Function at 0x4747bc
Capabilities:
Log keystrokes
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 8], 0
jle 0x474c1b
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0xff
push dword [ebp + 8]
call fcn.00474f4e
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa0
jne 0x474813
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x10
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x2a
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa1
jne 0x474839
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x10
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x36
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa2
jne 0x47485f
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x11
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x1d
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa3
jne 0x474885
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x11
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x9d
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa4
jne 0x4748ab
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x12
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x38
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xa5
jne 0x4748d1
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x12
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xb8
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x90
jne 0x4748ee
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xc5
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x24
jne 0x474908
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xc7
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x26
jne 0x474922
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xc8
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x21
jne 0x47493c
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xc9
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x25
jne 0x474956
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xcb
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x27
jne 0x474970
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xcd
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x23
jne 0x47498a
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xcf
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x28
jne 0x4749a4
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xd0
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x22
jne 0x4749be
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xd1
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x2d
jne 0x4749d8
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xd2
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x2e
jne 0x4749f2
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xd3
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x5b
jne 0x474a0c
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdb
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x5c
jne 0x474a26
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdc
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x5d
jne 0x474a40
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdd
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x5e
jne 0x474a5a
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xde
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x6f
jne 0x474a74
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xb5
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0xe
jne 0x474a97
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0xd
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x9c
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x3a
jne 0x474aba
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x2d
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x52
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x3b
jne 0x474add
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x2e
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x53
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x3c
jne 0x474b00
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x21
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x49
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x3d
jne 0x474b23
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x23
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x4f
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x3e
jne 0x474b46
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x24
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x47
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x89
jne 0x474b6c
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x25
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x4b
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x89
jne 0x474b92
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x26
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x48
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x8b
jne 0x474bb8
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x27
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x4d
jmp 0x474c16
mov ebx, dword [ebp + 0xc]
cmp dword [ebx], 0x8c
jne 0x474bde
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x28
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0x50
jmp 0x474c16
mov dword [ebp - 4], esp
push 0
mov ebx, dword [ebp + 0xc]
push dword [ebx]
xor eax, eax
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
cmp dword [ebp - 4], esp
je 0x474c11
push 0xdfe
push 0x4033fdd
push 6
call fcn.0053034d
add esp, 0xc
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
jmp 0x474f31
fild dword [ebp + 8]
fstp qword [ebp - 8]
push 0x80000601
push dword [ebp - 4]
push dword [ebp - 8]
push 1
mov ebx, 0x5c
call fcn.005349d0
add esp, 0x10
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0xff
fld qword [ebp - 0x10]
call fcn.004017c4
push eax
call fcn.00474f4e
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xc5
jne 0x474c85
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x90
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xb5
jne 0x474ca2
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x6f
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x53
jne 0x474cbc
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x6e
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x52
jne 0x474cd6
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x60
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x4f
jne 0x474cf0
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x61
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x50
jne 0x474d0a
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x62
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x51
jne 0x474d24
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x63
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x4b
jne 0x474d3e
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x64
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x4c
jne 0x474d58
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x65
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x4d
jne 0x474d72
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x66
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x47
jne 0x474d8c
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x67
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x48
jne 0x474da6
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x68
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x49
jne 0x474dc0
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x69
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x45
jne 0x474dda
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x72
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xb7
jne 0x474df7
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x2c
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x5b
je 0x474e16
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xdb
je 0x474e16
xor eax, eax
jmp 0x474e1b
mov eax, 1
test eax, eax
je 0x474e3a
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x5b
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdb
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x5c
je 0x474e59
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xdc
je 0x474e59
xor eax, eax
jmp 0x474e5e
mov eax, 1
test eax, eax
je 0x474e7d
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x5c
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdc
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0x5d
je 0x474e9c
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xdd
je 0x474e9c
xor eax, eax
jmp 0x474ea1
mov eax, 1
test eax, eax
je 0x474ec0
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x5d
mov ebx, dword [ebp + 0x10]
mov dword [ebx], 0xdd
jmp 0x474f31
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], 0xde
jne 0x474edd
mov ebx, dword [ebp + 0xc]
mov dword [ebx], 0x5e
jmp 0x474f31
mov dword [ebp - 4], 0
push 0
push dword [ebp - 4]
push 0x7f
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.00474f4e
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esp
push 1
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
nop
nop
cmp dword [ebp - 0xc], esp
je 0x474f2c
push 0x16bc
push 0x4033fdd
push 6
call fcn.0053034d
add esp, 0xc
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
push 8
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
cdq
push edx
push eax
call fcn.004726a1
jmp 0x474f48
mov esp, ebp
pop ebp
ret 0xc