Function at 0x402dc0
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
sub esp, 0x28
or eax, 0xffffffff
mov word [esp + 0x10], ax
push ebp
xor ecx, ecx
mov eax, 0x65
xor ebp, ebp
mov dword [esp + 0x20], eax
mov edx, 2
mul edx
seto cl
push esi
push edi
mov dword [esp + 0x24], ebp
neg ecx
or ecx, eax
push ecx
call fcn.004114ca
add esp, 4
xor ecx, ecx
push 4
mov dword [esp + 0x24], eax
mov word [eax], cx
call fcn.004114ca
add esp, 4
test eax, eax
je 0x42b1a5
mov dword [eax], 1
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x3c]
cmp dword [edx + 8], ebp
jbe 0x402e53
xor edi, edi
mov eax, edx
mov ecx, dword [eax + 4]
mov esi, dword [ecx + edi*4]
test esi, esi
je 0x402e4d
movzx eax, word [esi + 8]
cmp ax, 0x3f
jle 0x402f1d
push esi
call fcn.0041109f
mov eax, dword [esp + 0x40]
add esp, 4
inc edi
cmp edi, dword [eax + 8]
jb 0x402e28
mov edx, dword [esp + 0x3c]
mov dword [edx + 8], ebp
cmp word [ebx], bp
je 0x40305f
jmp 0x402e70
movzx eax, word [ebx + ebp*2]
cmp ax, 0x20
je 0x402f75
cmp ax, 9
je 0x402f75
movzx eax, word [ebx + ebp*2]
test ax, ax
je 0x40304a
movzx esi, ax
mov dword [esp + 0x10], ebp
mov word [esp + 0x1e], bp
cmp si, 0x30
jae 0x402f7b
cmp si, 0x2e
je 0x402f85
cmp si, 0x41
jae 0x4030e9
cmp si, 0x61
jae 0x403353
cmp si, 0x5f
je 0x4030f3
movzx eax, si
cmp eax, 0x24
je 0x4030ae
cmp eax, 0x3d
je 0x40312a
cmp eax, 0x28
je 0x403167
cmp eax, 0x29
je 0x403149
cmp eax, 0x22
je case.0x402f16.39
sub eax, 0x1a
cmp eax, 0x44
ja case.0x402f16.27
movzx ecx, byte [eax + 0x403418]
jmp dword [ecx*4 + 0x4033dc]
cmp ax, 0x30
jl 0x402e40
mov ecx, dword [esi]
test ecx, ecx
je 0x402e40
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x10], ecx
cmp dword [edx], ebp
je 0x42b1ae
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0041109f
add esp, 4
jmp 0x402e40
mov edi, 0x40
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
inc ebp
jmp 0x402e70
cmp si, 0x39
ja 0x402eab
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
lea eax, [esp + 0x1c]
call fcn.004035c0
cmp al, 1
jne 0x42b1d2
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402cb0
mov ebp, dword [esp + 0x10]
jmp 0x40303f
cmp ax, 0x30
jae 0x40322a
cmp ax, 0x5f
je 0x4030dc
cmp dword [esp + 0x24], 0
je 0x42b381
lea eax, [esp + 0x20]
call fcn.00402ad0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
push esi
push edi
call dword [sym.imp.USER32.dll_CharUpperBuffW]
cmp word [esp + 0x1c], 0x30
jge 0x40327e
mov edx, 0x33
push 0x10
mov word [esp + 0x20], dx
call fcn.004114ca
add esp, 4
test eax, eax
je 0x42b374
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
mov edi, dword [esp + 0x40]
call fcn.00402cb0
cmp word [ebx + ebp*2], 0
jne 0x402e70
mov ax, word [esp + 0x1c]
cmp ax, 0x30
jl 0x40305f
cmp ax, 0x3f
jle 0x40325d
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 0x14]
mov eax, 0x7f
push ecx
mov word [esp + 0x20], ax
mov dword [esp + 0x18], 0
mov word [esp + 0x22], bp
call fcn.00402cb0
mov esi, dword [esp + 0x2c]
add dword [esi], 0xffffffff
jne 0x4030a3
mov edx, dword [esp + 0x20]
push edx
call fcn.0041109f
add esp, 4
push esi
call fcn.0041109f
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x28
ret 8
lea esi, [esp + 0x20]
inc ebp
call fcn.00403760
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x4030c8
cmp ax, 0x41
jae 0x4030dc
cmp ax, 0x61
jb 0x402fb8
cmp ax, 0x7a
ja 0x402fb8
push eax
lea eax, [esp + 0x24]
call fcn.00403460
inc ebp
jmp 0x4030b8
cmp si, 0x5a
ja 0x402ebf
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
mov ecx, ebx
call fcn.00402b60
cmp dword [esp + 0x14], 0xffffffff
je 0x42b3af
mov edi, dword [esp + 0x3c]
lea eax, [esp + 0x14]
push eax
call fcn.00402cb0
mov ebp, dword [esp + 0x10]
jmp 0x40303f
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42b34a
mov edi, 0x41
call fcn.00402af0
jmp 0x403031
mov edi, 0x48
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
mov edi, 0x47
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
mov edx, dword [esp + 0x38]
push edx
lea eax, [esp + 0x24]
lea edi, [esp + 0x14]
call fcn.00403520
lea esi, [esp + 0x14]
test eax, eax
jne 0x42b43b
lea edi, [eax + 0x36]
call fcn.00402af0
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402640
push edi
mov edi, dword [esp + 0x40]
call fcn.00402cb0
mov ebp, dword [esp + 0x10]
jmp 0x40303f
mov edi, 0x4d
lea esi, [esp + 0x14]
call fcn.00402af0
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x403362
push esi
jmp 0x403036
mov edi, 0x49
lea esi, [esp + 0x14]
call fcn.00402af0
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x403377
push esi
jmp 0x403036
mov edi, 0x4c
lea esi, [esp + 0x14]
call fcn.00402af0
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x403031
jmp 0x42b2da
cmp ax, 0x39
jbe 0x4030dc
jmp 0x402fc2
mov edi, 0x4b
lea esi, [esp + 0x14]
call fcn.00402af0
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x42b2a8
lea ecx, [esp + 0x14]
push ecx
jmp 0x403036
mov esi, dword [esp + 0x14]
test esi, esi
je 0x40305f
mov ecx, esi
call fcn.00402610
push esi
call fcn.0041109f
add esp, 4
jmp 0x40305f
cmp word [esp + 0x1c], 0x3f
jg 0x402ffc
jmp 0x42b35a
mov edi, 0x4e
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
mov edi, 0x4f
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
lea esi, [esp + 0x20]
inc ebp
call fcn.00403760
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x4032e5
cmp ax, 0x41
jae 0x4032f1
cmp ax, 0x61
jb 0x4032fe
cmp ax, 0x7a
ja 0x4032fe
push eax
lea eax, [esp + 0x24]
call fcn.00403460
inc ebp
jmp 0x4032d5
cmp ax, 0x30
jae 0x42b26f
cmp ax, 0x5f
je 0x4032f1
cmp dword [esp + 0x24], 0
je 0x42b3e0
lea eax, [esp + 0x20]
call fcn.00402ad0
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov edi, 0x32
lea esi, [esp + 0x14]
call fcn.00402af0
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402640
push edi
jmp 0x403036
cmp si, 0x7a
jbe 0x4030f3
jmp 0x402ec9
mov edi, 0x56
lea esi, [esp + 0x14]
inc ebp
call fcn.00402af0
push esi
jmp 0x403036
mov edi, 0x52
lea esi, [esp + 0x14]
inc ebp
call fcn.00402af0
push esi
jmp 0x403036
movzx eax, word [ebx + ebp*2 + 2]
inc ebp
sub eax, 0x3d
lea esi, [esp + 0x14]
je 0x42b2fe
sub eax, 1
je 0x42b2ee
mov edi, 0x43
call fcn.00402af0
lea edx, [esp + 0x14]
push edx
jmp 0x403036
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42b30e
mov edi, 0x42
call fcn.00402af0
jmp 0x403031
mov dword [esp + 0x2c], ebp
jmp 0x402e1b
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push ecx
call fcn.0041109f
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0xc]
add esp, 4
push eax
call fcn.0041109f
add esp, 4
jmp 0x402f45
mov ebp, dword [esp + 0x10]
cmp si, 0x2e
jne 0x402eb5
lea esi, [esp + 0x20]
inc ebp
call fcn.00403760
movzx eax, word [ebx + ebp*2]
cmp ax, 0x41
jb 0x42b202
cmp ax, 0x5a
jbe 0x42b25f
cmp ax, 0x61
jb 0x42b216
cmp ax, 0x7a
jbe 0x42b25f
cmp ax, 0x30
jb 0x42b22a
cmp ax, 0x39
jbe 0x42b25f
cmp ax, 0x5f
je 0x42b25f
cmp dword [esp + 0x24], 0
je 0x42b381
mov edi, 0x35
lea esi, [esp + 0x14]
call fcn.00402af0
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402640
jmp 0x403031
push eax
lea eax, [esp + 0x24]
call fcn.00403460
inc ebp
jmp 0x42b1ea
cmp ax, 0x39
jbe 0x4032f1
jmp 0x403308
mov edi, 0x4a
lea esi, [esp + 0x14]
call fcn.00402af0
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x403031
mov edi, 0x53
inc ebp
call fcn.00402af0
jmp 0x403031
mov edi, 0x54
lea esi, [esp + 0x14]
inc ebp
call fcn.00402af0
jmp 0x403253
mov edi, 0x51
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
inc ebp
jmp 0x40303f
mov edi, 0x55
lea esi, [esp + 0x14]
inc ebp
call fcn.00402af0
jmp 0x403031
mov edi, 0x44
call fcn.00402af0
inc ebp
jmp 0x4033b2
mov edi, 0x46
call fcn.00402af0
inc ebp
jmp 0x4033b2
mov edi, 0x45
call fcn.00402af0
inc ebp
jmp 0x403031
test ebp, ebp
jne case.0x402f16.27
cmp word [ebx + 2], bp
jne case.0x402f16.27
mov ecx, dword [esp + 0x38]
cmp ecx, dword [0x4a7e90]
jl case.0x402f16.27
mov ebp, 1
jmp 0x40303f
mov edi, 0x50
call fcn.00402af0
inc ebp
jmp 0x403031
cmp dword [esp + 0x14], 0
je 0x402ffc
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00442b75
jmp 0x402ffc
mov dword [esp + 0x14], 0
jmp 0x403031
mov ecx, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push ecx
call fcn.0046050a
lea ecx, [esp + 0x20]
call fcn.00402610
lea edx, [esp + 0x14]
push edx
call fcn.0044b506
mov eax, 1
jmp 0x4030a5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
push eax
push 0x138c
push ecx
call fcn.0046050a
lea ecx, [esp + 0x20]
call fcn.00402610
lea edx, [esp + 0x14]
push edx
call fcn.0044b506
mov eax, 1
jmp 0x4030a5
mov eax, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push eax
call fcn.0046050a
jmp 0x42b41e
mov edx, dword [esp + 0x38]
push ebp
push 0x1388
push edx
call fcn.0046050a
mov edi, 0x7f
lea esi, [esp + 0x14]
call fcn.00402af0
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cb0
lea ecx, [esp + 0x20]
call fcn.00402610
lea ecx, [esp + 0x14]
push ecx
call fcn.0044b506
mov eax, 1
jmp 0x4030a5
mov edi, 0x7f
call fcn.00402af0
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402cb0
lea ecx, [esp + 0x20]
call fcn.00402610
lea eax, [esp + 0x14]
push eax
call fcn.0044b506
mov eax, 1
jmp 0x4030a5