Function at 0x10049cd0
Capabilities:
Enumerate pe sections
Validate payment card number using luhn algorithm

Disassembly:
sub esp, 0x10
push ebx
mov ebx, dword [esp + 0x20]
push ebp
push esi
mov esi, dword [esp + 0x20]
push edi
mov byte [esp + 0x24], 0
mov eax, dword [esi + 0x18]
lea ebp, [esi + 0x8a0]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [eax], 0
mov edi, dword [esp + 0x28]
nop
push ebx
push 0xa
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
mov eax, dword [esp + 0x28]
test edi, edi
je 0x1004a4cd
sub edi, eax
inc edi
push edi
push eax
push ebp
call fcn.10024bb0
add esp, 0xc
test eax, eax
jne 0x1004a311
mov eax, dword [esp + 0x30]
sub ebx, edi
add dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebx
add dword [eax], edi
cmp dword [esi + 0xc4], 0
jne 0x10049dbd
push ebp
call fcn.10024c10
push ebp
mov ebx, eax
call fcn.10024c20
mov edi, dword [esp + 0x18]
add esp, 8
mov ecx, dword [edi + 0x260]
test dword [ecx + 0x44], 0x40000
je 0x10049d9d
cmp ebx, 5
mov ecx, 5
mov ebp, 2
sbb edi, edi
inc edi
cmp ebx, 5
cmova ebx, ecx
push ebx
push eax
push str.RTSP_
call fcn.10023320
add esp, 0xc
test eax, eax
cmovne ebp, edi
mov edi, dword [esp + 0x10]
jmp 0x10049daa
push ebx
push eax
push esi
call fcn.10049260
add esp, 0xc
mov ebp, eax
cmp ebp, 2
je 0x1004a408
mov ebx, dword [esp + 0x2c]
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10024c20
push ebp
mov dword [esp + 0x1c], eax
call fcn.10024c10
mov edx, dword [esp + 0x1c]
add esp, 8
mov ebp, eax
mov dword [esp + 0x18], ebp
mov cl, byte [edx]
cmp cl, 0xa
je 0x1004a319
cmp cl, 0xd
je 0x1004a319
mov ecx, dword [esi + 0xc4]
mov edi, 4
lea eax, [ecx + 1]
mov dword [esi + 0xc4], eax
test ecx, ecx
jne 0x1004a1d3
mov eax, dword [esp + 0x10]
mov dword [esi + 0xd0], ecx
mov eax, dword [eax + 0x260]
mov eax, dword [eax + 0x44]
test al, 3
je 0x10049fbc
mov al, byte [edx]
mov edi, edx
test al, al
je 0x10049e40
nop dword [eax]
cmp al, 0x20
je 0x10049e38
cmp al, 9
jne 0x10049e40
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10049e30
push 5
push str.HTTP_
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x10049eeb
movsx ecx, byte [edi + 5]
mov eax, ecx
sub eax, 0x31
je 0x10049f1c
sub eax, 1
je 0x10049e75
sub eax, 1
jne 0x1004a441
mov al, byte [edi + 6]
cmp al, 0x20
je 0x10049e80
cmp al, 9
jne 0x10049eeb
lea eax, [ecx - 0x30]
lea eax, [eax + eax*4]
add eax, eax
mov dword [esi + 0xd0], eax
mov cl, byte [edi + 7]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x10049eeb
mov bl, byte [edi + 8]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x10049eeb
mov dl, byte [edi + 9]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x10049eeb
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xa]
cmp al, 0x20
je 0x1004a094
cmp al, 9
je 0x1004a094
cmp al, 0xa
jl 0x10049eeb
cmp al, 0xd
jle 0x1004a094
mov ecx, dword [esp + 0x14]
push ebp
push ecx
push esi
call fcn.10049260
add esp, 0xc
cmp eax, 1
jne 0x1004a483
mov dword [esi + 0xd4], 0xc8
mov dword [esi + 0xd0], 0xa
jmp 0x1004a094
cmp byte [edi + 6], 0x2e
jne 0x10049fa1
mov al, byte [edi + 7]
cmp al, 0x30
je 0x10049f2d
cmp al, 0x31
jne 0x10049fa1
mov cl, byte [edi + 8]
cmp cl, 0x20
je 0x10049f3a
cmp cl, 9
jne 0x10049fa1
movsx eax, al
sub eax, 0x26
mov dword [esi + 0xd0], eax
mov cl, byte [edi + 9]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x10049fa1
mov bl, byte [edi + 0xa]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x10049fa1
mov dl, byte [edi + 0xb]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x10049fa1
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xc]
cmp al, 0x20
je 0x1004a094
cmp al, 9
je 0x1004a094
sub al, 0xa
cmp al, 3
jbe 0x1004a094
push str.Unsupported_HTTP_1_subversion_in_response
push esi
call fcn.10024e90
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
test eax, 0x40000
je 0x1004a483
mov al, byte [edx]
mov edi, edx
test al, al
je 0x10049fe0
nop
cmp al, 0x20
je 0x10049fd8
cmp al, 9
jne 0x10049fe0
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10049fd0
push 5
push str.RTSP_
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x1004a483
mov al, byte [edi + 5]
sub al, 0x30
cmp al, 9
ja 0x1004a546
cmp byte [edi + 6], 0x2e
jne 0x1004a546
mov al, byte [edi + 7]
sub al, 0x30
cmp al, 9
ja 0x1004a546
mov al, byte [edi + 8]
cmp al, 0x20
je 0x1004a02b
cmp al, 9
jne 0x1004a546
mov cl, byte [edi + 9]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x1004a546
mov bl, byte [edi + 0xa]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x1004a546
mov dl, byte [edi + 0xb]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x1004a546
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xc]
cmp al, 0x20
je 0x1004a08a
cmp al, 9
je 0x1004a08a
sub al, 0xa
cmp al, 3
ja 0x1004a546
mov dword [esi + 0xd0], 0xb
mov ecx, dword [esi + 0xd0]
mov eax, ecx
sub eax, 0xa
je 0x1004a0aa
sub eax, 1
jne 0x1004a45c
mov ebx, dword [esp + 0x10]
mov byte [ebx + 0x4d4], cl
mov eax, dword [esi + 0xd4]
mov dword [esi + 0xd38], eax
mov eax, dword [esi + 0xd0]
mov dword [esi + 0xd40], eax
movzx eax, byte [esi + 0xd0]
mov byte [ebx + 0x4d4], al
mov al, byte [esi + 0xd15]
test al, al
je 0x1004a0f2
mov ecx, dword [esi + 0xd0]
movzx eax, al
cmp eax, ecx
jle 0x1004a104
jmp 0x1004a0f8
mov cl, byte [esi + 0xd0]
mov byte [esi + 0xd15], cl
mov ecx, dword [esi + 0xd0]
mov eax, dword [esi + 0xbf8]
or eax, dword [esi + 0xbfc]
je 0x1004a12e
cmp byte [esi + 0xd16], 0
jne 0x1004a12e
cmp dword [esi + 0xd4], 0x1a0
jne 0x1004a12e
mov byte [esi + 0x136], 1
cmp ecx, 0xa
jne 0x1004a14b
push str.HTTP_1.0__assume_close_after_body
push esi
call fcn.10024f60
push 1
push ebx
call fcn.10036460
add esp, 0x10
jmp 0x1004a16e
cmp ecx, 0x14
je 0x1004a162
cmp dword [esi + 0xdc], 2
jne 0x1004a16e
cmp dword [esi + 0xd4], 0x65
jne 0x1004a16e
mov eax, dword [ebx + 0x4a8]
mov dword [eax], 2
mov ecx, dword [esi + 0xd4]
lea eax, [ecx - 0x64]
cmp eax, 0x63
setbe al
mov byte [esi + 0x137], al
sub ecx, 0xcc
je 0x1004a19f
sub ecx, 0x64
jne 0x1004a1ce
cmp byte [esi + 0x3b0], cl
je 0x1004a19f
mov byte [esi + 0xdf8], 1
mov dword [esi + 0x88], 0
mov dword [esi + 0x8c], 0
mov dword [esi + 0x90], 0
mov dword [esi + 0x94], 0
mov byte [esi + 0x137], 1
mov edi, 0xc
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10024c20
push ebp
mov ebx, eax
call fcn.10024c10
mov ebp, eax
push ebp
push 0
push ebx
call sub.VCRUNTIME140.dll_memchr
add esp, 0x14
test eax, eax
jne 0x1004a4b1
mov ecx, dword [esi + 0xc4]
cmp ecx, 2
jl 0x1004a22b
mov al, byte [ebx]
cmp al, 0x20
je 0x1004a212
cmp al, 9
jne 0x1004a217
cmp ecx, 2
jg 0x1004a22b
push ebp
push 0x3a
push ebx
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
test eax, eax
je 0x1004a495
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
push ebx
push ebp
push dword [esp + 0x18]
push esi
call fcn.100478d0
add esp, 0x10
test eax, eax
jne 0x1004a311
push ebx
push ebp
push 1
push esi
call fcn.10024df0
mov eax, dword [esi + 0xd4]
add esp, 0x10
sub eax, 0x64
cmp eax, 0x64
jae 0x1004a268
or edi, 0x20
push ebx
push ebp
push edi
push esi
call fcn.100224a0
add esp, 0x10
test eax, eax
jne 0x1004a311
mov ecx, dword [esi + 0xbc]
mov edx, 0x4b000
add ecx, ebx
cmp ebx, edx
jae 0x1004a2d6
mov eax, dword [esi + 0xd78]
add dword [esi + 0xb8], ebx
add eax, ebx
mov dword [esi + 0xd78], eax
mov dword [esi + 0xbc], ecx
cmp ecx, edx
ja 0x1004a2b9
cmp eax, 0x5dc000
jbe 0x1004a2da
mov edx, 0x5dc000
mov ecx, eax
push edx
push ecx
push str.Too_large_response_headers:__zu____u
push esi
call fcn.10024e90
add esp, 0x10
mov eax, 0x38
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
test ecx, ecx
jne 0x1004a2b9
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10024c30
mov ebx, dword [esp + 0x30]
add esp, 4
test ebx, ebx
jne 0x10049cfb
mov al, byte [esp + 0x24]
cmp byte [esi + 0x12d], 0
jne 0x1004a30f
test al, al
jne 0x1004a30f
push ebp
call fcn.10024bc0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push ebp
push edx
push 1
push esi
call fcn.10024df0
mov eax, dword [esi + 0xd4]
mov ecx, dword [esp + 0x24]
sub eax, 0x64
cmp eax, 0x64
push ebp
sbb eax, eax
and eax, 0x20
push ecx
add eax, 4
push eax
push esi
call fcn.100224a0
add esp, 0x20
test eax, eax
jne 0x1004a311
mov ecx, dword [esi + 0xbc]
mov edx, 0x4b000
add ecx, ebp
cmp ebp, edx
jae 0x1004a38b
mov eax, dword [esi + 0xd78]
add dword [esi + 0xb8], ebp
add eax, ebp
mov dword [esi + 0xd78], eax
mov dword [esi + 0xbc], ecx
cmp ecx, edx
ja 0x1004a2b9
cmp eax, 0x5dc000
ja 0x1004a2b2
jmp 0x1004a393
test ecx, ecx
jne 0x1004a2b9
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10024c30
mov eax, dword [esi + 0xd4]
add esp, 4
sub eax, 0x64
cmp eax, 0x63
ja 0x1004a3b8
mov eax, dword [esi + 0xb8]
jmp 0x1004a3ba
xor eax, eax
mov edi, dword [esp + 0x28]
mov dword [esi + 0xc0], eax
lea eax, [esp + 0x1c]
push eax
push ebx
push edi
push esi
call fcn.100493b0
add esp, 0x10
test eax, eax
jne 0x1004a311
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
add edi, eax
sub ebx, eax
mov dword [esp + 0x28], edi
add dword [ecx], eax
cmp byte [esi + 0x12d], 0
je 0x1004a2f5
test ebx, ebx
jne 0x10049d00
jmp 0x1004a2f5
push 2
push edi
call fcn.10036460
add esp, 8
cmp byte [edi + 0x4d4], 0xa
jae 0x1004a538
cmp byte [esi + 0x6d5], 0
je 0x1004a55c
mov byte [esi + 0x12d], 0
lea ebp, [esi + 0x8a0]
mov al, 1
jmp 0x1004a2f9
push str.Unsupported_HTTP_version_in_response
push esi
call fcn.10024e90
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, ecx
mov ecx, 0xa
cdq
idiv ecx
push edx
push eax
push str.Unsupported_HTTP_version___u._d__in_response
push esi
call fcn.10024e90
add esp, 0x10
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov byte [esi + 0x12d], 0
lea ebp, [esi + 0x8a0]
jmp 0x1004a2f5
mov eax, str.Header_without_colon
push eax
push esi
call fcn.10024e90
add esp, 8
mov eax, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, str.Nul_byte_in_header
push eax
push esi
call fcn.10024e90
add esp, 8
mov eax, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push ebx
push eax
push ebp
call fcn.10024bb0
add esp, 0xc
test eax, eax
jne 0x1004a311
mov eax, dword [esp + 0x30]
add dword [eax], ebx
cmp dword [esi + 0xc4], 0
jne 0x1004a2f5
push ebp
call fcn.10024c10
add esp, 4
push eax
push ebp
call fcn.10024c20
mov ebx, dword [esp + 0x18]
add esp, 4
push eax
push ebx
push esi
call fcn.10049310
add esp, 0x10
cmp eax, 2
jne 0x1004a2f5
push eax
push ebx
mov byte [esi + 0x12d], 0
call fcn.10036460
add esp, 8
cmp byte [ebx + 0x4d4], 0xa
jb 0x1004a553
push str.Invalid_status_line
push esi
call fcn.10024e90
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 8
pop ebx
add esp, 0x10
ret
cmp byte [esi + 0x6d5], 0
jne 0x1004a577
push str.Received_HTTP_0.9_when_not_allowed
push esi
call fcn.10024e90
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov al, 1
jmp 0x1004a2f9