joyce8/EMBER2024-capa huggingface dataset:
Function at 0x438da0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push ebx
mov ebx, dword [edi]
cmp dword [ebx + 0x7fc], 3
push ebp
push esi
jne 0x438ea0
mov eax, dword [ebx + 0x320]
cmp byte [eax + 0xdc], 0
je 0x438ea0
mov esi, dword [edi + 4]
mov eax, esi
call fcn.0040cd10
mov ebp, eax
mov eax, dword [ebx + 0x320]
mov ebx, dword [eax + 0xe0]
mov edx, dword [eax + 0xe4]
jmp loc.008401e0
pop esi
pop ebp
mov byte [edi + 0x18], 0
pop ebx
add esp, 8
ret
Function at 0x44d140
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push esi
push edi
mov edi, edx
mov eax, dword [edi + 8]
add eax, 0xffffffff
cmp eax, 0xb
mov ebx, ecx
ja case.0x44d152.3
jmp dword [eax*4 + 0x44d218]
push ebx
push edi
call fcn.0044d3a0
jmp loc.0084f270
push ebx
push edi
call fcn.0044d860
jmp case.0x44d152.3
push ebx
push edi
call fcn.0044dfd0
jmp case.0x44d152.3
fld dword [edi + 0x28]
mov edx, dword [0x6a7878]
sub esp, 8
fstp dword [esp + 4]
mov eax, ebx
fld dword [edi + 0x24]
fstp dword [esp]
call fcn.00587630
jmp case.0x44d152.3
push edi
call fcn.0044d250
jmp case.0x44d152.3
push ebx
push edi
call fcn.0044db00
jmp case.0x44d152.3
push edi
mov esi, ebx
call fcn.0044d690
pop edi
pop esi
pop ebx
ret

Function at 0x44f5f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f21b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
push 0x6000
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44f635
push eax
mov ecx, edi
call fcn.00407b50
jmp 0x44f637
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [edi + 0xc4]
push ecx
mov ecx, dword [edi + 0xc0]
push ecx
mov dword [edi + 0x768], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
jmp 0x840220

Function at 0x44f8e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f1fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
mov eax, dword [edi + 0x770]
test eax, eax
je 0x44f929
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x10]
call eax
mov edx, dword [edi]
mov eax, dword [edi + 0x770]
mov edx, dword [edx + 0x88]
push eax
mov ecx, edi
call edx
push 0x130
mov dword [edi + 0x7fc], 1
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44f959
push edi
push eax
call fcn.00448cb0
jmp 0x44f95b
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [edi + 0xc4]
push ecx
mov ecx, dword [edi + 0xc0]
push ecx
mov dword [edi + 0x770], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x770]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
mov eax, dword [edi + 0x770]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x770]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop edi
add esp, 0x10
ret
Function at 0x44fdc0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64997b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push 0x3ca4
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44fdfd
push eax
call fcn.00483380
jmp 0x44fdff
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [esi + 0xc4]
push ecx
mov ecx, dword [esi + 0xc0]
push ecx
mov dword [esi + 0x774], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [esi + 0x320]
mov eax, dword [ecx]
mov edx, dword [esi + 0x774]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [esi + 0x320]
mov edx, dword [ecx]
mov eax, dword [esi + 0x774]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret

Function at 0x451630
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push esi
mov esi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0x124]
push edi
push 2
mov ecx, esi
call edx
mov edi, eax
test edi, edi
jne 0x451653
pop edi
xor al, al
pop esi
add esp, 8
ret
mov ecx, dword [edi + 0x164]
mov eax, dword [ecx]
mov edx, dword [eax + 0x11c]
call edx
mov ecx, dword [edi + 0x168]
mov edx, dword [ecx]
test al, al
sete al
mov byte [esp + 0xc], al
mov eax, dword [edx + 0x11c]
call eax
jmp fcn.008200f0
Function at 0x45ed00
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x2c
push ebx
push ebp
mov ebp, dword [esp + 0x38]
push esi
push edi
push 0
mov eax, ebp
call fcn.0045eb10
mov dword [esp + 0x14], eax
push 0
lea eax, [esp + 0x2c]
mov ecx, ebp
call fcn.00467f90
mov edx, dword [ebp + 4]
lea esi, [esp + 0x40]
mov dword [esp + 0x40], 0
call fcn.0041c8f0
test al, al
je 0x45ee8a
mov ebx, dword [esp + 0x40]
mov eax, dword [ebx + 0x1c]
sub eax, dword [ebp + 0x1c]
cmp dword [ebx + 0x24], 0x19
jne 0x45ed53
xor eax, eax
jmp fcn.0084b430
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret 8

Function at 0x45f720
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, dword [esi]
fldz
sub esp, 0x18
cmp byte [eax + 0x8c5], 0
push ebx
push edi
jne 0x45f781
mov ecx, dword [0x6a9f00]
fst dword [esp + 8]
fcomp dword [ecx + 0xa0]
mov edi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x45f76b
fld dword [ecx + 0xa0]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0xc]
add esp, 4
fld dword [esp + 8]
push ecx
mov eax, 3
fstp dword [esp]
mov ecx, edi
call fcn.00515020
jmp 0x45f783
fstp st(0)
fld qword [0x679998]
mov dword [esp + 0x10], 0
call fcn.00639f90
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
fmul qword [0x6796a0]
fstp dword [esp + 8]
fld qword [0x679998]
call fcn.0063a180
fstp dword [esp + 0xc]
fld dword [esp + 0xc]
fmul qword [0x6796a0]
fstp dword [esp + 0xc]
mov eax, dword [esi + 0xc]
mov ebx, dword [esi + 8]
add eax, 0x19
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 0x20]
sub eax, 1
mov dword [esp + 0x14], eax
mov eax, dword [esi + 4]
lea edi, [eax + 0xc8]
add ebx, 0x19
call fcn.0041df60
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
jmp 0x84bc30
Function at 0x45f9a0
Capabilities:
Packed with generic packer

Disassembly:
cmp byte [edi + 0x144], 0
push esi
je 0x45fb64
mov edx, dword [edi]
mov ecx, dword [edx + 0x7f8]
cmp ecx, 0x2b
je 0x45fb64
cmp ecx, 0x32
je 0x45fb64
mov eax, edx
call fcn.004537d0
test al, al
jne 0x45fb64
cmp ecx, 0x47
je 0x45fb64
cmp ecx, 0x48
je 0x45fb64
mov ecx, dword [edi + 4]
mov eax, ecx
call fcn.00413a40
test al, al
jne 0x45fb64
cmp dword [edi + 0x24], 0x26
jne 0x45fa2f
mov eax, dword [ecx + 0x557c]
cmp eax, dword [ecx + 0x5564]
jne 0x45fa2f
mov eax, 0x2e
cmp dword [edi + 0x3c], eax
je 0x45fa25
mov dword [edi + 0x3c], eax
mov dword [edi + 0x54], 0x1770
jmp 0x45fa2f
cmp dword [edi + 0x54], 0
je 0x45fb64
cmp dword [edx + 0x7f8], 0x1f
jne 0x45fa48
mov ecx, dword [ecx + 0x160]
cmp dword [ecx + 0x54], 0xa
jne 0x45fb64
add dword [edi + 0x58], 0xffffffff
mov esi, dword [edi + 0x58]
cmp esi, 0x64
jg 0x45fa7b
push 1
xor ecx, ecx
push 0x64
push 0
mov eax, esi
lea edx, [ecx + 0x64]
call fcn.00511c40
mov ecx, dword [edi + 0xb8]
add esp, 0xc
cmp ecx, eax
jle 0x45fa75
mov eax, ecx
mov dword [edi + 0xb8], eax
test esi, esi
jg 0x45fb64
mov eax, dword [edi + 0x5c]
lea esi, [eax - 0x96]
sub eax, esi
add eax, 1
call fcn.005af400
add eax, esi
mov dword [edi + 0x58], eax
mov eax, dword [edi]
mov esi, 4
call fcn.00453630
mov eax, dword [edi + 0x24]
cmp eax, 9
jne 0x45fac3
cmp dword [edi + 0x3c], 0x17
push 2
jne 0x45fae9
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
push 5
push edx
push eax
jmp 0x45fb1a
cmp eax, 1
jne 0x45face
jmp 0x8487c0
cmp eax, 0x29
jne 0x45faf5
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 2
push 4
push edx
push eax
call fcn.0040cb10
push 2
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
push 4
push ecx
push edx
jmp 0x45fb1a
cmp eax, 0x26
jne 0x45fb22
lea esi, [eax - 0x25]
lea eax, [esi + 0x63]
call fcn.005af400
cmp eax, 0xa
jge 0x45fb0f
mov esi, 2
push 3
push esi
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 8]
push eax
push ecx
mov ecx, dword [edi + 4]
jmp 0x8434e0
mov edx, dword [edi]
cmp dword [edx + 0x7f8], 0x27
jne 0x45fb64
mov eax, dword [edi + 0x24]
cmp eax, 1
jne 0x45fb4b
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 8]
push 2
push 4
push eax
push ecx
mov ecx, dword [edi + 4]
call fcn.0040cb10
pop esi
ret
cmp eax, 0x26
jne 0x45fb64
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
push 3
push 1
push edx
push eax
call fcn.0040cb10
pop esi
ret
Function at 0x45fc70
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
mov eax, dword [ebp + 0x3c]
cmp eax, 8
push esi
push edi
jne 0x45fcfa
mov eax, dword [ebp]
mov ecx, dword [eax + 0x820]
mov eax, dword [ebp + 0x94]
mov edx, dword [ecx + 8]
mov ecx, dword [edx]
and eax, 0xffff
lea eax, [eax + eax*4]
shl eax, 5
cmp dword [ecx + eax + 0x5c], 0
jle 0x45fd88
fld dword [0x679388]
push ecx
fstp dword [esp]
push 0
push str.anim_idle
mov ecx, 0xa
mov eax, ebp
call fcn.0045fd90
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push 0x18
add edx, 4
push edx
add eax, 0x28
push eax
add ecx, 0x28
push ecx
mov edi, ebp
mov dword [ebp + 0x54], 0x190
mov dword [ebp + 0x3c], 9
call fcn.0045eea0
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp eax, 9
jne 0x45fd88
cmp dword [ebp + 0x54], 0
jne 0x45fd88
mov edi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x28]
mov edx, dword [ebp + 4]
push 1
call fcn.00408e40
test eax, eax
je 0x45fd2e
mov esi, eax
call fcn.0044d000
mov eax, dword [ebp + 4]
add dword [eax + 0x5794], 1
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x20]
mov ecx, dword [ebp + 8]
add eax, 0x50
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
push 0x19
add edx, 4
push edx
mov edx, dword [ebp]
mov eax, dword [edx + 0x820]
mov esi, dword [eax]
sub esp, 8
add ecx, 0x28
fstp dword [esp + 4]
mov dword [esp + 0x24], ecx
fild dword [esp + 0x24]
fstp dword [esp]
call fcn.00518a70
push ebp
call fcn.004679b0
jmp loc.00844a40
pop edi
pop esi
pop ebp
pop ebx
ret 4
Function at 0x462680
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, eax
mov eax, dword [edi]
mov ecx, dword [eax + 0x820]
mov eax, dword [edi + 0x94]
mov edx, dword [ecx + 8]
and eax, 0xffff
lea eax, [eax + eax*4]
shl eax, 5
add eax, dword [edx]
mov byte [esp + 0xf], 0
mov dword [esp + 0x1c], eax
lea ebx, [edi + 0xd8]
jmp loc.00845470

Function at 0x464820
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
mov edi, eax
mov ecx, dword [edi + 0x24]
jmp fcn.008431b0

Function at 0x4665b0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
mov edx, dword [ebp + 4]
push esi
push edi
lea esi, [esp + 0x24]
mov dword [esp + 0x24], 0
call fcn.0041c8f0
test al, al
je 0x466624
mov ebx, dword [esp + 0x24]
cmp byte [ebx + 0xec], 0
jne 0x466614
mov eax, dword [ebx + 0x28]
cmp eax, 1
je 0x466614
cmp eax, 2
je 0x466614
cmp eax, 3
je 0x466614
lea edi, [esp + 0x10]
call fcn.005320b0
jmp fcn.00850520
mov edx, dword [ebp + 4]
lea esi, [esp + 0x24]
call fcn.0041c8f0
test al, al
jne 0x4665d3
mov ecx, dword [ebp]
mov eax, dword [ecx]
mov edx, dword [0x6a7970]
mov eax, dword [eax + 0xd8]
push edx
call eax
mov ecx, dword [ebp + 4]
pop edi
pop esi
pop ebp
mov dword [ecx + 0x5d4], 0xfa0
pop ebx
add esp, 0x10
ret 4
Function at 0x46d390
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push ebx
push ebp
push esi
push edi
mov edi, eax
mov eax, dword [edi + 0x5c]
mov edx, dword [edi + 4]
lea ebx, [eax + eax*2]
xor ebp, ebp
lea esi, [esp + 0x10]
lea ebx, [ebx*4 + 0x651600]
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], ebp
call fcn.0041c8f0
test al, al
je 0x46d3eb
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x1c], eax
je 0x46d3d7
push edi
call fcn.0046d2b0
test al, al
je 0x46d3d7
add ebp, 1
mov edx, dword [edi + 4]
lea esi, [esp + 0x10]
call fcn.0041c8f0
test al, al
jne 0x46d3c0
mov dword [esp + 0x14], ebp
mov ebp, dword [ebx + 8]
mov eax, 0x55555556
imul ebp
mov ebx, edx
shr ebx, 0x1f
lea ecx, [ebp*8]
add ebx, edx
sub ecx, ebp
cmp dword [edi + 0x5c], 6
jne 0x46d40d
mov ecx, ebp
mov edx, ebx
imul edx, dword [esp + 0x14]
cmp edx, ecx
jle 0x46d42f
mov eax, ebp
imul eax, ecx
lea ecx, [edx + edx*2]
cdq
idiv ecx
mov ebx, 1
cmp eax, 1
jl 0x46d42f
mov ebx, eax
mov edx, dword [edi + 4]
lea esi, [esp + 0x10]
mov dword [esp + 0x10], 0
call fcn.0041c8f0
test al, al
je 0x46d47d
mov esi, dword [esp + 0x10]
push edi
mov eax, esi
call fcn.0046d2b0
test al, al
je 0x46d46d
mov eax, esi
call fcn.0046d230
cmp dword [esp + 0x1c], esi
jne 0x46d467
push ebp
jmp 0x46d468
push ebx
jmp 0x842ae0
mov edx, dword [edi + 4]
lea esi, [esp + 0x10]
call fcn.0041c8f0
test al, al
jne 0x46d447
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret 4
Function at 0x486d20
Capabilities:
Parse credit card information

Disassembly:
sub esp, 8
mov ecx, dword [ebx + 0xd14]
mov edx, dword [ecx + 0x144]
xor eax, eax
cmp dword [edx + 0x24], eax
mov dword [esp], eax
jle 0x486e39
push ebp
push esi
mov dword [esp + 0xc], eax
push edi
mov eax, dword [esp + 0xc]
push eax
mov esi, ebx
call fcn.00485e20
mov edx, dword [ebx + 0xd14]
mov ecx, eax
shl ecx, 4
sub ecx, eax
lea ebp, [ebx + ecx*4]
mov ecx, dword [edx + 0x144]
mov edx, dword [esp + 0x10]
lea esi, [ecx + edx + 0x28]
mov edx, dword [ebp + 0xd8]
mov edi, eax
call fcn.00489b50
cmp byte [ebp + 0xd0], 0
je 0x486e11
mov eax, dword [ebp + 0xd4]
mov ecx, dword [esi + 0x38]
mov dword [esi + 0x24], eax
mov eax, dword [esi + 0x34]
cmp eax, 0x3c
je 0x486de2
cmp eax, 0x3d
je 0x486de2
cmp eax, 0x3e
je 0x486de2
cmp eax, 0x3f
je 0x486de2
cmp eax, 0x40
je 0x486de2
cmp eax, 0x41
je 0x486de2
cmp eax, 0x42
je 0x486de2
cmp eax, 0x43
je 0x486de2
cmp eax, 0x44
je 0x486de2
cmp eax, 0x45
je 0x486de2
cmp eax, 0x46
je 0x486de2
cmp eax, 0x47
je 0x486de2
cmp eax, 0x48
je 0x486de2
cmp eax, 0x49
je 0x486de2
cmp eax, 0x4a
jne 0x486de6
xor eax, eax
jmp 0x486e06
cmp eax, 0x30
jne 0x486dfc
cmp ecx, 0xffffffff
je 0x486dfc
lea ecx, [ecx + ecx*8]
mov eax, dword [ecx*4 + 0x7a2014]
jmp 0x486e06
lea edx, [eax + eax*8]
mov eax, dword [edx*4 + 0x7a2014]
mov dword [esi + 0x28], eax
mov byte [esi + 0x49], 1
mov byte [esi + 0x48], 0
mov eax, dword [esp + 0xc]
mov ecx, dword [ebx + 0xd14]
mov edx, dword [ecx + 0x144]
add dword [esp + 0x10], 0x50
add eax, 1
cmp eax, dword [edx + 0x24]
mov dword [esp + 0xc], eax
jl 0x486d44
pop edi
pop esi
pop ebp
mov eax, dword [ebx + 0xd14]
mov eax, dword [eax + 0x15c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x774]
mov byte [edx + 0x55], 0
mov ecx, dword [eax + 0x20]
mov edx, dword [0x6aa230]
lea ecx, [ecx + edx + 0xa]
mov edx, dword [eax]
mov byte [eax + 0x2c], 0
mov dword [eax + 8], ecx
mov ecx, dword [edx + 0x320]
mov edx, dword [ecx]
mov eax, dword [eax + 4]
mov edx, dword [edx + 0x20]
push eax
call edx
add esp, 8
ret
Function at 0x525be0
Capabilities:
Parse credit card information

Disassembly:
mov eax, dword [edi]
sub esp, 8
jmp loc.008286f0
Function at 0x5261e0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
push esi
push edi
mov edi, eax
call fcn.005324b0
test al, al
jne 0x52670f
mov ecx, edi
call fcn.0052bee0
jmp loc.0084af00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x528760
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
mov ebx, eax
mov eax, dword [ebp + 8]
cmp eax, 5
push esi
mov esi, dword [ebx + 4]
push edi
ja 0x5287bb
mov ecx, dword [esi + 0x8c]
mov ecx, dword [ecx + 0x7f8]
cmp ecx, 0x26
jne 0x52878f
cmp eax, 4
jle 0x528799
cmp dword [esi + eax*4 + 0x5d8], 0
je 0x5287bb
cmp ecx, 0x26
jne 0x5287b1
cmp dword [esi + eax*4 + 0x5d8], 0
jne 0x5287b1
cmp dword [esi + 0x557c], 5
jl 0x5287bb
cmp dword [esi + eax*4 + 0x5d8], 2
jne 0x5287c6
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov edx, dword [ebx + 0x6c]
push 9
mov eax, esi
mov dword [esp + 0x14], edx
call fcn.0040dc50
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x98]
sub eax, 1
cmp dword [esi + 0xa0], eax
jae 0x5287bb
mov eax, 5
mov byte [esp + 0xc], 0
call fcn.005af400
test eax, eax
jne 0x528803
mov byte [esp + 0xc], 1
add esi, 0x90
call fcn.0041dda0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
push ecx
push 0
push edx
mov edi, eax
mov eax, dword [esp + 0x20]
jmp 0x84cd90

Function at 0x528ca0
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push esi
push edi
mov edi, eax
jmp loc.0084ce60
Function at 0x52e9a0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push ecx
test byte [ebp + 8], 0x20
push ebx
push esi
push edi
mov edi, eax
mov eax, dword [edi]
je 0x52eb48
fldz
mov ebx, 1
mov byte [edi + 0x78], bl
cmp byte [eax + 0x8c5], 0
jne 0x52ea14
mov ecx, dword [0x6a9f00]
fst dword [esp + 0xc]
fcomp dword [ecx + 0x47c]
mov esi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x52e9fe
fld dword [ecx + 0x47c]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x10]
add esp, 4
fld dword [esp + 0xc]
push ecx
mov eax, 0x16
fstp dword [esp]
mov ecx, esi
call fcn.00515020
jmp 0x52ea16
fstp st(0)
fld dword [edi + 0x30]
mov eax, dword [edi + 0x20]
fadd qword [0x67a148]
mov ecx, dword [edi]
push 0x3e
add eax, ebx
fstp dword [esp + 0x10]
push eax
fld dword [esp + 0x14]
sub esp, 8
fstp dword [esp + 4]
mov dword [edi + 0x28], ebx
fld dword [edi + 0x2c]
mov edx, dword [ecx + 0x820]
fadd qword [0x679a88]
mov esi, dword [edx]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp]
call fcn.00518a70
fldz
mov eax, 4
fst dword [edi + 0x34]
call fcn.005af400
test eax, eax
jne 0x52eaa9
fld dword [0x679fe4]
fcomp dword [edi + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x52eaa9
push ecx
fstp st(0)
fld dword [0x679678]
fstp dword [esp]
push 0xa
push 3
push str.anim_wheelie2
call fcn.00528b00
mov dword [edi + 0x68], 0x118
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [edi]
mov ecx, dword [edi + 0x118]
mov eax, dword [esi + 0x820]
mov edx, dword [eax + 8]
xor ebx, ebx
test ecx, ecx
je 0x52eade
movzx eax, cx
cmp eax, dword [edx + 8]
jae 0x52eade
lea eax, [eax + eax*4]
shl eax, 5
add eax, dword [edx]
cmp dword [eax + 0x9c], ecx
setne bl
sub ebx, 1
and ebx, eax
mov ecx, dword [esi + 0x820]
mov esi, dword [ecx]
push 0x3b
push 0
sub esp, 8
fst dword [esp + 4]
fstp dword [esp]
call fcn.00518a70
test eax, eax
je 0x52eb20
fld dword [0x6798e8]
sub esp, 8
fstp dword [esp + 4]
mov ecx, ebx
fld dword [0x679690]
fstp dword [esp]
push eax
mov eax, str.Zombie_zamboni_1
call fcn.00473070
fld dword [0x679388]
push ecx
fstp dword [esp]
push 0xa
push 3
push str.anim_wheelie1
mov dword [edi + 0x68], 0x118
call fcn.00528b00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
fld dword [edi + 0x30]
mov edx, dword [edi + 0x20]
fadd qword [0x679708]
mov ecx, dword [eax + 0x820]
mov esi, dword [ecx]
push 0x3f
fstp dword [esp + 0x10]
add edx, 1
fld dword [esp + 0x10]
push edx
sub esp, 8
fstp dword [esp + 4]
fld dword [edi + 0x2c]
fadd qword [0x679820]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [esp]
call fcn.00518a70
jmp 0x848850
Function at 0x52edb0
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
lea edi, [esp + 0x10]
call fcn.00532140
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
mov dword [esp + 0xc], 0
jmp 0x52ede0
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
lea esi, [esp + 0xc]
call fcn.0041c950
test al, al
je 0x52ee7c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0xc]
cmp edx, dword [esi + 0x1c]
jne 0x52ede0
lea eax, [esp + 0x10]
mov ecx, esi
call fcn.00467ef0
mov ecx, dword [esp + 0x10]
cmp edi, ecx
jge 0x52ee24
mov edx, dword [esp + 0x18]
lea eax, [ebx + edi]
add edx, ecx
jmp 0x52ee2f
mov eax, dword [esp + 0x18]
add eax, ecx
mov ecx, edi
lea edx, [ebx + edi]
cmp eax, ecx
jg 0x52ee37
sub eax, ecx
jmp 0x52ee43
cmp eax, edx
jg 0x52ee3f
sub eax, ecx
jmp 0x52ee43
sub edx, ecx
mov eax, edx
cmp eax, 0x14
jl 0x52ede0
mov ecx, dword [ebp + 8]
push 1
push esi
call fcn.0052e4c0
test al, al
je 0x52ede0
mov eax, dword [esi + 0x24]
jmp 0x844a20
mov edi, dword [ebp + 8]
mov eax, dword [edi]
cmp dword [eax + 0x768], 0
je 0x52eee6
mov eax, dword [eax + 0x7f8]
cmp eax, 0x3d
je 0x52eec2
cmp eax, 0x3e
je 0x52eec2
cmp eax, 0x3f
je 0x52eec2
cmp eax, 0x40
je 0x52eec2
cmp eax, 0x41
je 0x52eec2
cmp eax, 0x42
je 0x52eec2
cmp eax, 0x43
je 0x52eec2
cmp eax, 0x44
je 0x52eec2
cmp eax, 0x45
je 0x52eec2
cmp eax, 0x46
jne 0x52eee6
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x160]
push ecx
mov eax, edi
call fcn.0042b810
test eax, eax
je 0x52eee6
mov edx, dword [edi + 4]
mov ecx, dword [edx + 0x160]
push ecx
call fcn.0042ba30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x530a00
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [esp + 0x18]
mov eax, dword [ebp + 0xd8]
push esi
xor esi, esi
cmp eax, esi
push edi
je 0x530bb1
mov ebx, dword [ebp + 0x20]
add ebx, 1
cmp eax, 1
mov dword [esp + 0x20], esi
jne 0x530a7b
mov eax, ebp
call fcn.005330e0
test byte [esp + 0x24], 0x10
jne 0x530bab
jmp loc.0084ef30
cmp eax, 2
jne 0x530b40
mov edi, ebp
call fcn.0052f440
cmp byte [ebp + 0xbf], 0
je 0x530aa9
push esi
mov eax, ebp
call fcn.0052b5b0
mov byte [ebp + 0xbf], 0
mov dword [ebp + 0xc0], esi
fld dword [0x6796f4]
push ecx
fstp dword [esp]
push 0xa
push 3
push str.anim_gasp
mov dword [ebp + 0x28], 0x1e
call fcn.00528b00
mov eax, ebp
call fcn.005330e0
mov eax, dword [esp + 0x24]
and eax, 0x10
mov dword [esp + 0x18], eax
jne 0x530b1a
lea edx, [esp + 0x14]
push edx
push str.Zombie_paper_paper
lea edi, [esp + 0x28]
mov esi, ebp
call fcn.005345f0
fld dword [esp + 0x20]
mov edx, dword [ebp]
sub esp, 8
fstp dword [esp + 4]
mov eax, 0xd
fld dword [esp + 0x1c]
mov ecx, ebx
fstp dword [esp]
call fcn.00453c80
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x530b92
test byte [esp + 0x24], 1
jne 0x530b92
lea esi, [eax + 0x43]
mov eax, dword [ebp]
call fcn.00453630
push 0
lea edx, [esi + 0x32]
push 0xfffffffffffffff5
mov esi, ebp
call fcn.005322c0
jmp 0x530b92
cmp eax, 3
jne 0x530bab
mov eax, ebp
call fcn.005330e0
test byte [esp + 0x24], 0x10
jne 0x530bab
fld dword [ebp + 0x2c]
mov edx, dword [ebp]
fadd qword [0x679968]
sub esp, 8
mov eax, 0x36
mov ecx, ebx
fstp dword [esp + 0x28]
fld dword [ebp + 0x30]
fadd qword [0x679820]
fstp dword [esp + 0x2c]
fld dword [esp + 0x2c]
fstp dword [esp + 4]
fld dword [esp + 0x28]
fstp dword [esp]
call fcn.00453c80
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x20]
xor esi, esi
cmp edx, esi
je 0x530bab
fld dword [ebp + 0x11c]
push ecx
fstp dword [esp]
call fcn.00518630
mov dword [ebp + 0xd8], esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8

Function at 0x5317c0
Capabilities:
Packed with generic packer

Disassembly:
push ecx
mov ecx, dword [esi + 0x28]
cmp ecx, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x10]
push edi
mov ebx, eax
je 0x531877
cmp byte [esi + 0xec], 0
jne 0x531877
cmp ecx, 1
je 0x531877
cmp ecx, 2
je 0x531877
cmp ecx, 3
je 0x531877
cmp ecx, 0x49
mov eax, ebp
je 0x531806
cmp ecx, 0x4a
jne 0x531834
test bl, 8
jne 0x531812
mov dword [esi + 0x54], 0x19
mov eax, dword [esi + 0xe4]
cmp eax, ebp
jl 0x53181e
mov eax, ebp
mov edi, ebp
sub edi, eax
sub dword [esi + 0xe4], eax
jne 0x531832
jmp 0x849910
mov eax, edi
test eax, eax
jle 0x531877
cmp dword [esi + 0xd8], 0
je 0x531856
test bl, 1
jne 0x531856
push ebx
push ebp
mov eax, esi
call fcn.00530bc0
test bl, 2
je 0x531856
mov eax, ebp
test eax, eax
jle 0x531877
cmp dword [esi + 0xc4], 0
je 0x53186b
push esi
mov eax, ebp
call fcn.00530fe0
test eax, eax
jle 0x531877
push ebx
push eax
push esi
call fcn.005312d0
pop edi
pop ebp
pop ebx
pop ecx
ret 4