joyce8/EMBER2024-capa huggingface dataset:
Function at 0x44f3e0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x44f579
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
cmp qword [rax], 0
nop dword [rax]
je 0x44f567
nop
mov ecx, dword [rax + 0x90]
bt ecx, 0xc
jb 0x44f43e
mov rdx, qword [r14 + 0x30]
mov rdx, qword [rdx + 0x90]
nop
cmp rax, rdx
jne 0x44f556
mov rsi, r14
cmp rsi, rdx
je 0x44f556
cmp ecx, 2
jne 0x44f556
cmp qword [rax + 0x70], 0
jne 0x44f462
cmp byte [rax + 0xb4], 0
je 0x44f452
xor ecx, ecx
jmp 0x44f464
nop
mov cl, byte [rax + 0xb9]
test cl, cl
sete cl
nop
jmp 0x44f464
xor ecx, ecx
test cl, cl
je 0x44f545
mov rcx, qword [r14 + 0x30]
cmp qword [rcx + 0x90], rax
jne 0x44f48b
mov rcx, qword [rax + 0x30]
cmp qword [rcx + 0x2b0], 0
jne 0x44f532
cmp dword [0x00f0c8f4], 0
jg 0x44f528
mov qword [rsp + 0x20], rax
mov rcx, qword [rax + 0x138]
mov rax, rcx
call fcn.00453600
test rax, rax
je 0x44f4c1
cmp byte [rax + 0x28], 6
jne 0x44f4c1
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rax, qword [rsp + 0x20]
mov rbx, qword [rax + 8]
mov rcx, qword [rax]
mov rdx, rbx
sub rbx, rcx
mov rcx, rbx
shr rbx, 1
nop dword [rax]
cmp rbx, 0x2000
jb 0x44f51e
mov rsi, qword [rax + 0x38]
sub rdx, rsi
add rdx, 0x320
shr rcx, 2
nop dword [rax + rax]
cmp rcx, rdx
ja 0x44f50f
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
call fcn.0044e340
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00ad849e]
mov ebx, 0x1a
nop
call fcn.004389c0
lea rax, [0x00ad5e08]
mov ebx, 0x17
call fcn.004389c0
lea rax, [0x00ad7071]
mov ebx, 0x19
call fcn.004389c0
lea rax, [0x00ad9b52]
mov ebx, 0x1c
call fcn.004389c0
nop
mov qword [rsp + 8], rax
nop
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0044f3e0
Function at 0x450300
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4504ff
sub rsp, 0x68
mov qword [rsp + 0x60], rbp
lea rbp, [rsp + 0x60]
mov qword [rsp + 0x78], rbx
mov rdx, rbx
xor esi, esi
xor edi, edi
xor r8d, r8d
xor r9d, r9d
jmp 0x450340
add r10, 0x10
lea r11, [rbx + 1]
mov rbx, r10
mov r9, r8
mov r8, rsi
mov rsi, r11
cmp rcx, rsi
jle 0x450371
mov r10, rbx
mov r11, qword [rbx + 8]
test r11, r11
jne 0x45035c
mov rbx, rsi
mov rsi, r8
mov r8, r9
jmp 0x45032c
lea r8, [r9 + r11]
cmp r9, r8
jg 0x4504ed
inc rdi
mov rbx, rsi
jmp 0x45032c
test rdi, rdi
je 0x450405
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x58], rdx
cmp rdi, 1
jne 0x4503e1
test rax, rax
jne 0x4503b6
cmp rcx, r8
jbe 0x4504e5
mov rsi, r8
shl r8, 4
mov rdi, qword [rdx + r8]
mov r8, qword [r14 + 8]
cmp qword [r14], rdi
ja 0x4503c0
cmp rdi, r8
jb 0x4503e1
jmp 0x4503c0
mov rsi, r8
nop dword [rax]
cmp rcx, rsi
jbe 0x4504dd
shl rsi, 4
mov rax, qword [rdx + rsi]
mov rbx, qword [rdx + rsi + 8]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
nop
ret
mov rbx, r9
call fcn.00450a00
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x20], rbx
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x80]
xor r9d, r9d
jmp 0x450436
xor eax, eax
xor ebx, ebx
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
add rdx, 0x10
inc r9
sub rsi, r10
sub r11, r10
mov r12, rsi
neg rsi
sar rsi, 0x3f
and r10, rsi
add rcx, r10
mov rdi, r11
mov rsi, r12
cmp r8, r9
jle 0x4504c8
mov r10, qword [rdx + 8]
cmp rdi, r10
mov r11, rdi
cmovg rdi, r10
mov r12, qword [rdx]
cmp rcx, r12
jne 0x45045a
cmp r11, r10
jmp 0x4504bf
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x18], r10
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r11
mov rax, rcx
mov rbx, r12
mov rcx, rdi
call fcn.004692c0
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x18]
cmp rcx, rax
mov rdx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x38]
mov r10, rax
mov r11, rcx
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
nop
jae 0x450413
jmp 0x4504d2
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
ret
mov rax, r10
mov rcx, r11
call fcn.004689a0
mov rax, rsi
call fcn.004688e0
mov rax, r8
call fcn.004688e0
lea rax, [0x00ada95b]
mov ebx, 0x1d
call fcn.004389c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.00450300
Function at 0x4513a0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x451486
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x28], 0
movups xmmword [rsp + 0x30], xmm15
test rbx, rbx
je 0x45143e
jl 0x45146e
movabs rdx, 0x1000000000000
nop dword [rax]
cmp rbx, rdx
ja 0x45146e
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x58], rbx
mov rax, rbx
xor ebx, ebx
xor ecx, ecx
call fcn.0040e720
mov qword [rsp + 0x18], rax
mov rbx, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
call fcn.004692c0
mov rdx, qword [rsp + 0x18]
mov qword [rsp + 0x28], rdx
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rcx
mov rax, qword [rsp + 0x28]
mov rbx, rcx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x00a16ae0]
xor ebx, ebx
mov rcx, rbx
call fcn.0044c620
mov qword [rsp + 0x28], rax
movups xmmword [rsp + 0x30], xmm15
mov rax, qword [rsp + 0x28]
xor ebx, ebx
mov rcx, rbx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x00a3d400]
lea rbx, [0x00b98af0]
nop dword [rax]
call fcn.00438220
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
nop
jmp fcn.004513a0
Function at 0x4545c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov qword [rsp + 0x20], rax
test rbx, rbx
jbe 0x454738
movzx edx, byte [rax]
nop
test edx, edx
jne 0x4545fc
test r8b, r8b
jne 0x4545fc
xor eax, eax
xor ebx, ebx
mov rcx, rbx
xor edi, edi
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
bt edx, 7
jae 0x45460f
xor edx, edx
xor r8d, r8d
xor r9d, r9d
jmp 0x4546f8
mov r8d, 1
mov r9d, edx
and edx, 1
neg edx
shr r9d, 1
xor edx, r9d
add dword [rsi], edx
cmp rbx, r8
jb 0x4546e6
sub rbx, r8
sub rcx, r8
mov rdx, rcx
neg rcx
sar rcx, 0x3f
and r8, rcx
lea rsi, [rax + r8]
test rbx, rbx
jbe 0x4546dc
movzx r8d, byte [rax + r8]
bt r8d, 7
jae 0x454663
xor eax, eax
xor ecx, ecx
xor r8d, r8d
jmp 0x4546a6
mov eax, 1
cmp rax, rbx
ja 0x454695
add qword [rdi], r8
sub rdx, rax
sub rbx, rax
mov rcx, rdx
neg rdx
sar rdx, 0x3f
and rax, rdx
add rax, rsi
mov edi, 1
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov rcx, rbx
call fcn.004689a0
lea r8d, [rcx + 7]
mov ecx, eax
mov eax, r10d
cmp rax, rbx
jae 0x4546d4
movzx r9d, byte [rax + rsi]
lea r10d, [rax + 1]
mov r11d, r9d
and r9d, 0x7f
mov eax, ecx
mov ecx, r8d
shl r9d, cl
or eax, r9d
test r11b, 0x80
jne 0x45469d
mov r8d, eax
mov eax, r10d
jmp 0x454668
mov rcx, rbx
call fcn.004688e0
xor eax, eax
mov rcx, rax
call fcn.004688e0
mov eax, r8d
mov rcx, rbx
call fcn.004689a0
lea r9d, [rcx + 7]
mov rcx, r12
cmp rbx, rdx
jbe 0x45472e
movzx r10d, byte [rdx + rax]
inc edx
mov r11d, r10d
and r10d, 0x7f
mov r12, rcx
mov ecx, r9d
shl r10d, cl
or r8d, r10d
test r11b, 0x80
jne 0x4546f1
mov rcx, r12
mov r9d, edx
mov edx, r8d
mov r8d, r9d
jmp 0x454615
mov eax, edx
mov rcx, rbx
call fcn.004688e0
xor eax, eax
mov rcx, rax
nop dword [rax]
call fcn.004688e0
nop
int3
Function at 0x455180
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4552b9
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
cmp qword [rax + 8], 0
nop dword [rax]
jle 0x4552a7
cmp qword [rax + 0x10], 0
jl 0x455296
mov ecx, dword [rax + 0x40]
test ecx, ecx
jne 0x455285
mov qword [rsp + 0x48], rax
nop
mov ecx, 1
xchg dword [rax + 0x40], ecx
mov qword [rsp + 0x28], r14
mov rcx, qword [r14 + 0x30]
mov rdx, qword [rax + 8]
mov qword [rsp + 0x10], rdx
nop
inc dword [rcx + 0xd8]
mov rcx, qword [r14 + 0x30]
mov rcx, qword [rcx + 0xa0]
mov qword [rsp + 0x30], rcx
test byte [rcx], al
lea rbx, [rcx + 0x2278]
mov qword [rsp + 0x20], rbx
mov rsi, qword [rsp + 0x28]
mov rsi, qword [rsi + 0x30]
mov qword [rsp + 0x18], rsi
nop
mov rax, rbx
call fcn.0040cf20
mov rax, qword [rsp + 0x30]
nop dword [rax]
call fcn.00455fc0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x48]
call fcn.004552e0
nop
nop
mov rax, qword [rsp + 0x20]
nop dword [rax + rax]
call fcn.0040d140
mov rax, qword [rsp + 0x10]
call fcn.00441380
nop
mov rcx, qword [rsp + 0x18]
mov edx, dword [rcx + 0xd8]
lea ebx, [rdx - 1]
mov dword [rcx + 0xd8], ebx
cmp edx, 1
jne 0x45527b
cmp byte [r14 + 0xb1], 0
je 0x45527b
mov qword [r14 + 0x10], 0xfffffffffffffade
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
lea rax, [0x00ae0221]
mov ebx, 0x26
call fcn.004389c0
lea rax, [0x00add66e]
mov ebx, 0x21
call fcn.004389c0
lea rax, [0x00ad9185]
mov ebx, 0x1b
call fcn.004389c0
nop
mov qword [rsp + 8], rax
nop
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.00455180

Function at 0x455ac0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x455f6d
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], r8
test rbx, rbx
jle 0x455f5b
test rcx, rcx
jl 0x455f4a
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x30], rsi
jmp 0x455b1c
mov rax, r11
mov edx, dword [rax + 0x40]
mov r10d, edx
cmp r10, 9
ja 0x455d15
lea r11, [0x00b9fca0]
jmp qword [r11 + r10*8]
call fcn.004574a0
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x78]
mov r11, qword [rsp + 0x48]
mov r12d, 6
jmp 0x455b19
lea rax, [0x00add66e]
mov ebx, 0x21
call fcn.004389c0
lea rax, [0x00ad9185]
mov ebx, 0x1b
call fcn.004389c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp fcn.00455ac0
Function at 0x45c220
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x45c2d9
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 8], 0
movups xmmword [rsp + 0x10], xmm15
movups xmmword [rsp + 0x18], xmm15
movups xmmword [rsp + 0x28], xmm15
movups xmmword [rsp + 0x38], xmm15
movups xmmword [rsp + 0x48], xmm15
lea rdx, [0x0045c320]
mov qword [rsp + 0x10], rdx
lea rdx, [rsp + 8]
mov qword [rsp + 0x18], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x20], rdx
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x28], rdx
mov rdx, r14
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], rdi
lea rax, [rsp + 0x10]
mov qword [rsp], rax
call fcn.00466120
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 8]
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.0045c220
Function at 0x468360
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov rax, qword [rax]
movabs rcx, 0xe7037ed1a0b428db
xor rcx, rax
xor rax, rbx
xor rax, qword [0x00f0c6a0]
movabs rdx, 0xa0761d6478bd642f
xor rdx, rax
mov rax, rcx
mul rdx
xor rax, rdx
mov rcx, rax
movabs rax, 0x1d8e4e27c47d1247
mul rcx
nop
nop
xor rax, rdx
ret
cmp byte [0x00f0bd4f], 0
je 0x468396
movq xmm0, rbx
pinsrq xmm0, qword [rax], 1
aesenc xmm0, xmmword [0x00f0ca20]
aesenc xmm0, xmmword [0x00f0ca30]
aesenc xmm0, xmmword [0x00f0ca40]
movq rax, xmm0
ret
jmp 0x40b7c0

Function at 0x46ac20
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov eax, 2
lea rbx, [0x00ad985e]
mov ecx, 0x1c
nop
call fcn.00457520
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
jmp 0x43be20
Function at 0x46fe20
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x46ff33
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop
cmp rcx, 0x12
ja 0x46fea0
cmp rcx, 0x11
jne 0x46fe6f
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x46fe5e
lea rax, [0x00ba1db8]
jmp 0x46fe62
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x12
jne 0x46ff1f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x46fe8e
lea rax, [0x00ba1db8]
jmp 0x46fe92
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x15
jne 0x46fec9
mov rcx, qword [rax + 0x38]
test rcx, rcx
je 0x46feb8
lea rax, [0x00ba1db8]
jmp 0x46febc
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x16
jne 0x46fef3
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x46fee2
lea rax, [0x00ba1db8]
nop
jmp 0x46fee6
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
cmp rcx, 0x17
jne 0x46ff1f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x46ff0e
lea rax, [0x00ba1db8]
jmp 0x46ff12
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00a16860]
lea rbx, [0x00b98110]
call fcn.00438220
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0046fe20
Function at 0x483960
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483bd9
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x50], rax
mov edx, dword [rax]
xor ecx, ecx
xor ebx, ebx
xor esi, esi
xor edi, edi
jmp 0x48398c
mov rax, r8
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x1e], sil
mov byte [rsp + 0x1d], bl
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x20], edx
mov r8d, edx
and edx, 5
mov dword [rsp + 0x2c], edx
cmp edx, 1
je 0x4839b7
xor r9d, r9d
jmp 0x4839e4
mov rax, rcx
call fcn.00462d20
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x20]
mov r9d, eax
mov rax, qword [rsp + 0x50]
test r9b, r9b
jne 0x483b15
mov r9d, r8d
or r8d, 1
test r9d, 4
mov r10d, r9d
cmove r9d, r8d
lea r8d, [r9 + 8]
test edx, edx
cmovne r9d, r8d
test bl, bl
je 0x483a20
bt r10d, 0
jae 0x483a20
or r9d, 4
nop dword [rax + rax]
test sil, sil
je 0x483a70
bt r9d, 1
jb 0x483a6c
mov dword [rsp + 0x24], r9d
lea rax, [0x00adb415]
mov ebx, 0x1e
nop dword [rax]
call fcn.00462900
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
mov r9d, dword [rsp + 0x24]
mov r10d, dword [rsp + 0x20]
and r9d, 0xfffffffd
mov r8, rax
mov eax, r10d
lock cmpxchg dword [r8], r9d
sete r9b
nop
test r9b, r9b
jne 0x483a8d
mov edx, dword [r8]
jmp 0x483989
test edx, edx
je 0x483bcf
test rdi, rdi
jne 0x483aaf
call fcn.00463d00
mov rcx, qword [rsp + 0x30]
test rcx, rcx
mov r8, qword [rsp + 0x50]
mov rdi, rax
mov qword [rsp + 0x30], rdi
setne bl
lea rax, [r8 + 4]
mov ecx, 1
call fcn.004636a0
movzx edx, byte [rsp + 0x1d]
test dl, dl
je 0x483ada
mov rcx, qword [rsp + 0x30]
mov eax, 1
jmp 0x483af0
call fcn.00463d00
mov rcx, qword [rsp + 0x30]
sub rax, rcx
cmp rax, 0xf4240
setg al
mov rdx, qword [rsp + 0x50]
mov esi, dword [rdx]
bt esi, 2
jb 0x483b7b
mov r8, rdx
mov edx, esi
xor ecx, ecx
mov ebx, eax
mov esi, 1
mov rdi, qword [rsp + 0x30]
jmp 0x483989
test sil, sil
jne 0x483b4b
bt r8d, 1
nop
jb 0x483b4b
mov edx, r8d
sar r8d, 3
test r8d, r8d
je 0x483b4b
mov r8d, edx
or edx, 2
mov r9, rax
mov eax, r8d
lock cmpxchg dword [r9], edx
sete dl
test dl, dl
je 0x483b4b
mov esi, 1
mov byte [rsp + 0x1e], sil
call fcn.00462da0
mov rcx, qword [rsp + 0x38]
inc rcx
mov rax, qword [rsp + 0x50]
mov edx, dword [rax]
mov r8, rax
movzx ebx, byte [rsp + 0x1d]
movzx esi, byte [rsp + 0x1e]
mov rdi, qword [rsp + 0x30]
jmp 0x483989
mov byte [rsp + 0x1f], al
mov dword [rsp + 0x28], esi
test esi, 3
jne 0x483b94
mov ecx, esi
sar esi, 3
test esi, esi
jne 0x483bb3
lea rax, [0x00adb415]
mov ebx, 0x1e
call fcn.00462900
movzx eax, byte [rsp + 0x1f]
mov ecx, dword [rsp + 0x28]
mov rdx, qword [rsp + 0x50]
test al, al
je 0x483bc6
sar ecx, 3
cmp ecx, 1
je 0x483bc6
mov eax, 0xfffffff9
jmp 0x483bcb
mov eax, 0xfffffff5
lock xadd dword [rdx], eax
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 8], rax
nop
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.00483960
Function at 0x483c60
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x483d22
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
lea edx, [rbx + 1]
bt edx, 0
nop
jb 0x483ca5
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], ebx
lea rax, [0x00adb433]
mov ebx, 0x1e
call fcn.00462940
mov rax, qword [rsp + 0x28]
mov ebx, dword [rsp + 0x30]
bt ebx, 2
jae 0x483cd4
test byte [rax], al
add rax, 4
mov ebx, 1
mov ecx, 1
nop dword [rax + rax]
call fcn.00463640
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov ebx, dword [rcx]
mov rax, rcx
mov edx, ebx
sar ebx, 3
test ebx, ebx
je 0x483d18
nop dword [rax]
test edx, 7
jne 0x483d18
lea esi, [rdx - 8]
or esi, 2
mov rcx, rax
mov eax, edx
lock cmpxchg dword [rcx], esi
sete dl
test dl, dl
je 0x483ccf
lea rax, [rcx + 4]
xor ebx, ebx
mov ecx, 1
call fcn.00463640
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
mov qword [rsp + 8], rax
mov dword [rsp + 0x10], ebx
call fcn.00466260
mov rax, qword [rsp + 8]
mov ebx, dword [rsp + 0x10]
jmp fcn.00483c60
Function at 0x48f340
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48f475
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop
cmp rcx, 0x12
ja 0x48f3c0
cmp rcx, 0x11
jne 0x48f38f
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x48f37e
lea rax, [0x00ba54f8]
jmp 0x48f382
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x12
jne 0x48f43f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x48f3ae
lea rax, [0x00ba54f8]
jmp 0x48f3b2
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x15
jne 0x48f3e9
mov rcx, qword [rax + 0x38]
test rcx, rcx
je 0x48f3d8
lea rax, [0x00ba54f8]
jmp 0x48f3dc
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x16
jne 0x48f413
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x48f402
lea rax, [0x00ba54f8]
nop
jmp 0x48f406
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
cmp rcx, 0x17
jne 0x48f43f
mov rcx, qword [rax + 0x30]
nop dword [rax]
test rcx, rcx
je 0x48f42e
lea rax, [0x00ba54f8]
jmp 0x48f432
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
nop
call fcn.0048e3c0
mov ecx, 0x1e
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00adb271]
call fcn.00450540
nop
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a16860]
call fcn.00438220
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0048f340

Function at 0x48fa60
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fb29
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx esi, byte [rax + 0x17]
and esi, 0x1f
nop
cmp rsi, 0x13
jne 0x48faf6
movzx esi, byte [rax + 0x14]
test sil, 1
je 0x48fa97
mov ecx, 0x48
jmp 0x48fa9c
mov ecx, 0x38
movzx edx, word [rax + 0x30]
test dx, dx
jne 0x48faab
xor edx, edx
xor esi, esi
jmp 0x48fab8
lea rsi, [rax + rcx]
cmp rdx, 0x100000
ja 0x48faec
cmp rbx, rdx
jae 0x48fae1
mov rcx, qword [rsi + rbx*8]
test rcx, rcx
je 0x48facf
lea rax, [0x00ba54f8]
jmp 0x48fad3
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
nop
ret
mov rax, rbx
mov rcx, rdx
call fcn.004688e0
mov ebx, 0x100000
call fcn.004689e0
call fcn.0048e3c0
mov ecx, 0x1d
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00ada7c5]
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a16860]
call fcn.00438220
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0048fa60
Function at 0x48fb60
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fbdc
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop dword [rax + rax]
cmp rcx, 0x15
jne 0x48fba9
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x48fb98
lea rax, [0x00ba54f8]
jmp 0x48fb9c
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call fcn.0048e3c0
mov ecx, 0x1d
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00ada7e2]
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a16860]
call fcn.00438220
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0048fb60

Function at 0x48fc00
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48fc67
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx ecx, byte [rax + 0x17]
and ecx, 0x1f
nop dword [rax + rax]
cmp rcx, 0x11
jne 0x48fc34
mov rax, qword [rax + 0x40]
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
call fcn.0048e3c0
mov ecx, 0x1f
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00adbd3b]
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a16860]
call fcn.00438220
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0048fc00

Function at 0x48fe40
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x48ff2d
sub rsp, 0x30
mov qword [rsp + 0x28], rbp
lea rbp, [rsp + 0x28]
movzx edx, byte [rax + 0x17]
and edx, 0x1f
nop
cmp rdx, 0x13
jne 0x48fefa
movzx edx, byte [rax + 0x14]
test dl, 1
je 0x48fe7a
mov ecx, 0x48
jmp 0x48fe7f
mov ecx, 0x38
movzx edx, word [rax + 0x32]
and edx, 0x7fff
test dx, dx
jne 0x48fe94
xor edx, edx
xor esi, esi
jmp 0x48fec0
movzx esi, word [rax + 0x30]
add edx, esi
lea rdi, [rax + rcx]
movzx ecx, dx
cmp rsi, rcx
ja 0x48fef3
sub rcx, rsi
mov rdx, rcx
neg rcx
shl rsi, 3
sar rcx, 0x3f
and rsi, rcx
add rsi, rdi
nop dword [rax]
cmp rbx, rdx
jae 0x48fee8
mov rcx, qword [rsi + rbx*8]
test rcx, rcx
je 0x48fed7
lea rax, [0x00ba54f8]
jmp 0x48fedb
xor eax, eax
xor ecx, ecx
mov rbx, rcx
mov rbp, qword [rsp + 0x28]
add rsp, 0x30
ret
mov rax, rbx
mov rcx, rdx
call fcn.004688e0
mov eax, esi
call fcn.00468a60
call fcn.0048e3c0
mov ecx, 0x1e
mov rdi, rax
mov rsi, rbx
xor eax, eax
lea rbx, [0x00adb2ad]
call fcn.00450540
call fcn.0040c740
mov rbx, rax
lea rax, [0x00a16860]
call fcn.00438220
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.0048fe40