joyce8/EMBER2024-capa huggingface dataset:
Function at 0x433000
Capabilities:
Encode data using xor
Packed with generic packer

Disassembly:
pushal
nop
nop
nop
nop
nop
call 0x43300c
nop
nop
nop
nop
nop
pop eax
add eax, 0x40a063
nop
sub eax, 0x40a009
nop
nop
nop
mov ebx, dword [eax]
nop
nop
nop
nop
nop
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
nop
nop
nop
nop
nop
nop
xor dword [ebx], edx
nop
add ebx, 4
nop
nop
nop
nop
cmp ebx, ecx
nop
nop
nop
nop
nop
jl 0x433030
nop
nop
nop
nop
nop
add eax, 0xc
nop
nop
cmp dword [eax], 0
nop
nop
nop
nop
jne 0x43301e
nop
nop
nop
nop
nop
nop
popal
jmp 0x431219
Function at 0x431000
Capabilities:
Encode data using xor
Packed with generic packer

Disassembly:
pushal
nop
nop
nop
nop
nop
mov eax, section..text
nop
push 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop edi
cmp eax, 0
nop
nop
nop
nop
nop
nop
nop
je 0x431072
nop
mov ebx, 0x40915c
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
sub ecx, eax
nop
nop
nop
nop
xor edx, edx
nop
nop
nop
nop
nop
push eax
nop
nop
nop
mov eax, ecx
nop
div edi
nop
nop
nop
nop
nop
nop
nop
xchg ecx, eax
nop
nop
nop
nop
nop
nop
nop
pop eax
nop
mov esi, 0x7ba50b36
nop
nop
xor dword [eax], esi
nop
nop
add eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
loop 0x431060
nop
mov eax, section..data
nop
nop
nop
cmp eax, 0
nop
nop
je 0x4310d2
nop
nop
mov ebx, 0x42f3f8
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
sub ecx, eax
nop
nop
nop
nop
xor edx, edx
nop
nop
push eax
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ecx
nop
nop
div edi
nop
nop
nop
nop
nop
xchg ecx, eax
nop
nop
nop
nop
nop
nop
nop
pop eax
nop
nop
mov esi, 0x15d62d43
xor dword [eax], esi
nop
nop
nop
nop
nop
nop
nop
add eax, edi
nop
nop
loop 0x4310c0
nop
nop
nop
nop
nop
nop
nop
popal
nop
jmp 0x401219
Function at 0x4414d0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov ebx, edx
mov edx, dword [ecx]
mov esi, eax
and esi, 0x8000001f
push edi
mov dword [ebp - 0x408], edx
jns 0x441502
dec esi
or esi, 0xffffffe0
inc esi
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
push eax
add ecx, 0xc
push ecx
push str._s__04X
lea eax, [ebp - 0x404]
push 0x400
push eax
shl esi, 0xd
call sym.postgres.exe_pg_snprintf
push 0x180
lea ecx, [ebp - 0x404]
push 0x8002
push ecx
call sym.postgres.exe_BasicOpenFile
mov edi, eax
add esp, 0x20
test edi, edi
jns 0x4415f1
mov esi, dword [sym.imp.MSVCR100.dll__errno]
call esi
cmp dword [eax], 2
jne 0x4415ca
cmp byte [sym.postgres.exe_InRecovery], 0
je 0x4415ca
push 0
push str.SlruPhysicalReadPage
push 0x260
push str.src_backend_access_transam_slru.c
push 0xf
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44159b
lea edx, [ebp - 0x404]
push edx
push str.file___s__doesnt_exist__reading_as_zeroes
call sym.postgres.exe_errmsg
push eax
call sym.postgres.exe_errfinish
add esp, 0xc
mov eax, dword [ebp - 0x408]
mov ecx, dword [eax + 8]
mov ebx, dword [ecx + ebx*4]
push 0x2000
push 0
push ebx
call sub.MSVCR100.dll_memset
add esp, 0xc
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov dword [0x833188], 0
call esi
mov edx, dword [eax]
pop edi
pop esi
mov dword [0x833184], edx
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
push 0
push esi
push edi
call dword [sym.imp.MSVCR100.dll__lseek]
add esp, 0xc
test eax, eax
jns 0x441636
mov dword [0x833188], 1
call dword [sym.imp.MSVCR100.dll__errno]
mov eax, dword [eax]
push edi
mov dword [0x833184], eax
call dword [sym.imp.MSVCR100.dll__close]
add esp, 4
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.MSVCR100.dll__errno]
call esi
mov ecx, dword [ebp - 0x408]
mov dword [eax], 0
mov edx, dword [ecx + 8]
mov eax, dword [edx + ebx*4]
push 0x2000
push eax
push edi
call dword [sym.imp.MSVCR100.dll__read]
add esp, 0xc
cmp eax, 0x2000
je 0x441698
mov dword [0x833188], 2
call esi
mov ecx, dword [eax]
push edi
mov dword [0x833184], ecx
call dword [sym.imp.MSVCR100.dll__close]
add esp, 4
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
push edi
call dword [sym.imp.MSVCR100.dll__close]
add esp, 4
test eax, eax
je 0x4415b7
mov dword [0x833188], 5
call esi
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov dword [0x833184], edx
xor al, al
pop ebx
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
Function at 0x44b030
Capabilities:
Execute command

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80c
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, ecx
push 1
push 9
mov dword [ebp - 0x80c], edi
mov dword [ebp - 0x808], eax
call sym.postgres.exe_LWLockAcquire
mov eax, dword [0x833510]
movzx ecx, byte [eax + 0x37]
mov edx, dword [eax + 0x30]
mov eax, dword [eax + 0x38]
push ecx
push edx
push eax
push str._08X_08X_08X
lea ecx, [ebp - 0x804]
push 0x40
push ecx
call sym.postgres.exe_pg_snprintf
push 9
call sym.postgres.exe_LWLockRelease
add esp, 0x24
cmp byte [edi], 0
lea esi, [ebp - 0x404]
mov byte [ebp - 5], 0
mov ebx, edi
je 0x44b112
mov al, byte [ebx]
cmp al, 0x25
jne 0x44b102
mov al, byte [ebx + 1]
cmp al, 0x25
je 0x44b0f4
cmp al, 0x72
je 0x44b0bd
lea edx, [ebp - 5]
cmp esi, edx
jae 0x44b10c
mov byte [esi], 0x25
jmp 0x44b10b
lea edi, [ebp - 5]
inc ebx
sub edi, esi
je 0x44b0dc
push edi
lea eax, [ebp - 0x804]
push eax
push esi
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
mov byte [edi + esi - 1], 0
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44b0e1
mov edi, dword [ebp - 0x80c]
sub eax, edx
add esi, eax
jmp 0x44b10c
lea ecx, [ebp - 5]
inc ebx
cmp esi, ecx
jae 0x44b10c
mov dl, byte [ebx]
mov byte [esi], dl
jmp 0x44b10b
lea ecx, [ebp - 5]
cmp esi, ecx
jae 0x44b10c
mov byte [esi], al
inc esi
inc ebx
cmp byte [ebx], 0
jne 0x44b0a0
push 0
push str.ExecuteRecoveryCommand
push 0xd59
push str.src_backend_access_transamxlog.c
push 0xc
mov byte [esi], 0
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b14f
mov edx, dword [ebp - 0x808]
push edi
push edx
push str.executing__s___s_
call sym.postgres.exe_errmsg_internal
push eax
call sym.postgres.exe_errfinish
add esp, 0x10
lea eax, [ebp - 0x404]
push eax
call dword [sym.imp.MSVCR100.dll_system]
mov esi, eax
add esp, 4
test esi, esi
je 0x44b1bc
test esi, 0xffffff00
jne 0x44b172
cmp esi, 0x7d
jle 0x44b17d
cmp byte [ebp + 0xc], 0
mov eax, 0x15
jne 0x44b182
mov eax, 0x13
push 0
push str.ExecuteRecoveryCommand
push 0xd6d
push str.src_backend_access_transamxlog.c
push eax
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b1bc
mov ecx, dword [ebp - 0x808]
push esi
push edi
push ecx
push str._s___s_:_return_code__d
call sym.postgres.exe_errmsg
push eax
call sym.postgres.exe_errfinish
add esp, 0x14
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
Function at 0x44b6f0
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x428
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
lea eax, [ebp - 0x428]
push eax
push str.pg_xlog
call sym.postgres.exe_pgwin32_safestat
add esp, 8
test eax, eax
jne 0x44b72f
mov ecx, dword [ebp - 0x422]
and ecx, 0xf000
cmp ecx, 0x4000
je 0x44b766
push 0
push str.ValidateXLOGDirectoryStructure
push 0xe70
push str.src_backend_access_transamxlog.c
push 0x15
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b766
push str.pg_xlog
push str.required_WAL_directory___s__does_not_exist
call sym.postgres.exe_errmsg
push eax
call sym.postgres.exe_errfinish
add esp, 0xc
push str.pg_xlog_archive_status
lea edx, [ebp - 0x404]
push 0x400
push edx
call sym.postgres.exe_pg_snprintf
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x404]
push ecx
call sym.postgres.exe_pgwin32_safestat
add esp, 0x14
test eax, eax
jne 0x44b7de
mov edx, dword [ebp - 0x422]
and edx, 0xf000
cmp edx, 0x4000
je 0x44b864
push eax
push str.ValidateXLOGDirectoryStructure
push 0xe7a
push str.src_backend_access_transamxlog.c
push 0x15
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b864
lea eax, [ebp - 0x404]
push eax
push str.required_WAL_directory___s__does_not_exist
jmp 0x44b856
push 0
push str.ValidateXLOGDirectoryStructure
push 0xe7f
push str.src_backend_access_transamxlog.c
push 0xf
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b817
lea ecx, [ebp - 0x404]
push ecx
push str.creating_missing_WAL_directory___s_
call sym.postgres.exe_errmsg
push eax
call sym.postgres.exe_errfinish
add esp, 0xc
lea edx, [ebp - 0x404]
push edx
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
test eax, eax
jns 0x44b864
push 0
push str.ValidateXLOGDirectoryStructure
push 0xe83
push str.src_backend_access_transamxlog.c
push 0x15
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44b864
lea eax, [ebp - 0x404]
push eax
push str.could_not_create_missing_directory___s_:__m
call sym.postgres.exe_errmsg
push eax
call sym.postgres.exe_errfinish
add esp, 0xc
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
Function at 0x44d120
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
push esi
push edi
mov edi, dword [0x833510]
or ecx, 0xffffffff
mov dword [edi + 0xc8], ecx
mov esi, edi
mov edx, 0xc8
push ebx
lea esp, [esp]
movzx ebx, byte [esi]
mov eax, ecx
shr eax, 0x18
xor eax, ebx
and eax, 0xff
shl ecx, 8
xor ecx, dword [eax*4 + sym.postgres.exe_pg_crc32_table]
inc esi
dec edx
mov dword [edi + 0xc8], ecx
jne 0x44d140
push 0x180
not ecx
push 0x8002
push str.global_pg_control
mov dword [edi + 0xc8], ecx
call sym.postgres.exe_BasicOpenFile
add esp, 0xc
mov esi, eax
pop ebx
test esi, esi
jns 0x44d1c9
push 0
push 0x6b3158
push 0x143f
push str.src_backend_access_transamxlog.c
push 0x16
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44d1c9
push str.global_pg_control
push str.could_not_open_control_file___s_:__m
call sym.postgres.exe_errmsg
add esp, 8
push eax
call sym.postgres.exe_errcode_for_file_access
push eax
call sym.postgres.exe_errfinish
add esp, 8
mov edi, dword [sym.imp.MSVCR100.dll__errno]
call edi
mov dword [eax], 0
mov eax, dword [0x833510]
push 0xd0
push eax
push esi
call dword [sym.imp.MSVCR100.dll__write]
add esp, 0xc
cmp eax, 0xd0
je 0x44d23d
call edi
cmp dword [eax], 0
jne 0x44d202
call edi
mov dword [eax], 0x1c
push 0
push 0x6b3158
push 0x1449
push str.src_backend_access_transamxlog.c
push 0x16
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44d23d
push str.could_not_write_to_control_file:__m
call sym.postgres.exe_errmsg
add esp, 4
push eax
call sym.postgres.exe_errcode_for_file_access
push eax
call sym.postgres.exe_errfinish
add esp, 8
push esi
call sym.postgres.exe_pg_fsync
add esp, 4
test eax, eax
je 0x44d285
push 0
push 0x6b3158
push 0x144f
push str.src_backend_access_transamxlog.c
push 0x16
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44d285
push str.could_not_fsync_control_file:__m
call sym.postgres.exe_errmsg
add esp, 4
push eax
call sym.postgres.exe_errcode_for_file_access
push eax
call sym.postgres.exe_errfinish
add esp, 8
push esi
call dword [sym.imp.MSVCR100.dll__close]
add esp, 4
pop edi
pop esi
test eax, eax
je 0x44d2d0
push 0
push 0x6b3158
push 0x1454
push str.src_backend_access_transamxlog.c
push 0x16
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x44d2d0
push str.could_not_close_control_file:__m
call sym.postgres.exe_errmsg
add esp, 4
push eax
call sym.postgres.exe_errcode_for_file_access
push eax
call sym.postgres.exe_errfinish
add esp, 8
ret
Function at 0x45a400
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0
push str.yy_fatal_error
push 0x768
push str.src_backend_bootstrap_bootscanner.c
push 0x14
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x45a439
mov eax, dword [ebp + 8]
push eax
push 0x6ab5fc
call sym.postgres.exe_errmsg_internal
push eax
call sym.postgres.exe_errfinish
add esp, 0xc
push 2
call dword [sym.imp.MSVCR100.dll_exit]
int3
Function at 0x4838d0
Capabilities:
Terminate process

Disassembly:
cmp byte [0x8337b1], 0
jne 0x48397b
cmp byte [sym.postgres.exe_Trace_notify], 0
je 0x48390f
push str.Exec_ListenPreCommit
push 0x396
push str.src_backendcommands_async.c
call sym.postgres.exe_elog_start
mov eax, dword [sym.postgres.exe_MyProcPid]
push eax
push str.Exec_ListenPreCommit__d_
push 0xe
call sym.postgres.exe_elog_finish
add esp, 0x18
cmp byte [0x8337b0], 0
jne 0x48392e
push 0
push 0x483430
call sym.postgres.exe_on_shmem_exit
add esp, 8
mov byte [0x8337b0], 1
push 1
push 0x1b
call sym.postgres.exe_LWLockAcquire
mov eax, dword [sym.postgres.exe_MyBackendId]
lea ecx, [eax + eax*2]
mov eax, dword [0x833740]
mov edx, dword [eax + 8]
mov dword [eax + ecx*4 + 0x1c], edx
mov edx, dword [eax + 0xc]
mov dword [eax + ecx*4 + 0x20], edx
mov ecx, dword [sym.postgres.exe_MyBackendId]
mov edx, dword [sym.postgres.exe_MyProcPid]
lea ecx, [ecx + ecx*2 + 6]
push 0x1b
mov dword [eax + ecx*4], edx
call sym.postgres.exe_LWLockRelease
add esp, 0xc
mov byte [0x8337b1], 1
jmp fcn.004835c0
ret

Function at 0x4871f0
Capabilities:
Write file on windows

Disassembly:
mov eax, dword [esi]
sub eax, 0
push edi
mov edi, dword [esi + 8]
je 0x4872ab
dec eax
je 0x487233
dec eax
jne 0x487328
cmp byte [esi + 0x2c], al
jne 0x487217
mov dl, 0xa
mov ecx, esi
call fcn.004871b0
mov eax, dword [edi + 4]
mov ecx, dword [edi]
push eax
push ecx
push 0x64
call sym.postgres.exe_pq_putmessage
add esp, 0xc
push edi
call sym.postgres.exe_resetStringInfo
add esp, 4
pop edi
ret
cmp byte [esi + 0x2c], 0
jne 0x487242
mov dl, 0xa
mov ecx, esi
call fcn.004871b0
mov edx, dword [edi + 4]
mov eax, dword [edi]
push edx
push eax
call sym.postgres.exe_pq_putbytes
add esp, 8
test eax, eax
je 0x487328
push 0
push str.CopySendEndOfRow
push 0x1ed
push str.src_backendcommandscopy.c
push 0x15
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x487328
push str.connection_lost_during_COPY_to_stdout
call sym.postgres.exe_errmsg
add esp, 4
push eax
push 0x6000200
call sym.postgres.exe_errcode
add esp, 4
push eax
call sym.postgres.exe_errfinish
add esp, 8
push edi
call sym.postgres.exe_resetStringInfo
add esp, 4
pop edi
ret
cmp byte [esi + 0x2c], 0
jne 0x4872c1
push 2
push 0x6bed68
push edi
call sym.postgres.exe_appendBinaryStringInfo
add esp, 0xc
mov ecx, dword [esi + 4]
mov edx, dword [edi + 4]
mov eax, dword [edi]
push ecx
push 1
push edx
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
add esp, 0x10
cmp eax, 1
jne 0x4872ed
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.MSVCR100.dll_ferror]
add esp, 4
test eax, eax
je 0x487328
push 0
push str.CopySendEndOfRow
push 0x1e1
push str.src_backendcommandscopy.c
push 0x14
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x487328
push str.could_not_write_to_COPY_file:__m
call sym.postgres.exe_errmsg
add esp, 4
push eax
call sym.postgres.exe_errcode_for_file_access
push eax
call sym.postgres.exe_errfinish
add esp, 8
push edi
call sym.postgres.exe_resetStringInfo
add esp, 4
pop edi
ret
Function at 0x48b8c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x28], 0
push ebx
mov dword [ebp - 0x54], eax
sete al
push esi
push edi
test al, al
je 0x48b8f1
cmp dword [sym.postgres.exe_whereToSendOutput], 2
mov byte [ebp - 0x45], 1
je 0x48b8f5
mov byte [ebp - 0x45], 0
mov eax, dword [sym.postgres.exe_PG_exception_stack]
mov ecx, dword [sym.postgres.exe_error_context_stack]
lea edx, [ebp - 0x44]
push 0
push edx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
call sub.MSVCR100.dll__setjmp3
add esp, 8
test eax, eax
jne 0x48b997
cmp byte [ebp - 0x45], 0
mov esi, dword [ebp - 0x54]
lea eax, [ebp - 0x44]
mov dword [sym.postgres.exe_PG_exception_stack], eax
je 0x48b930
mov ebx, esi
call fcn.00486ee0
mov eax, esi
call fcn.0048af60
cmp byte [ebp - 0x45], 0
mov edi, eax
mov ebx, edx
je 0x48b971
cmp dword [esi], 2
jne 0x48b952
push 0x63
call sym.postgres.exe_pq_putemptymessage
add esp, 4
jmp 0x48b971
mov ecx, dword [esi + 8]
push 2
push 0x6bf58c
push ecx
call sym.postgres.exe_appendBinaryStringInfo
call fcn.004871f0
push 0
call sym.postgres.exe_pq_endcopyout
add esp, 0x10
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 4]
mov dword [sym.postgres.exe_error_context_stack], eax
mov eax, edi
pop edi
mov dword [sym.postgres.exe_PG_exception_stack], edx
pop esi
mov edx, ebx
xor ecx, ebp
pop ebx
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
push 1
mov dword [sym.postgres.exe_PG_exception_stack], ecx
mov dword [sym.postgres.exe_error_context_stack], edx
call sym.postgres.exe_pq_endcopyout
add esp, 4
call sym.postgres.exe_pg_re_throw
push 1
call dword [sym.imp.MSVCR100.dll_exit]
int3
Function at 0x4a45a0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3c]
push esi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], ecx
test ecx, ecx
je 0x4a4640
mov dword [eax + 0x3c], 0
cmp dword [eax + 0x34], 5
je 0x4a4640
mov eax, dword [sym.postgres.exe_CurrentResourceOwner]
mov ecx, dword [sym.postgres.exe_PG_exception_stack]
mov edx, dword [sym.postgres.exe_error_context_stack]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x44]
push 0
push eax
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
call sub.MSVCR100.dll__setjmp3
add esp, 8
test eax, eax
jne 0x4a464f
mov edx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x58]
lea ecx, [ebp - 0x44]
mov dword [sym.postgres.exe_PG_exception_stack], ecx
mov eax, dword [edx + 0xc]
push esi
mov dword [sym.postgres.exe_CurrentResourceOwner], eax
call sym.postgres.exe_ExecutorFinish
push esi
call sym.postgres.exe_ExecutorEnd
push esi
call sym.postgres.exe_FreeQueryDesc
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
add esp, 0xc
mov dword [sym.postgres.exe_PG_exception_stack], ecx
mov dword [sym.postgres.exe_error_context_stack], edx
mov dword [sym.postgres.exe_CurrentResourceOwner], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov dword [sym.postgres.exe_PG_exception_stack], ecx
mov dword [sym.postgres.exe_error_context_stack], edx
mov dword [sym.postgres.exe_CurrentResourceOwner], eax
call sym.postgres.exe_pg_re_throw
push 1
call dword [sym.imp.MSVCR100.dll_exit]
int3
Function at 0x4a7c40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [sym.postgres.exe_MyProc]
mov eax, dword [eax + 0x20]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], eax
cmp dword [esi + 0xc], eax
je 0x4a7cd7
mov ecx, dword [sym.postgres.exe_CurrentResourceOwner]
mov edx, dword [sym.postgres.exe_PG_exception_stack]
mov eax, dword [sym.postgres.exe_error_context_stack]
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x44]
push 0
push ecx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
call sub.MSVCR100.dll__setjmp3
add esp, 8
test eax, eax
jne 0x4a7cf4
mov eax, dword [sym.postgres.exe_TopTransactionResourceOwner]
mov esi, dword [ebp - 0x54]
lea edx, [ebp - 0x44]
mov dword [sym.postgres.exe_PG_exception_stack], edx
mov dword [sym.postgres.exe_CurrentResourceOwner], eax
mov ecx, dword [esi + 4]
push 1
push ecx
call sym.postgres.exe_LockRelationOid
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
mov dword [sym.postgres.exe_PG_exception_stack], edx
mov edx, dword [ebp - 0x58]
mov dword [sym.postgres.exe_error_context_stack], eax
mov dword [sym.postgres.exe_CurrentResourceOwner], ecx
add esp, 8
mov dword [esi + 0xc], edx
mov eax, dword [esi + 4]
push 0
push eax
call sym.postgres.exe_relation_open
mov ecx, dword [ebp - 4]
add esp, 8
xor ecx, ebp
pop esi
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x48]
mov dword [sym.postgres.exe_PG_exception_stack], eax
mov dword [sym.postgres.exe_error_context_stack], ecx
mov dword [sym.postgres.exe_CurrentResourceOwner], edx
call sym.postgres.exe_pg_re_throw
push 1
call dword [sym.imp.MSVCR100.dll_exit]
int3
Function at 0x4ba5c0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x280
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
lea edx, [esi*8]
sub edx, esi
cmp dword [eax + edx*4 + 4], 0
push edi
lea edi, [eax + edx*4]
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x254], ecx
jne 0x4ba617
mov eax, dword [ebx + 0x14]
mov ecx, dword [eax + 8]
push edi
push ecx
call sym.postgres.exe_fmgr_info
mov ecx, dword [ebp - 0x254]
add esp, 8
test ecx, ecx
je 0x4ba62c
imul esi, esi, 0xc8
add esi, ecx
push esi
call sym.postgres.exe_InstrStartNode
add esp, 4
mov eax, dword [sym.postgres.exe_CurrentMemoryContext]
mov edx, dword [ebp + 0x18]
lea ecx, [ebp - 0x280]
mov dword [sym.postgres.exe_CurrentMemoryContext], edx
mov dword [ebp - 0x25c], eax
xor eax, eax
push ecx
lea edx, [ebp - 0x24c]
push edx
mov dword [ebp - 0x24c], edi
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], eax
mov byte [ebp - 0x23c], al
mov word [ebp - 0x23a], ax
call sym.postgres.exe_pgstat_init_function_usage
mov eax, dword [sym.postgres.exe_PG_exception_stack]
mov ecx, dword [sym.postgres.exe_error_context_stack]
lea edx, [ebp - 0x44]
push 0
mov edi, 1
add dword [0x8337ec], edi
push edx
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x250], ecx
call sub.MSVCR100.dll__setjmp3
add esp, 0x10
test eax, eax
jne 0x4ba799
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x24c]
mov dword [sym.postgres.exe_PG_exception_stack], eax
mov eax, dword [edx]
push ecx
call eax
mov ecx, dword [ebp - 0x258]
mov edx, dword [ebp - 0x250]
sub dword [0x8337ec], edi
mov esi, eax
lea eax, [ebp - 0x280]
push edi
push eax
mov dword [sym.postgres.exe_PG_exception_stack], ecx
mov dword [sym.postgres.exe_error_context_stack], edx
call sym.postgres.exe_pgstat_end_function_usage
mov ecx, dword [ebp - 0x25c]
add esp, 0xc
cmp byte [ebp - 0x23c], 0
mov dword [sym.postgres.exe_CurrentMemoryContext], ecx
je 0x4ba75d
push 0
push str.ExecCallTriggerFunc
push 0x753
push str.src_backendcommands_trigger.c
push 0x14
call sym.postgres.exe_errstart
add esp, 0x14
test al, al
je 0x4ba75d
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx + 4]
push eax
push str.trigger_function__u_returned_null_value
call sym.postgres.exe_errmsg
add esp, 8
push eax
push 0x1020243
call sym.postgres.exe_errcode
add esp, 4
push eax
call sym.postgres.exe_errfinish
add esp, 8
mov eax, dword [ebp - 0x254]
test eax, eax
je 0x4ba786
mov ecx, dword [ebp - 0x260]
fld1
imul ecx, ecx, 0xc8
sub esp, 8
add ecx, eax
fstp qword [esp]
push ecx
call sym.postgres.exe_InstrStopNode
add esp, 0xc
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x258]
mov eax, dword [ebp - 0x250]
sub dword [0x8337ec], edi
mov dword [sym.postgres.exe_PG_exception_stack], edx
mov dword [sym.postgres.exe_error_context_stack], eax
call sym.postgres.exe_pg_re_throw
push edi
call dword [sym.imp.MSVCR100.dll_exit]
int3