Function at 0x140047ce0
Capabilities:
Parse credit card information

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x38]
sub rsp, 0x138
mov rax, qword [0x1400a0f20]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rax, qword [r8]
mov r14, rcx
movsxd rdi, dword [rbp + 0xa0]
mov r15, rdx
mov r13d, dword [rbp + 0xb0]
mov r12, r9
mov qword [rbp - 0x60], r8
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov dword [rbp - 0x78], edi
mov r9, rdx
mov qword [rbp - 0x68], rdx
mov qword [r8], rdx
cmp cl, 0x52
jne case.default.0x140048012
movsx eax, byte [rdx]
inc rdx
add eax, 0xffffffbf
mov qword [r8], rdx
cmp eax, 0x36
ja case.default.0x140048012
lea r10, [0x140000000]
cdqe
movzx eax, byte [r10 + rax + 0x4a59c]
mov ecx, dword [r10 + rax*4 + 0x4a574]
add rcx, r10
jmp rcx
xor ebx, ebx
mov dword [rbp - 0x78], 0x3f
lea rdx, str.Tfp64
mov dword [rbp - 0x7c], 0x20
mov rcx, r9
mov esi, ebx
lea r8d, [rbx + 5]
call sym.NetMonitor.exe_nocrt_strncmp
mov r8d, eax
test eax, eax
je 0x140047e0c
mov ecx, dword [rbp - 0x78]
cmp ecx, esi
je case.default.0x140048012
mov edx, dword [rbp - 0x7c]
test r8d, r8d
lea eax, [rdx - 1]
cmovns eax, ecx
mov ecx, eax
mov dword [rbp - 0x78], eax
lea eax, [rdx + 1]
cmovns esi, eax
cmp ecx, esi
jl case.default.0x140048012
mov eax, ecx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
movsxd rcx, eax
mov dword [rbp - 0x7c], eax
lea rax, [0x140000000]
lea rdx, [rcx + rcx*2]
mov rcx, qword [rbp - 0x68]
movzx r8d, byte [rax + rdx*8 + 0x75150]
lea rdx, [rdx*8 + 0x75151]
add rdx, rax
call sym.NetMonitor.exe_nocrt_strncmp
mov r8d, eax
test eax, eax
jne 0x140047da2
movsxd rax, dword [rbp - 0x7c]
lea r8, [0x140000000]
mov esi, 0x10
lea rcx, [rax + rax*2]
lea rdx, [rcx*8]
mov rcx, qword [rbp - 0x60]
movzx eax, byte [rdx + r8 + 0x75150]
dec rax
mov qword [rbp - 0x68], rdx
add qword [rcx], rax
lea rcx, [rbp - 0x40]
movzx eax, word [rdx + r8 + 0x75164]
mov r8d, esi
xor edx, edx
or r13d, eax
call sym.NetMonitor.exe_nocrt_memset
mov rdx, qword [rbp - 0x68]
lea r9, [0x140000000]
movzx ecx, byte [rdx + r9 + 0x7515b]
test sil, r13b
je 0x140047f06
sub ecx, 1
je 0x140047ee8
sub ecx, 1
je 0x140047eca
sub ecx, 2
je 0x140047eac
cmp ecx, 4
jne case.0x140047f1f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xe
mov r12, qword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x140047fb3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xd
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x140047fb3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xc
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x140047fb3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xb
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x140047fb3
dec ecx
cmp ecx, 9
ja case.0x140047f1f.3
movsxd rax, ecx
mov ecx, dword [r9 + rax*4 + 0x4a5d4]
add rcx, r9
jmp rcx
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xb
movzx eax, byte [rax - 8]
mov byte [rbp - 0x40], al
jmp case.0x140047f1f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xc
movzx eax, word [rax - 8]
mov word [rbp - 0x40], ax
jmp case.0x140047f1f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xd
mov eax, dword [rax - 8]
mov dword [rbp - 0x40], eax
jmp case.0x140047f1f.3
mov rcx, qword [r12]
add rcx, 8
mov qword [r12], rcx
mov rcx, qword [rcx - 8]
mov eax, dword [rcx]
mov dword [rbp - 0x40], eax
movzx eax, word [rcx + 4]
mov word [rbp - 0x3c], ax
jmp case.0x140047f1f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rax, qword [rax - 8]
movsd xmm0, qword [rax]
movsd qword [rbp - 0x40], xmm0
movzx eax, word [rax + 8]
mov word [rbp - 0x38], ax
mov r12, qword [rbp - 0x40]
bt r13d, 0xa
jae 0x140047ff5
mov eax, dword [rbp + 0xa8]
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x28], r13d
mov r9d, edi
mov r8, r12
mov dword [rsp + 0x20], eax
mov edx, 0x50
call fcn.14004c640
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
jmp 0x140048902
movsxd r8, dword [rdx + r9 + 0x75160]
cmp r8d, 0xc
ja case.default.0x140048012
mov ecx, dword [r9 + r8*4 + 0x4a5fc]
add rcx, r9
jmp rcx
movzx r8d, byte [rdx + r9 + 0x7515c]
lea rcx, [rbp - 0x30]
mov eax, dword [rbp + 0xa8]
mov r9d, edi
mov rdx, r12
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], eax
call fcn.140039690
movsxd r8, eax
jmp 0x140047fe0
test edi, edi
jns case.0x140048012.0
movzx eax, byte [rdx + r9 + 0x7515b]
mov ecx, r13d
shr ecx, 2
and ecx, 2
or r13d, 4
lea edi, [rcx + rax*2]
jmp case.0x140048012.0
cmp r12, 1
jne 0x14004808c
mov r8d, r13d
lea rdx, str.true
and r8d, 8
mov rcx, r15
or r8, 0x20
mov rax, r14
shr r8, 3
call qword [case.0x14004be35.0]
jmp 0x140048902
test r12, r12
jne 0x1400480ae
lea r8d, [r12 + 5]
mov rcx, r15
lea rdx, str.false
mov rax, r14
call qword [case.0x14004be35.0]
jmp 0x140048902
mov qword [rsp + 0x28], r12
lea rax, str.__lld_
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
mov rcx, r14
call fcn.14004c460
jmp 0x140048902
movzx edx, word [rbp - 0x3e]
lea rcx, [rbp - 0x30]
and r13d, 0xffff146f
mov r9d, 4
bts r13d, 0xc
mov r8d, esi
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
movzx edx, word [rbp - 0x40]
lea rcx, [rbp - 0x2b]
mov r9d, 4
mov dword [rsp + 0x28], r13d
mov r8d, esi
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
mov r8d, 9
jmp 0x140047fe0
movzx edx, word [rbp - 0x3c]
lea rcx, [rbp - 0x30]
and r13d, 0xffff046f
mov r9d, 4
mov eax, r13d
mov r8d, esi
bts eax, 0xc
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
mov edx, dword [rbp - 0x40]
lea rcx, [rbp - 0x2b]
bts r13d, 0xd
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x28], r13d
mov r9d, 8
mov r8d, esi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
mov r8d, 0xd
jmp 0x140047fe0
movzx edx, word [rbp - 0x38]
lea rcx, [rbp - 0x30]
and r13d, 0xffff046f
mov r9d, 4
mov eax, r13d
mov r8d, esi
bts eax, 0xc
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x2b]
bts r13d, 0xe
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x28], r13d
mov r9d, esi
mov r8d, esi
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
mov r8d, 0x15
jmp 0x140047fe0
movzx eax, byte [rbp - 0x3d]
movzx ecx, byte [rbp - 0x3e]
movzx edx, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
mov dword [rsp + 0x40], eax
xor r9d, r9d
mov dword [rsp + 0x38], ecx
lea rax, str._u._u._u._u
mov dword [rsp + 0x30], edx
mov rcx, r14
mov dword [rsp + 0x28], r8d
mov rdx, r15
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.14004c460
jmp 0x140048902
cmp r12, 0x1000
jb 0x14004826f
movabs rax, 0xffff800000000000
test rax, r12
jne 0x14004826f
mov r8, r12
mov rdx, r15
mov rcx, r14
call fcn.140047800
jmp 0x140048902
lea rax, str._BadIPv6
mov dword [rsp + 0x40], 8
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov r9d, edi
mov dword [rsp + 0x20], r13d
mov r8, r15
mov rdx, r14
xor ecx, ecx
call fcn.14003a710
jmp 0x140048902
cmp r12, 0x1000
jb 0x140048323
movabs rax, 0xffff800000000000
test rax, r12
jne 0x140048323
movzx eax, byte [r12 + 5]
movzx ecx, byte [r12 + 4]
movzx edx, byte [r12 + 3]
movzx r8d, byte [r12 + 2]
movzx r9d, byte [r12 + 1]
movzx r10d, byte [r12]
mov dword [rsp + 0x50], eax
lea rax, str._02x:_02x:_02x:_02x:_02x:_02x
mov dword [rsp + 0x48], ecx
mov rcx, r14
mov dword [rsp + 0x40], edx
mov rdx, r15
mov dword [rsp + 0x38], r8d
xor r8d, r8d
mov dword [rsp + 0x30], r9d
xor r9d, r9d
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], rax
call fcn.14004c460
jmp 0x140048902
mov dword [rsp + 0x40], 7
lea rax, str._BadMac
jmp 0x14004827e
cmp r12, 0x1000
jb 0x140048429
movabs rax, 0xffff800000000000
test rax, r12
jne 0x140048429
mov edx, dword [r12 + 0x10]
mov ecx, edx
sub ecx, 1
je 0x1400483c7
sub ecx, 1
je 0x140048381
cmp ecx, 2
je 0x1400482c3
mov dword [rsp + 0x28], edx
lea rax, str.unsupported_netaddr_type_u
jmp 0x1400480ba
mov eax, dword [r12 + 0x14]
mov edx, 0xffffffff
cmp eax, edx
mov rcx, r14
mov rdx, r15
jne 0x1400483a2
mov r8, r12
call fcn.140047800
jmp 0x140048902
mov dword [rsp + 0x30], eax
xor r9d, r9d
lea rax, str.__RTnaipv6_:_u
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.14004c460
jmp 0x140048902
mov r9d, dword [r12 + 0x14]
mov edx, 0xffffffff
movzx eax, byte [r12 + 3]
cmp r9d, edx
movzx edx, byte [r12 + 1]
movzx ecx, byte [r12 + 2]
movzx r8d, byte [r12]
je 0x140048211
mov dword [rsp + 0x48], r9d
xor r9d, r9d
mov dword [rsp + 0x40], eax
lea rax, str._u._u._u._u:_u
mov dword [rsp + 0x38], ecx
mov rcx, r14
mov dword [rsp + 0x30], edx
mov rdx, r15
mov dword [rsp + 0x28], r8d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.14004c460
jmp 0x140048902
mov dword [rsp + 0x40], 0xb
lea rax, str._BadNetAddr
jmp 0x14004827e
cmp r12, 0x1000
jb 0x1400484ef
movabs rax, 0xffff800000000000
test rax, r12
jne 0x1400484ef
movzx eax, byte [r12 + 0xf]
movzx ecx, byte [r12 + 0xe]
movzx edx, byte [r12 + 0xd]
movzx r8d, byte [r12 + 0xc]
movzx r9d, byte [r12 + 0xb]
movzx r10d, byte [r12 + 0xa]
movzx r11d, byte [r12 + 9]
movzx ebx, byte [r12 + 8]
movzx edi, word [r12 + 6]
movzx esi, word [r12 + 4]
mov dword [rsp + 0x78], eax
mov eax, dword [r12]
mov dword [rsp + 0x70], ecx
mov rcx, r14
mov dword [rsp + 0x68], edx
mov rdx, r15
mov dword [rsp + 0x60], r8d
xor r8d, r8d
mov dword [rsp + 0x58], r9d
xor r9d, r9d
mov dword [rsp + 0x50], r10d
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], eax
lea rax, str._08x__04x__04x__02x_02x__02x_02x_02x_02x_02x_02x
mov qword [rsp + 0x20], rax
call fcn.14004c460
jmp 0x140048902
lea rax, str._BadUuid
jmp 0x140048276
cmp r12, 0x1000
jb case.default.0x140048012
movabs rax, 0xffff800000000000
test rax, r12
jne case.default.0x140048012
test r12, r12
je case.default.0x140048012
mov eax, dword [r12]
and eax, 0xffff0004
cmp eax, 0xbabe0004
jne case.default.0x140048012
cmp r8d, 0xb
jne 0x140048563
mov ecx, dword [r12 + 4]
lea r9, [rbp - 0x30]
mov esi, 0x50
mov r8, r15
mov rdx, r14
mov qword [rsp + 0x20], rsi
call fcn.14004bfe0
mov r12, qword [rbp - 0x40]
mov rbx, rax
cmp qword [r12 + 8], 0
jbe 0x1400485b7
mov rcx, r15
mov rax, r14
test r13b, 8
je 0x140048586
mov r8d, 3
lea rdx, [0x1400747c8]
jmp 0x140048593
mov r8d, 2
lea rdx, [0x1400759e4]
call qword [case.0x14004be35.0]
mov rdx, qword [rbp - 0x40]
mov rbx, rax
mov r8, qword [rdx + 8]
mov rdx, qword [rdx + 0x10]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rbx, rax
mov rax, rbx
jmp 0x140048902
movzx ecx, byte [rdx]
lea rax, [rdx + 1]
mov qword [r8], rax
cmp cl, 0x6e
je 0x140048725
cmp cl, 0x73
jne case.default.0x140048012
cmp byte [rbp + 0xb8], 0x6c
jne case.default.0x140048012
mov rax, qword [r12]
xor ebx, ebx
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x68], rcx
cmp rcx, 0x1000
jb 0x140048638
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x140048638
movsxd rdx, dword [rbp + 0xa8]
mov esi, ebx
test rdx, rdx
jle 0x140048648
mov eax, ebx
cmp word [rcx + rax*2], bx
je 0x140048648
inc esi
inc rax
cmp rax, rdx
jl 0x140048626
jmp 0x140048648
lea rax, [0x1400a1f48]
mov esi, 6
mov qword [rbp - 0x68], rax
mov r12, rbx
test r13b, 2
jne 0x140048690
dec edi
cmp edi, esi
jl 0x140048690
mov eax, edi
lea rbx, [0x140064834]
sub eax, esi
inc eax
mov r13d, eax
sub edi, eax
nop dword [rax]
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add r12, rax
sub r13, 1
jne 0x140048670
xor ebx, ebx
sub edi, esi
test esi, esi
jle 0x1400486f3
nop word [rax + rax]
lea rdx, [rbp - 0x7c]
mov dword [rbp - 0x7c], ebx
lea rcx, [rbp - 0x68]
dec esi
call fcn.1400358e0
mov edx, dword [rbp - 0x7c]
cmp edx, 0x80
jae 0x1400486c6
mov byte [rbp - 0x30], dl
lea rax, [rbp - 0x2f]
jmp 0x1400486cf
lea rcx, [rbp - 0x30]
call fcn.1400341a0
mov byte [rax], 0
lea rcx, [rbp - 0x30]
sub rax, rcx
lea rdx, [rbp - 0x30]
mov r8, rax
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add r12, rax
test esi, esi
jg 0x1400486a0
sub edi, 1
js 0x14004871d
lea rbx, [0x140064834]
nop
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add r12, rax
sub edi, 1
jns 0x140048700
mov rax, r12
jmp 0x140048902
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov r8, rcx
cmp rcx, 0x1000
jb 0x1400487ae
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x1400487ae
movzx eax, byte [rcx]
test al, al
je 0x140048797
movabs rdx, 0x200000000801
sub al, 0x2f
cmp al, 0x2d
ja 0x14004878b
bt rdx, rax
jae 0x14004878b
nop dword [rax]
movzx eax, byte [r8 + 1]
inc r8
test al, al
je 0x140048797
cmp al, 0x5c
je 0x140048770
cmp al, 0x2f
je 0x140048770
cmp al, 0x3a
je 0x140048770
mov rcx, r8
movzx eax, byte [r8 + 1]
inc r8
test al, al
jne 0x140048761
sub r8, rcx
mov rdx, rcx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
jmp 0x140048902
mov dword [rsp + 0x40], 0xc
lea rax, str._BadBaseName
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
jmp 0x140048291
movzx ecx, byte [rdx]
lea rax, [rdx + 1]
mov qword [r8], rax
cmp cl, 0x6e
jne case.default.0x140048012
mov rax, qword [r12]
xor ebx, ebx
add rax, 8
mov qword [r12], rax
mov rdx, qword [rax - 8]
mov r8, rdx
cmp rdx, 0x1000
jb 0x14004889c
movabs rax, 0xffff800000000000
test rax, rdx
jne 0x14004889c
movzx eax, byte [rdx]
test al, al
je 0x14004888b
movabs r9, 0x10100000200
nop
cmp al, 0x28
je 0x14004888b
cmp al, 0x20
je 0x14004884f
cmp al, 9
je 0x14004884f
inc r8
cmp al, 0x3c
jne 0x140048847
inc ebx
jmp 0x140048883
cmp al, 0x3e
jne 0x140048883
dec ebx
jmp 0x140048883
movzx ecx, byte [r8 + 1]
inc r8
test cl, cl
je 0x140048883
nop dword [rax + rax]
cmp cl, 0x28
ja 0x140048879
bt r9, rcx
jae 0x140048879
movzx ecx, byte [r8 + 1]
inc r8
test cl, cl
jne 0x140048860
jmp 0x140048883
test cl, cl
je 0x140048883
test ebx, ebx
cmove rdx, r8
movzx eax, byte [r8]
test al, al
jne 0x140048830
sub r8, rdx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
jmp 0x140048902
mov dword [rsp + 0x40], 8
lea rax, str._BadFnNm
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
jmp 0x140048291
movzx r11d, byte [rdx]
lea rax, [rdx + 1]
mov byte [rbp - 0x80], r11b
mov qword [r8], rax
cmp r11b, 0x58
je 0x140048cd4
cmp r11b, 0x63
je 0x1400489a0
cmp r11b, 0x72
je case.0x140047d74.73
cmp r11b, 0x75
je 0x1400489a0
cmp r11b, 0x78
je 0x140048cd4
xor eax, eax
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140001250
add rsp, 0x138
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov ecx, dword [rax - 8]
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x61
je 0x140048982
cmp dl, 0x63
je 0x140048967
cmp dl, 0x66
jne case.default.0x140048012
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004c2a0
jmp 0x140048902
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004c100
jmp 0x140048902
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004c2b0
jmp 0x140048902
movzx ecx, byte [rax]
xor ebx, ebx
inc rax
mov qword [rbp - 0x60], rbx
mov qword [r8], rax
mov byte [rbp - 0x74], cl
lea eax, [rcx - 0x42]
cmp al, 0x27
ja case.default.0x140048012
movabs rdx, 0x8100000001
bt rdx, rax
jae case.default.0x140048012
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov r8, qword [rax - 8]
bt r13d, 8
jb 0x1400489ee
lea r12d, [rbx + 1]
jmp 0x140048a09
mov eax, dword [rbp + 0xa8]
cmp eax, 3
jle 0x140048a01
mov r12d, 3
jmp 0x140048a09
test eax, eax
cmovs eax, ebx
mov r12d, eax
lea eax, [rcx - 0x42]
test al, 0xdf
je 0x140048b81
mov r9d, ebx
lea rax, [0x140075850]
nop
mov r10, qword [rax - 8]
cmp r8, r10
jb 0x140048a3b
test r12d, r12d
jg 0x140048b15
cmp r8, qword [rax]
jae 0x140048b15
inc r9d
add rax, 0x18
cmp r9d, 6
jb 0x140048a20
mov r9d, 0xa
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x20], ebx
lea edx, [r9 + 0x46]
call fcn.14004c560
mov qword [rbp - 0x70], rax
mov rcx, rax
test r13b, 0x40
je 0x140048a80
mov byte [rbp + rcx - 0x30], 0x20
inc rcx
mov qword [rbp - 0x70], rcx
cmp byte [rbp - 0x80], 0x63
jne 0x140048a92
mov byte [rbp + rcx - 0x30], 0x42
inc rcx
mov qword [rbp - 0x70], rcx
cmp rcx, 0x50
jae 0x14004a56e
mov eax, r13d
mov byte [rbp + rcx - 0x30], bl
and al, 0x82
cmp al, 0x80
jne 0x140048afa
cmp rdi, rcx
jle 0x140048afa
test r13b, 4
lea rcx, [0x14005f6c4]
lea rax, [0x140064834]
cmovne rax, rcx
mov qword [rbp - 0x68], rax
nop dword [rax + rax]
mov rdx, rax
mov r8d, 1
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
mov rcx, qword [rbp - 0x70]
dec edi
add rbx, rax
movsxd rax, edi
cmp rax, rcx
mov rax, qword [rbp - 0x68]
jg 0x140048ad0
mov r8, rcx
lea rdx, [rbp - 0x30]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rax, rbx
jmp 0x140048902
xor edx, edx
mov rax, r8
div r10
mov rsi, rax
test r12d, r12d
je 0x140048b63
xor edx, edx
mov rax, r8
div r10
cmp r12d, 1
jne 0x140048b3a
lea ecx, [r12 + 9]
jmp 0x140048b4d
cmp r12d, 2
mov ecx, 0x3e8
mov r11d, 0x64
cmove ecx, r11d
imul rcx, rdx
mov rax, r10
xor edx, edx
shr rax, 1
add rax, rcx
div r10
mov qword [rbp - 0x60], rax
lea r8, [0x140000000]
mov ecx, r9d
lea rdx, [rcx + rcx*2]
mov rax, qword [r8 + rdx*8 + 0x75840]
mov r8, rsi
jmp 0x140048c18
mov ecx, ebx
lea rax, [0x140075778]
nop word [rax + rax]
cmp r8, qword [rax - 8]
jb 0x140048ba0
test r12d, r12d
jg 0x140048bb0
cmp r8, qword [rax]
jae 0x140048bb0
inc ecx
add rax, 0x20
cmp ecx, 6
jb 0x140048b90
jmp 0x140048a48
mov edx, ecx
test r12d, r12d
je 0x140048c00
mov eax, edx
shl rax, 5
movzx ecx, byte [rax + r10 + 0x75768]
mov eax, 1
shl rax, cl
dec rax
and rax, r8
cmp r12d, 1
jne 0x140048be1
lea r9d, [r12 + 9]
jmp 0x140048bf5
cmp r12d, 2
mov r9d, 0x3e8
mov r11d, 0x64
cmove r9d, r11d
imul r9, rax
shr r9, cl
mov qword [rbp - 0x60], r9
shl rdx, 5
movzx ecx, byte [rdx + r10 + 0x75768]
mov rax, qword [rdx + r10 + 0x75760]
shr r8, cl
mov esi, 0x50
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
lea rcx, [rbp - 0x30]
mov edx, esi
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x20], ebx
lea r9d, [rsi - 0x46]
call fcn.14004c560
mov rdx, qword [rbp - 0x40]
mov rcx, rax
mov qword [rbp - 0x70], rax
test rdx, rdx
je 0x140048a6e
test r12d, r12d
je 0x140048c99
mov r8, qword [rbp - 0x60]
inc rcx
sub rsi, rcx
mov byte [rbp + rax - 0x30], 0x2e
lea rax, [rbp - 0x30]
mov qword [rbp - 0x70], rcx
mov dword [rsp + 0x30], 0x84
mov rdx, rsi
add rcx, rax
mov dword [rsp + 0x28], ebx
mov r9d, 0xa
mov dword [rsp + 0x20], r12d
call fcn.14004c560
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x40]
add rcx, rax
test r13b, 0x40
je 0x140048ca7
mov byte [rbp + rcx - 0x30], 0x20
inc rcx
movzx eax, byte [rdx]
mov byte [rbp + rcx - 0x30], al
inc rcx
movzx eax, byte [rdx + 1]
mov qword [rbp - 0x70], rcx
test al, al
je 0x140048a80
cmp byte [rbp - 0x74], 0x42
je 0x140048a80
mov byte [rbp + rcx - 0x30], al
jmp 0x140048a79
mov rdx, qword [r12]
mov r10d, 0x10
mov eax, dword [rbp + 0xa8]
add rdx, 8
test eax, eax
mov qword [r12], rdx
mov ecx, r10d
cmovns ecx, eax
mov r9, qword [rdx - 8]
mov qword [rbp - 0x58], r9
cmp r11b, 0x78
jne 0x140048d7c
mov r12, r9
mov qword [rbp - 0x68], r9
mov esi, r10d
mov qword [rbp - 0x60], rsi
test r9, r9
je 0x140049319
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x44
je 0x14004908f
cmp dl, 0x64
je 0x140048eb2
cmp dl, 0x73
jne case.default.0x140048012
lea ebx, [rcx - 1]
test ecx, ecx
jle case.default.0x140048012
movzx eax, byte [r9]
lea rdi, [r9 + 1]
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
mov rcx, r14
cmp r11b, 0x78
jne 0x140048db3
mov dword [rsp + 0x28], eax
lea r12, str._02x
mov qword [rsp + 0x20], r12
call fcn.14004c460
jmp 0x140048dd8
add rdx, 8
mov qword [r12], rdx
mov r12, qword [rdx - 8]
mov edx, 0xffffffff
mov qword [rbp - 0x68], r12
cmp r12, rdx
ja 0x140048d09
movsxd rax, ecx
add rax, r12
cmp rax, rdx
ja 0x140048d09
mov esi, 8
jmp 0x140048d0c
mov dword [rsp + 0x38], eax
lea rax, str._0llx:__02x
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call fcn.14004c460
lea r12, str._02x
mov rsi, rax
test r13d, 0x208
jne 0x140048e2c
test ebx, ebx
jle 0x140049087
lea rcx, str.__02x
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov rdx, r15
mov rcx, r14
call fcn.14004c460
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
lea rcx, str.__02x
test ebx, ebx
jg 0x140048df3
mov rax, rsi
jmp 0x140048902
and r13d, 8
test ebx, ebx
jle 0x140049087
test r13d, r13d
je 0x140048e72
nop dword [rax]
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], r12
mov rcx, r14
call fcn.14004c460
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
test ebx, ebx
jg 0x140048e40
mov rax, rsi
jmp 0x140048902
lea r12, str.:_02x
nop dword [rax]
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], r12
mov rcx, r14
call fcn.14004c460
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
test ebx, ebx
jg 0x140048e80
mov rax, rsi
jmp 0x140048902
xor ebx, ebx
mov r13d, ecx
test edi, edi
mov dword [rbp - 0x7c], ebx
mov edx, ebx
mov esi, ebx
cmovg r10d, edi
mov qword [rbp - 0x50], r10
test ecx, ecx
jle 0x140049087
movsxd rax, r10d
lea r12d, [rbx + 3]
mov qword [rbp - 0x70], rax
lea r8, [0x1400634fc]
lea r9, str._s_0llx__04x:
nop dword [rax]
mov dword [rsp + 0x40], edx
lea rax, [0x140054850]
movsxd rcx, edx
add rcx, qword [rbp - 0x68]
mov qword [rsp + 0x38], rcx
test edx, edx
mov rcx, qword [rbp - 0x60]
mov rdx, r15
cmovne rax, r8
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov qword [rsp + 0x20], r9
mov rcx, r14
xor r9d, r9d
call fcn.14004c460
mov rdx, qword [rbp - 0x50]
add rsi, rax
mov edi, ebx
test edx, edx
jle 0x140048fdf
mov rcx, qword [rbp - 0x58]
mov qword [rbp - 0x40], rcx
nop dword [rax]
mov eax, dword [rbp - 0x7c]
add eax, edi
cmp eax, r13d
jge 0x140048fa9
movzx edx, byte [rcx]
test dil, 7
jne 0x140048f6e
lea rax, [0x140075a18]
test edi, edi
jne 0x140048f75
lea rax, str.__02x
mov dword [rsp + 0x28], edx
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, r14
call fcn.14004c460
mov rcx, qword [rbp - 0x40]
add rsi, rax
mov rdx, qword [rbp - 0x50]
inc rcx
inc edi
mov qword [rbp - 0x40], rcx
cmp edi, edx
jl 0x140048f50
jmp 0x140048fdf
cmp edi, edx
jge 0x140048fdf
mov eax, edx
sub eax, edi
mov edi, eax
nop dword [rax]
nop word [rax + rax]
mov r8, r12
lea rdx, [0x140075a28]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
sub rdi, 1
jne 0x140048fc0
mov r8d, 1
lea rdx, [0x140064834]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
mov rcx, qword [rbp - 0x70]
mov rdi, rbx
add rsi, rax
test rcx, rcx
jle 0x140049060
mov eax, dword [rbp - 0x7c]
lea rbx, [0x140064bf8]
mov r12, qword [rbp - 0x58]
mov dword [rbp - 0x78], eax
cmp eax, r13d
jge 0x14004905a
movzx eax, byte [rdi + r12]
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x80], al
mov r8d, 1
sub al, 0x20
mov rcx, r15
cmp al, 0x5e
mov rax, r14
cmova rdx, rbx
call qword [case.0x14004be35.0]
mov rcx, qword [rbp - 0x70]
inc rdi
add rsi, rax
mov eax, dword [rbp - 0x78]
inc eax
mov dword [rbp - 0x78], eax
cmp rdi, rcx
jl 0x140049018
xor ebx, ebx
lea r12d, [rbx + 3]
mov edx, dword [rbp - 0x7c]
lea r8, [0x1400634fc]
mov rax, qword [rbp - 0x50]
lea r9, str._s_0llx__04x:
add qword [rbp - 0x58], rcx
add edx, eax
mov dword [rbp - 0x7c], edx
cmp edx, r13d
jl 0x140048ef0
mov rax, rsi
jmp 0x140048902
xor ebx, ebx
mov edx, ecx
test edi, edi
mov dword [rbp - 0x78], ebx
mov eax, ebx
mov dword [rbp - 0x7c], ebx
cmovg r10d, edi
mov esi, ebx
sub edx, r10d
mov qword [rbp - 0x50], r10
mov dword [rbp - 0x70], edx
mov r13d, ecx
test ecx, ecx
jle 0x140049087
movsxd rcx, r10d
lea r12d, [rbx + 3]
mov qword [rbp - 0x40], rcx
lea r8, [0x140075a30]
lea r10, str._n_.s____ditto_x__u_
mov edi, ebx
nop
cmp edi, edx
jge 0x140049139
test edi, edi
jle 0x140049139
mov rdx, r9
mov r8, rcx
sub rdx, rcx
mov rcx, r9
call sym.NetMonitor.exe_nocrt_memcmp
test eax, eax
mov eax, dword [rbp - 0x78]
jne 0x14004912b
test eax, eax
jne 0x14004911d
mov rax, qword [rbp - 0x50]
add eax, edi
cmp eax, dword [rbp - 0x70]
jge 0x14004916a
mov rax, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x40]
mov r8, rdx
lea rcx, [rax + rdx]
mov rdx, rax
call sym.NetMonitor.exe_nocrt_memcmp
test eax, eax
jne 0x14004916a
mov eax, dword [rbp - 0x78]
mov rcx, qword [rbp - 0x40]
inc eax
mov dword [rbp - 0x78], eax
jmp 0x1400492e6
lea r8, [0x140075a30]
lea r10, str._n_.s____ditto_x__u_
test eax, eax
jle 0x14004916a
mov dword [rsp + 0x38], eax
xor r9d, r9d
mov rax, qword [rbp - 0x60]
mov rdx, r15
mov qword [rsp + 0x30], r8
mov rcx, r14
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], r10
call fcn.14004c460
add rsi, rax
mov dword [rbp - 0x78], ebx
mov dword [rsp + 0x40], edi
lea rdx, [0x1400634fc]
movsxd rcx, edi
lea rax, [0x140054850]
add rcx, qword [rbp - 0x68]
mov qword [rsp + 0x38], rcx
test edi, edi
mov rcx, qword [rbp - 0x60]
cmovne rax, rdx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, str._s_0llx__04x:
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.14004c460
add rsi, rax
mov qword [rbp - 0x48], rbx
cmp qword [rbp - 0x40], 0
mov edi, ebx
mov rcx, rbx
jle 0x14004922d
mov r12, qword [rbp - 0x58]
mov ebx, dword [rbp - 0x7c]
lea eax, [rdi + rbx]
cmp eax, r13d
jge 0x140049227
movzx edx, byte [rcx + r12]
test dil, 7
jne 0x1400491f0
lea rax, [0x140075a18]
test edi, edi
jne 0x1400491f7
lea rax, str.__02x
mov dword [rsp + 0x28], edx
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, r14
call fcn.14004c460
mov rcx, qword [rbp - 0x48]
add rsi, rax
inc rcx
inc edi
mov qword [rbp - 0x48], rcx
cmp rcx, qword [rbp - 0x40]
jl 0x1400491d2
xor ebx, ebx
lea r12d, [rbx + 3]
mov rax, qword [rbp - 0x50]
cmp edi, eax
jge 0x14004925f
sub eax, edi
mov edi, eax
nop dword [rax]
mov r8, r12
lea rdx, [0x140075a28]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
sub rdi, 1
jne 0x140049240
mov r8d, 1
lea rdx, [0x140064834]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
mov rcx, qword [rbp - 0x40]
mov rdi, rbx
add rsi, rax
test rcx, rcx
jle 0x1400492e0
mov eax, dword [rbp - 0x7c]
lea rbx, [0x140064bf8]
mov r12, qword [rbp - 0x58]
mov dword [rbp - 0x48], eax
cmp eax, r13d
jge 0x1400492da
movzx eax, byte [rdi + r12]
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x80], al
mov r8d, 1
sub al, 0x20
mov rcx, r15
cmp al, 0x5e
mov rax, r14
cmova rdx, rbx
call qword [case.0x14004be35.0]
mov rcx, qword [rbp - 0x40]
inc rdi
add rsi, rax
mov eax, dword [rbp - 0x48]
inc eax
mov dword [rbp - 0x48], eax
cmp rdi, rcx
jl 0x140049298
xor ebx, ebx
lea r12d, [rbx + 3]
mov eax, dword [rbp - 0x78]
mov edi, dword [rbp - 0x7c]
mov r9, qword [rbp - 0x58]
lea r8, [0x140075a30]
add edi, dword [rbp - 0x50]
lea r10, str._n_.s____ditto_x__u_
mov edx, dword [rbp - 0x70]
add r9, rcx
mov qword [rbp - 0x58], r9
mov dword [rbp - 0x7c], edi
cmp edi, r13d
jl 0x1400490d0
mov rax, rsi
jmp 0x140048902
mov r8d, 6
lea rdx, str._null_
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
jmp 0x140048902
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov ecx, dword [rax - 8]
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x61
je 0x1400493c4
cmp dl, 0x63
je 0x1400493a6
cmp dl, 0x66
je 0x140049388
cmp dl, 0x73
jne case.default.0x140048012
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004bfe0
jmp 0x140048902
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004bfe0
jmp 0x140048902
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004bd50
jmp 0x140048902
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.14004be40
jmp 0x140048902
xor ebx, ebx
lea rdx, [0x1400758e9]
mov rcx, r9
mov dword [rbp - 0x70], ebx
mov esi, ebx
mov dword [rbp - 0x7c], ebx
lea r8d, [rbx + 9]
call sym.NetMonitor.exe_nocrt_strncmp
mov r8d, eax
test eax, eax
je 0x14004947a
nop word [rax + rax]
mov edx, dword [rbp - 0x70]
cmp edx, esi
je case.default.0x140048012
mov eax, dword [rbp - 0x7c]
test r8d, r8d
lea ecx, [rax - 1]
cmovns ecx, edx
inc eax
test r8d, r8d
mov dword [rbp - 0x70], ecx
cmovns esi, eax
cmp ecx, esi
jl case.default.0x140048012
mov eax, ecx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
movsxd rcx, eax
mov dword [rbp - 0x7c], eax
lea rax, [0x140000000]
lea rdx, [rcx + rcx*2]
mov rcx, qword [rbp - 0x68]
movzx r8d, byte [rax + rdx*8 + 0x758e8]
lea rdx, [rdx*8 + 0x758e9]
add rdx, rax
call sym.NetMonitor.exe_nocrt_strncmp
mov r8d, eax
test eax, eax
jne 0x140049410
movsxd rax, dword [rbp - 0x7c]
lea r8, [0x140000000]
lea rcx, [rax + rax*2]
lea rdx, [rcx*8]
mov rcx, qword [rbp - 0x60]
movzx eax, byte [rdx + r8 + 0x758e8]
dec rax
add qword [rcx], rax
cmp byte [rdx + r8 + 0x758f7], 8
jne 0x1400494bf
mov rbx, qword [r12]
add rbx, 8
mov qword [r12], rbx
mov rbx, qword [rbx - 8]
test byte [rdx + r8 + 0x758f8], 1
je 0x14004950c
cmp rbx, 0x1000
jb 0x1400494e2
movabs rax, 0xffff800000000000
test rax, rbx
je 0x14004950c
lea rax, str._BadRD
mov r8d, 6
mov dword [rsp + 0x40], r8d
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
jmp 0x140048291
cmp dword [rdx + r8 + 0x758fc], 0
jne case.default.0x140048012
mov rax, qword [rbx]
mov qword [rsp + 0x28], rax
lea rax, str._lld_ns
jmp 0x1400480ba
movzx r9d, byte [rdx]
mov byte [rbp - 0x74], r9b
lea eax, [r9 - 0x61]
test al, 0xfb
je 0x140049ab5
cmp r9b, 0x6a
jne 0x140049877
movzx ecx, byte [rdx + 1]
lea rax, [rdx + 2]
mov qword [r8], rax
cmp cl, 0x73
jne case.default.0x140048012
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x70], rcx
cmp rcx, 0x1000
jb 0x14004958d
movabs rax, 0xffff800000000000
test rax, rcx
je 0x140049598
lea rcx, [0x14005f964]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.140030b80
mov r12, rax
mov qword [rbp - 0x60], rax
mov rax, r14
lea rdx, [0x140075aa4]
mov r8d, 1
mov rcx, r15
call qword [case.0x14004be35.0]
mov rsi, rax
lea rax, [0x140064834]
test r13b, 2
jne 0x14004960c
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, r12
jl 0x14004960c
mov rdx, rax
mov r8d, 1
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
add rsi, rax
dec edi
movsxd rax, edi
cmp rax, r12
lea rax, [0x140064834]
jge 0x1400495e0
mov dword [rbp - 0x78], edi
xor ebx, ebx
mov ecx, ebx
test r12, r12
jle 0x14004981e
mov r13, qword [rbp - 0x70]
lea r12d, [rbx + 6]
mov rdi, qword [rbp - 0x60]
mov r9d, 0xfffd
nop dword [rax + rax]
movzx eax, byte [rbx + r13]
lea rdx, [rbx + r13]
mov qword [rbp - 0x68], rdx
mov byte [rbp - 0x80], al
cmp al, 0x1f
jbe 0x140049654
cmp al, 0x22
je 0x140049654
cmp al, 0x5c
je 0x140049654
inc rbx
jmp 0x1400497f0
cmp rcx, rbx
jge 0x140049680
lea rdx, [rcx + r13]
mov r8, rbx
sub r8, rcx
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
mov rdx, qword [rbp - 0x68]
mov r9d, 0xfffd
add rsi, rax
movzx eax, byte [rbp - 0x80]
movsx eax, al
add eax, 0xfffffff8
cmp eax, 0x54
ja case.0x1400496ac.15
lea r8, [0x140000000]
cdqe
movzx eax, byte [r8 + rax + 0x4a650]
mov ecx, dword [r8 + rax*4 + 0x4a630]
add rcx, r8
jmp rcx
mov r8d, 2
lea rdx, [0x14006969c]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140069698]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140074bcc]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140075ae0]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140075ae4]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140075ae8]
jmp 0x1400497d5
mov r8d, 2
lea rdx, [0x140075aec]
jmp 0x1400497d5
mov dword [rbp - 0x7c], r9d
mov qword [rbp - 0x68], rdx
movzx eax, byte [rdx]
test al, al
js 0x140049745
lea rbx, [rdx + 1]
mov qword [rbp - 0x68], rbx
jmp 0x14004975d
lea rdx, [rbp - 0x7c]
lea rcx, [rbp - 0x68]
call fcn.140033a30
test eax, eax
mov eax, dword [rbp - 0x7c]
js 0x140049763
mov rbx, qword [rbp - 0x68]
sub rbx, r13
dec rbx
cmp eax, 0xfffe
mov word [rbp - 0x30], 0x755c
lea rdx, [0x140000000]
mov byte [rbp - 0x2a], 0
mov ecx, 0xfffd
mov r8, r12
cmovae eax, ecx
mov ecx, eax
mov dword [rbp - 0x7c], eax
shr rax, 0xc
and eax, 0xf
movzx eax, byte [rax + rdx + 0xa1f18]
mov byte [rbp - 0x2e], al
mov eax, ecx
shr rax, 8
and eax, 0xf
movzx eax, byte [rax + rdx + 0xa1f18]
mov byte [rbp - 0x2d], al
mov eax, ecx
shr rax, 4
and eax, 0xf
and ecx, 0xf
movzx eax, byte [rax + rdx + 0xa1f18]
mov byte [rbp - 0x2c], al
movzx eax, byte [rcx + rdx + 0xa1f18]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x2b], al
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
mov r9d, 0xfffd
inc rbx
mov rcx, rbx
cmp rbx, rdi
jl 0x140049630
mov edi, dword [rbp - 0x78]
cmp rcx, rbx
jge 0x14004981a
sub rbx, rcx
lea rdx, [rcx + r13]
mov r8, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
mov r12, qword [rbp - 0x60]
dec edi
movsxd rax, edi
cmp rax, r12
jl 0x140049856
nop dword [rax + rax]
mov r8d, 1
lea rdx, [0x140064834]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x140049830
mov r8d, 1
lea rdx, [0x140075aa4]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rax, rsi
jmp 0x140048902
cmp r9b, 0x70
jne case.default.0x140048012
movzx r9d, byte [rdx + 1]
mov rax, qword [r12]
add rax, 8
mov byte [rbp - 0x80], r9b
mov qword [r12], rax
mov rcx, qword [rax - 8]
add qword [r8], 2
mov qword [rbp - 0x70], rcx
cmp r9b, 0x70
jne 0x1400498ae
mov byte [rbp - 0x7c], 0x2f
jmp 0x1400498e8
cmp r9b, 0x71
mov edx, 0x7e
mov r8d, 0x2b
cmove edx, r8d
mov dword [rbp - 0x7c], edx
cmp r9b, 0x61
je 0x1400498e8
mov byte [rbp - 0x7c], dl
mov qword [rbp - 0x70], rcx
cmp r9b, 0x71
je 0x1400498e8
mov byte [rbp - 0x7c], dl
mov qword [rbp - 0x70], rcx
cmp r9b, 0x66
jne case.default.0x140048012
cmp rcx, 0x1000
jb 0x140049900
movabs rax, 0xffff800000000000
test rax, rcx
je 0x14004990b
lea rcx, [0x14005f964]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.140030b80
test r13b, 2
mov r12d, 3
mov r13, rax
jne 0x140049963
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, rax
jl 0x140049963
nop dword [rax]
nop word [rax + rax]
mov r8, r12
lea rdx, [0x140075af0]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
movsxd rax, edi
cmp rax, r13
jge 0x140049940
mov dword [rbp - 0x78], edi
xor ebx, ebx
mov edx, ebx
test r13, r13
jle 0x140049a81
mov rdi, qword [rbp - 0x70]
nop dword [rax]
nop dword [rax + rax]
movzx esi, byte [rdi + rbx]
movsx ecx, sil
lea eax, [rcx - 0x61]
cmp eax, 0x1a
jb 0x140049a57
lea eax, [rcx - 0x41]
cmp eax, 0x1a
jb 0x140049a57
lea eax, [rcx - 0x30]
cmp eax, 0xa
jb 0x140049a57
lea eax, [rsi - 0x2d]
cmp al, 1
jbe 0x140049a57
cmp sil, 0x5f
je 0x140049a57
cmp sil, 0x7e
je 0x140049a57
cmp sil, byte [rbp - 0x7c]
je 0x140049a57
cmp rdx, rbx
jge 0x1400499ef
mov r8, rbx
mov rcx, r15
sub r8, rdx
mov rax, r14
add rdx, rdi
call qword [case.0x14004be35.0]
cmp sil, 0x20
jne 0x140049a0a
cmp byte [rbp - 0x80], 0x66
jne 0x140049a0a
mov r8d, 1
lea rdx, [0x140075af4]
jmp 0x140049a43
lea rdx, [0x140000000]
mov byte [rbp - 0x30], 0x25
mov rcx, rsi
mov byte [rbp - 0x2d], 0
mov rax, rsi
mov r8, r12
shr rax, 4
and ecx, 0xf
movzx eax, byte [rax + rdx + 0xa1f30]
mov byte [rbp - 0x2f], al
movzx eax, byte [rcx + rdx + 0xa1f30]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x2e], al
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
inc rbx
mov rdx, rbx
jmp 0x140049a5a
inc rbx
cmp rbx, r13
jl 0x140049980
mov edi, dword [rbp - 0x78]
cmp rdx, rbx
jge 0x140049a81
sub rbx, rdx
mov rcx, r15
add rdx, qword [rbp - 0x70]
mov r8, rbx
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
movsxd rax, edi
cmp rax, r13
jl case.default.0x140048012
nop
mov r8, r12
lea rdx, [0x140075af0]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
movsxd rax, edi
cmp rax, r13
jge 0x140049a90
jmp case.default.0x140048012
movzx ecx, byte [rdx + 1]
lea rax, [rdx + 2]
mov qword [r8], rax
cmp cl, 0x73
jne case.default.0x140048012
cmp r9b, 0x61
lea rcx, str.____n_r
lea rax, [0x140075900]
cmove rax, rcx
xor ebx, ebx
mov qword [rbp - 0x50], rax
cmp r9b, 0x61
mov eax, ebx
mov esi, ebx
sete al
add rax, 5
mov qword [rbp - 0x40], rax
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x70], rcx
cmp rcx, 0x1000
jb 0x140049b24
movabs rax, 0xffff800000000000
test rax, rcx
je 0x140049b2f
lea rcx, [0x14005f964]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.140030b80
cmp byte [rbp - 0x74], 0x61
mov r12, rax
mov qword [rbp - 0x60], rax
jne 0x140049b63
mov r8d, 1
lea rdx, [0x140075aa4]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
mov rsi, rax
test r13b, 2
jne 0x140049ba7
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, r12
jl 0x140049ba7
lea rbx, [0x140064834]
nop dword [rax]
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x140049b80
mov dword [rbp - 0x78], edi
xor ebx, ebx
test r12, r12
jle 0x140049ce1
mov r13, qword [rbp - 0x70]
mov eax, 1
sub rax, r13
mov r12d, 6
mov qword [rbp - 0x58], rax
mov rdi, rbx
nop dword [rax]
movsx edx, byte [rbx + r13]
lea rax, [rbx + r13]
mov r8, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
call sym.NetMonitor.exe_nocrt_memchr
test rax, rax
je 0x140049ca7
cmp rdi, rbx
jge 0x140049c0d
mov r8, rbx
lea rdx, [rdi + r13]
sub r8, rdi
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
movsx eax, byte [rbx + r13]
lea rdi, [rbx + r13]
add eax, 0xfffffff6
cmp eax, 0x34
ja case.0x140049c3d.17
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x4a6c8]
mov ecx, dword [rdx + rax*4 + 0x4a6a8]
add rcx, rdx
jmp rcx
mov r8d, 4
lea rdx, str.lt_
jmp 0x140049c94
mov r8d, 4
lea rdx, str.gt_
jmp 0x140049c94
lea rdx, str.amp_
jmp 0x140049c8e
mov r8, r12
lea rdx, str.apos_
jmp 0x140049c94
mov r8, r12
lea rdx, str.quot_
jmp 0x140049c94
lea rdx, str.xA_
jmp 0x140049c8e
lea rdx, str.xD_
mov r8d, 5
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
add rdi, qword [rbp - 0x58]
inc rbx
cmp rbx, qword [rbp - 0x60]
jl 0x140049bd0
mov qword [rbp - 0x68], rdi
cmp rdi, rbx
mov edi, dword [rbp - 0x78]
jge 0x140049cdd
mov rax, qword [rbp - 0x68]
mov rcx, r15
sub rbx, rax
mov r8, rbx
lea rdx, [rax + r13]
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
mov r12, qword [rbp - 0x60]
dec edi
movsxd rax, edi
cmp rax, r12
jl 0x140049d16
nop dword [rax + rax]
mov r8d, 1
lea rdx, [0x140064834]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x140049cf0
cmp byte [rbp - 0x74], 0x61
jne 0x140049d38
mov r8d, 1
lea rdx, [0x140075aa4]
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
add rsi, rax
mov rax, rsi
jmp 0x140048902
xor ebx, ebx
mov rcx, rdx
mov edi, ebx
nop word [rax + rax]
movzx eax, byte [rcx]
inc rcx
mov qword [rbp - 0x68], rcx
test al, al
je case.default.0x140048012
cmp al, 0x5b
jne 0x140049d50
movzx eax, byte [rcx]
mov r9, rbx
test al, al
je case.default.0x140048012
cmp al, 0x5d
je 0x140049d8a
movzx eax, byte [r9 + rcx + 1]
inc r9
test al, al
jne 0x140049d74
jmp case.default.0x140048012
lea rax, [rcx + 1]
add rax, r9
mov qword [r8], rax
mov rax, rcx
sub rax, rdx
cmp rax, 4
jne 0x1400485b7
cmp byte [rdx], 0x78
jne 0x1400485b7
cmp byte [rdx + 1], 0x38
jne 0x1400485b7
cmp byte [rdx + 2], 0x36
jne 0x1400485b7
cmp r9, 3
jne 0x1400485b7
mov rdx, rcx
mov r8, r9
lea rcx, [0x140075af8]
mov rsi, r9
call sym.NetMonitor.exe_nocrt_strncmp
test eax, eax
jne 0x14004a0b8
mov rax, qword [r12]
lea r9d, [rsi + 5]
add rax, 8
lea r8d, [rsi + 0xd]
mov qword [r12], rax
lea rcx, [rbp - 0x30]
bts r13d, 0xe
mov r12, qword [rax - 8]
mov eax, r13d
or eax, 4
mov rdx, r12
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
mov rbx, rax
test r12b, 1
je 0x140049e63
mov r8, rsi
lea rdx, [0x140075afc]
mov rcx, r15
lea edi, [rsi - 2]
mov rax, r14
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffe
and r12, rax
test r12b, 2
je 0x140049e99
mov eax, edi
lea rdx, [0x140075b00]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049e88
lea rdx, [0x140075b04]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffd
and r12, rax
test r12b, 4
je 0x140049ecf
mov eax, edi
lea rdx, [0x140075b08]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049ebe
lea rdx, [0x140075b0c]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffb
and r12, rax
test r12b, 8
je 0x140049f05
mov eax, edi
lea rdx, [0x140075b10]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049ef4
lea rdx, [0x140075b14]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffff7
and r12, rax
test r12b, 0x10
je 0x140049f3b
mov eax, edi
lea rdx, [0x140075b18]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049f2a
lea rdx, [0x140075b1c]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffffef
and r12, rax
test r12b, 0x20
je 0x140049f71
mov eax, edi
lea rdx, [0x140075b20]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049f60
lea rdx, [0x140075b24]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffffdf
and r12, rax
bt r12, 0x10
jae 0x140049fa8
mov eax, edi
lea rdx, [0x140075b28]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049f97
lea rdx, [0x140075b2c]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffeffff
and r12, rax
bt r12, 0x12
jae 0x140049fdf
mov eax, edi
lea rdx, [0x140075b30]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x140049fce
lea rdx, [0x140075b34]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffbffff
and r12, rax
bt r12, 0x1d
jae 0x14004a016
mov eax, edi
lea rdx, [0x140075b38]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a005
lea rdx, [0x140075b3c]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xdfffffff
and r12, rax
bt r12, 0x1e
jae 0x14004a04d
mov eax, edi
lea rdx, [0x140075b40]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a03c
lea rdx, [0x140075b44]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xbfffffff
and r12, rax
bt r12, 0x1f
jae 0x14004a081
mov eax, edi
lea rdx, [0x140075b48]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a073
lea rdx, [0x140075b4c]
call qword [case.0x14004be35.0]
add rbx, rax
btr r12d, 0x1f
test r12, r12
je 0x14004a554
test edi, edi
lea rax, str.unkn
lea rdx, str._unkn
mov r8d, 6
cmove rdx, rax
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
mov rdx, r12
jmp 0x14004a519
mov rdx, qword [rbp - 0x68]
lea rcx, [0x140075b64]
mov r8, rsi
call sym.NetMonitor.exe_nocrt_strncmp
test eax, eax
jne 0x1400485b7
mov rax, qword [r12]
lea rcx, [rbp - 0x30]
add rax, 8
mov r9d, 8
mov qword [r12], rax
bts r13d, 0xe
mov rsi, qword [rax - 8]
lea r8d, [r9 + 8]
mov eax, r13d
mov rdx, rsi
or eax, 4
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.140039690
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
mov rbx, rax
test sil, 1
je 0x14004a153
mov edi, 1
lea rdx, str.VME
mov rcx, r15
mov rax, r14
lea r8d, [rdi + 3]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffe
and rsi, rax
test sil, 2
je 0x14004a18c
mov eax, edi
lea rdx, str.PVI
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a17b
lea rdx, str._PVI
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffd
and rsi, rax
test sil, 4
je 0x14004a1c5
mov eax, edi
lea rdx, str.TSD
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a1b4
lea rdx, str._TSD
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffffb
and rsi, rax
test sil, 8
je 0x14004a1fe
mov eax, edi
lea rdx, [0x140075b10]
inc edi
mov r8d, 3
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a1ed
lea rdx, [0x140075b14]
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffff7
and rsi, rax
test sil, 0x10
je 0x14004a237
mov eax, edi
lea rdx, str.PSE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a226
lea rdx, str._PSE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffffef
and rsi, rax
test sil, 0x20
je 0x14004a270
mov eax, edi
lea rdx, str.PAE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a25f
lea rdx, str._PAE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffffdf
and rsi, rax
test sil, 0x40
je 0x14004a2a9
mov eax, edi
lea rdx, str.MCE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a298
lea rdx, str._MCE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffffbf
and rsi, rax
test sil, sil
jns 0x14004a2e1
mov eax, edi
lea rdx, str.PGE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a2d0
lea rdx, str._PGE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffff7f
and rsi, rax
bt rsi, 8
jae 0x14004a31b
mov eax, edi
lea rdx, str.PCE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a30a
lea rdx, str._PCE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffeff
and rsi, rax
bt rsi, 9
jae 0x14004a355
mov eax, edi
lea rdx, str.OSFXSR
inc edi
mov r8d, 7
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a344
lea rdx, str._OSFXSR
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffdff
and rsi, rax
bt rsi, 0xa
jae 0x14004a38f
mov eax, edi
lea rdx, str.OSXMMEEXCPT
inc edi
mov r8d, 0xc
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a37e
lea rdx, str._OSXMMEEXCPT
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffffbff
and rsi, rax
bt rsi, 0xd
jae 0x14004a3c9
mov eax, edi
lea rdx, str.VMXE
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a3b8
lea rdx, str._VMXE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffdfff
and rsi, rax
bt rsi, 0xe
jae 0x14004a403
mov eax, edi
lea rdx, str.SMXE
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a3f2
lea rdx, str._SMXE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffffbfff
and rsi, rax
mov r12d, 6
bt rsi, 0x11
jae 0x14004a440
mov eax, edi
lea rdx, str.PCIDE
inc edi
mov r8d, r12d
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a42f
lea rdx, str._PCIDE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffdffff
and rsi, rax
bt rsi, 0x12
jae 0x14004a47a
mov eax, edi
lea rdx, str.OSXSAVE
inc edi
mov r8d, 8
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a469
lea rdx, str._OSXSAVE
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xfffbffff
and rsi, rax
bt rsi, 0x14
jae 0x14004a4b4
mov eax, edi
lea rdx, str.SMEP
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a4a3
lea rdx, str._SMEP
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffefffff
and rsi, rax
bt rsi, 0x15
jae 0x14004a4ee
mov eax, edi
lea rdx, str.SMAP
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x14004a4dd
lea rdx, str._SMAP
call qword [case.0x14004be35.0]
add rbx, rax
mov eax, 0xffdfffff
and rsi, rax
test rsi, rsi
je 0x14004a554
test edi, edi
lea rax, str.unkn
lea rdx, str._unkn
mov r8, r12
cmove rdx, rax
mov rcx, r15
mov rax, r14
call qword [case.0x14004be35.0]
mov rdx, rsi
mov r9d, 1
mov dword [rsp + 0x28], r13d
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x20], 0xffffffff
add rbx, rax
lea r8d, [r9 + 0xf]
call fcn.140039690
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x14004be35.0]
add rbx, rax
inc edi
test edi, edi
je 0x1400485b7
mov r8d, 1
lea rdx, [0x140075b60]
jmp 0x1400485a8
call fcn.140001289
int3