Function at 0x140004dc0
Capabilities:
Download url
Execute command
Receive data

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x1c0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1b8], rax
xor esi, esi
xorps xmm0, xmm0
movups xmmword [r11 - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [r11 - 0x30], xmm1
lea r8d, [rsi + 0x27]
lea rdx, str.https:__exiftool.org_exiftool_12.74.zip
lea rcx, [r11 - 0x40]
call fcn.14000c700
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], rsi
lea r8d, [rsi + 0xc]
lea rdx, str.exiftool.zip
lea rcx, [rsp + 0x118]
call fcn.14000c700
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
mov qword [rsp + 0x168], rsi
mov qword [rsp + 0x170], rsi
lea r8d, [rsi + 4]
lea rdx, str.Tool
lea rcx, [rsp + 0x158]
call fcn.14000c700
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r8, qword [rsp + 0x168]
sub rax, r8
cmp rax, 0xd
jb 0x140005d14
lea rdx, [rsp + 0x158]
mov r15, qword [rsp + 0x158]
mov r13, qword [rsp + 0x170]
cmp r13, 0xf
cmova rdx, r15
mov qword [rsp + 0x68], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], rsi
lea rax, [r8 + 0xd]
mov qword [rsp + 0x40], rax
mov ebx, 0xf
lea rdi, [rsp + 0x138]
lea r12d, [rbx + 7]
cmp rax, rbx
jbe 0x140004fc4
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x140004f26
mov rbx, rcx
movabs r14, 0x8000000000000000
lea rax, [r14 + 0x27]
jmp 0x140004f51
cmp rbx, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004f82
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005d1a
movabs r14, 0x8000000000000000
mov rcx, rax
call fcn.14000e360
test rax, rax
je 0x140005c01
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x138], rdi
jmp 0x140004fce
test rcx, rcx
je 0x140004fad
call fcn.14000e360
mov rdi, rax
mov rax, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
movabs r14, 0x8000000000000000
mov qword [rsp + 0x138], rdi
jmp 0x140004fce
mov rdi, rsi
movabs r14, 0x8000000000000000
mov qword [rsp + 0x138], rsi
jmp 0x140004fce
movabs r14, 0x8000000000000000
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x150], rbx
mov rbx, qword [rsp + 0x168]
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.exiftool.exe]
movsd qword [rbx + rdi], xmm0
mov eax, dword [0x140010a50]
mov dword [rbx + rdi + 8], eax
movzx eax, byte [0x140010a54]
mov byte [rbx + rdi + 0xc], al
mov byte [rdi + rbx + 0xd], 0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.ExifTool_not_found._Downloading...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Downloading_ExifTool...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0x118]
cmp qword [rsp + 0x130], 0xf
cmova r8, qword [rsp + 0x118]
lea rdx, [rsp + 0x198]
cmp qword [rsp + 0x1b0], 0xf
cmova rdx, qword [rsp + 0x198]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
jns 0x140005252
lea rdx, str.Failed_to_download_ExifTool.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x14000512a
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005125
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c01
call fcn.14000e39c
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 0xf
mov byte [rsp + 0x138], 0
cmp r13, 0xf
jbe 0x14000517e
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140005175
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c55
mov rcx, r15
call fcn.14000e39c
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0xf
jbe 0x1400051c1
inc rdx
mov rcx, qword [rsp + 0x118]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400051bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c9f
call fcn.14000e39c
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], 0xf
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x140005220
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000521b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005d0d
call fcn.14000e39c
mov rcx, qword [rsp + 0x1b8]
xor rcx, rsp
call fcn.14000e340
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rdx, str.Extracting_ExifTool...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rsp + 0x128]
mov qword [rsp + 0x40], rdx
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdx
cmp rax, 0x2a
jb 0x140005d20
lea r9, [rsp + 0x118]
cmp qword [rsp + 0x130], 0xf
cmova r9, qword [rsp + 0x118]
mov qword [rsp + 0x30], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa0], xmm1
lea rax, [rdx + 0x2a]
mov qword [rsp + 0x68], rax
mov ebx, 0xf
lea rdi, [rsp + 0x90]
cmp rax, rbx
jbe 0x140005382
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000532e
mov rbx, rcx
lea rax, [r14 + 0x27]
mov rcx, rax
call fcn.14000e360
test rax, rax
je 0x140005352
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x30]
jmp 0x14000537a
cmp rbx, 0x16
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140005359
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005d26
jmp 0x140005304
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140005377
call fcn.14000e360
mov rdi, rax
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x40]
mov r9, qword [rsp + 0x30]
jmp 0x14000537a
mov rdi, rsi
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
movups xmm0, xmmword [str.powershell__command__Expand_Archive__Path]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x140010af8]
movups xmmword [rdi + 0x10], xmm1
movsd xmm0, qword [0x140010b08]
movsd qword [rdi + 0x20], xmm0
movzx eax, word [0x140010b10]
mov word [rdi + 0x28], ax
lea rcx, [rdi + 0x2a]
mov r8, rdx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x40]
mov byte [rdi + rax + 0x2a], 0
mov r8d, 0x12
lea rdx, str.__DestinationPath
lea rcx, [rsp + 0x90]
call fcn.14000b1e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x100], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x100], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x158]
cmp r13, 0xf
cmova rdx, r15
mov r8, qword [rsp + 0x168]
lea rcx, [rsp + 0xf0]
call fcn.14000b1e0
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xe0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x140010914]
lea rcx, [rsp + 0xd0]
call fcn.14000b1e0
xorps xmm0, xmm0
movups xmmword [rsp + 0x178], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x188], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x178], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x188], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x14000552e
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005529
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0xe0], xmm0
mov byte [rsp + 0xd0], 0
mov rdx, qword [rsp + 0x108]
cmp rdx, 0xf
jbe 0x14000558d
inc rdx
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005588
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005588
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0x100], xmm0
mov byte [rsp + 0xf0], 0
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x1400055ec
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0x90], 0
lea rcx, [rsp + 0x178]
cmp qword [rsp + 0x190], 0xf
cmova rcx, qword [rsp + 0x178]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x140005770
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rdx, str.Error:_Unable_to_find_or_extract_exiftool.exe.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x1400056ad
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005ba2
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0x188], xmm0
mov byte [rsp + 0x178], 0
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x140005709
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005704
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c01
call fcn.14000e39c
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 0xf
mov byte [rsp + 0x138], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0xf
jbe 0x14000517e
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005178
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c55
jmp 0x140005178
lea rdx, str.Renaming_ExifTool_executable...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Cleaning_up...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ba90
lea rdx, [0x14000bc60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdi, qword [rsp + 0x148]
lea rbx, [rsp + 0x138]
cmp qword [rsp + 0x150], 0xf
cmova rbx, qword [rsp + 0x138]
call fcn.14000d898
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400019e0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rsp + 0x168]
sub rax, r13
cmp rax, 0x11
jb 0x140005d2c
lea r9, [rsp + 0x158]
mov r15, qword [rsp + 0x158]
mov r12, qword [rsp + 0x170]
cmp r12, 0xf
cmova r9, r15
mov qword [rsp + 0x30], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
lea rdx, [r13 + 0x11]
mov ebx, 0xf
lea rdi, [rsp + 0x70]
cmp rdx, rbx
jbe 0x1400058f0
mov rbx, rdx
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400058a7
mov rbx, rcx
add r14, 0x27
mov rcx, r14
call fcn.14000e360
test rax, rax
je 0x140005a3f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
lea rdx, [r13 + 0x11]
mov r9, qword [rsp + 0x30]
jmp 0x1400058eb
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400058d0
lea r14, [rcx + 0x27]
cmp r14, rcx
jbe 0x140005d31
jmp 0x14000587f
test rcx, rcx
je 0x1400058e8
call fcn.14000e360
mov rdi, rax
lea rdx, [r13 + 0x11]
mov r9, qword [rsp + 0x30]
jmp 0x1400058eb
mov rdi, rsi
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rbx
mov r8, r13
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.exiftool__k_.exe]
movups xmmword [rdi + r13], xmm0
movzx eax, byte [0x140010b88]
mov byte [rdi + r13 + 0x10], al
mov byte [rdi + r13 + 0x11], 0
mov rdi, qword [rsp + 0x80]
lea rbx, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rbx, qword [rsp + 0x70]
call fcn.14000d898
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0xb0]
call fcn.1400019e0
nop
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 7
cmova rcx, qword [rsp + 0xb0]
call fcn.14000e1c8
test eax, eax
jne 0x140005d37
mov rdx, qword [rsp + 0xc8]
cmp rdx, 7
jbe 0x1400059ef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400059ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011400]
movdqu xmmword [rsp + 0xc0], xmm0
mov word [rsp + 0xb0], si
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x140005a4b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140005aa6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005aa1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005aa1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
mov rdi, qword [rsp + 0x128]
lea rbx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0xf
cmova rbx, qword [rsp + 0x118]
call fcn.14000d898
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
lea r8, [rsp + 0x30]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400019e0
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova rcx, qword [rsp + 0x48]
call fcn.14000dfa4
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140005d4c
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140005b54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005b4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
nop
jmp 0x140005b68
mov rdx, qword [rsp + 0x190]
cmp rdx, 0xf
jbe 0x140005bae
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ba9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
movdqa xmm0, xmmword [0x140011410]
movdqu xmmword [rsp + 0x188], xmm0
mov byte [rsp + 0x178], 0
mov rdx, qword [rsp + 0x150]
cmp rdx, 0xf
jbe 0x140005c0d
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 0xf
mov byte [rsp + 0x138], 0
cmp r12, 0xf
jbe 0x140005c65
lea rdx, [r12 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140005c5c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c5c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14000e39c
nop
mov rdx, qword [rsp + 0x130]
cmp rdx, 0xf
jbe 0x140005cab
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ca6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ca6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000e39c
mov qword [rsp + 0x128], rsi
mov qword [rsp + 0x130], 0xf
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x140005220
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000521b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000521b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400011b0
int3
call fcn.140001110
nop
call fcn.1400011b0
int3
call fcn.140001110
nop
call fcn.1400011b0
call fcn.140001110
nop
lea r9, [rsp + 0x48]
lea r8, [rsp + 0xb0]
mov edx, eax
call fcn.140002e80
nop
shr rdx, 0x20
lea r8, [rsp + 0x48]
lea rcx, str.remove
call fcn.140002e10
int3