Function at 0x1003a650
Capabilities:
Enumerate pe sections
Validate payment card number using luhn algorithm

Disassembly:
sub esp, 0x10
push ebx
mov ebx, dword [esp + 0x20]
push ebp
push esi
mov esi, dword [esp + 0x20]
push edi
mov byte [esp + 0x24], 0
mov eax, dword [esi + 0x18]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [eax], 0
mov ebp, dword [esp + 0x28]
nop dword [eax]
push ebx
push 0xa
push ebp
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1003ae78
sub edi, ebp
lea eax, [esi + 0x8a0]
inc edi
push edi
push ebp
push eax
call fcn.10020120
add esp, 0xc
test eax, eax
jne 0x1003ac9f
mov eax, dword [esp + 0x30]
sub ebx, edi
add ebp, edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebp
add dword [eax], edi
cmp dword [esi + 0xc4], 0
jne 0x1003a741
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10020180
push ebp
mov ebx, eax
call fcn.10020190
mov edi, dword [esp + 0x18]
add esp, 8
mov ecx, dword [edi + 0x260]
test dword [ecx + 0x44], 0x40000
je 0x1003a727
cmp ebx, 5
mov ecx, 5
mov ebp, 2
sbb edi, edi
inc edi
cmp ebx, 5
cmova ebx, ecx
push ebx
push eax
push str.RTSP_
call fcn.10033010
add esp, 0xc
test eax, eax
cmovne ebp, edi
mov edi, dword [esp + 0x10]
jmp 0x1003a734
push ebx
push eax
push esi
call fcn.10039db0
add esp, 0xc
mov ebp, eax
cmp ebp, 2
je 0x1003ad9a
mov ebx, dword [esp + 0x2c]
lea eax, [esi + 0x8a0]
push eax
call fcn.10020190
mov dword [esp + 0x18], eax
lea eax, [esi + 0x8a0]
push eax
call fcn.10020180
mov edx, dword [esp + 0x1c]
add esp, 8
mov ebp, eax
mov dword [esp + 0x18], ebp
mov cl, byte [edx]
cmp cl, 0xa
je 0x1003aca7
cmp cl, 0xd
je 0x1003aca7
mov ecx, dword [esi + 0xc4]
lea ebx, [esi + 0x8a0]
mov edi, 4
lea eax, [ecx + 1]
mov dword [esi + 0xc4], eax
test ecx, ecx
jne 0x1003ab67
mov eax, dword [esp + 0x10]
mov dword [esi + 0xd0], ecx
mov eax, dword [eax + 0x260]
mov eax, dword [eax + 0x44]
test al, 3
je 0x1003a94f
mov al, byte [edx]
mov edi, edx
test al, al
je 0x1003a7d3
cmp al, 0x20
je 0x1003a7cb
cmp al, 9
jne 0x1003a7d3
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1003a7c3
push 5
push str.HTTP_
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x1003a87e
movsx ecx, byte [edi + 5]
mov eax, ecx
sub eax, 0x31
je 0x1003a8af
sub eax, 1
je 0x1003a808
sub eax, 1
jne 0x1003adcd
mov al, byte [edi + 6]
cmp al, 0x20
je 0x1003a813
cmp al, 9
jne 0x1003a87e
lea eax, [ecx - 0x30]
lea eax, [eax + eax*4]
add eax, eax
mov dword [esi + 0xd0], eax
mov cl, byte [edi + 7]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x1003a87e
mov bl, byte [edi + 8]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x1003a87e
mov dl, byte [edi + 9]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x1003a87e
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xa]
cmp al, 0x20
je 0x1003aa26
cmp al, 9
je 0x1003aa26
cmp al, 0xa
jl 0x1003a87e
cmp al, 0xd
jle 0x1003aa26
mov ecx, dword [esp + 0x14]
push ebp
push ecx
push esi
call fcn.10039db0
add esp, 0xc
cmp eax, 1
jne 0x1003ae0f
mov dword [esi + 0xd4], 0xc8
mov dword [esi + 0xd0], 0xa
jmp 0x1003aa26
cmp byte [edi + 6], 0x2e
jne 0x1003a934
mov al, byte [edi + 7]
cmp al, 0x30
je 0x1003a8c0
cmp al, 0x31
jne 0x1003a934
mov cl, byte [edi + 8]
cmp cl, 0x20
je 0x1003a8cd
cmp cl, 9
jne 0x1003a934
movsx eax, al
sub eax, 0x26
mov dword [esi + 0xd0], eax
mov cl, byte [edi + 9]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x1003a934
mov bl, byte [edi + 0xa]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x1003a934
mov dl, byte [edi + 0xb]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x1003a934
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xc]
cmp al, 0x20
je 0x1003aa26
cmp al, 9
je 0x1003aa26
sub al, 0xa
cmp al, 3
jbe 0x1003aa26
push str.Unsupported_HTTP_1_subversion_in_response
push esi
call fcn.1002c250
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
test eax, 0x40000
je 0x1003ae0f
mov al, byte [edx]
mov edi, edx
test al, al
je 0x1003a972
cmp al, 0x20
je 0x1003a96a
cmp al, 9
jne 0x1003a972
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1003a962
push 5
push str.RTSP_
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x1003ae0f
mov al, byte [edi + 5]
sub al, 0x30
cmp al, 9
ja 0x1003af22
cmp byte [edi + 6], 0x2e
jne 0x1003af22
mov al, byte [edi + 7]
sub al, 0x30
cmp al, 9
ja 0x1003af22
mov al, byte [edi + 8]
cmp al, 0x20
je 0x1003a9bd
cmp al, 9
jne 0x1003af22
mov cl, byte [edi + 9]
lea eax, [ecx - 0x30]
cmp al, 9
ja 0x1003af22
mov bl, byte [edi + 0xa]
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x1003af22
mov dl, byte [edi + 0xb]
lea eax, [edx - 0x30]
cmp al, 9
ja 0x1003af22
movsx eax, cl
lea ecx, [eax + eax*4]
movsx eax, bl
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
movsx eax, dl
lea eax, [eax + ecx*2]
add eax, 0xffffeb30
mov dword [esi + 0xd4], eax
mov al, byte [edi + 0xc]
cmp al, 0x20
je 0x1003aa1c
cmp al, 9
je 0x1003aa1c
sub al, 0xa
cmp al, 3
ja 0x1003af22
mov dword [esi + 0xd0], 0xb
mov ecx, dword [esi + 0xd0]
mov eax, ecx
sub eax, 0xa
je 0x1003aa3c
sub eax, 1
jne 0x1003ade8
mov ebx, dword [esp + 0x10]
mov byte [ebx + 0x4d4], cl
mov eax, dword [esi + 0xd4]
mov dword [esi + 0xd38], eax
mov eax, dword [esi + 0xd0]
mov dword [esi + 0xd40], eax
movzx eax, byte [esi + 0xd0]
mov byte [ebx + 0x4d4], al
mov al, byte [esi + 0xd15]
test al, al
je 0x1003aa80
movzx eax, al
cmp eax, dword [esi + 0xd0]
jle 0x1003aa8c
mov al, byte [esi + 0xd0]
mov byte [esi + 0xd15], al
mov eax, dword [esi + 0xbf8]
or eax, dword [esi + 0xbfc]
je 0x1003aab6
cmp byte [esi + 0xd16], 0
jne 0x1003aab6
cmp dword [esi + 0xd4], 0x1a0
jne 0x1003aab6
mov byte [esi + 0x136], 1
mov eax, dword [esi + 0xd0]
cmp eax, 0xa
jne 0x1003aad9
push str.HTTP_1.0__assume_close_after_body
push esi
call fcn.1002c320
push 1
push ebx
call fcn.1002e810
add esp, 0x10
jmp 0x1003aafc
cmp eax, 0x14
je 0x1003aaf0
cmp dword [esi + 0xdc], 2
jne 0x1003aafc
cmp dword [esi + 0xd4], 0x65
jne 0x1003aafc
mov eax, dword [ebx + 0x4a8]
mov dword [eax], 2
mov ecx, dword [esi + 0xd4]
lea eax, [ecx - 0x64]
cmp eax, 0x63
setbe al
mov byte [esi + 0x137], al
sub ecx, 0xcc
je 0x1003ab2d
sub ecx, 0x64
jne 0x1003ab5c
cmp byte [esi + 0x3b0], cl
je 0x1003ab2d
mov byte [esi + 0xdf8], 1
mov dword [esi + 0x88], 0
mov dword [esi + 0x8c], 0
mov dword [esi + 0x90], 0
mov dword [esi + 0x94], 0
mov byte [esi + 0x137], 1
mov edi, 0xc
lea ebx, [esi + 0x8a0]
lea eax, [esi + 0x8a0]
push eax
call fcn.10020190
push ebx
mov ebp, eax
call fcn.10020180
mov ebx, eax
push ebx
push 0
push ebp
call sub.VCRUNTIME140.dll_memchr
add esp, 0x14
test eax, eax
jne 0x1003ae3d
mov ecx, dword [esi + 0xc4]
cmp ecx, 2
jl 0x1003abc0
mov al, byte [ebp]
cmp al, 0x20
je 0x1003aba7
cmp al, 9
jne 0x1003abac
cmp ecx, 2
jg 0x1003abc0
push ebx
push 0x3a
push ebp
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
test eax, eax
je 0x1003ae1b
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
push ebx
push ebp
push dword [esp + 0x18]
push esi
call fcn.100383b0
add esp, 0x10
test eax, eax
jne 0x1003ac9f
push ebx
push ebp
push 1
push esi
call fcn.1002c1b0
mov eax, dword [esi + 0xd4]
add esp, 0x10
sub eax, 0x64
cmp eax, 0x64
jae 0x1003abfd
or edi, 0x20
push ebx
push ebp
push edi
push esi
call fcn.1002d1a0
add esp, 0x10
test eax, eax
jne 0x1003ac9f
mov edx, dword [esi + 0xbc]
mov ecx, 0x4b000
cmp ebx, ecx
jae 0x1003ac57
mov eax, dword [esi + 0xd78]
add edx, ebx
add dword [esi + 0xb8], ebx
add eax, ebx
mov dword [esi + 0xd78], eax
mov dword [esi + 0xbc], edx
cmp edx, ecx
ja 0x1003ae37
cmp eax, 0x5dc000
jbe 0x1003ac62
mov ecx, 0x5dc000
push ecx
push eax
jmp 0x1003ae5d
lea eax, [edx + ebx]
test eax, eax
jne 0x1003ae39
lea eax, [esi + 0x8a0]
push eax
call fcn.100201a0
mov ebx, dword [esp + 0x30]
add esp, 4
test ebx, ebx
jne 0x1003a675
mov al, byte [esp + 0x24]
cmp byte [esi + 0x12d], 0
jne 0x1003ac9d
test al, al
jne 0x1003ac9d
add esi, 0x8a0
push esi
call fcn.10020130
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push ebp
push edx
push 1
push esi
call fcn.1002c1b0
mov eax, dword [esi + 0xd4]
mov ecx, dword [esp + 0x24]
sub eax, 0x64
cmp eax, 0x64
push ebp
sbb eax, eax
and eax, 0x20
push ecx
add eax, 4
push eax
push esi
call fcn.1002d1a0
add esp, 0x20
test eax, eax
jne 0x1003ac9f
mov edi, dword [esi + 0xbc]
mov edx, 0x4b000
cmp ebp, edx
jae 0x1003ad1e
mov ecx, dword [esi + 0xd78]
add edi, ebp
add dword [esi + 0xb8], ebp
add ecx, ebp
mov dword [esi + 0xd78], ecx
mov dword [esi + 0xbc], edi
cmp edi, edx
ja 0x1003ae59
cmp ecx, 0x5dc000
jbe 0x1003ad29
mov edx, 0x5dc000
jmp 0x1003ae5b
lea ecx, [edi + ebp]
test ecx, ecx
jne 0x1003ae5b
lea eax, [esi + 0x8a0]
push eax
call fcn.100201a0
mov eax, dword [esi + 0xd4]
add esp, 4
sub eax, 0x64
cmp eax, 0x63
ja 0x1003ad4e
mov eax, dword [esi + 0xb8]
jmp 0x1003ad50
xor eax, eax
mov ebp, dword [esp + 0x28]
mov dword [esi + 0xc0], eax
lea eax, [esp + 0x1c]
push eax
push ebx
push ebp
push esi
call fcn.10039f00
add esp, 0x10
test eax, eax
jne 0x1003ac9f
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
sub ebx, eax
add ebp, eax
add dword [ecx], eax
cmp byte [esi + 0x12d], 0
je 0x1003ac7d
test ebx, ebx
jne 0x1003a680
jmp 0x1003ac7d
push 2
push edi
call fcn.1002e810
add esp, 8
cmp byte [edi + 0x4d4], 0xa
jae 0x1003af14
cmp byte [esi + 0x6d5], 0
je 0x1003aef9
mov byte [esi + 0x12d], 0
mov al, 1
jmp 0x1003ac81
push str.Unsupported_HTTP_version_in_response
push esi
call fcn.1002c250
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, ecx
mov ecx, 0xa
cdq
idiv ecx
push edx
push eax
push str.Unsupported_HTTP_version___u._d__in_response
push esi
call fcn.1002c250
add esp, 0x10
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov byte [esi + 0x12d], 0
jmp 0x1003ac7d
mov eax, str.Header_without_colon
push eax
push esi
call fcn.1002c250
add esp, 8
mov eax, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov eax, edx
push ecx
push eax
jmp 0x1003ae5d
mov eax, str.Nul_byte_in_header
push eax
push esi
call fcn.1002c250
add esp, 8
mov eax, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
mov ecx, edi
push edx
push ecx
push str.Too_large_response_headers:__zu____u
push esi
call fcn.1002c250
add esp, 0x10
mov eax, 0x38
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push ebx
push ebp
lea ebp, [esi + 0x8a0]
push ebp
call fcn.10020120
add esp, 0xc
test eax, eax
jne 0x1003ac9f
mov eax, dword [esp + 0x30]
add dword [eax], ebx
cmp dword [esi + 0xc4], 0
jne 0x1003ac7d
push ebp
call fcn.10020180
add esp, 4
push eax
push ebp
call fcn.10020190
mov ebx, dword [esp + 0x18]
add esp, 4
push eax
push ebx
push esi
call fcn.10039e60
add esp, 0x10
cmp eax, 2
jne 0x1003ac7d
push eax
push ebx
mov byte [esi + 0x12d], 0
call fcn.1002e810
add esp, 8
cmp byte [ebx + 0x4d4], 0xa
jae 0x1003af14
cmp byte [esi + 0x6d5], 0
je 0x1003aef9
mov al, 1
jmp 0x1003ac81
push str.Received_HTTP_0.9_when_not_allowed
push esi
call fcn.1002c250
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
push str.Invalid_status_line
push esi
call fcn.1002c250
add esp, 8
pop edi
pop esi
pop ebp
mov eax, 8
pop ebx
add esp, 0x10
ret