Function at 0x140002770
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2040
call fcn.140030df0
sub rsp, rax
xor r15d, r15d
or eax, 0xffffffff
mov r12, r9
mov esi, r15d
mov r13, r8
mov r14d, edx
mov word [rsp + 0x38], ax
cmp qword [r9 + 0x10], rsi
jbe 0x1400027ee
mov rbx, r15
nop word [rax + rax]
mov rax, qword [r12 + 8]
mov rdi, qword [rax + rbx*8]
test rdi, rdi
je 0x1400027e4
movzx eax, word [rdi + 8]
cmp ax, 0x3f
jle 0x1400028d3
mov rcx, rdi
call fcn.1400185f4
inc rbx
cmp rbx, qword [r12 + 0x10]
jb 0x1400027c0
mov qword [r12 + 0x10], r15
cmp word [r13], si
je 0x140002a07
lea rdx, [0x140000000]
nop word [rax + rax]
mov eax, esi
movzx ecx, word [r13 + rax*2]
cmp cx, 0x20
je 0x140002912
cmp cx, 9
je 0x140002912
mov eax, esi
movzx ebx, word [r13 + rax*2]
test bx, bx
je 0x1400029f2
mov dword [rsp + 0x2080], esi
mov word [rsp + 0x3a], si
mov ebp, r15d
mov rdi, r15
cmp bx, 0x30
jae 0x140002919
cmp bx, 0x2e
je 0x140002923
cmp bx, 0x41
jae 0x140002aa6
cmp bx, 0x61
jae 0x140002d04
cmp bx, 0x5f
je 0x140002ab0
movzx eax, bx
cmp eax, 0x24
je 0x140002a70
cmp eax, 0x3d
je 0x140002afa
cmp eax, 0x28
je 0x140002b1d
cmp eax, 0x29
je 0x140002a4d
cmp eax, 0x22
je case.0x1400028d1.28
sub eax, 0x1a
cmp eax, 0x44
ja case.0x1400028d1.40
cdqe
movzx eax, byte [rdx + rax + 0x2da0]
mov ecx, dword [rdx + rax*4 + 0x2d64]
add rcx, rdx
jmp rcx
cmp ax, 0x30
jl 0x1400027dc
mov rbp, qword [rdi]
test rbp, rbp
je 0x1400027dc
mov rax, qword [rbp + 0x18]
dec dword [rax]
mov rax, qword [rbp + 0x18]
cmp dword [rax], esi
je 0x140032e40
mov rcx, rbp
call fcn.1400185f4
jmp 0x1400027dc
mov edx, 0x40
jmp 0x140002a52
inc esi
jmp 0x140002810
cmp bx, 0x39
ja 0x140002859
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400bfb30]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.1400024f0
cmp al, 1
jne 0x140032e58
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
mov esi, dword [rsp + 0x2080]
jmp 0x1400029dd
cmp cx, 0x30
jae 0x140002c36
cmp cx, 0x5f
je 0x140002a9a
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x140033001
movzx eax, word [rsp + 0x38]
cmp ax, 0x30
jge 0x140002c69
mov eax, gethostbyname
mov word [rsp + 0x38], ax
lea ecx, [rax - 0x13]
call fcn.140017e04
test rax, rax
je 0x140032ff7
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1400022f0
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
lea rdx, [0x140000000]
mov eax, esi
cmp word [r13 + rax*2], r15w
jne 0x140002810
mov ax, word [rsp + 0x38]
cmp ax, 0x30
jl 0x140002a07
cmp ax, 0x3f
jle 0x140002c45
mov r11d, 0x7f
lea rdx, [rsp + 0x30]
mov rcx, r12
mov dword [rsp + 0x30], r15d
mov word [rsp + 0x3a], si
mov word [rsp + 0x38], r11w
call fcn.140002df0
xor eax, eax
lea r11, [rsp + 0x2040]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov edx, 0x48
lea rcx, [rsp + 0x30]
call fcn.1400026d0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
inc esi
jmp 0x1400029dd
inc esi
mov eax, esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x140002a86
cmp cx, 0x41
jae 0x140002a9a
cmp cx, 0x61
jb 0x140002967
cmp cx, 0x7a
ja 0x140002967
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x140002a70
cmp bx, 0x5a
ja 0x14000286d
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400bfb30]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.140002380
cmp dword [rsp + 0x30], 0xffffffff
je 0x14003302e
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
mov esi, dword [rsp + 0x2080]
jmp 0x1400029dd
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x140032fc5
mov edx, 0x41
call fcn.1400026d0
jmp 0x1400029d0
mov edx, 0x47
jmp 0x140002a52
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x2080]
lea rcx, [0x1400bfb30]
mov r8, r13
mov edx, r14d
mov qword [rsp + 0x20], rax
call fcn.140003210
lea rcx, [rsp + 0x30]
test eax, eax
jne 0x14003307c
lea edx, [rax + 0x36]
call fcn.1400026d0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.140002290
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
mov esi, dword [rsp + 0x2080]
jmp 0x1400029dd
lea rcx, [rsp + 0x30]
mov edx, reloc.OLEAUT32.dll_VarR8FromUI1
call fcn.1400026d0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, 0x56
inc esi
call fcn.1400026d0
jmp 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.1400026d0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, 0x52
inc esi
call fcn.1400026d0
jmp 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.1400026d0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400029d0
jmp 0x140032f4c
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.1400026d0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400029d0
jmp 0x140032f2b
cmp cx, 0x39
jbe 0x140002a9a
jmp 0x140002971
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x140002c5f
mov rcx, rbx
call fcn.1400036e0
mov rcx, rbx
call fcn.1400185f4
mov qword [rsp + 0x30], r15
jmp 0x140002a07
cmp ax, 0x3f
jg 0x1400029a3
jmp 0x140032fd6
mov edx, 0x4e
jmp 0x140002a52
mov edx, 0x4f
jmp 0x140002a52
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x140002ca0
cmp cx, 0x41
jae 0x140002cac
cmp cx, 0x61
jb 0x140002cb8
cmp cx, 0x7a
ja 0x140002cb8
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp case.0x1400028d1.36
cmp cx, 0x30
jae 0x140032ee7
cmp cx, 0x5f
je 0x140002cac
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x140033001
mov edx, gethostbyname
lea rcx, [rsp + 0x30]
call fcn.1400026d0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.140002290
jmp 0x1400029d0
cmp bx, 0x7a
jbe 0x140002ab0
jmp 0x140002877
inc esi
movzx ecx, word [r13 + rsi*2]
sub ecx, 0x3d
je 0x140032f74
cmp ecx, 1
lea rcx, [rsp + 0x30]
je 0x140032f63
mov edx, 0x43
call fcn.1400026d0
jmp 0x1400029d0
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x140032f8a
mov edx, 0x42
call fcn.1400026d0
jmp 0x1400029d0
mov rcx, qword [rbp]
call fcn.1400185f4
mov rcx, qword [rbp + 0x18]
call fcn.1400185f4
nop
jmp 0x1400028fb
mov esi, dword [rsp + 0x2080]
cmp bx, 0x2e
je 0x140032e75
lea rdx, [0x140000000]
jmp 0x140002863
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x41
jb 0x140032e91
cmp cx, 0x5a
jbe 0x140032edb
cmp cx, 0x61
jb 0x140032ea5
cmp cx, 0x7a
jbe 0x140032edb
cmp cx, 0x30
jb 0x140032eb9
cmp cx, 0x39
jbe 0x140032edb
cmp cx, 0x5f
je 0x140032edb
mov word [rsp + rdi*2 + 0x40], r15w
test ebp, ebp
je 0x140033001
mov edx, gethostname
jmp 0x140002ce6
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x140032e75
cmp cx, 0x39
jbe 0x140002cac
jmp 0x140002cc2
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.1400026d0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, 0x53
inc esi
call fcn.1400026d0
nop
jmp 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, 0x54
inc esi
call fcn.1400026d0
nop
jmp 0x1400029d0
mov edx, 0x51
jmp 0x140002a52
lea rcx, [rsp + 0x30]
mov edx, 0x55
inc esi
call fcn.1400026d0
nop
jmp 0x1400029d0
mov edx, 0x44
call fcn.1400026d0
inc esi
jmp 0x1400029d0
lea rcx, [rsp + 0x30]
mov edx, 0x46
call fcn.1400026d0
inc esi
jmp 0x1400029d0
mov edx, 0x45
call fcn.1400026d0
inc esi
jmp 0x1400029d0
test esi, esi
jne case.0x1400028d1.40
cmp word [r13 + 2], di
jne case.0x1400028d1.40
cmp r14d, dword [0x1400bfb48]
jl case.0x1400028d1.40
mov esi, 1
jmp 0x1400029e4
mov edx, 0x50
call fcn.1400026d0
inc esi
jmp 0x1400029d0
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1400029a3
mov edx, 1
mov rcx, rbx
call fcn.140053990
nop
jmp 0x1400029a3
mov qword [rsp + 0x30], r15
jmp 0x1400029d0
lea r9d, [rsi - 1]
lea rcx, [0x1400bfb30]
mov r8d, RegisterTypeLib
mov edx, r14d
call fcn.1400439b0
lea rcx, [rsp + 0x30]
call fcn.140058eb0
mov eax, 1
jmp 0x140002a2c
mov r9d, dword [rsp + 0x2080]
lea rcx, [0x1400bfb30]
mov r8d, 0x89
mov edx, r14d
call fcn.1400439b0
lea rcx, [rsp + 0x30]
call fcn.140058eb0
mov eax, 1
jmp 0x140002a2c
lea rcx, [0x1400bfb30]
mov r9d, esi
mov r8d, WSAGetLastError
mov edx, r14d
call fcn.1400439b0
lea rcx, [rsp + 0x30]
mov edx, 0x7f
call fcn.1400026d0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002df0
lea rcx, [rsp + 0x30]
call fcn.140058eb0
mov eax, 1
jmp 0x140002a2c