joyce8/EMBER2024-capa huggingface dataset:
Function at 0x459ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x459dcb
sub esp, 0x4c
xor ebx, ebx
xor ebx, ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov ebx, dword [0x6c8278]
mov dword [esp], ebx
call fcn.00455c20
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0x58]
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x44], ebx
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
mov dword [esp + 4], 9
mov ebx, dword [esp + 0x50]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x44]
mov dword [esp + 0x18], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x24], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x28], ebx
call fcn.00443190
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
cmp ecx, 0xffffffff
jne 0x459d91
cmp eax, 0
je 0x459d95
mov dword [esp + 0x38], eax
mov dword [esp], 0x6b13b0
lea ebx, [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.0040b9b0
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x78], ebx
add esp, 0x4c
ret
mov dword [esp + 0x38], 0x20000027
mov dword [esp], 0x6b13b0
lea ebx, [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.0040b9b0
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x74], ebx
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x78], ebx
jmp 0x459d91
call fcn.00450db0
jmp fcn.00459ca0
Function at 0x460cb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x460eb7
sub esp, 0x74
xor ebx, ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov ebx, dword [esp + 0x78]
mov ebp, dword [ebx + 0xc]
cmp ebp, 0
je 0x460d79
mov ebx, dword [esp + 0x78]
cmp ebx, 0
je 0x460eb0
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 0x10]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [ebx + 8]
mov dword [esp + 4], ebp
mov dword [esp + 0x4c], eax
mov dword [esp], eax
mov dword [esp + 0x48], ecx
mov ebx, dword [ecx + 0x14]
call ebx
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x64], ecx
xor ecx, ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x5c], edx
mov eax, edx
mov ebp, dword [esp + 0x28]
cmp ecx, ebp
jge 0x460d79
mov dword [esp + 0x34], eax
mov ebp, dword [eax]
mov dword [esp + 0x2c], ecx
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.0047d8a0
mov eax, dword [esp + 0x34]
add eax, 4
mov ecx, dword [esp + 0x2c]
inc ecx
mov ebp, dword [esp + 0x28]
cmp ecx, ebp
jl 0x460d4b
mov eax, dword [esp + 0x78]
xor ebx, ebx
mov ebp, dword [eax]
cmp ebp, 0
je 0x460e9f
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov ebx, dword [esp + 0x7c]
mov dword [esp], ebx
mov dword [esp + 0x38], ecx
mov dword [esp + 4], ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xc], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0x18], ebx
call fcn.004610a0
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
cmp eax, 0
je 0x460e11
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ecx
add esp, 0x74
ret
mov ebx, dword [esp + 0x78]
mov ebp, dword [ebx + 0xc]
cmp ebp, 0
je 0x460e7c
mov ebx, dword [esp + 0x30]
mov dword [esp], ebx
call fcn.0047f3b0
mov esi, dword [esp + 4]
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
cmp eax, 0
jle 0x460e7c
mov ebx, dword [esp + 0x78]
cmp ebx, 0
je 0x460e9b
mov edi, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [ebx + 8]
mov dword [esp + 4], ebp
mov dword [esp + 0x50], esi
mov dword [esp + 8], esi
mov dword [esp + 0x54], eax
mov dword [esp + 0xc], eax
mov dword [esp + 0x58], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x4c], ecx
mov dword [esp], ecx
mov dword [esp + 0x48], edi
mov ebx, dword [edi + 0x18]
call ebx
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x90], ebx
xor ebx, ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
add esp, 0x74
ret
mov dword [ebx], eax
jmp 0x460e43
mov ecx, dword [0x6c8520]
mov eax, dword [0x6c8524]
jmp 0x460d8f
mov dword [ebx], eax
jmp 0x460cf6
call fcn.00450db0
jmp fcn.00460cb0
Function at 0x4b43f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4b4599
sub esp, 0x60
xor ebx, ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
call fcn.004a7a60
mov ebp, dword [esp]
mov edx, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + 0x68]
mov dword [esp], ebx
mov ebx, dword [esp + 0x6c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x70]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x50], ebp
mov dword [esp + 0x10], ebp
mov dword [esp + 0x54], edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x5c], eax
mov dword [esp + 0x1c], eax
call fcn.004a70f0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
call fcn.00444200
mov ebp, dword [esp + 0x28]
mov ebx, dword [esp + 0x2c]
mov ecx, dword [esp]
mov edx, dword [esp + 4]
add ecx, ebp
adc edx, ebx
mov dword [esp + 0x30], ecx
cmp edx, 0
mov dword [esp + 0x34], edx
jg 0x4b44c6
jl 0x4b44aa
cmp ecx, 0
ja 0x4b44c6
cmp ebx, 0
jl 0x4b44c6
jg 0x4b44b6
cmp ebp, 0
jbe 0x4b44c6
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x34], 0x7fffffff
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov ebp, dword [esp + 0x70]
mov dword [esp + 0x48], ebp
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], ecx
cmp ecx, 0
jne 0x4b4592
cmp edx, 0
jne 0x4b4592
cmp ebp, 0
jne 0x4b4592
mov eax, 1
cmp al, 0
je 0x4b451b
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
call fcn.004b3cd0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x38], eax
cmp eax, 0
je 0x4b454b
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
add esp, 0x60
ret
mov ebx, dword [esp + 0x64]
mov ebp, dword [ebx + 0xd0]
mov dword [esp], ebp
mov eax, dword [esp + 0x30]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x78]
mov dword [esp + 0xc], ebx
call fcn.00425560
mov ebx, dword [esp + 0x64]
mov dword [esp], ebx
call fcn.004b3d40
xor ebx, ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
add esp, 0x60
ret
xor eax, eax
jmp 0x4b4506
call fcn.00450db0
jmp fcn.004b43f0
Function at 0x4ba4e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4ba6dc
sub esp, 0x50
xor ebx, ebx
xor ebx, ebx
xor ebx, ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x23], 0
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x4c], ebx
xor eax, eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x44], edx
mov ecx, edx
mov ebp, dword [esp + 0x28]
cmp eax, ebp
jge 0x4ba5f8
mov ebx, ecx
mov dword [esp + 0x30], ecx
cmp ecx, 0
je 0x4ba6d5
mov ecx, dword [ecx]
mov ebp, dword [ebx + 4]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ecx
mov dword [esp], ecx
mov dword [esp + 0x40], ebp
mov dword [esp + 4], ebp
mov edx, dword [esp + 0x60]
mov ebx, dword [edx]
call ebx
movzx ebx, byte [esp + 8]
mov eax, ebx
mov ebx, dword [esp + 0x24]
cmp ebx, 0
je 0x4ba649
movzx ebp, byte [esp + 0x23]
xchg ebp, ebx
cmp al, bl
xchg ebp, ebx
je 0x4ba649
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
mov ebx, eax
inc ebx
cmp ebx, edx
ja 0x4ba60d
mov dword [esp + 0x74], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 8
add ebx, ebp
mov ebp, dword [esp + 0x3c]
mov dword [ebx], ebp
mov ebp, dword [esp + 0x40]
cmp byte [0x6d9e38], 0
jne 0x4ba5fc
mov dword [ebx + 4], ebp
mov ecx, dword [esp + 0x30]
add ecx, 8
mov eax, dword [esp + 0x2c]
inc eax
mov ebp, dword [esp + 0x28]
cmp eax, ebp
jl 0x4ba54a
add esp, 0x50
ret
lea esi, [ebx + 4]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f1d0
jmp 0x4ba5e0
mov dword [esp], 0x5cd560
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043c270
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, eax
inc ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], edx
mov dword [esp + 0x70], ecx
jmp 0x4ba5c1
mov byte [esp + 0x23], al
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, eax
inc ebx
cmp ebx, edx
ja 0x4ba69c
mov dword [esp + 0x68], ebx
mov ebx, ecx
mov ebp, eax
imul ebp, ebp, 8
add ebx, ebp
mov ebp, dword [esp + 0x3c]
mov dword [ebx], ebp
mov ebp, dword [esp + 0x40]
cmp byte [0x6d9e38], 0
jne 0x4ba688
mov dword [ebx + 4], ebp
jmp 0x4ba5e0
lea esi, [ebx + 4]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f1d0
jmp 0x4ba5e0
mov dword [esp], 0x5cd560
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.0043c270
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, eax
inc ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], edx
mov dword [esp + 0x64], ecx
jmp 0x4ba664
mov dword [ecx], eax
jmp 0x4ba559
call fcn.00450db0
jmp fcn.004ba4e0
Function at 0x4bca40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x4bcc0a
sub esp, 0x8c
xor ebx, ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov ecx, dword [esp + 0x94]
mov dword [esp], 0x5c3ac0
mov eax, ecx
cdq
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, ecx
cdq
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.0043c0d0
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x3c], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov ebx, dword [esp + 0x98]
mov dword [esp + 0x4c], ebx
xor eax, eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x44], edx
mov ecx, edx
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jge 0x4bcbc3
mov ebx, ecx
mov dword [esp + 0x2c], ecx
cmp ecx, 0
je 0x4bcc03
mov esi, dword [ecx]
mov ebp, dword [ecx + 4]
mov dword [esp + 0x68], ebp
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov edi, dword [ebx + 0x10]
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x64], esi
mov ebp, dword [esp + 0x68]
mov dword [esp + 0x6c], edx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], edi
mov dword [esp + 0x50], esi
mov dword [esp + 0x78], esi
mov dword [esp + 0x54], ebp
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x58], edx
mov dword [esp + 0x80], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x84], ecx
mov dword [esp + 0x60], edi
mov dword [esp + 0x88], edi
mov dword [esp], 0x5d0d80
lea ebx, [esp + 0x78]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0
call fcn.0040b8f0
mov edx, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x3c]
cmp ebx, ebp
jae 0x4bcbfc
mov ebp, dword [esp + 0x38]
shl ebx, 3
add ebp, ebx
mov dword [esp + 0x30], edx
mov dword [ebp], edx
mov dword [esp + 0x34], ecx
cmp byte [0x6d9e38], 0
jne 0x4bcbeb
mov dword [ebp + 4], ecx
mov ecx, dword [esp + 0x2c]
add ecx, 0x14
mov eax, dword [esp + 0x28]
inc eax
mov ebp, dword [esp + 0x24]
cmp eax, ebp
jl 0x4bcaed
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x9c], ebx
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0xa0], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0xa4], ebx
add esp, 0x8c
ret
lea esi, [ebp + 4]
mov dword [esp], esi
mov dword [esp + 4], ecx
call fcn.0040f1d0
jmp 0x4bcbab
call fcn.00428680
ud2
mov dword [ecx], eax
jmp 0x4bcafc
call fcn.00450db0
jmp fcn.004bca40
Function at 0x4c2e40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4c305b
sub esp, 0x70
xor ebx, ebx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov ebx, dword [esp + 0x74]
mov dword [esp], ebx
call fcn.004b3cd0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp + 0x64], edx
mov dword [esp + 0x60], ecx
cmp ecx, 0
je 0x4c2ea2
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], edx
nop
call fcn.00429830
add esp, 0x70
ret
mov ebx, dword [esp + 0x74]
mov dword [esp + 8], ebx
mov dword [esp], 4
mov eax, 0x619498
mov dword [esp + 4], eax
call fcn.00428960
cmp eax, 0
jne 0x4c3051
mov ebx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
add ebx, 0xf423f
adc edx, 0
mov dword [esp + 0x78], ebx
mov dword [esp], ebx
mov dword [esp + 0x7c], edx
mov dword [esp + 4], edx
mov dword [esp + 8], 0xf4240
mov dword [esp + 0xc], 0
call fcn.0044b3b0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, ecx
xor ebx, ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov ecx, 1
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x2c], 0
mov eax, 0xc
mov ebx, dword [esp + 0x74]
mov ebp, dword [ebx + 0x10]
mov dword [esp], ebp
mov dword [esp + 4], 0x98000004
lea ebx, [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
lea ebx, [esp + 0x2c]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.00459ca0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov ebx, 0x5f6875
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], 8
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x54], edx
xor ebx, ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x50], ecx
cmp ecx, 0
jne 0x4c2fda
xor ecx, ecx
mov edx, ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x84], ecx
nop
call fcn.00429830
add esp, 0x70
ret
mov dword [esp], 0x5d1680
call fcn.0040e800
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
mov ebp, dword [esp + 0x4c]
mov dword [ecx + 4], ebp
mov ebp, dword [esp + 0x48]
cmp byte [0x6d9e38], 0
jne 0x4c303f
mov dword [ecx], ebp
mov ebp, dword [esp + 0x50]
mov dword [ecx + 8], ebp
mov ebp, dword [esp + 0x54]
cmp byte [0x6d9e38], 0
jne 0x4c302a
mov dword [ecx + 0xc], ebp
mov edx, 0x6b0cb0
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], ecx
jmp 0x4c2fba
lea esi, [ecx + 0xc]
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f1d0
mov ecx, dword [esp + 0x3c]
jmp 0x4c301b
mov dword [esp], ecx
mov dword [esp + 4], ebp
call fcn.0040f1d0
mov ecx, dword [esp + 0x3c]
jmp 0x4c3004
nop
call fcn.00429830
add esp, 0x70
ret
call fcn.00450db0
jmp fcn.004c2e40
Function at 0x4c3630
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4c3743
sub esp, 0x54
xor ebx, ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x6c]
mov ebx, dword [esp + 0x58]
mov dword [esp], ebx
mov ebx, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x60]
mov dword [esp + 8], ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0xc], ebx
mov eax, 0x6b32c0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov eax, 0x6b32c0
mov dword [esp + 0x4c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 2
mov dword [esp + 0x24], 0
mov ebx, 0x5f5bf9
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], 4
call fcn.004bc1d0
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x48], edx
mov dword [esp + 0x44], eax
cmp eax, 0
je 0x4c36ef
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], edx
add esp, 0x54
ret
mov dword [esp + 0x3c], ecx
mov dword [esp], 0x5cc5e0
call fcn.0040e800
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x40], ecx
cmp ecx, 0
je 0x4c373f
cmp byte [0x6d9e38], 0
jne 0x4c372d
mov dword [ecx], eax
mov dword [esp + 0x70], ecx
xor ebx, ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
add esp, 0x54
ret
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040f1d0
mov ecx, dword [esp + 0x40]
jmp 0x4c371b
mov dword [ecx], eax
jmp 0x4c3710
call fcn.00450db0
jmp fcn.004c3630
Function at 0x5168f0
Capabilities:
Parse credit card information

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x516ae6
mov edx, dword [esp + 8]
movzx ecx, byte [esp + 4]
cmp cl, 0x41
jb 0x51691f
cmp cl, 0x5a
ja 0x51691f
mov byte [esp + 0xc], 0
ret
cmp cl, 0x61
jb 0x516929
cmp cl, 0x7a
jbe 0x516919
cmp cl, 0x30
jb 0x516933
cmp cl, 0x39
jbe 0x516919
cmp edx, 2
je 0x516a34
cmp edx, 3
je 0x516a34
cmp cl, 0x2f
ja 0x5169e7
cmp cl, 0x2b
ja 0x5169c2
cmp cl, 0x24
jne 0x5169b6
cmp edx, 4
jg 0x5169a0
cmp edx, 1
jne 0x516974
cmp cl, 0x3f
je 0x51696d
mov byte [esp + 0xc], 0
ret
mov byte [esp + 0xc], 1
jmp 0x51696c
cmp edx, 4
jne 0x51699a
cmp cl, 0x40
je 0x516993
cmp cl, 0x2f
je 0x516993
cmp cl, 0x3f
je 0x516993
cmp cl, 0x3a
je 0x516993
mov byte [esp + 0xc], 0
ret
mov byte [esp + 0xc], 1
jmp 0x516992
mov byte [esp + 0xc], 1
ret
cmp edx, 5
jne 0x5169ab
mov byte [esp + 0xc], 1
ret
cmp edx, 6
jne 0x51699a
mov byte [esp + 0xc], 0
ret
cmp cl, 0x26
je 0x516958
cmp cl, 0x2b
je 0x516958
jmp 0x51699a
cmp cl, 0x2d
ja 0x5169d7
cmp cl, 0x2c
je 0x516958
cmp cl, 0x2d
jne 0x51699a
mov byte [esp + 0xc], 0
ret
cmp cl, 0x2e
je 0x5169d1
cmp cl, 0x2f
je 0x516958
jmp 0x51699a
cmp cl, 0x3d
ja 0x516a09
cmp cl, 0x3a
je 0x516958
cmp cl, 0x3b
je 0x516958
cmp cl, 0x3d
je 0x516958
jmp 0x51699a
cmp cl, 0x40
ja 0x516a25
cmp cl, 0x3f
je 0x516958
cmp cl, 0x40
je 0x516958
jmp 0x51699a
cmp cl, 0x5f
je 0x5169d1
cmp cl, 0x7e
je 0x5169d1
jmp 0x51699a
cmp cl, 0x2a
ja 0x516a8a
cmp cl, 0x26
ja 0x516a67
cmp cl, 0x22
ja 0x516a58
cmp cl, 0x21
jne 0x516a4e
mov byte [esp + 0xc], 0
ret
cmp cl, 0x22
je 0x516a48
jmp 0x516945
cmp cl, 0x24
je 0x516a48
cmp cl, 0x26
je 0x516a48
jmp 0x516945
cmp cl, 0x28
ja 0x516a7b
cmp cl, 0x27
je 0x516a48
cmp cl, 0x28
je 0x516a48
jmp 0x516945
cmp cl, 0x29
je 0x516a48
cmp cl, 0x2a
je 0x516a48
jmp 0x516945
cmp cl, 0x3b
ja 0x516ab2
cmp cl, 0x2c
ja 0x516aa3
cmp cl, 0x2b
je 0x516a48
cmp cl, 0x2c
je 0x516a48
jmp 0x516945
cmp cl, 0x3a
je 0x516a48
cmp cl, 0x3b
je 0x516a48
jmp 0x516945
cmp cl, 0x3d
ja 0x516ac6
cmp cl, 0x3c
je 0x516a48
cmp cl, 0x3d
je 0x516a48
jmp 0x516945
cmp cl, 0x3e
je 0x516a48
cmp cl, 0x5b
je 0x516a48
cmp cl, 0x5d
je 0x516a48
jmp 0x516945
call fcn.00450db0
jmp fcn.005168f0
Function at 0x5191e0
Capabilities:
Parse credit card information

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x519329
sub esp, 0x10
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
xor ecx, ecx
cmp ecx, edx
jge 0x519234
cmp ecx, edx
jae 0x519322
mov ebp, esi
add ebp, ecx
movzx ebx, byte [ebp]
cmp bl, 0x2a
ja 0x5192b7
cmp bl, 0x26
ja 0x519296
cmp bl, 0x24
ja 0x51928a
cmp bl, 0x21
jne 0x51923d
inc ecx
cmp ecx, edx
jl 0x519207
mov byte [esp + 0x1c], 1
add esp, 0x10
ret
cmp bl, 0x24
je 0x51922f
mov dword [esp + 0xc], ecx
cmp ecx, edx
jae 0x519283
mov ebp, esi
add ebp, ecx
movzx ebx, byte [ebp]
mov byte [esp], bl
mov dword [esp + 4], 1
call fcn.005168f0
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0xc]
movzx ebx, byte [esp + 8]
cmp bl, 0
je 0x519281
mov byte [esp + 0x1c], 0
add esp, 0x10
ret
jmp 0x51922f
call fcn.00428680
ud2
cmp bl, 0x25
je 0x51922f
cmp bl, 0x26
je 0x51922f
jmp 0x519242
cmp bl, 0x28
ja 0x5192a7
cmp bl, 0x27
je 0x51922f
cmp bl, 0x28
je 0x51922f
jmp 0x519242
cmp bl, 0x29
je 0x51922f
cmp bl, 0x2a
je 0x51922f
jmp 0x519242
cmp bl, 0x3b
ja 0x5192ef
cmp bl, 0x2c
ja 0x5192d8
cmp bl, 0x2b
je 0x51922f
cmp bl, 0x2c
je 0x51922f
jmp 0x519242
cmp bl, 0x3a
je 0x51922f
cmp bl, 0x3b
je 0x51922f
jmp 0x519242
cmp bl, 0x40
ja 0x51930b
cmp bl, 0x3d
je 0x51922f
cmp bl, 0x40
je 0x51922f
jmp 0x519242
cmp bl, 0x5b
je 0x51922f
cmp bl, 0x5d
je 0x51922f
jmp 0x519242
call fcn.00428680
ud2
call fcn.00450db0
jmp fcn.005191e0