Function at 0x140002560
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2040
call fcn.140031e20
sub rsp, rax
xor r15d, r15d
or eax, 0xffffffff
mov r12, r9
mov esi, r15d
mov r13, r8
mov r14d, edx
mov word [rsp + 0x38], ax
cmp qword [r9 + 0x10], rsi
jbe 0x1400025de
mov rbx, r15
nop word [rax + rax]
mov rax, qword [r12 + 8]
mov rdi, qword [rax + rbx*8]
test rdi, rdi
je 0x1400025d4
movzx eax, word [rdi + 8]
cmp ax, 0x3f
jle 0x1400026c3
mov rcx, rdi
call fcn.140018ec8
inc rbx
cmp rbx, qword [r12 + 0x10]
jb 0x1400025b0
mov qword [r12 + 0x10], r15
cmp word [r13], si
je 0x1400027e8
lea rdx, [0x140000000]
nop word [rax + rax]
mov eax, esi
movzx ecx, word [r13 + rax*2]
cmp cx, 0x20
je 0x140002702
cmp cx, 9
je 0x140002702
mov eax, esi
movzx ebx, word [r13 + rax*2]
test bx, bx
je 0x1400027d3
mov dword [rsp + 0x2080], esi
mov word [rsp + 0x3a], si
mov ebp, r15d
mov rdi, r15
cmp bx, 0x30
jae 0x140002709
cmp bx, 0x2e
je 0x140002713
cmp bx, 0x41
jae 0x140002887
cmp bx, 0x61
jae 0x140002ad6
cmp bx, 0x5f
je 0x140002891
movzx eax, bx
cmp eax, 0x24
je 0x140002851
cmp eax, 0x3d
je 0x1400028db
cmp eax, 0x28
je 0x1400028fe
cmp eax, 0x29
je 0x14000282e
cmp eax, 0x22
je case.0x1400026c1.28
sub eax, 0x1a
cmp eax, 0x44
ja case.0x1400026c1.40
cdqe
movzx eax, byte [rdx + rax + 0x2b74]
mov ecx, dword [rdx + rax*4 + 0x2b38]
add rcx, rdx
jmp rcx
cmp ax, 0x30
jl 0x1400025cc
mov rbp, qword [rdi]
test rbp, rbp
je 0x1400025cc
mov rax, qword [rbp + 0x18]
dec dword [rax]
mov rax, qword [rbp + 0x18]
cmp dword [rax], esi
je 0x140034510
mov rcx, rbp
call fcn.140018ec8
jmp 0x1400025cc
mov edx, 0x40
jmp 0x140002833
inc esi
jmp 0x140002600
cmp bx, 0x39
ja 0x140002649
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400c3d70]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.140002c60
cmp al, 1
jne 0x140034528
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
mov esi, dword [rsp + 0x2080]
jmp 0x1400027be
cmp cx, 0x30
jae 0x140002a17
cmp cx, 0x5f
je 0x14000287b
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x1400346cf
movzx eax, word [rsp + 0x38]
cmp ax, 0x30
jge 0x140002a4a
mov eax, gethostbyname
mov qword [rsp + 0x30], r15
mov word [rsp + 0x38], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1400023e0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
lea rdx, [0x140000000]
mov eax, esi
cmp word [r13 + rax*2], r15w
jne 0x140002600
mov ax, word [rsp + 0x38]
cmp ax, 0x30
jl 0x1400027e8
cmp ax, 0x3f
jle 0x140002a26
mov r11d, 0x7f
lea rdx, [rsp + 0x30]
mov rcx, r12
mov dword [rsp + 0x30], r15d
mov word [rsp + 0x3a], si
mov word [rsp + 0x38], r11w
call fcn.140002440
xor eax, eax
lea r11, [rsp + 0x2040]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov edx, 0x48
lea rcx, [rsp + 0x30]
call fcn.140002bc0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
inc esi
jmp 0x1400027be
inc esi
mov eax, esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x140002867
cmp cx, 0x41
jae 0x14000287b
cmp cx, 0x61
jb 0x140002757
cmp cx, 0x7a
ja 0x140002757
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x140002851
cmp bx, 0x5a
ja 0x14000265d
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400c3d70]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.140002e40
cmp dword [rsp + 0x30], 0xffffffff
je 0x1400346fc
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
mov esi, dword [rsp + 0x2080]
jmp 0x1400027be
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x1400346a0
mov edx, 0x41
call fcn.140002bc0
jmp 0x1400027b1
mov edx, 0x47
jmp 0x140002833
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x2080]
lea rcx, [0x1400c3d70]
mov r8, r13
mov edx, r14d
mov qword [rsp + 0x20], rax
call fcn.1400022a0
lea rcx, [rsp + 0x30]
test eax, eax
jne 0x14003474a
lea edx, [rax + 0x36]
call fcn.140002bc0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.1400023e0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
mov esi, dword [rsp + 0x2080]
jmp 0x1400027be
lea rcx, [rsp + 0x30]
mov edx, reloc.OLEAUT32.dll_VarR8FromUI1
call fcn.140002bc0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, 0x56
inc esi
call fcn.140002bc0
jmp 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140002bc0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, 0x52
inc esi
call fcn.140002bc0
jmp 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140002bc0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400027b1
jmp 0x140034627
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140002bc0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400027b1
jmp 0x140034606
cmp cx, 0x39
jbe 0x14000287b
jmp 0x140002761
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x140002a40
mov rcx, rbx
call fcn.140003410
mov rcx, rbx
call fcn.140018ec8
mov qword [rsp + 0x30], r15
jmp 0x1400027e8
cmp ax, 0x3f
jg 0x140002793
jmp 0x1400346b1
mov edx, 0x4e
jmp 0x140002833
mov edx, 0x4f
jmp 0x140002833
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x140002a81
cmp cx, 0x41
jae 0x140002a8d
cmp cx, 0x61
jb 0x140002a99
cmp cx, 0x7a
ja 0x140002a99
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp case.0x1400026c1.36
cmp cx, 0x30
jae 0x1400345c2
cmp cx, 0x5f
je 0x140002a8d
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x1400346cf
lea rcx, [rsp + 0x30]
mov edx, gethostbyname
call fcn.140002bc0
jmp 0x1400027a2
cmp bx, 0x7a
jbe 0x140002891
jmp 0x140002667
inc esi
movzx ecx, word [r13 + rsi*2]
sub ecx, 0x3d
je 0x14003464f
cmp ecx, 1
lea rcx, [rsp + 0x30]
je 0x14003463e
mov edx, 0x43
call fcn.140002bc0
jmp 0x1400027b1
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x140034665
mov edx, 0x42
call fcn.140002bc0
jmp 0x1400027b1
mov rcx, qword [rbp]
call fcn.140018ec8
mov rcx, qword [rbp + 0x18]
call fcn.140018ec8
nop
jmp 0x1400026eb
mov esi, dword [rsp + 0x2080]
cmp bx, 0x2e
je 0x140034545
lea rdx, [0x140000000]
jmp 0x140002653
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x41
jb 0x140034561
cmp cx, 0x5a
jbe 0x1400345b6
cmp cx, 0x61
jb 0x140034575
cmp cx, 0x7a
jbe 0x1400345b6
cmp cx, 0x30
jb 0x140034589
cmp cx, 0x39
jbe 0x1400345b6
cmp cx, 0x5f
je 0x1400345b6
mov word [rsp + rdi*2 + 0x40], r15w
test ebp, ebp
je 0x1400346cf
lea rcx, [rsp + 0x30]
mov edx, gethostname
call fcn.140002bc0
nop
jmp 0x1400027a2
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x140034545
cmp cx, 0x39
jbe 0x140002a8d
jmp 0x140002aa3
lea rcx, [rsp + 0x30]
mov edx, VarR8FromUI1
call fcn.140002bc0
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, 0x53
inc esi
call fcn.140002bc0
nop
jmp 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, 0x54
inc esi
call fcn.140002bc0
nop
jmp 0x1400027b1
mov edx, 0x51
jmp 0x140002833
lea rcx, [rsp + 0x30]
mov edx, 0x55
inc esi
call fcn.140002bc0
nop
jmp 0x1400027b1
mov edx, 0x44
call fcn.140002bc0
inc esi
jmp 0x1400027b1
lea rcx, [rsp + 0x30]
mov edx, 0x46
call fcn.140002bc0
inc esi
jmp 0x1400027b1
mov edx, 0x45
call fcn.140002bc0
inc esi
jmp 0x1400027b1
test esi, esi
jne case.0x1400026c1.40
cmp word [r13 + 2], di
jne case.0x1400026c1.40
cmp r14d, dword [0x1400c3d90]
jl case.0x1400026c1.40
mov esi, 1
jmp 0x1400027c5
mov edx, 0x50
call fcn.140002bc0
inc esi
jmp 0x1400027b1
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140002793
mov edx, 1
call fcn.140055c20
nop
jmp 0x140002793
lea r9d, [rsi - 1]
lea rcx, [0x1400c3d70]
mov r8d, 0x138b
mov edx, r14d
call fcn.1400452c0
lea rcx, [rsp + 0x30]
call fcn.14005b5d0
mov eax, 1
jmp 0x14000280d
mov r9d, dword [rsp + 0x2080]
lea rcx, [0x1400c3d70]
mov r8d, 0x138c
mov edx, r14d
call fcn.1400452c0
lea rcx, [rsp + 0x30]
call fcn.14005b5d0
mov eax, 1
jmp 0x14000280d
lea rcx, [0x1400c3d70]
mov r9d, esi
mov r8d, 0x1388
mov edx, r14d
call fcn.1400452c0
lea rcx, [rsp + 0x30]
mov edx, 0x7f
call fcn.140002bc0
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140002440
lea rcx, [rsp + 0x30]
call fcn.14005b5d0
mov eax, 1
jmp 0x14000280d