Function at 0x14026bc40
Capabilities:
Check for software breakpoints
Parse credit card information

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rax, qword [r9]
mov r12d, dword [rsp + 0x80]
mov rdi, rcx
mov rbx, rdx
mov rcx, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
mov rbp, r8
mov rsi, r9
call fcn.140269270
test eax, eax
jne 0x14026bcaf
mov rax, qword [rsi]
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x14026bdf6
mov r8, qword [rax + 0x10]
xor eax, eax
cmp byte [r8], 0x3a
je case.0x14026bea5.56
mov dil, byte [r8 + rax]
lea edx, [rdi - 0x41]
cmp dl, 0x19
jbe case.0x14026bea5.56
inc rax
cmp rcx, rax
jne 0x14026bc92
jmp 0x14026bdf6
mov rcx, qword [rsi + 8]
mov eax, dword [rsi + 0x10]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
cmp eax, 5
je 0x14026bd1c
jg 0x14026bcd8
cmp eax, 1
je 0x14026bceb
cmp eax, 3
je 0x14026bcf5
test eax, eax
je 0x14026bcff
jmp 0x14026bdc8
cmp eax, 0x25
je 0x14026bcff
cmp eax, 0x42
je 0x14026bd9f
jmp 0x14026bdc8
call fcn.140269310
jmp 0x14026bddd
call fcn.140269340
jmp 0x14026bddd
cmp byte [rdi + 0xb74], 0
jne 0x14026bd12
cmp byte [rbp + 0xc], 5
jne 0x14026bdc8
call fcn.140269240
jmp 0x14026bddd
test rdx, rdx
jne 0x14026bd4e
mov rax, qword [rsi]
cmp qword [rax + 0x18], 0
jne 0x14026bde6
mov r8d, 0x1a8
lea rdx, str.nghttp2_lib_nghttp2_http.c
lea rcx, str.nv__name__len___0
call qword [sym.imp.msvcrt.dll__assert]
jmp 0x14026bde6
mov al, byte [rcx]
and eax, 0xffffffdf
sub eax, 0x41
cmp al, 0x19
ja 0x14026bd21
add rdx, rcx
lea rax, [rcx + 1]
movabs r9, 0x3ff680000000000
cmp rdx, rax
je 0x14026be07
mov cl, byte [rax]
mov r8d, ecx
and r8d, 0xffffffdf
sub r8d, 0x41
cmp r8b, 0x19
jbe 0x14026bd9a
cmp cl, 0x39
ja 0x14026bd21
mov r10, r9
shr r10, cl
mov rcx, r10
and cl, 1
je 0x14026bd21
inc rax
jmp 0x14026bd6b
test byte [rbx + 0xd8], 0x40
je 0x14026bdc8
xor eax, eax
cmp rax, rdx
je 0x14026bd21
mov r8b, byte [rcx + rax]
cmp r8b, 0x20
je 0x14026bdc3
cmp r8b, 9
jne 0x14026bdc8
inc rax
jmp 0x14026bdaa
test byte [rbx + 0xd8], 0x40
je 0x14026bdd8
call fcn.1402692b0
jmp 0x14026bddd
call fcn.1402692e0
test eax, eax
jne 0x14026be07
jmp 0x14026bd21
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
cmp byte [rax], 0x3a
je case.0x14026bea5.56
or dword [rbx + 0xd4], 0x40
mov eax, 0xffffff97
jmp 0x14026c2f4
mov rax, qword [rsi]
cmp byte [rdi + 0xb74], 0
mov rax, qword [rax + 0x10]
mov cl, byte [rax]
jne 0x14026be27
cmp byte [rbp + 0xc], 5
jne 0x14026c16d
xor edx, edx
jmp 0x14026be33
xor edx, edx
cmp byte [rdi + 0xb71], 0
setne dl
cmp cl, 0x3a
jne 0x14026be4e
test r12d, r12d
jne case.0x14026bea5.56
test byte [rbx + 0xd4], 0x40
jne case.0x14026bea5.56
mov eax, dword [rsi + 0x10]
cmp eax, 0x25
je 0x14026c06c
jg 0x14026be8b
cmp eax, 3
je 0x14026bf83
jg 0x14026be74
test eax, eax
je 0x14026bea7
dec eax
je 0x14026beb2
jmp case.0x14026bea5.57
cmp eax, 5
je 0x14026bfdb
cmp eax, 0x1b
je 0x14026c074
jmp case.0x14026bea5.57
sub eax, 0x38
cmp eax, 0xb
ja case.0x14026bea5.57
lea r8, [0x1403790e0]
movsxd rax, dword [r8 + rax*4]
add rax, r8
jmp rax
mov r8d, 1
jmp 0x14026c05a
mov r8d, 4
mov rdx, rsi
mov rcx, rbx
call fcn.140251d60
test eax, eax
je case.0x14026bea5.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
cmp rdx, 4
je 0x14026bee4
cmp rdx, 7
je 0x14026bf11
jmp 0x14026c14f
mov rdx, qword [rax + 0x10]
mov r8d, 4
lea rcx, str.HEAD
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14026c14f
or dword [rbx + 0xd4], 0x100
jmp 0x14026c14f
mov rdx, qword [rax + 0x10]
mov al, byte [rdx + 6]
cmp al, 0x53
je 0x14026bf5a
cmp al, 0x54
jne 0x14026c14f
mov r8d, 7
lea rcx, str.CONNECT
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14026c14f
test byte [rbx + 0xa8], 1
je case.0x14026bea5.56
or dword [rbx + 0xd4], 0x80
jmp 0x14026c14f
mov r8d, 7
lea rcx, str.OPTIONS
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14026c14f
or dword [rbx + 0xd4], 0x200
jmp 0x14026c14f
mov r8d, 2
mov rdx, rsi
mov rcx, rbx
call fcn.140251d60
test eax, eax
je case.0x14026bea5.56
mov rdx, qword [rsi + 8]
mov rax, qword [rdx + 0x10]
mov al, byte [rax]
cmp al, 0x2f
jne 0x14026bfb9
or dword [rbx + 0xd4], 0x800
jmp 0x14026c14f
cmp qword [rdx + 0x18], 1
jne 0x14026c14f
cmp al, 0x2a
jne 0x14026c14f
or dword [rbx + 0xd4], 0x1000
jmp 0x14026c14f
mov r8d, 8
mov rdx, rsi
mov rcx, rbx
call fcn.140251d60
test eax, eax
je case.0x14026bea5.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
cmp rdx, 4
jne 0x14026c015
mov rdx, qword [rax + 0x10]
mov r8d, 4
lea rcx, str.http
jmp 0x14026c030
cmp rdx, 5
jne 0x14026c14f
mov rdx, qword [rax + 0x10]
mov r8d, 5
lea rcx, str.https
call fcn.140265370
test eax, eax
je 0x14026c14f
or dword [rbx + 0xd4], 0x2000
jmp 0x14026c14f
test edx, edx
je case.0x14026bea5.56
mov r8d, 0x8000
mov rdx, rsi
mov rcx, rbx
call fcn.140251d60
test eax, eax
jmp 0x14026c14d
mov r8d, 0x10
jmp 0x14026c05a
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x14026bea5.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je case.0x14026bea5.56
call fcn.140278040
mov qword [rbx + 0x30], rax
inc rax
jmp 0x14026c14d
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 8
jne case.0x14026bea5.56
mov rdx, qword [rax + 0x10]
mov r8d, 8
lea rcx, str.trailers
call fcn.140265370
jmp 0x14026c065
test r12d, r12d
jne 0x14026c14f
test byte [rbx + 0xa8], 1
je 0x14026c14f
test byte [rbx + 0xd8], 0x10
je 0x14026c14f
test byte [rbx + 0xd6], 2
jne 0x14026c14f
movzx edx, byte [rbx + 0xdd]
lea r12, [rsp + 0x28]
mov rcx, r12
call fcn.140269420
mov rax, qword [rsi + 8]
mov rcx, r12
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
call fcn.14026c480
test eax, eax
jne 0x14026c132
mov rcx, r12
call fcn.140269450
or dword [rbx + 0xd4], 0x10000
mov byte [rbx + 0xdd], al
jmp 0x14026c14f
mov eax, dword [rbx + 0xd4]
and eax, 0xfffeffff
or eax, 0x20000
mov dword [rbx + 0xd4], eax
jmp 0x14026c14f
cmp cl, 0x3a
je case.0x14026bea5.56
mov rax, qword [rsi]
mov rdx, qword [rax + 0x10]
xor eax, eax
cmp byte [rdx], 0x3a
je 0x14026c2f4
or dword [rbx + 0xd4], 0x40
jmp 0x14026c2f4
cmp cl, 0x3a
jne 0x14026c180
test r12d, r12d
jne case.0x14026bea5.56
test byte [rbx + 0xd4], 0x40
jne case.0x14026bea5.56
mov edx, dword [rsi + 0x10]
mov eax, 0xfffffded
cmp edx, 0x38
je 0x14026c2f4
jg 0x14026c1a2
cmp edx, 7
je 0x14026c1c1
cmp edx, 0x1b
je 0x14026c205
jmp 0x14026c2d4
cmp edx, 0x3d
je 0x14026c2a6
sub edx, 0x3e
cmp edx, 3
ja 0x14026c2d4
mov eax, 0xfffffded
jmp 0x14026c2f4
mov r8d, 0x20
mov rdx, rsi
mov rcx, rbx
call fcn.140251d60
test eax, eax
je case.0x14026bea5.56
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 3
jne case.0x14026bea5.56
mov rcx, qword [rax + 0x10]
mov edx, 3
call fcn.140278040
mov word [rbx + 0xd0], ax
cmp ax, 0xffff
je case.0x14026bea5.56
cmp ax, 0x65
jmp 0x14026c2cd
mov eax, dword [rbx + 0xd0]
cmp ax, 0xcc
jne 0x14026c253
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x14026bea5.56
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 1
jne case.0x14026bea5.56
mov rdx, qword [rax + 0x10]
mov r8d, 1
lea rcx, [0x1403790dd]
call fcn.140265370
test eax, eax
je case.0x14026bea5.56
mov qword [rbx + 0x30], 0
mov eax, 0xffffff96
jmp 0x14026c2f4
lea edx, [rax - 0x64]
cmp dx, 0x63
jbe case.0x14026bea5.56
sub ax, 0xc8
cmp ax, 0x63
ja 0x14026c278
mov eax, 0xffffff96
test byte [rbx + 0xd4], 0x80
jne 0x14026c2f4
cmp qword [rbx + 0x30], 0xffffffffffffffff
jne case.0x14026bea5.56
mov rax, qword [rsi + 8]
mov rdx, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
test rdx, rdx
je case.0x14026bea5.56
call fcn.140278040
mov qword [rbx + 0x30], rax
inc rax
jmp 0x14026c2cd
mov rax, qword [rsi + 8]
cmp qword [rax + 0x18], 8
jne case.0x14026bea5.56
mov rdx, qword [rax + 0x10]
mov r8d, 8
lea rcx, str.trailers
call fcn.140265370
test eax, eax
jne 0x14026c2e6
jmp case.0x14026bea5.56
cmp cl, 0x3a
je case.0x14026bea5.56
or dword [rbx + 0xd4], 0x40
jmp 0x14026c2f2
mov rax, qword [rsi]
mov rax, qword [rax + 0x10]
cmp byte [rax], 0x3a
jne 0x14026c2dd
xor eax, eax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret