Function at 0x140033440
Capabilities:
Contain obfuscated stackstrings
Parse credit card information

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10d30]
mov eax, 0x10e30
call fcn.1400ddab0
sub rsp, rax
movzx esi, r8b
mov dword [rsp + 0x44], r9d
mov r8, qword [rbp + 0x10d90]
mov ebx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
xor r12d, r12d
mov dword [rsp + 0x40], esi
mov rdi, rdx
mov r14, rcx
lea r15d, [rbx - 6]
test r8, r8
je 0x1400334dc
lea rcx, [rbp + 0x110]
sub rcx, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [r8]
mov word [rcx + r8], ax
lea r8, [r8 + 2]
test ax, ax
jne 0x1400334b0
mov r13, qword [rbp + 0x10d98]
test r13, r13
jne 0x140033f1f
mov qword [rsp + 0x50], rdi
jmp 0x140034002
cmp sil, 3
jne 0x1400334f8
xor eax, eax
mov qword [rsp + 0x50], rdi
mov word [rbp + 0x110], ax
mov r13d, eax
jmp 0x140034002
mov r8, r15
lea rdx, str.Global
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
mov rax, qword [0x140112060]
jne 0x14003352e
cmp qword [rax + 0xd8], r12
mov ecx, 0x41
mov r13d, 0xc1
cmovne r13d, ecx
jmp 0x140033580
cmp qword [rax + 0xd8], r12
je 0x140033efe
mov r8d, 5
lea rdx, str.Local
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14003355f
lea r13d, [rax + 0x42]
lea eax, [r13 - 0x38]
jmp 0x140033583
mov r8, r15
lea rdx, str.Static
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140033efe
mov r13d, 0x62
mov rax, rbx
lea rbx, [rax + rdi]
mov dword [rsp + 0x48], r13d
movzx eax, word [rbx]
test ax, ax
je 0x140033f38
cmp ax, 0x20
je 0x1400335b4
cmp ax, 9
jne 0x140033efe
cmp ax, 0x20
je 0x1400335b4
cmp ax, 9
jne 0x1400335be
movzx eax, word [rbx + 2]
add rbx, 2
jmp 0x1400335a8
test ax, ax
je 0x140033f38
movzx r14d, word [rbx + 2]
mov word [rbx + 2], r12w
movzx edi, word [rbx]
test di, di
je 0x140033eeb
mov rsi, rbx
movzx ecx, di
test ecx, 0xffffff80
jne 0x140033613
mov edx, 0x107
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
jne 0x140033613
movzx edx, di
lea rcx, [0x140102f48]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140033ee7
movzx edi, word [rsi + 2]
add rsi, 2
test di, di
jne 0x1400335e0
mov rsi, qword [rbp + 0x10d70]
mov word [rbx + 2], r14w
cmp byte [rsi + 0x3c], r12b
je 0x14003368b
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
cmp byte [rcx + 0x78], r12b
jne 0x14003368b
cmp r13d, 0x62
je 0x140033658
cmp r13d, 0x42
setne al
add al, 0x41
mov byte [rcx + 0x78], al
mov rax, qword [rsi + 0x668]
test rax, rax
je 0x1400336e9
movzx ecx, byte [rax]
lea eax, [rcx - 9]
cmp al, 0x18
jbe 0x140033684
sub cl, 0x69
cmp cl, 0xa
ja 0x1400336e9
mov eax, 0x707
bt eax, ecx
jae 0x1400336e9
mov byte [rsp + 0x58], 1
jmp 0x1400336ee
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
test rcx, rcx
je 0x140033658
movzx eax, byte [rcx + 0x78]
cmp r13d, eax
jne 0x140033658
cmp r13d, 0x41
jne 0x1400336c8
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Global_variables_must_not_be_declared_in_this_function.
mov rcx, rsi
call fcn.14004dd50
jmp 0x140033e45
cmp r13d, 0x42
jne 0x140033658
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Local_variables_must_not_be_declared_in_this_function.
mov rcx, rsi
call fcn.14004dd50
jmp 0x140033e45
mov byte [rsp + 0x58], r12b
movzx edx, word [rbx]
mov byte [rbp + 0x10d90], r12b
test dx, dx
je 0x140033f65
mov r8, 0xffffffffffffffff
mov eax, 0x2c
mov r14, rbx
lea rcx, str.___t:
cmp dx, ax
je 0x140033750
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140033717
movzx edx, word [r14 + 2]
add r14, 2
mov eax, 0x2c
test dx, dx
jne 0x140033710
mov rax, r8
nop
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140033740
lea r14, [rbx + rax*2]
mov rax, qword [0x140112060]
mov r15, r14
sub r15, rbx
sar r15, 1
mov rcx, qword [rax + 0xd8]
test rcx, rcx
je 0x140033887
cmp dword [rcx + 0x20], 0
mov edi, r12d
jle 0x1400337c9
mov rsi, r12
nop dword [rax]
mov rax, qword [rcx + 0x18]
mov r9, r8
mov r8, r15
mov rcx, rbx
mov rdx, qword [rax + rsi]
mov rdx, qword [rdx + 0x28]
call fcn.1400bf210
test eax, eax
je 0x140033e60
mov rax, qword [0x140112060]
inc edi
add rsi, 0x18
mov r8, 0xffffffffffffffff
mov rcx, qword [rax + 0xd8]
cmp edi, dword [rcx + 0x20]
jl 0x140033780
mov rsi, qword [rbp + 0x10d70]
mov qword [rsp + 0x28], r12
xor r9d, r9d
mov r8, r15
mov dword [rsp + 0x20], 2
mov rdx, rbx
mov rcx, rsi
call fcn.14003d2b0
mov r12, rax
test rax, rax
je 0x140033811
movzx ecx, byte [rax + 0x22]
xor ecx, r13d
test ecx, 0xffffffbf
jne 0x140033e78
cmp r13d, 0x62
je 0x140033e78
xor eax, eax
mov r12d, eax
cmp r13d, 0x41
je 0x140033884
mov esi, eax
mov rdi, rax
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
cmp dword [rcx + 0x58], 0
jle 0x140033874
mov rax, qword [rcx + 0x30]
mov r9, r15
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov rcx, qword [rax + rdi*8]
mov rcx, qword [rcx + 0x28]
call fcn.1400bf210
test eax, eax
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
je 0x14003386c
inc esi
inc rdi
cmp esi, dword [rcx + 0x58]
jl 0x140033830
jmp 0x140033874
mov rax, qword [rcx + 0x30]
mov r12, qword [rax + rdi*8]
mov rsi, qword [rbp + 0x10d70]
test r12, r12
jne 0x140033e78
xor r12d, r12d
cmp word [rbx], 0
je 0x140033e43
lea rax, [rsp + 0x59]
mov r8, r15
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x70]
mov rdx, rbx
mov dword [rsp + 0x20], r13d
mov rcx, rsi
call fcn.14003d2b0
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
jne 0x140033906
cmp byte [rsp + 0x59], al
je 0x1400338d1
mov ecx, r13d
and ecx, 0x20
or ecx, 2
jmp 0x1400338d6
mov ecx, 1
mov r9d, dword [rsp + 0x70]
mov eax, r13d
and eax, 0xfffffffc
mov r8, r15
or eax, ecx
mov rdx, rbx
mov rcx, rsi
mov dword [rsp + 0x20], eax
call fcn.14003d7f0
mov qword [rsp + 0x68], rax
mov rcx, rax
test rax, rax
je 0x140033e43
movzx eax, byte [rcx + 0x23]
test al, al
jne 0x140033916
mov rax, qword [rcx + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x140033ed0
cmp r15, 0xffffffffffffffff
jne 0x14003392f
inc r15
cmp word [rbx + r15*2], 0
jne 0x140033924
mov r13d, 0xa
cmp r15, r13
cmovb r13, r15
test r13, r13
je 0x1400339a1
movzx edi, word [rbx + r12*2]
test edi, 0xffffff80
jne 0x140033962
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x140033962
and edi, 0xffffffdf
lea rax, [0x140000000]
movzx esi, word [rax + r12*2 + 0xf8470]
test esi, 0xffffff80
jne 0x14003398e
mov edx, 2
mov ecx, esi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14003398e
and esi, 0xffffffdf
cmp edi, esi
jne 0x1400339ad
inc r12
cmp r12, r13
jb 0x140033941
mov rsi, qword [rbp + 0x10d70]
lea eax, [r15 - 0xa]
test eax, eax
je 0x140033ed0
mov r13d, dword [rsp + 0x48]
cmp r13d, 0x41
jne 0x1400339ef
mov rdx, qword [0x140112060]
mov rax, qword [rdx + 0xd8]
movsxd rcx, dword [rax + 0x58]
cmp ecx, 0x7d0
jge 0x140033e9d
mov rax, qword [rax + 0x30]
mov r8, qword [rsp + 0x68]
mov qword [rax + rcx*8], r8
mov rax, qword [rdx + 0xd8]
inc dword [rax + 0x58]
jmp 0x140033a01
cmp r13d, 0xc1
jne 0x140033a01
mov r8, qword [rsp + 0x68]
mov byte [r8 + 0x22], r13b
movzx eax, word [r14]
cmp ax, 0x20
je 0x140033a11
cmp ax, 9
jne 0x140033a17
add r14, 2
jmp 0x140033a01
test ax, ax
je 0x140033e01
cmp ax, 0x2c
je 0x140033dd5
cmp ax, 0x3a
je 0x140033a3f
cmp ax, 0x3d
jne 0x140033a4f
add r14, 2
mov sil, 1
jmp 0x140033a52
cmp word [r14 + 2], 0x3d
jne 0x140033eb5
add r14, 4
xor sil, sil
mov edx, 0x2c
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
call fcn.1400c18f0
movsxd rcx, eax
lea r14, [r14 + rcx*2]
lea rdi, [r14 - 2]
mov qword [rsp + 0x60], r14
mov qword [rbp - 0x80], rdi
cmp rdi, rbx
jbe 0x140033a9c
nop
movzx eax, word [rdi]
cmp ax, 0x20
je 0x140033a8f
cmp ax, 9
jne 0x140033a98
sub rdi, 2
cmp rdi, rbx
ja 0x140033a80
mov qword [rbp - 0x80], rdi
movzx r15d, word [rdi + 2]
xor r12d, r12d
mov word [rsp + 0x40], r15w
mov word [rdi + 2], r12w
test sil, sil
je 0x140033c6e
lea rcx, [rbp + 0x8d20]
sub rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx]
mov word [rbx + rcx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x140033ad0
mov r15d, 1
lea rax, [rbp + 0x8d20]
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], r9w
jne 0x140033af4
mov r14, r12
mov rsi, r12
mov qword [rsp + 0x68], r12
cmp word [rbp + 0x8d20], r12w
je 0x140033c58
cmp word [0x1400e0fd4], r12w
je 0x140033c58
cmp rdi, 0x1388
jb 0x140033cc8
mov ebx, r12d
lea r12, [rbp + 0x8d20]
nop dword [rax]
lea rdx, [0x1400e0fd4]
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov r13, rax
test rax, rax
je 0x140033c08
inc ebx
dec r15d
mov dword [rsp + 0x44], ebx
mov rbx, rax
sub rbx, r12
sar rbx, 1
lea rax, [rsi + rbx]
lea rcx, [rax + 2]
mov qword [rsp + 0x78], rax
cmp rcx, qword [rsp + 0x68]
jb 0x140033bcf
lea rdx, [rbp + 0x8d20]
movsxd rcx, ecx
mov rax, r13
movsxd r9, edi
sub rax, rdx
mov r8d, r15d
mov edx, dword [rsp + 0x44]
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov ecx, 1
call fcn.1400bfde0
mov rcx, r14
mov qword [rsp + 0x68], rax
lea rdx, [rax + rax]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
je 0x140033c42
mov r14, rax
test rbx, rbx
je 0x140033be9
lea r8, [rbx + rbx]
mov rdx, r12
lea rcx, [r14 + rsi*2]
call sub.VCRUNTIME140.dll_memcpy
mov rsi, qword [rsp + 0x78]
mov eax, dword [0x1400e0fd8]
lea r12, [r13 + 2]
mov ebx, dword [rsp + 0x44]
mov dword [r14 + rsi*2], eax
add rsi, 2
test r15d, r15d
jne 0x140033b40
test ebx, ebx
je 0x140033c50
lea rcx, [rbp + 0x8d20]
mov rax, r12
sub rax, rcx
sar rax, 1
sub rdi, rax
je 0x140033c9e
lea rbx, [rsi + rdi]
cmp rbx, qword [rsp + 0x68]
jb 0x140033c8b
lea rdx, [rbx*2 + 2]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
test rax, rax
jne 0x140033c88
test r14, r14
je 0x140033c50
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor r12d, r12d
mov r13d, dword [rsp + 0x48]
mov rdi, qword [rbp - 0x80]
lea rbx, [rbp + 0x8d20]
mov r14, qword [rsp + 0x60]
movzx r15d, word [rsp + 0x40]
mov rsi, qword [rbp + 0x10d70]
cmp r13d, 0x62
jne 0x140033d2b
mov byte [rsi + 0x3d], 1
jmp 0x140033d5f
mov r14, rax
lea r8, [rdi + rdi]
mov rdx, r12
lea rcx, [r14 + rsi*2]
call sub.VCRUNTIME140.dll_memcpy
mov rsi, rbx
xor r12d, r12d
lea r8, [rsi*2 + 2]
mov rdx, r14
mov word [r14 + rsi*2], r12w
lea rcx, [rbp + 0x8d20]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140033c53
lea rsi, [rbp + 0x8d20]
nop
lea rdx, [0x1400e0fd4]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
mov rbx, rax
test rax, rax
je 0x140033c58
lea rsi, [rax + 4]
mov rcx, rbx
lea rax, [rbp + 0x8d20]
mov r8, rdi
sub rcx, rax
lea rdx, [rbx + 2]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
add r8, r8
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [0x1400e0fd8]
inc rdi
mov dword [rbx], eax
add r15d, 0xffffffff
jne 0x140033cd0
jmp 0x140033c58
cmp byte [rsp + 0x58], 0
je 0x140033d5f
cmp byte [rbp + 0x10d90], 0
jne 0x140033d5f
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov dl, 0x77
mov rcx, rsi
call fcn.140036a40
test eax, eax
je 0x140033e43
mov byte [rbp + 0x10d90], 1
mov qword [rsp + 0x38], r12
xor r9d, r9d
mov qword [rsp + 0x30], r12
xor r8d, r8d
mov qword [rsp + 0x28], r12
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], r12
call fcn.140033440
test eax, eax
je 0x140033e43
cmp r13d, 0x62
jne 0x140033dae
mov rcx, qword [rsi + 0x668]
mov byte [rsi + 0x3d], 0
movzx eax, byte [rcx]
mov qword [rcx + 0x10], rax
mov rax, qword [rsi + 0x668]
mov byte [rax], 8
mov word [rdi + 2], r15w
cmp word [r14], 0x2c
jne 0x140033e0b
lea rbx, [r14 + 2]
nop
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140033dcf
cmp ax, 9
jne 0x140033e0e
add rbx, 2
jmp 0x140033dc0
lea rbx, [r14 + 2]
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140033def
cmp ax, 9
jne 0x140033df5
add rbx, 2
jmp 0x140033de0
mov rsi, qword [rbp + 0x10d70]
xor r12d, r12d
jmp 0x140033e0e
mov rsi, qword [rbp + 0x10d70]
xor r12d, r12d
mov rbx, r14
movzx edx, word [rbx]
test dx, dx
jne 0x140033701
cmp byte [rbp + 0x10d90], dl
je 0x140033f65
xor r9d, r9d
mov qword [rsp + 0x20], r12
xor r8d, r8d
mov dl, 0x78
mov rcx, rsi
call fcn.140036a40
test eax, eax
jne 0x140033f65
xor eax, eax
mov rbx, qword [rsp + 0x10e80]
add rsp, 0x10e30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Parameters_must_not_be_declared.
mov r8, rbx
call fcn.14004dd50
jmp 0x140033e45
test byte [r12 + 0x22], 0x40
lea rax, str.Duplicate_declaration.
lea rdx, str.Declaration_conflicts_with_existing_var.
mov r8, rbx
cmovne rdx, rax
mov rcx, rsi
call fcn.14004dd50
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Too_many_declarations.
mov r8, rbx
call fcn.14004dd50
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.This_line_does_not_contain_a_recognized_action.
mov r8, rbx
call fcn.14004dd50
jmp 0x140033e45
mov r8, rbx
lea rdx, str.Built_in_variables_must_not_be_declared.
mov rcx, rsi
call fcn.14004dd50
jmp 0x140033e45
mov esi, dword [rsp + 0x40]
mov rdi, qword [rbp + 0x10d78]
mov word [rbx + 2], r14w
mov r14, qword [rbp + 0x10d70]
mov r9b, 1
lea rdx, [rbp + 0x110]
mov r8, rdi
mov rcx, r14
call fcn.140036670
mov r13, rax
test rax, rax
je 0x140033e43
lea rdi, [r13 + 2]
movzx ecx, word [rdi]
cmp cx, 0x20
je 0x140033f32
cmp cx, 9
jne 0x140033f9d
add rdi, 2
jmp 0x140033f23
cmp byte [r14 + 0x3c], r12b
je 0x140033f86
mov rax, qword [0x140112060]
mov rcx, qword [rax + 0xd8]
movzx eax, byte [rcx + 0x78]
test al, al
jne 0x140033f6f
cmp r13d, 0x42
mov eax, 0x46
cmove r13d, eax
mov byte [rcx + 0x78], r13b
mov eax, 1
jmp 0x140033e45
cmp al, 0x46
jne 0x140033f86
cmp r13d, 0x62
jne 0x140033f86
mov byte [rcx + 0x78], 0x66
lea eax, [r13 - 0x61]
jmp 0x140033e45
mov r8, rdi
lea rdx, str.This_line_does_not_contain_a_recognized_action.
mov rcx, r14
call fcn.14004dd50
jmp 0x140033e45
movzx ecx, word [r13 + 2]
cmp cx, word [0x140113a88]
mov qword [rsp + 0x50], rdi
je 0x140033ffa
cmp ecx, 0x20
ja 0x140033fc5
movabs rdx, 0x100000201
bt rdx, rcx
jb 0x140033ffa
cmp ecx, 0x28
jne 0x140033ffd
lea rdx, [0x1400f84c4]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140033ffa
lea rdx, str.WHILE
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140033ffd
mov r12b, 1
mov r9d, dword [rsp + 0x44]
xor al, al
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov byte [rbp + 0x10d90], al
mov r10, 0xffffffffffffffff
movzx eax, word [0x140113a88]
lea r11d, [rbx + 8]
lea r14d, [rbx - 0x15]
cmp word [rdi], ax
jne 0x140034049
movzx eax, word [rdi + 2]
add rdi, 2
mov qword [rsp + 0x50], rdi
cmp ax, r11w
je 0x14003402a
cmp ax, 9
jne 0x140034678
jmp 0x14003402a
test sil, sil
jne 0x140034407
test r9b, r9b
jne 0x140034686
test r12b, r12b
je 0x1400347b7
lea rdx, [0x1400f84c4]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x1400347ac
movzx edx, word [rdi]
cmp dx, 0x28
je 0x14003470b
cmp dx, word [0x140113a84]
jne 0x1400340ae
movzx eax, word [rdi + 2]
cmp ax, 0x20
je 0x14003470b
cmp ax, 9
je 0x14003470b
movzx eax, word [0x140113a88]
xor r15d, r15d
mov word [rbp - 0x76], ax
mov r8d, SafeArrayAllocDescriptor
mov word [rbp - 0x78], r8w
mov rbx, rdi
mov dword [rbp - 0x74], 0x90028
mov dword [rbp - 0x70], 0x3e003c
mov dword [rbp - 0x6c], 0x3d003a
mov dword [rbp - 0x68], 0x2d002b
mov dword [rbp - 0x64], 0x2f002a
mov dword [rbp - 0x60], 0x7e0021
mov dword [rbp - 0x5c], 0x7c0026
mov dword [rbp - 0x58], 0x5b005e
mov dword [rbp - 0x54], 0x3f002e
mov dword [rbp - 0x50], 0x7b
test dx, dx
je 0x14003414a
nop word [rax + rax]
lea rcx, [rbp - 0x78]
movzx eax, r8w
cmp dx, ax
je 0x140034190
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140034128
movzx eax, word [rbx + 2]
add rbx, 2
movzx edx, ax
test ax, ax
jne 0x140034120
mov rax, 0xffffffffffffffff
cmp word [rdi + rax*2 + 2], r15w
lea rax, [rax + 1]
jne 0x140034151
lea rbx, [rdi + rax*2]
mov r8, r14
lea rdx, [0x1400f5f20]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x1400341a5
movzx edx, word [rdi + 6]
lea rcx, [rbp - 0x78]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x1400341a5
mov sil, 1
jmp 0x1400341a8
movzx eax, word [rbx]
cmp ax, r8w
je 0x14003419f
cmp ax, 9
jne 0x140034161
add rbx, 2
jmp 0x140034190
xor sil, sil
movzx eax, word [rbx]
add eax, 0xffffffdf
cmp eax, 0x4d
ja case.0x1400341d4.34
lea r9, [0x140000000]
cdqe
movzx eax, byte [r9 + rax + 0x36348]
mov ecx, dword [r9 + rax*4 + 0x36324]
add rcx, r9
jmp rcx
movzx eax, word [0x140113a88]
mov sil, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov dword [rsp + 0x40], esi
mov word [rbx], ax
jmp 0x14003440e
movzx ecx, word [rbx + 2]
sub ecx, 0x3d
je 0x140034221
movzx eax, word [0x140113a88]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
cmp ecx, 1
je 0x14003421c
mov sil, reloc.OLEAUT32.dll_SafeArrayAccessData
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x14003441a
mov sil, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x14003425f
mov sil, reloc.OLEAUT32.dll_SafeArrayUnaccessData
movzx eax, word [0x140113a88]
mov r10d, SafeArrayAllocDescriptor
mov word [rbx + 2], r10w
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x14003440e
cmp word [rbx + 2], 0x3d
movzx eax, word [0x140113a88]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
jne 0x140034276
mov sil, reloc.OLEAUT32.dll_SafeArrayUnlock
mov r10d, SafeArrayAllocDescriptor
mov dword [rsp + 0x40], esi
mov word [rbx + 2], r10w
mov word [rbx], ax
jmp 0x14003441a
mov sil, reloc.OLEAUT32.dll_SafeArrayLock
mov word [rbx], ax
mov dword [rsp + 0x40], esi
jmp 0x14003441a
cmp word [rbx + 2], 0x3d
jne case.0x1400341d4.34
mov sil, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x140034224
test sil, sil
jne case.0x1400341d4.34
mov r8d, 7
lea rdx, str.between
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400341d4.34
movzx eax, word [0x140113a88]
mov dl, reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rbx + 2], 0x200020
mov dword [rbx + 6], 0x200020
mov dword [rbx + 0xa], 0x200020
mov word [rbx], ax
mov dword [rsp + 0x40], edx
jmp 0x14003457f
test sil, sil
jne case.0x1400341d4.34
mov r8d, 8
lea rdx, str.contains
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400341d4.34
mov dword [rbx + 2], 0x200020
mov sil, reloc.WSOCK32.dll_inet_ntoa
mov dword [rbx + 6], 0x200020
mov eax, SafeArrayAllocDescriptor
mov dword [rbx + 0xa], 0x200020
mov word [rbx + 0xe], ax
mov dword [rsp + 0x40], esi
jmp 0x1400343fd
movzx edi, word [rbx + 2]
test edi, 0xffffff80
jne 0x140034357
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x140034357
and edi, 0xffffffdf
cmp edi, 0x4e
je 0x1400343dd
cmp edi, 0x53
je 0x140034373
cmp edi, 0x6e
je 0x1400343dd
cmp edi, 0x73
jne case.0x1400341d4.34
test sil, sil
jne case.0x1400341d4.34
lea rdi, [rbx + 4]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14003438f
cmp ax, 9
jne 0x140034395
add rdi, 2
jmp 0x140034380
mov r8, r14
lea rdx, [0x1400f93c8]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
mov r14d, SafeArrayAllocDescriptor
test eax, eax
je 0x1400343c2
mov dl, 0xd
mov word [rbx + 2], r14w
mov dword [rsp + 0x40], edx
jmp 0x14003464c
mov dword [rdi], 0x200020
mov dl, SafeArrayDestroy
mov word [rdi + 4], r14w
mov dword [rsp + 0x40], edx
mov word [rbx + 2], r14w
jmp 0x14003464c
test sil, sil
jne case.0x1400341d4.34
mov sil, 9
mov r10d, SafeArrayAllocDescriptor
mov dword [rsp + 0x40], esi
mov word [rbx + 2], r10w
mov rdi, qword [rsp + 0x50]
movzx eax, word [0x140113a88]
mov word [rbx], ax
lea r9, [0x140000000]
mov r14d, dword [rsp + 0x44]
mov r12, qword [rbp + 0x10d78]
movzx ecx, sil
xor r15d, r15d
mov dword [rsp + 0x70], ecx
mov qword [rsp + 0x60], r15
sub ecx, 0x21
je 0x140034f7e
sub ecx, 0x50
je 0x140034f7e
sub ecx, 1
je 0x140034f78
sub ecx, 1
je 0x140034f7e
cmp ecx, 3
jne 0x140034fbe
mov r8d, r15d
lea r10d, [r15 + 0x29]
lea r11d, [r15 + 0x7d]
mov r14d, 0x3a
nop dword [rax + rax]
movsxd rax, r8d
movzx ecx, word [rdi + rax*2]
lea rdx, [rdi + rax*2]
cmp ecx, r14d
jne 0x14003448c
cmp word [rdi + rax*2 + 2], 0x3d
jne case.0x1400344a9.0
cmp ecx, r11d
ja case.0x1400344a9.3
movzx eax, byte [r9 + rcx + 0x363b8]
mov ecx, dword [r9 + rax*4 + 0x36398]
add rcx, r9
jmp rcx
mov r8, r14
lea rdx, [0x1400f93c8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne case.0x1400341d4.34
movzx eax, word [rbx + 6]
lea rdi, [rbx + 6]
cmp ax, 0x20
je 0x1400344e0
cmp ax, 9
jne case.0x1400341d4.34
nop
mov r14d, SafeArrayAllocDescriptor
mov dword [rbx], 0x200020
mov word [rbx + 4], r14w
cmp ax, r14w
je 0x1400344fd
cmp ax, 9
jne 0x140034507
movzx eax, word [rdi + 2]
add rdi, 2
jmp 0x1400344f1
mov r8d, 2
lea rdx, [0x1400e1010]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034533
mov sil, 0xa
mov dword [rdi], 0x200020
mov dword [rsp + 0x40], esi
jmp 0x1400343f8
mov r8d, 7
lea rdx, str.between
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034607
movzx eax, word [0x140113a88]
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rdi], 0x200020
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
mov word [rdi + 0xc], r14w
mov word [rbx], ax
mov dword [rsp + 0x40], edx
mov rdi, qword [rsp + 0x50]
lea rdx, [0x1400f8568]
mov rcx, rbx
call fcn.1400bf560
mov rbx, rax
test rax, rax
je 0x1400345e8
nop word [rax + rax]
movzx edx, word [rbx - 2]
lea rcx, [0x1400f6270]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x1400345d0
movzx edx, word [rbx + 6]
lea rcx, [0x1400f6270]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
jne 0x1400346f5
lea rcx, [rbx + 6]
lea rdx, [0x1400f8568]
call fcn.1400bf560
mov rbx, rax
test rax, rax
jne 0x1400345a0
mov r8, qword [rbp + 0x10d78]
lea rdx, str.BETWEEN_requires_the_word_AND.
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dd50
jmp 0x140033e45
mov r8d, 8
lea rdx, str.contains
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034648
mov dword [rdi], 0x200020
mov sil, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
mov dword [rdi + 0xc], 0x200020
mov dword [rsp + 0x40], esi
jmp 0x1400343f8
mov edx, dword [rsp + 0x40]
movzx eax, word [0x140113a88]
movzx ecx, dl
mov word [rbx], ax
cmp dl, 0xf
je 0x14003457a
mov rdi, qword [rsp + 0x50]
mov dword [rsp + 0x40], edx
cmp dl, 0x10
je 0x14003457f
mov esi, dword [rsp + 0x40]
test sil, sil
jne 0x140034407
mov ebx, reloc.OLEAUT32.dll_SafeArrayGetElement
lea r9, [0x140000000]
mov r14d, dword [rsp + 0x44]
test r12b, r12b
je 0x140034bd8
test r14b, r14b
jne 0x140034bd8
mov esi, ebx
mov dword [rsp + 0x40], ebx
nop word [rax + rax]
movsxd rax, esi
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r9 + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034b7d
inc esi
lea r9, [0x140000000]
mov dword [rsp + 0x40], esi
cmp esi, 0xe6
jl 0x1400346b0
xor sil, sil
mov dword [rsp + 0x40], esi
jmp 0x140034b86
movzx eax, word [0x140113a88]
mov word [rbx], ax
mov dword [rbx + 2], 0x200020
jmp 0x140034674
xor r15d, r15d
mov rdi, qword [rsp + 0x50]
mov sil, reloc.OLEAUT32.dll_SafeArrayGetElemsize
mov dword [rsp + 0x40], esi
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], 0
jne 0x140034721
dec rax
cmp word [rdi + rax*2], 0x7b
lea rax, [rdi + rax*2]
jne 0x140034407
mov word [rax], r15w
sub rax, rdi
sar rax, 1
cmp word [rdi], 0
je 0x1400347a0
cmp rax, 0xffffffffffffffff
jne 0x14003475d
inc rax
cmp word [rdi + rax*2], 0
jne 0x140034753
lea rcx, [rdi - 2]
lea rcx, [rcx + rax*2]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x140034774
cmp ax, 9
jne 0x14003477f
cmp rcx, rdi
je 0x140034790
sub rcx, 2
jmp 0x140034765
mov word [rcx + 2], r15w
mov byte [rbp + 0x10d90], 1
jmp 0x140034407
cmp ax, 0x20
je 0x14003479c
cmp ax, 9
jne 0x1400347a0
mov word [rcx], r15w
mov byte [rbp + 0x10d90], 1
jmp 0x140034407
mov r10, 0xffffffffffffffff
lea r11d, [r10 + 0x21]
mov r14, qword [rsp + 0x50]
lea r9, [0x140000000]
movzx edx, word [rdi + 2]
add rdi, 2
movzx r8d, word [r14]
lea eax, [r8 - 0x26]
cmp eax, 0x56
ja case.0x1400347f2.47
cdqe
movzx eax, byte [r9 + rax + 0x36460]
mov ecx, dword [r9 + rax*4 + 0x36438]
add rcx, r9
jmp rcx
movzx eax, word [0x140113a88]
mov sil, 1
mov rdi, qword [rbp + 0x10d78]
mov word [r14], ax
mov dword [rsp + 0x40], esi
mov qword [rsp + 0x50], rdi
jmp 0x140034678
mov ecx, 2
jmp 0x14003497a
cmp word [rbp + 0x110], 0x2b
jne 0x14003483c
cmp word [rbp + 0x112], 0
jne 0x14003483c
mov al, 1
mov sil, 4
jmp 0x140034874
xor al, al
cmp dx, 0x3d
jne case.0x1400347f2.47
mov sil, 4
jmp 0x140034874
cmp word [rbp + 0x110], 0x2d
jne 0x140034865
cmp word [rbp + 0x112], 0
jne 0x140034865
mov al, 1
jmp 0x140034871
xor al, al
cmp dx, 0x3d
jne case.0x1400347f2.47
mov sil, 5
mov dword [rsp + 0x40], esi
test al, al
je 0x140034995
cmp dx, 0x20
je 0x14003488c
cmp dx, 9
jne 0x140034896
movzx edx, word [rdi + 2]
add rdi, 2
jmp 0x140034880
mov r8, rdi
test dx, dx
je 0x1400348d4
nop
lea rcx, str.__t____:_______._
movzx eax, r11w
nop dword [rax + rax]
cmp dx, ax
je 0x14003495d
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x1400348b0
movzx edx, word [r8 + 2]
add r8, 2
test dx, dx
jne 0x1400348a0
mov rbx, r10
nop word [rax + rax]
cmp word [rdi + rbx*2 + 2], 0
lea rbx, [rbx + 1]
jne 0x1400348e0
mov rdx, rdi
lea r8, [rbx*2 + 2]
mov rdi, qword [rbp + 0x10d78]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
movzx eax, word [0x140113a88]
mov word [rdi + rbx*2], ax
mov dword [rdi + rbx*2 + 2], gethostbyname
mov qword [rsp + 0x50], rdi
jmp 0x140034678
movzx eax, sil
cmp dx, 0x3d
cmovne r15d, eax
movzx esi, r15b
jmp 0x140034988
cmp dx, 0x3d
jne 0x140034944
mov sil, 7
mov dword [rsp + 0x40], esi
jmp 0x1400349a5
cmp dx, 0x2f
mov rdi, r14
jne 0x14003468d
cmp word [r14 + 4], 0x3d
jne 0x14003468d
mov sil, 3
mov dword [rsp + 0x40], esi
mov rdi, qword [rbp + 0x10d78]
mov qword [rsp + 0x50], rdi
jmp 0x140034678
mov ecx, 3
movzx eax, sil
cmp dx, 0x3d
cmovne ecx, eax
movzx esi, cl
mov dword [rsp + 0x40], esi
test sil, sil
je case.0x1400347f2.47
cmp sil, 3
je 0x140034964
cmp sil, 1
je 0x140034a40
movzx edx, word [0x140113a88]
xor r9d, r9d
mov rcx, r14
lea r8d, [r9 + 2]
call fcn.1400c18f0
movsxd rcx, eax
cmp word [r14 + rcx*2], r9w
je 0x140034a40
lea eax, [rsi - 4]
cmp al, 1
ja 0x14003495d
lea r8, [r14 + 2]
lea r8, [r8 + rcx*2]
movzx edx, word [r8]
cmp dx, 0x20
je 0x1400349e4
cmp dx, 9
jne 0x1400349ea
add r8, 2
jmp 0x1400349d4
mov r10d, SafeArrayAllocDescriptor
test dx, dx
je 0x140034a34
nop word [rax + rax]
lea rcx, str.__t____:_______._
movzx eax, r10w
nop dword [rax + rax]
cmp dx, ax
je 0x14003495d
movzx eax, word [rcx + 2]
add rcx, 2
test ax, ax
jne 0x140034a10
movzx edx, word [r8 + 2]
add r8, 2
test dx, dx
jne 0x140034a00
cmp sil, 3
je 0x140034964
jmp 0x140034a46
mov r10d, SafeArrayAllocDescriptor
movzx eax, word [0x140113a88]
mov word [r14], ax
cmp sil, 1
je 0x140034964
mov word [rdi], r10w
mov rdi, qword [rbp + 0x10d78]
mov qword [rsp + 0x50], rdi
jmp 0x140034678
cmp dx, r8w
jmp 0x140034948
cmp dx, 0x3d
je 0x14003495d
mov r14d, 0xff80
nop dword [rax]
mov rbx, rdi
movzx ecx, word [rbx]
test ecx, 0xffffff80
jne 0x140034ab0
mov edx, 0x107
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx ecx, word [rbx]
test eax, eax
jne 0x140034abc
test r14w, cx
jne 0x140034abc
cmp cx, 0x5f
jne 0x140034ac2
add rbx, 2
jmp 0x140034a93
cmp cx, 0x28
je 0x14003495d
cmp rbx, rdi
je 0x140034b6b
cmp cx, 0x20
je 0x140034ae1
cmp cx, 9
jne 0x140034aeb
movzx ecx, word [rbx + 2]
add rbx, 2
jmp 0x140034ad5
cmp cx, 0x5b
je 0x14003495d
test cx, cx
je 0x14003495d
cmp word [rbx + 2], 0x3d
lea rdi, [rbx + 2]
jne 0x140034b22
movzx edx, cx
lea rcx, str.:__.
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
jne 0x14003495d
movzx eax, word [rbx]
cmp word [rdi], ax
jne 0x140034b61
movzx edx, ax
lea rcx, [0x1400f9428]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034b4a
cmp word [rbx + 4], 0x3d
je 0x14003495d
movzx eax, word [rbx]
cmp ax, 0x2b
je 0x14003495d
cmp ax, 0x2d
je 0x14003495d
cmp ax, 0x2e
je 0x140034a90
mov rdi, qword [rsp + 0x50]
jmp 0x140034681
mov rdi, r14
jmp 0x14003468d
test sil, sil
jne 0x140034cc7
mov r14d, 1
lea r15, [0x140000000]
mov dword [rsp + 0x44], r14d
nop dword [rax + rax]
movsxd rax, r14d
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r15 + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034be8
inc r14d
mov dword [rsp + 0x44], r14d
cmp r14d, 0xe
jl 0x140034ba0
xor r14b, r14b
mov dword [rsp + 0x44], r14d
jmp 0x140034bf6
test sil, sil
jne 0x14003440e
lea r15, [0x140000000]
test r14b, r14b
mov r14d, dword [rsp + 0x44]
jne 0x140034ccc
movzx eax, word [rdi]
cmp ax, 0x7b
jne 0x140034cd8
nop dword [rax]
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rbp + 0x110]
lea rdx, [rax + rax*8]
mov rdx, qword [r15 + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140034c3c
inc ebx
cmp ebx, 0xe6
jl 0x140034c10
xor bl, bl
movzx ecx, bl
sub ecx, 0x21
je 0x140034cb0
sub ecx, 0x48
je 0x140034ca2
sub ecx, 8
je 0x140034cb0
sub ecx, 1
je 0x140034cb0
cmp ecx, 1
je 0x140034cb0
movzx edx, word [rdi]
lea rcx, str.__t____:_______._
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034de4
movzx ecx, word [rdi]
mov edx, 0xfffd
lea eax, [rcx - 0x2b]
test dx, ax
jne 0x140034db3
cmp word [rdi + 2], cx
jne 0x140034db3
cmp word [rdi + 4], 0
je 0x140034d75
mov sil, 3
jmp 0x140034d94
cmp word [rdi + 2], 0
mov byte [rbp + 0x10d90], 1
jne 0x140034c58
movzx esi, bl
mov dword [rsp + 0x40], esi
test bl, bl
je 0x140034c58
lea r9, [0x140000000]
jmp 0x140034413
mov r14d, dword [rsp + 0x44]
lea r9, [0x140000000]
jmp 0x140034413
cmp ax, 0x3a
jne 0x140034c58
lea rdx, str.Default
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x140034c58
mov rsi, qword [rbp + 0x10d70]
xor ebx, ebx
mov rcx, rsi
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
mov dl, 0x76
call fcn.140036a40
test eax, eax
je 0x140033e43
lea rdx, [rdi + 2]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x140034d3f
cmp ax, 9
jne 0x140034d45
add rdx, 2
jmp 0x140034d30
test ax, ax
je 0x140033f65
mov qword [rsp + 0x38], rbx
xor r9d, r9d
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rbx
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.140033440
jmp 0x140033e45
movzx eax, word [0x140113a88]
cmp cx, 0x2b
mov word [rdi], ax
mov eax, gethostbyname
setne sil
mov word [rdi + 2], ax
add sil, 4
mov r12, qword [rbp + 0x10d78]
mov dword [rsp + 0x40], esi
lea r9, [0x140000000]
mov rdi, r12
mov qword [rsp + 0x50], r12
jmp 0x14003441a
cmp cx, 0x3f
je 0x140034ddf
mov edx, 0x3f
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034de4
mov edx, 0x3a
mov rcx, rax
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140034de4
mov sil, 3
jmp 0x140034d94
movzx eax, word [rdi]
mov r12, qword [rbp + 0x10d78]
cmp ax, 0x28
je 0x140034e67
cmp ax, 0x5b
je 0x140034e67
cmp word [r12], 0x28
je 0x140034e67
mov r8d, 3
lea rdx, [0x1400f9468]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x140034e2e
movzx eax, word [r12 + 6]
cmp ax, 0x20
je 0x140034e67
cmp ax, 9
je 0x140034e67
lea rdx, [0x1400f85ac]
mov rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
lea rcx, str.Invalid_hotkey.
mov r8, r12
test rax, rax
lea rdx, str.This_line_does_not_contain_a_recognized_action.
cmovne rdx, rcx
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dd50
jmp 0x140033e45
mov sil, 3
jmp 0x140034d9b
movzx eax, word [rdx + 2]
lea rdx, [rdx + 2]
inc r8d
test ax, ax
je case.0x1400344a9.0
cmp ax, 0x22
jne case.0x1400344a9.1
inc r8d
lea r9, [0x140000000]
jmp 0x140034470
mov edx, r14d
jmp 0x140034eae
movzx eax, r10w
jmp 0x140034eab
mov eax, 0x5d
jmp 0x140034eab
movzx eax, r11w
movzx edx, ax
inc r8d
mov rcx, rdi
call fcn.1400c1a40
movsxd r8, eax
cmp word [rdi + r8*2], r15w
je case.0x1400344a9.0
inc r8d
lea r9, [0x140000000]
jmp 0x140034470
mov r14d, dword [rsp + 0x44]
movsxd rax, r8d
cmp word [rdi + rax*2], r15w
lea rdx, [rdi + rax*2]
jne 0x140034f00
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Missing__:_
mov r8, r12
call fcn.14004dd50
jmp 0x140033e45
mov word [rdx], r15w
cmp word [rdi], r15w
je 0x140034f53
mov rax, 0xffffffffffffffff
inc rax
cmp word [rdi + rax*2], r15w
jne 0x140034f11
dec rax
lea rax, [rdi + rax*2]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x140034f31
cmp cx, 9
jne 0x140034f3c
cmp rax, rdi
je 0x140034f43
sub rax, 2
jmp 0x140034f22
mov word [rax + 2], r15w
jmp 0x140034f53
cmp cx, 0x20
je 0x140034f4f
cmp cx, 9
jne 0x140034f53
mov word [rax], r15w
movzx eax, word [rdx + 2]
add rdx, 2
cmp ax, 0x20
je 0x140034f53
cmp ax, 9
je 0x140034f53
mov qword [rsp + 0x60], rdx
test ax, ax
jne 0x140034fbe
mov qword [rsp + 0x60], r15
jmp 0x140034fbe
cmp word [rdi], 0x7b
jne 0x140034fbe
movzx eax, word [rdi]
cmp ax, 0x7b
jne 0x140034fa7
mov byte [rbp + 0x10d90], 1
movzx eax, word [rdi + 2]
add rdi, 2
cmp ax, 0x20
je 0x140034f8e
cmp ax, 9
je 0x140034f8e
mov qword [rsp + 0x50], rdi
test ax, ax
je 0x140034fbe
mov qword [rsp + 0x60], rdi
sub rdi, 2
mov qword [rsp + 0x50], rdi
mov word [rdi], r15w
lea r15, [0x140000000]
test sil, sil
je 0x140034fe4
movzx eax, sil
lea rbx, [r15 + 0x112920]
lea rcx, [rax + rax*8]
lea rbx, [rbx + rcx*2]
mov qword [rsp + 0x68], rbx
jmp 0x140034ffc
movzx eax, r14b
lea rcx, [rax + rax*8]
lea rax, [r15 + 0x112820]
lea rax, [rax + rcx*2]
mov qword [rsp + 0x68], rax
xor edx, edx
lea rcx, [rbp + 0xd10]
mov r8d, 0x8002
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbp + 0x10da0]
test rdx, rdx
je 0x14003509f
mov ecx, dword [rbp + 0x10da8]
mov rax, rdi
sub rax, r13
sar rax, 1
sub ecx, eax
test ecx, ecx
jle 0x14003504d
movsxd r8, ecx
lea rcx, [rbp + 0xd10]
cdqe
add r8, r8
lea rdx, [rdx + rax*2]
call sub.VCRUNTIME140.dll_memcpy
xor r13d, r13d
cmp sil, 0x22
jne 0x14003577e
cmp word [rdi], 0
mov esi, r13d
mov r12d, 1
je 0x140035869
mov r14d, 0xffdf
lea eax, [rsi + 1]
cmp r12d, 1
cmovle eax, esi
movsxd rsi, eax
lea rcx, [rdi + rsi*2]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x140035097
cmp ax, 9
jne 0x1400351b3
inc esi
add rcx, 2
jmp 0x140035084
movzx esi, word [0x140113a80]
xor r13d, r13d
mov r14, qword [rsp + 0x50]
mov edi, r13d
mov ebx, r13d
lea r12, [r13 - 1]
movzx eax, word [r14 + rbx*2]
mov r8d, reloc.WSOCK32.dll_inet_ntoa
lea edx, [r8 + 2]
test ax, ax
je 0x1400350e5
nop dword [rax]
cmp ax, si
je 0x1400350e5
movzx eax, word [r14 + rbx*2 + 2]
inc rbx
inc edi
test ax, ax
jne 0x1400350d0
cmp word [r14 + rbx*2], r13w
je 0x1400351a0
movzx eax, word [r14 + rbx*2 + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x14003510b.99
cdqe
mov ecx, dword [r15 + rax*4 + 0x364b8]
add rcx, r15
jmp rcx
mov eax, 7
mov word [r14 + rbx*2 + 2], ax
jmp case.0x14003510b.99
mov eax, 8
mov word [r14 + rbx*2 + 2], ax
jmp case.0x14003510b.99
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov word [r14 + rbx*2 + 2], ax
jmp case.0x14003510b.99
mov eax, 0xa
mov word [r14 + rbx*2 + 2], ax
jmp case.0x14003510b.99
mov word [r14 + rbx*2 + 2], dx
jmp case.0x14003510b.99
mov eax, 9
mov word [r14 + rbx*2 + 2], ax
jmp case.0x14003510b.99
mov word [r14 + rbx*2 + 2], r8w
movsxd rax, edi
mov r8, r12
lea rcx, [r14 + rax*2]
lea rdx, [rcx + 2]
nop word [rax + rax]
cmp word [rdx + r8*2 + 2], r13w
lea r8, [r8 + 1]
jne 0x140035170
lea r8, [r8*2 + 2]
call sub.VCRUNTIME140.dll_memcpy
mov eax, 1
inc edi
mov word [rbp + rbx*2 + 0xd10], ax
inc rbx
jmp 0x1400350b8
mov esi, dword [rsp + 0x40]
mov rdi, r14
mov r12, qword [rbp + 0x10d78]
jmp 0x140035050
cmp ax, word [0x140113a84]
jne 0x140035294
movsxd rax, esi
cmp word [rbp + rax*2 + 0xd10], 0
jne 0x140035294
movzx ecx, word [rdi + rax*2 + 2]
cmp cx, 0x20
je 0x1400351e7
cmp cx, 9
jne 0x140035294
cmp r12d, 3
jge 0x140035869
add esi, 2
lea rdx, [rbp + 0xd10]
movsxd rax, esi
xor r9b, r9b
mov r10, rdi
mov r8d, r13d
lea rdx, [rdx + rax*2]
lea rax, [rbp + 0xd10]
sub r10, rax
nop word [rax + rax]
movzx eax, word [r10 + rdx]
cmp ax, word [0x140113a88]
jne 0x14003524a
test r9b, r9b
jne case.0x140035263.4
test r8d, r8d
jg case.0x140035263.4
cmp word [rdx], 0
je case.0x140035263.0
inc esi
add rdx, 2
jmp 0x140035220
cmp eax, 0x7d
ja case.0x140035263.4
movzx eax, byte [r15 + rax + 0x36524]
mov ecx, dword [r15 + rax*4 + 0x36510]
add rcx, r15
jmp rcx
test r9b, r9b
sete r9b
inc esi
add rdx, 2
jmp 0x140035220
test r9b, r9b
jne case.0x140035263.4
inc r8d
inc esi
add rdx, 2
jmp 0x140035220
test r9b, r9b
jne case.0x140035263.4
dec r8d
inc esi
add rdx, 2
jmp 0x140035220
movsxd r13, esi
lea rcx, [r13*2]
movzx eax, word [rcx + rdi]
lea rbx, [rcx + rdi]
test ax, ax
je 0x1400352d6
mov rdx, r13
nop
cmp ax, word [0x140113a88]
jne 0x1400352c4
cmp word [rbp + rcx + 0xd10], 0
je 0x1400352d6
inc rdx
inc esi
lea rcx, [rdx + rdx]
movzx eax, word [rcx + rdi]
test ax, ax
jne 0x1400352b0
cmp r12d, 1
jne 0x14003541a
movsxd rax, esi
cmp word [rdi + rax*2], 0
lea r15, [rdi + rax*2]
je 0x140035869
xor r13d, r13d
mov word [r15], r13w
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003530f
cmp ax, 9
jne 0x140035315
add rbx, 2
jmp 0x140035300
test ax, ax
je 0x14003540d
cmp ax, 0x2d
je 0x1400353b5
cmp ax, 0x2b
jne 0x140035338
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x140035366
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x140035366
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x140035366
mov r14d, 1
add rbx, 4
jmp 0x140035369
mov r14, r13
movzx edi, word [rbx]
mov ecx, r13d
cmp edi, 0x20
je 0x1400353e4
cmp edi, 9
je 0x1400353e4
test edi, edi
je 0x1400353fe
cmp edi, 0x2e
je 0x1400353b5
test r14, r14
je 0x1400353ca
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r13d
sete cl
test ecx, ecx
je 0x1400353d2
test edi, 0xffffff80
jne 0x1400353b5
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
movzx eax, word [0x140113a88]
mov word [r15], ax
mov eax, 1
jmp 0x140035872
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400353a0
movzx edi, word [rbx + 2]
add rbx, 2
mov ecx, 1
cmp edi, 0x20
jne 0x140035374
movzx eax, word [rbx]
cmp ax, 0x20
je 0x1400353f3
cmp ax, 9
jne 0x1400353f9
add rbx, 2
jmp 0x1400353e4
test ax, ax
jne 0x1400353b5
test ecx, ecx
je 0x1400353b5
mov rdi, qword [rsp + 0x50]
mov r14d, 0xffdf
movzx eax, word [0x140113a88]
mov word [r15], ax
jmp case.0x140035263.0
cmp r12d, 4
je 0x140035440
xor r13d, r13d
movsxd rax, esi
inc r12d
cmp word [rdi + rax*2], 0
je 0x140035869
lea r15, [0x140000000]
jmp 0x140035073
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003544f
cmp ax, 9
jne 0x140035455
add rbx, 2
jmp 0x140035440
test ax, ax
je 0x140035869
cmp ax, 0x2d
je 0x1400355b0
cmp ax, 0x2b
jne 0x140035478
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x1400354a8
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x1400354a8
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x1400354a8
add rbx, 4
mov r15d, 1
xor eax, eax
jmp 0x1400354ad
xor eax, eax
mov r15d, eax
movzx edi, word [rbx]
mov r14d, eax
mov r12d, eax
cmp edi, 0x20
je 0x140035572
nop
cmp edi, 9
je 0x140035572
test edi, edi
je 0x14003559c
cmp edi, 0x2e
jne 0x1400354ee
test r14d, r14d
jne 0x1400355a5
test r15, r15
jne 0x1400355a5
lea r14d, [rdi - 0x2d]
jmp 0x140035561
test r15, r15
je 0x140035587
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
xor ecx, ecx
test eax, eax
sete cl
test ecx, ecx
je 0x14003558f
test edi, 0xffffff80
jne 0x14003552b
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x14003552b
and edi, 0xffffffdf
cmp di, 0x45
jne 0x1400355a5
test r14d, r14d
je 0x1400355a5
test r12d, r12d
je 0x1400355a5
movzx eax, word [rbx + 2]
lea rcx, [rbx + 2]
sub ax, 0x2b
mov edx, 0xfffd
test dx, ax
cmove rbx, rcx
movzx eax, word [rbx + 2]
sub ax, 0x30
cmp ax, 9
ja 0x1400355a5
movzx edi, word [rbx + 2]
add rbx, 2
cmp edi, 0x20
jne 0x1400354c0
movzx eax, word [rbx]
cmp ax, 0x20
je 0x140035581
cmp ax, 9
jne 0x140035597
add rbx, 2
jmp 0x140035572
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x14003550f
mov r12d, 1
jmp 0x140035561
test ax, ax
jne 0x1400355a5
test r12d, r12d
jne 0x140035869
mov rdi, qword [rsp + 0x50]
mov r14d, 0xffdf
movsxd rax, esi
cmp word [rdi + rax*2], 0
jne 0x140035774
movzx edx, word [0x140113a84]
cmp word [rdi + r13*2], dx
jne 0x140035774
cmp word [rbp + r13*2 + 0xd10], 0
jne 0x140035774
lea rcx, [r13 + 1]
lea rcx, [rdi + rcx*2]
call qword [sym.imp.VCRUNTIME140.dll_wcschr]
test rax, rax
je 0x140035774
lea rbx, [rax + 2]
nop dword [rax + rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003560f
cmp ax, 9
jne 0x140035615
add rbx, 2
jmp 0x140035600
test ax, ax
je 0x140035869
cmp ax, 0x2d
je 0x140035774
cmp ax, 0x2b
jne 0x140035638
lea rax, [rbx + 2]
mov rbx, rax
movzx eax, word [rax]
cmp ax, 0x30
jne 0x14003566c
movzx eax, word [rbx + 2]
sub ax, 0x58
test r14w, ax
jne 0x14003566c
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
test eax, eax
je 0x14003566c
mov r12d, 1
add rbx, 4
mov r14d, r12d
xor r13d, r13d
jmp 0x140035676
xor r13d, r13d
mov r14d, r13d
lea r12d, [r13 + 1]
movzx edi, word [rbx]
mov esi, r13d
mov r15d, r13d
cmp edi, 0x20
je 0x140035740
nop dword [rax + rax]
cmp edi, 9
je 0x140035740
test edi, edi
je 0x14003576b
cmp edi, 0x2e
jne 0x1400356bc
test esi, esi
jne 0x140035774
test r14, r14
jne 0x140035774
mov esi, r12d
jmp 0x14003572f
test r14, r14
je 0x140035755
movzx ecx, di
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_iswxdigit]
test eax, eax
mov ecx, r13d
sete cl
test ecx, ecx
je 0x140035761
test edi, 0xffffff80
jne 0x1400356fa
mov edx, 2
mov ecx, edi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
test eax, eax
je 0x1400356fa
and edi, 0xffffffdf
cmp di, 0x45
jne 0x140035774
test esi, esi
je 0x140035774
test r15d, r15d
je 0x140035774
movzx eax, word [rbx + 2]
lea rcx, [rbx + 2]
sub ax, 0x2b
mov edx, 0xfffd
test dx, ax
cmove rbx, rcx
movzx eax, word [rbx + 2]
sub ax, 0x30
cmp ax, 9
ja 0x140035774
movzx edi, word [rbx + 2]
add rbx, 2
cmp edi, 0x20
jne 0x140035690
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14003574f
cmp ax, 9
jne 0x140035766
add rbx, 2
jmp 0x140035740
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1400356de
mov r15d, r12d
jmp 0x14003572f
test ax, ax
jne 0x140035774
test r15d, r15d
jne 0x140035869
mov eax, 3
jmp 0x140035872
cmp sil, 0x6a
jne 0x140035869
movzx eax, word [rdi]
mov rbx, rdi
test ax, ax
je 0x1400357da
cmp ax, 0x20
je 0x14003579f
cmp ax, 9
jne 0x1400357cd
movzx ecx, word [rbx + 2]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp eax, 0x69
jne 0x1400357cd
movzx ecx, word [rbx + 4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
cmp eax, 0x6e
jne 0x1400357cd
movzx eax, word [rbx + 6]
cmp ax, 0x20
je 0x1400357da
cmp ax, 9
je 0x1400357da
movzx eax, word [rbx + 2]
add rbx, 2
test ax, ax
jne 0x140035793
cmp word [rbx], 0
jne 0x1400357fb
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.This__For__is_missing_its__in_.
mov r8, r12
call fcn.14004dd50
jmp 0x140033e45
mov rax, rbx
mov edx, 1
sub rax, rdi
sar rax, 1
movsxd rcx, eax
test eax, eax
jle 0x140035827
movzx eax, word [0x140113a88]
cmp word [rdi + rcx*2], ax
jne 0x14003581f
inc edx
dec rcx
test rcx, rcx
jg 0x140035810
movzx eax, word [0x140113a88]
mov word [rbx + 2], ax
cmp edx, 1
jle 0x14003585e
cmp edx, 2
jle 0x140035857
mov rcx, qword [rbp + 0x10d70]
lea rdx, str.Syntax_error_or_too_many_variables_in__For__statement.
mov r8, r12
call fcn.14004dd50
jmp 0x140033e45
mov eax, SafeArrayAllocDescriptor
jmp 0x140035865
movzx eax, word [0x140113a88]
mov word [rbx + 4], ax
mov rax, qword [rsp + 0x68]
movsx eax, byte [rax + 9]
mov r11, qword [rsp + 0x50]
xor edi, edi
xor r13b, r13b
mov dword [rsp + 0x48], edi
xor r12b, r12b
mov ebx, edi
mov r10d, edi
mov r15d, edi
cmp word [r11], di
je 0x140035c9d
movsxd rcx, eax
mov esi, edi
dec eax
mov qword [rbp - 0x40], rcx
cdqe
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x80], rdi
mov qword [rsp + 0x78], rdi
nop
cmp rsi, rcx
jge 0x140035c98
cmp r10d, 2
jne 0x1400359a1
mov ecx, dword [rsp + 0x70]
sub ecx, 0x18
je 0x1400358df
sub ecx, 1
je 0x1400358df
sub ecx, 1
je 0x1400358df
cmp ecx, 1
jne 0x140035998
mov rcx, qword [rbp + 0x10d70]
lea rdx, [rbp + 0x310]
movsxd rax, ebx
xor r9d, r9d
lea r8, [r11 + rax*2]
call fcn.140036670
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140035993
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetElement
lea r14, [0x140000000]
nop word [rax + rax]
movsxd rcx, r13d
lea rdx, [rcx + rcx*8]
mov rdx, qword [r14 + rdx*2 + 0x112920]
lea rcx, [rbp + 0x310]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035951
inc r13d
cmp r13d, 0xe6
jl 0x140035920
xor r13b, r13b
jmp 0x14003595a
test r13b, r13b
jne 0x140035c71
mov r12d, 1
movsxd rax, r12d
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
mov rdx, qword [r14 + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140035993
inc r12d
cmp r12d, 0xe
jl 0x140035960
mov r11, qword [rsp + 0x50]
xor r12b, r12b
jmp 0x1400359a1
mov r11, qword [rsp + 0x50]
test r12b, r12b
jne 0x140035c76
mov rax, qword [rbp - 0x80]
movsxd r14, ebx
lea rdi, [r14 + r14]
lea r15, [rdi + r11]
mov qword [rbp + rsi*8 - 0x30], r15
lea rsi, [rbp + 0xd10]
add rsi, rdi
mov qword [rbp + rax*8 + 0x70], rsi
cmp rax, qword [rbp - 0x48]
je 0x140035c89
movzx eax, word [0x140113a84]
cmp word [r15], ax
jne 0x1400359fa
cmp word [rsi], 0
jne 0x1400359fa
movzx eax, word [r15 + 2]
cmp ax, 0x20
je 0x140035a77
cmp ax, 9
je 0x140035a77
mov rcx, qword [rsp + 0x68]
mov r10d, dword [rsp + 0x48]
add rcx, 0xb
movzx eax, byte [rcx]
lea edx, [r10 + 1]
test al, al
je 0x140035a29
movzx eax, al
cmp eax, edx
je 0x140035ac5
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140035a13
mov eax, dword [rsp + 0x40]
cmp al, 0x76
je 0x140035a77
cmp al, 0x2b
jne 0x140035afb
lea eax, [r10 - 2]
cmp eax, 1
ja 0x140035afb
mov rcx, qword [rbp - 0x28]
call fcn.140029c70
test eax, eax
je 0x140035af1
sub eax, 1
je 0x140035af1
sub eax, 2
je 0x140035af1
mov r11, qword [rsp + 0x50]
cmp eax, 2
je 0x140035af6
xor edi, edi
lea rax, [rbp + 0xd10]
xor r8b, r8b
lea r10, [0x140000000]
mov r9, r11
mov edx, edi
sub r9, rax
movzx eax, word [rsi + r9]
cmp ax, word [0x140113a88]
jne 0x140035ba5
test r8b, r8b
jne case.0x140035bbe.4
test edx, edx
jg case.0x140035bbe.4
cmp word [rsi], di
jne case.0x140035bbe.4
mov r10d, dword [rsp + 0x48]
jmp 0x140035b2d
mov eax, dword [rsp + 0x40]
cmp al, 0x88
jne 0x140035a77
cmp r10d, 1
jle 0x140035a77
lea rdx, str.default
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov r11, qword [rsp + 0x50]
test eax, eax
je 0x140035af6
jmp 0x140035a77
mov r11, qword [rsp + 0x50]
mov r10d, dword [rsp + 0x48]
movzx eax, word [r15]
test ax, ax
je 0x140035b2b
cmp ax, word [0x140113a88]
jne 0x140035b18
cmp word [rbp + rdi + 0xd10], 0
je 0x140035b2b
inc r14
inc ebx
lea rdi, [r14 + r14]
movzx eax, word [rdi + r11]
test ax, ax
jne 0x140035b04
xor edi, edi
mov rsi, qword [rbp - 0x80]
movsxd rax, ebx
cmp word [r11 + rax*2], 0
je 0x140035c4e
mov word [r11 + rax*2], di
mov r8, qword [rbp + rsi*8 - 0x30]
mov rdx, qword [rbp + rsi*8 + 0x70]
cmp word [r8], 0
je 0x140035c0e
mov rax, 0xffffffffffffffff
inc rax
cmp word [r8 + rax*2], 0
jne 0x140035b61
dec rax
mov r9, r8
sub r9, rdx
lea rcx, [rdx + rax*2]
nop dword [rax]
movzx edx, word [r9 + rcx]
cmp dx, 0x20
je 0x140035b91
cmp dx, 9
jne 0x140035c08
cmp word [rcx], 0
jne 0x140035c08
test rax, rax
je 0x140035bf6
dec rax
sub rcx, 2
jmp 0x140035b80
cmp eax, 0x7d
ja case.0x140035bbe.4
movzx eax, byte [r10 + rax + 0x365b8]
mov ecx, dword [r10 + rax*4 + 0x365a4]
add rcx, r10
jmp rcx
test r8b, r8b
sete r8b
inc ebx
add rsi, 2
jmp 0x140035a92
test r8b, r8b
jne case.0x140035bbe.4
inc edx
inc ebx
add rsi, 2
jmp 0x140035a92
test r8b, r8b
jne case.0x140035bbe.4
dec edx
inc ebx
add rsi, 2
jmp 0x140035a92
cmp dx, 0x20
je 0x140035c02
cmp dx, 9
jne 0x140035c0e
mov word [r8], di
jmp 0x140035c0e
mov word [r8 + rax*2 + 2], di
inc ebx
lea rcx, [rbp + 0xd10]
movsxd rax, ebx
mov rdx, r11
lea rcx, [rcx + rax*2]
lea rax, [rbp + 0xd10]
sub rdx, rax
nop dword [rax + rax]
movzx eax, word [rcx + rdx]
cmp ax, 0x20
je 0x140035c40
cmp ax, 9
jne 0x140035c4e
cmp word [rcx], 0
jne 0x140035c4e
inc ebx
add rcx, 2
jmp 0x140035c30
inc r10d
movsxd rax, ebx
inc rsi
mov dword [rsp + 0x48], r10d
mov qword [rbp - 0x80], rsi
cmp word [r11 + rax*2], 0
je 0x140035c98
mov rcx, qword [rbp - 0x40]
jmp 0x1400358b0
mov r11, qword [rsp + 0x50]
mov r10d, dword [rsp + 0x48]
mov r15, qword [rsp + 0x78]
movsxd rax, ebx
lea rbx, [r11 + rax*2]
jmp 0x140035ca2
mov r10d, dword [rsp + 0x48]
inc r10d
mov dword [rsp + 0x48], r10d
xor edi, edi
mov r15, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x60]
mov r9, qword [rsp + 0x68]
movsx edx, byte [r9 + 8]
mov ecx, edx
cmp r10d, edx
jge 0x140035d0b
mov r9, qword [r9]
lea r8, reloc.WSOCK32.dll_WSAStartup
cmp dl, 1
lea rax, [0x1400e0684]
lea rcx, [rbp + 0x510]
cmovg rax, r8
lea r8, str.__s__requires_at_least__d_parameter_s.
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
mov edx, 0x400
call fcn.1400bf0b0
mov r8, qword [rbp + 0x10d78]
lea rdx, [rbp + 0x510]
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dd50
jmp 0x140033e45
mov r14d, dword [rsp + 0x40]
mov eax, r10d
cmp r14b, 0x76
mov edx, edi
cmovne eax, ecx
movsxd r8, eax
test eax, eax
jle 0x140035d45
mov rcx, rdi
nop word [rax + rax]
mov rax, qword [rbp + rcx*8 - 0x30]
inc edx
cmp word [rax], 0
je 0x140035d74
inc rcx
cmp rcx, r8
jl 0x140035d30
mov ecx, dword [rsp + 0x44]
test cl, cl
je case.default.0x140035d72
movzx eax, cl
dec eax
cmp eax, 0xc
ja case.default.0x140035d72
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x36638]
add rcx, rdx
jmp rcx
mov r9, qword [r9]
lea r8, str.__s__requires_that_parameter__u_be_non_blank.
mov dword [rsp + 0x20], edx
lea rcx, [rbp + 0x510]
mov edx, 0x400
call fcn.1400bf0b0
jmp 0x140035cec
mov rcx, qword [rbp + 0x10d70]
lea rbx, [0x1400f9620]
movsxd rax, r10d
lea r9d, [r10 + 1]
lea r8, [rbp - 0x30]
mov dl, 0x8d
mov qword [rbp + rax*8 - 0x30], rbx
mov qword [rbp + rax*8 + 0x70], rdi
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.140036a40
jmp 0x140033e45
mov rdi, qword [rbp - 0x28]
lea rax, [rbp + 0x70]
mov r14, qword [rbp + 0x10d70]
lea rbx, [0x1400f9620]
xor esi, esi
mov qword [rbp - 0x28], rbx
lea r8, [rbp - 0x30]
mov qword [rbp + 0x78], rsi
mov dl, 0x8d
mov qword [rsp + 0x20], rax
mov rcx, r14
lea r9d, [rsi + 2]
call fcn.140036a40
test eax, eax
je 0x140033e43
mov rax, qword [rbp - 0x18]
lea r9d, [rsi + 5]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x30]
mov rax, qword [rbp + 0x88]
mov dl, 0x90
mov qword [rbp + 0x70], rax
mov rcx, r14
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rbx
mov qword [rbp + 0x90], rsi
call fcn.140036a40
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 1
call fcn.140036a40
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 4
call fcn.140036a40
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 5
call fcn.140036a40
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 6
call fcn.140036a40
jmp 0x140033e45
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
mov dl, 7
call fcn.140036a40
jmp 0x140033e45
mov r14b, reloc.OLEAUT32.dll_SafeArrayGetUBound
jmp 0x140035f50
mov r14b, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x140035f50
mov r14b, reloc.OLEAUT32.dll_SafeArrayLock
jmp 0x140035f50
mov r14b, reloc.OLEAUT32.dll_SafeArrayUnlock
jmp 0x140035f50
mov r14b, reloc.OLEAUT32.dll_SafeArrayAccessData
jmp 0x140035f50
mov r14b, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov ecx, dword [rsp + 0x44]
test r10d, r10d
je 0x140036137
test r13b, r13b
jne 0x140036137
test r12b, r12b
jne 0x140036137
lea eax, [r14 - 0x12]
cmp al, 0xe
ja 0x140036137
cmp r14b, 0x17
ja 0x140035f8d
sub cl, 6
cmp cl, 5
ja 0x140036230
movsxd rax, r10d
mov rdi, qword [rbp + rax*8 - 0x38]
mov rcx, rdi
sub rcx, r11
sar rcx, 1
movsxd r8, ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + r11]
test ax, ax
je 0x140036135
cmp ax, word [0x140113a88]
jne 0x140035fc7
cmp word [rbp + rdx + 0xd10], 0
je 0x140035fdf
inc r8
inc ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + r11]
test ax, ax
jne 0x140035fb3
jmp 0x140036135
movsxd rax, ecx
inc ecx
lea rsi, [r11 + rax*2]
movsxd rax, ecx
lea rdx, [r11 + rax*2]
nop
movzx eax, word [rdx]
cmp ax, 0x20
je 0x140035fff
cmp ax, 9
jne 0x140036007
inc ecx
add rdx, 2
jmp 0x140035ff0
movsxd rax, ecx
lea rdx, [rbp + 0x310]
mov rcx, qword [rbp + 0x10d70]
xor r9d, r9d
lea rbx, [r11 + rax*2]
mov r8, rbx
mov qword [rsp + 0x60], rbx
call fcn.140036670
mov r15, rax
test rax, rax
je 0x1400360b3
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetElement
nop word [rax + rax]
movsxd rax, r13d
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
lea rax, [0x140000000]
mov rdx, qword [rax + rdx*2 + 0x112920]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140036078
inc r13d
cmp r13d, 0xe6
jl 0x140036040
xor r13b, r13b
jmp 0x14003607d
test r13b, r13b
jne 0x1400360cb
mov ebx, 1
movsxd rax, ebx
lea rcx, [rbp + 0x310]
lea rdx, [rax + rax*8]
lea rax, [0x140000000]
mov rdx, qword [rax + rdx*2 + 0x112820]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x1400360be
inc ebx
cmp ebx, 0xe
jl 0x140036082
xor r12b, r12b
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov ebx, edi
jmp 0x140036137
movzx r12d, bl
test bl, bl
je 0x1400360b3
mov rbx, qword [rsp + 0x60]
xor eax, eax
mov word [rsi], ax
cmp word [rdi], ax
je 0x140036130
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rdi + rax*2], 0
jne 0x1400360e0
dec rax
lea rax, [rdi + rax*2]
movzx ecx, word [rax]
cmp cx, 0x20
je 0x140036100
cmp cx, 9
jne 0x14003610b
cmp rax, rdi
je 0x140036118
sub rax, 2
jmp 0x1400360f1
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov word [rax + 2], di
jmp 0x140036137
cmp cx, 0x20
je 0x140036124
cmp cx, 9
jne 0x140036130
mov r10d, dword [rsp + 0x48]
xor edi, edi
mov word [rax], di
jmp 0x140036137
mov r10d, dword [rsp + 0x48]
xor edi, edi
cmp r14b, 0x69
je 0x140036143
cmp r14b, 0x6b
jne 0x140036153
cmp r10d, 1
jne 0x140036153
mov rax, qword [rbp - 0x30]
cmp word [rax], 0
jne 0x140036172
cmp r14b, 0x6a
je 0x140036169
cmp r14b, 0x72
je 0x140036169
cmp r14b, 0x75
jne 0x140036230
test r10d, r10d
je 0x140036230
movsxd rax, r10d
mov rdx, qword [rbp + rax*8 - 0x38]
mov rax, 0xffffffffffffffff
cmp word [rdx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140036181
cmp word [rdx + rax*2 - 2], 0x7b
jne 0x140036230
mov word [rdx + rax*2 - 2], di
mov sil, 1
cmp word [rdx], 0
je 0x140036200
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400361b0
lea rcx, [rax - 1]
lea rcx, [rdx + rcx*2]
movzx r8d, word [rcx]
cmp r8w, 0x20
je 0x1400361d4
cmp r8w, 9
jne 0x1400361e2
cmp rcx, rdx
je 0x1400361e8
sub rcx, 2
dec rax
jmp 0x1400361c2
mov word [rcx + 2], di
jmp 0x1400361f6
cmp r8w, 0x20
je 0x1400361fd
cmp r8w, 9
je 0x1400361fd
test rax, rax
jne 0x140036237
jmp 0x140036200
mov word [rcx], di
cmp r14b, 0x69
je 0x14003622b
cmp r14b, 0x72
je 0x14003622b
mov r8, qword [rbp + 0x10d78]
lea rdx, str.Parameter_1_required
mov rcx, qword [rbp + 0x10d70]
call fcn.14004dd50
jmp 0x140033e45
mov r10d, edi
jmp 0x140036237
movzx esi, byte [rbp + 0x10d90]
mov rcx, qword [rbp + 0x10d70]
lea rax, [rbp + 0x70]
mov r9d, r10d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x30]
movzx edx, r14b
call fcn.140036a40
test eax, eax
je 0x140033e43
test sil, sil
mov rsi, qword [rbp + 0x10d70]
je 0x140036288
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov dl, 0x77
mov rcx, rsi
call fcn.140036a40
test eax, eax
je 0x140033e43
test rbx, rbx
je 0x140033f65
test r15, r15
jne 0x1400362c0
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov rdx, rbx
mov rcx, rsi
mov qword [rsp + 0x20], rdi
call fcn.140033440
jmp 0x140033e45
mov rcx, 0xffffffffffffffff
nop word [rax + rax]
inc rcx
cmp word [r15 + rcx*2], 0
jne 0x1400362d0
mov qword [rsp + 0x38], rcx
lea rdx, [rbp + 0xd10]
mov rax, r15
movzx r9d, r12b
sub rax, qword [rsp + 0x50]
movzx r8d, r13b
sar rax, 1
mov rcx, rsi
lea rax, [rdx + rax*2]
mov rdx, rbx
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x310]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rax
call fcn.140033440
jmp 0x140033e45