joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4790d9
Capabilities:
Inspect section memory permissions

Disassembly:
fcos
xor byte [ebx + 0x75ff1045], cl
sub bh, bh
xor byte [esi + 0x57], dl
push esi
push edi
call 0x4ab593
mov eax, dword [ebp + 0x38]
cmp byte [ecx + 0x458b5043], cl
xor byte [ecx + 0x458b5443], cl
xor al, 0x68
xchg esp, eax
sbb ecx, dword [eax + eax - 0x39]
add ebx, dword [eax - 0x76ffb4eb]
adc eax, 0x4389004b
pop eax
call dword [0x4a64f0]
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x1c], eax
mov eax, dword [ebp + 0x34]
shr eax, 0xa1
test eax, 0x20007
test byte [ebp + 0x36], 0x40
mov dword [ebp + 0x18], eax
inc ebp
invalid
je 0x4790af
mov dword [ebp + 0x18], edi
mov esi, dword [ebp + 0x2c]
mov eax, dword [ebx + 0x20]
mov ecx, dword [ebx + 0x24]
lea edx, [ebx + 0x40]
mov edi, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0x28]
add esi, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x2c]
add eax, ecx
xor edi, edi
cmp dword [ebp + 0x30], 0xfffffff0
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], esi
clc
mov dword [ebp - 4], eax
mov dword [ebp + 0x20], edi
je 0x4790e9
mov dword [ebp + 0x20], 0x10000000
mov ecx, dword [ebp + 0x34]
test ecx, 0x4000000
je 0x4790f8
invalid
or byte [ebp + 0x22], 0x80
test ecx, 0x10000000
Function at 0x479398
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop ebp
and byte [ecx + 0x5d89245d], cl
sbb byte [ecx + 0x61e8145d], cl
jb 0x47937d
add byte [ecx - 0x73], bl
dec ebp
call 0xfc918e6b
dec dword [ebp + 0x7ae8fc4d]
rol dword [ebx], 1
add byte [ebp + 0x7ae8ec4d], cl
rol dword [ebx], 1
add byte [ebp + 0x7ae8d84d], cl
jp 0x47936b
add eax, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp + 0x14]
push eax
jp 0x47936b
add eax, dword [eax]
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x18]
lea ecx, [ebp + 0x24]
lea ebx, [ebp + 0x1c]
call 0x4be657
mov esi, dword [ebp + 0x18]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 8], ebx
jmp 0x4793c8
inc esi
inc esi
inc dword [ebp - 8]
cmp word [esi], 0x2d
je 0x4793c3
mov ecx, dword [ebp + 8]
push 1
push ebx
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0x20]
call 0x4c42d8
mov ecx, dword [ebp + 8]
cmp byte [ecx + 0x92], bl
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x18], eax
jne 0x479408
test byte [ecx + 9], 0xf
jne 0x479408
push 1
push ebx
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x24]
call 0x4c4ff5
add bl, ch
invalid
push 1
push ebx
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x24]
call 0x4c430f
cmp word [esi], bx
mov eax, dword [ebp - 4]
mov dword [ebp + 0x14], eax
mov dword [ebp - 0xc], eax
je 0x47943b
mov ecx, dword [ebp + 8]
push 1
push ebx
lea eax, [ebp - 0x14]
push eax
push esi
call 0x4c432d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
push dword [ebp + 0x18]
mov esi, dword [0x4a64dc]
push 0x4af2c8
call esi
push dword [ebp + 0x18]
neg eax
sbb al, al
inc al
push 0x4b15a8
mov byte [ebp + 0x27], al
call esi
neg eax
sbb al, al
inc al
cmp byte [ebp + 0x27], bl
mov byte [edi + 0x48], al
jne 0x479479
cmp al, bl
jne 0x479479
mov eax, dword [ebp + 0x18]
mov byte [ebp + 0x27], 1
jmp 0x47947f
mov eax, dword [ebp - 0xc]
mov byte [ebp + 0x27], bl
lea esi, [edi + 8]
push eax
mov ecx, esi
call 0x4bed85
push dword [esi]
lea ecx, [edi + 0xc]
call 0x4becf2
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 0x20]
mov esi, dword [ecx + 0x28]
mov dword [ebp - 0x2c], ebx
cmp word [eax], bx
mov dword [ebp + 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], esi
je 0x4794c7
mov eax, dword [ecx + 0x1c]
mov dword [ebp + 0x20], eax
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp + 0x14]
Function at 0x47b656
Capabilities:
Inspect section memory permissions

Disassembly:
mov eax, ecx
call 0x4b2859
test al, al
jne 0x47b687
cmp cx, 0x2d
jne 0x47b640
or byte [ebp - 5], 8
jmp 0x47b67a
cmp cx, 0x7c
jne 0x47b64c
or byte [ebp - 5], 0x10
jmp 0x47b67a
cmp cx, 0x2b
jne 0x47b658
or byte [ebp - 5], 4
jmp 0x47b67a
cmp cx, 0x2e
jne 0x47b664
mov byte [ebp - 2], 1
jmp 0x47b67a
cmp cx, 0x3e
jne 0x47b670
mov byte [ebp - 3], 2
jmp 0x47b67a
cmp cx, 0x2a
jne 0x47b67a
mov byte [ebp - 1], 1
inc edx
inc edx
mov dword [ebp + 8], edx
mov cx, word [edx]
cmp cx, di
jne 0x47b629
lea eax, [ebp + 8]
push ebx
push eax
call 0x4b28f2
mov esi, dword [ebp + 8]
push 0x2c
pop ebx
push ebx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
call fcn.0048d39d
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
mov cx, word [eax]
mov word [eax], di
cmp word [esi], 0x2d
sub eax, 0xdc4d8966
mov edi, 0x80000000
jne 0x47b7b7

Function at 0x47b6b0
Capabilities:
Inspect section memory permissions

Disassembly:
mov eax, ecx
call 0x4b2859
test al, al
jne 0x47b687
cmp cx, 0x2d
jne 0x47b640
or byte [ebp - 5], 8
jmp 0x47b67a
cmp cx, 0x7c
jne 0x47b64c
or byte [ebp - 5], 0x10
jmp 0x47b67a
cmp cx, 0x2b
jne 0x47b658
or byte [ebp - 5], 4
jmp 0x47b67a
cmp cx, 0x2e
jne 0x47b664
mov byte [ebp - 2], 1
jmp 0x47b67a
cmp cx, 0x3e
jne 0x47b670
mov byte [ebp - 3], 2
jmp 0x47b67a
cmp cx, 0x2a
jne 0x47b67a
mov byte [ebp - 1], 1
inc edx
inc edx
mov dword [ebp + 8], edx
mov cx, word [edx]
cmp cx, di
jne 0x47b629
lea eax, [ebp + 8]
push ebx
push eax
call 0x4b28f2
mov esi, dword [ebp + 8]
push 0x2c
pop ebx
push ebx
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], esi
call fcn.0048d39d
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
mov cx, word [eax]
mov word [eax], di
cmp word [esi], 0x2d
sub eax, 0xdc4d8966
mov edi, 0x80000000
jne 0x47b7b7

Function at 0x47d017
Capabilities:
Connect pipe

Disassembly:
js 0x47d07f
mov ecx, dword [esi]
add byte [ebx - 0x3f7bf33c], al
Function at 0x47e4ed
Capabilities:
Inspect section memory permissions

Disassembly:
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
je 0x47e4f9
mov byte [ebx + 0x50], 1
xor ecx, ecx
cmp dword [ebp + 0x38], ecx
je 0x47e504
mov byte [ebx + 0x50], 2
mov eax, dword [edi + 0x48]
shl eax, 2
not eax
and eax, 0x10000
test byte [ebp + 0x30], 0x10
mov dword [ebp + 8], eax
mov dword [ebp + 0x1c], ecx
jne 0x47e524
mov dword [ebp + 0x1c], 0x10000000
mov eax, dword [ebx + 0x40]
cmp word [eax], cx
mov dword [ebp + 0x18], ecx
je 0x47e53e
push ecx
push ecx
push esi
push eax
call 0x4ccd3a
add esp, 0x10
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0x30]
cdq
push edx
push eax
call 0x4b5b1a
neg al
sbb al, al
inc al
cmp byte [ebx + 0x50], 0
pop ecx
pop ecx
mov byte [ebp + 0x23], al
je 0x47e57e
push 0x90
call 0x5109a8
test eax, eax
pop ecx
je 0x47e576
lea ecx, [ebx + 0x34]
push ecx
mov ecx, eax
call 0x50f7f3
jmp 0x47e578
xor eax, eax
mov dword [ebx + 0x1c], eax
mov al, byte [ebp + 0x23]
cmp byte [ebx + 0x50], 0
mov esi, dword [ebx + 0x1c]
mov dword [ebp + 0x24], esi
jne 0x47e5ac
jne 0x47e5ab
push 0x7c
call 0x5109d5
test eax, eax
pop ecx
je 0x47e5a3
lea ecx, [ebx + 0x34]
push ecx
mov ecx, eax
call 0x509306
jmp 0x47e5a5
xor eax, eax
mov dword [ebx + 0x1c], eax
mov al, byte [ebp + 0x23]
cmp byte [ebx + 0x50], 1
mov ecx, dword [ebx + 0x1c]
mov dword [ebp + 0x14], ecx
jne 0x47e65c
test byte [ebp + 0x30], 4
je 0x47e5c7
or byte [esi + 0x7c], 1
jmp 0x47e5cb
or byte [ebp + 0x1d], 2
test byte [ebp + 0x33], 0x20
je 0x47e5d7
or dword [ebp + 0x1c], 2
jmp 0x47e5e1
test byte [ebp + 0x33], 0x80
jne 0x47e5e1
or dword [ebp + 0x1c], 1
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x47e5fc
or dword [ebp + 0x1c], 3
test byte [ebp + 0x32], 0x80
mov dword [esi + 0x80], ecx
je 0x47e5fc
or byte [esi + 0x7c], 2
test al, al
jne 0x47e604
or byte [esi + 0x7c], 0x40
or word [ebp + 0x1c], 0x101
lea eax, [ebx + 0x10]
mov byte [esi + 0x7a], 1
mov byte [esi + 0x79], 0
push eax
lea ecx, [ebp + 0x10]
mov dword [ebx + 4], 0x10002
call 0x4c3f09
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
push dword [edi + 0x18]
lea esi, [ebp - 0x10]
sub esp, 0x10
in al, dx
adc byte [ebx - 0x7e5a5a04], cl
leave
add byte [eax], al
add byte [eax - 0x5b], al
push ecx
push dword [eax]
mov ecx, dword [ebp + 0x24]
Function at 0x47e5d3
Capabilities:
Inspect section memory permissions

Disassembly:
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
je 0x47e4f9
mov byte [ebx + 0x50], 1
xor ecx, ecx
cmp dword [ebp + 0x38], ecx
je 0x47e504
mov byte [ebx + 0x50], 2
mov eax, dword [edi + 0x48]
shl eax, 2
not eax
and eax, 0x10000
test byte [ebp + 0x30], 0x10
mov dword [ebp + 8], eax
mov dword [ebp + 0x1c], ecx
jne 0x47e524
mov dword [ebp + 0x1c], 0x10000000
mov eax, dword [ebx + 0x40]
cmp word [eax], cx
mov dword [ebp + 0x18], ecx
je 0x47e53e
push ecx
push ecx
push esi
push eax
call 0x4ccd3a
add esp, 0x10
mov dword [ebp + 0x18], eax
mov eax, dword [ebp + 0x30]
cdq
push edx
push eax
call 0x4b5b1a
neg al
sbb al, al
inc al
cmp byte [ebx + 0x50], 0
pop ecx
pop ecx
mov byte [ebp + 0x23], al
je 0x47e57e
push 0x90
call 0x5109a8
test eax, eax
pop ecx
je 0x47e576
lea ecx, [ebx + 0x34]
push ecx
mov ecx, eax
call 0x50f7f3
jmp 0x47e578
xor eax, eax
mov dword [ebx + 0x1c], eax
mov al, byte [ebp + 0x23]
cmp byte [ebx + 0x50], 0
mov esi, dword [ebx + 0x1c]
mov dword [ebp + 0x24], esi
jne 0x47e5ac
jne 0x47e5ab
push 0x7c
call 0x5109d5
test eax, eax
pop ecx
je 0x47e5a3
lea ecx, [ebx + 0x34]
push ecx
mov ecx, eax
call 0x509306
jmp 0x47e5a5
xor eax, eax
mov dword [ebx + 0x1c], eax
mov al, byte [ebp + 0x23]
cmp byte [ebx + 0x50], 1
mov ecx, dword [ebx + 0x1c]
mov dword [ebp + 0x14], ecx
jne 0x47e65c
test byte [ebp + 0x30], 4
je 0x47e5c7
or byte [esi + 0x7c], 1
jmp 0x47e5cb
or byte [ebp + 0x1d], 2
test byte [ebp + 0x33], 0x20
je 0x47e5d7
or dword [ebp + 0x1c], 2
jmp 0x47e5e1
test byte [ebp + 0x33], 0x80
jne 0x47e5e1
or dword [ebp + 0x1c], 1
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x47e5fc
or dword [ebp + 0x1c], 3
test byte [ebp + 0x32], 0x80
mov dword [esi + 0x80], ecx
je 0x47e5fc
or byte [esi + 0x7c], 2
test al, al
jne 0x47e604
or byte [esi + 0x7c], 0x40
or word [ebp + 0x1c], 0x101
lea eax, [ebx + 0x10]
mov byte [esi + 0x7a], 1
mov byte [esi + 0x79], 0
push eax
lea ecx, [ebp + 0x10]
mov dword [ebx + 4], 0x10002
call 0x4c3f09
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
push dword [edi + 0x18]
lea esi, [ebp - 0x10]
sub esp, 0x10
in al, dx
adc byte [ebx - 0x7e5a5a04], cl
leave
add byte [eax], al
add byte [eax - 0x5b], al
push ecx
push dword [eax]
mov ecx, dword [ebp + 0x24]
Function at 0x47e645
Capabilities:
Inspect section memory permissions

Disassembly:
movsd dword es:[edi], dword [esi]
call 0x50f1c3
lea ecx, [ebp + 0x10]
call 0x4b5869
mov al, byte [ebp + 0x23]
mov esi, dword [ebp + 0x24]
mov edi, dword [ebp + 0x28]
jge 0x47e684
cmp byte [ebx + 0x50], 2
jne 0x47e714
test byte [ebp + 0x30], 4
cmp byte [ebx + 0x50], 0
jne 0x47e7ee
test al, al
jne 0x47e726
or byte [ebp + 0x1f], 8
mov ecx, dword [ebp + 0x30]
test cl, 4
je 0x47e732
or byte [ebp + 0x1d], 0x20
test ecx, 0x20000000
je 0x47e740
or byte [ebp + 0x1d], 2
jmp 0x47e74e
test ecx, ecx
jns 0x47e74a
or byte [ebp + 0x1d], 1
jmp 0x47e74e
or byte [ebp + 0x1d], 3
cmp dword [ebp + 0x18], 0
je 0x47e764
or dword [ebp + 0x1c], 0x40
test ecx, 0x800000
je 0x47e764
or byte [ebp + 0x1d], 4
mov eax, dword [ebp + 0x14]
mov edi, ecx
shr edi, 0x13
adc eax, dword [ebx - 0x3e08fe19]
add byte [eax], al
and byte [eax], al
je 0x47e77f
or byte [eax + 0x64], 1
or dword [ebp + 0x1c], 0xb
test ecx, 0x400000
je 0x47e78f
or byte [eax + 0x64], 2
or dword [ebp + 0x1c], 0xb
test ecx, 0x100000
je 0x47e79b
or byte [eax + 0x64], 4
lea eax, [ebx + 0x10]
push eax
lea ecx, [ebp + 0x30]
call 0x4c408b
add al, 0
push dword [ebp + 0xc]
or edi, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x28]
push dword [ecx + 0x18]
or edi, dword [ebp + 8]
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [ebp + 0x14]
or edi, 0x40000000
push edi
push dword [eax]
call 0x50975d
lea ecx, [ebp + 0x30]
call 0x4b59e9
test byte [ebp + 0x1c], 0xb
jne 0x47e7ee
mov eax, dword [ebp + 0x14]
mov eax, dword [eax + 0x78]
test eax, eax
je 0x47e7ee
push 5
push dword [eax + 0x18]
call dword [0x4a6838]
invalid
dec edx
invalid
mov eax, dword [ebx + 0x1c]
push 1
push dword [eax + 0x18]
call dword [0x4a657c]
mov ecx, dword [ebp + 0x28]
xor edi, edi
call 0x504869
test eax, eax
je 0x47e80c
mov edi, eax
cmp dword [ebp + 0x34], 0
je 0x47e83f
push dword [ebp + 0x34]
lea ecx, [ebp + 0x30]
push ecx
push eax
mov dword [ebp + 0x30], 0x80000000
call str.2K_0
add esp, 0xc
cmp byte [ebx + 0x50], 0
mov edi, eax
test edi, edi
je 0x47e84e
mov ecx, dword [ebx + 0x1c]
push 1
push edi
call 0x4b9d24
invalid

Function at 0x47e66a
Capabilities:
Inspect section memory permissions

Disassembly:
je 0x47e672
or byte [esi + 0x7c], 1
jmp 0x47e676
or byte [ebp + 0x1d], 2
test byte [ebp + 0x33], 0x20
je 0x47e682
or dword [ebp + 0x1c], 2
jmp 0x47e68c
test byte [ebp + 0x33], 0x80
jne 0x47e68c
or dword [ebp + 0x1c], 1
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x47e6a7
or dword [ebp + 0x1c], 3
test byte [ebp + 0x32], 0x80
mov dword [esi + 0x80], ecx
je 0x47e6a7
or byte [esi + 0x7c], 2
test al, al
jne 0x47e6af
or byte [esi + 0x7c], 0x40
or dword [ebp + 0x1c], 1
lea eax, [ebx + 0x10]
mov byte [esi + 0x7a], 2
mov byte [esi + 0x79], 0
push eax
lea ecx, [ebp + 0x10]
adc bh, al
inc ebx
add al, 2
add byte [ecx], al
add al, ch
in al, 0x58
add al, 0
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
push dword [edi + 0x18]
lea esi, [ebp - 0x10]
Function at 0x47e6c1
Capabilities:
Inspect section memory permissions

Disassembly:
je 0x47e672
or byte [esi + 0x7c], 1
jmp 0x47e676
or byte [ebp + 0x1d], 2
test byte [ebp + 0x33], 0x20
je 0x47e682
or dword [ebp + 0x1c], 2
jmp 0x47e68c
test byte [ebp + 0x33], 0x80
jne 0x47e68c
or dword [ebp + 0x1c], 1
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x47e6a7
or dword [ebp + 0x1c], 3
test byte [ebp + 0x32], 0x80
mov dword [esi + 0x80], ecx
je 0x47e6a7
or byte [esi + 0x7c], 2
test al, al
jne 0x47e6af
or byte [esi + 0x7c], 0x40
or dword [ebp + 0x1c], 1
lea eax, [ebx + 0x10]
mov byte [esi + 0x7a], 2
mov byte [esi + 0x79], 0
push eax
lea ecx, [ebp + 0x10]
adc bh, al
inc ebx
add al, 2
add byte [ecx], al
add al, ch
in al, 0x58
add al, 0
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
push dword [edi + 0x18]
lea esi, [ebp - 0x10]

Function at 0x47ec2a
Capabilities:
Parse credit card information

Disassembly:
push esi
push edi
lea eax, [ebp + 0x78]
mov edi, ecx
push eax
mov dword [ebp + 0x38], edi
call 0x4b5e9b
pop ecx
mov esi, 0x4a69d4
add byte [ebx], dh
fist dword [esi - 0x73]
dec ebp
inc esp
mov dword [ebp + 0x48], ebx
call 0x4c44e1
push esi
lea ecx, [ebp - 0x10]
call 0x4c44ea
add byte [esi - 0x73], dl
dec ebp
hlt
call 0x4c44f3
fldz
push 4
add al, 0xdd
pop ebp
call 0x50c031f8
push str._gui
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
call 0x4bdc7a
add esp, 0xc
test al, al
je 0x47ecb7
push str.27:INDATA
lea ecx, [ebp + 0x7c]
call 0x4c4528
push dword [ebp + 0x78]
lea ecx, [ebp + 0x7c]
call 0x4bbe86
push dword [ebp + 0x7c]
mov ecx, edi
call 0x4ad416
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp + 0x7c]
jmp 0x47f7c2
push 0xa
pop ebx
jmp 0x47ed26
call 0x4b69dd

Function at 0x47ec3f
Capabilities:
Parse credit card information

Disassembly:
push esi
push edi
lea eax, [ebp + 0x78]
mov edi, ecx
push eax
mov dword [ebp + 0x38], edi
call 0x4b5e9b
pop ecx
mov esi, 0x4a69d4
add byte [ebx], dh
fist dword [esi - 0x73]
dec ebp
inc esp
mov dword [ebp + 0x48], ebx
call 0x4c44e1
push esi
lea ecx, [ebp - 0x10]
call 0x4c44ea
add byte [esi - 0x73], dl
dec ebp
hlt
call 0x4c44f3
fldz
push 4
add al, 0xdd
pop ebp
call 0x50c031f8
push str._gui
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
call 0x4bdc7a
add esp, 0xc
test al, al
je 0x47ecb7
push str.27:INDATA
lea ecx, [ebp + 0x7c]
call 0x4c4528
push dword [ebp + 0x78]
lea ecx, [ebp + 0x7c]
call 0x4bbe86
push dword [ebp + 0x7c]
mov ecx, edi
call 0x4ad416
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp + 0x7c]
jmp 0x47f7c2
push 0xa
pop ebx
jmp 0x47ed26
call 0x4b69dd
Function at 0x47ec63
Capabilities:
Parse credit card information

Disassembly:
push esi
push edi
lea eax, [ebp + 0x78]
mov edi, ecx
push eax
mov dword [ebp + 0x38], edi
call 0x4b5e9b
pop ecx
mov esi, 0x4a69d4
add byte [ebx], dh
fist dword [esi - 0x73]
dec ebp
inc esp
mov dword [ebp + 0x48], ebx
call 0x4c44e1
push esi
lea ecx, [ebp - 0x10]
call 0x4c44ea
add byte [esi - 0x73], dl
dec ebp
hlt
call 0x4c44f3
fldz
push 4
add al, 0xdd
pop ebp
call 0x50c031f8
push str._gui
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
call 0x4bdc7a
add esp, 0xc
test al, al
je 0x47ecb7
push str.27:INDATA
lea ecx, [ebp + 0x7c]
call 0x4c4528
push dword [ebp + 0x78]
lea ecx, [ebp + 0x7c]
call 0x4bbe86
push dword [ebp + 0x7c]
mov ecx, edi
call 0x4ad416
cdq
mov esi, eax
mov ebx, edx
lea ecx, [ebp + 0x7c]
jmp 0x47f7c2
push 0xa
pop ebx
jmp 0x47ed26
call 0x4b69dd

Function at 0x47ecc1
Capabilities:
Parse credit card information

Disassembly:
push 6
push dword [ebp + 0x78]
push str._base
call 0x4b7242
add esp, 0xc
test al, al
je 0x47ecea
add dword [ebp + 0x78], 0xc
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x78]
push eax
mov dword [ebp + 0x4c], ebx
call 0x4c765e
pop ecx
pop ecx
jmp 0x47ed26
push 5
push dword [ebp + 0x78]
jne 0x47ed67
push 0x4b17e4
call 0x4b7270
add esp, 0xc
test al, al
je 0x47ed2f
add dword [ebp + 0x78], ebx
mov eax, dword [ebp + 0x78]
mov dword [ebp + 0x34], eax
lea eax, [ebp + 4]
push eax
lea eax, [ebp + 0x34]
push eax
call 0x4c7538
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x78]
push eax
call 0x4bec47
add esp, 0x10
mov eax, dword [ebp + 0x78]
cmp word [eax], 0x2d
je 0x47ecbc
mov eax, dword [ebp + 0x78]
mov ax, word [eax]
push 0x23
pop ecx
cmp ax, cx
jne 0x47ed42
mov dword [ebp + 0x14], ecx
jmp 0x47ed48
cmp ax, 0x24
jne 0x47ed4c
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x78]
push eax
call 0x4b5fb6
mov esi, dword [ebp + 0x78]
cmp word [esi], 0
pop ecx
jne 0x47ed68
xor esi, esi
xor ebx, ebx
jmp 0x47f7c7
push esi
call fcn.0048d6b6
pop ecx
push esi
lea ecx, [ebp + 0x30]
call 0x4c460b
push esi
call dword [0x4a6508]
add eax, ebx
push eax
lea ecx, [ebp + 0x30]
call 0x4bbf49
mov esi, dword [ebp + 0x30]
push 0x3b
push esi
mov dword [ebp + 0x78], esi
call dword [0x4a65c0]
mov ebx, eax
test ebx, ebx
je 0x47eda3
and word [ebx], 0
mov edx, esi
call 0x4bbbfe
test al, al
jne 0x47edea
push 0x3d
push esi
call dword [0x4a65c0]
dec edx
invalid
test eax, eax
je 0x47edea
cmp word [eax + 2], 0x3d
je 0x47edd2
mov cx, word [eax - 2]
cmp cx, 0x3e
je 0x47edd2
cmp cx, 0x3c
jne 0x47edd4
xor eax, eax
test eax, eax
je 0x47edea
push 0x3d
lea eax, [ebp + 0x44]
push eax
lea eax, [ebp + 0x78]
push eax
call 0x4bea8e
add esp, 0xc
invalid
invalid
test ebx, ebx
je 0x47edf3
mov word [ebx], 0x3b
mov eax, dword [ebp + 0x78]
cmp word [eax], 0x3d
push 2
lea ecx, [ebp - 0xc]
call 0x4b69e5
lea ecx, [ebp - 0x10]
invalid

Function at 0x47edb5
Capabilities:
Parse credit card information

Disassembly:
dec edx
add byte [ebp + 0x662f74c0], al
cmp dword [eax + 2], 0x3d
Function at 0x47edfc
Capabilities:
Parse credit card information

Disassembly:
pop ebx
jne 0x47ee02
add dword [ebp + 0x78], ebx
lea eax, [ebp + 0x78]
push eax
call 0x4b606c
pop ecx
lea ecx, [ebp + 0x64]
call 0x4bbf8e
lea ecx, [ebp + 0x34]
call 0x4bbf96
mov esi, dword [ebp + 0x78]
jne 0x47ee97
push 0x4c1b94
mov dword [ebp + 0x58], esi
call dword [0x4a64f0]

Function at 0x47ee04
Capabilities:
Parse credit card information

Disassembly:
pop ebx
jne 0x47ee02
add dword [ebp + 0x78], ebx
lea eax, [ebp + 0x78]
push eax
call 0x4b606c
pop ecx
lea ecx, [ebp + 0x64]
call 0x4bbf8e
lea ecx, [ebp + 0x34]
call 0x4bbf96
mov esi, dword [ebp + 0x78]
jne 0x47ee97
push 0x4c1b94
mov dword [ebp + 0x58], esi
call dword [0x4a64f0]

Function at 0x47ee83
Capabilities:
Parse credit card information

Disassembly:
push 0
lea eax, [ebp + 0x48]
push eax
push edx
mov ecx, edi
call 0x4caa80
jmp 0x47eea3

Function at 0x47ef4a
Capabilities:
Parse credit card information

Disassembly:
je 0x47f216
cmp cx, 0xff0a
je 0x47f216
cmp cx, 0xf7
je 0x47f20f
cmp cx, 0xff0f
je 0x47f20f
cmp cx, 0x2215
je 0x47f20f
cmp cx, 0xff05
je 0x47f208
cmp cx, 0xfe6a
je 0x47f208
cmp cx, 0xff06
jne 0x47efa3
mov word [eax], 0x26
jmp 0x47f222
cmp cx, 0xff20
je 0x47f201
cmp cx, 0xfe6b
je 0x47f201
cmp cx, 0xff3e
jne 0x47efca
mov word [eax], 0x5e
jmp 0x47f222
cmp cx, 0xff1d
je 0x47f1a6
cmp cx, 0xfe66
mov word [eax], 0x40
jmp 0x47f222
mov word [eax], 0x25
jmp 0x47f222
mov word [eax], 0x2f
jmp 0x47f222
mov word [eax], 0x2a
jmp 0x47f222

Function at 0x47efda
Capabilities:
Parse credit card information

Disassembly:
je 0x47f1a6
cmp cx, 0xff03
jne 0x47eff1
mov word [eax], 0x23
jmp 0x47f222
cmp cx, 0xff08
mov word [eax], 0x3d
jmp 0x47f222

Function at 0x47eff6
Capabilities:
Parse credit card information

Disassembly:
je 0x47f1fa
cmp cx, 0xfe59
je 0x47f1fa
cmp cx, 0xfe5d
je 0x47f1fa
cmp cx, 0x3014
je 0x47f1fa
cmp cx, 0xff09
je 0x47f1f3
cmp cx, 0xfe5a
je 0x47f1f3
cmp cx, 0xfe5e
je 0x47f1f3
cmp cx, 0x3015
je 0x47f1f3
cmp cx, 0xff3b
je 0x47f1ec
cmp cx, 0x3010
je 0x47f1ec
cmp cx, 0xff3d
je 0x47f1e5
cmp cx, 0x3011
je 0x47f1e5
cmp cx, 0xff5b
je 0x47f1de
cmp cx, 0xfe5b
mov word [eax], 0x7b
jmp 0x47f222
mov word [eax], 0x5d
jmp 0x47f222
mov word [eax], 0x5b
jmp 0x47f222
mov word [eax], 0x29
jmp 0x47f222
mov word [eax], 0x28
jmp 0x47f222

Function at 0x47f085
Capabilities:
Parse credit card information

Disassembly:
je 0x47f1de
cmp cx, 0xff5d
je 0x47f1d7
cmp cx, 0xfe5c
je 0x47f1d7
cmp cx, 0x300a
je 0x47f1d0
cmp cx, 0x3008
je 0x47f1d0
cmp cx, 0xff1c
je 0x47f1d0
cmp cx, 0x300b
je 0x47f1c9
cmp cx, 0x3009
je 0x47f1c9
cmp cx, 0xff1e
je 0x47f1c9
cmp cx, 0xff0c
jne 0x47f0f4
mov word [eax], 0x2c
jmp 0x47f222
add byte [eax], al
cmp cx, 0xff0e
invalid
invalid

Function at 0x47f0fb
Capabilities:
Parse credit card information

Disassembly:
ret

Function at 0x47f240
Capabilities:
Parse credit card information

Disassembly:
jb 0x47f245
add byte [ebx - 0x7499878b], cl
push es
js 0x47f2ad
mov eax, dword [esi]
Function at 0x47f43d
Capabilities:
Parse credit card information

Disassembly:
jle 0x47f60c
fld qword [ebp + 0x5c]
mov byte [ebp + 0x7b], 0
fcomp qword [0x4ab468]
dec edx
invalid
fnstsw ax
test ah, 5
jp 0x47f452
fld qword [ebp + 0x5c]
mov byte [ebp + 0x7b], 1
fchs
fstp qword [ebp + 0x5c]
push 0x66
fldz
xor edi, edi
push edi
push edi
sub esp, 0x10
fstp qword [esp + 8]
lea eax, [ebp + 0x10]
fld qword [ebp + 0x5c]
fstp qword [esp]
push eax
call 0x505e44
mov esi, dword [ebp + 0x10]
xor ecx, ecx
mov cx, word [esi]
xor ebx, ebx
push ecx
call fcn.00491246
add esp, 0x24
jmp 0x47f4bd
mov eax, dword [ebp + 0x54]
or dword [ebp + 0x78], 0xffffffff
cmp eax, ebx
mov byte [ebp + 0x28], 0
mov byte [ebp + 0xc], 0
je 0x47f66b
cmp word [eax], 0x23
jne 0x47f62f
mov cl, byte [eax]
inc eax
inc eax
mov byte [ebp + 0x28], cl
mov dword [ebp + 0x54], eax
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp + 0x54]
push eax
call 0x4b91bc
mov edx, dword [ebp + 0x54]
pop ecx
pop ecx
mov cx, word [edx]
cmp cx, 0x65
je 0x47f656
cmp cx, 0x66
je 0x47f656
cmp cx, 0x67
jne 0x47f65b
mov cl, byte [edx]
mov byte [ebp + 0xc], cl
cmp eax, ebx
jle 0x47f66b
cmp dword [ebp + 0x78], ebx
jge 0x47f66b
mov byte [ebp + 0x28], 0
mov dword [ebp + 0x78], ebx
push dword [ebp + 0xc]
fldz
lea eax, [ebp]
push dword [ebp + 0x28]
push dword [ebp + 0x78]
sub esp, 0x10
fstp qword [esp + 8]
fld qword [ebp + 0x5c]
fstp qword [esp]
push eax
call 0x506060
add esp, 0x20
push eax
lea ecx, [ebp + 0x68]
call 0x4c4fc1
lea ecx, [ebp]
Function at 0x47f57c
Capabilities:
Parse credit card information

Disassembly:
lea eax, [ebp + 0x68]
push eax
lea ecx, [ebp + 0x2c]
call 0x4c4e5d
push dword [ebp - 4]
push dword [ebp - 8]
push ebx
push edi
call 0x513c32
push ecx
push 0x4b17c4
push esi
mov dword [ebp + 0x20], ebx
mov edi, eax
mov dword [ebp - 0x1c], edx
call dword [0x4a67d8]
add esp, 0xc
push dword [ebp + 0x2c]
call dword [0x4a6508]
push esi
mov ebx, eax
call dword [0x4a6508]
inc ebx
push ebx
push dword [ebp + 0x2c]
lea eax, [esi + eax*2]
push eax
call fcn.00483b14
add esp, 0xc
lea ecx, [ebp + 0x2c]
call 0x4b67df
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
ja 0x47f56d
jb 0x47f5d7
cmp edi, 1
jae 0x47f56d

Function at 0x4816f2
Capabilities:
Inspect section memory permissions

Disassembly:
pop es
dec ebx
add al, ch
and byte [ebp - 0x3b7cfffd], al
or al, 0x84