Function at 0x1400020d0
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2040
call fcn.140030eb0
sub rsp, rax
xor r15d, r15d
or eax, 0xffffffff
mov r12, r9
mov esi, r15d
mov r13, r8
mov r14d, edx
mov word [rsp + 0x38], ax
cmp qword [r9 + 0x10], rsi
jbe 0x14000214e
mov rbx, r15
nop word [rax + rax]
mov rax, qword [r12 + 8]
mov rdi, qword [rax + rbx*8]
test rdi, rdi
je 0x140002144
movzx eax, word [rdi + 8]
cmp ax, 0x3f
jle 0x140002233
mov rcx, rdi
call fcn.140018614
inc rbx
cmp rbx, qword [r12 + 0x10]
jb 0x140002120
mov qword [r12 + 0x10], r15
cmp word [r13], si
je 0x140002358
lea rdx, [0x140000000]
nop word [rax + rax]
mov eax, esi
movzx ecx, word [r13 + rax*2]
cmp cx, 0x20
je 0x140002272
cmp cx, 9
je 0x140002272
mov eax, esi
movzx ebx, word [r13 + rax*2]
test bx, bx
je 0x140002343
mov dword [rsp + 0x2080], esi
mov word [rsp + 0x3a], si
mov ebp, r15d
mov rdi, r15
cmp bx, 0x30
jae 0x140002279
cmp bx, 0x2e
je 0x140002283
cmp bx, 0x41
jae 0x1400023f7
cmp bx, 0x61
jae 0x140002646
cmp bx, 0x5f
je 0x140002401
movzx eax, bx
cmp eax, 0x24
je 0x1400023c1
cmp eax, 0x3d
je 0x14000244b
cmp eax, 0x28
je 0x14000246e
cmp eax, 0x29
je 0x14000239e
cmp eax, 0x22
je case.0x140002231.28
sub eax, 0x1a
cmp eax, 0x44
ja case.0x140002231.40
cdqe
movzx eax, byte [rdx + rax + 0x26e4]
mov ecx, dword [rdx + rax*4 + 0x26a8]
add rcx, rdx
jmp rcx
cmp ax, 0x30
jl 0x14000213c
mov rbp, qword [rdi]
test rbp, rbp
je 0x14000213c
mov rax, qword [rbp + 0x18]
dec dword [rax]
mov rax, qword [rbp + 0x18]
cmp dword [rax], esi
je 0x140032ea0
mov rcx, rbp
call fcn.140018614
jmp 0x14000213c
mov edx, 0x40
jmp 0x1400023a3
inc esi
jmp 0x140002170
cmp bx, 0x39
ja 0x1400021b9
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400bdb30]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.1400027d0
cmp al, 1
jne 0x140032eb8
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
mov esi, dword [rsp + 0x2080]
jmp 0x14000232e
cmp cx, 0x30
jae 0x140002587
cmp cx, 0x5f
je 0x1400023eb
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x14003305f
movzx eax, word [rsp + 0x38]
cmp ax, 0x30
jge 0x1400025ba
mov eax, gethostbyname
mov qword [rsp + 0x30], r15
mov word [rsp + 0x38], ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.140001f50
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
lea rdx, [0x140000000]
mov eax, esi
cmp word [r13 + rax*2], r15w
jne 0x140002170
mov ax, word [rsp + 0x38]
cmp ax, 0x30
jl 0x140002358
cmp ax, 0x3f
jle 0x140002596
mov r11d, 0x7f
lea rdx, [rsp + 0x30]
mov rcx, r12
mov dword [rsp + 0x30], r15d
mov word [rsp + 0x3a], si
mov word [rsp + 0x38], r11w
call fcn.140001fb0
xor eax, eax
lea r11, [rsp + 0x2040]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov edx, 0x48
lea rcx, [rsp + 0x30]
call fcn.140002730
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
inc esi
jmp 0x14000232e
inc esi
mov eax, esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x1400023d7
cmp cx, 0x41
jae 0x1400023eb
cmp cx, 0x61
jb 0x1400022c7
cmp cx, 0x7a
ja 0x1400022c7
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x1400023c1
cmp bx, 0x5a
ja 0x1400021cd
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x2080]
lea rcx, [0x1400bdb30]
mov rdx, r13
mov qword [rsp + 0x20], rax
call fcn.1400029b0
cmp dword [rsp + 0x30], 0xffffffff
je 0x14003308c
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
mov esi, dword [rsp + 0x2080]
jmp 0x14000232e
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x140033030
mov edx, 0x41
call fcn.140002730
jmp 0x140002321
mov edx, 0x47
jmp 0x1400023a3
lea rax, [rsp + 0x40]
lea r9, [rsp + 0x2080]
lea rcx, [0x1400bdb30]
mov r8, r13
mov edx, r14d
mov qword [rsp + 0x20], rax
call fcn.140001e10
lea rcx, [rsp + 0x30]
test eax, eax
jne 0x1400330da
lea edx, [rax + 0x36]
call fcn.140002730
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.140001f50
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
mov esi, dword [rsp + 0x2080]
jmp 0x14000232e
lea rcx, [rsp + 0x30]
mov edx, 0x4d
call fcn.140002730
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x56
inc esi
call fcn.140002730
jmp 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x49
call fcn.140002730
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x52
inc esi
call fcn.140002730
jmp 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x4c
call fcn.140002730
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x140002321
jmp 0x140032fb7
lea rcx, [rsp + 0x30]
mov edx, 0x4b
call fcn.140002730
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x140002321
jmp 0x140032f96
cmp cx, 0x39
jbe 0x1400023eb
jmp 0x1400022d1
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1400025b0
mov rcx, rbx
call fcn.1400032d0
mov rcx, rbx
call fcn.140018614
mov qword [rsp + 0x30], r15
jmp 0x140002358
cmp ax, 0x3f
jg 0x140002303
jmp 0x140033041
mov edx, 0x4e
jmp 0x1400023a3
mov edx, 0x4f
jmp 0x1400023a3
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x5a
ja 0x1400025f1
cmp cx, 0x41
jae 0x1400025fd
cmp cx, 0x61
jb 0x140002609
cmp cx, 0x7a
ja 0x140002609
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp case.0x140002231.36
cmp cx, 0x30
jae 0x140032f52
cmp cx, 0x5f
je 0x1400025fd
lea rcx, [rsp + 0x40]
mov word [rsp + rdi*2 + 0x40], r15w
call qword [sym.imp.USER32.dll_CharUpperW]
test ebp, ebp
je 0x14003305f
lea rcx, [rsp + 0x30]
mov edx, gethostbyname
call fcn.140002730
jmp 0x140002312
cmp bx, 0x7a
jbe 0x140002401
jmp 0x1400021d7
inc esi
movzx ecx, word [r13 + rsi*2]
sub ecx, 0x3d
je 0x140032fdf
cmp ecx, 1
lea rcx, [rsp + 0x30]
je 0x140032fce
mov edx, 0x43
call fcn.140002730
jmp 0x140002321
inc esi
lea rcx, [rsp + 0x30]
cmp word [r13 + rsi*2], 0x3d
je 0x140032ff5
mov edx, 0x42
call fcn.140002730
jmp 0x140002321
mov rcx, qword [rbp]
call fcn.140018614
mov rcx, qword [rbp + 0x18]
call fcn.140018614
nop
jmp 0x14000225b
mov esi, dword [rsp + 0x2080]
cmp bx, 0x2e
je 0x140032ed5
lea rdx, [0x140000000]
jmp 0x1400021c3
inc esi
movzx ecx, word [r13 + rsi*2]
cmp cx, 0x41
jb 0x140032ef1
cmp cx, 0x5a
jbe 0x140032f46
cmp cx, 0x61
jb 0x140032f05
cmp cx, 0x7a
jbe 0x140032f46
cmp cx, 0x30
jb 0x140032f19
cmp cx, 0x39
jbe 0x140032f46
cmp cx, 0x5f
je 0x140032f46
mov word [rsp + rdi*2 + 0x40], r15w
test ebp, ebp
je 0x14003305f
lea rcx, [rsp + 0x30]
mov edx, gethostname
call fcn.140002730
nop
jmp 0x140002312
mov word [rsp + rdi*2 + 0x40], cx
inc ebp
inc rdi
jmp 0x140032ed5
cmp cx, 0x39
jbe 0x1400025fd
jmp 0x140002613
lea rcx, [rsp + 0x30]
mov edx, 0x4a
call fcn.140002730
inc esi
cmp word [r13 + rsi*2], 0x3d
jne 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x53
inc esi
call fcn.140002730
nop
jmp 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x54
inc esi
call fcn.140002730
nop
jmp 0x140002321
mov edx, 0x51
jmp 0x1400023a3
lea rcx, [rsp + 0x30]
mov edx, 0x55
inc esi
call fcn.140002730
nop
jmp 0x140002321
mov edx, 0x44
call fcn.140002730
inc esi
jmp 0x140002321
lea rcx, [rsp + 0x30]
mov edx, 0x46
call fcn.140002730
inc esi
jmp 0x140002321
mov edx, 0x45
call fcn.140002730
inc esi
jmp 0x140002321
test esi, esi
jne case.0x140002231.40
cmp word [r13 + 2], di
jne case.0x140002231.40
cmp r14d, dword [0x1400bdb48]
jl case.0x140002231.40
mov esi, 1
jmp 0x140002335
mov edx, 0x50
call fcn.140002730
inc esi
jmp 0x140002321
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140002303
mov edx, 1
call fcn.140053930
nop
jmp 0x140002303
lea r9d, [rsi - 1]
lea rcx, [0x1400bdb30]
mov r8d, RegisterTypeLib
mov edx, r14d
call fcn.140043af0
lea rcx, [rsp + 0x30]
call fcn.140058d00
mov eax, 1
jmp 0x14000237d
mov r9d, dword [rsp + 0x2080]
lea rcx, [0x1400bdb30]
mov r8d, 0x89
mov edx, r14d
call fcn.140043af0
lea rcx, [rsp + 0x30]
call fcn.140058d00
mov eax, 1
jmp 0x14000237d
lea rcx, [0x1400bdb30]
mov r9d, esi
mov r8d, WSAGetLastError
mov edx, r14d
call fcn.140043af0
lea rcx, [rsp + 0x30]
mov edx, 0x7f
call fcn.140002730
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140001fb0
lea rcx, [rsp + 0x30]
call fcn.140058d00
mov eax, 1
jmp 0x14000237d