joyce8/EMBER2024-capa huggingface dataset:
Function at 0x429980
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push ebp
push esi
push edi
mov edi, eax
mov ebx, ecx
mov eax, dword [ebx]
mov eax, dword [eax + 0x7f8]
test eax, eax
je 0x429aae
cmp eax, 0x46
mov ecx, 1
jne 0x4299a7
jmp fcn.007973cf
cmp eax, 0x3c
jne 0x4299b1
mov ecx, 0xa
mov eax, dword [ebx + 0x6c]
add eax, 1
cdq
idiv ecx
test edx, edx
jne 0x429aae
lea eax, [edx + 0x64]
call fcn.005af400
cmp eax, 0xf
jge 0x429a08
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x81c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x82c]
test eax, eax
je 0x429a01
cmp dword [eax + 0x2c], 0
jle 0x429a01
mov esi, dword [ecx + 0x81c]
push 1
call fcn.0051d740
test al, al
jne 0x429a01
mov ebp, 0x13
jmp 0x429a2d
mov ebp, 0x12
jmp 0x429a2d
cmp eax, 0x1e
jge 0x429a28
mov edx, dword [ebx]
mov eax, dword [edx + 0x81c]
call fcn.0051d710
neg al
sbb eax, eax
and eax, 6
add eax, 0x12
mov ebp, eax
jmp 0x429a2d
mov ebp, 0x14
mov ebx, dword [ebx + 4]
mov eax, dword [ebx + 0x8c]
cmp dword [eax + 0x7f8], 0x2b
jne 0x429a67
mov ecx, dword [ebx + 0x554c]
cmp ecx, 6
je 0x429a54
cmp ecx, 8
je 0x429a54
cmp ecx, 7
jne 0x429a67
mov esi, dword [esp + 0x14]
mov eax, dword [eax + 0x81c]
call fcn.00521450
mov esi, eax
jmp 0x429a70
lea esi, [edi + edi*4]
shl esi, 4
add esi, 0x28
mov eax, dword [esp + 0x14]
push 3
push ebp
mov ecx, edi
call fcn.0041c740
add eax, 0x28
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
call fcn.006397d0
add esi, 0x28
mov dword [esp + 0x1c], esi
fild dword [esp + 0x1c]
push eax
call fcn.006397d0
push eax
mov ecx, ebx
call fcn.0040cb10
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov ecx, dword [ebx + 4]
call fcn.0040c3e0
pop edi
pop esi
pop ebp
pop ebx
ret 4

Function at 0x42a040
Capabilities:
Parse credit card information

Disassembly:
cmp eax, 0x3c
jne 0x42a048
xor eax, eax
ret
cmp eax, 0x3d
jne 0x42a053
mov eax, 2
ret
cmp eax, 0x3e
jne 0x42a05e
mov eax, 3
ret
cmp eax, 0x3f
jne 0x42a069
mov eax, 4
ret
cmp eax, 0x40
jne 0x42a074
mov eax, 0x15
ret
cmp eax, 0x41
jne 0x42a07f
mov eax, 0x11
ret
cmp eax, 0x42
jne 0x42a08a
mov eax, 0x14
ret
cmp eax, 0x43
jne 0x42a095
mov eax, 7
ret
cmp eax, 0x44
jne 0x42a0a0
mov eax, 0x10
ret
cmp eax, 0x45
jne 0x42a0ab
mov eax, 6
ret
cmp eax, 0x46
jne 0x42a0b6
mov eax, 0xc
ret
cmp eax, 0x47
jne 0x42a0c1
mov eax, 0x12
ret
cmp eax, 0x48
jne 0x42a0cc
mov eax, 8
ret
cmp eax, 0x49
jne 0x42a0d7
mov eax, 0x17
ret
cmp eax, 0x4a
jne 0x42a0e1
mov eax, 0x18
ret
Function at 0x42a6c0
Capabilities:
Parse credit card information

Disassembly:
sub esp, 0x298
push ebx
mov ebx, eax
mov eax, dword [esp + 0x2a0]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x7f8]
push ebp
xor ebp, ebp
cmp eax, 0x3d
push esi
push edi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x18], 6
lea ecx, [ebp + 4]
je 0x42a705
cmp eax, 0x3e
je 0x42a705
cmp eax, 0x3f
je 0x42a705
cmp eax, 0x40
je 0x42a705
cmp eax, 0x41
jne 0x42a709
mov dword [esp + 0x18], ecx
cmp eax, 0x42
je 0x42a71d
cmp eax, 0x43
je 0x42a71d
cmp eax, 0x44
je 0x42a71d
jmp 0x796de0
mov dword [esp + 0x18], 5
cmp ebx, 0xffffffff
jne 0x42a732
xor ebx, ebx
mov dword [esp + 0x10], ecx
jmp 0x42a736
mov dword [esp + 0x10], ebx
cmp ebx, dword [esp + 0x10]
jg 0x42a7b6
mov eax, dword [esp + 0x18]
xor edi, edi
test eax, eax
jle 0x42a7ad
lea esi, [ebp + ebp*2]
lea esi, [esp + esi*4 + 0x24]
mov dword [esp + 0x1c], eax
mov ebp, dword [esp + 0x2b0]
mov edx, dword [esp + 0x2ac]
mov eax, dword [edx + 4]
push ebp
push edi
push eax
mov eax, ebx
call fcn.0040e020
test eax, eax
jne 0x42a798
cmp ebp, 3
je 0x42a77b
cmp ebp, 0x16
jne 0x42a782
jmp 0x796e19
mov eax, 1
add dword [esp + 0x14], eax
mov dword [esi - 4], edi
mov dword [esi], ebx
mov dword [esi + 4], eax
add esi, 0xc
jmp 0x42a79d
mov eax, 1
sub dword [esp + 0x1c], eax
add edi, eax
cmp edi, dword [esp + 0x18]
jl 0x42a752
mov ebp, dword [esp + 0x14]
add ebx, 1
cmp ebx, dword [esp + 0x10]
jle 0x42a73c
mov eax, dword [esp + 0x2b4]
cmp eax, ebp
jle 0x42a7ca
mov dword [esp + 0x2b4], ebp
mov eax, ebp
test eax, eax
jle 0x42a87f
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
jmp 0x42a7e4
mov ebp, dword [esp + 0x14]
xor eax, eax
test ebp, ebp
jle 0x42a7fa
lea ecx, [esp + 0x28]
mov edx, ebp
add eax, dword [ecx]
add ecx, 0xc
sub edx, 1
jne 0x42a7f0
call fcn.005af400
xor edx, edx
xor ecx, ecx
test ebp, ebp
jle 0x42a829
lea esi, [esp + 0x28]
jmp 0x42a810
add edx, dword [esi]
cmp eax, edx
jl 0x42a822
add ecx, 1
add esi, 0xc
cmp ecx, ebp
jl 0x42a810
jmp 0x42a829
lea ebx, [ecx + ecx*2]
lea ebx, [esp + ebx*4 + 0x20]
mov ecx, dword [esp + 0x2ac]
mov eax, dword [ecx + 4]
mov edi, dword [ebx + 4]
mov ebp, dword [ebx]
lea esi, [eax + 0xac]
call fcn.0041de80
mov edx, dword [esp + 0x2b0]
push 0xffffffffffffffff
mov esi, eax
push edx
push esi
mov eax, edi
mov ecx, ebp
mov byte [esi + 0x144], 1
call fcn.0045db60
mov eax, dword [esp + 0x2ac]
push esi
mov dword [ebx + 8], 0
call fcn.0042a530
sub dword [esp + 0x10], 1
jne 0x42a7e0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x298
ret 0xc
Function at 0x42b290
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64e518
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push edi
push 0x20
push str._ADVICE_I_ZOMBIE_EAT_ALL_BRAINS_
lea ecx, [esp + 0xc]
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
call fcn.00404330
mov eax, dword [esp + 0x30]
mov dword [esp + 0x28], 0
mov edi, dword [eax + 4]
cmp byte [edi + 0x55e0], 0
jne 0x42b30d
push esi
mov esi, dword [edi + 0x140]
mov ecx, 7
lea edx, [esp + 8]
mov byte [edi + 0x55e0], 1
call fcn.00459010
mov dword [edi + 0x55ec], 0x38
pop esi
cmp dword [esp + 0x1c], 0x10
pop edi
jb 0x42b322
mov ecx, dword [esp + 4]
push ecx
call fcn.0061c19a
add esp, 4
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
add esp, 0x28
ret 4

Function at 0x42b970
Capabilities:
Packed with generic packer

Disassembly:
push ecx
push ebx
push ebp
mov ebp, dword [esp + 0x10]
push esi
push ebp
mov eax, edi
call fcn.0042b810
mov esi, eax
test esi, esi
jne 0x42b98f
xor al, al
pop esi
pop ebp
pop ebx
pop ecx
ret 4
mov eax, edi
call fcn.0052f250
add dword [esi + 0x18], 0xffffffff
cmp dword [esi + 0x18], 0
jg 0x42b9c2
jmp loc.00797020
pop esi
pop ebp
mov al, 1
pop ebx
pop ecx
ret 4

Function at 0x42d830
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f908
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
push esi
mov esi, ecx
push edi
mov eax, esi
call fcn.0042d7e0
mov edi, dword [esi]
call fcn.0044f380
mov esi, dword [esi]
mov eax, dword [esi + 0x82c]
lea ecx, [esp + 0xc]
push 0x2b
mov dword [esi + 0x7f8], 0x2b
push ecx
mov ecx, dword [eax + 0x20]
call fcn.004568d0
add esp, 8
lea eax, [esp + 0xc]
mov ecx, esi
mov dword [esp + 0x30], 0
call fcn.0054b260
mov eax, esi
call fcn.0044f890
cmp dword [esp + 0x24], 0x10
jb 0x42d8ac
mov edx, dword [esp + 0x10]
push edx
call fcn.0061c19a
add esp, 4
mov ecx, dword [esp + 0x28]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x2c
ret
Function at 0x44f5f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f21b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
push 0x60b0
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44f635
push eax
mov ecx, edi
call fcn.00407b50
jmp 0x44f637
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [edi + 0xc4]
push ecx
mov ecx, dword [edi + 0xc0]
push ecx
mov dword [edi + 0x768], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x768]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
mov eax, dword [edi + 0x768]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x768]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop edi
add esp, 0x10
ret

Function at 0x44f8e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x64f1fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push edi
mov edi, ecx
call fcn.0044f380
mov eax, dword [edi + 0x770]
test eax, eax
je 0x44f929
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x10]
call eax
mov edx, dword [edi]
mov eax, dword [edi + 0x770]
mov edx, dword [edx + 0x88]
push eax
mov ecx, edi
call edx
push 0x134
mov dword [edi + 0x7fc], 1
call fcn.0061c130
add esp, 4
mov dword [esp + 4], eax
test eax, eax
mov dword [esp + 0x10], 0
je 0x44f959
push edi
push eax
call fcn.00448cb0
jmp 0x44f95b
xor eax, eax
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [edi + 0xc4]
push ecx
mov ecx, dword [edi + 0xc0]
push ecx
mov dword [edi + 0x770], eax
mov edx, dword [eax]
mov edx, dword [edx + 0xa0]
push 0
push 0
mov ecx, eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x770]
mov eax, dword [eax + 0xc]
push edx
call eax
mov ecx, dword [edi + 0x320]
mov edx, dword [ecx]
mov eax, dword [edi + 0x770]
mov edx, dword [edx + 0x30]
push eax
call edx
mov ecx, dword [edi + 0x320]
mov eax, dword [ecx]
mov edx, dword [edi + 0x770]
mov eax, dword [eax + 0x20]
push edx
call eax
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
pop edi
add esp, 0x10
ret
Function at 0x45a8a0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x6498f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push esi
push 0x14
mov esi, ecx
xor ebx, ebx
push str.soundsmainmusic.mo3
lea ecx, [esp + 0x14]
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
call fcn.00404330
lea eax, [esp + 0xc]
push eax
push 1
push esi
mov dword [esp + 0x40], ebx
jmp loc.00794560

Function at 0x45f8a0
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push esi
mov esi, eax
add dword [esi + 0x58], 0xffffffff
mov eax, dword [esi + 0x58]
test eax, eax
push edi
jg 0x45f91c
mov eax, 0xf
call fcn.005af400
mov ecx, dword [esi + 0x5c]
sub ecx, eax
mov eax, dword [esi + 0x24]
cmp eax, 0x12
mov dword [esi + 0x58], ecx
jne 0x45f8d8
mov edi, esi
call fcn.0045f2a0
jmp 0x45f91c
cmp eax, 0x1d
jne 0x45f8e4
call fcn.0045f6e0
jmp 0x45f91c
cmp eax, 0x1c
jne 0x45f8ed
push 1
jmp 0x45f911
cmp eax, 0x1a
jne 0x45f90f
mov eax, dword [esi + 0x3c]
cmp eax, 0x20
jne 0x45f902
mov eax, dword [esi + 0x1c]
push 0
push eax
jmp 0x45f915
cmp eax, 0x1e
jne 0x45f91c
mov ecx, dword [esi + 0x1c]
push 1
push ecx
jmp 0x45f915
push 0
mov edx, dword [esi + 0x1c]
push edx
mov eax, esi
call fcn.0045ef10
jmp 0x799be0
Function at 0x463150
Capabilities:
Packed with generic packer

Disassembly:
push ecx
push esi
push edi
mov edi, eax
cmp byte [edi + 0x144], 0
je 0x463410
mov ecx, dword [edi]
mov eax, dword [ecx + 0x7f8]
cmp eax, 0x2b
je 0x463410
cmp eax, 0x32
je 0x463410
cmp dword [edi + 0x3c], 2
je 0x46318b
cmp byte [edi + 0x142], 0
je 0x46319b
add dword [edi + 0x4c], 0xffffffff
jns 0x46319b
push edi
call fcn.004679b0
pop edi
pop esi
pop ecx
ret
jmp 0x796ba0
pop edi
pop esi
pop ecx
ret
Function at 0x467b00
Capabilities:
Parse credit card information

Disassembly:
mov ecx, dword [0x6a9ec0]
mov ecx, dword [ecx + 0x7f8]
jmp fcn.00796840
Function at 0x46c730
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
mov ebx, dword [ebp + 4]
push esi
push edi
mov edi, dword [esp + 0x1c]
mov esi, eax
mov eax, dword [esp + 0x18]
mov ecx, ebx
call fcn.0041c4c0
test eax, eax
jle 0x46c75f
mov eax, dword [esp + 0x18]
mov ecx, ebx
call fcn.0041c4c0
mov edi, eax
jmp 0x46c761
xor edi, edi
fild dword [esp + 0x18]
mov eax, dword [esp + 0x24]
mov dword [ebp + 0x5c], eax
mov eax, esi
fstp dword [esp + 0x18]
mov ecx, edi
fld dword [esp + 0x18]
fstp dword [ebp + 0x30]
fild dword [esp + 0x1c]
fstp dword [esp + 0x1c]
fld dword [esp + 0x1c]
fstp dword [ebp + 0x34]
fldz
fst dword [ebp + 0x38]
fst dword [ebp + 0x3c]
fst dword [ebp + 0x40]
fst dword [ebp + 0x44]
fstp dword [ebp + 0x48]
call fcn.0041c740
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
xor ecx, ecx
or eax, 0xffffffff
mov dword [ebp + 0x78], eax
fadd qword [0x679958]
mov dword [ebp + 0x8c], eax
lea edx, [edi + edi*2 + 0x2d]
lea eax, [esi + edx*2]
fstp dword [esp + 0x14]
mov dword [ebp + 0x58], ecx
fld dword [esp + 0x14]
mov dword [ebp + 0x24], ecx
fst dword [ebp + 0x4c]
mov dword [ebp + 0x28], 1
fldz
mov dword [ebp + 0x1c], esi
fst dword [ebp + 0x80]
mov dword [ebp + 0x74], ecx
mov byte [ebp + 0x50], cl
mov dword [ebp + 0x7c], ecx
mov dword [ebp + 0x84], ecx
jmp 0x794500

Function at 0x46d0d0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
fld dword [esi + 0x4c]
mov ecx, dword [esi + 0x5c]
test ecx, ecx
fsub dword [esi + 0x34]
push ebx
push ebp
fstp dword [esp + 0xc]
push edi
fld dword [esp + 0x10]
je 0x46d0ff
cmp ecx, 1
je 0x46d0ff
cmp ecx, 6
je 0x46d0ff
cmp ecx, 8
je 0x46d0ff
cmp ecx, 0xb
jne 0x46d11d
fcom qword [0x6794d8]
fnstsw ax
test ah, 5
jp 0x46d11d
fstp st(0)
xor eax, eax
mov ecx, esi
pop edi
pop ebp
pop ebx
add esp, 8
jmp fcn.0046e000
cmp ecx, 4
jne 0x46d13e
fldz
fcomp st(1)
fnstsw ax
test ah, 0x41
jne 0x46d13e
fstp st(0)
xor eax, eax
mov ecx, esi
pop edi
pop ebp
pop ebx
add esp, 8
jmp fcn.0046e000
cmp ecx, 7
jne 0x46d15f
fcomp dword [0x679774]
fnstsw ax
test ah, 5
jp 0x46d161
xor eax, eax
mov ecx, esi
pop edi
pop ebp
pop ebx
add esp, 8
jmp fcn.0046e000
fstp st(0)
mov eax, dword [esi + 0x58]
cmp eax, 6
je 0x46d1e0
cmp eax, 9
je 0x46d1e0
test ecx, ecx
je 0x46d186
cmp ecx, 1
je 0x46d186
cmp ecx, 7
je 0x46d186
cmp ecx, 4
je 0x46d186
cmp ecx, 6
jne 0x46d1e0
cmp byte [esi + 0x70], 0
jne 0x46d1e0
fld dword [esi + 0x34]
call fcn.006397d0
fld dword [esi + 0x30]
mov edi, eax
call fcn.006397d0
mov ebp, dword [esi + 4]
mov ebx, eax
add ebx, 0x1e
mov eax, ebx
mov ecx, ebp
call fcn.0041c4c0
test eax, eax
jle 0x46d1be
mov eax, ebx
mov ecx, ebp
call fcn.0041c4c0
jmp 0x46d1c0
xor eax, eax
mov ecx, dword [esi + 0x1c]
lea eax, [eax + eax*2 + 0x2d]
lea edx, [ecx + eax*2]
cmp dword [ebp + edx*4], 4
jne 0x46d1e0
xor eax, eax
mov ecx, esi
pop edi
pop ebp
pop ebx
add esp, 8
jmp fcn.0046e000
pop edi
pop ebp
pop ebx
add esp, 8
ret
Function at 0x52ad30
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push esi
mov esi, eax
mov eax, dword [esi + 0x24]
cmp eax, 0x14
je 0x52ae37
cmp eax, 0x19
je 0x52ae37
cmp dword [esi + 0x28], 0xe
je 0x52ae37
cmp dword [esi + 0x64], 0xa
je 0x52ae37
call fcn.0052aa40
mov eax, dword [esi + 0x24]
cmp eax, 0xc
je 0x52ad71
cmp eax, 0x16
jne 0x52ad7d
cmp byte [esi + 0x78], 0
jne 0x52ad7d
push esi
call fcn.0052edb0
cmp byte [esi + 0xb9], 0
je 0x52ada6
cmp dword [esi + 8], 0x352
fld dword [esi + 0x2c]
jmp 0x798ce0
cmp dword [esi + 0x64], 0
jne 0x52ae37
mov eax, dword [esi + 0x1c]
push eax
mov eax, esi
call fcn.00531880
fstp dword [esp + 8]
fld dword [esi + 0x30]
fld dword [esp + 8]
fcom st(1)
fnstsw ax
fstp st(1)
test ah, 0x41
jne 0x52adfd
fsub dword [esi + 0x30]
fld qword [0x65b8f8]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x52adf0
fstp st(1)
fadd dword [esi + 0x30]
fstp dword [esi + 0x30]
pop esi
add esp, 8
ret
fstp st(0)
fadd dword [esi + 0x30]
fstp dword [esi + 0x30]
pop esi
add esp, 8
ret
fld dword [esi + 0x30]
fcomp st(1)
fnstsw ax
test ah, 0x41
jne 0x52ae35
fsubr dword [esi + 0x30]
fld qword [0x65b8f8]
fcom st(1)
fnstsw ax
test ah, 5
jp 0x52ae28
fstp st(1)
fsubr dword [esi + 0x30]
fstp dword [esi + 0x30]
pop esi
add esp, 8
ret
fstp st(0)
fsubr dword [esi + 0x30]
fstp dword [esi + 0x30]
pop esi
add esp, 8
ret
fstp st(0)
pop esi
add esp, 8
ret

Function at 0x52b340
Capabilities:
Check http status code
Packed with generic packer

Disassembly:
mov eax, dword [edi + 4]
sub esp, 8
add dword [edi + 0x3c], 0xffffffff
mov eax, dword [eax + 0xa0]
push esi
jne 0x52b415
call fcn.005af400
test eax, eax
jne 0x52b415
cmp byte [edi + 0xba], al
je 0x52b415
cmp dword [edi + 0x24], 0x19
je 0x52b415
mov eax, dword [edi + 4]
call fcn.00413a40
test al, al
jne 0x52b415
fldz
mov ecx, dword [edi]
fstp dword [esp + 8]
call fcn.004538c0
test al, al
je 0x52b3bd
fld dword [0x679800]
sub esp, 8
fstp dword [esp + 4]
fld dword [0x67959c]
fstp dword [esp]
call fcn.00511cb0
fstp dword [esp + 0x10]
add esp, 8
cmp dword [edi + 0x24], 0x17
jne 0x52b3d1
mov eax, dword [edi]
mov esi, 0x46
call fcn.00453630
jmp 0x52b403
cmp byte [edi + 0x50], 0
je 0x52b3e1
push ecx
mov ecx, dword [edi]
mov eax, 0xc
jmp 0x52b3f7
mov ecx, dword [edi]
cmp byte [ecx + 0x8be], 0
push ecx
mov eax, 0xd
jne 0x52b3f7
mov eax, 0xb
fld dword [esp + 0xc]
fstp dword [esp]
call fcn.00453650
mov eax, 0x3e8
call fcn.005af400
add eax, 0x1f4
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0xb4]
test eax, eax
jle 0x52b43e
add eax, 0xffffffff
mov dword [edi + 0xb4], eax
jne 0x52b43e
mov eax, edi
call fcn.00532350
push 0x3a
push 0x6a
push 0x4b
mov eax, edi
call fcn.005321f0
mov eax, dword [edi + 0xac]
test eax, eax
jle 0x52b45a
add eax, 0xffffffff
mov dword [edi + 0xac], eax
jne 0x52b45a
mov esi, edi
call fcn.0052f050
jmp 0x798e20
Function at 0x52edb0
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
lea edi, [esp + 0x10]
call fcn.00532140
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
mov dword [esp + 0xc], 0
jmp 0x52ede0
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
lea esi, [esp + 0xc]
call fcn.0041c950
test al, al
je 0x52ee7c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x1c]
mov esi, dword [esp + 0xc]
cmp edx, dword [esi + 0x1c]
jne 0x52ede0
lea eax, [esp + 0x10]
mov ecx, esi
call fcn.00467ef0
mov ecx, dword [esp + 0x10]
cmp edi, ecx
jge 0x52ee24
mov edx, dword [esp + 0x18]
lea eax, [ebx + edi]
add edx, ecx
jmp 0x52ee2f
mov eax, dword [esp + 0x18]
add eax, ecx
mov ecx, edi
lea edx, [ebx + edi]
cmp eax, ecx
jg 0x52ee37
sub eax, ecx
jmp 0x52ee43
cmp eax, edx
jg 0x52ee3f
sub eax, ecx
jmp 0x52ee43
sub edx, ecx
mov eax, edx
cmp eax, 0x14
jl 0x52ede0
mov ecx, dword [ebp + 8]
push 1
push esi
call fcn.0052e4c0
test al, al
je 0x52ede0
mov eax, dword [esi + 0x24]
cmp eax, 0x15
je 0x52ede0
cmp eax, 0x2e
je 0x52ede0
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0x28]
mov edi, dword [ebp + 8]
push 1
push ecx
push edx
call fcn.0052e920
jmp 0x52ee7f
mov edi, dword [ebp + 8]
mov eax, dword [edi]
cmp dword [eax + 0x768], 0
je 0x52eee6
mov eax, dword [eax + 0x7f8]
cmp eax, 0x3d
je 0x52eec2
cmp eax, 0x3e
je 0x52eec2
cmp eax, 0x3f
je 0x52eec2
cmp eax, 0x40
je 0x52eec2
cmp eax, 0x41
je 0x52eec2
cmp eax, 0x42
je 0x52eec2
cmp eax, 0x43
je 0x52eec2
cmp eax, 0x44
je 0x52eec2
cmp eax, 0x45
je 0x52eec2
cmp eax, 0x46
jne 0x52eee6
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x160]
push ecx
mov eax, edi
call fcn.0042b810
test eax, eax
je 0x52eee6
mov edx, dword [edi + 4]
mov ecx, dword [edx + 0x160]
push ecx
call fcn.0042ba30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x530170
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
mov ebx, eax
mov eax, dword [ebx + 0x6c]
cmp eax, 0xfffffffe
push esi
push edi
je 0x5302dd
cmp eax, 0xfffffffd
je 0x5302dd
mov eax, dword [ebx + 0x24]
mov byte [eax + 0x6a7178], 1
cmp dword [ebx + 0x24], 0x13
jne 0x5301ad
mov ecx, dword [ebx + 4]
mov byte [ecx + 0x5760], 1
push ebx
call fcn.0052fe50
cmp byte [ebx + 0x70], 0
jmp fcn.00799fc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x794d8c
Capabilities:
Packed with generic packer

Disassembly:
push eax
mov eax, dword [esp + 8]
test eax, eax
pop eax
je 0x794ddb
pushal
mov ebp, eax
mov eax, ebp
inc eax
call fcn.005af400
mov esi, eax
mov eax, 5
call fcn.005af400
mov edx, eax
mov eax, dword [esp + 0x28]
push ebp
push esi
push edx
call fcn.00794cfc
test al, al
je 0x794d9d
imul esi, esi, 5
add esi, edx
mov eax, dword [esp + 0x28]
mov dword [edi + esi*4], eax
sub dword [esp + 0x24], 1
jg 0x794d9d
popal
ret 8

Function at 0x794e0f
Capabilities:
Packed with generic packer

Disassembly:
pushal
mov esi, ebx
mov ebp, eax
push esi
push ebp
call fcn.00794d7b
cmp eax, 0xffffffff
mov edx, eax
jne 0x794e53
mov ecx, dword [esp + 0x24]
call fcn.00794dde
mov edx, eax
push ecx
push esi
push ebp
call fcn.00794cfc
test al, al
je 0x794e2a
cmp al, 2
je 0x794e7c
mov eax, esi
imul eax, eax, 5
add eax, ebp
mov dword [edi + eax*4], edx
push 0x30
push edx
push esi
mov eax, ebp
mov edx, dword [0x6a9ec0]
mov edx, dword [edx + 0x768]
push edx
call fcn.00794e80
cmp dword [esp + 0x28], 1
jne 0x794e7c
push eax
call fcn.0042a530
popal
ret 8

Function at 0x795300
Capabilities:
Packed with generic packer

Disassembly:
pushal
push 0x20
call fcn.0061c130
add esp, 4
lea ebp, [esp + 0x24]
mov ecx, eax
push dword [ebp + 0x10]
call fcn.00404450
mov edi, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x18]
push ebx
push dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x20]
add eax, 0x88
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
push eax
push dword [ebp + 8]
call fcn.00448bc0
mov ebx, eax
push dword [esp + 8]
call fcn.0061fc66
add esp, 0x18
push ebx
mov ecx, ebx
mov eax, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0x18]
mov esi, dword [ebx + 0x28]
cmp dword [eax + 0x28], esi
jl 0x79535e
push dword [eax + 0x28]
jmp 0x79535f
push esi
mov esi, dword [ebx + 0x24]
cmp dword [eax + 0x24], esi
jl 0x79536c
push dword [eax + 0x24]
jmp 0x79536d
push esi
push dword [ebp]
push dword [ebp + 4]
call fcn.00539bd0
mov ecx, dword [ebp + 0x20]
mov edx, dword [ecx]
call dword [edx + 0xc]
popal
ret 0x24

Function at 0x797572
Capabilities:
Packed with generic packer

Disassembly:
pushal
mov eax, ebx
call fcn.00797639
test eax, eax
je 0x797632
mov eax, dword [esp + 0x1c]
add eax, eax
add eax, 2
lea eax, [eax + eax*4]
shl eax, 4
add eax, 0x28
push 3
push 0x10
push 0xfa
push eax
mov ecx, dword [ebx + 4]
call fcn.0040cb10
mov dword [eax + 0x20], 0x900b0
mov dword [eax + 0x54], connect
mov byte [eax + 0xc8], 1
push ecx
push edx
mov ebp, eax
mov ecx, dword [ebp + 4]
mov ecx, dword [ecx + 0x160]
test ecx, ecx
je 0x797632
push ecx
mov eax, 0x2d
call fcn.005af400
pop ecx
add eax, 0x90
cmp byte [eax + ecx + 0x30], 0
je 0x7975bf
cmp eax, 0xa3
je 0x797614
cmp eax, 0xa4
je 0x797614
cmp eax, 0xbb
je 0x797614
cmp eax, 0xbc
jne 0x79761e
cmp dword [ecx + 0x6c], 0x13
jl 0x7975bf
mov dword [ebp + 0x68], eax
mov byte [eax + ecx + 0x30], 0
mov ecx, dword [esp + 0x24]
mov byte [ecx + 0x7973c0], al
pop edx
pop ecx
popal
ret