joyce8/EMBER2024-capa huggingface dataset:
Function at 0x41ad10
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x814
test eax, eax
push ebx
push esi
push edi
je 0x41ad2e
xor eax, eax
pop edi
pop esi
pop ebx
add esp, 0x814
ret
mov edi, dword [esp + 0x824]
mov esi, 0x514f20
mov eax, edi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x41ad64
test cl, cl
je 0x41ad60
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x41ad64
add eax, 2
add esi, 2
test cl, cl
jne 0x41ad3c
xor eax, eax
jmp 0x41ad69
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x41ad77
pop edi
pop esi
pop ebx
add esp, 0x814
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push edi
push 0x476ed38
lea eax, [esp + 0x28]
push str.SELECT_hextessera_FROM_GATC__sBADGE_WHERE_idexport_s_AND_refbadgekey1_ORDER_BY_dtactivat_DESC
push eax
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x20]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, eax
xor eax, eax
test ebx, ebx
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x41ae35
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x24]
test al, al
jne 0x41ae35
mov al, byte [ebx + 4]
test al, al
jne 0x41ae22
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push 1
push ecx
mov ecx, ebx
call dword [eax + 0x14]
mov edi, dword [eax + 4]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x828]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call fcn.00445280
mov esi, 1
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
test ebx, ebx
je 0x41ae35
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
pop edi
pop esi
pop ebx
add esp, 0x814
ret
Function at 0x41b0d0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x804
push esi
push edi
push 0x46054d8
xor edi, edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x818]
push eax
mov eax, dword [esp + 0x814]
lea ecx, [eax + eax*2]
lea ecx, [ecx + ecx*8]
lea ecx, [eax + ecx*8]
lea edx, [ecx + ecx*2]
lea ecx, [eax + edx*2]
mov edx, dword [esp + 0x818]
lea ecx, [ecx + ecx*4]
lea ecx, [edx + ecx*8]
mov edx, dword [ecx*4 + 0x643948]
lea ecx, [eax + eax*2]
push edx
lea ecx, [ecx + ecx*8]
lea ecx, [eax + ecx*8]
lea edx, [ecx + ecx*2]
lea eax, [eax + edx*2]
mov edx, dword [0x476edd0]
lea eax, [eax + eax*4]
shl eax, 5
mov ecx, dword [eax + 0x643944]
lea eax, [esp + 0x14]
push ecx
push edx
push 0x476ed38
push str.SELECT_kcom_FROM_GATD__sDEVCAUS_WHERE_kcom_d_AND_channel_d_AND_device_d_AND_devcaus_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
lea edx, [esp + 0xc]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x41b1af
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x24]
test al, al
jne 0x41b1af
mov al, byte [esi + 4]
test al, al
jne 0x41b19c
mov edi, 1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
test esi, esi
je 0x41b1af
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
add esp, 0x804
ret
Function at 0x4205f0
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x804
test eax, eax
push ebx
push ebp
push esi
push edi
je 0x420610
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x804
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edi, 0x514f20
or ecx, 0xffffffff
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x830]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x818]
and ecx, 3
dec eax
rep movsb byte es:[edi], byte [esi]
jne 0x420785
mov ecx, dword [esp + 0x82c]
mov edx, dword [esp + 0x828]
mov eax, dword [esp + 0x824]
push ecx
mov ecx, dword [esp + 0x824]
push edx
mov edx, dword [esp + 0x824]
push eax
push ecx
push edx
push 0x476ed38
lea eax, [esp + 0x2c]
push str.SELECT_flexponexit_flexponentry_FROM_GATC__sBADGE_WHERE_idcompany_s_AND_idsubject_s_AND_idsystem_s_AND_idticket_s_AND_dtactivat_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea edx, [esp + 0x14]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, eax
xor eax, eax
test ebx, ebx
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x420785
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x24]
test al, al
jne 0x420785
mov al, byte [ebx + 4]
test al, al
jne 0x420772
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax + 0x10]
call fcn.0045f9d8
cmp eax, 1
mov edi, 0x4779f0
je 0x4206ff
mov edi, 0x47481c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ebp, dword [esp + 0x830]
push 2
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x10]
call fcn.0045f9d8
cmp eax, 1
mov edi, 0x4779f0
je 0x420748
mov edi, 0x47481c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, ebp
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov ebp, 1
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
test ebx, ebx
je 0x420785
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x804
ret
Function at 0x425d60
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x804
test eax, eax
push esi
push edi
je 0x425d7c
xor eax, eax
pop edi
pop esi
add esp, 0x804
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x81c]
mov ecx, dword [esp + 0x818]
push eax
mov eax, dword [esp + 0x814]
push ecx
xor edi, edi
lea ecx, [eax + eax*2]
lea edx, [ecx + ecx*8]
lea ecx, [eax + edx*8]
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*2]
lea edx, [ecx + ecx*4]
mov ecx, dword [esp + 0x81c]
lea edx, [ecx + edx*8]
mov ecx, dword [edx*4 + 0x654914]
push ecx
lea ecx, [eax + eax*2]
lea edx, [ecx + ecx*8]
lea ecx, [eax + edx*8]
lea ecx, [ecx + ecx*2]
lea eax, [eax + ecx*2]
mov ecx, dword [0x476edd0]
lea edx, [eax + eax*4]
shl edx, 5
mov eax, dword [edx + 0x643944]
lea edx, [esp + 0x18]
push eax
push ecx
push 0x476ed38
push str.SELECT_idtrans_FROM_GATC__sTRANS_WHERE_kcom_d_AND_channel_d_AND_device_d_AND_ntrans_s_AND_datora_s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x20
lea eax, [esp + 0xc]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00445210
mov ecx, dword [0x516f90]
mov edx, dword [ecx]
call dword [edx + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x425e5b
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
test al, al
jne 0x425e5b
mov al, byte [esi + 4]
test al, al
jne 0x425e48
mov edi, 1
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
test esi, esi
je 0x425e5b
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
add esp, 0x804
ret
Function at 0x425e80
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x804
test eax, eax
push esi
push edi
je 0x425e9c
xor eax, eax
pop edi
pop esi
add esp, 0x804
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x81c]
mov ecx, dword [esp + 0x818]
push eax
mov eax, dword [esp + 0x814]
push ecx
xor edi, edi
lea ecx, [eax + eax*2]
lea edx, [ecx + ecx*8]
lea ecx, [eax + edx*8]
mov edx, dword [esp + 0x81c]
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*2]
shl ecx, 5
add ecx, edx
lea ecx, [ecx + ecx*4 + 0x672c98]
push ecx
lea ecx, [eax + eax*2]
lea ecx, [ecx + ecx*8]
lea ecx, [eax + ecx*8]
lea ecx, [ecx + ecx*2]
lea ecx, [eax + ecx*2]
lea ecx, [ecx + ecx*4]
lea edx, [edx + ecx*8]
mov ecx, dword [edx*4 + 0x654914]
push ecx
lea ecx, [eax + eax*2]
lea edx, [ecx + ecx*8]
lea ecx, [eax + edx*8]
lea ecx, [ecx + ecx*2]
lea eax, [eax + ecx*2]
mov ecx, dword [0x476edd0]
lea edx, [eax + eax*4]
shl edx, 5
mov eax, dword [edx + 0x643944]
lea edx, [esp + 0x1c]
push eax
push ecx
push 0x476ed38
push str.SELECT_idtrans_FROM_GATC__sRETRANS_WHERE_kcom_d_AND_channel_d_AND_iddevice_d_AND_ntrans_s_AND_badge_s_AND_datora_s_AND_fldelta1
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x24
lea eax, [esp + 0xc]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00445210
mov ecx, dword [0x516f90]
mov edx, dword [ecx]
call dword [edx + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x425f97
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
test al, al
jne 0x425f97
mov al, byte [esi + 4]
test al, al
jne 0x425f84
mov edi, 1
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
test esi, esi
je 0x425f97
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
add esp, 0x804
ret
Function at 0x4261e0
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x804
test eax, eax
push esi
push edi
je 0x4261fc
xor eax, eax
pop edi
pop esi
add esp, 0x804
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x810]
xor edi, edi
lea ecx, [eax + eax*2]
lea ecx, [ecx + ecx*8]
lea ecx, [eax + ecx*8]
lea edx, [ecx + ecx*2]
lea eax, [eax + edx*2]
mov edx, dword [0x476edd0]
lea eax, [eax + eax*4]
shl eax, 5
mov ecx, dword [eax + 0x643944]
lea eax, [esp + 0xc]
push ecx
push edx
push 0x476ed38
push str.SELECT_idstmt_FROM_GATC__sSTMT_WHERE_idkcom_d_AND_idchn_d
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea edx, [esp + 0xc]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x4262a7
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x24]
test al, al
jne 0x4262a7
mov al, byte [esi + 4]
test al, al
jne 0x426294
mov edi, 1
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
test esi, esi
je 0x4262a7
mov edx, dword [esi]
push 1
mov ecx, esi
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
add esp, 0x804
ret
Function at 0x426db0
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x80c
test eax, eax
push ebx
push ebp
push esi
push edi
je 0x426dd1
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x80c
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x476edd0]
lea ecx, [esp + 0x1c]
push eax
push 0x476ed38
push str.SELECT_idchn_iddevice_FROM_GATC__sSTMT_WHERE_idkcom_d
push ecx
mov dword [esp + 0x20], 0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x1c]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x426eed
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x24]
test al, al
jne 0x426eed
mov al, byte [esi + 4]
test al, al
jne 0x426eda
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0x10]
call fcn.0045f9d8
mov edx, dword [esi]
push 2
mov ecx, esi
mov dword [esp + 0x18], eax
call dword [edx + 0x10]
mov eax, dword [0x476edd8]
cmp eax, 1
fstp st(0)
jl 0x426eda
mov edi, 0xcb98
mov ecx, 0x687770
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov edx, dword [ecx - 0x10fcc]
cmp edx, eax
jne 0x426ec3
mov edx, dword [ecx]
mov eax, 1
cmp edx, eax
jl 0x426ec3
mov ebx, dword [ecx + 0x4b28]
test ebx, ebx
jne 0x426ebe
lea ebp, [edi + eax]
cmp dword [ebp*4 + 0x659540], ebx
jne 0x426ebe
mov dword [esp + 0x10], 1
inc eax
cmp eax, edx
jle 0x426ea6
mov eax, dword [esp + 0x18]
add ecx, 0x32e60
add edi, 0xcb98
dec eax
mov dword [esp + 0x18], eax
jne 0x426e87
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
test esi, esi
je 0x426eed
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x80c
ret
Function at 0x428050
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x1024
call fcn.0045ec70
mov eax, dword [0x476ecf4]
push ebx
xor ebx, ebx
push ebp
push esi
cmp eax, ebx
push edi
je 0x428076
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1024
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x476edd0]
lea ecx, [esp + 0x834]
push eax
push 0x476ed38
push str.SELECT_mifaretext_FROM_GATC__sKCOM_m_WHERE_idpckcom_d
push ecx
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x834]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebp, eax
xor eax, eax
cmp ebp, ebx
sete al
cmp eax, ebx
mov dword [0x476ecf4], eax
jne 0x428202
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x24]
test al, al
jne 0x428202
mov eax, dword [ebp]
lea ecx, [esp + 0x24]
push 1
push ecx
mov ecx, ebp
call dword [eax + 0x14]
mov edi, dword [eax + 4]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x34]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x24]
call fcn.00445280
cmp dword [esp + 0x1048], ebx
je 0x42817c
mov esi, dword [esp + 0x1044]
lea ecx, [esp + 0x3e]
push 2
push ecx
push esi
call fcn.0045eb70
mov byte [esi + 2], bl
mov esi, dword [esp + 0x1048]
lea edx, [esp + 0x4c]
push 9
push edx
push esi
call fcn.0045eb70
mov byte [esi + 9], bl
mov esi, dword [esp + 0x1058]
lea eax, [esp + 0x61]
push 0x14
push eax
push esi
call fcn.0045eb70
add esp, 0x24
mov byte [esi + 0x14], bl
jmp 0x4281e9
lea ecx, [esp + 0x34]
push 0xf
lea edx, [esp + 0x18]
push ecx
push edx
call fcn.0045eb70
lea eax, [esp + 0x20]
mov byte [esp + 0x2f], bl
push eax
call fcn.0045fb51
mov esi, dword [esp + 0x1048]
lea ecx, [esp + 0x44]
fstp qword [0x6094110]
push 0xf
push ecx
push esi
call fcn.0045eb70
mov byte [esi + 0xf], bl
mov esi, dword [esp + 0x1058]
lea edx, [esp + 0x5f]
push 0xa
push edx
push esi
call fcn.0045eb70
mov byte [esi + 0xa], bl
mov esi, dword [esp + 0x1068]
lea eax, [esp + 0x75]
push 0x10
push eax
push esi
call fcn.0045eb70
add esp, 0x34
mov byte [esi + 0x10], bl
mov edx, dword [ebp]
mov ecx, ebp
mov esi, 1
call dword [edx + 0x1c]
cmp ebp, ebx
je 0x428202
mov eax, dword [ebp]
push esi
mov ecx, ebp
call dword [eax]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1024
ret
Function at 0x428220
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x1014
call fcn.0045ec70
mov eax, dword [0x476ecf4]
push ebp
push esi
push edi
test eax, eax
je 0x428242
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x1014
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x476edd0]
lea ecx, [esp + 0x820]
push eax
push 0x476ed38
push str.SELECT_mifaretext_FROM_GATC__sKCOM_m_WHERE_idpckcom_d
push ecx
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x820]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebp, eax
xor eax, eax
test ebp, ebp
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x428341
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x24]
test al, al
jne 0x428341
mov eax, dword [ebp]
lea ecx, [esp + 0x10]
push 1
push ecx
mov ecx, ebp
call dword [eax + 0x14]
mov edi, dword [eax + 4]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call fcn.00445280
mov esi, dword [esp + 0x1028]
lea ecx, [esp + 0x20]
push 0xc
push ecx
push esi
call fcn.0045eb70
mov byte [esi + 0xc], 0
mov esi, dword [esp + 0x1030]
lea edx, [esp + 0x38]
push 0xf
push edx
push esi
call fcn.0045eb70
mov byte [esi + 0xf], 0
mov eax, dword [ebp]
add esp, 0x18
mov ecx, ebp
mov esi, 1
call dword [eax + 0x1c]
test ebp, ebp
je 0x428341
mov edx, dword [ebp]
push esi
mov ecx, ebp
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
pop edi
pop esi
pop ebp
add esp, 0x1014
ret
Function at 0x428360
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [0x476ecf4]
sub esp, 0x818
test eax, eax
push esi
push edi
je 0x42837c
xor eax, eax
pop edi
pop esi
add esp, 0x818
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [esp + 0x828]
push 2
lea eax, [esp + 0xc]
push esi
push eax
xor edi, edi
call fcn.0045eb70
add esi, 2
push 0xd
lea ecx, [esp + 0x1c]
push esi
push ecx
mov byte [esp + 0x22], 0
call fcn.0045eb70
add esp, 0x18
mov byte [esp + 0x19], 0
mov esi, 0x47d240
lea eax, [esp + 8]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4283e7
test cl, cl
je 0x4283e3
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4283e7
add eax, 2
add esi, 2
test cl, cl
jne 0x4283c3
xor eax, eax
jmp 0x4283ec
sbb eax, eax
sbb eax, 0xffffffff
mov ecx, dword [esp + 0x824]
test eax, eax
lea eax, [esp + 0xc]
push eax
push ecx
push 0x476ed38
jne 0x428409
push str.SELECT__FROM_GATC__sBADGEWRITE_WHERE_codtessera_s_AND_timemills_s
jmp 0x42840e
push str.SELECT__FROM_GATC__sZAQPBADGEVIS_WHERE_hextessera_s_AND_timemills_s
lea edx, [esp + 0x30]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [esp + 0x20]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call fcn.00445210
mov ecx, dword [0x516f90]
mov edx, dword [ecx]
call dword [edx + 0xc]
mov esi, eax
xor eax, eax
test esi, esi
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x428478
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
test al, al
jne 0x428478
mov al, byte [esi + 4]
test al, al
jne 0x428465
mov edi, 1
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x1c]
test esi, esi
je 0x428478
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, edi
pop edi
pop esi
add esp, 0x818
ret
Function at 0x429140
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x1014
call fcn.0045ec70
mov eax, dword [0x476ecf4]
push ebx
push ebp
push esi
test eax, eax
push edi
je 0x429164
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1014
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x476edd0]
lea ecx, [esp + 0x824]
push eax
push 0x476ed38
push str.SELECT_mifaretext_FROM_GATC__sKCOM_m_WHERE_idpckcom_d
push ecx
xor ebp, ebp
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x824]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebx, eax
xor eax, eax
test ebx, ebx
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x429274
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 0x24]
test al, al
jne 0x429274
mov eax, dword [ebx]
lea ecx, [esp + 0x14]
push 1
push ecx
mov ecx, ebx
call dword [eax + 0x14]
mov edi, dword [eax + 4]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x24]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x14]
call fcn.00445280
lea ecx, [esp + 0x24]
push 0x46e08c
push ecx
call dword [sym.imp.SHLWAPI.dll_StrTrimA]
lea edi, [esp + 0x24]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0xa
jne 0x429261
lea edi, [esp + 0x24]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebp, 1
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x1028]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x1c]
test ebx, ebx
je 0x429274
mov edx, dword [ebx]
push 1
mov ecx, ebx
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x1014
ret
Function at 0x429290
Capabilities:
Reference sql statements

Disassembly:
mov eax, 0x1014
call fcn.0045ec70
mov eax, dword [0x476ecf4]
push ebp
push esi
push edi
test eax, eax
je 0x4292b2
xor eax, eax
pop edi
pop esi
pop ebp
add esp, 0x1014
ret
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x476edd0]
lea ecx, [esp + 0x820]
push eax
push 0x476ed38
push str.SELECT_mifaretext_FROM_GATC__sKCOM_m_WHERE_idpckcom_d
push ecx
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x820]
push 1
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00445210
mov ecx, dword [0x516f90]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov ebp, eax
xor eax, eax
test ebp, ebp
sete al
test eax, eax
mov dword [0x476ecf4], eax
jne 0x4293b1
mov edx, dword [ebp]
mov ecx, ebp
call dword [edx + 0x24]
test al, al
jne 0x4293b1
mov eax, dword [ebp]
lea ecx, [esp + 0x10]
push 1
push ecx
mov ecx, ebp
call dword [eax + 0x14]
mov edi, dword [eax + 4]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x20]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call fcn.00445280
mov esi, dword [esp + 0x1024]
lea ecx, [esp + 0x20]
push 2
push ecx
push esi
call fcn.0045eb70
mov byte [esi + 2], 0
mov esi, dword [esp + 0x1034]
lea edx, [esp + 0x2e]
push 9
push edx
push esi
call fcn.0045eb70
mov byte [esi + 9], 0
mov eax, dword [ebp]
add esp, 0x18
mov ecx, ebp
mov esi, 1
call dword [eax + 0x1c]
test ebp, ebp
je 0x4293b1
mov edx, dword [ebp]
push esi
mov ecx, ebp
call dword [edx]
push 0x46054d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, esi
pop edi
pop esi
pop ebp
add esp, 0x1014
ret