Function at 0x433f80
Capabilities:
Contain obfuscated stackstrings
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x10d20
call fcn.004cc6a0
mov edx, dword [esp + 0x10d30]
mov dword [esp + 8], ecx
push ebx
mov bl, byte [esp + 0x10d2c]
mov dword [esp + 4], ebx
mov byte [esp + 0xb], bl
push ebp
push esi
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
push edi
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test edx, edx
je 0x433fee
lea ecx, [esp + 0x120]
sub ecx, edx
movzx eax, word [edx]
lea edx, [edx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x433fc1
mov eax, dword [esp + 0x10d44]
test eax, eax
jne 0x434703
mov esi, dword [esp + 0x10d34]
xor cl, cl
jmp 0x43476c
cmp bl, 3
jne 0x434012
mov esi, dword [esp + 0x10d34]
xor eax, eax
mov word [esp + 0x120], ax
xor cl, cl
mov dword [esp + 0x10d44], eax
jmp 0x43476c
mov ebp, dword [esp + 0x10d34]
push 6
push str.Global
push ebp
call esi
add esp, 0xc
test eax, eax
mov eax, dword [0x4f8174]
jne 0x434045
cmp dword [eax + 0xb4], 0
mov ecx, 0xc1
mov edx, 0x41
cmovne ecx, edx
jmp 0x434085
cmp dword [eax + 0xb4], 0
je 0x4346e0
push 5
push str.Local
push ebp
call esi
add esp, 0xc
test eax, eax
jne 0x43406b
lea ecx, [eax + 0x42]
lea eax, [ecx - 0x38]
jmp 0x43408a
push 6
push str.Static
push ebp
call esi
add esp, 0xc
test eax, eax
jne 0x4346e0
mov ecx, 0x62
mov eax, 0xc
lea edi, [eax + ebp]
mov dword [esp + 0x24], ecx
movzx eax, word [edi]
test ax, ax
je 0x434669
cmp eax, 0x20
je 0x4340b0
cmp eax, 9
jne 0x4346da
nop dword [eax + eax]
cmp ax, 0x20
je 0x4340bc
cmp ax, 9
jne 0x4340c5
movzx eax, word [edi + 2]
add edi, 2
jmp 0x4340b0
test ax, ax
je 0x434669
movzx esi, word [edi + 2]
xor eax, eax
xor edx, edx
mov word [edi + 2], ax
mov ecx, edi
call fcn.004b5720
mov word [edi + 2], si
test eax, eax
je 0x4346da
mov ebx, dword [esp + 0x18]
mov edx, dword [0x4f8174]
cmp byte [ebx + 0x24], 0
je 0x43414a
mov ecx, dword [edx + 0xb4]
cmp byte [ecx + 0x50], 0
jne 0x43414a
mov edx, dword [esp + 0x24]
cmp edx, 0x62
je 0x43411d
cmp edx, 0x42
setne al
add al, 0x41
mov byte [ecx + 0x50], al
mov eax, dword [ebx + 0x614]
test eax, eax
je 0x43419e
mov al, byte [eax]
cmp al, 9
jb 0x434131
cmp al, 0x20
jbe 0x434143
cmp al, 0x21
je 0x434143
cmp al, 0x69
jb 0x43413d
cmp al, 0x6b
jbe 0x434143
sub al, 0x71
cmp al, 2
ja 0x43419e
mov byte [esp + 0x1f], 1
jmp 0x4341a3
mov eax, dword [edx + 0xb4]
test eax, eax
je 0x43411d
movzx eax, byte [eax + 0x50]
mov edx, dword [esp + 0x24]
cmp edx, eax
jne 0x43411d
cmp edx, 0x41
jne 0x43417f
push ecx
push str.Global_variables_must_not_be_declared_in_this_function.
mov ecx, ebx
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
cmp edx, 0x42
jne 0x43411d
push ecx
push str.Local_variables_must_not_be_declared_in_this_function.
mov ecx, ebx
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov byte [esp + 0x1f], 0
cmp word [edi], 0
mov byte [esp + 0x16], 0
je 0x434690
mov esi, edi
test edi, edi
je 0x4341f1
movzx eax, word [edi]
test ax, ax
je 0x4341f1
mov ebx, eax
mov ecx, str.___t:
mov edx, 0x2c
nop dword [eax]
cmp bx, dx
je 0x434208
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x4341d0
movzx eax, word [esi + 2]
add esi, 2
mov ebx, eax
test ax, ax
jne 0x4341c2
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4341f6
sub ecx, edx
sar ecx, 1
lea esi, [edi + ecx*2]
mov eax, dword [0x4f8174]
mov ebp, esi
sub ebp, edi
sar ebp, 1
mov ecx, dword [eax + 0xb4]
test ecx, ecx
je 0x434319
xor ebx, ebx
cmp dword [ecx + 0x10], ebx
jle 0x434273
xor ecx, ecx
mov dword [esp + 0x20], ecx
nop
mov eax, dword [eax + 0xb4]
push 0xffffffffffffffff
push ebp
mov eax, dword [eax + 0xc]
mov edx, dword [eax + ecx]
mov ecx, edi
mov edx, dword [edx + 0x18]
call fcn.004b06c0
add esp, 8
test eax, eax
je 0x4345d0
mov edx, dword [0x4f8174]
inc ebx
mov ecx, dword [esp + 0x20]
add ecx, 0x10
mov dword [esp + 0x20], ecx
mov eax, dword [edx + 0xb4]
cmp ebx, dword [eax + 0x10]
mov eax, edx
jl 0x434230
mov ecx, dword [esp + 0x18]
push 0
push 2
push 0
push ebp
push edi
call fcn.0043f980
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x20], eax
test eax, eax
je 0x4342b3
movzx ecx, byte [eax + 0x16]
xor ecx, ebx
test ecx, 0xffffffbf
jne 0x4345ec
cmp ebx, 0x62
je 0x4345ec
mov dword [esp + 0x20], 0
cmp ebx, 0x41
je 0x43431d
mov ecx, dword [0x4f8174]
xor ebx, ebx
mov eax, dword [ecx + 0xb4]
cmp dword [eax + 0x30], ebx
jle 0x43430d
nop dword [eax + eax]
mov eax, dword [ecx + 0xb4]
lea edx, [ebx*4]
mov dword [esp + 0x44], edx
push ebp
push 0xffffffffffffffff
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax + edx]
mov edx, edi
mov ecx, dword [ecx + 0x18]
call fcn.004b06c0
add esp, 8
test eax, eax
je 0x434357
mov ecx, dword [0x4f8174]
inc ebx
mov eax, dword [ecx + 0xb4]
cmp ebx, dword [eax + 0x30]
jl 0x4342d0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4345ec
mov ebx, dword [esp + 0x24]
cmp word [edi], 0
je 0x4345c1
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x17]
push eax
push ebx
lea eax, [esp + 0x34]
push eax
push ebp
push edi
call fcn.0043f980
mov ebx, eax
test ebx, ebx
jne 0x434392
mov ebx, dword [esp + 0x24]
cmp byte [esp + 0x17], al
je 0x43436e
mov ecx, ebx
and ecx, 0x20
or ecx, 2
jmp 0x434373
mov eax, dword [0x4f8174]
mov ecx, dword [esp + 0x44]
mov eax, dword [eax + 0xb4]
mov eax, dword [eax + 0x1c]
mov eax, dword [ecx + eax]
jmp 0x434311
mov ecx, 1
and ebx, 0xfffffffc
or ebx, ecx
mov ecx, dword [esp + 0x18]
push ebx
push dword [esp + 0x30]
push ebp
push edi
call fcn.0043ffc0
mov ebx, eax
test ebx, ebx
je 0x4345c1
mov al, byte [ebx + 0x17]
test al, al
jne 0x43439f
mov eax, dword [ebx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 1
jne 0x43464d
push 0xffffffffffffffff
push ebp
mov edx, str.ErrorLevel
mov ecx, edi
call fcn.004b06c0
add esp, 8
test eax, eax
je 0x43464d
mov edx, dword [esp + 0x24]
cmp edx, 0x41
jne 0x4343f6
mov edx, dword [0x4f8174]
mov eax, dword [edx + 0xb4]
mov ecx, dword [eax + 0x30]
cmp ecx, 0x7d0
jge 0x434615
mov eax, dword [eax + 0x1c]
mov dword [eax + ecx*4], ebx
mov eax, dword [edx + 0xb4]
inc dword [eax + 0x30]
jmp 0x434401
cmp edx, 0xc1
jne 0x434401
mov byte [ebx + 0x16], dl
movzx ecx, word [esi]
cmp ecx, 0x20
je 0x43440e
cmp ecx, 9
jne 0x434413
add esi, 2
jmp 0x434401
mov eax, ecx
cmp eax, 0x3d
ja case.0x434421.1
movzx eax, byte [eax + 0x43628c]
jmp dword [eax*4 + 0x436278]
lea edi, [esi + 2]
nop dword [eax + eax]
movzx eax, word [edi]
cmp eax, 0x20
je 0x434441
cmp eax, 9
jne 0x434595
add edi, 2
jmp 0x434430
mov edi, esi
mov eax, ecx
jmp 0x434595
cmp word [esi + 2], 0x3d
jne 0x434631
add esi, 4
xor bl, bl
push 0
push 0
mov edx, 0x2c
mov ecx, esi
call fcn.004b2910
add esp, 8
lea ebp, [esi + eax*2]
lea esi, [ebp - 2]
cmp esi, edi
jbe 0x434494
nop dword [eax]
movzx eax, word [esi]
cmp eax, 0x20
je 0x43448d
cmp eax, 9
jne 0x434494
sub esi, 2
cmp esi, edi
ja 0x434480
movzx eax, word [esi + 2]
mov dword [esp + 0x20], eax
xor eax, eax
mov word [esi + 2], ax
test bl, bl
je 0x4344ea
lea ecx, [esp + 0x8d28]
sub ecx, edi
nop
movzx eax, word [edi]
lea edi, [edi + 2]
mov word [edi + ecx - 2], ax
test ax, ax
jne 0x4344b0
push 0
push 0
push 0xffffffffffffffff
push 1
push 1
push 0x4e2d78
mov edx, 0x4e2d74
lea ecx, [esp + 0x8d40]
call fcn.004b0de0
add esp, 0x18
lea edi, [esp + 0x8d28]
mov ebx, dword [esp + 0x24]
cmp ebx, 0x62
jne 0x434507
mov eax, dword [esp + 0x18]
mov byte [eax + 0x25], 1
jmp 0x434533
add esi, 2
mov bl, 1
jmp 0x43445f
cmp byte [esp + 0x1f], 0
je 0x434533
cmp byte [esp + 0x16], 0
jne 0x434533
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0
push 0x77
call fcn.00436750
test eax, eax
je 0x4345c1
mov byte [esp + 0x16], 1
push 0
push 0
push 0
push 0
push 0
push 0
push edi
mov edi, dword [esp + 0x34]
mov ecx, edi
call fcn.00433f80
test eax, eax
je 0x4345c1
cmp ebx, 0x62
jne 0x43456d
mov ecx, dword [edi + 0x614]
mov byte [edi + 0x25], 0
movzx eax, byte [ecx]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 0x614]
mov byte [eax], 8
mov eax, dword [esp + 0x20]
mov word [esi + 2], ax
movzx eax, word [ebp]
cmp eax, 0x2c
jne 0x434593
lea edi, [ebp + 2]
movzx eax, word [edi]
cmp eax, 0x20
je 0x43458e
cmp eax, 9
jne 0x434595
add edi, 2
jmp 0x434581
mov edi, ebp
test ax, ax
jne 0x4341b2
cmp byte [esp + 0x16], al
je 0x434690
mov ecx, dword [esp + 0x18]
push 0
push 0
push 0
push 0x78
call fcn.00436750
test eax, eax
jne 0x434690
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
push ecx
mov ecx, dword [esp + 0x1c]
push str.Parameters_must_not_be_declared.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
test byte [eax + 0x16], 0x40
mov eax, str.Duplicate_declaration.
push ecx
mov ecx, str.Declaration_conflicts_with_existing_var.
cmove eax, ecx
mov ecx, dword [esp + 0x1c]
push eax
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
push ecx
mov ecx, dword [esp + 0x1c]
push str.Too_many_declarations.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
push ecx
mov ecx, dword [esp + 0x1c]
push str.This_line_does_not_contain_a_recognized_action.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
push ecx
mov ecx, dword [esp + 0x1c]
push str.Built_in_variables_must_not_be_declared.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ebx, dword [esp + 0x18]
cmp byte [ebx + 0x24], 0
je 0x4346c0
mov eax, dword [0x4f8174]
mov eax, dword [eax + 0xb4]
mov dl, byte [eax + 0x50]
test dl, dl
jne 0x4346a2
cmp ecx, 0x42
jne 0x43468d
or ecx, 4
mov byte [eax + 0x50], cl
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
cmp dl, 0x46
jne 0x4346c0
cmp ecx, 0x62
jne 0x4346c0
mov byte [eax + 0x50], 0x66
lea eax, [ecx - 0x61]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
push ecx
push str.This_line_does_not_contain_a_recognized_action.
mov ecx, ebx
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x120]
push 1
push ebp
push eax
call fcn.00436540
mov dword [esp + 0x10d44], eax
test eax, eax
je 0x4345c1
lea esi, [eax + 2]
mov ecx, esi
movzx eax, word [esi]
cmp eax, 0x20
je 0x434715
cmp eax, 9
jne 0x43471a
add esi, 2
jmp 0x434708
movzx eax, word [ecx]
cmp ax, word [0x4f93d0]
je 0x43476a
test ax, ax
je 0x43476a
cmp eax, 0x20
je 0x43476a
cmp eax, 9
je 0x43476a
cmp eax, 0x28
jne 0x434766
lea eax, [esp + 0x120]
push 0x4e7f94
push eax
call edi
add esp, 8
test eax, eax
je 0x43476a
lea eax, [esp + 0x120]
push str.WHILE
push eax
call edi
add esp, 8
test eax, eax
je 0x43476a
xor cl, cl
jmp 0x43476c
mov cl, 1
mov ax, word [esi]
cmp ax, word [0x4f93d0]
mov al, byte [esp + 0x10d3c]
mov byte [esp + 0x1f], cl
mov byte [esp + 0x16], 0
mov dword [esp + 0x28], eax
jne 0x4347b1
movzx eax, word [esi + 2]
add esi, 2
cmp eax, 0x20
je 0x43478c
cmp eax, 9
je 0x43478c
mov ebp, dword [esp + 0x10d34]
test bl, bl
jne 0x43536c
jmp 0x4350bf
test bl, bl
jne 0x43536c
test al, al
jne 0x4350af
test cl, cl
je 0x434d0f
lea eax, [esp + 0x120]
push 0x4e7f94
push eax
call edi
add esp, 8
test eax, eax
jne 0x434d0f
movzx ecx, word [esi]
cmp ecx, 0x28
je case.0x43492e.34
cmp cx, word [0x4f93cc]
jne 0x43480e
movzx eax, word [esi + 2]
cmp eax, 0x20
je case.0x43492e.34
cmp eax, 9
je case.0x43492e.34
mov dword [esp + 0x50], 0x90028
mov eax, 0x20
mov word [esp + 0x4c], ax
mov edi, esi
mov ax, word [0x4f93d0]
mov word [esp + 0x4e], ax
mov dword [esp + 0x54], 0x3e003c
mov dword [esp + 0x58], 0x3d003a
mov dword [esp + 0x5c], 0x2d002b
mov dword [esp + 0x60], 0x2f002a
mov dword [esp + 0x64], 0x7e0021
mov dword [esp + 0x68], 0x7c0026
mov dword [esp + 0x6c], 0x5b005e
mov dword [esp + 0x70], 0x3f002e
mov dword [esp + 0x74], 0x7b
test cx, cx
je 0x4348b1
mov ebp, ecx
nop dword [eax]
lea ecx, [esp + 0x4c]
mov edx, 0x20
nop dword [eax]
cmp bp, dx
je 0x434900
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x434890
movzx eax, word [edi + 2]
add edi, 2
mov ebp, eax
test ax, ax
jne 0x434880
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4348b6
sub ecx, edx
sar ecx, 1
lea edi, [esi + ecx*2]
mov ebp, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
push 3
push 0x4e52dc
push esi
call ebp
add esp, 0xc
test eax, eax
jne 0x434912
movzx eax, word [esi + 6]
push eax
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
add esp, 8
test eax, eax
je 0x434912
mov cl, 1
jmp 0x434914
movzx eax, word [edi]
cmp eax, 0x20
je 0x43490d
cmp eax, 9
jne 0x4348c8
add edi, 2
jmp 0x434900
xor cl, cl
movzx eax, word [edi]
add eax, 0xffffffdf
mov byte [esp + 0x17], cl
cmp eax, 0x4d
ja case.0x43492e.34
movzx eax, byte [eax + 0x4362f0]
jmp dword [eax*4 + 0x4362cc]
mov ax, word [0x4f93d0]
mov bl, 0x12
mov word [edi], ax
jmp 0x435361
movzx eax, word [edi + 2]
sub eax, 0x3d
je 0x434963
sub eax, 1
je 0x43498d
mov ax, word [0x4f93d0]
mov bl, 0x16
mov word [edi], ax
jmp 0x435361
mov bl, 0x17
jmp 0x43498f
cmp word [edi + 2], 0x3d
jne 0x434972
mov bl, 0x15
jmp 0x43498f
mov ax, word [0x4f93d0]
mov bl, 0x14
mov word [edi], ax
jmp 0x435361
cmp word [edi + 2], 0x3d
jne case.0x43492e.34
mov bl, 0x13
mov eax, 0x20
mov word [edi + 2], ax
mov ax, word [0x4f93d0]
mov word [edi], ax
jmp 0x435361
test cl, cl
jne case.0x43492e.34
push 7
push str.between
push edi
call ebp
add esp, 0xc
test eax, eax
jne case.0x43492e.34
mov eax, 0x200020
mov bl, 0xf
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov word [edi + 0xc], ax
mov ax, word [0x4f93d0]
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
mov word [edi], ax
jmp 0x434ae3
test cl, cl
jne case.0x43492e.34
push 8
push str.contains
push edi
call ebp
add esp, 0xc
test eax, eax
jne case.0x43492e.34
movaps xmm0, xmmword [0x4f20c0]
mov bl, 0xb
mov ax, word [0x4f93d0]
movups xmmword [edi], xmm0
mov word [edi], ax
jmp 0x435361
movzx ebx, word [edi + 2]
test ebx, 0xffffff80
jne 0x434a45
push 2
push ebx
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__isctype]
add esp, 8
test eax, eax
je 0x434a45
and ebx, 0xffffffdf
add ebx, 0xffffffb2
cmp ebx, 0x25
ja case.0x43492e.34
movzx eax, byte [ebx + 0x43634c]
jmp dword [eax*4 + 0x436340]
cmp byte [esp + 0x17], 0
jne case.0x43492e.34
lea ebp, [edi + 4]
nop dword [eax]
movzx eax, word [ebp]
cmp eax, 0x20
je 0x434a7e
cmp eax, 9
jne 0x434a83
add ebp, 2
jmp 0x434a70
mov eax, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
push 3
push 0x4e8ecc
push ebp
call eax
add esp, 0xc
test eax, eax
je 0x434a9d
mov bl, 0xd
jmp 0x434aab
mov eax, 0x200020
mov bl, 0xe
mov dword [ebp], eax
mov word [ebp + 4], ax
mov eax, 0x20
mov byte [esp + 0x10d38], bl
mov dword [esp + 0x10], ebx
mov word [edi + 2], ax
mov ax, word [0x4f93d0]
mov cl, bl
mov word [edi], ax
cmp bl, 0xf
je 0x434ae3
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
cmp cl, 0x10
jne 0x43479d
mov edx, 0x4e80b4
mov ecx, edi
call fcn.004b09f0
mov ebp, eax
test ebp, ebp
je 0x434b3a
movzx ecx, word [ebp - 2]
push ecx
push 0x4e5614
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
add esp, 8
test eax, eax
je 0x434b27
movzx eax, word [ebp + 6]
push eax
push 0x4e5614
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
add esp, 8
test eax, eax
jne 0x434c56
mov edx, 0x4e80b4
lea ecx, [ebp + 6]
call fcn.004b09f0
mov ebp, eax
test ebp, ebp
jne 0x434af5
push ecx
mov ecx, dword [esp + 0x1c]
push str.BETWEEN_requires_the_word_AND.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
cmp byte [esp + 0x17], 0
jne case.0x43492e.34
mov bl, 9
jmp 0x43498f
push 3
push 0x4e8ecc
push edi
call ebp
add esp, 0xc
test eax, eax
jne case.0x43492e.34
movzx eax, word [edi + 6]
lea ebp, [edi + 6]
cmp eax, 0x20
je 0x434b92
cmp eax, 9
jne case.0x43492e.34
mov eax, 0x200020
mov dword [edi], eax
mov word [edi + 4], ax
nop dword [eax]
movzx eax, word [ebp]
cmp eax, 0x20
je 0x434bae
cmp eax, 9
jne 0x434bb3
add ebp, 2
jmp 0x434ba0
mov eax, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
push 2
push 0x4e2db0
push ebp
call eax
add esp, 0xc
test eax, eax
jne 0x434be0
mov ax, word [0x4f93d0]
mov bl, 0xa
mov dword [ebp], 0x200020
mov word [edi], ax
jmp 0x435361
push 7
push str.between
push ebp
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x434c22
mov eax, 0x200020
mov bl, 0x10
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
mov word [ebp + 0xc], ax
mov ax, word [0x4f93d0]
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
mov word [edi], ax
jmp 0x434ae3
push 8
push str.contains
push ebp
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x434abf
movaps xmm0, xmmword [0x4f20c0]
mov bl, 0xc
mov ax, word [0x4f93d0]
movups xmmword [ebp], xmm0
mov word [edi], ax
jmp 0x435361
mov ax, word [0x4f93d0]
mov word [ebp], ax
mov dword [ebp + 2], 0x200020
jmp 0x43479d
mov ecx, esi
mov bl, 0x11
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x434c80
sub ecx, edx
sar ecx, 1
dec ecx
cmp word [esi + ecx*2], 0x7b
lea ecx, [esi + ecx*2]
jne 0x43536c
xor eax, eax
mov word [ecx], ax
sub ecx, esi
sar ecx, 1
cmp word [esi], ax
je 0x434d05
cmp ecx, 0xffffffff
jne 0x434cc5
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x434cb6
sub ecx, edx
sar ecx, 1
lea eax, [ecx - 1]
lea eax, [esi + eax*2]
nop dword [eax + eax]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x434cdd
cmp ecx, 9
jne 0x434ce6
cmp eax, esi
je 0x434cf6
sub eax, 2
jmp 0x434cd0
xor ecx, ecx
mov byte [esp + 0x16], 1
mov word [eax + 2], cx
jmp 0x43536c
cmp ecx, 0x20
je 0x434d00
cmp ecx, 9
jne 0x434d05
xor ecx, ecx
mov word [eax], cx
mov byte [esp + 0x16], 1
jmp 0x43536c
movzx eax, word [esi + 2]
lea ebp, [esi + 2]
mov ecx, eax
mov edx, eax
mov dword [esp + 0x20], ecx
movzx ecx, word [esi]
lea eax, [ecx - 0x26]
cmp eax, 0x56
ja case.0x434d34.39
movzx eax, byte [eax + 0x43639c]
jmp dword [eax*4 + 0x436374]
mov ax, word [0x4f93d0]
mov bl, 1
mov ebp, dword [esp + 0x10d34]
mov word [esi], ax
mov esi, ebp
mov byte [esp + 0x10d38], bl
mov dword [esp + 0x10], ebx
jmp 0x4347a4
movzx eax, byte [esp + 0x17]
cmp edx, 0x3d
mov ebx, 2
cmovne ebx, eax
jmp 0x434edc
cmp word [esp + 0x120], 0x2b
jne 0x434d90
cmp word [esp + 0x122], 0
jne 0x434d90
mov al, 1
mov bl, 4
jmp 0x434dc6
xor al, al
cmp edx, 0x3d
jne case.0x434d34.39
mov bl, 4
jmp 0x434dc6
cmp word [esp + 0x120], 0x2d
jne 0x434db9
cmp word [esp + 0x122], 0
jne 0x434db9
mov al, 1
jmp 0x434dc4
xor al, al
cmp edx, 0x3d
jne case.0x434d34.39
mov bl, 5
mov byte [esp + 0x10d38], bl
mov dword [esp + 0x10], ebx
test al, al
je 0x434eef
mov eax, dword [esp + 0x20]
lea edi, [esi + 2]
movzx eax, ax
movzx eax, ax
cmp eax, 0x20
je 0x434df0
cmp eax, 9
jne 0x434df9
movzx eax, word [edi + 2]
add edi, 2
jmp 0x434de3
mov ebp, edi
test ax, ax
je 0x434e35
mov esi, eax
mov ecx, str.__t____:_______._
mov edx, 0x20
nop dword [eax]
cmp si, dx
je 0x435094
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x434e10
movzx eax, word [ebp + 2]
add ebp, 2
mov esi, eax
test ax, ax
jne 0x434e02
mov esi, edi
lea ecx, [esi + 2]
nop word [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x434e40
mov ebp, dword [esp + 0x10d34]
sub esi, ecx
sar esi, 1
lea eax, [esi*2 + 2]
push eax
push edi
push ebp
call sub.VCRUNTIME140.dll_memmove
mov ax, word [0x4f93d0]
add esp, 0xc
mov word [ebp + esi*2], ax
mov dword [ebp + esi*2 + 2], 0x31
mov esi, ebp
jmp 0x4347a4
mov ecx, 6
jmp 0x434ed1
cmp edx, 0x3d
jne 0x434e9d
mov bl, 7
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
jmp 0x434f01
cmp edx, 0x2f
jne case.0x434d34.39
cmp word [esi + 4], 0x3d
mov ebp, dword [esp + 0x10d34]
jne 0x4350bf
mov bl, 3
mov esi, ebp
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
jmp 0x4347a4
mov ecx, 3
cmp edx, 0x3d
movzx eax, bl
cmovne ecx, eax
mov bl, cl
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
test bl, bl
je case.0x434d34.39
cmp bl, 3
je 0x4350a1
cmp bl, 1
je 0x434f8e
mov dx, word [0x4f93d0]
mov ecx, esi
push 0
push 2
call fcn.004b2910
add esp, 8
cmp word [esi + eax*2], 0
lea edi, [esi + eax*2]
je 0x434f8e
cmp bl, 4
je 0x434f2e
cmp bl, 5
jne 0x435094
movzx eax, word [edi + 2]
add edi, 2
cmp eax, 0x20
je 0x434f2e
cmp eax, 9
je 0x434f2e
test ax, ax
je 0x434f85
mov ebp, eax
nop word [eax + eax]
mov ecx, str.__t____:_______._
mov edx, 0x20
nop word [eax + eax]
cmp bp, dx
je 0x435094
movzx eax, word [ecx + 2]
add ecx, 2
mov edx, eax
test ax, ax
jne 0x434f60
movzx eax, word [edi + 2]
add edi, 2
mov ebp, eax
test ax, ax
jne 0x434f50
cmp bl, 3
je 0x4350a1
mov ax, word [0x4f93d0]
mov word [esi], ax
cmp bl, 1
je 0x4350a1
mov ebp, dword [esp + 0x10d34]
mov eax, 0x20
mov word [esi + 2], ax
mov esi, ebp
jmp 0x4347a4
cmp dx, cx
jne case.0x434d34.39
cmp word [esi + 4], 0x3d
mov ebp, dword [esp + 0x10d34]
jne 0x4350bf
mov bl, 3
mov esi, ebp
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
jmp 0x4347a4
cmp edx, 0x3d
je 0x435094
mov ecx, ebp
call fcn.0044f570
mov edi, eax
cmp word [edi], 0x28
je 0x435094
cmp edi, ebp
je case.0x434d34.39
nop word [eax + eax]
movzx eax, word [edi]
cmp eax, 0x20
je 0x43501d
cmp eax, 9
jne 0x435022
add edi, 2
jmp 0x435010
cmp eax, 0x5b
je 0x435094
test ax, ax
je 0x435094
cmp word [edi + 2], 0x3d
mov ebp, dword [sym.imp.VCRUNTIME140.dll_wcschr]
jne 0x435048
push eax
push str.:__.
call ebp
add esp, 8
test eax, eax
jne 0x435094
movzx eax, word [edi]
mov ecx, eax
cmp word [edi + 2], ax
jne 0x435078
push eax
push 0x4e8f28
call ebp
add esp, 8
test eax, eax
je 0x435069
cmp word [edi + 4], 0x3d
je 0x435094
movzx eax, word [edi]
cmp eax, 0x2b
je 0x435094
cmp eax, 0x2d
je 0x435094
mov ecx, eax
cmp cx, 0x2e
jne case.0x434d34.39
lea ebp, [edi + 2]
mov ecx, ebp
call fcn.0044f570
mov edi, eax
cmp word [edi], 0x28
jne 0x435002
mov bl, 3
mov byte [esp + 0x10d38], bl
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x10d34]
mov esi, ebp
jmp 0x4347a4
mov ebp, dword [esp + 0x10d34]
jmp 0x4350c3
mov ebp, dword [esp + 0x10d34]
mov eax, dword [esp + 0x28]
cmp byte [esp + 0x1f], 0
je 0x43515f
test al, al
jne 0x43515f
mov ebx, 0x18
mov edi, 0x4f8770
push dword [edi]
lea eax, [esp + 0x124]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x435112
add edi, 0xe
inc ebx
cmp edi, 0x4f92b4
jl 0x4350e0
xor bl, bl
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
jmp 0x435125
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
test bl, bl
jne 0x43536c
mov dword [esp + 0x28], 1
mov edi, 0x4f8566
push dword [edi]
lea eax, [esp + 0x124]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x435167
inc dword [esp + 0x28]
add edi, 0xe
cmp edi, 0x4f861c
jl 0x435132
mov byte [esp + 0x28], 0
jmp 0x435172
test bl, bl
jne 0x43536c
cmp byte [esp + 0x28], 0
jne 0x43536c
movzx eax, word [esi]
cmp eax, 0x7b
jne 0x43525a
mov ebx, 0x18
mov edi, 0x4f8770
mov dword [esp + 0x20], ebx
nop dword [eax]
push dword [edi]
lea eax, [esp + 0x124]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4351bd
inc ebx
add edi, 0xe
mov dword [esp + 0x20], ebx
cmp edi, 0x4f92b4
jl 0x435190
xor bl, bl
mov dword [esp + 0x20], ebx
movzx eax, bl
add eax, 0xffffffdf
cmp eax, 0x52
ja case.0x4351cf.34
movzx eax, byte [eax + 0x436400]
jmp dword [eax*4 + 0x4363f4]
cmp word [esi + 2], 0
mov byte [esp + 0x16], 1
jne case.0x4351cf.34
cmp byte [esp + 0x20], 0
mov dword [esp + 0x10], ebx
mov byte [esp + 0x10d38], bl
jne 0x43536c
movzx eax, word [esi]
mov ebx, dword [sym.imp.VCRUNTIME140.dll_wcschr]
push eax
push str.__t____:_______._
call ebx
add esp, 8
test eax, eax
je 0x4352f1
movzx eax, word [esi]
cmp eax, 0x2b
je 0x435225
cmp eax, 0x2d
jne 0x4352d0
cmp word [esi + 2], ax
jne 0x4352d0
cmp word [esi + 4], 0
jne 0x43535d
cmp eax, 0x2b
mov ax, word [0x4f93d0]
mov word [esi], ax
mov eax, 0x31
setne bl
mov word [esi + 2], ax
add bl, 4
jmp 0x43535f
cmp eax, 0x3a
jne case.0x4351cf.34
lea eax, [esp + 0x120]
push str.Default
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
jne case.0x4351cf.34
mov ebx, dword [esp + 0x18]
mov ecx, ebx
push eax
push eax
push eax
push 0x76
call fcn.00436750
test eax, eax
je 0x4345c1
movzx eax, word [esi + 2]
add esi, 2
cmp eax, 0x20
je 0x435295
cmp eax, 9
je 0x435295
test ax, ax
je 0x434690
push 0
push 0
push 0
push 0
push 0
push 0
push esi
mov ecx, ebx
call fcn.00433f80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
cmp eax, 0x3f
je 0x43535d
push 0x3f
push esi
call ebx
add esp, 8
test eax, eax
je 0x4352f1
push 0x3a
push eax
call ebx
add esp, 8
test eax, eax
jne 0x43535d
movzx eax, word [esi]
cmp eax, 0x28
je 0x43535d
cmp eax, 0x5b
je 0x43535d
cmp word [ebp], 0x28
je 0x43535d
push 3
push 0x4e8f64
push ebp
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x435328
movzx eax, word [ebp + 6]
cmp eax, 0x20
je 0x43535d
cmp eax, 9
je 0x43535d
push 0x4e80f4
push ebp
call dword [sym.imp.VCRUNTIME140.dll_wcsstr]
add esp, 4
mov edx, str.This_line_does_not_contain_a_recognized_action.
test eax, eax
mov ecx, str.Invalid_hotkey.
cmove ecx, edx
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov bl, 3
mov esi, ebp
mov byte [esp + 0x10d38], bl
mov dword [esp + 0x10], ebx
movzx eax, bl
add eax, 0xffffffdf
mov dword [esp + 0x44], 0
cmp eax, 0x55
ja case.0x43538a.34
movzx eax, byte [eax + 0x436464]
jmp dword [eax*4 + 0x436454]
cmp word [esi], 0x7b
jne case.0x43538a.34
movzx eax, word [esi]
mov ecx, eax
cmp eax, 0x7b
jne 0x4353bd
mov byte [esp + 0x16], 1
movzx eax, word [esi + 2]
add esi, 2
cmp eax, 0x20
je 0x4353aa
cmp eax, 9
je 0x4353aa
mov ecx, eax
test cx, cx
je case.0x43538a.34
mov dword [esp + 0x44], esi
sub esi, 2
xor eax, eax
mov word [esi], ax
jmp case.0x43538a.34
push ecx
push 0
mov edx, 0x3a
mov ecx, esi
call fcn.004b2a30
mov edi, eax
add esp, 8
cmp word [esi + edi*2], 0
jne 0x43540e
push ecx
mov ecx, dword [esp + 0x1c]
push str.Missing__:_
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
xor eax, eax
mov word [esi + edi*2], ax
cmp word [esi], ax
je 0x435462
mov ecx, esi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x435420
sub ecx, edx
sar ecx, 1
lea eax, [ecx - 1]
lea eax, [esi + eax*2]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x435442
cmp ecx, 9
jne 0x43544b
cmp eax, esi
je 0x435453
sub eax, 2
jmp 0x435435
xor ecx, ecx
mov word [eax + 2], cx
jmp 0x435462
cmp ecx, 0x20
je 0x43545d
cmp ecx, 9
jne 0x435462
xor ecx, ecx
mov word [eax], cx
lea ecx, [edi + 1]
lea ecx, [esi + ecx*2]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x435475
cmp eax, 9
jne 0x43547a
add ecx, 2
jmp 0x435468
xor edx, edx
test ax, ax
cmove ecx, edx
mov dword [esp + 0x44], ecx
test bl, bl
je 0x4354a3
movzx ecx, bl
lea eax, [ecx*8]
sub eax, ecx
lea ebp, [eax*2 + 0x4f8620]
mov dword [esp + 0x20], ebp
jmp 0x4354be
mov eax, dword [esp + 0x28]
movzx ecx, al
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax*2 + 0x4f8558]
mov dword [esp + 0x20], eax
push 0x8002
lea eax, [esp + 0xd24]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov edx, dword [esp + 0x10d54]
add esp, 0xc
test edx, edx
je 0x435518
mov eax, dword [esp + 0x10d4c]
mov ecx, esi
sub ecx, dword [esp + 0x10d44]
sar ecx, 1
sub eax, ecx
test eax, eax
jle 0x4355e0
add eax, eax
push eax
lea eax, [edx + ecx*2]
push eax
lea eax, [esp + 0xd28]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
jmp 0x4355e0
xor edi, edi
lea ebx, [edi + 7]
movzx eax, word [esi + edi*2]
mov dx, word [0x4f93c8]
mov ecx, eax
test ax, ax
je 0x435542
nop
cmp cx, dx
je 0x435542
movzx eax, word [esi + edi*2 + 2]
inc edi
mov ecx, eax
test ax, ax
jne 0x435530
cmp word [esi + edi*2], 0
lea ebp, [esi + edi*2]
je 0x4355dc
movzx eax, word [ebp + 2]
lea edx, [ebp + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x435566.99
movzx eax, byte [eax + 0x4364dc]
jmp dword [eax*4 + 0x4364bc]
mov word [edx], bx
jmp case.0x435566.99
mov eax, 8
jmp 0x43559a
mov eax, 0xc
jmp 0x43559a
mov eax, 0xa
jmp 0x43559a
mov eax, 0xd
jmp 0x43559a
mov eax, 9
jmp 0x43559a
mov eax, 0xb
mov word [edx], ax
mov ecx, edx
lea eax, [ecx + 2]
mov dword [esp + 0x2c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4355a6
sub ecx, dword [esp + 0x2c]
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push edx
push ebp
call sub.VCRUNTIME140.dll_memcpy
mov eax, 1
add esp, 0xc
mov word [esp + edi*2 + 0xd20], ax
inc edi
jmp 0x43551d
mov ebx, dword [esp + 0x10]
xor edx, edx
mov dword [esp + 0x40], edx
cmp bl, 0x22
jne 0x43584e
xor ebx, ebx
mov ebp, 1
mov dword [esp + 0x2c], ebp
cmp word [esi], dx
je 0x43570d
cmp ebp, 1
lea edi, [ebx + 1]
cmovle edi, ebx
nop dword [eax]
lea ecx, [edi + edi]
movzx eax, word [ecx + esi]
mov edx, eax
cmp eax, 0x20
je 0x435623
cmp eax, 9
jne 0x435626
inc edi
jmp 0x435610
cmp ax, word [0x4f93cc]
jne 0x43567c
cmp word [esp + ecx + 0xd20], 0
jne 0x43567c
movzx ebx, word [ecx + esi + 2]
cmp ebx, 0x20
je 0x435649
cmp ebx, 9
jne 0x43567c
cmp ebp, 3
jge 0x435784
mov dx, word [0x4f93d0]
lea eax, [esp + 0xd20]
push eax
lea eax, [edi + 2]
mov ecx, esi
push eax
call fcn.004b2910
add esp, 8
mov ebx, eax
xor edx, edx
mov dword [esp + 0x40], edx
jmp 0x4356fd
mov ebx, edi
test ax, ax
je 0x4356a6
cmp dx, word [0x4f93d0]
jne 0x435697
cmp word [esp + ecx + 0xd20], 0
je 0x4356a6
inc ebx
lea ecx, [ebx + ebx]
movzx eax, word [ecx + esi]
mov edx, eax
test ax, ax
jne 0x435683
cmp ebp, 1
jne 0x4356ee
cmp word [esi + ebx*2], 0
lea ebp, [esi + ebx*2]
je 0x43593c
xor eax, eax
lea ecx, [esi + edi*2]
push eax
push eax
push 1
xor edx, edx
mov word [ebp], ax
call fcn.004b0420
add esp, 0xc
test eax, eax
mov ax, word [0x4f93d0]
mov word [ebp], ax
je 0x4357a4
mov ebp, dword [esp + 0x2c]
xor edx, edx
mov dword [esp + 0x40], edx
jmp 0x4356fd
xor edx, edx
mov dword [esp + 0x40], edx
cmp ebp, 4
je 0x4357cc
inc ebp
cmp word [esi + ebx*2], 0
mov dword [esp + 0x2c], ebp
jne 0x435603
xor al, al
xor bl, bl
mov dword [esp + 0x34], eax
mov byte [esp + 0x3c], al
xor eax, eax
mov dword [esp + 0x30], ebx
mov byte [esp + 0x38], bl
mov dword [esp + 0x2c], eax
test edx, edx
jne 0x435737
mov eax, dword [esp + 0x20]
movsx edx, byte [eax + 5]
mov dword [esp + 0x40], edx
xor edi, edi
lea eax, [edx - 1]
xor ebp, ebp
mov dword [esp + 0x78], eax
mov dword [esp + 0x24], ebp
cmp word [esi], di
je 0x435be5
mov eax, dword [esp + 0x10]
movzx eax, al
mov dword [esp + 0x48], eax
nop word [eax + eax]
cmp ebp, edx
jge 0x435be5
cmp ebp, 2
jne 0x435a52
add eax, 0xffffffe8
cmp eax, 3
ja case.default.0x43577d
jmp dword [eax*4 + 0x4364f4]
xor cl, cl
mov dword [esp + 0x2c], 0
xor al, al
mov dword [esp + 0x34], ecx
mov byte [esp + 0x3c], cl
mov ebx, eax
mov dword [esp + 0x30], eax
mov byte [esp + 0x38], al
jmp 0x43572b
xor cl, cl
mov dword [esp + 0x2c], 0
xor al, al
mov dword [esp + 0x34], ecx
mov edx, 1
mov byte [esp + 0x3c], cl
mov dword [esp + 0x30], eax
mov ebx, eax
mov byte [esp + 0x38], al
jmp 0x435733
xor ecx, ecx
xor edx, edx
push ecx
mov dword [esp + 0x44], ecx
lea ecx, [esi + edi*2]
push 1
push 1
call fcn.004b0420
add esp, 0xc
test eax, eax
jne 0x435847
cmp word [esi + ebx*2], ax
jne 0x435839
mov ax, word [0x4f93cc]
cmp word [esi + edi*2], ax
jne 0x435839
cmp word [esp + edi*2 + 0xd20], 0
jne 0x435839
movzx eax, ax
push eax
lea eax, [edi + 1]
lea eax, [esi + eax*2]
push eax
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
add esp, 8
test eax, eax
je 0x435839
xor ecx, ecx
xor edx, edx
push ecx
mov dword [esp + 0x44], ecx
lea ecx, [eax + 2]
push 1
push 1
call fcn.004b0420
add esp, 0xc
test eax, eax
jne 0x435847
mov edx, 3
mov dword [esp + 0x40], edx
jmp 0x43570d
xor edx, edx
jmp 0x43570d
cmp bl, 0x6a
jne 0x43570d
movzx eax, word [esi]
mov edi, esi
test ax, ax
je 0x4358b6
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov ecx, eax
nop dword [eax]
cmp cx, 0x20
je 0x43587c
cmp cx, 9
jne 0x4358a8
movzx eax, word [edi + 2]
push eax
call ebx
add esp, 4
cmp eax, 0x69
jne 0x4358a8
movzx eax, word [edi + 4]
push eax
call ebx
add esp, 4
cmp eax, 0x6e
jne 0x4358a8
movzx eax, word [edi + 6]
cmp eax, 0x20
je 0x4358b6
cmp eax, 9
je 0x4358b6
movzx eax, word [edi + 2]
add edi, 2
mov ecx, eax
test ax, ax
jne 0x435870
cmp word [edi], 0
jne 0x4358d8
push ecx
mov ecx, dword [esp + 0x1c]
push str.This__For__is_missing_its__in_.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, edi
mov edx, 1
sub ecx, esi
sar ecx, 1
test ecx, ecx
jle 0x435903
nop word [eax + eax]
mov ax, word [esi + ecx*2]
cmp ax, word [0x4f93d0]
jne 0x4358fe
inc edx
dec ecx
test ecx, ecx
jg 0x4358f0
mov ax, word [0x4f93d0]
mov word [edi + 2], ax
cmp edx, 1
jle 0x43595d
cmp edx, 2
jle 0x435933
push ecx
mov ecx, dword [esp + 0x1c]
push str.Syntax_error_or_too_many_variables_in__For__statement.
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov eax, 0x20
mov word [edi + 4], ax
xor al, al
mov dword [esp + 0x2c], 0
xor bl, bl
mov dword [esp + 0x34], eax
mov byte [esp + 0x3c], al
mov dword [esp + 0x30], ebx
mov byte [esp + 0x38], bl
jmp 0x43572b
mov ax, word [0x4f93d0]
xor bl, bl
mov word [edi + 4], ax
xor al, al
mov dword [esp + 0x34], eax
mov byte [esp + 0x3c], al
xor eax, eax
mov dword [esp + 0x30], ebx
mov byte [esp + 0x38], bl
mov dword [esp + 0x2c], eax
jmp 0x43572b
mov ecx, dword [esp + 0x18]
lea eax, [esi + edi*2]
push 0
push eax
lea eax, [esp + 0x328]
push eax
call fcn.00436540
mov dword [esp + 0x2c], eax
test eax, eax
je case.default.0x43577d
mov ecx, 0x18
mov ebx, 0x4f8770
mov dword [esp + 0x34], ecx
nop word [eax + eax]
push dword [ebx]
lea eax, [esp + 0x324]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4359f2
inc dword [esp + 0x34]
add ebx, 0xe
cmp ebx, 0x4f92b4
jl 0x4359c0
xor cl, cl
mov dword [esp + 0x34], ecx
mov byte [esp + 0x3c], cl
jmp 0x435a02
mov eax, dword [esp + 0x34]
mov byte [esp + 0x3c], al
test al, al
jne 0x435bd3
mov eax, 1
mov ebx, 0x4f8566
mov dword [esp + 0x30], eax
push dword [ebx]
lea eax, [esp + 0x324]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x435a42
inc dword [esp + 0x30]
add ebx, 0xe
cmp ebx, 0x4f861c
jl 0x435a10
xor al, al
mov dword [esp + 0x30], eax
mov byte [esp + 0x38], al
jmp 0x435a52
mov ebx, dword [esp + 0x30]
mov byte [esp + 0x38], bl
test bl, bl
jne 0x435bd3
mov edx, dword [esp + 0x24]
lea ebx, [edi + edi]
lea ecx, [esp + 0xd20]
add ecx, ebx
lea ebp, [ebx + esi]
mov dword [esp + edx*4 + 0x80], ebp
mov dword [esp + edx*4 + 0xd0], ecx
cmp edx, dword [esp + 0x78]
je 0x435bdc
mov ax, word [ebp]
cmp ax, word [0x4f93cc]
jne 0x435a9e
cmp word [ecx], 0
jne 0x435a9e
movzx eax, word [ebp + 2]
cmp eax, 0x20
je 0x435ac0
cmp eax, 9
je 0x435ac0
mov cl, byte [esp + 0x10]
lea eax, [esp + 0x80]
push 0xffffffffffffffff
push edx
mov edx, dword [esp + 0x28]
push eax
lea edx, [edx + 7]
call fcn.004366b0
add esp, 0xc
test al, al
je 0x435ade
mov dx, word [0x4f93d0]
lea eax, [esp + 0xd20]
push eax
push edi
mov ecx, esi
call fcn.004b2910
add esp, 8
mov edi, eax
jmp 0x435b11
movzx eax, word [ebp]
mov ecx, eax
test ax, ax
je 0x435b11
nop dword [eax]
cmp ax, word [0x4f93d0]
jne 0x435b04
cmp word [esp + ebx + 0xd20], 0
je 0x435b11
inc edi
lea ebx, [edi + edi]
movzx eax, word [ebx + esi]
test ax, ax
jne 0x435af0
cmp word [esi + edi*2], 0
je 0x435bb2
mov ebp, dword [esp + 0x24]
xor eax, eax
mov word [esi + edi*2], ax
mov ebx, dword [esp + ebp*4 + 0xd0]
mov ebp, dword [esp + ebp*4 + 0x80]
mov dword [esp + 0x7c], ebx
cmp word [ebp], ax
je 0x435b97
mov ecx, ebp
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x435b43
sub ecx, edx
sar ecx, 1
lea edx, [ecx - 1]
lea eax, [ebx + edx*2]
mov ebx, ebp
sub ebx, dword [esp + 0x7c]
nop
movzx ecx, word [ebx + eax]
cmp ecx, 0x20
je 0x435b6e
cmp ecx, 9
jne 0x435b90
cmp word [eax], 0
jne 0x435b90
test edx, edx
je 0x435b7e
dec edx
sub eax, 2
jmp 0x435b60
cmp ecx, 0x20
je 0x435b88
cmp ecx, 9
jne 0x435b97
xor eax, eax
mov word [ebp], ax
jmp 0x435b97
xor eax, eax
mov word [ebp + edx*2 + 2], ax
movzx eax, word [esi + edi*2 + 2]
inc edi
cmp eax, 0x20
je 0x435ba7
cmp eax, 9
jne 0x435bb2
cmp word [esp + edi*2 + 0xd20], 0
je 0x435b97
mov ebp, dword [esp + 0x24]
inc ebp
cmp word [esi + edi*2], 0
mov dword [esp + 0x24], ebp
je 0x435be5
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
jmp 0x435760
lea eax, [esi + edi*2]
mov dword [esp + 0x44], eax
jmp 0x435be5
mov ebp, dword [esp + 0x24]
inc ebp
mov dword [esp + 0x24], ebp
mov edi, dword [esp + 0x20]
mov dl, byte [edi + 4]
movsx ecx, dl
cmp ebp, ecx
jge 0x435c3f
cmp dl, 1
mov eax, 0x4e9058
mov esi, 0x4cec30
cmovle eax, esi
push eax
push ecx
push dword [edi]
lea eax, [esp + 0x52c]
push str.__s__requires_at_least__d_parameter_s.
push 0x400
push eax
call fcn.004b0610
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x538]
add esp, 0x14
push eax
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ebx, dword [esp + 0x10]
xor eax, eax
cmp bl, 0x76
mov edx, ebp
cmovne edx, ecx
test edx, edx
jle 0x435c67
lea ecx, [eax + 1]
mov eax, dword [esp + eax*4 + 0x80]
cmp word [eax], 0
je 0x435c87
mov eax, ecx
cmp eax, edx
jl 0x435c51
mov edx, dword [esp + 0x28]
test dl, dl
je case.default.0x435c80
movzx eax, dl
dec eax
cmp eax, 0xc
ja case.default.0x435c80
jmp dword [eax*4 + 0x436504]
push ecx
push dword [edi]
lea eax, [esp + 0x528]
push str.__s__requires_that_parameter__u_be_non_blank.
push 0x400
push eax
call fcn.004b0610
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x534]
add esp, 0x10
push eax
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
lea eax, [ebp + 1]
mov dword [esp + ebp*4 + 0x84], 0x4e9110
push eax
lea eax, [esp + 0x88]
mov dword [esp + ebp*4 + 0xd8], 0
push eax
push 0x8d
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov esi, dword [esp + 0x84]
lea eax, [esp + 0xd0]
mov ebx, dword [esp + 0x18]
mov ecx, ebx
push eax
push 2
lea eax, [esp + 0x88]
mov dword [esp + 0x8c], 0x4e9110
push eax
push 0x8d
mov dword [esp + 0xe4], 0
call fcn.00436750
test eax, eax
je 0x4345c1
mov eax, dword [esp + 0x8c]
mov ecx, ebx
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0xd4]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0xd4], eax
lea eax, [esp + 0xd0]
push eax
push 5
lea eax, [esp + 0x88]
mov dword [esp + 0x90], esi
push eax
push 0x90
mov dword [esp + 0xa0], 0x4e9110
mov dword [esp + 0xf0], 0
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
push eax
push 1
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
push eax
push 4
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
push eax
push 5
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
push eax
push 6
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
push eax
push 7
call fcn.00436750
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov bl, 0x12
jmp 0x435edb
mov bl, 0x13
jmp 0x435edb
mov bl, 0x14
jmp 0x435edb
mov bl, 0x15
jmp 0x435edb
mov bl, 0x16
jmp 0x435edb
mov bl, 0x17
mov byte [esp + 0x10d38], bl
test ebp, ebp
je 0x436039
cmp byte [esp + 0x34], 0
jne 0x436039
cmp byte [esp + 0x30], 0
jne 0x436039
mov al, bl
sub al, 0x12
cmp al, 0xe
ja 0x436039
cmp bl, 0x17
ja 0x435f1d
sub dl, 6
cmp dl, 5
ja 0x4361ae
mov ebp, dword [esp + ebp*4 + 0x7c]
mov ecx, ebp
sub ecx, esi
sar ecx, 1
lea edx, [ecx + ecx]
movzx eax, word [edx + esi]
mov edi, eax
test ax, ax
je 0x436035
nop dword [eax]
cmp ax, word [0x4f93d0]
jne 0x435f54
cmp word [esp + edx + 0xd20], 0
je 0x435f66
inc ecx
lea edx, [ecx + ecx]
movzx eax, word [edx + esi]
test ax, ax
jne 0x435f40
jmp 0x436035
lea eax, [esi + ecx*2]
inc ecx
mov dword [esp + 0x48], eax
lea ecx, [esi + ecx*2]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x435f7e
cmp eax, 9
jne 0x435f83
add ecx, 2
jmp 0x435f71
push 0
push ecx
lea eax, [esp + 0x328]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x20]
push eax
call fcn.00436540
mov dword [esp + 0x2c], eax
test eax, eax
je 0x43602f
mov eax, 0x18
mov edi, 0x4f8770
mov dword [esp + 0x20], eax
push dword [edi]
lea eax, [esp + 0x324]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x435fe2
inc dword [esp + 0x20]
add edi, 0xe
cmp edi, 0x4f92b4
jl 0x435fb5
mov byte [esp + 0x3c], 0
jmp 0x435ff2
mov eax, dword [esp + 0x20]
mov byte [esp + 0x3c], al
test al, al
jne 0x4360ff
mov eax, 1
mov edi, 0x4f8566
mov dword [esp + 0x20], eax
push dword [edi]
lea eax, [esp + 0x324]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x4360ef
inc dword [esp + 0x20]
add edi, 0xe
cmp edi, 0x4f861c
jl 0x436000
mov byte [esp + 0x38], 0
xor eax, eax
mov dword [esp + 0x44], eax
mov ebp, dword [esp + 0x24]
cmp bl, 0x69
je 0x436043
cmp bl, 0x6b
jne 0x436055
cmp ebp, 1
jne 0x436055
mov eax, dword [esp + 0x80]
cmp word [eax], 0
jne 0x436070
cmp bl, 0x6a
je 0x436068
cmp bl, 0x72
je 0x436068
cmp bl, 0x75
jne 0x4361ae
test ebp, ebp
je 0x4361ae
mov edi, dword [esp + ebp*4 + 0x7c]
mov ecx, edi
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436080
sub ecx, edx
sar ecx, 1
cmp word [edi + ecx*2 - 2], 0x7b
jne 0x4361ae
xor eax, eax
mov byte [esp + 0x16], 1
mov word [edi + ecx*2 - 2], ax
cmp word [edi], ax
je 0x436186
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4360b5
sub ecx, edx
sar ecx, 1
lea eax, [ecx - 1]
lea eax, [edi + eax*2]
nop word [eax + eax]
movzx edx, word [eax]
cmp edx, 0x20
je 0x4360e1
cmp edx, 9
jne 0x436169
cmp eax, edi
je 0x436171
sub eax, 2
dec ecx
jmp 0x4360d0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x38], al
test al, al
je 0x43602f
mov eax, dword [esp + 0x48]
xor ecx, ecx
mov word [eax], cx
cmp word [ebp], cx
je 0x436035
mov ecx, ebp
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436117
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 - 2]
add eax, ebp
nop
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x43613d
cmp ecx, 9
jne 0x436146
cmp eax, ebp
je 0x436151
sub eax, 2
jmp 0x436130
xor ecx, ecx
mov word [eax + 2], cx
jmp 0x436035
cmp ecx, 0x20
je 0x43615f
cmp ecx, 9
jne 0x436035
xor ecx, ecx
mov word [eax], cx
jmp 0x436035
xor edx, edx
mov word [eax + 2], dx
jmp 0x43617b
cmp edx, 0x20
je 0x436181
cmp edx, 9
je 0x436181
test ecx, ecx
jne 0x4361ae
jmp 0x436186
xor ecx, ecx
mov word [eax], cx
cmp bl, 0x69
je 0x4361ac
cmp bl, 0x72
je 0x4361ac
push ecx
mov ecx, dword [esp + 0x1c]
push str.Parameter_1_required
call fcn.0044df00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
xor ebp, ebp
mov edi, dword [esp + 0x18]
lea eax, [esp + 0xd0]
push eax
push ebp
lea eax, [esp + 0x88]
mov ecx, edi
push eax
push dword [esp + 0x10d44]
call fcn.00436750
test eax, eax
je 0x4345c1
cmp byte [esp + 0x16], 0
je 0x4361f7
push 0
push 0
push 0
push 0x77
mov ecx, edi
call fcn.00436750
test eax, eax
je 0x4345c1
mov ebp, dword [esp + 0x44]
test ebp, ebp
je 0x434690
mov ebx, dword [esp + 0x2c]
test ebx, ebx
jne 0x436226
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebp
mov ecx, edi
call fcn.00433f80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x436230
sub ecx, edx
mov eax, ebx
sub eax, esi
sar ecx, 1
push ecx
sar eax, 1
lea ecx, [esp + 0xd24]
lea eax, [ecx + eax*2]
mov ecx, edi
push eax
push ebx
lea eax, [esp + 0x32c]
push eax
push dword [esp + 0x48]
push dword [esp + 0x50]
push ebp
call fcn.00433f80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10d20
ret 0x1c