Function at 0x409a70
Capabilities:
Access peb ldr_data
Get kernel32 base address
Parse credit card information

Disassembly:
push 0xffffffffffffffff
push 0x532c60
mov eax, dword fs:[0]
push eax
sub esp, 0x44
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5847b0]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
mov eax, dword [ecx + 8]
xor edx, edx
mov dword [ebp + 4], eax
mov dword [ebp + 0xc], edx
mov eax, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [esp + 0x2c], eax
lea eax, [esi + eax*2]
movzx esi, word [eax]
xor edi, edi
or ebx, 0xffffffff
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
test si, si
jne 0x409afd
mov dword [ebp + 8], edx
mov dword [ebp], edx
lea eax, [edx - 2]
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
movzx ebp, si
test ebp, ebp
je 0x409e76
test edi, edi
je 0x409bd2
push ebp
push str.__t_n_r__
call fcn.0050bd8c
add esp, 8
test eax, eax
je 0x409c4f
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
sub esi, dword [eax + 0xc]
sar esi, 1
sub esi, edi
test ebx, ebx
jne 0x409b44
lea ecx, [esi + edi - 1]
mov dword [eax], edi
mov dword [eax + 4], ecx
jmp 0x409bc0
mov edi, dword [esp + 0x6c]
mov eax, dword [edi + 0x10]
add edi, 0x10
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
sub eax, esi
or eax, ecx
jge 0x409b6a
push esi
mov ecx, edi
call fcn.00405860
mov ecx, dword [esp + 0x68]
mov eax, dword [edi]
lea edx, [esi + esi]
push edx
mov edx, dword [ecx + 0xc]
mov ecx, dword [esp + 0x28]
lea edx, [edx + ecx*2]
push edx
push eax
call fcn.0050f350
add esp, 0xc
mov eax, esi
cmp esi, 0xffffffff
jne 0x409ba2
mov eax, dword [edi]
mov ecx, dword [eax - 8]
test eax, eax
je 0x409baa
push ecx
push eax
call fcn.0050aeb8
add esp, 8
test eax, eax
jl 0x40a37f
mov ecx, dword [edi]
cmp eax, dword [ecx - 8]
jg 0x40a37f
mov dword [ecx - 0xc], eax
mov ecx, dword [edi]
xor edx, edx
mov word [ecx + eax*2], dx
mov edx, dword [esp + 0x14]
xor edi, edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], edi
cmp dword [esp + 0x18], 0
je 0x409e14
cmp ebp, 0x3e
jne 0x409cba
test dl, 0xc0
jne 0x409cd1
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x20]
sub ebp, dword [eax + 0xc]
mov eax, dword [esp + 0x1c]
sar ebp, 1
mov dword [esp + 0x2c], ebp
cmp eax, 1
jne 0x409c63
mov dword [esp + 0x18], 0
cmp ebx, eax
jne 0x409cac
cmp dword [esp + 0x28], 0x2f
jne 0x409cac
mov eax, dword [esp + 0x30]
test eax, eax
je 0x409c42
push eax
push str.__t_n_r_
call fcn.0050bd8c
mov edx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x409cac
mov eax, dword [esp + 0x6c]
or dword [eax + 0xc], 0x10000
jmp 0x409cac
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
add eax, 2
mov dword [esp + 0x20], eax
jmp 0x409e67
cmp ebp, eax
jle 0x409e5e
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x20]
lea eax, [ecx + ecx]
sub esi, eax
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0x18]
lea eax, [esi + 2]
sub ecx, eax
sub dword [esp + 0x34], 1
je 0x409ca4
mov dx, word [eax]
mov si, word [ecx + eax]
add eax, 2
cmp dx, si
mov edx, dword [esp + 0x14]
je 0x409c85
jmp 0x409e5e
mov dword [esp + 0x18], 0
test dl, 0x20
je 0x40a279
jmp 0x409e5e
cmp ebp, 0x3c
jne 0x409cd1
cmp ebx, 2
je 0x40a389
cmp ebx, 0xffffffff
je 0x40a389
test bl, 1
je 0x409de7
test dl, 0xc0
je 0x409d31
cmp ebp, 0x22
jne 0x409d07
test dl, dl
jns 0x409dd9
mov eax, dword [esp + 0x28]
xor edx, 0x80
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
cmp ebp, 0x27
jne 0x409dd9
test dl, 0x40
je 0x409dd9
mov eax, dword [esp + 0x28]
xor edx, 0x40
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
cmp ebp, 0x22
jne 0x409d5d
test edx, 0x100
je 0x409dd9
mov eax, dword [esp + 0x28]
xor edx, 0x180
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
cmp ebp, 0x27
jne 0x409d85
test edx, 0x100
je 0x409dd9
mov eax, dword [esp + 0x28]
xor edx, 0x140
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
cmp ebp, 0x3d
jne 0x409db3
cmp dword [esp + 0x28], ebp
je 0x409db3
test edx, 0x100
jne 0x409dbb
mov eax, dword [esp + 0x28]
xor edx, 0x100
mov dword [esp + 0x14], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
test edx, 0x100
je 0x409dd9
push ebp
push str.__t_n_r
call fcn.0050bd8c
add esp, 8
test eax, eax
jne 0x409dd5
xor dword [esp + 0x14], 0x100
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], ebp
jmp 0x409e5e
test bl, 0x40
je 0x409e5e
cmp ebp, 0x22
jne 0x409e02
test dl, 0x40
jne 0x409e5e
xor edx, 0x80
mov dword [esp + 0x14], edx
jmp 0x409e5e
cmp ebp, 0x27
jne 0x409e5e
test dl, dl
js 0x409e5e
xor edx, 0x40
mov dword [esp + 0x14], edx
jmp 0x409e5e
test edx, edx
je 0x40a2a5
test dl, 0x10
je 0x409eba
cmp ebp, 0x3c
je 0x40a39c
push ebp
push str.__t_n_r
call fcn.0050bd8c
add esp, 8
test eax, eax
jne 0x409e5a
xor dword [esp + 0x14], 0x10
mov ebx, 2
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], 0x563644
mov edx, dword [esp + 0x14]
add dword [esp + 0x20], 2
mov eax, dword [esp + 0x20]
movzx ebp, word [eax]
test ebp, ebp
jne 0x409b08
mov ecx, dword [esp + 0x68]
sub eax, dword [ecx + 0xc]
sar eax, 1
dec eax
mov ebp, eax
cmp ebx, 4
je 0x40a279
cmp ebx, 2
je 0x40a279
mov eax, 0x563544
test dl, 0x20
jne 0x40a30e
cmp ebx, 0x40
je 0x40a30e
cmp ebx, 1
jne 0x40a2df
mov eax, str.Element_tag
jmp 0x40a313
test dl, 1
je 0x409ff2
mov eax, 1
xor edx, eax
mov dword [esp + 0x14], edx
cmp ebp, 0x60
ja 0x409fce
cmp ebp, 0x40
jbe 0x409ee5
cmp ebp, 0x5b
jb 0x409fce
cmp ebp, 0x5f
je 0x409fce
cmp ebp, 0x3a
je 0x409fce
cmp ebp, 0x2f
jne 0x409f0c
mov dword [esp + 0x18], 0x563648
mov dword [esp + 0x1c], eax
xor ebx, ebx
jmp 0x409f35
cmp ebp, 0x21
jne 0x409f1d
or edx, 2
mov dword [esp + 0x14], edx
jmp 0x409e5e
cmp ebp, 0x3f
jne 0x409f4d
mov dword [esp + 0x18], 0x56364c
mov dword [esp + 0x1c], 2
lea ebx, [ebp - 0x2f]
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub edi, dword [ecx + 0xc]
sar edi, 1
add edi, eax
mov dword [esp + 0x24], edi
jmp 0x409e5e
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x563648
mov dword [esp + 0x20], eax
call fcn.00405a20
push str.tag_name_character
mov ecx, edi
call fcn.0040aa80
mov edx, dword [esp + 0x2c]
push edx
lea esi, [esp + 0x40]
call fcn.00408c10
push eax
lea eax, [esp + 0x40]
push str._at_offset
push eax
mov dword [esp + 0x70], 2
call fcn.0040a530
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 3
call fcn.004053a0
lea ecx, [esp + 0x38]
call fcn.00402490
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00402490
mov edi, dword [esp + 0x24]
jmp 0x409e5a
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub edi, dword [ecx + 0xc]
mov dword [esp + 0x18], 0x563648
sar edi, 1
mov dword [esp + 0x1c], eax
mov ebx, eax
mov dword [esp + 0x24], edi
jmp 0x409e5e
test dl, 2
je 0x40a0e0
xor edx, 2
mov dword [esp + 0x14], edx
cmp ebp, 0x2d
jne 0x40a013
or edx, 4
mov dword [esp + 0x14], edx
jmp 0x409e5e
cmp ebp, 0x5b
jne 0x40a029
test dl, 0x20
jne 0x40a03f
or edx, 8
mov dword [esp + 0x14], edx
jmp 0x409e5e
cmp ebp, 0x44
jne 0x40a03f
test dl, 0x20
jne 0x40a03f
or edx, 0x20
mov dword [esp + 0x14], edx
jmp 0x409e5e
push ebp
push 0x563694
call fcn.0050bd8c
add esp, 8
mov dword [esp + 0x18], 0x563648
mov dword [esp + 0x1c], 1
test eax, eax
je 0x40a06b
mov ebx, 0x40
jmp 0x409e5a
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
call fcn.00405a20
push str.__tag
mov ecx, edi
call fcn.0040aa80
mov edx, dword [esp + 0x2c]
push edx
lea esi, [esp + 0x48]
call fcn.00408c10
push eax
lea eax, [esp + 0x48]
push str._at_offset
push eax
mov dword [esp + 0x70], 4
call fcn.0040a530
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 5
call fcn.004053a0
lea ecx, [esp + 0x40]
call fcn.00402490
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00402490
mov edi, dword [esp + 0x24]
jmp 0x409e5a
test dl, 4
je 0x40a192
xor edx, 4
mov dword [esp + 0x14], edx
cmp ebp, 0x2d
jne 0x40a10d
mov dword [esp + 0x18], 0x5636a8
mov dword [esp + 0x1c], 3
lea ebx, [ebp - 0xd]
jmp 0x409e5e
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x563648
mov dword [esp + 0x20], 1
call fcn.00405a20
push str.comment_tag
mov ecx, edi
call fcn.0040aa80
mov ecx, dword [esp + 0x2c]
push ecx
lea esi, [esp + 0x50]
call fcn.00408c10
push eax
lea edx, [esp + 0x50]
push str._at_offset
push edx
mov dword [esp + 0x70], 6
call fcn.0040a530
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 7
call fcn.004053a0
lea ecx, [esp + 0x48]
call fcn.00402490
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00402490
mov edi, dword [esp + 0x24]
jmp 0x409e5a
test dl, 8
je 0x40a244
xor edx, 8
mov dword [esp + 0x14], edx
cmp ebp, 0x43
jne 0x40a1bf
mov dword [esp + 0x18], 0x5636c8
mov dword [esp + 0x1c], 3
lea ebx, [ebp - 0x3b]
jmp 0x409e5e
mov edi, dword [esp + 0x6c]
add edi, 0x10
push str.Incorrect
mov ecx, edi
mov dword [esp + 0x1c], 0x563648
mov dword [esp + 0x20], 1
call fcn.00405a20
push 0x563544
mov ecx, edi
call fcn.0040aa80
mov eax, dword [esp + 0x2c]
push eax
lea esi, [esp + 0x58]
call fcn.00408c10
push eax
lea ecx, [esp + 0x58]
push str._at_offset
push ecx
mov dword [esp + 0x70], 8
call fcn.0040a530
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 9
call fcn.004053a0
lea ecx, [esp + 0x50]
call fcn.00402490
or ebx, 0xffffffff
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00402490
mov edi, dword [esp + 0x24]
jmp 0x409e5a
test dl, 0x20
je 0x409e5e
cmp ebp, 0x3c
jne 0x40a25e
or edx, 1
mov dword [esp + 0x14], edx
jmp 0x409e5e
cmp ebp, 0x3e
jne 0x409e5e
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
sub ebp, dword [eax + 0xc]
mov ebx, 0x40
sar ebp, 1
mov ecx, dword [esp + 0x68]
lea eax, [ebp + 1]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x6c]
sub eax, dword [ecx + 4]
mov dword [ecx], ebx
mov dword [ecx + 8], eax
mov eax, ebx
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
cmp ebp, 0x3c
jne 0x40a2b7
mov dword [esp + 0x14], 1
jmp 0x409e5a
push ebp
push str.__t_n_r
mov ebx, 4
call fcn.0050bd8c
add esp, 8
test eax, eax
je 0x409e45
mov dword [esp + 0x14], 0x10
jmp 0x409e5a
test ebx, ebx
jne 0x40a2ea
mov eax, str.Element_end_tag
jmp 0x40a313
cmp ebx, 8
jne 0x40a2f6
mov eax, str.CDATA_Section
jmp 0x40a313
cmp ebx, 0x10
jne 0x40a302
mov eax, str.Processing_instruction
jmp 0x40a313
cmp ebx, 0x20
jne 0x40a313
mov eax, str.Comment
jmp 0x40a313
mov eax, str.Doctype
mov esi, dword [esp + 0x6c]
lea edi, [esi + 0x10]
push eax
mov ecx, edi
or ebx, 0xffffffff
call fcn.00405a20
mov edx, dword [esi + 4]
push edx
lea esi, [esp + 0x4c]
call fcn.00408c10
push eax
lea eax, [esp + 0x54]
push str._at_offset
push eax
mov dword [esp + 0x70], 0
call fcn.0040a530
add esp, 0x10
push eax
mov ecx, edi
mov byte [esp + 0x64], 1
call fcn.004053a0
lea ecx, [esp + 0x4c]
call fcn.00402490
mov ecx, esi
mov dword [esp + 0x60], ebx
call fcn.00402490
push str._unterminated
mov ecx, edi
call fcn.0040aa80
jmp 0x40a279
push 0x80070057
call fcn.004058e0
mov ebp, dword [esp + 0x20]
mov ecx, dword [esp + 0x68]
sub ebp, dword [ecx + 0xc]
sar ebp, 1
dec ebp
jmp 0x40a279
mov ebp, dword [esp + 0x20]
mov edx, dword [esp + 0x68]
sub ebp, dword [edx + 0xc]
mov ebx, 4
sar ebp, 1
dec ebp
jmp 0x40a279