Function at 0x140010470
Capabilities:
Check for software breakpoints
Parse credit card information

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rsi, r9
mov r12, r8
mov r14, rdx
mov rbx, rcx
mov rcx, qword [rsp + 0x178]
mov r15, qword [0x1400f74a8]
mov rax, qword [r15]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov qword [rcx], 0
cmp qword [r9], 0
je 0x1400104e3
cmp qword [rsi + 0x10], 0
je 0x140011eb2
cmp qword [rsi + 0x18], 0
je 0x140011eb2
cmp dword [rsi + 8], 0
je 0x140011eb2
cmp byte [rsi + 0x34], 0
je 0x140011eb2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
lea rdi, [rsi + 0x20]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
je 0x140010507
cmp edx, dword [rsi + 0x30]
jbe 0x14001050b
mov byte [rsi + 0x34], 0
jmp 0x14001051d
mov dword [rdi], edx
jmp 0x140010547
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x140010547
cmp qword [rsi + 0x10], 0
je 0x140011eb2
cmp qword [rsi + 0x18], 0
je 0x140011eb2
cmp dword [rsi + 8], 0
je 0x140011eb2
cmp byte [rsi + 0x34], 0
je 0x140011eb2
mov rax, qword [r14]
mov ecx, dword [r14 + 0x10]
add rcx, qword [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
mov qword [rsp + 0x50], r12
je 0x140010577
mov r13, rdi
cmp edx, dword [rsi + 0x30]
jbe 0x14001057e
mov byte [rsi + 0x34], 0
jmp 0x140010590
mov r13, rdi
mov dword [rdi], edx
jmp 0x1400105ba
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
cmp qword [rsi], 0
je 0x1400105ba
cmp qword [rsi + 0x10], 0
je 0x140011e9d
cmp qword [rsi + 0x18], 0
je 0x140011e9d
cmp dword [rsi + 8], 0
je 0x140011e9d
cmp byte [rsi + 0x34], 0
je 0x140011e9d
mov r9, qword [rsp + 0x170]
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, rsi
mov r8, r14
call fcn.140013990
test al, al
jne 0x140011e9d
mov eax, dword [rsi + 0x20]
mov dword [rsi + 0x24], eax
mov dword [rsi + 0x28], eax
cmp byte [rbx + 0x34], 0
je 0x140012065
lea r12, [r14 + 0x10]
mov eax, dword [rbx + 0x30]
and eax, 2
mov ecx, eax
shr ecx, 1
mov dword [rsp + 0x4c], ecx
xor ecx, ecx
test eax, eax
sete cl
lea edi, [rcx + rcx*2]
add edi, 0xa
mov edx, dword [r12]
cmp edx, edi
jae 0x140011e95
lea rax, [rsi + 0x28]
mov qword [rsp + 0x38], rax
lea rax, [rsi + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rsi + 0x34]
mov qword [rsp + 0x28], rax
xor r15d, r15d
mov ebp, edx
mov edx, ebp
jmp 0x14001066c
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xcc
jne 0x140011fd8
inc edx
mov dword [r12], edx
cmp edx, edi
jae 0x140011e98
mov rcx, qword [r14]
test r15b, 1
je 0x1400106ab
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14001068a
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x90
je 0x14001065e
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010650
mov rax, qword [rcx + 8]
jmp 0x140010650
mov edx, ebp
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400106c2
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xf
mov rbp, r13
jne 0x140010755
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x1400106f0
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010871
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010867
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010867
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010867
cmp qword [rsp + 0x60], 1
jne 0x140010867
inc dword [rbp]
jmp 0x140010874
call fcn.14000f540
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x14001076a
mov rdx, qword [rcx + 8]
mov eax, dword [r14 + 0x10]
cmp byte [rdx + rax], 0x88
jb 0x1400107a1
mov edx, eax
call fcn.14000f540
mov rcx, qword [r14]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
je 0x14001078b
mov rdx, qword [rcx + 8]
mov eax, dword [r14 + 0x10]
cmp byte [rdx + rax], 0x8b
ja 0x1400107a1
mov rdx, qword [rcx + 0x40]
add rdx, rax
jmp 0x14001098f
mov edx, eax
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400107b8
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x40
je 0x1400107e5
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400107d7
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x41
jne 0x140010bd3
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010802
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010a27
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010a00
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010a00
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010a00
cmp qword [rsp + 0x60], 1
jne 0x140010a00
inc dword [rbp]
jmp 0x140010a2a
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010874
mov dword [rbp], eax
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010896
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x1f
jne 0x140010926
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x1400108c1
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010c78
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010a0a
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010a0a
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010a0a
cmp qword [rsp + 0x60], 1
jne 0x140010a0a
inc dword [rbp]
jmp 0x140010c7b
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14001093b
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 5
je 0x140010a5e
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14001095e
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x10
je 0x14001098b
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x14001097d
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x11
jne 0x140010f78
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x1400109a8
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010d71
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010a17
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010a17
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010a17
cmp qword [rsp + 0x60], 1
jne 0x140010a17
mov r13, rbp
inc dword [rbp]
jmp 0x140010d77
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010a2a
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010c7b
mov r13, rbp
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010d77
mov dword [rbp], eax
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010a4c
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
movzx eax, byte [rax + rdx]
and al, 0xf0
cmp al, 0x50
jne 0x140010adf
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010a7b
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010bc4
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010b42
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010b42
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010b42
cmp qword [rsp + 0x60], 1
jne 0x140010b42
mov r13, rbp
inc dword [rbp]
inc dword [r12]
jmp 0x140010fe4
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010af4
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xb8
jb 0x140010b56
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010b13
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xbf
ja 0x140010b56
mov r13, rbp
mov rax, qword [rcx + 0x40]
add rax, rdx
mov rcx, rsi
mov rdx, rax
mov r8d, 5
call fcn.140014020
add dword [r12], 5
jmp 0x140010fe4
mov r13, rbp
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
inc dword [r12]
jmp 0x140010fe4
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010b6b
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x8b
jne 0x140010e31
inc edx
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010b90
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx + 1], 0xc0
jb 0x140010e31
mov r13, rbp
mov rax, qword [rcx + 0x40]
add rax, rdx
mov rcx, rsi
mov rdx, rax
mov r8d, 2
call fcn.140014020
add dword [r12], 2
jmp 0x140010fe4
mov r13, rbp
mov dword [rbp], eax
inc dword [r12]
jmp 0x140010fe4
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010be8
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0x44
jne 0x140010f01
add rdx, qword [rcx + 0x40]
mov r8d, dword [rbp]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010c13
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140011085
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010ff5
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010ff5
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010ff5
cmp qword [rsp + 0x60], 1
jne 0x140010ff5
inc dword [rbp]
jmp 0x140011088
mov dword [rbp], eax
mov r13, rbp
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010ca0
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
movzx eax, byte [rax + rdx]
and al, 0xc0
cmp al, 0x40
jne 0x140011e9d
call fcn.14000f540
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140010cc7
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
movzx ecx, byte [rcx + rdx]
and cl, 7
cmp cl, 4
jne 0x140011e9d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 3]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010cfb
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010d64
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010d52
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010d52
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 3
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010d52
cmp qword [rsp + 0x60], 3
jne 0x140010d52
add dword [rbp], 3
add dword [r12], 3
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
add dword [r12], 3
jmp 0x140010fe4
mov dword [rbp], eax
add dword [r12], 3
jmp 0x140010fe4
mov r13, rbp
mov dword [rbp], eax
inc dword [r14 + 0x10]
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.1400140d0
test eax, eax
js 0x140011e9d
mov ebp, eax
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov r8d, dword [r13]
lea eax, [r8 + rbp]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010db7
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010e24
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010e13
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010e13
mov r9d, ebp
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x40], r9
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010e13
mov rax, qword [rsp + 0x40]
cmp qword [rsp + 0x60], rax
jne 0x140010e13
add dword [r13], ebp
add dword [r12], ebp
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
add dword [r12], ebp
jmp 0x140010fe4
mov dword [r13], eax
add dword [r12], ebp
jmp 0x140010fe4
mov r13, rbp
call fcn.14000f540
mov rcx, qword [r14]
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x140010e49
mov rax, qword [rcx + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rax + rdx], 0xf7
jne 0x140011e9d
inc edx
call fcn.14000f540
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140010e6e
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
movzx ecx, byte [rcx + rdx + 1]
and cl, 0xf8
cmp cl, 0xc0
jne 0x140011e9d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 6]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x140010ea3
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010fdc
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010f6e
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010f6e
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010f6e
cmp qword [rsp + 0x60], 6
jne 0x140010f6e
add dword [rbp], 6
jmp 0x140010fdf
call fcn.14000f540
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x140010f16
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rcx + rdx], 0x45
jne 0x140011002
mov r13, rbp
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014020
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x33
jne 0x140011e9d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 2
call fcn.140014020
add dword [r14 + 0x10], 2
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010fdf
mov r13, rbp
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jb 0x140011e9d
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x85
ja 0x140011e9d
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
lea rcx, [0x1400f7af0]
mov ebp, dword [rcx + rax*4 - 0x20c]
inc dword [r14 + 0x10]
dec dword [rsi + 0x20]
mov rcx, r14
call fcn.140012d80
mov rcx, rsi
mov rdx, rax
mov r8d, ebp
call fcn.140014460
test al, al
jne 0x140010fe4
jmp 0x140011e9d
mov dword [rbp], eax
add dword [r12], 6
mov ebp, dword [r12]
cmp ebp, edi
jb 0x140010643
jmp 0x14001205e
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011088
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
and al, 0xfa
cmp al, 0x48
jne 0x14001113d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014020
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x81
jne 0x1400111d3
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xe8
jne 0x1400111d3
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 6
call fcn.140014020
add dword [r14 + 0x10], 6
jmp 0x140010fe4
mov dword [rbp], eax
mov r13, rbp
mov edx, dword [r14 + 0x10]
inc edx
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
call fcn.14000f540
mov rax, qword [r14]
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x1400110ad
mov rcx, qword [rax + 8]
mov edx, dword [r14 + 0x10]
cmp byte [rcx + rdx], 0x89
jne 0x140011e9d
add rdx, qword [rax + 0x40]
mov rbp, r13
mov r8d, dword [r13]
lea eax, [r8 + 1]
mov rcx, qword [rsp + 0x38]
cmp r8d, dword [rcx]
jne 0x1400110db
mov rcx, qword [rsp + 0x38]
mov dword [rcx], eax
mov rcx, qword [rsi]
test rcx, rcx
je 0x140010d74
mov r9, qword [rsp + 0x30]
cmp eax, dword [r9]
ja 0x140010a1a
mov rcx, qword [rcx]
test rcx, rcx
je 0x140010a1a
add r8, qword [rsi + 0x10]
mov qword [rsp + 0x60], 0
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140010a1a
cmp qword [rsp + 0x60], 1
je 0x1400109f8
jmp 0x140010a1a
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x66
jne 0x14001123f
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014020
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x88
jb 0x1400112c6
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x8b
ja 0x1400112c6
mov r13, rbp
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
mov ecx, eax
and ecx, 0xffffffc0
cmp ecx, 0xc0
je 0x140010f4e
cmp ecx, 0x40
je 0x1400115c0
test ecx, ecx
jne 0x140011e9d
and eax, 6
cmp eax, 4
jne 0x140010f4e
jmp 0x140011e9d
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jne 0x1400111f6
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xe8
je 0x140011219
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jne 0x140011279
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xc0
jne 0x140011279
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.140014020
add dword [r14 + 0x10], 3
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
and al, 0xf0
mov r13, rbp
cmp al, 0x50
jne 0x140011342
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014020
inc dword [r14 + 0x10]
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jne 0x140011313
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0x60
jne 0x140011313
mov r13, rbp
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 5
call fcn.140014020
add dword [r14 + 0x10], 5
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x44
jne 0x140011419
mov r13, rbp
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x89
jne 0x140010fe4
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 2
call fcn.140014020
add dword [r14 + 0x10], 2
jmp 0x1400113b3
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x2b
jne 0x1400113ea
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0xc0
jb 0x1400113ea
mov r13, rbp
jmp 0x140010f4e
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x65
jne 0x140011421
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x48
jne 0x140011e9d
mov rcx, r14
mov edx, 2
call fcn.140012630
cmp byte [rax], 0x88
jb 0x140011e9d
mov rcx, r14
mov edx, 2
call fcn.140012630
cmp byte [rax], 0x8b
ja 0x140011e9d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.140014020
add dword [r14 + 0x10], 3
mov rcx, rbx
mov rdx, r14
xor r8d, r8d
call fcn.1400140d0
test eax, eax
js 0x140011e9d
mov ebp, eax
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, ebp
call fcn.140014020
add dword [r14 + 0x10], ebp
jmp 0x140010fe4
mov r13, rbp
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x85
jne 0x140011486
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0xc0
jae 0x140010f4e
jmp 0x140011e9d
mov r13, rbp
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x80
jne 0x1400114e7
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x3d
jne 0x1400114e7
add dword [r12], 2
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x14001174d
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x140011757
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
jne 0x14001175f
jmp 0x14001174f
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
and al, 0xfd
cmp al, 0x89
jne 0x14001158c
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, rbp
lea r8, [rsp + 0x5f]
call fcn.1400140d0
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.140012080
test ebp, ebp
js 0x140011639
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
inc ebp
jmp 0x1400113d6
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x90
je 0x140011257
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xb8
je 0x1400112a3
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x33
je 0x140010f4e
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xf6
jne 0x140011920
mov byte [rsp + 0x5f], 0
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, rbp
lea r8, [rsp + 0x5f]
call fcn.1400140d0
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.140012080
test ebp, ebp
js 0x140011e9d
cmp byte [rsp + 0x5f], 0
jne 0x140011e9d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
add ebp, 2
jmp 0x1400113d6
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0xb8
jne 0x1400115ef
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 9
call fcn.140014020
add dword [r14 + 0x10], 9
jmp 0x140010fe4
and eax, 7
mov rcx, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rcx + 0x40]
mov rcx, rsi
cmp eax, 4
jne 0x14001169d
mov r8d, 4
call fcn.140014020
add dword [r12], 4
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xc7
jne 0x1400116b2
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x44
jne 0x140011e9d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 8
call fcn.140014020
add dword [r14 + 0x10], 8
jmp 0x140010fe4
cmp ebp, 0xfffffffe
jne 0x140011e9d
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012d80
movzx edx, byte [rsp + 0x5f]
test dl, dl
je 0x140011777
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011a3d
mov r8, qword [rsp + 0x30]
cmp ecx, dword [r8]
jae 0x140011a80
add dl, 0xb8
mov r8, qword [rsi + 0x10]
mov byte [r8 + rcx], dl
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x140011a8b
jmp 0x140011b37
mov r8d, 3
call fcn.140014020
add dword [r12], 3
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xff
je 0x14001196e
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x8d
jne 0x140011a47
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x3f
ja 0x140011a9f
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 7
cmp al, 5
jne 0x140011a9f
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx ebp, byte [rax]
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012d80
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011ad4
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011bf1
shr bpl, 3
or bpl, 0xb8
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], bpl
jmp 0x140011799
inc eax
inc eax
mov dword [r13], eax
jmp 0x1400117c0
mov rcx, qword [rsp + 0x28]
mov byte [rcx], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x1400117b8
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x53
inc dword [rsi + 0x20]
jmp 0x1400117c0
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x140011ad4
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011bf1
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], 0xa1
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x140011bfc
mov dword [r13], edx
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rcx, r14
call fcn.140012d80
cmp qword [rsi], 0
mov ecx, dword [rsi + 0x20]
je 0x1400117f2
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011857
mov rdx, qword [rsi + 0x10]
mov byte [rdx + rcx], 0x49
mov ecx, dword [rsi + 0x20]
inc ecx
mov dword [rsi + 0x20], ecx
cmp qword [rsi], 0
jne 0x14001185f
jmp 0x1400117f4
inc ecx
add ecx, 9
mov edx, ecx
inc edx
inc edx
inc edx
mov dword [r13], edx
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 1
call fcn.140014020
inc dword [r14 + 0x10]
cmp qword [rsi], 0
mov eax, dword [rsi + 0x20]
je 0x14001184a
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x140011889
mov rcx, qword [rsi + 0x10]
mov byte [rcx + rax], 0x49
mov eax, dword [rsi + 0x20]
inc eax
mov dword [rsi + 0x20], eax
cmp qword [rsi], 0
jne 0x140011891
jmp 0x14001184c
inc eax
inc eax
mov dword [r13], eax
jmp 0x140010fe4
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x1400118b0
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], 0xbb
mov edx, dword [rsi + 0x20]
lea ecx, [rdx + 1]
mov dword [rsi + 0x20], ecx
add edx, 9
cmp qword [rsi], 0
jne 0x1400118bb
jmp 0x1400117f9
mov rcx, qword [rsp + 0x28]
mov byte [rcx], 0
mov rcx, qword [rsp + 0x30]
cmp eax, dword [rcx]
jae 0x140011c77
mov rcx, qword [rsi + 0x10]
mov eax, eax
mov byte [rcx + rax], 0x5b
inc dword [rsi + 0x20]
jmp 0x140010fe4
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
jbe 0x1400118cf
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x1400118ee
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [rsi + 0x20]
add edx, 8
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
je 0x1400117f9
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011a0d
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x41
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011a15
inc edx
jmp 0x1400117fd
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x85
jne 0x140011b48
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.1400140d0
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.140012080
test ebp, ebp
jns 0x1400114d5
jmp 0x140011e9d
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0x3f
ja 0x140011e9d
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 7
cmp al, 5
jne 0x140011e9d
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0x38
cmp al, 0x20
je 0x1400119ce
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0x38
cmp al, 0x10
jne 0x140011e9d
add dword [r14 + 0x10], 2
dec dword [rsi + 0x20]
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0x38
xor r15d, r15d
cmp al, 0x20
sete r15b
mov rcx, r14
call fcn.140012cb0
mov r8d, 4
sub r8d, r15d
mov rcx, rsi
mov rdx, rax
jmp 0x140010fce
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011a5d
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x80
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011a65
jmp 0x1400117fd
add ecx, 9
mov edx, ecx
jmp 0x140011b37
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x63
je 0x1400113fe
jmp 0x140011e9d
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011ae2
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x3b
inc dword [rsi + 0x20]
jmp 0x140011803
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
jbe 0x140011aef
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011b0a
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.1400140d0
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.140012080
jmp 0x1400114d5
add ecx, 9
mov edx, ecx
mov dword [r13], edx
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140011803
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
mov edx, dword [rsi + 0x20]
add edx, 8
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
je 0x140011b37
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011c19
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x48
mov edx, dword [rsi + 0x20]
inc edx
mov dword [rsi + 0x20], edx
cmp qword [rsi], 0
mov ecx, edx
jne 0x140011c21
jmp 0x140011b39
inc edx
inc edx
mov ecx, edx
inc ecx
mov dword [r13], ecx
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xd1
jne 0x140011b6b
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0xc0
jae 0x140010f4e
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jne 0x140011b8e
mov rcx, r14
mov edx, 1
call fcn.140012630
cmp byte [rax], 0xc0
jae 0x14001121c
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xc3
je 0x140011257
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xcc
je 0x140011257
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xe8
je 0x140011bce
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xe9
jne 0x140011c84
mov rcx, r14
call fcn.140013ff0
xor r15d, r15d
cmp byte [rax], 0xe9
sete r15b
inc dword [r14 + 0x10]
mov rcx, r14
call fcn.140012d80
jmp 0x1400119f9
mov rdx, qword [rsp + 0x28]
mov byte [rdx], 0
lea edx, [rcx + 8]
mov r8, qword [rsp + 0x30]
cmp edx, dword [r8]
ja 0x140011c77
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
mov rax, qword [rsp + 0x30]
cmp ecx, dword [rax]
jae 0x140011c47
mov rax, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rax + rcx], 0x8b
mov ecx, dword [rsi + 0x20]
inc ecx
mov dword [rsi + 0x20], ecx
cmp qword [rsi], 0
jne 0x140011c4f
jmp 0x140011b3d
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
movzx edx, byte [rsp + 0x5f]
lea eax, [rdx*8]
or al, dl
mov rdx, qword [rsp + 0x30]
cmp ecx, dword [rdx]
jae 0x140011c77
mov rdx, qword [rsi + 0x10]
mov ecx, ecx
mov byte [rdx + rcx], al
inc dword [rsi + 0x20]
jmp 0x140010fe4
mov rax, qword [rsp + 0x28]
mov byte [rax], 0
jmp 0x140010fe4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x73
jb 0x140011ce4
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x75
ja 0x140011ce4
mov rcx, r14
call fcn.140013ff0
movzx eax, byte [rax]
lea rcx, [0x1400f7af0]
mov ebp, dword [rcx + rax*4 - 0x1cc]
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
mov edx, dword [r14 + 0x10]
add edx, 2
mov dword [r14 + 0x10], edx
mov rcx, qword [r14]
add rdx, rax
add rdx, qword [rcx + 0x40]
mov rcx, rsi
jmp 0x140010fcb
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xff
je 0x140011d66
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0x83
jne 0x140011d18
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
and al, 0xf8
cmp al, 0x60
je 0x1400112a3
mov rcx, r14
call fcn.140013ff0
cmp byte [rax], 0xc6
jne 0x140011e9d
lea rbp, [rsp + 0x60]
mov rcx, rbp
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, rbp
xor r8d, r8d
call fcn.1400140d0
mov ebp, eax
lea rcx, [rsp + 0x60]
call fcn.140012080
test ebp, ebp
jns 0x140011579
jmp 0x140011e9d
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx eax, byte [rax]
mov byte [rsp + 0x40], al
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx ebp, byte [rax]
shr ebp, 3
and ebp, 7
mov rcx, r14
mov edx, 1
call fcn.140012630
movzx edx, byte [rax]
and dl, 7
movzx ecx, byte [rsp + 0x40]
cmp cl, 0xc0
jb 0x140011dca
cmp ebp, 6
ja 0x140011dc0
mov eax, 0x47
bt eax, ebp
jb 0x140010f4e
cmp dl, 5
sete cl
xor eax, eax
jmp 0x140011e09
mov eax, ecx
mov r8d, ecx
cmp al, 0x40
setb al
cmp dl, 5
sete cl
cmp r8b, 0x3f
ja 0x140011e09
cmp bpl, 2
jne 0x140011e09
cmp dl, 5
jne 0x140011e09
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012cb0
mov rcx, rsi
mov rdx, rax
mov r8d, 4
jmp 0x140010fce
cmp bpl, 4
jne 0x140011e9d
and al, cl
cmp al, 1
jne 0x140011e3f
add dword [r14 + 0x10], 2
mov rcx, r14
call fcn.140012cb0
mov rcx, rsi
mov rdx, rax
mov r8d, 3
call fcn.140014460
mov r15b, 1
jmp 0x140010fd3
lea r15, [rsp + 0x60]
mov rcx, r15
mov rdx, r14
mov r8d, 1
call fcn.140012a70
mov rcx, rbx
mov rdx, r15
xor r8d, r8d
call fcn.1400140d0
mov ebp, eax
mov rcx, r15
call fcn.140012080
test ebp, ebp
js 0x140011e9d
mov rax, qword [r14]
mov edx, dword [r14 + 0x10]
add rdx, qword [rax + 0x40]
inc ebp
mov rcx, rsi
mov r8d, ebp
call fcn.140014020
add dword [r14 + 0x10], ebp
mov r15b, 1
jmp 0x140010fe4
xor r15d, r15d
cmp edx, 0x64
jbe 0x140011f0b
mov rax, qword [rsp + 0x178]
cmp qword [rax], 0
mov r15, qword [0x1400f74a8]
je 0x140011edd
mov rax, qword [rsp + 0x100]
xor rax, rsp
mov rcx, qword [r15]
cmp rcx, rax
jne 0x140012075
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsi + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov ecx, dword [rsi + 0x20]
lea edx, [rcx + 8]
cmp qword [rsi], 0
je 0x140011fbe
cmp edx, dword [rsi + 0x30]
jbe 0x140011fc7
mov byte [rsi + 0x34], 0
jmp 0x140011eb2
test r15b, 1
jne 0x140011f30
mov rax, qword [r14]
mov edx, edx
add rdx, qword [rax + 0x40]
mov rcx, rsi
mov r8d, 3
call fcn.140014460
test al, al
je 0x140011e9d
cmp byte [rsi + 0x34], 0
je 0x140011e9d
cmp qword [rsi], 0
je 0x140011e9d
mov eax, dword [rsi + 0x20]
mov r12d, dword [rsi + 0x24]
mov dword [rsi + 0x2c], eax
add r12, qword [rsi + 0x18]
je 0x140011e9d
lea rcx, [rsp + 0x60]
mov rdx, r14
xor r8d, r8d
xor r9d, r9d
call fcn.140014750
cmp qword [rsp + 0xd0], 0
je 0x14001204f
cmp byte [rsp + 0xb8], 0
je 0x14001204f
cmp byte [rsp + 0x4c], 0
je 0x140012015
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov rcx, rbx
mov rdx, qword [rsp + 0x50]
mov r8, r12
call fcn.140014850
test al, al
jne 0x140012027
jmp 0x14001204f
mov dword [r13], edx
jmp 0x140011eb2
mov rdx, qword [rsi + 0x10]
mov qword [rdx + rcx], rax
add dword [rsi + 0x20], 8
jmp 0x140011eb2
cmp qword [rsp + 0x50], 0
je 0x140011e9d
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
mov ecx, dword [rax + 0x20]
add rcx, qword [rax + 0x18]
mov eax, 0x80000000
cmp rcx, rax
ja 0x140011e9d
mov al, 1
mov dword [rsp + 0x4c], eax
cmp edx, 9
ja 0x140011e98
jmp 0x140011e9d
lea rcx, [rsp + 0x60]
mov rdx, qword [rsp + 0x170]
call fcn.140014e20
mov rax, qword [rsp + 0x178]
mov qword [rax], r12
lea rcx, [rsp + 0x60]
call fcn.140014ff0
test al, al
jne 0x14001204f
mov rax, qword [rsp + 0x178]
mov qword [rax], 0
lea rcx, [rsp + 0x60]
call fcn.1400150b0
jmp 0x140011e9d
mov edx, ebp
jmp 0x140011e98
mov dword [0], 0x2f1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_abort
call fcn.1400c8850
int3