + 0x8e0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
je 0x140005155
lea rdx, [0x140039124]
lea rcx, [rsp + 0x8e0]
mov qword [rsp + 0xa60], r15
call fcn.14001dc10
test rax, rax
mov r15, rax
mov qword [rsp + 0x78], rax
je 0x140003dee
call fcn.140002fc0
test eax, eax
jne 0x140003e10
mov rcx, r15
call fcn.14001d780
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
mov r15, qword [rsp + 0xa60]
mov rcx, qword [rsp + 0x9f0]
xor rcx, rsp
call fcn.14001b2b0
add rsp, 0xa88
ret
mov qword [rsp + 0xa90], rbx
mov qword [rsp + 0xa98], rbp
mov qword [rsp + 0xaa0], rsi
mov qword [rsp + 0xa80], rdi
mov qword [rsp + 0xa78], r12
mov qword [rsp + 0xa70], r13
mov eax, 0x100
mov qword [rsp + 0xa68], r14
mov rcx, rax
mov qword [rsp + 0x68], rax
movaps xmmword [rsp + 0xa50], xmm6
movaps xmmword [rsp + 0xa20], xmm9
movaps xmmword [rsp + 0xa10], xmm10
call fcn.14001af10
xor esi, esi
lea rcx, str._rtf1_ansi_ansicpg1252deff0deflang1033
mov rdx, r15
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x84], esi
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x88], esi
mov dword [rsp + 0x8c], esi
call fcn.14001e1f0
lea rdx, [0x1400390f4]
mov rcx, r15
call fcn.14001e000
mov ecx, dword [0x14004c18c]
mov r12d, 1
shl rcx, 5
mov r14d, r12d
call fcn.14001af10
xor ecx, ecx
mov rbx, rax
mov qword [rsp + 0x98], rax
call fcn.140002e70
lea r13, [rax + 0x48]
lea rcx, str._fonttbl_
mov rdx, r15
mov qword [rbx + 8], r13
mov rdi, rax
call fcn.14001e1f0
lea rdx, str._f1
mov rcx, r15
call fcn.14001e000
mov dl, byte [rdi + 0x3f]
lea r8, [0x140000000]
and edx, 0xf0
cmp edx, 0x50
ja case.0x140003f35.6
movsxd rax, edx
movzx eax, byte [r8 + rax + 0x5198]
mov ecx, dword [r8 + rax*4 + 0x517c]
add rcx, r8
jmp rcx
lea rdx, str._fdecor
mov rcx, r15
call fcn.14001e000
jmp case.0x140003f35.6
lea rdx, str._fnil
mov rcx, r15
call fcn.14001e000
jmp case.0x140003f35.6
lea rdx, str._fmodern
mov rcx, r15
call fcn.14001e000
jmp case.0x140003f35.6
lea rdx, str._fRoman
mov rcx, r15
call fcn.14001e000
jmp case.0x140003f35.6
lea rdx, str._fscript
mov rcx, r15
call fcn.14001e000
jmp case.0x140003f35.6
lea rdx, str._fswiss
mov rcx, r15
call fcn.14001e000
movzx r8d, byte [rdi + 0x40]
lea rdx, str._fcharset_d__s_
mov r9, r13
mov rcx, r15
call fcn.14001e000
lea rcx, [rsp + 0x4d0]
xor edx, edx
mov r8d, 0x400
call fcn.14001b8f0
mov ebp, esi
mov rsi, r12
cmp dword [0x14004c18c], ebp
jbe 0x140004161
mov ecx, ebp
call fcn.140002e70
mov rdi, r13
lea rbx, [rax + 0x48]
mov r12, rax
mov rcx, rbx
sub rdi, rbx
nop
movzx eax, byte [rcx]
movzx edx, byte [rcx + rdi]
sub eax, edx
jne 0x140004003
add rcx, 1
test edx, edx
jne 0x140003ff0
test eax, eax
je 0x14000414c
mov r9d, 1
xor r8d, r8d
cmp r9, rsi
mov rdi, r9
jg 0x140004077
mov r15, qword [rsp + 0x98]
nop
nop
nop
mov rdx, qword [r15 + rdi*8]
mov rax, rbx
sub rdx, rbx
nop
nop
movzx ecx, byte [rax]
cmp cl, byte [rax + rdx]
jne 0x140004053
add rax, r9
test cl, cl
jne 0x140004040
xor eax, eax
jmp 0x140004058
sbb eax, eax
sbb eax, 0xffffffff
cdq
xor eax, edx
cmp eax, edx
cmove r8d, r9d
add rdi, r9
cmp rdi, rsi
jle 0x140004030
test r8d, r8d
mov r15, qword [rsp + 0x78]
jne 0x14000414c
mov rax, qword [rsp + 0x98]
add r14d, r9d
add rsi, r9
lea rdx, str._f_d
mov rcx, r15
mov r8d, r14d
mov qword [rax + rsi*8], rbx
mov r13, rbx
call fcn.14001e000
mov dl, byte [r12 + 0x3f]
and edx, 0xf0
cmp edx, 0x50
ja case.0x1400040ce.1
movsxd rax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x5208]
mov ecx, dword [rdx + rax*4 + 0x51ec]
add rcx, rdx
jmp rcx
lea rdx, str._fdecor
mov rcx, r15
call fcn.14001e000
jmp case.0x1400040ce.1
lea rdx, str._fnil
mov rcx, r15
call fcn.14001e000
jmp case.0x1400040ce.1
lea rdx, str._fmodern
mov rcx, r15
call fcn.14001e000
jmp case.0x1400040ce.1
lea rdx, str._fRoman
mov rcx, r15
call fcn.14001e000
jmp case.0x1400040ce.1
lea rdx, str._fscript
mov rcx, r15
call fcn.14001e000
jmp case.0x1400040ce.1
lea rdx, str._fswiss
mov rcx, r15
call fcn.14001e000
movzx r8d, byte [r12 + 0x40]
lea rdx, str._fcharset_d__s_
mov r9, rbx
mov rcx, r15
call fcn.14001e000
add ebp, 1
cmp ebp, dword [0x14004c18c]
jb 0x140003fd8
mov r12d, 1
lea rcx, [0x14003907c]
mov rdx, r15
call fcn.14001e1f0
xor ecx, ecx
mov ebx, r12d
call fcn.140002e70
mov r13d, dword [0x14004c18c]
lea ecx, [r13 + r13]
mov rdi, rax
shl rcx, 2
call fcn.14001af10
mov esi, dword [rdi + 0x44]
xor r12d, r12d
test esi, esi
mov r15, rax
mov qword [rsp + 0xa0], rax
mov dword [rax + 4], esi
jne 0x1400041b8
mov edx, 1
mov dword [rsp + 0x58], edx
mov r12d, edx
jmp 0x1400041c8
mov edx, dword [rsp + 0x80]
mov dword [rsp + 0x58], edx
mov edx, 1
movzx eax, byte [rdi + 0x45]
movzx ecx, byte [rdi + 0x46]
add ecx, eax
movzx eax, sil
add ecx, eax
cmp ecx, 0x28a
jle 0x1400041f1
mov dword [rsp + 0x58], edx
mov r12d, edx
mov dword [r15 + 4], 0
xor esi, esi
xor ebp, ebp
test r13d, r13d
mov rdi, rdx
je 0x140004296
lea r13d, [rbp + 1]
mov ecx, ebp
call fcn.140002e70
mov r8d, dword [rax + 0x44]
cmp r8d, esi
je 0x140004287
movzx ecx, byte [rax + 0x45]
movzx edx, byte [rax + 0x46]
add edx, ecx
movzx ecx, r8b
add edx, ecx
cmp edx, 0x28a
jle 0x140004246
test r12d, r12d
jne 0x140004287
add rdi, 1
add ebx, 1
xor esi, esi
mov dword [r15 + rdi*4], r12d
mov r12d, r13d
mov dword [rsp + 0x58], ebx
jmp 0x140004287
mov edx, 1
xor ecx, ecx
cmp rdx, rdi
mov rax, rdx
jg 0x140004273
nop
nop
nop
cmp r8d, dword [r15 + rax*4]
cmove ecx, edx
add rax, rdx
cmp rax, rdi
jle 0x140004260
test ecx, ecx
jne 0x140004284
add ebx, edx
add rdi, rdx
mov esi, r8d
mov dword [r15 + rdi*4], r8d
mov r13, rdx
jmp 0x140004287
mov r13, rdx
add ebp, 1
cmp ebp, dword [0x14004c18c]
jb 0x140004203
mov r13, qword [rsp + 0x78]
lea rcx, str.colortbl_
mov rdx, r13
call fcn.14001e1f0
mov r12d, 1
movsxd rbx, ebx
cmp r12, rbx
mov rdi, r12
mov qword [rsp + 0xb8], rbx
jg 0x1400042ef
movzx eax, byte [r15 + rdi*4 + 2]
movzx r9d, byte [r15 + rdi*4 + 1]
movzx r8d, byte [r15 + rdi*4]
lea rdx, str._red_dgreen_d_blue_d_
mov rcx, r13
mov dword [rsp + 0x20], eax
call fcn.14001e000
add rdi, r12
cmp rdi, rbx
jle 0x1400042c3
lea rcx, [0x140039050]
mov rdx, r13
call fcn.14001e1f0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov edx, 0x58
mov rcx, rax
mov rbx, rax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, 0x5a
mov rcx, rbx
mov dword [rsp + 0x48], eax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov rdx, rbx
xor ecx, ecx
mov edi, eax
call qword [sym.imp.USER32.dll_ReleaseDC]
xor ecx, ecx
call fcn.140002e70
xor ebp, ebp
movsxd r14, r14d
mov ecx, dword [rax + 0xc]
movsd xmm10, qword [0x140039048]
movsd xmm6, qword [0x140038f48]
cvtsi2sd xmm9, edi
sub ecx, dword [rax + 0x18]
cmp dword [0x14004c18c], ebp
mov dword [rsp + 0x54], ebp
cvtsi2sd xmm0, ecx
mov rdi, rbp
mov qword [rsp + 0xb0], rbp
mov esi, ebp
mov dword [rsp + 0x44], ebp
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0xc0], r14
mulsd xmm0, xmm10
divsd xmm0, xmm9
addsd xmm0, xmm6
cvttsd2si ebx, xmm0
mov dword [rsp + 0x4c], ebx
jbe 0x140005008
movaps xmmword [rsp + 0xa40], xmm7
movsd xmm7, qword [0x140039040]
movaps xmmword [rsp + 0xa30], xmm8
movsd xmm8, qword [0x140039038]
movaps xmmword [rsp + 0xa00], xmm11
movsd xmm11, qword [0x140038f50]
jmp 0x1400043e8
mov r14, qword [rsp + 0xc0]
mov ecx, esi
call fcn.140002e70
test esi, esi
mov rbp, rax
mov qword [rsp + 0xa8], rax
jne 0x140004447
lea rdx, [0x140039030]
mov rcx, r13
call fcn.14001e000
lea rdx, [rbp + 0x48]
mov rcx, r13
mov qword [rsp + 0xb0], rdx
lea rdx, str.cf1
call fcn.14001e000
mov eax, dword [r15 + 4]
lea rdx, str._fs_d
mov r8d, ebx
mov rcx, r13
mov dword [rsp + 0x54], eax
call fcn.14001e000
jmp 0x1400045cf
lea r12, [rax + 0x48]
mov rax, rdi
mov rdi, r12
sub rdi, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + rdi]
sub edx, ecx
jne 0x140004467
add rax, 1
test ecx, ecx
jne 0x140004454
test edx, edx
je 0x1400044fe
mov edx, 1
cmp rdx, r14
mov esi, edx
mov rbx, rdx
jg 0x1400044f8
mov r15, qword [rsp + 0x98]
nop
nop
nop
mov rbp, qword [r15 + rbx*8]
mov rdi, r12
mov rax, rbp
sub rdi, rbp
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + rdi]
sub edx, ecx
jne 0x1400044b3
add rax, 1
test ecx, ecx
jne 0x1400044a0
test edx, edx
jne 0x1400044d1
lea rdx, [0x140039018]
mov r8d, esi
mov rcx, r13
call fcn.14001e000
mov qword [rsp + 0xb0], rbp
add rbx, 1
add esi, 1
cmp rbx, r14
jle 0x140004490
mov rbp, qword [rsp + 0xa8]
mov r15, qword [rsp + 0xa0]
mov ebx, dword [rsp + 0x4c]
mov edx, 1
jmp 0x140004503
mov ebx, dword [rsp + 0x4c]
jmp 0x140004503
mov edx, 1
mov r14d, dword [rsp + 0x54]
cmp r14d, dword [rbp + 0x44]
je 0x14000458f
movzx eax, byte [rbp + 0x45]
movzx ecx, byte [rbp + 0x46]
add ecx, eax
movzx eax, byte [rbp + 0x44]
add ecx, eax
cmp ecx, 0x28a
jle 0x14000454b
test r14d, r14d
je 0x14000458f
mov r8d, dword [rsp + 0x58]
lea rdx, str.cf_d
mov rcx, r13
call fcn.14001e000
xor eax, eax
mov dword [rsp + 0x54], eax
jmp 0x14000458f
mov r12, qword [rsp + 0xb8]
mov esi, edx
mov rdi, rdx
cmp rdx, r12
jg 0x14000458f
nop
mov ebx, dword [r15 + rdi*4]
cmp ebx, dword [rbp + 0x44]
jne 0x14000457f
lea rdx, str.cf_d
mov r8d, esi
mov rcx, r13
call fcn.14001e000
mov dword [rsp + 0x54], ebx
add rdi, 1
add esi, 1
cmp rdi, r12
jle 0x140004560
mov ebx, dword [rsp + 0x4c]
mov eax, dword [rbp + 0xc]
sub eax, dword [rbp + 0x18]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm10
divsd xmm0, xmm9
addsd xmm0, xmm6
cvttsd2si edi, xmm0
cmp edi, ebx
je 0x1400045cb
lea rdx, str._fs_d
mov r8d, edi
mov rcx, r13
call fcn.14001e000
mov esi, dword [rsp + 0x44]
mov dword [rsp + 0x4c], edi
jmp 0x1400045cf
mov esi, dword [rsp + 0x44]
xor r12d, r12d
cmp dword [0x14004c190], r12d
mov dword [rsp + 0x64], r12d
jle 0x140004a45
mov r14d, dword [0x14004c188]
xor r15d, r15d
nop
mov rbx, qword [0x14004c1a8]
cmp esi, dword [r15 + rbx]
jne 0x140004a23
movzx ecx, word [rbp + 0x68]
mov edi, dword [rbp + 4]
mov r8d, 0x400
sub edi, r14d
xor ebp, ebp
xor esi, esi
lea eax, [rdi + rdi*4]
add eax, eax
cdq
idiv ecx
lea rcx, [rsp + 0xd0]
xor edx, edx
mov r13d, eax
mov dword [rsp + 0x80], eax
call fcn.14001b8f0
test r13d, r13d
jle 0x140004671
mov r10d, dword [rsp + 0x48]
cvtsi2sd xmm1, edi
cvtsi2sd xmm0, r10d
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + 0xd0], eax
mov eax, 1
mov ebp, eax
mov rsi, rax
jmp 0x140004676
mov r10d, dword [rsp + 0x48]
mov eax, dword [0x14004c190]
add eax, 0xffffffff
cmp r12d, eax
jge 0x14000468b
mov eax, dword [r15 + rbx + 4]
jmp 0x140004691
mov eax, dword [0x14004c18c]
mov edx, dword [rsp + 0x44]
mov r8, qword [rsp + 0x90]
lea ebx, [rax - 1]
mov eax, ebx
mov r12d, edx
mov r13, r8
sub eax, edx
cmp eax, 4
jl 0x140004888
mov rax, qword [0x14004c1a0]
lea rcx, [r8 + r8*4]
lea rdi, [rax + rcx*4 + 4]
mov eax, ebx
sub eax, edx
sub eax, 4
shr eax, 2
add eax, 1
mov r11d, eax
lea r12d, [rdx + rax*4]
lea r13, [r8 + rax*4]
nop
nop
mov r8d, dword [rdi + 0x14]
movzx eax, word [rdi + 0xe]
mov edx, r8d
sub edx, eax
sub edx, dword [rdi]
test edx, edx
jle 0x14000473f
movzx ecx, word [rdi + 0xc]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
cmp eax, 1
jle 0x14000473f
cmp rsi, 0xff
jge 0x14000473f
mov eax, r8d
cvtsi2sd xmm0, r10d
add ebp, 1
sub eax, r14d
add rsi, 1
cvtsi2sd xmm1, eax
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + rsi*4 + 0xcc], eax
mov r9d, dword [rdi + 0x28]
movzx eax, word [rdi + 0x22]
mov edx, r9d
sub edx, eax
sub edx, r8d
test edx, edx
jle 0x14000479f
movzx ecx, word [rdi + 0x20]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
cmp eax, 1
jle 0x14000479f
cmp rsi, 0xff
jge 0x14000479f
mov eax, r9d
cvtsi2sd xmm0, r10d
add ebp, 1
sub eax, r14d
add rsi, 1
cvtsi2sd xmm1, eax
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + rsi*4 + 0xcc], eax
mov r10d, dword [rdi + 0x3c]
movzx eax, word [rdi + 0x36]
mov edx, r10d
sub edx, eax
sub edx, r9d
test edx, edx
jle 0x140004802
movzx ecx, word [rdi + 0x34]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
cmp eax, 1
jle 0x140004802
cmp rsi, 0xff
jge 0x140004802
mov eax, r10d
add ebp, 1
sub eax, r14d
add rsi, 1
cvtsi2sd xmm1, eax
mov eax, dword [rsp + 0x48]
cvtsi2sd xmm0, eax
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + rsi*4 + 0xcc], eax
mov r8d, dword [rdi + 0x50]
movzx eax, word [rdi + 0x4a]
mov edx, r8d
sub edx, eax
sub edx, r10d
test edx, edx
jle 0x140004875
movzx ecx, word [rdi + 0x48]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
cmp eax, 1
jle 0x14000486e
cmp rsi, 0xff
jge 0x140004867
mov r10d, dword [rsp + 0x48]
sub r8d, r14d
add ebp, 1
add rsi, 1
cvtsi2sd xmm1, r8d
cvtsi2sd xmm0, r10d
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + rsi*4 + 0xcc], eax
jmp 0x14000487a
mov r10d, dword [rsp + 0x48]
jmp 0x14000487a
mov r10d, dword [rsp + 0x48]
jmp 0x14000487a
mov r10d, dword [rsp + 0x48]
add rdi, 0x50
sub r11, 1
jne 0x1400046e0
cmp r12d, ebx
jge 0x14000490b
mov rax, qword [0x14004c1a0]
lea rcx, [r13 + r13*4]
sub ebx, r12d
lea rcx, [rax + rcx*4 + 4]
movsxd r9, ebx
mov edi, dword [rcx + 0x14]
movzx eax, word [rcx + 0xe]
lea r8, [rcx + 0x14]
mov edx, edi
sub edx, eax
sub edx, dword [rcx]
test edx, edx
jle 0x140004902
movzx ecx, word [rcx + 0xc]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
cmp eax, 1
jle 0x140004902
cmp rsi, 0xff
jge 0x140004902
sub edi, r14d
cvtsi2sd xmm0, r10d
add ebp, 1
add rsi, 1
cvtsi2sd xmm1, edi
mulsd xmm1, xmm7
divsd xmm1, xmm0
mulsd xmm1, xmm8
addsd xmm1, xmm6
cvttsd2si eax, xmm1
mov dword [rsp + rsi*4 + 0xcc], eax
sub r9, 1
mov rcx, r8
jne 0x1400048a4
test ebp, ebp
je 0x140004992
xor edx, edx
xor ecx, ecx
test ebp, ebp
movsxd rbx, ebp
jle 0x14000493c
nop
mov eax, dword [rsp + rcx*4 + 0x4d0]
cmp dword [rsp + rcx*4 + 0xd0], eax
jne 0x14000493c
add rcx, 1
add edx, 1
cmp rcx, rbx
jl 0x140004920
cmp edx, ebp
jge 0x140004999
mov r13, qword [rsp + 0x78]
lea rdx, str.pard
mov rcx, r13
call fcn.14001e000
xor edi, edi
test ebp, ebp
jle 0x140004989
nop
nop
mov r8d, dword [rsp + rdi*4 + 0xd0]
lea rdx, str._tx_d
mov rcx, r13
call fcn.14001e000
add rdi, 1
cmp rdi, rbx
jl 0x140004960
mov r14d, dword [0x14004c188]
jmp 0x14000499e
mov r14d, dword [0x14004c188]
jmp 0x14000499e
mov r13, qword [rsp + 0x78]
jmp 0x14000499e
mov r13, qword [rsp + 0x78]
lea rcx, [rsp + 0x4d0]
lea rdx, [rsp + 0xd0]
mov r8d, 0x400
call fcn.14001c500
cmp dword [rsp + 0x80], 0
jle 0x140004a12
cmp dword [rsp + 0x40], 0
mov dword [rsp + 0x50], 1
je 0x1400049e9
lea rcx, str.ul0
mov rdx, r13
call fcn.14001e1f0
mov dword [rsp + 0x40], 0
lea rdx, str._tab
mov rcx, r13
call fcn.14001e000
mov r14d, dword [0x14004c188]
mov r12d, dword [rsp + 0x64]
mov rbp, qword [rsp + 0xa8]
mov esi, dword [rsp + 0x44]
jmp 0x140004a23
mov r12d, dword [rsp + 0x64]
mov rbp, qword [rsp + 0xa8]
mov esi, dword [rsp + 0x44]
add r12d, 1
add r15, 4
cmp r12d, dword [0x14004c190]
mov dword [rsp + 0x64], r12d
jl 0x1400045f0
mov r15, qword [rsp + 0xa0]
movzx eax, byte [rbp + 0x3c]
cmp dword [rsp + 0x84], eax
je 0x140004a7e
test eax, eax
lea r8, [0x140038fec]
lea rdi, [0x140038fea]
lea rdx, str.i_s
mov rcx, r13
cmovne r8, rdi
mov dword [rsp + 0x84], eax
call fcn.14001e000
jmp 0x140004a85
lea rdi, [0x140038fea]
movzx eax, byte [rbp + 0x3d]
mov r12d, dword [rsp + 0x40]
cmp r12d, eax
je 0x140004ab6
test eax, eax
lea r8, [0x140038fec]
lea rdx, str.ul_s
mov rcx, r13
cmovne r8, rdi
mov r12d, eax
mov dword [rsp + 0x40], eax
call fcn.14001e000
movzx eax, byte [rbp + 0x3e]
cmp dword [rsp + 0x88], eax
je 0x140004ae6
test eax, eax
lea r8, [0x140038fec]
lea rdx, str._strike_s
mov rcx, r13
cmovne r8, rdi
mov dword [rsp + 0x88], eax
call fcn.14001e000
xor eax, eax
cmp dword [rbp + 0x28], 0x258
setg al
cmp dword [rsp + 0x8c], eax
je 0x140004b1e
test eax, eax
lea r8, [0x140038fec]
lea rdx, str._b_s
mov rcx, r13
cmovne r8, rdi
mov dword [rsp + 0x8c], eax
call fcn.14001e000
mov dword [rsp + 0x5c], 0
movzx edi, word [rbp]
lea rsi, [rbp + 0x6c]
call qword [sym.imp.KERNEL32.dll_GetACP]
lea r9d, [rdi + 1]
mov r8, rsi
mov ecx, eax
lea rax, [rsp + 0x5c]
mov edx, 0x400
mov qword [rsp + 0x38], rax
lea rax, [0x140038fc0]
mov qword [rsp + 0x30], rax
xor eax, eax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
cmp dword [rsp + 0x68], ebx
jg 0x140004b94
mov rcx, qword [rsp + 0x70]
lea eax, [rbx + 0x100]
movsxd rdx, eax
mov qword [rsp + 0x68], rax
call fcn.14001b100
mov r14, rax
mov qword [rsp + 0x70], rax
jmp 0x140004b99
mov r14, qword [rsp + 0x70]
cmp dword [rsp + 0x5c], 0
jne 0x140004c55
movzx edi, word [rbp]
call qword [sym.imp.KERNEL32.dll_GetACP]
xor ebp, ebp
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
lea r9d, [rdi + 1]
mov ecx, eax
mov r8, rsi
xor edx, edx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r14
mov byte [rbx + r14 - 1], bpl
repne scasb al, byte [rdi]
not rcx
lea eax, [rcx + rcx]
cmp dword [rsp + 0x68], eax
jg 0x140004c08
movsxd rdx, eax
mov rcx, r14
mov qword [rsp + 0x68], rax
call fcn.14001b100
mov r14, rax
mov qword [rsp + 0x70], rax
cmp byte [r14], bpl
mov rsi, r14
je 0x140004e24
movzx eax, byte [rsi]
cmp al, 0x5c
je 0x140004c23
cmp al, 0x7d
je 0x140004c23
cmp al, 0x7b
jne 0x140004c47
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, rsi
repne scasb al, byte [rdi]
mov rdx, rsi
not rcx
mov r8, rcx
lea rcx, [rsi + 1]
call fcn.14001c500
mov byte [rsi], 0x5c
add rsi, 1
add rsi, 1
cmp byte [rsi], bpl
jne 0x140004c14
jmp 0x140004e24
mov byte [r14], 0
xor ebx, ebx
mov word [rsp + 0x62], 0
cmp word [rbp], bx
jbe 0x140004e22
mov r15, qword [rsp + 0x68]
lea r12d, [rbx + 1]
lea r13, [0x140000000]
nop
movzx eax, word [rsi]
mov word [rsp + 0x60], ax
xor eax, eax
mov qword [rsp + 0x8d0], rax
mov qword [rsp + 0x8d8], rax
call qword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, eax
lea rax, [rsp + 0x5c]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x38], rax
lea rax, [0x140038fc0]
mov r9d, r12d
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x8d0]
mov edx, 0x400
mov dword [rsp + 0x28], 0x10
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
je 0x140004def
cmp dword [rsp + 0x5c], 0
je 0x140004d0b
movzx r8d, word [rsp + 0x60]
lea rdx, str.u_d_
lea rcx, [rsp + 0x8d0]
call fcn.14001def0
jmp 0x140004d7d
mov rax, qword [rsp + 0x8d0]
cmp al, 0x5c
je 0x140004d5f
cmp al, 0x7b
je 0x140004d3f
cmp al, 0x7d
jne 0x140004d7d
movzx eax, word [r13 + 0x38fb4]
lea rcx, [rsp + 0x8d0]
mov word [rcx], ax
movzx eax, byte [r13 + 0x38fb6]
mov byte [rcx + 2], al
jmp 0x140004d7d
movzx eax, word [r13 + 0x38fb0]
lea rcx, [rsp + 0x8d0]
mov word [rcx], ax
movzx eax, byte [r13 + 0x38fb2]
mov byte [rcx + 2], al
jmp 0x140004d7d
movzx eax, word [r13 + 0x38fac]
lea rcx, [rsp + 0x8d0]
mov word [rcx], ax
movzx eax, byte [r13 + 0x38fae]
mov byte [rcx + 2], al
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x8d0]
repne scasb al, byte [rdi]
mov rdi, r14
not rcx
lea rdx, [rcx - 1]
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
not rcx
lea eax, [rcx + rdx]
cmp r15d, eax
jg 0x140004dbe
lea r15d, [r15 + rdx + 0x100]
mov rcx, r14
movsxd rdx, r15d
call fcn.14001b100
mov r14, rax
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r14
repne scasb al, byte [rdi]
xor ecx, ecx
lea rdx, [rsp + 0x8d0]
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, r12
test al, al
jne 0x140004de0
movzx eax, word [rbp]
add ebx, r12d
add rsi, 2
cmp ebx, eax
jl 0x140004c80
mov r13, qword [rsp + 0x78]
mov r12d, dword [rsp + 0x40]
mov qword [rsp + 0x68], r15
mov r15, qword [rsp + 0xa0]
mov qword [rsp + 0x70], r14
xor ebp, ebp
jmp 0x140004e24
xor ebp, ebp
mov rdx, r13
mov rcx, r14
call fcn.14001e1f0
mov edx, dword [0x14004c18c]
mov esi, dword [rsp + 0x44]
add edx, 0xffffffff
cmp esi, edx
jae 0x140004fb3
mov r8, qword [0x14004c1a0]
mov rbx, qword [rsp + 0x90]
lea rdi, [rbx + rbx*4]
movzx ecx, word [r8 + rdi*4 + 0x20]
movzx r10d, word [r8 + rdi*4 + 0xc]
mov r11d, dword [r8 + rdi*4 + 8]
mov r9d, dword [r8 + rdi*4 + 0x1c]
mov eax, r11d
sub eax, r9d
cdq
xor eax, edx
sub eax, edx
cmp r10d, ecx
cmovl ecx, r10d
cvtsi2sd xmm0, ecx
mulsd xmm0, xmm11
addsd xmm0, xmm6
cvttsd2si ecx, xmm0
cmp eax, ecx
jg 0x140004f2e
movzx eax, word [r8 + rdi*4 + 0x12]
mov edx, dword [r8 + rdi*4 + 0x18]
sub edx, eax
sub edx, dword [r8 + rdi*4 + 4]
test edx, edx
jle 0x140004fbb
movzx ecx, word [r8 + rdi*4 + 0x10]
lea eax, [rdx + rdx*4]
add eax, eax
cdq
idiv ecx
test eax, eax
je 0x140004fbb
cmp eax, 2
jge 0x140004efa
test eax, eax
jle 0x140004fbb
mov edi, eax
nop
nop
nop
lea rcx, [0x140038fa8]
mov rdx, r13
call fcn.14001e1f0
sub rdi, 1
jne 0x140004ee0
jmp 0x140004fbb
test r12d, r12d
mov dword [rsp + 0x50], 1
je 0x140004f1a
lea rcx, str.ul0
mov rdx, r13
call fcn.14001e1f0
mov dword [rsp + 0x40], ebp
lea rdx, str._tab
mov rcx, r13
call fcn.14001e000
jmp 0x140004fbb
sub r9d, r11d
cmp r10d, r9d
jge 0x140004f86
cvtsi2sd xmm1, r9d
cvtsi2sd xmm0, r10d
divsd xmm1, xmm0
cvttsd2si eax, xmm1
cmp eax, 1
jl 0x140004fbb
mov dword [rsp + 0x50], ebp
mov edi, eax
test r12d, r12d
je 0x140004f6a
lea rcx, str.ul0
mov rdx, r13
call fcn.14001e1f0
mov r12d, ebp
lea rcx, str.par_r_n
mov rdx, r13
call fcn.14001e1f0
sub rdi, 1
jne 0x140004f53
mov dword [rsp + 0x40], r12d
jmp 0x140004fbb
test r12d, r12d
mov dword [rsp + 0x50], ebp
je 0x140004fa2
lea rcx, str.ul0
mov rdx, r13
call fcn.14001e1f0
mov dword [rsp + 0x40], ebp
lea rcx, str.par_r_n
mov rdx, r13
call fcn.14001e1f0
jmp 0x140004fbb
mov rbx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xb0]
add rbx, 1
add esi, 1
cmp esi, dword [0x14004c18c]
mov qword [rsp + 0x90], rbx
mov ebx, dword [rsp + 0x4c]
mov dword [rsp + 0x44], esi
jb 0x1400043e0
movaps xmm11, xmmword [rsp + 0xa00]
movaps xmm8, xmmword [rsp + 0xa30]
movaps xmm7, xmmword [rsp + 0xa40]
mov r12d, 1
jmp 0x14000500d
mov r14, qword [rsp + 0x70]
mov rcx, r15
call fcn.14001afe0
mov rcx, qword [0x14004c1a8]
call fcn.14001afe0
mov rcx, qword [rsp + 0x98]
mov qword [0x14004c1a8], rbp
call fcn.14001afe0
mov rcx, qword [0x14004c1a0]
call fcn.14001afe0
mov rcx, qword [0x14004c198]
mov qword [0x14004c1a0], rbp
movaps xmm10, xmmword [rsp + 0xa10]
movaps xmm9, xmmword [rsp + 0xa20]
movaps xmm6, xmmword [rsp + 0xa50]
test rcx, rcx
je 0x140005073
call fcn.14001d780
mov rcx, r14
mov qword [0x14004c198], rbp
call fcn.14001afe0
cmp dword [rsp + 0x50], 0
mov r14, qword [rsp + 0xa68]
mov rbp, qword [rsp + 0xa98]
je 0x1400050aa
lea rcx, [0x140038f98]
mov rdx, r13
call fcn.14001e1f0
jmp 0x1400050b9
lea rcx, [0x140038f90]
mov rdx, r13
call fcn.14001e1f0
mov rcx, r13
call fcn.14001d650
movsxd rdi, eax
lea ecx, [rdi + 1]
movsxd rdx, ecx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
test rax, rax
mov rsi, rax
je 0x14000510f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov rcx, r13
mov rbx, rax
call fcn.14001ddf0
mov r9, r13
mov r8, rdi
mov rdx, r12
mov rcx, rbx
call fcn.14001cf00
mov rcx, rsi
mov byte [rbx + rdi], 0
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, r13
call fcn.14001d780
lea rcx, [rsp + 0x8e0]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r13, qword [rsp + 0xa70]
mov r12, qword [rsp + 0xa78]
mov rdi, qword [rsp + 0xa80]
mov rbx, qword [rsp + 0xa90]
mov rax, rsi
mov rsi, qword [rsp + 0xaa0]
jmp 0x140003df0
lea rcx, str.Cannot_get_temp_path_in_ProcessCaptureRtf___r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
mov rcx, qword [rsp + 0x9f0]
xor rcx, rsp
call fcn.14001b2b0
add rsp, 0xa88
ret