joyce8/EMBER2024-capa huggingface dataset:
Function at 0x414910
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4149f9
sub esp, 0x20
mov edx, dword [0x7d8c04]
mov dword [esp + 0x1c], edx
mov ebx, dword [0x7d8c08]
mov dword [esp + 0x18], ebx
xor eax, eax
jmp 0x414950
mov ebp, dword [esp + 0x14]
lea eax, [ebp + 1]
mov ebx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
cmp eax, ebx
jge 0x4149cb
mov ebp, dword [0x7d8bdc]
test byte [ebp], al
mov esi, dword [edx + eax*4]
cmp esi, 0x400
jae 0x4149ec
mov dword [esp + 0x14], eax
mov ecx, dword [ebp + esi*4]
test byte [ecx], al
mov ebp, dword [ecx + 0x218c0]
test ebp, ebp
je 0x414992
mov dword [esp], ebp
mov dword [esp + 4], 0x20000
call fcn.00464af0
jmp 0x414941
mov dword [esp + 0x10], ecx
mov dword [esp], 0x20000
mov dword [esp + 4], 0
lea eax, [0x7fb470]
mov dword [esp + 8], eax
call fcn.0040c530
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4149d6
mov edx, dword [esp + 0x10]
mov dword [edx + 0x218c0], eax
jmp 0x414941
mov byte [0x7f8ab2], 1
add esp, 0x20
ret
lea eax, [0x6286a6]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.00436e90
mov eax, esi
mov ecx, 0x400
call fcn.00464410
nop
call fcn.00462f70
jmp fcn.00414910
Function at 0x414a70
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x414c38
sub esp, 0x18
mov eax, dword [esp + 0x28]
movzx eax, byte [eax]
movzx ecx, byte [esp + 0x2c]
test al, cl
je 0x414b0c
mov eax, dword [0x7d8bdc]
test byte [eax], al
nop
mov ecx, dword [esp + 0x1c]
mov edx, ecx
shr ecx, 0x16
mov dword [esp + 0x10], ecx
mov eax, dword [eax + ecx*4]
test byte [eax], al
mov eax, dword [eax + 0x218c0]
test byte [eax], al
shr edx, 0x19
and edx, 0x1ffff
add eax, edx
mov dword [esp + 0x14], eax
mov dword [esp], eax
call fcn.00401f80
mov ecx, dword [esp + 0x10]
and ecx, 7
mov eax, 1
shl eax, cl
movzx ecx, byte [esp + 4]
test al, cl
je 0x414af3
mov byte [esp + 0x34], 1
add esp, 0x18
ret
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov byte [esp + 4], al
call fcn.00402630
mov byte [esp + 0x34], 0
add esp, 0x18
ret
call fcn.004388b0
call fcn.004388b0
lea eax, [0x62ade3]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00439030
call fcn.00438ad0
call fcn.00438920
call fcn.004388b0
lea eax, [0x62257a]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61a735]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61a767]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.004391b0
call fcn.00438920
lea eax, [0x61ab8e]
mov dword [esp], eax
mov dword [esp + 4], 4
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.0041e660
lea eax, [0x61a9ff]
mov dword [esp], eax
mov dword [esp + 4], 3
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xffffffff
call fcn.0041e660
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x9d], 2
lea eax, [0x62513b]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00414a70
Function at 0x4153a0
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4155c4
sub esp, 0x18
mov eax, dword [0x7f8b48]
test eax, eax
jne 0x4155ad
nop
lea eax, [0x7f8b34]
mov dword [esp], eax
call fcn.0040a140
mov eax, dword [0x7f8b38]
test eax, eax
je 0x4153e9
cmp dword [eax + 8], 0xcc
jne 0x41545f
mov edx, dword [0x7f8b2c]
test edx, edx
jne 0x415441
mov dword [esp], 0x1000
mov dword [esp + 4], 0
lea eax, [0x7fb470]
mov dword [esp + 8], eax
call fcn.0040c530
mov eax, dword [esp + 0xc]
mov dword [0x7f8b2c], eax
mov ecx, dword [0x7f8af0]
mov dword [eax], ecx
mov eax, dword [0x7f8b2c]
mov dword [0x7f8af0], eax
movzx eax, byte [0x7f90e0]
test al, al
jne 0x415441
xor eax, eax
jmp 0x415559
mov edx, dword [0x7f8b2c]
mov ebx, dword [edx + 4]
mov dword [0x7f8b2c], ebx
mov ebx, dword [0x7f8b38]
mov dword [edx + 4], ebx
mov dword [0x7f8b38], edx
mov edx, dword [0x7f8b38]
mov eax, dword [edx + 8]
cmp eax, 0xcc
jae 0x415541
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004024e0
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*4]
mov ecx, dword [esp + 0x14]
lea edi, [ecx + eax*4 + 0x10]
mov edx, dword [0x7f8db0]
lea ebx, [ecx + eax*4 + 0x1c]
lea ebp, [ecx + eax*4 + 0x20]
lea esi, [ecx + eax*4 + 0x14]
test edx, edx
jne 0x4154bd
mov edx, dword [esp + 0x20]
mov dword [ecx + eax*4 + 0x10], edx
jmp 0x4154ca
mov edx, eax
mov eax, dword [esp + 0x20]
call fcn.00464380
mov eax, edx
mov edx, dword [esp + 0x24]
mov dword [ecx + eax*4 + 0x18], edx
mov edx, dword [0x7f8db0]
test edx, edx
jne 0x4154f6
mov edx, dword [esp + 0x28]
mov dword [ecx + eax*4 + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov dword [ecx + eax*4 + 0x20], edx
mov edx, dword [esp + 0x1c]
mov dword [ecx + eax*4 + 0x14], edx
jmp 0x415517
mov edi, ebx
mov eax, dword [esp + 0x28]
call fcn.00464380
mov edi, ebp
mov eax, dword [esp + 0x2c]
call fcn.00464380
mov edi, esi
mov eax, dword [esp + 0x1c]
call fcn.00464380
nop
lea eax, [0x7f8b34]
mov dword [esp], eax
call fcn.0040a340
nop
lea eax, [0x7f8b30]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.00402660
add esp, 0x18
ret
mov ecx, 0xcc
call fcn.00464410
lea esi, [0x7f90e0]
xchg ebp, eax
mov byte [esi + ebx], al
xchg ebp, eax
lea eax, [ebx + 1]
cmp eax, 0x80
jge 0x415441
mov ecx, eax
mov eax, 0xcccccccd
imul ecx
add edx, ecx
sar edx, 2
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea edx, [edx + edx*4]
mov ebx, eax
sub eax, edx
cmp eax, 5
jae 0x4155a3
lea edx, [0x78d344]
movzx ebp, byte [edx + eax]
cmp ebx, 0x80
jb 0x41554b
mov eax, ebx
mov ecx, pe_nt_image_headers32
call fcn.00464400
mov ecx, 5
call fcn.00464400
lea eax, [0x6224a2]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.004153a0
Function at 0x416300
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x416405
sub esp, 0x18
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
test ecx, ecx
je 0x4163ce
mov ebx, dword [eax + 0xc]
test ebx, ebx
je 0x41635e
mov ecx, dword [ebx]
mov dword [eax + 0xc], ecx
mov ecx, dword [eax]
add dword [eax + 0x1c], ecx
movzx ecx, byte [eax + 0x24]
test cl, cl
je 0x416356
mov dword [esp + 0x10], ebx
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00464af0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x20], ebx
add esp, 0x18
ret
cmp dword [eax + 0x14], ecx
jae 0x416390
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], edx
call fcn.0040c530
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 0x10], eax
mov eax, dword [ecx + 0x18]
mov dword [ecx + 0x14], eax
mov eax, ecx
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
test edx, edx
je 0x4163b4
mov dword [esp + 0x14], ecx
mov ebx, dword [edx]
mov ebp, dword [eax + 8]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [eax]
add dword [eax + 0x10], edx
mov edx, dword [eax + 0x14]
sub edx, dword [eax]
mov dword [eax + 0x14], edx
mov edx, dword [eax]
add dword [eax + 0x1c], edx
mov dword [esp + 0x20], ecx
add esp, 0x18
ret
call fcn.004388b0
lea eax, [0x62a55f]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.004391b0
call fcn.00438920
lea eax, [0x621dc7]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00416300
Function at 0x4197f0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x4199d7
sub esp, 0xc
mov eax, dword [0x7f8b48]
test eax, eax
jne 0x4199c0
nop
lea eax, [0x7d8b00]
mov dword [esp], eax
call fcn.0040a140
add dword [0x7d8b98], 2
nop
nop
lea eax, [0x7d3ed4]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004025b0
nop
lea eax, [0x7d8bb0]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00402600
mov eax, dword [0x7d8c04]
mov ecx, dword [0x7d8c08]
mov edx, dword [0x7d8c0c]
mov dword [0x7d8c14], ecx
mov dword [0x7d8c18], edx
mov ecx, dword [0x7f8db0]
test ecx, ecx
jne 0x419894
mov dword [0x7d8c10], eax
jmp 0x41989f
lea edi, [0x7d8c10]
call fcn.00464380
nop
lea eax, [0x7d8bd0]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00402600
nop
lea eax, [0x7d8bd8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402430
nop
nop
lea eax, [0x7d8b00]
mov dword [esp], eax
call fcn.0040a340
lea eax, [0x7d3ed8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004025b0
mov eax, dword [esp + 0x10]
cmp eax, 2
jne 0x419931
nop
nop
lea eax, [0x7d8b00]
mov dword [esp], eax
call fcn.0040a140
xorps xmm0, xmm0
movsd qword [0x7d8bc8], xmm0
nop
nop
lea eax, [0x7d8b00]
mov dword [esp], eax
call fcn.0040a340
jmp 0x419987
nop
lea eax, [0x7d3ec0]
mov dword [esp], eax
call fcn.0040a140
movzx eax, byte [0x7d3ec8]
test al, al
je 0x41996d
mov byte [0x7d3ec8], 0
mov eax, dword [0x7d3ec4]
mov dword [esp], eax
mov dword [esp + 4], 0
mov byte [esp + 8], 1
call fcn.0043af20
nop
nop
lea eax, [0x7d3ec0]
mov dword [esp], eax
call fcn.0040a340
add esp, 0xc
ret
inc dword [0x7d3ed0]
call fcn.004244c0
cmp dword [esp], 0xffffffff
jne 0x419981
call fcn.00426500
mov byte [esp], 0
call fcn.00426610
movzx eax, byte [esp + 4]
test al, al
jne 0x419997
lea eax, [0x7f8b58]
mov dword [esp], eax
call fcn.0042db20
call fcn.0042e0c0
add esp, 0xc
ret
lea eax, [0x6281ca]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.00436e90
nop
call fcn.004618f0
jmp fcn.004197f0

Function at 0x41a0e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41a187
sub esp, 0x10
mov eax, dword [esp + 0x14]
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00402390
movzx eax, byte [esp + 0xc]
test al, al
je 0x41a170
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp byte [ecx + 0x20], al
je 0x41a15a
mov dword [esp], ecx
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 4], eax
call fcn.0041a350
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0x20], al
mov byte [ecx + 0x21], 1
add esp, 0x10
ret
lea eax, [0x629107]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00436e90
lea eax, [0x6296f6]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0041a0e0
Function at 0x41a1a0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41a29e
sub esp, 0x1c
mov eax, dword [esp + 0x20]
movzx ecx, byte [eax + 0x21]
test cl, cl
je 0x41a287
lea ecx, [eax + 0x40]
mov dword [esp + 0x18], ecx
mov dword [esp], ecx
call fcn.00402460
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
setg dl
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 0x24]
cmp ebp, ebx
xchg esi, ebx
setae bl
xchg esi, ebx
cmp ecx, eax
xchg edi, ebx
sete bl
xchg edi, ebx
and edi, esi
or edx, edi
test dl, dl
je 0x41a25a
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x20]
mov esi, dword [edx + 0x4c]
mov edi, ebp
sub ebp, ebx
mov eax, ebp
mul esi
sub edi, ebx
mov ebx, dword [esp + 0x14]
sbb ecx, ebx
mov ebx, dword [esp + 0x20]
mov dword [esp], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov edi, esi
sar esi, 0x1f
imul ebp, esi
imul edi, ecx
lea ecx, [edi + edx]
add ecx, ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.0041a6f0
mov ebp, dword [esp + 0x24]
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
call fcn.00402420
mov eax, dword [esp + 0x20]
mov byte [eax + 0x21], 0
mov dword [esp], eax
call fcn.0041a8c0
add esp, 0x1c
ret
lea eax, [0x629725]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0041a1a0
Function at 0x41a920
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41aa6a
sub esp, 0x18
mov eax, dword [esp + 0x1c]
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00402390
movzx eax, byte [esp + 0xc]
test al, al
je 0x41aa53
mov eax, dword [esp + 0x28]
mov ecx, 0x3b9aca00
mul ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov ebp, dword [esp + 0x24]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x20]
mov dword [esp + 4], ebp
call fcn.0041a350
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov dword [edx + 0x4c], ecx
mov ebx, dword [esp + 0x10]
mov dword [edx + 0x10], ebx
sar ecx, 0x1f
imul ecx, ecx, 0x3b9aca00
mov ebp, dword [esp + 0x14]
add ecx, ebp
mov dword [esp + 0x14], ecx
mov dword [edx + 0x14], ecx
mov ebp, dword [edx + 0xc]
cmp ebp, ecx
xchg esi, ebx
sete bl
xchg esi, ebx
mov edi, dword [edx + 8]
cmp ebx, edi
mov eax, edx
setb dl
cmp ebp, ecx
seta cl
and edx, esi
or edx, ecx
test dl, dl
jne 0x41aa0d
cmp ebx, edi
seta cl
mov edx, dword [esp + 0x14]
cmp ebp, edx
setb dl
and esi, ecx
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x41aa47
nop
lea ecx, [eax + 4]
mov dword [esp], ecx
mov byte [esp + 4], 0
call fcn.00402650
mov eax, dword [esp + 0x1c]
jmp 0x41aa47
mov dword [eax + 8], ebx
mov ecx, dword [esp + 0x14]
mov dword [eax + 0xc], ecx
nop
nop
lea ecx, [eax + 4]
mov dword [esp], ecx
mov byte [esp + 4], 1
call fcn.00402650
mov eax, dword [0x7fc490]
mov ecx, dword [esp + 0x1c]
lea edx, [ecx + 0x48]
mov dword [esp], edx
inc eax
mov dword [esp + 4], eax
call fcn.004025b0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.0041a8c0
add esp, 0x18
ret
lea eax, [0x627db2]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0041a920
Function at 0x41ac50
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41ae4e
sub esp, 0x28
mov eax, dword [esp + 0x2c]
test byte [eax], al
mov dword [esp], eax
call fcn.004025e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, ecx
shr ecx, 0x1d
movzx ebx, byte [esp + 0x30]
cmp bl, cl
jne 0x41adcc
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call fcn.00402490
movzx eax, byte [esp + 0x14]
test al, al
je 0x41ac69
mov eax, dword [esp + 0x38]
mov ecx, eax
and eax, 0xe0000000
mov edx, dword [esp + 0x24]
and edx, 0x1fffffff
or eax, edx
cmp ecx, eax
setl dl
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x20]
cmp ebx, ebp
xchg esi, ebx
setb bl
xchg esi, ebx
cmp ecx, eax
xchg edi, ebx
sete bl
xchg edi, ebx
and esi, edi
or edx, esi
test dl, dl
je 0x41ad02
xor ecx, ecx
xor ebx, ebx
jmp 0x41ad06
sub ebx, ebp
sbb ecx, eax
test ebx, ebx
sete al
test ecx, ecx
sete dl
and edx, eax
test dl, dl
jne 0x41adb2
movzx eax, byte [esp + 0x30]
cmp al, 2
ja 0x41ad4c
cmp al, 1
je 0x41ad33
cmp al, 2
je 0x41ad51
jmp 0x41adb6
nop
lea eax, [0x7f8fd8]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
call fcn.00402480
jmp 0x41adae
cmp al, 3
jne 0x41ad6a
nop
lea eax, [0x7f8fc8]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
call fcn.00402480
jmp 0x41adae
cmp al, 4
jne 0x41adb6
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ecx
nop
nop
lea eax, [0x7f8fd8]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
call fcn.00402480
nop
lea eax, [0x7d4c20]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
call fcn.00402480
add esp, 0x28
ret
add esp, 0x28
ret
lea eax, [0x62a2c0]
mov dword [esp], eax
mov dword [esp + 4], 0x33
call fcn.00436e90
mov dword [esp + 0x24], ecx
call fcn.004388b0
lea eax, [0x61db82]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.004391b0
mov dword [esp + 4], 0
movzx eax, byte [esp + 0x30]
movzx eax, al
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61aca4]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00438e30
call fcn.00438ad0
call fcn.00438920
lea eax, [0x62b300]
mov dword [esp], eax
mov dword [esp + 4], 0x3e
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0041ac50
Function at 0x41ea70
Capabilities:
Reference sql statements

Disassembly:
sub esp, 8
movzx edx, byte [0x7f8ab2]
test dl, dl
jne 0x41eb41
mov edx, dword [esp + 0xc]
mov ebx, dword [edx + 0x2c]
test byte [ebx], al
mov eax, dword [esp + 0x10]
sub eax, dword [edx + 0xc]
mov ebp, dword [edx + 0x34]
mul ebp
nop
nop
nop
mov ebp, edx
shr edx, 3
add edx, ebx
mov dword [esp], edx
and ebp, 7
mov ecx, ebp
mov edx, 1
shl edx, cl
mov byte [esp + 4], dl
call fcn.00402630
mov edx, dword [0x7d8bdc]
test byte [edx], al
nop
nop
mov ebx, dword [esp + 0xc]
mov ecx, dword [ebx + 0xc]
nop
mov eax, ecx
shr ecx, 0x16
mov edx, dword [edx + ecx*4]
test byte [edx], al
mov ecx, eax
shr eax, 0x10
and eax, 0x3f
movzx ebx, byte [edx + eax + 0x21840]
lea eax, [edx + eax + 0x21840]
shr ecx, 0xd
and ecx, 7
mov edx, 1
shl edx, cl
test dl, bl
jne 0x41eb09
mov dword [esp], eax
mov byte [esp + 4], dl
call fcn.00402630
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x58]
mov ecx, dword [eax + 0x964]
mov edx, dword [eax + 0x968]
mov ebx, dword [esp + 0x14]
add ecx, ebx
adc edx, 0
mov dword [eax + 0x964], ecx
mov dword [eax + 0x968], edx
add esp, 8
ret
lea eax, [0x628c56]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
call fcn.00436e90
nop
int3
Function at 0x4203d0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4204b8
sub esp, 0x14
mov eax, dword [esp + 0x1c]
cmp eax, 1
je 0x420457
cmp eax, 2
je 0x420432
cmp eax, 3
jne 0x4204a1
mov eax, dword [esp + 0x18]
test byte [eax], al
lea ecx, [eax + 0xc0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.00402480
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.004214e0
jmp 0x42049d
mov eax, dword [esp + 0x18]
test byte [eax], al
add eax, 0xb8
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.00402480
jmp 0x42049d
mov eax, dword [esp + 0x18]
test byte [eax], al
lea ecx, [eax + 0xb0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.00402480
nop
mov eax, dword [esp + 0x18]
add eax, 0xd0
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 1
call fcn.00402480
add esp, 0x14
ret
lea eax, [0x627e02]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.004203d0
Function at 0x4212e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4213c2
sub esp, 0x1c
lea eax, [0x61c1cd]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00406660
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
je 0x42132d
cmp eax, 3
jne 0x421341
cmp word [ecx], 0x666f
jne 0x421341
cmp byte [ecx + 2], 0x66
jne 0x421341
mov dword [esp + 0x24], 0x7fffffff
mov dword [esp + 0x20], 0xffffffff
add esp, 0x1c
ret
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ecx
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0044fa60
movzx eax, byte [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
test al, al
je 0x421372
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], edx
add esp, 0x1c
ret
call fcn.004388b0
lea eax, [0x61c6b2]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004391b0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.004391b0
call fcn.00438ad0
call fcn.00438920
lea eax, [0x62b3f8]
mov dword [esp], eax
mov dword [esp + 4], 0x3f
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.004212e0

Function at 0x421c90
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x421d0a
sub esp, 0x10
mov eax, dword [esp + 0x14]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.0040a140
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 4], eax
jne 0x421cf3
mov byte [ecx + 8], 1
lea eax, [0x62cb50]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov word [esp + 8], 0x140d
mov dword [esp + 0xc], 2
call fcn.00439aa0
add esp, 0x10
ret
lea eax, [0x62960c]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00421c90
Function at 0x422160
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x422308
sub esp, 0x20
mov eax, dword [esp + 0x24]
test byte [eax], al
nop
mov dword [esp], eax
call fcn.0040a140
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
cmp dword [ecx + 4], eax
jne 0x4222f1
nop
mov dword [esp], ecx
call fcn.0040a340
xorps xmm0, xmm0
xor eax, eax
jmp 0x4221b4
mov eax, ecx
movsd xmm1, qword [0x66dda4]
ucomisd xmm1, xmm0
jbe 0x4222ba
movsd qword [esp + 0x18], xmm0
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x24]
mov edx, dword [eax + 0x6c]
mov ecx, dword [edx]
call ecx
movzx eax, byte [esp]
test al, al
jne 0x4222ae
mov eax, dword [esp + 0x24]
mov edx, dword [eax + 0x68]
mov ecx, dword [edx]
mov dword [esp], 0x10000
call ecx
mov eax, dword [esp + 0xc]
test eax, eax
sete al
mov ecx, dword [esp + 8]
test ecx, ecx
sete bl
mov ebp, dword [esp + 4]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0xc]
and eax, ebx
test al, al
je 0x422257
mov ecx, dword [0x7f8b94]
test ecx, ecx
je 0x4222ec
mov eax, ebp
xor edx, edx
div ecx
mov dword [esp], eax
call fcn.00464330
movsd xmm0, qword [esp + 4]
movsd xmm1, qword [0x66dd9c]
mulsd xmm0, xmm1
movsd xmm2, qword [esp + 0x18]
addsd xmm0, xmm2
jmp 0x42227b
mov dword [esp + 4], esi
mov dword [esp], ecx
call fcn.0045d6c0
movsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0x18]
addsd xmm0, xmm1
movsd xmm1, qword [0x66dd9c]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
add ecx, eax
cmp eax, 0x10000
jb 0x4222bc
mov eax, dword [0x7f8c10]
test eax, eax
setne al
mov ebx, dword [0x7f8c14]
test ebx, ebx
setne bl
or ebx, eax
test bl, bl
je 0x4221b2
jmp 0x4222bc
mov ecx, dword [esp + 0x14]
movsd xmm0, qword [esp + 0x18]
jmp 0x4222bc
mov ecx, eax
test ecx, ecx
jbe 0x4222c8
cmp dword [0x7f8b94], ecx
ja 0x4222d6
mov dword [esp + 0x28], ecx
movsd qword [esp + 0x2c], xmm0
add esp, 0x20
ret
lea eax, [0x6293e4]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.00436e90
call fcn.00435600
lea eax, [0x629134]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00422160