Function at 0x1400706b8
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov rax, qword [0x140096940]
xor rax, rsp
mov qword [rbp + 0x1c8], rax
mov r14, qword [rbp + 0x240]
xor edi, edi
xor eax, eax
mov qword [rbp - 0x60], r8
mov r13, r8
mov qword [rsp + 0x78], rcx
mov r15, rdx
mov qword [rsp + 0x50], r14
mov r12, rcx
mov qword [rbp - 0x80], rdi
lea r8d, [rdi + 0x5c]
mov qword [rbp + 0x70], rax
xor edx, edx
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x90]
mov qword [rbp - 0x78], rdi
mov rsi, r9
mov qword [rsp + 0x70], rdi
mov ebx, edi
mov qword [rsp + 0x68], rdi
call sub.msvcrt.dll_memset
mov qword [rbp - 0x70], rdi
mov rcx, qword [str.___t_]
lea rax, str.___t_
cmp rcx, rax
je 0x14007076e
test byte [rcx + 0x1c], 2
je 0x14007076e
cmp byte [rcx + 0x19], 5
jb 0x14007076e
mov rcx, qword [rcx + 0x10]
lea edx, [rdi + 0xb]
lea r8, [0x140085de0]
call fcn.140001010
xor eax, eax
mov qword [rbp + 0x80], rdi
mov dword [rsp + 0x58], eax
lea rcx, [r13 + 8]
mov rax, r13
mov qword [rbp + 0x88], rdi
neg rax
mov dword [rsp + 0x48], edi
sbb rax, rax
xor edx, edx
and rax, rcx
lea rcx, [rbp - 0x40]
mov qword [rbp - 0x68], rax
lea r8d, [rdx + 0x24]
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp - 0x10]
lea r8d, [rdx + 0x7c]
call sub.msvcrt.dll_memset
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov edx, 0x80000000
mov dword [rsp + 0x28], 0x80
mov rcx, rsi
mov dword [rsp + 0x20], 3
lea r8d, [rax + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0x60], rax
cmp rax, 0xffffffffffffffff
jne 0x140070837
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007082a
test byte [rcx + 0x1c], 2
je 0x14007082a
cmp byte [rcx + 0x19], 2
jb 0x14007082a
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xd]
xor eax, eax
lea r8, [0x140085de0]
mov r9, rsi
mov dword [rsp + 0x20], eax
call fcn.140001250
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1400714da
xor esi, esi
lea r9, [rsp + 0x40]
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8d, [rsi + 0x24]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400708a6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714bc
test byte [rcx + 0x1c], 2
je 0x1400714bc
cmp byte [rcx + 0x19], 2
jb 0x1400714bc
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0xd]
mov r9d, eax
lea r8, [0x140085de0]
call fcn.140001030
jmp 0x1400714bc
cmp dword [rsp + 0x40], 0x24
jne 0x14007141b
mov rax, qword [str.FAXCOVER_VER005w]
cmp rax, qword [rbp - 0x40]
jne 0x14007141b
mov rax, qword [0x1400997b8]
cmp rax, qword [rbp - 0x38]
jne 0x14007141b
mov eax, dword [0x1400997c0]
cmp eax, dword [rbp - 0x30]
jne 0x14007141b
mov ecx, dword [rbp - 0x2c]
call qword [sym.imp.msvcrt.dll_malloc]
xor ecx, ecx
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140070943
lea r14d, [rax + 8]
mov ebx, r14d
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714b7
test byte [rcx + 0x1c], 2
je 0x1400714b7
cmp byte [rcx + 0x19], 2
jb 0x1400714b7
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xf]
mov r9d, r14d
lea r8, [0x140085de0]
call fcn.140001030
jmp 0x1400714b7
mov r8d, dword [rbp - 0x2c]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400713de
mov eax, dword [rsp + 0x40]
cmp dword [rbp - 0x2c], eax
jne 0x1400713de
mov r14d, 8
test r12, r12
je 0x140070d7e
mov rcx, r15
call qword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x1400709e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
lea edx, [r14 + 9]
mov r9d, eax
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
call fcn.140001030
jmp 0x1400714a5
mov rdx, rax
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectClipRgn]
test eax, eax
jne 0x140070a2a
lea ebx, [rax + 0x1f]
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
lea edx, [rax + 0x12]
xor r9d, r9d
jmp 0x1400709cf
mov rcx, r12
call qword [sym.imp.GDI32.dll_SaveDC]
mov dword [rsp + 0x58], eax
test eax, eax
jne 0x140070a78
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
mov edx, 0x13
jmp 0x1400709cc
mov ecx, dword [rbp - 0x2c]
test ecx, ecx
jne 0x140070ac5
lea ebx, [rcx + 0x12]
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
mov rcx, qword [rcx + 0x10]
lea edx, [rbx + 2]
lea r8, [0x140085de0]
call fcn.140001010
jmp 0x1400714a5
mov rdx, qword [rbp - 0x80]
call qword [sym.imp.GDI32.dll_SetEnhMetaFileBits]
mov qword [rbp - 0x78], rax
mov rsi, rax
test rax, rax
jne 0x140070b16
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
lea edx, [rsi + 0x15]
jmp 0x1400709cc
lea r8, [rbp + 0x150]
mov edx, 0x6c
mov rcx, rsi
call qword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
test eax, eax
jne 0x140070b6f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x16
mov r9d, eax
jmp 0x14007144b
mov r8, r15
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.GDI32.dll_PlayEnhMetaFile]
test eax, eax
jne 0x140070bbc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x17
jmp 0x140070b67
xor edx, edx
mov rcx, r12
call qword [sym.imp.GDI32.dll_RestoreDC]
mov edx, 1
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetBkMode]
cmp eax, 0xffffffff
jne 0x140070c17
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x18
jmp 0x140070b67
mov edx, r14d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetMapMode]
test eax, eax
jne 0x140070c64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x19
jmp 0x140070b67
mov r8d, dword [rbp - 0x20]
lea r9, [rbp - 0x58]
mov edx, dword [rbp - 0x24]
neg r8d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetWindowExtEx]
test eax, eax
jne 0x140070cbc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x1a
jmp 0x140070b67
mov r8d, dword [r15 + 0xc]
lea r9, [rbp - 0x50]
mov edx, dword [r15 + 8]
mov rcx, r12
sub r8d, dword [r15 + 4]
sub edx, dword [r15]
call qword [sym.imp.GDI32.dll_SetViewportExtEx]
test eax, eax
jne 0x140070d19
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x1b
jmp 0x140070b67
mov eax, dword [rbp - 0x20]
lea r9, [rbp - 0x48]
cdq
mov rcx, r12
sub eax, edx
sar eax, 1
mov r8d, eax
mov eax, dword [rbp - 0x24]
cdq
sub eax, edx
sar eax, 1
neg eax
mov edx, eax
call qword [sym.imp.GDI32.dll_SetWindowOrgEx]
test eax, eax
jne 0x140070d7e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x1c
jmp 0x140070b67
mov ecx, 0x40
call qword [sym.imp.msvcrt.dll_malloc]
mov qword [rsp + 0x70], rax
mov r15, rax
test rax, rax
jne 0x140070dcf
mov ebx, r14d
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
lea edx, [rax + 0x1d]
mov r9d, r14d
jmp 0x14007144b
mov esi, edi
mov dword [rsp + 0x44], edi
cmp dword [rbp - 0x28], edi
jle 0x1400710d0
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 0x7c
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14007138d
cmp dword [rsp + 0x40], 0x7c
jne 0x14007138d
mov r8d, dword [rbp + 0x68]
lea edi, [r8*2 + 2]
cmp edi, 0x40
jle 0x140070e42
movsxd rdx, edi
mov rcx, r15
call qword [sym.imp.msvcrt.dll_realloc]
test rax, rax
je 0x140071140
mov r8d, dword [rbp + 0x68]
mov r15, rax
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
xor eax, eax
mov rdx, r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor ecx, ecx
test eax, eax
je 0x140071339
mov eax, dword [rbp + 0x68]
cmp dword [rsp + 0x40], eax
jne 0x140071339
shr rax, 1
mov word [r15 + rax*2], cx
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140070e8f
mov rcx, rax
call fcn.14006264c
xor ecx, ecx
mov qword [rsp + 0x68], rcx
mov rdi, rcx
test r15, r15
je 0x140070eb7
mov rcx, r15
call fcn.140063214
xor ecx, ecx
mov qword [rsp + 0x68], rax
mov rdi, rax
test rax, rax
je 0x14007118d
test r12, r12
je 0x140070efa
mov ecx, dword [rbp - 0x10]
mov r9d, dword [rbp - 4]
mov eax, r9d
mov edx, dword [rbp - 0xc]
cmp edx, r9d
mov r8d, dword [rbp - 8]
cmovg eax, edx
cmp ecx, r8d
mov dword [rbp + 0x74], eax
mov eax, r8d
cmovl eax, ecx
cmp edx, r9d
mov dword [rbp + 0x70], eax
cmovl r9d, edx
cmp ecx, r8d
mov dword [rbp + 0x7c], r9d
cmovg r8d, ecx
xor ecx, ecx
mov dword [rbp + 0x78], r8d
movzx edx, word [rbp + 0x64]
mov rsi, rcx
test dx, dx
je 0x140070fbe
mov eax, ecx
mov ecx, 1
lea r8, [0x140085da0]
cmp dx, word [r8 + rsi*2]
je 0x140070f31
inc eax
inc rsi
add ecx, ecx
cmp eax, 0x1d
jb 0x140070f11
xor ecx, ecx
mov esi, ecx
jmp 0x140070f4b
xor eax, eax
test r13, r13
je 0x140070f42
mov rax, qword [rbp - 0x68]
mov rsi, qword [rax + rsi*8]
jmp 0x140070f45
mov rsi, rax
or dword [rsp + 0x48], ecx
xor ecx, ecx
mov eax, 0x80f
cmp dx, ax
jne 0x140070fbe
test r12, r12
je 0x140070fbe
movaps xmm0, xmmword [rbp + 0x70]
lea rdx, [rbp + 0x80]
mov r8d, 2
movdqa xmmword [rbp + 0x80], xmm0
mov rcx, r12
call qword [sym.imp.GDI32.dll_LPtoDP]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 8]
call fcn.1400704e0
mov ebx, eax
xor eax, eax
test ebx, ebx
jne 0x1400711c9
lea edx, [rax + 0x5a]
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ecx, dword [rbp + 0x90]
lea r8d, [rbx + 0x64]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [rbp + 0x90], eax
xor ecx, ecx
cmp word [rdi], cx
cmovne rsi, rdi
xor edi, edi
test r12, r12
je 0x1400710bd
test rsi, rsi
je 0x1400710bd
mov edx, dword [rbp]
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetTextColor]
mov r13d, eax
cmp eax, 0xffffffff
je 0x1400712fc
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 8]
call fcn.1400704e0
mov ebx, eax
test eax, eax
jne 0x1400712c7
lea rcx, [rbp + 0xf0]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov rdi, rax
test rax, rax
je 0x14007128a
mov rdx, rax
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectObject]
mov r12, rax
xor eax, eax
test r12, r12
je 0x14007124d
mov r15d, eax
cmp word [rbp + 0x64], ax
je 0x14007105f
mov rdx, rsi
mov ecx, 0x800
call fcn.14006842c
test eax, eax
mov ecx, 0x20000
cmovne r15d, ecx
mov eax, dword [rbp + 4]
lea r9, [rbp + 0x70]
mov rcx, qword [rsp + 0x78]
or eax, r15d
or eax, 0x810
or r8d, 0xffffffff
mov rdx, rsi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_DrawTextW]
test eax, eax
je 0x1400711f2
mov rdx, r12
mov r12, qword [rsp + 0x78]
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectObject]
mov edx, r13d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetTextColor]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov r13, qword [rbp - 0x60]
xor edi, edi
mov r15, qword [rsp + 0x70]
mov esi, dword [rsp + 0x44]
inc esi
mov dword [rsp + 0x44], esi
cmp esi, dword [rbp - 0x28]
jl 0x140070dde
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 6
mov qword [rsp + 0x20], rdi
lea rdx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140071103
cmp dword [rsp + 0x40], 6
je 0x14007145b
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x2b
jmp 0x140070b67
mov ebx, r14d
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x140071183
test byte [rcx + 0x1c], 2
je 0x140071183
cmp byte [rcx + 0x19], 2
jb 0x140071183
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
mov edx, 0x1f
mov dword [rsp + 0x28], r14d
mov r9d, esi
mov dword [rsp + 0x20], edi
call fcn.14002b25c
xor eax, eax
mov rdi, rax
jmp 0x14007145b
mov ebx, r14d
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x140071183
test byte [rcx + 0x1c], 2
je 0x140071183
cmp byte [rcx + 0x19], 2
jb 0x140071183
mov edx, 0x21
mov r9d, r14d
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
call fcn.140001030
jmp 0x140071183
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x140071185
test byte [rcx + 0x1c], 2
je 0x140071185
cmp byte [rcx + 0x19], 2
jb 0x140071185
mov edx, 0x22
mov r9d, ebx
jmp 0x1400711b7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov r9d, dword [rsp + 0x44]
lea r8, [0x140085de0]
mov rcx, qword [rcx + 0x10]
mov edx, 0x2a
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.14002b3cc
jmp 0x14007145b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x26
jmp 0x140070b67
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x25
jmp 0x140070b67
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x24
jmp 0x140070b67
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov edx, 0x23
jmp 0x140070b67
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x140071183
test byte [rcx + 0x1c], 2
je 0x140071183
cmp byte [rcx + 0x19], 2
jb 0x140071183
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
mov edx, 0x20
mov dword [rsp + 0x20], eax
mov r9d, esi
call fcn.1400011ac
jmp 0x140071183
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x14007145b
test byte [rcx + 0x1c], 2
je 0x14007145b
cmp byte [rcx + 0x19], 2
jb 0x14007145b
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
mov edx, 0x1e
mov dword [rsp + 0x20], eax
mov r9d, esi
call fcn.1400011ac
jmp 0x14007145b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714a5
test byte [rcx + 0x1c], 2
je 0x1400714a5
cmp byte [rcx + 0x19], 2
jb 0x1400714a5
mov edx, 0x10
jmp 0x1400709cc
mov r9d, VariantTimeToDosDateTime
mov ebx, r9d
mov rcx, qword [str.___t_]
lea rdx, str.___t_
cmp rcx, rdx
je 0x1400714bc
test byte [rcx + 0x1c], 2
je 0x1400714bc
cmp byte [rcx + 0x19], 2
jb 0x1400714bc
lea edx, [r9 + 3]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140085de0]
call fcn.140001030
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14007146d
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteEnhMetaFile]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14007147f
mov rcx, rax
call fcn.14006264c
test rdi, rdi
je 0x14007148d
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400714a0
mov rcx, rax
call qword [sym.imp.msvcrt.dll_free]
mov r12, qword [rsp + 0x78]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x1400714b7
mov rcx, rax
call qword [sym.imp.msvcrt.dll_free]
mov r14, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x1400714da
mov edx, eax
mov rcx, r12
call qword [sym.imp.GDI32.dll_RestoreDC]
test ebx, ebx
jne 0x14007156b
test r14, r14
je 0x14007156b
mov eax, dword [rsp + 0x48]
movaps xmm0, xmmword [rbp + 0x80]
movaps xmm1, xmmword [rbp + 0xa0]
movdqu xmmword [r14 + 4], xmm0
mov dword [r14], eax
movzx eax, word [rbp + 0x1c2]
movaps xmm0, xmmword [rbp + 0x90]
movups xmmword [r14 + 0x18], xmm0
mov word [r14 + 0x16], ax
movaps xmm0, xmmword [rbp + 0xb0]
movzx eax, word [rbp + 0x1c4]
movups xmmword [r14 + 0x28], xmm1
mov word [r14 + 0x14], ax
movaps xmm1, xmmword [rbp + 0xc0]
mov eax, dword [rbp + 0xe8]
movups xmmword [r14 + 0x38], xmm0
movaps xmm0, xmmword [rbp + 0xd0]
movups xmmword [r14 + 0x48], xmm1
movsd xmm1, qword [rbp + 0xe0]
movups xmmword [r14 + 0x58], xmm0
movsd qword [r14 + 0x68], xmm1
mov dword [r14 + 0x70], eax
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x14007157d
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
mov eax, ebx
mov rcx, qword [rbp + 0x1c8]
xor rcx, rsp
call fcn.1400786e0
add rsp, 0x2d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret