Function at 0x4553cd
Capabilities:
Parse credit card information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
push esi
push edi
mov eax, 0x4ddd50
mov edi, ecx
push eax
mov dword [ebp - 0x18], edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov al, byte [edi + 9]
xor esi, esi
cmp dword [ebp + 0x10], esi
setl byte [ebp - 0xd]
and al, 0x11
cmp byte [ebp - 0xd], 0
mov byte [ebp - 0xe], al
jne 0x455406
test byte [ebp + 0x14], 0x40
je 0x45540a
mov byte [ebp - 0xe], 0
and byte [ebp + 0x14], 1
push ebx
push 0x50
pop eax
push eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x48], eax
call fcn.00444f8a
or dword [ebp - 0x28], 0xffffffff
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0xc]
lea ecx, [ebp - 0x60]
mov dword [ebp - 4], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], esi
call fcn.0044d29f
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x44]
jae 0x455ba5
cmp word [ebx], 0
je 0x455ba5
lea ecx, [ebp - 0x60]
call fcn.0044d391
push 0x25
pop esi
cmp word [ebx], si
je 0x45549e
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 4]
sar ecx, 1
jmp 0x455499
mov ax, word [ebx]
test ax, ax
je 0x455450
cmp ax, si
je 0x455450
mov edx, dword [ebp - 4]
mov word [edx], ax
add dword [ebp - 4], 2
inc ebx
inc ebx
dec ecx
jns 0x455480
jmp 0x455450
cmp byte [ebp + 0x14], 0
mov dword [ebp - 0x1c], ebx
je 0x455642
lea edx, [ebx + 2]
mov cx, word [edx]
cmp cx, si
jne 0x4554c5
mov eax, dword [ebp - 4]
mov word [eax], si
add dword [ebp - 4], 2
add ebx, 4
jmp 0x455450
cmp cx, 0x23
jne 0x45550d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x45544d
mov ecx, dword [ecx + 0x38]
mov eax, dword [eax + ecx*4 + 8]
mov cx, word [eax]
test cx, cx
je 0x45544d
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc eax
inc eax
xor ecx, ecx
mov cx, word [eax]
test cx, cx
jne 0x4554f2
jmp 0x455450
cmp cx, 0x2a
jne 0x45552c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x45544d
mov ecx, dword [ecx + 0x38]
jmp 0x45554a
cmp cx, 0x40
jne 0x45555e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x3c]
add ebx, 4
test eax, eax
mov dword [ebp + 8], ebx
je 0x45544d
mov ecx, dword [ecx + 0x38]
inc ecx
mov esi, dword [eax + ecx*4]
push esi
mov dword [ebp - 0x28], ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
jmp 0x4556ce
push ecx
call fcn.00414a48
add esp, 4
test al, al
jne 0x45558c
cmp cx, 0x7e
jb 0x455642
xor eax, eax
mov ax, word [ebx + 4]
push eax
call fcn.00414a48
add esp, 4
test al, al
je 0x455642
and dword [ebp - 0x20], 0
cmp cx, 0x7e
jb 0x45559b
mov dword [ebp - 0x20], esi
mov ebx, edx
inc ebx
inc ebx
xor esi, esi
mov si, word [ebx]
mov dword [ebp + 8], ebx
xor ecx, ecx
xor edi, edi
push esi
call fcn.00414a48
add esp, 4
test al, al
je 0x4555ea
push 0
push 0xa
push edi
push ecx
call fcn.004ae930
mov ecx, eax
movzx eax, si
mov edi, edx
cdq
add ecx, eax
adc edi, edx
add ecx, 0xffffffd0
adc edi, 0xffffffff
inc ebx
inc ebx
xor esi, esi
mov si, word [ebx]
push esi
call fcn.00414a48
add esp, 4
test al, al
jne 0x4555b6
mov dword [ebp + 8], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
cdq
cmp edi, edx
ja 0x45544d
jb 0x455603
cmp ecx, eax
jae 0x45544d
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x3c]
test eax, eax
je 0x45544d
mov esi, dword [eax + ecx*4]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp dword [ebp - 0x20], 0
mov edi, eax
je 0x4556ce
cmp word [esi], 0x22
jne 0x4556ce
cmp word [esi + edi*2 - 2], 0x22
jne 0x45563a
dec edi
dec edi
inc esi
inc esi
jmp 0x4556ce
lea edi, [ebx + 2]
mov esi, edi
jmp 0x45564b
inc esi
inc esi
cmp word [esi], 0x26
je 0x455649
mov ebx, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 7
push str.RANDOM_
push esi
call ebx
test eax, eax
jne 0x455672
call fcn.00440ef7
and edx, 0x7fffffff
jmp 0x45568e
push 7
push str.__THIS_
push esi
call ebx
test eax, eax
jne 0x455711
mov eax, dword [ebp - 0x18]
add eax, 0x75bd036
xor edx, edx
and word [ebp - 0x104], 0
push edx
push eax
lea eax, [ebp - 0x104]
lea ebx, [esi + 0xe]
push eax
mov dword [ebp + 8], ebx
call fcn.0049c1d2
and word [ebp - 0x62], 0
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
cmp edi, 1
jge 0x4556c8
xor edi, edi
lea esi, [ebp - 0x104]
lea eax, [edi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044d316
cmp dword [ebp - 0x28], 0
jl 0x4556f0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0x3c]
mov esi, dword [eax + ecx*4]
or dword [ebp - 0x28], 0xffffffff
dec edi
js 0x45544d
lea eax, [edi + 1]
mov cx, word [esi]
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc esi
inc esi
dec eax
jne 0x4556fa
jmp 0x455450
mov ecx, edi
xor eax, eax
jmp 0x45572e
cmp ax, 0x25
je 0x455739
cmp ax, 0x3d
je 0x455739
call fcn.0043e785
test al, al
jne 0x455739
inc ecx
inc ecx
mov ax, word [ecx]
test ax, ax
mov dword [ebp + 8], ecx
jne 0x455717
mov ebx, dword [ebp + 8]
movsx eax, byte [ebp - 0xe]
mov esi, ebx
sub esi, dword [ebp - 0x1c]
mov byte [ebp - 5], 0
sar esi, 1
cmp word [ebx], 0x25
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x3c], eax
je 0x455787
lea eax, [esi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044d316
dec esi
js 0x45544d
mov ecx, dword [ebp - 0x1c]
lea eax, [esi + 1]
mov dx, word [ecx]
mov esi, dword [ebp - 4]
mov word [esi], dx
add dword [ebp - 4], 2
inc ecx
inc ecx
dec eax
jne 0x455770
jmp 0x45544d
cmp byte [ebp - 0xd], 0
jne 0x4557c7
mov ax, word [edi]
cmp ax, 0x26
je 0x4557a2
cmp byte [ebp - 0xe], 0
je 0x4557c7
cmp ax, 0x5e
je 0x4557c7
add dword [ebp + 8], 2
cmp word [edi], 0x26
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x30], edi
jne 0x4558c8
inc edi
inc edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x3c], 1
jmp 0x4558c8
add dword [ebp + 8], 2
mov eax, edi
cmp word [eax], 0x5e
mov dword [ebp - 0x1c], eax
jne 0x4557df
inc eax
inc eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 5], 8
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
xor edi, edi
mov word [ecx], di
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0x7fffffff
jmp 0x45580d
mov cx, word [eax]
cmp cx, di
je 0x455851
cmp cx, 0x3a
jne 0x45580b
cmp word [eax + 2], 0x7e
je 0x455816
inc eax
inc eax
cmp eax, ebx
mov dword [ebp - 0x14], eax
jb 0x4557f6
jmp 0x455851
and word [eax], 0
add dword [ebp - 0x14], 4
mov edi, eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004412d1
mov eax, dword [ebp - 0x14]
mov ax, word [eax]
pop ecx
pop ecx
call fcn.0044341d
test al, al
je 0x455851
add dword [ebp - 0x14], 2
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004412d1
pop ecx
pop ecx
push dword [ebp - 0x48]
and word [ebx], 0
push dword [ebp - 0x24]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edx, dword [ebp - 0x24]
mov esi, eax
test esi, esi
mov dword [ebp - 0x34], esi
jle 0x45589a
cmp word [edx], 0
jne 0x45589a
add esi, 0x64
push esi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x48], esi
call fcn.00444fb1
push esi
push dword [ebp - 0x24]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov edx, dword [ebp - 0x24]
mov esi, eax
mov dword [ebp - 0x34], esi
test edi, edi
mov word [ebx], 0x25
jne 0x455a89
cmp word [edx], di
jne 0x455b76
cmp byte [ebp - 5], 0
jne 0x45544d
cmp byte [ebp - 0xd], 0
mov byte [ebp - 5], 1
jne 0x45544d
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0xc], eax
xor esi, esi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], 0x7fffffff
jmp 0x455909
mov cx, word [eax]
cmp cx, dx
je 0x455a3d
cmp cx, 0x3a
jne 0x4558fa
cmp word [eax + 2], 0x7e
je 0x455912
inc eax
inc eax
cmp cx, 0x3f
mov dword [ebp - 0xc], eax
je 0x4559e3
cmp eax, ebx
jb 0x4558e1
jmp 0x455a3d
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0xffffffffffffffff
push esi
push dword [ebp - 0x30]
mov word [eax], si
call fcn.00410e94
mov edi, eax
mov eax, dword [ebp - 0xc]
mov word [eax], 0x3a
add dword [ebp - 0xc], 4
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004412d1
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov ax, word [ecx]
call fcn.0044341d
test al, al
je 0x455976
lea eax, [ebp - 0x14]
push eax
inc ecx
lea eax, [ebp - 0xc]
inc ecx
push eax
mov dword [ebp - 0xc], ecx
call fcn.004412d1
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
jmp 0x455976
cmp ax, 0x25
je 0x455980
inc ecx
inc ecx
mov dword [ebp - 0xc], ecx
mov ax, word [ecx]
cmp ax, si
jne 0x45596b
jmp 0x455986
add ecx, 2
mov dword [ebp + 8], ecx
cmp edi, esi
je 0x455a69
mov esi, dword [edi + 4]
mov edx, dword [edi + 0x10]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edx
mov eax, esi
lea ebx, [esi + edx*2]
mov dword [ebp - 0xc], eax
jle 0x4559a5
mov ecx, edx
test ecx, ecx
mov edi, dword [ebp - 0x14]
jl 0x455ae9
test edi, edi
jl 0x455ae9
test ecx, ecx
jle 0x455b3d
lea edx, [esi + ecx*2]
cmp esi, edx
jae 0x455ae1
cmp word [eax], 0
je 0x455ad7
inc eax
inc eax
cmp eax, edx
mov dword [ebp - 0xc], eax
jb 0x4559cb
jmp 0x455ae1
lea esi, [eax - 2]
mov word [esi], dx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], esi
jmp 0x4559fc
inc ecx
inc ecx
cmp ax, 0x3a
mov dword [ebp - 0xc], ecx
je 0x455a06
mov ax, word [ecx]
cmp ax, dx
jne 0x4559f1
jmp 0x455a09
mov dword [ebp - 0x20], ecx
cmp word [ebx], dx
je 0x455a3d
cmp word [ebx + 2], 0x25
jne 0x455a3d
lea eax, [ebx + 4]
cmp word [eax], 0x64
jne 0x455a3d
jmp 0x455a28
cmp cx, 0x25
je 0x455a35
inc eax
inc eax
mov dword [ebp - 0xc], eax
mov cx, word [eax]
cmp cx, dx
jne 0x455a20
jmp 0x455a3d
mov ebx, eax
add eax, 2
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x18]
xor edi, edi
push edi
push 0xffffffffffffffff
push edi
push dword [ebp - 0x30]
mov word [ebx], di
call fcn.00410e94
cmp esi, edi
mov word [ebx], 0x25
je 0x455a61
mov word [esi], 0x3f
inc esi
inc esi
cmp eax, edi
jne 0x455b20
cmp dword [ebp - 0x3c], 0
jne 0x45544d
cmp byte [ebp - 5], 0
jne 0x45544d
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 5], 1
jmp 0x4557e2
mov word [edi], 0x3a
mov edi, dword [ebp - 0x20]
cmp edi, esi
jle 0x455a97
mov edi, esi
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
jle 0x455aa0
mov ecx, esi
test edi, edi
jge 0x455ab0
mov eax, esi
neg eax
cmp edi, eax
jge 0x455aae
mov edi, eax
add edi, esi
mov eax, esi
sub eax, edi
test ecx, ecx
jge 0x455ac3
lea esi, [eax + ecx]
test esi, esi
jge 0x455acf
xor esi, esi
jmp 0x455acf
cmp esi, eax
jle 0x455ac9
mov esi, eax
cmp esi, ecx
jle 0x455acf
mov esi, ecx
lea edi, [edx + edi*2]
jmp 0x455b78
sub eax, esi
sar eax, 1
and dword [ebp - 0x14], 0
mov ecx, eax
mov edi, dword [ebp - 0x14]
lea esi, [esi + ecx*2]
jmp 0x455b3d
cmp word [esi], 0
je 0x455afe
cmp eax, ebx
jae 0x455afe
inc eax
inc eax
mov dword [ebp - 0xc], eax
cmp word [eax], 0
jne 0x455aef
sub eax, esi
sar eax, 1
test ecx, ecx
jge 0x455b0c
add ecx, eax
jns 0x455b0c
xor ecx, ecx
mov edi, dword [ebp - 0x14]
test edi, edi
jge 0x455b1b
sub eax, ecx
add edi, eax
jns 0x455b1b
xor edi, edi
lea esi, [esi + ecx*2]
jmp 0x455b3d
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
push ecx
push esi
lea ecx, [ebp - 0x34]
push ecx
push eax
call fcn.0044d401
mov edi, dword [ebp - 0x34]
add esp, 0x14
mov esi, eax
lea eax, [edi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044d316
jmp 0x455b65
mov ax, word [esi]
mov ecx, dword [ebp - 4]
mov word [ecx], ax
mov eax, dword [ebp - 4]
mov ax, word [eax]
add dword [ebp - 4], 2
inc esi
inc esi
test ax, ax
je 0x455b6d
dec edi
jns 0x455b4b
jmp 0x45544d
sub dword [ebp - 4], 2
jmp 0x45544d
mov edi, edx
lea eax, [esi + 2]
push eax
lea ecx, [ebp - 0x60]
call fcn.0044d316
dec esi
js 0x45544d
lea eax, [esi + 1]
mov cx, word [edi]
mov edx, dword [ebp - 4]
mov word [edx], cx
add dword [ebp - 4], 2
inc edi
inc edi
dec eax
jne 0x455b8e
jmp 0x45544d
and word [eax], 0
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0xc]
sar eax, 1
inc eax
inc eax
push eax
call fcn.00444fb1
mov esi, dword [ebp - 4]
sub esi, dword [ebp - 0x38]
lea ecx, [ebp - 0x24]
sar esi, 1
call fcn.0043e825
mov eax, 0x4ddd50
test eax, eax
pop ebx
je 0x455bdd
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov eax, esi
pop esi
leave
ret 0x10