Function at 0x100b0d52
Capabilities:
Inspect section memory permissions
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov eax, dword [0x10178af8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x14]
push ebx
mov dword [ebp - 0x74], eax
mov eax, dword [eax]
push esi
xor ebx, ebx
mov dword [ebp - 0x54], eax
mov esi, 0x1000
push edi
mov eax, esi
mov dword [ebp - 0x70], ecx
mov byte [ebp - 0x4e], bl
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], ebx
call fcn.10128360
mov edi, esp
push dword [ebp - 0x6c]
call sym.CoreFoundation.dll_CFStringGetLength
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x4d]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x54]
shr eax, 0x12
push esi
and al, 1
push edi
movzx eax, al
push eax
push dword [ebp - 0x6c]
lea edi, [ebp - 0x5d]
push dword [ebp - 0x68]
call fcn.100ae2dc
mov edi, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x64]
xor eax, eax
add esp, 0x24
cmp dword [ebp - 0x58], eax
jle 0x100b0e14
cmp byte [ebp - 0x4d], bl
je 0x100b0de6
movsx ecx, byte [eax + esi]
jmp 0x100b0dea
movzx ecx, word [edi + eax*2]
cmp ecx, 0x23
je 0x100b0df7
inc eax
cmp eax, dword [ebp - 0x58]
jl 0x100b0ddb
jmp 0x100b0e14
or dword [ebp - 0x54], 0x100
lea ecx, [eax + 1]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x58]
sub ecx, eax
dec ecx
mov dword [ebp - 8], ecx
mov byte [ebp - 0x4e], 1
mov dword [ebp - 0x58], eax
xor eax, eax
cmp dword [ebp - 0x58], eax
jle 0x100b1071
cmp byte [ebp - 0x4d], bl
je 0x100b0e2e
movsx cx, byte [eax + esi]
movzx ecx, cx
jmp 0x100b0e32
movzx ecx, word [edi + eax*2]
push 0x3a
pop edx
cmp dx, cx
je 0x100b0e64
cmp cx, 0x7f
ja 0x100b0e4f
movzx ecx, cx
movzx ecx, byte [ecx + 0x1013f890]
and ecx, 8
jmp 0x100b0e51
xor ecx, ecx
test cl, cl
je 0x100b1071
inc eax
cmp eax, dword [ebp - 0x58]
jl 0x100b0e1f
jmp 0x100b1071
and dword [ebp - 0x4c], ebx
or dword [ebp - 0x54], 0x4001
inc byte [ebp - 0x4e]
mov dword [ebp - 0x48], eax
lea ebx, [eax + 1]
cmp eax, 3
jne 0x100b0ed7
cmp byte [ebp - 0x4d], 0
je 0x100b0e87
movsx eax, byte [esi]
jmp 0x100b0e8a
movzx eax, word [edi]
cmp eax, 0x66
jne 0x100b1071
cmp byte [ebp - 0x4d], 0
je 0x100b0e9f
movsx eax, byte [esi + 1]
jmp 0x100b0ea3
movzx eax, word [edi + 2]
cmp eax, 0x74
jne 0x100b1071
cmp byte [ebp - 0x4d], 0
je 0x100b0eb8
movsx eax, byte [esi + 2]
jmp 0x100b0ebc
movzx eax, word [edi + 4]
cmp eax, 0x70
jne 0x100b1071
mov eax, dword [ebp - 0x54]
and eax, 0x1fffffff
sub eax, 0x60000000
jmp 0x100b106e
cmp eax, 4
jne 0x100b0ffc
mov dl, byte [ebp - 0x4d]
test dl, dl
je 0x100b0eec
movsx eax, byte [esi]
jmp 0x100b0eef
movzx eax, word [edi]
mov ecx, 0x1fffffff
cmp eax, 0x68
jne 0x100b0f3f
test dl, dl
je 0x100b0f03
movsx eax, byte [esi + 1]
jmp 0x100b0f07
movzx eax, word [edi + 2]
cmp eax, 0x74
jne 0x100b0f3f
test dl, dl
je 0x100b0f16
movsx eax, byte [esi + 2]
jmp 0x100b0f1a
movzx eax, word [edi + 4]
cmp eax, 0x74
jne 0x100b0f3f
test dl, dl
je 0x100b0f29
movsx eax, byte [esi + 3]
jmp 0x100b0f2d
movzx eax, word [edi + 6]
cmp eax, 0x70
jne 0x100b0f3f
mov eax, dword [ebp - 0x54]
and eax, ecx
add eax, 0x20000000
mov dword [ebp - 0x54], eax
test dl, dl
je 0x100b0f48
movsx eax, byte [esi]
jmp 0x100b0f4b
movzx eax, word [edi]
cmp eax, 0x66
jne 0x100b0f96
test dl, dl
je 0x100b0f5a
movsx eax, byte [esi + 1]
jmp 0x100b0f5e
movzx eax, word [edi + 2]
cmp eax, 0x69
jne 0x100b0f96
test dl, dl
je 0x100b0f6d
movsx eax, byte [esi + 2]
jmp 0x100b0f71
movzx eax, word [edi + 4]
cmp eax, 0x6c
jne 0x100b0f96
test dl, dl
je 0x100b0f80
movsx eax, byte [esi + 3]
jmp 0x100b0f84
movzx eax, word [edi + 6]
cmp eax, 0x65
jne 0x100b0f96
mov eax, dword [ebp - 0x54]
and eax, ecx
add eax, 0x60000000
mov dword [ebp - 0x54], eax
test dl, dl
je 0x100b0f9f
movsx eax, byte [esi]
jmp 0x100b0fa2
movzx eax, word [edi]
cmp eax, 0x64
jne 0x100b1071
test dl, dl
je 0x100b0fb5
movsx eax, byte [esi + 1]
jmp 0x100b0fb9
movzx eax, word [edi + 2]
cmp eax, 0x61
jne 0x100b1071
test dl, dl
je 0x100b0fcc
movsx eax, byte [esi + 2]
jmp 0x100b0fd0
movzx eax, word [edi + 4]
cmp eax, 0x74
jne 0x100b1071
test dl, dl
je 0x100b0fe3
movsx eax, byte [esi + 3]
jmp 0x100b0fe7
movzx eax, word [edi + 6]
cmp eax, 0x61
jne 0x100b1071
mov eax, dword [ebp - 0x54]
and eax, ecx
sub eax, 0x80000000
jmp 0x100b106e
cmp eax, 5
jne 0x100b1071
mov cl, byte [ebp - 0x4d]
test cl, cl
je 0x100b100d
movsx eax, byte [esi]
jmp 0x100b1010
movzx eax, word [edi]
cmp eax, 0x68
jne 0x100b1071
test cl, cl
je 0x100b101f
movsx eax, byte [esi + 1]
jmp 0x100b1023
movzx eax, word [edi + 2]
cmp eax, 0x74
jne 0x100b1071
test cl, cl
je 0x100b1032
movsx eax, byte [esi + 2]
jmp 0x100b1036
movzx eax, word [edi + 4]
cmp eax, 0x74
jne 0x100b1071
test cl, cl
je 0x100b1045
movsx eax, byte [esi + 3]
jmp 0x100b1049
movzx eax, word [edi + 6]
cmp eax, 0x70
jne 0x100b1071
test cl, cl
je 0x100b1058
movsx eax, byte [esi + 3]
jmp 0x100b105c
movzx eax, word [edi + 6]
cmp eax, 0x73
jne 0x100b1071
mov eax, dword [ebp - 0x54]
and eax, 0x1fffffff
add eax, 0x40000000
mov dword [ebp - 0x54], eax
test byte [ebp - 0x54], 1
je 0x100b10fb
cmp ebx, dword [ebp - 0x58]
je 0x100b1095
cmp byte [ebp - 0x4d], 0
je 0x100b108c
movsx eax, byte [esi + ebx]
jmp 0x100b1090
movzx eax, word [edi + ebx*2]
cmp eax, 0x2f
je 0x100b10fb
test dword [ebp - 0x54], 0x100
je 0x100b10ae
push dword [ebp - 0x6c]
and dword [ebp - 0x54], 0xfffffeff
call sym.CoreFoundation.dll_CFStringGetLength
pop ecx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x54]
push 0
push 8
push dword [ebp - 0x68]
mov dword [eax], ecx
call sym.CoreFoundation.dll_CFAllocatorAllocate
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov dword [eax], edx
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x48]
add esp, 0xc
cmp byte [ebp - 0x5d], 0
mov dword [eax + 4], ecx
je 0x100b146c
cmp byte [ebp - 0x4d], 0
mov eax, esi
jne 0x100b10eb
mov eax, edi
push eax
push dword [ebp - 0x68]
call sym.CoreFoundation.dll_CFAllocatorDeallocate
pop ecx
pop ecx
jmp 0x100b146c
mov eax, dword [ebp - 0x58]
or dword [ebp - 0x54], 0x8000
sub eax, ebx
cmp eax, 2
jl 0x100b12a7
cmp byte [ebp - 0x4d], 0
je 0x100b111c
movsx eax, byte [esi + ebx]
jmp 0x100b1120
movzx eax, word [edi + ebx*2]
cmp eax, 0x2f
jne 0x100b12a7
cmp byte [ebp - 0x4d], 0
je 0x100b1136
movsx eax, byte [esi + ebx + 1]
jmp 0x100b113b
movzx eax, word [edi + ebx*2 + 2]
cmp eax, 0x2f
jne 0x100b12a7
lea ecx, [ebx + 2]
mov eax, ecx
cmp ecx, dword [ebp - 0x58]
jge 0x100b117e
cmp byte [ebp - 0x4d], 0
je 0x100b115a
movsx edx, byte [eax + esi]
jmp 0x100b115e
movzx edx, word [edi + eax*2]
cmp edx, 0x2f
je 0x100b117e
cmp byte [ebp - 0x4d], 0
je 0x100b116f
movsx edx, byte [eax + esi]
jmp 0x100b1173
movzx edx, word [edi + eax*2]
cmp edx, 0x3f
je 0x100b117e
inc eax
cmp eax, dword [ebp - 0x58]
jl 0x100b114e
mov edi, eax
cmp eax, ecx
je 0x100b129f
mov ebx, dword [ebp - 0x64]
mov esi, ecx
cmp ecx, edi
jge 0x100b1209
cmp byte [ebp - 0x4d], 0
je 0x100b119d
movsx eax, byte [esi + ebx]
jmp 0x100b11a4
mov eax, dword [ebp - 0x5c]
movzx eax, word [eax + esi*2]
cmp eax, 0x40
je 0x100b11b0
inc esi
cmp esi, edi
jl 0x100b1191
jmp 0x100b1209
or dword [ebp - 0x54], 2
inc byte [ebp - 0x4e]
mov dword [ebp - 0x44], ecx
mov eax, ecx
cmp ecx, esi
jge 0x100b11f9
cmp byte [ebp - 0x4d], 0
je 0x100b11cc
movsx edx, byte [eax + ebx]
jmp 0x100b11d3
mov edx, dword [ebp - 0x5c]
movzx edx, word [edx + eax*2]
cmp edx, 0x3a
je 0x100b11df
inc eax
cmp eax, esi
jl 0x100b11c0
jmp 0x100b11f9
or dword [ebp - 0x54], 4
inc byte [ebp - 0x4e]
lea edx, [eax + 1]
mov dword [ebp - 0x3c], edx
mov edx, esi
sub edx, eax
dec edx
sub eax, ecx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x40], eax
test byte [ebp - 0x54], 4
jne 0x100b1206
mov eax, esi
sub eax, ecx
mov dword [ebp - 0x40], eax
lea ecx, [esi + 1]
or dword [ebp - 0x54], 8
inc byte [ebp - 0x4e]
mov dword [ebp - 0x34], ecx
mov eax, ecx
cmp ecx, edi
jge 0x100b1292
cmp byte [ebp - 0x4d], 0
je 0x100b1225
movsx edx, byte [eax + ebx]
jmp 0x100b122c
mov edx, dword [ebp - 0x5c]
movzx edx, word [edx + eax*2]
cmp edx, 0x5b
je 0x100b1256
cmp byte [ebp - 0x4d], 0
je 0x100b1265
movsx edx, byte [eax + ebx]
jmp 0x100b126c
cmp byte [ebp - 0x4d], 0
je 0x100b1249
movsx edx, byte [eax + ebx]
jmp 0x100b1250
mov edx, dword [ebp - 0x5c]
movzx edx, word [edx + eax*2]
cmp edx, 0x5d
je 0x100b125c
inc eax
cmp eax, edi
jl 0x100b123d
jmp 0x100b1271
or dword [ebp - 0x54], 0x400
jmp 0x100b1271
mov edx, dword [ebp - 0x5c]
movzx edx, word [edx + eax*2]
cmp edx, 0x3a
je 0x100b1278
inc eax
cmp eax, edi
jl 0x100b1219
jmp 0x100b1292
or dword [ebp - 0x54], 0x10
inc byte [ebp - 0x4e]
lea edx, [eax + 1]
mov dword [ebp - 0x2c], edx
mov edx, edi
sub edx, eax
dec edx
sub eax, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], eax
test byte [ebp - 0x54], 0x10
jne 0x100b129f
mov eax, edi
sub eax, ecx
mov dword [ebp - 0x30], eax
mov esi, dword [ebp - 0x64]
mov ebx, edi
mov edi, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
mov eax, ebx
cmp ebx, edx
jge 0x100b12e7
cmp byte [ebp - 0x4d], 0
je 0x100b12bc
movsx ecx, byte [eax + esi]
jmp 0x100b12c0
movzx ecx, word [edi + eax*2]
cmp ecx, 0x3f
je 0x100b12cc
inc eax
cmp eax, edx
jl 0x100b12b0
jmp 0x100b12e7
or dword [ebp - 0x54], 0x80
inc byte [ebp - 0x4e]
sub edx, eax
dec edx
mov dword [ebp - 0x10], edx
lea ecx, [eax + 1]
mov edx, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x58], edx
mov eax, ebx
cmp ebx, edx
jge 0x100b131f
cmp byte [ebp - 0x4d], 0
je 0x100b12f9
movsx ecx, byte [eax + esi]
jmp 0x100b12fd
movzx ecx, word [edi + eax*2]
cmp ecx, 0x3b
je 0x100b1309
inc eax
cmp eax, edx
jl 0x100b12ed
jmp 0x100b131f
or dword [ebp - 0x54], 0x40
inc byte [ebp - 0x4e]
sub edx, eax
lea ecx, [eax + 1]
dec edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x58], eax
mov edx, dword [ebp - 0x58]
sub edx, ebx
jne 0x100b1330
test byte [ebp - 0x54], 0x1e
je 0x100b13fd
or dword [ebp - 0x54], 0x20
inc byte [ebp - 0x4e]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], edx
test edx, edx
jle 0x100b13df
mov eax, ebx
cmp ebx, dword [ebp - 0x58]
jge 0x100b136d
cmp byte [ebp - 0x4d], 0
mov esi, dword [ebp - 0x64]
mov edi, dword [ebp - 0x5c]
je 0x100b135e
movsx ecx, byte [eax + esi]
jmp 0x100b1362
movzx ecx, word [edi + eax*2]
cmp ecx, 0x25
je 0x100b1374
inc eax
cmp eax, dword [ebp - 0x58]
jl 0x100b134c
or dword [ebp - 0x54], 0x10000
cmp byte [ebp - 0x4d], 0
lea eax, [edx + ebx]
je 0x100b1388
movsx cx, byte [eax + esi - 1]
movzx ecx, cx
jmp 0x100b138d
movzx ecx, word [edi + eax*2 - 2]
cmp cx, 0x2f
je 0x100b13f6
cmp cx, 0x2e
jne 0x100b13f0
cmp edx, 1
je 0x100b13f6
cmp byte [ebp - 0x4d], 0
je 0x100b13af
movsx cx, byte [eax + esi - 2]
movzx ecx, cx
jmp 0x100b13b4
movzx ecx, word [edi + eax*2 - 4]
cmp cx, 0x2f
je 0x100b13f6
cmp cx, 0x2e
jne 0x100b13fd
cmp edx, 2
je 0x100b13f6
cmp byte [ebp - 0x4d], 0
je 0x100b13d2
movsx eax, byte [eax + esi - 3]
jmp 0x100b13d7
movzx eax, word [edi + eax*2 - 6]
cmp eax, 0x2f
sete al
jmp 0x100b13f2
cmp dword [ebp + 0x10], 0
je 0x100b13f0
push dword [ebp + 0x10]
call sym.CoreFoundation.dll_CFURLHasDirectoryPath
pop ecx
jmp 0x100b13f2
xor al, al
test al, al
je 0x100b13fd
or dword [ebp - 0x54], 0x800
cmp byte [ebp - 0x5d], 0
je 0x100b1418
cmp byte [ebp - 0x4d], 0
mov eax, esi
jne 0x100b140d
mov eax, edi
push eax
push dword [ebp - 0x68]
call sym.CoreFoundation.dll_CFAllocatorDeallocate
pop ecx
pop ecx
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
movzx eax, byte [ebp - 0x4e]
push 0
shl eax, 3
push eax
push dword [ebp - 0x68]
call sym.CoreFoundation.dll_CFAllocatorAllocate
mov ecx, dword [ebp - 0x70]
xor esi, esi
add esp, 0xc
mov dword [ecx], eax
xor bl, bl
inc esi
lea eax, [ebp - 0x4c]
mov ecx, dword [ebp - 0x74]
test dword [ecx], esi
je 0x100b145f
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
mov edi, dword [eax]
movzx edx, bl
mov dword [ecx + edx*8], edi
mov edi, dword [eax + 4]
mov dword [ecx + edx*8 + 4], edi
inc bl
add esi, esi
add eax, 8
cmp esi, 0x200
jne 0x100b1442
lea esp, [ebp - 0x80]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10128342
leave
ret