joyce8/EMBER2024-capa huggingface dataset:
Function at 0x43e1e0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73bd53
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x410
push esi
push edi
push 0x79a178
lea eax, [ebp - 0x41c]
push str.SELECT__FROM__s_WHERE_del_flag0_ORDER_BY_amount_DESC
mov dword [ebp - 0x14], ecx
push eax
xor esi, esi
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0xc
lea eax, [ebp - 0x41c]
mov edx, dword [ecx]
push 1
push eax
call dword [edx]
mov edi, eax
mov dword [ebp - 0x18], edi
cmp edi, esi
mov dword [ebp - 4], esi
je 0x43e302
push ebx
mov dword [ebp - 0x10], esi
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x60]
cmp dword [ebp - 0x10], eax
jae 0x43e2fe
mov eax, dword [ebp - 0x14]
push 0xc8
mov ebx, dword [eax + 0x10]
call fcn.0048f430
add esp, 4
mov dword [ebp - 0x1c], eax
test eax, eax
mov byte [ebp - 4], 1
je 0x43e27e
mov ecx, eax
call fcn.0048f4a0
mov esi, eax
jmp 0x43e280
xor esi, esi
test esi, esi
mov byte [ebp - 4], 0
je 0x43e2b3
push edi
mov ecx, esi
mov dword [esi + 0x2c], ebx
call fcn.00490310
test al, al
je 0x43e2e4
mov ecx, dword [ebp - 0x14]
push esi
mov ecx, dword [ecx + 4]
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [ebp - 0x10]
mov edx, dword [edi]
inc eax
mov ecx, edi
mov dword [ebp - 0x10], eax
call dword [edx + 0x64]
jmp 0x43e245
push 0x4c
push 0x79baa0
push str.pSyn
push str.IF_OK
push 0x793720
call fcn.00401080
mov eax, dword [ebp - 0x10]
mov edx, dword [edi]
add esp, 0x14
inc eax
mov ecx, edi
mov dword [ebp - 0x10], eax
call dword [edx + 0x64]
jmp 0x43e245
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [ebp - 0x10]
mov edx, dword [edi]
inc eax
mov ecx, edi
mov dword [ebp - 0x10], eax
call dword [edx + 0x64]
jmp 0x43e245
mov esi, dword [ebp - 0x10]
pop ebx
push esi
push str.Load__d_syndicates.
call fcn.00402c60
add esp, 8
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x43e322
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov al, 1
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x4663f0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73d0b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x61c
push ebx
push esi
push edi
mov ebx, ecx
mov dword [ebp - 0x10], esp
mov esi, 0x32
push esi
mov ecx, ebx
call fcn.0059ab20
test al, al
jne 0x466512
inc esi
cmp esi, 0x37
jl 0x46641b
mov dl, byte [0x7e5328]
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x127]
mov byte [ebp - 0x128], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [ebx + 0x5e4]
push eax
push str.cq_bonus
lea eax, [ebp - 0x128]
push str.SELECT__FROM__s_WHERE_id_account_u_and_flag0_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x128]
mov edx, dword [ecx]
push 1
push eax
call dword [edx]
mov esi, eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
test esi, esi
mov dword [ebp - 4], 0
je 0x46666f
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x60]
test eax, eax
jbe 0x46666f
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x44]
mov edx, dword [esi]
push 0
mov ecx, esi
mov dword [ebp - 0x14], eax
call dword [edx + 0x44]
mov ecx, dword [0x7fd5f8]
push 0
push 0
push 0
mov edi, eax
push 0
push ebx
push edi
mov byte [ebp - 4], 1
call fcn.004b2e90
test al, al
jne 0x46653a
mov ecx, dword [ebx + 8]
lea eax, [ebx + 8]
push 0x7a0a08
push eax
call dword [ecx + 0x1b4]
mov edx, dword [esi]
add esp, 8
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [edx + 4]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 8]
lea eax, [ebx + 8]
push 0x7a0a08
push eax
call dword [ecx + 0x1b4]
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x5e4]
mov edx, dword [ebx]
mov ecx, ebx
mov dword [ebp - 0x18], eax
call dword [edx + 4]
push edi
push eax
mov eax, dword [ebp - 0x18]
push eax
push str.Bonus:_AccountID__u___Player__u__take_bonus__u_.
push str.gmlog_bonus
call fcn.0040a4e0
mov cl, byte [0x7e5328]
xor eax, eax
mov byte [ebp - 0x228], cl
mov ecx, 0x3f
lea edi, [ebp - 0x227]
mov edx, dword [ebp - 0x14]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
add esp, 0x14
stosb byte es:[edi], al
push edx
push str.cq_bonus
lea eax, [ebp - 0x228]
push str.UPDATE__s_SET_flag1_WHERE_id_u_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x228]
mov edx, dword [ecx]
push 0
push eax
call dword [edx + 8]
test al, al
jne 0x4665d6
push 0x2e64
push 0x79ce20
push str.g_db.ExecuteSQL_szSQL_
push str.ASSERT
push 0x793720
call fcn.00401080
add esp, 0x14
mov edx, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [edx + 4]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
mov dword [ebp - 4], 0xffffffff
je 0x466681
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x467d90
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73d1f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x404
push esi
mov esi, ecx
push edi
mov eax, dword [esi]
call dword [eax + 0x1c]
push eax
push 0x79a1ac
lea ecx, [ebp - 0x410]
push str.SELECT_home_id_FROM__s_WHERE_name_s_LIMIT_1
push ecx
call fcn.0070258b
mov esi, dword [esi + 0x14]
add esp, 0x10
cmp esi, 4
jb 0x467dfd
mov eax, dword [0x7fd4fc]
mov edi, dword [0x7fd4f8]
sub eax, edi
mov ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp esi, edx
jb 0x467e22
push 0x157
push 0x797a90
push str.CMapGroup::IsValidMapGroupProcessID_idProcess_
push str.CHECKF
push 0x793720
call fcn.00401080
add esp, 0x14
xor esi, esi
jmp 0x467e2a
lea esi, [esi + esi*4]
shl esi, 5
add esi, edi
mov eax, dword [esi + 0x24]
test eax, eax
jne 0x467e52
push 0xcb
push 0x797a90
push str.m_pDb
push str.ASSERT
push 0x793720
call fcn.00401080
add esp, 0x14
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x410]
push 1
push eax
mov edx, dword [ecx]
call dword [edx]
mov esi, eax
mov dword [ebp - 0x10], esi
test esi, esi
mov dword [ebp - 4], 0
je 0x467e9d
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x44]
mov edi, eax
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 4]
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
pop edi
xor eax, eax
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x46ff90
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73d658
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x404
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx]
call dword [eax + 4]
push eax
push 0x79a1ac
lea ecx, [ebp - 0x410]
push str.SELECT_god_status_FROM__s_WHERE_id___u
push ecx
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x410]
mov edx, dword [ecx]
push 1
push eax
call dword [edx]
mov esi, eax
mov dword [ebp - 0x10], esi
test esi, esi
mov dword [ebp - 4], 0
jne 0x47002b
push 0x3c3d
push 0x79ce20
push str.pRes
push str.CHECKF
push 0x793720
call fcn.00401080
add esp, 0x14
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x44]
mov edi, eax
mov eax, 0x55e63b89
mul edi
mov ecx, edx
mov eax, edi
xor edx, edx
mov edi, 0x5f5e100
div edi
shr ecx, 0x19
cmp ecx, 1
mov edi, edx
je 0x47007b
test ecx, ecx
je 0x47007b
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 4]
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
push 0
push 2
call fcn.0040ab00
mov ecx, eax
mov eax, 0x51eb851f
mul ecx
shr edx, 5
add esp, 8
cmp edi, edx
ja 0x47009e
mov eax, dword [ebp + 8]
push eax
push edx
jmp 0x4700a3
mov ecx, dword [ebp + 8]
push ecx
push edi
call fcn.0040b2a0
add esp, 8
test eax, eax
je 0x4700be
add eax, 0x5f5e100
push 1
push eax
mov ecx, ebx
call fcn.0046fe30
mov edx, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov al, 1
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x471df0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73d758
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x400
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, ecx
test eax, eax
je 0x471f16
mov ebx, dword [ebp + 0xc]
push edi
push eax
mov dword [ebx], 0
mov eax, dword [esi]
call dword [eax + 4]
push eax
push str.cq_special_status
lea ecx, [ebp - 0x40c]
push str.SELECT_finish_time_FROM__s_WHERE_user_id_u__status_id_d
push ecx
call fcn.0070258b
mov ecx, dword [esi + 0x14]
add esp, 0x14
cmp ecx, 4
jb 0x471e73
mov eax, dword [0x7fd4fc]
mov edi, dword [0x7fd4f8]
sub eax, edi
mov edx, eax
mov eax, 0x66666667
imul edx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp ecx, edx
jb 0x471e98
push 0x157
push 0x797a90
push str.CMapGroup::IsValidMapGroupProcessID_idProcess_
push str.CHECKF
push 0x793720
call fcn.00401080
add esp, 0x14
xor esi, esi
jmp 0x471ea0
lea esi, [ecx + ecx*4]
shl esi, 5
add esi, edi
mov eax, dword [esi + 0x24]
pop edi
test eax, eax
jne 0x471ec9
push 0xcb
push 0x797a90
push str.m_pDb
push str.ASSERT
push 0x793720
call fcn.00401080
add esp, 0x14
mov ecx, dword [esi + 0x24]
lea eax, [ebp - 0x40c]
push 1
push eax
mov edx, dword [ecx]
call dword [edx]
mov esi, eax
mov dword [ebp + 8], esi
test esi, esi
mov dword [ebp - 4], 0
je 0x471f16
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x44]
mov dword [ebx], eax
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 4]
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 0xc]
pop esi
xor al, al
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
Function at 0x483010
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73df83
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x14], esi
call fcn.0056c620
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
push 0x18
mov byte [ebp - 4], 1
mov dword [esi + 0x54], ebx
call fcn.004055b0
mov cl, byte [ebp - 0xd]
mov dword [esi + 0x54], eax
mov dword [esi + 0x58], ebx
mov byte [esi + 0x5c], cl
mov byte [eax], bl
mov edx, dword [esi + 0x54]
mov ecx, dword [ebp - 0xc]
add esp, 4
mov dword [edx + 4], ebx
mov eax, dword [esi + 0x54]
mov dword [eax + 8], eax
mov eax, dword [esi + 0x54]
mov dword [eax + 0xc], eax
or eax, 0xffffffff
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x50], eax
mov dword [esi + 8], eax
mov dword [esi + 0x48], ebx
mov dword [esi], 0x753194
mov dword [esi + 4], 0x100008
mov dword [esi + 0x34], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x4c], ebx
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x48f4a0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73e47b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call fcn.0056c620
xor ebx, ebx
mov dword [esi + 8], 0x753378
mov dword [ebp - 4], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
lea edi, [esi + 0x38]
lea eax, [ebp - 0xd]
push eax
mov ecx, edi
mov byte [ebp - 4], 2
mov dword [esi + 0x30], 0x753354
mov dword [ebp - 0x14], edi
call fcn.0049d2a0
lea ecx, [edi + 0xc]
mov byte [ebp - 4], 3
call fcn.0049c5d0
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 4
call fcn.0049c820
lea ecx, [ebp - 0xe]
lea edi, [esi + 0x70]
push ecx
mov ecx, edi
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], edi
call fcn.0049d800
mov dl, byte [ebp - 0xe]
mov ecx, edi
mov byte [ebp - 4], 6
mov dword [edi + 4], ebx
mov byte [edi + 8], dl
call fcn.0049d7e0
lea edi, [esi + 0x80]
mov ecx, 0xc
xor eax, eax
mov byte [ebp - 4], 7
rep stosd dword es:[edi], eax
lea edi, [esi + 0xb0]
lea eax, [ebp - 0xd]
push eax
mov ecx, edi
mov dword [ebp - 0x14], edi
call fcn.0049d840
mov cl, byte [ebp - 0xe]
mov byte [ebp - 4], 8
mov byte [edi + 8], cl
mov ecx, edi
mov dword [edi + 4], ebx
call fcn.0049d820
lea edi, [esi + 0xbc]
lea edx, [ebp - 0xe]
push edx
mov ecx, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], edi
call fcn.0049d880
mov al, byte [ebp - 0xe]
mov byte [ebp - 4], 0xa
mov dword [edi + 4], ebx
mov byte [edi + 8], al
mov ecx, edi
call fcn.0049d860
mov dword [esi], 0x75333c
mov dword [esi + 8], 0x753318
mov dword [esi + 4], 0x100100
mov dword [esi + 0xc], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x34], esi
mov eax, dword [esi + 0x10]
mov byte [ebp - 4], 0xb
cmp eax, ebx
jne 0x48f5d6
cmp esi, ebx
jne 0x48f5f4
push 0x23
push str.....commonAutoLink.h
push str._IsValid____pOwner
push str.ASSERT
push 0x793720
call fcn.00401080
add esp, 0x14
lea eax, [esi + 0x80]
mov dword [esi + 0x10], esi
mov dword [esi + 0x68], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x7c], ebx
mov word [esi + 0x6c], bx
xor edi, edi
mov dword [ebp - 0x14], eax
cmp edi, ebx
jl 0x48f618
cmp edi, 0xc
jl 0x48f636
push 0x1f
push str.....commonMyArray.h
push str.nPos_0__nPos_SIZE
push str.IF_NOT
push 0x793720
call fcn.00401080
add esp, 0x14
mov eax, dword [ebp - 0x14]
inc edi
mov dword [eax], ebx
add eax, 4
cmp edi, 0xb
mov dword [ebp - 0x14], eax
jl 0x48f60f
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
Function at 0x4dadf0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x740873
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x960
push ebx
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 8]
push eax
mov edx, dword [edi + 8]
lea ecx, [edi + 8]
mov dword [ebp - 0x10], ecx
call dword [edx + 8]
push eax
push str.cq_leaveword
lea eax, [ebp - 0x540]
push str.SELECT__FROM__s_WHERE_user_name_s_ORDER_BY_id_LIMIT__d
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x14
lea eax, [ebp - 0x540]
mov edx, dword [ecx]
push 1
push eax
call dword [edx]
mov esi, eax
mov dword [ebp + 0xc], esi
xor ebx, ebx
cmp esi, ebx
mov dword [ebp - 4], ebx
jne 0x4dae7a
mov byte [edi + 0x12c], bl
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
mov dword [ebp + 8], ebx
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x60]
cmp dword [ebp + 8], eax
jae 0x4daf9b
mov eax, dword [esi]
push 0x10
push 2
mov ecx, esi
call dword [eax + 0x48]
lea ecx, [ebp - 0x20]
push eax
push ecx
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x10
push 1
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x10
push 3
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x100
push 4
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 5
call dword [edx + 0x44]
lea ecx, [ebp - 0x96c]
mov edi, eax
call fcn.005c28a0
push edi
push ebx
push 0x83e
lea eax, [ebp - 0x40]
push ebx
lea ecx, [ebp - 0x140]
push eax
lea edx, [ebp - 0x30]
push ecx
lea eax, [ebp - 0x20]
push edx
push eax
lea ecx, [ebp - 0x96c]
mov byte [ebp - 4], 1
call fcn.005c29b0
test eax, eax
je 0x4daf49
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x96c]
push eax
mov edx, dword [ecx]
call dword [edx + 0x1b0]
mov edx, dword [esi]
push ebx
mov ecx, esi
call dword [edx + 0x44]
push eax
push str.cq_leaveword
lea eax, [ebp - 0x540]
push str.DELETE_FROM__s_WHERE_id_u_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x540]
mov edx, dword [ecx]
push ebx
push eax
call dword [edx + 8]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x64]
lea ecx, [ebp - 0x96c]
mov byte [ebp - 4], bl
call fcn.005c2950
inc dword [ebp + 8]
jmp 0x4dae7d
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov al, 1
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
Function at 0x4dafc0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x74088b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x964
push esi
mov esi, ecx
call fcn.007028fe
mov ecx, eax
mov eax, 0x10624dd3
imul ecx
mov ecx, dword [esi + 0xc]
sar edx, 6
mov eax, edx
add ecx, 0x3c
shr eax, 0x1f
add edx, eax
cmp edx, ecx
setge al
test al, al
je 0x4db1e3
call fcn.007028fe
mov ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
push 5
shr eax, 0x1f
add edx, eax
mov dword [esi + 0xc], edx
mov ecx, dword [esi + 4]
push ecx
push str.cq_leaveword
lea edx, [ebp - 0x544]
push str.SELECT__FROM__s_WHERE_id__u_ORDER_BY_id_LIMIT__d
push edx
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x14
lea edx, [ebp - 0x544]
mov eax, dword [ecx]
push 1
push edx
call dword [eax]
mov esi, eax
test esi, esi
je 0x4db1e3
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 0x10], 0
call dword [eax + 0x60]
test eax, eax
jbe 0x4db1dc
push ebx
push edi
mov edx, dword [esi]
push 0x10
push 1
mov ecx, esi
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0040cc10
mov ecx, dword [0x7fd5e4]
add esp, 0xc
lea eax, [ebp - 0x34]
mov edx, dword [ecx]
push eax
call dword [edx + 0x50]
mov ebx, eax
test ebx, ebx
je 0x4db1bd
mov al, byte [ebx + 0x12c]
test al, al
jne 0x4db1bd
mov edx, dword [esi]
push 0x10
push 2
mov ecx, esi
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x10
push 3
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x100
push 4
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x144]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 5
call dword [edx + 0x44]
lea ecx, [ebp - 0x970]
mov dword [ebp - 0x14], eax
call fcn.005c28a0
mov eax, dword [ebp - 0x14]
lea edi, [ebx + 8]
push eax
push 0
mov eax, dword [edi]
push 0x83e
lea ecx, [ebp - 0x24]
push 0
lea edx, [ebp - 0x144]
push ecx
push edx
mov ecx, edi
mov dword [ebp - 4], 0
call dword [eax + 8]
lea ecx, [ebp - 0x44]
push eax
push ecx
lea ecx, [ebp - 0x970]
call fcn.005c29b0
test eax, eax
je 0x4db16d
mov edx, dword [edi]
lea eax, [ebp - 0x970]
push eax
mov ecx, edi
call dword [edx + 0x1b0]
mov byte [ebx + 0x12c], 1
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x44]
push eax
push str.cq_leaveword
lea eax, [ebp - 0x544]
push str.DELETE_FROM__s_WHERE_id_u_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x544]
mov edx, dword [ecx]
push 0
push eax
call dword [edx + 8]
lea ecx, [ebp - 0x970]
mov dword [ebp - 4], 0xffffffff
call fcn.005c2950
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x64]
mov edi, dword [ebp - 0x10]
mov eax, dword [esi]
inc edi
mov ecx, esi
mov dword [ebp - 0x10], edi
call dword [eax + 0x60]
cmp edi, eax
jb 0x4db07b
pop edi
pop ebx
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
Function at 0x4db310
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7408b3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x950
mov ecx, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
cmp ecx, ebx
push edi
jne 0x4db36e
push 0x140
push 0x7a8f44
push str.pUser
push str.CHECK
push 0x793720
call fcn.00401080
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ecx]
push 3
lea edi, [ecx + 8]
call dword [eax + 4]
mov edx, dword [edi]
push eax
mov ecx, edi
call dword [edx + 8]
push eax
push str.cq_sys_leaveword
lea eax, [ebp - 0x530]
push str.SELECT__FROM__s_WHERE__user_name_s_OR_user_id_u__AND_type___d_ORDER_BY_id_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x18
lea eax, [ebp - 0x530]
mov edx, dword [ecx]
push 1
push eax
call dword [edx]
mov esi, eax
mov dword [ebp - 0x10], esi
cmp esi, ebx
mov dword [ebp - 4], ebx
je 0x4db502
mov dword [ebp + 8], ebx
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x60]
cmp dword [ebp + 8], eax
jae 0x4db4f4
mov eax, dword [esi]
push 0x10
push 4
mov ecx, esi
call dword [eax + 0x48]
lea ecx, [ebp - 0x20]
push eax
push ecx
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 5
call dword [edx + 0x44]
push eax
lea eax, [ebp - 0x30]
push 0x7961e4
push eax
call fcn.0070258b
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 0x100
push 6
call dword [edx + 0x48]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.0040cc10
mov edx, dword [esi]
add esp, 0xc
mov ecx, esi
push 1
call dword [edx + 0x44]
lea ecx, [ebp - 0x95c]
mov ebx, eax
call fcn.005c28a0
mov edx, dword [edi]
push ebx
push 0
push 0x844
lea eax, [ebp - 0x30]
push 0
lea ecx, [ebp - 0x130]
push eax
push ecx
mov ecx, edi
mov byte [ebp - 4], 1
call dword [edx + 8]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x95c]
call fcn.005c29b0
test eax, eax
jne 0x4db48e
push 0x159
push 0x7a8f44
push str.msg.Create_szSender__pUser__GetName____szWords__szTime__0___TXTATR_SYS_LEAVEWORD___TXT_NORMAL__nType_
push str.IF_OK
push 0x793720
call fcn.00401080
add esp, 0x14
jmp 0x4db49f
mov edx, dword [edi]
lea eax, [ebp - 0x95c]
push eax
mov ecx, edi
call dword [edx + 0x1b0]
mov edx, dword [esi]
push 0
mov ecx, esi
call dword [edx + 0x44]
push eax
push str.cq_sys_leaveword
lea eax, [ebp - 0x530]
push str.DELETE_FROM__s_WHERE_id_u_LIMIT_1
push eax
call fcn.0070258b
mov ecx, dword [0x7fd5f0]
add esp, 0x10
lea eax, [ebp - 0x530]
mov edx, dword [ecx]
push 0
push eax
call dword [edx + 8]
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x64]
lea ecx, [ebp - 0x95c]
mov byte [ebp - 4], 0
call fcn.005c2950
inc dword [ebp + 8]
jmp 0x4db3c0
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4