Function at 0x180096af0
Capabilities:
Parse credit card information
Query environment variable

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15d, dword [rbp + 0x60]
mov r12, r9
mov ebx, dword [rbp - 0x2c]
mov r11, rdx
mov r13, rcx
lea eax, [r15 - 0xb]
mov dword [rbp - 4], eax
cmp r15d, eax
jbe case.0x180096b99.192
mov r9d, dword [0x1800db460]
lea rcx, [0x180000000]
mov r10d, dword [0x1800db464]
xor r14d, r14d
mov rdx, qword [0x1800db418]
mov r8d, dword [0x1800db310]
lea esi, [r14 + 1]
lea edi, [rsi + 0x3e]
nop dword [rax]
nop word [rax + rax]
lea eax, [r15 - 0xbb]
cmp eax, 0x25
ja case.default.0x180096b99
movzx eax, byte [rcx + rax + 0x976fc]
mov ecx, dword [rcx + rax*4 + 0x976cc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
cmp dword [0x1800dbff0], 0
mov qword [0x1800dbfe8], r14
je 0x180096bc2
mov r10d, 0xffffffff
mov dword [0x1800db464], r10d
mov r9d, r10d
mov dword [0x1800db460], r10d
mov dword [rbp + 0x60], 0xbd
nop dword [rax]
cmp dword [0x1800dbff0], 0
jne 0x180096be2
cmp byte [rdx], 0
jne 0x180096f59
mov r15d, 0x7e
nop dword [rax + rax]
cmp r15d, 0x6d44
ja 0x180096f59
cmp r15d, 0x7e
je 0x180096f46
cmp r15d, 0x24ea
je 0x180096d16
cmp r15d, 0x4956
jne 0x180096d0a
cmp byte [rdx + 1], 0
lea rax, [rdx + 1]
je 0x180096d0a
mov qword [0x1800db418], rax
mov rdx, rax
cmp byte [rax], 0x2d
jne 0x180096d0a
cmp byte [rax + 1], 0
jne 0x180096d0a
mov r14d, 0x117
mov eax, r14d
sub eax, 0x117
je 0x180096c6f
cmp eax, 3
jne 0x180096cf6
mov eax, 0xffffffff
jmp 0x18009718e
inc r8d
lea rax, [0x1800c80fb]
mov dword [0x1800db310], r8d
mov rdx, rax
mov qword [0x1800db418], rax
cmp r10d, 0xffffffff
je 0x180096cdf
mov dword [rbp - 0x28], r8d
lea rax, [rbp - 0x28]
mov dword [rbp - 0x38], r9d
lea r8, [rbp - 0x40]
mov r9d, 0x94
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x40], r10d
mov rcx, r12
call fcn.1800acbf0
mov r8d, dword [0x1800db310]
mov eax, dword [0x1800db460]
sub eax, dword [0x1800db464]
mov rdx, qword [0x1800db418]
add r8d, eax
mov dword [0x1800db310], r8d
mov r10d, 0xffffffff
mov dword [0x1800db464], r10d
mov r9d, r10d
mov dword [0x1800db460], r10d
add r14d, 3
cmp r14d, 0x11d
jb 0x180096c52
xor r14d, r14d
add r15d, 0x246c
jmp 0x180096bf0
mov rax, qword [rbp + 0x70]
cmp r8d, dword [rax]
jl 0x180096e03
mov r14d, 0x62
nop dword [rax]
cmp r14d, 0x62
je 0x180096de1
cmp r14d, 0x188
je 0x180096d77
cmp r14d, 0x2ae
je 0x180096d5e
cmp r14d, 0x3d4
je 0x180096c65
jmp 0x180096def
mov r10d, 0xffffffff
mov dword [0x1800db464], r10d
mov r9d, r10d
mov dword [0x1800db460], r10d
jmp 0x180096def
cmp r10d, 0xffffffff
je 0x180096dcf
mov dword [rbp - 0x38], r8d
lea rax, [rbp - 0x38]
mov dword [rbp - 0x28], r9d
lea r8, [rbp - 0x40]
mov r9d, 0x94
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x40], r10d
mov rcx, r12
call fcn.1800acbf0
mov r8d, dword [0x1800db310]
mov r9d, dword [0x1800db460]
mov eax, r9d
mov r10d, dword [0x1800db464]
sub eax, r10d
add r8d, eax
mov dword [0x1800db310], r8d
jmp 0x180096def
cmp r9d, 0xffffffff
je 0x180096def
mov r8d, r9d
mov dword [0x1800db310], r9d
jmp 0x180096def
lea rax, [0x1800c80fb]
mov qword [0x1800db418], rax
add r14d, 0x126
cmp r14d, 0x498
jbe 0x180096d30
movsxd rax, r8d
mov rdx, qword [r12 + rax*8]
mov qword [0x1800db418], rdx
cmp byte [rdx], 0x2d
jne 0x180096e20
cmp byte [rdx + 1], 0
jne 0x180096f19
mov r14d, 0x44
cmp r14d, 0x44
je 0x180096ee9
cmp r14d, 0x21bc
je 0x180096e4e
cmp r14d, 0x4334
jne 0x180096f05
xor r14d, r14d
jmp 0x180096bd0
test byte [r13], sil
je 0x180096c65
cmp r9d, 0xffffffff
jne 0x180096e77
mov r9d, r8d
mov dword [0x1800db460], r8d
inc r8d
mov dword [0x1800db310], r8d
jmp 0x180096f05
cmp r10d, 0xffffffff
je 0x180096edd
mov dword [rbp - 0x38], r8d
lea rax, [rbp - 0x38]
mov dword [rbp - 0x28], r9d
lea r8, [rbp - 0x40]
mov r9d, 0x94
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x28]
mov dword [rbp - 0x40], r10d
mov rcx, r12
call fcn.1800acbf0
mov r9d, dword [0x1800db460]
mov r10d, 0xffffffff
mov r8d, dword [0x1800db310]
mov eax, r8d
sub eax, dword [0x1800db464]
mov rdx, qword [0x1800db418]
add r9d, eax
mov dword [0x1800db460], r9d
mov dword [0x1800db464], r10d
inc r8d
mov dword [0x1800db310], r8d
jmp 0x180096f05
lea rax, [0x1800c80fb]
mov qword [0x1800db418], rax
mov rdx, rax
test byte [r13], 2
jne 0x1800974db
add r14d, 0x2178
cmp r14d, 0x6468
jbe 0x180096e26
cmp r9d, 0xffffffff
je 0x180096d07
xor r14d, r14d
cmp r10d, 0xffffffff
jne 0x180096d0a
mov r10d, r8d
mov dword [0x1800db464], r8d
add r15d, 0x246c
jmp 0x180096bf0
mov dword [0x1800dbff0], r14d
add r15d, 0x246c
jmp 0x180096bf0
mov r11, qword [rbp + 0x48]
mov r15d, dword [rbp + 0x60]
jmp case.0x180096b99.198
mov r14, qword [rbp + 0x68]
test r14, r14
je 0x180096c65
lea rcx, str.Da_pentru_toate
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xor edx, edx
test rax, rax
mov ecx, edx
movzx eax, byte [r14]
setne cl
mov dword [rbp - 8], ecx
cmp al, 0x2d
jne 0x180096f9c
or dword [r13], 2
jmp 0x180096fa9
test ecx, ecx
jne 0x180096fa4
cmp al, 0x2b
jne 0x180096fb1
and dword [r13], 0xfffffffe
movzx eax, byte [r14]
cmp al, 0x2b
je 0x180096fdd
cmp al, 0x2d
je 0x180096fdd
mov rdx, qword [0x1800db418]
mov r8d, dword [0x1800db310]
mov r11, qword [rbp + 0x48]
mov r9d, dword [0x1800db460]
xor r14d, r14d
mov r10d, dword [0x1800db464]
jmp case.0x180096b99.198
inc r14
mov qword [rbp + 0x68], r14
jmp 0x180096fb5
lea rcx, [0x180000000]
test r8d, r8d
jne case.default.0x180096b99
mov dword [0x1800dbff0], esi
mov r8d, esi
mov dword [0x1800db310], esi
jmp case.default.0x180096b99
test r11, r11
je 0x180097102
movsxd rax, r8d
cmp rdx, qword [r12 + rax*8]
je 0x180097102
cmp byte [rdx], 0x2d
je 0x180097030
test byte [r13], 4
je 0x180097102
mov r15, qword [rbp + 0x68]
mov r14d, 0x6e
nop word [rax + rax]
cmp r14d, 0x6e
je 0x1800970da
cmp r14d, 0x3ade
jne 0x1800970e5
movsx eax, byte [rdx]
cmp al, 0x2d
jne 0x1800970ba
inc rdx
mov dword [0x1800db468], esi
mov qword [0x1800db418], rdx
mov ecx, dword [rbp - 0x20]
mov eax, dword [r13]
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x40], eax
mov r9, r12
mov rax, qword [rbp + 0x50]
mov r8d, 0x96
mov qword [rsp + 0x30], rax
mov dword [rbp - 0x38], ecx
lea rcx, [rbp - 0x40]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r11
call fcn.1800a5fb0
cmp eax, 0xffffffff
jne 0x1800974fa
mov rdx, qword [0x1800db418]
mov r11, qword [rbp + 0x48]
jmp 0x1800970e5
cmp al, 0x3a
je 0x18009706e
mov edx, eax
mov rcx, r15
call sub.VCRUNTIME140.dll_strchr
mov ecx, dword [rbp - 0x20]
test rax, rax
mov r11, qword [rbp + 0x48]
cmovne ecx, esi
mov dword [rbp - 0x20], ecx
jmp 0x180097071
xor eax, eax
mov dword [rbp - 0x20], eax
mov dword [0x1800db468], eax
add r14d, 0x3a70
cmp r14d, 0x74e0
jbe 0x180097040
mov r8d, dword [0x1800db310]
jmp 0x180097106
mov r15, qword [rbp + 0x68]
movsx r9d, byte [rdx]
inc rdx
mov dword [rbp - 0x30], r9d
mov qword [0x1800db418], rdx
cmp r9d, 0x3a
je 0x18009715a
cmp r9d, 0x2d
jne 0x180097129
cmp byte [rdx], 0
jne 0x18009715a
mov r14, qword [rbp + 0x68]
mov edx, r9d
mov rcx, r14
call sub.VCRUNTIME140.dll_strchr
mov rdx, qword [0x1800db418]
mov r8d, dword [0x1800db310]
mov r9d, dword [rbp - 0x30]
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x180097232
mov r15, r14
mov r14d, 0x122
cmp r14d, 0x122
je 0x180097207
cmp r14d, 0x4880
je 0x1800971b0
cmp r14d, 0x8fde
je 0x1800971a9
cmp r14d, 0xd73c
jne 0x180097216
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, edi
mov dword [rbp - 0x2c], ebx
jmp 0x180097216
cmp byte [rdx], 0
jne 0x1800971bf
inc r8d
mov dword [0x1800db310], r8d
cmp dword [0x1800db314], 0
je 0x1800971fe
cmp byte [r15], 0x3a
je 0x1800971fe
cmp dword [rbp - 8], 0
lea rax, str.Active_license_found
lea rcx, str._s:_Failed_to_unlink
mov edx, r9d
cmovne rcx, rax
call fcn.1800bd390
mov rdx, qword [0x1800db418]
mov r8d, dword [0x1800db310]
mov r9d, dword [rbp - 0x30]
mov dword [0x1800db318], r9d
jmp 0x180097216
cmp r9d, 0x2d
jne 0x180097216
cmp byte [rdx], 0
je 0x180096c65
add r14d, 0x475e
cmp r14d, 0x11d78
jbe 0x180097160
mov r14, qword [rbp + 0x68]
mov rax, qword [rbp - 0x18]
mov r11, qword [rbp + 0x48]
test r11, r11
je 0x1800973cc
cmp r9d, 0x57
jne 0x1800973cc
cmp byte [rax + 1], 0x3b
jne 0x1800973cc
mov r15d, 0xe6
jmp 0x180097264
mov r14, qword [rbp + 0x68]
mov eax, r15d
sub eax, 0xe3
je case.0x180096b99.192
sub eax, esi
je 0x1800973a9
sub eax, esi
je 0x180097354
cmp eax, esi
jne 0x1800973af
cmp byte [rdx], 0
jne 0x180097348
mov rax, qword [rbp + 0x70]
inc r8d
mov dword [0x1800db310], r8d
cmp r8d, dword [rax]
jl 0x18009733a
mov r14d, 0x39
mov eax, r14d
sub eax, 0x39
je 0x1800972e1
sub eax, esi
je 0x1800972d8
cmp eax, esi
jne 0x18009731e
mov rax, qword [rbp + 0x68]
mov r14d, 0x3a
cmp byte [rax], r14b
cmove edi, r14d
mov eax, edi
jmp 0x18009718e
mov dword [0x1800db318], r9d
jmp 0x18009731e
cmp dword [0x1800db314], 0
lea rax, [0x1800c80fb]
mov rdx, rax
mov qword [0x1800db418], rax
je 0x18009731e
mov rax, qword [rbp + 0x68]
cmp byte [rax], 0x3a
je 0x18009731e
mov edx, r9d
lea rcx, str.__IgnoreSpecificDefaultLibraries_
call fcn.1800bd390
mov rdx, qword [0x1800db418]
mov r9d, dword [rbp - 0x30]
inc r14d
cmp r14d, 0x3c
jb 0x1800972b0
mov r8d, dword [0x1800db310]
mov dword [0x1800db468], 2
jmp 0x1800973af
movsxd rax, r8d
mov rdx, qword [r12 + rax*8]
mov qword [0x1800db418], rdx
mov dword [0x1800db468], 2
jmp 0x1800973af
mov eax, dword [r13]
lea rdx, [rbp - 0x38]
mov dword [rbp - 0x40], eax
lea rcx, [rbp - 0x40]
xor eax, eax
mov r9, r12
mov dword [rbp - 0x38], eax
mov r8d, 0x96
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r11
call fcn.1800a5fb0
mov r8d, dword [0x1800db310]
mov r9d, eax
mov dword [rbp - 0x30], eax
lea rax, [0x1800c80fb]
mov rdx, rax
mov qword [0x1800db418], rax
jmp 0x1800973af
mov ebx, r9d
mov dword [rbp - 0x2c], ebx
mov r11, qword [rbp + 0x48]
dec r15d
cmp r15d, 0xe2
ja 0x180097260
mov r15d, dword [rbp + 0x60]
jmp 0x180096fc3
mov r15d, dword [rbp + 0x60]
jmp 0x180096fc7
mov r14, qword [rbp - 0x10]
xor edx, edx
mov ecx, dword [r12]
add rcx, rcx
mov rax, qword [r14 + 0x20]
mov word [rax + rcx*8], dx
mov ecx, dword [r12]
mov rax, qword [r14 + 0x20]
add rcx, rcx
xor r14d, r14d
mov ebx, r14d
mov dword [rbp - 0x2c], ebx
mov qword [rax + rcx*8 + 8], r14
mov r9d, dword [0x1800db460]
mov r10d, dword [0x1800db464]
mov rdx, qword [0x1800db418]
mov r8d, dword [0x1800db310]
jmp case.0x180096b99.198
mov eax, dword [r12]
mov r14, qword [rbp - 0x10]
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 0x18]
cmp dword [rax + rcx*4], 0
je 0x18009750d
xor r8d, r8d
mov dword [rax + rcx*4], r8d
mov edx, dword [r12]
mov rax, qword [r14 + 0x20]
mov ecx, edx
shl rcx, 4
add rax, 8
add rcx, rax
cmp qword [rcx], r8
je 0x180097488
mov qword [rsp + 0x38], r8
xor r9d, r9d
mov dword [rsp + 0x30], 0xc7
xor edx, edx
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], r8
call fcn.180059440
mov edx, dword [r12]
mov r11, qword [rbp + 0x48]
mov eax, edx
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 0x18]
mov edx, dword [rax + rcx*4 + 4]
mov rax, qword [r14 + 0x10]
xor r14d, r14d
mov dword [rax + rdx*4], r14d
jmp 0x180097403
mov rax, qword [rbp + 0x70]
mov rax, qword [rax]
mov rcx, qword [rax + 0x18]
mov qword [rbp - 0x10], rcx
mov eax, dword [rcx + 4]
cmp dword [r12], eax
ja 0x180097517
lea rcx, [0x180000000]
dec r15d
mov dword [rbp + 0x60], r15d
cmp r15d, dword [rbp - 4]
ja 0x180096b70
jmp case.0x180096b99.192
movsxd rax, r8d
inc r8d
mov rcx, qword [r12 + rax*8]
mov eax, esi
mov qword [0x1800dbfe8], rcx
mov dword [0x1800db310], r8d
jmp 0x18009718e
lea rcx, [0x1800c80fb]
mov qword [0x1800db418], rcx
jmp 0x18009718e
mov eax, 2
jmp 0x18009718e
mov eax, 0x7f2bb747
jmp 0x18009718e
mov rax, qword [rbp + 0x70]
lea rdx, [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xaa
mov rax, qword [rax]
mov qword [rbp - 0x10], rax
call fcn.180042f80
jmp 0x18009718e
mov rcx, qword [rbp - 0x18]
mov r13d, dword [rbp - 0x30]
inc rcx
mov qword [rbp - 0x18], rcx
cmp byte [rcx], 0x3a
je 0x180097574
cmp byte [rdx], 0
jne 0x1800976b7
inc r8d
mov eax, r13d
mov dword [0x1800db310], r8d
jmp 0x18009718e
mov r15d, 0x129
mov r14d, 0x3a
mov eax, r15d
sub eax, 0x127
je 0x18009769d
sub eax, 1
je 0x18009768a
cmp eax, 1
jne 0x1800976a7
xor eax, eax
mov qword [0x1800dbfe8], rax
cmp byte [rdx], al
je 0x1800975b9
mov qword [0x1800dbfe8], rdx
jmp 0x1800976a7
cmp byte [rcx + 1], r14b
je 0x1800976a7
mov rax, qword [rbp + 0x70]
inc r8d
mov dword [0x1800db310], r8d
cmp r8d, dword [rax]
jl 0x180097676
mov esi, 0xda
nop
cmp esi, 0xda
je 0x180097646
cmp esi, 0x8096
je 0x18009761c
cmp esi, 0x10052
je 0x180097606
cmp esi, 0x1800e
je case.0x180096b99.192
jmp 0x180097657
mov rax, qword [rbp + 0x68]
mov ebx, edi
mov dword [0x1800db318], r13d
cmp byte [rax], r14b
cmove ebx, r14d
jmp 0x180097657
cmp dword [0x1800db314], 0
je 0x180097657
mov rax, qword [rbp + 0x68]
cmp byte [rax], r14b
je 0x180097657
mov edx, r13d
lea rcx, str.__IgnoreSpecificDefaultLibraries_
call fcn.1800bd390
mov rdx, qword [0x1800db418]
jmp 0x180097657
lea rax, [0x1800c80fb]
mov rdx, rax
mov qword [0x1800db418], rax
add esi, 0x7fbc
cmp esi, 0x1fef0
jbe 0x1800975e0
mov r8d, dword [0x1800db310]
mov rcx, qword [rbp - 0x18]
jmp 0x1800976a7
movsxd rax, r8d
mov rcx, qword [r12 + rax*8]
mov qword [0x1800dbfe8], rcx
mov rcx, qword [rbp - 0x18]
jmp 0x1800976a7
lea rax, [0x1800c80fb]
mov rdx, rax
mov qword [0x1800db418], rax
jmp 0x1800976a7
inc r8d
mov dword [0x1800db310], r8d
dec r15d
cmp r15d, 0x126
ja 0x180097580
mov eax, r13d
jmp 0x18009718e
mov word [rbp - 0x2c], r14w
mov eax, dword [rbp - 0x2c]
jmp 0x18009718e