Function at 0x180006240
Capabilities:
Accept command line arguments
Authenticate hmac
Parse credit card information

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x48
mov r10, rcx
mov edi, 0x45
mov ebp, 0x10
mov rcx, qword [str.m2e]
xor edx, edx
lea r8d, [rcx - 0xc]
xor r8b, cl
movzx r9d, r8b
mov eax, r9d
movzx esi, r8b
div rcx
mov rbx, rax
and ebx, 0x1f7
jne 0x1800062d1
cmp r8b, 0x29
jbe 0x18000625e
cmp r8b, 0x4c
je 0x18000625e
test r8b, r8b
je 0x18000686e
cmp r8b, 0x28
jb 0x180006865
cmp r8b, 0x34
jne 0x1800063a6
mov rbp, r10
mov qword [rsp + 0x88], r10
jmp 0x1800063ae
mov r10, qword [rsp + 0x70]
mov rdi, rax
jmp 0x180006259
mov r10, qword [rsp + 0x70]
jmp 0x180006259
cmp rbx, 0x43
ja 0x180006931
cmp rbx, rdi
jae 0x18000625e
cmp rbx, 0x25
jb 0x1800062fc
mov edx, esi
mov r8d, ebx
mov rcx, r9
call fcn.180003298
jmp 0x1800067e3
cmp rbx, 4
ja 0x18000625e
cmp rbx, 0x38
je 0x18000625e
cmp rbx, 0x5b
ja 0x18000625e
cmp rbx, 0x54
jbe 0x180006333
mov edx, esi
mov r8, rbx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_HeapSize]
jmp 0x1800067e3
cmp rbx, 0x64
jb 0x180006346
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r10, qword [rsp + 0x70]
jmp 0x1800063a6
cmp rbx, 9
jne 0x180006363
xor edx, edx
mov rax, rsi
div r9
xor rax, 0x2b0
mov qword [0x18002e010], rax
jmp 0x1800063a6
cmp rbx, 0x18
jbe 0x18000637a
mov rax, rsi
and eax, 0x16e
mov qword [section..data], rax
jmp 0x1800063a6
cmp rbx, 0x29
ja 0x18000625e
cmp rbx, 0x59
ja 0x180006931
cmp rbx, 0x2e
jne 0x18000639d
mov rax, rsi
xor rax, 0x43
jmp 0x180006371
cmp rbx, rbp
ja 0x18000625e
mov rbp, qword [rsp + 0x88]
xor edx, edx
mov eax, 0x2ac
div rsi
mov rdi, rax
movabs rax, 0x23456789abcdf013
mul rdi
mov rax, rdi
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 7
imul rax, rax, 0xe1
sub rdi, rax
cmp dil, 0x4b
jbe 0x1800063fd
mov r8d, ebx
mov edx, ebx
mov rcx, rbx
call fcn.180003298
mov dil, al
jmp 0x1800064b5
cmp dil, 0x45
jbe 0x180006411
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rsi, rax
jmp 0x1800064b5
cmp dil, 0x1c
jbe 0x180006428
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x180006766
cmp dil, 0xe
jne 0x180006438
mov esi, 2
jmp 0x18000656a
cmp dil, 0x36
ja 0x180006931
cmp dil, 0xd
jne 0x18000645c
movsxd rax, dword [rbp + 0x3c]
add rax, rbp
add rax, rbx
mov qword [rsp + 0x30], rax
jmp 0x180006503
cmp dil, 0x14
ja 0x180006254
cmp dil, 0x41
jbe 0x180006491
movzx ecx, dil
xor edx, edx
mov eax, 0xcf
div rcx
mov ecx, esi
mov r8, rax
mov eax, 0x1b7
imul ecx, eax
xor r8w, cx
movzx esi, r8w
jmp 0x1800064b5
cmp dil, 0x29
jbe 0x1800064a1
mov edi, 0xef
sub dil, sil
jmp 0x1800064b5
cmp dil, 0x48
je 0x18000692a
cmp dil, 0x42
je 0x180006931
cmp dil, 0x3b
je 0x180006931
cmp dil, 0x5c
jne 0x1800064d5
mov ecx, 0x5c
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x18000656a
mov r10, qword [rsp + 0x70]
cmp dil, 0x5d
jae 0x180006254
cmp dil, 0x52
je 0x180006923
cmp dil, 0xa
jb 0x180006918
cmp dil, 0xd
jne 0x18000651a
mov rax, qword [rsp + 0x30]
mov r8d, dword [rax + 0x88]
add r8, rbp
add r8, rbx
mov qword [rsp + 0x80], r8
jmp 0x180006572
cmp dil, 0x35
jbe 0x180006537
movzx r8d, dil
mov r9, rbx
mov edx, ebx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
jmp 0x180006766
cmp dil, 0x13
ja 0x180006913
cmp dil, 0x5f
jne 0x180006558
mov edx, ebx
mov ecx, 0x5f
call fcn.180006240
mov rbx, rax
jmp 0x18000656a
cmp dil, 0x18
jbe 0x18000656a
movzx eax, dil
mov ebx, 0x208
sub rbx, rax
mov r8, qword [rsp + 0x80]
imul rax, rbx, 0x363
movzx ecx, dil
xor edx, edx
div rcx
xor ebp, ebp
mov rdi, rax
cmp ebp, dword [r8 + 0x18]
jae 0x18000686e
cmp dil, 0x4e
jbe 0x1800065aa
movzx edx, si
mov rcx, rbx
call fcn.180006240
mov rbx, rax
jmp 0x180006721
mov eax, 0x3b
cmp dil, al
je 0x180006853
cmp dil, 0x54
ja 0x180006836
cmp dil, 0x41
jne 0x1800065d6
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x180006721
cmp dil, 4
jb 0x1800065ec
mov ecx, 0x193
movzx eax, si
sub ax, cx
jmp 0x1800066eb
cmp dil, 9
je 0x180006721
test dil, dil
jne 0x1800066be
mov eax, 0x45
cmp si, ax
jne 0x180006623
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rdx, rbx
mov ecx, eax
call fcn.180004de0
jmp 0x18000671e
cmp si, 0x39
ja 0x18000686e
cmp si, 0x34
jne 0x180006680
cmp rbx, 0x2e
je 0x180006875
cmp rbx, 9
jae 0x1800062c0
cmp rbx, 0x17
ja 0x18000686e
test rbx, rbx
jne 0x180006671
mov eax, dword [r8 + 0x20]
add rax, qword [rsp + 0x70]
mov eax, dword [rax + rbp*4]
add rax, qword [rsp + 0x70]
mov qword [rsp + 0x38], rax
jmp 0x180006721
cmp rbx, 5
ja 0x1800062c0
jmp 0x180006721
mov eax, 0x10
cmp si, ax
jae 0x180006699
movzx edx, si
xor ecx, ecx
call fcn.180006240
jmp 0x18000671e
mov eax, 0x63
cmp si, ax
ja 0x18000675d
cmp si, 0x3e
jb 0x180006721
movzx edx, si
mov r8, rbx
movzx ecx, si
call qword [sym.imp.KERNEL32.dll_HeapSize]
jmp 0x18000671e
cmp dil, 0x51
jbe 0x1800066d4
mov dil, sil
and dil, 0xdb
xor dil, 0xfe
or dil, sil
jmp 0x180006721
cmp dil, 1
jbe 0x1800066f0
movzx eax, dil
mov esi, 0x307
sub si, ax
mov eax, 0x1e5
or si, ax
jmp 0x180006721
cmp dil, 0x1f
jbe 0x180006708
movzx r8d, dil
movzx edx, si
movzx ecx, dil
call fcn.180003298
jmp 0x18000671e
cmp dil, 0xf
jne 0x180006721
movzx r8d, si
mov rdx, rbx
movzx ecx, si
call qword [sym.imp.SHELL32.dll_ExtractIconA]
mov dil, al
mov rcx, qword [rsp + 0x38]
xor eax, eax
cmp byte [rcx], al
je 0x180006735
inc rax
cmp byte [rax + rcx], 0
jne 0x18000672c
movzx r8d, dil
lea edx, [rax + rbx]
sub r8d, 0x58509186
call fcn.180003298
cmp eax, dword [rsp + 0x78]
je 0x180006770
mov r8, qword [rsp + 0x80]
inc ebp
jmp 0x180006587
movzx ecx, si
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r10, qword [rsp + 0x70]
jmp 0x180006254
cmp dil, 0x37
jae 0x18000690d
test dil, dil
jne 0x1800067ed
cmp rbx, 0x35
jae 0x1800068c2
mov r11d, 0x63
cmp rbx, r11
je 0x1800068bd
cmp rbx, 0x31
jae 0x1800068b3
lea edi, [r11 - 0x1e]
cmp rbx, 0x53
ja 0x1800062ca
cmp rbx, 0x5b
jae 0x18000689d
test rbx, rbx
je 0x18000687e
lea ebp, [rdi - 0x35]
cmp rbx, rbp
jae 0x1800068e5
cmp rbx, 0x47
ja 0x18000686e
cmp rbx, 0x51
jne 0x1800068e5
mov r10, qword [rsp + 0x70]
jmp 0x18000625e
mov ebp, 0x10
cmp dil, 0x2a
ja 0x180006827
cmp dil, 0x50
je 0x180006827
jae 0x1800068cd
cmp dil, 5
jae 0x180006827
cmp dil, 0xf
jae 0x180006827
cmp dil, 0x18
jne 0x1800068e5
lea edx, [rbp + 8]
mov r8d, ebx
mov ecx, edx
call fcn.180003298
mov r10, qword [rsp + 0x70]
mov edi, 0x45
jmp 0x18000625e
movzx r9d, si
mov r8, rbx
movzx ecx, dil
mov rdx, rbx
mov qword [rsp + 0x20], rbx
call fcn.180004de0
jmp 0x180006766
mov r8d, eax
mov edx, eax
mov rcx, rbx
call fcn.180003298
jmp 0x180006766
movzx eax, r8b
jmp 0x180006934
xor eax, eax
jmp 0x180006934
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitThread]
mov r8, qword [rsp + 0x80]
mov eax, dword [r8 + 0x24]
add rax, qword [rsp + 0x70]
movzx ecx, word [rax + rbp*2]
mov word [rsp + 0x80], cx
jmp 0x1800068ed
movzx ecx, si
xor r8d, r8d
mov r9d, ecx
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov rbx, rax
jmp 0x1800068e5
movzx ecx, si
call qword [sym.imp.KERNEL32.dll_ExitThread]
mov rax, r11
jmp 0x180006934
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1800068e5
movzx ecx, dil
mov rdx, rbx
mov r9d, ecx
movzx r8d, si
mov qword [rsp + 0x20], rcx
call fcn.180004de0
mov r8, qword [rsp + 0x80]
mov ecx, dword [r8 + 0x1c]
movzx edx, word [rsp + 0x80]
add rcx, rbx
lea rax, [rcx + rdx*4]
mov rcx, qword [rsp + 0x70]
mov eax, dword [rax + rcx]
add rax, rcx
jmp 0x180006934
movzx eax, dil
jmp 0x180006934
movzx eax, si
jmp 0x180006934
movzx ecx, dil
call qword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, 0x52
jmp 0x180006934
mov eax, 0x48
jmp 0x180006934
mov rax, rbx
add rsp, 0x48
pop rdi
pop rsi
pop rbp
pop rbx
ret