Function at 0x3428ad25
Capabilities:
Enumerate pe sections
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x1894
call fcn.3421e617
mov eax, dword [0x34234fcc]
xor eax, esp
mov dword [esp + 0x1890], eax
mov edx, dword [esp + 0x1898]
mov ecx, dword [esp + 0x18a0]
mov eax, dword [esp + 0x189c]
push ebx
mov ebx, dword [esp + 0x18ac]
push ebp
mov ebp, dword [edx + 4]
push esi
mov esi, dword [esp + 0x18b0]
push 0x49
mov dword [esp + 0x20], edx
lea edx, [esp + 0x14]
push edx
push ecx
push eax
mov dword [esp + 0x5c], esi
xor esi, esi
push ebp
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x2c], ebp
call fcn.34217d49
cmp eax, esi
mov dword [esp + 0x24], eax
jl 0x3428b26d
mov eax, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x20]
push 8
push 4
add edi, 0x10
push edi
push eax
push ebp
mov dword [esp + 0x38], esi
call fcn.34204df7
mov esi, eax
test esi, esi
jl 0x3429d870
mov eax, dword [esp + 0x18bc]
test eax, 0x1000
je 0x3428ae22
mov ecx, dword [edi]
cmp ecx, 0x30000
jbe 0x3429d2d1
cmp ecx, 0x40000
je 0x3428b287
cmp ecx, 0xc0000
jne 0x3429d30c
or eax, 0x400
and eax, 0xffffefff
mov dword [esp + 0x18bc], eax
test al, 3
jne 0x3429d322
test al, 1
jne 0x3428b291
test al, 2
jne 0x3429d385
cmp dword [esp + 0x28], 0x4b8
je 0x3429d392
mov ecx, eax
and ecx, 0x80
mov dword [esp + 0x28], ecx
jne 0x3429d39f
test al, 0x10
jne 0x3429d3ac
test eax, 0x400
je 0x3428b29e
or dword [esp + 0x10], 0x800
test ebx, ebx
je 0x3429d3de
push ebx
call fcn.341f2ad9
add esp, 4
lea ebp, [eax + eax + 0x2c]
push ebp
call sub.MSO.dll_Ordinal_1880
mov ecx, eax
mov dword [esp + 0x24], ecx
test ecx, ecx
je 0x3429d3d4
mov dword [esp + 0x34], ecx
test ebx, ebx
je 0x3428aecf
mov eax, ebp
shr eax, 1
cmp eax, 1
jbe 0x3428aec6
nop
movzx edx, word [ebx]
test dx, dx
je 0x3428aec2
cmp dx, 0x3b
jne 0x3429d3f6
mov dword [esp + 0x24], ecx
test eax, eax
jbe 0x3428aecf
xor edx, edx
mov word [ecx], dx
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
push 0x12
push 4
lea eax, [esp + 0x48]
push eax
push ecx
push edx
call fcn.34204df7
mov edi, dword [esp + 0x24]
mov esi, eax
mov eax, edi
sub eax, dword [esp + 0x34]
shr ebp, 1
sar eax, 1
mov ecx, ebp
sub ecx, eax
push ecx
push edi
push 0x3428b2bc
call fcn.341f73a4
push edi
call fcn.341f2ad9
mov edx, dword [esp + 0x44]
lea edi, [edi + eax*2]
add esp, 4
mov eax, edi
sub eax, dword [esp + 0x34]
push 0xa
and edx, 0x1fffeff
sar eax, 1
push edx
mov ecx, ebp
sub ecx, eax
push ecx
push edi
call dword [sym.imp.MSO.dll_Ordinal_1397]
push edi
call fcn.341f2ad9
add esp, 4
lea ecx, [edi + eax*2]
mov edi, dword [esp + 0x34]
test ebx, ebx
je 0x3428af71
mov eax, ecx
sub eax, edi
sar eax, 1
mov edx, ebp
sub edx, eax
movzx eax, word [ebx]
test ax, ax
je 0x3428af71
cmp edx, 1
jbe 0x3428af71
add ebx, 2
mov word [ecx], ax
movzx eax, word [ebx]
add ecx, 2
dec edx
test ax, ax
jne 0x3428af5a
mov edx, ecx
sub edx, edi
sar edx, 1
sub ebp, edx
je 0x3428af80
xor eax, eax
mov word [ecx], ax
mov bl, byte [esp + 0x18bc]
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], edi
test bl, 0x38
jne 0x3429d40e
test bl, 0x40
jne 0x3429d41d
push 0x3428abd0
call fcn.341f2ad9
push edi
mov ebp, eax
call fcn.341f2ad9
add esp, 8
cmp eax, ebp
jl 0x3428afcb
jle 0x3429d42c
cmp word [edi + ebp*2], 0x3b
je 0x3429d42c
lea eax, [esp + 0x18]
push eax
push 0x342262d0
push edi
call fcn.3428aa34
mov esi, eax
test esi, esi
jl 0x3429d870
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x10]
cmp ecx, 0x10001
jbe 0x3429d451
test byte [esp + 0x3c], 4
jne 0x3429d86b
test bl, 0x20
jne 0x3429d472
test bl, 0x40
jne 0x3429d483
cmp ecx, 0xc0000
jb 0x3428b028
cmp dword [esp + 0x28], 0
jne 0x3429d494
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x1c]
mov dword [eax + 0x920], ecx
and ecx, 4
mov dword [esp + 0x28], ecx
neg ecx
sbb ecx, ecx
push 0xd
and ecx, 0xfffffffd
push 4
add ecx, 9
lea edi, [eax + 0x92c]
mov dword [eax + 0x924], edx
mov dword [eax + 0x928], ecx
mov eax, dword [esp + 0x1c]
push edi
push eax
push ebp
call fcn.34204df7
mov esi, eax
cmp esi, 0xfffffc15
je 0x3429d4d8
test esi, esi
jl 0x3429d870
cmp dword [edi], 0
jne 0x3429d4e3
mov esi, dword [esp + 0x54]
test esi, esi
je 0x3429d4f0
xor edx, edx
mov word [esp + 0x6c], dx
cmp word [esi], dx
jne 0x3429d4ff
test bl, 0xf8
jne 0x3428b0b9
cmp word [esp + 0x6c], 0
jne 0x3429d5cd
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
lea esi, [esi + esi + 0x34]
test eax, eax
je 0x3428b0d5
push eax
call fcn.341f2ad9
add esp, 4
lea esi, [esi + eax*2]
push esi
call sub.MSO.dll_Ordinal_1880
mov dword [esp + 0x30], eax
test eax, eax
je 0x3429d686
xor ecx, ecx
mov word [eax], cx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], 1
test ecx, ecx
je 0x3428b108
mov edx, esi
shr edx, 1
push edx
push eax
push ecx
call fcn.341f73a4
cmp word [esp + 0x6c], 0
mov edi, dword [sym.imp.MSO.dll_Ordinal_3084]
mov ebp, dword [esp + 0x30]
jne 0x3429d690
cmp dword [esp + 0x2c], 0
jne 0x3429d6ab
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x54]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x40]
push ecx
push ebp
push edx
push ebx
call fcn.3428b2cc
test eax, eax
jl 0x3429d70c
mov edi, dword [esp + 0x20]
mov edx, dword [esp + 0x38]
push 8
push 4
lea eax, [edi + 0x14]
push eax
push edx
push ebx
mov dword [esp + 0x40], eax
call fcn.34204df7
mov esi, eax
test esi, esi
jl 0x3428b180
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
cmp eax, dword [edi + 0x10]
jb 0x3429d730
cmp dword [edi + 0x10], 0xe0000
jae 0x3429d752
xor edx, edx
mov word [edi + 0x88f4], dx
xor eax, eax
cmp dword [esp + 0x28], 0
mov word [edi + 0x88f6], ax
jne 0x3429d7b2
cmp dword [edi + 0x10], 0xc0000
jb 0x3429d7db
test esi, esi
jl 0x3429d80d
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
push 0x12
push 4
lea ecx, [esp + 0x48]
push ecx
push eax
push ebx
mov dword [edi + 8], edx
mov dword [edi + 0xc], eax
call fcn.34204df7
mov edx, dword [esp + 0x40]
push 0x10000001
lea ecx, [esp + 0x60]
push ecx
push 0
push 0
mov dword [edi + 0x1c], edx
mov edx, dword [esp + 0x24]
push 0
push edx
lea eax, [edi + 0x28]
push ebx
mov dword [esp + 0x84], eax
mov dword [esp + 0x78], 0x30
call fcn.3420533b
mov esi, eax
cmp esi, 0xfffffbdf
je 0x3429d804
test esi, esi
jl 0x3429d81c
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x34]
cmp eax, esi
je 0x3428b245
test eax, eax
je 0x3428b23d
push eax
call sub.MSO.dll_Ordinal_1449
mov dword [esp + 0x18], 0
test ebp, ebp
je 0x3428b256
cmp dword [esp + 0x44], 0
je 0x3428b256
push ebp
call sub.MSO.dll_Ordinal_1449
test esi, esi
je 0x3428b26a
add edi, 0x9da
cmp esi, edi
je 0x3428b26a
push esi
call sub.MSO.dll_Ordinal_1449
xor eax, eax
pop edi
mov ecx, dword [esp + 0x189c]
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.341f1dd1
add esp, 0x1894
ret 0x18
or eax, 0x80
jmp 0x3428ae16
mov dword [esp + 0x10], 1
jmp 0x3428ae48
test eax, 0x800
jne 0x3429d3c7
jmp 0x3428ae75
test eax, eax
je 0x3428afdd
jmp 0x3428afcb
je 0x3429d304
sub ecx, 0x10000
je 0x3429d2fc
sub ecx, 1
je 0x3429d2f4
sub ecx, 0xffff
jne 0x3428ae16
or eax, 0x20
jmp 0x3428ae16
or eax, 0x10
jmp 0x3428ae16
or eax, 0x18
jmp 0x3428ae16
or eax, 0x40
jmp 0x3428ae16
cmp ecx, 0xe0000
jne 0x3428ae16
or eax, 0x800
jmp 0x3428ae16
cmp dword [edi], 0x20000
push 0
push 0x40000
push 0
push 0
jb 0x3429d346
mov ecx, dword [esp + 0x24]
push 0x342265b8
push 0x342265a4
push ecx
jmp 0x3429d355
mov edx, dword [esp + 0x24]
push 0x342265d4
push 0x34226578
push edx
push ebp
call fcn.3421a702
mov esi, eax
test esi, esi
jl 0x3429d870
test byte [esp + 0x18bc], 0xf8
jne 0x3429d379
mov esi, 0xfffffc15
jmp 0x3429d870
mov eax, dword [esp + 0x18bc]
jmp 0x3428ae2a
mov dword [esp + 0x10], 0
jmp 0x3428ae48
test al, 0xf8
jne 0x3428b291
jmp 0x3428ae48
or dword [esp + 0x10], 0x400
jmp 0x3428ae75
or dword [esp + 0x10], 4
test al, 8
je 0x3429d3ba
or dword [esp + 0x10], 2
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
jmp 0x3428ae75
or dword [esp + 0x10], 0x1000
jmp 0x3428ae75
mov esi, 0xfffffc0d
jmp 0x3429d870
mov ecx, dword [esp + 0x20]
add ecx, 0x9da
mov dword [esp + 0x24], ecx
mov ebp, 0x7f00
jmp 0x3428ae9e
mov word [ecx], dx
dec eax
add ecx, 2
add ebx, 2
cmp eax, 1
jbe 0x3428aec2
jmp 0x3428aeb0
lea ecx, [esp + 0x18]
push ecx
push 0x342d7e00
jmp 0x3428afd5
lea edx, [esp + 0x18]
push edx
push 0x3428abd0
jmp 0x3428afd5
push ebp
push 0x342d7e00
push edi
call fcn.3420d2ef
test eax, eax
je 0x3428afdd
push ebp
push 0x3428abd0
push edi
call fcn.3420d2ef
jmp 0x3428b2ae
mov dword [esp + 0x48], 4
cmp ecx, 0x10000
jne 0x3428b015
mov dword [esp + 0x48], 6
jmp 0x3428b015
cmp ecx, 0x30000
jb 0x3428b00c
jmp 0x3429d86b
cmp ecx, 0x40000
jb 0x3428b015
jmp 0x3429d86b
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
push 0x15
push 4
lea ecx, [esp + 0x30]
push ecx
push edx
push eax
mov dword [esp + 0x3c], 0
call fcn.34204df7
mov esi, eax
test esi, esi
jl 0x3429d870
cmp dword [esp + 0x28], 0
je 0x3429d4cf
mov esi, 0xfffff10a
jmp 0x3429d870
mov eax, dword [esp + 0x20]
jmp 0x3428b028
mov dword [edi], 0
jmp 0x3428b08c
or dword [esp + 0x10], 0x80
jmp 0x3428b08c
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x30], ecx
mov ebp, ecx
jmp 0x3428b129
nop
cmp word [esi], 0x3b
je 0x3429d50b
add esi, 2
jmp 0x3429d54b
add esi, 2
push esi
call fcn.341f2ad9
add esp, 4
cmp eax, 3
jb 0x3429d54b
movzx eax, word [esi]
cmp ax, 0x50
je 0x3429d52b
cmp ax, 0x70
jne 0x3429d54b
movzx eax, word [esi + 2]
cmp ax, 0x57
je 0x3429d53b
cmp ax, 0x77
jne 0x3429d54b
movzx eax, word [esi + 4]
cmp ax, 0x44
je 0x3429d557
cmp ax, 0x64
je 0x3429d557
cmp word [esi], 0
je 0x3428b0a8
jmp 0x3429d500
movzx eax, word [esi + 6]
add esi, 6
lea edx, [esp + 0x6c]
test ax, ax
je 0x3428b0a8
cmp ax, 0x3d
je 0x3429d583
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
je 0x3428b0a8
jmp 0x3429d56b
cmp word [esi], 0
je 0x3428b0a8
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
je 0x3429d5c3
xor ecx, ecx
cmp ax, 0x3b
je 0x3429d5c3
mov edi, ecx
and edi, 0xfffffffe
cmp edi, 0x28
jge 0x3429d650
add esi, 2
mov word [edx], ax
movzx eax, word [esi]
add edx, 2
add ecx, 2
test ax, ax
jne 0x3429d59b
xor eax, eax
mov word [edx], ax
jmp 0x3428b0a8
push 0x16
xor ecx, ecx
push 0x402
lea eax, [esp + 0xa0]
mov word [esp + 0x4a4], cx
mov ecx, dword [esp + 0x1c]
push eax
xor edx, edx
push ecx
push ebp
mov word [esp + 0xac], dx
mov dword [esp + 0x60], edx
call fcn.34204df7
mov esi, eax
test esi, esi
jne 0x3429d63f
mov eax, dword [esp + 0x14]
push 0x17
push 0x402
lea edx, [esp + 0x4a4]
push edx
push eax
push ebp
call fcn.34204df7
mov esi, eax
test esi, esi
jne 0x3429d63f
mov edx, dword [esp + 0x14]
push 0x18
push 4
lea ecx, [esp + 0x54]
push ecx
push edx
push ebp
call fcn.34204df7
mov esi, eax
test esi, esi
je 0x3429d65a
cmp esi, 0xfffffc15
je 0x3428b0b9
jmp 0x3429d870
mov esi, 0xfffff88f
jmp 0x3429d870
lea eax, [esp + 0x49c]
push eax
call fcn.341f2ad9
lea ecx, [esp + 0x9c]
push ecx
mov esi, eax
call fcn.341f2ad9
lea edx, [esi + eax + 0x1f]
add esp, 8
mov dword [esp + 0x2c], edx
jmp 0x3428b0b9
mov esi, 0xfffffc0d
jmp 0x3429d870
mov ebx, esi
shr ebx, 1
push ebx
push ebp
push 0x3429d908
call edi
push ebx
push ebp
lea eax, [esp + 0x74]
push eax
call edi
jmp 0x3428b11e
shr esi, 1
push esi
push ebp
push 0x3429d8d8
call edi
push esi
push ebp
lea ecx, [esp + 0xa0]
push ecx
call edi
push esi
push ebp
push 0x3429d8e4
call edi
push esi
push ebp
lea edx, [esp + 0x4a4]
push edx
call edi
push esi
push ebp
push 0x3429d8f4
call edi
mov eax, dword [esp + 0x4c]
push 0xa
push eax
push ebp
call fcn.341f2ad9
add esp, 4
sub esi, eax
push esi
push ebp
call fcn.341f2ad9
add esp, 4
lea ecx, [ebp + eax*2]
push ecx
call dword [sym.imp.MSO.dll_Ordinal_1397]
jmp 0x3428b129
mov esi, 0xfffffb4f
cmp eax, 0xfffffb4e
jne 0x3429d724
mov eax, dword [esp + 0x20]
mov dword [eax + 0x18], esi
jmp 0x3429d870
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x18], eax
jmp 0x3429d870
cmp eax, 0x40000
jae 0x3428b180
mov eax, dword [esp + 0x38]
push 0
push eax
push ebx
mov esi, 0xfffffbd5
call fcn.34214fc0
jmp 0x3429d870
mov ecx, dword [esp + 0x14]
push 0x1a
push 2
add edi, 0x88f4
push edi
push ecx
push ebx
call fcn.34204df7
mov esi, eax
test esi, esi
jl 0x3429d870
movzx eax, word [edi]
mov edx, 0x200
cmp dx, ax
jg 0x3429d7a5
mov eax, dword [esp + 0x58]
push 0
push 0
push 0
push 0xffffdf25
push 0
push 0
push eax
mov ecx, ebx
push ecx
mov esi, 0xfffff0ff
call fcn.3421474d
jmp 0x3429d870
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0x30]
jmp 0x3428b198
test byte [esp + 0x3c], 4
jne 0x3428b1aa
mov ecx, dword [esp + 0x2c]
cmp dword [ecx], 0xc0000
mov eax, 7
jb 0x3429d7d3
mov eax, 0xf
mov edx, dword [esp + 0x38]
push eax
push edx
jmp 0x3429d7f2
mov eax, dword [esp + 0x2c]
cmp dword [eax], 0xc0000
jb 0x3428b1b7
mov ecx, dword [esp + 0x38]
push 8
push ecx
push 0x342d7e1c
push ebx
call fcn.34213893
mov esi, eax
jmp 0x3428b1b7
or eax, 0xffffffff
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x38]
push 0
push eax
push ebx
call fcn.34214fc0
jmp 0x3429d870
cmp esi, 0xfffffb45
je 0x3428b227
push 0x800
lea ecx, [esp + 0x8a4]
push ecx
push esi
push edi
call fcn.342e4aa0
push 0
push 0x342265d4
lea edx, [esp + 0x8a8]
push edx
push esi
push edi
call fcn.342e4bea
test eax, eax
jge 0x3429d85c
mov dword [edi + 0x93c], eax
mov dword [edi + 0x934], 1
jmp 0x3428b227
mov esi, 0xfffffbd5
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
push 0
push eax
push ecx
call fcn.34214fc0
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x24]
je 0x3429d89d
test eax, eax
je 0x3429d895
push eax
call sub.MSO.dll_Ordinal_1449
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x30]
test eax, eax
je 0x3429d8b2
cmp dword [esp + 0x44], 0
je 0x3429d8b2
push eax
call sub.MSO.dll_Ordinal_1449
mov eax, dword [esp + 0x34]
test eax, eax
je 0x3429d8ce
mov edx, dword [esp + 0x20]
add edx, 0x9da
cmp eax, edx
je 0x3429d8ce
push eax
call sub.MSO.dll_Ordinal_1449
mov eax, esi
jmp 0x3428b26c