Function at 0x1400f36f0
Capabilities:
Parse credit card information

Disassembly:
clc
invalid
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push r12
sub rsp, 0x60
mov rbp, rdx
mov r9, rdx
mov rbx, rcx
mov r8, rcx
lea rdx, str.WM_DEVICECHANGE__p__p_n
mov ecx, 0xff00ff00
call fcn.1400b3fe0
add rbx, 0xffffffffffff8000
cmp rbx, 6
ja case.0x1400f373f.32773
lea rcx, [0x140000000]
mov eax, dword [rcx + rbx*4 + 0xf3ae8]
add rax, rcx
jmp rax
cmp qword [0x14020e440], 0
je 0x1400f3ad3
mov r8d, dword [rbp]
mov edx, dword [rbp + 4]
lea rcx, str.dbch_devicetype__d__dbch_size__d_n
call fcn.1400b3fb0
mov r11d, dword [rbp + 4]
cmp r11d, 6
jne 0x1400f378d
mov rcx, qword [0x14020e440]
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp fcn.140016a30
cmp r11d, 2
jne 0x1400f3ad3
mov rcx, qword [0x14020e440]
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp 0x140016b00
cmp qword [0x14020e440], 0
je 0x1400f3ace
mov r8d, dword [rbp]
mov edx, dword [rbp + 4]
lea rcx, str.dbch_devicetype__d__dbch_size__d_n
call fcn.1400b3fb0
mov r11d, dword [rbp + 4]
cmp r11d, 6
jne 0x1400f37f7
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016c30
jmp case.0x1400f373f.32773
cmp r11d, 2
jne 0x1400f3811
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016d10
jmp case.0x1400f373f.32773
cmp r11d, 5
jne case.0x1400f373f.32773
lea rdx, [rbp + 0x1c]
lea rcx, str.DEV_BROADCAST_DEVICEINTERFACE__S_n
call fcn.1400b3fb0
jmp case.0x1400f373f.32773
movzx ecx, byte [rbp + 0x2e]
movzx edx, byte [rbp + 0x2d]
movzx eax, byte [rbp + 0x2f]
movzx r10d, byte [rbp + 0x2c]
movzx r11d, byte [rbp + 0x2b]
movzx ebx, byte [rbp + 0x2a]
movzx r9d, word [rbp + 0x26]
movzx r8d, word [rbp + 0x24]
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x50], ecx
mov dword [rsp + 0x48], edx
mov edx, dword [rbp + 0x20]
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov qword [rsp + 0x70], rsi
movzx esi, byte [rbp + 0x28]
mov dword [rsp + 0x30], ebx
mov qword [rsp + 0x78], rdi
movzx edi, byte [rbp + 0x29]
lea rcx, str.DBT_CUSTOMEVENT__08x__04x__04x__02x_02x__02x_02x_02x_02x_02x_02x_n
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
call fcn.1400b3fb0
cmp qword [0x14020e440], 0
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
je 0x1400f3ace
cmp dword [rbp + 4], 6
jne case.0x1400f373f.32773
lea rdx, [0x1401b0e70]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je 0x1400f38e4
lea rcx, str.GUID_IO_VOLUME_MOUNT_n
call fcn.1400b3fb0
jmp case.0x1400f373f.32773
lea rdx, [0x1401b0e50]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je 0x1400f391e
lea rcx, str.GUID_IO_VOLUME_DISMOUNT_n
call fcn.1400b3fb0
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016a30
jmp case.0x1400f373f.32773
lea rdx, [0x1401b0e60]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je 0x1400f3958
lea rcx, str.GUID_IO_VOLUME_DISMOUNT_FAILED_n
call fcn.1400b3fb0
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016e50
jmp case.0x1400f373f.32773
lea rdx, [0x1401b0e80]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je 0x1400f3992
lea rcx, str.GUID_IO_VOLUME_LOCK_n
call fcn.1400b3fb0
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016a30
jmp case.0x1400f373f.32773
lea rdx, [0x1401b0e90]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je 0x1400f39cc
lea rcx, str.GUID_IO_VOLUME_LOCK_FAILED_n
call fcn.1400b3fb0
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016e50
jmp case.0x1400f373f.32773
lea rdx, [0x1401b0ea0]
lea rcx, [rbp + 0x20]
mov r8d, 0x10
call fcn.1400db340
test eax, eax
je case.0x1400f373f.32773
lea rcx, str.GUID_IO_VOLUME_UNLOCK_n
call fcn.1400b3fb0
mov rcx, qword [0x14020e440]
mov rdx, rbp
call fcn.140016e50
jmp case.0x1400f373f.32773
mov rcx, qword [0x14020e440]
test rcx, rcx
je 0x1400f3ad3
mov eax, dword [rbp + 4]
cmp eax, 6
jne 0x1400f3a3c
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp fcn.140016a30
cmp eax, 2
jne 0x1400f3ad3
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp 0x140016b00
mov rcx, qword [0x14020e440]
test rcx, rcx
je 0x1400f3ad3
mov eax, dword [rbp + 4]
cmp eax, 6
jne 0x1400f3a8d
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp fcn.140016e50
cmp eax, 2
jne 0x1400f3ad3
mov rdx, rbp
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
jmp 0x140016ee0
mov rcx, qword [0x14020e440]
test rcx, rcx
je 0x1400f3ace
call fcn.1400107e0
mov rcx, qword [0x14020e440]
test rcx, rcx
je 0x1400f3ace
call fcn.1400169d0
call fcn.14014caf0
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret