Function at 0x4538d5
Capabilities:
Parse credit card information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
push esi
push edi
mov eax, 0x4d8d1c
mov edi, ecx
push eax
mov dword [ebp - 0x18], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [edi + 9]
xor esi, esi
cmp dword [ebp + 0x10], esi
setl byte [ebp - 0xd]
and al, 0x11
cmp byte [ebp - 0xd], 0
mov byte [ebp - 0xe], al
jne 0x45390e
test byte [ebp + 0x14], 0x40
je 0x453912
mov byte [ebp - 0xe], 0
and byte [ebp + 0x14], 1
push ebx
push 0x50
pop eax
push eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x48], eax
call fcn.004441bf
or dword [ebp - 0x28], 0xffffffff
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0xc]
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], esi
call fcn.0044b919
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x44]
jae 0x4540ad
cmp word [ebx], 0
je 0x4540ad
lea ecx, [ebp - 0x60]
call fcn.0044ba0b
push 0x25
pop esi
cmp word [ebx], si
je 0x4539a6
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 4]
sar ecx, 1
jmp 0x4539a1
mov ax, word [ebx]
test ax, ax
je 0x453958
cmp ax, si
je 0x453958
mov edx, dword [ebp - 4]
mov word [edx], ax
add dword [ebp - 4], 2
inc ebx
inc ebx
dec ecx
jns 0x453988
jmp 0x453958
cmp byte [ebp + 0x14], 0
mov dword [ebp - 0x1c], ebx
je 0x453b4a
lea edx, [ebx + 2]
mov cx, word [edx]
cmp cx, si
jne 0x4539cd
mov eax, dword [ebp - 4]
mov word [eax], si
add dword [ebp - 4], 2
add ebx, 4
jmp 0x453958
cmp cx, 0x23
jne 0x453a15
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x453955
mov ecx, dword [ecx + 0x38]
mov eax, dword [eax + ecx*4 + 8]
mov cx, word [eax]
test cx, cx
je 0x453955
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc eax
inc eax
xor ecx, ecx
mov cx, word [eax]
test cx, cx
jne 0x4539fa
jmp 0x453958
cmp cx, 0x2a
jne 0x453a34
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x453955
mov ecx, dword [ecx + 0x38]
jmp 0x453a52
cmp cx, 0x40
jne 0x453a66
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x453955
mov ecx, dword [ecx + 0x38]
inc ecx
mov esi, dword [eax + ecx*4]
push esi
mov dword [ebp - 0x28], ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
jmp 0x453bd6
push ecx
call fcn.00443c3d
add esp, 4
test al, al
jne 0x453a94
cmp cx, 0x7e
jb 0x453b4a
xor eax, eax
mov ax, word [ebx + 4]
push eax
call fcn.00443c3d
add esp, 4
test al, al
je 0x453b4a
and dword [ebp - 0x20], 0
cmp cx, 0x7e
jb 0x453aa3
mov dword [ebp - 0x20], esi
mov ebx, edx
inc ebx
inc ebx
xor esi, esi
mov si, word [ebx]
mov dword [ebp + 8], ebx
xor ecx, ecx
xor edi, edi
push esi
call fcn.00443c3d
add esp, 4
test al, al
je 0x453af2
push 0
push 0xa
push edi
push ecx
call fcn.004aa1b0
mov ecx, eax
movzx eax, si
mov edi, edx
cdq
add ecx, eax
adc edi, edx
add ecx, 0xffffffd0
adc edi, 0xffffffff
inc ebx
inc ebx
xor esi, esi
mov si, word [ebx]
push esi
call fcn.00443c3d
add esp, 4
test al, al
jne 0x453abe
mov dword [ebp + 8], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
cdq
cmp edi, edx
ja 0x453955
jb 0x453b0b
cmp ecx, eax
jae 0x453955
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x3c]
test eax, eax
je 0x453955
mov esi, dword [eax + ecx*4]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebp - 0x20], 0
mov edi, eax
je 0x453bd6
cmp word [esi], 0x22
jne 0x453bd6
cmp word [esi + edi*2 - 2], 0x22
jne 0x453b42
dec edi
dec edi
inc esi
inc esi
jmp 0x453bd6
lea edi, [ebx + 2]
mov esi, edi
jmp 0x453b53
inc esi
inc esi
cmp word [esi], 0x26
je 0x453b51
mov ebx, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 7
push str.RANDOM_
push esi
call ebx
test eax, eax
jne 0x453b7a
call fcn.00440360
and edx, 0x7fffffff
jmp 0x453b96
push 7
push str.__THIS_
push esi
call ebx
test eax, eax
jne 0x453c19
mov eax, dword [ebp - 0x18]
add eax, 0x75bd036
xor edx, edx
and word [ebp - 0x104], 0
push edx
push eax
lea eax, [ebp - 0x104]
lea ebx, [esi + 0xe]
push eax
mov dword [ebp + 8], ebx
call fcn.00497e21
and word [ebp - 0x62], 0
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
cmp edi, 1
jge 0x453bd0
xor edi, edi
lea esi, [ebp - 0x104]
lea eax, [edi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044b990
cmp dword [ebp - 0x28], 0
jl 0x453bf8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0x3c]
mov esi, dword [eax + ecx*4]
or dword [ebp - 0x28], 0xffffffff
dec edi
js 0x453955
lea eax, [edi + 1]
mov cx, word [esi]
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc esi
inc esi
dec eax
jne 0x453c02
jmp 0x453958
mov ecx, edi
xor eax, eax
jmp 0x453c36
cmp ax, 0x25
je 0x453c41
cmp ax, 0x3d
je 0x453c41
call fcn.0040f4c7
test al, al
jne 0x453c41
inc ecx
inc ecx
mov ax, word [ecx]
test ax, ax
mov dword [ebp + 8], ecx
jne 0x453c1f
mov ebx, dword [ebp + 8]
movsx eax, byte [ebp - 0xe]
mov esi, ebx
sub esi, dword [ebp - 0x1c]
mov byte [ebp - 5], 0
sar esi, 1
cmp word [ebx], 0x25
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x3c], eax
je 0x453c8f
lea eax, [esi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044b990
dec esi
js 0x453955
mov ecx, dword [ebp - 0x1c]
lea eax, [esi + 1]
mov dx, word [ecx]
mov esi, dword [ebp - 4]
mov word [esi], dx
add dword [ebp - 4], 2
inc ecx
inc ecx
dec eax
jne 0x453c78
jmp 0x453955
cmp byte [ebp - 0xd], 0
jne 0x453ccf
mov ax, word [edi]
cmp ax, 0x26
je 0x453caa
cmp byte [ebp - 0xe], 0
je 0x453ccf
cmp ax, 0x5e
je 0x453ccf
add dword [ebp + 8], 2
cmp word [edi], 0x26
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x30], edi
jne 0x453dd0
inc edi
inc edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x3c], 1
jmp 0x453dd0
add dword [ebp + 8], 2
mov eax, edi
cmp word [eax], 0x5e
mov dword [ebp - 0x1c], eax
jne 0x453ce7
inc eax
inc eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 5], 8
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
xor edi, edi
mov word [ecx], di
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0x7fffffff
jmp 0x453d15
mov cx, word [eax]
cmp cx, di
je 0x453d59
cmp cx, 0x3a
jne 0x453d13
cmp word [eax + 2], 0x7e
je 0x453d1e
inc eax
inc eax
cmp eax, ebx
mov dword [ebp - 0x14], eax
jb 0x453cfe
jmp 0x453d59
and word [eax], 0
add dword [ebp - 0x14], 4
mov edi, eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0044073a
mov eax, dword [ebp - 0x14]
mov ax, word [eax]
pop ecx
pop ecx
call fcn.00442774
test al, al
je 0x453d59
add dword [ebp - 0x14], 2
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0044073a
pop ecx
pop ecx
push dword [ebp - 0x48]
and word [ebx], 0
push dword [ebp - 0x24]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edx, dword [ebp - 0x24]
mov esi, eax
test esi, esi
mov dword [ebp - 0x34], esi
jle 0x453da2
cmp word [edx], 0
jne 0x453da2
add esi, 0x64
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x48], esi
call fcn.004441e6
push esi
push dword [ebp - 0x24]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edx, dword [ebp - 0x24]
mov esi, eax
mov dword [ebp - 0x34], esi
test edi, edi
mov word [ebx], 0x25
jne 0x453f91
cmp word [edx], di
jne 0x45407e
cmp byte [ebp - 5], 0
jne 0x453955
cmp byte [ebp - 0xd], 0
mov byte [ebp - 5], 1
jne 0x453955
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0xc], eax
xor esi, esi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], 0x7fffffff
jmp 0x453e11
mov cx, word [eax]
cmp cx, dx
je 0x453f45
cmp cx, 0x3a
jne 0x453e02
cmp word [eax + 2], 0x7e
je 0x453e1a
inc eax
inc eax
cmp cx, 0x3f
mov dword [ebp - 0xc], eax
je 0x453eeb
cmp eax, ebx
jb 0x453de9
jmp 0x453f45
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0xffffffffffffffff
push esi
push dword [ebp - 0x30]
mov word [eax], si
call fcn.004108b2
mov edi, eax
mov eax, dword [ebp - 0xc]
mov word [eax], 0x3a
add dword [ebp - 0xc], 4
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.0044073a
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov ax, word [ecx]
call fcn.00442774
test al, al
je 0x453e7e
lea eax, [ebp - 0x14]
push eax
inc ecx
lea eax, [ebp - 0xc]
inc ecx
push eax
mov dword [ebp - 0xc], ecx
call fcn.0044073a
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
jmp 0x453e7e
cmp ax, 0x25
je 0x453e88
inc ecx
inc ecx
mov dword [ebp - 0xc], ecx
mov ax, word [ecx]
cmp ax, si
jne 0x453e73
jmp 0x453e8e
add ecx, 2
mov dword [ebp + 8], ecx
cmp edi, esi
je 0x453f71
mov esi, dword [edi + 4]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edx
mov eax, esi
lea ebx, [esi + edx*2]
mov dword [ebp - 0xc], eax
jle 0x453ead
mov ecx, edx
test ecx, ecx
mov edi, dword [ebp - 0x14]
jl 0x453ff1
test edi, edi
jl 0x453ff1
test ecx, ecx
jle 0x454045
lea edx, [esi + ecx*2]
cmp esi, edx
jae 0x453fe9
cmp word [eax], 0
je 0x453fdf
inc eax
inc eax
cmp eax, edx
mov dword [ebp - 0xc], eax
jb 0x453ed3
jmp 0x453fe9
lea esi, [eax - 2]
mov word [esi], dx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], esi
jmp 0x453f04
inc ecx
inc ecx
cmp ax, 0x3a
mov dword [ebp - 0xc], ecx
je 0x453f0e
mov ax, word [ecx]
cmp ax, dx
jne 0x453ef9
jmp 0x453f11
mov dword [ebp - 0x20], ecx
cmp word [ebx], dx
je 0x453f45
cmp word [ebx + 2], 0x25
jne 0x453f45
lea eax, [ebx + 4]
cmp word [eax], 0x64
jne 0x453f45
jmp 0x453f30
cmp cx, 0x25
je 0x453f3d
inc eax
inc eax
mov dword [ebp - 0xc], eax
mov cx, word [eax]
cmp cx, dx
jne 0x453f28
jmp 0x453f45
mov ebx, eax
add eax, 2
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x18]
xor edi, edi
push edi
push 0xffffffffffffffff
push edi
push dword [ebp - 0x30]
mov word [ebx], di
call fcn.004108b2
cmp esi, edi
mov word [ebx], 0x25
je 0x453f69
mov word [esi], 0x3f
inc esi
inc esi
cmp eax, edi
jne 0x454028
cmp dword [ebp - 0x3c], 0
jne 0x453955
cmp byte [ebp - 5], 0
jne 0x453955
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 5], 1
jmp 0x453cea
mov word [edi], 0x3a
mov edi, dword [ebp - 0x20]
cmp edi, esi
jle 0x453f9f
mov edi, esi
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
jle 0x453fa8
mov ecx, esi
test edi, edi
jge 0x453fb8
mov eax, esi
neg eax
cmp edi, eax
jge 0x453fb6
mov edi, eax
add edi, esi
mov eax, esi
sub eax, edi
test ecx, ecx
jge 0x453fcb
lea esi, [eax + ecx]
test esi, esi
jge 0x453fd7
xor esi, esi
jmp 0x453fd7
cmp esi, eax
jle 0x453fd1
mov esi, eax
cmp esi, ecx
jle 0x453fd7
mov esi, ecx
lea edi, [edx + edi*2]
jmp 0x454080
sub eax, esi
sar eax, 1
and dword [ebp - 0x14], 0
mov ecx, eax
mov edi, dword [ebp - 0x14]
lea esi, [esi + ecx*2]
jmp 0x454045
cmp word [esi], 0
je 0x454006
cmp eax, ebx
jae 0x454006
inc eax
inc eax
mov dword [ebp - 0xc], eax
cmp word [eax], 0
jne 0x453ff7
sub eax, esi
sar eax, 1
test ecx, ecx
jge 0x454014
add ecx, eax
jns 0x454014
xor ecx, ecx
mov edi, dword [ebp - 0x14]
test edi, edi
jge 0x454023
sub eax, ecx
add edi, eax
jns 0x454023
xor edi, edi
lea esi, [esi + ecx*2]
jmp 0x454045
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
push ecx
push esi
lea ecx, [ebp - 0x34]
push ecx
push eax
call fcn.0044ba7b
mov edi, dword [ebp - 0x34]
add esp, 0x14
mov esi, eax
lea eax, [edi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044b990
jmp 0x45406d
mov ax, word [esi]
mov ecx, dword [ebp - 4]
mov word [ecx], ax
mov eax, dword [ebp - 4]
mov ax, word [eax]
add dword [ebp - 4], 2
inc esi
inc esi
test ax, ax
je 0x454075
dec edi
jns 0x454053
jmp 0x453955
sub dword [ebp - 4], 2
jmp 0x453955
mov edi, edx
lea eax, [esi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044b990
dec esi
js 0x453955
lea eax, [esi + 1]
mov cx, word [edi]
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc edi
inc edi
dec eax
jne 0x454096
jmp 0x453955
and word [eax], 0
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0xc]
sar eax, 1
inc eax
inc eax
push eax
call fcn.004441e6
mov esi, dword [ebp - 4]
sub esi, dword [ebp - 0x38]
lea ecx, [ebp - 0x24]
sar esi, 1
call fcn.0043dd41
mov eax, 0x4d8d1c
test eax, eax
pop ebx
je 0x4540e5
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov eax, esi
pop esi
leave
ret 0x10