Function at 0x40c4f0
Capabilities:
Access peb ldr_data
Get kernel32 base address
Parse credit card information

Disassembly:
push 0xffffffffffffffff
push 0x536ff0
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov eax, dword [0x58a710]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 8]
xor edx, edx
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], edx
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [esp + 0x2c], eax
lea eax, [esi + eax*2]
movzx esi, word [eax]
xor edi, edi
or ebx, 0xffffffff
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
test si, si
jne 0x40c57d
mov dword [ebp + 8], edx
mov dword [ebp], edx
lea eax, [edx - 2]
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
movzx ebp, si
test ebp, ebp
je 0x40c8f6
test edi, edi
je 0x40c652
push ebp
push str.__t_n_r__
call fcn.0050eca0
add esp, 8
test eax, eax
je 0x40c6cf
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
sub esi, dword [eax + 0xc]
sar esi, 1
sub esi, edi
test ebx, ebx
jne 0x40c5c4
lea ecx, [esi + edi - 1]
mov dword [eax], edi
mov dword [eax + 4], ecx
jmp 0x40c640
mov edi, dword [esp + 0x6c]
mov eax, dword [edi + 0x10]
add edi, 0x10
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, esi
or eax, ecx
jge 0x40c5ea
push esi
mov ecx, edi
call fcn.004047c0
mov ecx, dword [esp + 0x68]
mov eax, dword [edi]
lea edx, [esi + esi]
push edx
mov edx, dword [ecx + 0xc]
mov ecx, dword [esp + 0x28]
lea edx, [edx + ecx*2]
push edx
push eax
call fcn.005135e0
add esp, 0xc
mov eax, esi
cmp esi, 0xffffffff
jne 0x40c622
mov eax, dword [edi]
mov ecx, dword [eax - 8]
test eax, eax
je 0x40c62a
push ecx
push eax
call fcn.0050ebbb
add esp, 8
test eax, eax
jl 0x40cdff
mov ecx, dword [edi]
cmp eax, dword [ecx - 8]
jg 0x40cdff
mov dword [ecx - 0xc], eax
mov ecx, dword [edi]
xor edx, edx
mov word [ecx + eax*2], dx
mov edx, dword [esp + 0x14]
xor edi, edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], edi
cmp dword [esp + 0x18], 0
je 0x40c894
cmp ebp, 0x3e
jne 0x40c73a
test dl, 0xc0
jne 0x40c751
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x20]
sub ebp, dword [eax + 0xc]
mov eax, dword [esp + 0x1c]
sar ebp, 1
mov dword [esp + 0x2c], ebp
cmp eax, 1
jne 0x40c6e3
mov dword [esp + 0x18], 0
cmp ebx, eax
jne 0x40c72c
cmp dword [esp + 0x28], 0x2f
jne 0x40c72c
mov eax, dword [esp + 0x30]
test eax, eax
je 0x40c6c2
push eax
push str.__t_n_r_
call fcn.0050eca0
mov edx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x40c72c
mov eax, dword [esp + 0x6c]
or dword [eax + 0xc], 0x10000
jmp 0x40c72c
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x20], eax
jmp 0x40c8e7
cmp ebp, eax
jle 0x40c8de
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
lea eax, [ecx + ecx]
sub esi, eax
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x18]
lea eax, [esi + 2]
sub ecx, eax
sub dword [esp + 0x34], 1
je 0x40c724
mov dx, word [eax]
mov si, word [ecx + eax]
add eax, 2
cmp dx, si
mov edx, dword [esp + 0x14]
je 0x40c705
jmp 0x40c8de
mov dword [esp + 0x18], 0
test dl, 0x20
je 0x40ccf9
jmp 0x40c8de
cmp ebp, 0x3c
jne 0x40c751
cmp ebx, 2
je 0x40ce09
cmp ebx, 0xffffffff
je 0x40ce09
test bl, 1
je 0x40c867
test dl, 0xc0
je 0x40c7b1
cmp ebp, 0x22
jne 0x40c787
test dl, dl
jns 0x40c859
mov eax, dword [esp + 0x28]
xor edx, 0x80
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
cmp ebp, 0x27
jne 0x40c859
test dl, 0x40
je 0x40c859
mov eax, dword [esp + 0x28]
xor edx, 0x40
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
cmp ebp, 0x22
jne 0x40c7dd
test edx, 0x100
je 0x40c859
mov eax, dword [esp + 0x28]
xor edx, 0x180
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
cmp ebp, 0x27
jne 0x40c805
test edx, 0x100
je 0x40c859
mov eax, dword [esp + 0x28]
xor edx, 0x140
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
cmp ebp, 0x3d
jne 0x40c833
cmp dword [esp + 0x28], ebp
je 0x40c833
test edx, 0x100
jne 0x40c83b
mov eax, dword [esp + 0x28]
xor edx, 0x100
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
test edx, 0x100
je 0x40c859
push ebp
push str.__t_n_r
call fcn.0050eca0
add esp, 8
test eax, eax
jne 0x40c855
xor dword [esp + 0x14], 0x100
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x40c8de
test bl, 0x40
je 0x40c8de
cmp ebp, 0x22
jne 0x40c882
test dl, 0x40
jne 0x40c8de
xor edx, 0x80
mov dword [esp + 0x14], edx
jmp 0x40c8de
cmp ebp, 0x27
jne 0x40c8de
test dl, dl
js 0x40c8de
xor edx, 0x40
mov dword [esp + 0x14], edx
jmp 0x40c8de
test edx, edx
je 0x40cd25
test dl, 0x10
je 0x40c93a
cmp ebp, 0x3c
je 0x40ce1c
push ebp
push str.__t_n_r
call fcn.0050eca0
add esp, 8
test eax, eax
jne 0x40c8da
xor dword [esp + 0x14], 0x10
mov ebx, 2
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 0x568c38
mov edx, dword [esp + 0x14]
add dword [esp + 0x20], 2
mov eax, dword [esp + 0x20]
movzx ebp, word [eax]
test ebp, ebp
jne 0x40c588
mov ecx, dword [esp + 0x68]
sub eax, dword [ecx + 0xc]
sar eax, 1
dec eax
mov ebp, eax
cmp ebx, 4
je 0x40ccf9
cmp ebx, 2
je 0x40ccf9
mov eax, 0x568b38
test dl, 0x20
jne 0x40cd8e
cmp ebx, 0x40
je 0x40cd8e
cmp ebx, 1
jne 0x40cd5f
mov eax, str.Element_tag
jmp 0x40cd93
test dl, 1
je 0x40ca72
mov eax, 1
xor edx, eax
mov dword [esp + 0x14], edx
cmp ebp, 0x60
ja 0x40ca4e
cmp ebp, 0x40
jbe 0x40c965
cmp ebp, 0x5b
jb 0x40ca4e
cmp ebp, 0x5f
je 0x40ca4e
cmp ebp, 0x3a
je 0x40ca4e
cmp ebp, 0x2f
jne 0x40c98c
mov dword [esp + 0x18], 0x568c3c
mov dword [esp + 0x1c], eax
xor ebx, ebx
jmp 0x40c9b5
cmp ebp, 0x21
jne 0x40c99d
or edx, 2
mov dword [esp + 0x14], edx
jmp 0x40c8de
cmp ebp, 0x3f
jne 0x40c9cd
mov dword [esp + 0x18], 0x568c40
mov dword [esp + 0x1c], 2
lea ebx, [ebp - 0x2f]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub edi, dword [ecx + 0xc]
sar edi, 1
add edi, eax
mov dword [esp + 0x24], edi
jmp 0x40c8de
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x568c3c
mov dword [esp + 0x20], eax
call fcn.00404370
push str.tag_name_character
mov ecx, edi
call fcn.0040a5f0
mov edx, dword [esp + 0x2c]
push edx
lea esi, [esp + 0x40]
call fcn.0040e3f0
push eax
lea eax, [esp + 0x40]
push str._at_offset
push eax
mov dword [esp + 0x70], 2
call fcn.0040a3f0
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 3
call fcn.0040eaa0
lea ecx, [esp + 0x38]
call fcn.00404b40
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00404b40
mov edi, dword [esp + 0x24]
jmp 0x40c8da
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub edi, dword [ecx + 0xc]
mov dword [esp + 0x18], 0x568c3c
sar edi, 1
mov dword [esp + 0x1c], eax
mov ebx, eax
mov dword [esp + 0x24], edi
jmp 0x40c8de
test dl, 2
je 0x40cb60
xor edx, 2
mov dword [esp + 0x14], edx
cmp ebp, 0x2d
jne 0x40ca93
or edx, 4
mov dword [esp + 0x14], edx
jmp 0x40c8de
cmp ebp, 0x5b
jne 0x40caa9
test dl, 0x20
jne 0x40cabf
or edx, 8
mov dword [esp + 0x14], edx
jmp 0x40c8de
cmp ebp, 0x44
jne 0x40cabf
test dl, 0x20
jne 0x40cabf
or edx, 0x20
mov dword [esp + 0x14], edx
jmp 0x40c8de
push ebp
push 0x568c88
call fcn.0050eca0
add esp, 8
mov dword [esp + 0x18], 0x568c3c
mov dword [esp + 0x1c], 1
test eax, eax
je 0x40caeb
mov ebx, 0x40
jmp 0x40c8da
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
call fcn.00404370
push str.__tag
mov ecx, edi
call fcn.0040a5f0
mov edx, dword [esp + 0x2c]
push edx
lea esi, [esp + 0x48]
call fcn.0040e3f0
push eax
lea eax, [esp + 0x48]
push str._at_offset
push eax
mov dword [esp + 0x70], 4
call fcn.0040a3f0
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 5
call fcn.0040eaa0
lea ecx, [esp + 0x40]
call fcn.00404b40
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00404b40
mov edi, dword [esp + 0x24]
jmp 0x40c8da
test dl, 4
je 0x40cc12
xor edx, 4
mov dword [esp + 0x14], edx
cmp ebp, 0x2d
jne 0x40cb8d
mov dword [esp + 0x18], 0x568c9c
mov dword [esp + 0x1c], 3
lea ebx, [ebp - 0xd]
jmp 0x40c8de
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x568c3c
mov dword [esp + 0x20], 1
call fcn.00404370
push str.comment_tag
mov ecx, edi
call fcn.0040a5f0
mov ecx, dword [esp + 0x2c]
push ecx
lea esi, [esp + 0x50]
call fcn.0040e3f0
push eax
lea edx, [esp + 0x50]
push str._at_offset
push edx
mov dword [esp + 0x70], 6
call fcn.0040a3f0
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 7
call fcn.0040eaa0
lea ecx, [esp + 0x48]
call fcn.00404b40
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00404b40
mov edi, dword [esp + 0x24]
jmp 0x40c8da
test dl, 8
je 0x40ccc4
xor edx, 8
mov dword [esp + 0x14], edx
cmp ebp, 0x43
jne 0x40cc3f
mov dword [esp + 0x18], 0x568cbc
mov dword [esp + 0x1c], 3
lea ebx, [ebp - 0x3b]
jmp 0x40c8de
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x568c3c
mov dword [esp + 0x20], 1
call fcn.00404370
push 0x568b38
mov ecx, edi
call fcn.0040a5f0
mov eax, dword [esp + 0x2c]
push eax
lea esi, [esp + 0x58]
call fcn.0040e3f0
push eax
lea ecx, [esp + 0x58]
push str._at_offset
push ecx
mov dword [esp + 0x70], 8
call fcn.0040a3f0
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 9
call fcn.0040eaa0
lea ecx, [esp + 0x50]
call fcn.00404b40
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00404b40
mov edi, dword [esp + 0x24]
jmp 0x40c8da
test dl, 0x20
je 0x40c8de
cmp ebp, 0x3c
jne 0x40ccde
or edx, 1
mov dword [esp + 0x14], edx
jmp 0x40c8de
cmp ebp, 0x3e
jne 0x40c8de
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
sub ebp, dword [eax + 0xc]
mov ebx, 0x40
sar ebp, 1
mov ecx, dword [esp + 0x68]
lea eax, [ebp + 1]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x6c]
sub eax, dword [ecx + 4]
mov dword [ecx], ebx
mov dword [ecx + 8], eax
mov eax, ebx
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
cmp ebp, 0x3c
jne 0x40cd37
mov dword [esp + 0x14], 1
jmp 0x40c8da
push ebp
push str.__t_n_r
mov ebx, 4
call fcn.0050eca0
add esp, 8
test eax, eax
je 0x40c8c5
mov dword [esp + 0x14], 0x10
jmp 0x40c8da
test ebx, ebx
jne 0x40cd6a
mov eax, str.Element_end_tag
jmp 0x40cd93
cmp ebx, 8
jne 0x40cd76
mov eax, str.CDATA_Section
jmp 0x40cd93
cmp ebx, 0x10
jne 0x40cd82
mov eax, str.Processing_instruction
jmp 0x40cd93
cmp ebx, 0x20
jne 0x40cd93
mov eax, str.Comment
jmp 0x40cd93
mov eax, str.Doctype
mov esi, dword [esp + 0x6c]
lea edi, [esi + 0x10]
push eax
mov ecx, edi
or ebx, 0xffffffff
call fcn.00404370
mov edx, dword [esi + 4]
push edx
lea esi, [esp + 0x4c]
call fcn.0040e3f0
push eax
lea eax, [esp + 0x54]
push str._at_offset
push eax
mov dword [esp + 0x70], 0
call fcn.0040a3f0
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 1
call fcn.0040eaa0
lea ecx, [esp + 0x4c]
call fcn.00404b40
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00404b40
push str._unterminated
mov ecx, edi
call fcn.0040a5f0
jmp 0x40ccf9
push 0x80070057
call fcn.00404b00
mov ebp, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub ebp, dword [ecx + 0xc]
sar ebp, 1
dec ebp
jmp 0x40ccf9
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x68]
sub ebp, dword [edx + 0xc]
mov ebx, 4
sar ebp, 1
dec ebp
jmp 0x40ccf9