joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400069a0
Capabilities:
Parse pe header

Disassembly:
add rax, rdx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x140006a8b
cmp eax, 0x5b
jg 0x140006aa5
cmp eax, 0x48
je 0x140006a67
cmp eax, 0x48
jg 0x140006aa5
cmp eax, 0x3a
je 0x140006a3a
cmp eax, 0x3a
jg 0x140006aa5
cmp eax, 0x23
je 0x140006a4d
cmp eax, 0x23
jg 0x140006aa5
cmp eax, 0x21
je 0x140006a20
cmp eax, 0x21
jg 0x140006aa5
cmp eax, 0x1d
je 0x140006a33
cmp eax, 0x1d
jg 0x140006aa5
cmp eax, 4
je 0x140006a54
cmp eax, 5
je 0x140006a9e
jmp 0x140006aa5
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x11e2
jmp 0x140006aaa
mov eax, 0x224b
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.14000187a
mov eax, 0x1b73
jmp 0x140006aaa
mov eax, 0x22d3
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140002c96
mov eax, 0x2326
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006a83
cmp eax, 0x2d
jmp 0x140006a84
nop
mov eax, 0x4ef
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x112a
jmp 0x140006aaa
mov eax, 0x631
jmp 0x140006aaa
mov eax, 0
cmp ebx, eax
je 0x1400073e4
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
add byte [rdi], cl
mov esi, 0xfc458bd8
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x140006b44
cmp eax, 0x75
jg 0x140006b97
cmp eax, 0x67
je 0x140006b36
cmp eax, 0x67
jg 0x140006b97
cmp eax, 0x5a
je 0x140006b73
cmp eax, 0x5a
jg 0x140006b97
cmp eax, 0x56
je 0x140006b52
cmp eax, 0x56
jg 0x140006b97
cmp eax, 0x50
je 0x140006b3d
cmp eax, 0x50
jg 0x140006b97
mov eax, 0x1b08
jmp 0x140006b9c
mov eax, 0x11df
jmp 0x140006b9c
mov eax, 0x1e7f
jmp 0x140006b9c
mov eax, 0x1fd
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006b8f
cmp eax, 0x2d
jmp 0x140006b90
nop
mov eax, 0xc75
jmp 0x140006b9c
mov eax, 0
cmp ebx, eax
je 0x1400073e7
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov rcx, rax
call fcn.140001591
cmp ebx, eax
je 0x1400073ea
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
Function at 0x1400069b0
Capabilities:
Parse pe header

Disassembly:
add rax, rdx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x140006a8b
cmp eax, 0x5b
jg 0x140006aa5
cmp eax, 0x48
je 0x140006a67
cmp eax, 0x48
jg 0x140006aa5
cmp eax, 0x3a
je 0x140006a3a
cmp eax, 0x3a
jg 0x140006aa5
cmp eax, 0x23
je 0x140006a4d
cmp eax, 0x23
jg 0x140006aa5
cmp eax, 0x21
je 0x140006a20
cmp eax, 0x21
jg 0x140006aa5
cmp eax, 0x1d
je 0x140006a33
cmp eax, 0x1d
jg 0x140006aa5
cmp eax, 4
je 0x140006a54
cmp eax, 5
je 0x140006a9e
jmp 0x140006aa5
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x11e2
jmp 0x140006aaa
mov eax, 0x224b
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.14000187a
mov eax, 0x1b73
jmp 0x140006aaa
mov eax, 0x22d3
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140002c96
mov eax, 0x2326
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006a83
cmp eax, 0x2d
jmp 0x140006a84
nop
mov eax, 0x4ef
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x112a
jmp 0x140006aaa
mov eax, 0x631
jmp 0x140006aaa
mov eax, 0
cmp ebx, eax
je 0x1400073e4
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
add byte [rdi], cl
mov esi, 0xfc458bd8
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x140006b44
cmp eax, 0x75
jg 0x140006b97
cmp eax, 0x67
je 0x140006b36
cmp eax, 0x67
jg 0x140006b97
cmp eax, 0x5a
je 0x140006b73
cmp eax, 0x5a
jg 0x140006b97
cmp eax, 0x56
je 0x140006b52
cmp eax, 0x56
jg 0x140006b97
cmp eax, 0x50
je 0x140006b3d
cmp eax, 0x50
jg 0x140006b97
mov eax, 0x1b08
jmp 0x140006b9c
mov eax, 0x11df
jmp 0x140006b9c
mov eax, 0x1e7f
jmp 0x140006b9c
mov eax, 0x1fd
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006b8f
cmp eax, 0x2d
jmp 0x140006b90
nop
mov eax, 0xc75
jmp 0x140006b9c
mov eax, 0
cmp ebx, eax
je 0x1400073e7
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov rcx, rax
call fcn.140001591
cmp ebx, eax
je 0x1400073ea
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
Function at 0x140006a10
Capabilities:
Parse pe header

Disassembly:
add rax, rdx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x140006a8b
cmp eax, 0x5b
jg 0x140006aa5
cmp eax, 0x48
je 0x140006a67
cmp eax, 0x48
jg 0x140006aa5
cmp eax, 0x3a
je 0x140006a3a
cmp eax, 0x3a
jg 0x140006aa5
cmp eax, 0x23
je 0x140006a4d
cmp eax, 0x23
jg 0x140006aa5
cmp eax, 0x21
je 0x140006a20
cmp eax, 0x21
jg 0x140006aa5
cmp eax, 0x1d
je 0x140006a33
cmp eax, 0x1d
jg 0x140006aa5
cmp eax, 4
je 0x140006a54
cmp eax, 5
je 0x140006a9e
jmp 0x140006aa5
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x11e2
jmp 0x140006aaa
mov eax, 0x224b
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.14000187a
mov eax, 0x1b73
jmp 0x140006aaa
mov eax, 0x22d3
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140002c96
mov eax, 0x2326
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006a83
cmp eax, 0x2d
jmp 0x140006a84
nop
mov eax, 0x4ef
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x112a
jmp 0x140006aaa
mov eax, 0x631
jmp 0x140006aaa
mov eax, 0
cmp ebx, eax
je 0x1400073e4
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
add byte [rdi], cl
mov esi, 0xfc458bd8
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x140006b44
cmp eax, 0x75
jg 0x140006b97
cmp eax, 0x67
je 0x140006b36
cmp eax, 0x67
jg 0x140006b97
cmp eax, 0x5a
je 0x140006b73
cmp eax, 0x5a
jg 0x140006b97
cmp eax, 0x56
je 0x140006b52
cmp eax, 0x56
jg 0x140006b97
cmp eax, 0x50
je 0x140006b3d
cmp eax, 0x50
jg 0x140006b97
mov eax, 0x1b08
jmp 0x140006b9c
mov eax, 0x11df
jmp 0x140006b9c
mov eax, 0x1e7f
jmp 0x140006b9c
mov eax, 0x1fd
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006b8f
cmp eax, 0x2d
jmp 0x140006b90
nop
mov eax, 0xc75
jmp 0x140006b9c
mov eax, 0
cmp ebx, eax
je 0x1400073e7
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov rcx, rax
call fcn.140001591
cmp ebx, eax
je 0x1400073ea
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
Function at 0x140006a40
Capabilities:
Parse pe header

Disassembly:
add rax, rdx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x140006a8b
cmp eax, 0x5b
jg 0x140006aa5
cmp eax, 0x48
je 0x140006a67
cmp eax, 0x48
jg 0x140006aa5
cmp eax, 0x3a
je 0x140006a3a
cmp eax, 0x3a
jg 0x140006aa5
cmp eax, 0x23
je 0x140006a4d
cmp eax, 0x23
jg 0x140006aa5
cmp eax, 0x21
je 0x140006a20
cmp eax, 0x21
jg 0x140006aa5
cmp eax, 0x1d
je 0x140006a33
cmp eax, 0x1d
jg 0x140006aa5
cmp eax, 4
je 0x140006a54
cmp eax, 5
je 0x140006a9e
jmp 0x140006aa5
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x11e2
jmp 0x140006aaa
mov eax, 0x224b
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.14000187a
mov eax, 0x1b73
jmp 0x140006aaa
mov eax, 0x22d3
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140002c96
mov eax, 0x2326
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006a83
cmp eax, 0x2d
jmp 0x140006a84
nop
mov eax, 0x4ef
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x112a
jmp 0x140006aaa
mov eax, 0x631
jmp 0x140006aaa
mov eax, 0
cmp ebx, eax
je 0x1400073e4
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
add byte [rdi], cl
mov esi, 0xfc458bd8
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x140006b44
cmp eax, 0x75
jg 0x140006b97
cmp eax, 0x67
je 0x140006b36
cmp eax, 0x67
jg 0x140006b97
cmp eax, 0x5a
je 0x140006b73
cmp eax, 0x5a
jg 0x140006b97
cmp eax, 0x56
je 0x140006b52
cmp eax, 0x56
jg 0x140006b97
cmp eax, 0x50
je 0x140006b3d
cmp eax, 0x50
jg 0x140006b97
mov eax, 0x1b08
jmp 0x140006b9c
mov eax, 0x11df
jmp 0x140006b9c
mov eax, 0x1e7f
jmp 0x140006b9c
mov eax, 0x1fd
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006b8f
cmp eax, 0x2d
jmp 0x140006b90
nop
mov eax, 0xc75
jmp 0x140006b9c
mov eax, 0
cmp ebx, eax
je 0x1400073e7
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov rcx, rax
call fcn.140001591
cmp ebx, eax
je 0x1400073ea
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx

Function at 0x140006b20
Capabilities:
Parse pe header

Disassembly:
cmp eax, 0x39
je 0x140006b4b
cmp eax, 0x39
jg 0x140006b97
cmp eax, 0x19
je 0x140006b60
cmp eax, 0x35
je 0x140006b59
jmp 0x140006b97
mov eax, 0x20
jmp 0x140006b9c
mov eax, 0x65b
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov rcx, rax
call fcn.140001cdb
mov eax, 0x1949
jmp 0x140006b9c
Function at 0x140006bb0
Capabilities:
Parse pe header

Disassembly:
add rax, rdx
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x140006a8b
cmp eax, 0x5b
jg 0x140006aa5
cmp eax, 0x48
je 0x140006a67
cmp eax, 0x48
jg 0x140006aa5
cmp eax, 0x3a
je 0x140006a3a
cmp eax, 0x3a
jg 0x140006aa5
cmp eax, 0x23
je 0x140006a4d
cmp eax, 0x23
jg 0x140006aa5
cmp eax, 0x21
je 0x140006a20
cmp eax, 0x21
jg 0x140006aa5
cmp eax, 0x1d
je 0x140006a33
cmp eax, 0x1d
jg 0x140006aa5
cmp eax, 4
je 0x140006a54
cmp eax, 5
je 0x140006a9e
jmp 0x140006aa5
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x11e2
jmp 0x140006aaa
mov eax, 0x224b
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.14000187a
mov eax, 0x1b73
jmp 0x140006aaa
mov eax, 0x22d3
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140002c96
mov eax, 0x2326
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006a83
cmp eax, 0x2d
jmp 0x140006a84
nop
mov eax, 0x4ef
jmp 0x140006aaa
mov rax, qword [rbp - 0x30]
mov rcx, rax
call fcn.140001591
mov eax, 0x112a
jmp 0x140006aaa
mov eax, 0x631
jmp 0x140006aaa
mov eax, 0
cmp ebx, eax
je 0x1400073e4
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
add byte [rdi], cl
mov esi, 0xfc458bd8
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x48], rax
mov rax, qword [rbp - 0x48]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x140006b44
cmp eax, 0x75
jg 0x140006b97
cmp eax, 0x67
je 0x140006b36
cmp eax, 0x67
jg 0x140006b97
cmp eax, 0x5a
je 0x140006b73
cmp eax, 0x5a
jg 0x140006b97
cmp eax, 0x56
je 0x140006b52
cmp eax, 0x56
jg 0x140006b97
cmp eax, 0x50
je 0x140006b3d
cmp eax, 0x50
jg 0x140006b97
mov eax, 0x1b08
jmp 0x140006b9c
mov eax, 0x11df
jmp 0x140006b9c
mov eax, 0x1e7f
jmp 0x140006b9c
mov eax, 0x1fd
jmp 0x140006b9c
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x140006b8f
cmp eax, 0x2d
jmp 0x140006b90
nop
mov eax, 0xc75
jmp 0x140006b9c
mov eax, 0
cmp ebx, eax
je 0x1400073e7
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov rcx, rax
call fcn.140001591
cmp ebx, eax
je 0x1400073ea
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
Function at 0x140006f60
Capabilities:
Parse pe header

Disassembly:
jmp 0x140006f87
jmp 0x140006fa9
mov eax, 0x17c1
jmp 0x140006fbc

Function at 0x140006fb0
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x11bf
jmp 0x140006fbc
cmp ebx, eax
je 0x1400073f0
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp - 4]
cdqe
mov rdx, qword [rbp + 0x20]
add rax, rdx
mov qword [rbp - 0x90], rax
mov rax, qword [rbp - 0x90]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x7e
je 0x140007091
cmp eax, 0x7e
jg 0x1400073cc
cmp eax, 0x7a
je 0x1400073c5
cmp eax, 0x7a
jg 0x1400073cc
cmp eax, 0x6f
je 0x140007165
cmp eax, 0x6f
jg 0x1400073cc
cmp eax, 0x6e
je 0x140007078
cmp eax, 0x6e
jg 0x1400073cc
cmp eax, 0x52
je 0x14000705f
cmp eax, 0x52
jg 0x1400073cc
cmp eax, 0x16
je 0x14000714c
cmp eax, 0x40
je 0x14000716f
jmp 0x1400073cc
mov rax, qword [rbp - 0x90]
mov rcx, rax
call fcn.140001dfa
mov eax, 0x127
jmp 0x1400073d1
mov rax, qword [rbp - 0x90]
mov rcx, rax
call fcn.140002c96
mov eax, 0x25f7
jmp 0x1400073d1
mov rax, qword [rbp - 0x90]
mov qword [rbp - 0x98], rax
mov rax, qword [rbp - 0x98]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x75
je 0x14000712f
cmp eax, 0x75
jg 0x140007132
cmp eax, 0x67
je 0x140007135
cmp eax, 0x67
jg 0x140007132
cmp eax, 0x5a
je 0x140007105
cmp eax, 0x5a
jg 0x140007132
cmp eax, 0x56
je 0x140007138
cmp eax, 0x56
jg 0x140007132
cmp eax, 0x50
je 0x14000713b
cmp eax, 0x50
jg 0x140007132
cmp eax, 0x39
je 0x14000713e
cmp eax, 0x39
jg 0x140007132
cmp eax, 0x19
je 0x1400070f4
cmp eax, 0x35
je 0x140007141
jmp 0x14000712d
mov rax, qword [rbp - 0x98]
mov rcx, rax
call fcn.140001cdb
jmp 0x140007142
mov rax, qword [rbp - 0x98]
mov qword [rbp - 0xa0], rax
mov rax, qword [rbp - 0xa0]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x14000712a
cmp eax, 0x2d
jmp 0x14000712b
nop
jmp 0x140007142
jmp 0x140007132
nop
jmp 0x140007142
nop
jmp 0x140007142
nop
jmp 0x140007142
nop
jmp 0x140007142
nop
jmp 0x140007142
nop
jmp 0x140007142
nop
mov eax, 0x12b5
jmp 0x1400073d1
invalid
invalid
invalid
invalid

Function at 0x140007190
Capabilities:
Parse pe header

Disassembly:
add al, byte [rax]
add byte [rbx - 0x70f09808], al
adc eax, 0x83000002
clc
pop rcx
Function at 0x1400076e0
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
add byte [rbx - 0x70f09d08], al
mov esi, 0x83000000
clc
je 0x1400077ae
Function at 0x140007da0
Capabilities:
Parse pe header

Disassembly:
cmp eax, 3
je 0x140007e1d
cmp eax, 0x25
je 0x140007e39
jmp 0x140007e2b
mov rax, qword [rbp - 0x38]
mov rcx, rax
call fcn.140001591
jmp 0x140007e3a
jmp 0x140007e30
nop
jmp 0x140007e5e
nop
jmp 0x140007e5e
jmp 0x140007e8f
jmp 0x140007f7c
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
mov qword [rbp + 0x68], rax
mov rax, qword [rbp + 0x68]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x71
je 0x140008109
cmp eax, 0x71
jg 0x1400087dd
cmp eax, 0x6a
je 0x1400087e0
cmp eax, 0x6a
jg 0x1400087dd
cmp eax, 0x60
je 0x1400085cf
cmp eax, 0x60
jg 0x1400087dd
cmp eax, 0x53
je 0x14000849b
cmp eax, 0x53
jg 0x1400087dd
cmp eax, 0x2f
je 0x1400087e3
cmp eax, 0x2f
jg 0x1400087dd
cmp eax, 0x1c
je 0x1400087e6
cmp eax, 0x1c
jg 0x1400087dd
cmp eax, 0x19
je 0x14000811a
cmp eax, 0x19
jg 0x1400087dd
cmp eax, 7
je 0x1400085ad
cmp eax, 0xe
jne 0x1400087dd
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0x60]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5b
je 0x1400080e3
cmp eax, 0x5b
jg 0x1400080f1
cmp eax, 0x48
je 0x1400080c4
cmp eax, 0x48
jg 0x1400080f1
cmp eax, 0x3a
je 0x1400080a8
cmp eax, 0x3a
jg 0x1400080f1
cmp eax, 0x23
je 0x1400080f7
cmp eax, 0x23
jg 0x1400080f1
cmp eax, 0x21
je 0x14000809a
cmp eax, 0x21
jg 0x1400080f1
cmp eax, 0x1d
je 0x1400080fd
cmp eax, 0x1d
jg 0x1400080f1
cmp eax, 4
je 0x1400080b6
cmp eax, 5
je 0x140008103
jmp 0x1400080f1
mov rax, qword [rbp + 0x60]
mov rcx, rax
call fcn.140001591
jmp 0x140008104
mov rax, qword [rbp + 0x60]
mov rcx, rax
call fcn.14000187a
jmp 0x140008104
mov rax, qword [rbp + 0x60]
mov rcx, rax
call fcn.140002c96
jmp 0x140008104
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x11
je 0x1400080e0
cmp eax, 0x2d
jmp 0x1400080e1
nop
jmp 0x140008104
mov rax, qword [rbp + 0x60]
mov rcx, rax
call fcn.140001591
jmp 0x140008104
nop
jmp 0x1400087e7
nop
jmp 0x1400087e7
nop
jmp 0x1400087e7
nop
jmp 0x1400087e7
mov rax, qword [rbp + 0x68]
mov rcx, rax
call fcn.140002041
jmp 0x1400087e7
mov rax, qword [rbp + 0x68]
mov qword [rbp + 0x50], rax
mov rax, qword [rbp + 0x50]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x7e
je 0x1400081b7
cmp eax, 0x7e
jg 0x140008489
cmp eax, 0x7a
je 0x14000848f
cmp eax, 0x7a
jg 0x140008489
cmp eax, 0x6f
je 0x140008495
cmp eax, 0x6f
jg 0x140008489
cmp eax, 0x6e
je 0x1400081a6
cmp eax, 0x6e
jg 0x140008489
cmp eax, 0x52
je 0x140008195
cmp eax, 0x52
jg 0x140008489
cmp eax, 0x16
je 0x14000826a
cmp eax, 0x40
je 0x14000827b
jmp 0x140008489
mov rax, qword [rbp + 0x50]
mov rcx, rax
call fcn.140001dfa
jmp 0x140008496
mov rax, qword [rbp + 0x50]
mov rcx, rax
invalid
in al, 0xaa
Function at 0x1400086d0
Capabilities:
Parse pe header

Disassembly:
je 0x140008791
cmp eax, 0x4c
jg 0x14000878b
cmp eax, 0x4b
je 0x14000870b
cmp eax, 0x4b
jg 0x14000878b
cmp eax, 0x49
je 0x140008719
cmp eax, 0x49
jg 0x14000878b
cmp eax, 3
je 0x140008778
cmp eax, 0x25
je 0x140008794
jmp 0x140008786
mov rax, qword [rbp - 0x10]
mov rcx, rax
call fcn.140001591
jmp 0x140008795
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5c
je 0x14000876f
cmp eax, 0x5c
jg 0x140008772
cmp eax, 0x45
je 0x140008775
cmp eax, 0x45
jg 0x140008772
cmp eax, 0x30
je 0x140008753
cmp eax, 0x30
jg 0x140008772
cmp eax, 0xb
je 0x140008761
cmp eax, 0x1a
jmp 0x140008772
mov rax, qword [rbp - 0x18]
mov rcx, rax
call fcn.140001591
jmp 0x140008776
mov rax, qword [rbp - 0x18]
mov rcx, rax
call fcn.140001591
jmp 0x140008776
nop
jmp 0x140008795
nop
jmp 0x140008795
nop
jmp 0x140008795
mov rax, qword [rbp - 0x10]
mov rcx, rax
call fcn.140001591
jmp 0x140008795
jmp 0x14000878b
nop
jmp 0x1400087b9
nop
jmp 0x1400087b9
nop
jmp 0x1400087b9
jmp 0x1400087db
jmp 0x1400087e7
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x80]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x6f
je 0x14000896b
cmp eax, 0x6f
jg 0x14000896e
cmp eax, 0x42
je 0x140008958
cmp eax, 0x42
jg 0x14000896e
cmp eax, 0x19
je 0x140008844
cmp eax, 0x38
je 0x140008947
jmp 0x140008969
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x78]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x72
je 0x140008938
cmp eax, 0x72
jg 0x14000893b
cmp eax, 0x62
je 0x14000893e
cmp eax, 0x62
jg 0x14000893b
cmp eax, 0x4c
nop
jmp 0x14000896f
nop
jmp 0x14000896f
mov rax, qword [rbp + 0x80]
mov rcx, rax
call fcn.1400019fb
jmp 0x14000896f
mov rax, qword [rbp + 0x80]
mov rcx, rax
call fcn.1400014a6
jmp 0x14000896f
jmp 0x14000896e
nop
jmp 0x14000896f
nop
Function at 0x140008880
Capabilities:
Parse pe header

Disassembly:
je 0x140008941
cmp eax, 0x4c
jg 0x14000893b
cmp eax, 0x4b
je 0x1400088bb
cmp eax, 0x4b
jg 0x14000893b
cmp eax, 0x49
je 0x1400088c9
cmp eax, 0x49
jg 0x14000893b
cmp eax, 3
je 0x140008928
cmp eax, 0x25
je 0x140008944
jmp 0x140008936
mov rax, qword [rbp + 0x78]
mov rcx, rax
call fcn.140001591
jmp 0x140008945
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0x70]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5c
je 0x14000891f
cmp eax, 0x5c
jg 0x140008922
cmp eax, 0x45
je 0x140008925
cmp eax, 0x45
jg 0x140008922
cmp eax, 0x30
je 0x140008903
cmp eax, 0x30
jg 0x140008922
cmp eax, 0xb
je 0x140008911
cmp eax, 0x1a
jmp 0x140008922
mov rax, qword [rbp + 0x70]
mov rcx, rax
call fcn.140001591
jmp 0x140008926
mov rax, qword [rbp + 0x70]
mov rcx, rax
call fcn.140001591
jmp 0x140008926
nop
jmp 0x140008945
nop
jmp 0x140008945
nop
jmp 0x140008945
mov rax, qword [rbp + 0x78]
mov rcx, rax
call fcn.140001591
jmp 0x140008945
jmp 0x14000893b
nop
jmp 0x14000896f
nop
jmp 0x14000896f
nop
jmp 0x14000896f
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
movzx eax, byte [rax]
movsx ebx, al
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
mov rcx, rax
call fcn.1400014a6
cmp ebx, eax
je 0x140008af7
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
mov rcx, rax
call fcn.140001cdb
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x72
je 0x140008ac2
cmp eax, 0x72
jg 0x140008ac5
cmp eax, 0x62
je 0x140008ac8
cmp eax, 0x62
jg 0x140008ac5
cmp eax, 0x4c
je 0x140008acb
cmp eax, 0x4c
jg 0x140008ac5
cmp eax, 0x4b
je 0x140008a45
cmp eax, 0x4b
jg 0x140008ac5
cmp eax, 0x49
je 0x140008a53
cmp eax, 0x49
jg 0x140008ac5
add byte [rax], al
invalid
cmp eax, 3
je 0x140008ab2
cmp eax, 0x25
je 0x140008ace
jmp 0x140008ac0
mov rax, qword [rbp - 0x58]
mov rcx, rax
call fcn.140001591
jmp 0x140008acf
mov rax, qword [rbp - 0x58]
mov qword [rbp - 0x60], rax
mov rax, qword [rbp - 0x60]
movzx eax, byte [rax]
movsx eax, al
cmp eax, 0x5c
je 0x140008aa9
cmp eax, 0x5c
jg 0x140008aac
cmp eax, 0x45
je 0x140008aaf
cmp eax, 0x45
jg 0x140008aac
cmp eax, 0x30
je 0x140008a8d
cmp eax, 0x30
jg 0x140008aac
cmp eax, 0xb
je 0x140008a9b
cmp eax, 0x1a
jmp 0x140008aac
mov rax, qword [rbp - 0x60]
mov rcx, rax
call fcn.140001591
jmp 0x140008ab0
mov rax, qword [rbp - 0x60]
mov rcx, rax
call fcn.140001591
jmp 0x140008ab0
nop
jmp 0x140008acf
nop
jmp 0x140008acf
nop
jmp 0x140008acf
mov rax, qword [rbp - 0x58]
mov rcx, rax
call fcn.140001591
jmp 0x140008acf
jmp 0x140008ac5
nop
jmp 0x140008acf
nop
jmp 0x140008acf
nop
jmp 0x140008acf
nop
jmp 0x140008acf
nop
mov eax, dword [rbp + 0x8c]
cdqe
mov rdx, qword [rbp + 0xb0]
add rax, rdx
movzx eax, byte [rax]
cmp al, 0x1a
je 0x140008afa
add dword [rbp + 0x8c], 1
jmp 0x140007bca
nop
jmp 0x140008afb
nop
mov eax, dword [rbp + 0x8c]
add rsp, 0x118
pop rbx
pop rbp
ret