Function at 0x47b13b
Capabilities:
Reference sql statements

Disassembly:
push ebp
push ebx
mov edx, 0xa
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x47b142
call fcn.005b13d0
push dword [0x7c3570]
call fcn.005a9d3a
push dword [0x7c3570]
call fcn.005a9d4f
or eax, eax
je 0x47b19d
mov ebp, dword [0x7c3574]
mov ebx, dword [ebp + 8]
cmp ebx, dword [esp + 0x34]
jne 0x47b19b
push 1
push dword [0x7c3570]
call fcn.005aa3b1
mov ebp, dword [0x7c3574]
lea eax, [ebp + 8]
jmp 0x47b5c4
jmp 0x47b15f
mov dword [esp], 0
mov dword [esp + 4], 0
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1230
pop edx
push eax
mov edx, str.SELECT_type__previous_event__encoding__data_FROM_event_WHERE_event_id_
push edx
call fcn.005b1270
push edx
call fcn.005b1230
pop edx
push eax
push edx
call fcn.005b1230
pop edx
push eax
mov eax, dword [esp + 0x44]
cdq
push edx
push eax
call fcn.005adc10
pop eax
call fcn.005b1360
push 1
call fcn.0054d542
add dword [esp + 4], edx
call fcn.0059de4c
call fcn.0054d560
and eax, eax
je 0x47b541
push 1
call fcn.0059de5e
and eax, eax
je 0x47b537
push 0
push 1
call fcn.0059de86
mov dword [esp + 8], eax
push 1
push 1
call fcn.0059de86
mov dword [esp + 0xc], eax
push 2
push 1
call fcn.0059de86
mov dword [esp + 0x10], eax
push dword [esp + 8]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x47b27e
push 1
call fcn.0059dedf
mov eax, 0x7c2558
add esp, 4
jmp 0x47b5c4
mov ebx, 2
cmp ebx, dword [esp]
jne 0x47b2a8
push 1
call fcn.0059dedf
push dword [esp + 0x10]
call fcn.0047b13b
add esp, 4
jmp 0x47b5c4
mov ebx, 3
cmp ebx, dword [esp]
jne 0x47b346
push 3
push 1
call fcn.0059dfc5
mov dword [esp + 0x18], eax
push dword [esp + 0x18]
call fcn.005afb00
mov dword [esp + 0x1c], eax
push dword [esp + 0x18]
push dword [esp + 0x20]
push 3
push 1
call fcn.0059dff1
push 1
call fcn.0059dedf
mov eax, dword [esp + 0x1c]
call fcn.0054d4e0
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
inc ebx
push ebx
call fcn.005afb00
mov dword [esp + 4], eax
push dword [esp + 0x10]
call fcn.0047b13b
mov dword [esp + 0x20], eax
push dword [esp + 0x18]
push dword [esp + 0x20]
mov ebp, dword [esp + 0x28]
push dword [ebp + 8]
push dword [esp + 0x10]
call fcn.0042d5c7
push dword [esp + 0x1c]
call fcn.005afb20
jmp 0x47b534
mov ebx, 5
cmp ebx, dword [esp]
jne 0x47b428
push 3
push 1
call fcn.0059dfc5
mov dword [esp + 0x24], eax
push dword [esp + 0x24]
call fcn.005afb00
mov dword [esp + 0x28], eax
push dword [esp + 0x24]
push dword [esp + 0x2c]
push 3
push 1
call fcn.0059dff1
mov eax, dword [esp + 0x28]
call fcn.0054d4e0
mov dword [esp + 0x18], eax
push dword [esp + 0x18]
call fcn.005afb00
mov dword [esp + 0x1c], eax
mov ebx, dword [esp + 0x24]
add ebx, 0xfffffffc
push ebx
mov ebx, dword [esp + 0x2c]
add ebx, 4
push ebx
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x28]
call fcn.005b1f30
add esp, 0x10
push dword [esp + 0x28]
call fcn.005afb20
push 1
call fcn.0059dedf
mov eax, dword [esp + 0x1c]
call fcn.0054d4e0
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
inc ebx
push ebx
call fcn.005afb00
mov dword [esp + 4], eax
push dword [esp + 0x10]
call fcn.0047b13b
mov dword [esp + 0x20], eax
push dword [esp + 0x18]
push dword [esp + 0x20]
mov ebp, dword [esp + 0x28]
push dword [ebp + 8]
push dword [esp + 0x10]
call fcn.0042d5c7
push dword [esp + 0x1c]
call fcn.005afb20
jmp 0x47b534
mov ebx, 4
cmp ebx, dword [esp]
jne 0x47b47a
push 3
push 1
call fcn.0059dfc5
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
inc ebx
push ebx
call fcn.005afb00
mov dword [esp + 4], eax
push dword [esp + 8]
push dword [esp + 8]
push 3
push 1
call fcn.0059dff1
push 1
call fcn.0059dedf
jmp 0x47b534
mov ebx, 6
cmp ebx, dword [esp]
jne 0x47b511
push 3
push 1
call fcn.0059dfc5
mov dword [esp + 0x24], eax
push dword [esp + 0x24]
call fcn.005afb00
mov dword [esp + 0x28], eax
push dword [esp + 0x24]
push dword [esp + 0x2c]
push 3
push 1
call fcn.0059dff1
mov eax, dword [esp + 0x28]
call fcn.0054d4e0
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
inc ebx
push ebx
call fcn.005afb00
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x24]
add ebx, 0xfffffffc
push ebx
mov ebx, dword [esp + 0x2c]
add ebx, 4
push ebx
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x10]
call fcn.005b1f30
add esp, 0x10
push dword [esp + 0x28]
call fcn.005afb20
push 1
call fcn.0059dedf
jmp 0x47b534
push 0
mov eax, str.Unknown_data_type_in_session_history_database._r_nThis_database_seems_to_be_from_a_newer_SpiderBasic_version
push eax
mov eax, 0x72e4d2
push eax
call fcn.00442949
mov eax, 0x7c2558
add esp, 4
jmp 0x47b5c4
pop eax
jmp 0x47b541
push 1
call fcn.0059dedf
cmp dword [esp], 0
je 0x47b5bb
push dword [0x7c3570]
call fcn.005a9e97
mov ebx, eax
cmp ebx, 0x64
jl 0x47b57d
push dword [0x7c3570]
call fcn.005aa09a
mov ebp, dword [0x7c3574]
push dword [ebp + 0x10]
call fcn.005afb20
push dword [0x7c3570]
call fcn.005a9e11
push dword [0x7c3570]
call fcn.005aa073
push dword [0x7c3570]
call fcn.005aa0c5
push dword [esp + 0x34]
mov ebp, dword [0x7c3574]
pop dword [ebp + 8]
mov eax, dword [esp + 0x10]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 4]
mov dword [ebp + 0x14], eax
mov eax, dword [esp]
mov dword [ebp + 0x10], eax
lea eax, [ebp + 8]
jmp 0x47b5c4
mov eax, 0x7c2558
jmp 0x47b5c4
add esp, 0x28
pop ebx
pop ebp
ret 4