joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140017920
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140017ac6
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
mov qword [rsp + 0x58], rdi
movzx edx, byte [rdi]
test dl, sil
je 0x1400179da
nop
movabs rdx, 0x800000000000
add rdx, rax
mov rbx, rdx
shr rdx, 0x2a
nop
cmp rdx, 0x40
jae 0x1400179cd
lea rsi, [0x1404468d0]
mov rdx, qword [rsi + rdx*8]
test byte [rdx], al
shr rbx, 0x16
and ebx, 0xfffff
mov rdx, qword [rdx + rbx*8]
test byte [rdx], al
mov rdx, qword [rdx + 0x114c0]
test byte [rdx], al
mov rcx, rax
shr rax, 0x19
movzx ebx, ax
add rdx, rbx
mov bl, byte [rdx]
shr rcx, 0x16
and ecx, 7
mov esi, 1
shl esi, cl
test sil, bl
je 0x1400179bd
mov eax, 1
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
lock or byte [rdx], sil
xor eax, eax
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov rax, rdx
mov ecx, 0x40
call fcn.140063a20
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x40], rax
call fcn.140038400
call fcn.140038400
lea rax, [0x1402899da]
mov ebx, 0x39
nop
call fcn.140038d00
mov rax, qword [rsp + 0x40]
call fcn.140038b60
call fcn.140038660
call fcn.140038480
call fcn.140038400
lea rax, [0x140282287]
mov ebx, 0x18
call fcn.140038d00
mov rax, qword [rsp + 0x28]
call fcn.140038b60
lea rax, [0x14027b7f9]
mov ebx, 1
call fcn.140038d00
mov rax, qword [rsp + 0x20]
call fcn.140038b60
lea rax, [0x14027b81d]
mov ebx, 2
call fcn.140038d00
call fcn.140038480
lea rax, [0x14027bbb2]
mov ebx, 4
mov rcx, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x20]
call fcn.140020020
lea rax, [0x14027ba29]
mov ebx, 3
mov rcx, qword [rsp + 0x40]
mov rdi, 0xffffffffffffffff
nop dword [rax]
call fcn.140020020
mov rax, qword [r14 + 0x30]
mov byte [rax + 0xf9], 2
lea rax, [0x140284d43]
mov ebx, 0x1f
nop dword [rax]
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov byte [rsp + 0x28], sil
mov qword [rsp + 0x30], r8
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
movzx esi, byte [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.140017920
Function at 0x140017da0
Capabilities:
Access peb ldr_data
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140017f46
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rbx
mov rcx, qword [0x14023dc40]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.140033ec0
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
jne 0x140017e0b
mov rax, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
jmp 0x140017e20
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
sub rcx, rbx
add rax, rbx
mov rbx, rcx
nop
test rbx, rbx
jbe 0x140017e45
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rax
mov rcx, rbx
jmp 0x140017e59
cmp rbx, 0x1000
jae 0x140017e15
nop dword [rax]
jmp 0x140017ec9
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
nop
cmp rbx, 0x1000
jae 0x140017e6d
xor edx, edx
jmp 0x140017ec0
mov rcx, qword [0x14023dc40]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x4000
call fcn.140033ec0
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
sete al
mov rcx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov edx, eax
mov rax, qword [rsp + 0x40]
nop dword [rax]
test dl, dl
jne 0x140017e4f
jmp 0x140017e34
call fcn.140064f20
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x30], rax
call fcn.140038400
lea rax, [0x14028226f]
mov ebx, 0x18
call fcn.140038d00
mov rax, qword [rsp + 0x38]
call fcn.140038a00
lea rax, [0x14028235f]
mov ebx, 0x19
call fcn.140038d00
mov rax, qword [rsp + 0x30]
nop
call fcn.140038a00
call fcn.140038660
call fcn.140038480
lea rax, [0x140285a24]
mov ebx, 0x21
nop dword [rax + rax]
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.140017da0
Function at 0x140017f80
Capabilities:
Access peb ldr_data
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400181aa
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rbx
mov rcx, qword [0x14023dc38]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
call fcn.140033f40
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, rax
cmp qword [rsp + 0x28], rax
je 0x140017ff9
mov rbx, qword [rsp + 0x68]
mov rax, rbx
jmp 0x14001800c
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
sub rdx, rbx
add rcx, rbx
mov rbx, rdx
test rbx, rbx
jbe 0x140018030
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov rdx, rbx
nop
jmp 0x140018044
cmp rbx, 0x1000
jae 0x140018003
jmp 0x1400180c5
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
shr rbx, 1
and rbx, 0xfffffffffffff000
mov qword [rsp + 0x38], rbx
cmp rbx, 0x1000
jae 0x140018056
xor esi, esi
jmp 0x1400180b6
mov rax, qword [0x14023dc38]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], 0x1000
mov qword [rsp + 0x20], 4
nop dword [rax]
call fcn.140033f40
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x28], 0
sete al
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x38]
mov esi, eax
mov rax, qword [rsp + 0x68]
test sil, sil
jne 0x14001803a
nop
jmp 0x140018022
call fcn.140064f20
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov dword [rsp + 0x34], eax
cmp eax, 8
jne 0x140018145
call fcn.140038400
lea rax, [0x140282a4e]
mov ebx, 0x19
call fcn.140038d00
mov rax, qword [rsp + 0x68]
call fcn.140038a00
lea rax, [0x14028235f]
mov ebx, 0x19
call fcn.140038d00
mov eax, dword [rsp + 0x34]
nop dword [rax]
call fcn.140038a00
call fcn.140038660
call fcn.140038480
lea rax, [0x14027dd96]
mov ebx, 0xd
nop dword [rax + rax]
call fcn.140036ac0
cmp eax, 0x5af
je 0x1400180e8
call fcn.140038400
lea rax, [0x140282a4e]
mov ebx, 0x19
nop dword [rax]
call fcn.140038d00
mov rax, qword [rsp + 0x38]
call fcn.140038a00
lea rax, [0x14028235f]
mov ebx, 0x19
nop dword [rax + rax]
call fcn.140038d00
mov eax, dword [rsp + 0x34]
call fcn.140038a00
call fcn.140038660
call fcn.140038480
lea rax, [0x140284fed]
mov ebx, 0x1f
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.140017f80
Function at 0x1400181e0
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x30], rbx
mov rcx, qword [0x14023dc40]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], 0
mov qword [rsp + 0x18], 0x8000
call fcn.140033ec0
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x20], 0
je 0x14001823e
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
nop
call fcn.140064f20
xorps xmm15, xmm15
mov r14, qword [0x1404746d8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x28], rax
nop
call fcn.140038400
lea rax, [0x14028226f]
mov ebx, 0x18
call fcn.140038d00
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.140038a00
lea rax, [0x14028235f]
mov ebx, 0x19
call fcn.140038d00
mov rax, qword [rsp + 0x28]
nop dword [rax + rax]
call fcn.140038a00
call fcn.140038660
call fcn.140038480
lea rax, [0x1402853e8]
mov ebx, 0x20
nop dword [rax + rax]
call fcn.140036ac0
nop
int3

Function at 0x1400193a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x140019477
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
nop dword [rax + rax]
cmp rbx, 0x4000
ja 0x140019465
cmp rbx, 8
mov edx, 8
cmovb rbx, rdx
mov qword [rax], rbx
cmp dword [0x140474780], 0
jne 0x1400193f0
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rdi
jmp 0x140019408
lea rdx, [rax + 8]
mov r8, rdi
mov rdi, rdx
call fcn.140063660
lea rdi, [rax + 0x10]
call fcn.1400636e0
movups xmmword [rax + 0x18], xmm15
mov dword [rax + 0x28], 0
test rbx, rbx
je 0x14001945b
mov rcx, rax
mov eax, 0x4000
xor edx, edx
div rbx
imul rax, rbx
mov dword [rcx + 0x2c], eax
mov qword [rcx + 0x30], 0
cmp dword [0x140474780], 0
jne 0x140019444
mov qword [rcx + 0x38], rsi
jmp 0x14001944d
lea rdi, [rcx + 0x38]
call fcn.1400636c0
mov byte [rcx + 0x40], 1
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
nop dword [rax + rax]
call fcn.140035140
lea rax, [0x140285408]
mov ebx, 0x20
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp fcn.1400193a0
Function at 0x1400194c0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x1400195ce
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
mov rsi, qword [rax]
nop dword [rax + rax]
test rsi, rsi
je 0x1400195a1
mov rdi, qword [rax + 0x18]
test rdi, rdi
je 0x140019528
mov rcx, qword [rdi]
mov qword [rax + 0x18], rcx
mov rcx, qword [rax]
add qword [rax + 0x30], rcx
cmp byte [rax + 0x40], 0
je 0x14001951b
mov qword [rsp + 0x18], rdi
mov rbx, qword [rax]
mov rax, rdi
call fcn.140064080
mov rdi, qword [rsp + 0x18]
mov rax, rdi
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov qword [rsp + 0x38], rax
mov edi, dword [rax + 0x28]
cmp rsi, rdi
jbe 0x140019558
mov edx, dword [rax + 0x2c]
mov rcx, qword [rax + 0x38]
xor ebx, ebx
mov rax, rdx
call fcn.14000e920
mov rdx, qword [rsp + 0x38]
mov qword [rdx + 0x20], rax
mov esi, dword [rdx + 0x2c]
mov dword [rdx + 0x28], esi
mov rax, rdx
mov rbx, qword [rax + 0x20]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140019580
mov qword [rsp + 0x20], rbx
mov rcx, qword [rdx]
mov rsi, qword [rax + 0x10]
mov rax, rsi
call rcx
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x20]
mov rcx, qword [rax]
add qword [rax + 0x20], rcx
mov rcx, qword [rax]
sub dword [rax + 0x28], ecx
mov rcx, qword [rax]
add qword [rax + 0x30], rcx
mov rax, rbx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call fcn.140038400
lea rax, [0x140289375]
mov ebx, 0x34
call fcn.140038d00
call fcn.140038480
lea rax, [0x140281bd7]
mov ebx, 0x17
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
call fcn.140061380
mov rax, qword [rsp + 8]
nop dword [rax]
jmp fcn.1400194c0
Function at 0x14001c280
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov qword [rsp + 0x20], rax
cmp rdi, 0x989680
jb 0x14001c2bf
mov rdx, rax
movabs rax, 0x8637bd05af6c69b6
mov rsi, rdx
mul rdi
shr rdx, 0x13
lea rdi, [rbx - 1]
mov rax, rdi
jmp 0x14001c3f7
shr rdi, 1
mov rdx, rax
movabs rax, 0x83126e978d4fdf3c
mov rsi, rdx
mul rdi
shr rdx, 8
test rdx, rdx
je 0x14001c2e5
mov eax, 3
jmp 0x14001c333
test rbx, rbx
jbe 0x14001c311
mov byte [rsi], 0x30
cmp rcx, 1
jb 0x14001c305
mov rax, rsi
mov ebx, 1
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov ecx, 1
xor edx, edx
call fcn.140063a80
xor eax, eax
mov rcx, rax
call fcn.140063a00
mov rdi, rax
movabs rax, 0xcccccccccccccccd
mul rdx
shr rdx, 3
lea rax, [rdi - 1]
cmp rdx, 0x64
jae 0x14001c31b
lea rdi, [rbx - 1]
mov r8, rbx
sub rbx, rax
lea r9, [rbx - 1]
jmp 0x14001c34c
mov rdi, rax
cmp rdx, 0xa
jae 0x14001c357
cmp rdi, r9
jl 0x14001c3a0
movabs rax, 0xcccccccccccccccd
mov rbx, rdx
mul rdx
shr rdx, 3
lea r10, [rdx + rdx*4]
shl r10, 1
sub rbx, r10
cmp r8, rdi
jbe 0x14001c3e6
lea r10, [rbx + 0x30]
mov byte [rsi + rdi], r10b
lea rax, [rdi - 1]
cmp rax, r9
jne 0x14001c349
cmp r8, rax
jbe 0x14001c3de
mov byte [rdi + rsi - 1], 0x2e
lea rax, [rdi - 2]
jmp 0x14001c349
cmp r8, rdi
jbe 0x14001c3d3
add rdx, 0x30
mov byte [rsi + rdi], dl
sub rcx, rdi
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and rcx, rdi
lea rax, [rcx + rsi]
sub r8, rdi
mov rbx, r8
mov rcx, rdx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rax, rdi
mov rcx, r8
call fcn.140063a00
mov rcx, r8
call fcn.140063a00
mov rax, rdi
mov rcx, r8
call fcn.140063a00
mov rdi, rax
mov rax, r8
cmp rdx, 0xa
jae 0x14001c405
nop dword [rax]
cmp rdi, rax
jl 0x14001c450
mov r8, rax
movabs rax, 0xcccccccccccccccd
mov r9, rdx
mul rdx
shr rdx, 3
lea r10, [rdx + rdx*4]
shl r10, 1
sub r9, r10
cmp rbx, rdi
jbe 0x14001c494
add r9, 0x30
mov byte [rsi + rdi], r9b
lea rax, [rdi - 1]
cmp rax, r8
jne 0x14001c3f1
nop dword [rax]
cmp rbx, rax
jbe 0x14001c48c
mov byte [rdi + rsi - 1], 0x2e
lea rax, [rdi - 2]
jmp 0x14001c3f1
cmp rbx, rdi
jbe 0x14001c481
add rdx, 0x30
mov byte [rsi + rdi], dl
sub rcx, rdi
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and rcx, rdi
lea rax, [rsi + rcx]
sub rbx, rdi
mov rcx, rdx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
nop
ret
mov rax, rdi
mov rcx, rbx
call fcn.140063a00
mov rcx, rbx
call fcn.140063a00
mov rax, rdi
mov rcx, rbx
call fcn.140063a00
nop
Function at 0x14001c4a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14001c526
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov rdx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx], esi
sete sil
test sil, sil
je 0x14001c514
cmp byte [rdx + 0x20], bl
je 0x14001c503
mov qword [rsp + 0x10], rdx
mov byte [rsp + 0x30], bl
mov rax, rdx
mov rbx, rcx
call fcn.14001c6a0
movzx ecx, byte [rsp + 0x30]
mov rdx, qword [rsp + 0x10]
mov byte [rdx + 0x20], cl
mov byte [rdx + 0x21], 1
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x140288558]
mov ebx, 0x2d
call fcn.140036ac0
lea rax, [0x1402889a9]
mov ebx, 0x2f
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
mov qword [rsp + 0x18], rcx
call fcn.140061380
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.14001c4a0

Function at 0x14001c560
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14001c5d9
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
cmp byte [rax + 0x21], 0
je 0x14001c5c7
mov rdx, qword [rax + 0x40]
nop
cmp rdx, rbx
jg 0x14001c5af
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov rcx, rbx
sub rcx, rdx
movsxd rdx, dword [rax + 0x4c]
imul rcx, rdx
xor ebx, ebx
nop
call fcn.14001c8a0
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
nop
xchg qword [rax + 0x40], rbx
mov byte [rax + 0x21], 0
call fcn.14001c940
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x1402889d8]
mov ebx, 0x2f
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.14001c560
Function at 0x14001c6a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14001c87a
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov rdx, qword [rax + 0x40]
nop dword [rax]
cmp rdx, rbx
jg 0x14001c75c
movsxd rsi, dword [rax + 0x4c]
nop
mov rdi, rbx
xchg qword [rax + 0x40], rbx
nop
mov r8, qword [rax + 0x28]
mov rbx, rdi
sub rbx, rdx
imul rbx, rsi
test r8, r8
je 0x14001c6f7
mov rdx, r8
neg r8
lock xadd qword [rax + 0x28], r8
jmp 0x14001c6fa
mov rdx, r8
nop
mov rsi, qword [rax + 0x38]
nop
test rsi, rsi
je 0x14001c713
mov r8, rsi
neg rsi
lock xadd qword [rax + 0x38], rsi
jmp 0x14001c716
mov r8, rsi
cmp byte [rax + 0x50], 0
jne 0x14001c766
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], rdi
mov r9, qword [r14 + 0x30]
nop
inc dword [r9 + 0xd8]
mov r9, qword [0x1404213b0]
mov qword [rsp + 0x50], r9
mov r10, qword [0x1404213b8]
mov qword [rsp + 0x38], r10
mov r11, qword [r14 + 0x30]
mov qword [rsp + 0x48], r11
xor ecx, ecx
jmp 0x14001c7c7
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
cmp byte [rax + 0x20], 0
je 0x14001c788
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
movsd xmm1, qword [0x1402bab78]
mulsd xmm0, xmm1
cvttsd2si rsi, xmm0
add rdx, rsi
sub rbx, r8
sub rbx, rdx
mov rcx, rdx
call fcn.14001c8a0
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
nop
ret
mov rcx, qword [rsp + 0x30]
inc rcx
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x48]
cmp rcx, r10
jge 0x14001c832
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x28], rdx
mov rax, qword [r9 + rcx*8]
test byte [rax], al
add rax, 0x1220
mov rbx, rdi
call fcn.14001ca80
cmp al, 1
ja 0x14001c803
test al, al
jne 0x14001c81f
mov rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
jmp 0x14001c7a1
cmp al, 2
je 0x14001c80b
cmp al, 3
jne 0x14001c81b
mov rsi, qword [rsp + 0x28]
lea rdx, [rsi + rbx]
mov r8, qword [rsp + 0x20]
jmp 0x14001c7a1
cmp al, 4
jne 0x14001c868
mov rsi, qword [rsp + 0x20]
lea r8, [rsi + rbx]
mov rdx, qword [rsp + 0x28]
jmp 0x14001c7a1
nop
mov esi, dword [r11 + 0xd8]
lea edi, [rsi - 1]
mov dword [r11 + 0xd8], edi
cmp esi, 1
jne 0x14001c766
cmp byte [r14 + 0xb1], 0
je 0x14001c766
mov qword [r14 + 0x10], 0xfffffffffffffade
jmp 0x14001c766
lea rax, [0x1402852a8]
mov ebx, 0x20
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.14001c6a0
Function at 0x14001c9a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14001ca53
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov rdx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx], esi
sete sil
test sil, sil
je 0x14001ca41
mov dword [rsp + 0x38], ecx
mov qword [rsp + 0x10], rdx
mov rax, rdx
nop dword [rax + rax]
call fcn.14001c6a0
mov ecx, dword [rsp + 0x38]
mov rax, qword [rsp + 0x10]
mov dword [rax + 0x4c], ecx
movsxd rcx, ecx
imul rcx, rcx, 0x3b9aca00
mov qword [rax + 0x10], rcx
mov rdx, qword [rax + 8]
cmp rdx, rcx
jbe 0x14001ca26
mov qword [rax + 8], rcx
nop
nop
lea rcx, [rax + 4]
mov edx, 1
xchg byte [rcx], dl
mov ecx, dword [0x1404780f8]
inc ecx
xchg dword [rax + 0x48], ecx
jmp 0x14001ca32
jae 0x14001ca32
nop
nop
lea rcx, [rax + 4]
xor edx, edx
xchg byte [rcx], dl
call fcn.14001c940
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x1402874c3]
mov ebx, 0x28
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
call fcn.140061380
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
jmp fcn.14001c9a0

Function at 0x14001cb20
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x14001cc86
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
jmp 0x14001cb3d
mov rax, rdx
mov rdx, qword [rax]
mov rsi, rdx
shr rdx, 0x3d
cmp bl, dl
jne 0x14001cc1c
mov rdx, rax
mov rax, rsi
xor edi, edi
lock cmpxchg qword [rdx], rdi
sete r8b
test r8b, r8b
je 0x14001cb3a
movabs rdx, 0xe000000000000000
and rdx, rcx
movabs rdi, 0x1fffffffffffffff
and rdi, rsi
or rdx, rdi
mov rsi, rcx
sub rcx, rdx
cmp rsi, rdx
mov edx, 0
cmovl rcx, rdx
test rcx, rcx
je 0x14001cc01
cmp bl, 2
ja 0x14001cbc0
nop
cmp bl, 1
jne 0x14001cbb4
nop
lea rax, [0x140474a78]
lock xadd qword [rax], rcx
jmp 0x14001cbf7
cmp bl, 2
je 0x14001cbc5
jmp 0x14001cc0b
cmp bl, 3
jne 0x14001cbd4
nop
lea rax, [0x140474a68]
lock xadd qword [rax], rcx
jmp 0x14001cbf7
cmp bl, 4
jne 0x14001cc0b
nop
nop
lea rax, [0x140474a78]
mov rdx, rcx
lock xadd qword [rax], rcx
nop
lea rax, [0x140422790]
lock xadd qword [rax], rdx
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x140289170]
mov ebx, 0x33
call fcn.140036ac0
mov byte [rsp + 0x30], bl
mov qword [rsp + 0x10], rdx
call fcn.140038400
lea rax, [0x14027e281]
mov ebx, 0xe
call fcn.140038d00
movzx eax, byte [rsp + 0x30]
movzx eax, al
call fcn.140038a00
lea rax, [0x14027bc7b]
mov ebx, 5
call fcn.140038d00
mov rax, qword [rsp + 0x10]
nop
call fcn.140038a00
call fcn.140038660
call fcn.140038480
lea rax, [0x140289cde]
mov ebx, 0x3e
nop dword [rax + rax]
call fcn.140036ac0
nop
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], bl
mov qword [rsp + 0x18], rcx
call fcn.140061380
mov rax, qword [rsp + 8]
movzx ebx, byte [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
jmp fcn.14001cb20
Function at 0x140020460
Capabilities:
Hash data using murmur3
Reference sql statements

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
cmp byte [0x140474495], 0
jne 0x14002054f
mov rdx, qword [rax + 0x50]
test byte [rdx], al
nop
nop
nop
sub rbx, qword [rax + 0x18]
mov esi, dword [rax + 0x5c]
imul rbx, rsi
mov rsi, rbx
shr rbx, 0x20
shr rsi, 0x23
and ebx, 7
mov rdi, rcx
mov rcx, rbx
mov r8d, 1
shl r8d, cl
add rdx, rsi
lock or byte [rdx], r8b
nop
nop
mov rcx, qword [rax + 0x18]
nop
movabs rdx, 0x800000000000
lea rax, [rdx + rcx]
mov rdx, rax
shr rax, 0x2a
cmp rax, 0x40
jae 0x140020545
lea rbx, [0x1404468d0]
mov rax, qword [rbx + rax*8]
shr rdx, 0x16
and edx, 0xfffff
mov rdx, qword [rax + rdx*8]
test byte [rdx], al
test byte [rax], al
mov rax, rcx
shr rcx, 0x10
and ecx, 0x3f
movzx ebx, byte [rdx + rcx + 0x11440]
lea rdx, [rdx + rcx]
lea rdx, [rdx + 0x11440]
shr rax, 0xd
and eax, 7
mov rcx, rax
mov eax, 1
shl eax, cl
test al, bl
jne 0x140020527
lock or byte [rdx], al
mov rax, qword [r14 + 0x30]
mov rax, qword [rax + 0xa0]
test byte [rax], al
add qword [rax + 0x1248], rdi
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov ecx, 0x40
call fcn.140063a20
lea rax, [0x14028812d]
mov ebx, 0x2c
nop dword [rax + rax]
call fcn.140036ac0
nop
int3