Function at 0x140153c6c
Capabilities:
Parse credit card information

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x38
and dword [rsp + 0x88], 0
mov rsi, rdx
mov r13, qword [rsp + 0xa8]
mov r12, rcx
mov r15d, dword [r8]
test rdx, rdx
jne 0x140153cad
xor edi, edi
jmp 0x140153cbe
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
and edi, 0x3fffffff
test r15b, 0x40
jne 0x140153cd1
cmp byte [0x140245126], 0
je 0x1401541af
mov r14d, 5
cmp edi, r14d
jb 0x1401541af
mov r8d, r14d
lea rdx, str.file:
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1401541af
or r15d, 0x40
mov r8d, edi
xor ebp, ebp
mov dword [rsp + 0x20], r15d
lea ecx, [rdi + 8]
test edi, edi
je 0x140153d25
xor edx, edx
xor eax, eax
cmp byte [rdx + rsi], 0x26
sete al
inc rdx
add rcx, rax
cmp rdx, r8
jl 0x140153d11
call fcn.1400df8c0
mov rbx, rax
test rax, rax
je 0x1401541bf
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
mov dl, 0x2f
add rbx, 4
mov edi, r14d
cmp byte [rsi + 5], dl
jne 0x140153dbc
cmp byte [rsi + 6], dl
jne 0x140153dbc
lea r14, [rsi + 7]
mov edi, 7
mov al, byte [r14]
test al, al
je 0x140153dbc
mov rcx, r14
cmp al, dl
je 0x140153d79
inc rcx
inc edi
mov al, byte [rcx]
test al, al
jne 0x140153d6a
cmp edi, 7
je 0x140153dbc
cmp edi, 0x10
jne 0x140153d9a
lea r8d, [rdi - 7]
mov rdx, r14
lea rcx, str.localhost
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140153dbc
lea edx, [rdi - 7]
mov dword [rsp + 0x88], 1
mov r8, r14
lea rcx, str.invalid_uri_authority:__.s
call fcn.1400df5cc
jmp 0x140154138
movsxd rax, edi
xor r9d, r9d
mov cl, byte [rax + rsi]
test cl, cl
je 0x140153f4b
mov r14, rbx
lea r12, [rbx - 1]
lea r13, [0x14022c920]
movsxd r11, edi
cmp cl, 0x23
je 0x140153f2c
inc edi
cmp cl, 0x25
jne 0x140153ea2
movsxd rax, edi
movzx edx, byte [rax + rsi]
test byte [rdx + r13], 8
je 0x140153ea2
movzx r10d, byte [r11 + rsi + 2]
test byte [r10 + r13], 8
je 0x140153ea2
movsx eax, dl
lea edi, [r11 + 3]
sar eax, 6
and al, 1
movsx r8d, r10b
movzx eax, al
imul ecx, eax, 7
sar r8d, 6
and r8b, 1
movzx eax, r8b
sub dl, cl
imul ecx, eax, 7
mov al, r10b
and edx, 0xf
add edx, edx
sub al, cl
and eax, 0xf
lea ecx, [rax + rdx*8]
test ecx, ecx
jne 0x140153f13
movsxd rcx, edi
add rcx, rsi
jmp 0x140153e9a
cmp al, 0x23
je 0x140153f1e
test r9d, r9d
jne 0x140153e71
cmp al, 0x3f
je 0x140153f1e
cmp r9d, 1
jne 0x140153e87
cmp al, 0x3d
je 0x140153f1e
cmp al, 0x26
je 0x140153f1e
cmp r9d, 2
jne 0x140153e95
cmp al, 0x26
je 0x140153f1e
inc edi
inc rcx
mov al, byte [rcx]
test al, al
jne 0x140153e5c
jmp 0x140153f1e
cmp r9d, 1
jne 0x140153ef6
mov dl, 0x26
cmp cl, dl
je 0x140153eb3
cmp cl, 0x3d
jne 0x140153f13
cmp byte [r12], 0
jne 0x140153edc
movsxd rcx, edi
add rcx, rsi
mov al, byte [rcx]
test al, al
je 0x140153f1e
cmp al, 0x23
je 0x140153f1e
cmp byte [rcx - 1], dl
je 0x140153f1e
inc rcx
inc edi
mov al, byte [rcx]
cmp al, 0
jne 0x140153ec6
jmp 0x140153f1e
cmp cl, dl
jne 0x140153eee
inc ebp
mov byte [r14], 0
inc r12
inc r14
jmp 0x140153f11
mov r9d, 2
jmp 0x140153f11
test r9d, r9d
jne 0x140153f00
cmp cl, 0x3f
je 0x140153f0b
cmp r9d, 2
jne 0x140153f13
cmp cl, 0x26
jne 0x140153f13
mov r9d, 1
xor cl, cl
inc ebp
mov byte [r14], cl
inc r12
inc r14
movsxd rax, edi
mov cl, byte [rax + rsi]
test cl, cl
jne 0x140153ddb
mov r13, qword [rsp + 0xa8]
mov r12, qword [rsp + 0x80]
cmp r9d, 1
jne 0x140153f4b
movsxd rax, ebp
inc ebp
mov byte [rax + rbx], 0
xor edx, edx
movsxd rcx, ebp
add rcx, rbx
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
test rbx, rbx
jne 0x140153f65
xor eax, eax
jmp 0x140153f72
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
and eax, 0x3fffffff
lea rdi, [rax + 1]
add rdi, rbx
cmp byte [rdi], 0
je 0x140154106
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
and esi, 0x3fffffff
lea ebp, [rsi + 1]
add rbp, rdi
jne 0x140153fa6
and dword [rsp + 0x24], ebp
and qword [rsp + 0x28], rbp
jmp 0x140153fc5
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rax
and eax, 0x3fffffff
and ecx, 0x3fffffff
mov dword [rsp + 0x24], eax
mov qword [rsp + 0x28], rcx
cmp esi, 3
jne 0x140153ff4
mov r8d, esi
lea rcx, [0x1402366ec]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1401540e2
mov r12, rbp
mov qword [rsp + 0x80], rbp
jmp 0x1401540ea
cmp esi, 5
jne 0x14015402b
mov r8d, esi
lea rcx, str.cache
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1401540e2
mov edi, 0x60000
lea r14, str.shared
mov r15d, edi
lea rdx, str.cache
jmp 0x140154064
cmp esi, 4
jne 0x1401540e2
mov r8d, esi
lea rcx, str.mode
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1401540e2
mov edi, 0x87
lea r14, [0x140247fc0]
and r15d, edi
lea rdx, str.access
mov r12, qword [r14]
xor esi, esi
test r12, r12
je 0x14015418b
mov rcx, r12
mov r13, rdx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, dword [rsp + 0x24]
and eax, 0x3fffffff
cmp ecx, eax
jne 0x14015409c
mov r8d, ecx
mov rdx, r12
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401540ae
inc rsi
mov rdx, r13
mov rax, rsi
add rax, rax
mov r12, qword [r14 + rax*8]
jmp 0x140154069
add rsi, rsi
mov rdx, r13
mov ecx, dword [r14 + rsi*8 + 8]
test ecx, ecx
je 0x14015418b
mov eax, ecx
btr eax, 7
cmp eax, r15d
jg 0x140154177
mov r15d, dword [rsp + 0x20]
not edi
and r15d, edi
or r15d, ecx
mov dword [rsp + 0x20], r15d
mov r12, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x28]
inc rdi
add rdi, rbp
cmp byte [rdi], 0
jne 0x140153f82
mov r13, qword [rsp + 0xa8]
mov rcx, r12
call fcn.1400cabf8
mov rcx, qword [rsp + 0x98]
mov qword [rcx], rax
test rax, rax
jne 0x140154146
mov rdx, r12
mov dword [rsp + 0x88], 1
lea rcx, str.no_such_vfs:__s
call fcn.1400df5cc
mov qword [r13], rax
mov rcx, rbx
call fcn.1400e0558
xor ebx, ebx
mov rcx, qword [rsp + 0x90]
mov eax, dword [rsp + 0x20]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xa0]
mov eax, dword [rsp + 0x88]
mov qword [rcx], rbx
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov dword [rsp + 0x88], 3
lea rcx, str._s_mode_not_allowed:__s
jmp 0x14015419d
mov dword [rsp + 0x88], 1
lea rcx, str.no_such__s_mode:__s
mov r8, rbp
call fcn.1400df5cc
mov r13, qword [rsp + 0xa8]
jmp 0x140154138
lea ecx, [rdi + 8]
call fcn.1400df8c0
mov rbx, rax
test rax, rax
jne 0x1401541c6
mov eax, 7
jmp 0x140154166
mov ebp, 4
xor edx, edx
mov r8d, ebp
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
add rbx, rbp
test edi, edi
je 0x1401541ef
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
jmp 0x1401541f1
xor edi, edi
lea rcx, [rdi + rbx]
mov r8, rbp
xor edx, edx
call sub.VCRUNTIME140.dll_memset
and r15d, 0xffffffbf
mov dword [rsp + 0x20], r15d
jmp 0x140154106