Function at 0x281b79f10
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov rdx, qword [rcx + 0x18]
movzx eax, byte [rdx]
mov r12, rcx
cmp al, 0x55
je 0x281b7a010
jg 0x281b79f78
cmp al, 0x4e
je 0x281b7a210
cmp al, 0x53
jne 0x281b7a028
cmp byte [rdx + 1], 0x74
je 0x281b7a0b0
xor edx, edx
call fcn.281b787f0
mov r13, rax
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x49
je 0x281b7a07c
mov rax, r13
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
cmp al, 0x5a
jne 0x281b7a028
lea rax, [rdx + 1]
mov qword [rcx + 0x18], rax
movzx eax, byte [rdx + 1]
cmp al, 0x47
je 0x281b7a170
cmp al, 0x54
je 0x281b7a170
xor edx, edx
call fcn.281b7a560
mov rbx, rax
test rbx, rbx
je 0x281b7a1f7
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x45
jne 0x281b7a1f7
lea rdx, [rax + 1]
mov qword [r12 + 0x18], rdx
movzx edx, byte [rax + 1]
cmp dl, 0x73
je 0x281b7a490
cmp dl, 0x64
je 0x281b7a358
mov rcx, r12
call fcn.281b79f10
mov r9, rax
test rax, rax
je 0x281b79ffa
mov eax, dword [rax]
sub eax, 0x46
and eax, 0xfffffffd
jne 0x281b7a500
cmp dword [rbx], 3
je 0x281b7a440
mov r8, rbx
mov edx, 2
jmp 0x281b7a098
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.281b799e0
mov rcx, r12
call fcn.281b799e0
mov r13, rax
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x49
jne 0x281b79f62
test r13, r13
je 0x281b7a1f7
mov edx, dword [r12 + 0x38]
cmp edx, dword [r12 + 0x3c]
jge 0x281b7a1f7
mov rcx, qword [r12 + 0x30]
movsxd r8, edx
add edx, 1
xor r9d, r9d
mov qword [rcx + r8*8], r13
mov dword [r12 + 0x38], edx
movzx edi, byte [rax]
lea edx, [rdi - 0x49]
cmp dl, 1
ja 0x281b7a090
add rax, 1
mov rcx, r12
mov qword [r12 + 0x18], rax
call fcn.281b7ba20
mov r9, rax
mov r8, r13
mov edx, 4
mov rcx, r12
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.281b77e00
add rdx, 2
mov qword [rcx + 0x18], rdx
call fcn.281b799e0
mov r9, rax
mov eax, dword [r12 + 0x28]
cmp eax, dword [r12 + 0x2c]
jge 0x281b7a4f8
movsxd r8, eax
add eax, 1
mov dword [r12 + 0x28], eax
shl r8, 5
lea rax, [0x281ca10c3]
add r8, qword [r12 + 0x20]
mov qword [r8], 0
mov dword [r8 + 8], 0
mov qword [r8 + 0x10], rax
mov dword [r8 + 0x18], 3
mov edx, 1
mov rcx, r12
call fcn.281b77e00
add dword [r12 + 0x48], 3
mov r13, rax
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x49
jne 0x281b79f62
test r13, r13
je 0x281b7a1f7
mov edx, dword [r12 + 0x38]
cmp edx, dword [r12 + 0x3c]
jge 0x281b7a1f7
mov rcx, qword [r12 + 0x30]
movsxd r8, edx
add edx, 1
mov qword [rcx + r8*8], r13
mov dword [r12 + 0x38], edx
movzx edi, byte [rax]
lea edx, [rdi - 0x49]
cmp dl, 1
jbe 0x281b7a07c
xor r9d, r9d
jmp 0x281b7a090
mov rcx, r12
call fcn.281b7a740
mov rbx, rax
jmp 0x281b79fa6
mov rcx, r12
call fcn.281b799e0
mov r9, rax
test r13, r13
je 0x281b7a1a3
mov edx, 1
mov r8, r13
mov rcx, r12
call fcn.281b77e00
mov r9, rax
cmp bl, 0x53
je 0x281b7a338
mov rax, qword [r12 + 0x18]
movzx ebx, byte [rax]
cmp bl, 0x45
je 0x281b7a2f8
test r9, r9
je 0x281b7a1f0
mov edx, dword [r12 + 0x38]
cmp edx, dword [r12 + 0x3c]
jge 0x281b7a1f0
mov rcx, qword [r12 + 0x30]
movsxd r8, edx
add edx, 1
mov r13, r9
mov qword [rcx + r8*8], r9
mov dword [r12 + 0x38], edx
movzx ebx, byte [rax]
test bl, bl
jne 0x281b7a256
nop dword [rax]
mov qword [rsi], 0
xor r13d, r13d
mov rax, r13
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
add rdx, 1
mov r8d, 1
mov qword [rcx + 0x18], rdx
lea rdx, [rsp + 0x38]
call fcn.281b7b740
mov rsi, rax
test rax, rax
je 0x281b7a1f7
xor edx, edx
mov rcx, r12
call fcn.281b78000
mov rdi, rax
mov rax, qword [r12 + 0x18]
movzx ebx, byte [rax]
test bl, bl
je 0x281b7a1f0
movabs rbp, 0x20100803ff
xor r13d, r13d
cmp bl, 0x44
je 0x281b7a2d0
lea ecx, [rbx - 0x30]
mov edx, ebx
xor r8d, r8d
mov r9, r13
cmp cl, 0x25
jbe 0x281b7a302
sub edx, 0x61
cmp dl, 0x19
jbe 0x281b7a180
test r8b, r8b
jne 0x281b7a180
cmp bl, 0x53
je 0x281b7a318
cmp bl, 0x49
je 0x281b7a460
cmp bl, 0x54
je 0x281b7a52f
cmp bl, 0x45
je 0x281b7a3ff
test r13, r13
je 0x281b7a1f0
cmp bl, 0x4d
jne 0x281b7a1f0
add rax, 1
mov qword [r12 + 0x18], rax
jmp 0x281b7a1e5
movzx eax, byte [rax + 1]
mov rcx, r12
and eax, 0xffffffdf
cmp al, 0x54
jne 0x281b7a348
call fcn.281b78bf0
mov r9, rax
test r13, r13
jne 0x281b7a190
jmp 0x281b7a1ac
mov ecx, 0x15
mov edx, 0x45
mov r8, rbp
mov r13, r9
shr r8, cl
and r8d, 1
jmp 0x281b7a26f
mov edx, 1
mov rcx, r12
call fcn.281b787f0
mov r9, rax
test r13, r13
jne 0x281b7a190
nop dword [rax]
mov rax, qword [r12 + 0x18]
mov r13, r9
jmp 0x281b7a1e5
call fcn.281b799e0
mov r9, rax
jmp 0x281b7a2e6
lea rdx, [rax + 2]
mov qword [r12 + 0x18], rdx
movzx edx, byte [rax + 2]
cmp dl, 0x5f
je 0x281b7a51f
cmp dl, 0x6e
je 0x281b7a1f7
mov rcx, r12
call fcn.281b77ec0
add eax, 1
mov esi, eax
js 0x281b7a1f7
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x5f
jne 0x281b7a1f7
add rax, 1
mov qword [r12 + 0x18], rax
mov rcx, r12
call fcn.281b79f10
mov rdi, rax
test rax, rax
je 0x281b7a3bf
mov eax, dword [rdi]
sub eax, 0x46
and eax, 0xfffffffd
jne 0x281b7a547
mov eax, dword [r12 + 0x28]
cmp eax, dword [r12 + 0x2c]
jge 0x281b7a53f
movsxd r9, eax
add eax, 1
shl r9, 5
add r9, qword [r12 + 0x20]
mov qword [r9 + 4], 0
mov dword [r12 + 0x28], eax
mov dword [r9], 0x47
mov dword [r9 + 0x18], esi
mov qword [r9 + 0x10], rdi
jmp 0x281b79ffa
mov qword [rsi], r13
test r13, r13
je 0x281b7a1f7
test rdi, rdi
je 0x281b7a41e
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x38], rdi
mov qword [rdi + 0x10], rax
mov rax, qword [r12 + 0x18]
cmp byte [rax], 0x45
jne 0x281b7a1f7
add rax, 1
mov r13, qword [rsp + 0x38]
mov qword [r12 + 0x18], rax
jmp 0x281b79f62
mov rax, qword [rbx + 0x18]
cmp dword [rax], 0x29
jne 0x281b7a003
mov qword [rax + 0x10], 0
jmp 0x281b7a003
test r13, r13
je 0x281b7a1f0
add rax, 1
mov rcx, r12
mov qword [r12 + 0x18], rax
call fcn.281b7ba20
mov edx, 4
mov r9, rax
jmp 0x281b7a195
add rax, 2
mov rcx, r12
mov qword [r12 + 0x18], rax
call fcn.281b78060
test eax, eax
je 0x281b7a1f7
mov eax, dword [r12 + 0x28]
cmp eax, dword [r12 + 0x2c]
jge 0x281b7a53f
movsxd r9, eax
add eax, 1
mov dword [r12 + 0x28], eax
shl r9, 5
lea rax, str.string_literal
add r9, qword [r12 + 0x20]
mov qword [r9], 0
mov dword [r9 + 8], 0
mov qword [r9 + 0x10], rax
mov dword [r9 + 0x18], 0xe
jmp 0x281b79ffa
xor r8d, r8d
jmp 0x281b7a106
mov rcx, r12
mov qword [rsp + 0x28], r9
call fcn.281b78060
mov r9, qword [rsp + 0x28]
test eax, eax
je 0x281b7a1f7
jmp 0x281b79ffa
add rax, 3
xor esi, esi
mov qword [r12 + 0x18], rax
jmp 0x281b7a3a1
mov rcx, r12
call fcn.281b785b0
mov r9, rax
jmp 0x281b7a2e6
xor r9d, r9d
jmp 0x281b79ffa
mov rcx, r12
call fcn.281b78060
test eax, eax
jne 0x281b7a3bf
jmp 0x281b7a1f7