Function at 0x14000bef0
Capabilities:
Query environment variable
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x1400300a8]
xor rax, rsp
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x78], rcx
xor edi, edi
movabs rsi, 0x7fffffffffffffff
lea r15d, [rdi + 0x16]
movabs r13, 0x8000000000000000
lea rcx, str.username
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x218], rdi
mov qword [rsp + 0x228], rdi
mov qword [rsp + 0x230], rdi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000bf70
mov rdx, rax
lea rcx, [rsp + 0x218]
call fcn.1400018e0
nop
mov qword [rsp + 0x1d8], rdi
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], SafeArrayPutElement
mov byte [rsp + 0x1d8], 0
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1c8], rdi
mov qword [rsp + 0x1d0], SafeArrayPutElement
mov byte [rsp + 0x1b8], 0
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1b0], SafeArrayPutElement
mov byte [rsp + 0x198], 0
lea rcx, [rsp + 0xb8]
call fcn.140004ab0
nop
lea rcx, [rsp + 0x118]
call fcn.140005150
nop
lea rcx, [rsp + 0xd8]
call fcn.140004e00
nop
mov r14, qword [rsp + 0xc8]
lea rbx, [rsp + 0xb8]
cmp qword [rsp + 0xd0], 0x10
cmovae rbx, qword [rsp + 0xb8]
cmp r14, 0xf
ja 0x14000c094
mov qword [rsp + 0x1e8], r14
mov r8, r14
mov rdx, rbx
lea rcx, [rsp + 0x1d8]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r14 + 0x1d8], 0
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x1e8]
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x58], rax
jmp 0x14000c155
cmp r14, rsi
ja 0x14000e1a7
mov r12, r14
or r12, 0xf
cmp r12, rsi
jbe 0x14000c0d9
mov r12, rsi
mov qword [rsp + 0x40], rsi
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14001db98
test rax, rax
je 0x14000c379
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [rsp + 0x58], r15
mov qword [r15 - 8], rax
jmp 0x14000c124
cmp r12, 0x16
cmovb r12, r15
mov qword [rsp + 0x40], r12
lea rcx, [r12 + 1]
cmp rcx, 0x1000
jb 0x14000c103
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e1ac
jmp 0x14000c0b5
test rcx, rcx
je 0x14000c117
call fcn.14001db98
mov r15, rax
mov qword [rsp + 0x58], rax
jmp 0x14000c11f
mov r15, rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x1e8], r14
mov qword [rsp + 0x1f0], r12
mov r8, r14
mov rdx, rbx
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + r14], 0
mov qword [rsp + 0x1d8], r15
mov r15d, SafeArrayPutElement
mov r13, qword [rsp + 0x128]
lea rbx, [rsp + 0x118]
cmp qword [rsp + 0x130], 0x10
cmovae rbx, qword [rsp + 0x118]
cmp r13, 0xf
ja 0x14000c1c8
mov qword [rsp + 0x1c8], r13
mov r8, r13
mov rdx, rbx
lea rcx, [rsp + 0x1b8]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r13 + 0x1b8], 0
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x38], rax
mov r13, qword [rsp + 0x1c8]
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x50], rax
jmp 0x14000c28d
cmp r13, rsi
ja 0x14000e1b1
mov r12, r13
or r12, 0xf
cmp r12, rsi
jbe 0x14000c217
mov r12, rsi
mov qword [rsp + 0x38], rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001db98
test rax, rax
je 0x14000c379
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [rsp + 0x50], r15
mov qword [r15 - 8], rax
jmp 0x14000c262
cmp r12, 0x16
cmovb r12, r15
mov qword [rsp + 0x38], r12
lea rcx, [r12 + 1]
cmp rcx, 0x1000
jb 0x14000c241
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e1b6
jmp 0x14000c1f3
test rcx, rcx
je 0x14000c255
call fcn.14001db98
mov r15, rax
mov qword [rsp + 0x50], rax
jmp 0x14000c25d
mov r15, rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x1c8], r13
mov qword [rsp + 0x1d0], r12
mov r8, r13
mov rdx, rbx
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + r13], 0
mov qword [rsp + 0x1b8], r15
mov r12, qword [rsp + 0xe8]
lea rbx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rbx, qword [rsp + 0xd8]
cmp r12, 0xf
ja 0x14000c300
mov qword [rsp + 0x1a8], r12
mov r8, r12
mov rdx, rbx
lea rcx, [rsp + 0x198]
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r12 + 0x198], 0
mov rsi, qword [rsp + 0x1b0]
mov qword [rsp + 0x30], rsi
mov r12, qword [rsp + 0x1a8]
mov rbx, qword [rsp + 0x198]
mov qword [rsp + 0x48], rbx
jmp 0x14000c3cc
cmp r12, rsi
ja 0x14000e1bb
mov r15, r12
or r15, 0xf
cmp r15, rsi
jbe 0x14000c34b
mov r15, rsi
mov qword [rsp + 0x30], rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001db98
test rax, rax
je 0x14000c379
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsp + 0x48], rsi
mov qword [rsi - 8], rax
jmp 0x14000c3a1
cmp r15, 0x16
mov eax, SafeArrayPutElement
cmovb r15, rax
mov qword [rsp + 0x30], r15
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x14000c380
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e1c0
jmp 0x14000c32b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000c394
call fcn.14001db98
mov rsi, rax
mov qword [rsp + 0x48], rax
jmp 0x14000c39c
mov rsi, rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x1a8], r12
mov qword [rsp + 0x1b0], r15
mov r8, r12
mov rdx, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r12], 0
mov qword [rsp + 0x198], rsi
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x14000c412
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c40d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c40d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xe8], rdi
mov qword [rsp + SafeArrayPutElement0], 0xf
mov byte [rsp + 0xd8], 0
mov rdx, qword [rsp + 0x130]
cmp rdx, 0x10
jb 0x14000c474
inc rdx
mov rcx, qword [rsp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c46f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c46f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], SafeArrayPutElement
mov byte [rsp + 0x118], 0
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x14000c4d7
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c4d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c4d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
jmp 0x14000c54b
movabs rsi, 0x6b63617254726941
movabs rbx, 0x7fffffffffffffff
lea rcx, [rsp + 0x90]
call fcn.140012020
nop
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], SafeArrayPutElement
mov byte [rsp + 0x158], 0
mov ecx, 8
call fcn.14001db98
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14000c5b5
mov rcx, rax
call fcn.140013bb0
mov r15, rax
jmp 0x14000c5b8
mov r15, rdi
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xf8]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000c5d5
mov rax, qword [rax]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c5e0
mov rdx, rax
lea rcx, [0x140030b10]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000c640
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c63b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c63b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov edx, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rsp + 0xf8]
call fcn.140016100
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000c65d
mov rax, qword [rax]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14000c664
mov rdx, rax
lea rcx, [0x140030b30]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000c6c4
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c6bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c6bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov r8d, 1
lea rdx, [0x140021a90]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea rdx, str.nullptr
lea rcx, [rsp + 0x90]
call fcn.140012ed0
lea rcx, [rsp + 0x90]
call fcn.140012380
test al, al
jne 0x14000c70e
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], SafeArrayPutElement
mov byte [rsp + 0x178], 0
mov qword [rsp + 0xe8], 8
mov qword [rsp + SafeArrayPutElement0], 0xf
mov qword [rsp + 0xd8], rsi
mov byte [rsp + 0xe0], 0
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x138]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000c77a
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021aa8]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0x10
jb 0x14000c7d8
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c7d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c7d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x148], rdi
mov qword [rsp + 0x150], SafeArrayPutElement
mov byte [rsp + 0x138], 0
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x14000c83a
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c835
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rdi
mov rdi, qword [0x140030ba0]
lea rsi, [0x140030b90]
cmp qword [0x140030ba8], 0x10
cmovae rsi, qword [0x140030b90]
cmp rdi, rbx
ja 0x14000e1c6
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000c8ab
mov qword [rsp + 0xc8], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000c915
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000c8c6
mov rbx, rax
jmp 0x14000c8d3
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs rbx, 0x7fffffffffffffff
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000c935
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021aac]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000c993
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c98e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000c98e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov r8d, 1
lea rdx, [0x140021964]
lea rcx, [0x140030af0]
call fcn.1400037a0
lea rcx, [rsp + 0x138]
call fcn.1400119a0
mov r8, rax
lea rdx, [rsp + 0xd8]
mov rcx, r15
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000c9e7
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021ab0]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000ca45
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ca40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ca40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rax, [rsp + 0x1d8]
cmp qword [rsp + 0x40], 0x10
setae cl
mov byte [rsp + 0x2a], cl
mov rdx, qword [rsp + 0x58]
cmovae rax, rdx
lea r8, [0x140021865]
xor esi, esi
cmp rax, r8
je 0x14000cb95
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rsi
lea rdi, [rsp + 0x1d8]
test cl, cl
cmovne rdi, rdx
cmp r14, rbx
ja 0x14000e1cb
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp r14, 0x10
jae 0x14000cad6
mov qword [rsp + 0xc8], r14
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000cb40
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000caf1
mov rbx, rax
jmp 0x14000cafe
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r14
mov qword [rsp + 0xd0], rbx
lea r8, [r14 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs rbx, 0x7fffffffffffffff
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0xf8]
mov rcx, r15
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000cb73
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021960]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0x138]
jmp 0x14000cc07
mov qword [rsp + 0x138], rsi
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], rsi
mov r8d, 4
lea rdx, str.NULL
lea rcx, [rsp + 0x138]
call fcn.1400018e0
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000cbe7
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021960]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0xf8]
call fcn.140002a80
lea rax, [rsp + 0x1b8]
cmp qword [rsp + 0x38], 0x10
setae cl
mov byte [rsp + 0x29], cl
mov rdx, qword [rsp + 0x50]
cmovae rax, rdx
lea r14, [0x140021865]
cmp rax, r14
je 0x14000cd5a
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rsi
lea rdi, [rsp + 0x1b8]
test cl, cl
cmovne rdi, rdx
cmp r13, rbx
ja 0x14000e1d0
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp r13, 0x10
jae 0x14000cc9b
mov qword [rsp + 0xc8], r13
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000cd05
mov rbx, r13
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000ccb6
mov rbx, rax
jmp 0x14000ccc3
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r13
mov qword [rsp + 0xd0], rbx
lea r8, [r13 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs rbx, 0x7fffffffffffffff
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0xf8]
mov rcx, r15
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000cd38
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021ac4]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0x138]
jmp 0x14000cdcd
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe8], 4
mov qword [rsp + SafeArrayPutElement0], 0xf
mov dword [rsp + 0xd8], 0x4c4c554e
mov byte [rsp + 0xdc], 0
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000cdad
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021ac4]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0xf8]
call fcn.140002a80
lea rax, [rsp + 0x198]
cmp qword [rsp + 0x30], 0x10
setae cl
mov byte [rsp + 0x28], cl
mov rdx, qword [rsp + 0x48]
cmovae rax, rdx
cmp rax, r14
je 0x14000cf1b
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd0], rsi
lea rdi, [rsp + 0x198]
test cl, cl
cmovne rdi, rdx
cmp r12, rbx
ja 0x14000e1d5
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp r12, 0x10
jae 0x14000ce5a
mov qword [rsp + 0xc8], r12
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000cebb
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000ce75
mov rbx, rax
jmp 0x14000ce82
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], r12
mov qword [rsp + 0xd0], rbx
lea r8, [r12 + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0xf8]
mov rcx, r15
call fcn.140013ca0
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000ceee
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021a90]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0x138]
call fcn.140002a80
xor r15d, r15d
jmp 0x14000cf96
xor r15d, r15d
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe8], 4
mov qword [rsp + SafeArrayPutElement0], 0xf
mov dword [rsp + 0xd8], 0x4c4c554e
mov byte [rsp + 0xdc], r15b
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000cf71
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021a90]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0xf8]
call fcn.140002a80
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
lea rsi, [rsp + 0x218]
mov r13, qword [rsp + 0x218]
cmp qword [rsp + 0x230], 0x10
cmovae rsi, r13
mov rdi, qword [rsp + 0x228]
movabs r12, 0x7fffffffffffffff
cmp rdi, r12
ja 0x14000e1da
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000d018
mov qword [rsp + 0xc8], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d06e
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000d029
mov rbx, r12
jmp 0x14000d036
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d08e
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021f90]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000d0ec
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d0e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d0e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
mov rbx, qword [0x140030c10]
lea rdi, [0x140030c00]
cmp qword [0x140030c18], 0x10
cmovae rdi, qword [0x140030c00]
cmp rbx, r12
ja 0x14000e1df
mov qword [rsp + 0xd0], SafeArrayPutElement
lea rcx, [rsp + 0xb8]
cmp rbx, 0x10
jae 0x14000d15d
mov qword [rsp + 0xc8], rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d1a0
mov rdx, rbx
call fcn.1400094f0
mov rsi, rax
lea rdx, [rax + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rbx
mov qword [rsp + 0xd0], rsi
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d1c0
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021f94]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000d21e
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d219
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d219
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov rbx, qword [0x140030d38]
cmp qword [0x140030d40], 0x10
setae r14b
lea rdi, [0x140030d28]
mov rcx, rdi
mov rsi, qword [0x140030d28]
cmovae rcx, rsi
test rbx, rbx
jne 0x14000d262
mov r8, rbx
lea rdx, [0x140021865]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000d262
mov al, 1
jmp 0x14000d264
xor al, al
test al, al
jne 0x14000d346
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
test r14b, r14b
cmovne rdi, rsi
cmp rbx, r12
ja 0x14000e1e4
mov qword [rsp + 0xd0], SafeArrayPutElement
lea rcx, [rsp + 0xb8]
cmp rbx, 0x10
jae 0x14000d2c6
mov qword [rsp + 0xc8], rbx
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d309
mov rdx, rbx
call fcn.1400094f0
mov rsi, rax
lea rdx, [rax + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rbx
mov qword [rsp + 0xd0], rsi
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d329
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021f98]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
jmp 0x14000d3c8
mov qword [rsp + 0xe8], 7
mov qword [rsp + SafeArrayPutElement0], 0xf
mov eax, dword [str.Destroy]
mov dword [rsp + 0xd8], eax
movzx eax, word [0x140021acc]
mov word [rsp + 0xdc], ax
movzx eax, byte [0x140021ace]
mov byte [rsp + 0xde], al
mov byte [rsp + 0xdf], 0
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0xf8]
call fcn.140015b70
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d3b0
mov rax, qword [rax]
mov r8, rax
lea rdx, [0x140021f98]
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
lea rcx, [rsp + 0xf8]
call fcn.140002a80
lea rdx, [0x140030b30]
lea rcx, [rsp + 0xf8]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d3f4
mov rax, qword [rax]
mov r8, rax
lea rdx, str.ToDo
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000d452
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d44d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d44d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
lea rdx, [0x140030b10]
lea rcx, [rsp + 0xf8]
call fcn.140015730
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d471
mov rax, qword [rax]
mov r8, rax
lea rdx, str.ToMe
lea rcx, [rsp + 0x158]
call fcn.140012060
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000d4cf
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d4ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d4ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x138], r15
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], r15
mov r8d, 0x20
lea rdx, str.https:__swatx.me_api_securez.php
lea rcx, [rsp + 0x138]
call fcn.1400019a0
lea r9, [rsp + 0x158]
lea r8, [rsp + 0x178]
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x90]
call fcn.140012730
test al, al
jne 0x14000d536
mov ecx, 0x2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe8], 6
mov qword [rsp + SafeArrayPutElement0], 0xf
mov eax, dword [str.remove]
mov dword [rsp + 0xd8], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xdc], ax
mov byte [rsp + 0xde], 0
lea rax, [rsp + 0x118]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x128], 2
mov qword [rsp + 0x130], SafeArrayPutElement
mov eax, 0xa0d
mov word [rsp + 0x118], ax
mov byte [rsp + 0x11a], 0
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
mov rdi, qword [rsp + 0x188]
lea rsi, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rsi, qword [rsp + 0x178]
cmp rdi, r12
ja 0x14000e1ea
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000d641
mov qword [rsp + 0xc8], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d698
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000d652
mov rbx, r12
jmp 0x14000d65f
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea r9, [rsp + 0xd8]
lea r8, [rsp + 0x118]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x138]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d6c8
mov rax, qword [rax]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14000d6d0
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400037a0
nop
mov r8, qword [rsp + 0x150]
cmp r8, 0x10
jb 0x14000d711
inc r8
mov rdx, qword [rsp + 0x138]
lea rcx, [rsp + 0x138]
call fcn.140003a40
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xd8], r15
mov qword [rsp + 0xe8], 6
mov qword [rsp + SafeArrayPutElement0], 0xf
mov eax, dword [str.remove]
mov dword [rsp + 0xd8], eax
movzx eax, word [0x140021a8c]
mov word [rsp + 0xdc], ax
mov byte [rsp + 0xde], 0
lea rax, [rsp + 0x118]
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x128], 2
mov qword [rsp + 0x130], SafeArrayPutElement
mov eax, 0x3d3d
mov word [rsp + 0x118], ax
mov byte [rsp + 0x11a], 0
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
mov rdi, qword [rsp + 0x188]
lea rsi, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rsi, qword [rsp + 0x178]
cmp rdi, r12
ja 0x14000e1f0
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000d81c
mov qword [rsp + 0xc8], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d873
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000d82d
mov rbx, r12
jmp 0x14000d83a
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea r9, [rsp + 0xd8]
lea r8, [rsp + 0x118]
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0xf8]
call fcn.14000e3d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d8a3
mov rax, qword [rax]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000d8b0
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400037a0
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x14000d911
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d90c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d90c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xd0], r15
mov rdi, qword [rsp + 0x188]
lea rsi, [rsp + 0x178]
cmp qword [rsp + 0x190], 0x10
cmovae rsi, qword [rsp + 0x178]
cmp rdi, r12
ja 0x14000e1f6
mov qword [rsp + 0xd0], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000d986
mov qword [rsp + 0xc8], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000d9dc
mov rbx, rdi
or rbx, 0xf
cmp rbx, r12
jbe 0x14000d997
mov rbx, r12
jmp 0x14000d9a4
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xb8]
call fcn.1400035d0
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xd0], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x138]
call fcn.140014f00
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000d9fc
mov rax, qword [rax]
mov qword [rsp + 0x1f8], r15
mov qword [rsp + 0x208], r15
mov qword [rsp + 0x210], r15
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000da20
mov rdx, rax
lea rcx, [rsp + 0x1f8]
call fcn.1400018e0
nop
mov r8, qword [rsp + 0x150]
cmp r8, 0x10
jb 0x14000da61
inc r8
mov rdx, qword [rsp + 0x138]
lea rcx, [rsp + 0x138]
call fcn.140003a40
mov qword [rsp + 0x148], r15
mov qword [rsp + 0x150], SafeArrayPutElement
mov byte [rsp + 0x138], 0
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x128], r15
mov qword [rsp + 0x130], r15
lea rsi, [rsp + 0x1f8]
mov r15, qword [rsp + 0x210]
cmp r15, 0x10
setae r12b
mov r14, qword [rsp + 0x1f8]
cmovae rsi, r14
mov rdi, qword [rsp + 0x208]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x14000e1fc
mov qword [rsp + 0x130], SafeArrayPutElement
cmp rdi, 0x10
jae 0x14000db06
mov qword [rsp + 0x128], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
mov rdx, rsi
lea rcx, [rsp + 0x118]
call sub.VCRUNTIME140.dll_memmove
jmp 0x14000db5c
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14000db17
mov rbx, rax
jmp 0x14000db24
cmp rbx, 0x16
mov eax, SafeArrayPutElement
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0x118]
call fcn.1400035d0
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0x130], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x118]
lea rcx, [rsp + 0xf8]
call fcn.1400153c0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14000db7c
mov rax, qword [rax]
xor esi, esi
mov qword [rsp + 0xd8], rsi
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0xf0], rsi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], sil
jne 0x14000dba0
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.1400018e0
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
lea rbx, [rsp + 0xd8]
cmp qword [rsp + 0xf0], 0x10
cmovae rbx, qword [rsp + 0xd8]
mov dword [rax], esi
mov r8d, 0xa
lea rdx, [rsp + 0x80]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov esi, eax
cmp rbx, qword [rsp + 0x80]
je 0x14000e202
cmp dword [rdi], 0x22
je 0x14000e20e
mov rdx, qword [rsp + 0xf0]
cmp rdx, 0x10
jb 0x14000dc55
inc rdx
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dc50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dc50
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
xor edi, edi
mov qword [rsp + 0xe8], rdi
mov qword [rsp + SafeArrayPutElement0], 0xf
mov byte [rsp + 0xd8], dil
mov r8, qword [rsp + 0x110]
cmp r8, 0x10
jb 0x14000dc99
inc r8
mov rdx, qword [rsp + 0xf8]
lea rcx, [rsp + 0xf8]
call fcn.140003a40
cmp esi, dword [0x140030bd0]
je 0x14000df35
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
test r12b, r12b
je 0x14000dce7
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000dcdf
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000df90
mov rcx, r14
call fcn.14001dbd4
mov qword [rsp + 0x208], rdi
mov qword [rsp + 0x210], SafeArrayPutElement
mov byte [rsp + 0x1f8], 0
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14000dd46
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dfda
call fcn.14001dbd4
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], SafeArrayPutElement
mov byte [rsp + 0x178], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000dda5
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dda0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e03c
call fcn.14001dbd4
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], SafeArrayPutElement
mov byte [rsp + 0x158], 0
lea rcx, [rsp + 0x90]
call fcn.140012050
nop
cmp byte [rsp + 0x28], 0
je 0x14000de0d
mov rdx, qword [rsp + 0x30]
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0a6
call fcn.14001dbd4
mov qword [rsp + 0x1a8], rdi
mov qword [rsp + 0x1b0], SafeArrayPutElement
mov byte [rsp + 0x198], 0
cmp byte [rsp + 0x29], 0
je 0x14000de67
mov rdx, qword [rsp + 0x38]
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e0e7
call fcn.14001dbd4
mov qword [rsp + 0x1c8], rdi
mov qword [rsp + 0x1d0], SafeArrayPutElement
mov byte [rsp + 0x1b8], 0
cmp byte [rsp + 0x2a], 0
je 0x14000dec1
mov rdx, qword [rsp + 0x40]
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000debc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e128
call fcn.14001dbd4
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], SafeArrayPutElement
mov byte [rsp + 0x1d8], 0
mov rax, qword [rsp + 0x230]
cmp rax, 0x10
movabs rsi, 0x7fffffffffffffff
mov r15d, SafeArrayPutElement
jb 0x14000bf36
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14000df28
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e168
mov rcx, r13
call fcn.14001dbd4
jmp 0x14000bf36
mov dword [0x140030d74], 0x7b6140
mov rbx, qword [rsp + 0x68]
mov qword [rbx], rdi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
mov r8d, 4
lea rdx, str.GOOD
mov rcx, rbx
call fcn.1400018e0
nop
cmp r15, 0x10
jb 0x14000dfa0
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000df97
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000df97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14001dbd4
nop
mov rdx, qword [rsp + 0x190]
cmp rdx, 0x10
jb 0x14000dfe6
inc rdx
mov rcx, qword [rsp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dfe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dfe1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x190], SafeArrayPutElement
mov byte [rsp + 0x178], 0
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14000e048
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e043
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e043
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], SafeArrayPutElement
mov byte [rsp + 0x158], 0
lea rcx, [rsp + 0x90]
call fcn.140012050
nop
mov rdx, qword [rsp + 0x30]
cmp rdx, 0x10
jb 0x14000e0b3
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14000e0f4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e0ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x14000e135
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e12f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e12f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dbd4
nop
mov rax, qword [rsp + 0x230]
cmp rax, 0x10
jb 0x14000e177
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14000e16f
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e16f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.14001dbd4
mov rax, rbx
mov rcx, qword [rsp + 0x238]
xor rcx, rsp
call fcn.14001df40
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140003570
call fcn.1400034c0
call fcn.140003570
call fcn.1400034c0
call fcn.140003570
call fcn.1400034c0
nop
call fcn.140003570
call fcn.140003570
call fcn.140003570
call fcn.140003570
call fcn.140003570
call fcn.140003570
call fcn.140003570
nop
call fcn.140003570
nop
call fcn.140003570
nop
call fcn.140003570
nop
call fcn.140003570
nop
lea rcx, str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
lea rcx, str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3