Function at 0x14000b220
Capabilities:
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x190
mov rax, qword [0x1400300a8]
xor rax, rsp
mov qword [rsp + 0x180], rax
lea rcx, str.username
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor ebx, ebx
mov qword [rsp + 0x160], rbx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x170], xmm0
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], bl
jne 0x14000b280
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.1400018e0
nop
lea rcx, [rsp + 0x80]
call fcn.140012020
nop
mov qword [rsp + 0x120], rbx
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x130], xmm0
mov byte [rsp + 0x120], 0
mov ecx, 8
call fcn.14001db98
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000b2e6
mov rcx, rax
call fcn.140013bb0
nop
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x100]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b303
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000b306
mov rdx, rax
lea rcx, [0x140030b10]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000b366
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b361
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b361
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0x100]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b383
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x14000b386
mov rdx, rax
lea rcx, [0x140030b30]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000b3e6
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov r8d, 1
lea rdx, [0x140021a90]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea rdx, str.nullptr
lea rcx, [rsp + 0x80]
call fcn.140012ed0
lea rcx, [rsp + 0x80]
call fcn.140012380
test al, al
jne 0x14000b430
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xf0], rbx
mov qword [rsp + SafeArrayPutElement8], 0xf
mov byte [rsp + 0xe0], 0
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xb0], 5
mov qword [rsp + 0xb8], SafeArrayPutElement
mov eax, dword [str.cvctd]
mov dword [rsp + 0xa0], eax
movzx eax, byte [0x140021c14]
mov byte [rsp + 0xa4], al
mov byte [rsp + 0xa5], 0
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc0]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b4b7
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021aa8]
lea rcx, [rsp + 0x120]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0x10
jb 0x14000b515
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b510
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b510
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xd0], xmm0
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14000b574
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b56f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b56f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea r8, str.2.6.0
lea rdx, [0x140021aac]
lea rcx, [rsp + 0x120]
call fcn.140012060
mov r8d, 1
lea rdx, [0x140021964]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea r8, str.5001
lea rdx, [0x140021ab0]
lea rcx, [rsp + 0x120]
call fcn.140012060
lea r8, [0x140030bb0]
cmp qword [0x140030bc8], 0x10
cmovae r8, qword [0x140030bb0]
lea rdx, [0x140021960]
lea rcx, [rsp + 0x120]
call fcn.140012060
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rbx
mov r8d, 0x20
lea rdx, str.https:__swatx.me_api_securez.php
lea rcx, [rsp + 0xc0]
call fcn.1400019a0
lea r9, [rsp + 0x120]
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x80]
call fcn.140012730
test al, al
jne 0x14000b655
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xb0], 6
mov qword [rsp + 0xb8], SafeArrayPutElement
mov eax, dword [str.remove]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xa4], ax
mov byte [rsp + 0xa6], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xd0], 2
mov qword [rsp + 0xd8], SafeArrayPutElement
mov eax, 0xa0d
mov word [rsp + 0xc0], ax
mov byte [rsp + 0xc2], 0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x140]
call fcn.140002280
nop
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0xc0]
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b729
mov rax, qword [rax]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b730
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000b791
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b78c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b78c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xb0], 6
mov qword [rsp + 0xb8], SafeArrayPutElement
mov eax, dword [str.remove]
mov dword [rsp + 0xa0], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xa4], ax
mov byte [rsp + 0xa6], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xd0], 2
mov qword [rsp + 0xd8], SafeArrayPutElement
mov eax, 0x3d3d
mov word [rsp + 0xc0], ax
mov byte [rsp + 0xc2], 0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x140]
call fcn.140002280
nop
lea r9, [rsp + 0xa0]
lea r8, [rsp + 0xc0]
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b865
mov rax, qword [rax]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b870
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000b8d1
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b8cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b8cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
mov rdi, qword [rsp + 0xf0]
lea r15, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0x10
cmovae r15, qword [rsp + 0xe0]
movabs rsi, 0x7fffffffffffffff
cmp rdi, rsi
ja 0x14000be7d
mov qword [rsp + 0x48], SafeArrayGetLBound
cmp rdi, 0x10
jae 0x14000b944
mov qword [rsp + 0x40], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, r15
lea rcx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memmove
mov r12d, SafeArrayPutElement
jmp 0x14000b990
mov rbx, rdi
or rbx, 0xf
mov r12d, SafeArrayPutElement
cmp rbx, rsi
jbe 0x14000b95b
mov rbx, rsi
jmp 0x14000b962
cmp rbx, r12
cmovb rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x30]
call fcn.1400035d0
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
xor ebx, ebx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x100]
call fcn.140014f00
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000b9ad
mov rax, qword [rax]
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rbx
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000b9d0
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.1400018e0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000ba31
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
lea rdi, [rsp + 0xc0]
mov r15, qword [rsp + 0xc0]
mov r13, qword [rsp + 0xd8]
cmp r13, 0x10
cmovae rdi, r15
mov rbx, qword [rsp + 0xd0]
cmp rbx, rsi
ja 0x14000be83
mov qword [rsp + 0x68], SafeArrayGetLBound
cmp rbx, 0x10
jae 0x14000bab3
mov qword [rsp + 0x60], rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000baf6
mov rax, rbx
or rax, 0xf
cmp rax, rsi
ja 0x14000baca
mov rsi, rax
cmp rax, 0x16
cmovb rsi, r12
lea rdx, [rsi + 1]
lea rcx, [rsp + 0x50]
call fcn.1400035d0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rsi
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x140]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000bb13
mov rax, qword [rax]
xor r12d, r12d
mov qword [rsp + 0xa0], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb0], xmm0
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14000bb30
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.1400018e0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
lea rbx, [rsp + 0xa0]
cmp qword [rsp + 0xb8], 0x10
cmovae rbx, qword [rsp + 0xa0]
mov dword [rax], r12d
mov r8d, 0xa
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rsp + 0x20]
je 0x14000be89
cmp dword [rdi], 0x22
je 0x14000be95
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14000bbe0
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bbdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bbdb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb0], xmm0
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000bc3f
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bc3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bc3a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
cmp esi, dword [0x140030bd0]
je 0x14000bc5f
lea rcx, str.ERROR_:_Please_try_again_or_contact_the_developer_
call fcn.140013ef0
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rdx, [0x140030bb0]
lea rcx, [rsp + 0xa0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000bc90
mov rax, qword [rax]
nop
inc r14
cmp byte [rax + r14], 0
jne 0x14000bc90
mov r8, r14
mov rdx, rax
lea rcx, [0x140030bb0]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 0x10
jb 0x14000bcf3
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bcee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bcee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov byte [0x140030bdd], 1
cmp r13, 0x10
jb 0x14000bd35
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14000bd2c
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bd2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14001dbd4
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x14000bd7b
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bd76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bd76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xf0], r12
mov qword [rsp + SafeArrayPutElement8], 0xf
mov byte [rsp + 0xe0], 0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14000bddd
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bdd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bdd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x130], xmm0
mov byte [rsp + 0x120], 0
lea rcx, [rsp + 0x80]
call fcn.140012050
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 0x10
jb 0x14000be4b
inc rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000be45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000be45
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.14001df40
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140003570
nop
call fcn.140003570
nop
lea rcx, str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
lea rcx, str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3