joyce8/EMBER2024-capa huggingface dataset:
Function at 0x466420
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
mov edx, dword [edi + 4]
push esi
lea esi, [esp + 8]
mov dword [esp + 8], 0
call fcn.0041c8f0
test al, al
je 0x466459
lea esp, [esp]
mov eax, dword [esp + 8]
call fcn.005323c0
mov edx, dword [edi + 4]
lea esi, [esp + 8]
call fcn.0041c8f0
test al, al
jne 0x466440
jmp 0x7c0345

Function at 0x4665b0
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
mov edx, dword [ebp + 4]
push esi
push edi
lea esi, [esp + 0x24]
mov dword [esp + 0x24], 0
call fcn.0041c8f0
test al, al
je 0x466624
mov ebx, dword [esp + 0x24]
jmp fcn.0079e870
mov ecx, dword [ebp]
mov eax, dword [ecx]
mov edx, dword [0x6a7970]
mov eax, dword [eax + 0xd8]
push edx
call eax
mov ecx, dword [ebp + 4]
pop edi
pop esi
pop ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop ebx
add esp, 0x10
ret 4
Function at 0x46dd30
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov edi, eax
mov esi, dword [edi + 0x5c]
cmp esi, 0xa
mov bl, 1
jne 0x46dda3
mov edi, dword [edi]
cmp byte [edi + 0x8c5], 0
jne 0x46dff3
fldz
mov ecx, dword [0x6a9f00]
mov edi, dword [edi + 0x784]
fst dword [esp + 0x14]
fcomp dword [ecx + 0x684]
fnstsw ax
test ah, 0x44
jnp 0x46dd88
fld dword [ecx + 0x684]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x18]
add esp, 4
fld dword [esp + 0x14]
push ecx
mov eax, 0x20
fstp dword [esp]
mov ecx, edi
call fcn.00515020
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp esi, 0xc
fldz
jne 0x46ddf6
mov eax, dword [edi]
cmp byte [eax + 0x8c5], 0
jne 0x46dec5
mov ecx, dword [0x6a9f00]
fst dword [esp + 0x14]
fcomp dword [ecx + 0x8c0]
mov esi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x46ddec
fld dword [ecx + 0x8c0]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x18]
add esp, 4
mov eax, 0x2b
jmp 0x46deb4
cmp esi, 6
jne 0x46de67
mov ecx, ebp
call fcn.0046d1f0
test al, al
je 0x46de67
mov edi, dword [edi]
fstp st(0)
cmp byte [edi + 0x8c5], 0
jne 0x46dff3
fldz
mov ecx, dword [0x6a9f00]
mov edi, dword [edi + 0x784]
fst dword [esp + 0x14]
fcomp dword [ecx + 0x7bc]
fnstsw ax
test ah, 0x44
jnp 0x46de4c
fld dword [ecx + 0x7bc]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x18]
add esp, 4
fld dword [esp + 0x14]
push ecx
mov eax, 0x26
fstp dword [esp]
mov ecx, edi
call fcn.00515020
pop edi
pop esi
pop ebp
pop ebx
ret 4
cmp esi, 3
je 0x46de71
cmp esi, 5
jne 0x46dec7
mov eax, dword [edi]
cmp byte [eax + 0x8c5], 0
jne 0x46dec5
mov ecx, dword [0x6a9f00]
fst dword [esp + 0x14]
fcomp dword [ecx + 0xc9c]
mov esi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x46deaf
fld dword [ecx + 0xc9c]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x18]
add esp, 4
mov eax, 0x3e
fld dword [esp + 0x14]
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.00515020
fldz
xor bl, bl
test ebp, ebp
je 0x46df9a
mov eax, dword [ebp + 0xc4]
jmp loc.007ce372
test bl, bl
je 0x46dff1
mov eax, dword [edi]
cmp byte [eax + 0x8c5], 0
jne 0x46dff1
mov ecx, dword [0x6a9f00]
fst dword [esp + 0x14]
fcomp dword [ecx + 0x38]
mov esi, dword [eax + 0x784]
fnstsw ax
test ah, 0x44
jnp 0x46dfd6
fld dword [ecx + 0x38]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x18]
add esp, 4
fld dword [esp + 0x14]
push ecx
mov eax, 1
fstp dword [esp]
mov ecx, esi
call fcn.00515020
pop edi
pop esi
pop ebp
pop ebx
ret 4
fstp st(0)
pop edi
pop esi
pop ebp
pop ebx
ret 4
Function at 0x485040
Capabilities:
Packed with generic packer

Disassembly:
push esi
mov esi, eax
mov ecx, dword [esi + 0xd10]
mov eax, dword [ecx]
mov edx, dword [eax + 0x13c]
call edx
test eax, eax
jne 0x48518f
mov eax, dword [esi + 0xd14]
mov eax, dword [eax + 0x15c]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + 0x5584]
cmp eax, 0xf
je 0x48518f
cmp eax, 0x10
je 0x48518f
cmp eax, 0x11
je 0x48518f
mov edx, dword [esi + 0xd10]
cmp dword [edx + 0x7f8], 0x47
je 0x48518f
mov eax, dword [esi + 0xd34]
mov ecx, dword [esi + 0xd30]
push eax
push ecx
call fcn.00485d80
cmp eax, 0xffffffff
mov edx, 1
je 0x4850db
mov ecx, eax
shl ecx, 4
sub ecx, eax
cmp dword [esi + ecx*4 + 0xc8], edx
lea ecx, [esi + ecx*4 + 0xa4]
jne 0x4850db
cmp byte [ecx + 0x38], 0
je 0x4850db
or eax, 0xffffffff
cmp byte [esi + 0x55], 0
je 0x48510a
cmp dword [esi + 0xd38], edx
je 0x48510a
cmp eax, 0xffffffff
je 0x485118
mov ecx, dword [esi + 0xd10]
cmp dword [ecx + 0x7f8], 0x1f
jne 0x485181
call fcn.00484620
test al, al
je 0x485181
mov ecx, dword [esi + 0xd10]
xor eax, eax
pop esi
jmp fcn.005548c0
mov eax, dword [esi + 0x8c]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0x90]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0x98]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0xa0]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0x94]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0x9c]
call fcn.00448310
test al, al
jne 0x485181
mov eax, dword [esi + 0x88]
call fcn.00448310
test al, al
je 0x48510a
mov ecx, dword [esi + 0xd10]
mov eax, edx
pop esi
jmp fcn.005548c0
pop esi
ret

Function at 0x486d20
Capabilities:
Parse credit card information

Disassembly:
sub esp, 8
mov ecx, dword [ebx + 0xd14]
mov edx, dword [ecx + 0x144]
xor eax, eax
cmp dword [edx + 0x24], eax
mov dword [esp], eax
jle 0x486e39
push ebp
push esi
mov dword [esp + 0xc], eax
push edi
mov eax, dword [esp + 0xc]
push eax
mov esi, ebx
call fcn.00485e20
jmp fcn.007affcb
mov eax, dword [ebx + 0xd14]
mov eax, dword [eax + 0x15c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x774]
mov byte [edx + 0x55], 0
mov ecx, dword [eax + 0x20]
mov edx, dword [0x6aa230]
lea ecx, [ecx + edx + 0xa]
mov edx, dword [eax]
mov byte [eax + 0x2c], 0
mov dword [eax + 8], ecx
mov ecx, dword [edx + 0x320]
mov edx, dword [ecx]
mov eax, dword [eax + 4]
mov edx, dword [edx + 0x20]
push eax
call edx
add esp, 8
ret
Function at 0x51c470
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x642183
push eax
mov dword fs:[0], esp
push ebx
mov ebx, dword [esp + 0x14]
xor eax, eax
mov ecx, 0xf
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x14], eax
mov byte [ebx + 4], al
mov dword [esp + 0xc], eax
mov dword [ebx + 0x34], ecx
mov dword [ebx + 0x30], eax
mov byte [ebx + 0x20], al
mov byte [esp + 0xc], 1
call fcn.0051c4d0
mov ecx, dword [esp + 4]
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret 4

Function at 0x51da00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x64e787
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push ebp
mov ebp, dword [esp + 0xb0]
push esi
push edi
mov edi, dword [ebp + 4]
jmp loc.008221ad
Function at 0x51f580
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
push esi
mov esi, eax
cmp esi, 0x10
push edi
mov edi, ecx
jne 0x51f5bd
mov eax, edi
call fcn.00521310
test eax, eax
je 0x51f5ea
mov eax, dword [esp + 0x20]
push ebp
push eax
push edi
call fcn.005210f0
mov edi, dword [edi + 4]
call fcn.00412330
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
jmp loc.00820f6f
mov edx, dword [esp + 0x20]
mov ebx, dword [edi + 4]
lea ecx, [esp + 0x10]
push ecx
push ebp
push edx
push ebx
call fcn.00411730
cmp dword [esp + 0x14], 1
jne 0x51f6c5
lea eax, [esp + 0x10]
mov ecx, ebx
call fcn.00410f70
test eax, eax
je 0x51f6c5
cmp dword [eax + 0x13c], 0xffffffff
nop word [eax + eax]
cmp esi, 0xf
jne 0x51f63f
push eax
push edi
call fcn.0051da00
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp esi, 0x10
jne 0x51f65d
mov ecx, edi
call fcn.00521280
mov edi, dword [edi + 4]
call fcn.00412330
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
cmp esi, 0xe
jne 0x51f6f1
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x138]
mov ecx, dword [eax + 0x24]
mov dword [edx + 0x28], ecx
mov edx, dword [edi + 4]
mov ecx, dword [edx + 0x138]
mov edx, dword [eax + 0x138]
mov dword [ecx + 0x2c], edx
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x138]
mov dword [edx + 0x30], 3
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x138]
mov eax, dword [eax + 0x148]
mov dword [edx + 0x38], eax
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [0x6a7980]
jmp loc.00822011
mov eax, dword [edi]
mov esi, 9
call fcn.00453630
mov edi, dword [edi + 4]
call fcn.00412330
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8

Function at 0x522110
Capabilities:
Packed with generic packer

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x64f930
push eax
mov dword fs:[0], esp
sub esp, 0x38
push ebx
push ebp
mov ebp, dword [esp + 0x50]
push esi
push edi
mov ebx, ebp
call fcn.005223f0
mov edi, dword [ebp]
call fcn.0044fd40
mov edi, eax
mov eax, dword [ebp + 4]
cmp dword [eax + 0x5584], 0x19
jne 0x52216a
push 0xa28
call fcn.0048d3a0
mov ecx, dword [ebp]
mov edx, dword [ecx + 0x82c]
mov dword [edx + 0x1f8], 0x3ed
push 0x14
xor ebx, ebx
push str._STORE_BACK_TO_GAME_
lea ecx, [esp + 0x34]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], bl
call fcn.00404330
mov dword [esp + 0x50], ebx
mov eax, dword [edi + 0x154]
push eax
lea edx, [esp + 0x30]
call fcn.004484e0
mov dword [esp + 0x50], 0xffffffff
cmp dword [esp + 0x44], 0x10
jb 0x5221bc
mov ecx, dword [esp + 0x30]
push ecx
call fcn.0061c19a
add esp, 4
mov edx, dword [edi]
mov eax, dword [edx + 0x12c]
push 1
mov ecx, edi
mov dword [edi + 0x194], 2
call eax
jmp 0x80e431
Function at 0x522580
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
mov esi, eax
mov eax, dword [ebp + 0x18]
push edi
mov edi, dword [ebp + 8]
mov dword [edi + 0x6c], eax
mov eax, 0x28
mov dword [edi + 0x1c], esi
call fcn.005af400
add eax, 0x30c
mov dword [esp + 0x18], eax
fild dword [esp + 0x18]
push esi
mov eax, edi
fstp dword [edi + 0x2c]
call fcn.00531880
mov ecx, dword [ebp + 0xc]
fstp dword [edi + 0x30]
fldz
mov dl, byte [ebp + 0x10]
xor ebx, ebx
fst dword [edi + 0x34]
mov eax, 0x78
fst dword [edi + 0x120]
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], eax
lea eax, [ebx + 0x65]
mov dword [edi + 0x48], ebx
mov dword [edi + 0x4c], ebx
mov dword [edi + 0x24], ecx
mov byte [edi + 0x50], dl
mov byte [edi + 0x51], bl
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
jmp loc.00794900

Function at 0x524040
Capabilities:
Packed with generic packer

Disassembly:
push esi
push edi
xor esi, esi
or edi, 0xffffffff
cmp byte [esp + 0xc], 0
je 0x524052
or esi, edi
xor edi, edi
push esi
push str.Zombie_outerarm_hand
push ebx
call fcn.00473a40
push esi
push str.Zombie_outerarm_lower
push ebx
call fcn.00473a40
push esi
push str.Zombie_outerarm_upper
push ebx
jmp loc.007aa600

Function at 0x524370
Capabilities:
Packed with generic packer

Disassembly:
mov eax, 0x14
mov dword [edi + 0x9c], eax
mov eax, dword [edi]
xor ecx, ecx
mov dword [edi + 0xa0], ecx
mov ecx, dword [edi + 0x118]
test ecx, ecx
mov edx, 0x32
push esi
mov dword [edi + 0xa4], edx
mov esi, 0x73
mov dword [edi + 0xa8], esi
mov edx, dword [eax + 0x820]
mov edx, dword [edx + 8]
je 0x52446d
movzx eax, cx
cmp eax, dword [edx + 8]
jae 0x52446d
lea eax, [eax + eax*4]
shl eax, 5
add eax, dword [edx]
cmp dword [eax + 0x9c], ecx
jne 0x52446d
mov esi, dword [edi + 0x24]
call fcn.005240b0
mov eax, dword [edi + 4]
test eax, eax
je 0x524403
movzx eax, byte [eax + 0x5761]
push eax
mov eax, edi
call fcn.00536c90
mov ecx, dword [edi + 4]
movzx edx, byte [ecx + 0x5763]
push edx
mov esi, edi
call fcn.00536d90
mov eax, dword [edi + 4]
test eax, eax
je 0x524417
mov ecx, dword [edi + 0x1c]
cmp dword [eax + ecx*4 + 0x5d8], 2
je 0x52441d
cmp dword [edi + 0x24], 0xa
jne 0x52446d
push 0
push str.zombie_duckytube
mov eax, edi
call fcn.005331c0
push 1
push str.Zombie_duckytube
mov ecx, edi
call fcn.00524280
jmp 0x7cd331
pop esi
ret
Function at 0x525be0
Capabilities:
Parse credit card information

Disassembly:
mov eax, dword [edi]
sub esp, 8
cmp dword [eax + 0x7f8], 0x2c
push esi
jne 0x525c2f
fld dword [0x67a130]
fcomp dword [edi + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x525c2f
fld dword [edi + 0x84]
fsub qword [0x679a68]
fstp dword [esp + 8]
fld dword [esp + 8]
fst dword [edi + 0x84]
fcomp dword [0x679f64]
fnstsw ax
test ah, 5
jp 0x525c2f
push 0
mov eax, edi
call fcn.00525b60
cmp dword [edi + 0x28], 0x4a
jne 0x525c6a
mov ecx, dword [edi]
mov edx, dword [ecx + 0x820]
mov eax, dword [edi + 0x118]
mov ecx, dword [edx + 8]
and eax, 0xffff
lea edx, [eax + eax*4]
mov eax, dword [ecx]
shl edx, 5
jmp 0x7b2f9f
mov eax, dword [edi]
cmp dword [eax + 0x768], 0
je 0x525cd1
mov eax, dword [eax + 0x7f8]
cmp eax, 0x3d
je 0x525cad
cmp eax, 0x3e
je 0x525cad
cmp eax, 0x3f
je 0x525cad
cmp eax, 0x40
je 0x525cad
cmp eax, 0x41
je 0x525cad
cmp eax, 0x42
je 0x525cad
cmp eax, 0x43
je 0x525cad
cmp eax, 0x44
je 0x525cad
cmp eax, 0x45
je 0x525cad
cmp eax, 0x46
jne 0x525cd1
cmp dword [edi + 0x28], 0x49
jne 0x525cd1
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x160]
push edx
mov eax, edi
call fcn.0042b810
test eax, eax
je 0x525cd1
push 0
mov eax, edi
call fcn.00525b60
pop esi
add esp, 8
ret
Function at 0x528760
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
push ebx
mov ebx, eax
mov eax, dword [ebp + 8]
jmp fcn.00823331

Function at 0x528ca0
Capabilities:
Packed with generic packer

Disassembly:
push ebx
push esi
push edi
mov edi, eax
cmp byte [edi + 0x51], 0
jne 0x528ebb
mov eax, dword [edi + 0x114]
test eax, eax
jle 0x528d14
add eax, 0xffffffff
mov dword [edi + 0x114], eax
jne 0x528d14
mov eax, edi
call fcn.0052df90
cmp eax, 0xc
jne 0x528d0a
cmp byte [edi + 0xba], 0
je 0x528d0a
fld dword [0x679b54]
fcomp dword [edi + 0x2c]
fnstsw ax
test ah, 0x41
jne 0x528d0a
fld dword [0x679638]
push ecx
fstp dword [esp]
push 0x14
push 3
push str.anim_point
mov dword [edi + 0x28], 0x2a
call fcn.00528b00
jmp 0x528d14
mov dword [edi + 0x114], 1
mov ecx, dword [edi + 0x28]
cmp ecx, 0x28
jne 0x528d5c
cmp byte [edi + 0xba], 0
je 0x528ebb
jmp 0x7b113d
cmp ecx, 0x29
je 0x528e63
cmp ecx, 0x2a
je 0x528e63
cmp ecx, 0x2b
mov esi, 0x2c
jne 0x528d99
cmp dword [edi + 0x68], 0
jne 0x528ebb
fldz
push ecx
fstp dword [esp]
mov dword [edi + 0x28], esi
push 0x14
push 0
push str.anim_walk
call fcn.00528b00
mov eax, edi
call fcn.0052dfe0
cmp eax, dword [edi + 0x28]
je 0x528e3a
cmp eax, esi
jne 0x528dc1
fldz
push ecx
fstp dword [esp]
mov dword [edi + 0x28], esi
push 0xa
push 0
push str.anim_walk
jmp 0x528e35
cmp eax, 0x2d
jne 0x528e0b
fld dword [0x6795c4]
push ecx
fstp dword [esp]
push 0xa
push 0
push str.anim_armraise
mov dword [edi + 0x28], eax
call fcn.00528b00
fld dword [0x679610]
mov eax, dword [edi]
mov ecx, dword [eax + 0x820]
mov eax, dword [edi + 0x118]
mov edx, dword [ecx + 8]
mov ecx, dword [edx]
and eax, 0xffff
lea eax, [eax + eax*4]
shl eax, 5
fstp dword [ecx + eax + 4]
jmp 0x528e3a
cmp eax, 0x2e
je 0x528e1f
cmp eax, 0x2f
je 0x528e1f
cmp eax, 0x30
je 0x528e1f
cmp eax, 0x31
jne 0x528e3a
fld dword [0x6795c4]
push ecx
fstp dword [esp]
push 0xa
push 0
mov dword [edi + 0x28], eax
push str.anim_armraise
call fcn.00528b00
cmp byte [edi + 0xba], 0
je 0x528ebb
cmp dword [edi + 0x114], 0
jne 0x528ebb
call fcn.00528a50
test al, al
je 0x528ebb
mov dword [edi + 0x114], 0x64
pop edi
pop esi
pop ebx
ret
mov edx, dword [edi]
mov eax, dword [edx + 0x820]
mov edx, dword [eax + 8]
mov eax, dword [edi + 0x118]
mov edx, dword [edx]
and eax, 0xffff
lea eax, [eax + eax*4]
shl eax, 5
cmp dword [edx + eax + 0x5c], 0
jle 0x528ebb
cmp ecx, 0x29
jne 0x528ea6
mov ebx, dword [edi + 4]
call fcn.00408b60
cmp eax, 0xf
jg 0x528ea6
mov eax, dword [edi]
mov esi, 0x64
call fcn.00453630
mov esi, edi
call fcn.00528970
mov dword [edi + 0x28], 0x2b
mov dword [edi + 0x68], 0xc8
pop edi
pop esi
pop ebx
ret
Function at 0x52b110
Capabilities:
Check http status code

Disassembly:
push ebx
push esi
mov esi, eax
cmp dword [esi + 0x64], 6
push edi
jne 0x52b120
call fcn.0052b010
cmp dword [esi + 0x64], 0xa
jne 0x52b12d
mov eax, esi
call fcn.005291e0
mov eax, dword [esi + 0x64]
cmp eax, 2
je 0x52b143
cmp eax, 1
je 0x52b143
cmp byte [esi + 0xbd], 0
je 0x52b14a
mov edi, esi
call fcn.005295f0
mov eax, dword [esi + 0x64]
cmp eax, 4
je 0x52b157
cmp eax, 5
jne 0x52b15e
mov ecx, esi
call fcn.005296e0
cmp dword [esi + 0x64], 7
jne 0x52b169
call fcn.00529770
cmp dword [esi + 0x64], 8
jne 0x52b174
call fcn.00534730
jmp 0x7a4210

Function at 0x52b340
Capabilities:
Check http status code

Disassembly:
mov eax, dword [edi + 4]
sub esp, 8
add dword [edi + 0x3c], 0xffffffff
mov eax, dword [eax + 0xa0]
push esi
jne 0x52b415
call fcn.005af400
test eax, eax
jne 0x52b415
cmp byte [edi + 0xba], al
je 0x52b415
cmp dword [edi + 0x24], 0x19
je 0x52b415
mov eax, dword [edi + 4]
call fcn.00413a40
test al, al
jne 0x52b415
fldz
mov ecx, dword [edi]
fstp dword [esp + 8]
call fcn.004538c0
test al, al
je 0x52b3bd
fld dword [0x679800]
sub esp, 8
fstp dword [esp + 4]
fld dword [0x67959c]
fstp dword [esp]
call fcn.00511cb0
fstp dword [esp + 0x10]
add esp, 8
cmp dword [edi + 0x24], 0x17
jne 0x52b3d1
mov eax, dword [edi]
mov esi, 0x46
call fcn.00453630
jmp 0x52b403
cmp byte [edi + 0x50], 0
je 0x52b3e1
push ecx
mov ecx, dword [edi]
mov eax, 0xc
jmp 0x52b3f7
mov ecx, dword [edi]
cmp byte [ecx + 0x8be], 0
push ecx
mov eax, 0xd
jne 0x52b3f7
mov eax, 0xb
fld dword [esp + 0xc]
fstp dword [esp]
call fcn.00453650
mov eax, 0x3e8
call fcn.005af400
add eax, 0x1f4
mov dword [edi + 0x3c], eax
mov eax, dword [edi + 0xb4]
test eax, eax
jle 0x52b43e
add eax, 0xffffffff
mov dword [edi + 0xb4], eax
jne 0x52b43e
mov eax, edi
call fcn.00532350
push 0x3a
push 0x6a
push 0x4b
mov eax, edi
call fcn.005321f0
mov eax, dword [edi + 0xac]
test eax, eax
jle 0x52b45a
add eax, 0xffffffff
mov dword [edi + 0xac], eax
jne 0x52b45a
mov esi, edi
call fcn.0052f050
mov eax, dword [edi + 0xb0]
test eax, eax
jle 0x52b476
add eax, 0xffffffff
mov dword [edi + 0xb0], eax
jne 0x52b476
mov eax, edi
call fcn.00532570
cmp dword [edi + 0x28], 0xe
jne 0x52b488
mov esi, edi
call fcn.00528ec0
pop esi
add esp, 8
ret
cmp dword [edi + 0xb4], 0
jg 0x52b4c3
cmp dword [edi + 0xb0], 0
jg 0x52b4c3
mov eax, edi
call fcn.0052b110
mov eax, edi
call fcn.0052ad30
mov eax, edi
call fcn.0052f4c0
push edi
call fcn.0052f870
mov esi, edi
call fcn.0052fa20
mov eax, edi
call fcn.0052b280
cmp dword [edi + 0x24], 0x19
jne 0x52b4d0
mov eax, edi
call fcn.00536080
cmp byte [edi + 0xec], 0
jne 0x52b551
mov eax, dword [edi + 0x28]
cmp eax, 1
je 0x52b551
cmp eax, 2
je 0x52b551
cmp eax, 3
je 0x52b551
cmp dword [edi + 0x6c], 0xfffffffc
je 0x52b551
cmp byte [edi + 0xba], 0
mov eax, dword [edi + 0x24]
sete cl
cmp eax, 0xc
je 0x52b508
cmp eax, 0x16
jne 0x52b514
cmp dword [edi + 0xc8], 0xc8
jl 0x52b518
test cl, cl
je 0x52b551
cmp eax, 0x13
mov esi, 1
jne 0x52b525
lea esi, [eax - 9]
cmp dword [edi + 0xcc], 0x1f4
jl 0x52b536
mov esi, 3
mov eax, 5
call fcn.005af400
test eax, eax
jne 0x52b551
push esi
mov eax, 9
mov esi, edi
call fcn.005317c0
pop esi
add esp, 8
ret
Function at 0x52b940
Capabilities:
Packed with generic packer

Disassembly:
sub esp, 8
push ebx
push esi
push edi
mov edi, eax
cmp dword [edi + 0x28], 0x3c
je 0x52bb34
push 0
push edi
call fcn.0052e780
mov esi, eax
test esi, esi
je 0x52bad7
mov eax, dword [esi + 0x24]
cmp eax, 0xc
jne 0x52ba3e
jmp fcn.008206eb
cmp eax, 0x24
jne 0x52ba6a
cmp byte [edi + 0xbf], 0
jne 0x52bb34
mov esi, edi
jmp loc.007cca69
jmp loc.007bf8dd
mov edi, dword [edi]
cmp byte [edi + 0x8c5], 0
jne 0x52bb34
fldz
mov ecx, dword [0x6a9f00]
mov edi, dword [edi + 0x784]
fst dword [esp + 0x10]
fcomp dword [ecx + 0x13c]
fnstsw ax
test ah, 0x44
jnp 0x52bad0
fld dword [ecx + 0x13c]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x14]
add esp, 4
mov eax, 6
jmp fcn.0052bb25
cmp byte [edi + 0xb8], 0
jne 0x52ba8c
mov edi, dword [edi]
cmp byte [edi + 0x8c5], 0
jne 0x52bb34
fldz
mov ecx, dword [0x6a9f00]
mov edi, dword [edi + 0x784]
fst dword [esp + 0x10]
fcomp dword [ecx + 0x108]
fnstsw ax
test ah, 0x44
jnp 0x52bb20
fld dword [ecx + 0x108]
push ecx
fstp dword [esp]
call fcn.005af410
fstp dword [esp + 0x14]
add esp, 4
jmp loc.007a43e5

Function at 0x52bb40
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x28
cmp dword [edi + 0x28], 0x3c
push ebx
push esi
je fcn.0052bc9a
mov eax, dword [edi]
call fcn.004537d0
test al, al
je 0x52bb8b
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x160]
push ecx
mov eax, edi
call fcn.0042b810
test eax, eax
je 0x52bb8b
mov ecx, dword [eax + 0x4c]
cmp ecx, 0x19
jg 0x52bb82
mov ecx, 0x19
mov dword [eax + 0x4c], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
push edi
call fcn.0052e780
test eax, eax
mov dword [esp + 0x10], eax
je fcn.0052bc9a
mov ecx, dword [eax + 0x24]
cmp ecx, 3
je 0x52bbb0
cmp ecx, 0x17
jne 0x52bc84
mov ebx, dword [edi + 0x1c]
imul ebx, ebx, 0x2710
lea esi, [esp + 0x14]
mov ecx, edi
add ebx, 0x4a768
call fcn.0052d9e0
mov edx, dword [edi + 0x24]
cmp edx, 0xb
fld dword [edi + 0x2c]
fadd qword [0x679908]
fstp dword [esp + 0xc]
fld dword [edi + 0x30]
fadd qword [0x6794c8]
fadd dword [esp + 0x20]
fstp dword [esp + 8]
je 0x52bc40
cmp edx, 0xe
je 0x52bc40
mov ecx, edi
call fcn.0052bee0
test al, al
je 0x52bc10
fld dword [esp + 0xc]
fadd qword [0x679550]
fstp dword [esp + 0xc]
jmp 0x52bc5c
cmp edx, 0x10
jne 0x52bc21
fld dword [esp + 8]
fadd qword [0x679550]
jmp 0x52bc58
cmp edx, 0x18
jne 0x52bc5c
fld dword [esp + 0xc]
fadd qword [0x679350]
fstp dword [esp + 0xc]
fld dword [esp + 8]
fadd qword [0x6794c8]
jmp 0x52bc58
fld dword [esp + 0xc]
fsub qword [0x679560]
fstp dword [esp + 0xc]
fld dword [esp + 8]
fadd qword [0x679590]
fstp dword [esp + 8]
mov edx, dword [edi]
fld dword [esp + 8]
mov eax, dword [edx + 0x820]
mov esi, dword [eax]
push 0x23
push ebx
sub esp, 8
fstp dword [esp + 4]
fld dword [esp + 0x1c]
fstp dword [esp]
call fcn.00518a70
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0xb8]
cmp ecx, 0x19
jg 0x52bc94
mov ecx, 0x19
jmp loc.007b3b33