joyce8/EMBER2024-capa huggingface dataset:
Function at 0x437dc0
Capabilities:
Parse credit card information

Disassembly:
push ebx
mov ebx, dword [esp + 0xc]
test ebx, ebx
jne 0x437dce
or eax, 0xffffffff
pop ebx
ret
push esi
mov esi, dword [ebx]
push edi
mov edi, dword [esp + 0x10]
mov al, byte [esi]
cmp al, 0x61
jl 0x437de4
cmp al, 0x7a
jle 0x437eca
cmp al, 0x41
jl 0x437df0
cmp al, 0x5a
jle 0x437eca
cmp al, 0x30
jl 0x437dfc
cmp al, 0x39
jle 0x437eca
cmp al, 0x2d
je 0x437eca
cmp al, 0x2e
je 0x437eca
cmp al, 0x5f
je 0x437eca
cmp al, 0x7e
je 0x437eca
cmp al, 0x25
jne 0x437e62
mov cl, byte [esi + 1]
cmp cl, 0x30
jl 0x437e2d
cmp cl, 0x39
jle 0x437e3f
cmp cl, 0x61
jl 0x437e37
cmp cl, 0x66
jle 0x437e3f
sub cl, 0x41
cmp cl, 5
ja 0x437ea6
mov cl, byte [esi + 2]
cmp cl, 0x30
jl 0x437e4c
cmp cl, 0x39
jle 0x437eca
cmp cl, 0x61
jl 0x437e56
cmp cl, 0x66
jle 0x437eca
cmp cl, 0x41
jl 0x437ea6
cmp cl, 0x46
jle 0x437eca
jmp 0x437ea6
cmp al, 0x21
je 0x437eca
cmp al, 0x24
je 0x437eca
cmp al, 0x26
je 0x437eca
cmp al, 0x28
je 0x437eca
cmp al, 0x29
je 0x437eca
cmp al, 0x2a
je 0x437eca
cmp al, 0x2b
je 0x437eca
cmp al, 0x2c
je 0x437eca
cmp al, 0x3b
je 0x437eca
cmp al, 0x3d
je 0x437eca
cmp al, 0x27
je 0x437eca
cmp al, 0x3a
je 0x437eca
cmp al, 0x40
je 0x437eca
cmp al, 0x2f
je 0x437eca
cmp al, 0x3f
je 0x437eca
cmp al, 0x5b
je 0x437eca
cmp al, 0x5d
je 0x437eca
test edi, edi
je 0x437f24
mov edx, dword [edi + 0x24]
test dl, 1
je 0x437ee1
cmp al, 0x7b
je 0x437eca
cmp al, 0x7d
je 0x437eca
cmp al, 0x7c
je 0x437eca
cmp al, 0x5c
je 0x437eca
cmp al, 0x5e
je 0x437eca
cmp al, 0x60
jne 0x437ee1
xor ecx, ecx
cmp al, 0x25
sete cl
lea esi, [esi + ecx*2]
inc esi
lea ecx, [ecx*2 + 1]
jmp 0x437dd6
mov eax, dword [edi + 0x20]
test eax, eax
je 0x437ef5
push eax
call dword [0x554394]
mov edx, dword [edi + 0x24]
add esp, 4
mov ecx, dword [ebx]
mov eax, esi
sub eax, ecx
test dl, 2
je 0x437f15
push eax
push ecx
call fcn.00421bc0
add esp, 8
mov dword [edi + 0x20], eax
mov dword [ebx], esi
xor eax, eax
pop edi
pop esi
pop ebx
ret
push 0
push eax
push ecx
call fcn.00439a80
add esp, 0xc
mov dword [edi + 0x20], eax
pop edi
mov dword [ebx], esi
xor eax, eax
pop esi
pop ebx
ret
Function at 0x437f30
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov edi, dword [ebp]
mov dword [esp + 0x14], edi
mov al, byte [edi]
cmp al, 0x2f
jne 0x437fb2
cmp byte [edi + 1], al
jne 0x437f8c
mov esi, dword [esp + 0x10]
lea eax, [edi + 2]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push esi
call fcn.00437c90
add esp, 8
test eax, eax
jne 0x438151
cmp dword [esi + 0xc], eax
jne 0x437f76
mov dword [esi + 0x14], 0xffffffff
lea eax, [esp + 0x14]
push eax
push esi
call fcn.00438370
add esp, 8
test eax, eax
je 0x437fa5
pop edi
pop esi
pop ebp
ret
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x14]
call fcn.00438410
add esp, 8
test eax, eax
jne 0x438151
mov edi, dword [esp + 0x14]
xor eax, eax
mov dword [ebp], edi
pop edi
pop esi
pop ebp
ret
cmp al, 0x61
jl 0x437fbe
cmp al, 0x7a
jle 0x43809d
cmp al, 0x41
jl 0x437fca
cmp al, 0x5a
jle 0x43809d
cmp al, 0x30
jl 0x437fd6
cmp al, 0x39
jle 0x43809d
cmp al, 0x2d
je 0x43809d
cmp al, 0x2e
je 0x43809d
cmp al, 0x5f
je 0x43809d
cmp al, 0x7e
je 0x43809d
cmp al, 0x25
jne 0x43803c
mov cl, byte [edi + 1]
cmp cl, 0x30
jl 0x438007
cmp cl, 0x39
jle 0x43801b
cmp cl, 0x61
jl 0x438011
cmp cl, 0x66
jle 0x43801b
cmp cl, 0x41
jl 0x43803c
cmp cl, 0x46
jg 0x43803c
mov cl, byte [edi + 2]
cmp cl, 0x30
jl 0x438028
cmp cl, 0x39
jle 0x43809d
cmp cl, 0x61
jl 0x438032
cmp cl, 0x66
jle 0x43809d
cmp cl, 0x41
jl 0x43803c
cmp cl, 0x46
jle 0x43809d
cmp al, 0x21
je 0x43809d
cmp al, 0x24
je 0x43809d
cmp al, 0x26
je 0x43809d
cmp al, 0x28
je 0x43809d
cmp al, 0x29
je 0x43809d
cmp al, 0x2a
je 0x43809d
cmp al, 0x2b
je 0x43809d
cmp al, 0x2c
je 0x43809d
cmp al, 0x3b
je 0x43809d
cmp al, 0x3d
je 0x43809d
cmp al, 0x27
je 0x43809d
cmp al, 0x3a
je 0x43809d
cmp al, 0x40
je 0x43809d
mov esi, dword [esp + 0x10]
test esi, esi
je 0x43814c
mov eax, dword [esi + 0x18]
test eax, eax
je 0x43808d
push eax
call dword [0x554394]
add esp, 4
mov dword [esi + 0x18], 0
xor eax, eax
mov dword [ebp], edi
pop edi
pop esi
pop ebp
ret
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], edi
push 0
push eax
call fcn.004388b0
add esp, 0xc
test eax, eax
jne 0x438151
mov esi, dword [esp + 0x14]
cmp byte [esi], 0x2f
jne 0x4380e6
push 1
lea eax, [esp + 0x18]
inc esi
push 0
push eax
mov dword [esp + 0x20], esi
call fcn.004388b0
add esp, 0xc
test eax, eax
jne 0x438151
mov esi, dword [esp + 0x14]
cmp byte [esi], 0x2f
je 0x4380c3
push ebx
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x438149
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x438100
push eax
call dword [0x554394]
add esp, 4
cmp esi, edi
je 0x438142
mov eax, esi
sub eax, edi
test byte [ebx + 0x24], 2
je 0x438127
push eax
push edi
call fcn.00421bc0
add esp, 8
mov dword [ebx + 0x18], eax
mov edi, esi
xor eax, eax
mov dword [ebp], edi
pop ebx
pop edi
pop esi
pop ebp
ret
push 0
push eax
push edi
call fcn.00439a80
add esp, 0xc
mov dword [ebx + 0x18], eax
mov edi, esi
xor eax, eax
mov dword [ebp], edi
pop ebx
pop edi
pop esi
pop ebp
ret
mov dword [ebx + 0x18], 0
mov edi, esi
pop ebx
mov dword [ebp], edi
xor eax, eax
pop edi
pop esi
pop ebp
ret
Function at 0x438160
Capabilities:
Parse credit card information

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0x10]
push esi
mov esi, dword [ebp]
mov ebx, esi
mov dword [esp + 0x14], esi
mov al, byte [esi]
cmp al, 0x5b
jne 0x43820e
mov al, byte [esi + 1]
inc esi
mov edx, esi
cmp al, 0x5d
je 0x43819a
mov ecx, esi
mov edx, ecx
test al, al
je 0x438200
mov al, byte [ecx + 1]
lea esi, [ecx + 1]
mov ecx, esi
mov edx, esi
cmp al, 0x5d
jne 0x438186
lea esi, [edx + 1]
push edi
mov edi, dword [esp + 0x14]
test edi, edi
je 0x438365
mov eax, dword [edi + 8]
test eax, eax
je 0x4381bb
push eax
call dword [0x554394]
add esp, 4
mov eax, dword [edi + 0xc]
mov dword [edi + 8], 0
test eax, eax
je 0x4381d3
push eax
call dword [0x554394]
add esp, 4
cmp esi, ebx
je 0x43835e
mov eax, esi
sub eax, ebx
test byte [edi + 0x24], 2
je 0x438345
push eax
push ebx
call fcn.00421bc0
add esp, 8
mov dword [edi + 0xc], eax
mov dword [ebp], esi
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
ret
cmp byte [esi], 0x5d
je 0x43819a
pop esi
pop ebp
mov eax, 1
pop ebx
ret
cmp al, 0x30
jl 0x438283
cmp al, 0x39
jg 0x438283
lea eax, [esp + 0x14]
push eax
call fcn.00437d30
add esp, 4
test eax, eax
jne 0x438283
mov eax, dword [esp + 0x14]
cmp byte [eax], 0x2e
jne 0x438283
inc eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
call fcn.00437d30
add esp, 4
test eax, eax
jne 0x438283
mov eax, dword [esp + 0x14]
cmp byte [eax], 0x2e
jne 0x438283
lea eax, [esp + 0x14]
push eax
call fcn.00437d30
add esp, 4
test eax, eax
jne 0x438283
mov eax, dword [esp + 0x14]
cmp byte [eax], 0x2e
jne 0x438283
lea eax, [esp + 0x14]
push eax
call fcn.00437d30
add esp, 4
test eax, eax
jne 0x438283
mov esi, dword [esp + 0x14]
jmp 0x43819d
mov al, byte [esi]
cmp al, 0x61
jl 0x438291
cmp al, 0x7a
jle 0x438333
cmp al, 0x41
jl 0x43829d
cmp al, 0x5a
jle 0x438333
cmp al, 0x30
jl 0x4382a9
cmp al, 0x39
jle 0x438333
cmp al, 0x2d
je 0x438333
cmp al, 0x2e
je 0x438333
cmp al, 0x5f
je 0x438333
cmp al, 0x7e
je 0x438333
cmp al, 0x25
jne 0x438303
mov cl, byte [esi + 1]
cmp cl, 0x30
jl 0x4382ce
cmp cl, 0x39
jle 0x4382e2
cmp cl, 0x61
jl 0x4382d8
cmp cl, 0x66
jle 0x4382e2
cmp cl, 0x41
jl 0x438303
cmp cl, 0x46
jg 0x438303
mov cl, byte [esi + 2]
cmp cl, 0x30
jl 0x4382ef
cmp cl, 0x39
jle 0x438333
cmp cl, 0x61
jl 0x4382f9
cmp cl, 0x66
jle 0x438333
cmp cl, 0x41
jl 0x438303
cmp cl, 0x46
jle 0x438333
cmp al, 0x21
je 0x438333
cmp al, 0x24
je 0x438333
cmp al, 0x26
je 0x438333
cmp al, 0x28
je 0x438333
cmp al, 0x29
je 0x438333
cmp al, 0x2a
je 0x438333
cmp al, 0x2b
je 0x438333
cmp al, 0x2c
je 0x438333
cmp al, 0x3b
je 0x438333
cmp al, 0x3d
je 0x438333
cmp al, 0x27
jne 0x43819d
cmp al, 0x25
jne 0x43833f
add esi, 3
jmp 0x438283
inc esi
jmp 0x438283
push 0
push eax
push ebx
call fcn.00439a80
add esp, 0xc
mov dword [edi + 0xc], eax
mov dword [ebp], esi
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
ret
mov dword [edi + 0xc], 0
pop edi
mov dword [ebp], esi
xor eax, eax
pop esi
pop ebp
pop ebx
ret
Function at 0x4384d0
Capabilities:
Parse credit card information

Disassembly:
push ebx
mov ebx, dword [esp + 0xc]
test ebx, ebx
jne 0x4384de
or eax, 0xffffffff
pop ebx
ret
push esi
mov esi, dword [ebx]
push edi
mov edi, dword [esp + 0x10]
mov al, byte [esi]
cmp al, 0x61
jl 0x4384f4
cmp al, 0x7a
jle 0x4385e0
cmp al, 0x41
jl 0x438500
cmp al, 0x5a
jle 0x4385e0
cmp al, 0x30
jl 0x43850c
cmp al, 0x39
jle 0x4385e0
cmp al, 0x2d
je 0x4385e0
cmp al, 0x2e
je 0x4385e0
cmp al, 0x5f
je 0x4385e0
cmp al, 0x7e
je 0x4385e0
cmp al, 0x25
jne 0x438576
mov cl, byte [esi + 1]
cmp cl, 0x30
jl 0x43853d
cmp cl, 0x39
jle 0x43854f
cmp cl, 0x61
jl 0x438547
cmp cl, 0x66
jle 0x43854f
sub cl, 0x41
cmp cl, 5
ja 0x4385b2
mov cl, byte [esi + 2]
cmp cl, 0x30
jl 0x438560
cmp cl, 0x39
jle 0x4385e0
cmp cl, 0x61
jl 0x43856a
cmp cl, 0x66
jle 0x4385e0
cmp cl, 0x41
jl 0x4385b2
cmp cl, 0x46
jle 0x4385e0
jmp 0x4385b2
cmp al, 0x21
je 0x4385e0
cmp al, 0x24
je 0x4385e0
cmp al, 0x26
je 0x4385e0
cmp al, 0x28
je 0x4385e0
cmp al, 0x29
je 0x4385e0
cmp al, 0x2a
je 0x4385e0
cmp al, 0x2b
je 0x4385e0
cmp al, 0x2c
je 0x4385e0
cmp al, 0x3b
je 0x4385e0
cmp al, 0x3d
je 0x4385e0
cmp al, 0x27
je 0x4385e0
cmp al, 0x3a
je 0x4385e0
cmp al, 0x40
je 0x4385e0
cmp al, 0x2f
je 0x4385e0
cmp al, 0x3f
je 0x4385e0
test edi, edi
je 0x438653
test byte [edi + 0x24], 1
je 0x4385f7
cmp al, 0x7b
je 0x4385e0
cmp al, 0x7d
je 0x4385e0
cmp al, 0x7c
je 0x4385e0
cmp al, 0x5c
je 0x4385e0
cmp al, 0x5e
je 0x4385e0
cmp al, 0x5b
je 0x4385e0
cmp al, 0x5d
je 0x4385e0
cmp al, 0x60
jne 0x4385f7
xor ecx, ecx
cmp al, 0x25
sete cl
lea esi, [esi + ecx*2]
inc esi
lea ecx, [ecx*2 + 1]
jmp 0x4384e6
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x438608
push eax
call dword [0x554394]
add esp, 4
mov ecx, dword [ebx]
mov eax, esi
sub eax, ecx
test byte [edi + 0x24], 2
je 0x438620
push eax
push ecx
call fcn.00421bc0
add esp, 8
jmp 0x43862c
push 0
push eax
push ecx
call fcn.00439a80
add esp, 0xc
mov dword [edi + 0x1c], eax
mov eax, dword [edi + 0x28]
test eax, eax
je 0x438640
push eax
call dword [0x554394]
add esp, 4
mov ecx, dword [ebx]
mov eax, esi
sub eax, ecx
push eax
push ecx
call fcn.00421bc0
add esp, 8
mov dword [edi + 0x28], eax
pop edi
mov dword [ebx], esi
xor eax, eax
pop esi
pop ebx
ret
Function at 0x438660
Capabilities:
Parse credit card information

Disassembly:
push ebx
push esi
push edi
mov edi, dword [esp + 0x14]
mov al, byte [edi]
cmp al, 0x2f
jne 0x4386c3
cmp byte [edi + 1], 0x2f
lea eax, [esp + 0x14]
mov ebx, dword [esp + 0x10]
push eax
push ebx
jne 0x4386aa
add edi, 2
mov dword [esp + 0x1c], edi
call fcn.00437c90
add esp, 8
test eax, eax
jne 0x4388a0
lea eax, [esp + 0x14]
push eax
push ebx
call fcn.00438370
add esp, 8
test eax, eax
je 0x4386ba
pop edi
pop esi
pop ebx
ret
call fcn.00438410
add esp, 8
test eax, eax
jne 0x4388a0
mov edi, dword [esp + 0x14]
jmp 0x438847
cmp al, 0x61
jl 0x4386cf
cmp al, 0x7a
jle 0x4387aa
cmp al, 0x41
jl 0x4386db
cmp al, 0x5a
jle 0x4387aa
cmp al, 0x30
jl 0x4386e7
cmp al, 0x39
jle 0x4387aa
cmp al, 0x2d
je 0x4387aa
cmp al, 0x2e
je 0x4387aa
cmp al, 0x5f
je 0x4387aa
cmp al, 0x7e
je 0x4387aa
cmp al, 0x25
jne 0x43874d
mov cl, byte [edi + 1]
cmp cl, 0x30
jl 0x438718
cmp cl, 0x39
jle 0x43872c
cmp cl, 0x61
jl 0x438722
cmp cl, 0x66
jle 0x43872c
cmp cl, 0x41
jl 0x43874d
cmp cl, 0x46
jg 0x43874d
mov cl, byte [edi + 2]
cmp cl, 0x30
jl 0x438739
cmp cl, 0x39
jle 0x4387aa
cmp cl, 0x61
jl 0x438743
cmp cl, 0x66
jle 0x4387aa
cmp cl, 0x41
jl 0x43874d
cmp cl, 0x46
jle 0x4387aa
cmp al, 0x21
je 0x4387aa
cmp al, 0x24
je 0x4387aa
cmp al, 0x26
je 0x4387aa
cmp al, 0x28
je 0x4387aa
cmp al, 0x29
je 0x4387aa
cmp al, 0x2a
je 0x4387aa
cmp al, 0x2b
je 0x4387aa
cmp al, 0x2c
je 0x4387aa
cmp al, 0x3b
je 0x4387aa
cmp al, 0x3d
je 0x4387aa
cmp al, 0x27
je 0x4387aa
cmp al, 0x3a
je 0x4387aa
cmp al, 0x40
je 0x4387aa
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x438847
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x43879e
push eax
call dword [0x554394]
add esp, 4
mov dword [ebx + 0x18], 0
jmp 0x438847
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], edi
push 0x3a
push eax
call fcn.004388b0
add esp, 0xc
test eax, eax
jne 0x4388a0
mov esi, dword [esp + 0x14]
cmp byte [esi], 0x2f
jne 0x4387f7
push 1
lea eax, [esp + 0x18]
inc esi
push 0
push eax
mov dword [esp + 0x20], esi
call fcn.004388b0
add esp, 0xc
test eax, eax
jne 0x4388a0
mov esi, dword [esp + 0x14]
cmp byte [esi], 0x2f
je 0x4387d0
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x438845
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x438810
push eax
call dword [0x554394]
add esp, 4
cmp esi, edi
je 0x43883e
mov eax, esi
sub eax, edi
test byte [ebx + 0x24], 2
je 0x43882d
push eax
push edi
call fcn.00421bc0
add esp, 8
mov dword [ebx + 0x18], eax
jmp 0x438845
push 0
push eax
push edi
call fcn.00439a80
add esp, 0xc
mov dword [ebx + 0x18], eax
jmp 0x438845
mov dword [ebx + 0x18], 0
mov edi, esi
cmp byte [edi], 0x3f
jne 0x438867
lea eax, [esp + 0x14]
inc edi
push eax
push ebx
mov dword [esp + 0x1c], edi
call fcn.004384d0
add esp, 8
test eax, eax
jne 0x4388a0
mov edi, dword [esp + 0x14]
cmp byte [edi], 0x23
jne 0x438887
lea eax, [esp + 0x14]
inc edi
push eax
push ebx
mov dword [esp + 0x1c], edi
call fcn.00437dc0
add esp, 8
test eax, eax
jne 0x4388a0
mov edi, dword [esp + 0x14]
cmp byte [edi], 0
je 0x43889e
push ebx
call fcn.00437900
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
ret
xor eax, eax
pop edi
pop esi
pop ebx
ret
Function at 0x4388b0
Capabilities:
Parse credit card information

Disassembly:
push esi
mov esi, dword [esp + 8]
mov edx, dword [esi]
mov al, byte [edx]
cmp al, 0x61
jl 0x4388c1
cmp al, 0x7a
jle 0x438929
cmp al, 0x41
jl 0x4388c9
cmp al, 0x5a
jle 0x438929
cmp al, 0x30
jl 0x4388d1
cmp al, 0x39
jle 0x438929
cmp al, 0x2d
je 0x438929
cmp al, 0x2e
je 0x438929
cmp al, 0x5f
je 0x438929
cmp al, 0x7e
je 0x438929
cmp al, 0x25
jne 0x4389d1
mov al, byte [edx + 1]
cmp al, 0x30
jl 0x4388f4
cmp al, 0x39
jle 0x438906
cmp al, 0x61
jl 0x4388fc
cmp al, 0x66
jle 0x438906
sub al, 0x41
cmp al, 5
ja 0x438a39
mov al, byte [edx + 2]
cmp al, 0x30
jl 0x438911
cmp al, 0x39
jle 0x438929
cmp al, 0x61
jl 0x438919
cmp al, 0x66
jle 0x438929
cmp al, 0x41
jl 0x438a39
cmp al, 0x46
jg 0x438a39
push ebx
mov bl, byte [esp + 0x10]
nop
mov al, byte [edx]
cmp al, 0x61
jl 0x43893e
cmp al, 0x7a
jle 0x438a7c
cmp al, 0x41
jl 0x43894a
cmp al, 0x5a
jle 0x438a7c
cmp al, 0x30
jl 0x438956
cmp al, 0x39
jle 0x438a7c
cmp al, 0x2d
je 0x438a7c
cmp al, 0x2e
je 0x438a7c
cmp al, 0x5f
je 0x438a7c
cmp al, 0x7e
je 0x438a7c
cmp al, 0x25
jne 0x438a44
mov cl, byte [edx + 1]
cmp cl, 0x30
jl 0x43898b
cmp cl, 0x39
jle 0x43899d
cmp cl, 0x61
jl 0x438995
cmp cl, 0x66
jle 0x43899d
sub cl, 0x41
cmp cl, 5
ja 0x4389ca
mov cl, byte [edx + 2]
cmp cl, 0x30
jl 0x4389ae
cmp cl, 0x39
jle 0x438a7c
cmp cl, 0x61
jl 0x4389bc
cmp cl, 0x66
jle 0x438a7c
cmp cl, 0x41
jl 0x4389ca
cmp cl, 0x46
jle 0x438a7c
pop ebx
mov dword [esi], edx
xor eax, eax
pop esi
ret
cmp al, 0x21
je 0x438929
cmp al, 0x24
je 0x438929
cmp al, 0x26
je 0x438929
cmp al, 0x28
je 0x438929
cmp al, 0x29
je 0x438929
cmp al, 0x2a
je 0x438929
cmp al, 0x2b
je 0x438929
cmp al, 0x2c
je 0x438929
cmp al, 0x3b
je 0x438929
cmp al, 0x3d
je 0x438929
cmp al, 0x27
je 0x438929
cmp al, 0x3a
je 0x438929
cmp al, 0x40
je 0x438929
xor eax, eax
cmp dword [esp + 0x10], eax
pop esi
sete al
ret
cmp al, 0x21
je 0x438a7c
cmp al, 0x24
je 0x438a7c
cmp al, 0x26
je 0x438a7c
cmp al, 0x28
je 0x438a7c
cmp al, 0x29
je 0x438a7c
cmp al, 0x2a
je 0x438a7c
cmp al, 0x2b
je 0x438a7c
cmp al, 0x2c
je 0x438a7c
cmp al, 0x3b
je 0x438a7c
cmp al, 0x3d
je 0x438a7c
cmp al, 0x27
je 0x438a7c
cmp al, 0x3a
je 0x438a7c
cmp al, 0x40
jne 0x4389ca
cmp al, bl
je 0x4389ca
xor ecx, ecx
cmp al, 0x25
sete cl
lea edx, [edx + ecx*2]
inc edx
lea ecx, [ecx*2 + 1]
jmp 0x438930
Function at 0x438bd0
Capabilities:
Parse credit card information

Disassembly:
push ebx
mov ebx, dword [esp + 0xc]
push esi
mov esi, dword [ebx]
mov al, byte [esi]
cmp al, 0x61
jl 0x438be6
cmp al, 0x7a
jle 0x438c96
cmp al, 0x41
jl 0x438bf2
cmp al, 0x5a
jle 0x438c96
cmp al, 0x30
jl 0x438bfe
cmp al, 0x39
jle 0x438c96
cmp al, 0x2d
je 0x438c96
cmp al, 0x2e
je 0x438c96
cmp al, 0x5f
je 0x438c96
cmp al, 0x7e
je 0x438c96
cmp al, 0x25
jne 0x438c66
mov cl, byte [esi + 1]
cmp cl, 0x30
jl 0x438c2b
cmp cl, 0x39
jle 0x438c3d
cmp cl, 0x61
jl 0x438c35
cmp cl, 0x66
jle 0x438c3d
sub cl, 0x41
cmp cl, 5
ja 0x438c5e
mov cl, byte [esi + 2]
cmp cl, 0x30
jl 0x438c4a
cmp cl, 0x39
jle 0x438c96
cmp cl, 0x61
jl 0x438c54
cmp cl, 0x66
jle 0x438c96
cmp cl, 0x41
jl 0x438c5e
cmp cl, 0x46
jle 0x438c96
pop esi
mov eax, 1
pop ebx
ret
cmp al, 0x21
je 0x438c96
cmp al, 0x24
je 0x438c96
cmp al, 0x26
je 0x438c96
cmp al, 0x28
je 0x438c96
cmp al, 0x29
je 0x438c96
cmp al, 0x2a
je 0x438c96
cmp al, 0x2b
je 0x438c96
cmp al, 0x2c
je 0x438c96
cmp al, 0x3b
je 0x438c96
cmp al, 0x3d
je 0x438c96
cmp al, 0x27
je 0x438c96
cmp al, 0x3a
jne 0x438cad
xor ecx, ecx
cmp al, 0x25
sete cl
lea esi, [esi + ecx*2]
inc esi
lea ecx, [ecx*2 + 1]
jmp 0x438bd8
cmp al, 0x40
jne 0x438c5e
push edi
mov edi, dword [esp + 0x10]
test edi, edi
je 0x438cfb
mov eax, dword [edi + 0x10]
test eax, eax
je 0x438ccb
push eax
call dword [0x554394]
add esp, 4
mov ecx, dword [ebx]
mov eax, esi
sub eax, ecx
test byte [edi + 0x24], 2
je 0x438cec
push eax
push ecx
call fcn.00421bc0
add esp, 8
mov dword [edi + 0x10], eax
mov dword [ebx], esi
xor eax, eax
pop edi
pop esi
pop ebx
ret
push 0
push eax
push ecx
call fcn.00439a80
add esp, 0xc
mov dword [edi + 0x10], eax
pop edi
mov dword [ebx], esi
xor eax, eax
pop esi
pop ebx
ret
Function at 0x43a3b0
Capabilities:
Parse credit card information

Disassembly:
sub esp, 0x7d4
mov eax, dword [0x554efc]
xor eax, esp
mov dword [esp + 0x7d0], eax
push esi
push edi
mov edi, dword [esp + 0x7e0]
xor esi, esi
push 0xd
push str.urn:publicid:
push edi
call fcn.00421b60
add esp, 0xc
test eax, eax
je 0x43a3fc
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x7d0]
xor ecx, esp
call fcn.00457db8
add esp, 0x7d4
ret
mov cl, byte [edi + 0xd]
add edi, 0xd
test cl, cl
je 0x43a554
nop word [eax + eax]
cmp esi, 0x7cc
ja 0x43a54c
cmp cl, 0x2b
jne 0x43a42b
mov byte [esp + esi + 8], 0x20
jmp 0x43a53a
cmp cl, 0x3a
jne 0x43a441
mov word [esp + esi + 8], 0x2f2f
mov eax, 2
jmp 0x43a53f
cmp cl, 0x3b
jne 0x43a457
mov word [esp + esi + 8], 0x3a3a
mov eax, 2
jmp 0x43a53f
cmp cl, 0x25
jne 0x43a536
mov al, byte [edi + 1]
cmp al, 0x32
jne 0x43a47f
cmp byte [edi + 2], 0x42
jne 0x43a49f
mov byte [esp + esi + 8], 0x2b
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x33
jne 0x43a49b
cmp byte [edi + 2], 0x41
jne 0x43a4bb
mov byte [esp + esi + 8], 0x3a
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x32
jne 0x43a4b7
cmp byte [edi + 2], 0x46
jne 0x43a4d4
mov byte [esp + esi + 8], 0x2f
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x33
jne 0x43a4d0
cmp byte [edi + 2], 0x42
jne 0x43a4ed
mov byte [esp + esi + 8], 0x3b
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x32
jne 0x43a4e9
cmp byte [edi + 2], 0x37
jne 0x43a506
mov byte [esp + esi + 8], 0x27
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x33
jne 0x43a502
cmp byte [edi + 2], 0x46
jne 0x43a52f
mov byte [esp + esi + 8], 0x3f
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x32
jne 0x43a52f
mov al, byte [edi + 2]
cmp al, 0x33
jne 0x43a51c
mov byte [esp + esi + 8], 0x23
add edi, 3
mov eax, 1
jmp 0x43a540
cmp al, 0x35
jne 0x43a52f
mov byte [esp + esi + 8], 0x25
add edi, 3
mov eax, 1
jmp 0x43a540
mov byte [esp + esi + 8], 0x25
jmp 0x43a53a
mov byte [esp + esi + 8], cl
mov eax, 1
inc edi
mov cl, byte [edi]
add esi, eax
test cl, cl
jne 0x43a410
cmp esi, 0x7d0
jae 0x43a57d
lea eax, [esp + 8]
mov byte [esp + esi + 8], 0
push eax
call fcn.00421910
mov ecx, dword [esp + 0x7dc]
add esp, 4
pop edi
pop esi
xor ecx, esp
call fcn.00457db8
add esp, 0x7d4
ret
call fcn.00458175
int3
Function at 0x43b0d0
Capabilities:
Query environment variable

Disassembly:
sub esp, 0x104
mov eax, dword [0x554efc]
xor eax, esp
mov dword [esp + 0x100], eax
cmp dword [0x555580], 0
jne 0x43b2ae
push esi
mov esi, dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
push edi
push str.XML_DEBUG_CATALOG
call esi
mov ecx, dword [0x555570]
test eax, eax
mov edi, 1
cmovne ecx, edi
mov dword [0x555570], ecx
call fcn.00422270
push eax
mov dword [0x55557c], eax
mov dword [0x555580], edi
call fcn.00422310
push str.XML_DEBUG_CATALOG
call esi
mov ecx, dword [0x555570]
add esp, 0xc
test eax, eax
cmovne ecx, edi
cmp dword [0x555578], 0
mov dword [0x555570], ecx
jne 0x43b29e
push str.XML_CATALOG_FILES
call esi
mov esi, eax
add esp, 4
test esi, esi
jne 0x43b1fd
push str.libxml2.dll
call sub.KERNEL32.dll_GetModuleHandleA
test eax, eax
jne 0x43b180
push eax
call sub.KERNEL32.dll_GetModuleHandleA
test eax, eax
je 0x43b1f8
push 0xff
lea ecx, [esp + 0xc]
push ecx
push eax
call sub.KERNEL32.dll_GetModuleFileNameA
test eax, eax
je 0x43b1f8
lea ecx, [esp + 8]
add ecx, eax
cmp byte [ecx], 0x5c
je 0x43b1ae
nop
lea eax, [esp + 8]
cmp ecx, eax
jbe 0x43b1ae
dec ecx
cmp byte [ecx], 0x5c
jne 0x43b1a0
lea eax, [esp + 8]
cmp ecx, eax
je 0x43b1f8
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea eax, [esp + 0x107]
sub eax, ecx
push eax
push str...etccatalog
push ecx
call edi
lea eax, [esp + 0x14]
push eax
call fcn.00437730
mov esi, eax
add esp, 0x10
test esi, esi
je 0x43b1f8
push 0xff
push esi
push str.file:___etc_xml_catalog
call edi
push esi
call dword [0x554394]
add esp, 0x10
mov esi, str.file:___etc_xml_catalog
push ebp
push dword [0x554644]
push 1
call fcn.0043ada0
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x43b29d
cmp byte [esi], 0
push ebx
lea ebx, [ebp + 0x3c]
je 0x43b296
mov al, byte [esi]
cmp al, 0x20
je 0x43b233
cmp al, 9
jl 0x43b22f
cmp al, 0xa
jle 0x43b233
cmp al, 0xd
jne 0x43b236
inc esi
jmp 0x43b221
test al, al
je 0x43b296
mov ecx, esi
nop dword [eax]
cmp al, 0x20
je 0x43b258
cmp al, 9
jl 0x43b24c
cmp al, 0xa
jle 0x43b258
cmp al, 0xd
je 0x43b258
mov al, byte [esi + 1]
inc esi
test al, al
jne 0x43b240
mov eax, esi
sub eax, ecx
push eax
push ecx
call fcn.00421bc0
mov edi, eax
add esp, 8
test edi, edi
je 0x43b291
push 0
push dword [0x554644]
push edi
push 0
push 0
push 1
call fcn.0043b2d0
test eax, eax
mov dword [ebx], eax
push edi
cmovne ebx, eax
call dword [0x554394]
add esp, 0x1c
cmp byte [esi], 0
jne 0x43b221
mov dword [0x555578], ebp
pop ebx
pop ebp
push dword [0x55557c]
call fcn.00422330
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0x100]
xor ecx, esp
call fcn.00457db8
add esp, 0x104
ret