Function at 0x48cd80
Capabilities:
Access peb ldr_data
Get ntdll base address
Parse credit card information

Disassembly:
push 0xffffffffffffffff
push 0x4f103c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa4
mov al, byte [esp + 0x13]
push ebx
push ebp
push esi
push edi
mov byte [esp + 0x30], al
mov edi, str.VAG_INDEX.DB
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x34], ebp
push ecx
push str.VAG_INDEX.DB
lea ecx, [esp + 0x38]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
call fcn.004120b0
lea ecx, [esp + 0x54]
mov dword [esp + 0xbc], ebp
call fcn.004cf5c0
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 1
call fcn.004be970
lea ecx, [esp + 0x28]
mov byte [esp + 0xbc], 2
call fcn.004be970
mov cl, byte [esp + 0x23]
mov dword [esp + 0x14], ebp
mov byte [esp + 0x10], cl
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov dl, byte [esp + 0x30]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x3c], esp
mov byte [esp + 0xcc], 4
mov byte [ecx], dl
mov dword [ecx + 4], ebp
mov dword [ecx + 8], ebp
mov dword [ecx + 0xc], ebp
mov eax, dword [0x4f73d0]
lea edx, [esp + 0x40]
push eax
push ebp
push edx
call fcn.00411c90
lea ecx, [esp + 0x64]
call fcn.004cf9d0
test al, al
jne 0x48cefb
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
cmp esi, edi
mov byte [esp + 0xbc], 3
je 0x48ce81
mov ecx, esi
call fcn.004beab0
add esi, 4
cmp esi, edi
jne 0x48ce6f
mov esi, dword [esp + 0x14]
push esi
call fcn.004deb10
add esp, 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov byte [esp + 0xbc], 2
call fcn.004beab0
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 1
call fcn.004beab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xbc], 0
call fcn.004cf740
mov ecx, dword [esp + 0x34]
cmp ecx, ebp
je 0x48cef3
mov al, byte [ecx - 1]
test al, al
je 0x48cee9
cmp al, 0xff
je 0x48cee9
dec al
mov byte [ecx - 1], al
xor ax, ax
jmp 0x48d3ed
dec ecx
push ecx
call fcn.004deb10
add esp, 4
xor ax, ax
jmp 0x48d3ed
mov ebx, 1
mov dword [esp + 0x2c], ebx
push 2
push 0x5128d0
lea ecx, [esp + 0x2c]
call fcn.004bef10
xor eax, eax
lea ecx, [esp + 0x24]
mov al, bh
push eax
call fcn.004bec70
push ebx
lea ecx, [esp + 0x28]
call fcn.004bec70
lea ecx, [esp + 0x24]
lea edx, [esp + 0x40]
push ecx
push edx
lea ecx, [esp + 0x5c]
call fcn.004cfee0
mov esi, eax
lea eax, [esp + 0x10]
mov byte [esp + 0xbc], 5
cmp eax, esi
je 0x48d06a
mov edx, dword [esi + 4]
cmp edx, ebp
jne 0x48cf60
xor eax, eax
jmp 0x48cf68
mov eax, dword [esi + 8]
sub eax, edx
sar eax, 2
mov edi, dword [esp + 0x14]
cmp edi, ebp
jne 0x48cf74
xor ecx, ecx
jmp 0x48cf7d
mov ecx, dword [esp + 0x18]
sub ecx, edi
sar ecx, 2
cmp eax, ecx
ja 0x48cfb5
mov eax, dword [esi + 8]
push edi
push eax
push edx
call fcn.00476f90
mov ecx, dword [esp + 0x24]
add esp, 0xc
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.00476d50
mov ecx, esi
call fcn.00476d10
mov edx, dword [esp + 0x14]
lea eax, [edx + eax*4]
mov dword [esp + 0x18], eax
jmp 0x48d06a
lea ecx, [esp + 0x10]
call fcn.00476d30
mov ecx, esi
mov edi, eax
call fcn.00476d10
cmp eax, edi
ja 0x48d013
mov edi, dword [esi + 4]
lea ecx, [esp + 0x10]
call fcn.00476d10
mov ecx, dword [esp + 0x14]
lea edi, [edi + eax*4]
mov eax, dword [esi + 4]
push ecx
push edi
push eax
call fcn.00476f90
mov edx, dword [esp + 0x24]
mov eax, dword [esi + 8]
add esp, 0xc
lea ecx, [esp + 0x10]
push edx
push eax
push edi
call fcn.00476d80
mov ecx, esi
call fcn.00476d10
mov ecx, dword [esp + 0x14]
lea edx, [ecx + eax*4]
mov dword [esp + 0x18], edx
jmp 0x48d06a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00476d50
mov edx, dword [esp + 0x14]
push edx
call fcn.004deb10
add esp, 4
mov ecx, esi
call fcn.00476d10
cmp eax, ebp
jge 0x48d040
xor eax, eax
shl eax, 2
push eax
call fcn.004df7b5
add esp, 4
mov dword [esp + 0x14], eax
mov ecx, dword [esi + 8]
mov esi, dword [esi + 4]
push eax
push ecx
push esi
lea ecx, [esp + 0x1c]
call fcn.00476d80
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov edi, dword [esp + 0x48]
mov esi, dword [esp + 0x44]
cmp esi, edi
mov byte [esp + 0xbc], 4
je 0x48d091
push ebp
mov ecx, esi
call fcn.00413810
add esi, 4
cmp esi, edi
jne 0x48d07e
mov esi, dword [esp + 0x44]
push esi
call fcn.004deb10
mov eax, dword [esp + 0x18]
add esp, 4
cmp eax, ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
je 0x48d150
mov ecx, dword [esp + 0x18]
sub ecx, eax
test ecx, 0xfffffffc
je 0x48d150
push 0
lea ecx, [esp + 0x14]
call fcn.00411b50
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004be980
lea ecx, [esp + 0x2c]
call fcn.004beca0
lea ecx, [esp + 0x28]
call fcn.004bee30
mov ebp, dword [esp + 0xc4]
push 0
mov ecx, ebp
call fcn.004bec90
and eax, 0xff
xor esi, esi
sub eax, 3
mov edi, eax
test edi, edi
jle 0x48d132
lea edx, [esi + 4]
mov ecx, ebp
push edx
call fcn.004bec90
push esi
lea ecx, [esp + 0x2c]
mov bl, al
call fcn.004bec90
cmp al, bl
jne 0x48d12e
inc esi
cmp esi, edi
jl 0x48d10e
mov ebx, dword [esp + 0x2c]
cmp esi, edi
je 0x48d149
inc ebx
cmp bx, 0x1a3
mov dword [esp + 0x2c], ebx
jae 0x48d150
xor ebp, ebp
jmp 0x48cf04
mov byte [0x5201a8], 1
lea ecx, [esp + 0x54]
call fcn.004cfc20
cmp bx, 0xa
je 0x48d34c
cmp bx, 0xb
je 0x48d34c
cmp bx, 0xc
je 0x48d34c
cmp bx, 0xe
je 0x48d34c
cmp bx, 0xf
je 0x48d34c
cmp bx, 0x11
je 0x48d34c
cmp bx, 0x10
jne 0x48d1a5
mov ebx, 0xd
jmp 0x48d351
cmp bx, 0x23
jne 0x48d1b5
mov ebx, 0x14
jmp 0x48d351
cmp bx, 0x16
je 0x48d345
cmp bx, 0x17
je 0x48d345
cmp bx, 0x18
je 0x48d345
cmp bx, 0x19
je 0x48d345
cmp bx, 0x1a
je 0x48d345
cmp bx, 0x1b
je 0x48d345
cmp bx, 0x1c
je 0x48d345
cmp bx, 0x1d
je 0x48d345
cmp bx, 0x1e
je 0x48d345
cmp bx, 0x1f
je 0x48d345
cmp bx, 0x20
je 0x48d345
cmp bx, 0x21
je 0x48d345
cmp bx, 0x22
je 0x48d345
cmp bx, 0x24
je 0x48d345
cmp bx, 0x25
je 0x48d345
cmp bx, 0x26
je 0x48d345
cmp bx, 0x27
je 0x48d345
cmp bx, 0x28
je 0x48d33e
cmp bx, 0x29
je 0x48d33e
cmp bx, 0x2a
je 0x48d33e
cmp bx, 0x2b
je 0x48d33e
cmp bx, 0x2c
je 0x48d33e
cmp bx, 0x2d
je 0x48d33e
cmp bx, 0x2e
je 0x48d33e
cmp bx, 0x2f
je 0x48d33e
cmp bx, 0x30
je 0x48d33e
cmp bx, 0x31
je 0x48d33e
cmp bx, 0x32
je 0x48d33e
cmp bx, 0x33
je 0x48d33e
cmp bx, 0x34
je 0x48d33e
cmp bx, 0x35
je 0x48d33e
cmp bx, 0x36
je 0x48d33e
cmp bx, 0x37
je 0x48d33e
cmp bx, 0x3a
je 0x48d337
cmp bx, 0x3b
je 0x48d337
cmp bx, 0x3c
je 0x48d337
cmp bx, 0x3d
je 0x48d337
cmp bx, 0x3e
je 0x48d337
cmp bx, 0x3f
je 0x48d337
cmp bx, 0x40
je 0x48d337
cmp bx, 0x41
je 0x48d337
cmp bx, 0x42
je 0x48d337
cmp bx, 0x43
je 0x48d337
cmp bx, 0x44
je 0x48d337
cmp bx, 0x45
je 0x48d337
cmp bx, 0x46
je 0x48d337
cmp bx, 0x47
jne 0x48d351
mov ebx, 0x39
jmp 0x48d351
mov ebx, 4
jmp 0x48d351
mov ebx, 0x15
jmp 0x48d351
mov ebx, 9
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
cmp esi, edi
mov byte [esp + 0xbc], 3
je 0x48d37c
xor ebp, ebp
push ebp
mov ecx, esi
call fcn.00413810
add esi, 4
cmp esi, edi
jne 0x48d367
mov esi, dword [esp + 0x14]
jmp 0x48d37e
xor ebp, ebp
push esi
call fcn.004deb10
add esp, 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], ebp
mov byte [esp + 0xbc], 2
call fcn.004beab0
lea ecx, [esp + 0x24]
mov byte [esp + 0xbc], 1
call fcn.004beab0
lea ecx, [esp + 0x54]
mov byte [esp + 0xbc], 0
call fcn.004cf740
mov ecx, dword [esp + 0x34]
cmp ecx, ebp
je 0x48d3ea
mov al, byte [ecx - 1]
test al, al
je 0x48d3e0
cmp al, 0xff
je 0x48d3e0
dec al
mov byte [ecx - 1], al
jmp 0x48d3ea
dec ecx
push ecx
call fcn.004deb10
add esp, 4
mov ax, bx
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xb0
ret 4