joyce8/EMBER2024-capa huggingface dataset:
Function at 0x423a60
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x423b77
sub esp, 0xc
mov edx, dword [esp + 0x10]
mov ebx, dword [edx + 0xdc]
test ebx, ebx
jne 0x423aa8
call fcn.00426140
mov ebx, dword [esp]
mov dword [ebx + 0x10], 0
mov eax, dword [esp + 0x10]
mov dword [eax + 0xd8], ebx
mov dword [eax + 0xdc], ebx
mov edx, eax
mov ebp, dword [ebx + 0xc]
test ebp, ebp
jle 0x423b0b
mov esi, dword [edx + 0xc0]
mov edi, dword [esp + 0x14]
mov eax, edi
sub edi, esi
lea esi, [ebp - 1]
cmp esi, 0x65
jae 0x423b6a
lea esi, [ebp + ebp*4]
mov ecx, edx
mov edx, dword [ebx + esi*4]
add edx, dword [ebx + esi*4 + 4]
cmp edx, edi
ja 0x423b54
cmp ebp, 0x65
jne 0x423b11
mov dword [esp + 8], ebx
call fcn.00426140
mov ebx, dword [esp]
mov dword [ebx + 0x10], 0
mov eax, dword [esp + 8]
mov dword [eax + 0x10], ebx
mov eax, dword [esp + 0x10]
mov dword [eax + 0xdc], ebx
mov ecx, eax
mov eax, dword [esp + 0x14]
jmp 0x423b11
mov eax, dword [esp + 0x14]
mov ecx, edx
mov edx, dword [ebx + 0xc]
cmp edx, 0x65
jae 0x423b48
lea ebp, [edx + 1]
mov dword [ebx + 0xc], ebp
lea edx, [edx + edx*4]
mov ebp, dword [ecx + 0xc0]
sub eax, ebp
mov dword [ebx + edx*4 + 0x14], eax
mov eax, dword [esp + 0x18]
mov ebp, dword [eax + 4]
mov dword [ebx + edx*4 + 0x18], ebp
nop
mov dword [ebx + edx*4 + 0x1c], eax
inc dword [ecx + 0xe0]
add esp, 0xc
ret
mov eax, edx
mov ecx, 0x65
call fcn.00464400
lea eax, [0x628245]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.00436e90
mov eax, esi
mov ecx, 0x65
call fcn.00464400
nop
call fcn.00462f70
jmp fcn.00423a60
Function at 0x423ee0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4240e9
sub esp, 0x30
mov eax, dword [esp + 0x38]
cmp dword [0x7d8b98], eax
jne 0x4240d2
mov eax, dword [esp + 0x34]
test byte [eax], al
mov dword [esp], eax
call fcn.00402370
mov eax, dword [esp + 4]
mov ecx, eax
and eax, 0x7fffffff
dec eax
cmp eax, 0x80000000
jae 0x4240bc
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x34]
mov dword [esp], eax
lea edx, [ecx - 1]
mov dword [esp + 8], edx
call fcn.00402390
movzx eax, byte [esp + 0xc]
test al, al
je 0x423f09
mov eax, dword [esp + 0x24]
cmp eax, 0x80000000
jne 0x4240b8
mov eax, dword [0x7f8f50]
test eax, eax
jle 0x4240b4
nop
lea eax, [0x7f9550]
mov dword [esp], eax
call fcn.004025e0
mov eax, dword [esp + 4]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x1c], ecx
lea edx, [0x7d8bb0]
mov dword [esp], edx
call fcn.004025e0
mov eax, dword [0x7d8bc0]
mov ecx, dword [0x7d8bc4]
mov edx, dword [esp + 0x14]
sub edx, eax
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x1c]
sbb eax, ecx
mov dword [esp + 0x20], eax
movsd xmm0, qword [0x7d8bc8]
movsd qword [esp + 0x28], xmm0
mov ecx, dword [esp + 8]
mov dword [esp + 0x18], ecx
mov esi, dword [esp + 4]
mov dword [esp + 0x10], esi
call fcn.004388b0
lea eax, [0x62532b]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.004391b0
mov eax, dword [esp + 0x1c]
mov ecx, eax
shr eax, 0x14
mov dword [esp + 4], eax
shl ecx, 0xc
mov eax, dword [esp + 0x14]
shr eax, 0x14
or eax, ecx
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61d8f0]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.004391b0
mov eax, dword [esp + 0x20]
mov ecx, eax
shr eax, 0x14
mov dword [esp + 4], eax
shl ecx, 0xc
mov eax, dword [esp + 0x24]
shr eax, 0x14
or ecx, eax
mov dword [esp], ecx
call fcn.00438e30
lea eax, [0x6218bf]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.004391b0
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61bfed]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.004391b0
movsd xmm0, qword [esp + 0x28]
movsd qword [esp], xmm0
call fcn.00438b70
lea eax, [0x61cb6e]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.004391b0
call fcn.00438920
add esp, 0x30
ret
add esp, 0x30
ret
lea eax, [0x6268a1]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00436e90
lea eax, [0x629e43]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00423ee0
Function at 0x424170
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x424273
sub esp, 0x18
jmp 0x424191
inc dword [0x7d3ed0]
call fcn.004244c0
cmp dword [esp], 0xffffffff
jne 0x42418b
nop
lea eax, [0x7d3ed4]
mov dword [esp], eax
call fcn.00402370
mov eax, dword [esp + 4]
test eax, 0x7fffffff
jne 0x42425c
mov edx, dword [0x7d8b98]
mov dword [esp + 8], edx
xor eax, eax
jmp 0x424217
mov dword [esp + 0xc], eax
shl eax, 7
mov dword [esp + 0x14], eax
lea ebx, [0x7d8c30]
lea ebp, [ebx + eax]
lea edx, [edx + edx*2]
mov dword [esp + 0x10], edx
lea ebp, [ebp + edx*8 + 8]
mov dword [esp], ebp
call fcn.00430100
mov eax, dword [esp + 0x14]
lea ecx, [0x7d8c30]
lea eax, [ecx + eax + 0x38]
mov ecx, dword [esp + 0x10]
lea eax, [eax + ecx*8]
mov dword [esp], eax
call fcn.00430100
mov eax, dword [esp + 0xc]
inc eax
mov ecx, dword [esp + 8]
mov edx, ecx
cmp eax, 0x88
jge 0x42422f
jae 0x424252
shr edx, 1
and edx, 1
dec edx
neg edx
cmp edx, 2
jb 0x4241c8
jmp 0x424246
lea eax, [0x7d40e0]
mov dword [esp], eax
call fcn.00421d20
call fcn.004295b0
add esp, 0x18
ret
mov eax, edx
mov ecx, 2
call fcn.00464410
mov ecx, 0x88
call fcn.00464400
lea eax, [0x628bd2]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00424170
Function at 0x426500
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4265fd
sub esp, 8
nop
lea eax, [0x7d42b0]
mov dword [esp], eax
call fcn.0040a140
mov eax, dword [0x7d4264]
test eax, eax
setne al
mov ecx, dword [0x7d4260]
test ecx, ecx
setne cl
or eax, ecx
test al, al
jne 0x4265e6
mov dword [0x7d4268], 0
mov dword [0x7d426c], 0
mov eax, dword [0x7d42bc]
test eax, eax
jne 0x426585
nop
nop
lea eax, [0x7d42b0]
mov dword [esp], eax
call fcn.0040a340
add esp, 8
ret
lea ecx, [0x7d42b4]
mov dword [eax + 8], ecx
mov eax, dword [eax]
test eax, eax
jne 0x42657a
mov eax, dword [0x7d42b4]
test eax, eax
je 0x4265b8
mov ecx, dword [0x7d42c0]
mov dword [ecx], eax
mov eax, dword [0x7d42b4]
mov ecx, dword [0x7d42c0]
mov dword [eax + 4], ecx
mov eax, dword [0x7d42bc]
mov dword [0x7d42b4], eax
jmp 0x4265d0
mov eax, dword [0x7d42c0]
mov ecx, dword [0x7d42bc]
mov dword [0x7d42b4], ecx
mov dword [0x7d42b8], eax
mov dword [0x7d42bc], 0
mov dword [0x7d42c0], 0
jmp 0x426566
lea eax, [0x627d3a]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00426500

Function at 0x4272e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x42733e
sub esp, 0x10
movzx eax, byte [esp + 0x1c]
test al, al
je 0x427327
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 4], ecx
mov byte [esp + 8], al
mov byte [esp + 9], 0
call fcn.00427630
mov eax, dword [esp + 0xc]
mov dword [esp + 0x20], eax
add esp, 0x10
ret
lea eax, [0x62b0a3]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.00436e90
nop
call fcn.004618f0
jmp fcn.004272e0
Function at 0x4273e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42752b
sub esp, 0x28
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
xor edx, edx
jmp 0x427414
sub ebp, ecx
lea ecx, [ebp + edx]
shr ebp, 0xd
sub esi, ebp
mov eax, esi
mov edx, ebx
test eax, eax
jbe 0x4274ac
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx + 0xdc]
test byte [ebp], al
mov dword [esp + 0x20], eax
mov byte [esp + 0x13], dl
mov dword [esp + 0x14], ecx
shr ecx, 0x16
mov ecx, dword [ebp + ecx*4]
test byte [ecx], al
add ecx, 0x218c4
mov dword [esp + 0x24], ecx
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
mov edx, ecx
and ecx, 0x3fffff
cmp eax, ecx
seta bl
mov ebp, dword [esp + 0x20]
mov esi, ebp
shl ebp, 0xd
add ebp, ecx
movzx edi, byte [esp + 0x13]
or ebx, edi
cmp ebp, 0x400000
jbe 0x427484
mov ebp, 0x400000
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ebp
mov byte [esp + 0x13], bl
jmp 0x4274c7
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
movzx ebx, byte [esp + 0x13]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
jmp 0x427405
mov byte [esp + 0x38], dl
add esp, 0x28
ret
mov ecx, edx
mov edx, dword [esp + 0x14]
movzx ebx, byte [esp + 0x13]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
cmp ebp, eax
jbe 0x427405
mov ecx, dword [esp + 0x24]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.004023d0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x427492
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.004023f0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x18]
cmp ecx, eax
jb 0x42750e
mov edx, dword [esp + 0x1c]
cmp eax, edx
jbe 0x4274b4
jmp 0x427514
mov edx, dword [esp + 0x1c]
jmp 0x4274b4
lea eax, [0x62a2f3]
mov dword [esp], eax
mov dword [esp + 4], 0x33
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.004273e0
Function at 0x4288d0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x428a20
sub esp, 0x14
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 8]
mov edx, dword [esp + 0x18]
cmp edx, ecx
jne 0x428936
cmp dword [edx], eax
jne 0x428902
mov ecx, dword [eax]
mov dword [edx], ecx
jmp 0x428909
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ecx], ebx
cmp dword [edx + 4], eax
jne 0x428916
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
jmp 0x42891e
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
add esp, 0x14
ret
mov dword [esp + 0x10], ecx
mov ecx, dword [eax + 0x10]
mov dword [esp + 0xc], ecx
mov edx, dword [eax + 4]
mov dword [esp + 8], edx
call fcn.004388b0
lea eax, [0x6290da]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61af96]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004391b0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00439170
lea eax, [0x61af90]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004391b0
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.00439170
lea eax, [0x61c589]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.004391b0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00439170
lea eax, [0x61af6c]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004391b0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00439170
call fcn.00438ad0
call fcn.00438920
lea eax, [0x61e70e]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.004288d0
Function at 0x428c20
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x428d90
sub esp, 0x1c
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004269b0
mov eax, dword [esp + 4]
test eax, eax
je 0x428d79
mov dword [esp + 0xc], eax
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0x18]
nop
inc dword [edx + 0x7c]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp], eax
call fcn.00424730
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
sub eax, dword [ecx + 0xc]
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x24]
movzx ebx, byte [edx + 6]
mov byte [esp + 0xb], bl
lea ebp, [ecx + 0x48]
mov dword [esp + 0x18], ebp
nop
mov dword [esp], ebp
call fcn.0040a140
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x4c]
movzx edx, byte [esp + 0xb]
mov ebx, dword [esp + 0x10]
jmp 0x428cb7
mov ecx, ebp
mov ebp, dword [ecx]
test ebp, ebp
je 0x428d1d
movzx esi, word [ebp + 4]
cmp esi, ebx
jne 0x428ccc
cmp byte [ebp + 6], dl
je 0x428cd7
cmp esi, ebx
ja 0x428d1d
jne 0x428cb5
cmp byte [ebp + 6], dl
jbe 0x428cb5
jmp 0x428d1d
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.0040a340
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x428d14
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x428d14
mov dword [eax + 8], 0xfffffade
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov edx, dword [esp + 0x24]
mov word [edx + 4], bx
mov ebx, dword [ecx]
mov dword [edx], ebx
mov dword [ecx], edx
mov dword [esp], eax
call fcn.00428b20
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.0040a340
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x7c]
lea ebx, [edx - 1]
mov dword [ecx + 0x7c], ebx
cmp edx, 1
jne 0x428d70
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x428d70
mov dword [eax + 8], 0xfffffade
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
lea eax, [0x624526]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00428c20
Function at 0x429210
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42932c
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 1
je 0x4292a5
cmp cl, 2
je 0x42924d
cmp cl, 3
jne 0x429315
mov byte [eax + 8], 1
jmp 0x429311
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.0042e500
nop
lea eax, [0x7dd0f8]
mov dword [esp], eax
call fcn.0040a140
nop
mov eax, dword [0x7dd0c4]
sub eax, dword [0x7dd0a8]
mov dword [0x7dd0c4], eax
mov eax, dword [0x7dd0b4]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x7dd0b4], ecx
nop
lea eax, [0x7dd0f8]
mov dword [esp], eax
call fcn.0040a340
jmp 0x429311
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.004153a0
nop
lea eax, [0x7dd0f8]
mov dword [esp], eax
call fcn.0040a140
nop
mov eax, dword [0x7dd09c]
sub eax, dword [0x7dd080]
mov dword [0x7dd09c], eax
mov eax, dword [0x7dd08c]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x7dd08c], ecx
nop
nop
lea eax, [0x7dd0f8]
mov dword [esp], eax
call fcn.0040a340
add esp, 0x14
ret
lea eax, [0x61e5fe]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00429210

Function at 0x429730
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x429874
sub esp, 0x10
mov ecx, dword [0x78d970]
cmp ecx, 0x12
ja 0x4297d0
mov ecx, dword [esp + 0x14]
test byte [ecx], al
mov edx, dword [0x7f8db0]
test edx, edx
jne 0x429770
mov eax, dword [esp + 0x1c]
mov dword [ecx + 0x84], eax
jmp 0x42977f
lea edi, [ecx + 0x84]
mov eax, dword [esp + 0x1c]
call fcn.00464380
lea edx, [ecx + 0x40]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0042f670
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0042b590
mov eax, dword [0x78d324]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x34], eax
mov eax, dword [0x7f8db0]
test eax, eax
jne 0x4297bd
mov eax, dword [esp + 0x18]
mov dword [ecx + 0x80], eax
jmp 0x4297cc
lea edi, [ecx + 0x80]
mov eax, dword [esp + 0x18]
call fcn.00464380
add esp, 0x10
ret
mov dword [esp + 0xc], ecx
cmp ecx, 0x20
sbb eax, eax
mov dword [esp + 8], eax
call fcn.004388b0
lea eax, [0x62591a]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.004391b0
mov ecx, dword [esp + 0xc]
mov eax, 1
shl eax, cl
mov ecx, dword [esp + 8]
and eax, ecx
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438fb0
call fcn.00438ad0
call fcn.00438920
call fcn.004388b0
lea eax, [0x6248c6]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004391b0
mov dword [esp + 4], 0
mov dword [esp], 0x40000
call fcn.00438fb0
call fcn.00438ad0
call fcn.00438920
lea eax, [0x628a23]
mov dword [esp], eax
mov dword [esp + 4], 0x2b
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00429730
Function at 0x42b760
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42b8c7
sub esp, 0x14
mov ebx, dword [esp + 0x1c]
test ebx, 0x3fffff
jne 0x42b84d
mov ebp, dword [esp + 0x20]
test ebp, 0x3fffff
jne 0x42b84d
mov ebx, dword [esp + 0x18]
mov eax, 3
jmp 0x42b7ad
dec eax
mov esi, dword [esp + 0x20]
mov ebx, ebp
mov ebp, esi
test eax, eax
jl 0x42b838
nop
cmp eax, 4
jae 0x42b843
test byte [ebx], al
lea esi, [0x78d980]
mov ecx, dword [esi + eax*4]
cmp ecx, 0x20
sbb edi, edi
mov dword [esp + 0x10], edi
lea esi, [0x78d960]
mov esi, dword [esi + eax*4]
cmp esi, 0x20
mov edx, esi
sbb esi, esi
mov dword [esp + 0xc], esi
nop
lea esi, [eax + eax*2]
mov dword [esp + 8], esi
mov edi, dword [ebx + esi*4 + 8]
lea ebx, [ebx + esi*4]
dec ebp
shr ebp, cl
mov esi, dword [esp + 0x10]
and ebp, esi
mov ecx, edx
mov esi, 1
shl esi, cl
mov ecx, dword [esp + 0xc]
and ecx, esi
nop
add ebp, ecx
neg ecx
and ecx, ebp
cmp dword [ebx + 4], ecx
jge 0x42b82f
cmp edi, ecx
jb 0x42b83c
mov ebx, dword [esp + 8]
mov ebp, dword [esp + 0x18]
mov dword [ebp + ebx*4 + 4], ecx
jmp 0x42b7a4
mov ebp, dword [esp + 0x18]
jmp 0x42b7a4
add esp, 0x14
ret
mov edx, edi
call fcn.00464440
mov ecx, 4
call fcn.00464400
call fcn.004388b0
lea eax, [0x61e80e]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61c0d3]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00439030
call fcn.00438ad0
call fcn.00438920
lea eax, [0x6295de]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0042b760

Function at 0x42f4d0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42f51e
sub esp, 8
mov eax, dword [esp + 0xc]
cmp eax, eax
setbe cl
mov edx, dword [esp + 0x10]
cmp edx, edx
setbe bl
cmp bl, cl
jne 0x42f507
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
add esp, 8
ret
lea eax, [0x62b02b]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0042f4d0
Function at 0x430100
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4302e0
sub esp, 0x2c
mov eax, dword [esp + 0x30]
test byte [eax], al
nop
lea ecx, [eax + 0x10]
mov dword [esp + 0x28], ecx
mov dword [esp], ecx
call fcn.004025e0
nop
mov eax, dword [esp + 8]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 4]
cmp eax, ecx
jb 0x430262
mov eax, dword [esp + 0x30]
lea ecx, [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 0xc]
shr eax, 9
cmp dword [esp + 4], eax
jbe 0x4301ff
mov dword [esp + 0x10], eax
nop
nop
mov eax, dword [esp + 0x30]
add eax, 4
mov dword [esp], eax
call fcn.00402380
nop
nop
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x10]
lea eax, [eax + ecx*4]
mov dword [esp + 0x20], eax
mov dword [esp], eax
call fcn.00402380
mov eax, dword [esp + 4]
test eax, eax
je 0x4301ff
mov dword [esp + 0x18], eax
lea ecx, [eax + 0xc]
mov dword [esp + 0x1c], ecx
mov dword [esp], ecx
call fcn.00402370
mov eax, dword [esp + 4]
test eax, eax
je 0x43024c
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00402370
cmp dword [esp + 4], 0x200
je 0x430236
nop
nop
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004025a0
lea eax, [0x7f8c58]
mov dword [esp], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
call fcn.00430360
nop
nop
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00402600
nop
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402430
add esp, 0x2c
ret
lea eax, [0x629c8a]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.00436e90
lea eax, [0x62a593]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00436e90
mov dword [esp + 0x14], ecx
call fcn.004388b0
lea eax, [0x61b5b9]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61bbeb]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00438e30
call fcn.00438ad0
call fcn.00438920
lea eax, [0x6267cf]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00430100
Function at 0x431550
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x431616
sub esp, 0x1c
mov eax, dword [sym.imp.kernel32.dll_CreateIoCompletionPort]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0xffffffff
call fcn.00434370
mov eax, dword [esp + 0x14]
mov dword [0x78d31c], eax
test eax, eax
je 0x4315a9
add esp, 0x1c
ret
call fcn.00465090
mov eax, dword [esp]
mov dword [esp + 0x18], eax
call fcn.004388b0
lea eax, [0x6298cc]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61a83d]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.004391b0
call fcn.00438920
lea eax, [0x623bcf]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00431550

Function at 0x431690
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43177d
sub esp, 0x1c
lea eax, [0x7f8b78]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00402390
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4316d4
add esp, 0x1c
ret
mov eax, dword [0x78d31c]
mov ecx, dword [sym.imp.kernel32.dll_PostQueuedCompletionStatus]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00434370
mov eax, dword [esp + 0x14]
test eax, eax
je 0x431710
add esp, 0x1c
ret
call fcn.00465090
mov eax, dword [esp]
mov dword [esp + 0x18], eax
call fcn.004388b0
lea eax, [0x62b193]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00438e30
lea eax, [0x61a83d]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.004391b0
call fcn.00438920
lea eax, [0x62a326]
mov dword [esp], eax
mov dword [esp + 4], 0x33
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00431690
Function at 0x431b50
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x431bf8
sub esp, 0x10
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x18]
cmp ecx, 0x72
je 0x431b7a
cmp ecx, 0x77
jne 0x431ba3
mov edx, dword [esp + 0x1c]
mov dword [eax + 0x1c], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 0x20], edx
mov eax, dword [eax + 0x14]
mov edx, dword [esp + 0x14]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00430d30
add esp, 0x10
ret
mov dword [esp + 0xc], ecx
call fcn.004388b0
lea eax, [0x62b157]
mov dword [esp], eax
mov dword [esp + 4], 0x3c
call fcn.004391b0
mov eax, dword [esp + 0xc]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438fb0
call fcn.00438ad0
call fcn.00438920
lea eax, [0x621dde]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.00431b50