Function at 0x140006e60
Capabilities:
Download url
Execute command
Receive data

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x1d0
mov rax, qword [0x14001f040]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
xor esi, esi
xorps xmm0, xmm0
movups xmmword [r11 - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [r11 - 0x38], xmm1
lea r8d, [rsi + 0x27]
lea rdx, str.https:__exiftool.org_exiftool_12.74.zip
lea rcx, [r11 - 0x48]
call fcn.14000fda0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], rsi
lea r8d, [rsi + 0xc]
lea rdx, str.exiftool.zip
lea rcx, [rsp + 0x120]
call fcn.14000fda0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], rsi
mov qword [rsp + 0x178], rsi
lea r8d, [rsi + 4]
lea rdx, str.Tool
lea rcx, [rsp + 0x160]
call fcn.14000fda0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r12, qword [rsp + 0x170]
sub rax, r12
cmp rax, 0xd
jb 0x140007ca7
lea rdx, [rsp + 0x160]
mov r14, qword [rsp + 0x160]
mov r13, qword [rsp + 0x178]
cmp r13, 0xf
cmova rdx, r14
mov qword [rsp + 0x40], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], rsi
lea rax, [r12 + 0xd]
mov qword [rsp + 0x70], rax
mov ebx, 0xf
lea rdi, [rsp + 0x140]
cmp rax, rbx
jbe 0x140007065
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x140006fc3
mov rbx, rcx
movabs r15, 0x8000000000000000
lea rax, [r15 + 0x27]
jmp 0x140006ff4
mov r12d, 0x16
cmp rbx, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000702d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007cad
movabs r15, 0x8000000000000000
mov rcx, rax
call fcn.140013804
test rax, rax
je 0x140007b94
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x140], rdi
mov r12, qword [rsp + 0x170]
jmp 0x14000706f
test rcx, rcx
je 0x140007046
call fcn.140013804
mov rdi, rax
mov rax, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x40]
jmp 0x140007049
mov rdi, rsi
movabs r15, 0x8000000000000000
mov qword [rsp + 0x140], rdi
mov r12, qword [rsp + 0x170]
jmp 0x14000706f
movabs r15, 0x8000000000000000
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], rbx
mov r8, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.exiftool.exe]
movsd qword [r12 + rdi], xmm0
mov eax, dword [0x140016c78]
mov dword [r12 + rdi + 8], eax
movzx eax, byte [0x140016c7c]
mov byte [r12 + rdi + 0xc], al
mov byte [rdi + r12 + 0xd], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ExifTool_not_found._Downloading...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Downloading_ExifTool...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova r8, qword [rsp + 0x120]
lea rdx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0xf
cmova rdx, qword [rsp + 0x1a0]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
jns 0x1400072ef
lea rdx, str.Failed_to_download_ExifTool.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x1400071c7
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b94
call fcn.140013a80
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], 0xf
mov byte [rsp + 0x140], 0
cmp r13, 0xf
jbe 0x14000721b
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140007212
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007be8
mov rcx, r14
call fcn.140013a80
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x14000725e
inc rdx
mov rcx, qword [rsp + 0x120]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140007259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007c32
call fcn.140013a80
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x1400072bd
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400072b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007ca0
call fcn.140013a80
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140013700
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.Extracting_ExifTool...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rsp + 0x130]
sub rax, rcx
cmp rax, 0x2a
jb 0x140007cb3
lea rax, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova rax, qword [rsp + 0x120]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x2a
lea r9, str.powershell__command__Expand_Archive__Path
lea rcx, [rsp + 0xf8]
call fcn.1400108e0
nop
mov r8d, 0x12
lea rdx, str.__DestinationPath
lea rcx, [rsp + 0xf8]
call fcn.14000e4b0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x160]
cmp r13, 0xf
cmova rdx, r14
mov r8, r12
lea rcx, [rsp + 0xd8]
call fcn.14000e4b0
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x140016b3c]
lea rcx, [rsp + 0xb8]
call fcn.14000e4b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x190], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x1400074c4
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400074bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0xc8], xmm0
mov byte [rsp + 0xb8], 0
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0xf
jbe 0x140007523
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000751e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000751e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0xe8], xmm0
mov byte [rsp + 0xd8], 0
mov rdx, qword [rsp + 0x110]
cmp rdx, 0xf
jbe 0x140007582
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000757d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000757d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0x108], xmm0
mov byte [rsp + 0xf8], 0
lea rcx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rcx, qword [rsp + 0x180]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x140007706
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Error:_Unable_to_find_or_extract_exiftool.exe.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140007643
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000763e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b35
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x14000769f
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000769a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b94
call fcn.140013a80
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], 0xf
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x14000721b
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007215
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007be8
jmp 0x140007215
lea rdx, str.Renaming_ExifTool_executable...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Cleaning_up...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ed80
lea rdx, [0x14000ef50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdi, qword [rsp + 0x150]
lea rbx, [rsp + 0x140]
cmp qword [rsp + 0x158], 0xf
cmova rbx, qword [rsp + 0x140]
call fcn.140012c44
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001bc0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rsp + 0x170]
sub rax, r13
cmp rax, 0x11
jb 0x140007cb9
lea rdx, [rsp + 0x160]
mov r14, qword [rsp + 0x160]
mov r12, qword [rsp + 0x178]
cmp r12, 0xf
cmova rdx, r14
mov qword [rsp + 0x40], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x88], xmm1
lea rax, [r13 + 0x11]
mov ebx, 0xf
lea rdi, [rsp + 0x78]
cmp rax, rbx
jbe 0x140007886
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000783d
mov rbx, rcx
add r15, 0x27
mov rcx, r15
call fcn.140013804
test rax, rax
je 0x1400079d2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
lea rax, [r13 + 0x11]
mov rdx, qword [rsp + 0x40]
jmp 0x140007881
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140007866
lea r15, [rcx + 0x27]
cmp r15, rcx
jbe 0x140007cbe
jmp 0x140007815
test rcx, rcx
je 0x14000787e
call fcn.140013804
mov rdi, rax
lea rax, [r13 + 0x11]
mov rdx, qword [rsp + 0x40]
jmp 0x140007881
mov rdi, rsi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rbx
mov r8, r13
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.exiftool__k_.exe]
movups xmmword [rdi + r13], xmm0
movzx eax, byte [0x140016db0]
mov byte [rdi + r13 + 0x10], al
mov byte [rdi + r13 + 0x11], 0
mov rdi, qword [rsp + 0x88]
lea rbx, [rsp + 0x78]
cmp qword [rsp + 0x90], 0xf
cmova rbx, qword [rsp + 0x78]
call fcn.140012c44
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x98]
call fcn.140001bc0
nop
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 7
cmova rcx, qword [rsp + 0x98]
call fcn.140013574
test eax, eax
jne 0x140007cc4
mov rdx, qword [rsp + 0xb0]
cmp rdx, 7
jbe 0x140007982
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000797d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000797d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a80]
movdqu xmmword [rsp + 0xa8], xmm0
mov word [rsp + 0x98], si
mov rdx, qword [rsp + 0x90]
cmp rdx, 0xf
jbe 0x1400079de
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400079d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400079d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0x88], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x140007a39
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007a34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
mov rdi, qword [rsp + 0x130]
lea rbx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova rbx, qword [rsp + 0x120]
call fcn.140012c44
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001bc0
nop
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova rcx, qword [rsp + 0x50]
call fcn.140013350
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140007cd9
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x140007ae7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007ae1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007ae1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
nop
jmp 0x140007afb
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x140007b41
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b3c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
movdqa xmm0, xmmword [0x140017a90]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x140007ba0
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007b9b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], 0xf
mov byte [rsp + 0x140], 0
cmp r12, 0xf
jbe 0x140007bf8
lea rdx, [r12 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140007bef
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007bef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140013a80
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x140007c3e
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007c39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007c39
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140013a80
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x1400072bd
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400072b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400072b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001240
int3
call fcn.1400011a0
nop
call fcn.140001240
nop
call fcn.140001240
call fcn.1400011a0
nop
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x98]
mov edx, eax
call fcn.140003030
nop
shr rdx, 0x20
lea r8, [rsp + 0x50]
lea rcx, str.remove
call fcn.140002fc0
int3
jmp 0x140006e60