Function at 0x402dd0
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
sub esp, 0x28
or eax, 0xffffffff
mov word [esp + 0x10], ax
push ebp
xor ecx, ecx
mov eax, 0x65
xor ebp, ebp
mov dword [esp + 0x20], eax
mov edx, 2
mul edx
seto cl
push esi
push edi
mov dword [esp + 0x24], ebp
neg ecx
or ecx, eax
push ecx
call fcn.0041171a
add esp, 4
xor ecx, ecx
push 4
mov dword [esp + 0x24], eax
mov word [eax], cx
call fcn.0041171a
add esp, 4
test eax, eax
je 0x42b3f4
mov dword [eax], 1
mov dword [esp + 0x2c], eax
mov edx, dword [esp + 0x3c]
cmp dword [edx + 8], ebp
jbe 0x402e63
xor edi, edi
mov eax, edx
mov ecx, dword [eax + 4]
mov esi, dword [ecx + edi*4]
test esi, esi
je 0x402e5d
movzx eax, word [esi + 8]
cmp ax, 0x3f
jle 0x402f2d
push esi
call fcn.004112ef
mov eax, dword [esp + 0x40]
add esp, 4
inc edi
cmp edi, dword [eax + 8]
jb 0x402e38
mov edx, dword [esp + 0x3c]
mov dword [edx + 8], ebp
cmp word [ebx], bp
je 0x40306f
jmp 0x402e80
movzx eax, word [ebx + ebp*2]
cmp ax, 0x20
je 0x402f85
cmp ax, 9
je 0x402f85
movzx eax, word [ebx + ebp*2]
test ax, ax
je 0x40305a
movzx esi, ax
mov dword [esp + 0x10], ebp
mov word [esp + 0x1e], bp
cmp si, 0x30
jae 0x402f8b
cmp si, 0x2e
je 0x402f95
cmp si, 0x41
jae 0x4030f9
cmp si, 0x61
jae 0x403363
cmp si, 0x5f
je 0x403103
movzx eax, si
cmp eax, 0x24
je 0x4030be
cmp eax, 0x3d
je 0x40313a
cmp eax, 0x28
je 0x403177
cmp eax, 0x29
je 0x403159
cmp eax, 0x22
je case.0x402f26.39
sub eax, 0x1a
cmp eax, 0x44
ja case.0x402f26.27
movzx ecx, byte [eax + 0x403428]
jmp dword [ecx*4 + 0x4033ec]
cmp ax, 0x30
jl 0x402e50
mov ecx, dword [esi]
test ecx, ecx
je 0x402e50
mov eax, dword [ecx + 0xc]
dec dword [eax]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x10], ecx
cmp dword [edx], ebp
je 0x42b3fd
mov ecx, dword [esp + 0x10]
push ecx
call fcn.004112ef
add esp, 4
jmp 0x402e50
mov edi, pe_nt_image_headers32
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
inc ebp
jmp 0x402e80
cmp si, 0x39
ja 0x402ebb
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
push ecx
push ebx
lea eax, [esp + 0x1c]
call fcn.004035d0
cmp al, 1
jne 0x42b421
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402cc0
mov ebp, dword [esp + 0x10]
jmp 0x40304f
cmp ax, 0x30
jae 0x40323a
cmp ax, 0x5f
je 0x4030ec
cmp dword [esp + 0x24], 0
je 0x42b5d0
lea eax, [esp + 0x20]
call fcn.00402ae0
mov esi, dword [esp + 0x24]
mov edi, dword [esp + 0x20]
push esi
push edi
call dword [sym.imp.USER32.dll_CharUpperBuffW]
cmp word [esp + 0x1c], 0x30
jge 0x40328e
mov edx, 0x33
push 0x10
mov word [esp + 0x20], dx
call fcn.0041171a
add esp, 4
test eax, eax
je 0x42b5c3
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
mov dword [eax], edi
mov dword [eax + 4], esi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
inc dword [ecx]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
mov edi, dword [esp + 0x40]
call fcn.00402cc0
cmp word [ebx + ebp*2], 0
jne 0x402e80
mov ax, word [esp + 0x1c]
cmp ax, 0x30
jl 0x40306f
cmp ax, 0x3f
jle 0x40326d
mov edi, dword [esp + 0x3c]
lea ecx, [esp + 0x14]
mov eax, 0x7f
push ecx
mov word [esp + 0x20], ax
mov dword [esp + 0x18], 0
mov word [esp + 0x22], bp
call fcn.00402cc0
mov esi, dword [esp + 0x2c]
add dword [esi], 0xffffffff
jne 0x4030b3
mov edx, dword [esp + 0x20]
push edx
call fcn.004112ef
add esp, 4
push esi
call fcn.004112ef
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x28
ret 8
lea esi, [esp + 0x20]
inc ebp
call fcn.00403770
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x4030d8
cmp ax, 0x41
jae 0x4030ec
cmp ax, 0x61
jb 0x402fc8
cmp ax, 0x7a
ja 0x402fc8
push eax
lea eax, [esp + 0x24]
call fcn.00403470
inc ebp
jmp 0x4030c8
cmp si, 0x5a
ja 0x402ecf
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
mov ecx, ebx
call fcn.00402b70
cmp dword [esp + 0x14], 0xffffffff
je 0x42b5fe
mov edi, dword [esp + 0x3c]
lea eax, [esp + 0x14]
push eax
call fcn.00402cc0
mov ebp, dword [esp + 0x10]
jmp 0x40304f
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42b599
mov edi, 0x41
call fcn.00402b00
jmp 0x403041
mov edi, 0x48
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
mov edi, 0x47
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
mov edx, dword [esp + 0x38]
push edx
lea eax, [esp + 0x24]
lea edi, [esp + 0x14]
call fcn.00403530
lea esi, [esp + 0x14]
test eax, eax
jne 0x42b68a
lea edi, [eax + 0x36]
call fcn.00402b00
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402650
push edi
mov edi, dword [esp + 0x40]
call fcn.00402cc0
mov ebp, dword [esp + 0x10]
jmp 0x40304f
mov edi, 0x4d
lea esi, [esp + 0x14]
call fcn.00402b00
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x403372
push esi
jmp 0x403046
mov edi, 0x49
lea esi, [esp + 0x14]
call fcn.00402b00
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x403387
push esi
jmp 0x403046
mov edi, 0x4c
lea esi, [esp + 0x14]
call fcn.00402b00
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x403041
jmp 0x42b529
cmp ax, 0x39
jbe 0x4030ec
jmp 0x402fd2
mov edi, 0x4b
lea esi, [esp + 0x14]
call fcn.00402b00
inc ebp
cmp word [ebx + ebp*2], 0x3d
je 0x42b4f7
lea ecx, [esp + 0x14]
push ecx
jmp 0x403046
mov esi, dword [esp + 0x14]
test esi, esi
je 0x40306f
mov ecx, esi
call fcn.00402620
push esi
call fcn.004112ef
add esp, 4
jmp 0x40306f
cmp word [esp + 0x1c], 0x3f
jg 0x40300c
jmp 0x42b5a9
mov edi, 0x4e
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
mov edi, 0x4f
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
lea esi, [esp + 0x20]
inc ebp
call fcn.00403770
movzx eax, word [ebx + ebp*2]
cmp ax, 0x5a
ja 0x4032f5
cmp ax, 0x41
jae 0x403301
cmp ax, 0x61
jb 0x40330e
cmp ax, 0x7a
ja 0x40330e
push eax
lea eax, [esp + 0x24]
call fcn.00403470
inc ebp
jmp 0x4032e5
cmp ax, 0x30
jae 0x42b4be
cmp ax, 0x5f
je 0x403301
cmp dword [esp + 0x24], 0
je 0x42b62f
lea eax, [esp + 0x20]
call fcn.00402ae0
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov edi, 0x32
lea esi, [esp + 0x14]
call fcn.00402b00
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402650
push edi
jmp 0x403046
cmp si, 0x7a
jbe 0x403103
jmp 0x402ed9
mov edi, 0x56
lea esi, [esp + 0x14]
inc ebp
call fcn.00402b00
push esi
jmp 0x403046
mov edi, 0x52
lea esi, [esp + 0x14]
inc ebp
call fcn.00402b00
push esi
jmp 0x403046
movzx eax, word [ebx + ebp*2 + 2]
inc ebp
sub eax, 0x3d
lea esi, [esp + 0x14]
je 0x42b54d
sub eax, 1
je 0x42b53d
mov edi, 0x43
call fcn.00402b00
lea edx, [esp + 0x14]
push edx
jmp 0x403046
inc ebp
cmp word [ebx + ebp*2], 0x3d
lea esi, [esp + 0x14]
je 0x42b55d
mov edi, 0x42
call fcn.00402b00
jmp 0x403041
mov dword [esp + 0x2c], ebp
jmp 0x402e2b
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
push ecx
call fcn.004112ef
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0xc]
add esp, 4
push eax
call fcn.004112ef
add esp, 4
jmp 0x402f55
mov ebp, dword [esp + 0x10]
cmp si, 0x2e
jne 0x402ec5
lea esi, [esp + 0x20]
inc ebp
call fcn.00403770
movzx eax, word [ebx + ebp*2]
cmp ax, 0x41
jb 0x42b451
cmp ax, 0x5a
jbe 0x42b4ae
cmp ax, 0x61
jb 0x42b465
cmp ax, 0x7a
jbe 0x42b4ae
cmp ax, 0x30
jb 0x42b479
cmp ax, 0x39
jbe 0x42b4ae
cmp ax, 0x5f
je 0x42b4ae
cmp dword [esp + 0x24], 0
je 0x42b5d0
mov edi, 0x35
lea esi, [esp + 0x14]
call fcn.00402b00
lea esi, [esp + 0x20]
lea edi, [esp + 0x14]
call fcn.00402650
jmp 0x403041
push eax
lea eax, [esp + 0x24]
call fcn.00403470
inc ebp
jmp 0x42b439
cmp ax, 0x39
jbe 0x403301
jmp 0x403318
mov edi, 0x4a
lea esi, [esp + 0x14]
call fcn.00402b00
inc ebp
cmp word [ebx + ebp*2], 0x3d
jne 0x403041
mov edi, 0x53
inc ebp
call fcn.00402b00
jmp 0x403041
mov edi, 0x54
lea esi, [esp + 0x14]
inc ebp
call fcn.00402b00
jmp 0x403263
mov edi, 0x51
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
inc ebp
jmp 0x40304f
mov edi, 0x55
lea esi, [esp + 0x14]
inc ebp
call fcn.00402b00
jmp 0x403041
mov edi, 0x44
call fcn.00402b00
inc ebp
jmp 0x4033c2
mov edi, 0x46
call fcn.00402b00
inc ebp
jmp 0x4033c2
mov edi, 0x45
call fcn.00402b00
inc ebp
jmp 0x403041
test ebp, ebp
jne case.0x402f26.27
cmp word [ebx + 2], bp
jne case.0x402f26.27
mov ecx, dword [esp + 0x38]
cmp ecx, dword [0x4a8e90]
jl case.0x402f26.27
mov ebp, 1
jmp 0x40304f
mov edi, 0x50
call fcn.00402b00
inc ebp
jmp 0x403041
cmp dword [esp + 0x14], 0
je 0x40300c
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004436f6
jmp 0x40300c
mov dword [esp + 0x14], 0
jmp 0x403041
mov ecx, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push ecx
call fcn.0045ffa9
lea ecx, [esp + 0x20]
call fcn.00402620
lea edx, [esp + 0x14]
push edx
call fcn.0044b453
mov eax, 1
jmp 0x4030b5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x38]
push eax
push 0x138c
push ecx
call fcn.0045ffa9
lea ecx, [esp + 0x20]
call fcn.00402620
lea edx, [esp + 0x14]
push edx
call fcn.0044b453
mov eax, 1
jmp 0x4030b5
mov eax, dword [esp + 0x38]
dec ebp
push ebp
push 0x138b
push eax
call fcn.0045ffa9
jmp 0x42b66d
mov edx, dword [esp + 0x38]
push ebp
push 0x1388
push edx
call fcn.0045ffa9
mov edi, 0x7f
lea esi, [esp + 0x14]
call fcn.00402b00
mov edi, dword [esp + 0x3c]
push esi
call fcn.00402cc0
lea ecx, [esp + 0x20]
call fcn.00402620
lea ecx, [esp + 0x14]
push ecx
call fcn.0044b453
mov eax, 1
jmp 0x4030b5
mov edi, 0x7f
call fcn.00402b00
mov edi, dword [esp + 0x3c]
lea edx, [esp + 0x14]
push edx
call fcn.00402cc0
lea ecx, [esp + 0x20]
call fcn.00402620
lea eax, [esp + 0x14]
push eax
call fcn.0044b453
mov eax, 1
jmp 0x4030b5