Function at 0x402860
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
sub esp, 0x28
or eax, 0xffffffff
mov word [esp + 0x10], ax
push ebp
xor ecx, ecx
mov eax, 0x65
xor ebp, ebp
mov dword [esp + 0x20], eax
mov edx, 2
mul edx
seto cl
push esi
push edi
mov dword [esp + 0x24], ebp
neg ecx
or ecx, eax
push ecx
call fcn.00412c3a
add esp, 4
xor ecx, ecx
push 4
mov dword [esp + 0x24], eax
mov word [eax], cx
call fcn.00412c3a
add esp, 4
test eax, eax
je 0x42c8cb
mov dword [eax], 1
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x3c]
cmp dword [edx + 8], ebp
jbe 0x4028f3
xor edi, edi
mov eax, edx
mov ecx, dword [eax + 4]
mov esi, dword [ecx + edi*4]
test esi, esi
je 0x4028ed
movzx eax, word [esi + 8]
cmp ax, 0x3f
jle 0x4029bd
push esi
call fcn.0041294d
mov eax, dword [esp + 0x40]
add esp, 4
inc edi
cmp edi, dword [eax + 8]
jb 0x4028c8
mov edx, dword [esp + 0x3c]
mov dword [edx + 8], ebp
cmp word [ebx], bp
je 0x402aff
jmp 0x402910
movzx eax, word [ebx + ebp*2]
cmp ax, 0x20
je 0x402a15
cmp ax, 9
je 0x402a15
movzx eax, word [ebx + ebp*2]
test ax, ax
je 0x402aea
movzx esi, ax
mov dword [esp + 0x10], ebp
mov word [esp + 0x1e], bp
cmp si, 0x30
jae 0x402a1b
cmp si, 0x2e
je 0x402a25
cmp si, 0x41
jae 0x402b89
cmp si, 0x61
jae 0x402df3
cmp si, 0x5f
je 0x402b93
movzx eax, si
cmp eax, 0x24
je 0x402b4e
cmp eax, 0x3d
je 0x402bca
cmp eax, 0x28
je 0x402c07
cmp eax, 0x29
je 0x402be9
cmp eax, 0x22
je case.0x4029b6.39
sub eax, 0x1a
cmp eax, 0x44
ja case.0x4029b6.27
movzx ecx, byte [eax + 0x402eb8]
jmp dword [ecx*4 + 0x402e7c]
cmp ax, 0x30
jl 0x4028e0
mov ecx, dword [esi]
test ecx, ecx
je 0x4028e0
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x10], ecx
cmp dword [edx], ebp
je 0x42c8d4
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0041294d
add esp, 4
jmp 0x4028e0
mov edi, 0x40
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
inc ebp
jmp 0x402910
cmp si, 0x39
ja 0x40294b
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
lea eax, [esp + 0x1c]
call fcn.00403060
cmp al, 1
jne 0x42c8f8
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402750
mov ebp, dword [esp + 0x10]
jmp 0x402adf
cmp ax, 0x30
jae 0x402cca
cmp ax, 0x5f
je 0x402b7c
cmp dword [esp + 0x24], 0
je 0x42caa7
lea eax, [esp + 0x20]
call fcn.00402570
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
push esi
push edi
call dword [sym.imp.USER32.dll_CharUpperBuffW]
cmp word [esp + 0x1c], 0x30
jge 0x402d1e
mov edx, 0x33
push 0x10
mov word [esp + 0x20], dx
call fcn.00412c3a
add esp, 4
test eax, eax
je 0x42ca9a
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
mov edi, dword [esp + 0x40]
call fcn.00402750
cmp word [ebx + ebp*2], 0
jne 0x402910
mov ax, word [esp + 0x1c]
cmp ax, 0x30
jl 0x402aff
cmp ax, 0x3f
jle 0x402cfd
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 0x14]
mov eax, 0x7f
push ecx
mov word [esp + 0x20], ax
mov dword [esp + 0x18], 0
mov word [esp + 0x22], bp
call fcn.00402750
mov esi, dword [esp + 0x2c]
add dword [esi], 0xffffffff
jne 0x402b43
mov edx, dword [esp + 0x20]
push edx
call fcn.0041294d
add esp, 4
push esi
call fcn.0041294d
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x28
ret 8
lea esi, [esp + 0x20]
inc ebp
call fcn.00403200
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x402b68
cmp ax, 0x41
jae 0x402b7c
cmp ax, 0x61
jb 0x402a58
cmp ax, 0x7a
ja 0x402a58
push eax
lea eax, [esp + 0x24]
call fcn.00402f00
inc ebp
jmp 0x402b58
cmp si, 0x5a
ja 0x40295f
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
mov ecx, ebx
call fcn.00402600
cmp dword [esp + 0x14], 0xffffffff
je 0x42cad5
mov edi, dword [esp + 0x3c]
lea eax, [esp + 0x14]
push eax
call fcn.00402750
mov ebp, dword [esp + 0x10]
jmp 0x402adf
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42ca70
mov edi, 0x41
call fcn.00402590
jmp 0x402ad1
mov edi, 0x48
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
mov edi, 0x47
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
mov edx, dword [esp + 0x38]
push edx
lea eax, [esp + 0x24]
lea edi, [esp + 0x14]
call fcn.00402fc0
lea esi, [esp + 0x14]
test eax, eax
jne 0x42cb61
lea edi, [eax + 0x36]
call fcn.00402590
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.004020e0
push edi
mov edi, dword [esp + 0x40]
call fcn.00402750
mov ebp, dword [esp + 0x10]
jmp 0x402adf
mov edi, 0x4d
lea esi, [esp + 0x14]
call fcn.00402590
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x402e02
push esi
jmp 0x402ad6
mov edi, 0x49
lea esi, [esp + 0x14]
call fcn.00402590
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x402e17
push esi
jmp 0x402ad6
mov edi, 0x4c
lea esi, [esp + 0x14]
call fcn.00402590
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x402ad1
jmp 0x42ca00
cmp ax, 0x39
jbe 0x402b7c
jmp 0x402a62
mov edi, 0x4b
lea esi, [esp + 0x14]
call fcn.00402590
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x42c9ce
lea ecx, [esp + 0x14]
push ecx
jmp 0x402ad6
mov esi, dword [esp + 0x14]
test esi, esi
je 0x402aff
mov ecx, esi
call fcn.004020b0
push esi
call fcn.0041294d
add esp, 4
jmp 0x402aff
cmp word [esp + 0x1c], 0x3f
jg 0x402a9c
jmp 0x42ca80
mov edi, 0x4e
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
mov edi, 0x4f
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
lea esi, [esp + 0x20]
inc ebp
call fcn.00403200
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x402d85
cmp ax, 0x41
jae 0x402d91
cmp ax, 0x61
jb 0x402d9e
cmp ax, 0x7a
ja 0x402d9e
push eax
lea eax, [esp + 0x24]
call fcn.00402f00
inc ebp
jmp 0x402d75
cmp ax, 0x30
jae 0x42c995
cmp ax, 0x5f
je 0x402d91
cmp dword [esp + 0x24], 0
je 0x42cb06
lea eax, [esp + 0x20]
call fcn.00402570
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov edi, 0x32
lea esi, [esp + 0x14]
call fcn.00402590
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.004020e0
push edi
jmp 0x402ad6
cmp si, 0x7a
jbe 0x402b93
jmp 0x402969
mov edi, 0x56
lea esi, [esp + 0x14]
inc ebp
call fcn.00402590
push esi
jmp 0x402ad6
mov edi, 0x52
lea esi, [esp + 0x14]
inc ebp
call fcn.00402590
push esi
jmp 0x402ad6
movzx eax, word [ebx + ebp*2 + 2]
inc ebp
sub eax, 0x3d
lea esi, [esp + 0x14]
je 0x42ca24
sub eax, 1
je 0x42ca14
mov edi, 0x43
call fcn.00402590
lea edx, [esp + 0x14]
push edx
jmp 0x402ad6
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42ca34
mov edi, 0x42
call fcn.00402590
jmp 0x402ad1
mov dword [esp + 0x2c], ebp
jmp 0x4028bb
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push ecx
call fcn.0041294d
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0xc]
add esp, 4
push eax
call fcn.0041294d
add esp, 4
jmp 0x4029e5
mov ebp, dword [esp + 0x10]
cmp si, 0x2e
jne 0x402955
lea esi, [esp + 0x20]
inc ebp
call fcn.00403200
movzx eax, word [ebx + ebp*2]
cmp ax, 0x41
jb 0x42c928
cmp ax, 0x5a
jbe 0x42c985
cmp ax, 0x61
jb 0x42c93c
cmp ax, 0x7a
jbe 0x42c985
cmp ax, 0x30
jb 0x42c950
cmp ax, 0x39
jbe 0x42c985
cmp ax, 0x5f
je 0x42c985
cmp dword [esp + 0x24], 0
je 0x42caa7
mov edi, 0x35
lea esi, [esp + 0x14]
call fcn.00402590
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.004020e0
jmp 0x402ad1
push eax
lea eax, [esp + 0x24]
call fcn.00402f00
inc ebp
jmp 0x42c910
cmp ax, 0x39
jbe 0x402d91
jmp 0x402da8
mov edi, 0x4a
lea esi, [esp + 0x14]
call fcn.00402590
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x402ad1
mov edi, 0x53
inc ebp
call fcn.00402590
jmp 0x402ad1
mov edi, 0x54
lea esi, [esp + 0x14]
inc ebp
call fcn.00402590
jmp 0x402cf3
mov edi, 0x51
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
inc ebp
jmp 0x402adf
mov edi, 0x55
lea esi, [esp + 0x14]
inc ebp
call fcn.00402590
jmp 0x402ad1
mov edi, 0x44
call fcn.00402590
inc ebp
jmp 0x402e52
mov edi, 0x46
call fcn.00402590
inc ebp
jmp 0x402e52
mov edi, 0x45
call fcn.00402590
inc ebp
jmp 0x402ad1
test ebp, ebp
jne case.0x4029b6.27
cmp word [ebx + 2], bp
jne case.0x4029b6.27
mov ecx, dword [esp + 0x38]
cmp ecx, dword [0x4a68b8]
jl case.0x4029b6.27
mov ebp, 1
jmp 0x402adf
mov edi, 0x50
call fcn.00402590
inc ebp
jmp 0x402ad1
cmp dword [esp + 0x14], 0
je 0x402a9c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00445565
jmp 0x402a9c
mov dword [esp + 0x14], 0
jmp 0x402ad1
mov ecx, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push ecx
call fcn.0045e19b
lea ecx, [esp + 0x20]
call fcn.004020b0
lea edx, [esp + 0x14]
push edx
call fcn.0044d559
mov eax, 1
jmp 0x402b45
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
push eax
push 0x138c
push ecx
call fcn.0045e19b
lea ecx, [esp + 0x20]
call fcn.004020b0
lea edx, [esp + 0x14]
push edx
call fcn.0044d559
mov eax, 1
jmp 0x402b45
mov eax, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push eax
call fcn.0045e19b
jmp 0x42cb44
mov edx, dword [esp + 0x38]
push ebp
push 0x1388
push edx
call fcn.0045e19b
mov edi, 0x7f
lea esi, [esp + 0x14]
call fcn.00402590
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402750
lea ecx, [esp + 0x20]
call fcn.004020b0
lea ecx, [esp + 0x14]
push ecx
call fcn.0044d559
mov eax, 1
jmp 0x402b45
mov edi, 0x7f
call fcn.00402590
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402750
lea ecx, [esp + 0x20]
call fcn.004020b0
lea eax, [esp + 0x14]
push eax
call fcn.0044d559
mov eax, 1
jmp 0x402b45