Function at 0x140033310
Capabilities:
Contain obfuscated stackstrings
Parse credit card information

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10d30]
mov eax, 0x10e30
call fcn.1400ddd60
sub rsp, rax
movzx esi, r8b
mov dword [rsp + 0x44], r9d
mov r8, qword [rbp + 0x10d90]
mov ebx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
xor r12d, r12d
mov dword [rsp + 0x40], esi
mov rdi, rdx
mov r14, rcx
lea r15d, [rbx - 6]
test r8, r8
je 0x1400333ac
lea rcx, [rbp + 0x110]
sub rcx, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [r8]
mov word [rcx + r8], ax
lea r8, [r8 + 2]
test ax, ax
jne 0x140033380
mov r13, qword [rbp + 0x10d98]
test r13, r13
jne 0x140033def
mov qword [rsp + 0x50], rdi
jmp 0x140033ed2
cmp sil, 3
jne 0x1400333c8
xor eax, eax
mov qword [rsp + 0x50], rdi
mov word [rbp + 0x110], ax
mov r13d, eax
jmp 0x140033ed2
mov r8, r15
lea rdx, str.Global
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
mov rax, qword [0x140112060]
jne 0x1400333fe
cmp qword [rax + 0xd8], r12
mov ecx, 0x41
mov r13d, 0xc1
cmovne r13d, ecx
jmp 0x140033450
cmp qword [rax + 0xd8], r12
je 0x140033dce
mov r8d, 5
lea rdx, str.Local
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14003342f
lea r13d, [rax + 0x42]
lea eax, [r13 - 0x38]
jmp 0x140033453
mov r8, r15
lea rdx, str.Static
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140033dce
mov r13d, 0x62
mov rax, rbx
lea rbx, [rax + rdi]
mov dword [rsp + 0x48], r13d
movzx eax, word [rbx]
test ax, ax
je 0x140033e08
cmp ax, 0x20
je 0x140033484
cmp ax, 9
jne 0x140033dce
cmp ax, 0x20
je 0x140033484
cmp ax, 9
jne 0x14003348e
movzx eax, word [rbx + 2]
add rbx, 2
jmp 0x140033478
test ax, ax
je 0x140033e08
movzx r14d, word [rbx + 2]
mov word [rbx + 2], r12w
movzx edi, word [rbx]
test di, di
je 0x140033dbb
mov rsi, rbx
movzx ecx, di
test ecx, 0xffffff80
jne 0x1400334e3
mov edx, 0x107
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
jne 0x1400334e3
movzx edx, di
lea rcx, [0x140102f38]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140033db7
movzx edi, word [rsi + 2]
add rsi, 2
test di, di
jne 0x1400334b0
mov rsi, qword [rbp + 0x10d70]
mov word [rbx + 2], r14w
cmp byte [rsi + 0x3c], r12b
je 0x14003355b
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
cmp byte [rcx + 0x78], r12b
jne 0x14003355b
cmp r13d, 0x62
je 0x140033528
cmp r13d, 0x42
setne al
add al, 0x41
mov byte [rcx + 0x78], al
mov rax, qword [rsi + 0x668]
test rax, rax
je 0x1400335b9
movzx ecx, byte [rax]
lea eax, [rcx - 9]
cmp al, 0x18
jbe 0x140033554
sub cl, 0x69
cmp cl, 0xa
ja 0x1400335b9
mov eax, 0x707
bt eax, ecx
jae 0x1400335b9
mov byte [rsp + 0x58], 1
jmp 0x1400335be
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
test rcx, rcx
je 0x140033528
movzx eax, byte [rcx + 0x78]
cmp r13d, eax
jne 0x140033528
cmp r13d, 0x41
jne 0x140033598
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Global_variables_must_not_be_declared_in_this_function.
mov rcx, rsi
call fcn.14004dc70
jmp 0x140033d15
cmp r13d, 0x42
jne 0x140033528
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Local_variables_must_not_be_declared_in_this_function.
mov rcx, rsi
call fcn.14004dc70
jmp 0x140033d15
mov byte [rsp + 0x58], r12b
movzx edx, word [rbx]
mov byte [rbp + 0x10d90], r12b
test dx, dx
je 0x140033e35
mov r8, 0xffffffffffffffff
mov eax, 0x2c
mov r14, rbx
lea rcx, str.___t:
cmp dx, ax
je 0x140033620
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x1400335e7
movzx edx, word [r14 + 2]
add r14, 2
mov eax, 0x2c
test dx, dx
jne 0x1400335e0
mov rax, r8
nop
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140033610
lea r14, [rbx + rax*2]
mov rax, qword [0x140112060]
mov r15, r14
sub r15, rbx
sar r15, 1
mov rcx, qword [rax + 0xd8]
test rcx, rcx
je 0x140033757
cmp dword [rcx + 0x20], 0
mov edi, r12d
jle 0x140033699
mov rsi, r12
nop dword [rax]
mov rax, qword [rcx + 0x18]
mov r9, r8
mov r8, r15
mov rcx, rbx
mov rdx, qword [rax + rsi]
mov rdx, qword [rdx + 0x28]
call fcn.1400bf4d0
test eax, eax
je 0x140033d30
mov rax, qword [0x140112060]
inc edi
add rsi, 0x18
mov r8, 0xffffffffffffffff
mov rcx, qword [rax + 0xd8]
cmp edi, dword [rcx + 0x20]
jl 0x140033650
mov rsi, qword [rbp + 0x10d70]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov r8, r15
mov dword [rsp + 0x20], 2
mov rdx, rbx
mov rcx, rsi
call fcn.14003d180
mov r12, rax
test rax, rax
je 0x1400336e1
movzx ecx, byte [rax + 0x22]
xor ecx, r13d
test ecx, 0xffffffbf
jne 0x140033d48
cmp r13d, 0x62
je 0x140033d48
xor eax, eax
mov r12d, eax
cmp r13d, 0x41
je 0x140033754
mov esi, eax
mov rdi, rax
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
cmp dword [rcx + 0x58], 0
jle 0x140033744
mov rax, qword [rcx + 0x30]
mov r9, r15
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov rcx, qword [rax + rdi*8]
mov rcx, qword [rcx + 0x28]
call fcn.1400bf4d0
test eax, eax
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
je 0x14003373c
inc esi
inc rdi
cmp esi, dword [rcx + 0x58]
jl 0x140033700
jmp 0x140033744
mov rax, qword [rcx + 0x30]
mov r12, qword [rax + rdi*8]
mov rsi, qword [rbp + 0x10d70]
test r12, r12
jne 0x140033d48
xor r12d, r12d
cmp word [rbx], 0
je 0x140033d13
lea rax, [rsp + 0x59]
mov r8, r15
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
mov rdx, rbx
mov dword [rsp + 0x20], r13d
mov rcx, rsi
call fcn.14003d180
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
jne 0x1400337d6
cmp byte [rsp + 0x59], al
je 0x1400337a1
mov ecx, r13d
and ecx, 0x20
or ecx, 2
jmp 0x1400337a6
mov ecx, 1
mov r9d, dword [rsp + 0x70]
mov eax, r13d
and eax, 0xfffffffc
mov r8, r15
or eax, ecx
mov rdx, rbx
mov rcx, rsi
mov dword [rsp + 0x20], eax
call fcn.14003d6c0
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
je 0x140033d13
movzx eax, byte [rcx + 0x23]
test al, al
jne 0x1400337e6
mov rax, qword [rcx + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x140033da0
cmp r15, 0xffffffffffffffff
jne 0x1400337ff
inc r15
cmp word [rbx + r15*2], 0
jne 0x1400337f4
mov r13d, 0xa
cmp r15, r13
cmovb r13, r15
test r13, r13
je 0x140033871
movzx edi, word [rbx + r12*2]
test edi, 0xffffff80
jne 0x140033832
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x140033832
and edi, 0xffffffdf
lea rax, [0x140000000]
movzx esi, word [rax + r12*2 + 0xf8460]
test esi, 0xffffff80
jne 0x14003385e
mov edx, 2
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14003385e
and esi, 0xffffffdf
cmp edi, esi
jne 0x14003387d
inc r12
cmp r12, r13
jb 0x140033811
mov rsi, qword [rbp + 0x10d70]
lea eax, [r15 - 0xa]
test eax, eax
je 0x140033da0
mov r13d, dword [rsp + 0x48]
cmp r13d, 0x41
jne 0x1400338bf
mov rdx, qword [0x140112060]
mov rax, qword [rdx + 0xd8]
movsxd rcx, dword [rax + 0x58]
cmp ecx, 0x7d0
jge 0x140033d6d
mov rax, qword [rax + 0x30]
mov r8, qword [rsp + 0x68]
mov qword [rax + rcx*8], r8
mov rax, qword [rdx + 0xd8]
inc dword [rax + 0x58]
jmp 0x1400338d1
cmp r13d, 0xc1
jne 0x1400338d1
mov r8, qword [rsp + 0x68]
mov byte [r8 + 0x22], r13b
movzx eax, word [r14]
cmp ax, 0x20
je 0x1400338e1
cmp ax, 9
jne 0x1400338e7
add r14, 2
jmp 0x1400338d1
test ax, ax
je 0x140033cd1
cmp ax, 0x2c
je 0x140033ca5
cmp ax, 0x3a
je 0x14003390f
cmp ax, 0x3d
jne 0x14003391f
add r14, 2
mov sil, 1
jmp 0x140033922
cmp word [r14 + 2], 0x3d
jne 0x140033d85
add r14, 4
xor sil, sil
mov edx, 0x2c
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
call fcn.1400c1bb0
movsxd rcx, eax
lea r14, [r14 + rcx*2]
lea rdi, [r14 - 2]
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x80], rdi
cmp rdi, rbx
jbe 0x14003396c
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14003395f
cmp ax, 9
jne 0x140033968
sub rdi, 2
cmp rdi, rbx
ja 0x140033950
mov qword [rbp - 0x80], rdi
movzx r15d, word [rdi + 2]
xor r12d, r12d
mov word [rsp + 0x40], r15w
mov word [rdi + 2], r12w
test sil, sil
je 0x140033b3e
lea rcx, [rbp + 0x8d20]
sub rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx]
mov word [rbx + rcx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x1400339a0
mov r15d, 1
lea rax, [rbp + 0x8d20]
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], r9w
jne 0x1400339c4
mov r14, r12
mov rsi, r12
mov qword [rsp + 0x68], r12
cmp word [rbp + 0x8d20], r12w
je 0x140033b28
cmp word [0x1400e0fc4], r12w
je 0x140033b28
cmp rdi, 0x1388
jb 0x140033b98
mov ebx, r12d
lea r12, [rbp + 0x8d20]
nop dword [rax]
lea rdx, [0x1400e0fc4]
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov r13, rax
test rax, rax
je 0x140033ad8
inc ebx
dec r15d
mov dword [rsp + 0x44], ebx
mov rbx, rax
sub rbx, r12
sar rbx, 1
lea rax, [rsi + rbx]
lea rcx, [rax + 2]
mov qword [rsp + 0x78], rax
cmp rcx, qword [rsp + 0x68]
jb 0x140033a9f
lea rdx, [rbp + 0x8d20]
movsxd rcx, ecx
mov rax, r13
movsxd r9, edi
sub rax, rdx
mov r8d, r15d
mov edx, dword [rsp + 0x44]
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov ecx, 1
call fcn.1400c00a0
mov rcx, r14
mov qword [rsp + 0x68], rax
lea rdx, [rax + rax]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x140033b12
mov r14, rax
test rbx, rbx
je 0x140033ab9
lea r8, [rbx + rbx]
mov rdx, r12
lea rcx, [r14 + rsi*2]
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x78]
mov eax, dword [0x1400e0fc8]
lea r12, [r13 + 2]
mov ebx, dword [rsp + 0x44]
mov dword [r14 + rsi*2], eax
add rsi, 2
test r15d, r15d
jne 0x140033a10
test ebx, ebx
je 0x140033b20
lea rcx, [rbp + 0x8d20]
mov rax, r12
sub rax, rcx
sar rax, 1
sub rdi, rax
je 0x140033b6e
lea rbx, [rsi + rdi]
cmp rbx, qword [rsp + 0x68]
jb 0x140033b5b
lea rdx, [rbx*2 + 2]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
jne 0x140033b58
test r14, r14
je 0x140033b20
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r12d, r12d
mov r13d, dword [rsp + 0x48]
mov rdi, qword [rbp - 0x80]
lea rbx, [rbp + 0x8d20]
mov r14, qword [rsp + 0x60]
movzx r15d, word [rsp + 0x40]
mov rsi, qword [rbp + 0x10d70]
cmp r13d, 0x62
jne 0x140033bfb
mov byte [rsi + 0x3d], 1
jmp 0x140033c2f
mov r14, rax
lea r8, [rdi + rdi]
mov rdx, r12
lea rcx, [r14 + rsi*2]
call sub.VCRUNTIME140.dll_memcpy
mov rsi, rbx
xor r12d, r12d
lea r8, [rsi*2 + 2]
mov rdx, r14
mov word [r14 + rsi*2], r12w
lea rcx, [rbp + 0x8d20]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140033b23
lea rsi, [rbp + 0x8d20]
nop
lea rdx, [0x1400e0fc4]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rbx, rax
test rax, rax
je 0x140033b28
lea rsi, [rax + 4]
mov rcx, rbx
lea rax, [rbp + 0x8d20]
mov r8, rdi
sub rcx, rax
lea rdx, [rbx + 2]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
add r8, r8
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [0x1400e0fc8]
inc rdi
mov dword [rbx], eax
add r15d, 0xffffffff
jne 0x140033ba0
jmp 0x140033b28
cmp byte [rsp + 0x58], 0
je 0x140033c2f
cmp byte [rbp + 0x10d90], 0
jne 0x140033c2f
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov dl, 0x77
mov rcx, rsi
call fcn.140036910
test eax, eax
je 0x140033d13
mov byte [rbp + 0x10d90], 1
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov qword [rsp + 0x28], r12
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], r12
call fcn.140033310
test eax, eax
je 0x140033d13
cmp r13d, 0x62
jne 0x140033c7e
mov rcx, qword [rsi + 0x668]
mov byte [rsi + 0x3d], 0
movzx eax, byte [rcx]
mov qword [rcx + 0x10], rax
mov rax, qword [rsi + 0x668]
mov byte [rax], 8
mov word [rdi + 2], r15w
cmp word [r14], 0x2c
jne 0x140033cdb
lea rbx, [r14 + 2]
nop
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140033c9f
cmp ax, 9
jne 0x140033cde
add rbx, 2
jmp 0x140033c90
lea rbx, [r14 + 2]
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140033cbf
cmp ax, 9
jne 0x140033cc5
add rbx, 2
jmp 0x140033cb0
mov rsi, qword [rbp + 0x10d70]
xor r12d, r12d
jmp 0x140033cde
mov rsi, qword [rbp + 0x10d70]
xor r12d, r12d
mov rbx, r14
movzx edx, word [rbx]
test dx, dx
jne 0x1400335d1
cmp byte [rbp + 0x10d90], dl
je 0x140033e35
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov dl, 0x78
mov rcx, rsi
call fcn.140036910
test eax, eax
jne 0x140033e35
xor eax, eax
mov rbx, qword [rsp + 0x10e80]
add rsp, 0x10e30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Parameters_must_not_be_declared.
mov r8, rbx
call fcn.14004dc70
jmp 0x140033d15
test byte [r12 + 0x22], 0x40
lea rax, str.Duplicate_declaration.
lea rdx, str.Declaration_conflicts_with_existing_var.
mov r8, rbx
cmovne rdx, rax
mov rcx, rsi
call fcn.14004dc70
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Too_many_declarations.
mov r8, rbx
call fcn.14004dc70
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.This_line_does_not_contain_a_recognized_action.
mov r8, rbx
call fcn.14004dc70
jmp 0x140033d15
mov r8, rbx
lea rdx, str.Built_in_variables_must_not_be_declared.
mov rcx, rsi
call fcn.14004dc70
jmp 0x140033d15
mov esi, dword [rsp + 0x40]
mov rdi, qword [rbp + 0x10d78]
mov word [rbx + 2], r14w
mov r14, qword [rbp + 0x10d70]
mov r9b, 1
lea rdx, [rbp + 0x110]
mov r8, rdi
mov rcx, r14
call fcn.140036540
mov r13, rax
test rax, rax
je 0x140033d13
lea rdi, [r13 + 2]
movzx ecx, word [rdi]
cmp cx, 0x20
je 0x140033e02
cmp cx, 9
jne 0x140033e6d
add rdi, 2
jmp 0x140033df3
cmp byte [r14 + 0x3c], r12b
je 0x140033e56
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
movzx eax, byte [rcx + 0x78]
test al, al
jne 0x140033e3f
cmp r13d, 0x42
mov eax, 0x46
cmove r13d, eax
mov byte [rcx + 0x78], r13b
mov eax, 1
jmp 0x140033d15
cmp al, 0x46
jne 0x140033e56
cmp r13d, 0x62
jne 0x140033e56
mov byte [rcx + 0x78], 0x66
lea eax, [r13 - 0x61]
jmp 0x140033d15
mov r8, rdi
lea rdx, str.This_line_does_not_contain_a_recognized_action.
mov rcx, r14
call fcn.14004dc70
jmp 0x140033d15
movzx ecx, word [r13 + 2]
cmp cx, word [0x140113a88]
mov qword [rsp + 0x50], rdi
je 0x140033eca
cmp ecx, 0x20
ja 0x140033e95
movabs rdx, 0x100000201
bt rdx, rcx
jb 0x140033eca
cmp ecx, 0x28
jne 0x140033ecd
lea rdx, [0x1400f84b4]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140033eca
lea rdx, str.WHILE
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140033ecd
mov r12b, 1
mov r9d, dword [rsp + 0x44]
xor al, al
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov byte [rbp + 0x10d90], al
mov r10, 0xffffffffffffffff
movzx eax, word [0x140113a88]
lea r11d, [rbx + 8]
lea r14d, [rbx - 0x15]
cmp word [rdi], ax
jne 0x140033f19
movzx eax, word [rdi + 2]
add rdi, 2
mov qword [rsp + 0x50], rdi
cmp ax, r11w
je 0x140033efa
cmp ax, 9
jne 0x140034548
jmp 0x140033efa
test sil, sil
jne 0x1400342d7
test r9b, r9b
jne 0x140034556
test r12b, r12b
je 0x140034687
lea rdx, [0x1400f84b4]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14003467c
movzx edx, word [rdi]
cmp dx, 0x28
je 0x1400345db
cmp dx, word [0x140113a84]
jne 0x140033f7e
movzx eax, word [rdi + 2]
cmp ax, 0x20
je 0x1400345db
cmp ax, 9
je 0x1400345db
movzx eax, word [0x140113a88]
xor r15d, r15d
mov word [rbp - 0x76], ax
mov r8d, SafeArrayAllocDescriptor
mov word [rbp - 0x78], r8w
mov rbx, rdi
mov dword [rbp - 0x74], 0x90028
mov dword [rbp - 0x70], 0x3e003c
mov dword [rbp - 0x6c], 0x3d003a
mov dword [rbp - 0x68], 0x2d002b
mov dword [rbp - 0x64], 0x2f002a
mov dword [rbp - 0x60], 0x7e0021
mov dword [rbp - 0x5c], 0x7c0026
mov dword [rbp - 0x58], 0x5b005e
mov dword [rbp - 0x54], 0x3f002e
mov dword [rbp - 0x50], 0x7b
test dx, dx
je 0x14003401a
nop word [rax + rax]
lea rcx, [rbp - 0x78]
movzx eax, r8w
cmp dx, ax
je 0x140034060
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140033ff8
movzx eax, word [rbx + 2]
add rbx, 2
movzx edx, ax
test ax, ax
jne 0x140033ff0
mov rax, 0xffffffffffffffff
cmp word [rdi + rax*2 + 2], r15w
lea rax, [rax + 1]
jne 0x140034021
lea rbx, [rdi + rax*2]
mov r8, r14
lea rdx, [0x1400f5f10]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034075
movzx edx, word [rdi + 6]
lea rcx, [rbp - 0x78]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034075
mov sil, 1
jmp 0x140034078
movzx eax, word [rbx]
cmp ax, r8w
je 0x14003406f
cmp ax, 9
jne 0x140034031
add rbx, 2
jmp 0x140034060
xor sil, sil
movzx eax, word [rbx]
add eax, 0xffffffdf
cmp eax, 0x4d
ja case.0x1400340a4.34
lea r9, [0x140000000]
cdqe
movzx eax, byte [r9 + rax + 0x36218]
mov ecx, dword [r9 + rax*4 + 0x361f4]
add rcx, r9
jmp rcx
movzx eax, word [0x140113a88]
mov sil, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov dword [rsp + 0x40], esi
mov word [rbx], ax
jmp 0x1400342de
movzx ecx, word [rbx + 2]
sub ecx, 0x3d
je 0x1400340f1
movzx eax, word [0x140113a88]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
cmp ecx, 1
je 0x1400340ec
mov sil, reloc.OLEAUT32.dll_SafeArrayAccessData
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x1400342ea
mov sil, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x14003412f
mov sil, reloc.OLEAUT32.dll_SafeArrayUnaccessData
movzx eax, word [0x140113a88]
mov r10d, SafeArrayAllocDescriptor
mov word [rbx + 2], r10w
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x1400342de
cmp word [rbx + 2], 0x3d
movzx eax, word [0x140113a88]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
jne 0x140034146
mov sil, reloc.OLEAUT32.dll_SafeArrayUnlock
mov r10d, SafeArrayAllocDescriptor
mov dword [rsp + 0x40], esi
mov word [rbx + 2], r10w
mov word [rbx], ax
jmp 0x1400342ea
mov sil, reloc.OLEAUT32.dll_SafeArrayLock
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x1400342ea
cmp word [rbx + 2], 0x3d
jne case.0x1400340a4.34
mov sil, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x1400340f4
test sil, sil
jne case.0x1400340a4.34
mov r8d, 7
lea rdx, str.between
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400340a4.34
movzx eax, word [0x140113a88]
mov dl, reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rbx + 2], 0x200020
mov dword [rbx + 6], 0x200020
mov dword [rbx + 0xa], 0x200020
mov word [rbx], ax
mov dword [rsp + 0x40], edx
jmp 0x14003444f
test sil, sil
jne case.0x1400340a4.34
mov r8d, 8
lea rdx, str.contains
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400340a4.34
mov dword [rbx + 2], 0x200020
mov sil, reloc.WSOCK32.dll_inet_ntoa
mov dword [rbx + 6], 0x200020
mov eax, SafeArrayAllocDescriptor
mov dword [rbx + 0xa], 0x200020
mov word [rbx + 0xe], ax
mov dword [rsp + 0x40], esi
jmp 0x1400342cd
movzx edi, word [rbx + 2]
test edi, 0xffffff80
jne 0x140034227
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x140034227
and edi, 0xffffffdf
cmp edi, 0x4e
je 0x1400342ad
cmp edi, 0x53
je 0x140034243
cmp edi, 0x6e
je 0x1400342ad
cmp edi, 0x73
jne case.0x1400340a4.34
test sil, sil
jne case.0x1400340a4.34
lea rdi, [rbx + 4]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14003425f
cmp ax, 9
jne 0x140034265
add rdi, 2
jmp 0x140034250
mov r8, r14
lea rdx, [0x1400f93b8]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov r14d, SafeArrayAllocDescriptor
test eax, eax
je 0x140034292
mov dl, 0xd
mov word [rbx + 2], r14w
mov dword [rsp + 0x40], edx
jmp 0x14003451c
mov dword [rdi], 0x200020
mov dl, SafeArrayDestroy
mov word [rdi + 4], r14w
mov dword [rsp + 0x40], edx
mov word [rbx + 2], r14w
jmp 0x14003451c
test sil, sil
jne case.0x1400340a4.34
mov sil, 9
mov r10d, SafeArrayAllocDescriptor
mov dword [rsp + 0x40], esi
mov word [rbx + 2], r10w
mov rdi, qword [rsp + 0x50]
movzx eax, word [0x140113a88]
mov word [rbx], ax
lea r9, [0x140000000]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
movzx ecx, sil
xor r15d, r15d
mov dword [rsp + 0x70], ecx
mov qword [rsp + 0x60], r15
sub ecx, 0x21
je 0x140034e4e
sub ecx, 0x50
je 0x140034e4e
sub ecx, 1
je 0x140034e48
sub ecx, 1
je 0x140034e4e
cmp ecx, 3
jne 0x140034e8e
mov r8d, r15d
lea r10d, [r15 + 0x29]
lea r11d, [r15 + 0x7d]
mov r14d, 0x3a
nop dword [rax + rax]
movsxd rax, r8d
movzx ecx, word [rdi + rax*2]
lea rdx, [rdi + rax*2]
cmp ecx, r14d
jne 0x14003435c
cmp word [rdi + rax*2 + 2], 0x3d
jne case.0x140034379.0
cmp ecx, r11d
ja case.0x140034379.3
movzx eax, byte [r9 + rcx + 0x36288]
mov ecx, dword [r9 + rax*4 + 0x36268]
add rcx, r9
jmp rcx
mov r8, r14
lea rdx, [0x1400f93b8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400340a4.34
movzx eax, word [rbx + 6]
lea rdi, [rbx + 6]
cmp ax, 0x20
je 0x1400343b0
cmp ax, 9
jne case.0x1400340a4.34
nop
mov r14d, SafeArrayAllocDescriptor
mov dword [rbx], 0x200020
mov word [rbx + 4], r14w
cmp ax, r14w
je 0x1400343cd
cmp ax, 9
jne 0x1400343d7
movzx eax, word [rdi + 2]
add rdi, 2
jmp 0x1400343c1
mov r8d, 2
lea rdx, [0x1400e1000]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034403
mov sil, 0xa
mov dword [rdi], 0x200020
mov dword [rsp + 0x40], esi
jmp 0x1400342c8
mov r8d, 7
lea rdx, str.between
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400344d7
movzx eax, word [0x140113a88]
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rdi], 0x200020
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
mov word [rdi + 0xc], r14w
mov word [rbx], ax
mov dword [rsp + 0x40], edx
mov rdi, qword [rsp + 0x50]
lea rdx, [0x1400f8558]
mov rcx, rbx
call fcn.1400bf820
mov rbx, rax
test rax, rax
je 0x1400344b8
nop word [rax + rax]
movzx edx, word [rbx - 2]
lea rcx, [0x1400f6260]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x1400344a0
movzx edx, word [rbx + 6]
lea rcx, [0x1400f6260]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
jne 0x1400345c5
lea rcx, [rbx + 6]
lea rdx, [0x1400f8558]
call fcn.1400bf820
mov rbx, rax
test rax, rax
jne 0x140034470
mov r8, qword [rbp + 0x10d78]
lea rdx, str.BETWEEN_requires_the_word_AND.
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dc70
jmp 0x140033d15
mov r8d, 8
lea rdx, str.contains
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034518
mov dword [rdi], 0x200020
mov sil, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
mov dword [rdi + 0xc], 0x200020
mov dword [rsp + 0x40], esi
jmp 0x1400342c8
mov edx, dword [rsp + 0x40]
movzx eax, word [0x140113a88]
movzx ecx, dl
mov word [rbx], ax
cmp dl, 0xf
je 0x14003444a
mov rdi, qword [rsp + 0x50]
mov dword [rsp + 0x40], edx
cmp dl, 0x10
je 0x14003444f
mov esi, dword [rsp + 0x40]
test sil, sil
jne 0x1400342d7
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetElement
lea r9, [0x140000000]
mov r14d, dword [rsp + 0x44]
test r12b, r12b
je 0x140034aa8
test r14b, r14b
jne 0x140034aa8
mov esi, ebx
mov dword [rsp + 0x40], ebx
nop word [rax + rax]
movsxd rax, esi
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r9 + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034a4d
inc esi
lea r9, [0x140000000]
mov dword [rsp + 0x40], esi
cmp esi, 0xe6
jl 0x140034580
xor sil, sil
mov dword [rsp + 0x40], esi
jmp 0x140034a56
movzx eax, word [0x140113a88]
mov word [rbx], ax
mov dword [rbx + 2], 0x200020
jmp 0x140034544
xor r15d, r15d
mov rdi, qword [rsp + 0x50]
mov sil, reloc.OLEAUT32.dll_SafeArrayGetElemsize
mov dword [rsp + 0x40], esi
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], 0
jne 0x1400345f1
dec rax
cmp word [rdi + rax*2], 0x7b
lea rax, [rdi + rax*2]
jne 0x1400342d7
mov word [rax], r15w
sub rax, rdi
sar rax, 1
cmp word [rdi], 0
je 0x140034670
cmp rax, 0xffffffffffffffff
jne 0x14003462d
inc rax
cmp word [rdi + rax*2], 0
jne 0x140034623
lea rcx, [rdi - 2]
lea rcx, [rcx + rax*2]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x140034644
cmp ax, 9
jne 0x14003464f
cmp rcx, rdi
je 0x140034660
sub rcx, 2
jmp 0x140034635
mov word [rcx + 2], r15w
mov byte [rbp + 0x10d90], 1
jmp 0x1400342d7
cmp ax, 0x20
je 0x14003466c
cmp ax, 9
jne 0x140034670
mov word [rcx], r15w
mov byte [rbp + 0x10d90], 1
jmp 0x1400342d7
mov r10, 0xffffffffffffffff
lea r11d, [r10 + 0x21]
mov r14, qword [rsp + 0x50]
lea r9, [0x140000000]
movzx edx, word [rdi + 2]
add rdi, 2
movzx r8d, word [r14]
lea eax, [r8 - 0x26]
cmp eax, 0x56
ja case.0x1400346c2.47
cdqe
movzx eax, byte [r9 + rax + 0x36330]
mov ecx, dword [r9 + rax*4 + 0x36308]
add rcx, r9
jmp rcx
movzx eax, word [0x140113a88]
mov sil, 1
mov rdi, qword [rbp + 0x10d78]
mov word [r14], ax
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x50], rdi
jmp 0x140034548
mov ecx, 2
jmp 0x14003484a
cmp word [rbp + 0x110], 0x2b
jne 0x14003470c
cmp word [rbp + 0x112], 0
jne 0x14003470c
mov al, 1
mov sil, 4
jmp 0x140034744
xor al, al
cmp dx, 0x3d
jne case.0x1400346c2.47
mov sil, 4
jmp 0x140034744
cmp word [rbp + 0x110], 0x2d
jne 0x140034735
cmp word [rbp + 0x112], 0
jne 0x140034735
mov al, 1
jmp 0x140034741
xor al, al
cmp dx, 0x3d
jne case.0x1400346c2.47
mov sil, 5
mov dword [rsp + 0x40], esi
test al, al
je 0x140034865
cmp dx, 0x20
je 0x14003475c
cmp dx, 9
jne 0x140034766
movzx edx, word [rdi + 2]
add rdi, 2
jmp 0x140034750
mov r8, rdi
test dx, dx
je 0x1400347a4
nop
lea rcx, str.__t____:_______._
movzx eax, r11w
nop dword [rax + rax]
cmp dx, ax
je 0x14003482d
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140034780
movzx edx, word [r8 + 2]
add r8, 2
test dx, dx
jne 0x140034770
mov rbx, r10
nop word [rax + rax]
cmp word [rdi + rbx*2 + 2], 0
lea rbx, [rbx + 1]
jne 0x1400347b0
mov rdx, rdi
lea r8, [rbx*2 + 2]
mov rdi, qword [rbp + 0x10d78]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
movzx eax, word [0x140113a88]
mov word [rdi + rbx*2], ax
mov dword [rdi + rbx*2 + 2], gethostbyname
mov qword [rsp + 0x50], rdi
jmp 0x140034548
movzx eax, sil
cmp dx, 0x3d
cmovne r15d, eax
movzx esi, r15b
jmp 0x140034858
cmp dx, 0x3d
jne 0x140034814
mov sil, 7
mov dword [rsp + 0x40], esi
jmp 0x140034875
cmp dx, 0x2f
mov rdi, r14
jne 0x14003455d
cmp word [r14 + 4], 0x3d
jne 0x14003455d
mov sil, 3
mov dword [rsp + 0x40], esi
mov rdi, qword [rbp + 0x10d78]
mov qword [rsp + 0x50], rdi
jmp 0x140034548
mov ecx, 3
movzx eax, sil
cmp dx, 0x3d
cmovne ecx, eax
movzx esi, cl
mov dword [rsp + 0x40], esi
test sil, sil
je case.0x1400346c2.47
cmp sil, 3
je 0x140034834
cmp sil, 1
je 0x140034910
movzx edx, word [0x140113a88]
xor r9d, r9d
mov rcx, r14
lea r8d, [r9 + 2]
call fcn.1400c1bb0
movsxd rcx, eax
cmp word [r14 + rcx*2], r9w
je 0x140034910
lea eax, [rsi - 4]
cmp al, 1
ja 0x14003482d
lea r8, [r14 + 2]
lea r8, [r8 + rcx*2]
movzx edx, word [r8]
cmp dx, 0x20
je 0x1400348b4
cmp dx, 9
jne 0x1400348ba
add r8, 2
jmp 0x1400348a4
mov r10d, SafeArrayAllocDescriptor
test dx, dx
je 0x140034904
nop word [rax + rax]
lea rcx, str.__t____:_______._
movzx eax, r10w
nop dword [rax + rax]
cmp dx, ax
je 0x14003482d
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x1400348e0
movzx edx, word [r8 + 2]
add r8, 2
test dx, dx
jne 0x1400348d0
cmp sil, 3
je 0x140034834
jmp 0x140034916
mov r10d, SafeArrayAllocDescriptor
movzx eax, word [0x140113a88]
mov word [r14], ax
cmp sil, 1
je 0x140034834
mov word [rdi], r10w
mov rdi, qword [rbp + 0x10d78]
mov qword [rsp + 0x50], rdi
jmp 0x140034548
cmp dx, r8w
jmp 0x140034818
cmp dx, 0x3d
je 0x14003482d
mov r14d, 0xff80
nop dword [rax]
mov rbx, rdi
movzx ecx, word [rbx]
test ecx, 0xffffff80
jne 0x140034980
mov edx, 0x107
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx ecx, word [rbx]
test eax, eax
jne 0x14003498c
test r14w, cx
jne 0x14003498c
cmp cx, 0x5f
jne 0x140034992
add rbx, 2
jmp 0x140034963
cmp cx, 0x28
je 0x14003482d
cmp rbx, rdi
je 0x140034a3b
cmp cx, 0x20
je 0x1400349b1
cmp cx, 9
jne 0x1400349bb
movzx ecx, word [rbx + 2]
add rbx, 2
jmp 0x1400349a5
cmp cx, 0x5b
je 0x14003482d
test cx, cx
je 0x14003482d
cmp word [rbx + 2], 0x3d
lea rdi, [rbx + 2]
jne 0x1400349f2
movzx edx, cx
lea rcx, str.:__.
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
jne 0x14003482d
movzx eax, word [rbx]
cmp word [rdi], ax
jne 0x140034a31
movzx edx, ax
lea rcx, [0x1400f9418]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034a1a
cmp word [rbx + 4], 0x3d
je 0x14003482d
movzx eax, word [rbx]
cmp ax, 0x2b
je 0x14003482d
cmp ax, 0x2d
je 0x14003482d
cmp ax, 0x2e
je 0x140034960
mov rdi, qword [rsp + 0x50]
jmp 0x140034551
mov rdi, r14
jmp 0x14003455d
test sil, sil
jne 0x140034b97
mov r14d, 1
lea r15, [0x140000000]
mov dword [rsp + 0x44], r14d
nop dword [rax + rax]
movsxd rax, r14d
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r15 + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034ab8
inc r14d
mov dword [rsp + 0x44], r14d
cmp r14d, 0xe
jl 0x140034a70
xor r14b, r14b
mov dword [rsp + 0x44], r14d
jmp 0x140034ac6
test sil, sil
jne 0x1400342de
lea r15, [0x140000000]
test r14b, r14b
mov r14d, dword [rsp + 0x44]
jne 0x140034b9c
movzx eax, word [rdi]
cmp ax, 0x7b
jne 0x140034ba8
nop dword [rax]
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r15 + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034b0c
inc ebx
cmp ebx, 0xe6
jl 0x140034ae0
xor bl, bl
movzx ecx, bl
sub ecx, 0x21
je 0x140034b80
sub ecx, 0x48
je 0x140034b72
sub ecx, 8
je 0x140034b80
sub ecx, 1
je 0x140034b80
cmp ecx, 1
je 0x140034b80
movzx edx, word [rdi]
lea rcx, str.__t____:_______._
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034cb4
movzx ecx, word [rdi]
mov edx, 0xfffd
lea eax, [rcx - 0x2b]
test dx, ax
jne 0x140034c83
cmp word [rdi + 2], cx
jne 0x140034c83
cmp word [rdi + 4], 0
je 0x140034c45
mov sil, 3
jmp 0x140034c64
cmp word [rdi + 2], 0
mov byte [rbp + 0x10d90], 1
jne 0x140034b28
movzx esi, bl
mov dword [rsp + 0x40], esi
test bl, bl
je 0x140034b28
lea r9, [0x140000000]
jmp 0x1400342e3
mov r14d, dword [rsp + 0x44]
lea r9, [0x140000000]
jmp 0x1400342e3
cmp ax, 0x3a
jne 0x140034b28
lea rdx, str.Default
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140034b28
mov rsi, qword [rbp + 0x10d70]
xor ebx, ebx
mov rcx, rsi
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
mov dl, 0x76
call fcn.140036910
test eax, eax
je 0x140033d13
lea rdx, [rdi + 2]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x140034c0f
cmp ax, 9
jne 0x140034c15
add rdx, 2
jmp 0x140034c00
test ax, ax
je 0x140033e35
mov qword [rsp + 0x38], rbx
xor r9d, r9d
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rbx
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.140033310
jmp 0x140033d15
movzx eax, word [0x140113a88]
cmp cx, 0x2b
mov word [rdi], ax
mov eax, gethostbyname
setne sil
mov word [rdi + 2], ax
add sil, 4
mov r12, qword [rbp + 0x10d78]
mov dword [rsp + 0x40], esi
lea r9, [0x140000000]
mov rdi, r12
mov qword [rsp + 0x50], r12
jmp 0x1400342ea
cmp cx, 0x3f
je 0x140034caf
mov edx, 0x3f
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034cb4
mov edx, 0x3a
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034cb4
mov sil, 3
jmp 0x140034c64
movzx eax, word [rdi]
mov r12, qword [rbp + 0x10d78]
cmp ax, 0x28
je 0x140034d37
cmp ax, 0x5b
je 0x140034d37
cmp word [r12], 0x28
je 0x140034d37
mov r8d, 3
lea rdx, [0x1400f9458]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034cfe
movzx eax, word [r12 + 6]
cmp ax, 0x20
je 0x140034d37
cmp ax, 9
je 0x140034d37
lea rdx, [0x1400f859c]
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
lea rcx, str.Invalid_hotkey.
mov r8, r12
test rax, rax
lea rdx, str.This_line_does_not_contain_a_recognized_action.
cmovne rdx, rcx
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dc70
jmp 0x140033d15
mov sil, 3
jmp 0x140034c6b
movzx eax, word [rdx + 2]
lea rdx, [rdx + 2]
inc r8d
test ax, ax
je case.0x140034379.0
cmp ax, 0x22
jne case.0x140034379.1
inc r8d
lea r9, [0x140000000]
jmp 0x140034340
mov edx, r14d
jmp 0x140034d7e
movzx eax, r10w
jmp 0x140034d7b
mov eax, 0x5d
jmp 0x140034d7b
movzx eax, r11w
movzx edx, ax
inc r8d
mov rcx, rdi
call fcn.1400c1d00
movsxd r8, eax
cmp word [rdi + r8*2], r15w
je case.0x140034379.0
inc r8d
lea r9, [0x140000000]
jmp 0x140034340
mov r14d, dword [rsp + 0x44]
movsxd rax, r8d
cmp word [rdi + rax*2], r15w
lea rdx, [rdi + rax*2]
jne 0x140034dd0
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Missing__:_
mov r8, r12
call fcn.14004dc70
jmp 0x140033d15
mov word [rdx], r15w
cmp word [rdi], r15w
je 0x140034e23
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], r15w
jne 0x140034de1
dec rax
lea rax, [rdi + rax*2]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x140034e01
cmp cx, 9
jne 0x140034e0c
cmp rax, rdi
je 0x140034e13
sub rax, 2
jmp 0x140034df2
mov word [rax + 2], r15w
jmp 0x140034e23
cmp cx, 0x20
je 0x140034e1f
cmp cx, 9
jne 0x140034e23
mov word [rax], r15w
movzx eax, word [rdx + 2]
add rdx, 2
cmp ax, 0x20
je 0x140034e23
cmp ax, 9
je 0x140034e23
mov qword [rsp + 0x60], rdx
test ax, ax
jne 0x140034e8e
mov qword [rsp + 0x60], r15
jmp 0x140034e8e
cmp word [rdi], 0x7b
jne 0x140034e8e
movzx eax, word [rdi]
cmp ax, 0x7b
jne 0x140034e77
mov byte [rbp + 0x10d90], 1
movzx eax, word [rdi + 2]
add rdi, 2
cmp ax, 0x20
je 0x140034e5e
cmp ax, 9
je 0x140034e5e
mov qword [rsp + 0x50], rdi
test ax, ax
je 0x140034e8e
mov qword [rsp + 0x60], rdi
sub rdi, 2
mov qword [rsp + 0x50], rdi
mov word [rdi], r15w
lea r15, [0x140000000]
test sil, sil
je 0x140034eb4
movzx eax, sil
lea rbx, [r15 + 0x112920]
lea rcx, [rax + rax*8]
lea rbx, [rbx + rcx*2]
mov qword [rsp + 0x68], rbx
jmp 0x140034ecc
movzx eax, r14b
lea rcx, [rax + rax*8]
lea rax, [r15 + 0x112820]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x68], rax
xor edx, edx
lea rcx, [rbp + 0xd10]
mov r8d, 0x8002
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbp + 0x10da0]
test rdx, rdx
je 0x140034f6f
mov ecx, dword [rbp + 0x10da8]
mov rax, rdi
sub rax, r13
sar rax, 1
sub ecx, eax
test ecx, ecx
jle 0x140034f1d
movsxd r8, ecx
lea rcx, [rbp + 0xd10]
cdqe
add r8, r8
lea rdx, [rdx + rax*2]
call sub.VCRUNTIME140.dll_memcpy
xor r13d, r13d
cmp sil, 0x22
jne 0x14003564e
cmp word [rdi], 0
mov esi, r13d
mov r12d, 1
je 0x140035739
mov r14d, 0xffdf
lea eax, [rsi + 1]
cmp r12d, 1
cmovle eax, esi
movsxd rsi, eax
lea rcx, [rdi + rsi*2]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x140034f67
cmp ax, 9
jne 0x140035083
inc esi
add rcx, 2
jmp 0x140034f54
movzx esi, word [0x140113a80]
xor r13d, r13d
mov r14, qword [rsp + 0x50]
mov edi, r13d
mov ebx, r13d
lea r12, [r13 - 1]
movzx eax, word [r14 + rbx*2]
mov r8d, reloc.WSOCK32.dll_inet_ntoa
lea edx, [r8 + 2]
test ax, ax
je 0x140034fb5
nop dword [rax]
cmp ax, si
je 0x140034fb5
movzx eax, word [r14 + rbx*2 + 2]
inc rbx
inc edi
test ax, ax
jne 0x140034fa0
cmp word [r14 + rbx*2], r13w
je 0x140035070
movzx eax, word [r14 + rbx*2 + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x140034fdb.99
cdqe
mov ecx, dword [r15 + rax*4 + 0x36388]
add rcx, r15
jmp rcx
mov eax, 7
mov word [r14 + rbx*2 + 2], ax
jmp case.0x140034fdb.99
mov eax, 8
mov word [r14 + rbx*2 + 2], ax
jmp case.0x140034fdb.99
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov word [r14 + rbx*2 + 2], ax
jmp case.0x140034fdb.99
mov eax, 0xa
mov word [r14 + rbx*2 + 2], ax
jmp case.0x140034fdb.99
mov word [r14 + rbx*2 + 2], dx
jmp case.0x140034fdb.99
mov eax, 9
mov word [r14 + rbx*2 + 2], ax
jmp case.0x140034fdb.99
mov word [r14 + rbx*2 + 2], r8w
movsxd rax, edi
mov r8, r12
lea rcx, [r14 + rax*2]
lea rdx, [rcx + 2]
nop word [rax + rax]
cmp word [rdx + r8*2 + 2], r13w
lea r8, [r8 + 1]
jne 0x140035040
lea r8, [r8*2 + 2]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 1
inc edi
mov word [rbp + rbx*2 + 0xd10], ax
inc rbx
jmp 0x140034f88
mov esi, dword [rsp + 0x40]
mov rdi, r14
mov r12, qword [rbp + 0x10d78]
jmp 0x140034f20
cmp ax, word [0x140113a84]
jne 0x140035164
movsxd rax, esi
cmp word [rbp + rax*2 + 0xd10], 0
jne 0x140035164
movzx ecx, word [rdi + rax*2 + 2]
cmp cx, 0x20
je 0x1400350b7
cmp cx, 9
jne 0x140035164
cmp r12d, 3
jge 0x140035739
add esi, 2
lea rdx, [rbp + 0xd10]
movsxd rax, esi
xor r9b, r9b
mov r10, rdi
mov r8d, r13d
lea rdx, [rdx + rax*2]
lea rax, [rbp + 0xd10]
sub r10, rax
nop word [rax + rax]
movzx eax, word [r10 + rdx]
cmp ax, word [0x140113a88]
jne 0x14003511a
test r9b, r9b
jne case.0x140035133.4
test r8d, r8d
jg case.0x140035133.4
cmp word [rdx], 0
je case.0x140035133.0
inc esi
add rdx, 2
jmp 0x1400350f0
cmp eax, 0x7d
ja case.0x140035133.4
movzx eax, byte [r15 + rax + 0x363f4]
mov ecx, dword [r15 + rax*4 + 0x363e0]
add rcx, r15
jmp rcx
test r9b, r9b
sete r9b
inc esi
add rdx, 2
jmp 0x1400350f0
test r9b, r9b
jne case.0x140035133.4
inc r8d
inc esi
add rdx, 2
jmp 0x1400350f0
test r9b, r9b
jne case.0x140035133.4
dec r8d
inc esi
add rdx, 2
jmp 0x1400350f0
movsxd r13, esi
lea rcx, [r13*2]
movzx eax, word [rcx + rdi]
lea rbx, [rcx + rdi]
test ax, ax
je 0x1400351a6
mov rdx, r13
nop
cmp ax, word [0x140113a88]
jne 0x140035194
cmp word [rbp + rcx + 0xd10], 0
je 0x1400351a6
inc rdx
inc esi
lea rcx, [rdx + rdx]
movzx eax, word [rcx + rdi]
test ax, ax
jne 0x140035180
cmp r12d, 1
jne 0x1400352ea
movsxd rax, esi
cmp word [rdi + rax*2], 0
lea r15, [rdi + rax*2]
je 0x140035739
xor r13d, r13d
mov word [r15], r13w
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x1400351df
cmp ax, 9
jne 0x1400351e5
add rbx, 2
jmp 0x1400351d0
test ax, ax
je 0x1400352dd
cmp ax, 0x2d
je 0x140035285
cmp ax, 0x2b
jne 0x140035208
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x140035236
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x140035236
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x140035236
mov r14d, 1
add rbx, 4
jmp 0x140035239
mov r14, r13
movzx edi, word [rbx]
mov ecx, r13d
cmp edi, 0x20
je 0x1400352b4
cmp edi, 9
je 0x1400352b4
test edi, edi
je 0x1400352ce
cmp edi, 0x2e
je 0x140035285
test r14, r14
je 0x14003529a
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r13d
sete cl
test ecx, ecx
je 0x1400352a2
test edi, 0xffffff80
jne 0x140035285
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx eax, word [0x140113a88]
mov word [r15], ax
mov eax, 1
jmp 0x140035742
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x140035270
movzx edi, word [rbx + 2]
add rbx, 2
mov ecx, 1
cmp edi, 0x20
jne 0x140035244
movzx eax, word [rbx]
cmp ax, 0x20
je 0x1400352c3
cmp ax, 9
jne 0x1400352c9
add rbx, 2
jmp 0x1400352b4
test ax, ax
jne 0x140035285
test ecx, ecx
je 0x140035285
mov rdi, qword [rsp + 0x50]
mov r14d, 0xffdf
movzx eax, word [0x140113a88]
mov word [r15], ax
jmp case.0x140035133.0
cmp r12d, 4
je 0x140035310
xor r13d, r13d
movsxd rax, esi
inc r12d
cmp word [rdi + rax*2], 0
je 0x140035739
lea r15, [0x140000000]
jmp 0x140034f43
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003531f
cmp ax, 9
jne 0x140035325
add rbx, 2
jmp 0x140035310
test ax, ax
je 0x140035739
cmp ax, 0x2d
je 0x140035480
cmp ax, 0x2b
jne 0x140035348
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x140035378
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x140035378
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x140035378
add rbx, 4
mov r15d, 1
xor eax, eax
jmp 0x14003537d
xor eax, eax
mov r15d, eax
movzx edi, word [rbx]
mov r14d, eax
mov r12d, eax
cmp edi, 0x20
je 0x140035442
nop
cmp edi, 9
je 0x140035442
test edi, edi
je 0x14003546c
cmp edi, 0x2e
jne 0x1400353be
test r14d, r14d
jne 0x140035475
test r15, r15
jne 0x140035475
lea r14d, [rdi - 0x2d]
jmp 0x140035431
test r15, r15
je 0x140035457
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x14003545f
test edi, 0xffffff80
jne 0x1400353fb
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x1400353fb
and edi, 0xffffffdf
cmp di, 0x45
jne 0x140035475
test r14d, r14d
je 0x140035475
test r12d, r12d
je 0x140035475
movzx eax, word [rbx + 2]
lea rcx, [rbx + 2]
sub ax, 0x2b
mov edx, 0xfffd
test dx, ax
cmove rbx, rcx
movzx eax, word [rbx + 2]
sub ax, 0x30
cmp ax, 9
ja 0x140035475
movzx edi, word [rbx + 2]
add rbx, 2
cmp edi, 0x20
jne 0x140035390
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140035451
cmp ax, 9
jne 0x140035467
add rbx, 2
jmp 0x140035442
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400353df
mov r12d, 1
jmp 0x140035431
test ax, ax
jne 0x140035475
test r12d, r12d
jne 0x140035739
mov rdi, qword [rsp + 0x50]
mov r14d, 0xffdf
movsxd rax, esi
cmp word [rdi + rax*2], 0
jne 0x140035644
movzx edx, word [0x140113a84]
cmp word [rdi + r13*2], dx
jne 0x140035644
cmp word [rbp + r13*2 + 0xd10], 0
jne 0x140035644
lea rcx, [r13 + 1]
lea rcx, [rdi + rcx*2]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140035644
lea rbx, [rax + 2]
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x1400354df
cmp ax, 9
jne 0x1400354e5
add rbx, 2
jmp 0x1400354d0
test ax, ax
je 0x140035739
cmp ax, 0x2d
je 0x140035644
cmp ax, 0x2b
jne 0x140035508
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14003553c
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x14003553c
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14003553c
mov r12d, 1
add rbx, 4
mov r14d, r12d
xor r13d, r13d
jmp 0x140035546
xor r13d, r13d
mov r14d, r13d
lea r12d, [r13 + 1]
movzx edi, word [rbx]
mov esi, r13d
mov r15d, r13d
cmp edi, 0x20
je 0x140035610
nop dword [rax + rax]
cmp edi, 9
je 0x140035610
test edi, edi
je 0x14003563b
cmp edi, 0x2e
jne 0x14003558c
test esi, esi
jne 0x140035644
test r14, r14
jne 0x140035644
mov esi, r12d
jmp 0x1400355ff
test r14, r14
je 0x140035625
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r13d
sete cl
test ecx, ecx
je 0x140035631
test edi, 0xffffff80
jne 0x1400355ca
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x1400355ca
and edi, 0xffffffdf
cmp di, 0x45
jne 0x140035644
test esi, esi
je 0x140035644
test r15d, r15d
je 0x140035644
movzx eax, word [rbx + 2]
lea rcx, [rbx + 2]
sub ax, 0x2b
mov edx, 0xfffd
test dx, ax
cmove rbx, rcx
movzx eax, word [rbx + 2]
sub ax, 0x30
cmp ax, 9
ja 0x140035644
movzx edi, word [rbx + 2]
add rbx, 2
cmp edi, 0x20
jne 0x140035560
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003561f
cmp ax, 9
jne 0x140035636
add rbx, 2
jmp 0x140035610
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400355ae
mov r15d, r12d
jmp 0x1400355ff
test ax, ax
jne 0x140035644
test r15d, r15d
jne 0x140035739
mov eax, 3
jmp 0x140035742
cmp sil, 0x6a
jne 0x140035739
movzx eax, word [rdi]
mov rbx, rdi
test ax, ax
je 0x1400356aa
cmp ax, 0x20
je 0x14003566f
cmp ax, 9
jne 0x14003569d
movzx ecx, word [rbx + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp eax, 0x69
jne 0x14003569d
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp eax, 0x6e
jne 0x14003569d
movzx eax, word [rbx + 6]
cmp ax, 0x20
je 0x1400356aa
cmp ax, 9
je 0x1400356aa
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x140035663
cmp word [rbx], 0
jne 0x1400356cb
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.This__For__is_missing_its__in_.
mov r8, r12
call fcn.14004dc70
jmp 0x140033d15
mov rax, rbx
mov edx, 1
sub rax, rdi
sar rax, 1
movsxd rcx, eax
test eax, eax
jle 0x1400356f7
movzx eax, word [0x140113a88]
cmp word [rdi + rcx*2], ax
jne 0x1400356ef
inc edx
dec rcx
test rcx, rcx
jg 0x1400356e0
movzx eax, word [0x140113a88]
mov word [rbx + 2], ax
cmp edx, 1
jle 0x14003572e
cmp edx, 2
jle 0x140035727
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Syntax_error_or_too_many_variables_in__For__statement.
mov r8, r12
call fcn.14004dc70
jmp 0x140033d15
mov eax, SafeArrayAllocDescriptor
jmp 0x140035735
movzx eax, word [0x140113a88]
mov word [rbx + 4], ax
mov rax, qword [rsp + 0x68]
movsx eax, byte [rax + 9]
mov r11, qword [rsp + 0x50]
xor edi, edi
xor r13b, r13b
mov dword [rsp + 0x48], edi
xor r12b, r12b
mov ebx, edi
mov r10d, edi
mov r15d, edi
cmp word [r11], di
je 0x140035b6d
movsxd rcx, eax
mov esi, edi
dec eax
mov qword [rbp - 0x40], rcx
cdqe
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x80], rdi
mov qword [rsp + 0x78], rdi
nop
cmp rsi, rcx
jge 0x140035b68
cmp r10d, 2
jne 0x140035871
mov ecx, dword [rsp + 0x70]
sub ecx, 0x18
je 0x1400357af
sub ecx, 1
je 0x1400357af
sub ecx, 1
je 0x1400357af
cmp ecx, 1
jne 0x140035868
mov rcx, qword [rbp + 0x10d70]
lea rdx, [rbp + 0x310]
movsxd rax, ebx
xor r9d, r9d
lea r8, [r11 + rax*2]
call fcn.140036540
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140035863
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetElement
lea r14, [0x140000000]
nop word [rax + rax]
movsxd rcx, r13d
lea rdx, [rcx + rcx*8]
mov rdx, qword [r14 + rdx*2 + 0x112920]
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035821
inc r13d
cmp r13d, 0xe6
jl 0x1400357f0
xor r13b, r13b
jmp 0x14003582a
test r13b, r13b
jne 0x140035b41
mov r12d, 1
movsxd rax, r12d
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
mov rdx, qword [r14 + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035863
inc r12d
cmp r12d, 0xe
jl 0x140035830
mov r11, qword [rsp + 0x50]
xor r12b, r12b
jmp 0x140035871
mov r11, qword [rsp + 0x50]
test r12b, r12b
jne 0x140035b46
mov rax, qword [rbp - 0x80]
movsxd r14, ebx
lea rdi, [r14 + r14]
lea r15, [rdi + r11]
mov qword [rbp + rsi*8 - 0x30], r15
lea rsi, [rbp + 0xd10]
add rsi, rdi
mov qword [rbp + rax*8 + 0x70], rsi
cmp rax, qword [rbp - 0x48]
je 0x140035b59
movzx eax, word [0x140113a84]
cmp word [r15], ax
jne 0x1400358ca
cmp word [rsi], 0
jne 0x1400358ca
movzx eax, word [r15 + 2]
cmp ax, 0x20
je 0x140035947
cmp ax, 9
je 0x140035947
mov rcx, qword [rsp + 0x68]
mov r10d, dword [rsp + 0x48]
add rcx, 0xb
movzx eax, byte [rcx]
lea edx, [r10 + 1]
test al, al
je 0x1400358f9
movzx eax, al
cmp eax, edx
je 0x140035995
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x1400358e3
mov eax, dword [rsp + 0x40]
cmp al, 0x76
je 0x140035947
cmp al, 0x2b
jne 0x1400359cb
lea eax, [r10 - 2]
cmp eax, 1
ja 0x1400359cb
mov rcx, qword [rbp - 0x28]
call fcn.140029b60
test eax, eax
je 0x1400359c1
sub eax, 1
je 0x1400359c1
sub eax, 2
je 0x1400359c1
mov r11, qword [rsp + 0x50]
cmp eax, 2
je 0x1400359c6
xor edi, edi
lea rax, [rbp + 0xd10]
xor r8b, r8b
lea r10, [0x140000000]
mov r9, r11
mov edx, edi
sub r9, rax
movzx eax, word [rsi + r9]
cmp ax, word [0x140113a88]
jne 0x140035a75
test r8b, r8b
jne case.0x140035a8e.4
test edx, edx
jg case.0x140035a8e.4
cmp word [rsi], di
jne case.0x140035a8e.4
mov r10d, dword [rsp + 0x48]
jmp 0x1400359fd
mov eax, dword [rsp + 0x40]
cmp al, 0x88
jne 0x140035947
cmp r10d, 1
jle 0x140035947
lea rdx, str.default
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov r11, qword [rsp + 0x50]
test eax, eax
je 0x1400359c6
jmp 0x140035947
mov r11, qword [rsp + 0x50]
mov r10d, dword [rsp + 0x48]
movzx eax, word [r15]
test ax, ax
je 0x1400359fb
cmp ax, word [0x140113a88]
jne 0x1400359e8
cmp word [rbp + rdi + 0xd10], 0
je 0x1400359fb
inc r14
inc ebx
lea rdi, [r14 + r14]
movzx eax, word [rdi + r11]
test ax, ax
jne 0x1400359d4
xor edi, edi
mov rsi, qword [rbp - 0x80]
movsxd rax, ebx
cmp word [r11 + rax*2], 0
je 0x140035b1e
mov word [r11 + rax*2], di
mov r8, qword [rbp + rsi*8 - 0x30]
mov rdx, qword [rbp + rsi*8 + 0x70]
cmp word [r8], 0
je 0x140035ade
mov rax, 0xffffffffffffffff
inc rax
cmp word [r8 + rax*2], 0
jne 0x140035a31
dec rax
mov r9, r8
sub r9, rdx
lea rcx, [rdx + rax*2]
nop dword [rax]
movzx edx, word [r9 + rcx]
cmp dx, 0x20
je 0x140035a61
cmp dx, 9
jne 0x140035ad8
cmp word [rcx], 0
jne 0x140035ad8
test rax, rax
je 0x140035ac6
dec rax
sub rcx, 2
jmp 0x140035a50
cmp eax, 0x7d
ja case.0x140035a8e.4
movzx eax, byte [r10 + rax + 0x36488]
mov ecx, dword [r10 + rax*4 + 0x36474]
add rcx, r10
jmp rcx
test r8b, r8b
sete r8b
inc ebx
add rsi, 2
jmp 0x140035962
test r8b, r8b
jne case.0x140035a8e.4
inc edx
inc ebx
add rsi, 2
jmp 0x140035962
test r8b, r8b
jne case.0x140035a8e.4
dec edx
inc ebx
add rsi, 2
jmp 0x140035962
cmp dx, 0x20
je 0x140035ad2
cmp dx, 9
jne 0x140035ade
mov word [r8], di
jmp 0x140035ade
mov word [r8 + rax*2 + 2], di
inc ebx
lea rcx, [rbp + 0xd10]
movsxd rax, ebx
mov rdx, r11
lea rcx, [rcx + rax*2]
lea rax, [rbp + 0xd10]
sub rdx, rax
nop dword [rax + rax]
movzx eax, word [rcx + rdx]
cmp ax, 0x20
je 0x140035b10
cmp ax, 9
jne 0x140035b1e
cmp word [rcx], 0
jne 0x140035b1e
inc ebx
add rcx, 2
jmp 0x140035b00
inc r10d
movsxd rax, ebx
inc rsi
mov dword [rsp + 0x48], r10d
mov qword [rbp - 0x80], rsi
cmp word [r11 + rax*2], 0
je 0x140035b68
mov rcx, qword [rbp - 0x40]
jmp 0x140035780
mov r11, qword [rsp + 0x50]
mov r10d, dword [rsp + 0x48]
mov r15, qword [rsp + 0x78]
movsxd rax, ebx
lea rbx, [r11 + rax*2]
jmp 0x140035b72
mov r10d, dword [rsp + 0x48]
inc r10d
mov dword [rsp + 0x48], r10d
xor edi, edi
mov r15, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x60]
mov r9, qword [rsp + 0x68]
movsx edx, byte [r9 + 8]
mov ecx, edx
cmp r10d, edx
jge 0x140035bdb
mov r9, qword [r9]
lea r8, reloc.WSOCK32.dll_WSAStartup
cmp dl, 1
lea rax, [0x1400e0674]
lea rcx, [rbp + 0x510]
cmovg rax, r8
lea r8, str.__s__requires_at_least__d_parameter_s.
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov edx, 0x400
call fcn.1400bf370
mov r8, qword [rbp + 0x10d78]
lea rdx, [rbp + 0x510]
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dc70
jmp 0x140033d15
mov r14d, dword [rsp + 0x40]
mov eax, r10d
cmp r14b, 0x76
mov edx, edi
cmovne eax, ecx
movsxd r8, eax
test eax, eax
jle 0x140035c15
mov rcx, rdi
nop word [rax + rax]
mov rax, qword [rbp + rcx*8 - 0x30]
inc edx
cmp word [rax], 0
je 0x140035c44
inc rcx
cmp rcx, r8
jl 0x140035c00
mov ecx, dword [rsp + 0x44]
test cl, cl
je case.default.0x140035c42
movzx eax, cl
dec eax
cmp eax, 0xc
ja case.default.0x140035c42
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x36508]
add rcx, rdx
jmp rcx
mov r9, qword [r9]
lea r8, str.__s__requires_that_parameter__u_be_non_blank.
mov dword [rsp + 0x20], edx
lea rcx, [rbp + 0x510]
mov edx, 0x400
call fcn.1400bf370
jmp 0x140035bbc
mov rcx, qword [rbp + 0x10d70]
lea rbx, [0x1400f9610]
movsxd rax, r10d
lea r9d, [r10 + 1]
lea r8, [rbp - 0x30]
mov dl, 0x8d
mov qword [rbp + rax*8 - 0x30], rbx
mov qword [rbp + rax*8 + 0x70], rdi
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.140036910
jmp 0x140033d15
mov rdi, qword [rbp - 0x28]
lea rax, [rbp + 0x70]
mov r14, qword [rbp + 0x10d70]
lea rbx, [0x1400f9610]
xor esi, esi
mov qword [rbp - 0x28], rbx
lea r8, [rbp - 0x30]
mov qword [rbp + 0x78], rsi
mov dl, 0x8d
mov qword [rsp + 0x20], rax
mov rcx, r14
lea r9d, [rsi + 2]
call fcn.140036910
test eax, eax
je 0x140033d13
mov rax, qword [rbp - 0x18]
lea r9d, [rsi + 5]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x30]
mov rax, qword [rbp + 0x88]
mov dl, 0x90
mov qword [rbp + 0x70], rax
mov rcx, r14
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rbx
mov qword [rbp + 0x90], rsi
call fcn.140036910
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 1
call fcn.140036910
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 4
call fcn.140036910
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 5
call fcn.140036910
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 6
call fcn.140036910
jmp 0x140033d15
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 7
call fcn.140036910
jmp 0x140033d15
mov r14b, reloc.OLEAUT32.dll_SafeArrayGetUBound
jmp 0x140035e20
mov r14b, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x140035e20
mov r14b, reloc.OLEAUT32.dll_SafeArrayLock
jmp 0x140035e20
mov r14b, reloc.OLEAUT32.dll_SafeArrayUnlock
jmp 0x140035e20
mov r14b, reloc.OLEAUT32.dll_SafeArrayAccessData
jmp 0x140035e20
mov r14b, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov ecx, dword [rsp + 0x44]
test r10d, r10d
je 0x140036007
test r13b, r13b
jne 0x140036007
test r12b, r12b
jne 0x140036007
lea eax, [r14 - 0x12]
cmp al, 0xe
ja 0x140036007
cmp r14b, 0x17
ja 0x140035e5d
sub cl, 6
cmp cl, 5
ja 0x140036100
movsxd rax, r10d
mov rdi, qword [rbp + rax*8 - 0x38]
mov rcx, rdi
sub rcx, r11
sar rcx, 1
movsxd r8, ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + r11]
test ax, ax
je 0x140036005
cmp ax, word [0x140113a88]
jne 0x140035e97
cmp word [rbp + rdx + 0xd10], 0
je 0x140035eaf
inc r8
inc ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + r11]
test ax, ax
jne 0x140035e83
jmp 0x140036005
movsxd rax, ecx
inc ecx
lea rsi, [r11 + rax*2]
movsxd rax, ecx
lea rdx, [r11 + rax*2]
nop
movzx eax, word [rdx]
cmp ax, 0x20
je 0x140035ecf
cmp ax, 9
jne 0x140035ed7
inc ecx
add rdx, 2
jmp 0x140035ec0
movsxd rax, ecx
lea rdx, [rbp + 0x310]
mov rcx, qword [rbp + 0x10d70]
xor r9d, r9d
lea rbx, [r11 + rax*2]
mov r8, rbx
mov qword [rsp + 0x60], rbx
call fcn.140036540
mov r15, rax
test rax, rax
je 0x140035f83
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetElement
nop word [rax + rax]
movsxd rax, r13d
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
lea rax, [0x140000000]
mov rdx, qword [rax + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035f48
inc r13d
cmp r13d, 0xe6
jl 0x140035f10
xor r13b, r13b
jmp 0x140035f4d
test r13b, r13b
jne 0x140035f9b
mov ebx, 1
movsxd rax, ebx
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
lea rax, [0x140000000]
mov rdx, qword [rax + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035f8e
inc ebx
cmp ebx, 0xe
jl 0x140035f52
xor r12b, r12b
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov ebx, edi
jmp 0x140036007
movzx r12d, bl
test bl, bl
je 0x140035f83
mov rbx, qword [rsp + 0x60]
xor eax, eax
mov word [rsi], ax
cmp word [rdi], ax
je 0x140036000
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x140035fb0
dec rax
lea rax, [rdi + rax*2]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x140035fd0
cmp cx, 9
jne 0x140035fdb
cmp rax, rdi
je 0x140035fe8
sub rax, 2
jmp 0x140035fc1
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov word [rax + 2], di
jmp 0x140036007
cmp cx, 0x20
je 0x140035ff4
cmp cx, 9
jne 0x140036000
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov word [rax], di
jmp 0x140036007
mov r10d, dword [rsp + 0x48]
xor edi, edi
cmp r14b, 0x69
je 0x140036013
cmp r14b, 0x6b
jne 0x140036023
cmp r10d, 1
jne 0x140036023
mov rax, qword [rbp - 0x30]
cmp word [rax], 0
jne 0x140036042
cmp r14b, 0x6a
je 0x140036039
cmp r14b, 0x72
je 0x140036039
cmp r14b, 0x75
jne 0x140036100
test r10d, r10d
je 0x140036100
movsxd rax, r10d
mov rdx, qword [rbp + rax*8 - 0x38]
mov rax, 0xffffffffffffffff
cmp word [rdx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140036051
cmp word [rdx + rax*2 - 2], 0x7b
jne 0x140036100
mov word [rdx + rax*2 - 2], di
mov sil, 1
cmp word [rdx], 0
je 0x1400360d0
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140036080
lea rcx, [rax - 1]
lea rcx, [rdx + rcx*2]
movzx r8d, word [rcx]
cmp r8w, 0x20
je 0x1400360a4
cmp r8w, 9
jne 0x1400360b2
cmp rcx, rdx
je 0x1400360b8
sub rcx, 2
dec rax
jmp 0x140036092
mov word [rcx + 2], di
jmp 0x1400360c6
cmp r8w, 0x20
je 0x1400360cd
cmp r8w, 9
je 0x1400360cd
test rax, rax
jne 0x140036107
jmp 0x1400360d0
mov word [rcx], di
cmp r14b, 0x69
je 0x1400360fb
cmp r14b, 0x72
je 0x1400360fb
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Parameter_1_required
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dc70
jmp 0x140033d15
mov r10d, edi
jmp 0x140036107
movzx esi, byte [rbp + 0x10d90]
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
movzx edx, r14b
call fcn.140036910
test eax, eax
je 0x140033d13
test sil, sil
mov rsi, qword [rbp + 0x10d70]
je 0x140036158
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov dl, 0x77
mov rcx, rsi
call fcn.140036910
test eax, eax
je 0x140033d13
test rbx, rbx
je 0x140033e35
test r15, r15
jne 0x140036190
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], rdi
call fcn.140033310
jmp 0x140033d15
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp word [r15 + rcx*2], 0
jne 0x1400361a0
mov qword [rsp + 0x38], rcx
lea rdx, [rbp + 0xd10]
mov rax, r15
movzx r9d, r12b
sub rax, qword [rsp + 0x50]
movzx r8d, r13b
sar rax, 1
mov rcx, rsi
lea rax, [rdx + rax*2]
mov rdx, rbx
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x310]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call fcn.140033310
jmp 0x140033d15