joyce8/EMBER2024-capa huggingface dataset:
Function at 0x48b5c2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [edi + 0x60]
mov dword [edi + 0x5c], eax
jne 0x48b5d5
push ebx
call fcn.0051aa26
add byte [ebx - 0x3f7bfb3c], al
je 0x48c0c4
mov eax, dword [ebx + 0xc]
xor ecx, ecx
mov word [eax], cx
add dword [ebx + 0xc], 2
mov ebx, dword [ebx + 0x10]
test ebx, ebx
je 0x48c0c4
push 0x24
push ebx
lea eax, [edi + 0x84]
push eax
push esi
call fcn.0051a438
add esp, 0x10
les edx, [eax]
mov dword [esi + 0x138], eax
test eax, eax
je 0x48c0c4
cmp dword [eax], ebx
invalid

Function at 0x48bb49
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp byte [edi + 0x82], 0
jne 0x48b826
invalid
lodsd eax, dword [esi]
std
invalid
invalid
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x48b826
push dword [esi + 4]
call eax
add esp, 4
test eax, eax
je 0x48c1ae
jmp 0x48b826
push eax
push esi
call fcn.0051a93b
mov ebx, eax
lea ecx, [edi + 0x82]
mov eax, dword [edi + 0x60]
add esp, 0x10
mov dword [edi + 0x5c], eax
cmp dword [esi + 0x10c], 0
je 0x48bb79
xor eax, eax
cmp byte [ecx], al
je 0x48bb27
cmp dword [esi + 0x128], eax
jmp 0x48bb2d
cmp byte [edi + 0x81], al
sete al
test eax, eax
je 0x48bb79
test ebx, ebx
je 0x48c0f5
cmp byte [ebx + 0x22], 0
je 0x48c0e8
cmp byte [ebx + 0x20], 0
jne 0x48c102
add byte [eax], al
cmp dword [ebx + 4], 0
je 0x48bbad
cmp dword [esp + 0x14], 0x3c
sete al
movzx eax, al
mov dh, 0xc0
push eax
mov eax, ecx
test ebx, ebx
jne 0x48bb46
cmp dword [esp + 0x14], 0x3c
mov al, byte [eax]
mov byte [edi + 0x80], al
jne case.default.0x48a773
mov eax, dword [esi + 0x78]
test eax, eax
je case.default.0x48a773
cmp dword [esi + 0x70], 0
je fcn.0048bc03
mov byte [edi + 0x83], 0
push dword [ebx + 0x18]
jae 0x48bbd5
mov byte [ebx + 0x20], 1
push dword [ebx + 0x10]
mov eax, dword [esi + 0x70]
push dword [ebx + 0x14]
push 0
add bh, bh
jbe 0x48bc43
call eax
add esp, 0x14
mov byte [ebx + 0x20], 0
test eax, eax
je 0x48c1e7
cmp byte [edi + 0x83], 0
mov byte [esp + 0x40], 0
jne 0x48ba6c
mov al, byte [edi + 0x82]
mov byte [edi + 0x80], al
jmp 0x48bf78
pop edi
pop esi
pop ebp
mov eax, 0x18
pop ebx
add esp, 0x24
pop edi
pop esi
pop ebp
invalid
Function at 0x48bb4e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp byte [edi + 0x82], 0
jne 0x48b826
invalid
lodsd eax, dword [esi]
std
invalid
invalid
mov eax, dword [esi + 0x6c]
test eax, eax
je 0x48b826
push dword [esi + 4]
call eax
add esp, 4
test eax, eax
je 0x48c1ae
jmp 0x48b826
push eax
push esi
call fcn.0051a93b
mov ebx, eax
lea ecx, [edi + 0x82]
mov eax, dword [edi + 0x60]
add esp, 0x10
mov dword [edi + 0x5c], eax
cmp dword [esi + 0x10c], 0
je 0x48bb79
xor eax, eax
cmp byte [ecx], al
je 0x48bb27
cmp dword [esi + 0x128], eax
jmp 0x48bb2d
cmp byte [edi + 0x81], al
sete al
test eax, eax
je 0x48bb79
test ebx, ebx
je 0x48c0f5
cmp byte [ebx + 0x22], 0
je 0x48c0e8
cmp byte [ebx + 0x20], 0
jne 0x48c102
add byte [eax], al
cmp dword [ebx + 4], 0
je 0x48bbad
cmp dword [esp + 0x14], 0x3c
sete al
movzx eax, al
mov dh, 0xc0
push eax
mov eax, ecx
test ebx, ebx
jne 0x48bb46
cmp dword [esp + 0x14], 0x3c
mov al, byte [eax]
mov byte [edi + 0x80], al
jne case.default.0x48a773
mov eax, dword [esi + 0x78]
test eax, eax
je case.default.0x48a773
cmp dword [esi + 0x70], 0
je fcn.0048bc03
mov byte [edi + 0x83], 0
push dword [ebx + 0x18]
jae 0x48bbd5
mov byte [ebx + 0x20], 1
push dword [ebx + 0x10]
mov eax, dword [esi + 0x70]
push dword [ebx + 0x14]
push 0
add bh, bh
jbe 0x48bc43
call eax
add esp, 0x14
mov byte [ebx + 0x20], 0
test eax, eax
je 0x48c1e7
cmp byte [edi + 0x83], 0
mov byte [esp + 0x40], 0
jne 0x48ba6c
mov al, byte [edi + 0x82]
mov byte [edi + 0x80], al
jmp 0x48bf78
pop edi
pop esi
pop ebp
mov eax, 0x18
pop ebx
add esp, 0x24
pop edi
pop esi
pop ebp
invalid

Function at 0x48bc85
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc esi
or al, 0x6a
adc al, 0xff
ror byte [ebx + 0x4c483c8], 1
test ecx, ecx
je 0x48c0c4
add byte [eax], al
xor eax, eax
mov dword [ecx + 4], 0
cmp dword [esp + 0x14], 0x29
adc al, 0x29
mov dword [ecx + 8], 0
sete al
mov dword [ecx + 0xc], 0
inc eax
mov dword [ecx + 0x10], 0
add byte [eax], al
add byte [ecx + 0x24448b01], cl
adc byte [ecx - 0x77], dl
sub byte [ebx + 0x15486], cl
add bh, bh
xor byte [ebx + 0x8086], cl
add byte [eax], 0
add bh, bh
jbe 0x48bccc

Function at 0x48bd27
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add al, byte [eax]
add byte [ebx], dh
xor ebx, ebx
jmp 0x48bd3a
mov ebx, 1
jmp 0x48bd3a

Function at 0x48be9c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
test ebx, ebx
je 0x48becd
mov ebp, dword [esi + 0x160]
mov eax, dword [ebp + 0xb0]
lea ecx, [eax + eax*4]
or byte [ebx + 0xa885], 0
lea eax, [eax + ecx*2]
add eax, eax
push eax
mov eax, dword [esi + 0xc]
call eax
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x48c0c4
mov eax, dword [ebp + 0xb0]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
mov dword [esp + 0x2c], eax
lea eax, [ebx + 0x14]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x34]
and al, 0x34
push eax
push ebx
push 0
add byte [esi - 0x18], dl
insb byte es:[edi], dx
add eax, 0x4c8b0009
and al, 0x24
Function at 0x48bea1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
test ebx, ebx
je 0x48becd
mov ebp, dword [esi + 0x160]
mov eax, dword [ebp + 0xb0]
lea ecx, [eax + eax*4]
or byte [ebx + 0xa885], 0
lea eax, [eax + ecx*2]
add eax, eax
push eax
mov eax, dword [esi + 0xc]
call eax
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x48c0c4
mov eax, dword [ebp + 0xb0]
lea eax, [eax + eax*4]
lea eax, [ebx + eax*4]
mov dword [esp + 0x2c], eax
lea eax, [ebx + 0x14]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x34]
and al, 0x34
push eax
push ebx
push 0
add byte [esi - 0x18], dl
insb byte es:[edi], dx
add eax, 0x4c8b0009
and al, 0x24

Function at 0x48c4bf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esi + 0x160]
mov dword [esp + 0x20], eax
cmp ebx, dword [esi + 0x90]
jne 0x48c4df
lea edi, [esi + 0x11c]
lea ebp, [esi + 0x120]
jmp 0x48c4e8
invalid
mov edi, dword [esi + 0x128]
lea ebp, [edi + 4]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x14], edi
mov dword [edi], eax

Function at 0x48c4eb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esi + 0x160]
mov dword [esp + 0x20], eax
cmp ebx, dword [esi + 0x90]
jne 0x48c4df
lea edi, [esi + 0x11c]
lea ebp, [esi + 0x120]
jmp 0x48c4e8
invalid
mov edi, dword [esi + 0x128]
lea ebp, [edi + 4]
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x14], edi
mov dword [edi], eax

Function at 0x48c54d
Capabilities:
Resolve function by parsing pe exports

Disassembly:
test cx, cx
je 0x48c571
mov eax, dword [esi + 0x3c]
test eax, eax
je case.default.0x48c524
push 1
lea ecx, [esp + 0x30]
dec esp
and al, 0x30
push ecx
push dword [esi + 4]
call eax
add esp, 0xc
jmp 0x48ce33
or byte [eax], al
invalid
mov edx, dword [esp + 0x10]
sub edx, dword [ebx + 0x40]
mov eax, dword [esp + 0x60]
add eax, dword [ebx + 0x40]

Function at 0x48cabc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp dword [esi + 0x134], eax
je 0x48cfd1
mov ebp, dword [esi + 0x168]
mov eax, dword [ebp]
mov dword [esi + 0x168], eax
push 0x8b000001
xchg byte [ecx + eax], ch
add byte [ecx + 0x448b0045], cl
inc esp
and al, 0x60
mov dword [esi + 0x16c], ebp
mov ecx, dword [ebx + 0x40]
lea eax, [eax + ecx*2]
push eax

Function at 0x48dc8b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and al, 0x20
mov ebx, dword [esp + 0x1c]
add eax, eax
push eax
push dword [ecx + 0x10]
lea eax, [esp + 0x5c]
push eax
call fcn.00516a50
or byte [eax], al
add esp, 0xc
nop word [eax + eax]
mov ax, word [edi]
add edi, 2
cmp ax, 0x3a
cmp eax, 0x3a
jne 0x48dc90
xor ecx, ecx
mov eax, edi
cmp word [edi], cx
je 0x48dcaf
lea eax, [eax + 2]
inc ecx
cmp word [eax], 0
jne 0x48dca5
invalid
lea eax, [ecx + ecx]
push eax

Function at 0x48dddc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
shr eax, 2
and ebx, ecx
movzx ecx, byte [esi + 0x190]
dec ecx
shr ebx, cl
and bl, al
invalid
Function at 0x48de5a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ebx, edx
cmp eax, dword [esi + 0x1a4]
movsb byte es:[edi], byte [esi]
add dword [eax], eax
add byte [ebp + 0x17], dh
pop ss
lea eax, [esi + 0x19c]
push eax
call fcn.0051d2c8
invalid
add esp, 4
test al, al
invalid
invalid

Function at 0x48de84
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
add byte [eax], 0
add byte [ebx + 0x1a88e], cl
test al, 1
add byte [eax], al
mov ax, word [esi + 0x1d4]
mov word [ecx - 2], ax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov edi, dword [eax]
nop word [eax + eax]
mov ecx, dword [esi + 0x1a8]
mov edx, ebx
movzx eax, word [edi]
mov word [ecx], ax
add dword [ebx + 0x1a886], eax
add byte [edx], al
invalid
movzx eax, word [edi]

Function at 0x49251c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
cmp byte [esi + edi + 1], 0x2a
lea eax, [esi + edi]
jne 0x4927ed
push 5
lea edi, [eax + 2]
push str.UTF8_
push edi
call fcn.00508210
add byte [ebx - 0x3f7af33c], al
jne 0x492513
add esi, 7
or ebp, 0x800
jmp 0x4927c8
push 4
push str.UTF_
push edi
call fcn.00508210
pop esp
pop es
add byte [ebx - 0x3f7af33c], al
jne 0x492535
add esi, 6
or ebp, 0x800
jmp 0x4927c8
push 4
lea esi, [edi + 1]
jmp 0x4927cf
mov edi, dword [esp + 0x11d0]
cmp byte [esi + edi], 0x28
je 0x4924e0
jmp 0x4927ed

Function at 0x492583
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add byte [eax], al
push 0xd
push str.NO_START_OPT_
push edi
call fcn.00508210
pop esp
pop es
invalid

Function at 0x4929fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov al, byte [ecx]
inc ecx
test al, al
jne 0x492993
sub ecx, edx
mov dword [esp + 0xb0], 0
mov dword [esp + 0xa0], 0
mov al, byte [pe_dos_header]
add byte [eax], al
add bh, al
test byte [esp], ah
add byte [eax], al
add byte [eax], al
add byte [eax], al
add bh, al
test byte [eax + edx*4], ah
and al, 0x90
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp - 0x5376c6fc], cl
and al, 0xa8
add byte [eax], al
add byte [eax], al
mov dword [esp + 0x64], eax
lea eax, [esi + edi]
mov dword [esp + 0x44], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 0x1cc]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x4c]
mov dword [esp + 0x70], 0
add byte [eax + 0x6a], dl
add byte [ebp - 0x39bfdbbc], cl
test byte [eax + ebx*8], ah
add dword [eax], eax
add byte [ebx + 0x24448d50], al
dec eax
push eax
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x54]
push eax
push 0
push 0
push 0
push 0
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x48]
push eax

Function at 0x4933a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
and al, 0x64
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dword [esp + 0x1c], eax
mov eax, dword [0xc6045c]
mov dword [esp + 0x14], ecx
test eax, eax
invalid
je 0x4933ea
call eax
test eax, eax
je 0x4933e6
mov eax, dword [esp + 0x6c]
invalid
add byte [ebp], dl
Function at 0x4933a9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
and al, 0x64
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dword [esp + 0x1c], eax
mov eax, dword [0xc6045c]
mov dword [esp + 0x14], ecx
test eax, eax
invalid
je 0x4933ea
call eax
test eax, eax
je 0x4933e6
mov eax, dword [esp + 0x6c]
invalid
add byte [ebp], dl

Function at 0x496c70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov ecx, dword [ebp + 8]
xor edx, edx

Function at 0x496c8e
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, ecx
shr eax, 0xb
or ecx, dword [ebx + 0x1e0831b]
mov dword [esp + 0x44], eax
mov eax, ecx
shr eax, 9

Function at 0x496cb9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [edx]
xor edi, edi
xor eax, 1
mov dword [esp + 0x40], ecx
and ecx, 1
mov dword [esp + 0x6c], 0
mov dword [esp + 0x50], 0
add byte [ecx - 0x76efdbac], cl
xchg esp, eax
and al, 0xe4
add byte [eax], al
invalid
mov dword [esp + 0x20], esi
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x38], esi
mov dword [esp + 0xa8], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x108], eax
mov dword [esp + 0x64], esi
invalid
invalid
mov ah, 0x24
invalid

Function at 0x496d75
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sal byte [ebp + 0x15], 0x85
push dword [ecx + edx - 0x75]
je 0x496d88
mov ebx, edi
mov dword [esp + 0x24], eax
and al, 0x24
mov dword [esp + 0xc], ebx

Function at 0x496e6a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [esp + 0x10]
xor esi, esi
mov edi, dword [esp + 0x24]
and al, 0x24
inc ebx
inc ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0xc], ebx
jmp fcn.00496d68

Function at 0x496e72
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [esp + 0x10]
xor esi, esi
mov edi, dword [esp + 0x24]
and al, 0x24
inc ebx
inc ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0xc], ebx
jmp fcn.00496d68

Function at 0x4971c7
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov esi, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
invalid

Function at 0x497258
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop esp
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x40]
shr eax, 2
and al, 1
mov dword [esp + 0x38], ecx
or al, 0xc
or al, 0x89
xchg esp, eax
and al, 0x8c
add byte [eax], al
add byte [eax + 0x5c8b4101], cl
and al, 0xc

Function at 0x497269
Capabilities:
Resolve function by parsing pe exports

Disassembly:
pop esp
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x40]
shr eax, 2
and al, 1
mov dword [esp + 0x38], ecx
or al, 0xc
or al, 0x89
xchg esp, eax
and al, 0x8c
add byte [eax], al
add byte [eax + 0x5c8b4101], cl
and al, 0xc
Function at 0x4972c1
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
jl 0x4972e7
or al, 0xbb
push esp
andnps xmm0, xmmword [eax]
push edi
add byte [eax - 0x18], dl

Function at 0x497465
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
shl edx, 6
movzx eax, byte [ebx]
and eax, 0x3f
mov dword [esp + 0xc], ebx
or al, 0xb
invalid
mov dword [esp + 0x34], edx
and al, 0x34
jmp 0x4975ad

Function at 0x49749f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
rcr dword [ebp - 0x74bdf578], 0x4c
and al, 0x44

Function at 0x4974d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [esp + 0x78], ecx
mov dword [esp + 0xc], ebx
jmp fcn.00496d68

Function at 0x497539
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
or ecx, eax
movzx eax, byte [ebx + 3]
shl ecx, 6
and eax, 0x3f
or ecx, eax

Function at 0x497568
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
or ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 6
and eax, 0x3f
aas
or ecx, eax
movzx eax, byte [ebx + 3]
inc ebx
add eax, ecx
loope 0x497583
push es
and eax, 0x3f

Function at 0x4975cf
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
jbe 0x4975d8
mov edx, dword [ebp + 0x34]
sub eax, ecx
mov dword [esp + 0x28], ecx
dec esp
and al, 0x28
add dword [edx], eax
mov edx, dword [esp + 0x34]

Function at 0x497613
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
jne 0x4978ef
mov al, byte [ebx + 1]
cmp al, 0x3a
invalid
je 0x497620
invalid
cmp edx, 0x5c
jne 0x497939
mov ebx, dword [ebp + 0x30]
lea eax, [esp + 0xec]
add byte [edx + 1], ch
push dword [esp + 0x44]
push dword [ebx + 0x40]
push dword [ebp + 0x14]
push eax
lea eax, [esp + 0x20]
and byte [eax - 0x18], dl
imul eax, eax, 0xffffffff
dec dword [ebx - 0x3b7cebb3]
sbb byte [ebx + 0x3983f0], cl

Function at 0x4977c1
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add esi, ebx
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov esi, dword [eax*4 + 0x550fe8]
test edx, edx
js 0x497874
wait
add byte [eax], al
invalid
xor ecx, ecx
add edx, ebx
test esi, esi
js 0x497860
jnp 0x4977e3
add byte [eax], al
mov al, byte [edx + ecx]
or byte [esp + ecx + 0x128], al
inc ecx
cmp ecx, 0x20
jb 0x4977e5
jmp 0x49787a
test esi, esi
jns 0x49787a

Function at 0x497834
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov byte [eax], dl
mov edx, 1
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x28], eax
mov byte [eax], 0
inc dword [esp + 0x28]
inc ebx
jmp 0x497fe1
Function at 0x49786d
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov al, byte [edx + ecx]
not al
and byte [esp + ecx + 0x128], al
inc ecx
cmp ecx, 0x20
jb 0x497860
jmp 0x497878
neg esi
cmp esi, 1
jne 0x497889
and byte [esp + 0x129], 0xc3
jmp 0x497896
cmp esi, 2
jne 0x497896
and byte [esp + 0x133], 0x7f
xor ecx, ecx
cmp byte [esp + 0x3f], 0x5e
jl 0x4978bf
aas
pop esi
jne 0x4978c0
nop
mov al, byte [esp + ecx + 0x128]
or byte [esp + ecx + 0xc4], al
inc ecx
cmp ecx, 0x20
jb 0x4978c0

Function at 0x4978c6
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add byte [eax], cl
test byte [esp + eax*8], cl
add byte [eax], al
add byte [ecx - 0x7d], al
stc
and byte [edx - 0x14], dh

Function at 0x497bfb
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ecx
lea eax, [esp + 0xfc]
add byte [eax], al
add bh, al
test byte [eax + edi*8], ah
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax - 0x73], dl
test byte [esp + edi*8], ah
add byte [eax], al
add bh, al
test byte [eax + eax], ah
and al, 0
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x73], dl
test byte [esp + ebp], ah
sub al, 1
add byte [eax], al
push eax
lea eax, [esp + 0x1c]
push eax
invalid

Function at 0x497c00
Capabilities:
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ecx
lea eax, [esp + 0xfc]
add byte [eax], al
add bh, al
test byte [eax + edi*8], ah
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax - 0x73], dl
test byte [esp + edi*8], ah
add byte [eax], al
add bh, al
test byte [eax + eax], ah
and al, 0
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax - 0x73], dl
test byte [esp + ebp], ah
sub al, 1
add byte [eax], al
push eax
lea eax, [esp + 0x1c]
push eax
invalid

Function at 0x498044
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 1
cmp dword [esp + 0x28], edi
ja 0x498053
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
cmp ecx, 0xfffffffe
jne 0x498063
or ecx, 0xffffffff
mov dword [esp + 0x44], ecx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x78], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x64], ecx
mov ecx, dword fs:[esp + 0x5c]
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x30]
and al, 0x30
mov dword [esp + 0x8c], ebx
test eax, eax
Function at 0x498222
Capabilities:
Resolve function by parsing pe exports

Disassembly:
and eax, 0x8000007f
jns 0x4981de
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x55d400]
mov cl, byte [eax*8 + 0x559b83]
test cl, cl
je 0x49820b
mov eax, dword [esp + 0x10]
lea edx, [eax + 3]
mov word [eax], 0x90f
mov byte [eax + 2], cl
mov dword [esp + 0x10], edx
jmp 0x49838e
mov eax, dword [esp + 0x40]
test al, 1
mov ecx, dword [esp + 0x10]
setne al
add al, 0x1f
mov byte [ecx], al
lea esi, [ecx + 1]
test ebx, ebx
je fcn.0049823e
invalid
cmp edx, 0x7f
jbe fcn.0049823e
push esi
push edx
call fcn.005085c0
add esp, 8
lea edx, [esi + eax]
mov dword [esp + 0x10], edx
jmp 0x49838a
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x7c]
inc ebx
mov ecx, dword [esp + 0x74]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x5c]

Function at 0x4984f0
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
add dword [ebp + ecx - 0x76], esi
dec ebx
add dword [ebx + 0xf], eax
mov dh, 0xc1

Function at 0x498525
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
jae 0x498542
push dword [esp + 0x4c]
push esi
push eax
push ecx
push ebx
call fcn.00508290
add byte [ebx - 0x3f7aeb3c], al
je 0x498542
mov eax, 1
jmp 0x498544
xor eax, eax
test eax, eax
je 0x498574

Function at 0x4985c7
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
inc ebx
mov dword [esp + 0xc], ebx
mov al, byte [ebx]
test al, al
jne 0x4985c3
jmp 0x497066

Function at 0x498617
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
sbb byte [ecx - 0x14f3dba4], cl
or ecx, dword [ebx + 0x1042484]
test byte [esp + eax], ah
add dword [eax], eax
invalid

Function at 0x498625
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
add dword [eax], eax
add byte [ecx - 0x74e7dbbc], cl
jl 0x498648
cmp byte [eax - 0x7af08ac1], al
jb 0x49862c
pop es
add dword [eax], 0x60247c6