Function at 0x14000da40
Capabilities:
Check for software breakpoints
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov r12, r9
mov rbx, r8
mov r13, rdx
mov rdi, rcx
mov rcx, qword [rsp + 0x178]
mov rsi, qword [0x1400f7448]
mov rax, qword [rsi]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov qword [rcx], 0
cmp qword [r9], 0
je 0x14000dab9
cmp qword [r12 + 0x10], 0
je 0x14000f6d4
cmp qword [r12 + 0x18], 0
je 0x14000f6d4
cmp dword [r12 + 8], 0
je 0x14000f6d4
cmp byte [r12 + 0x2c], 0
je 0x14000f6d4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rbp, [r12 + 0x20]
mov ecx, dword [r12 + 0x20]
lea edx, [rcx + 8]
cmp qword [r12], 0
je 0x14000dae5
cmp edx, dword [r12 + 0x28]
jbe 0x14000daea
mov byte [r12 + 0x2c], 0
jmp 0x14000db00
mov dword [rbp], edx
jmp 0x14000db30
mov rdx, qword [r12 + 0x10]
mov qword [rdx + rcx], rax
add dword [r12 + 0x20], 8
cmp qword [r12], 0
je 0x14000db30
cmp qword [r12 + 0x10], 0
je 0x14000f6d4
cmp qword [r12 + 0x18], 0
je 0x14000f6d4
cmp dword [r12 + 8], 0
je 0x14000f6d4
cmp byte [r12 + 0x2c], 0
je 0x14000f6d4
mov rax, qword [r13]
mov ecx, dword [r13 + 0x10]
add rcx, qword [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [r12 + 0x20]
lea edx, [rcx + 8]
cmp qword [r12], 0
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x50], rbx
je 0x14000db6a
cmp edx, dword [r12 + 0x28]
jbe 0x14000db6f
mov byte [r12 + 0x2c], 0
jmp 0x14000db85
mov dword [rbp], edx
jmp 0x14000dbb5
mov rdx, qword [r12 + 0x10]
mov qword [rdx + rcx], rax
add dword [r12 + 0x20], 8
cmp qword [r12], 0
je 0x14000dbb5
cmp qword [r12 + 0x10], 0
je 0x14000f6ba
cmp qword [r12 + 0x18], 0
je 0x14000f6ba
cmp dword [r12 + 8], 0
je 0x14000f6ba
cmp byte [r12 + 0x2c], 0
je 0x14000f6ba
mov rbx, qword [rsp + 0x170]
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov rdx, r12
mov r8, r13
mov r9, rbx
call fcn.140011620
test al, al
jne 0x14000f6ba
mov eax, dword [r12 + 0x20]
mov dword [r12 + 0x24], eax
cmp byte [rdi + 0x34], 0
je 0x14000f746
lea r14, [r13 + 0x10]
mov qword [rsp + 0x38], rdi
mov eax, dword [rdi + 0x30]
and eax, 2
mov ecx, eax
shr ecx, 1
mov dword [rsp + 0x4c], ecx
xor ecx, ecx
test eax, eax
sete cl
lea r15d, [rcx + rcx*2]
add r15d, 0xa
mov edx, dword [r14]
cmp edx, r15d
jae 0x14000f5a7
lea rax, [r12 + 0x28]
mov qword [rsp + 0x30], rax
lea rsi, [r12 + 0x2c]
xor edi, edi
mov ebp, edx
mov edx, ebp
jmp 0x14000dc5d
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0xcc
jne 0x14000f658
add edx, 1
mov dword [r14], edx
cmp edx, r15d
jae 0x14000f5a9
mov rcx, qword [r13]
test dil, 1
je 0x14000dc9f
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dc7d
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x90
je 0x14000dc4e
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dc40
mov rax, qword [rcx + 8]
jmp 0x14000dc40
mov edx, ebp
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dcb7
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0xf
jne 0x14000dcf2
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000ddd9
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000dde2
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000de31
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dd08
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x88
jb 0x14000dd64
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dd28
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x8b
ja 0x14000dd64
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000e682
mov r9, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e3be
mov rsi, r9
mov byte [r9], 0
jmp 0x14000e6df
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dd7a
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x40
je 0x14000dda8
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000dd9a
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x41
jne 0x14000df86
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000df7a
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000dfe7
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e095
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
jmp 0x14000de39
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000de2e
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000de2e
cmp qword [rsp + 0x60], 1
jne 0x14000de2e
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000de31
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
mov edx, dword [r13 + 0x10]
add edx, 1
mov dword [r13 + 0x10], edx
mov rcx, qword [r13]
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000de5e
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x1f
jne 0x14000de99
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000dfdb
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e037
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e1ec
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000deaf
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 5
je 0x14000e0cf
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000ded3
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x10
je 0x14000df01
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000def3
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x11
jne 0x14000e41f
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000e682
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
ja 0x14000e67a
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000e6d4
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e6d4
cmp qword [rsp + 0x60], 1
je 0x14000e6ca
jmp 0x14000e6d4
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
jmp 0x14000e09d
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000df9c
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0x44
jne 0x14000e2f6
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000e525
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e531
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e621
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
jmp 0x14000e1f4
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000e092
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e092
cmp qword [rsp + 0x60], 1
jne 0x14000e092
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e095
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000e1e9
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e1e9
cmp qword [rsp + 0x60], 1
jne 0x14000e1e9
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e1ec
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
mov edx, dword [r13 + 0x10]
add edx, 1
mov dword [r13 + 0x10], edx
mov rcx, qword [r13]
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000e0c2
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
mov al, byte [rax + rdx]
and al, 0xf0
cmp al, 0x50
jne 0x14000e100
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rax, rax
je 0x14000e179
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e189
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e1d8
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000e116
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rax + rdx], 0xb8
jb 0x14000f6ba
call fcn.14000c930
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14000e13a
mov rcx, qword [rax + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rcx + rdx], 0xbf
ja 0x14000f6ba
mov rcx, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 5]
test rcx, rcx
je 0x14000e2e6
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e366
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e48b
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
add dword [r14], 1
jmp 0x14000e77b
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000e1d5
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e1d5
cmp qword [rsp + 0x60], 1
jne 0x14000e1d5
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e1d8
mov byte [rsi], 0
add dword [r14], 1
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
mov edx, dword [r13 + 0x10]
add edx, 1
mov dword [r13 + 0x10], edx
mov rcx, qword [r13]
call fcn.14000c930
mov rcx, qword [r13]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14000e219
mov rax, qword [rcx + 8]
mov edx, dword [r13 + 0x10]
mov al, byte [rax + rdx]
and al, 0xc0
cmp al, 0x40
jne 0x14000f6ba
call fcn.14000c930
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14000e240
mov rcx, qword [rax + 8]
mov edx, dword [r13 + 0x10]
mov cl, byte [rcx + rdx]
and cl, 7
cmp cl, 4
jne 0x14000f6ba
mov rcx, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 3]
test rcx, rcx
je 0x14000e279
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e289
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e2d5
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
add dword [r14], 3
jmp 0x14000e77b
mov rcx, qword [rcx]
test rcx, rcx
mov rsi, rbx
je 0x14000e2d2
add rdx, qword [rax + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 3
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e2d2
cmp qword [rsp + 0x60], 3
jne 0x14000e2d2
mov rax, qword [rsp + 0x28]
add dword [rax], 3
jmp 0x14000e2d5
mov byte [rsi], 0
add dword [r14], 3
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
add dword [r14], 5
jmp 0x14000e77b
call fcn.14000c930
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14000e30c
mov rcx, qword [rax + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rcx + rdx], 0x45
jne 0x14000e4a4
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x33
jne 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 2
call fcn.140011cf0
add dword [r13 + 0x10], 2
jmp 0x14000e77b
mov rcx, qword [rcx]
test rcx, rcx
mov rsi, rbx
je 0x14000e488
add rdx, qword [rax + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 5
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e488
cmp qword [rsp + 0x60], 5
jne 0x14000e488
mov rax, qword [rsp + 0x28]
add dword [rax], 5
jmp 0x14000e48b
mov rax, qword [rax]
test rax, rax
mov rsi, r9
je 0x14000e49c
mov rbp, qword [rcx + 0x40]
add rbp, rdx
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
mov rdx, rbp
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e49c
cmp qword [rsp + 0x60], 1
jne 0x14000e49c
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e6df
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jb 0x14000f6ba
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x85
ja 0x14000f6ba
mov rcx, r13
call fcn.140011cc0
movzx eax, byte [rax]
add dword [r13 + 0x10], 1
lea rcx, [0x1400f7b04]
mov ebp, dword [rcx + rax*4 - 0x20c]
add dword [r12 + 0x20], 0xffffffff
mov rcx, r13
call fcn.140010770
mov rcx, r12
mov rdx, rax
mov r8d, ebp
call fcn.140012210
test al, al
jne 0x14000e77b
jmp 0x14000f6ba
mov byte [rsi], 0
add dword [r14], 5
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
jmp 0x14000e6df
mov rcx, r13
call fcn.140011cc0
mov al, byte [rax]
and al, 0xfa
cmp al, 0x48
jne 0x14000e58c
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x81
jne 0x14000e78c
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 0xf8
cmp al, 0xe8
jne 0x14000e78c
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 6
call fcn.140011cf0
add dword [r13 + 0x10], 6
jmp 0x14000e77b
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
jmp 0x14000e629
mov rax, qword [rax]
test rax, rax
mov rsi, rbx
je 0x14000e61e
add rdx, qword [rcx + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9d, 1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e61e
cmp qword [rsp + 0x60], 1
jne 0x14000e61e
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e621
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x66
jne 0x14000e7f1
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x88
jb 0x14000e873
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x8b
ja 0x14000e873
mov rcx, r13
mov edx, 1
call fcn.14000fe90
movzx eax, byte [rax]
mov ecx, eax
and cl, 0xc0
cmp cl, 0xc0
je 0x14000e342
cmp cl, 0x40
je 0x14000eb59
test cl, cl
jne 0x14000f6ba
and eax, 6
cmp eax, 4
jne 0x14000e342
jmp 0x14000f6ba
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
mov edx, dword [r13 + 0x10]
add edx, 1
mov dword [r13 + 0x10], edx
mov rcx, qword [r13]
call fcn.14000c930
mov rax, qword [r13]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14000e64e
mov rcx, qword [rax + 8]
mov edx, dword [r13 + 0x10]
cmp byte [rcx + rdx], 0x89
jne 0x14000f6ba
mov rcx, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ebp, [r8 + 1]
test rcx, rcx
je 0x14000e682
mov rbx, rsi
mov rsi, qword [rsp + 0x30]
cmp ebp, dword [rsi]
jbe 0x14000e68b
mov rsi, rbx
mov byte [rbx], 0
jmp 0x14000e6d7
mov rax, qword [rsp + 0x28]
mov dword [rax], ebp
jmp 0x14000e6df
mov rcx, qword [rcx]
test rcx, rcx
mov rsi, rbx
je 0x14000e6d4
add rdx, qword [rax + 0x40]
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e6d4
cmp qword [rsp + 0x60], 1
jne 0x14000e6d4
mov rax, qword [rsp + 0x28]
add dword [rax], 1
jmp 0x14000e6d7
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
add dword [r13 + 0x10], 1
mov rcx, qword [rsp + 0x38]
mov rdx, r13
xor r8d, r8d
call fcn.140011d90
test eax, eax
js 0x14000f6ba
mov ebp, eax
mov rax, qword [r12]
mov r8d, dword [r12 + 0x20]
lea ecx, [r8 + rbp]
test rax, rax
je 0x14000e771
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
ja 0x14000e76c
mov rcx, qword [rax]
test rcx, rcx
je 0x14000e76c
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov r9d, ebp
add r8, qword [r12 + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], r9
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e76c
mov rax, qword [rsp + 0x40]
cmp qword [rsp + 0x60], rax
jne 0x14000e76c
mov rax, qword [rsp + 0x28]
add dword [rax], ebp
jmp 0x14000e778
mov byte [rsi], 0
jmp 0x14000e778
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
add dword [r14], ebp
mov ebp, dword [r14]
cmp ebp, r15d
jb 0x14000dc3c
jmp 0x14000f73f
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jne 0x14000e7ae
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 0xf8
cmp al, 0xe8
je 0x14000e7d0
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jne 0x14000e829
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 0xf8
cmp al, 0xc0
jne 0x14000e829
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 3
call fcn.140011cf0
add dword [r13 + 0x10], 3
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
mov al, byte [rax]
and al, 0xf0
cmp al, 0x50
jne 0x14000e90d
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jne 0x14000e8be
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 0xf8
cmp al, 0x60
jne 0x14000e8be
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 5
call fcn.140011cf0
add dword [r13 + 0x10], 5
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x44
jne 0x14000e77b
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x89
jne 0x14000e77b
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 2
call fcn.140011cf0
add dword [r13 + 0x10], 2
jmp 0x14000e97f
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x2b
jne 0x14000e8e1
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0xc0
jae 0x14000e342
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x85
jne 0x14000ea27
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0xc0
jae 0x14000e342
jmp 0x14000f6ba
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x65
jne 0x14000e9b9
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x48
jne 0x14000f6ba
mov rcx, r13
mov edx, 2
call fcn.14000fe90
cmp byte [rax], 0x88
jb 0x14000f6ba
mov rcx, r13
mov edx, 2
call fcn.14000fe90
cmp byte [rax], 0x8b
ja 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 3
call fcn.140011cf0
add dword [r13 + 0x10], 3
mov rcx, qword [rsp + 0x38]
mov rdx, r13
xor r8d, r8d
call fcn.140011d90
test eax, eax
js 0x14000f6ba
mov ebp, eax
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, ebp
call fcn.140011cf0
add dword [r13 + 0x10], ebp
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x80
jne 0x14000eaa0
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x3d
jne 0x14000eaa0
add dword [r14], 2
cmp qword [r12], 0
mov eax, dword [r12 + 0x20]
je 0x14000ed39
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x14000edba
mov rcx, qword [r12 + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [r12 + 0x20]
add eax, 1
mov dword [r12 + 0x20], eax
cmp qword [r12], 0
jne 0x14000edbd
jmp 0x14000ed3c
mov rcx, r13
call fcn.140011cc0
mov al, byte [rax]
and al, 0xfd
cmp al, 0x89
jne 0x14000ead9
lea rbx, [rsp + 0x60]
mov rcx, rbx
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rbx
lea r8, [rsp + 0x5f]
call fcn.140011d90
mov ebp, eax
mov rcx, rbx
call fcn.14000f760
test ebp, ebp
js 0x14000ec18
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 1
mov rcx, r12
mov r8d, ebp
call fcn.140011cf0
add dword [r13 + 0x10], ebp
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x90
jne 0x14000eb19
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
mov al, byte [rax]
and al, 0xf8
cmp al, 0xb8
jne 0x14000eb88
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 9
call fcn.140011cf0
add dword [r13 + 0x10], 9
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
mov al, byte [rax]
and al, 0xf8
cmp al, 0xb8
jne 0x14000ebdb
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 5
call fcn.140011cf0
add dword [r13 + 0x10], 5
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
and eax, 7
mov rcx, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rcx + 0x40]
mov rcx, r12
cmp eax, 4
jne 0x14000ec84
mov r8d, 4
call fcn.140011cf0
add dword [r14], 4
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xc7
jne 0x14000ec98
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x44
mov rbx, qword [rsp + 0x170]
jne 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 8
call fcn.140011cf0
add dword [r13 + 0x10], 8
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x33
jne 0x14000ed4b
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 2
call fcn.140011cf0
add dword [r13 + 0x10], 2
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
cmp ebp, 0xfffffffe
jne 0x14000f6ba
add dword [r13 + 0x10], 2
mov rcx, r13
call fcn.140010770
mov dl, byte [rsp + 0x5f]
test dl, dl
je 0x14000edd9
cmp qword [r12], 0
mov ecx, dword [r12 + 0x20]
je 0x14000f0ba
mov rbp, qword [rsp + 0x30]
cmp ecx, dword [rbp]
jae 0x14000f104
add dl, 0xb8
mov rbp, qword [r12 + 0x10]
mov byte [rbp + rcx], dl
mov edx, dword [r12 + 0x20]
lea ecx, [rdx + 1]
mov dword [r12 + 0x20], ecx
add edx, 9
cmp qword [r12], 0
jne 0x14000f10a
jmp 0x14000f1c4
mov r8d, 3
call fcn.140011cf0
add dword [r14], 3
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xff
je 0x14000f025
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x8d
jne 0x14000f0c4
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x3f
ja 0x14000f119
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 7
cmp al, 5
jne 0x14000f119
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov bpl, byte [rax]
add dword [r13 + 0x10], 2
mov rcx, r13
call fcn.140010770
cmp qword [r12], 0
mov ecx, dword [r12 + 0x20]
je 0x14000f14e
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x14000f259
shr bpl, 3
or bpl, 0xb8
mov rdx, qword [r12 + 0x10]
mov byte [rdx + rcx], bpl
jmp 0x14000edff
add eax, 1
add eax, 1
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
jmp 0x14000ee22
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xf6
jne 0x14000efc0
mov byte [rsp + 0x5f], 0
lea rbx, [rsp + 0x60]
mov rcx, rbx
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rbx
lea r8, [rsp + 0x5f]
call fcn.140011d90
mov ebp, eax
mov rcx, rbx
call fcn.14000f760
test ebp, ebp
js 0x14000f6ba
cmp byte [rsp + 0x5f], 0
jne 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 2
jmp 0x14000ea84
mov byte [rsi], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x14000ee1f
mov rcx, qword [r12 + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x53
add dword [r12 + 0x20], 1
jmp 0x14000ee22
cmp qword [r12], 0
mov ecx, dword [r12 + 0x20]
je 0x14000f14e
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x14000f259
mov rdx, qword [r12 + 0x10]
mov byte [rdx + rcx], 0xa1
mov edx, dword [r12 + 0x20]
lea ecx, [rdx + 1]
mov dword [r12 + 0x20], ecx
add edx, 9
cmp qword [r12], 0
jne 0x14000f25f
jmp 0x14000f153
mov byte [rsi], 0
mov rcx, r13
call fcn.140010770
cmp qword [r12], 0
mov ecx, dword [r12 + 0x20]
je 0x14000ee66
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x14000eeeb
mov rdx, qword [r12 + 0x10]
mov byte [rdx + rcx], 0x49
mov ecx, dword [r12 + 0x20]
add ecx, 1
mov dword [r12 + 0x20], ecx
cmp qword [r12], 0
jne 0x14000eeee
jmp 0x14000ee69
add ecx, 1
add ecx, 9
mov edx, ecx
add edx, 1
add edx, 1
add edx, 1
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 1
call fcn.140011cf0
add dword [r13 + 0x10], 1
cmp qword [r12], 0
mov eax, dword [r12 + 0x20]
je 0x14000eed1
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x14000ef1e
mov rcx, qword [r12 + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [r12 + 0x20]
add eax, 1
mov dword [r12 + 0x20], eax
cmp qword [r12], 0
jne 0x14000ef21
jmp 0x14000eed4
add eax, 1
add eax, 1
mov rcx, qword [rsp + 0x28]
mov dword [rcx], eax
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x14000ef4c
mov rdx, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], 0xbb
mov edx, dword [r12 + 0x20]
lea ecx, [rdx + 1]
mov dword [r12 + 0x20], ecx
add edx, 9
cmp qword [r12], 0
jne 0x14000ef52
jmp 0x14000ee6e
mov byte [rsi], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x14000f2df
mov rcx, qword [r12 + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x5b
add dword [r12 + 0x20], 1
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
lea edx, [rcx + 8]
mov rbp, qword [rsp + 0x30]
cmp edx, dword [rbp]
jbe 0x14000ef61
mov byte [rsi], 0
jmp 0x14000ef86
mov rdx, qword [r12 + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [r12 + 0x20]
add edx, 8
mov dword [r12 + 0x20], edx
cmp qword [r12], 0
mov ecx, edx
je 0x14000ee6e
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x14000f088
mov rax, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x41
mov edx, dword [r12 + 0x20]
add edx, 1
mov dword [r12 + 0x20], edx
cmp qword [r12], 0
mov ecx, edx
jne 0x14000f08b
add edx, 1
jmp 0x14000ee74
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x85
jne 0x14000f1e3
lea rbx, [rsp + 0x60]
mov rcx, rbx
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rbx
xor r8d, r8d
call fcn.140011d90
mov ebp, eax
mov rcx, rbx
call fcn.14000f760
test ebp, ebp
mov rbx, qword [rsp + 0x170]
js 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 1
jmp 0x14000e9a5
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0x3f
mov rbx, qword [rsp + 0x170]
ja 0x14000f6ba
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 7
cmp al, 5
jne 0x14000f6ba
add dword [r13 + 0x10], 2
add dword [r12 + 0x20], 0xffffffff
mov rcx, r13
call fcn.1400106a0
mov rcx, r12
mov rdx, rax
mov r8d, 3
call fcn.140012210
mov dil, 1
jmp 0x14000e47b
mov byte [rsi], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x14000f0e2
mov rax, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x80
mov edx, dword [r12 + 0x20]
add edx, 1
mov dword [r12 + 0x20], edx
cmp qword [r12], 0
mov ecx, edx
jne 0x14000f0e5
jmp 0x14000ee74
add ecx, 9
mov edx, ecx
jmp 0x14000f1c4
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x63
mov rbx, qword [rsp + 0x170]
je 0x14000e8f2
jmp 0x14000f6ba
mov byte [rsi], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x14000f167
mov rax, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x3b
add dword [r12 + 0x20], 1
jmp 0x14000ee7e
mov byte [rsi], 0
lea edx, [rcx + 8]
mov rbp, qword [rsp + 0x30]
cmp edx, dword [rbp]
jbe 0x14000f16f
mov byte [rsi], 0
jmp 0x14000f190
lea rbx, [rsp + 0x60]
mov rcx, rbx
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rbx
xor r8d, r8d
call fcn.140011d90
mov ebp, eax
mov rcx, rbx
call fcn.14000f760
jmp 0x14000ea75
add ecx, 9
mov edx, ecx
mov rax, qword [rsp + 0x28]
mov dword [rax], edx
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
jmp 0x14000ee7e
mov rdx, qword [r12 + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [r12 + 0x20]
add edx, 8
mov dword [r12 + 0x20], edx
cmp qword [r12], 0
mov ecx, edx
je 0x14000f1c4
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x14000f287
mov rax, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x48
mov edx, dword [r12 + 0x20]
add edx, 1
mov dword [r12 + 0x20], edx
cmp qword [r12], 0
mov ecx, edx
jne 0x14000f28a
jmp 0x14000f1c7
add edx, 1
add edx, 1
mov ecx, edx
add ecx, 1
mov rax, qword [rsp + 0x28]
mov dword [rax], ecx
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xd1
jne 0x14000f206
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0xc0
jae 0x14000ebec
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jne 0x14000f2ef
mov rcx, r13
mov edx, 1
call fcn.14000fe90
cmp byte [rax], 0xc0
jb 0x14000f2ef
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 3
call fcn.140011cf0
add dword [r13 + 0x10], 3
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
lea edx, [rcx + 8]
mov rbp, qword [rsp + 0x30]
cmp edx, dword [rbp]
ja 0x14000f2df
mov rdx, qword [r12 + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
add dword [r12 + 0x20], 8
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov byte [rsi], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x14000f2b7
mov rax, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x8b
mov ecx, dword [r12 + 0x20]
add ecx, 1
mov dword [r12 + 0x20], ecx
cmp qword [r12], 0
jne 0x14000f2ba
jmp 0x14000f1cc
mov byte [rsi], 0
mov dl, byte [rsp + 0x5f]
lea eax, [rdx*8]
or al, dl
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x14000f2df
mov rdx, qword [r12 + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], al
jmp 0x14000ef39
mov byte [rsi], 0
mov rbx, qword [rsp + 0x170]
jmp 0x14000e77b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xc3
je 0x14000eaad
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xcc
je 0x14000eaad
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xe8
je 0x14000f32b
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xe9
jne 0x14000f372
mov rcx, r13
call fcn.140011cc0
xor edi, edi
cmp byte [rax], 0xe9
sete dil
add dword [r13 + 0x10], 1
mov rcx, r13
call fcn.140010770
mov r8d, 4
sub r8d, edi
mov rcx, r12
mov rdx, rax
call fcn.140012210
test al, al
mov rbx, qword [rsp + 0x170]
jne 0x14000e77b
jmp 0x14000f6ba
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x73
jb 0x14000f3d3
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x75
ja 0x14000f3d3
mov rcx, r13
call fcn.140011cc0
movzx eax, byte [rax]
lea rcx, [0x1400f7b04]
mov ebp, dword [rcx + rax*4 - 0x1cc]
mov rcx, r13
mov edx, 1
call fcn.14000fe90
movzx eax, byte [rax]
mov edx, dword [r13 + 0x10]
add edx, 2
mov dword [r13 + 0x10], edx
mov rcx, qword [r13]
add rdx, rax
add rdx, qword [rcx + 0x40]
mov rcx, r12
mov r8d, ebp
jmp 0x14000f358
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xff
je 0x14000f471
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0x83
jne 0x14000f40a
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov al, byte [rax]
and al, 0xf8
cmp al, 0x60
je 0x14000eb2d
mov rcx, r13
call fcn.140011cc0
cmp byte [rax], 0xc6
mov rbx, qword [rsp + 0x170]
jne 0x14000f6ba
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rbp
xor r8d, r8d
call fcn.140011d90
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.14000f760
test ebp, ebp
js 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 2
jmp 0x14000e9a5
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov bl, byte [rax]
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov bpl, byte [rax]
shr bpl, 3
and bpl, 7
mov rcx, r13
mov edx, 1
call fcn.14000fe90
mov dl, byte [rax]
and dl, 7
cmp bl, 0xc0
jb 0x14000f4d1
cmp bpl, 6
ja 0x14000f4c7
movzx eax, bpl
mov ecx, 0x47
bt ecx, eax
jb 0x14000ebec
cmp dl, 5
sete cl
xor eax, eax
jmp 0x14000f50b
cmp bl, 0x40
setb al
cmp dl, 5
sete cl
cmp bl, 0x3f
ja 0x14000f50b
cmp bpl, 2
jne 0x14000f50b
cmp dl, 5
jne 0x14000f50b
add dword [r13 + 0x10], 2
mov rcx, r13
call fcn.1400106a0
mov rcx, r12
mov rdx, rax
mov r8d, 4
jmp 0x14000f358
cmp bpl, 4
jne 0x14000f6ba
and al, cl
cmp al, 1
jne 0x14000f541
add dword [r13 + 0x10], 2
mov rcx, r13
call fcn.1400106a0
mov rcx, r12
mov rdx, rax
mov r8d, 3
call fcn.140012210
mov dil, 1
jmp 0x14000f35d
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, r13
mov r8d, 1
call fcn.140010390
mov rcx, qword [rsp + 0x38]
mov rdx, rdi
xor r8d, r8d
call fcn.140011d90
mov ebp, eax
mov rcx, rdi
call fcn.14000f760
test ebp, ebp
mov rbx, qword [rsp + 0x170]
js 0x14000f6ba
mov rax, qword [r13]
mov edx, dword [r13 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 1
mov rcx, r12
mov r8d, ebp
call fcn.140011cf0
add dword [r13 + 0x10], ebp
mov dil, 1
jmp 0x14000e77b
xor edi, edi
cmp edx, 0x64
ja 0x14000f6ba
test dil, 1
jne 0x14000f5d8
mov rax, qword [r13]
mov edx, edx
add rdx, qword [rax + 0x40]
mov rcx, r12
mov r8d, 3
call fcn.140012210
test al, al
je 0x14000f6ba
cmp byte [r12 + 0x2c], 0
je 0x14000f6ba
cmp qword [r12], 0
je 0x14000f6ba
mov ebp, dword [r12 + 0x24]
add rbp, qword [r12 + 0x18]
je 0x14000f6ba
lea rcx, [rsp + 0x60]
mov rdx, r13
xor r8d, r8d
xor r9d, r9d
call fcn.140012530
cmp qword [rsp + 0xd0], 0
je 0x14000f6b0
cmp byte [rsp + 0xb8], 0
je 0x14000f6b0
cmp byte [rsp + 0x4c], 0
je 0x14000f68a
mov qword [rsp + 0x20], rbx
lea r9, [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x50]
mov r8, rbp
call fcn.140012940
test al, al
jne 0x14000f697
jmp 0x14000f6b0
cmp qword [rsp + 0x50], 0
je 0x14000f6ba
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov ecx, dword [rax + 0x20]
add rcx, qword [rax + 0x18]
mov eax, 0x80000000
cmp rcx, rax
ja 0x14000f6ba
mov al, 1
mov dword [rsp + 0x4c], eax
cmp edx, 9
ja 0x14000f5a9
jmp 0x14000f6ba
lea rcx, [rsp + 0x60]
mov rdx, rbx
call fcn.140012eb0
lea rcx, [rsp + 0x60]
call fcn.1400130e0
test al, al
je 0x14000f6b0
mov rax, qword [rsp + 0x178]
mov qword [rax], rbp
lea rcx, [rsp + 0x60]
call fcn.1400131a0
mov rax, qword [rsp + 0x178]
cmp qword [rax], 0
mov rdi, qword [rsp + 0x28]
mov rsi, qword [0x1400f7448]
je 0x14000f6fb
mov rax, qword [rsp + 0x100]
xor rax, rsp
mov rcx, qword [rsi]
cmp rcx, rax
jne 0x14000f756
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [r12 + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [r12 + 0x20]
lea edx, [rcx + 8]
cmp qword [r12], 0
je 0x14000f72a
cmp edx, dword [r12 + 0x28]
jbe 0x14000f72e
mov byte [r12 + 0x2c], 0
jmp 0x14000f6d4
mov dword [rdi], edx
jmp 0x14000f6d4
mov rdx, qword [r12 + 0x10]
mov qword [rdx + rcx], rax
add dword [r12 + 0x20], 8
jmp 0x14000f6d4
mov edx, ebp
jmp 0x14000f5a9
mov dword [0], 0x2f1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
call fcn.1400763e0
int3