joyce8/EMBER2024-capa huggingface dataset:
Function at 0x92ce04
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], ecx
mov edi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x92d01c
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebx + 0x10], 0
je 0x92cfe6
lea eax, [ebp - 4]
push eax
mov eax, 0x92d038
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 0x11
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0x11
mov eax, dword [ebx + 8]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0x11
lea edx, [ebp - 0x20]
mov ecx, 2
mov eax, 0x92d06c
call fcn.00428468
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + 0x10]
call fcn.0063ae28
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x92cfdf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.0063c1cc
test eax, eax
jle 0x92cf25
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0063c6a4
mov dword [ebx + 4], eax
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0063c538
mov esi, eax
test esi, esi
je 0x92cfc9
mov ecx, edi
mov edx, esi
mov eax, ebx
call fcn.0092d2b0
lea eax, [ebp - 4]
push eax
mov eax, 0x92d038
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
mov eax, dword [ebx + 4]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x34]
mov ecx, 1
mov eax, 0x92d11c
call fcn.00428468
lea eax, [ebp - 0x38]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0x38]
mov eax, dword [ebx + 0x10]
mov ecx, esi
call fcn.0063aa5c
jmp 0x92cfc9
lea eax, [ebp - 4]
push eax
mov eax, 0x92d038
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 0x11
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0x11
mov eax, dword [ebx + 8]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0x11
lea edx, [ebp - 0x20]
mov ecx, 2
mov eax, 0x92d188
call fcn.00428468
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 4]
mov ecx, 0xfde9
call fcn.0040afa0
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebx + 0x10]
call fcn.0063a328
mov eax, dword [ebx + 0x10]
call fcn.00639910
mov esi, eax
mov dword [ebx + 4], esi
lea eax, [ebp - 4]
push eax
mov eax, 0x92d038
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0x11
mov dword [ebp - 0x2c], esi
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x34]
mov ecx, 1
mov eax, 0x92d11c
call fcn.00428468
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0x40]
mov eax, dword [ebx + 0x10]
mov ecx, edi
call fcn.0063aa5c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x92cfe6
mov eax, dword [ebp - 8]
call fcn.00408650
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x92d023
lea eax, [ebp - 0x40]
call fcn.0040a334
lea eax, [ebp - 0x3c]
call fcn.0040a334
lea eax, [ebp - 0x38]
call fcn.0040a334
lea eax, [ebp - 0x24]
call fcn.0040a334
lea eax, [ebp - 4]
call fcn.0040a310
ret
Function at 0x935420
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x935428
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x14], edx
mov edi, eax
xor eax, eax
push ebp
push 0x9355e8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x2bc]
call fcn.00565330
mov esi, eax
lea eax, [ebp - 4]
mov edx, dword [0x990f6c]
mov edx, dword [edx + 0xc]
call fcn.0040a738
mov eax, dword [edi + 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 8]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 4]
call fcn.0042bffc
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.00564bf8
lea eax, [ebp - 0xc]
mov edx, dword [0x990f6c]
mov edx, dword [edx + 0x1c]
call fcn.0040a738
mov eax, dword [edi + 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [edi + 0x3c]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x10]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 0xc]
call fcn.0042bffc
mov edx, dword [ebp - 0x10]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov edx, dword [edi + 0x44]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 0x2c]
mov eax, dword [edi + 0x10]
call fcn.00425f80
cmp dword [ebp - 0x2c], 0
je 0x93551f
lea edx, [ebp - 0x34]
mov eax, dword [edi + 0x10]
call fcn.00425f80
push dword [ebp - 0x34]
push 0x935604
push dword [edi + 0xc]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.0040b6cc
mov edx, dword [ebp - 0x30]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
jmp 0x93552a
mov edx, dword [edi + 0xc]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 0x38]
mov eax, dword [edi + 0x4c]
call fcn.00426abc
mov edx, dword [ebp - 0x38]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 0x3c]
mov eax, dword [edi + 0x24]
call fcn.00426abc
mov edx, dword [ebp - 0x3c]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
cmp byte [edi + 0x50], 0
je 0x93558b
lea ecx, [ebp - 0x40]
mov eax, dword [0x990a7c]
mov eax, dword [eax]
mov edx, 0x935614
call fcn.0063ebf4
mov edx, dword [ebp - 0x40]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov ecx, 1
xor edx, edx
mov eax, esi
call fcn.00564e28
jmp 0x9355b5
lea ecx, [ebp - 0x44]
mov eax, dword [0x990a7c]
mov eax, dword [eax]
mov edx, 0x935638
call fcn.0063ebf4
mov edx, dword [ebp - 0x44]
mov eax, dword [esi + 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.00564e28
mov edx, edi
mov eax, esi
call fcn.00564cb4
mov ebx, esi
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x9355ef
lea eax, [ebp - 0x44]
mov edx, 7
call fcn.0040a370
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040a370
ret
Function at 0x93567c
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x935684
push ecx
push ebx
push esi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x935861
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x24]
mov edx, dword [ebx + 0xc]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x24]
mov edx, 0x93587c
mov eax, esi
call fcn.007fb430
lea eax, [ebp - 0x28]
mov edx, dword [ebx + 0x10]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x28]
mov edx, 0x935894
mov eax, esi
call fcn.007fb430
lea eax, [ebp - 0x2c]
mov edx, dword [ebx + 0x44]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x2c]
mov edx, 0x9358ac
mov eax, esi
call fcn.007fb430
lea edx, [ebp - 0x34]
mov eax, dword [ebx + 0x24]
call fcn.00426abc
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x30]
mov edx, 0x9358c8
mov eax, esi
call fcn.007fb430
lea edx, [ebp - 0x3c]
mov eax, dword [ebx + 0x4c]
call fcn.00426abc
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0x38]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x38]
mov edx, 0x9358e4
mov eax, esi
call fcn.007fb430
lea eax, [ebp - 4]
mov edx, 0x935904
call fcn.0040a738
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push dword [ebp - 0x18]
lea ecx, [ebp - 8]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 4]
call fcn.0042bffc
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea edx, [ebp - 0xc]
mov eax, dword [0x990f6c]
call fcn.0042bfcc
push dword [ebp - 8]
push 0x935928
push dword [ebp - 0xc]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.0040b6cc
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x40]
mov edx, 0x935938
mov eax, esi
call fcn.007fb430
lea edx, [ebp - 0x4c]
mov eax, dword [ebx + 0x54]
call fcn.00426abc
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
mov ecx, 0xfde9
call fcn.0040afa0
mov ecx, dword [ebp - 0x48]
mov edx, 0x935950
mov eax, esi
call fcn.007fb430
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x935868
lea eax, [ebp - 0x4c]
call fcn.0040a310
lea eax, [ebp - 0x48]
call fcn.0040a334
lea eax, [ebp - 0x44]
call fcn.0040a310
lea eax, [ebp - 0x40]
call fcn.0040a334
lea eax, [ebp - 0x3c]
call fcn.0040a310
lea eax, [ebp - 0x38]
call fcn.0040a334
lea eax, [ebp - 0x34]
call fcn.0040a310
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.0040a3a0
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.0040a370
ret
Function at 0x93595c
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
xor edx, edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 4], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x935ab6
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x19], 0
cmp dword [ebx + 0x74], 0
je 0x935a93
lea eax, [ebp - 0xc]
mov edx, 0x935ad4
call fcn.0040a738
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x10]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 0xc]
call fcn.0042bffc
lea eax, [ebp - 0x14]
mov edx, 0x935af8
call fcn.0040a738
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x18]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 0x14]
call fcn.0042bffc
push dword [ebp - 0x10]
push 0x935b18
push dword [ebp - 0x18]
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040b6cc
lea eax, [ebp - 4]
push eax
mov eax, 0x935b28
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0x11
mov eax, dword [ebp - 8]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0x11
lea edx, [ebp - 0x40]
mov ecx, 1
mov eax, 0x935b50
call fcn.00428468
xor eax, eax
push ebp
push 0x935a8c
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0x44]
mov eax, dword [ebx + 0x74]
call fcn.0063ae28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
call fcn.0063c1cc
test eax, eax
setg byte [ebp - 0x19]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x935a93
mov eax, dword [ebp - 0x20]
call fcn.00408650
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x935abd
lea eax, [ebp - 0x44]
call fcn.0040a334
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.0040a370
ret
Function at 0x935bac
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x935d05
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 4], eax
cmp byte [ebx + 0x6c], 0
je 0x935ce7
mov esi, dword [ebx + 0x74]
test esi, esi
je 0x935ce7
xor edx, edx
push ebp
push 0x935cae
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
push ebp
push 0x935c9d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
push eax
mov eax, 0x935d24
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 0x11
mov eax, dword [ebx + 4]
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x14], 0
lea edx, [ebp - 0x20]
mov ecx, 1
mov eax, 0x935d4c
call fcn.00428468
mov edx, dword [ebp - 0x10]
lea eax, [ebp - 0xc]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.0063ae28
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
call fcn.0063c1cc
test eax, eax
jle 0x935c87
mov dl, 1
mov eax, dword [0x498924]
call fcn.00408620
mov dword [ebp - 4], eax
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0063c538
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.004bca7c
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.004b7e0c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x935ca4
mov eax, dword [ebp - 8]
call fcn.00408650
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x935d0c
lea eax, [ebp - 0x10]
call fcn.0040a310
lea eax, [ebp - 0xc]
call fcn.0040a334
ret
Function at 0x9372a8
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x9373cc
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x14]
mov eax, dword [ebx + 0x24]
call fcn.00426abc
lea edx, [ebp - 0x10]
mov eax, dword [ebx + 0x4c]
call fcn.00426abc
lea eax, [ebp - 4]
mov edx, 0x9373e8
call fcn.0040a738
mov eax, dword [ebx + 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
lea ecx, [ebp - 8]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 4]
call fcn.0042bffc
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea edx, [ebp - 0xc]
mov eax, dword [0x990f6c]
call fcn.0042bfcc
push esi
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x64], 0x11
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x60], eax
mov byte [ebp - 0x5c], 0x11
mov eax, dword [ebx + 0x44]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x54], 0x11
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0x11
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0x11
mov eax, dword [ebp - 8]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0x11
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0x11
lea edx, [ebp - 0x6c]
mov eax, dword [ebx + 0x54]
call fcn.00426abc
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0x11
lea edx, [ebp - 0x68]
mov ecx, 7
mov eax, 0x93740c
call fcn.00428468
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x9373d3
lea eax, [ebp - 0x6c]
call fcn.0040a310
lea eax, [ebp - 0x14]
mov edx, 5
call fcn.0040a370
ret
Function at 0x937944
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], ecx
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x937b48
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 8]
mov eax, ebx
call fcn.0062fd28
mov edx, dword [ebp - 8]
lea eax, [esi + 0xc]
call fcn.0040a6f0
lea edx, [ebp - 0xc]
mov eax, ebx
call fcn.0062fd28
mov edx, dword [ebp - 0xc]
lea eax, [esi + 0x10]
call fcn.0040a6f0
lea edx, [ebp - 0x10]
mov eax, ebx
call fcn.0062fd28
mov edx, dword [ebp - 0x10]
lea eax, [esi + 0x44]
call fcn.0040a6f0
mov eax, ebx
call fcn.0062f7a4
fstp qword [esi + 0x30]
wait
mov eax, ebx
call fcn.0062f7a4
fstp qword [esi + 0x38]
wait
mov eax, ebx
call fcn.0062f670
mov dword [esi + 0x54], eax
mov eax, ebx
call fcn.0062f670
mov dword [esi + 0x24], eax
mov eax, ebx
call fcn.0062f670
mov dword [esi + 0x4c], eax
mov eax, ebx
call fcn.0062f670
mov edi, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, ebx
call fcn.004b7dec
push edx
push eax
mov eax, edi
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
add eax, 4
adc edx, 0
cmp edx, dword [esp + 4]
jne 0x937a1f
cmp eax, dword [esp]
pop edx
pop eax
jb 0x937a49
jmp 0x937a23
pop edx
pop eax
jl 0x937a49
mov eax, ebx
call fcn.004b7dec
sub eax, 4
sbb edx, 0
push edx
push eax
mov eax, ebx
call fcn.004b7e0c
mov eax, ebx
call fcn.0062f5d0
mov byte [esi + 0x50], al
mov byte [esi + 0x48], 1
jmp 0x937ac7
mov eax, ebx
call fcn.0062f670
mov edi, eax
mov eax, ebx
call fcn.004b7dec
sub eax, 8
sbb edx, 0
push edx
push eax
mov eax, ebx
call fcn.004b7e0c
cmp edi, 0x20
je 0x937a7d
mov eax, ebx
call fcn.0062f5d0
mov byte [esi + 0x50], al
mov byte [esi + 0x48], 1
jmp 0x937ac7
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.0062fd28
mov edx, dword [ebp - 0x14]
lea eax, [esi + 0x40]
call fcn.0040a6f0
lea edx, [ebp - 0x28]
mov eax, ebx
call fcn.0062fd28
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x24]
call fcn.006421e8
push esi
lea edi, [esi + 0x14]
lea esi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
mov eax, ebx
call fcn.0062f5d0
mov byte [esi + 0x50], al
mov eax, ebx
call fcn.0062f5d0
mov byte [esi + 0x28], al
mov eax, ebx
call fcn.0062f670
dec eax
test eax, eax
jl 0x937afd
inc eax
mov dword [ebp - 4], eax
mov dl, 1
mov eax, dword [0x933d60]
call fcn.00408620
mov edi, eax
mov eax, dword [esi + 0x58]
mov edx, edi
call fcn.004b34b8
mov edx, ebx
mov eax, edi
call fcn.009389a0
dec dword [ebp - 4]
jne 0x937ad7
mov eax, ebx
call fcn.0062f5d0
mov byte [esi + 0x6c], al
cmp byte [esi + 0x6c], 0
je 0x937b20
mov eax, ebx
call fcn.004b7dec
mov dword [esi + 0x70], eax
mov eax, ebx
call fcn.0062f898
jmp 0x937b25
xor eax, eax
mov dword [esi + 0x70], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x937b4f
lea eax, [ebp - 0x28]
call fcn.0040a310
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.0040a370
ret
Function at 0x937b58
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push ebx
push esi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x937bf0
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, esi
call fcn.0062f7a4
fstp qword [ebx + 0x30]
wait
mov eax, esi
call fcn.0062f7a4
fstp qword [ebx + 0x38]
wait
lea edx, [ebp - 4]
mov eax, esi
call fcn.0062fd28
mov edx, dword [ebp - 4]
lea eax, [ebx + 0x44]
call fcn.0040a6f0
lea edx, [ebp - 8]
mov eax, esi
call fcn.0062fd28
mov edx, dword [ebp - 8]
lea eax, [ebx + 0xc]
call fcn.0040a6f0
mov eax, esi
call fcn.0062f5d0
mov byte [ebx + 0x50], al
mov eax, esi
call fcn.0062f670
mov dword [ebx + 0x24], eax
mov eax, esi
call fcn.0062f670
mov dword [ebx + 0x4c], eax
mov byte [ebx + 0x6c], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x937bf7
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a370
ret
Function at 0x93a688
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov esi, edx
mov edi, eax
xor eax, eax
push ebp
push 0x93a88d
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [edi + 0x2ec], esi
lea eax, [edi + 0x2d0]
mov edx, dword [esi + 0xc]
call fcn.0040a6f0
lea eax, [edi + 0x2cc]
mov edx, dword [esi + 0x10]
call fcn.0040a6f0
lea eax, [edi + 0x2e4]
mov edx, dword [esi + 0x44]
call fcn.0040a6f0
lea eax, [ebp - 4]
mov edx, dword [0x990f6c]
mov edx, dword [edx + 0xc]
call fcn.0040a738
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x34]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea ecx, [ebp - 8]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 4]
call fcn.0042bffc
lea eax, [edi + 0x2d4]
mov edx, dword [ebp - 8]
call fcn.0040a6f0
lea eax, [ebp - 0xc]
mov edx, dword [0x990f6c]
mov edx, dword [edx + 0x1c]
call fcn.0040a738
mov eax, dword [esi + 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x3c]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x10]
mov edx, dword [0x990f6c]
mov eax, dword [ebp - 0xc]
call fcn.0042bffc
lea eax, [edi + 0x2d8]
mov edx, dword [ebp - 0x10]
call fcn.0040a6f0
mov eax, dword [esi + 0x24]
mov dword [edi + 0x2dc], eax
mov eax, dword [esi + 0x4c]
mov dword [edi + 0x2e0], eax
lea ecx, [ebp - 0x34]
mov dl, 1
mov eax, dword [esi + 0x54]
call fcn.007e5670
mov edx, dword [ebp - 0x34]
lea eax, [edi + 0x2e8]
call fcn.0040a6f0
mov eax, dword [edi + 0x2b4]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, esi
call fcn.009372a0
dec eax
test eax, eax
jl 0x93a865
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
mov eax, esi
call fcn.0093727c
mov ebx, eax
cmp dword [ebx + 8], 0
jle 0x93a859
mov dl, 1
mov eax, dword [0x938a2c]
call fcn.00408620
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 0x2b4]
mov edx, dword [ebp - 0x14]
call fcn.004b34b8
mov eax, dword [ebp - 0x14]
add eax, 4
mov edx, dword [ebx + 4]
call fcn.0040a6f0
lea edx, [ebp - 0x38]
mov eax, dword [ebx + 8]
call fcn.00426abc
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
add eax, 8
call fcn.0040a6f0
cmp dword [ebx + 8], 0
jle 0x93a84e
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x40], 0
lea edx, [ebp - 0x44]
xor ecx, ecx
mov eax, 0x93a8a8
call fcn.00428468
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
add eax, 0xc
call fcn.0040a6f0
jmp 0x93a859
mov eax, dword [ebp - 0x14]
add eax, 0xc
call fcn.0040a310
inc dword [ebp - 0x18]
dec dword [ebp - 0x1c]
jne 0x93a7c1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x93a894
lea eax, [ebp - 0x3c]
mov edx, 3
call fcn.0040a370
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.0040a370
ret
Function at 0x93d1d0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
xor edx, edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x93d2c0
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
cmp dword [ebx + 0x34], 0
je 0x93d2a2
lea eax, [ebp - 4]
push eax
mov eax, 0x93d2dc
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0x18], 0x11
mov eax, dword [ebx + 4]
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x10], 0
lea edx, [ebp - 0x1c]
mov ecx, 1
mov eax, 0x93d304
call fcn.00428468
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 4]
mov ecx, 0
call fcn.0040afa0
mov edx, dword [ebp - 0x20]
mov eax, dword [ebx + 0x34]
call fcn.0063ae28
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x93d29b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
call fcn.0063c1cc
test eax, eax
jle 0x93d285
mov dl, 1
mov eax, dword [0x498924]
call fcn.00408620
mov dword [ebp - 8], eax
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0063c538
mov edx, eax
mov eax, dword [ebp - 8]
call fcn.004bca7c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x93d2a2
mov eax, dword [ebp - 0xc]
call fcn.00408650
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x93d2c7
lea eax, [ebp - 0x20]
call fcn.0040a334
lea eax, [ebp - 4]
call fcn.0040a310
ret