Function at 0x4321e7
Capabilities:
Enumerate pe sections
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x740]
sub esp, 0x7c0
mov eax, dword [0x488548]
xor eax, ebp
mov dword [ebp + 0x73c], eax
mov eax, dword [ebp + 0x748]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x74c]
push ebx
mov ebx, dword [ebp + 0x750]
mov dword [ebp - 0x78], eax
mov eax, dword [ebx + 0xc]
cmp eax, 0xeffe
jge 0x43253e
cmp eax, 0xd600
jl 0x43223b
cmp eax, 0xe000
jl 0x43253e
push esi
push edi
lea esi, [ebx + 0x2c]
push esi
call fcn.00427165
mov edi, eax
lea eax, [ebx + 0x4dc]
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x6c]
push eax
push 0
push 0
push esi
mov dword [ebp - 0x6c], 0x40000001
call dword [sym.imp.PPLIB32W.DLL__VFSGetFileType_16]
mov esi, str.E_cr
test eax, eax
jne 0x4322a4
push eax
push eax
lea eax, [ebp - 0x64]
push eax
push esi
call dword [sym.imp.PPLIB32W.DLL__GetCustTable_16]
test eax, eax
lea eax, [ebp - 0x64]
jl 0x4322a1
push edi
push eax
lea eax, [ebp + 0x84]
push 0x479228
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp + 0x84]
mov dword [ebp - 0x70], eax
call dword [sym.imp.PPLIB32W.DLL__GetShiftKey_0]
and eax, 0x400
or dword [ebp + 0x754], eax
mov ecx, 0xc000
je 0x432342
mov eax, dword [ebx + 0xc]
cmp eax, ecx
jge 0x432342
cmp eax, 0x8000
jl 0x43253c
and eax, 0xffff7fff
test eax, 0x2000
jne 0x4322e3
or eax, 0x4000
mov word [ebp + 0x28e], ax
xor eax, eax
push 6
mov word [ebp + 0x290], ax
lea eax, [ebp + 0x28c]
push eax
push dword [ebp - 0x70]
mov ecx, 0x9e
push esi
mov word [ebp + 0x28c], cx
call fcn.00430f0f
cmp word [edi], 0x2e
jne 0x432507
push 0
push 0
add edi, 2
push edi
push esi
call dword [sym.imp.PPLIB32W.DLL__GetCustTable_16]
test eax, eax
jge 0x432507
push 6
lea eax, [ebp + 0x28c]
push eax
push edi
push esi
jmp 0x432502
mov esi, dword [ebx + 0x14]
mov eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0xc]
and dword [ebp - 0x74], 0
add eax, esi
sub edx, ecx
jmp 0x432383
cmp word [esi], 1
jne 0x432360
add esi, 8
jmp 0x432368
cmp edx, dword [ebp - 0x74]
jle 0x432389
inc dword [ebp - 0x74]
mov ecx, esi
lea edi, [ecx + 2]
mov dword [ebp - 0x80], edi
mov di, word [ecx]
inc ecx
inc ecx
test di, di
jne 0x432370
sub ecx, dword [ebp - 0x80]
sar ecx, 1
lea esi, [esi + ecx*2 + 2]
cmp esi, eax
jb 0x432355
xor esi, esi
test esi, esi
je 0x432417
cmp word [esi], 0x25
jne 0x432401
cmp word [esi + 2], 0x4b
jne 0x432401
movzx eax, word [esi + 6]
cmp ax, 0x5c
jne 0x4323ba
cmp word [esi + 8], 0x40
jne 0x4323ba
cmp word [esi + 0xa], 0x44
je 0x43253c
cmp ax, 0x40
jne 0x432401
movzx ecx, word [esi + 8]
cmp cx, 0x5e
jne 0x4323ec
movzx eax, word [esi + 0xa]
cmp ax, 0x58
je 0x43253c
cmp ax, 0x43
je 0x43253c
cmp ax, 0x56
je 0x43253c
push ecx
push str.CMDR
call fcn.0046891a
pop ecx
pop ecx
test eax, eax
jne 0x43253c
push 7
add esi, 2
pop ecx
mov edi, str.sendto
xor eax, eax
repe cmpsw word [esi], word es:[edi]
je 0x43253c
xor edi, edi
mov eax, 0x9f
mov word [ebp + 0x28c], ax
mov edx, str._M_Ccr___
cmp dword [ebp + 0x754], edi
jne 0x432437
mov edx, str._M_Ccr__
lea ecx, [ebp + 0x28e]
movzx eax, word [edx]
inc edx
mov word [ecx], ax
inc edx
inc ecx
inc ecx
cmp ax, di
jne 0x43243d
lea eax, [ebp + 0x28c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x432455
sub eax, edx
push edi
sar eax, 1
lea esi, [ebp + eax*2 + 0x28c]
push 0x244
push esi
push dword [ebx + 0xc]
xor eax, eax
push dword [ebp - 0x78]
mov word [esi], ax
call dword [sym.imp.USER32.dll_GetMenuStringW]
cmp word [esi], di
je 0x43253c
push 9
push esi
call fcn.0046891a
pop ecx
pop ecx
test eax, eax
je 0x4324be
dec esi
dec esi
push 0x26
push esi
call fcn.0046891a
pop ecx
pop ecx
cmp eax, edi
je 0x4324af
mov ax, word [eax + 2]
jmp 0x4324b3
mov ax, word [esi + 2]
mov word [esi], ax
xor eax, eax
mov word [esi + 2], ax
jmp 0x4324d7
lea edi, [ebp + 0x28c]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x4324c6
mov esi, 0x4758e0
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x28c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x4324e0
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp + 0x28c]
push eax
push dword [ebp - 0x70]
push str.E_cr
call fcn.00430f0f
push dword [ebp - 0x70]
push str.CRSSSave_setting
call dword [sym.imp.PPLIB32W.DLL__MessageText_4]
push eax
lea eax, [ebp + 0x28c]
push str._s__s_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [ebp - 0x7c]
add esp, 0x10
lea eax, [ebp + 0x28c]
push eax
xor edx, edx
call fcn.00427caa
pop edi
pop esi
mov ecx, dword [ebp + 0x73c]
xor ecx, ebp
pop ebx
call fcn.0046890b
add ebp, 0x740
leave
ret 0x10