Function at 0x14000fc80
Capabilities:
Encode data using xor
Execute command
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x200
mov rax, qword [0x1400300a8]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
xor r12d, r12d
lea rcx, [rsp + 0x58]
call fcn.140012020
nop
mov qword [rsp + 0x190], r12
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], r12b
lea ecx, [r12 + 8]
call fcn.14001db98
mov qword [rsp + 0x80], rax
test rax, rax
je 0x14000fd06
mov rcx, rax
call fcn.140013bb0
mov rbx, rax
jmp 0x14000fd09
mov rbx, r12
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xc8]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000fd26
mov rax, qword [rax]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000fd30
mov rdx, rax
lea rcx, [0x140030b10]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x14000fd90
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fd8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fd8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xc8]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000fdad
mov rax, qword [rax]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x14000fdb0
mov rdx, rax
lea rcx, [0x140030b30]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x14000fe10
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe0b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fe0b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov word [rsp + 0x78], 0x66
mov byte [rsp + 0x7a], 0
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xb8], 1
mov qword [rsp + 0xc0], SafeArrayPutElement
mov word [rsp + 0xa8], 0x66
lea rdx, [rsp + 0xa8]
lea rcx, [0x140030af0]
call fcn.1400057e0
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x14000fea0
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fe9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000fe9b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov dword [rsp + 0x88], 0x16fd16e9
mov dword [rsp + 0x8c], 0x16e616e5
mov dword [rsp + 0x90], 0x16f816fb
mov dword [rsp + 0x94], 0x16ff
mov byte [rsp + 0x98], 1
mov rcx, r12
mov esi, 0x1687
nop dword [rax]
lea eax, [rsi + rcx]
xor word [rsp + rcx*2 + 0x88], ax
inc rcx
cmp rcx, 7
jb 0x14000fee0
mov byte [rsp + 0x98], 0
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x58]
call fcn.140012ed0
lea rcx, [rsp + 0x58]
call fcn.140012380
test al, al
jne 0x14000ff89
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x14000ff5f
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ff5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400114f9
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], 0
lea rcx, [rsp + 0x58]
call fcn.140012050
xor al, al
jmp 0x14001152a
lea rcx, [rsp + 0x1b0]
call fcn.1400119a0
mov r8, rax
lea rdx, [rsp + 0xc8]
mov rcx, rbx
call fcn.140013ca0
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000ffb8
mov rax, qword [rax]
mov rdx, rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004610
lea rdx, [0x140004a70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x14001001e
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010019
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010019
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x1d0], r12
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
mov dword [rsp + 0x88], 0xffeaedf4
mov dword [rsp + 0x8c], 0xf5e9f9
mov byte [rsp + 0x90], 1
mov rcx, r12
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x88], al
inc rcx
cmp rcx, 7
jb 0x140010060
mov byte [rsp + 0x90], 0
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xb8], 7
mov qword [rsp + 0xc0], SafeArrayPutElement
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0xa8], eax
movzx eax, word [rsp + 0x8c]
mov word [rsp + 0xac], ax
movzx eax, byte [rsp + 0x8e]
mov byte [rsp + 0xae], al
mov byte [rsp + 0xaf], 0
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0xc8]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400100f0
mov rax, qword [rax]
mov word [rsp + 0x78], 0x61
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x140010158
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010153
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010153
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xd8], xmm0
mov byte [rsp + 0xc8], 0
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x1400101b7
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400101b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400101b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030cc8]
lea rcx, [rsp + 0x1b0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400101e6
mov rax, qword [rax]
mov word [rsp + 0x78], 0x62
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x14001024e
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010249
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010249
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rcx, [rsp + 0x1b0]
call fcn.1400119a0
mov r8, rax
lea rdx, [rsp + 0xa8]
mov rcx, rbx
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010289
mov rax, qword [rax]
mov word [rsp + 0x78], 0x63
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x1400102f1
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400102ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400102ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rcx, [0x140030d28]
cmp qword [0x140030d40], 0x10
cmovae rcx, qword [0x140030d28]
mov r8, qword [0x140030d38]
test r8, r8
jne 0x1400103ae
lea rdx, [0x140021865]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400103ae
mov dword [rsp + 0x88], 0xfefaedc3
mov dword [rsp + 0x8c], 0xf4e3f9
mov byte [rsp + 0x90], 1
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x88]
call fcn.140005890
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14001037a
mov rax, qword [rax]
mov word [rsp + 0x78], 0x64
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
lea rcx, [rsp + 0xc8]
call fcn.140002a80
jmp 0x140010664
mov dword [rsp + 0x88], 0xf8ecfbf2
mov dword [rsp + 0x8c], 0xebe0ede5
mov word [rsp + 0x90], 0x100
mov rcx, r12
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x88], al
inc rcx
cmp rcx, 8
jb 0x1400103d1
mov byte [rsp + 0x91], 0
lea rcx, [rsp + 0x88]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0xa8], r12
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], r12
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010415
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400018e0
nop
lea rdx, [0x140030d28]
lea rcx, [rsp + 0x1b0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14001045f
mov rax, qword [rax]
mov word [rsp + 0x78], 0x64
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x1400104c7
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400104c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400104c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x98], r12
mov qword [rsp + 0xa0], r12
lea r15, [rsp + 0xa8]
mov r14, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xc0]
cmp r13, 0x10
cmovae r15, r14
movabs rbx, 0x7fffffffffffffff
mov rsi, qword [rsp + 0xb8]
cmp rsi, rbx
ja 0x14001155c
mov qword [rsp + 0xa0], SafeArrayPutElement
cmp rsi, 0x10
jae 0x14001054c
mov qword [rsp + 0x98], rsi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, r15
lea rcx, [rsp + 0x88]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14001059f
mov rax, rsi
or rax, 0xf
cmp rax, rbx
ja 0x140010567
mov rbx, rax
mov ecx, SafeArrayPutElement
cmp rax, rcx
cmovb rbx, rcx
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x88]
call fcn.1400035d0
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rbx
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xc8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400105bf
mov rax, qword [rax]
mov word [rsp + 0x78], 0x65
mov byte [rsp + 0x7a], 0
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x140010628
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010622
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010622
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
cmp r13, 0x10
jb 0x14001065f
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140010657
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140011453
mov rcx, r14
call fcn.14001dbd4
mov esi, 0x1687
lea rdx, [0x140030b30]
lea rcx, [rsp + 0xc8]
call fcn.140015730
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x140010685
mov r8, qword [rax]
mov dword [rsp + 0x78], 0xe5cde7d3
mov word [rsp + 0x7c], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 4
jb 0x1400106a0
mov byte [rsp + 0x7d], 0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x14001070e
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010709
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010709
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030b10]
lea rcx, [rsp + 0xc8]
call fcn.140015730
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x14001072f
mov r8, qword [rax]
mov dword [rsp + 0x78], 0xefc4e7d3
mov word [rsp + 0x7c], 0x100
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 4
jb 0x140010750
mov byte [rsp + 0x7d], 0
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x190]
call fcn.140012060
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x1400107be
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400107b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400107b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov dword [rsp + 0x140], 0x16fc16ef
mov dword [rsp + 0x144], 0x16fa16fd
mov dword [rsp + 0x148], 0x16b616f8
mov dword [rsp + 0x14c], 0x16a116a2
mov dword [rsp + 0x150], 0x16e716fc
mov dword [rsp + 0x154], 0x16e616f0
mov dword [rsp + 0x158], 0x16ba16eb
mov dword [rsp + 0x15c], 0x16f316f8
mov dword [rsp + 0x160], 0x16f916b8
mov dword [rsp + 0x164], 0x16f316e9
mov dword [rsp + 0x168], 0x16ef16b4
mov dword [rsp + 0x16c], 0x16fd16f8
mov dword [rsp + 0x170], 0x16d216ea
mov dword [rsp + 0x174], 0x16d816c4
mov dword [rsp + 0x178], 0x16d4168d
mov dword [rsp + 0x17c], 0x16d616cd
mov word [rsp + 0x180], r12w
mov byte [rsp + 0x182], 1
mov rcx, r12
lea eax, [rsi + rcx]
xor word [rsp + rcx*2 + 0x140], ax
inc rcx
cmp rcx, 0x20
jb 0x140010882
mov byte [rsp + 0x182], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xc8]
call fcn.1400017f0
lea r9, [rsp + 0x190]
lea r8, [rsp + 0x1d0]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x58]
call fcn.140012730
movzx ebx, al
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test bl, bl
jne 0x140010902
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x80], 0xe5e4edf5
mov dword [rsp + 0x84], 0x100e9fd
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x80], al
inc rcx
cmp rcx, 6
jb 0x140010930
mov byte [rsp + 0x87], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x86]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc8]
call fcn.140001700
nop
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x78], 0x100828a
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 2
jb 0x140010990
mov byte [rsp + 0x7b], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x7a]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xa8]
call fcn.140001700
nop
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x1b0]
call fcn.140002280
nop
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010a03
mov rax, qword [rax]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010a06
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xf0]
call fcn.140002a80
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x80], 0xe5e4edf5
mov dword [rsp + 0x84], 0x100e9fd
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x80], al
inc rcx
cmp rcx, 6
jb 0x140010a60
mov byte [rsp + 0x87], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x86]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xc8]
call fcn.140001700
nop
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x78], 0x100b5ba
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x79]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 2
jb 0x140010ac0
mov byte [rsp + 0x7b], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x7a]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xa8]
call fcn.140001700
nop
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
call fcn.140002280
nop
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xa8]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010b33
mov rax, qword [rax]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010b36
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400037a0
nop
lea rcx, [rsp + 0x1b0]
call fcn.140002a80
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140014f00
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010b8e
mov rax, qword [rax]
mov qword [rsp + 0xc8], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd8], xmm0
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010ba5
mov rdx, rax
lea rcx, [rsp + 0xc8]
call fcn.1400018e0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x88], rax
mov word [rsp + 0x78], 0x3a
mov byte [rsp + 0x7a], 0
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x79]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1b0]
call fcn.140001700
nop
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x140]
call fcn.140002280
nop
lea r8, [rsp + 0x1b0]
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.14000e7b0
nop
mov rdx, qword [rsp + 0x28]
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010c6c
mov rax, qword [rax]
mov qword [rsp + 0xa8], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb8], xmm0
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010c83
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400018e0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r14, rax
lea rbx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 0x10
cmovae rbx, qword [rsp + 0xa8]
mov dword [rax], r12d
mov r8d, 0xa
lea rdx, [rsp + 0x80]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rsp + 0x80]
je 0x140011562
cmp dword [r14], 0x22
je 0x14001156e
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x140010d3b
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010d36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010d36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb8], xmm0
mov byte [rsp + 0xa8], 0
mov r8, qword [rsp + 0xa0]
cmp r8, 0x10
jb 0x140010d7a
inc r8
mov rdx, qword [rsp + 0x88]
lea rcx, [rsp + 0x88]
call fcn.140003a40
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp esi, 4
jg 0x140010f1d
je 0x140010eb0
sub esi, 1
je 0x140010e30
sub esi, 1
je 0x140010dba
cmp esi, 1
jne 0x140010f2a
mov dword [rsp + 0x120], 0xeafa988d
jmp 0x140010dc5
mov dword [rsp + 0x120], 0xeef0988d
movdqa xmm0, xmmword [0x140021fe0]
movdqu xmmword [rsp + 0xf0], xmm0
movdqa xmm0, xmmword [0x140021fc0]
movdqa xmm1, xmmword [0x140022000]
movdqu xmmword [rsp + 0x110], xmm0
movdqu xmmword [rsp + 0x100], xmm1
mov dword [rsp + 0x124], 0xcccfd9e4
mov dword [rsp + 0x128], 0xe0b2d0
mov byte [rsp + 0x12c], 1
lea rcx, [rsp + 0xf0]
call fcn.140009530
mov rcx, rax
call fcn.140013ef0
jmp 0x140010f33
movdqa xmm0, xmmword [0x140021fe0]
movdqu xmmword [rsp + 0xf0], xmm0
movdqa xmm1, xmmword [0x140022000]
movdqu xmmword [rsp + 0x100], xmm1
movdqa xmm0, xmmword [0x140021fc0]
movdqu xmmword [rsp + 0x110], xmm0
mov dword [rsp + 0x120], 0xf5fd988d
mov dword [rsp + 0x124], 0xfbe2d8d7
mov dword [rsp + 0x128], 0xb0aeb2cd
mov word [rsp + 0x12c], 0xe2
mov byte [rsp + 0x12e], 1
lea rcx, [rsp + 0xf0]
call fcn.140009560
mov rcx, rax
call fcn.140013ef0
jmp 0x140010f33
movdqa xmm0, xmmword [0x140021fe0]
movdqa xmmword [rsp + 0xf0], xmm0
movdqa xmm1, xmmword [0x140022000]
movdqa xmmword [rsp + 0x100], xmm1
movdqa xmm0, xmmword [0x140021fc0]
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmm1, xmmword [0x140021fd0]
movdqa xmmword [rsp + 0x120], xmm1
mov word [rsp + 0x130], 0xe6
mov byte [rsp + 0x132], 1
lea rcx, [rsp + 0xf0]
call fcn.140009590
mov rcx, rax
call fcn.140013ef0
jmp 0x140010f33
cmp esi, 5
je 0x140010f3f
cmp esi, 0x3e9
je 0x140010f33
cmp byte [0x140030bdc], 1
je 0x140010fa1
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov rdx, qword [rsp + 0x28]
add rdx, 0x20
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010f70
mov rax, qword [rax]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140010f73
mov rdx, rax
lea rcx, [0x140030b90]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
mov byte [0x140030bdc], 1
mov rdx, qword [rsp + 0x28]
add rdx, 0x40
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140010fd2
mov rax, qword [rax]
mov qword [rsp + 0xa8], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb8], xmm0
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140010ff0
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400018e0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rsp + 0xa8]
call fcn.14000fbf0
mov dword [0x140030bd0], eax
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x14001106a
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011065
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011065
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb8], xmm0
mov byte [rsp + 0xa8], 0
lea rcx, [rsp + 0x88]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
add rdx, 0x60
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400110c1
mov rax, qword [rax]
mov qword [rsp + 0xa8], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb8], xmm0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400110e0
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400018e0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rsp + 0xa8]
call fcn.14000fbf0
mov dword [0x140030bd4], eax
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x14001115a
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011155
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011155
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb8], xmm0
mov byte [rsp + 0xa8], 0
lea rcx, [rsp + 0x88]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
sub rdx, 0xffffffffffffff80
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400111b1
mov rax, qword [rax]
mov qword [rsp + 0xa8], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb8], xmm0
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400111d0
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400018e0
nop
xor edx, edx
lea r8d, [rdx + 0xa]
lea rcx, [rsp + 0xa8]
call fcn.14000fbf0
mov dword [0x140030bd8], eax
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x14001124a
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011245
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0xb8], xmm0
mov byte [rsp + 0xa8], 0
lea rcx, [rsp + 0x88]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
add rdx, 0xa0
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400112a4
mov rax, qword [rax]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400112b0
mov rdx, rax
lea rcx, [0x140030c40]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
add rdx, 0xc0
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14001130b
mov rax, qword [rax]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140011310
mov rdx, rax
lea rcx, [0x140030c60]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
add rdx, 0xe0
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14001136b
mov rax, qword [rax]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140011370
mov rdx, rax
lea rcx, [0x140030b70]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
mov rdx, qword [rsp + 0x28]
add rdx, 0x100
lea rcx, [rsp + 0xf0]
call fcn.140002280
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400113d0
mov rax, qword [rax]
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400113d0
mov r8, rdi
mov rdx, rax
lea rcx, [0x140030b50]
call fcn.1400037a0
nop
lea rcx, [rsp + 0xa8]
call fcn.140002a80
mov dword [0x140030d6c], 1
lea rcx, [rsp + 0x58]
call fcn.140012070
nop
lea rcx, [rsp + 0x28]
call fcn.140002b10
nop
mov rdx, qword [rsp + 0xe0]
cmp rdx, 0x10
jb 0x140011460
inc rdx
mov rcx, qword [rsp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001145a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001145a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 0x10
jb 0x1400114a6
inc rdx
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400114a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400114a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x1e0], xmm0
mov byte [rsp + 0x1d0], 0
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 0x10
jb 0x140011505
inc rdx
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140011500
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140011500
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
movdqa xmm0, xmmword [0x140021980]
movdqu xmmword [rsp + 0x1a0], xmm0
mov byte [rsp + 0x190], 0
lea rcx, [rsp + 0x58]
call fcn.140012050
mov al, 1
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.14001df40
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140003570
nop
lea rcx, str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
lea rcx, str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3