joyce8/EMBER2024-capa huggingface dataset:
Function at 0x423bb6
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
test esi, esi
jne 0x423bef
push 0x1981
push 0x50d0b8
push 0x50c9bc
push 0x50a2f0
push 0x508530
call fcn.00401466
add esp, 0x14
xor eax, eax
jmp 0x423c64
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
push eax
lea eax, [ebp - 0x400]
push 0x50e400
push eax
call fcn.004bafeb
mov eax, dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x400]
push 1
push ecx
mov ecx, esi
call dword [eax + 4]
mov esi, eax
test esi, esi
je 0x423c61
mov eax, dword [esi]
push ebx
mov ecx, esi
xor ebx, ebx
call dword [eax + 0x68]
test eax, eax
jle 0x423c59
push esi
call fcn.0048a152
test eax, eax
pop ecx
je 0x423c46
mov ecx, dword [edi + 0x8b4]
push eax
mov edx, dword [ecx]
call dword [edx + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x6c]
mov eax, dword [esi]
mov ecx, esi
inc ebx
call dword [eax + 0x68]
cmp ebx, eax
jl 0x423c2f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
pop ebx
push 1
pop eax
pop edi
pop esi
leave
ret 4
Function at 0x4288bc
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e0340
call fcn.004baf44
sub esp, 0x118
push esi
mov esi, ecx
mov ecx, dword [esi + 0x6fc]
push edi
sub ecx, dword [esi + 0x6f8]
lea eax, [esi + 0x6f8]
sar ecx, 2
cmp ecx, 0x28
jb 0x428955
and dword [ebp - 4], 0
lea eax, [ebp - 0x11]
push eax
lea ecx, [ebp - 0x24]
call fcn.0042f525
mov edi, 0x50eb78
mov byte [ebp - 4], 1
push edi
call fcn.004baf70
pop ecx
add eax, edi
mov cl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
lea ecx, [ebp - 0x12]
push ecx
push eax
push edi
lea ecx, [ebp - 0x24]
call fcn.0040bc60
mov edi, dword [esi + 8]
add esi, 8
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 2
push eax
call fcn.004b3a98
mov ecx, eax
call fcn.004b3d15
push eax
push esi
call dword [edi + 0x14c]
pop ecx
pop ecx
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.00403d38
jmp 0x428a93
mov al, byte [0x5265c8]
push 0x3f
mov byte [ebp - 0x124], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x123]
rep stosd dword es:[edi], eax
push dword [esi + 0x7d4]
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x50eb34
lea eax, [ebp - 0x124]
push 0x100
push eax
call fcn.004bb643
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x14
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x124]
push 1
push ecx
mov ecx, eax
call dword [edx + 4]
mov dword [ebp - 0x10], eax
test eax, eax
mov dword [ebp - 4], 4
je 0x428a83
lea ecx, [ebp - 0x10]
call fcn.00496523
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x68]
test eax, eax
jbe 0x428a83
lea ecx, [ebp - 0x10]
call fcn.00496523
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0x4c]
push 0
push 0
push 0
push esi
push eax
mov dword [ebp - 0x18], eax
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.004125e3
mov ecx, eax
call fcn.0044778c
push dword [ebp - 0x18]
mov eax, dword [esi]
mov edi, dword [esi + 0x7d4]
mov ecx, esi
call dword [eax + 4]
push eax
push edi
push 0x50eb00
push 0x50eaf4
call fcn.004b2c2b
add esp, 0x14
lea ecx, [ebp - 0x10]
call fcn.00496523
mov edx, dword [eax]
push 1
push 3
mov ecx, eax
call dword [edx + 0x24]
lea ecx, [ebp - 0x10]
call fcn.00496523
mov esi, eax
mov edi, dword [esi]
call fcn.004b2048
push eax
push 5
mov ecx, esi
call dword [edi + 0x24]
lea ecx, [ebp - 0x10]
call fcn.00496523
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x10]
mov ecx, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x428a7f
mov eax, dword [ecx]
call dword [eax + 8]
mov al, 1
jmp 0x428a95
mov ecx, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x428a93
mov eax, dword [ecx]
call dword [eax + 8]
xor al, al
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret
Function at 0x42a2b5
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e0410
call fcn.004baf44
sub esp, 0x404
push esi
mov esi, ecx
mov eax, dword [esi]
call dword [eax + 0x1c]
push eax
lea eax, [ebp - 0x410]
push 0x50ee10
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x10
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x410]
push 1
push ecx
mov ecx, eax
call dword [edx + 4]
mov dword [ebp - 0x10], eax
and dword [ebp - 4], 0
test eax, eax
je 0x42a336
lea ecx, [ebp - 0x10]
call fcn.00496523
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx + 0x4c]
mov ecx, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
test ecx, ecx
mov esi, eax
je 0x42a332
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, esi
jmp 0x42a338
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
leave
ret
Function at 0x42cb6f
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e05e8
call fcn.004baf44
sub esp, 0x414
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esp
lea eax, [ebp - 0x420]
mov edi, dword [esi + 0x7d4]
push edi
push 0x4eb530
push 0x50f6a4
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x14
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x420]
push 1
push ecx
mov ecx, eax
call dword [edx + 4]
mov esi, eax
test esi, esi
je 0x42cc5b
mov eax, dword [esi]
and dword [ebp - 0x14], 0
and dword [ebp - 0x18], 0
mov ecx, esi
call dword [eax + 0x68]
test eax, eax
jbe 0x42cc4d
mov eax, dword [esi]
push 0x50f69c
mov ecx, esi
call dword [eax + 0x34]
mov ebx, eax
mov eax, dword [esi]
push 0x50f690
mov ecx, esi
call dword [eax + 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
push 0x50f688
mov ecx, esi
call dword [eax + 0x34]
push 0
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x20]
push ebx
push edi
call fcn.0042d6a3
add esp, 0x10
cmp eax, dword [ebp - 0x1c]
je 0x42cc34
push ebx
push edi
call fcn.0042d758
cmp eax, dword [ebp - 0x1c]
pop ecx
pop ecx
jne 0x42cc37
inc dword [ebp - 0x14]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x6c]
mov eax, dword [esi]
inc dword [ebp - 0x18]
mov ecx, esi
call dword [eax + 0x68]
cmp dword [ebp - 0x18], eax
jb 0x42cbe6
mov eax, dword [esi]
and dword [ebp - 4], 0
mov ecx, esi
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
Function at 0x42d00b
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e0648
call fcn.004baf44
sub esp, 0x414
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esp
lea eax, [ebp - 0x420]
mov edi, dword [esi + 0x7d4]
push edi
push 0x4eb53c
push 0x50f6a4
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x14
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x420]
push 1
push ecx
mov ecx, eax
call dword [edx + 4]
mov esi, eax
test esi, esi
je 0x42d0f7
mov eax, dword [esi]
and dword [ebp - 0x14], 0
and dword [ebp - 0x18], 0
mov ecx, esi
call dword [eax + 0x68]
test eax, eax
jbe 0x42d0e9
mov eax, dword [esi]
push 0x50f69c
mov ecx, esi
call dword [eax + 0x34]
mov ebx, eax
mov eax, dword [esi]
push 0x50f690
mov ecx, esi
call dword [eax + 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [esi]
push 0x50f688
mov ecx, esi
call dword [eax + 0x34]
push 0
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x20]
push ebx
push edi
call fcn.0042d6a3
add esp, 0x10
cmp eax, dword [ebp - 0x1c]
je 0x42d0d0
push ebx
push edi
call fcn.0042d76a
cmp eax, dword [ebp - 0x1c]
pop ecx
pop ecx
jne 0x42d0d3
inc dword [ebp - 0x14]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x6c]
mov eax, dword [esi]
inc dword [ebp - 0x18]
mov ecx, esi
call dword [eax + 0x68]
cmp dword [ebp - 0x18], eax
jb 0x42d082
mov eax, dword [esi]
and dword [ebp - 4], 0
mov ecx, esi
call dword [eax + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
Function at 0x42d869
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e072c
call fcn.004baf44
sub esp, 0x404
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
push 2
mov eax, dword [esi + 0x7d4]
pop edi
cmp dword [ebp + 8], edi
mov ecx, 0x50f808
jne 0x42d899
mov ecx, 0x50f800
mov edx, eax
xor edx, 0x109a00
push edx
push 0
push eax
push ecx
push 0x50f838
lea eax, [ebp - 0x410]
push 0x400
push eax
call fcn.004bb643
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x20
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x410]
push 1
push ecx
mov ecx, eax
call dword [edx + 4]
mov esi, eax
test esi, esi
je 0x42d8fd
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x68]
test eax, eax
ja 0x42d91e
mov eax, dword [esi]
and dword [ebp - 4], 0
mov ecx, esi
call dword [eax + 8]
xor al, al
jmp 0x42d955
mov ebx, dword [esi]
call fcn.004b2048
push eax
push 0x50f690
mov ecx, esi
call dword [ebx + 0x38]
mov eax, dword [esi]
push 1
push 0x50f6ec
mov ecx, esi
call dword [eax + 0x38]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov byte [ebp + 0xb], al
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], edi
call dword [eax + 8]
mov al, byte [ebp + 0xb]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4

Function at 0x42d983
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400
cmp dword [ebp + 8], 2
push esi
mov esi, ecx
mov ecx, 0x50f808
mov eax, dword [esi + 0x7d4]
jne 0x42d9a5
mov ecx, 0x50f800
mov edx, eax
xor edx, 0x109a00
push edx
push 0
push eax
push ecx
push 0x50f898
lea eax, [ebp - 0x400]
push 0x400
push eax
call fcn.004bb643
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x20
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
pop esi
jge 0x42d9f2
xor eax, eax
leave
ret 4
Function at 0x435e61
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov eax, 0x4e11de
call fcn.004baf44
push ecx
push esi
mov esi, ecx
mov dword [ebp - 0x10], esi
call fcn.0045bc92
lea ecx, [esi + 0xc]
xor eax, eax
mov dword [esi + 8], 0x4ebc28
mov dword [ebp - 4], eax
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x2c], 0x4ebc0c
push esi
mov byte [ebp - 4], 2
mov dword [esi], 0x4ebbf8
mov dword [esi + 8], 0x4ebbdc
mov dword [esi + 4], 0x1100
mov dword [esi + 0x24], eax
mov dword [esi + 0x30], esi
call fcn.0042f002
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop esi
mov dword fs:[0], ecx
leave
ret
Function at 0x43c77b
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
cmp dword [esi + 0xb8], ebx
jne 0x43c7a9
push 0x72
push 0x510ce4
push 0x510dfc
push 0x50a2f0
jmp 0x43c96c
cmp dword [esi + 0xbc], ebx
jne 0x43c7bf
push 0x73
push 0x510ce4
push 0x510df0
jmp 0x43c79f
cmp dword [esi + 0xc0], ebx
jne 0x43c7d5
push 0x74
push 0x510ce4
push 0x510de0
jmp 0x43c79f
cmp dword [esi + 0xcc], ebx
jne 0x43c7eb
push 0x75
push 0x510ce4
push 0x510dd0
jmp 0x43c79f
push dword [esi + 0xb4]
call fcn.00404bcb
mov eax, dword [eax + 0x20]
pop ecx
sub eax, 4
push eax
lea eax, [ebp - 0x408]
push dword [0x5218ec]
push 0x510d84
push eax
call fcn.004bafeb
push dword [esi + 0xb4]
call fcn.00404bcb
add esp, 0x14
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x408]
push ebx
push ecx
mov ecx, eax
call dword [edx + 4]
mov edi, eax
cmp edi, ebx
je 0x43c979
mov eax, dword [edi]
mov ecx, edi
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call dword [eax + 0x68]
test eax, eax
jle 0x43c8c4
call fcn.0043d3cf
mov ebx, eax
test ebx, ebx
je 0x43c925
push edi
mov ecx, ebx
push dword [esi + 0xb4]
call fcn.00431f01
test al, al
je 0x43c91e
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
cmp eax, 0x3f2
jne 0x43c88b
mov byte [ebx + 0x30], 1
mov ecx, dword [esi + 0xb8]
push ebx
mov eax, dword [ecx]
call dword [eax + 0x10]
mov eax, dword [ebx]
inc dword [ebp - 4]
mov ecx, ebx
call dword [eax + 4]
push eax
push 0x510d74
call fcn.004b3088
mov eax, dword [edi]
inc dword [ebp - 8]
pop ecx
pop ecx
mov ecx, edi
call dword [eax + 0x6c]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x68]
cmp dword [ebp - 8], eax
jl 0x43c854
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push dword [esi + 0xb4]
call fcn.00404bcb
mov eax, dword [eax + 0x20]
pop ecx
sub eax, 4
push eax
push dword [ebp - 4]
push 0x510d58
call fcn.0040445f
mov edi, dword [esi + 0xbc]
push dword [esi + 0xb4]
mov ebx, dword [edi]
call fcn.00404bcb
add esp, 0x10
mov ecx, eax
call fcn.00404b9c
push eax
push 0x510d40
mov ecx, edi
call dword [ebx + 4]
test al, al
jne 0x43c92e
push 0xa8
jmp 0x43c95d
mov ecx, ebx
call fcn.00411e56
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
jmp 0x43c979
mov edi, dword [esi + 0xc0]
push dword [esi + 0xb4]
mov ebx, dword [edi]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
push eax
push 0x510d24
mov ecx, edi
call dword [ebx + 4]
test al, al
jne 0x43c97d
push 0xad
push 0x510ce4
push 0x50c244
push 0x50c0c0
push 0x508530
call fcn.00401466
add esp, 0x14
xor al, al
jmp 0x43c97f
mov al, 1
pop edi
pop esi
pop ebx
leave
ret
Function at 0x43e316
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
mov eax, 0x4e1a71
call fcn.004baf44
push ecx
push ecx
push esi
mov esi, ecx
mov dword [ebp - 0x14], esi
call fcn.00440207
and dword [ebp - 4], 0
lea ecx, [esi + 0xc]
call fcn.00440285
lea ecx, [esi + 0x18]
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0xe]
push eax
call fcn.00440506
lea ecx, [esi + 0x24]
lea eax, [ebp - 0xe]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xd]
push eax
call fcn.00440506
and dword [esi + 0x30], 0
and dword [esi + 0x34], 0
and dword [esi + 0x38], 0
lea ecx, [esi + 0x3c]
mov byte [ebp - 4], 5
call fcn.0042fa4d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x48], eax
mov eax, esi
pop esi
mov dword fs:[0], ecx
leave
ret 4
Function at 0x44451a
Capabilities:
Reference sql statements

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push ebp
push esi
test ebx, ebx
push edi
mov ebp, ecx
jne 0x44454b
push 0x42
push 0x511dc8
push 0x50c9bc
push 0x50a714
push 0x508530
call fcn.00401466
add esp, 0x14
jmp 0x4445dc
mov eax, dword [ebx]
push 1
push 0x511e34
mov ecx, ebx
call dword [eax + 4]
mov esi, eax
test esi, esi
je 0x4445ad
mov eax, dword [esi]
and dword [esp + 0x14], 0
mov ecx, esi
call dword [eax + 0x68]
test eax, eax
jle 0x4445a6
call fcn.004448d9
mov edi, eax
test edi, edi
je 0x4445d5
mov eax, dword [edi]
push esi
mov ecx, edi
call dword [eax + 0x20]
test al, al
je 0x4445ce
push edi
mov ecx, ebp
call fcn.00444467
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x6c]
mov eax, dword [esi]
inc dword [esp + 0x14]
mov ecx, esi
call dword [eax + 0x68]
cmp dword [esp + 0x14], eax
jl 0x44456f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
mov eax, dword [ebx]
push 0
push 0x511e08
mov ecx, ebx
call dword [eax + 4]
xor ecx, ecx
mov dword [ebp + 0x10], eax
test eax, eax
setne cl
mov al, cl
pop edi
pop esi
pop ebp
pop ebx
ret 4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 8]
xor al, al
jmp 0x4445c7
Function at 0x4760ef
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400
push esi
mov esi, ecx
lea eax, [ebp - 0x400]
push dword [esi + 0x7d4]
push 0x517f30
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x10
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
jge 0x47613d
xor eax, eax
jmp 0x47615e
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
pop esi
leave
ret
Function at 0x4762e6
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e4870
call fcn.004baf44
sub esp, 0x410
push ebx
push esi
mov esi, ecx
push edi
mov ecx, dword [esi + 0x6fc]
sub ecx, dword [esi + 0x6f8]
lea eax, [esi + 0x6f8]
sar ecx, 2
cmp ecx, 0x28
jb 0x476369
and dword [ebp - 4], 0
lea eax, [ebp - 0xd]
push eax
push 0x516a98
lea ecx, [ebp - 0x1c]
call fcn.00403ed8
mov edi, dword [esi + 8]
add esi, 8
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 1
push eax
call fcn.004b3a98
mov ecx, eax
call fcn.004b3d15
push eax
push esi
call dword [edi + 0x14c]
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
push eax
push dword [ebp - 0x1c]
call fcn.00407799
jmp 0x4764fb
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
mov edi, eax
test edi, edi
jne 0x4763cd
push 0x18ba
push 0x51676c
push 0x50c9bc
push 0x50a714
push 0x508530
call fcn.00401466
mov eax, dword [esi]
add esp, 0x14
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x517fe8
push 0x51802c
call fcn.004b2c2b
add esp, 0x10
jmp 0x4764fb
push dword [esi + 0x7d4]
lea eax, [ebp - 0x41c]
push 0x517f30
push eax
call fcn.004bafeb
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, edi
call dword [eax + 0x18]
cmp eax, 0xffffffff
jne 0x476414
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518170
jmp 0x4763bb
test eax, eax
jne 0x476432
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x51814c
jmp 0x4763bb
push dword [esi + 0x7d4]
lea eax, [ebp - 0x41c]
push 0x51811c
push eax
call fcn.004bafeb
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, edi
call dword [eax + 0xc]
test al, al
jne 0x4764a0
push 0x18d2
push 0x51676c
push 0x50f4ac
push 0x50a714
push 0x508530
call fcn.00401466
add esp, 0x14
lea eax, [ebp - 0x41c]
mov ecx, esi
lea edi, [esi + 8]
push eax
mov eax, dword [esi]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x5180ec
jmp 0x4764ee
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x5180c8
push 0x51802c
call fcn.004b2c2b
add esp, 0x10
mov ebx, 0xbe6e0
mov ecx, esi
push 1
push ebx
call fcn.0046b3c1
test eax, eax
jne 0x4764ff
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518098
push 0x51802c
call fcn.004b2c2b
add esp, 0x14
xor al, al
jmp 0x47652c
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 4]
push eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518064
push 0x51802c
call fcn.004b2c2b
add esp, 0x18
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x47653b
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400
push esi
mov esi, ecx
lea eax, [ebp - 0x400]
push dword [esi + 0x7d4]
push 0x51819c
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x10
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
jge 0x476589
xor eax, eax
jmp 0x4765aa
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
pop esi
leave
ret
Function at 0x476732
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x4e4894
call fcn.004baf44
sub esp, 0x410
push ebx
push esi
mov esi, ecx
push edi
mov ecx, dword [esi + 0x6fc]
sub ecx, dword [esi + 0x6f8]
lea eax, [esi + 0x6f8]
sar ecx, 2
cmp ecx, 0x28
jb 0x4767b5
and dword [ebp - 4], 0
lea eax, [ebp - 0xd]
push eax
push 0x516a98
lea ecx, [ebp - 0x1c]
call fcn.00403ed8
mov edi, dword [esi + 8]
add esi, 8
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 1
push eax
call fcn.004b3a98
mov ecx, eax
call fcn.004b3d15
push eax
push esi
call dword [edi + 0x14c]
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
push eax
push dword [ebp - 0x1c]
call fcn.00407799
jmp 0x476947
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
mov edi, eax
test edi, edi
jne 0x476819
push 0x192b
push 0x51676c
push 0x50c9bc
push 0x50a714
push 0x508530
call fcn.00401466
mov eax, dword [esi]
add esp, 0x14
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x517fe8
push 0x5181f8
call fcn.004b2c2b
add esp, 0x10
jmp 0x476947
push dword [esi + 0x7d4]
lea eax, [ebp - 0x41c]
push 0x51819c
push eax
call fcn.004bafeb
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, edi
call dword [eax + 0x18]
cmp eax, 0xffffffff
jne 0x476860
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518170
jmp 0x476807
test eax, eax
jne 0x47687e
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x51814c
jmp 0x476807
push dword [esi + 0x7d4]
lea eax, [ebp - 0x41c]
push 0x51820c
push eax
call fcn.004bafeb
mov eax, dword [edi]
add esp, 0xc
lea ecx, [ebp - 0x41c]
push ecx
mov ecx, edi
call dword [eax + 0xc]
test al, al
jne 0x4768ec
push 0x1943
push 0x51676c
push 0x50f4ac
push 0x50a714
push 0x508530
call fcn.00401466
add esp, 0x14
lea eax, [ebp - 0x41c]
mov ecx, esi
lea edi, [esi + 8]
push eax
mov eax, dword [esi]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x5180ec
jmp 0x47693a
mov eax, dword [esi]
mov ecx, esi
lea edi, [esi + 8]
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x5180c8
push 0x5181f8
call fcn.004b2c2b
add esp, 0x10
mov ebx, 0xbe6e1
mov ecx, esi
push 1
push ebx
call fcn.0046b3c1
test eax, eax
jne 0x47694b
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518098
push 0x5181f8
call fcn.004b2c2b
add esp, 0x14
xor al, al
jmp 0x476978
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 4]
push eax
mov eax, dword [esi]
push ebx
mov ecx, esi
call dword [eax + 4]
push eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 8]
push eax
push 0x518064
push 0x5181f8
call fcn.004b2c2b
add esp, 0x18
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
Function at 0x4769f1
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x400
push esi
mov esi, ecx
push dword [ebp + 8]
call fcn.00476987
test eax, eax
jne 0x476a2c
push 0x1998
push 0x51676c
push 0x5182bc
push 0x50a714
push 0x508530
call fcn.00401466
add esp, 0x14
jmp 0x476a6b
push dword [esi + 0x7d4]
push eax
lea eax, [ebp - 0x400]
push 0x518294
push eax
call fcn.004bafeb
push dword [esi + 0x960]
call fcn.00404bcb
add esp, 0x14
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
jge 0x476a6f
xor eax, eax
jmp 0x476a90
push dword [esi + 0x960]
call fcn.00404bcb
pop ecx
mov ecx, eax
call fcn.00404b9c
mov edx, dword [eax]
lea ecx, [ebp - 0x400]
push ecx
mov ecx, eax
call dword [edx + 0x18]
pop esi
leave
ret 4