Function at 0x4338d0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x433d88
sub esp, 0x5c
mov dword [esp + 0x24], 0
mov eax, dword [sym.imp.kernel32.dll_DuplicateHandle]
lea ecx, [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0xfffffffe
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 2
call fcn.00434220
mov eax, dword [esp + 0x20]
test eax, eax
je 0x433d2c
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x54], eax
test byte [eax], al
lea ecx, [eax + 0x2fc]
mov dword [esp + 0x58], ecx
nop
mov dword [esp], ecx
call fcn.0040a2c0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x54]
mov dword [ecx + 0x300], eax
mov eax, dword [sym.imp.kernel32.dll_GetCurrentThreadId]
mov edx, dword [0x93ee7c]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov dword [edx + 0x1b0], 0
mov dword [edx + 0x1b4], 0
mov dword [esp], eax
call fcn.00433f50
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x54]
mov dword [ecx + 0x28], eax
mov dword [ecx + 0x2c], 0
mov eax, dword [ecx + 0x30c]
test eax, eax
jne 0x433a11
movzx eax, byte [0x93ed33]
test al, al
je 0x433a11
mov eax, dword [sym.imp.kernel32.dll_CreateWaitableTimerExW]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 0x100003
call fcn.00434130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x54]
mov dword [ecx + 0x30c], eax
test eax, eax
je 0x433cd1
mov eax, dword [ecx + 0x314]
test eax, eax
jne 0x433aa8
movzx eax, byte [0x93ed4a]
test al, al
je 0x433aa8
mov eax, dword [sym.imp.kernel32.dll_CreateWaitableTimerExW]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 0x100003
call fcn.00434130
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x54]
mov dword [ecx + 0x310], eax
test eax, eax
je 0x433c76
mov eax, dword [0x91eb8c]
lea edx, [ecx + 0x314]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0x10000000
mov dword [esp + 0xc], 0
call fcn.004340e0
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 0x314]
test eax, eax
je 0x433c1f
nop
nop
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.0040a4e0
lea edi, [esp + 0x28]
xor eax, eax
call fcn.00471ac9
mov eax, dword [sym.imp.kernel32.dll_VirtualQuery]
lea ecx, [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x1c
call fcn.004340e0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x433bc4
mov eax, dword [esp + 0x2c]
lea ecx, [eax + 0x4000]
mov dword [esp + 0x48], ecx
mov edx, dword [0x93ee7c]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov ebx, dword [edx + 4]
mov dword [esp + 0x50], ebx
cmp ebx, ecx
jb 0x433b3a
sub ebx, eax
lea eax, [ebx - 0x4000]
cmp eax, 0x4000000
ja 0x433b3a
mov dword [edx], ecx
mov eax, dword [edx]
add eax, 0xba0
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
call fcn.00471680
add esp, 0x5c
ret
call fcn.00437f30
lea eax, [0x72083b]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00438790
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b1fc]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438790
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b22d]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438790
call fcn.00437f90
lea eax, str.bad_g0_stackself_preempt__recovered_bad_recoverybad_g_statusentersyscallwirep:_p__m__p__statusreleasep:_m_sysmonwait_preemptoffcas64_failed_m__gsignal_byte_limit_nruntime:_spabi_mismatchwrong_timersCoInitializeoleaut32.dllVariantClearSysStringLenRoInitializeunknown_typeCfgMgr32.dllsetupapi.dllwintrust.dllwtsapi32.dllOpenServiceWReportEventWRevertToSelfCreateEventWCreateMutexWGetCommStateGetProcessIdLoadResourceLockResourceReleaseMutexResumeThreadSetCommBreakSetCommStateSetErrorModeSetStdHandleThread32NextUnlockFileExVirtualAllocVirtualQueryNtCreateFileCoCreateGuidtlsunsafeekmclose_notifyremote_errorc_hs_traffics_hs_trafficc_ap_traffics_ap_trafficMime_VersionX_ImforwardsX_Powered_Bymultipathtcp127.0.0.1:53no_such_hostunknown_portCIDR_addressinvalid_portgetaddrinfowtransmitfileContent_Typerandautoseed__sensitive_GetConsoleCPnot_pollablegotypesaliasinvalid_baseECDSA_SHA256ECDSA_SHA384ECDSA_SHA512RCodeSuccessRCodeRefusedcaller_errorSERIALNUMBERavx5124fmapsavx512bitalgHwProfileGuidHwProfileGUIDConnectServernot_a_Float32not_a_Float64RegDeleteKeyWRegEnumValueWSTREAM_CLOSEDCONNECT_ERRORWINDOW_UPDATEAuthorizationCache_ControlLast_ModifiedAccept_RangesIf_None_Match_FrameHeader_invalid_base_accept_rangesauthorizationcache_controlcontent_rangeif_none_matchlast_modifiedFQDN_too_longsocks_connectReset_ContentLoop_Detectedfield_name__qFindFirstFilelevel_3_resetsrmount_errortimer_expiredexchange_fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbyname3814697265625wakeableSleepprofMemActiveprofMemFuturetraceStackTabexecRInternaltestRInternalGC_sweep_waitout_of_memoryunimplemented_is_nil__not_value_method_bad_map_state_span.base__bad_flushGen___not_pointer___sweepgen__MB_globals___work.nproc__work.nwait__nStackRoots_flushedWork_double_unlock_s.spanclass_MB__workersmin_too_large_byte_block__runtime:_valruntime:_seqfatal_error:__idlethreads_syscalltickload64_failedxadd64_failedxchg64_failednil_stackbase_n_tschedpc:__gp__status_pluginpath_:_unknown_pc__called_from_runtime:_pidRtlMoveMemoryCoTaskMemFreeStringFromIIDIIDFromStringSysFreeStringSafeArrayCopySafeArrayLockparsing_time__out_of_rangeDeleteServiceStartServiceWFindResourceWGetDriveTypeWModule32NextWThread32FirstWaitCommEventRtlGetVersionRtlInitStringEnumProcessesShellExecuteWExitWindowsExGetClassNameWtimeEndPeriodWTSFreeMemorytlsmaxrsasizeaccess_denieduser_canceledPKCS1WithSHA1ECDSAWithSHA1key_expansionmaster_secretCLIENT_RANDOM_in_host_namelame_referraldalTLDpSugct_gzip__deflateGetTempPath2Wgocacheverifyinstallgoroothtml_templateinvalid_ASN.1SHA256_RSAPSSSHA384_RSAPSSSHA512_RSAPSSemail_addressshared_secretname_too_longempty_integerunsupported:_RegSetValueExWunexpected_EOFContent_LengthMAX_FRAME_SIZEPROTOCOL_ERRORINTERNAL_ERRORREFUSED_STREAMERR_UNKNOWN__daccept_charsetcontent_lengthread_frame_eofinternal_errorunknown_error_unknown_code:_Not_AcceptableComputerNameExfile_too_largeis_a_directorylevel_2_haltedlevel_3_haltedtoo_many_linksno_such_deviceprotocol_errortext_file_busytoo_many_usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname_procedure_in_winapi_error_invalid_syntax1907348632812595367431640625unsafe.Pointer_on_zero_Valuereflect.Value.unknown_methoduserArenaStateGC__dedicated_read_mem_statsasynctimerchangcstoptheworldprofstackdepthtraceallocfreeGC_assist_waitfinalizer_waitsync.Cond.Waits.allocCount_nil_elem_type__to_finalizer_GC_worker_initruntime:_fullruntime:_wantMB__allocated_RtlGetVersion
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0046ad70
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x4c], eax
call fcn.00437f30
lea eax, [0x729cd1]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00438790
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x728f4c]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0046ad70
mov eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
call fcn.00437f30
lea eax, [0x72f459]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00438790
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72959f]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046ad70
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x4c], eax
call fcn.00437f30
lea eax, [0x72d52e]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00438790
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72e3db]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.0046ad70
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x4c], eax
call fcn.00437f30
lea eax, [0x72d52e]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00438790
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72e3db]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.0046ad70
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x4c], eax
call fcn.00437f30
lea eax, [0x72d501]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00438790
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72a3a6]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.004338d0