Function at 0x1400058d0
Capabilities:
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x190
mov rax, qword [0x1400300a8]
xor rax, rsp
mov qword [rsp + 0x180], rax
lea rcx, str.username
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor r13d, r13d
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], r13
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], r13b
jne 0x140005935
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.1400018e0
nop
lea rcx, [rsp + 0x80]
call fcn.140012020
nop
mov qword [rsp + 0x140], r13
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x150], xmm0
mov byte [rsp + 0x140], 0
mov ecx, 8
call fcn.14001db98
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000599f
mov rcx, rax
call fcn.140013bb0
mov rbx, rax
jmp 0x1400059a2
mov rbx, r13
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xa0]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400059bf
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400059c2
mov rdx, rax
lea rcx, [0x140030b10]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005a22
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xa0]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005a3f
mov rax, qword [rax]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140005a42
mov rdx, rax
lea rcx, [0x140030b30]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005aa2
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a9d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov r8d, 1
lea rdx, [0x140021a90]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea rdx, str.nullptr
lea rcx, [rsp + 0x80]
call fcn.140012ed0
lea rcx, [rsp + 0x80]
call fcn.140012380
test al, al
jne 0x140005aec
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x120], r13
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], SafeArrayPutElement
mov byte [rsp + 0x120], 0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xf0], 4
mov qword [rsp + SafeArrayPutElement8], 0xf
mov dword [rsp + 0xe0], 0x4b4f4f48
mov byte [rsp + 0xe4], 0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xc0]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005b63
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021aa8]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xd8]
cmp rdx, 0x10
jb 0x140005bc1
inc rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005bbc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xd0], xmm0
mov byte [rsp + 0xc0], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x140005c20
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005c1b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030b90]
lea rcx, [rsp + 0x100]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005c4f
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021aac]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005cad
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ca8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov r8d, 1
lea rdx, [0x140021964]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea rcx, [rsp + 0x100]
call fcn.1400119a0
mov r8, rax
lea rdx, [rsp + 0xc0]
mov rcx, rbx
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005d01
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021ab0]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005d5f
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005d5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030be0]
lea rcx, [rsp + 0x100]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005d8e
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021960]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005dec
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005de7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005de7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
lea rsi, [rsp + 0x160]
cmp qword [rsp + 0x178], 0x10
cmovae rsi, qword [rsp + 0x160]
movabs r15, 0x7fffffffffffffff
mov rdi, qword [rsp + 0x170]
cmp rdi, r15
jbe 0x140005e31
call fcn.140003570
mov qword [rsp + 0x40], SafeArrayGetLBound
cmp rdi, 0x10
jae 0x140005e60
mov qword [rsp + 0x38], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0x28]
call sub.VCRUNTIME140.dll_memmove
mov r12d, SafeArrayPutElement
jmp 0x140005eaa
mov rbx, rdi
or rbx, 0xf
mov r12d, SafeArrayPutElement
cmp rbx, r15
jbe 0x140005e77
mov rbx, r15
jmp 0x140005e7e
cmp rbx, r12
cmovb rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x28]
call fcn.1400035d0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0xa0]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005ec7
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021ac4]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005f25
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005f20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030c00]
lea rcx, [rsp + 0x100]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005f54
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021a90]
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140005fb2
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005fad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030b30]
lea rcx, [rsp + 0xa0]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x140005fd1
mov rax, qword [rax]
mov r8, rax
lea rdx, str.ToDo
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14000602f
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000602a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000602a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030b10]
lea rcx, [rsp + 0xa0]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000604e
mov rax, qword [rax]
mov r8, rax
lea rdx, str.ToMe
lea rcx, [rsp + 0x140]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x1400060ac
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400060a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400060a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
mov r8d, 0x20
lea rdx, str.https:__swatx.me_api_securez.php
lea rcx, [rsp + 0xc0]
call fcn.1400019a0
lea r9, [rsp + 0x140]
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x80]
call fcn.140012730
test al, al
jne 0x140006113
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xf0], 6
mov qword [rsp + SafeArrayPutElement8], 0xf
mov eax, dword [str.remove]
mov dword [rsp + 0xe0], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xe4], ax
mov byte [rsp + 0xe6], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xd0], 2
mov qword [rsp + 0xd8], SafeArrayPutElement
mov eax, 0xa0d
mov word [rsp + 0xc0], ax
mov byte [rsp + 0xc2], 0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.140002280
nop
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0xc0]
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400061e7
mov rax, qword [rax]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400061f0
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140006251
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000624c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000624c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xf0], 6
mov qword [rsp + SafeArrayPutElement8], 0xf
mov eax, dword [str.remove]
mov dword [rsp + 0xe0], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xe4], ax
mov byte [rsp + 0xe6], 0
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xd0], 2
mov qword [rsp + 0xd8], SafeArrayPutElement
mov eax, 0x3d3d
mov word [rsp + 0xc0], ax
mov byte [rsp + 0xc2], 0
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.140002280
nop
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0xc0]
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140006325
mov rax, qword [rax]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006330
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140006391
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000638c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000638c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov rdi, qword [rsp + 0x130]
lea rsi, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rsi, qword [rsp + 0x120]
cmp rdi, r15
jbe 0x1400063cc
call fcn.140003570
mov qword [rsp + 0x40], SafeArrayGetLBound
cmp rdi, 0x10
jae 0x1400063f5
mov qword [rsp + 0x38], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0x28]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000643a
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x140006406
mov rbx, r15
jmp 0x14000640e
cmp rbx, 0x16
cmovb rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x28]
call fcn.1400035d0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0xa0]
call fcn.140014f00
nop
cmp qword [rax + 0x18], 0x10
jb 0x140006457
mov rax, qword [rax]
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140006472
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.1400018e0
nop
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x1400064d3
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400064ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb0], xmm0
mov byte [rsp + 0xa0], 0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
lea rdi, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 0x10
cmovae rdi, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xd0]
cmp rbx, r15
jbe 0x140006527
call fcn.140003570
mov qword [rsp + 0x68], SafeArrayGetLBound
cmp rbx, 0x10
jae 0x140006550
mov qword [rsp + 0x60], rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memmove
jmp 0x140006593
mov rax, rbx
or rax, 0xf
cmp rax, r15
ja 0x140006567
mov r15, rax
cmp rax, 0x16
cmovb r15, r12
lea rdx, [r15 + 1]
lea rcx, [rsp + 0x50]
call fcn.1400035d0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r15
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x100]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400065b0
mov rax, qword [rax]
mov qword [rsp + 0xe0], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xf0], xmm0
inc r14
cmp byte [rax + r14], 0
jne 0x1400065c4
mov r8, r14
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.1400018e0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
lea rbx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 0x10
cmovae rbx, qword [rsp + 0xe0]
mov dword [rax], r13d
mov r8d, 0xa
lea rdx, [rsp + 0x20]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rsp + 0x20]
jne 0x140006631
lea rcx, str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
cmp dword [rdi], 0x22
jne 0x140006643
lea rcx, str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
nop
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x140006689
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006684
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006684
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xf0], xmm0
mov byte [rsp + 0xe0], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x1400066e8
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400066e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400066e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
cmp esi, dword [0x140030bd0]
je 0x1400066fe
lea rcx, str.ERROR_:_Please_try_again_or_contact_the_developer_
call fcn.140013ef0
jmp 0x14000670a
lea rcx, str.FUCK_:_Data_have_been_changed_and_you_have_been_disconnected_
call fcn.140013ef0
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3