Function at 0x180008b40
Capabilities:
Parse credit card information

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x38]
sub rsp, 0x138
mov rax, qword [0x1800300a0]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rax, qword [r8]
mov r14, rcx
movsxd rdi, dword [rbp + 0xa0]
mov r15, rdx
mov r13d, dword [rbp + 0xb0]
mov r12, r9
mov qword [rbp - 0x60], r8
movzx ecx, byte [rax]
lea rdx, [rax + 1]
mov dword [rbp - 0x78], edi
mov r9, rdx
mov qword [rbp - 0x68], rdx
mov qword [r8], rdx
cmp cl, 0x52
jne case.default.0x180008e72
movsx eax, byte [rdx]
inc rdx
add eax, 0xffffffbf
mov qword [r8], rdx
cmp eax, 0x36
ja case.default.0x180008e72
lea r10, [0x180000000]
cdqe
movzx eax, byte [r10 + rax + 0xb3fc]
mov ecx, dword [r10 + rax*4 + 0xb3d4]
add rcx, r10
jmp rcx
xor ebx, ebx
mov dword [rbp - 0x78], 0x3f
lea rdx, str.Tfp64
mov dword [rbp - 0x7c], 0x20
mov rcx, r9
mov esi, ebx
lea r8d, [rbx + 5]
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
mov r8d, eax
test eax, eax
je 0x180008c6c
mov ecx, dword [rbp - 0x78]
cmp ecx, esi
je case.default.0x180008e72
mov edx, dword [rbp - 0x7c]
test r8d, r8d
lea eax, [rdx - 1]
cmovns eax, ecx
mov ecx, eax
mov dword [rbp - 0x78], eax
lea eax, [rdx + 1]
cmovns esi, eax
cmp ecx, esi
jl case.default.0x180008e72
mov eax, ecx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
movsxd rcx, eax
mov dword [rbp - 0x7c], eax
lea rax, [0x180000000]
lea rdx, [rcx + rcx*2]
mov rcx, qword [rbp - 0x68]
movzx r8d, byte [rax + rdx*8 + 0xdf50]
lea rdx, [rdx*8 + 0xdf51]
add rdx, rax
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
mov r8d, eax
test eax, eax
jne 0x180008c02
movsxd rax, dword [rbp - 0x7c]
lea r8, [0x180000000]
mov esi, 0x10
lea rcx, [rax + rax*2]
lea rdx, [rcx*8]
mov rcx, qword [rbp - 0x60]
movzx eax, byte [rdx + r8 + 0xdf50]
dec rax
mov qword [rbp - 0x68], rdx
add qword [rcx], rax
lea rcx, [rbp - 0x40]
movzx eax, word [rdx + r8 + 0xdf64]
mov r8d, esi
xor edx, edx
or r13d, eax
call sym.VBoxNetFltNobj.dll_nocrt_memset
mov rdx, qword [rbp - 0x68]
lea r9, [0x180000000]
movzx ecx, byte [rdx + r9 + 0xdf5b]
test sil, r13b
je 0x180008d66
sub ecx, 1
je 0x180008d48
sub ecx, 1
je 0x180008d2a
sub ecx, 2
je 0x180008d0c
cmp ecx, 4
jne case.0x180008d7f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xe
mov r12, qword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x180008e13
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xd
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x180008e13
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xc
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x180008e13
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xb
movsxd r12, dword [rax - 8]
mov qword [rbp - 0x40], r12
jmp 0x180008e13
dec ecx
cmp ecx, 9
ja case.0x180008d7f.3
movsxd rax, ecx
mov ecx, dword [r9 + rax*4 + 0xb434]
add rcx, r9
jmp rcx
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xb
movzx eax, byte [rax - 8]
mov byte [rbp - 0x40], al
jmp case.0x180008d7f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xc
movzx eax, word [rax - 8]
mov word [rbp - 0x40], ax
jmp case.0x180008d7f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
bts r13d, 0xd
mov eax, dword [rax - 8]
mov dword [rbp - 0x40], eax
jmp case.0x180008d7f.3
mov rcx, qword [r12]
add rcx, 8
mov qword [r12], rcx
mov rcx, qword [rcx - 8]
mov eax, dword [rcx]
mov dword [rbp - 0x40], eax
movzx eax, word [rcx + 4]
mov word [rbp - 0x3c], ax
jmp case.0x180008d7f.3
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rax, qword [rax - 8]
movsd xmm0, qword [rax]
movsd qword [rbp - 0x40], xmm0
movzx eax, word [rax + 8]
mov word [rbp - 0x38], ax
mov r12, qword [rbp - 0x40]
bt r13d, 0xa
jae 0x180008e55
mov eax, dword [rbp + 0xa8]
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x28], r13d
mov r9d, edi
mov r8, r12
mov dword [rsp + 0x20], eax
mov edx, 0x50
call fcn.18000c1a0
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
jmp 0x180009762
movsxd r8, dword [rdx + r9 + 0xdf60]
cmp r8d, 0xc
ja case.default.0x180008e72
mov ecx, dword [r9 + r8*4 + 0xb45c]
add rcx, r9
jmp rcx
movzx r8d, byte [rdx + r9 + 0xdf5c]
lea rcx, [rbp - 0x30]
mov eax, dword [rbp + 0xa8]
mov r9d, edi
mov rdx, r12
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], eax
call fcn.180006ff0
movsxd r8, eax
jmp 0x180008e40
test edi, edi
jns case.0x180008e72.0
movzx eax, byte [rdx + r9 + 0xdf5b]
mov ecx, r13d
shr ecx, 2
and ecx, 2
or r13d, 4
lea edi, [rcx + rax*2]
jmp case.0x180008e72.0
cmp r12, 1
jne 0x180008eec
mov r8d, r13d
lea rdx, str.true
and r8d, 8
mov rcx, r15
or r8, 0x20
mov rax, r14
shr r8, 3
call qword [case.0x18000bb15.0]
jmp 0x180009762
test r12, r12
jne 0x180008f0e
lea r8d, [r12 + 5]
mov rcx, r15
lea rdx, str.false
mov rax, r14
call qword [case.0x18000bb15.0]
jmp 0x180009762
mov qword [rsp + 0x28], r12
lea rax, str.__lld_
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, r15
mov rcx, r14
call fcn.18000c140
jmp 0x180009762
movzx edx, word [rbp - 0x3e]
lea rcx, [rbp - 0x30]
and r13d, 0xffff146f
mov r9d, 4
bts r13d, 0xc
mov r8d, esi
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
movzx edx, word [rbp - 0x40]
lea rcx, [rbp - 0x2b]
mov r9d, 4
mov dword [rsp + 0x28], r13d
mov r8d, esi
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
mov r8d, 9
jmp 0x180008e40
movzx edx, word [rbp - 0x3c]
lea rcx, [rbp - 0x30]
and r13d, 0xffff046f
mov r9d, 4
mov eax, r13d
mov r8d, esi
bts eax, 0xc
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
mov edx, dword [rbp - 0x40]
lea rcx, [rbp - 0x2b]
bts r13d, 0xd
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x28], r13d
mov r9d, 8
mov r8d, esi
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
mov r8d, 0xd
jmp 0x180008e40
movzx edx, word [rbp - 0x38]
lea rcx, [rbp - 0x30]
and r13d, 0xffff046f
mov r9d, 4
mov eax, r13d
mov r8d, esi
bts eax, 0xc
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
mov rdx, qword [rbp - 0x40]
lea rcx, [rbp - 0x2b]
bts r13d, 0xe
mov byte [rbp - 0x2c], 0x3a
mov dword [rsp + 0x28], r13d
mov r9d, esi
mov r8d, esi
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
mov r8d, 0x15
jmp 0x180008e40
movzx eax, byte [rbp - 0x3d]
movzx ecx, byte [rbp - 0x3e]
movzx edx, byte [rbp - 0x3f]
movzx r8d, byte [rbp - 0x40]
mov dword [rsp + 0x40], eax
xor r9d, r9d
mov dword [rsp + 0x38], ecx
lea rax, str._u._u._u._u
mov dword [rsp + 0x30], edx
mov rcx, r14
mov dword [rsp + 0x28], r8d
mov rdx, r15
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18000c140
jmp 0x180009762
cmp r12, 0x1000
jb 0x1800090cf
movabs rax, 0xffff800000000000
test rax, r12
jne 0x1800090cf
mov r8, r12
mov rdx, r15
mov rcx, r14
call fcn.180008660
jmp 0x180009762
lea rax, str._BadIPv6
mov dword [rsp + 0x40], 8
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov r9d, edi
mov dword [rsp + 0x20], r13d
mov r8, r15
mov rdx, r14
xor ecx, ecx
call fcn.180008070
jmp 0x180009762
cmp r12, 0x1000
jb 0x180009183
movabs rax, 0xffff800000000000
test rax, r12
jne 0x180009183
movzx eax, byte [r12 + 5]
movzx ecx, byte [r12 + 4]
movzx edx, byte [r12 + 3]
movzx r8d, byte [r12 + 2]
movzx r9d, byte [r12 + 1]
movzx r10d, byte [r12]
mov dword [rsp + 0x50], eax
lea rax, str._02x:_02x:_02x:_02x:_02x:_02x
mov dword [rsp + 0x48], ecx
mov rcx, r14
mov dword [rsp + 0x40], edx
mov rdx, r15
mov dword [rsp + 0x38], r8d
xor r8d, r8d
mov dword [rsp + 0x30], r9d
xor r9d, r9d
mov dword [rsp + 0x28], r10d
mov qword [rsp + 0x20], rax
call fcn.18000c140
jmp 0x180009762
mov dword [rsp + 0x40], 7
lea rax, str._BadMac
jmp 0x1800090de
cmp r12, 0x1000
jb 0x180009289
movabs rax, 0xffff800000000000
test rax, r12
jne 0x180009289
mov edx, dword [r12 + 0x10]
mov ecx, edx
sub ecx, 1
je 0x180009227
sub ecx, 1
je 0x1800091e1
cmp ecx, 2
je 0x180009123
mov dword [rsp + 0x28], edx
lea rax, str.unsupported_netaddr_type_u
jmp 0x180008f1a
mov eax, dword [r12 + 0x14]
mov edx, 0xffffffff
cmp eax, edx
mov rcx, r14
mov rdx, r15
jne 0x180009202
mov r8, r12
call fcn.180008660
jmp 0x180009762
mov dword [rsp + 0x30], eax
xor r9d, r9d
lea rax, str.__RTnaipv6_:_u
mov qword [rsp + 0x28], r12
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18000c140
jmp 0x180009762
mov r9d, dword [r12 + 0x14]
mov edx, 0xffffffff
movzx eax, byte [r12 + 3]
cmp r9d, edx
movzx edx, byte [r12 + 1]
movzx ecx, byte [r12 + 2]
movzx r8d, byte [r12]
je 0x180009071
mov dword [rsp + 0x48], r9d
xor r9d, r9d
mov dword [rsp + 0x40], eax
lea rax, str._u._u._u._u:_u
mov dword [rsp + 0x38], ecx
mov rcx, r14
mov dword [rsp + 0x30], edx
mov rdx, r15
mov dword [rsp + 0x28], r8d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call fcn.18000c140
jmp 0x180009762
mov dword [rsp + 0x40], 0xb
lea rax, str._BadNetAddr
jmp 0x1800090de
cmp r12, 0x1000
jb 0x18000934f
movabs rax, 0xffff800000000000
test rax, r12
jne 0x18000934f
movzx eax, byte [r12 + 0xf]
movzx ecx, byte [r12 + 0xe]
movzx edx, byte [r12 + 0xd]
movzx r8d, byte [r12 + 0xc]
movzx r9d, byte [r12 + 0xb]
movzx r10d, byte [r12 + 0xa]
movzx r11d, byte [r12 + 9]
movzx ebx, byte [r12 + 8]
movzx edi, word [r12 + 6]
movzx esi, word [r12 + 4]
mov dword [rsp + 0x78], eax
mov eax, dword [r12]
mov dword [rsp + 0x70], ecx
mov rcx, r14
mov dword [rsp + 0x68], edx
mov rdx, r15
mov dword [rsp + 0x60], r8d
xor r8d, r8d
mov dword [rsp + 0x58], r9d
xor r9d, r9d
mov dword [rsp + 0x50], r10d
mov dword [rsp + 0x48], r11d
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], eax
lea rax, str._08x__04x__04x__02x_02x__02x_02x_02x_02x_02x_02x
mov qword [rsp + 0x20], rax
call fcn.18000c140
jmp 0x180009762
lea rax, str._BadUuid
jmp 0x1800090d6
cmp r12, 0x1000
jb case.default.0x180008e72
movabs rax, 0xffff800000000000
test rax, r12
jne case.default.0x180008e72
test r12, r12
je case.default.0x180008e72
mov eax, dword [r12]
and eax, 0xffff0004
cmp eax, 0xbabe0004
jne case.default.0x180008e72
cmp r8d, 0xb
jne 0x1800093c3
mov ecx, dword [r12 + 4]
lea r9, [rbp - 0x30]
mov esi, 0x50
mov r8, r15
mov rdx, r14
mov qword [rsp + 0x20], rsi
call fcn.18000bcc0
mov r12, qword [rbp - 0x40]
mov rbx, rax
cmp qword [r12 + 8], 0
jbe 0x180009417
mov rcx, r15
mov rax, r14
test r13b, 8
je 0x1800093e6
mov r8d, 3
lea rdx, [0x18000dbc0]
jmp 0x1800093f3
mov r8d, 2
lea rdx, [0x18000e7e4]
call qword [case.0x18000bb15.0]
mov rdx, qword [rbp - 0x40]
mov rbx, rax
mov r8, qword [rdx + 8]
mov rdx, qword [rdx + 0x10]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rbx, rax
mov rax, rbx
jmp 0x180009762
movzx ecx, byte [rdx]
lea rax, [rdx + 1]
mov qword [r8], rax
cmp cl, 0x6e
je 0x180009585
cmp cl, 0x73
jne case.default.0x180008e72
cmp byte [rbp + 0xb8], 0x6c
jne case.default.0x180008e72
mov rax, qword [r12]
xor ebx, ebx
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x68], rcx
cmp rcx, 0x1000
jb 0x180009498
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x180009498
movsxd rdx, dword [rbp + 0xa8]
mov esi, ebx
test rdx, rdx
jle 0x1800094a8
mov eax, ebx
cmp word [rcx + rax*2], bx
je 0x1800094a8
inc esi
inc rax
cmp rax, rdx
jl 0x180009486
jmp 0x1800094a8
lea rax, [0x1800301f0]
mov esi, 6
mov qword [rbp - 0x68], rax
mov r12, rbx
test r13b, 2
jne 0x1800094f0
dec edi
cmp edi, esi
jl 0x1800094f0
mov eax, edi
lea rbx, [0x18000de94]
sub eax, esi
inc eax
mov r13d, eax
sub edi, eax
nop dword [rax]
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add r12, rax
sub r13, 1
jne 0x1800094d0
xor ebx, ebx
sub edi, esi
test esi, esi
jle 0x180009553
nop word [rax + rax]
lea rdx, [rbp - 0x7c]
mov dword [rbp - 0x7c], ebx
lea rcx, [rbp - 0x68]
dec esi
call fcn.180003d00
mov edx, dword [rbp - 0x7c]
cmp edx, 0x80
jae 0x180009526
mov byte [rbp - 0x30], dl
lea rax, [rbp - 0x2f]
jmp 0x18000952f
lea rcx, [rbp - 0x30]
call fcn.180005b40
mov byte [rax], 0
lea rcx, [rbp - 0x30]
sub rax, rcx
lea rdx, [rbp - 0x30]
mov r8, rax
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add r12, rax
test esi, esi
jg 0x180009500
sub edi, 1
js 0x18000957d
lea rbx, [0x18000de94]
nop
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add r12, rax
sub edi, 1
jns 0x180009560
mov rax, r12
jmp 0x180009762
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov r8, rcx
cmp rcx, 0x1000
jb 0x18000960e
movabs rax, 0xffff800000000000
test rax, rcx
jne 0x18000960e
movzx eax, byte [rcx]
test al, al
je 0x1800095f7
movabs rdx, 0x200000000801
sub al, 0x2f
cmp al, 0x2d
ja 0x1800095eb
bt rdx, rax
jae 0x1800095eb
nop dword [rax]
movzx eax, byte [r8 + 1]
inc r8
test al, al
je 0x1800095f7
cmp al, 0x5c
je 0x1800095d0
cmp al, 0x2f
je 0x1800095d0
cmp al, 0x3a
je 0x1800095d0
mov rcx, r8
movzx eax, byte [r8 + 1]
inc r8
test al, al
jne 0x1800095c1
sub r8, rcx
mov rdx, rcx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
jmp 0x180009762
mov dword [rsp + 0x40], 0xc
lea rax, str._BadBaseName
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
jmp 0x1800090f1
movzx ecx, byte [rdx]
lea rax, [rdx + 1]
mov qword [r8], rax
cmp cl, 0x6e
jne case.default.0x180008e72
mov rax, qword [r12]
xor ebx, ebx
add rax, 8
mov qword [r12], rax
mov rdx, qword [rax - 8]
mov r8, rdx
cmp rdx, 0x1000
jb 0x1800096fc
movabs rax, 0xffff800000000000
test rax, rdx
jne 0x1800096fc
movzx eax, byte [rdx]
test al, al
je 0x1800096eb
movabs r9, 0x10100000200
nop
cmp al, 0x28
je 0x1800096eb
cmp al, 0x20
je 0x1800096af
cmp al, 9
je 0x1800096af
inc r8
cmp al, 0x3c
jne 0x1800096a7
inc ebx
jmp 0x1800096e3
cmp al, 0x3e
jne 0x1800096e3
dec ebx
jmp 0x1800096e3
movzx ecx, byte [r8 + 1]
inc r8
test cl, cl
je 0x1800096e3
nop dword [rax + rax]
cmp cl, 0x28
ja 0x1800096d9
bt r9, rcx
jae 0x1800096d9
movzx ecx, byte [r8 + 1]
inc r8
test cl, cl
jne 0x1800096c0
jmp 0x1800096e3
test cl, cl
je 0x1800096e3
test ebx, ebx
cmove rdx, r8
movzx eax, byte [r8]
test al, al
jne 0x180009690
sub r8, rdx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
jmp 0x180009762
mov dword [rsp + 0x40], 8
lea rax, str._BadFnNm
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdx
jmp 0x1800090f1
movzx r11d, byte [rdx]
lea rax, [rdx + 1]
mov byte [rbp - 0x80], r11b
mov qword [r8], rax
cmp r11b, 0x58
je 0x180009b34
cmp r11b, 0x63
je 0x180009800
cmp r11b, 0x72
je case.0x180008bd4.73
cmp r11b, 0x75
je 0x180009800
cmp r11b, 0x78
je 0x180009b34
xor eax, eax
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.180001220
add rsp, 0x138
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov ecx, dword [rax - 8]
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x61
je 0x1800097e2
cmp dl, 0x63
je 0x1800097c7
cmp dl, 0x66
jne case.default.0x180008e72
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bf80
jmp 0x180009762
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bde0
jmp 0x180009762
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bf90
jmp 0x180009762
movzx ecx, byte [rax]
xor ebx, ebx
inc rax
mov qword [rbp - 0x60], rbx
mov qword [r8], rax
mov byte [rbp - 0x74], cl
lea eax, [rcx - 0x42]
cmp al, 0x27
ja case.default.0x180008e72
movabs rdx, 0x8100000001
bt rdx, rax
jae case.default.0x180008e72
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov r8, qword [rax - 8]
bt r13d, 8
jb 0x18000984e
lea r12d, [rbx + 1]
jmp 0x180009869
mov eax, dword [rbp + 0xa8]
cmp eax, 3
jle 0x180009861
mov r12d, 3
jmp 0x180009869
test eax, eax
cmovs eax, ebx
mov r12d, eax
lea eax, [rcx - 0x42]
test al, 0xdf
je 0x1800099e1
mov r9d, ebx
lea rax, [0x18000e650]
nop
mov r10, qword [rax - 8]
cmp r8, r10
jb 0x18000989b
test r12d, r12d
jg 0x180009975
cmp r8, qword [rax]
jae 0x180009975
inc r9d
add rax, 0x18
cmp r9d, 6
jb 0x180009880
mov r9d, 0xa
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x20], ebx
lea edx, [r9 + 0x46]
call fcn.180006340
mov qword [rbp - 0x70], rax
mov rcx, rax
test r13b, 0x40
je 0x1800098e0
mov byte [rbp + rcx - 0x30], 0x20
inc rcx
mov qword [rbp - 0x70], rcx
cmp byte [rbp - 0x80], 0x63
jne 0x1800098f2
mov byte [rbp + rcx - 0x30], 0x42
inc rcx
mov qword [rbp - 0x70], rcx
cmp rcx, 0x50
jae 0x18000b3ce
mov eax, r13d
mov byte [rbp + rcx - 0x30], bl
and al, 0x82
cmp al, 0x80
jne 0x18000995a
cmp rdi, rcx
jle 0x18000995a
test r13b, 4
lea rcx, [0x18000e890]
lea rax, [0x18000de94]
cmovne rax, rcx
mov qword [rbp - 0x68], rax
nop dword [rax + rax]
mov rdx, rax
mov r8d, 1
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
mov rcx, qword [rbp - 0x70]
dec edi
add rbx, rax
movsxd rax, edi
cmp rax, rcx
mov rax, qword [rbp - 0x68]
jg 0x180009930
mov r8, rcx
lea rdx, [rbp - 0x30]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rax, rbx
jmp 0x180009762
xor edx, edx
mov rax, r8
div r10
mov rsi, rax
test r12d, r12d
je 0x1800099c3
xor edx, edx
mov rax, r8
div r10
cmp r12d, 1
jne 0x18000999a
lea ecx, [r12 + 9]
jmp 0x1800099ad
cmp r12d, 2
mov ecx, 0x3e8
mov r11d, 0x64
cmove ecx, r11d
imul rcx, rdx
mov rax, r10
xor edx, edx
shr rax, 1
add rax, rcx
div r10
mov qword [rbp - 0x60], rax
lea r8, [0x180000000]
mov ecx, r9d
lea rdx, [rcx + rcx*2]
mov rax, qword [r8 + rdx*8 + 0xe640]
mov r8, rsi
jmp 0x180009a78
mov ecx, ebx
lea rax, [0x18000e578]
nop word [rax + rax]
cmp r8, qword [rax - 8]
jb 0x180009a00
test r12d, r12d
jg 0x180009a10
cmp r8, qword [rax]
jae 0x180009a10
inc ecx
add rax, 0x20
cmp ecx, 6
jb 0x1800099f0
jmp 0x1800098a8
mov edx, ecx
test r12d, r12d
je 0x180009a60
mov eax, edx
shl rax, 5
movzx ecx, byte [rax + r10 + 0xe568]
mov eax, 1
shl rax, cl
dec rax
and rax, r8
cmp r12d, 1
jne 0x180009a41
lea r9d, [r12 + 9]
jmp 0x180009a55
cmp r12d, 2
mov r9d, 0x3e8
mov r11d, 0x64
cmove r9d, r11d
imul r9, rax
shr r9, cl
mov qword [rbp - 0x60], r9
shl rdx, 5
movzx ecx, byte [rdx + r10 + 0xe568]
mov rax, qword [rdx + r10 + 0xe560]
shr r8, cl
mov esi, 0x50
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
lea rcx, [rbp - 0x30]
mov edx, esi
mov qword [rbp - 0x40], rax
mov dword [rsp + 0x20], ebx
lea r9d, [rsi - 0x46]
call fcn.180006340
mov rdx, qword [rbp - 0x40]
mov rcx, rax
mov qword [rbp - 0x70], rax
test rdx, rdx
je 0x1800098ce
test r12d, r12d
je 0x180009af9
mov r8, qword [rbp - 0x60]
inc rcx
sub rsi, rcx
mov byte [rbp + rax - 0x30], 0x2e
lea rax, [rbp - 0x30]
mov qword [rbp - 0x70], rcx
mov dword [rsp + 0x30], 0x84
mov rdx, rsi
add rcx, rax
mov dword [rsp + 0x28], ebx
mov r9d, 0xa
mov dword [rsp + 0x20], r12d
call fcn.180006340
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rbp - 0x40]
add rcx, rax
test r13b, 0x40
je 0x180009b07
mov byte [rbp + rcx - 0x30], 0x20
inc rcx
movzx eax, byte [rdx]
mov byte [rbp + rcx - 0x30], al
inc rcx
movzx eax, byte [rdx + 1]
mov qword [rbp - 0x70], rcx
test al, al
je 0x1800098e0
cmp byte [rbp - 0x74], 0x42
je 0x1800098e0
mov byte [rbp + rcx - 0x30], al
jmp 0x1800098d9
mov rdx, qword [r12]
mov r10d, 0x10
mov eax, dword [rbp + 0xa8]
add rdx, 8
test eax, eax
mov qword [r12], rdx
mov ecx, r10d
cmovns ecx, eax
mov r9, qword [rdx - 8]
mov qword [rbp - 0x58], r9
cmp r11b, 0x78
jne 0x180009bdc
mov r12, r9
mov qword [rbp - 0x68], r9
mov esi, r10d
mov qword [rbp - 0x60], rsi
test r9, r9
je 0x18000a179
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x44
je 0x180009eef
cmp dl, 0x64
je 0x180009d12
cmp dl, 0x73
jne case.default.0x180008e72
lea ebx, [rcx - 1]
test ecx, ecx
jle case.default.0x180008e72
movzx eax, byte [r9]
lea rdi, [r9 + 1]
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
mov rcx, r14
cmp r11b, 0x78
jne 0x180009c13
mov dword [rsp + 0x28], eax
lea r12, str._02x
mov qword [rsp + 0x20], r12
call fcn.18000c140
jmp 0x180009c38
add rdx, 8
mov qword [r12], rdx
mov r12, qword [rdx - 8]
mov edx, 0xffffffff
mov qword [rbp - 0x68], r12
cmp r12, rdx
ja 0x180009b69
movsxd rax, ecx
add rax, r12
cmp rax, rdx
ja 0x180009b69
mov esi, 8
jmp 0x180009b6c
mov dword [rsp + 0x38], eax
lea rax, str._0llx:__02x
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
call fcn.18000c140
lea r12, str._02x
mov rsi, rax
test r13d, 0x208
jne 0x180009c8c
test ebx, ebx
jle 0x180009ee7
lea rcx, str.__02x
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], rcx
mov rdx, r15
mov rcx, r14
call fcn.18000c140
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
lea rcx, str.__02x
test ebx, ebx
jg 0x180009c53
mov rax, rsi
jmp 0x180009762
and r13d, 8
test ebx, ebx
jle 0x180009ee7
test r13d, r13d
je 0x180009cd2
nop dword [rax]
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], r12
mov rcx, r14
call fcn.18000c140
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
test ebx, ebx
jg 0x180009ca0
mov rax, rsi
jmp 0x180009762
lea r12, str.:_02x
nop dword [rax]
movzx eax, byte [rdi]
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], r12
mov rcx, r14
call fcn.18000c140
add rsi, rax
lea rdi, [rdi + 1]
dec ebx
test ebx, ebx
jg 0x180009ce0
mov rax, rsi
jmp 0x180009762
xor ebx, ebx
mov r13d, ecx
test edi, edi
mov dword [rbp - 0x7c], ebx
mov edx, ebx
mov esi, ebx
cmovg r10d, edi
mov qword [rbp - 0x50], r10
test ecx, ecx
jle 0x180009ee7
movsxd rax, r10d
lea r12d, [rbx + 3]
mov qword [rbp - 0x70], rax
lea r8, [0x18000de5c]
lea r9, str._s_0llx__04x:
nop dword [rax]
mov dword [rsp + 0x40], edx
lea rax, [0x18000d947]
movsxd rcx, edx
add rcx, qword [rbp - 0x68]
mov qword [rsp + 0x38], rcx
test edx, edx
mov rcx, qword [rbp - 0x60]
mov rdx, r15
cmovne rax, r8
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov qword [rsp + 0x20], r9
mov rcx, r14
xor r9d, r9d
call fcn.18000c140
mov rdx, qword [rbp - 0x50]
add rsi, rax
mov edi, ebx
test edx, edx
jle 0x180009e3f
mov rcx, qword [rbp - 0x58]
mov qword [rbp - 0x40], rcx
nop dword [rax]
mov eax, dword [rbp - 0x7c]
add eax, edi
cmp eax, r13d
jge 0x180009e09
movzx edx, byte [rcx]
test dil, 7
jne 0x180009dce
lea rax, [0x18000e818]
test edi, edi
jne 0x180009dd5
lea rax, str.__02x
mov dword [rsp + 0x28], edx
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, r14
call fcn.18000c140
mov rcx, qword [rbp - 0x40]
add rsi, rax
mov rdx, qword [rbp - 0x50]
inc rcx
inc edi
mov qword [rbp - 0x40], rcx
cmp edi, edx
jl 0x180009db0
jmp 0x180009e3f
cmp edi, edx
jge 0x180009e3f
mov eax, edx
sub eax, edi
mov edi, eax
nop dword [rax]
nop word [rax + rax]
mov r8, r12
lea rdx, [0x18000e828]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
sub rdi, 1
jne 0x180009e20
mov r8d, 1
lea rdx, [0x18000de94]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
mov rcx, qword [rbp - 0x70]
mov rdi, rbx
add rsi, rax
test rcx, rcx
jle 0x180009ec0
mov eax, dword [rbp - 0x7c]
lea rbx, [0x18000e82c]
mov r12, qword [rbp - 0x58]
mov dword [rbp - 0x78], eax
cmp eax, r13d
jge 0x180009eba
movzx eax, byte [rdi + r12]
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x80], al
mov r8d, 1
sub al, 0x20
mov rcx, r15
cmp al, 0x5e
mov rax, r14
cmova rdx, rbx
call qword [case.0x18000bb15.0]
mov rcx, qword [rbp - 0x70]
inc rdi
add rsi, rax
mov eax, dword [rbp - 0x78]
inc eax
mov dword [rbp - 0x78], eax
cmp rdi, rcx
jl 0x180009e78
xor ebx, ebx
lea r12d, [rbx + 3]
mov edx, dword [rbp - 0x7c]
lea r8, [0x18000de5c]
mov rax, qword [rbp - 0x50]
lea r9, str._s_0llx__04x:
add qword [rbp - 0x58], rcx
add edx, eax
mov dword [rbp - 0x7c], edx
cmp edx, r13d
jl 0x180009d50
mov rax, rsi
jmp 0x180009762
xor ebx, ebx
mov edx, ecx
test edi, edi
mov dword [rbp - 0x78], ebx
mov eax, ebx
mov dword [rbp - 0x7c], ebx
cmovg r10d, edi
mov esi, ebx
sub edx, r10d
mov qword [rbp - 0x50], r10
mov dword [rbp - 0x70], edx
mov r13d, ecx
test ecx, ecx
jle 0x180009ee7
movsxd rcx, r10d
lea r12d, [rbx + 3]
mov qword [rbp - 0x40], rcx
lea r8, str.
lea r10, str._n_.s____ditto_x__u_
mov edi, ebx
nop
cmp edi, edx
jge 0x180009f99
test edi, edi
jle 0x180009f99
mov rdx, r9
mov r8, rcx
sub rdx, rcx
mov rcx, r9
call sym.VBoxNetFltNobj.dll_nocrt_memcmp
test eax, eax
mov eax, dword [rbp - 0x78]
jne 0x180009f8b
test eax, eax
jne 0x180009f7d
mov rax, qword [rbp - 0x50]
add eax, edi
cmp eax, dword [rbp - 0x70]
jge 0x180009fca
mov rax, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x40]
mov r8, rdx
lea rcx, [rax + rdx]
mov rdx, rax
call sym.VBoxNetFltNobj.dll_nocrt_memcmp
test eax, eax
jne 0x180009fca
mov eax, dword [rbp - 0x78]
mov rcx, qword [rbp - 0x40]
inc eax
mov dword [rbp - 0x78], eax
jmp 0x18000a146
lea r8, str.
lea r10, str._n_.s____ditto_x__u_
test eax, eax
jle 0x180009fca
mov dword [rsp + 0x38], eax
xor r9d, r9d
mov rax, qword [rbp - 0x60]
mov rdx, r15
mov qword [rsp + 0x30], r8
mov rcx, r14
mov dword [rsp + 0x28], eax
xor r8d, r8d
mov qword [rsp + 0x20], r10
call fcn.18000c140
add rsi, rax
mov dword [rbp - 0x78], ebx
mov dword [rsp + 0x40], edi
lea rdx, [0x18000de5c]
movsxd rcx, edi
lea rax, [0x18000d947]
add rcx, qword [rbp - 0x68]
mov qword [rsp + 0x38], rcx
test edi, edi
mov rcx, qword [rbp - 0x60]
cmovne rax, rdx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea rax, str._s_0llx__04x:
xor r8d, r8d
mov rdx, r15
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.18000c140
add rsi, rax
mov qword [rbp - 0x48], rbx
cmp qword [rbp - 0x40], 0
mov edi, ebx
mov rcx, rbx
jle 0x18000a08d
mov r12, qword [rbp - 0x58]
mov ebx, dword [rbp - 0x7c]
lea eax, [rdi + rbx]
cmp eax, r13d
jge 0x18000a087
movzx edx, byte [rcx + r12]
test dil, 7
jne 0x18000a050
lea rax, [0x18000e818]
test edi, edi
jne 0x18000a057
lea rax, str.__02x
mov dword [rsp + 0x28], edx
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rcx, r14
call fcn.18000c140
mov rcx, qword [rbp - 0x48]
add rsi, rax
inc rcx
inc edi
mov qword [rbp - 0x48], rcx
cmp rcx, qword [rbp - 0x40]
jl 0x18000a032
xor ebx, ebx
lea r12d, [rbx + 3]
mov rax, qword [rbp - 0x50]
cmp edi, eax
jge 0x18000a0bf
sub eax, edi
mov edi, eax
nop dword [rax]
mov r8, r12
lea rdx, [0x18000e828]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
sub rdi, 1
jne 0x18000a0a0
mov r8d, 1
lea rdx, [0x18000de94]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
mov rcx, qword [rbp - 0x40]
mov rdi, rbx
add rsi, rax
test rcx, rcx
jle 0x18000a140
mov eax, dword [rbp - 0x7c]
lea rbx, [0x18000e82c]
mov r12, qword [rbp - 0x58]
mov dword [rbp - 0x48], eax
cmp eax, r13d
jge 0x18000a13a
movzx eax, byte [rdi + r12]
lea rdx, [rbp - 0x80]
mov byte [rbp - 0x80], al
mov r8d, 1
sub al, 0x20
mov rcx, r15
cmp al, 0x5e
mov rax, r14
cmova rdx, rbx
call qword [case.0x18000bb15.0]
mov rcx, qword [rbp - 0x40]
inc rdi
add rsi, rax
mov eax, dword [rbp - 0x48]
inc eax
mov dword [rbp - 0x48], eax
cmp rdi, rcx
jl 0x18000a0f8
xor ebx, ebx
lea r12d, [rbx + 3]
mov eax, dword [rbp - 0x78]
mov edi, dword [rbp - 0x7c]
mov r9, qword [rbp - 0x58]
lea r8, str.
add edi, dword [rbp - 0x50]
lea r10, str._n_.s____ditto_x__u_
mov edx, dword [rbp - 0x70]
add r9, rcx
mov qword [rbp - 0x58], r9
mov dword [rbp - 0x7c], edi
cmp edi, r13d
jl 0x180009f30
mov rax, rsi
jmp 0x180009762
mov r8d, 6
lea rdx, str._null_
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
jmp 0x180009762
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov ecx, dword [rax - 8]
mov rax, qword [r8]
movzx edx, byte [rax]
inc rax
mov qword [r8], rax
cmp dl, 0x61
je 0x18000a224
cmp dl, 0x63
je 0x18000a206
cmp dl, 0x66
je 0x18000a1e8
cmp dl, 0x73
jne case.default.0x180008e72
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bcc0
jmp 0x180009762
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bcc0
jmp 0x180009762
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000ba30
jmp 0x180009762
mov esi, 0x50
lea r9, [rbp - 0x30]
mov r8, r15
mov qword [rsp + 0x20], rsi
mov rdx, r14
call fcn.18000bb20
jmp 0x180009762
xor ebx, ebx
lea rdx, [0x18000e6e9]
mov rcx, r9
mov dword [rbp - 0x70], ebx
mov esi, ebx
mov dword [rbp - 0x7c], ebx
lea r8d, [rbx + 9]
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
mov r8d, eax
test eax, eax
je 0x18000a2da
nop word [rax + rax]
mov edx, dword [rbp - 0x70]
cmp edx, esi
je case.default.0x180008e72
mov eax, dword [rbp - 0x7c]
test r8d, r8d
lea ecx, [rax - 1]
cmovns ecx, edx
inc eax
test r8d, r8d
mov dword [rbp - 0x70], ecx
cmovns esi, eax
cmp ecx, esi
jl case.default.0x180008e72
mov eax, ecx
sub eax, esi
cdq
sub eax, edx
sar eax, 1
add eax, esi
movsxd rcx, eax
mov dword [rbp - 0x7c], eax
lea rax, [0x180000000]
lea rdx, [rcx + rcx*2]
mov rcx, qword [rbp - 0x68]
movzx r8d, byte [rax + rdx*8 + 0xe6e8]
lea rdx, [rdx*8 + 0xe6e9]
add rdx, rax
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
mov r8d, eax
test eax, eax
jne 0x18000a270
movsxd rax, dword [rbp - 0x7c]
lea r8, [0x180000000]
lea rcx, [rax + rax*2]
lea rdx, [rcx*8]
mov rcx, qword [rbp - 0x60]
movzx eax, byte [rdx + r8 + 0xe6e8]
dec rax
add qword [rcx], rax
cmp byte [rdx + r8 + 0xe6f7], 8
jne 0x18000a31f
mov rbx, qword [r12]
add rbx, 8
mov qword [r12], rbx
mov rbx, qword [rbx - 8]
test byte [rdx + r8 + 0xe6f8], 1
je 0x18000a36c
cmp rbx, 0x1000
jb 0x18000a342
movabs rax, 0xffff800000000000
test rax, rbx
je 0x18000a36c
lea rax, str._BadRD
mov r8d, 6
mov dword [rsp + 0x40], r8d
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
jmp 0x1800090f1
cmp dword [rdx + r8 + 0xe6fc], 0
jne case.default.0x180008e72
mov rax, qword [rbx]
mov qword [rsp + 0x28], rax
lea rax, str._lld_ns
jmp 0x180008f1a
movzx r9d, byte [rdx]
mov byte [rbp - 0x74], r9b
lea eax, [r9 - 0x61]
test al, 0xfb
je 0x18000a915
cmp r9b, 0x6a
jne 0x18000a6d7
movzx ecx, byte [rdx + 1]
lea rax, [rdx + 2]
mov qword [r8], rax
cmp cl, 0x73
jne case.default.0x180008e72
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x70], rcx
cmp rcx, 0x1000
jb 0x18000a3ed
movabs rax, 0xffff800000000000
test rax, rcx
je 0x18000a3f8
lea rcx, [0x18000e8ac]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.18000c170
mov r12, rax
mov qword [rbp - 0x60], rax
mov rax, r14
lea rdx, [0x18000e8b4]
mov r8d, 1
mov rcx, r15
call qword [case.0x18000bb15.0]
mov rsi, rax
lea rax, [0x18000de94]
test r13b, 2
jne 0x18000a46c
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, r12
jl 0x18000a46c
mov rdx, rax
mov r8d, 1
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
add rsi, rax
dec edi
movsxd rax, edi
cmp rax, r12
lea rax, [0x18000de94]
jge 0x18000a440
mov dword [rbp - 0x78], edi
xor ebx, ebx
mov ecx, ebx
test r12, r12
jle 0x18000a67e
mov r13, qword [rbp - 0x70]
lea r12d, [rbx + 6]
mov rdi, qword [rbp - 0x60]
mov r9d, 0xfffd
nop dword [rax + rax]
movzx eax, byte [rbx + r13]
lea rdx, [rbx + r13]
mov qword [rbp - 0x68], rdx
mov byte [rbp - 0x80], al
cmp al, 0x1f
jbe 0x18000a4b4
cmp al, 0x22
je 0x18000a4b4
cmp al, 0x5c
je 0x18000a4b4
inc rbx
jmp 0x18000a650
cmp rcx, rbx
jge 0x18000a4e0
lea rdx, [rcx + r13]
mov r8, rbx
sub r8, rcx
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
mov rdx, qword [rbp - 0x68]
mov r9d, 0xfffd
add rsi, rax
movzx eax, byte [rbp - 0x80]
movsx eax, al
add eax, 0xfffffff8
cmp eax, 0x54
ja case.0x18000a50c.15
lea r8, [0x180000000]
cdqe
movzx eax, byte [r8 + rax + 0xb4b0]
mov ecx, dword [r8 + rax*4 + 0xb490]
add rcx, r8
jmp rcx
mov r8d, 2
lea rdx, [0x18000e8f0]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e8f4]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e8f8]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e8fc]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e900]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e904]
jmp 0x18000a635
mov r8d, 2
lea rdx, [0x18000e908]
jmp 0x18000a635
mov dword [rbp - 0x7c], r9d
mov qword [rbp - 0x68], rdx
movzx eax, byte [rdx]
test al, al
js 0x18000a5a5
lea rbx, [rdx + 1]
mov qword [rbp - 0x68], rbx
jmp 0x18000a5bd
lea rdx, [rbp - 0x7c]
lea rcx, [rbp - 0x68]
call fcn.180005540
test eax, eax
mov eax, dword [rbp - 0x7c]
js 0x18000a5c3
mov rbx, qword [rbp - 0x68]
sub rbx, r13
dec rbx
cmp eax, 0xfffe
mov word [rbp - 0x30], 0x755c
lea rdx, [0x180000000]
mov byte [rbp - 0x2a], 0
mov ecx, 0xfffd
mov r8, r12
cmovae eax, ecx
mov ecx, eax
mov dword [rbp - 0x7c], eax
shr rax, 0xc
and eax, 0xf
movzx eax, byte [rax + rdx + 0x301c0]
mov byte [rbp - 0x2e], al
mov eax, ecx
shr rax, 8
and eax, 0xf
movzx eax, byte [rax + rdx + 0x301c0]
mov byte [rbp - 0x2d], al
mov eax, ecx
shr rax, 4
and eax, 0xf
and ecx, 0xf
movzx eax, byte [rax + rdx + 0x301c0]
mov byte [rbp - 0x2c], al
movzx eax, byte [rcx + rdx + 0x301c0]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x2b], al
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
mov r9d, 0xfffd
inc rbx
mov rcx, rbx
cmp rbx, rdi
jl 0x18000a490
mov edi, dword [rbp - 0x78]
cmp rcx, rbx
jge 0x18000a67a
sub rbx, rcx
lea rdx, [rcx + r13]
mov r8, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
mov r12, qword [rbp - 0x60]
dec edi
movsxd rax, edi
cmp rax, r12
jl 0x18000a6b6
nop dword [rax + rax]
mov r8d, 1
lea rdx, [0x18000de94]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x18000a690
mov r8d, 1
lea rdx, [0x18000e8b4]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rax, rsi
jmp 0x180009762
cmp r9b, 0x70
jne case.default.0x180008e72
movzx r9d, byte [rdx + 1]
mov rax, qword [r12]
add rax, 8
mov byte [rbp - 0x80], r9b
mov qword [r12], rax
mov rcx, qword [rax - 8]
add qword [r8], 2
mov qword [rbp - 0x70], rcx
cmp r9b, 0x70
jne 0x18000a70e
mov byte [rbp - 0x7c], 0x2f
jmp 0x18000a748
cmp r9b, 0x71
mov edx, 0x7e
mov r8d, 0x2b
cmove edx, r8d
mov dword [rbp - 0x7c], edx
cmp r9b, 0x61
je 0x18000a748
mov byte [rbp - 0x7c], dl
mov qword [rbp - 0x70], rcx
cmp r9b, 0x71
je 0x18000a748
mov byte [rbp - 0x7c], dl
mov qword [rbp - 0x70], rcx
cmp r9b, 0x66
jne case.default.0x180008e72
cmp rcx, 0x1000
jb 0x18000a760
movabs rax, 0xffff800000000000
test rax, rcx
je 0x18000a76b
lea rcx, [0x18000e8ac]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.18000c170
test r13b, 2
mov r12d, 3
mov r13, rax
jne 0x18000a7c3
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, rax
jl 0x18000a7c3
nop dword [rax]
nop word [rax + rax]
mov r8, r12
lea rdx, [0x18000e90c]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
movsxd rax, edi
cmp rax, r13
jge 0x18000a7a0
mov dword [rbp - 0x78], edi
xor ebx, ebx
mov edx, ebx
test r13, r13
jle 0x18000a8e1
mov rdi, qword [rbp - 0x70]
nop dword [rax]
nop dword [rax + rax]
movzx esi, byte [rdi + rbx]
movsx ecx, sil
lea eax, [rcx - 0x61]
cmp eax, 0x1a
jb 0x18000a8b7
lea eax, [rcx - 0x41]
cmp eax, 0x1a
jb 0x18000a8b7
lea eax, [rcx - 0x30]
cmp eax, 0xa
jb 0x18000a8b7
lea eax, [rsi - 0x2d]
cmp al, 1
jbe 0x18000a8b7
cmp sil, 0x5f
je 0x18000a8b7
cmp sil, 0x7e
je 0x18000a8b7
cmp sil, byte [rbp - 0x7c]
je 0x18000a8b7
cmp rdx, rbx
jge 0x18000a84f
mov r8, rbx
mov rcx, r15
sub r8, rdx
mov rax, r14
add rdx, rdi
call qword [case.0x18000bb15.0]
cmp sil, 0x20
jne 0x18000a86a
cmp byte [rbp - 0x80], 0x66
jne 0x18000a86a
mov r8d, 1
lea rdx, [0x18000e910]
jmp 0x18000a8a3
lea rdx, [0x180000000]
mov byte [rbp - 0x30], 0x25
mov rcx, rsi
mov byte [rbp - 0x2d], 0
mov rax, rsi
mov r8, r12
shr rax, 4
and ecx, 0xf
movzx eax, byte [rax + rdx + 0x301d8]
mov byte [rbp - 0x2f], al
movzx eax, byte [rcx + rdx + 0x301d8]
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x2e], al
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
inc rbx
mov rdx, rbx
jmp 0x18000a8ba
inc rbx
cmp rbx, r13
jl 0x18000a7e0
mov edi, dword [rbp - 0x78]
cmp rdx, rbx
jge 0x18000a8e1
sub rbx, rdx
mov rcx, r15
add rdx, qword [rbp - 0x70]
mov r8, rbx
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
movsxd rax, edi
cmp rax, r13
jl case.default.0x180008e72
nop
mov r8, r12
lea rdx, [0x18000e90c]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
movsxd rax, edi
cmp rax, r13
jge 0x18000a8f0
jmp case.default.0x180008e72
movzx ecx, byte [rdx + 1]
lea rax, [rdx + 2]
mov qword [r8], rax
cmp cl, 0x73
jne case.default.0x180008e72
cmp r9b, 0x61
lea rcx, str.____n_r
lea rax, [0x18000e700]
cmove rax, rcx
xor ebx, ebx
mov qword [rbp - 0x50], rax
cmp r9b, 0x61
mov eax, ebx
mov esi, ebx
sete al
add rax, 5
mov qword [rbp - 0x40], rax
mov rax, qword [r12]
add rax, 8
mov qword [r12], rax
mov rcx, qword [rax - 8]
mov qword [rbp - 0x70], rcx
cmp rcx, 0x1000
jb 0x18000a984
movabs rax, 0xffff800000000000
test rax, rcx
je 0x18000a98f
lea rcx, [0x18000e8ac]
mov qword [rbp - 0x70], rcx
mov edx, dword [rbp + 0xa8]
call fcn.18000c170
cmp byte [rbp - 0x74], 0x61
mov r12, rax
mov qword [rbp - 0x60], rax
jne 0x18000a9c3
mov r8d, 1
lea rdx, [0x18000e8b4]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
mov rsi, rax
test r13b, 2
jne 0x18000aa07
dec edi
movsxd rcx, edi
mov dword [rbp - 0x78], edi
cmp rcx, r12
jl 0x18000aa07
lea rbx, [0x18000de94]
nop dword [rax]
mov r8d, 1
mov rdx, rbx
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x18000a9e0
mov dword [rbp - 0x78], edi
xor ebx, ebx
test r12, r12
jle 0x18000ab41
mov r13, qword [rbp - 0x70]
mov eax, 1
sub rax, r13
mov r12d, 6
mov qword [rbp - 0x58], rax
mov rdi, rbx
nop dword [rax]
movsx edx, byte [rbx + r13]
lea rax, [rbx + r13]
mov r8, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x50]
call sym.VBoxNetFltNobj.dll_nocrt_memchr
test rax, rax
je 0x18000ab07
cmp rdi, rbx
jge 0x18000aa6d
mov r8, rbx
lea rdx, [rdi + r13]
sub r8, rdi
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
movsx eax, byte [rbx + r13]
lea rdi, [rbx + r13]
add eax, 0xfffffff6
cmp eax, 0x34
ja case.0x18000aa9d.17
lea rdx, [0x180000000]
cdqe
movzx eax, byte [rdx + rax + 0xb528]
mov ecx, dword [rdx + rax*4 + 0xb508]
add rcx, rdx
jmp rcx
mov r8d, 4
lea rdx, str.lt_
jmp 0x18000aaf4
mov r8d, 4
lea rdx, str.gt_
jmp 0x18000aaf4
lea rdx, str.amp_
jmp 0x18000aaee
mov r8, r12
lea rdx, str.apos_
jmp 0x18000aaf4
mov r8, r12
lea rdx, str.quot_
jmp 0x18000aaf4
lea rdx, str.xA_
jmp 0x18000aaee
lea rdx, str.xD_
mov r8d, 5
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
add rdi, qword [rbp - 0x58]
inc rbx
cmp rbx, qword [rbp - 0x60]
jl 0x18000aa30
mov qword [rbp - 0x68], rdi
cmp rdi, rbx
mov edi, dword [rbp - 0x78]
jge 0x18000ab3d
mov rax, qword [rbp - 0x68]
mov rcx, r15
sub rbx, rax
mov r8, rbx
lea rdx, [rax + r13]
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
mov r12, qword [rbp - 0x60]
dec edi
movsxd rax, edi
cmp rax, r12
jl 0x18000ab76
nop dword [rax + rax]
mov r8d, 1
lea rdx, [0x18000de94]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
dec edi
add rsi, rax
movsxd rax, edi
cmp rax, r12
jge 0x18000ab50
cmp byte [rbp - 0x74], 0x61
jne 0x18000ab98
mov r8d, 1
lea rdx, [0x18000e8b4]
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
add rsi, rax
mov rax, rsi
jmp 0x180009762
xor ebx, ebx
mov rcx, rdx
mov edi, ebx
nop word [rax + rax]
movzx eax, byte [rcx]
inc rcx
mov qword [rbp - 0x68], rcx
test al, al
je case.default.0x180008e72
cmp al, 0x5b
jne 0x18000abb0
movzx eax, byte [rcx]
mov r9, rbx
test al, al
je case.default.0x180008e72
cmp al, 0x5d
je 0x18000abea
movzx eax, byte [r9 + rcx + 1]
inc r9
test al, al
jne 0x18000abd4
jmp case.default.0x180008e72
lea rax, [rcx + 1]
add rax, r9
mov qword [r8], rax
mov rax, rcx
sub rax, rdx
cmp rax, 4
jne 0x180009417
cmp byte [rdx], 0x78
jne 0x180009417
cmp byte [rdx + 1], 0x38
jne 0x180009417
cmp byte [rdx + 2], 0x36
jne 0x180009417
cmp r9, 3
jne 0x180009417
mov rdx, rcx
mov r8, r9
lea rcx, [0x18000e914]
mov rsi, r9
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
test eax, eax
jne 0x18000af18
mov rax, qword [r12]
lea r9d, [rsi + 5]
add rax, 8
lea r8d, [rsi + 0xd]
mov qword [r12], rax
lea rcx, [rbp - 0x30]
bts r13d, 0xe
mov r12, qword [rax - 8]
mov eax, r13d
or eax, 4
mov rdx, r12
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
mov rbx, rax
test r12b, 1
je 0x18000acc3
mov r8, rsi
lea rdx, [0x18000e918]
mov rcx, r15
lea edi, [rsi - 2]
mov rax, r14
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffe
and r12, rax
test r12b, 2
je 0x18000acf9
mov eax, edi
lea rdx, [0x18000e91c]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ace8
lea rdx, [0x18000e920]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffd
and r12, rax
test r12b, 4
je 0x18000ad2f
mov eax, edi
lea rdx, [0x18000e924]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ad1e
lea rdx, [0x18000e928]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffb
and r12, rax
test r12b, 8
je 0x18000ad65
mov eax, edi
lea rdx, [0x18000e92c]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ad54
lea rdx, [0x18000e930]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffff7
and r12, rax
test r12b, 0x10
je 0x18000ad9b
mov eax, edi
lea rdx, [0x18000e934]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ad8a
lea rdx, [0x18000e938]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffffef
and r12, rax
test r12b, 0x20
je 0x18000add1
mov eax, edi
lea rdx, [0x18000e93c]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000adc0
lea rdx, [0x18000e940]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffffdf
and r12, rax
bt r12, 0x10
jae 0x18000ae08
mov eax, edi
lea rdx, [0x18000e944]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000adf7
lea rdx, [0x18000e948]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffeffff
and r12, rax
bt r12, 0x12
jae 0x18000ae3f
mov eax, edi
lea rdx, [0x18000e94c]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ae2e
lea rdx, [0x18000e950]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffbffff
and r12, rax
bt r12, 0x1d
jae 0x18000ae76
mov eax, edi
lea rdx, [0x18000e954]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ae65
lea rdx, [0x18000e958]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xdfffffff
and r12, rax
bt r12, 0x1e
jae 0x18000aead
mov eax, edi
lea rdx, [0x18000e95c]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000ae9c
lea rdx, [0x18000e960]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xbfffffff
and r12, rax
bt r12, 0x1f
jae 0x18000aee1
mov eax, edi
lea rdx, [0x18000e964]
inc edi
mov r8, rsi
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000aed3
lea rdx, [0x18000e968]
call qword [case.0x18000bb15.0]
add rbx, rax
btr r12d, 0x1f
test r12, r12
je 0x18000b3b4
test edi, edi
lea rax, str.unkn
lea rdx, str._unkn
mov r8d, 6
cmove rdx, rax
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
mov rdx, r12
jmp 0x18000b379
mov rdx, qword [rbp - 0x68]
lea rcx, [0x18000e980]
mov r8, rsi
call sym.VBoxNetFltNobj.dll_nocrt_strncmp
test eax, eax
jne 0x180009417
mov rax, qword [r12]
lea rcx, [rbp - 0x30]
add rax, 8
mov r9d, 8
mov qword [r12], rax
bts r13d, 0xe
mov rsi, qword [rax - 8]
lea r8d, [r9 + 8]
mov eax, r13d
mov rdx, rsi
or eax, 4
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0xffffffff
call fcn.180006ff0
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
mov rbx, rax
test sil, 1
je 0x18000afb3
mov edi, 1
lea rdx, str.VME
mov rcx, r15
mov rax, r14
lea r8d, [rdi + 3]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffe
and rsi, rax
test sil, 2
je 0x18000afec
mov eax, edi
lea rdx, str.PVI
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000afdb
lea rdx, str._PVI
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffd
and rsi, rax
test sil, 4
je 0x18000b025
mov eax, edi
lea rdx, str.TSD
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b014
lea rdx, str._TSD
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffffb
and rsi, rax
test sil, 8
je 0x18000b05e
mov eax, edi
lea rdx, [0x18000e92c]
inc edi
mov r8d, 3
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b04d
lea rdx, [0x18000e930]
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffff7
and rsi, rax
test sil, 0x10
je 0x18000b097
mov eax, edi
lea rdx, str.PSE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b086
lea rdx, str._PSE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffffef
and rsi, rax
test sil, 0x20
je 0x18000b0d0
mov eax, edi
lea rdx, str.PAE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b0bf
lea rdx, str._PAE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffffdf
and rsi, rax
test sil, 0x40
je 0x18000b109
mov eax, edi
lea rdx, str.MCE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b0f8
lea rdx, str._MCE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffffbf
and rsi, rax
test sil, sil
jns 0x18000b141
mov eax, edi
lea rdx, str.PGE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b130
lea rdx, str._PGE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffff7f
and rsi, rax
bt rsi, 8
jae 0x18000b17b
mov eax, edi
lea rdx, str.PCE
inc edi
mov r8d, 4
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b16a
lea rdx, str._PCE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffeff
and rsi, rax
bt rsi, 9
jae 0x18000b1b5
mov eax, edi
lea rdx, str.OSFXSR
inc edi
mov r8d, 7
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b1a4
lea rdx, str._OSFXSR
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffdff
and rsi, rax
bt rsi, 0xa
jae 0x18000b1ef
mov eax, edi
lea rdx, str.OSXMMEEXCPT
inc edi
mov r8d, 0xc
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b1de
lea rdx, str._OSXMMEEXCPT
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffffbff
and rsi, rax
bt rsi, 0xd
jae 0x18000b229
mov eax, edi
lea rdx, str.VMXE
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b218
lea rdx, str._VMXE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffdfff
and rsi, rax
bt rsi, 0xe
jae 0x18000b263
mov eax, edi
lea rdx, str.SMXE
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b252
lea rdx, str._SMXE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffffbfff
and rsi, rax
mov r12d, 6
bt rsi, 0x11
jae 0x18000b2a0
mov eax, edi
lea rdx, str.PCIDE
inc edi
mov r8d, r12d
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b28f
lea rdx, str._PCIDE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffdffff
and rsi, rax
bt rsi, 0x12
jae 0x18000b2da
mov eax, edi
lea rdx, str.OSXSAVE
inc edi
mov r8d, 8
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b2c9
lea rdx, str._OSXSAVE
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xfffbffff
and rsi, rax
bt rsi, 0x14
jae 0x18000b314
mov eax, edi
lea rdx, str.SMEP
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b303
lea rdx, str._SMEP
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffefffff
and rsi, rax
bt rsi, 0x15
jae 0x18000b34e
mov eax, edi
lea rdx, str.SMAP
inc edi
mov r8d, 5
test eax, eax
mov rcx, r15
mov rax, r14
je 0x18000b33d
lea rdx, str._SMAP
call qword [case.0x18000bb15.0]
add rbx, rax
mov eax, 0xffdfffff
and rsi, rax
test rsi, rsi
je 0x18000b3b4
test edi, edi
lea rax, str.unkn
lea rdx, str._unkn
mov r8, r12
cmove rdx, rax
mov rcx, r15
mov rax, r14
call qword [case.0x18000bb15.0]
mov rdx, rsi
mov r9d, 1
mov dword [rsp + 0x28], r13d
lea rcx, [rbp - 0x30]
mov dword [rsp + 0x20], 0xffffffff
add rbx, rax
lea r8d, [r9 + 0xf]
call fcn.180006ff0
movsxd r8, eax
lea rdx, [rbp - 0x30]
mov rax, r14
mov rcx, r15
call qword [case.0x18000bb15.0]
add rbx, rax
inc edi
test edi, edi
je 0x180009417
mov r8d, 1
lea rdx, [0x18000e97c]
jmp 0x180009408
call fcn.180001259
int3