Function at 0x4dbde0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60eea3
mov eax, dword fs:[0]
push eax
sub esp, 0x114
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0xd8], ebx
push 0
lea ecx, [ebx + 0x28]
push str.SELECT_COUNT___FROM_Ps
call fcn.0059bff4
cdq
test eax, eax
jne 0x4dbe49
test edx, edx
jne 0x4dbe49
push str.Ps_table_doesnt_conains_records
push str.DBFeeder::PurgeTables
push 2
call fcn.00587c13
add esp, 0xc
xor eax, eax
jmp 0x4dcc2e
push 0
push 5
push edx
push eax
call fcn.005b22e0
push str.Fill_Hash_LIST
push str.DBFeeder::PurgeTables
push 4
mov edi, eax
mov esi, edx
call fcn.00587c13
add esp, 0xc
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
call fcn.004232c0
mov dword [ebp - 0xe0], eax
push esi
push edi
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0
push eax
mov ecx, ebx
call fcn.004dba50
push esi
mov byte [ebp - 0xd1], al
lea eax, [ebp - 0xd0]
push edi
push eax
call fcn.00434630
mov esi, eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 1
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 2
push str._DELETE_FROM_Ps_WHERE_Ps_RID_IN_n___________________________SELECT_Ps_RID_FROM_Ps_WHERE_Ps.Ps_RID__
push eax
call fcn.00438d70
push str._ORDER_BY_Ps_RID_ASC_LIMIT
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 3
push eax
call fcn.004238e0
push esi
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 4
push eax
call fcn.00465c20
push 0x66375c
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
call fcn.004238e0
add esp, 0x44
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x4dbf30
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0x74]
cmp eax, 8
jb 0x4dbf5f
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x4dbf94
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0xa4]
cmp eax, 8
jb 0x4dbfcf
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xbc]
cmp eax, 8
jb 0x4dc00e
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00434bd0
push str.ExecDML_psCount
xor eax, eax
mov dword [ebp - 0xbc], 7
push str.DBFeeder::PurgeTables
push 4
mov dword [ebp - 0xc0], 0
mov word [ebp - 0xd0], ax
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
cmp byte [ebp - 0xd1], 0
mov dword [ebp - 0xe4], eax
je 0x4dc065
lea eax, [ebp - 0xe0]
push eax
call fcn.004db8c0
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc
push str.DELETE_FROM_Files_WHERE_Files.RID_NOT_IN__n_______________________________________________________n_____________SELECT_File_ID__FROM_FileOp_______________n_____________UNION_____________________________________n_____________SELECT_Image_ID_FROM_Ps___________________n_____________UNION_____________________________________n_____________SELECT_OldFile_ID_FROM_RenameFileOp_______n_____________UNION_____________________________________n_____________SELECT_Module_ID_FROM_CodeInjectOp________n_t_t_t_UNION_____________________________________n_t_t_t_SELECT_TargetFile_ID_FROM_LnkFileOp_n_t_t_t_UNION_____________________________________n_t_t_t_SELECT_LnkFile_ID_FROM_LnkFileOp_n_________________AND_Files.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc0c1
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc0a4
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc0d6
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc103
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_filesCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0x81
push str.DELETE_FROM_FileExtra_WHERE_FileExtra.RID_NOT_IN__n________________SELECT_DISTINCT_Extra_ID_FROM_FileOp_WHERE_Extra_ID_NOT_NULL__
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xec], eax
call fcn.004346a0
push str.ExecDML_filesCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xe
push str.DELETE_FROM_MD5Signature_WHERE_MD5Signature.RID_NOT_IN__n________________n________________SELECT_DISTINCT_ImageSig_ID_FROM_Ps_n________________UNION_n________________SELECT_DISTINCT_MD5_ID_FROM_FileExtra_WHERE_MD5_ID_NOT_NULL_n__________________n_________________AND_MD5Signature.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc1bb
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc19e
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc1d0
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc1fd
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_md5Count
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
lea ecx, [ebx + 0x28]
mov dword [ebp - 0xe8], eax
call fcn.004beee0
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x10
push str.DELETE_FROM_Directories_WHERE_Directories.RID_NOT_IN_n________________n________________SELECT_DISTINCT_Files.Dir_ID_FROM_FILES_n________________UNION_n________________SELECT_DISTINCT_ZipContent.Dir_ID_FROM_ZipContent_n___________________n_______________AND_Directories.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc28c
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc26f
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc2a1
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc2ce
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_dirCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x12
push str.DELETE_FROM_URLs_WHERE_URLs.RID_NOT_IN_n_____________________________________________________n________________SELECT__URL_ID___________FROM_HttpOp__n________________UNION_________________________________n________________SELECT__RedirectedURL_ID_FROM_HttpOp__n________________UNION_________________________________n________________SELECT__RefererURL_ID____FROM_HttpOp__n________________UNION_n________________Select__URL_ID___________FROM_ExtensionOp_n________________UNION_n________________Select__Referrer_ID______FROM_ExtensionOp_n___________________AND_URLs.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc34f
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc332
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc364
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc391
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_urlCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x14
push str.DELETE_FROM_URL_Path_WHERE_URL_Path.RID_NOT_IN_n__________________SELECT_DISTINCT_Path_ID_FROM_URLs____AND_URL_Path.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc412
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc3f5
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc427
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc454
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_urlPathCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x16
push str.DELETE_FROM_URL_ExtraInfo_WHERE_URL_ExtraInfo.RID_NOT_IN_n__________________SELECT_DISTINCT_ExtraInfo_ID_FROM_URLs___AND_URL_ExtraInfo.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc4d5
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc4b8
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc4ea
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc517
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_urlExtraInfoCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x18
push str.DELETE_FROM_URL_Prefix_WHERE_URL_Prefix.RID_NOT_IN_n_______________SELECT_DISTINCT_Prefix_ID_FROM_URLs___AND_URL_Prefix.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc598
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc57b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc5ad
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc5da
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_urlPrefixCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0xc9
push str.DELETE_FROM_LogonSessions_n_______________WHERE_LogonSessions.TerminationTime____0_AND_n______________________LogonSessions.TerminationTime____SELECT_MIN_Ps.CreationTime__FROM_Ps_WHERE_Ps.CreationTime_0_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x118], eax
call fcn.004346a0
push str.ExecDML_logonSessionsCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0x26e
push str.DELETE_FROM_Reboots_______________________________________________________________n_____________WHERE_Reboots.BootTime____________________________________________________________n_______________________________________SELECT_BootTime_FROM_Reboots____________________________n_______________________________________WHERE_BootTime____SELECT_MIN_Ps.CreationTime__FROM_Ps_WHERE_Ps.CreationTime_0___n_______________________________________ORDER_BY_BootTime_______________________________________n_______________________________________LIMIT_1_________________________________________________n_________________________________________
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xfc], eax
call fcn.004346a0
push str.ExecDML_rebootsCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1a
push str.DELETE_FROM_SockAddr_WHERE_SockAddr.RID_NOT_IN___n_____________________________________________________________n______________________SELECT_SrcSocket_ID_FROM_SocketOp______n______________________UNION__________________________________n______________________SELECT_DstSocket_ID_FROM_SocketOp______n______________________UNION__________________________________n______________________SELECT_SrcSocket_ID_FROM_HttpOp________n______________________UNION__________________________________n______________________SELECT_DstSocket_ID_FROM_HttpOp________n______________________UNION__________________________________n______________________SELECT_SrcSocket_ID_FROM_PassiveConn_______n______________________AND_SockAddr.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc6c9
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc6ac
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc6de
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc70b
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_sockaddrCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0x75
push str.DELETE_FROM_RegistryKeys_WHERE_RegistryKeys.RID_NOT_IN__n_____________________________SELECT_Key_ID_FROM_RegistryOp___
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x104], eax
call fcn.004346a0
push str.ExecDML_regKeyCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1c
push str.DELETE_FROM_RegistryValues_WHERE_RegistryValues.RID_NOT_IN__n________________________________SELECT_Value_ID_FROM_RegistryOp____AND_RegistryValues.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc7c0
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc7a3
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc7d5
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc802
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_regValueCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x58]
push 0x64
push eax
call fcn.0046c890
push eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push str.DELETE_FROM_RegistryData_WHERE_RegistryData.RID_NOT_IN__n____________________n____________________SELECT_OldData_ID_FROM_RegistryDataChangeOp_n____________________UNION_n____________________SELECT_NewData_ID_FROM_RegistryDataChangeOp_n_______________________AND_RegistryData.RID__
push eax
call fcn.00438d70
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x4dc883
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dc866
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.00434450
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x4dc898
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00434bd0
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x40], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
cmp eax, 8
jb 0x4dc8c5
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00434bd0
push str.ExecDML_regDataCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0x7e
push 0x665f40
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x110], eax
call fcn.004346a0
push str.ExecDML_envVarCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
add esp, 0xc
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.004db0b0
push 0x78
push str.DELETE_FROM_EnvVarValues_WHERE_EnvVarValues.RID_NOT_IN__n_____________________SELECT_Value_ID_FROM_EnvVar____n
lea ecx, [ebp - 0x28]
mov ebx, eax
call fcn.004346a0
push str.ExecDML_envVarValCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0x28]
add esp, 0xc
push eax
call fcn.004db0b0
push 0x7d
push str.DELETE_FROM_EnvVar_n_________________WHERE_OpTime____SELECT_MIN_Ps.creationTime__FROM_Ps_WHERE_Ps.creationTime_0___n
lea ecx, [ebp - 0x28]
mov edi, eax
call fcn.004346a0
push str.ExecDML_envVarNameCount
push str.DBFeeder::PurgeTables
push 4
call fcn.00587c13
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0x28]
add esp, 0xc
push eax
call fcn.004db0b0
mov esi, eax
push str.Purging_statistics_by_tables:
push str.DBFeeder::PurgeTables
push 3
lea eax, [esi + edi]
add eax, ebx
add eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x100]
add eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x114]
add eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xec]
add eax, dword [ebp - 0xe4]
mov dword [ebp - 0xd8], eax
call fcn.00587c13
push dword [ebp - 0xe4]
push str._____Ps__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0xe8]
push str._____MD5Signature__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0xec]
push str._____Files__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0xf0]
push str._____FileExtra__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
add esp, 0x4c
push dword [ebp - 0xf4]
push str._____Directories__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0xf8]
push str._____URLs__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x11c]
push str._____Path_ID__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x120]
push str._____URL_ExtraInfo__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
add esp, 0x40
push dword [ebp - 0x118]
push str._____URL_Prefix__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0xfc]
push str._____LogonSessions__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x100]
push str._____Reboots__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x104]
push str._____SockAddr__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
add esp, 0x40
push dword [ebp - 0x108]
push str._____RegistryKeys__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x10c]
push str._____RegistryValues__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x110]
push str._____RegistryData__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push ebx
push str._____EnvVar__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
add esp, 0x40
push edi
push str._____EnvVarValues__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push esi
push str._____EnvVarNames__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push dword [ebp - 0x114]
push str._____ApiSensorOps__d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
push str.____________________________________________
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
mov esi, dword [ebp - 0xd8]
push esi
push str.____TOTAL_d
push str.DBFeeder::PurgeTables
push 3
call fcn.00587c13
add esp, 0x4c
call fcn.00547fc0
inc dword [eax + 8]
call fcn.00547fc0
add dword [eax + 0xc], esi
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4dcbef
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00434bd0
mov ecx, dword [ebp - 0xe0]
xor eax, eax
push ecx
mov word [ebp - 0x28], ax
lea eax, [ebp - 0x118]
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
push dword [ecx]
lea ecx, [ebp - 0xe0]
push eax
call fcn.0041f4d0
push dword [ebp - 0xe0]
call fcn.005b1685
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
ret