Function at 0x4344b0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x29c]
cmp eax, dword [ecx + 8]
jbe 0x434913
sub esp, 0x31c
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [esp + 0x320]
cmp dword [eax + 0x18], ecx
je 0x4348fc
test byte [ecx], al
lea eax, [ecx + 0x318]
mov dword [esp + 0x318], eax
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
je 0x434877
mov eax, dword [esp + 0x320]
lea ecx, [eax + 0x2fc]
mov dword [esp + 0x30c], ecx
nop
mov dword [esp], ecx
call fcn.0040a2c0
mov eax, dword [esp + 0x320]
mov ecx, dword [eax + 0x300]
test ecx, ecx
jne 0x4345a1
add eax, 0x1f0
mov dword [esp + 0x314], eax
nop
nop
mov ecx, dword [esp + 0x30c]
mov dword [esp], ecx
call fcn.0040a4e0
mov eax, dword [esp + 0x318]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00476530
nop
mov eax, dword [esp + 0x314]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00476460
add esp, 0x31c
ret
mov dword [esp + 0x300], 0
mov ecx, dword [sym.imp.kernel32.dll_DuplicateHandle]
mov edx, dword [eax + 0x300]
lea ebx, [esp + 0x300]
mov dword [esp], ecx
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 2
call fcn.00434220
mov eax, dword [esp + 0x20]
test eax, eax
je 0x43489b
nop
nop
mov eax, dword [esp + 0x30c]
mov dword [esp], eax
call fcn.0040a4e0
mov dword [esp + 0x25], 0
lea edi, [esp + 0x28]
mov ecx, 0xb6
xor eax, eax
rep stosd dword es:[edi], eax
lea eax, [esp + 0x34]
and eax, 0xfffffff0
mov dword [esp + 0x310], eax
mov dword [eax], 0x10001
nop
nop
lea ecx, [0x93edd0]
mov dword [esp], ecx
call fcn.0040a2c0
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_SuspendThread]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434040
cmp dword [esp + 8], 0xffffffff
je 0x434805
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_GetThreadContext]
mov edx, dword [esp + 0x310]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00434090
nop
nop
lea eax, [0x93edd0]
mov dword [esp], eax
call fcn.0040a4e0
mov eax, dword [esp + 0x320]
mov ecx, dword [eax]
mov edx, dword [esp + 0x310]
mov ebx, dword [edx + 0xc4]
test ecx, ecx
je 0x4346c8
cmp dword [ecx], ebx
jae 0x4346c8
cmp dword [ecx + 4], ebx
ja 0x4346ea
mov ecx, dword [eax + 0x30]
test ecx, ecx
je 0x4346d8
cmp dword [ecx], ebx
jae 0x4346d8
cmp dword [ecx + 4], ebx
ja 0x4346ea
mov ecx, dword [eax + 0x50]
test ecx, ecx
je 0x4346e8
cmp dword [ecx], ebx
jae 0x4346e8
cmp dword [ecx + 4], ebx
ja 0x4346ea
xor ecx, ecx
test ecx, ecx
jne 0x4346f2
xor ebx, ebx
jmp 0x43471d
mov dword [esp + 0x308], ecx
mov dword [esp], ecx
call fcn.00437a40
movzx eax, byte [esp + 4]
mov ecx, dword [esp + 0x308]
mov edx, dword [esp + 0x310]
mov ebx, eax
mov eax, dword [esp + 0x320]
test bl, bl
je 0x434798
mov eax, dword [edx + 0xb8]
mov ebx, dword [edx + 0xc4]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0
call fcn.00437ab0
movzx eax, byte [esp + 0x10]
test al, al
je 0x434798
mov eax, dword [esp + 0x14]
lea ecx, [0x472360]
mov edx, dword [esp + 0x310]
mov ebx, dword [edx + 0xc4]
add ebx, 0xfffffffc
mov ebp, ebx
nop
mov dword [ebx], eax
nop
mov dword [edx + 0xc4], ebp
nop
mov dword [edx + 0xb8], ecx
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_SetThreadContext]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00434090
mov eax, dword [esp + 0x318]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00476530
mov eax, dword [esp + 0x320]
add eax, 0x1f0
nop
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00476460
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_ResumeThread]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434040
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434040
add esp, 0x31c
ret
mov eax, dword [esp + 0x320]
add eax, 0x1f0
mov dword [esp + 0x314], eax
nop
nop
lea ecx, [0x93edd0]
mov dword [esp], ecx
call fcn.0040a4e0
mov eax, dword [esp + 0x300]
mov ecx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00434040
mov eax, dword [esp + 0x318]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00476530
nop
mov eax, dword [esp + 0x314]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00476460
add esp, 0x31c
ret
mov eax, dword [esp + 0x320]
add eax, 0x1f0
nop
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00476460
add esp, 0x31c
ret
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x304], eax
call fcn.00437f30
lea eax, [0x72e40b]
mov dword [esp], eax
mov dword [esp + 4], 0x30
call fcn.00438790
mov eax, dword [esp + 0x304]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x72babb]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046ad70
lea eax, [0x71d47d]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.004344b0