Function at 0x1400020f0
Capabilities:
Parse credit card information
Resume thread
Terminate process

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rdi
mov eax, 0x25a0
call fcn.140007210
sub rsp, rax
mov rax, qword [0x14002b040]
xor rax, rsp
mov qword [rsp + 0x2590], rax
mov byte [rsp + 0x70], 0
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x88], 0
jmp 0x14000214b
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov eax, dword [rsp + 0x88]
cmp rax, 0x100
jae 0x140002182
mov eax, dword [rsp + 0x88]
mov qword [rsp + rax*8 + 0x990], 0
mov eax, dword [rsp + 0x88]
mov qword [rsp + rax*8 + 0x190], 0
jmp 0x14000213b
mov dword [rsp + 0x74], 1
jmp 0x140002196
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x25b0]
cmp dword [rsp + 0x74], eax
jge 0x140002372
movsxd rax, dword [rsp + 0x74]
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x25b8]
mov rax, qword [rdx + rax*8]
movsx eax, byte [rax + rcx]
cmp eax, 0x2d
je 0x1400021f1
movsxd rax, dword [rsp + 0x74]
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x25b8]
mov rax, qword [rdx + rax*8]
movsx eax, byte [rax + rcx]
cmp eax, 0x2f
jne 0x140002372
movsxd rax, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x25b8]
mov rax, qword [rcx + rax*8]
inc rax
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
test eax, eax
je 0x140002261
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
cmp eax, 0x3a
je 0x140002261
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
cmp eax, 0x3d
je 0x140002261
mov rax, qword [rsp + 0x90]
inc rax
mov qword [rsp + 0x90], rax
jmp 0x14000221d
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
cmp eax, 0x3a
je 0x140002281
mov rax, qword [rsp + 0x90]
movsx eax, byte [rax]
cmp eax, 0x3d
jne 0x14000229f
mov rax, qword [rsp + 0x90]
mov byte [rax], 0
mov rax, qword [rsp + 0x90]
inc rax
mov qword [rsp + 0x90], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0xc0]
movzx eax, byte [rcx + rax]
mov byte [rsp + 0x8c], al
cmp byte [rsp + 0x8c], 0x3f
je 0x140002343
cmp byte [rsp + 0x8c], 0x44
je 0x1400022ef
cmp byte [rsp + 0x8c], 0x56
je 0x14000233c
cmp byte [rsp + 0x8c], 0x64
je 0x1400022ef
cmp byte [rsp + 0x8c], 0x76
je 0x14000233c
jmp 0x14000234a
mov eax, dword [rsp + 0x80]
cmp rax, 0x100
jae 0x140002327
mov eax, dword [rsp + 0x80]
mov rcx, qword [rsp + 0x90]
mov qword [rsp + rax*8 + 0x990], rcx
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
jmp 0x14000233a
lea rcx, str.withdll.exe:_Too_many_DLLs._n
call fcn.140002cf0
mov byte [rsp + 0x70], 1
jmp 0x14000236d
jmp 0x14000236d
mov byte [rsp + 0x78], 1
jmp 0x14000236d
mov byte [rsp + 0x70], 1
jmp 0x14000236d
mov byte [rsp + 0x70], 1
movsxd rax, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x25b8]
mov rdx, qword [rcx + rax*8]
lea rcx, str.withdll.exe:_Bad_argument:__s_n
call fcn.140002cf0
nop
jmp 0x14000218c
mov eax, dword [rsp + 0x25b0]
cmp dword [rsp + 0x74], eax
jl 0x140002384
mov byte [rsp + 0x70], 1
cmp dword [rsp + 0x80], 0
jne 0x140002393
mov byte [rsp + 0x70], 1
movzx eax, byte [rsp + 0x70]
test eax, eax
je 0x1400023ab
call fcn.140001360
mov eax, 0x2329
jmp 0x1400029e1
mov dword [rsp + 0x7c], 0
jmp 0x1400023bf
mov eax, dword [rsp + 0x7c]
inc eax
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x80]
cmp dword [rsp + 0x7c], eax
jae 0x14000256d
mov qword [rsp + 0xe0], 0
mov eax, dword [rsp + 0x7c]
lea r9, [rsp + 0xe0]
lea r8, [rsp + 0x1d90]
mov edx, 0x400
mov rcx, qword [rsp + rax*8 + 0x990]
call qword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
jne 0x140002429
mov eax, dword [rsp + 0x7c]
mov rdx, qword [rsp + rax*8 + 0x990]
lea rcx, str.withdll.exe:_Error:__s_is_not_a_valid_path_name.._n
call fcn.140002cf0
mov eax, 0x232a
jmp 0x1400029e1
lea rcx, [rsp + 0x1d90]
call fcn.14000eac0
inc eax
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x9c]
mov ecx, eax
call fcn.140006ed0
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0xc8], rax
mov eax, dword [rsp + 0x9c]
lea r8, [rsp + 0x1d90]
mov edx, eax
mov rcx, qword [rsp + 0xc8]
call fcn.140002a80
mov eax, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0xc8]
mov qword [rsp + rax*8 + 0x190], rcx
mov eax, dword [rsp + 0x7c]
mov r8d, 1
xor edx, edx
mov rcx, qword [rsp + rax*8 + 0x190]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov qword [rsp + 0xb0], rax
cmp qword [rsp + 0xb0], 0
jne 0x1400024ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rsp + 0x7c]
mov r8d, eax
mov rdx, qword [rsp + rcx*8 + 0x190]
lea rcx, str.withdll.exe:_Error:__s_failed_to_load__error__ld_._n
call fcn.140002cf0
mov eax, 0x232b
jmp 0x1400029e1
mov dword [rsp + 0xb8], 0
mov dword [rsp + 0xbc], 0
lea r8, [0x140001380]
lea rdx, [rsp + 0xb8]
mov rcx, qword [rsp + 0xb0]
call fcn.140002d80
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
cmp dword [rsp + 0xb8], 0
jne 0x140002568
mov eax, dword [rsp + 0x7c]
mov rdx, qword [rsp + rax*8 + 0x190]
lea rcx, str.withdll.exe:_Error:__s_does_not_export_ordinal_1._n
call fcn.140002cf0
lea rcx, str._____________See_help_entry_DetourCreateProcessWithDllEx_in_Detours.chm._n
call fcn.140002cf0
mov eax, 0x232c
jmp 0x1400029e1
jmp 0x1400023b5
movzx eax, word [0x14001e7bc]
mov word [rsp + 0x1190], ax
lea rax, [rsp + 0x1192]
mov rdi, rax
xor eax, eax
mov ecx, 0x3fe
rep stosb byte [rdi], al
mov qword [rsp + 0xf0], 0
mov r8d, 0x68
xor edx, edx
lea rcx, [rsp + 0x120]
call fcn.14001cd30
mov r8d, 0x18
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.14001cd30
mov dword [rsp + 0x120], 0x68
mov eax, 1
imul rax, rax, 0
mov qword [rsp + 0xd0], rax
cmp qword [rsp + 0xd0], 0x800
jae 0x1400025f2
jmp 0x1400025f8
call fcn.140006fe8
nop
mov rax, qword [rsp + 0xd0]
mov byte [rsp + rax + 0x1590], 0
movsxd rax, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x25b8]
mov r8, qword [rcx + rax*8]
mov edx, 0x400
lea rcx, [rsp + 0x2190]
call fcn.140002a80
nop
jmp 0x140002638
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x25b0]
cmp dword [rsp + 0x74], eax
jge 0x140002733
movsxd rax, dword [rsp + 0x74]
mov edx, 0x20
mov rcx, qword [rsp + 0x25b8]
mov rcx, qword [rcx + rax*8]
call fcn.140002b90
test rax, rax
jne 0x140002689
movsxd rax, dword [rsp + 0x74]
mov edx, 9
mov rcx, qword [rsp + 0x25b8]
mov rcx, qword [rcx + rax*8]
call fcn.140002b90
test rax, rax
je 0x1400026e1
lea r8, [0x14001e7c0]
mov edx, 0x800
lea rcx, [rsp + 0x1590]
call fcn.140002a00
movsxd rax, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x25b8]
mov r8, qword [rcx + rax*8]
mov edx, 0x800
lea rcx, [rsp + 0x1590]
call fcn.140002a00
lea r8, [0x14001e7c4]
mov edx, 0x800
lea rcx, [rsp + 0x1590]
call fcn.140002a00
nop
jmp 0x140002705
movsxd rax, dword [rsp + 0x74]
mov rcx, qword [rsp + 0x25b8]
mov r8, qword [rcx + rax*8]
mov edx, 0x800
lea rcx, [rsp + 0x1590]
call fcn.140002a00
nop
mov eax, dword [rsp + 0x74]
inc eax
cmp eax, dword [rsp + 0x25b0]
jge 0x14000272e
lea r8, [0x14001e7c8]
mov edx, 0x800
lea rcx, [rsp + 0x1590]
call fcn.140002a00
nop
jmp 0x14000262e
lea rdx, [rsp + 0x1590]
lea rcx, str.withdll.exe:_Starting:___s_n
call fcn.140002cf0
nop
mov dword [rsp + 0x98], 0
jmp 0x140002765
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x80]
cmp dword [rsp + 0x98], eax
jae 0x140002793
mov eax, dword [rsp + 0x98]
mov rdx, qword [rsp + rax*8 + 0x190]
lea rcx, str.withdll.exe:___with___s_n
call fcn.140002cf0
nop
jmp 0x140002755
mov ecx, 1
call fcn.14000aa90
mov rcx, rax
call fcn.14000af08
mov dword [rsp + 0xa8], 0x4000004
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1190]
mov qword [rsp + 0x20], rax
mov r9d, 0x400
lea r8, str..exe
lea rdx, [rsp + 0x2190]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SearchPathA]
nop
mov eax, 1
imul rax, rax, 0
movsx eax, byte [rsp + rax + 0x1190]
test eax, eax
je 0x140002817
lea rax, [rsp + 0x1190]
mov qword [rsp + 0xd8], rax
jmp 0x140002823
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x190]
mov qword [rsp + 0x58], rax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x50], eax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov eax, dword [rsp + 0xa8]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x1590]
mov rcx, qword [rsp + 0xd8]
call fcn.1400052e0
test eax, eax
jne 0x1400028e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xa0], eax
mov edx, dword [rsp + 0xa0]
lea rcx, str.withdll.exe:_DetourCreateProcessWithDllEx_failed:__ld_n
call fcn.140002cf0
nop
cmp dword [rsp + 0xa0], 6
jne 0x1400028da
lea rcx, str.withdll.exe:_Cant_detour_a_32_bit_target_process_from_a_64_bit_parent_process._n
call fcn.140002cf0
nop
mov ecx, 0x2331
call qword [sym.imp.KERNEL32.dll_ExitProcess]
movzx eax, byte [rsp + 0x78]
test eax, eax
je 0x1400028fd
mov rcx, qword [rsp + 0x100]
call fcn.140001b80
nop
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0xa4], 0
lea rdx, [rsp + 0xa4]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x140002961
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.withdll.exe:_GetExitCodeProcess_failed:__ld_n
call fcn.140002cf0
mov eax, 0x2332
jmp 0x1400029e1
mov dword [rsp + 0x84], 0
jmp 0x14000297e
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x80]
cmp dword [rsp + 0x84], eax
jae 0x1400029da
mov eax, dword [rsp + 0x84]
cmp qword [rsp + rax*8 + 0x190], 0
je 0x1400029d8
mov eax, dword [rsp + 0x84]
mov rax, qword [rsp + rax*8 + 0x190]
mov qword [rsp + 0xf8], rax
mov rcx, qword [rsp + 0xf8]
call fcn.140006ed8
nop
mov eax, dword [rsp + 0x84]
mov qword [rsp + rax*8 + 0x190], 0
jmp 0x14000296e
mov eax, dword [rsp + 0xa4]
mov rcx, qword [rsp + 0x2590]
xor rcx, rsp
call fcn.140007270
add rsp, 0x25a0
pop rdi
ret