joyce8/EMBER2024-capa huggingface dataset:
Function at 0x453e00
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x453f5d
sub esp, 0x14
lea eax, [0x93f4b4]
mov dword [esp], eax
call fcn.004763d0
mov eax, dword [esp + 4]
mov dword [esp + 0x10], eax
test eax, eax
je 0x453e37
mov ecx, dword [esp + 0x18]
jmp 0x453e53
mov ecx, dword [esp + 0x18]
movzx edx, byte [ecx + 6]
test dl, dl
je 0x453e53
lea eax, [ecx + 0x30]
nop
mov dword [esp], eax
call fcn.0040a2c0
mov ecx, dword [esp + 0x18]
test byte [ecx], al
nop
nop
mov dword [esp], ecx
call fcn.0040a2c0
mov eax, dword [esp + 0x10]
test eax, eax
je 0x453e77
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00453d00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
movzx edx, byte [ecx + 5]
test dl, 1
je 0x453eb7
mov ebx, edx
or edx, 2
mov byte [ecx + 5], dl
test dl, 4
jne 0x453eb7
or ebx, 6
mov byte [ecx + 5], bl
mov eax, dword [ecx + 0x2c]
test byte [eax], al
add eax, 0x14
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004763f0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0xc]
mov ebx, dword [ecx + 0x10]
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
test ebx, ebx
sete bl
xchg ebp, ebx
setg bl
xchg ebp, ebx
test edx, edx
seta dl
and ebx, edx
or ebx, ebp
mov byte [esp + 0xf], bl
test eax, eax
jne 0x453ef3
movzx edx, byte [ecx + 6]
test dl, dl
je 0x453ef3
inc dword [ecx + 0x28]
mov dword [esp], ecx
call fcn.00453910
mov eax, dword [esp + 0x10]
test eax, eax
je 0x453f0a
movzx ebx, byte [esp + 0xf]
jmp 0x453f55
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
test cl, cl
jne 0x453f1d
movzx ebx, byte [esp + 0xf]
jmp 0x453f55
lea ecx, [eax + 0x30]
nop
mov dword [esp], ecx
call fcn.0040a4e0
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
test cl, cl
jne 0x453f3e
call fcn.00455b20
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x24]
mov dword [esp], eax
call fcn.004058d0
movzx ebx, byte [esp + 4]
movzx eax, byte [esp + 0xf]
or ebx, eax
mov byte [esp + 0x1c], bl
add esp, 0x14
ret
call fcn.00470430
jmp fcn.00453e00
Function at 0x455c80
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x455d7c
sub esp, 0x14
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x10], eax
test byte [eax], al
nop
nop
mov dword [esp], eax
call fcn.0040a2c0
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax + 6]
test cl, cl
jne 0x455cc3
call fcn.00455b20
mov eax, dword [esp + 0x10]
inc dword [eax + 8]
movzx ecx, byte [eax + 5]
test cl, 1
je 0x455d17
test cl, 4
je 0x455d17
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
test ebx, ebx
setg bl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test edx, edx
seta dl
and ebp, edx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x455d17
and ecx, 0xfffffffb
mov byte [eax + 5], cl
mov ecx, dword [eax + 0x2c]
test byte [ecx], al
add ecx, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
call fcn.004763f0
mov eax, dword [esp + 0x10]
movzx ecx, byte [eax + 5]
nop
test cl, 1
jne 0x455d55
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
test edx, edx
setg dl
sete bl
test ecx, ecx
seta cl
and ebx, ecx
or ebx, edx
test bl, bl
je 0x455d55
movzx ecx, byte [eax + 6]
test cl, cl
je 0x455d4e
mov ecx, dword [eax + 8]
test ecx, ecx
seta cl
jmp 0x455d57
mov ecx, 1
jmp 0x455d57
xor ecx, ecx
mov byte [esp + 0xf], cl
mov dword [esp], eax
call fcn.00453910
movzx eax, byte [esp + 0xf]
test al, al
je 0x455d78
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00454450
add esp, 0x14
ret
call fcn.00470430
jmp fcn.00455c80

Function at 0x456da0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x456e45
sub esp, 8
mov edx, dword [esp + 0xc]
lea ebx, [edx - 1]
test ebx, edx
jne 0x456e2e
xor ebx, ebx
test bl, bl
je 0x456dd1
xor edx, edx
mov eax, 0x20
jmp 0x456dd3
xor eax, eax
cmp edx, 0x10000
setae bl
and ebx, 1
test bl, bl
je 0x456de9
shr edx, 0x10
add eax, 0x10
cmp edx, 0x100
setae bl
and ebx, 1
test bl, bl
je 0x456dff
shr edx, 8
add eax, 8
cmp edx, 0x100
jae 0x456e22
lea ecx, [0x7334b6]
movzx ecx, byte [ecx + edx]
add eax, ecx
mov dword [esp + 0x10], eax
sar eax, 0x1f
mov dword [esp + 0x14], eax
add esp, 8
ret
mov eax, edx
mov ecx, 0x100
call fcn.004718c0
lea eax, [0x72bb83]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00456da0
Function at 0x45b150
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45b256
sub esp, 8
movzx eax, byte [0x920c30]
test al, al
jne 0x45b23f
nop
nop
lea eax, [0x920ab4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004658d0
nop
nop
lea eax, [0x920ab8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004658d0
mov eax, dword [0x920aa8]
mov dword [esp], eax
call fcn.004474a0
mov eax, dword [0x920aac]
mov dword [esp], eax
call fcn.004474a0
mov eax, dword [0x920abc]
mov dword [esp], eax
call fcn.004567a0
mov eax, dword [0x920ac0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00405d80
mov eax, dword [0x93f150]
test eax, eax
je 0x45b20f
mov eax, dword [0x920ac0]
call fcn.00471850
mov dword [edi], eax
mov eax, dword [0x920aa8]
mov dword [edi + 4], eax
mov eax, dword [0x920aac]
mov dword [edi + 8], eax
mov dword [0x920ac0], 0
mov dword [0x920aa8], 0
mov dword [0x920aac], 0
mov eax, dword [0x920abc]
mov dword [esp], eax
call fcn.00456800
add esp, 8
ret
lea eax, [0x72c6bb]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045b150
Function at 0x45c540
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45c742
sub esp, 0x24
mov eax, dword [esp + 0x2c]
add eax, 7
and eax, 0xfffffff8
nop
cmp eax, 0xfff8
ja 0x45c72b
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x28]
test byte [eax], al
lea ecx, [eax + 4]
mov dword [esp], ecx
call fcn.00476200
movzx eax, byte [esp + 4]
test al, al
jne 0x45c715
mov eax, dword [esp + 0x28]
lea ecx, [eax + 8]
mov dword [esp + 0x20], ecx
nop
mov dword [esp], ecx
call fcn.004762f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45c5ef
mov dword [esp + 0x14], eax
lea ecx, [eax + 4]
nop
mov dword [esp], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 4], ecx
call fcn.004763c0
mov eax, dword [esp + 8]
cmp eax, 0xfff8
ja 0x45c5ef
mov edx, dword [esp + 0xc]
sub eax, edx
cmp eax, 0xfff8
jae 0x45c70b
mov ecx, dword [esp + 0x14]
lea eax, [eax + ecx + 8]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.0040a2c0
nop
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004762f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45c649
mov dword [esp + 0x1c], eax
lea ecx, [eax + 4]
nop
mov dword [esp], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 4], ecx
call fcn.004763c0
mov eax, dword [esp + 8]
cmp eax, 0xfff8
jbe 0x45c6b9
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + 0xc]
mov edx, dword [esp + 0x1c]
mov dword [edx], ecx
mov dword [eax + 0xc], edx
mov dword [esp], 0x10000
lea eax, [0x944058]
mov dword [esp + 4], eax
call fcn.00411c00
mov eax, dword [esp + 8]
test eax, eax
je 0x45c6f5
mov dword [esp + 0x1c], eax
lea ecx, [eax + 8]
mov dword [esp + 0x18], ecx
lea edx, [eax + 4]
nop
mov dword [esp], edx
mov edx, dword [esp + 0xc]
mov dword [esp + 4], edx
call fcn.004763b0
nop
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 4], eax
call fcn.004658d0
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.0040a4e0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov ecx, dword [esp + 0xc]
sub eax, ecx
mov dword [esp + 0x10], eax
nop
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
call fcn.0040a4e0
mov eax, dword [esp + 0x10]
cmp eax, 0xfff8
jae 0x45c6eb
mov ecx, dword [esp + 0x1c]
lea eax, [eax + ecx + 8]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov ecx, 0xfff8
call fcn.004718c0
lea eax, [0x724ae6]
mov dword [esp], eax
mov dword [esp + 4], 0x1a
call fcn.0046ad70
mov ecx, 0xfff8
call fcn.004718c0
lea eax, [0x72b3ee]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.0046ad70
lea eax, [0x725df8]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045c540
Function at 0x45f5c0
Capabilities:
Reference sql statements
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45f7ca
sub esp, 0x68
movzx eax, byte [esp + 0x88]
test al, al
je 0x45f77a
mov ecx, dword [esp + 0x8c]
test ecx, ecx
sete dl
mov ebx, dword [esp + 0x90]
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
and ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x45f68a
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x80]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x84]
mov dword [esp + 0x34], ebx
movzx eax, al
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0x19
lea eax, [esp + 0x28]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 3
mov dword [esp + 0x18], 3
call fcn.0045be80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
jmp 0x45f70c
mov edx, dword [esp + 0x78]
mov dword [esp + 0x48], edx
mov ebp, dword [esp + 0x7c]
mov dword [esp + 0x4c], ebp
mov esi, dword [esp + 0x80]
mov dword [esp + 0x50], esi
mov esi, dword [esp + 0x84]
mov dword [esp + 0x54], esi
movzx eax, al
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ebx
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0x30
lea eax, [esp + 0x48]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 4
call fcn.0045be80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
movzx ebx, byte [esp + 0x89]
test bl, bl
je 0x45f761
mov ebx, dword [esp + 0x78]
mov dword [esp + 0x40], ebx
mov ebx, dword [esp + 0x7c]
mov dword [esp + 0x44], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0x22
lea eax, [esp + 0x40]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.0045be80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], ecx
mov dword [esp + 0x9c], edx
add esp, 0x68
ret
call fcn.00437f30
lea eax, [0x71e3a1]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00438790
mov eax, dword [esp + 0x78]
mov dword [esp], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72dffb]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045f5c0
Function at 0x45f7e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45f946
sub esp, 0x24
mov eax, dword [esp + 0x34]
test byte [eax], al
lea ecx, [eax + 0x910]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.0045fb90
movzx eax, byte [esp + 8]
test al, al
je 0x45f913
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 4]
cmp ecx, 1
ja 0x45f888
test ecx, ecx
je 0x45f8a1
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 0x58]
cmp eax, edx
jne 0x45f881
mov edx, dword [ecx + 0x50]
test edx, edx
jne 0x45f849
mov edx, 1
jmp 0x45f8c1
lea eax, [edx + 0x4c]
nop
mov dword [esp], eax
call fcn.004762e0
mov eax, dword [esp + 4]
and eax, 0xffffefff
cmp eax, 3
jne 0x45f872
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
mov edx, 3
jmp 0x45f8c1
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
mov edx, 1
jmp 0x45f8c1
mov edx, 1
jmp 0x45f8c1
cmp ecx, 2
jne 0x45f898
mov ecx, dword [esp + 0x28]
mov edx, 3
jmp 0x45f8c1
cmp ecx, 3
jne 0x45f92f
cmp ecx, 3
jne 0x45f8b6
movzx ecx, byte [esp + 0x38]
test cl, cl
je 0x45f8b6
mov ecx, 1
jmp 0x45f8bb
mov ecx, 2
mov edx, ecx
mov ecx, dword [esp + 0x28]
mov ebx, dword [eax]
mov ebp, ebx
sar ebx, 0x1f
movzx eax, byte [eax + 0x935]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ebx
mov byte [esp + 0x14], dl
mov byte [esp + 0x15], al
call fcn.0045f950
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edx
add esp, 0x24
ret
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], eax
add esp, 0x24
ret
lea eax, [0x72e46b]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045f7e0
Function at 0x45f950
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45faa2
sub esp, 0x40
movzx eax, byte [esp + 0x58]
test al, al
je 0x45fa52
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x2c], edx
movzx eax, al
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 8], eax
mov byte [esp + 0xc], 0xd
lea eax, [esp + 0x28]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x18], 2
call fcn.0045be80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
movzx ebx, byte [esp + 0x59]
test bl, bl
je 0x45fa42
mov ebx, dword [esp + 0x50]
mov dword [esp + 0x38], ebx
mov ebx, dword [esp + 0x54]
mov dword [esp + 0x3c], ebx
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov byte [esp + 0xc], 0x1f
lea eax, [esp + 0x38]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], 1
call fcn.0045be80
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], edx
add esp, 0x40
ret
call fcn.00437f30
lea eax, [0x71dc8d]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438790
mov eax, dword [esp + 0x50]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72c6e5]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045f950

Function at 0x45fab0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45fb82
sub esp, 8
mov edx, dword [esp + 0xc]
mov ebx, edx
and edx, 0xffffefff
cmp edx, 3
ja 0x45faf5
cmp edx, 1
jne 0x45fae4
mov eax, 1
jmp 0x45fb3e
cmp edx, 2
je 0x45fb06
cmp edx, 3
jne 0x45fb50
mov eax, 3
jmp 0x45fb3e
cmp edx, 6
ja 0x45fb01
cmp edx, 4
je 0x45fb12
jmp 0x45fb66
cmp edx, 8
jne 0x45fb0d
mov eax, 2
jmp 0x45fb3e
cmp edx, 9
jne 0x45fb50
cmp ebx, 4
jne 0x45fb39
movzx edx, byte [esp + 0x10]
movzx eax, dl
cmp eax, 0x25
jae 0x45fb46
lea ecx, [0x8ee300]
movzx eax, byte [ecx + eax]
test al, al
je 0x45fb39
mov eax, 2
jmp 0x45fb3e
mov eax, 4
mov byte [esp + 0x14], al
add esp, 8
ret
mov ecx, 0x25
call fcn.004718b0
lea eax, [0x73087c]
mov dword [esp], eax
mov dword [esp + 4], 0x3b
call fcn.0046ad70
cmp edx, 6
jne 0x45fb50
lea eax, [0x7267b0]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0045fab0
Function at 0x460a50
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x460c4a
sub esp, 0x24
mov eax, dword [esp + 0x2c]
cmp eax, 0xffffffff
je 0x460a7c
mov ecx, dword [esp + 0x28]
lea edx, [0x8efde0]
jmp 0x460a90
lea eax, [0x40a0c0]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov edx, dword [edx + 0x120]
test edx, edx
je 0x460aa6
cmp dword [edx + 0x94], ecx
ja 0x460a8a
cmp dword [edx + 0x98], ecx
jbe 0x460a8a
jmp 0x460aa8
xor edx, edx
test edx, edx
jne 0x460b8e
mov dword [esp + 0x14], ecx
nop
nop
nop
lea eax, [0x91f140]
mov dword [esp], eax
call fcn.0040a2c0
mov eax, dword [0x91f148]
lea ecx, [0x6de2c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
call fcn.0040d210
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x20], eax
nop
nop
nop
lea ecx, [0x91f140]
mov dword [esp], ecx
call fcn.0040a4e0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x460b86
call fcn.00437f30
lea eax, [0x71f98c]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00438790
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00438620
lea eax, [0x71b98e]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00438790
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71f1e6]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00438790
call fcn.00437f90
lea eax, [0x8efde0]
jmp 0x460c2b
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00452360
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov dword [esp + 0x10], eax
mov ecx, dword [eax + 0x94]
mov dword [esp + 0x1c], ecx
mov edx, dword [eax + 0x98]
mov dword [esp + 0x18], edx
call fcn.00437f30
lea eax, [0x71bc84]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00438790
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71c01f]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
call fcn.00438130
call fcn.00437f90
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x120]
test eax, eax
jne 0x460ba6
lea eax, [0x72da59]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00460a50
Function at 0x465a30
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x34
mov eax, dword [esp + 0x38]
test eax, eax
je 0x465b30
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x28], eax
mov ecx, dword [eax + 0x98]
mov edx, dword [eax + 0x9c]
lea ebx, [eax + 0x1d0]
mov dword [esp + 0x30], ebx
lea ebp, [eax + 0x318]
mov dword [esp + 0x2c], ebp
add ecx, 1
mov dword [eax + 0x98], ecx
adc edx, 0
mov dword [eax + 0x9c], edx
mov ecx, dword [eax + 0xa8]
mov dword [ecx], 0
call fcn.0046b090
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00434920
mov eax, dword [esp + 0x28]
mov byte [eax + 0x8c], 1
inc dword [eax + 0xa0]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 4], edx
call fcn.004714c0
mov eax, dword [esp + 8]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x28]
mov byte [ecx + 0x8c], 0
dec dword [ecx + 0xa0]
nop
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov dword [esp + 4], 0
call fcn.00476530
lea edi, [esp + 0xc]
mov esi, dword [esp + 0x30]
call fcn.00471fa4
call fcn.0046b210
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
test byte [eax], al
lea edi, [eax + 0x1d0]
lea esi, [esp + 0xc]
call fcn.00471fa4
mov eax, dword [esp + 0x24]
mov dword [esp + 0x40], eax
add esp, 0x34
ret
lea eax, [0x71cd51]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0046ad70
nop
int3
Function at 0x469800
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x469988
sub esp, 0x28
nop
lea eax, [0x8ed35c]
mov dword [esp], eax
mov byte [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov byte [esp + 0x10], 0x12
call fcn.0044aec0
call fcn.004122d0
mov eax, dword [0x91eb64]
lea ecx, [0x6de380]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x30]
mov dword [esp + 0xc], edx
call fcn.00468cf0
mov eax, dword [esp + 0x10]
movzx ecx, byte [esp + 0x14]
mov edx, dword [eax]
mov eax, dword [eax + 4]
test cl, cl
je 0x469945
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
lea eax, [0x6e5e00]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [esp + 4]
lea ecx, [0x475110]
mov dword [eax], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4698b5
mov ecx, dword [esp + 0x34]
jmp 0x4698c0
call fcn.00471830
mov ecx, dword [esp + 0x34]
mov dword [edi], ecx
mov dword [esp + 0x24], eax
mov dword [eax + 4], ecx
mov ecx, dword [0x91eb64]
lea edx, [0x6de380]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0xc], ecx
call fcn.00469050
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x469910
mov ecx, dword [esp + 0x24]
jmp 0x469921
call fcn.00471840
mov ecx, dword [esp + 0x24]
mov dword [edi], ecx
mov edx, dword [eax + 8]
mov dword [edi + 4], edx
mov dword [eax + 8], ecx
nop
nop
lea eax, [0x8ed35c]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.0044b220
add esp, 0x28
ret
mov dword [esp], 0
lea eax, [0x72cfa2]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x2c
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
call fcn.00450670
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00469800
Function at 0x46a050
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46a106
sub esp, 8
mov eax, dword [esp + 0xc]
movzx ecx, byte [eax + 0x1c]
test cl, cl
je 0x46a0ef
lea ecx, [eax + 0x14]
nop
mov dword [esp], ecx
call fcn.00476370
mov eax, dword [esp + 4]
test eax, eax
je 0x46a08c
cmp eax, 1
jne 0x46a0d9
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x10]
nop
mov dword [esp], ecx
call fcn.00476370
mov eax, dword [esp + 4]
test eax, eax
je 0x46a0a9
cmp eax, 1
jne 0x46a0c3
lea eax, [0x93eeb8]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.00430f10
add esp, 8
ret
lea eax, [0x72c10d]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.0046ad70
lea eax, [0x72c5e9]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.0046ad70
lea eax, [0x729559]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0046a050