Function at 0x43dee5
Capabilities:
Parse credit card information
Query environment variable

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0xc8
mov al, byte [ecx + 9]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x74]
test edi, edi
setl byte [ebp + 0x57]
and al, 0x11
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x48], ecx
mov byte [ebp + 0x63], al
jne 0x43df13
test byte [ebp + 0x78], 0x80
je 0x43df17
mov byte [ebp + 0x63], 0
mov eax, dword [ebp + 0x7c]
and byte [ebp + 0x78], 1
test eax, eax
mov byte [ebp + 0x46], 0
mov byte [ebp + 0x47], 0
je 0x43df2f
mov al, byte [eax]
mov byte [ebp + 0x47], al
push 0x50
pop eax
push eax
lea ecx, [ebp + 0x40]
mov dword [ebp + 0x34], eax
call fcn.00435d80
mov eax, 0x400
cmp edi, eax
jge 0x43df52
mov ecx, dword [ebp + 0x70]
push eax
mov edi, eax
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
mov dword [ebp + 0x58], eax
mov ebx, esi
mov dword [ebp + 0x5c], ebx
mov eax, dword [ebp + 0x58]
cmp ebx, eax
jae 0x43e6b7
mov edx, dword [ebp + 0x6c]
cmp word [edx], 0
je 0x43e6b7
add eax, 0xfffff81c
mov ecx, ebx
sub ecx, eax
test ecx, 0xfffffffe
jl 0x43dfb4
mov ecx, dword [ebp + 0x70]
add edi, 0x400
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
mov edx, dword [ebp + 0x6c]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
cmp word [edx], 0x25
je 0x43dfdf
mov ecx, 0x3dd
mov ax, word [edx]
test ax, ax
je 0x43df63
cmp ax, 0x25
je 0x43df63
mov word [ebx], ax
inc ebx
inc ebx
inc edx
inc edx
dec ecx
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x6c], edx
jns 0x43dfbf
jmp 0x43df63
cmp byte [ebp + 0x78], 0
mov dword [ebp + 0x50], edx
je 0x43e2ce
lea eax, [edx + 2]
mov cx, word [eax]
cmp cx, 0x25
mov dword [ebp + 0x74], eax
jne 0x43e00b
mov word [ebx], cx
inc ebx
inc ebx
add edx, 4
mov dword [ebp + 0x6c], edx
jmp 0x43df60
cmp cx, 0x23
jne 0x43e04e
mov ecx, dword [ebp + 0x48]
mov eax, dword [ecx + 0x3c]
add edx, 4
test eax, eax
mov dword [ebp + 0x6c], edx
je 0x43df63
mov ecx, dword [ecx + 0x38]
mov eax, dword [eax + ecx*4 + 8]
mov cx, word [eax]
test cx, cx
je 0x43df63
mov word [ebx], cx
inc ebx
inc ebx
inc eax
inc eax
xor ecx, ecx
mov cx, word [eax]
test cx, cx
jne 0x43e038
jmp 0x43df60
cmp cx, 0x2a
jne 0x43e0df
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x3c]
add edx, 4
test eax, eax
mov dword [ebp + 0x6c], edx
je 0x43df63
mov ecx, dword [ebp + 0x48]
mov ecx, dword [ecx + 0x38]
push dword [eax + ecx*4]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov dword [ebp + 0x74], eax
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e0b4
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x74]
mov eax, dword [ebp + 0x48]
mov ecx, dword [eax + 0x38]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + ecx*4]
js 0x43df63
mov ecx, dword [ebp + 0x74]
inc ecx
mov dx, word [eax]
mov word [ebx], dx
inc ebx
inc ebx
inc eax
inc eax
dec ecx
jne 0x43e0cd
jmp 0x43df60
cmp cx, 0x40
jne 0x43e172
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x3c]
add edx, 4
test eax, eax
mov dword [ebp + 0x6c], edx
je 0x43df63
mov ecx, dword [ebp + 0x48]
mov ecx, dword [ecx + 0x38]
push dword [eax + ecx*4 + 4]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov dword [ebp + 0x74], eax
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e146
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x74]
mov eax, dword [ebp + 0x48]
mov ecx, dword [eax + 0x38]
mov eax, dword [eax + 0x3c]
mov eax, dword [eax + ecx*4 + 4]
js 0x43df63
mov ecx, dword [ebp + 0x74]
inc ecx
mov dx, word [eax]
mov word [ebx], dx
inc ebx
inc ebx
inc eax
inc eax
dec ecx
jne 0x43e160
jmp 0x43df60
push ecx
call fcn.004103b8
add esp, 4
test al, al
jne 0x43e1a0
cmp cx, 0x7e
jb 0x43e2ce
xor eax, eax
mov ax, word [edx + 4]
push eax
call fcn.004103b8
add esp, 4
test al, al
je 0x43e2ce
and dword [ebp + 0x3c], 0
cmp cx, 0x7e
jb 0x43e1b4
mov edx, dword [ebp + 0x74]
mov dword [ebp + 0x3c], 0x25
inc edx
inc edx
mov dword [ebp + 0x6c], edx
movzx edx, word [edx]
xor ecx, ecx
and dword [ebp + 0x28], ecx
push edx
mov dword [ebp + 0x74], edx
call fcn.004103b8
add esp, 4
test al, al
je 0x43e211
push 0
push 0xa
push dword [ebp + 0x28]
push ecx
call fcn.0047fe80
mov ecx, eax
movzx eax, word [ebp + 0x74]
mov ebx, edx
cdq
add ecx, eax
adc ebx, edx
add ecx, 0xffffffd0
adc ebx, 0xffffffff
add dword [ebp + 0x6c], 2
mov eax, dword [ebp + 0x6c]
movzx eax, word [eax]
push eax
mov dword [ebp + 0x28], ebx
mov dword [ebp + 0x74], eax
call fcn.004103b8
add esp, 4
test al, al
jne 0x43e1d1
mov ebx, dword [ebp + 0x5c]
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x38]
cdq
cmp dword [ebp + 0x28], edx
mov dword [ebp + 0x18], eax
ja 0x43df63
jb 0x43e22e
cmp ecx, eax
jae 0x43df63
mov eax, dword [ebp + 0x48]
mov eax, dword [eax + 0x3c]
test eax, eax
je 0x43df63
mov eax, dword [eax + ecx*4]
push eax
mov dword [ebp + 0x4c], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp dword [ebp + 0x3c], 0
mov dword [ebp + 0x74], eax
je 0x43e271
mov eax, dword [ebp + 0x4c]
cmp word [eax], 0x22
jne 0x43e271
mov ecx, dword [ebp + 0x74]
cmp word [eax + ecx*2 - 2], 0x22
jne 0x43e269
dec dword [ebp + 0x74]
dec dword [ebp + 0x74]
inc eax
inc eax
mov dword [ebp + 0x4c], eax
mov eax, dword [ebp + 0x74]
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e2aa
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x74]
js 0x43df63
mov eax, dword [ebp + 0x74]
inc eax
mov ecx, dword [ebp + 0x4c]
mov cx, word [ecx]
add dword [ebp + 0x4c], 2
mov word [ebx], cx
inc ebx
inc ebx
dec eax
jne 0x43e2b7
jmp 0x43df60
push 8
push 0x49b470
push dword [ebp + 0x6c]
call dword [sym.imp.SHLWAPI.DLL_StrCmpNIW]
test eax, eax
jne 0x43e37d
add dword [ebp + 0x6c], 0x10
and word [ebp - 0x64], ax
call fcn.00432a01
and edx, 0x7fffffff
push edx
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.004752ea
and word [ebp - 0x26], 0
add esp, 0xc
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp eax, 1
mov dword [ebp + 0x74], eax
jge 0x43e322
and dword [ebp + 0x74], 0
mov eax, dword [ebp + 0x74]
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e35b
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x74]
lea eax, [ebp - 0x64]
js 0x43df63
mov ecx, dword [ebp + 0x74]
inc ecx
mov dx, word [eax]
mov word [ebx], dx
inc ebx
inc ebx
inc eax
inc eax
dec ecx
jne 0x43e36b
jmp 0x43df60
mov edx, dword [ebp + 0x6c]
add edx, 2
mov eax, edx
jmp 0x43e395
cmp cx, 0x25
je 0x43e3a0
cmp cx, 0x3d
je 0x43e3a0
inc eax
inc eax
mov cx, word [eax]
test cx, cx
mov dword [ebp + 0x6c], eax
jne 0x43e387
mov ecx, dword [ebp + 0x50]
mov dword [ebp + 0x20], ecx
mov ecx, eax
sub ecx, dword [ebp + 0x50]
mov dword [ebp + 0x38], eax
sar ecx, 1
cmp word [eax], 0x25
mov dword [ebp + 0x3c], ecx
movsx ecx, byte [ebp + 0x63]
mov byte [ebp + 0x77], 0
mov dword [ebp + 0x30], ecx
jne 0x43e58f
cmp byte [ebp + 0x57], 0
jne 0x43e40a
mov ax, word [edx]
cmp ax, 0x26
je 0x43e3e3
cmp byte [ebp + 0x63], 0
je 0x43e40a
cmp ax, 0x5e
je 0x43e40a
add dword [ebp + 0x6c], 2
mov eax, edx
cmp word [eax], 0x26
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x2c], eax
jne 0x43e4c7
inc eax
inc eax
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x30], 1
jmp 0x43e4c7
add dword [ebp + 0x6c], 2
mov eax, edx
cmp word [eax], 0x5e
mov dword [ebp + 0x50], eax
jne 0x43e422
inc eax
inc eax
mov dword [ebp + 0x50], eax
mov byte [ebp + 0x77], 8
mov dword [ebp + 0x2c], eax
mov eax, dword [ebp + 0x40]
and word [eax], 0
cmp byte [ebp + 0x47], 0
jne 0x43e4af
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push dword [ebp + 0x34]
mov eax, dword [ebp + 0x38]
push dword [ebp + 0x40]
and word [eax], 0
push dword [ebp + 0x50]
call dword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableW]
test eax, eax
mov dword [ebp + 0x4c], eax
jle 0x43e48c
mov eax, dword [ebp + 0x40]
cmp word [eax], 0
jne 0x43e48c
mov eax, dword [ebp + 0x4c]
add eax, 0x64
push eax
lea ecx, [ebp + 0x40]
mov dword [ebp + 0x34], eax
call fcn.00435da9
push 0
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push dword [ebp + 0x34]
push dword [ebp + 0x40]
push dword [ebp + 0x50]
call dword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableW]
mov dword [ebp + 0x4c], eax
mov eax, dword [ebp + 0x38]
mov word [eax], 0x25
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp dword [ebp + 0x4c], 0
jg 0x43e627
cmp eax, 0xcb
jne 0x43e627
cmp byte [ebp + 0x77], 0
jne 0x43e575
cmp byte [ebp + 0x57], 0
mov byte [ebp + 0x77], 1
jne 0x43e575
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x48]
and word [eax], 0
push 0xffffffffffffffff
push 0
push dword [ebp + 0x2c]
call fcn.0041083d
test eax, eax
mov ecx, dword [ebp + 0x38]
mov word [ecx], 0x25
jne 0x43e500
cmp dword [ebp + 0x30], eax
jne 0x43df63
cmp byte [ebp + 0x77], al
jne 0x43e569
mov byte [ebp + 0x77], 1
jmp 0x43e425
mov eax, dword [eax]
push eax
mov dword [ebp + 0x50], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov dword [ebp + 0x74], eax
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e545
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x74]
js 0x43df63
mov eax, dword [ebp + 0x74]
inc eax
mov ecx, dword [ebp + 0x50]
mov cx, word [ecx]
add dword [ebp + 0x50], 2
mov word [ebx], cx
inc ebx
inc ebx
dec eax
jne 0x43e552
jmp 0x43df60
cmp byte [ebp + 0x63], 1
je 0x43df63
jmp 0x43e58b
cmp byte [ebp + 0x63], 1
jne 0x43e583
xor al, al
je 0x43df63
sub dword [ebp + 0x6c], 2
xor al, al
je 0x43e58f
sub dword [ebp + 0x6c], 2
mov edx, dword [ebp + 0x3c]
lea eax, [edx + edx + 6]
sub eax, dword [ebp + 0x58]
add eax, ebx
test eax, 0xfffffffe
jl 0x43e5ca
mov ecx, dword [ebp + 0x70]
mov eax, edx
lea edi, [edi + eax + 0x11]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
mov edx, dword [ebp + 0x3c]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
mov eax, dword [ebp + 0x6c]
cmp word [eax], 0x25
jne 0x43e608
lea ecx, [eax + 2]
mov ax, word [ecx]
cmp ax, 0x25
je 0x43e604
cmp ax, 0x2a
je 0x43e604
cmp ax, 0x40
je 0x43e604
cmp ax, 0x23
je 0x43e604
cmp ax, 0x7e
je 0x43e604
push eax
call fcn.004103b8
add esp, 4
test al, al
je 0x43e608
mov dword [ebp + 0x6c], ecx
inc edx
dec edx
js 0x43df63
mov eax, dword [ebp + 0x20]
lea ecx, [edx + 1]
mov dx, word [eax]
mov word [ebx], dx
inc ebx
inc ebx
inc eax
inc eax
dec ecx
jne 0x43e615
jmp 0x43df60
cmp dword [ebp + 0x7c], 0
je 0x43e64e
mov eax, dword [ebp + 0x48]
cmp byte [eax + 0x92], 0
jne 0x43e64e
push 0x25
push dword [ebp + 0x40]
call dword [sym.imp.SHLWAPI.DLL_StrChrW]
test eax, eax
je 0x43e64e
mov eax, dword [ebp + 0x7c]
mov byte [eax], 1
mov eax, dword [ebp + 0x4c]
test eax, eax
jle 0x43e659
mov byte [ebp + 0x46], 1
mov ecx, dword [ebp + 0x40]
lea eax, [eax + eax + 4]
sub eax, dword [ebp + 0x58]
mov dword [ebp + 0x50], ecx
add eax, ebx
test eax, 0xfffffffe
jl 0x43e695
mov eax, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x70]
lea edi, [edi + eax + 0x10]
sub ebx, esi
push edi
sar ebx, 1
call fcn.00435da9
mov eax, dword [ebp + 0x70]
mov esi, dword [eax]
lea eax, [esi + edi*2 - 2]
lea ebx, [esi + ebx*2]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], ebx
dec dword [ebp + 0x4c]
js 0x43df63
mov ecx, dword [ebp + 0x4c]
mov eax, dword [ebp + 0x50]
inc ecx
mov dx, word [eax]
mov word [ebx], dx
inc ebx
inc ebx
inc eax
inc eax
dec ecx
jne 0x43e6a5
jmp 0x43df60
and word [ebx], 0
cmp byte [ebp + 0x46], 0
jne 0x43e6d7
mov eax, dword [ebp + 0x7c]
test eax, eax
je 0x43e6d7
mov ecx, dword [ebp + 0x48]
cmp byte [ecx + 0x92], 0
jne 0x43e6d7
mov byte [eax], 1
mov ecx, dword [ebp + 0x70]
sub ebx, esi
sar ebx, 1
lea eax, [ebx + 2]
push eax
call fcn.00435da9
lea ecx, [ebp + 0x40]
call fcn.0043092f
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x64
leave
ret 0x14