Function at 0x1800ecea4
Capabilities:
Parse credit card information

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
mov r15d, dword [r8]
xor r13d, r13d
mov dword [rsp + 0x88], r13d
mov rsi, rdx
mov r12, rcx
test rdx, rdx
jne 0x1800ecee1
mov edi, r13d
jmp 0x1800ecef2
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
and edi, 0x3fffffff
test r15b, 0x40
jne 0x1800ecf05
cmp byte [0x18015ae26], r13b
je 0x1800ed35c
mov r14d, 5
cmp edi, r14d
jb 0x1800ed35c
mov r8d, r14d
lea rdx, str.file:
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800ed35c
or r15d, 0x40
mov r8d, edi
mov dword [rsp + 0x20], r15d
mov ebp, r13d
lea ecx, [rdi + 8]
test edi, edi
je 0x1800ecf5c
mov rdx, r13
cmp byte [rdx + rsi], 0x26
mov rax, r13
sete al
inc rdx
add rcx, rax
cmp rdx, r8
jl 0x1800ecf47
call fcn.1800a40b8
mov rbx, rax
test rax, rax
je 0x1800ed36c
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
mov dl, 0x2f
add rbx, 4
mov edi, r14d
cmp byte [rsi + 5], dl
jne 0x1800ecff3
cmp byte [rsi + 6], dl
jne 0x1800ecff3
lea r14, [rsi + 7]
mov edi, 7
mov al, byte [r14]
test al, al
je 0x1800ecff3
mov rcx, r14
cmp al, dl
je 0x1800ecfb0
inc rcx
inc edi
mov al, byte [rcx]
test al, al
jne 0x1800ecfa1
cmp edi, 7
je 0x1800ecff3
cmp edi, 0x10
jne 0x1800ecfd1
lea r8d, [rdi - 7]
mov rdx, r14
lea rcx, str.localhost
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800ecff3
lea edx, [rdi - 7]
mov dword [rsp + 0x88], 1
mov r8, r14
lea rcx, str.invalid_uri_authority:__.s
call fcn.1800a3ee8
jmp 0x1800ed3e7
movsxd rax, edi
mov r9d, r13d
mov cl, byte [rax + rsi]
test cl, cl
je 0x1800ed177
mov r11, rbx
lea r14, [rbx - 1]
lea r12, [0x18013ff00]
movsxd r8, edi
cmp cl, 0x23
je 0x1800ed160
inc edi
cmp cl, 0x25
jne 0x1800ed0db
movsxd rax, edi
movzx edx, byte [rax + rsi]
test byte [rdx + r12], 8
je 0x1800ed0db
movsxd rax, edi
movzx r10d, byte [rax + rsi + 1]
test byte [r10 + r12], 8
je 0x1800ed0db
movsx eax, dl
add edi, 2
sar eax, 6
and al, 1
movsx r8d, r10b
movzx eax, al
imul ecx, eax, 7
sar r8d, 6
and r8b, 1
movzx eax, r8b
sub dl, cl
imul ecx, eax, 7
mov al, r10b
and edx, 0xf
add edx, edx
sub al, cl
and eax, 0xf
lea ecx, [rax + rdx*8]
test ecx, ecx
jne 0x1800ed147
movsxd rcx, edi
add rcx, rsi
jmp 0x1800ed0d3
cmp al, 0x23
je 0x1800ed152
test r9d, r9d
jne 0x1800ed0aa
cmp al, 0x3f
je 0x1800ed152
cmp r9d, 1
jne 0x1800ed0c0
cmp al, 0x3d
je 0x1800ed152
cmp al, 0x26
je 0x1800ed152
cmp r9d, 2
jne 0x1800ed0ce
cmp al, 0x26
je 0x1800ed152
inc edi
inc rcx
mov al, byte [rcx]
test al, al
jne 0x1800ed095
jmp 0x1800ed152
cmp r9d, 1
jne 0x1800ed129
mov dl, 0x26
cmp cl, dl
je 0x1800ed0ec
cmp cl, 0x3d
jne 0x1800ed147
cmp byte [r14], r13b
jne 0x1800ed110
lea rcx, [rsi + 1]
add rcx, r8
jmp 0x1800ed108
cmp al, 0x23
je 0x1800ed152
cmp byte [rcx - 1], dl
je 0x1800ed152
inc edi
inc rcx
mov al, byte [rcx]
test al, al
jne 0x1800ed0fa
jmp 0x1800ed152
cmp cl, dl
jne 0x1800ed121
inc ebp
mov byte [r11], r13b
inc r14
inc r11
jmp 0x1800ed144
mov r9d, 2
jmp 0x1800ed144
test r9d, r9d
jne 0x1800ed133
cmp cl, 0x3f
je 0x1800ed13e
cmp r9d, 2
jne 0x1800ed147
cmp cl, 0x26
jne 0x1800ed147
mov r9d, 1
mov cl, r13b
inc ebp
mov byte [r11], cl
inc r14
inc r11
movsxd rax, edi
mov cl, byte [rax + rsi]
test cl, cl
jne 0x1800ed012
mov r12, qword [rsp + 0x80]
cmp r9d, 1
jne 0x1800ed177
movsxd rax, ebp
inc ebp
mov byte [rax + rbx], r13b
xor edx, edx
movsxd rcx, ebp
add rcx, rbx
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
test rbx, rbx
jne 0x1800ed192
mov rax, r13
jmp 0x1800ed19f
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
and eax, 0x3fffffff
lea rdi, [rax + 1]
add rdi, rbx
jmp 0x1800ed31b
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
and esi, 0x3fffffff
lea ebp, [rsi + 1]
add rbp, rdi
jne 0x1800ed1d0
mov dword [rsp + 0x24], r13d
mov qword [rsp + 0x28], r13
jmp 0x1800ed1ef
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rax
and eax, 0x3fffffff
and ecx, 0x3fffffff
mov dword [rsp + 0x24], eax
mov qword [rsp + 0x28], rcx
cmp esi, 3
jne 0x1800ed21e
mov r8d, esi
lea rcx, [0x18014952c]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800ed308
mov r12, rbp
mov qword [rsp + 0x80], rbp
jmp 0x1800ed310
cmp esi, 5
jne 0x1800ed255
mov r8d, esi
lea rcx, str.cache
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800ed308
mov edi, 0x60000
lea r14, str.shared
mov r15d, edi
lea rdx, str.cache
jmp 0x1800ed28e
cmp esi, 4
jne 0x1800ed308
mov r8d, esi
lea rcx, str.mode
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800ed308
mov edi, 0x87
lea r14, [0x18015ded0]
and r15d, edi
lea rdx, str.access
mov r12, qword [r14]
mov rsi, r13
test r12, r12
je 0x1800ed348
mov rcx, r12
mov r13, rdx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, dword [rsp + 0x24]
and eax, 0x3fffffff
cmp ecx, eax
jne 0x1800ed2c7
mov r8d, ecx
mov rdx, r12
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1800ed2d9
inc rsi
mov rdx, r13
mov rax, rsi
add rax, rax
mov r12, qword [r14 + rax*8]
jmp 0x1800ed294
add rsi, rsi
mov rdx, r13
mov ecx, dword [r14 + rsi*8 + 8]
test ecx, ecx
je 0x1800ed348
mov eax, ecx
btr eax, 7
cmp eax, r15d
jg 0x1800ed329
mov r15d, dword [rsp + 0x20]
not edi
and r15d, edi
or r15d, ecx
mov dword [rsp + 0x20], r15d
xor r13d, r13d
mov r12, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x28]
inc rdi
add rdi, rbp
cmp byte [rdi], r13b
jne 0x1800ed1ab
jmp 0x1800ed3b5
mov dword [rsp + 0x88], 3
lea rcx, str._s_mode_not_allowed:__s
mov r8, rbp
call fcn.1800a3ee8
jmp 0x1800ed3e7
mov dword [rsp + 0x88], 1
lea rcx, str.no_such__s_mode:__s
jmp 0x1800ed33b
lea ecx, [rdi + 8]
call fcn.1800a40b8
mov rbx, rax
test rax, rax
jne 0x1800ed376
mov eax, 7
jmp 0x1800ed41c
mov ebp, 4
xor edx, edx
mov r8d, ebp
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
add rbx, rbp
test edi, edi
je 0x1800ed39d
mov r8d, edi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, edi
mov r8, rbp
add rcx, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
and r15d, 0xffffffbf
mov dword [rsp + 0x20], r15d
mov rcx, r12
call fcn.1800956f8
mov rcx, qword [rsp + 0x98]
mov qword [rcx], rax
test rax, rax
jne 0x1800ed3fc
mov rdx, r12
mov dword [rsp + 0x88], 1
lea rcx, str.no_such_vfs:__s
call fcn.1800a3ee8
mov rcx, qword [rsp + 0xa8]
mov qword [rcx], rax
mov rcx, rbx
call fcn.1800a4af4
xor ebx, ebx
mov rcx, qword [rsp + 0x90]
mov eax, dword [rsp + 0x20]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xa0]
mov eax, dword [rsp + 0x88]
mov qword [rcx], rbx
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret