Function at 0x1400762bc
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov rax, qword [0x14009b940]
xor rax, rsp
mov qword [rbp + 0x1c8], rax
mov r15, qword [rbp + 0x240]
xor edi, edi
mov r13, r8
mov qword [rbp - 0x68], r8
mov r14, rdx
mov qword [rsp + 0x78], rcx
mov r12, rcx
mov qword [rsp + 0x50], r15
xorps xmm0, xmm0
mov qword [rbp - 0x80], rdi
lea r8d, [rdi + 0x5c]
mov qword [rbp - 0x78], rdi
xor edx, edx
mov qword [rsp + 0x70], rdi
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x68], rdi
mov rsi, r9
mov ebx, edi
movups xmmword [rbp + 0x70], xmm0
call sub.msvcrt.dll_memset
mov qword [rbp - 0x70], rdi
mov rcx, qword [0x14009b028]
lea rax, [0x14009b028]
cmp rcx, rax
je 0x14007636f
test byte [rcx + 0x1c], 2
je 0x14007636f
cmp byte [rcx + 0x19], 5
jb 0x14007636f
mov rcx, qword [rcx + 0x10]
lea edx, [rdi + 0xb]
lea r8, [0x14008bff8]
call fcn.140001024
xor eax, eax
mov qword [rbp + 0x80], rdi
mov dword [rsp + 0x58], eax
lea rcx, [r13 + 8]
mov rax, r13
mov qword [rbp + 0x88], rdi
neg rax
mov dword [rsp + 0x48], edi
xorps xmm0, xmm0
sbb r13, r13
xor eax, eax
and r13, rcx
mov dword [rbp - 0x20], eax
xor edx, edx
mov qword [rbp - 0x60], r13
lea rcx, [rbp - 0x10]
lea r8d, [rax + 0x7c]
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
call sub.msvcrt.dll_memset
xor eax, eax
xor r9d, r9d
mov qword [rsp + 0x30], rax
mov edx, 0x80000000
mov dword [rsp + 0x28], 0x80
mov rcx, rsi
mov dword [rsp + 0x20], 3
lea r8d, [rax + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
nop dword [rax + rax]
mov qword [rsp + 0x60], rax
cmp rax, 0xffffffffffffffff
jne 0x140076445
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140076432
test byte [rcx + 0x1c], 2
je 0x140076432
cmp byte [rcx + 0x19], 2
jb 0x140076432
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xd]
xor eax, eax
lea r8, [0x14008bff8]
mov r9, rsi
mov dword [rsp + 0x20], eax
call fcn.140001328
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
jmp 0x1400772b2
xor esi, esi
lea r9, [rsp + 0x40]
lea rdx, [rbp - 0x40]
mov qword [rsp + 0x20], rsi
mov rcx, rax
lea r8d, [rsi + 0x24]
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
jne 0x1400764c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140077288
test byte [rcx + 0x1c], 2
je 0x140077288
cmp byte [rcx + 0x19], 2
jb 0x140077288
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0xd]
mov r9d, eax
lea r8, [0x14008bff8]
call fcn.140001050
jmp 0x140077288
cmp dword [rsp + 0x40], 0x24
jne 0x1400771c7
mov rax, qword [str.FAXCOVER_VER005w]
cmp rax, qword [rbp - 0x40]
jne 0x1400771c7
mov rax, qword [0x14009e7b8]
cmp rax, qword [rbp - 0x38]
jne 0x1400771c7
mov eax, dword [0x14009e7c0]
cmp eax, dword [rbp - 0x30]
jne 0x1400771c7
mov ecx, dword [rbp - 0x2c]
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
xor ecx, ecx
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x140076563
lea r15d, [rax + 8]
mov ebx, r15d
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140077283
test byte [rcx + 0x1c], 2
je 0x140077283
cmp byte [rcx + 0x19], 2
jb 0x140077283
mov rcx, qword [rcx + 0x10]
lea edx, [rax + 0xf]
mov r9d, r15d
lea r8, [0x14008bff8]
call fcn.140001050
jmp 0x140077283
mov r8d, dword [rbp - 0x2c]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
je 0x140077184
mov eax, dword [rsp + 0x40]
cmp dword [rbp - 0x2c], eax
jne 0x140077184
mov r15d, 8
test r12, r12
je 0x140076a2c
mov rcx, r14
call qword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
nop dword [rax + rax]
mov qword [rbp - 0x70], rax
test rax, rax
jne 0x140076616
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
lea edx, [r15 + 9]
mov r9d, eax
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
call fcn.140001050
jmp 0x14007726b
mov rdx, rax
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectClipRgn]
nop dword [rax + rax]
test eax, eax
jne 0x140076662
lea ebx, [rax + 0x1f]
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
lea edx, [rax + 0x12]
xor r9d, r9d
jmp 0x140076601
mov rcx, r12
call qword [sym.imp.GDI32.dll_SaveDC]
nop dword [rax + rax]
mov dword [rsp + 0x58], eax
test eax, eax
jne 0x1400766bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
mov edx, 0x13
jmp 0x1400765fe
mov ecx, dword [rbp - 0x2c]
test ecx, ecx
jne 0x140076709
lea ebx, [rcx + 0x12]
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
mov rcx, qword [rcx + 0x10]
lea edx, [rbx + 2]
lea r8, [0x14008bff8]
call fcn.140001024
jmp 0x14007726b
mov rdx, qword [rbp - 0x80]
call qword [sym.imp.GDI32.dll_SetEnhMetaFileBits]
nop dword [rax + rax]
mov qword [rbp - 0x78], rax
mov rsi, rax
test rax, rax
jne 0x140076766
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
lea edx, [rsi + 0x15]
jmp 0x1400765fe
lea r8, [rbp + 0x150]
mov edx, 0x6c
mov rcx, rsi
call qword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
nop dword [rax + rax]
test eax, eax
jne 0x1400767cb
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x16
mov r9d, eax
jmp 0x1400771ff
mov r8, r14
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.GDI32.dll_PlayEnhMetaFile]
nop dword [rax + rax]
test eax, eax
jne 0x140076824
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x17
jmp 0x1400767c3
xor edx, edx
mov rcx, r12
call qword [sym.imp.GDI32.dll_RestoreDC]
nop dword [rax + rax]
mov edx, 1
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetBkMode]
nop dword [rax + rax]
mov ecx, 0xffffffff
cmp eax, ecx
jne 0x140076895
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x18
jmp 0x1400767c3
mov edx, r15d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetMapMode]
nop dword [rax + rax]
test eax, eax
jne 0x1400768ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x19
jmp 0x1400767c3
mov r8d, dword [rbp - 0x20]
lea r9, [rbp - 0x58]
mov edx, dword [rbp - 0x24]
neg r8d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetWindowExtEx]
nop dword [rax + rax]
test eax, eax
jne 0x140076952
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x1a
jmp 0x1400767c3
mov r8d, dword [r14 + 0xc]
lea r9, [rbp - 0x50]
mov edx, dword [r14 + 8]
mov rcx, r12
sub r8d, dword [r14 + 4]
sub edx, dword [r14]
call qword [sym.imp.GDI32.dll_SetViewportExtEx]
nop dword [rax + rax]
test eax, eax
jne 0x1400769bb
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x1b
jmp 0x1400767c3
mov eax, dword [rbp - 0x20]
lea r9, [rbp - 0x48]
cdq
mov rcx, r12
sub eax, edx
sar eax, 1
mov r8d, eax
mov eax, dword [rbp - 0x24]
cdq
sub eax, edx
sar eax, 1
neg eax
mov edx, eax
call qword [sym.imp.GDI32.dll_SetWindowOrgEx]
nop dword [rax + rax]
test eax, eax
jne 0x140076a2c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x1c
jmp 0x1400767c3
mov ecx, 0x40
call qword [sym.imp.msvcrt.dll_malloc]
nop dword [rax + rax]
mov qword [rsp + 0x70], rax
mov r14, rax
test rax, rax
jne 0x140076a83
mov ebx, r15d
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
lea edx, [rax + 0x1d]
mov r9d, r15d
jmp 0x1400771ff
mov esi, edi
mov dword [rsp + 0x44], edi
cmp dword [rbp - 0x28], edi
jle 0x140076df7
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 0x7c
mov qword [rsp + 0x20], rdi
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
je 0x14007712a
cmp dword [rsp + 0x40], 0x7c
jne 0x14007712a
mov r8d, dword [rbp + 0x68]
lea eax, [r8 + 1]
cmp eax, r8d
jb 0x1400770e0
mov edi, eax
mov eax, 0xffffffff
add rdi, rdi
cmp rdi, rax
ja 0x1400770de
xor eax, eax
test edi, edi
js 0x1400770de
cmp edi, 0x40
jle 0x140076b26
movsxd rdx, edi
mov rcx, r14
call qword [sym.imp.msvcrt.dll_realloc]
nop dword [rax + rax]
test rax, rax
je 0x140076e73
mov r8d, dword [rbp + 0x68]
mov r14, rax
mov qword [rsp + 0x70], rax
xor eax, eax
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov rdx, r14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
xor ecx, ecx
test eax, eax
je 0x140077084
mov eax, dword [rbp + 0x68]
cmp dword [rsp + 0x40], eax
jne 0x140077084
shr rax, 1
mov word [r14 + rax*2], cx
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140076b77
mov rcx, rax
call fcn.1400671c4
xor ecx, ecx
mov qword [rsp + 0x68], rcx
mov rdi, rcx
test r14, r14
je 0x140076b9f
mov rcx, r14
call fcn.140067e3c
xor ecx, ecx
mov qword [rsp + 0x68], rax
mov rdi, rax
test rax, rax
je 0x140076ec0
test r12, r12
je 0x140076be2
mov ecx, dword [rbp - 0x10]
mov r9d, dword [rbp - 4]
mov eax, r9d
mov edx, dword [rbp - 0xc]
cmp edx, r9d
mov r8d, dword [rbp - 8]
cmovg eax, edx
cmp ecx, r8d
mov dword [rbp + 0x74], eax
mov eax, r8d
cmovl eax, ecx
cmp edx, r9d
mov dword [rbp + 0x70], eax
cmovl r9d, edx
cmp ecx, r8d
mov dword [rbp + 0x7c], r9d
cmovg r8d, ecx
xor ecx, ecx
mov dword [rbp + 0x78], r8d
movzx edx, word [rbp + 0x64]
mov rsi, rcx
test dx, dx
je 0x140076cb6
mov eax, ecx
mov ecx, 1
lea r8, [0x14008bfb8]
cmp dx, word [r8 + rsi*2]
je 0x140076c19
inc eax
inc rsi
add ecx, ecx
cmp eax, 0x1d
jb 0x140076bf9
xor ecx, ecx
mov esi, ecx
jmp 0x140076c31
xor eax, eax
cmp qword [rbp - 0x68], rax
je 0x140076c28
mov rsi, qword [r13 + rsi*8]
jmp 0x140076c2b
mov rsi, rax
or dword [rsp + 0x48], ecx
xor ecx, ecx
mov eax, 0x80f
cmp dx, ax
jne 0x140076cb6
test r12, r12
je 0x140076cb6
movaps xmm0, xmmword [rbp + 0x70]
lea rdx, [rbp + 0x80]
mov r8d, 2
movdqa xmmword [rbp + 0x80], xmm0
mov rcx, r12
call qword [sym.imp.GDI32.dll_LPtoDP]
nop dword [rax + rax]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 8]
call fcn.1400760a8
mov ebx, eax
xor eax, eax
test ebx, ebx
jne 0x140076efc
lea edx, [rax + 0x5a]
mov rcx, r12
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
nop dword [rax + rax]
mov ecx, dword [rbp + 0x90]
lea r8d, [rbx + 0x64]
mov edx, eax
call qword [sym.imp.KERNEL32.dll_MulDiv]
nop dword [rax + rax]
mov dword [rbp + 0x90], eax
xor ecx, ecx
cmp word [rdi], cx
cmovne rsi, rdi
xor edi, edi
test r12, r12
je 0x140076de4
test rsi, rsi
je 0x140076de4
mov edx, dword [rbp]
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetTextColor]
nop dword [rax + rax]
mov r13d, eax
mov eax, 0xffffffff
cmp r13d, eax
je 0x140077041
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 8]
call fcn.1400760a8
mov ebx, eax
test eax, eax
jne 0x14007700c
lea rcx, [rbp + 0xf0]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x140076fc9
mov rdx, rax
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectObject]
nop dword [rax + rax]
mov r12, rax
xor eax, eax
test r12, r12
je 0x140076f86
mov r14d, eax
cmp word [rbp + 0x64], ax
je 0x140076d6e
mov rdx, rsi
mov ecx, 0x800
call fcn.14006dc84
test eax, eax
mov ecx, 0x20000
cmovne r14d, ecx
mov eax, dword [rbp + 4]
lea r9, [rbp + 0x70]
mov rcx, qword [rsp + 0x78]
or eax, r14d
or eax, 0x810
or r8d, 0xffffffff
mov rdx, rsi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_DrawTextW]
nop dword [rax + rax]
test eax, eax
je 0x140076f25
mov rdx, r12
mov r12, qword [rsp + 0x78]
mov rcx, r12
call qword [sym.imp.GDI32.dll_SelectObject]
nop dword [rax + rax]
mov edx, r13d
mov rcx, r12
call qword [sym.imp.GDI32.dll_SetTextColor]
nop dword [rax + rax]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
mov r13, qword [rbp - 0x60]
xor edi, edi
mov r14, qword [rsp + 0x70]
mov esi, dword [rsp + 0x44]
inc esi
mov dword [rsp + 0x44], esi
cmp esi, dword [rbp - 0x28]
jl 0x140076a92
mov rcx, qword [rsp + 0x60]
lea r9, [rsp + 0x40]
mov r8d, 6
mov qword [rsp + 0x20], rdi
lea rdx, [rbp + 0x1c0]
call qword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [rax + rax]
test eax, eax
je 0x140076e30
cmp dword [rsp + 0x40], 6
je 0x14007720f
xor edi, edi
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x2c
jmp 0x1400767c3
mov ebx, r15d
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140076eb6
test byte [rcx + 0x1c], 2
je 0x140076eb6
cmp byte [rcx + 0x19], 2
jb 0x140076eb6
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
mov edx, 0x20
mov dword [rsp + 0x28], r15d
mov r9d, esi
mov dword [rsp + 0x20], edi
call fcn.14002d440
xor eax, eax
mov rdi, rax
jmp 0x14007720f
mov ebx, r15d
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140076eb6
test byte [rcx + 0x1c], 2
je 0x140076eb6
cmp byte [rcx + 0x19], 2
jb 0x140076eb6
mov edx, 0x22
mov r9d, r15d
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
call fcn.140001050
jmp 0x140076eb6
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140076eb8
test byte [rcx + 0x1c], 2
je 0x140076eb8
cmp byte [rcx + 0x19], 2
jb 0x140076eb8
mov edx, 0x23
mov r9d, ebx
jmp 0x140076eea
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov r9d, dword [rsp + 0x44]
lea r8, [0x14008bff8]
mov rcx, qword [rcx + 0x10]
mov edx, 0x2b
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.14002d7ec
jmp 0x14007720f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x27
jmp 0x1400767c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x26
jmp 0x1400767c3
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x25
jmp 0x1400767c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov edx, 0x24
jmp 0x1400767c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140076eb6
test byte [rcx + 0x1c], 2
je 0x140076eb6
cmp byte [rcx + 0x19], 2
jb 0x140076eb6
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
mov edx, 0x21
mov dword [rsp + 0x20], eax
mov r9d, esi
call fcn.1400013ac
jmp 0x140076eb6
xor edi, edi
mov ebx, 0x216
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
mov edx, 0x1f
call fcn.140001024
jmp 0x14007720f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007720f
test byte [rcx + 0x1c], 2
je 0x14007720f
cmp byte [rcx + 0x19], 2
jb 0x14007720f
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
mov edx, 0x1e
mov dword [rsp + 0x20], eax
mov r9d, esi
call fcn.1400013ac
jmp 0x14007720f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x14007726b
test byte [rcx + 0x1c], 2
je 0x14007726b
cmp byte [rcx + 0x19], 2
jb 0x14007726b
mov edx, 0x10
jmp 0x1400765fe
mov r9d, VariantTimeToDosDateTime
mov ebx, r9d
mov rcx, qword [0x14009b028]
lea rdx, [0x14009b028]
cmp rcx, rdx
je 0x140077288
test byte [rcx + 0x1c], 2
je 0x140077288
cmp byte [rcx + 0x19], 2
jb 0x140077288
lea edx, [r9 + 3]
mov rcx, qword [rcx + 0x10]
lea r8, [0x14008bff8]
call fcn.140001050
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140077227
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteEnhMetaFile]
nop dword [rax + rax]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x140077239
mov rcx, rax
call fcn.1400671c4
test rdi, rdi
je 0x14007724d
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x140077266
mov rcx, rax
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov r12, qword [rsp + 0x78]
mov rax, qword [rbp - 0x80]
test rax, rax
je 0x140077283
mov rcx, rax
call qword [sym.imp.msvcrt.dll_free]
nop dword [rax + rax]
mov r15, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x1400772b2
mov edx, eax
mov rcx, r12
call qword [sym.imp.GDI32.dll_RestoreDC]
nop dword [rax + rax]
test ebx, ebx
jne 0x140077343
test r15, r15
je 0x140077343
mov eax, dword [rsp + 0x48]
movaps xmm0, xmmword [rbp + 0x80]
movaps xmm1, xmmword [rbp + 0xa0]
movdqu xmmword [r15 + 4], xmm0
mov dword [r15], eax
movzx eax, word [rbp + 0x1c2]
movaps xmm0, xmmword [rbp + 0x90]
movups xmmword [r15 + 0x18], xmm0
mov word [r15 + 0x16], ax
movaps xmm0, xmmword [rbp + 0xb0]
movzx eax, word [rbp + 0x1c4]
movups xmmword [r15 + 0x28], xmm1
mov word [r15 + 0x14], ax
movaps xmm1, xmmword [rbp + 0xc0]
mov eax, dword [rbp + 0xe8]
movups xmmword [r15 + 0x38], xmm0
movaps xmm0, xmmword [rbp + 0xd0]
movups xmmword [r15 + 0x48], xmm1
movsd xmm1, qword [rbp + 0xe0]
movups xmmword [r15 + 0x58], xmm0
movsd qword [r15 + 0x68], xmm1
mov dword [r15 + 0x70], eax
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x14007735b
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
nop dword [rax + rax]
mov eax, ebx
mov rcx, qword [rbp + 0x1c8]
xor rcx, rsp
call fcn.14007ec30
add rsp, 0x2d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret