Function at 0x140412cd0
Capabilities:
Check for software breakpoints
Parse credit card information

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rax, qword [r9]
mov r12d, dword [rsp + 0x90]
mov rdi, rcx
mov rbx, rdx
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rbp, r8
mov rsi, r9
call fcn.140410530
test eax, eax
jne 0x140412d42
mov rax, qword [rsi]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140412e8b
mov r8, qword [rax + 0x10]
xor eax, eax
cmp byte [r8], 0x3a
je case.0x140412f41.56
cmp rcx, rax
je 0x140412e8b
mov dil, byte [r8 + rax]
lea edx, [rdi - 0x41]
cmp dl, 0x19
jbe case.0x140412f41.56
inc rax
jmp 0x140412d24
mov rcx, qword [rsi + 8]
mov eax, dword [rsi + 0x10]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
cmp eax, 5
je 0x140412daf
jg 0x140412d6b
cmp eax, 1
je 0x140412d7e
cmp eax, 3
je 0x140412d88
test eax, eax
je 0x140412d92
jmp 0x140412e59
cmp eax, 0x25
je 0x140412d92
cmp eax, 0x42
je 0x140412e30
jmp 0x140412e59
call fcn.1404105d0
jmp 0x140412e72
call fcn.140410600
jmp 0x140412e72
cmp byte [rdi + 0xb1c], 0
jne 0x140412da5
cmp byte [rbp + 0xc], 5
jne 0x140412e59
call fcn.140410500
jmp 0x140412e72
test rdx, rdx
jne 0x140412ddc
mov rax, qword [rsi]
cmp qword [rax + 0x18], 0
jne 0x140412e7e
mov r8d, 0x1a8
lea rdx, str.nghttp2_lib_nghttp2_http.c
lea rcx, str.nv__name__len___0
call qword [sym.imp.msvcrt.dll__assert]
mov al, byte [rcx]
and eax, 0xffffffdf
sub eax, 0x41
cmp al, 0x19
ja 0x140412db4
add rdx, rcx
lea rax, [rcx + 1]
movabs r9, 0x3ff680000000000
cmp rdx, rax
je 0x140412e29
mov cl, byte [rax]
mov r8d, ecx
and r8d, 0xffffffdf
sub r8d, 0x41
cmp r8b, 0x19
jbe 0x140412e24
cmp cl, 0x39
ja 0x140412e70
mov r10, r9
shr r10, cl
mov rcx, r10
and cl, 1
je 0x140412e70
inc rax
jmp 0x140412df9
mov eax, 1
jmp 0x140412e72
test byte [rbx + 0xd8], 0x40
je 0x140412e59
xor eax, eax
cmp rax, rdx
je 0x140412db4
mov r8b, byte [rcx + rax]
cmp r8b, 0x20
je 0x140412e54
cmp r8b, 9
jne 0x140412e59
inc rax
jmp 0x140412e3b
test byte [rbx + 0xd8], 0x40
je 0x140412e69
call fcn.140410570
jmp 0x140412e72
call fcn.1404105a0
jmp 0x140412e72
xor eax, eax
mov rdx, qword [rsi]
test eax, eax
jne 0x140412ea4
jmp 0x140412db4
mov rax, qword [rax + 0x10]
cmp byte [rax], 0x3a
je case.0x140412f41.56
mov eax, dword [rbx + 0xd4]
or eax, 0x40
mov dword [rbx + 0xd4], eax
mov eax, 0xffffff97
jmp 0x14041336e
mov r13, qword [rdx + 0x10]
cmp byte [rdi + 0xb1c], 0
mov dl, byte [r13]
jne 0x140412ec3
cmp byte [rbp + 0xc], 5
jne 0x1404131fa
xor ecx, ecx
jmp 0x140412ecf
xor ecx, ecx
cmp byte [rdi + 0xb19], 0
setne cl
cmp dl, 0x3a
jne 0x140412eea
test r12d, r12d
jne case.0x140412f41.56
test byte [rbx + 0xd4], 0x40
jne case.0x140412f41.56
mov eax, dword [rsi + 0x10]
cmp eax, 0x25
je 0x140413108
jg 0x140412f27
cmp eax, 3
je 0x14041301f
jg 0x140412f10
test eax, eax
je 0x140412f43
dec eax
je 0x140412f4e
jmp case.0x140412f41.57
cmp eax, 5
je 0x140413077
cmp eax, 0x1b
je 0x140413110
jmp case.0x140412f41.57
sub eax, 0x38
cmp eax, 0xb
ja case.0x140412f41.57
lea r8, [0x140616790]
movsxd rax, dword [r8 + rax*4]
add rax, r8
jmp rax
mov r8d, 1
jmp 0x1404130f6
mov r8d, 4
mov rdx, rsi
mov rcx, rbx
call fcn.1403c9610
test eax, eax
je case.0x140412f41.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
cmp rdx, 4
je 0x140412f80
cmp rdx, 7
je 0x140412fad
jmp 0x1404131eb
mov rdx, qword [rax + 0x10]
mov r8d, 4
lea rcx, str.HEAD
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1404131eb
or dword [rbx + 0xd4], 0x100
jmp 0x1404131eb
mov rdx, qword [rax + 0x10]
mov al, byte [rdx + 6]
cmp al, 0x53
je 0x140412ff6
cmp al, 0x54
jne 0x1404131eb
mov r8d, 7
lea rcx, str.CONNECT
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1404131eb
test byte [rbx + 0xa8], 1
je case.0x140412f41.56
or dword [rbx + 0xd4], 0x80
jmp 0x1404131eb
mov r8d, 7
lea rcx, str.OPTIONS
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1404131eb
or dword [rbx + 0xd4], 0x200
jmp 0x1404131eb
mov r8d, 2
mov rdx, rsi
mov rcx, rbx
call fcn.1403c9610
test eax, eax
je case.0x140412f41.56
mov rdx, qword [rsi + 8]
mov rax, qword [rdx + 0x10]
mov al, byte [rax]
cmp al, 0x2f
jne 0x140413055
or dword [rbx + 0xd4], 0x800
jmp 0x1404131eb
cmp qword [rdx + 0x18], 1
jne 0x1404131eb
cmp al, 0x2a
jne 0x1404131eb
or dword [rbx + 0xd4], 0x1000
jmp 0x1404131eb
mov r8d, 8
mov rdx, rsi
mov rcx, rbx
call fcn.1403c9610
test eax, eax
je case.0x140412f41.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
cmp rdx, 4
jne 0x1404130b1
mov rdx, qword [rax + 0x10]
mov r8d, 4
lea rcx, str.http
jmp 0x1404130cc
cmp rdx, 5
jne 0x1404131eb
mov rdx, qword [rax + 0x10]
mov r8d, 5
lea rcx, str.https
call fcn.14040a9e0
test eax, eax
je 0x1404131eb
or dword [rbx + 0xd4], 0x2000
jmp 0x1404131eb
test ecx, ecx
je case.0x140412f41.56
mov r8d, 0x8000
mov rdx, rsi
mov rcx, rbx
call fcn.1403c9610
test eax, eax
jmp 0x1404131e9
mov r8d, 0x10
jmp 0x1404130f6
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x140412f41.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je case.0x140412f41.56
call fcn.1404224f0
mov qword [rbx + 0x30], rax
inc rax
jmp 0x1404131e9
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 8
jne case.0x140412f41.56
mov rdx, qword [rax + 0x10]
mov r8d, 8
lea rcx, str.trailers
call fcn.14040a9e0
jmp 0x140413101
test r12d, r12d
jne 0x1404131eb
test byte [rbx + 0xa8], 1
je 0x1404131eb
test byte [rbx + 0xd8], 0x10
je 0x1404131eb
test byte [rbx + 0xd6], 2
jne 0x1404131eb
movzx edx, byte [rbx + 0xdd]
lea rdi, [rsp + 0x28]
mov rcx, rdi
call fcn.140410680
mov rax, qword [rsi + 8]
mov rcx, rdi
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
call fcn.140413500
test eax, eax
jne 0x1404131ce
mov rcx, rdi
call fcn.1404106a0
or dword [rbx + 0xd4], 0x10000
mov byte [rbx + 0xdd], al
jmp 0x1404131eb
mov eax, dword [rbx + 0xd4]
and eax, 0xfffeffff
or eax, 0x20000
mov dword [rbx + 0xd4], eax
jmp 0x1404131eb
cmp dl, 0x3a
je case.0x140412f41.56
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
cmp byte [rax], 0x3a
jmp 0x14041336a
cmp dl, 0x3a
jne 0x14041320d
test r12d, r12d
jne case.0x140412f41.56
test byte [rbx + 0xd4], 0x40
jne case.0x140412f41.56
mov eax, dword [rsi + 0x10]
cmp eax, 0x38
je case.0x140412f41.56
jg 0x140413226
cmp eax, 7
je 0x140413245
cmp eax, 0x1b
je 0x140413289
jmp 0x140413356
cmp eax, 0x3d
je 0x140413322
sub eax, 0x3e
cmp eax, 3
ja 0x140413356
mov eax, 0xfffffded
jmp 0x14041336e
mov r8d, 0x20
mov rdx, rsi
mov rcx, rbx
call fcn.1403c9610
test eax, eax
je case.0x140412f41.56
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 3
jne case.0x140412f41.56
mov rcx, qword [rax + 0x10]
mov edx, 3
call fcn.1404224f0
mov word [rbx + 0xd0], ax
cmp ax, 0xffff
je case.0x140412f41.56
cmp ax, 0x65
jmp 0x140413349
mov eax, dword [rbx + 0xd0]
cmp ax, 0xcc
jne 0x1404132cd
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x140412f41.56
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 1
jne case.0x140412f41.56
mov rdx, qword [rax + 0x10]
mov r8d, 1
lea rcx, [0x14061678d]
call fcn.14040a9e0
test eax, eax
je case.0x140412f41.56
xor eax, eax
mov qword [rbx + 0x30], rax
jmp 0x1404132ed
lea edx, [rax - 0x64]
cmp dx, 0x63
jbe case.0x140412f41.56
sub ax, 0xc8
cmp ax, 0x63
ja 0x1404132f4
test byte [rbx + 0xd4], 0x80
je 0x1404132f4
mov eax, 0xffffff96
jmp 0x14041336e
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x140412f41.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je case.0x140412f41.56
call fcn.1404224f0
mov qword [rbx + 0x30], rax
inc rax
jmp 0x140413349
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 8
jne case.0x140412f41.56
mov rdx, qword [rax + 0x10]
mov r8d, 8
lea rcx, str.trailers
call fcn.14040a9e0
test eax, eax
je case.0x140412f41.56
cmp byte [r13], 0x3a
jmp 0x14041336a
cmp dl, 0x3a
je case.0x140412f41.56
or dword [rbx + 0xd4], 0x40
xor eax, eax
jmp 0x14041336e
jne 0x14041335f
jmp 0x140413366
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret