Function at 0x34282bb2
Capabilities:
Enumerate pe sections
Parse credit card information

Disassembly:
mov eax, 0x1890
call fcn.34218264
mov eax, dword [0x342226fc]
xor eax, esp
mov dword [esp + 0x188c], eax
mov edx, dword [esp + 0x1894]
mov ecx, dword [esp + 0x189c]
mov eax, dword [esp + 0x1898]
push ebx
mov ebx, dword [esp + 0x18a8]
push ebp
mov ebp, dword [edx + 4]
push esi
mov esi, dword [esp + 0x18ac]
push edi
push 0x49
mov dword [esp + 0x20], edx
lea edx, [esp + 0x18]
push edx
xor edi, edi
push ecx
push eax
push ebp
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x2c], ebp
call fcn.34212b94
cmp eax, edi
mov dword [esp + 0x28], eax
jl 0x34283104
mov eax, dword [esp + 0x1c]
push 8
push 4
add eax, 0x10
push eax
mov eax, dword [esp + 0x20]
push eax
push ebp
mov dword [esp + 0x38], edi
call fcn.342018bf
mov esi, eax
cmp esi, edi
jl 0x3428fec9
mov ecx, dword [esp + 0x18b8]
test ecx, 0x1000
je 0x34282cae
mov eax, dword [esp + 0x1c]
add eax, 0x10
mov eax, dword [eax]
cmp eax, 0x30000
jbe 0x3428f973
cmp eax, 0x40000
je 0x3428311f
cmp eax, 0xc0000
jne 0x34282ca1
or ecx, 0x400
and ecx, 0xffffefff
mov dword [esp + 0x18b8], ecx
test cl, 3
jne 0x3428f9ac
test cl, 1
jne 0x3428312a
test cl, 2
jne 0x3428fa13
cmp dword [esp + 0x28], 0x4b8
je 0x3428fa1c
mov eax, ecx
and eax, 0x80
mov dword [esp + 0x28], eax
jne 0x3428fa2a
test cl, 0x10
jne 0x3428fa37
test ecx, 0x400
je 0x34282d01
or dword [esp + 0x10], 0x800
cmp ebx, edi
je 0x3428fa5d
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x34282d0e
sub eax, edx
sar eax, 1
lea ebp, [eax + eax + 0x2c]
push ebp
call sub.MSO.dll_Ordinal_815
mov edi, eax
test edi, edi
mov dword [esp + 0x24], edi
je 0x3428fa53
test ebx, ebx
mov dword [esp + 0x2c], edi
je 0x34282d65
mov eax, ebp
shr eax, 1
cmp eax, 1
jbe 0x34282d5c
movzx ecx, word [ebx]
test cx, cx
je 0x34282d58
cmp cx, 0x3b
jne 0x3428fa75
mov dword [esp + 0x24], edi
test eax, eax
jbe 0x34282d65
mov word [edi], 0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push 0x12
push 4
lea ecx, [esp + 0x40]
push ecx
push edx
push eax
call fcn.342018bf
mov ecx, edi
sub ecx, dword [esp + 0x2c]
shr ebp, 1
sar ecx, 1
mov edx, ebp
sub edx, ecx
push edx
push edi
push 0x34283144
mov esi, eax
call dword [sym.imp.MSO.dll_Ordinal_6877]
mov eax, edi
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x34282d9f
mov edx, dword [esp + 0x38]
sub eax, ecx
mov ecx, dword [esp + 0x24]
sar eax, 1
lea edi, [ecx + eax*2]
mov eax, edi
sub eax, dword [esp + 0x2c]
push 0xa
and edx, 0xfffeff
sar eax, 1
push edx
mov ecx, ebp
sub ecx, eax
push ecx
push edi
call dword [sym.imp.MSO.dll_Ordinal_1955]
mov eax, edi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x34282dde
sub eax, edx
sar eax, 1
test ebx, ebx
lea ecx, [edi + eax*2]
mov edi, dword [esp + 0x2c]
je 0x34282e26
mov eax, ecx
sub eax, edi
sar eax, 1
mov edx, ebp
sub edx, eax
movzx eax, word [ebx]
test ax, ax
je 0x34282e26
lea esp, [esp]
cmp edx, 1
jbe 0x34282e26
add ebx, 2
mov word [ecx], ax
movzx eax, word [ebx]
add ecx, 2
sub edx, 1
test ax, ax
jne 0x34282e0d
mov edx, ecx
sub edx, edi
sar edx, 1
sub ebp, edx
je 0x34282e35
mov word [ecx], 0
mov bl, byte [esp + 0x18b8]
test bl, 0x38
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edi
jne 0x3428fa8f
test bl, 0x40
jne 0x3428fa9e
mov eax, edi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x34282e5d
sub eax, edx
sar eax, 1
cmp eax, 7
jl 0x34282e82
jle 0x3428faad
cmp word [edi + 0xe], 0x3b
je 0x3428faad
lea edx, [esp + 0x20]
push edx
push 0x3421c7d8
push edi
call fcn.342854fa
mov esi, eax
test esi, esi
jl 0x3428fec9
mov eax, dword [esp + 0x1c]
add eax, 0x10
mov eax, dword [eax]
cmp eax, 0x10001
jbe 0x3428fad4
test byte [esp + 0x34], 4
jne 0x3428fec4
test bl, 0x20
jne 0x3428faf4
test bl, 0x40
jne 0x3428fb04
cmp eax, 0xc0000
jb 0x34282edf
cmp dword [esp + 0x28], 0
jne 0x3428fb14
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov ebx, dword [esp + 0x18]
mov dword [ebp + 0x920], eax
and eax, 4
mov dword [esp + 0x28], eax
push 0xd
neg eax
push 4
sbb eax, eax
lea edi, [ebp + 0x92c]
push edi
and eax, 0xfffffffd
push edx
add eax, 9
push ebx
mov dword [ebp + 0x924], ecx
mov dword [ebp + 0x928], eax
call fcn.342018bf
mov esi, eax
cmp esi, 0xfffffc15
je 0x3428fb53
test esi, esi
jl 0x3428fec9
cmp dword [edi], 0
jne 0x3428fb5e
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x3428fb6b
cmp word [ecx], 0
mov word [esp + 0x68], 0
jne 0x3428fb78
test byte [esp + 0x18b8], 0xf8
jne 0x34282f7a
cmp word [esp + 0x68], 0
jne 0x3428fc55
mov eax, dword [esp + 0x20]
test eax, eax
mov esi, dword [esp + 0x44]
lea esi, [esi + esi + 0x34]
je 0x34282fa1
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x34282f8f
sub eax, edx
sar eax, 1
lea esi, [esi + eax*2]
push esi
call sub.MSO.dll_Ordinal_815
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x48], ebx
je 0x3428fd25
mov word [ebx], 0
mov eax, dword [esp + 0x20]
test eax, eax
mov dword [esp + 0x3c], 1
je 0x34282fd7
mov ecx, esi
shr ecx, 1
push ecx
push ebx
push eax
call dword [sym.imp.MSO.dll_Ordinal_6877]
cmp word [esp + 0x68], 0
mov edi, dword [sym.imp.MSO.dll_Ordinal_6873]
jne 0x3428fd2f
cmp dword [esp + 0x44], 0
jne 0x3428fd4e
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
push ecx
push ebx
push edx
push eax
call fcn.34281c03
test eax, eax
jl 0x3428fdc8
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
push 8
push 4
lea edi, [ebp + 0x14]
push edi
push ecx
push edx
call fcn.342018bf
mov esi, eax
test esi, esi
jl 0x3428303e
mov eax, dword [edi]
cmp eax, dword [ebp + 0x10]
jb 0x3428fde4
cmp dword [esp + 0x28], 0
jne 0x3428fe0a
cmp dword [ebp + 0x10], 0xc0000
jb 0x3428fe39
test esi, esi
jl 0x3428fe62
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
push 0x12
push 4
lea ecx, [esp + 0x40]
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x38]
push ecx
push eax
push esi
mov dword [ebp + 0xc], eax
call fcn.342018bf
movzx edx, word [esp + 0x38]
push 0x10000001
lea ecx, [esp + 0x5c]
push ecx
push 0
push 0
mov dword [ebp + 0x1c], edx
mov edx, dword [esp + 0x24]
push 0
push edx
lea eax, [ebp + 0x28]
push esi
mov dword [esp + 0x80], eax
mov dword [esp + 0x74], 0x30
call fcn.34201de8
mov esi, eax
test esi, esi
jl 0x3428fe75
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x2c]
cmp eax, esi
je 0x342830dd
test eax, eax
je 0x342830d5
push eax
call sub.MSO.dll_Ordinal_652
mov dword [esp + 0x20], 0
test ebx, ebx
je 0x342830ee
cmp dword [esp + 0x3c], 0
je 0x342830ee
push ebx
call sub.MSO.dll_Ordinal_652
test esi, esi
je 0x34283102
add ebp, 0x9da
cmp esi, ebp
je 0x34283102
push esi
call sub.MSO.dll_Ordinal_652
xor eax, eax
mov ecx, dword [esp + 0x189c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.341f1b18
add esp, 0x1890
ret 0x18
or ecx, 0x80
jmp 0x34282ca1
mov dword [esp + 0x10], 1
jmp 0x34282cd7
test eax, eax
je 0x34282e94
jmp 0x34282e82
je 0x3428f9a4
sub eax, 0x10000
je 0x3428f99c
sub eax, 1
je 0x3428f994
sub eax, 0xffff
jne 0x34282ca1
or ecx, 0x20
jmp 0x34282ca1
or ecx, 0x10
jmp 0x34282ca1
or ecx, 0x18
jmp 0x34282ca1
or ecx, 0x40
jmp 0x34282ca1
mov eax, dword [esp + 0x1c]
push edi
push 0x40000
add eax, 0x10
cmp dword [eax], 0x20000
push edi
push edi
jb 0x3428f9d4
mov ecx, dword [esp + 0x24]
push 0x3421c8a8
push 0x3421c894
push ecx
jmp 0x3428f9e3
mov edx, dword [esp + 0x24]
push 0x3421c8c4
push 0x3421c868
push edx
push ebp
call fcn.34215332
mov esi, eax
cmp esi, edi
jl 0x3428fec9
test byte [esp + 0x18b8], 0xf8
jne 0x3428fa07
mov esi, 0xfffffc15
jmp 0x3428fec9
mov ecx, dword [esp + 0x18b8]
jmp 0x34282cb7
mov dword [esp + 0x10], edi
jmp 0x34282cd7
test cl, 0xf8
jne 0x3428312a
jmp 0x34282cd7
or dword [esp + 0x10], 0x400
jmp 0x34282d01
or dword [esp + 0x10], 4
test cl, 8
je 0x3428fa46
or dword [esp + 0x10], 2
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
jmp 0x34282d01
mov esi, 0xfffffc0d
jmp 0x3428fec9
mov edi, dword [esp + 0x1c]
add edi, 0x9da
mov dword [esp + 0x24], edi
mov ebp, 0x7f00
jmp 0x34282d35
mov word [edi], cx
sub eax, 1
add edi, 2
add ebx, 2
cmp eax, 1
jbe 0x34282d58
jmp 0x34282d46
lea eax, [esp + 0x20]
push eax
push 0x342779fc
jmp 0x34282e8c
lea ecx, [esp + 0x20]
push ecx
push 0x34277e48
jmp 0x34282e8c
push 7
push 0x342779fc
push edi
call fcn.34208f78
test eax, eax
je 0x34282e94
push 7
push 0x34277e48
push edi
call fcn.34208f78
jmp 0x34283137
cmp eax, 0x10000
mov dword [esp + 0x40], 4
jne 0x34282ecd
mov dword [esp + 0x40], 6
jmp 0x34282ecd
cmp eax, 0x30000
jb 0x34282ec4
jmp 0x3428fec4
cmp eax, 0x40000
jb 0x34282ecd
jmp 0x3428fec4
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
push 0x15
push 4
lea eax, [esp + 0x30]
push eax
push ecx
push edx
mov dword [esp + 0x3c], 0
call fcn.342018bf
mov esi, eax
test esi, esi
jl 0x3428fec9
cmp dword [esp + 0x28], 0
je 0x34282edf
mov esi, 0xfffff10a
jmp 0x3428fec9
mov dword [edi], 0
jmp 0x34282f47
or dword [esp + 0x10], 0x80
jmp 0x34282f47
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x48], ebx
jmp 0x34282ff4
lea esp, [esp]
cmp word [ecx], 0x3b
je 0x3428fb86
add ecx, 2
jmp 0x3428fbd1
add ecx, 2
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x3428fb8e
sub eax, esi
sar eax, 1
cmp eax, 3
jb 0x3428fbd1
movzx eax, word [ecx]
cmp ax, 0x50
je 0x3428fbb1
cmp ax, 0x70
jne 0x3428fbd1
movzx eax, word [ecx + 2]
cmp ax, 0x57
je 0x3428fbc1
cmp ax, 0x77
jne 0x3428fbd1
movzx eax, word [ecx + 4]
cmp ax, 0x44
je 0x3428fbdd
cmp ax, 0x64
je 0x3428fbdd
cmp word [ecx], 0
je 0x34282f64
jmp 0x3428fb7b
movzx eax, word [ecx + 6]
add ecx, 6
test ax, ax
lea esi, [esp + 0x68]
je 0x34282f64
mov edi, edi
cmp ax, 0x3d
je 0x3428fc0b
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
je 0x34282f64
jmp 0x3428fbf3
cmp word [ecx], 0
je 0x34282f64
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
je 0x3428fc4b
xor edx, edx
cmp ax, 0x3b
je 0x3428fc4b
mov edi, edx
and edi, 0xfffffffe
cmp edi, 0x28
jge 0x3428fcda
add ecx, 2
mov word [esi], ax
movzx eax, word [ecx]
add esi, 2
add edx, 2
test ax, ax
jne 0x3428fc23
mov word [esi], 0
jmp 0x34282f64
mov ecx, dword [esp + 0x14]
push 0x16
push 0x402
lea eax, [esp + 0x4a0]
push eax
xor edi, edi
push ecx
push ebx
mov word [esp + 0xa8], di
mov word [esp + 0x4ac], di
mov dword [esp + 0x60], edi
call fcn.342018bf
mov esi, eax
cmp esi, edi
jne 0x3428fcc5
mov eax, dword [esp + 0x14]
push 0x17
push 0x402
lea edx, [esp + 0x9c]
push edx
push eax
push ebx
call fcn.342018bf
mov esi, eax
cmp esi, edi
jne 0x3428fcc5
mov edx, dword [esp + 0x14]
push 0x18
push 4
lea ecx, [esp + 0x54]
push ecx
push edx
push ebx
call fcn.342018bf
mov esi, eax
cmp esi, edi
je 0x3428fce4
cmp esi, 0xfffffc15
jne 0x3428fec9
mov ebp, dword [esp + 0x1c]
jmp 0x34282f7a
mov esi, 0xfffff88f
jmp 0x3428fec9
lea eax, [esp + 0x498]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x3428fcee
sub eax, edx
sar eax, 1
mov edx, eax
lea eax, [esp + 0x94]
lea esi, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x3428fd09
sub eax, esi
sar eax, 1
lea eax, [eax + edx + 0x1f]
mov dword [esp + 0x44], eax
jmp 0x34282f7a
mov esi, 0xfffffc0d
jmp 0x3428fec9
mov ebp, esi
shr ebp, 1
push ebp
push ebx
push 0x3428ff60
call edi
push ebp
push ebx
lea edx, [esp + 0x70]
push edx
call edi
mov ebp, dword [esp + 0x1c]
jmp 0x34282fe9
shr esi, 1
push esi
push ebx
push 0x3428ff30
call edi
push esi
push ebx
lea eax, [esp + 0x4a0]
push eax
call edi
push esi
push ebx
push 0x3428ff3c
call edi
push esi
push ebx
lea ecx, [esp + 0x9c]
push ecx
call edi
push esi
push ebx
push 0x3428ff4c
call edi
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3428fd88
sub eax, edx
sar eax, 1
mov edx, eax
mov eax, ebx
lea edi, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3428fda0
mov ecx, dword [esp + 0x4c]
push 0xa
sub eax, edi
push ecx
sub esi, edx
sar eax, 1
push esi
lea edx, [ebx + eax*2]
push edx
call dword [sym.imp.MSO.dll_Ordinal_1955]
jmp 0x34282ff4
cmp eax, 0xfffffb4e
mov esi, 0xfffffb4f
jne 0x3428fddc
mov dword [ebp + 0x18], esi
jmp 0x3428fec9
mov dword [ebp + 0x18], eax
jmp 0x3428fec9
cmp eax, 0x40000
jae 0x3428303e
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
push 0
push ecx
push edx
mov esi, 0xfffffbd5
call fcn.34210a70
jmp 0x3428fec9
test byte [esp + 0x34], 4
jne 0x34283049
cmp dword [edi], 0xc0000
mov eax, 7
jb 0x3428fe27
mov eax, 0xf
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x34]
push eax
push 0x342c5608
push ecx
jmp 0x3428fe56
cmp dword [edi], 0xc0000
jb 0x34283056
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
push 8
push edx
push 0x342c5608
push eax
call fcn.3420f0f2
mov esi, eax
jmp 0x34283056
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x18]
push 0
push ecx
push edx
call fcn.34210a70
jmp 0x3428fec9
cmp esi, 0xfffffb45
je 0x342830bf
push 0x800
lea eax, [esp + 0x8a0]
push eax
push esi
push ebp
call fcn.342ce670
push 0
push 0x3421c8c4
lea ecx, [esp + 0x8a4]
push ecx
push esi
push ebp
call fcn.342ce7c7
test eax, eax
jge 0x3428feb5
mov dword [ebp + 0x93c], eax
mov dword [ebp + 0x934], 1
jmp 0x342830bf
mov esi, 0xfffffbd5
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
push 0
push edx
push eax
call fcn.34210a70
mov eax, dword [esp + 0x20]
cmp eax, dword [esp + 0x24]
je 0x3428fef6
test eax, eax
je 0x3428feee
push eax
call sub.MSO.dll_Ordinal_652
mov dword [esp + 0x20], 0
mov eax, dword [esp + 0x48]
test eax, eax
je 0x3428ff0b
cmp dword [esp + 0x3c], 0
je 0x3428ff0b
push eax
call sub.MSO.dll_Ordinal_652
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x3428ff27
mov ecx, dword [esp + 0x1c]
add ecx, 0x9da
cmp eax, ecx
je 0x3428ff27
push eax
call sub.MSO.dll_Ordinal_652
mov eax, esi
jmp 0x34283104