Function at 0x426130
Capabilities:
Get thread local storage value
Parse credit card information
Read file on windows
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov dword [ebp - 0x3c], 0x52
mov dword [ebp - 0x4c], 0x5d
mov dword [ebp - 0x54], 0x62
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x34], 0x55
mov dword [ebp - 0x38], 0x55
mov dword [ebp - 0x2c], 0x3c
mov dword [ebp - 0x24], 0x34
mov dword [ebp - 0x20], 0x59
mov dword [ebp - 0x30], 0x25
mov dword [ebp - 0x40], 0x18
mov dword [ebp - 0x1c], 0x5f
mov dword [ebp - 0x50], 0x11
mov dword [ebp - 0x5c], 0x1d
mov dword [ebp - 0x10], 0x50
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x28], 0x3d
mov dword [ebp - 0xc], 0x3e
mov dword [ebp - 4], 0x18
mov dword [ebp - 8], 5
mov dword [ebp - 0x44], 0x63
mov dword [ebp - 0x18], 0x49
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0xc], 0x3f
jge 0x42627f
cmp dword [ebp - 0x34], 0x14
jle 0x42625c
cmp dword [ebp - 0x24], 0xa
jle 0x42625c
cmp dword [ebp + 8], 0x36
je 0x42625c
cmp dword [ebp - 0x1c], 0x3a
jge 0x42625c
cmp dword [ebp - 4], 4
jge 0x42625c
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp + 0x18], 0x5f
jle 0x426256
cmp dword [ebp - 4], 0x16
jge 0x426256
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
cmp dword [ebp - 0x14], 0x30
jge 0x426250
cmp dword [ebp - 0x38], 0x11
jle 0x426250
cmp dword [ebp - 4], 0x5d
jle 0x426250
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp dword [ebp + 0x1c], 0x37
jne 0x426250
cmp dword [ebp + 8], 0x21
jge 0x42624a
mov eax, dword [ebp - 0x10]
sub eax, 1
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
call dword [sym.imp.USER32.dll_GetMessageA]
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x1c], 9
je 0x42627a
cmp dword [ebp - 8], 0x36
jge 0x42627a
mov edx, dword [ebp - 0x20]
add edx, 0x14
mov dword [ebp - 0x20], edx
jmp 0x4261d7
cmp dword [ebp - 0x3c], 2
jge 0x4262e2
call dword [sym.imp.USER32.dll_EnumDisplayMonitors]
cmp dword [ebp - 0x14], 0xa
jge 0x4262e2
cmp dword [ebp - 0x24], 0x47
jle 0x4262dc
cmp dword [ebp - 0x40], 0x1d
jle 0x4262dc
cmp dword [ebp - 0xc], 6
jge 0x4262d6
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp dword [ebp + 0xc], 0x59
je 0x4262d6
cmp dword [ebp - 0x14], 0x30
jge 0x4262d6
cmp dword [ebp - 0x18], 0x42
jge 0x4262d6
call dword [sym.imp.SHELL32.dll_DragQueryFileA]
cmp dword [ebp - 8], 6
jge 0x4262d6
cmp dword [ebp - 0x10], 0x2e
je 0x4262d6
mov eax, dword [ebp - 0x18]
or eax, 0x5e
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x28], 0x25
jne 0x42632a
cmp dword [ebp - 0x28], 0x21
jle 0x42632a
cmp dword [ebp - 0x44], 0x5c
jge 0x42632a
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x48], 0x10
jne 0x426324
cmp dword [ebp - 8], 0x1e
jne 0x426324
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 8]
sub edx, 0x11
mov dword [ebp - 8], edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
cmp dword [ebp - 4], 0x19
jl 0x42627f
mov eax, dword [ebp - 0x2c]
sub eax, 0x26
push eax
mov ecx, dword [ebp - 4]
add ecx, 9
push ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x19
push edx
mov eax, dword [ebp - 0x2c]
add eax, 0x23
push eax
mov ecx, dword [ebp - 0x10]
sub ecx, 3
push ecx
mov edx, dword [ebp - 0x30]
add edx, 0x19
push edx
mov eax, dword [ebp - 0x4c]
sub eax, 0x3c
push eax
mov ecx, dword [ebp - 0x50]
sub ecx, 2
push ecx
call fcn.00426ab0
add esp, 0x20
mov esp, ebp
pop ebp
ret