Function at 0x49efd0
Capabilities:
Get geographical location
Validate payment card number using luhn algorithm

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov eax, dword [0x5a6008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
lea eax, [ebp - 0x88]
push edi
mov edi, ecx
mov dword [ebp - 0x3c], 0
push 2
xor ebx, ebx
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x50], ebx
mov dword [edi + 0x8d8], eax
lea eax, [ebp - 0x2c]
push eax
push 0x21
push 0x400
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
call esi
test eax, eax
je 0x49f047
movsx eax, byte [ebp - 0x2c]
sub eax, 0x30
je 0x49f047
sub eax, 1
je 0x49f03e
sub eax, 1
jne 0x49f047
mov dword [ebp - 0x44], 2
jmp 0x49f04a
mov dword [ebp - 0x44], 1
jmp 0x49f04a
mov dword [ebp - 0x44], ebx
push 2
lea eax, [ebp - 0x2c]
push eax
push 0x1d
push 0x400
call esi
lea esi, [edi + 0xc8]
mov dword [ebp - 0x54], 1
push 4
mov edx, esi
mov ecx, edi
call fcn.004a00a0
add esp, 4
test eax, eax
je 0x49f695
mov dword [ebp - 0x64], 0x64
push 4
push 0x5a6ad8
push esi
call fcn.0051ddd0
add esp, 0xc
test eax, eax
jne 0x49f6ab
mov ecx, edi
call fcn.0049bb10
test eax, eax
jne 0x49f69a
movzx edx, word [edi + 0x10954]
mov ecx, edi
push 2
call fcn.004a0ea0
add esp, 4
test eax, eax
je 0x49f0cc
mov ebx, eax
cmp eax, 1
jg 0x49f69a
mov eax, dword [edi + 0x10918]
mov dword [ebp - 0x2c], ebx
test eax, eax
je 0x49f0ec
push eax
call fcn.00515679
add esp, 4
mov dword [edi + 0x10918], 0
movzx ebx, word [edi + 0x10956]
test ebx, ebx
je 0x49f168
push ebx
call fcn.00517363
add esp, 4
mov dword [edi + 0x10918], eax
test eax, eax
jne 0x49f153
push 0x401
push ecx
push ebx
lea esi, [edi + 0x8dc]
push str.warning:__extra_field_too_long___d_.__Ignoring..._n
push esi
call fcn.0047daf0
add esp, 0x10
push eax
mov eax, dword [edi + 0x10b54]
push esi
push edi
call eax
mov edx, dword [edi + 0x10910]
mov ecx, edi
sub edx, dword [edi + 0x10914]
sub edx, dword [edi + 0x108e4]
add edx, dword [edi + 0x108e8]
add edx, ebx
call fcn.004a02f0
jmp 0x49f168
push ebx
mov edx, eax
mov ecx, edi
call fcn.004a00a0
add esp, 4
test eax, eax
je 0x49f695
cmp dword [edi + 0x74], 0
jne 0x49f1a5
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x49f1f0
xor ecx, ecx
xor esi, esi
mov dword [ebp - 0x3c], ecx
test eax, eax
je 0x49f1a8
mov eax, dword [edi + 0xc0]
lea edx, [edi + 0x109f0]
push dword [edi + 0x18]
mov ecx, dword [eax + esi*4]
call fcn.0049ec50
add esp, 4
cmp eax, 1
je 0x49f1f0
inc esi
cmp esi, dword [edi + 0x6c]
jb 0x49f180
mov ecx, dword [ebp - 0x3c]
cmp dword [edi + 0x74], 0
jne 0x49f23c
test ecx, ecx
jne 0x49f23c
movzx eax, word [edi + 0x10958]
test ax, ax
je 0x49f673
mov edx, dword [edi + 0x10910]
mov ecx, edi
sub edx, dword [edi + 0x10914]
sub edx, dword [edi + 0x108e4]
add edx, dword [edi + 0x108e8]
add edx, eax
call fcn.004a02f0
jmp 0x49f673
xor esi, esi
mov ecx, 1
mov dword [ebp - 0x3c], ecx
cmp dword [edi + 0x70], esi
jbe 0x49f1a8
nop
mov eax, dword [edi + 0xc4]
lea edx, [edi + 0x109f0]
push dword [edi + 0x18]
mov ecx, dword [eax + esi*4]
call fcn.0049ec50
add esp, 4
cmp eax, 1
je 0x49f232
inc esi
cmp esi, dword [edi + 0x70]
jb 0x49f200
mov ecx, 1
mov dword [ebp - 0x3c], ecx
jmp 0x49f1a8
xor ecx, ecx
mov dword [ebp - 0x3c], ecx
jmp 0x49f1a8
mov esi, dword [edi + 0x10918]
test esi, esi
je 0x49f434
movzx edx, word [edi + 0x10956]
xor ecx, ecx
mov eax, dword [edi + 0x10944]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], edx
test edx, edx
je 0x49f434
cmp edx, 4
jb 0x49f3fe
mov edi, ecx
movzx ebx, byte [esi + 3]
movzx eax, byte [esi + 2]
shl ebx, 8
or ebx, eax
lea eax, [edx - 4]
cmp ebx, eax
ja 0x49f3fb
movzx edx, byte [esi + 1]
movzx eax, byte [esi]
shl edx, 8
or edx, eax
cmp edx, 0x5855
ja 0x49f3c7
je 0x49f324
cmp edx, 0xd
je 0x49f324
cmp edx, 0x5455
jne 0x49f3de
mov edi, 1
and ecx, 0xffffff00
cmp ebx, edi
jb 0x49f3de
movzx eax, byte [esi + 4]
or ecx, eax
test cl, 1
je 0x49f3de
cmp ebx, 5
jb 0x49f31c
movzx edx, byte [esi + 8]
movzx eax, byte [esi + 7]
shl edx, 8
add edx, eax
movzx eax, byte [esi + 6]
shl edx, 8
add edx, eax
movzx eax, byte [esi + 5]
shl edx, 8
add edx, eax
jns 0x49f30e
cmp dword [ebp - 0x30], 0x74320000
jb 0x49f3d8
mov eax, edx
cdq
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jmp 0x49f3de
and ecx, 0xfffffffe
jmp 0x49f3de
cmp ebx, 8
jb 0x49f3de
test edi, edi
jne 0x49f3de
movzx edx, byte [esi + 0xb]
or ecx, 3
movzx eax, byte [esi + 0xa]
shl edx, 8
add edx, eax
mov dword [ebp - 0x40], ecx
movzx eax, byte [esi + 9]
shl edx, 8
add edx, eax
movzx eax, byte [esi + 8]
shl edx, 8
add edx, eax
jns 0x49f37c
cmp dword [ebp - 0x30], 0x74320000
sbb eax, eax
and ecx, 0xffffff00
inc eax
cmp dword [ebp - 0x30], 0x74320000
mov dword [ebp - 0x38], eax
cmovae ecx, dword [ebp - 0x40]
jmp 0x49f383
mov dword [ebp - 0x38], 0
mov eax, edx
cdq
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], eax
movzx edx, byte [esi + 7]
movzx eax, byte [esi + 6]
shl edx, 8
add edx, eax
movzx eax, byte [esi + 5]
shl edx, 8
add edx, eax
movzx eax, byte [esi + 4]
shl edx, 8
add edx, eax
jns 0x49f3bc
cmp dword [ebp - 0x38], 0
jne 0x49f3bc
test cl, cl
je 0x49f3bc
and ecx, 0xfffffffd
jmp 0x49f3de
mov eax, edx
cdq
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
jmp 0x49f3de
cmp edx, 0x7855
jne 0x49f3de
test edi, edi
jne 0x49f3de
mov edi, 1
and ecx, 0xffffff00
mov edx, dword [ebp - 0x34]
mov eax, 0xfffffffc
sub eax, ebx
add esi, 4
add edx, eax
add esi, ebx
mov dword [ebp - 0x34], edx
cmp edx, 4
jae 0x49f272
mov edi, dword [ebp - 0x60]
test cl, 1
je 0x49f434
lea eax, [ebp - 0x20]
push eax
call fcn.005299ba
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x49f434
mov eax, dword [ecx + 0x14]
mov ebx, dword [ecx + 0x10]
cdq
inc ebx
idiv dword [ebp - 0x64]
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x5c], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x58], eax
jmp 0x49f475
mov ecx, dword [edi + 0x10944]
xor edx, edx
mov eax, ecx
mov ebx, 0x64
shr eax, 0x19
mov esi, ecx
add eax, 0x50
shr esi, 0x10
div ebx
mov ebx, ecx
and esi, 0x1f
mov dword [ebp - 0x38], edx
mov edx, ecx
shr edx, 0xb
shr ebx, 0x15
and edx, 0x1f
shr ecx, 5
and ebx, 0xf
and ecx, 0x3f
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x30], esi
sub eax, 1
je 0x49f48f
sub eax, 1
jne 0x49f494
mov dword [ebp - 0x30], ebx
mov ebx, edx
mov dword [ebp - 0x38], esi
jmp 0x49f494
mov dword [ebp - 0x30], ebx
mov ebx, esi
mov eax, dword [edi + 0x1094c]
movzx ecx, word [edi + 0x10940]
test cl, 1
mov dword [ebp - 0x68], ecx
mov ecx, dword [edi + 0x10950]
lea edx, [eax - 0xc]
cmove edx, eax
mov dword [ebp - 0x40], edx
test ecx, ecx
jne 0x49f53c
xor eax, eax
lea ecx, [eax + 5]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x34], eax
movzx eax, word [edi + 0x10942]
mov esi, eax
cmp eax, 0xd
jb 0x49f4ea
mov esi, 0xd
lea ecx, [esi*8 + str.Stored]
lea edx, [ebp - 0xc]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x49f4f6
cmp esi, 8
je 0x49f5b3
cmp esi, 9
je 0x49f5b3
cmp esi, 0xd
jb 0x49f5c4
movzx eax, word [edi + 0x10942]
push eax
lea eax, [ebp - 8]
push str._03u
push eax
call fcn.0047daf0
add esp, 0xc
jmp 0x49f5c4
cmp ecx, 0x1e8480
jbe 0x49f573
mov eax, 0x10624dd3
mul ecx
mov eax, edx
xor edx, edx
shr eax, 6
mov esi, eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x40]
shr esi, 1
cmp ecx, eax
jb 0x49f56a
sub esi, eax
lea eax, [ecx + esi]
div dword [ebp - 0x34]
jmp 0x49f59f
sub eax, ecx
add eax, esi
div dword [ebp - 0x34]
jmp 0x49f59d
mov esi, ecx
shr esi, 1
cmp ecx, edx
jb 0x49f58d
mov eax, ecx
sub eax, edx
xor edx, edx
imul eax, eax, 0x3e8
add eax, esi
div ecx
jmp 0x49f59f
mov eax, edx
xor edx, edx
sub eax, ecx
imul eax, eax, 0x3e8
add eax, esi
div ecx
neg eax
test eax, eax
jns 0x49f4c0
mov ecx, 5
sub ecx, eax
jmp 0x49f4c3
mov eax, dword [ebp - 0x68]
shr eax, 1
and eax, 3
mov al, byte [eax + 0x5840dc]
mov byte [ebp - 7], al
mov al, byte [edi + 0x10940]
lea edx, [edi + 0x8dc]
mov esi, dword [edi + 0x10b68]
lea ecx, [edi + 0x109f0]
and al, 1
neg al
sbb al, al
and al, 0x25
add al, 0x20
movzx eax, al
push eax
push dword [edi + 0x10948]
lea eax, [ebp - 0xc]
push eax
call fcn.004a7bd0
push eax
mov eax, dword [edi + 0x8d8]
mov eax, dword [eax + 0x18]
and al, 0x10
neg al
sbb al, al
and al, 0x3e
add al, 0x20
movzx eax, al
push eax
push dword [ebp - 0x58]
mov eax, dword [esi + 0x10]
push dword [ebp - 0x5c]
push dword [ebp - 0x38]
push dword [ebp - 0x30]
push ebx
push dword [ebp - 0x34]
mov ebx, dword [ebp - 0x40]
push ebx
push dword [edi + 0x10950]
call eax
movzx edx, word [edi + 0x10958]
xor eax, eax
cmp dword [edi + 0x38], eax
mov ecx, 5
cmove eax, ecx
mov ecx, edi
push eax
call fcn.004a0ea0
mov ecx, dword [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x2c], ecx
test eax, eax
je 0x49f661
mov dword [ebp - 0x2c], eax
cmp eax, 1
jg 0x49f69a
mov eax, dword [ebp - 0x4c]
add eax, dword [edi + 0x10950]
add dword [ebp - 0x48], ebx
inc dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x2c]
lea esi, [edi + 0xc8]
inc dword [ebp - 0x54]
mov edx, esi
push 4
mov ecx, edi
call fcn.004a00a0
add esp, 4
test eax, eax
jne 0x49f083
mov eax, 0x33
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00511339
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x54]
lea eax, [ecx - 1]
cmp ax, word [edi + 0x1096e]
jne 0x49f77f
cmp dword [edi + 0x38], 2
jge 0x49f71d
mov edx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
call fcn.0049fd70
test eax, eax
jns 0x49f6dc
mov ecx, 5
sub ecx, eax
jmp 0x49f6df
lea ecx, [eax + 5]
mov eax, 0x66666667
imul ecx
mov eax, dword [edi + 0x10b68]
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x18], edx
mov eax, dword [edi + 0x10b68]
mov edx, dword [ebp - 0x4c]
mov dword [eax + 0x1c], edx
mov eax, dword [edi + 0x10b68]
mov dword [eax + 0x20], ecx
mov eax, dword [edi + 0x10b68]
mov ecx, dword [ebp - 0x50]
mov dword [eax + 0x24], ecx
push 4
push 0x5a6ad4
push esi
call fcn.0051ddd0
add esp, 0xc
test eax, eax
je 0x49f75b
push 0x401
push ecx
lea esi, [edi + 0x8dc]
push str._nnote:__didnt_find_end_of_central_dir_signature_at_end_of_central_dir._n
push esi
call fcn.0047daf0
add esp, 0xc
push eax
mov eax, dword [edi + 0x10b54]
push esi
push edi
call eax
mov ebx, 1
cmp dword [ebp - 0x50], 0
jne 0x49f76c
cmp ebx, 1
mov ecx, 0xb
cmovle ebx, ecx
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00511339
mov esp, ebp
pop ebp
ret
push 0x401
push ecx
push ecx
lea esi, [edi + 0x8dc]
push str.error:__expected_central_file_header_signature_not_found__file__lu_._n
push esi
call fcn.0047daf0
add esp, 0x10
push eax
mov eax, dword [edi + 0x10b54]
push esi
push edi
call eax
push 0x401
push ecx
push 0x583708
push esi
call fcn.0047daf0
add esp, 0xc
push eax
mov eax, dword [edi + 0x10b54]
push esi
push edi
call eax
mov ecx, dword [ebp - 4]
mov eax, 3
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00511339
mov esp, ebp
pop ebp
ret