Function at 0x1400105e0
Capabilities:
Check for software breakpoints
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rsi, r9
mov r12, r8
mov r14, rdx
mov rbx, rcx
mov rcx, qword [rsp + 0x178]
mov r15, qword [0x1401054a8]
mov rax, qword [r15]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov qword [rcx], 0
cmp qword [r9], 0
je 0x140010653
cmp qword [rsi + 0x10], 0
je 0x140012022
cmp qword [rsi + 0x18], 0
je 0x140012022
cmp dword [rsi + 8], 0
je 0x140012022
cmp byte [rsi + 0x34], 0
je 0x140012022
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rdi, [rsi + 0x20]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
je 0x140010677
cmp edx, dword [rsi + 0x30]
jbe 0x14001067b
mov byte [rsi + 0x34], 0
jmp 0x14001068d
mov dword [rdi], edx
jmp 0x1400106b7
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x1400106b7
cmp qword [rsi + 0x10], 0
je 0x140012022
cmp qword [rsi + 0x18], 0
je 0x140012022
cmp dword [rsi + 8], 0
je 0x140012022
cmp byte [rsi + 0x34], 0
je 0x140012022
mov rax, qword [r14]
mov ecx, dword [r14 + 0x10]
add rcx, qword [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
mov qword [rsp + 0x50], r12
je 0x1400106e7
mov r13, rdi
cmp edx, dword [rsi + 0x30]
jbe 0x1400106ee
mov byte [rsi + 0x34], 0
jmp 0x140010700
mov r13, rdi
mov dword [rdi], edx
jmp 0x14001072a
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x14001072a
cmp qword [rsi + 0x10], 0
je 0x14001200d
cmp qword [rsi + 0x18], 0
je 0x14001200d
cmp dword [rsi + 8], 0
je 0x14001200d
cmp byte [rsi + 0x34], 0
je 0x14001200d
mov r9, qword [rsp + 0x170]
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call fcn.140013b00
test al, al
jne 0x14001200d
mov eax, dword [rsi + 0x20]
mov dword [rsi + 0x24], eax
mov dword [rsi + 0x28], eax
cmp byte [rbx + 0x34], 0
je 0x1400121d5
lea r12, [r14 + 0x10]
mov eax, dword [rbx + 0x30]
and eax, 2
mov ecx, eax
shr ecx, 1
mov dword [rsp + 0x4c], ecx
xor ecx, ecx
test eax, eax
sete cl
lea edi, [rcx + rcx*2]
add edi, 0xa
mov edx, dword [r12]
cmp edx, edi
jae 0x140012005
lea rax, [rsi + 0x28]
mov qword [rsp + 0x38], rax
lea rax, [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rsi + 0x34]
mov qword [rsp + 0x28], rax
xor r15d, r15d
mov ebp, edx
mov edx, ebp
jmp 0x1400107dc
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xcc
jne 0x140012148
inc edx
mov dword [r12], edx
cmp edx, edi
jae 0x140012008
mov rcx, qword [r14]
test r15b, 1
je 0x14001081b
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400107fa
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x90
je 0x1400107ce
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400107c0
mov rax, qword [rcx + 8]
jmp 0x1400107c0
mov edx, ebp
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010832
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xf
mov rbp, r13
jne 0x1400108c5
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010860
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400109e1
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x1400109d7
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400109d7
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400109d7
cmp qword [rsp + 0x60], 1
jne 0x1400109d7
inc dword [rbp]
jmp 0x1400109e4
call fcn.14000f6b0
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x1400108da
mov rdx, qword [rcx + 8]
mov eax, dword [r14 + 0x10]
cmp byte [rdx + rax], 0x88
jb 0x140010911
mov edx, eax
call fcn.14000f6b0
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x1400108fb
mov rdx, qword [rcx + 8]
mov eax, dword [r14 + 0x10]
cmp byte [rdx + rax], 0x8b
ja 0x140010911
mov rdx, qword [rcx + 0x40]
add rdx, rax
jmp 0x140010aff
mov edx, eax
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010928
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x40
je 0x140010955
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010947
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x41
jne 0x140010d43
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010972
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010b97
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010b70
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010b70
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b70
cmp qword [rsp + 0x60], 1
jne 0x140010b70
inc dword [rbp]
jmp 0x140010b9a
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x1400109e4
mov dword [rbp], eax
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010a06
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x1f
jne 0x140010a96
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010a31
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010de8
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010b7a
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010b7a
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b7a
cmp qword [rsp + 0x60], 1
jne 0x140010b7a
inc dword [rbp]
jmp 0x140010deb
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010aab
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 5
je 0x140010bce
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010ace
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x10
je 0x140010afb
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010aed
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x11
jne 0x1400110e8
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010b18
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010ee1
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010b87
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010b87
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b87
cmp qword [rsp + 0x60], 1
jne 0x140010b87
mov r13, rbp
inc dword [rbp]
jmp 0x140010ee7
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010b9a
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010deb
mov r13, rbp
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010ee7
mov dword [rbp], eax
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010bbc
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
movzx eax, byte [rax + rdx]
and al, 0xf0
cmp al, 0x50
jne 0x140010c4f
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010beb
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010d34
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010cb2
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010cb2
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010cb2
cmp qword [rsp + 0x60], 1
jne 0x140010cb2
mov r13, rbp
inc dword [rbp]
inc dword [r12]
jmp 0x140011154
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010c64
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xb8
jb 0x140010cc6
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010c83
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xbf
ja 0x140010cc6
mov r13, rbp
mov rax, qword [rcx + 0x40]
add rax, rdx
mov rcx, rsi
mov rdx, rax
mov r8d, 5
call fcn.140014190
add dword [r12], 5
jmp 0x140011154
mov r13, rbp
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
inc dword [r12]
jmp 0x140011154
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010cdb
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x8b
jne 0x140010fa1
inc edx
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010d00
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx + 1], 0xc0
jb 0x140010fa1
mov r13, rbp
mov rax, qword [rcx + 0x40]
add rax, rdx
mov rcx, rsi
mov rdx, rax
mov r8d, 2
call fcn.140014190
add dword [r12], 2
jmp 0x140011154
mov r13, rbp
mov dword [rbp], eax
inc dword [r12]
jmp 0x140011154
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010d58
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x44
jne 0x140011071
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010d83
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x1400111f5
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140011165
mov rcx, qword [rcx]
test rcx, rcx
je 0x140011165
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140011165
cmp qword [rsp + 0x60], 1
jne 0x140011165
inc dword [rbp]
jmp 0x1400111f8
mov dword [rbp], eax
mov r13, rbp
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010e10
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
movzx eax, byte [rax + rdx]
and al, 0xc0
cmp al, 0x40
jne 0x14001200d
call fcn.14000f6b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140010e37
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
movzx ecx, byte [rcx + rdx]
and cl, 7
cmp cl, 4
jne 0x14001200d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 3]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010e6b
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010ed4
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010ec2
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010ec2
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 3
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010ec2
cmp qword [rsp + 0x60], 3
jne 0x140010ec2
add dword [rbp], 3
add dword [r12], 3
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
add dword [r12], 3
jmp 0x140011154
mov dword [rbp], eax
add dword [r12], 3
jmp 0x140011154
mov r13, rbp
mov dword [rbp], eax
inc dword [r14 + 0x10]
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.140014240
test eax, eax
js 0x14001200d
mov ebp, eax
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov r8d, dword [r13]
lea eax, [r8 + rbp]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010f27
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010f94
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010f83
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010f83
mov r9d, ebp
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], r9
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010f83
mov rax, qword [rsp + 0x40]
cmp qword [rsp + 0x60], rax
jne 0x140010f83
add dword [r13], ebp
add dword [r12], ebp
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
add dword [r12], ebp
jmp 0x140011154
mov dword [r13], eax
add dword [r12], ebp
jmp 0x140011154
mov r13, rbp
call fcn.14000f6b0
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010fb9
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xf7
jne 0x14001200d
inc edx
call fcn.14000f6b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140010fde
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
movzx ecx, byte [rcx + rdx + 1]
and cl, 0xf8
cmp cl, 0xc0
jne 0x14001200d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 6]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140011013
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001114c
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x1400110de
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400110de
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x1400110de
cmp qword [rsp + 0x60], 6
jne 0x1400110de
add dword [rbp], 6
jmp 0x14001114f
call fcn.14000f6b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140011086
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rcx + rdx], 0x45
jne 0x140011172
mov r13, rbp
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014190
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x33
jne 0x14001200d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 2
call fcn.140014190
add dword [r14 + 0x10], 2
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x14001114f
mov r13, rbp
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jb 0x14001200d
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x85
ja 0x14001200d
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
lea rcx, [0x140105b50]
mov ebp, dword [rcx + rax*4 - 0x20c]
inc dword [r14 + 0x10]
dec dword [rsi + 0x20]
mov rcx, r14
call fcn.140012ef0
mov rcx, rsi
mov rdx, rax
mov r8d, ebp
call fcn.1400145d0
test al, al
jne 0x140011154
jmp 0x14001200d
mov dword [rbp], eax
add dword [r12], 6
mov ebp, dword [r12]
cmp ebp, edi
jb 0x1400107b3
jmp 0x1400121ce
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x1400111f8
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
and al, 0xfa
cmp al, 0x48
jne 0x1400112ad
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014190
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x81
jne 0x140011343
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xe8
jne 0x140011343
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 6
call fcn.140014190
add dword [r14 + 0x10], 6
jmp 0x140011154
mov dword [rbp], eax
mov r13, rbp
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f6b0
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x14001121d
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rcx + rdx], 0x89
jne 0x14001200d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x14001124b
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010ee4
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010b8a
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010b8a
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b8a
cmp qword [rsp + 0x60], 1
je 0x140010b68
jmp 0x140010b8a
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x66
jne 0x1400113af
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014190
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x88
jb 0x140011436
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x8b
ja 0x140011436
mov r13, rbp
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
mov ecx, eax
and ecx, 0xffffffc0
cmp ecx, 0xc0
je 0x1400110be
cmp ecx, 0x40
je 0x140011730
test ecx, ecx
jne 0x14001200d
and eax, 6
cmp eax, 4
jne 0x1400110be
jmp 0x14001200d
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jne 0x140011366
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xe8
je 0x140011389
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jne 0x1400113e9
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xc0
jne 0x1400113e9
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.140014190
add dword [r14 + 0x10], 3
jmp 0x140011154
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
and al, 0xf0
mov r13, rbp
cmp al, 0x50
jne 0x1400114b2
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014190
inc dword [r14 + 0x10]
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jne 0x140011483
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0x60
jne 0x140011483
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 5
call fcn.140014190
add dword [r14 + 0x10], 5
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x44
jne 0x140011589
mov r13, rbp
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x89
jne 0x140011154
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 2
call fcn.140014190
add dword [r14 + 0x10], 2
jmp 0x140011523
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x2b
jne 0x14001155a
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0xc0
jb 0x14001155a
mov r13, rbp
jmp 0x1400110be
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x65
jne 0x140011591
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x48
jne 0x14001200d
mov rcx, r14
mov edx, 2
call fcn.1400127a0
cmp byte [rax], 0x88
jb 0x14001200d
mov rcx, r14
mov edx, 2
call fcn.1400127a0
cmp byte [rax], 0x8b
ja 0x14001200d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.140014190
add dword [r14 + 0x10], 3
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.140014240
test eax, eax
js 0x14001200d
mov ebp, eax
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, ebp
call fcn.140014190
add dword [r14 + 0x10], ebp
jmp 0x140011154
mov r13, rbp
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x85
jne 0x1400115f6
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0xc0
jae 0x1400110be
jmp 0x14001200d
mov r13, rbp
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x80
jne 0x140011657
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x3d
jne 0x140011657
add dword [r12], 2
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x1400118bd
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x1400118c7
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
jne 0x1400118cf
jmp 0x1400118bf
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
and al, 0xfd
cmp al, 0x89
jne 0x1400116fc
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, rbp
lea r8, [rsp + 0x5f]
call fcn.140014240
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.1400121f0
test ebp, ebp
js 0x1400117a9
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
inc ebp
jmp 0x140011546
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x90
je 0x1400113c7
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xb8
je 0x140011413
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x33
je 0x1400110be
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xf6
jne 0x140011a90
mov byte [rsp + 0x5f], 0
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, rbp
lea r8, [rsp + 0x5f]
call fcn.140014240
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.1400121f0
test ebp, ebp
js 0x14001200d
cmp byte [rsp + 0x5f], 0
jne 0x14001200d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 2
jmp 0x140011546
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xb8
jne 0x14001175f
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 9
call fcn.140014190
add dword [r14 + 0x10], 9
jmp 0x140011154
and eax, 7
mov rcx, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rcx + 0x40]
mov rcx, rsi
cmp eax, 4
jne 0x14001180d
mov r8d, 4
call fcn.140014190
add dword [r12], 4
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xc7
jne 0x140011822
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x44
jne 0x14001200d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 8
call fcn.140014190
add dword [r14 + 0x10], 8
jmp 0x140011154
cmp ebp, 0xfffffffe
jne 0x14001200d
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012ef0
movzx edx, byte [rsp + 0x5f]
test dl, dl
je 0x1400118e7
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011bad
mov r8, qword [rsp + 0x30]
cmp ecx, dword [r8]
jae 0x140011bf0
add dl, 0xb8
mov r8, qword [rsi + 0x10]
mov byte [r8 + rcx], dl
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x140011bfb
jmp 0x140011ca7
mov r8d, 3
call fcn.140014190
add dword [r12], 3
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xff
je 0x140011ade
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x8d
jne 0x140011bb7
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x3f
ja 0x140011c0f
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 7
cmp al, 5
jne 0x140011c0f
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx ebp, byte [rax]
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012ef0
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011c44
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011d61
shr bpl, 3
or bpl, 0xb8
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], bpl
jmp 0x140011909
inc eax
inc eax
mov dword [r13], eax
jmp 0x140011930
mov rcx, qword [rsp + 0x28]
mov byte [rcx], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x140011928
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x53
inc dword [rsi + 0x20]
jmp 0x140011930
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011c44
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011d61
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], 0xa1
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x140011d6c
mov dword [r13], edx
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rcx, r14
call fcn.140012ef0
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011962
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x1400119c7
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], 0x49
mov ecx, dword [rsi + 0x20]
inc ecx
mov dword [rsi + 0x20], ecx
cmp qword [rsi], 0
jne 0x1400119cf
jmp 0x140011964
inc ecx
add ecx, 9
mov edx, ecx
inc edx
inc edx
inc edx
mov dword [r13], edx
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014190
inc dword [r14 + 0x10]
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x1400119ba
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x1400119f9
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
jne 0x140011a01
jmp 0x1400119bc
inc eax
inc eax
mov dword [r13], eax
jmp 0x140011154
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011a20
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], 0xbb
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x140011a2b
jmp 0x140011969
mov rcx, qword [rsp + 0x28]
mov byte [rcx], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x140011de7
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x5b
inc dword [rsi + 0x20]
jmp 0x140011154
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
jbe 0x140011a3f
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011a5e
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [rsi + 0x20]
add edx, 8
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
je 0x140011969
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011b7d
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x41
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011b85
inc edx
jmp 0x14001196d
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x85
jne 0x140011cb8
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.140014240
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.1400121f0
test ebp, ebp
jns 0x140011645
jmp 0x14001200d
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0x3f
ja 0x14001200d
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 7
cmp al, 5
jne 0x14001200d
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0x38
cmp al, 0x20
je 0x140011b3e
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0x38
cmp al, 0x10
jne 0x14001200d
add dword [r14 + 0x10], 2
dec dword [rsi + 0x20]
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0x38
xor r15d, r15d
cmp al, 0x20
sete r15b
mov rcx, r14
call fcn.140012e20
mov r8d, 4
sub r8d, r15d
mov rcx, rsi
mov rdx, rax
jmp 0x14001113e
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011bcd
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x80
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011bd5
jmp 0x14001196d
add ecx, 9
mov edx, ecx
jmp 0x140011ca7
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x63
je 0x14001156e
jmp 0x14001200d
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011c52
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x3b
inc dword [rsi + 0x20]
jmp 0x140011973
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
jbe 0x140011c5f
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011c7a
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.140014240
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.1400121f0
jmp 0x140011645
add ecx, 9
mov edx, ecx
mov dword [r13], edx
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011973
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [rsi + 0x20]
add edx, 8
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
je 0x140011ca7
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011d89
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x48
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011d91
jmp 0x140011ca9
inc edx
inc edx
mov ecx, edx
inc ecx
mov dword [r13], ecx
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xd1
jne 0x140011cdb
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0xc0
jae 0x1400110be
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jne 0x140011cfe
mov rcx, r14
mov edx, 1
call fcn.1400127a0
cmp byte [rax], 0xc0
jae 0x14001138c
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xc3
je 0x1400113c7
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xcc
je 0x1400113c7
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xe8
je 0x140011d3e
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xe9
jne 0x140011df4
mov rcx, r14
call fcn.140014160
xor r15d, r15d
cmp byte [rax], 0xe9
sete r15b
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140012ef0
jmp 0x140011b69
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
ja 0x140011de7
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011db7
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x8b
mov ecx, dword [rsi + 0x20]
inc ecx
mov dword [rsi + 0x20], ecx
cmp qword [rsi], 0
jne 0x140011dbf
jmp 0x140011cad
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
movzx edx, byte [rsp + 0x5f]
lea eax, [rdx*8]
or al, dl
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011de7
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x140011154
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011154
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x73
jb 0x140011e54
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x75
ja 0x140011e54
mov rcx, r14
call fcn.140014160
movzx eax, byte [rax]
lea rcx, [0x140105b50]
mov ebp, dword [rcx + rax*4 - 0x1cc]
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
mov edx, dword [r14 + 0x10]
add edx, 2
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
add rdx, rax
add rdx, qword [rcx + 0x40]
mov rcx, rsi
jmp 0x14001113b
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xff
je 0x140011ed6
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0x83
jne 0x140011e88
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0x60
je 0x140011413
mov rcx, r14
call fcn.140014160
cmp byte [rax], 0xc6
jne 0x14001200d
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.140014240
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.1400121f0
test ebp, ebp
jns 0x1400116e9
jmp 0x14001200d
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx eax, byte [rax]
mov byte [rsp + 0x40], al
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx ebp, byte [rax]
shr ebp, 3
and ebp, 7
mov rcx, r14
mov edx, 1
call fcn.1400127a0
movzx edx, byte [rax]
and dl, 7
movzx ecx, byte [rsp + 0x40]
cmp cl, 0xc0
jb 0x140011f3a
cmp ebp, 6
ja 0x140011f30
mov eax, 0x47
bt eax, ebp
jb 0x1400110be
cmp dl, 5
sete cl
xor eax, eax
jmp 0x140011f79
mov eax, ecx
mov r8d, ecx
cmp al, 0x40
setb al
cmp dl, 5
sete cl
cmp r8b, 0x3f
ja 0x140011f79
cmp bpl, 2
jne 0x140011f79
cmp dl, 5
jne 0x140011f79
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012e20
mov rcx, rsi
mov rdx, rax
mov r8d, 4
jmp 0x14001113e
cmp bpl, 4
jne 0x14001200d
and al, cl
cmp al, 1
jne 0x140011faf
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012e20
mov rcx, rsi
mov rdx, rax
mov r8d, 3
call fcn.1400145d0
mov r15b, 1
jmp 0x140011143
lea r15, [rsp + 0x60]
mov rcx, r15
mov rdx, r14
mov r8d, 1
call fcn.140012be0
mov rcx, rbx
mov rdx, r15
xor r8d, r8d
call fcn.140014240
mov ebp, eax
mov rcx, r15
call fcn.1400121f0
test ebp, ebp
js 0x14001200d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
inc ebp
mov rcx, rsi
mov r8d, ebp
call fcn.140014190
add dword [r14 + 0x10], ebp
mov r15b, 1
jmp 0x140011154
xor r15d, r15d
cmp edx, 0x64
jbe 0x14001207b
mov rax, qword [rsp + 0x178]
cmp qword [rax], 0
mov r15, qword [0x1401054a8]
je 0x14001204d
mov rax, qword [rsp + 0x100]
xor rax, rsp
mov rcx, qword [r15]
cmp rcx, rax
jne 0x1400121e5
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
je 0x14001212e
cmp edx, dword [rsi + 0x30]
jbe 0x140012137
mov byte [rsi + 0x34], 0
jmp 0x140012022
test r15b, 1
jne 0x1400120a0
mov rax, qword [r14]
mov edx, edx
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.1400145d0
test al, al
je 0x14001200d
cmp byte [rsi + 0x34], 0
je 0x14001200d
cmp qword [rsi], 0
je 0x14001200d
mov eax, dword [rsi + 0x20]
mov r12d, dword [rsi + 0x24]
mov dword [rsi + 0x2c], eax
add r12, qword [rsi + 0x18]
je 0x14001200d
lea rcx, [rsp + 0x60]
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.1400148c0
cmp qword [rsp + 0xd0], 0
je 0x1400121bf
cmp byte [rsp + 0xb8], 0
je 0x1400121bf
cmp byte [rsp + 0x4c], 0
je 0x140012185
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov rcx, rbx
mov rdx, qword [rsp + 0x50]
mov r8, r12
call fcn.1400149c0
test al, al
jne 0x140012197
jmp 0x1400121bf
mov dword [r13], edx
jmp 0x140012022
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
jmp 0x140012022
cmp qword [rsp + 0x50], 0
je 0x14001200d
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov ecx, dword [rax + 0x20]
add rcx, qword [rax + 0x18]
mov eax, 0x80000000
cmp rcx, rax
ja 0x14001200d
mov al, 1
mov dword [rsp + 0x4c], eax
cmp edx, 9
ja 0x140012008
jmp 0x14001200d
lea rcx, [rsp + 0x60]
mov rdx, qword [rsp + 0x170]
call fcn.140014f90
mov rax, qword [rsp + 0x178]
mov qword [rax], r12
lea rcx, [rsp + 0x60]
call fcn.140015160
test al, al
jne 0x1400121bf
mov rax, qword [rsp + 0x178]
mov qword [rax], 0
lea rcx, [rsp + 0x60]
call fcn.140015220
jmp 0x14001200d
mov edx, ebp
jmp 0x140012008
mov dword [0], 0x2f1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
call fcn.1400d58e0
int3