joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40f420
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x48
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
mov edx, eax
or eax, ecx
mov ebx, dword [esp + 0x54]
or eax, ebx
test eax, 3
jne 0x40f5cb
movzx eax, byte [0x93f150]
test al, al
je 0x40f501
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x58]
test byte [eax], al
nop
mov ebp, dword [0x926eb4]
test byte [ebp], al
mov esi, ecx
shr ecx, 0x16
mov ecx, dword [ebp + ecx*4]
test ecx, ecx
je 0x40f489
mov ebp, esi
shr esi, 0xd
and esi, 0x1ff
mov ecx, dword [ecx + esi*4]
jmp 0x40f48d
mov ebp, esi
xor ecx, ecx
mov dword [esp + 0x44], eax
mov esi, dword [esp + 0x58]
test esi, esi
je 0x40f4c9
movzx edi, byte [esi + 0xf]
xchg edi, eax
test al, 0x40
xchg edi, eax
jne 0x40f4c9
movzx ecx, byte [ecx + 0x3e]
test cl, 1
je 0x40f4b5
xor ecx, ecx
xor esi, esi
xor edi, edi
jmp 0x40f4c3
mov ecx, dword [esi + 0x14]
nop
mov ecx, dword [ecx]
mov esi, ecx
mov edi, dword [esp + 0x58]
mov ecx, ebp
mov dword [esp + 0x28], ecx
jmp 0x40f534
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
call fcn.0040ec30
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x28], ecx
mov ecx, eax
mov eax, dword [esp + 0x44]
jmp 0x40f534
add esp, 0x48
ret
mov esi, dword [edi + 0x988]
mov dword [esp + 0x2c], esi
mov edx, dword [esp + 0x2c]
add edx, 4
mov dword [edi + 0x988], edx
mov eax, dword [eax]
mov dword [esi], eax
mov esi, ebx
mov dword [esp + 0x28], ecx
mov edi, ebp
mov ebx, dword [esp + 0x54]
mov ebp, dword [esp + 0x4c]
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
lea eax, [ebx + ebp]
mov dword [esp + 0x10], eax
call fcn.0040edc0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x20]
test eax, eax
je 0x40f5c7
mov dword [esp + 0x38], edx
mov esi, dword [esp + 0x4c]
sub eax, esi
mov edi, dword [esp + 0x50]
add eax, edi
mov edi, dword [esp + 0x44]
mov esi, dword [edi + 0x988]
add esi, 4
nop
cmp dword [edi + 0x98c], esi
jae 0x40f505
mov dword [esp + 0x40], ebp
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x3c], eax
call fcn.00430a20
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
jmp 0x40f505
add esp, 0x48
ret
lea eax, [0x72b953]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046ad70
nop
int3
Function at 0x40fd40
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40ff8c
sub esp, 0x20
call fcn.00437f30
call fcn.00437f30
lea eax, [0x71f827]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.00438790
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
call fcn.00437f90
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x40fe7d
call fcn.00437f30
call fcn.00438130
call fcn.00437f90
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x40fdde
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x95], 2
lea eax, [0x730ed7]
mov dword [esp], eax
mov dword [esp + 4], 0x3e
call fcn.0046ad70
call fcn.00437f30
lea eax, [0x726eee]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.00438790
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b1f7]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438790
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b22d]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438790
call fcn.00437f90
lea eax, [0x71b8f8]
mov dword [esp], eax
mov dword [esp + 4], 6
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xc], eax
call fcn.0041d2c0
jmp 0x40fdb3
lea ecx, [eax + 0x3f]
nop
nop
mov dword [esp], ecx
call fcn.00476200
movzx eax, byte [esp + 4]
mov byte [esp + 0x13], al
cmp al, 1
je 0x40ff67
call fcn.00437f30
lea eax, [0x72115d]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00438790
call fcn.00437f90
movzx eax, byte [esp + 0x13]
movzx eax, al
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x48]
mov dword [esp + 0x18], edx
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x14], ecx
call fcn.00437f30
lea eax, [0x71db21]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.00438790
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71d381]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71d38d]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00438790
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00437f90
jmp 0x40fd9c
call fcn.00437f30
lea eax, [0x723f15]
mov dword [esp], eax
mov dword [esp + 4], 0x19
call fcn.00438790
call fcn.00437f90
jmp 0x40febc
call fcn.00470430
jmp fcn.0040fd40
Function at 0x410100
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x30
mov eax, dword [esp + 0x34]
test eax, eax
je 0x410341
mov ecx, dword [esp + 0x40]
cmp dword [eax], ecx
jne 0x41027c
movzx ecx, byte [eax + 0xf]
test cl, 0x40
jne 0x410204
movzx ecx, byte [0x93f150]
test cl, cl
je 0x41015b
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x58]
mov dword [esp + 0x2c], ecx
test byte [ecx], al
mov edx, dword [eax + 0x14]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
xor esi, esi
xor edi, edi
jmp 0x410162
add esp, 0x30
ret
add esi, 4
cmp dword [eax + 4], esi
jbe 0x410200
test esi, 0x1f
jne 0x410179
movzx edi, byte [edx]
inc edx
jmp 0x41017b
shr edi, 1
test edi, 1
je 0x41015f
mov dword [esp + 0x1c], edx
add ebp, esi
add ebx, esi
mov eax, dword [ecx + 0x988]
add eax, 8
nop
cmp dword [ecx + 0x98c], eax
jae 0x4101ca
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x24], ebx
call fcn.00430a20
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x24]
mov ebp, dword [esp + 0x28]
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x10]
mov eax, dword [ecx + 0x988]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
add edx, 8
mov dword [ecx + 0x988], edx
mov edx, dword [ebp]
mov dword [eax], edx
mov edx, dword [ebx]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
jmp 0x41015f
add esp, 0x30
ret
mov dword [esp], eax
call fcn.00460890
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x14], ecx
call fcn.00437f30
lea eax, [0x72b97b]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00438790
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.00438790
lea eax, [0x71e892]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00438790
call fcn.00437f90
lea eax, [0x729b8d]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0046ad70
mov dword [esp], eax
call fcn.00460890
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x34]
mov edx, dword [edx]
mov dword [esp + 0x18], edx
call fcn.00437f30
lea eax, [0x72b97b]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.00438790
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 4], eax
call fcn.00438790
lea eax, [0x71cd67]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438790
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x71fea4]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00438790
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x729b8d]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0046ad70
lea eax, [0x72bfc5]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.0046ad70
nop
int3
Function at 0x411a30
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x411bf3
sub esp, 0x18
mov eax, dword [esp + 0x28]
movzx eax, byte [eax]
movzx edx, byte [esp + 0x2c]
test al, dl
je 0x411ac9
nop
mov eax, dword [0x926eb4]
test byte [eax], al
mov ecx, dword [esp + 0x1c]
mov edx, ecx
shr edx, 0x19
and edx, 0x1ffff
shr ecx, 0x16
mov eax, dword [eax + ecx*4]
and ecx, 7
mov ebx, 1
shl ebx, cl
mov byte [esp + 0x13], bl
mov eax, dword [eax + 0x8c0]
test byte [eax], al
add eax, edx
mov dword [esp + 0x14], eax
mov dword [esp], eax
call fcn.00476200
movzx eax, byte [esp + 4]
movzx edx, byte [esp + 0x13]
test dl, al
je 0x411ab0
mov byte [esp + 0x34], 1
add esp, 0x18
ret
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov byte [esp + 4], dl
call fcn.004765b0
mov byte [esp + 0x34], 0
add esp, 0x18
ret
call fcn.00437f30
call fcn.00437f30
lea eax, [0x730518]
mov dword [esp], eax
mov dword [esp + 4], 0x39
call fcn.00438790
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
call fcn.00438130
call fcn.00437f90
call fcn.00437f30
lea eax, [0x72363a]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.00438790
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b1f7]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438790
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438620
lea eax, [0x71b22d]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00438790
call fcn.00437f90
lea eax, [0x71b520]
mov dword [esp], eax
mov dword [esp + 4], 4
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0xc], eax
call fcn.0041d2c0
lea eax, [0x71b2d5]
mov dword [esp], eax
mov dword [esp + 4], 3
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xffffffff
call fcn.0041d2c0
mov eax, dword [0x93ee7c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x95], 2
lea eax, [0x727759]
mov dword [esp], eax
mov dword [esp + 4], 0x1f
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00411a30
Function at 0x413ee0
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4140de
sub esp, 0x18
mov eax, dword [0x93ed90]
test eax, eax
jne 0x4140c7
nop
nop
lea eax, [0x93ed80]
mov dword [esp], eax
call fcn.0040a2c0
mov eax, dword [0x93ed84]
test eax, eax
je 0x413f28
cmp dword [eax + 8], 0xcc
jne 0x413f9e
mov edx, dword [0x93ed88]
test edx, edx
jne 0x413f80
mov dword [esp], 0x1000
mov dword [esp + 4], 0
lea eax, [0x944050]
mov dword [esp + 8], eax
call fcn.0040be50
mov eax, dword [esp + 0xc]
mov dword [0x93ed88], eax
mov ecx, dword [0x93ed8c]
mov dword [eax], ecx
mov eax, dword [0x93ed88]
mov dword [0x93ed8c], eax
movzx eax, byte [0x93f4c0]
test al, al
jne 0x413f80
xor eax, eax
jmp 0x414098
mov edx, dword [0x93ed88]
mov ebx, dword [edx + 4]
mov dword [0x93ed88], ebx
mov ebx, dword [0x93ed84]
mov dword [edx + 4], ebx
mov dword [0x93ed84], edx
mov edx, dword [0x93ed84]
mov eax, dword [edx + 8]
cmp eax, 0xcc
jae 0x414077
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00476460
mov eax, dword [0x93f150]
mov ecx, dword [esp + 0x10]
lea ecx, [ecx + ecx*4]
test eax, eax
jne 0x413ff0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
jmp 0x414030
call fcn.004718a0
mov eax, dword [esp + 0x20]
mov dword [edi], eax
mov edx, dword [esp + 0x14]
mov ebx, dword [edx + ecx*4 + 0x10]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x28]
mov dword [edi + 8], ebx
mov ebp, dword [edx + ecx*4 + 0x1c]
mov dword [edi + 0xc], ebp
mov ebp, dword [esp + 0x2c]
mov dword [edi + 0x10], ebp
mov esi, dword [edx + ecx*4 + 0x20]
mov dword [edi + 0x14], esi
mov esi, dword [esp + 0x1c]
mov dword [edi + 0x18], esi
mov esi, dword [edx + ecx*4 + 0x14]
mov dword [edi + 0x1c], esi
mov dword [edx + ecx*4 + 0x10], eax
mov eax, dword [esp + 0x24]
mov dword [edx + ecx*4 + 0x18], eax
mov dword [edx + ecx*4 + 0x1c], ebx
mov dword [edx + ecx*4 + 0x20], ebp
mov eax, dword [esp + 0x1c]
mov dword [edx + ecx*4 + 0x14], eax
nop
nop
lea eax, [0x93ed80]
mov dword [esp], eax
call fcn.0040a4e0
nop
lea eax, [0x93ed7c]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004765e0
add esp, 0x18
ret
mov ecx, 0xcc
call fcn.004718c0
lea edx, [0x8ed3dc]
movzx ebx, byte [edx + eax]
lea ebp, [0x93f4c0]
mov byte [ebp + ecx], bl
lea eax, [ecx + 1]
cmp eax, 0x80
jge 0x413f80
mov ecx, eax
mov eax, 0xcccccccd
imul ecx
add edx, ecx
sar edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 5
jb 0x414081
mov ecx, 5
call fcn.004718b0
lea eax, [0x7236b2]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00413ee0
Function at 0x414e50
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x414f53
sub esp, 0x18
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
test ecx, ecx
je 0x414f1c
mov ebx, dword [eax + 0xc]
test ebx, ebx
je 0x414eac
mov ecx, dword [ebx]
mov dword [eax + 0xc], ecx
mov ecx, dword [eax]
add dword [eax + 0x1c], ecx
movzx ecx, byte [eax + 0x24]
test cl, cl
je 0x414ea4
mov dword [esp + 0x10], ebx
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00471ff0
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x20], ebx
add esp, 0x18
ret
cmp dword [eax + 0x14], ecx
jae 0x414ede
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], edx
call fcn.0040be50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x1c]
mov dword [ecx + 0x10], eax
mov eax, dword [ecx + 0x18]
mov dword [ecx + 0x14], eax
mov eax, ecx
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
test edx, edx
je 0x414f02
mov dword [esp + 0x14], ecx
mov ebx, dword [edx]
mov ebp, dword [eax + 8]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [eax]
add dword [eax + 0x10], edx
mov edx, dword [eax + 0x14]
sub edx, dword [eax]
mov dword [eax + 0x14], edx
mov edx, dword [eax]
add dword [eax + 0x1c], edx
mov dword [esp + 0x20], ecx
add esp, 0x18
ret
call fcn.00437f30
lea eax, [0x72f3bd]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00438790
call fcn.00437f90
lea eax, [0x722c3f]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00414e50
Function at 0x418d10
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x418db5
sub esp, 0x10
mov eax, dword [esp + 0x14]
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
je 0x418d9e
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp byte [ecx + 5], al
je 0x418d88
mov dword [esp], ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
call fcn.00418f60
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov byte [ecx + 5], al
mov byte [ecx + 6], 1
add esp, 0x10
ret
lea eax, [0x72d44d]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.0046ad70
lea eax, [0x72dee1]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00418d10

Function at 0x418dc0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x418eb3
sub esp, 0x1c
mov eax, dword [esp + 0x20]
movzx ecx, byte [eax + 6]
test cl, cl
je 0x418e9c
lea ecx, [eax + 0x38]
mov dword [esp + 0x18], ecx
mov dword [esp], ecx
call fcn.004763e0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x28]
cmp edx, ecx
sete bl
xchg ebp, ebx
setg bl
xchg ebp, ebx
mov esi, dword [esp + 0x24]
cmp esi, eax
xchg edi, ebx
setae bl
xchg edi, ebx
and ebx, edi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x418e73
mov ebx, dword [esp + 0x20]
mov ebp, dword [ebx + 0x44]
mov dword [esp], ebx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov edi, ebp
sar ebp, 0x1f
sub esi, eax
sbb edx, ecx
mov dword [esp + 0x14], edx
mov eax, esi
mul edi
mov dword [esp + 0xc], eax
imul ebp, esi
mov esi, dword [esp + 0x14]
imul esi, edi
add edx, esi
add edx, ebp
mov dword [esp + 0x10], edx
call fcn.00419340
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x24]
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
call fcn.004763a0
mov eax, dword [esp + 0x20]
mov byte [eax + 6], 0
mov dword [esp], eax
call fcn.00419510
add esp, 0x1c
ret
lea eax, [0x72df10]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00418dc0
Function at 0x418ec0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x418f49
sub esp, 0x10
mov eax, dword [esp + 0x14]
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
je 0x418f2e
mov eax, dword [esp + 0x14]
movzx ecx, byte [eax + 6]
test cl, cl
jne 0x418f32
mov dword [esp], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
call fcn.00418f60
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00419510
add esp, 0x10
ret
add esp, 0x10
ret
lea eax, [0x7236ca]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00418ec0
Function at 0x419570
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4196a4
sub esp, 0x14
mov eax, dword [esp + 0x18]
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 1
call fcn.00476310
movzx eax, byte [esp + 0xc]
test al, al
je 0x41968d
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 8], ecx
call fcn.00418f60
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x44], eax
mov edx, eax
sar edx, 0x1f
mov ebx, 0x3b9aca00
mov ebp, edx
mul ebx
mov dword [ecx + 0x10], eax
imul ebx, ebp, 0x3b9aca00
add edx, ebx
mov dword [ecx + 0x14], edx
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx + 0xc]
cmp ebp, edx
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
seta bl
xchg edi, ebx
cmp eax, ebx
setb cl
and ecx, esi
or ecx, edi
test cl, cl
jne 0x419643
cmp ebp, edx
setb cl
cmp eax, ebx
seta al
and esi, eax
or esi, ecx
xchg esi, eax
test al, al
xchg esi, eax
je 0x41967d
mov eax, dword [esp + 0x18]
lea ecx, [eax + 4]
nop
mov dword [esp], ecx
mov byte [esp + 4], 0
call fcn.004765d0
jmp 0x41967d
mov ecx, dword [esp + 0x18]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
lea eax, [ecx + 0x40]
mov dword [esp + 0x10], eax
lea edx, [ecx + 4]
nop
nop
mov dword [esp], edx
mov byte [esp + 4], 1
call fcn.004765d0
mov eax, dword [0x945070]
inc eax
mov ecx, dword [esp + 0x10]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00476530
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00419510
add esp, 0x14
ret
lea eax, [0x72ba1b]
mov dword [esp], eax
mov dword [esp + 4], 0x28
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00419570
Function at 0x419870
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x419a66
sub esp, 0x28
mov eax, dword [esp + 0x2c]
test byte [eax], al
mov dword [esp], eax
call fcn.00476560
mov eax, dword [esp + 8]
mov ecx, eax
shr eax, 0x1d
mov edx, dword [esp + 4]
movzx ebx, byte [esp + 0x30]
cmp bl, al
jne 0x4199e4
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], edx
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00476410
movzx eax, byte [esp + 0x14]
test al, al
je 0x419887
mov eax, dword [esp + 0x38]
mov ecx, eax
and eax, 0xe0000000
mov edx, dword [esp + 0x24]
and edx, 0x1fffffff
or eax, edx
cmp ecx, eax
setl dl
sete bl
mov ebp, dword [esp + 0x34]
mov esi, dword [esp + 0x20]
cmp ebp, esi
xchg edi, ebx
setb bl
xchg edi, ebx
and edi, ebx
or edx, edi
test dl, dl
je 0x41991a
xor ecx, ecx
xor ebp, ebp
jmp 0x41991e
sub ebp, esi
sbb ecx, eax
test ebp, ebp
sete al
test ecx, ecx
sete dl
and edx, eax
test dl, dl
jne 0x4199ca
movzx eax, byte [esp + 0x30]
cmp al, 2
ja 0x419964
cmp al, 1
je 0x41994b
cmp al, 2
je 0x419969
jmp 0x4199ce
nop
lea eax, [0x93f410]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00476400
jmp 0x4199c6
cmp al, 3
jne 0x419982
nop
lea eax, [0x93f400]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00476400
jmp 0x4199c6
cmp al, 4
jne 0x4199ce
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ebp
nop
nop
lea eax, [0x93f410]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00476400
nop
lea eax, [0x921a60]
mov dword [esp], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
call fcn.00476400
add esp, 0x28
ret
add esp, 0x28
ret
lea eax, [0x72f055]
mov dword [esp], eax
mov dword [esp + 4], 0x33
call fcn.0046ad70
mov dword [esp + 0x24], eax
call fcn.00437f30
lea eax, [0x71e27b]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.00438790
movzx eax, byte [esp + 0x30]
movzx eax, al
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
lea eax, [0x71b70c]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00438790
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00438480
call fcn.00438130
call fcn.00437f90
lea eax, [0x730f15]
mov dword [esp], eax
mov dword [esp + 4], 0x3e
call fcn.0046ad70
nop
call fcn.00470430
jmp fcn.00419870
Function at 0x41d6c0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 8
movzx edx, byte [0x93ed31]
test dl, dl
jne 0x41d7a1
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0xc]
sub eax, dword [edx + 0xc]
mov ebx, dword [edx + 0x2c]
test byte [ebx], al
mov ebp, dword [edx + 0x38]
mul ebp
mov ebp, edx
shr edx, 3
and ebp, 7
mov ecx, ebp
mov esi, 1
shl esi, cl
add edx, ebx
nop
nop
nop
nop
mov dword [esp], edx
xchg esi, eax
mov byte [esp + 4], al
xchg esi, eax
call fcn.004765b0
nop
nop
nop
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0xc]
mov edx, dword [0x926eb4]
test byte [edx], al
mov ebx, ecx
shr ebx, 0x10
and ebx, 0x3f
mov ebp, ecx
shr ebp, 0xd
and ebp, 7
mov esi, ecx
mov ecx, ebp
mov edi, 1
shl edi, cl
shr esi, 0x16
mov edx, dword [edx + esi*4]
test byte [edx], al
movzx ebp, byte [edx + ebx + 0x840]
lea edx, [edx + ebx + 0x840]
xchg ebp, eax
xchg edi, ebx
test bl, al
xchg edi, ebx
xchg ebp, eax
jne 0x41d76c
mov dword [esp], edx
xchg edi, eax
mov byte [esp + 4], al
xchg edi, eax
call fcn.004765b0
mov eax, dword [esp + 0xc]
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x58]
mov eax, dword [eax + 0x44]
mov edx, dword [ecx + 0x974]
mov ebx, dword [ecx + 0x978]
add edx, eax
mov dword [ecx + 0x974], edx
adc ebx, 0
mov dword [ecx + 0x978], ebx
add esp, 8
ret
lea eax, [0x72cfce]
mov dword [esp], eax
mov dword [esp + 4], 0x2c
call fcn.0046ad70
nop
int3