joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4c4c3e
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
add esp, 4
and ecx, 0xcfbd
sub ecx, 0xaa
call fcn.004c4c3e
add byte [eax + 0x3d], al
cmp edi, dword [edx + edi]
cmp al, byte ds:[eax - 0x7d]
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
inc ebx
dec ecx
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
mov eax, dword [ebp - 0x1e4]
mov cx, word [eax]
mov word [ebp - 0x288], cx
mov edx, dword [ebp - 0x1e4]
add edx, 2
mov dword [ebp - 0x1e4], edx
mov ax, word [ebp - 0x288]
mov word [ebp - 0x54], ax
push eax
jmp 0x4c4c81
or eax, 0x2d57
xor eax, 0x5efe
jmp 0x4c4c94
pop eax
push edi
push edi
add esp, 4
and edi, 0x253c
or edi, 0x3e2a
xor edi, 0x58de
pop edi
mov ecx, dword [ebp - 0x1e8]
mov dx, word [ecx]
mov word [ebp - 0x28a], dx
mov eax, dword [ebp - 0x1e8]
add eax, 2
mov dword [ebp - 0x1e8], eax
mov cx, word [ebp - 0x28a]
mov word [ebp - 8], cx
push edx
and edx, 0x4867
add edx, 0x2ef0
sub edx, 0x6667
pop edx
push edx
push ebx
add esp, 4
jmp 0x4c4cf6
add edx, 0x1745b
add edx, 0x11929
and edx, 0x180d6
pop edx
movzx edx, word [ebp - 8]
test edx, edx
jne 0x4c4d26
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x4c4da9
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x4c4c1f
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x4c4c1f
push ecx
xor ecx, 0xefab
sub ecx, 0x15ce3
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x4c4d62
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x560e
and eax, 0x15281
add eax, 0x2dc2
pop eax
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x4c4d93
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x4c4d9d
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x4c4df2
push edi
and edi, 0x11d3d
sub edi, 0xe05c
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push ebx
push esi
add esp, 4
and ebx, 0x180be
call 0x4c4e1a
add byte [edx], bh
xor eax, dword [esi + 0x50]
dec edx
cmp dh, byte [ebx]
dec ebp
xor al, byte [ebx + 0x535b04c4]
xor ebx, 0xd5ea
sub ebx, 0x5c0f
or ebx, 0x76eb
pop ebx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x4c4e50
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x4c4b94
push ecx
push ecx
add esp, 4
add ecx, 0x13bb3
or ecx, 0x15874
sub ecx, 0x11b09
add ecx, 0xf64b
pop ecx
push esi
xor esi, 0x16ddd
xor esi, 0x4347
sub esi, 0x1015e
pop esi
mov dword [ebp - 0x6c], 0
Function at 0x4c4c4d
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
add esp, 4
and ecx, 0xcfbd
sub ecx, 0xaa
call fcn.004c4c3e
add byte [eax + 0x3d], al
cmp edi, dword [edx + edi]
cmp al, byte ds:[eax - 0x7d]
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
inc ebx
dec ecx
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
mov eax, dword [ebp - 0x1e4]
mov cx, word [eax]
mov word [ebp - 0x288], cx
mov edx, dword [ebp - 0x1e4]
add edx, 2
mov dword [ebp - 0x1e4], edx
mov ax, word [ebp - 0x288]
mov word [ebp - 0x54], ax
push eax
jmp 0x4c4c81
or eax, 0x2d57
xor eax, 0x5efe
jmp 0x4c4c94
pop eax
push edi
push edi
add esp, 4
and edi, 0x253c
or edi, 0x3e2a
xor edi, 0x58de
pop edi
mov ecx, dword [ebp - 0x1e8]
mov dx, word [ecx]
mov word [ebp - 0x28a], dx
mov eax, dword [ebp - 0x1e8]
add eax, 2
mov dword [ebp - 0x1e8], eax
mov cx, word [ebp - 0x28a]
mov word [ebp - 8], cx
push edx
and edx, 0x4867
add edx, 0x2ef0
sub edx, 0x6667
pop edx
push edx
push ebx
add esp, 4
jmp 0x4c4cf6
add edx, 0x1745b
add edx, 0x11929
and edx, 0x180d6
pop edx
movzx edx, word [ebp - 8]
test edx, edx
jne 0x4c4d26
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x4c4da9
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x4c4c1f
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x4c4c1f
push ecx
xor ecx, 0xefab
sub ecx, 0x15ce3
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x4c4d62
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x560e
and eax, 0x15281
add eax, 0x2dc2
pop eax
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x4c4d93
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x4c4d9d
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x4c4df2
push edi
and edi, 0x11d3d
sub edi, 0xe05c
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push ebx
push esi
add esp, 4
and ebx, 0x180be
call 0x4c4e1a
add byte [edx], bh
xor eax, dword [esi + 0x50]
dec edx
cmp dh, byte [ebx]
dec ebp
xor al, byte [ebx + 0x535b04c4]
xor ebx, 0xd5ea
sub ebx, 0x5c0f
or ebx, 0x76eb
pop ebx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x4c4e50
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x4c4b94
push ecx
push ecx
add esp, 4
add ecx, 0x13bb3
or ecx, 0x15874
sub ecx, 0x11b09
add ecx, 0xf64b
pop ecx
push esi
xor esi, 0x16ddd
xor esi, 0x4347
sub esi, 0x1015e
pop esi
mov dword [ebp - 0x6c], 0
Function at 0x4c4dbb
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
push ecx
add esp, 4
add edx, 0x2a5e
add edx, 0xb45b
add edx, 0x18342
pop edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x4c4e89
cmp dword [ebp - 0x6c], 0
jne 0x4c5b3e
push esi
call 0x4c4ea4
add byte [edx], bh
aaa
inc esp
inc esp
dec ebx
cmp al, 0x46
push eax
xor eax, 0x4c4834b
call 0x4c4eb5
add byte [eax + edx*2 + 0x33], cl
dec ebx
inc edx
xor ecx, dword [edx + edi - 0x7d]
les eax, [ecx + eax*4]
invalid
Function at 0x4c4e1a
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
add esp, 4
and ecx, 0xcfbd
sub ecx, 0xaa
call fcn.004c4c3e
add byte [eax + 0x3d], al
cmp edi, dword [edx + edi]
cmp al, byte ds:[eax - 0x7d]
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
add esp, 4
call 0x4c4c4d
add byte [edx + 0x47], al
inc ebx
dec ecx
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
mov eax, dword [ebp - 0x1e4]
mov cx, word [eax]
mov word [ebp - 0x288], cx
mov edx, dword [ebp - 0x1e4]
add edx, 2
mov dword [ebp - 0x1e4], edx
mov ax, word [ebp - 0x288]
mov word [ebp - 0x54], ax
push eax
jmp 0x4c4c81
or eax, 0x2d57
xor eax, 0x5efe
jmp 0x4c4c94
pop eax
push edi
push edi
add esp, 4
and edi, 0x253c
or edi, 0x3e2a
xor edi, 0x58de
pop edi
mov ecx, dword [ebp - 0x1e8]
mov dx, word [ecx]
mov word [ebp - 0x28a], dx
mov eax, dword [ebp - 0x1e8]
add eax, 2
mov dword [ebp - 0x1e8], eax
mov cx, word [ebp - 0x28a]
mov word [ebp - 8], cx
push edx
and edx, 0x4867
add edx, 0x2ef0
sub edx, 0x6667
pop edx
push edx
push ebx
add esp, 4
jmp 0x4c4cf6
add edx, 0x1745b
add edx, 0x11929
and edx, 0x180d6
pop edx
movzx edx, word [ebp - 8]
test edx, edx
jne 0x4c4d26
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x4c4da9
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x4c4c1f
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x4c4c1f
push ecx
xor ecx, 0xefab
sub ecx, 0x15ce3
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x4c4d62
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x560e
and eax, 0x15281
add eax, 0x2dc2
pop eax
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x4c4d93
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x4c4d9d
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x4c4df2
push edi
and edi, 0x11d3d
sub edi, 0xe05c
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push ebx
push esi
add esp, 4
and ebx, 0x180be
call 0x4c4e1a
add byte [edx], bh
xor eax, dword [esi + 0x50]
dec edx
cmp dh, byte [ebx]
dec ebp
xor al, byte [ebx + 0x535b04c4]
xor ebx, 0xd5ea
sub ebx, 0x5c0f
or ebx, 0x76eb
pop ebx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x4c4e50
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x4c4b94
push ecx
push ecx
add esp, 4
add ecx, 0x13bb3
or ecx, 0x15874
sub ecx, 0x11b09
add ecx, 0xf64b
pop ecx
push esi
xor esi, 0x16ddd
xor esi, 0x4347
sub esi, 0x1015e
pop esi
mov dword [ebp - 0x6c], 0
Function at 0x4c4ea4
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
push ecx
add esp, 4
add edx, 0x2a5e
add edx, 0xb45b
add edx, 0x18342
pop edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x4c4e89
cmp dword [ebp - 0x6c], 0
jne 0x4c5b3e
push esi
call 0x4c4ea4
add byte [edx], bh
aaa
inc esp
inc esp
dec ebx
cmp al, 0x46
push eax
xor eax, 0x4c4834b
call 0x4c4eb5
add byte [eax + edx*2 + 0x33], cl
dec ebx
inc edx
xor ecx, dword [edx + edi - 0x7d]
les eax, [ecx + eax*4]
invalid

Function at 0x4c4eb5
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
pop esp
loopne 0x4c4dbe
add byte [ecx + 0x5b36e7], al
add byte [ecx + 0x11a2bc7], al
add byte [edi + 0x52], bl
push ecx
add esp, 4
add edx, 0x2a5e
add edx, 0xb45b
add edx, 0x18342
pop edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x4c4e89
cmp dword [ebp - 0x6c], 0
jne 0x4c5b3e
push esi
call 0x4c4ea4
add byte [edx], bh
aaa
inc esp
inc esp
dec ebx
cmp al, 0x46
push eax
xor eax, 0x4c4834b
call 0x4c4eb5
add byte [eax + edx*2 + 0x33], cl
dec ebx
inc edx
xor ecx, dword [edx + edi - 0x7d]
les eax, [ecx + eax*4]
invalid

Function at 0x4c4f8c
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov byte [ebp - 0x154], 0x4c
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push edx
push edx
add esp, 4
add edx, 0x1023f
sub edx, 0x117b6
pop edx
push ebx
add ebx, 0xab35
pop ebx
push esi
push eax
add esp, 4
and esi, 0xd5ce
and esi, 0x11225
or esi, 0x96a1
pop esi
push ecx
push ebx
add esp, 4
call 0x4c5031
add byte [eax + 0x47], dl
cmp al, 0x38
aas
aaa
dec edi
add esp, 4
jmp 0x4c503d
call 0x4c504b
add byte [ebp + 0x47], al
aas
cmp eax, dword [eax + 0x3f]
cmp byte [ebx + 0x645904c4], al
mov eax, dword [0x18]
mov dword [ebp - 0x484], eax
push ecx
push edi
add esp, 4
and ecx, 0x1c6f
add ecx, 0x4031
and ecx, 0x4f69
or ecx, 0x57b1
pop ecx
push ecx
and ecx, 0x1534a
sub ecx, 0x11018
sub ecx, 0x1374c
pop ecx
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
invalid
call dword [ebx + 0x52]
Function at 0x4c5031
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov byte [ebp - 0x154], 0x4c
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push edx
push edx
add esp, 4
add edx, 0x1023f
sub edx, 0x117b6
pop edx
push ebx
add ebx, 0xab35
pop ebx
push esi
push eax
add esp, 4
and esi, 0xd5ce
and esi, 0x11225
or esi, 0x96a1
pop esi
push ecx
push ebx
add esp, 4
call 0x4c5031
add byte [eax + 0x47], dl
cmp al, 0x38
aas
aaa
dec edi
add esp, 4
jmp 0x4c503d
call 0x4c504b
add byte [ebp + 0x47], al
aas
cmp eax, dword [eax + 0x3f]
cmp byte [ebx + 0x645904c4], al
mov eax, dword [0x18]
mov dword [ebp - 0x484], eax
push ecx
push edi
add esp, 4
and ecx, 0x1c6f
add ecx, 0x4031
and ecx, 0x4f69
or ecx, 0x57b1
pop ecx
push ecx
and ecx, 0x1534a
sub ecx, 0x11018
sub ecx, 0x1374c
pop ecx
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
invalid
call dword [ebx + 0x52]

Function at 0x4c504b
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov byte [ebp - 0x154], 0x4c
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push edx
push edx
add esp, 4
add edx, 0x1023f
sub edx, 0x117b6
pop edx
push ebx
add ebx, 0xab35
pop ebx
push esi
push eax
add esp, 4
and esi, 0xd5ce
and esi, 0x11225
or esi, 0x96a1
pop esi
push ecx
push ebx
add esp, 4
call 0x4c5031
add byte [eax + 0x47], dl
cmp al, 0x38
aas
aaa
dec edi
add esp, 4
jmp 0x4c503d
call 0x4c504b
add byte [ebp + 0x47], al
aas
cmp eax, dword [eax + 0x3f]
cmp byte [ebx + 0x645904c4], al
mov eax, dword [0x18]
mov dword [ebp - 0x484], eax
push ecx
push edi
add esp, 4
and ecx, 0x1c6f
add ecx, 0x4031
and ecx, 0x4f69
or ecx, 0x57b1
pop ecx
push ecx
and ecx, 0x1534a
sub ecx, 0x11018
sub ecx, 0x1374c
pop ecx
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
invalid
call dword [ebx + 0x52]
Function at 0x4c5184
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
call dword [ebx + 0x52]
add esp, 4
jmp 0x4c50aa
or ebx, 0x847f
and ebx, 0xcbd
pop ebx
push edx
or edx, 0xc341
pop edx
push edx
jmp 0x4c50c7
add edx, 0x3f00
pop edx
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x4c5124
push eax
push edx
add esp, 4
jmp 0x4c50ee
jmp 0x4c50f4
pop eax
push ecx
push edx
add esp, 4
xor ecx, 0x155e2
and ecx, 0x1498a
and ecx, 0x105a0
pop ecx
push ebx
sub ebx, 0x1c90
pop ebx
mov dword [ebp - 0x118], 0
jmp 0x4c54b9
push esi
or esi, 0x1376d
or esi, 0xf6f2
sub esi, 0x560e
pop esi
push esi
push esi
add esp, 4
sub esi, 0x8e5d
add esi, 0x39bc
pop esi
push eax
push ebx
add esp, 4
xor eax, 0x11e08
pop eax
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jne 0x4c51b2
push edi
push edx
add esp, 4
call 0x4c5184
add byte [ebx], dh
push eax
cmp ecx, dword [esi + 0x4e]
cmp al, byte [ecx + 0x3c]
add esp, 4
jmp 0x4c518c
pop edi
push ecx
or ecx, 0xc038
jmp 0x4c519c
sub ecx, 0x1526a
pop ecx
mov dword [ebp - 0x118], 0
jmp 0x4c54b9
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0xc0], ecx
Function at 0x4c5594
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
pop edx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x4c5a95
cmp dword [ebp - 0x98], 0
je 0x4c5b3e
push esi
push edx
add esp, 4
and esi, 0x15849
or esi, 0x12ff2
pop esi
push eax
and eax, 0x6305
pop eax
push edx
push edi
add esp, 4
or edx, 0x17a6a
add edx, 0x8893
sub edx, 0xddc9
pop edx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x49c], eax
sti
invalid
dec dword [ebx - 0x49b73]
dec dword [ecx - 0x49f73]
dec dword [ebp - 0x2af6b]
call dword [edx - 1]
xchg ebp, eax
pushal
sti
invalid
invalid
test eax, eax
jne 0x4c5b3e
push edi
xor edi, 0x72f1
or edi, 0x4c0e
or edi, 0x1bf7
pop edi
push esi
push ebx
add esp, 4
and esi, 0xd9a8
call 0x4c5b2b
add byte [esi + edi + 0x3b], cl
cmp al, 0x44
cmp dword [0xc4833240], esi
add al, 0x5e
mov dword [ebp - 0x1b4], 0
jmp 0x4c65ff
push esi
push ecx
add esp, 4
sub esi, 0x12d74
pop esi
push edi
or edi, 0x16400
and edi, 0x53f5
or edi, 0x8da
sub edi, 0x153a4
pop edi
push ebx

Function at 0x4c5608
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x384]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x4c5664
push edx
push edx
add esp, 4
and edx, 0xd5c1
pop edx
push edx
and edx, 0xca30
or edx, 0x10497
pop edx
push edx
push edx
add esp, 4
or edx, 0x220e
jmp 0x4c564c
add edx, 0x3cc0
pop edx
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
jmp 0x4c5a95
push eax
push eax
add esp, 4
jmp 0x4c566e
sub eax, 0x134ed
call 0x4c5684
add byte [edi], bh
inc ebp
aas
dec ebp
xor al, 0x38
cmp dword [edx + 0x32], ecx
dec eax
add esp, 4
and eax, 0x8dae
pop eax
push ecx
and ecx, 0xa1b3
pop ecx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x11c], eax
jne 0x4c56ed
push esi
or esi, 0x18503
pop esi
push eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x48c], eax
push edx
push edi
add esp, 4
and edx, 0x1407b
jmp 0x4c5715
and edx, 0xd03a
pop edx
push eax
push ebx
add esp, 4
and eax, 0xcf96
xor eax, 0x13b9c
add eax, 0x1318a
pop eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x490], edx
push ecx
add ecx, 0x17995
add ecx, 0x11ccc
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0xd083
or ebx, 0xe91c
and ebx, 0x10be9
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x1608f
pop ecx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x120], 0
jmp 0x4c57ab
invalid
xchg ebp, eax
loopne 0x4c579e
Function at 0x4c5684
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [ebp - 0x384]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x4c5664
push edx
push edx
add esp, 4
and edx, 0xd5c1
pop edx
push edx
and edx, 0xca30
or edx, 0x10497
pop edx
push edx
push edx
add esp, 4
or edx, 0x220e
jmp 0x4c564c
add edx, 0x3cc0
pop edx
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
jmp 0x4c5a95
push eax
push eax
add esp, 4
jmp 0x4c566e
sub eax, 0x134ed
call 0x4c5684
add byte [edi], bh
inc ebp
aas
dec ebp
xor al, 0x38
cmp dword [edx + 0x32], ecx
dec eax
add esp, 4
and eax, 0x8dae
pop eax
push ecx
and ecx, 0xa1b3
pop ecx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x11c], eax
jne 0x4c56ed
push esi
or esi, 0x18503
pop esi
push eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x48c], eax
push edx
push edi
add esp, 4
and edx, 0x1407b
jmp 0x4c5715
and edx, 0xd03a
pop edx
push eax
push ebx
add esp, 4
and eax, 0xcf96
xor eax, 0x13b9c
add eax, 0x1318a
pop eax
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x490], edx
push ecx
add ecx, 0x17995
add ecx, 0x11ccc
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0xd083
or ebx, 0xe91c
and ebx, 0x10be9
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x1608f
pop ecx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x120], 0
jmp 0x4c57ab
invalid
xchg ebp, eax
loopne 0x4c579e

Function at 0x4c56b3
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
sub eax, 0x4b53
sub eax, 0x5f2e
pop eax
push ebx
and ebx, 0xbec9
add ebx, 0x1564f
or ebx, 0x5a27
pop ebx
push edi
add edi, 0x7ff8
pop edi
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x98], ecx
jmp 0x4c5a95

Function at 0x4c5a19
Capabilities:
Get number of processors
Parse credit card information
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add ebx, 0x15e69
pop ebx
push ecx
and ecx, 0x9085
and ecx, 0x156dd
pop ecx
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0
jne 0x4c5a84
push ebx
push ecx
add esp, 4
and ebx, 0x546a
and ebx, 0x1a5
pop ebx
push esi
sub esi, 0xa1fb
xor esi, 0xacfe
pop esi
push eax
push edi
add esp, 4
add eax, 0x14d6a
add eax, 0xbc40
pop eax
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x98], ecx
jmp 0x4c5a95
jmp 0x4c579c
Function at 0x4c5b2b
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop edx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x4c5a95
cmp dword [ebp - 0x98], 0
je 0x4c5b3e
push esi
push edx
add esp, 4
and esi, 0x15849
or esi, 0x12ff2
pop esi
push eax
and eax, 0x6305
pop eax
push edx
push edi
add esp, 4
or edx, 0x17a6a
add edx, 0x8893
sub edx, 0xddc9
pop edx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x49c], eax
sti
invalid
dec dword [ebx - 0x49b73]
dec dword [ecx - 0x49f73]
dec dword [ebp - 0x2af6b]
call dword [edx - 1]
xchg ebp, eax
pushal
sti
invalid
invalid
test eax, eax
jne 0x4c5b3e
push edi
xor edi, 0x72f1
or edi, 0x4c0e
or edi, 0x1bf7
pop edi
push esi
push ebx
add esp, 4
and esi, 0xd9a8
call 0x4c5b2b
add byte [esi + edi + 0x3b], cl
cmp al, 0x44
cmp dword [0xc4833240], esi
add al, 0x5e
mov dword [ebp - 0x1b4], 0
jmp 0x4c65ff
push esi
push ecx
add esp, 4
sub esi, 0x12d74
pop esi
push edi
or edi, 0x16400
and edi, 0x53f5
or edi, 0x8da
sub edi, 0x153a4
pop edi
push ebx

Function at 0x4c5b65
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edi
add esp, 4
sub ebx, 0x81d0
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0x1185b
xor ebx, 0xf095
and ebx, 0xaacb
pop ebx
push eax
add eax, 0x232e
add eax, 0x14d96
add eax, 0x3a90
or eax, 0x1253e
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4a4], eax
push edi
add edi, 0x8bb6
and edi, 0xfc39
pop edi
push ebx
jmp 0x4c5bc5
xor ebx, 0xf9ec
pop ebx
push edi
sub edi, 0x44d1
sub edi, 0xf8a5
xor edi, 0xe908
pop edi
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x3dc], edx
push eax
jmp 0x4c5bf7
sub eax, 0x5625
xor eax, 0x141bf
pop eax
push edx
xor edx, 0x80c7
or edx, 0xedb6
pop edx
push ecx
jmp 0x4c5c1a
or ecx, 0x13934
pop ecx
mov eax, dword [ebp - 0x3dc]
invalid
invalid
dec eax

Function at 0x4c5c64
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
mov dword [ebp - 0x6c], 0
jmp 0x4c6000