joyce8/EMBER2024-capa huggingface dataset:
Function at 0x42e2a0
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42e492
sub esp, 0x24
mov edx, dword [0x93f49c]
test edx, edx
je 0x42e41c
mov edx, dword [esp + 0x38]
cmp edx, 5
jg 0x42e448
mov ebx, dword [0x93ee7c]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
nop
inc dword [ebp + 0x7c]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebp + 0x17c]
test esi, esi
jbe 0x42e43f
mov dword [esp + 0x20], ebp
mov esi, dword [ebp + 0x178]
mov dword [esi], 0xffffffff
mov esi, dword [ebx + 0x18]
mov esi, dword [esi + 0x50]
test esi, esi
je 0x42e35c
cmp ebx, esi
je 0x42e35c
mov ebx, dword [ebp + 0x17c]
cmp ebx, 1
jb 0x42e433
mov eax, dword [ebp + 0x178]
mov ecx, dword [ebp + 0x180]
mov dword [esp], esi
mov dword [esp + 4], edx
dec ecx
lea edx, [ebx - 1]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 4
add eax, ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
call fcn.004599e0
mov eax, dword [esp + 0x14]
jmp 0x42e39f
mov ebx, dword [ebp + 0x17c]
cmp ebx, 1
jb 0x42e427
mov eax, dword [ebp + 0x178]
mov ecx, dword [ebp + 0x180]
mov dword [esp], edx
dec ecx
lea edx, [ebx - 1]
mov ebx, ecx
neg ecx
sar ecx, 0x1f
and ecx, 4
add eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.0046f6e0
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x20]
mov edx, dword [ebx + 0x180]
cmp eax, edx
ja 0x42e420
mov ecx, dword [ebx + 0x178]
mov ebp, dword [esp + 0x28]
mov dword [esp], ebp
mov ebp, dword [esp + 0x2c]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x30]
mov dword [esp + 8], ebp
mov ebp, dword [esp + 0x34]
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x1c], eax
call fcn.0042ed50
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x7c]
lea edx, [ecx - 1]
nop
mov ebx, dword [0x93ee7c]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov dword [eax + 0x7c], edx
cmp ecx, 1
jne 0x42e418
movzx eax, byte [ebx + 0x69]
test al, al
je 0x42e418
mov dword [ebx + 8], 0xfffffade
add esp, 0x24
ret
add esp, 0x24
ret
mov ecx, eax
call fcn.004718f0
mov eax, 1
xor ecx, ecx
call fcn.00471910
mov eax, 1
xor ecx, ecx
call fcn.00471910
xor eax, eax
mov ecx, eax
call fcn.004718b0
call fcn.00437f30
lea eax, [0x71e8ec]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00438790
mov eax, dword [esp + 0x38]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.004385b0
call fcn.00437f90
lea eax, [0x71feec]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0042e2a0
Function at 0x42f450
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42f49c
sub esp, 8
mov eax, dword [esp + 0xc]
cmp eax, eax
setbe cl
mov edx, dword [esp + 0x10]
cmp edx, edx
setbe bl
cmp bl, cl
jne 0x42f485
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
add esp, 8
ret
lea eax, [0x730b0a]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0042f450
Function at 0x4300c0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43029d
sub esp, 0x2c
mov eax, dword [esp + 0x30]
test byte [eax], al
lea ecx, [eax + 0x10]
mov dword [esp + 0x28], ecx
nop
mov dword [esp], ecx
call fcn.00476560
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
cmp eax, ecx
ja 0x43021b
shr ecx, 9
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0x30]
lea edx, [eax + 8]
mov dword [esp + 0x24], edx
mov dword [esp], edx
call fcn.00476370
mov eax, dword [esp + 0x14]
cmp dword [esp + 4], eax
jbe 0x4301b8
mov eax, dword [esp + 0x30]
add eax, 4
nop
nop
mov dword [esp], eax
call fcn.004762f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
lea eax, [eax + ecx*4]
mov dword [esp + 0x20], eax
nop
nop
mov dword [esp], eax
call fcn.004762f0
mov eax, dword [esp + 4]
test eax, eax
je 0x4301b8
mov dword [esp + 0x18], eax
lea ecx, [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp], ecx
call fcn.004762e0
mov eax, dword [esp + 4]
test eax, eax
je 0x430205
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.004762e0
cmp dword [esp + 4], 0x200
je 0x4301ef
nop
nop
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00476520
lea eax, [0x93eeb0]
mov dword [esp], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
call fcn.00430320
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00476580
nop
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004763b0
add esp, 0x2c
ret
lea eax, [0x72e957]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.0046ad70
lea eax, [0x72f3f1]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.0046ad70
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], eax
call fcn.00437f30
lea eax, [0x71bc29]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00438790
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x71c3b7]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438790
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x729536]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.004300c0
Function at 0x431920
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4319e4
sub esp, 0x1c
mov eax, dword [sym.imp.kernel32.dll_CreateIoCompletionPort]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xffffffff
call fcn.00434130
mov eax, dword [esp + 0x14]
mov dword [0x8ed368], eax
test eax, eax
je 0x431977
add esp, 0x1c
ret
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x18], eax
call fcn.00437f30
lea eax, [0x72df6e]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x71b2ea]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00438790
call fcn.00437f90
lea eax, [0x725416]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00431920

Function at 0x431a70
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x431b6c
sub esp, 0x1c
lea eax, [0x93edb8]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
jne 0x431ab2
add esp, 0x1c
ret
mov byte [esp], 2
mov dword [esp + 4], 0
call fcn.004318d0
mov eax, dword [esp + 8]
mov ecx, dword [0x8ed368]
mov edx, dword [sym.imp.kernel32.dll_PostQueuedCompletionStatus]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call fcn.00434130
mov eax, dword [esp + 0x14]
test eax, eax
je 0x431aff
add esp, 0x1c
ret
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x18], eax
call fcn.00437f30
lea eax, [0x730b46]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x71b2ea]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00438790
call fcn.00437f90
lea eax, [0x72f0bb]
mov dword [esp], eax
mov dword [esp + 4], 0x33
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00431a70
Function at 0x432030
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4322a2
sub esp, 0x40
mov byte [esp + 0x4c], 0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x3c], eax
mov ecx, dword [0x91eb94]
mov edx, dword [eax + 0x314]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], 1
call fcn.00434090
mov eax, dword [esp + 0xc]
test eax, eax
je 0x43209c
cmp eax, 0x103
je 0x43219c
cmp eax, 0xc0000120
jne 0x43224e
xor eax, eax
mov ecx, dword [esp + 0x44]
sub eax, ecx
mov dword [esp], eax
mov eax, 0
mov ecx, dword [esp + 0x48]
sbb eax, ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x64
mov dword [esp + 0xc], 0
call fcn.00462910
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov eax, dword [sym.imp.kernel32.dll_SetWaitableTimer]
mov ecx, dword [esp + 0x3c]
mov edx, dword [ecx + 0x310]
lea ebx, [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.004341d0
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4321f3
mov byte [esp], 3
mov dword [esp + 4], 0
call fcn.004318d0
mov eax, dword [esp + 8]
mov ecx, dword [0x8ed368]
mov edx, dword [0x91eb90]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [ebx + 0x314]
mov ebx, dword [ebx + 0x310]
lea esi, [esp + 0x4c]
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], esi
call fcn.00434270
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x4321a0
add esp, 0x40
ret
mov dword [esp + 0x28], eax
call fcn.00437f30
lea eax, [0x73031e]
mov dword [esp], eax
mov dword [esp + 4], 0x38
call fcn.00438790
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x722cc9]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046ad70
call fcn.004724f0
mov eax, dword [esp]
mov dword [esp + 0x38], eax
call fcn.00437f30
lea eax, [0x72c136]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.00438790
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x722cc9]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046ad70
mov dword [esp + 0x2c], eax
call fcn.00437f30
lea eax, [0x72f737]
mov dword [esp], eax
mov dword [esp + 4], 0x35
call fcn.00438790
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x722cc9]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00432030
Function at 0x434270
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 8
mov dword [esp + 0x30], 0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [eax + 0x1b0], 8
lea ecx, [esp + 0x10]
mov dword [eax + 0x1b4], ecx
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.00433f50
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
add esp, 8
ret
Function at 0x43aab0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43ac91
sub esp, 0x10
mov eax, dword [esp + 0x18]
lea ecx, [eax - 0x1001]
cmp ecx, 3
jbe 0x43aae1
cmp eax, 0x1009
jne 0x43abe9
mov ecx, eax
and eax, 0xffffefff
mov edx, dword [esp + 0x1c]
cmp edx, eax
jne 0x43ab42
mov eax, dword [esp + 0x14]
test byte [eax], al
lea ebx, [eax + 0x4c]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
je 0x43ab42
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
nop
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x43ab3e
movzx ecx, byte [eax + 0x69]
test cl, cl
je 0x43ab3e
mov dword [eax + 8], 0xfffffade
add esp, 0x10
ret
call fcn.00437f30
lea eax, [0x72b379]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.00438790
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00438710
lea eax, [0x71c3db]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71c3e4]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438790
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
call fcn.00438130
call fcn.00437f90
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00439f70
lea eax, [0x72f48d]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.0046ad70
call fcn.00437f30
lea eax, [0x72cb8f]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00438790
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00438710
lea eax, [0x71c3db]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71c3e4]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438790
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
call fcn.00438130
call fcn.00437f90
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00439f70
lea eax, [0x72ff00]
mov dword [esp], eax
mov dword [esp + 4], 0x37
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0043aab0
Function at 0x43b1b0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43b223
sub esp, 0xc
movzx edx, byte [esp + 0x18]
movzx eax, dl
cmp eax, 0x25
jae 0x43b218
lea ecx, [0x8ee300]
movzx eax, byte [ecx + eax]
test al, al
je 0x43b202
nop
mov eax, dword [esp + 0x10]
mov byte [eax + 0x68], dl
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], 4
call fcn.0043ada0
add esp, 0xc
ret
lea eax, [0x72fa8d]
mov dword [esp], eax
mov dword [esp + 4], 0x36
call fcn.0046ad70
mov ecx, 0x25
call fcn.004718b0
nop
call fcn.00470430
jmp fcn.0043b1b0
Function at 0x43ca90
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x18
movzx eax, byte [0x93ed2d]
test al, al
jne 0x43cac1
nop
lea eax, [0x72c63d]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.004485a0
mov dword [esp], 1
call fcn.00432ed0
call fcn.0043d140
mov eax, dword [esp]
mov dword [esp + 0x14], eax
movzx ecx, byte [esp + 4]
mov byte [eax + 0x94], cl
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.00471640
lea eax, [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x1c]
mov byte [esp + 8], al
call fcn.004048d0
mov eax, dword [esp + 0x14]
mov byte [eax + 0x8e], 0
call fcn.004702b0
call fcn.004338d0
movzx eax, byte [esp + 0x1c]
test al, al
je 0x43cb23
xor ecx, ecx
xor edx, edx
jmp 0x43cb47
movzx ecx, byte [0x920c30]
test cl, cl
jne 0x43cb34
xor ecx, ecx
xor edx, edx
jmp 0x43cb47
call fcn.0045c890
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, eax
movzx eax, byte [esp + 0x1c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 0x50]
mov dword [esp], ebx
mov dword [esp + 4], 6
mov dword [esp + 8], 3
call fcn.0043ada0
nop
lea eax, [0x9214c0]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call fcn.004763f0
movzx eax, byte [esp + 0x1c]
test al, al
jne 0x43cbca
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x43cbca
mov eax, dword [esp + 0x14]
mov edx, dword [eax + 0x50]
mov ebx, dword [esp + 0x10]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0045e1e0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.0045c9c0
movzx eax, byte [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0x8f], al
add esp, 0x18
ret
Function at 0x43d210
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43d387
sub esp, 0x18
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
inc dword [ecx + 0x7c]
test byte [eax], al
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xc], ecx
call fcn.0043c7a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov dword [eax + 0x5c], ecx
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
test ecx, ecx
je 0x43d339
mov ecx, dword [ecx + 0x18]
test ecx, ecx
je 0x43d339
mov dword [esp + 0x14], eax
mov edx, dword [ecx + 0x13c]
test edx, edx
jne 0x43d2a5
movzx ecx, byte [ecx + 0x8c]
test cl, cl
je 0x43d339
nop
nop
lea eax, [0x93f210]
mov dword [esp], eax
call fcn.0040a2c0
mov eax, dword [0x93f220]
test eax, eax
je 0x43d370
mov eax, dword [0x93f214]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0xb4], eax
nop
mov dword [0x93f214], ecx
movzx eax, byte [0x93f218]
test al, al
je 0x43d2fa
mov byte [0x93f218], 0
lea eax, [0x93f21c]
mov dword [esp], eax
call fcn.0040a5e0
nop
nop
lea eax, [0x93f210]
mov dword [esp], eax
call fcn.0040a4e0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x43d335
movzx ecx, byte [eax + 0x69]
test cl, cl
je 0x43d335
mov dword [eax + 8], 0xfffffade
add esp, 0x18
ret
mov dword [esp], eax
call fcn.0043d3a0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x43d36c
movzx ecx, byte [eax + 0x69]
test cl, cl
je 0x43d36c
mov dword [eax + 8], 0xfffffade
add esp, 0x18
ret
lea eax, [0x72c667]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0043d210
Function at 0x43de30
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43dfa4
sub esp, 0x14
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0xb8]
test edx, edx
je 0x43df8d
mov edx, dword [edx + 0x88]
cmp edx, ecx
jne 0x43df8d
mov dword [esp + 0x10], eax
mov ecx, dword [ecx + 0x58]
test ecx, ecx
je 0x43de86
call fcn.00443fc0
call fcn.0043daa0
mov dword [esp], 1
call fcn.004441a0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov ecx, dword [eax + 0x18]
test byte [ecx], al
add ecx, 0xac
nop
mov dword [esp], ecx
call fcn.0040a660
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0x18]
mov dword [eax + 0xac], 0
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0xb8]
test byte [ecx], al
add ecx, 0x4c
mov dword [esp], ecx
call fcn.004762e0
mov eax, dword [esp + 4]
mov ecx, eax
and eax, 0xffffefff
cmp eax, 1
jne 0x43df14
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x5c]
mov dword [esp], ecx
call fcn.00443db0
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov dword [eax + 0x5c], 0
add esp, 0x14
ret
mov dword [esp + 8], ecx
call fcn.00437f30
lea eax, [0x72cbba]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00438790
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x729d61]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.00438790
call fcn.00437f90
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0xb8]
mov dword [esp], eax
call fcn.00439f70
lea eax, [0x72400f]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.0046ad70
lea eax, [0x7287dd]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.0043de30
Function at 0x445f90
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x446137
sub esp, 0x20
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00446350
movzx eax, byte [esp + 4]
test al, al
je 0x446120
mov eax, dword [esp + 0x28]
test eax, eax
sete cl
mov edx, dword [esp + 0x2c]
test edx, edx
sete bl
and ebx, ecx
test bl, bl
je 0x445fe7
nop
call fcn.004725f0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x24]
test byte [ecx], al
lea ebx, [ecx + 0x11a8]
mov dword [esp], ebx
call fcn.004762e0
mov eax, dword [esp + 4]
test eax, eax
jne 0x446037
mov eax, dword [0x91eff0]
mov ecx, dword [0x91eff4]
mov edx, dword [0x91eff8]
mov ebx, dword [esp + 0x24]
mov ebp, dword [ebx]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebp
call fcn.00445f10
mov edx, dword [esp + 0x24]
mov ecx, dword [edx]
mov ebx, ecx
sar ebx, 0x1f
shr ebx, 0x1b
lea eax, [ecx + ebx]
mov ebx, eax
and ebx, 0xffffffe0
sub ecx, ebx
test ecx, ecx
jl 0x44611b
mov ebx, dword [0x91efe4]
sar eax, 5
mov ebp, 1
shl ebp, cl
cmp ecx, 0x20
sbb esi, esi
and ebp, esi
cmp ebx, eax
jbe 0x446114
mov ecx, dword [0x91efe0]
lea ebx, [edx + 0x958]
mov dword [esp + 0x1c], ebx
lea eax, [ecx + eax*4]
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.004765e0
mov eax, dword [0x9214c4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], eax
nop
mov dword [0x9214c4], ecx
nop
lea eax, [0x9214c8]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.004763f0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov byte [esp + 4], 4
mov eax, dword [esp + 0x14]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc], ecx
call fcn.004196b0
movzx eax, byte [esp + 0x10]
test al, al
je 0x4460fe
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], eax
add esp, 0x20
ret
lea eax, [0x72bb33]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046ad70
mov ecx, ebx
call fcn.004718b0
call fcn.00435150
lea eax, [0x7295e5]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00445f90
Function at 0x4503b0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x450477
sub esp, 0x10
lea eax, [0x6fac00]
mov dword [esp + 8], eax
lea eax, [0x93ed20]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 8]
movzx ecx, byte [eax + 0xf]
test cl, 0x40
jne 0x450460
lea ecx, [0x93f180]
lea edx, [0x8efde0]
jmp 0x4503fc
mov edx, dword [edx + 0x120]
test edx, edx
je 0x450412
cmp dword [edx + 0xa0], ecx
ja 0x4503f6
cmp dword [edx + 0x88], ecx
jbe 0x4503f6
jmp 0x450414
xor edx, edx
test edx, edx
je 0x45044a
mov ecx, dword [eax]
mov ebx, dword [eax + 4]
mov eax, dword [eax + 0x14]
sub eax, dword [edx + 0x9c]
lea edx, [ecx + 7]
and edx, 0xfffffff8
neg edx
mov dword [0x93f180], edx
mov dword [0x93f184], ecx
mov dword [0x93f188], ebx
mov dword [0x93f18c], eax
add esp, 0x10
ret
lea eax, [0x72cbe5]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.0046ad70
lea eax, [0x730c72]
mov dword [esp], eax
mov dword [esp + 4], 0x3d
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.004503b0