Function at 0x14016b99c
Capabilities:
Parse credit card information

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov r15d, dword [r8]
xor r13d, r13d
mov dword [rsp + 0x20], r13d
mov r12, rcx
mov rcx, qword [rsp + 0xb8]
mov rsi, rdx
mov qword [rsp + 0x30], rcx
test rdx, rdx
jne 0x14016b9e3
mov edi, r13d
jmp 0x14016b9f4
mov rcx, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
and edi, 0x3fffffff
test r15b, 0x40
jne 0x14016ba07
cmp byte [0x14024c206], r13b
je 0x14016be5f
mov r14d, 5
cmp edi, r14d
jb 0x14016be5f
mov r8d, r14d
lea rdx, str.file:
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14016be5f
or r15d, 0x40
mov r8d, edi
mov dword [rsp + 0x98], r15d
mov ebp, r13d
lea ecx, [rdi + 8]
test edi, edi
je 0x14016ba61
mov rdx, r13
cmp byte [rdx + rsi], 0x26
mov rax, r13
sete al
inc rdx
add rcx, rax
cmp rdx, r8
jl 0x14016ba4c
call fcn.1400f35e8
mov rbx, rax
test rax, rax
je 0x14016be6f
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
mov dl, 0x2f
add rbx, 4
mov edi, r14d
cmp byte [rsi + 5], dl
jne 0x14016baf5
cmp byte [rsi + 6], dl
jne 0x14016baf5
lea r14, [rsi + 7]
mov edi, 7
mov al, byte [r14]
test al, al
je 0x14016baf5
mov rcx, r14
cmp al, dl
je 0x14016bab5
inc rcx
inc edi
mov al, byte [rcx]
test al, al
jne 0x14016baa6
cmp edi, 7
je 0x14016baf5
cmp edi, 0x10
jne 0x14016bad6
lea r8d, [rdi - 7]
mov rdx, r14
lea rcx, str.localhost
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14016baf5
lea edx, [rdi - 7]
mov dword [rsp + 0x20], 1
mov r8, r14
lea rcx, str.invalid_uri_authority:__.s
call fcn.1400f3418
jmp 0x14016beea
movsxd rax, edi
mov r9d, r13d
mov cl, byte [rax + rsi]
test cl, cl
je 0x14016bc7f
mov r14, rbx
lea r12, [rbx - 1]
lea r15, [0x140217920]
movsxd r11, edi
cmp cl, 0x23
je 0x14016bc60
inc edi
cmp cl, 0x25
jne 0x14016bbdb
movsxd rax, edi
movzx edx, byte [rax + rsi]
test byte [rdx + r15], 8
je 0x14016bbdb
movzx r10d, byte [r11 + rsi + 2]
test byte [r10 + r15], 8
je 0x14016bbdb
movsx eax, dl
lea edi, [r11 + 3]
sar eax, 6
and al, 1
movsx r8d, r10b
movzx eax, al
imul ecx, eax, 7
sar r8d, 6
and r8b, 1
movzx eax, r8b
sub dl, cl
imul ecx, eax, 7
mov al, r10b
and edx, 0xf
add edx, edx
sub al, cl
and eax, 0xf
lea ecx, [rax + rdx*8]
test ecx, ecx
jne 0x14016bc47
movsxd rcx, edi
add rcx, rsi
jmp 0x14016bbd3
cmp al, 0x23
je 0x14016bc52
test r9d, r9d
jne 0x14016bbaa
cmp al, 0x3f
je 0x14016bc52
cmp r9d, 1
jne 0x14016bbc0
cmp al, 0x3d
je 0x14016bc52
cmp al, 0x26
je 0x14016bc52
cmp r9d, 2
jne 0x14016bbce
cmp al, 0x26
je 0x14016bc52
inc edi
inc rcx
mov al, byte [rcx]
test al, al
jne 0x14016bb95
jmp 0x14016bc52
cmp r9d, 1
jne 0x14016bc29
mov dl, 0x26
cmp cl, dl
je 0x14016bbec
cmp cl, 0x3d
jne 0x14016bc47
cmp byte [r12], r13b
jne 0x14016bc10
movsxd rcx, edi
add rcx, rsi
jmp 0x14016bc08
cmp al, 0x23
je 0x14016bc52
cmp byte [rcx - 1], dl
je 0x14016bc52
inc edi
inc rcx
mov al, byte [rcx]
test al, al
jne 0x14016bbfa
jmp 0x14016bc52
cmp cl, dl
jne 0x14016bc21
inc ebp
mov byte [r14], r13b
inc r12
inc r14
jmp 0x14016bc44
mov r9d, 2
jmp 0x14016bc44
test r9d, r9d
jne 0x14016bc33
cmp cl, 0x3f
je 0x14016bc3e
cmp r9d, 2
jne 0x14016bc47
cmp cl, 0x26
jne 0x14016bc47
mov r9d, 1
mov cl, r13b
inc ebp
mov byte [r14], cl
inc r12
inc r14
movsxd rax, edi
mov cl, byte [rax + rsi]
test cl, cl
jne 0x14016bb14
mov r15d, dword [rsp + 0x98]
mov r12, qword [rsp + 0x90]
cmp r9d, 1
jne 0x14016bc7f
movsxd rax, ebp
inc ebp
mov byte [rax + rbx], r13b
xor edx, edx
movsxd rcx, ebp
add rcx, rbx
lea r8d, [rdx + 4]
call sub.VCRUNTIME140.dll_memset
test rbx, rbx
jne 0x14016bc9a
mov rax, r13
jmp 0x14016bca7
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
and eax, 0x3fffffff
lea rdi, [rbx + 1]
add rdi, rax
cmp byte [rdi], r13b
je 0x14016bebb
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rsi, rax
and esi, 0x3fffffff
lea ebp, [rsi + 1]
add rbp, rdi
jne 0x14016bcdc
mov dword [rsp + 0x24], r13d
mov qword [rsp + 0x28], r13
jmp 0x14016bcfb
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, rax
and eax, 0x3fffffff
and ecx, 0x3fffffff
mov dword [rsp + 0x24], eax
mov qword [rsp + 0x28], rcx
cmp esi, 3
jne 0x14016bd2a
mov r8d, esi
lea rcx, [0x14022482c]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14016be1a
mov r12, rbp
mov qword [rsp + 0x90], rbp
jmp 0x14016be22
cmp esi, 5
jne 0x14016bd61
mov r8d, esi
lea rcx, str.cache
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14016be1a
mov edi, 0x60000
lea r14, str.shared
mov r15d, edi
lea rdx, str.cache
jmp 0x14016bd9a
cmp esi, 4
jne 0x14016be1a
mov r8d, esi
lea rcx, str.mode
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14016be1a
mov edi, 0x87
lea r14, [0x14024ec70]
and r15d, edi
lea rdx, str.access
mov r12, qword [r14]
mov rsi, r13
test r12, r12
je 0x14016be43
mov rcx, r12
mov r13, rdx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov ecx, dword [rsp + 0x24]
and eax, 0x3fffffff
cmp ecx, eax
jne 0x14016bdd3
mov r8d, ecx
mov rdx, r12
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14016bde5
inc rsi
mov rdx, r13
mov rax, rsi
add rax, rax
mov r12, qword [r14 + rax*8]
jmp 0x14016bda0
add rsi, rsi
mov rdx, r13
mov ecx, dword [r14 + rsi*8 + 8]
test ecx, ecx
je 0x14016be43
mov eax, ecx
btr eax, 7
cmp eax, r15d
jg 0x14016be32
mov r15d, dword [rsp + 0x98]
not edi
and r15d, edi
or r15d, ecx
mov dword [rsp + 0x98], r15d
xor r13d, r13d
mov r12, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x28]
inc rdi
add rdi, rbp
jmp 0x14016bcae
mov dword [rsp + 0x20], 3
lea rcx, str._s_mode_not_allowed:__s
jmp 0x14016be52
mov dword [rsp + 0x20], 1
lea rcx, str.no_such__s_mode:__s
mov r8, rbp
call fcn.1400f3418
jmp 0x14016beea
lea ecx, [rdi + 8]
call fcn.1400f35e8
mov rbx, rax
test rax, rax
jne 0x14016be79
mov eax, 7
jmp 0x14016bf1c
mov ebp, 4
xor edx, edx
mov r8d, ebp
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
add rbx, rbp
test edi, edi
je 0x14016bea0
mov r8d, edi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, edi
mov r8, rbp
add rcx, rbx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
and r15d, 0xffffffbf
mov dword [rsp + 0x98], r15d
mov rcx, r12
call fcn.1400f9c9c
mov rcx, qword [rsp + 0xa8]
mov qword [rcx], rax
test rax, rax
jne 0x14016befc
mov rdx, r12
mov dword [rsp + 0x20], 1
lea rcx, str.no_such_vfs:__s
call fcn.1400f3418
mov rcx, qword [rsp + 0x30]
mov qword [rcx], rax
mov rcx, rbx
call fcn.1400f413c
xor ebx, ebx
mov rcx, qword [rsp + 0xa0]
mov eax, dword [rsp + 0x98]
mov dword [rcx], eax
mov rcx, qword [rsp + 0xb0]
mov eax, dword [rsp + 0x20]
mov qword [rcx], rbx
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret