joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40c040
Capabilities:
Decompress data using quicklz

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40c20f
sub esp, 0x34
mov eax, dword [esp + 0x38]
cmp eax, 0x7000000
jle 0x40c1e2
mov eax, 0x7000000
mov dword [esp + 0x38], eax
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov edx, dword [ecx + 0x90]
mov ebx, dword [ecx + 0x94]
mov dword [ecx + 0x90], ebx
mov ebp, edx
shl edx, 0x11
xor edx, ebp
mov ebp, ebx
xor ebx, edx
shr edx, 7
xor edx, ebx
mov ebx, ebp
shr ebp, 0x10
xor ebp, edx
mov dword [ecx + 0x94], ebp
lea ecx, [ebp + ebx]
and ecx, 0x3ffffff
inc ecx
mov dword [esp], ecx
call fcn.00458030
movsd xmm0, qword [esp + 4]
movsd qword [esp + 0x24], xmm0
mov eax, dword [esp + 0x28]
mov ecx, eax
shr eax, 0x14
and eax, 0x7ff
mov edx, eax
add eax, 0xfffffc01
mov ebx, ecx
shr ecx, 0xf
and ecx, 0x1f
mov ebp, ecx
add ecx, 1
mov esi, 0
adc esi, 0
mov edi, dword [esp + 0x24]
shr edi, 0x1b
shl ebx, 5
or edi, ebx
test esi, esi
jne 0x40c202
cmp ecx, 0x21
jae 0x40c1f6
mov dword [esp + 0x10], edi
lea ebx, [0xb7bf00]
movsd xmm0, qword [ebx + ebp*8]
movsd qword [esp + 0x14], xmm0
movsd xmm1, qword [ebx + ecx*8]
movsd qword [esp + 0x1c], xmm1
mov dword [esp], eax
add edx, 0xfffffc01
mov eax, 0xffffffff
adc eax, 0
mov dword [esp + 4], eax
call fcn.004526e0
mov eax, dword [esp + 0x10]
and eax, 0xfffff
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x2c], xmm0
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004527d0
movsd xmm0, qword [esp + 0x2c]
movsd xmm1, qword [esp + 0x14]
addsd xmm0, xmm1
movsd xmm2, qword [esp + 0x1c]
subsd xmm2, xmm1
mulsd xmm2, qword [esp + 8]
movsd xmm1, qword [0xe68f78]
mulsd xmm1, xmm2
addsd xmm0, xmm1
movsd xmm1, qword [0xe69048]
subsd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm0, xmm1
jbe 0x40c1bd
xorps xmm0, xmm0
mov eax, dword [esp + 0x38]
cvtsi2sd xmm1, eax
movsd xmm2, qword [0xe69128]
mulsd xmm1, xmm2
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
inc eax
mov dword [esp + 0x3c], eax
add esp, 0x34
ret
test eax, eax
jne 0x40c06d
mov dword [esp + 0x3c], 0
add esp, 0x34
ret
mov eax, ecx
mov ecx, 0x21
call fcn.00458110
mov eax, ecx
mov ecx, 0x21
call fcn.004581f0
nop
call fcn.004567f0
jmp fcn.0040c040
Function at 0x415200
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4152ed
sub esp, 0x10
mov eax, dword [0x143f34c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x358]
cmp edx, eax
je 0x415267
lea ebx, [eax - 2]
cmp edx, ebx
jne 0x41526b
mov dword [esp], ecx
call fcn.00415160
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.004420d0
mov eax, dword [esp + 0x14]
add eax, 0x358
mov dword [esp], eax
mov eax, dword [0x143f34c]
mov dword [esp + 4], eax
call fcn.00402650
add esp, 0x10
ret
add esp, 0x10
ret
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
call fcn.0042f560
lea eax, [0xd48ec3]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.0042fe00
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
lea eax, [0xd5c189]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0042fe00
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
call fcn.0042f780
call fcn.0042f5d0
lea eax, [0xd47ef1]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00415200
Function at 0x415790
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41590a
sub esp, 0x24
mov eax, dword [esp + 0x2c]
movzx ecx, word [eax + 0x38]
test cx, cx
je 0x4158f3
mov ecx, dword [0x143f34c]
lea edx, [eax + 0x30]
lea ebx, [ecx + 1]
mov dword [esp + 0x20], ebx
mov ebp, dword [eax + 0x30]
mov dword [esp + 0x1c], ebp
cmp ebp, ebx
jne 0x4158e2
mov dword [esp], edx
lea eax, [ecx - 1]
mov dword [esp + 4], eax
call fcn.00402650
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0x1c]
movzx edx, word [eax + 0x38]
sub ecx, edx
test ecx, ecx
jg 0x415818
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
cmp ecx, edx
je 0x415809
add esp, 0x24
ret
mov dword [esp], eax
mov byte [esp + 4], 0
call fcn.004210b0
jmp 0x415805
mov eax, dword [esp + 0x28]
test byte [eax], al
xor edx, edx
sub edx, ecx
mov dword [esp + 0x18], edx
lea ebx, [eax + 0x18]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov ebx, ecx
sar ecx, 0x1f
xor ebp, ebp
sub ebp, ebx
mov ebx, 0
sbb ebx, ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 8], ebx
call fcn.004025b0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00409f00
mov eax, dword [esp + 0x28]
lea ecx, [eax + 0x10]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.00424e60
mov eax, dword [esp + 0x28]
lea ecx, [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.00424fc0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
jne 0x4158b2
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.0040a0e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
cmp eax, ecx
mov eax, dword [esp + 0x2c]
jmp 0x415803
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0x40]
mov eax, dword [esp + 0x18]
mov ebx, edx
mul edx
lea ebp, [0x1451520]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov ebp, dword [esp + 0x14]
imul ebp, ebx
add edx, ebp
mov dword [esp + 8], edx
call fcn.004025b0
jmp 0x415893
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00402650
jmp 0x4157e8
lea eax, [0xd63b77]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00415790
Function at 0x416160
Capabilities:
Check for software breakpoints

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41637c
sub esp, 0x18
mov eax, dword [0x144d9fc]
test eax, eax
jne 0x416365
lea eax, [0x144d9e8]
mov dword [esp], eax
call fcn.00409f00
mov eax, dword [0x1437ce4]
test eax, eax
je 0x4161ac
cmp dword [eax + 8], 0xcc
jne 0x416274
mov edx, dword [0x1437cdc]
test edx, edx
jne 0x416256
mov dword [esp], 0x1000
mov dword [esp + 4], 0
lea eax, [0x144ff78]
mov dword [esp + 8], eax
call fcn.0040c220
mov eax, dword [esp + 0xc]
mov dword [0x1437cdc], eax
mov ecx, dword [0x1437cb8]
mov dword [eax], ecx
mov eax, dword [0x1437cdc]
mov dword [0x1437cb8], eax
movzx eax, byte [0x144e1a0]
test al, al
jne 0x416256
xor eax, eax
jmp 0x416213
lea esi, [0x144e1a0]
xchg ebp, eax
mov byte [esi + ebx], al
xchg ebp, eax
lea eax, [ebx + 1]
cmp eax, 0x80
jge 0x416256
mov ecx, eax
mov eax, 0xcccccccd
imul ecx
add edx, ecx
sar edx, 2
mov eax, ecx
sar ecx, 0x1f
sub edx, ecx
lea edx, [edx + edx*4]
mov ebx, eax
sub eax, edx
cmp eax, 5
jae 0x41635b
lea edx, [0xb72294]
movzx ebp, byte [edx + eax]
cmp ebx, 0x80
jb 0x416205
jmp 0x41634f
mov edx, dword [0x1437cdc]
mov ebx, dword [edx + 4]
mov dword [0x1437cdc], ebx
mov ebx, dword [0x1437ce4]
mov dword [edx + 4], ebx
mov dword [0x1437ce4], edx
mov edx, dword [0x1437ce4]
mov eax, dword [edx + 8]
cmp eax, 0xcc
jae 0x416345
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
lea eax, [edx + 8]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402590
mov eax, dword [esp + 0x10]
lea eax, [eax + eax*4]
mov ecx, dword [esp + 0x14]
lea edi, [ecx + eax*4 + 0x10]
mov edx, dword [0x144ddb0]
lea ebx, [ecx + eax*4 + 0x1c]
lea ebp, [ecx + eax*4 + 0x20]
lea esi, [ecx + eax*4 + 0x14]
test edx, edx
jne 0x416336
mov edx, dword [esp + 0x20]
mov dword [ecx + eax*4 + 0x10], edx
mov edx, dword [esp + 0x24]
mov dword [ecx + eax*4 + 0x18], edx
mov edx, dword [0x144ddb0]
test edx, edx
jne 0x416313
mov edx, dword [esp + 0x28]
mov dword [ecx + eax*4 + 0x1c], edx
mov edx, dword [esp + 0x2c]
mov dword [ecx + eax*4 + 0x20], edx
mov edx, dword [esp + 0x1c]
mov dword [ecx + eax*4 + 0x14], edx
mov byte [0x144d858], 1
lea eax, [0x144d9e8]
mov dword [esp], eax
call fcn.0040a0e0
add esp, 0x18
ret
mov edi, ebx
mov eax, dword [esp + 0x28]
call fcn.00458080
mov edi, ebp
mov eax, dword [esp + 0x2c]
call fcn.00458080
mov edi, esi
mov eax, dword [esp + 0x1c]
call fcn.00458080
jmp 0x4162fa
mov edx, eax
mov eax, dword [esp + 0x20]
call fcn.00458080
mov eax, edx
jmp 0x4162d0
mov ecx, 0xcc
call fcn.00458110
mov eax, ebx
mov ecx, pe_nt_image_headers32
call fcn.00458100
mov ecx, 5
call fcn.00458100
lea eax, [0xd55c04]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00416160
Function at 0x41bbe0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41bed6
sub esp, 0x24
mov eax, dword [esp + 0x2c]
movzx edx, byte [eax + 0x3f]
test dl, dl
je 0x41bd62
nop
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov ebx, dword [eax + 0xc]
mov ebp, ecx
xor esi, esi
jmp 0x41bc21
mov edi, dword [edx]
mov esi, ecx
mov ecx, edx
mov edx, edi
test edx, edx
je 0x41bc3f
mov ecx, dword [edx + 0xc]
cmp ecx, ebx
jae 0x41bc30
mov ecx, edx
jmp 0x41bc19
jbe 0x41bebf
lea esi, [edx + 4]
mov ecx, edx
mov edx, esi
jmp 0x41bc19
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], esi
lea eax, [0x1441830]
mov dword [esp], eax
call fcn.00416ed0
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov ebx, dword [edx + 0x90]
mov ebp, dword [edx + 0x94]
mov dword [edx + 0x90], ebp
mov esi, ebx
shl ebx, 0x11
xor ebx, esi
mov esi, ebp
xor ebp, ebx
shr ebx, 7
xor ebx, ebp
mov ebp, esi
shr esi, 0x10
xor esi, ebx
mov dword [edx + 0x94], esi
lea edx, [ebp + esi]
mov dword [eax + 0x18], edx
mov dword [eax + 0x10], ecx
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x14], edx
mov dword [esp], ecx
call fcn.0041b920
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x20]
mov dword [ecx + 0x1c], eax
mov eax, dword [esp + 0x18]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x14]
mov dword [eax], ecx
mov eax, ecx
jmp 0x41bcdd
mov ecx, dword [ecx + 8]
mov edx, dword [ecx + 8]
test edx, edx
jne 0x41bd47
xor edx, edx
test dl, dl
jne 0x41bcda
mov ecx, dword [esp + 0x28]
jmp 0x41bcfc
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x28]
mov eax, edx
mov ecx, ebx
mov edx, dword [eax + 8]
test edx, edx
je 0x41bd43
mov ebx, dword [eax + 0x18]
cmp dword [edx + 0x18], ebx
jbe 0x41bd43
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0xc]
cmp dword [ebx + 0xc], ebp
invalid
invalid

Function at 0x41c070
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41c0e9
sub esp, 8
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
jmp 0x41c093
mov eax, ebx
test eax, eax
je 0x41c0c2
mov edx, dword [eax + 0x10]
test edx, edx
je 0x41c0d2
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x41c0aa
cmp dword [ebx + 0x14], ecx
jae 0x41c091
cmp dword [edx + 0x10], ecx
jae 0x41c0c2
mov eax, dword [eax]
test eax, eax
je 0x41c0be
cmp dword [eax + 0x14], ecx
jb 0x41c0be
mov ebx, eax
jmp 0x41c091
xor eax, eax
jmp 0x41c0ba
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x18], eax
add esp, 8
ret
lea eax, [0xd5d22d]
mov dword [esp], eax
mov dword [esp + 4], 0x1e
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.0041c070
Function at 0x422450
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42248b
sub esp, 8
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x422474
add esp, 8
ret
lea eax, [0xd516d1]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00422450
Function at 0x4250b0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42518f
sub esp, 0x14
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov dword [esp + 0x10], ecx
test ecx, ecx
jne 0x425106
mov edx, dword [eax + 4]
test edx, edx
jne 0x425106
mov edx, dword [eax + 8]
test edx, edx
jne 0x425106
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 4]
test edx, edx
je 0x425102
mov dword [edx], eax
mov dword [ecx + 4], eax
mov dword [eax + 8], ecx
add esp, 0x14
ret
mov dword [ecx], eax
jmp 0x4250f8
mov ecx, dword [eax + 4]
mov dword [esp + 0xc], ecx
mov edx, dword [eax + 8]
mov dword [esp + 8], edx
call fcn.0042f560
lea eax, [0xd648db]
mov dword [esp], eax
mov dword [esp + 4], 0x25
call fcn.0042fe00
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.0042fdc0
call fcn.0042f740
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.0042fdc0
call fcn.0042f740
mov eax, dword [esp + 0xc]
mov dword [esp], eax
call fcn.0042fdc0
call fcn.0042f740
mov eax, dword [esp + 8]
mov dword [esp], eax
call fcn.0042fdc0
call fcn.0042f780
call fcn.0042f5d0
lea eax, [0xd511a9]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.004250b0

Function at 0x425830
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x425939
sub esp, 0x14
mov eax, dword [esp + 0x18]
movzx ecx, byte [eax + 6]
cmp cl, 1
je 0x4258b7
cmp cl, 2
jne 0x425922
mov ecx, dword [eax + 8]
mov dword [esp], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 4], ecx
call fcn.00426590
lea eax, [0x144189c]
mov dword [esp], eax
call fcn.00409f00
nop
mov eax, dword [0x1441890]
sub eax, dword [0x1441878]
mov dword [0x1441890], eax
mov eax, dword [0x1441884]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x1441884], ecx
lea eax, [0x144189c]
mov dword [esp], eax
call fcn.0040a0e0
add esp, 0x14
ret
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [eax + 0x10]
mov ebp, dword [eax + 0x14]
mov esi, dword [esp + 0x1c]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
call fcn.00416160
lea eax, [0x144189c]
mov dword [esp], eax
call fcn.00409f00
nop
mov eax, dword [0x144186c]
sub eax, dword [0x1441854]
mov dword [0x144186c], eax
mov eax, dword [0x1441860]
mov ecx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [0x1441860], ecx
lea eax, [0x144189c]
mov dword [esp], eax
call fcn.0040a0e0
jmp 0x4258b3
lea eax, [0xd4c0f3]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00425830
Function at 0x425db0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x425df5
sub esp, 8
mov eax, dword [esp + 0xc]
cmp dword [eax + 8], 1
jne 0x425dde
mov ecx, dword [eax + 0x14]
lea eax, [eax + ecx*4 + 0x18]
mov dword [esp + 0x10], eax
add esp, 8
ret
lea eax, [0xd50c59]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00425db0

Function at 0x425e00
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x425e4c
sub esp, 8
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 8]
cmp ecx, 2
je 0x425e26
cmp ecx, 3
jne 0x425e35
mov ecx, dword [eax + 0x14]
lea eax, [eax + ecx*4 + 0x18]
mov dword [esp + 0x10], eax
add esp, 8
ret
lea eax, [0xd50c45]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.00425e00

Function at 0x428800
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x10
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4288ab
xor ecx, ecx
mov edx, dword [esp + 0x18]
sub ecx, edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00402510
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x18]
lea edx, [eax + ecx]
cmp edx, ecx
jb 0x428836
add esp, 0x10
ret
mov dword [esp + 0xc], eax
call fcn.0042f560
lea eax, [0xd5bca7]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0042fe00
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
lea eax, [0xd3fc92]
mov dword [esp], eax
mov dword [esp + 4], 4
call fcn.0042fe00
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
call fcn.0042f780
call fcn.0042f5d0
mov dword [esp], 2
call fcn.0042ba00
jmp 0x428832
add esp, 0x10
ret
Function at 0x42a780
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42a914
sub esp, 0x2c
movzx ebx, byte [0x144d863]
test bl, bl
je 0x42a7e2
mov ecx, dword [esp + 0x34]
test ecx, ecx
jbe 0x42a90c
mov eax, dword [0x1437c94]
mov ecx, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0x800
call fcn.0042c660
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3c], eax
add esp, 0x2c
ret
mov eax, dword [0x144da48]
test eax, eax
je 0x42a8a0
mov ecx, dword [0x144da48]
cmp ecx, 0x209
ja 0x42a8ec
mov eax, dword [esp + 0x34]
lea edx, [ecx + eax]
mov dword [esp + 0x20], edx
cmp edx, 0x209
ja 0x42a863
lea ebx, [0x144e8e0]
mov dword [esp + 0x28], ebx
add ecx, ebx
mov dword [esp], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00458a30
mov ecx, dword [esp + 0x20]
test ecx, ecx
jbe 0x42a8e5
mov eax, dword [0xbacdfc]
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0042c5e0
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
add esp, 0x2c
ret
mov dword [esp + 0x24], ecx
lea eax, [0xc57fa0]
mov dword [esp], eax
lea eax, [0x144e8e0]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x209
mov dword [esp + 0x10], edx
call fcn.004415a0
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
jmp 0x42a81b
mov eax, dword [0xbacdf0]
lea ecx, [0x144e8e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x208
call fcn.0042c620
mov eax, dword [esp + 0xc]
test eax, eax
je 0x42a8f6
cmp eax, 0x208
ja 0x42a8f6
lea ebx, [0x144e8e0]
mov byte [ebx + eax], 0x5c
inc eax
mov dword [0x144da48], eax
jmp 0x42a7f0
xor eax, eax
call fcn.00458100
mov edx, 0x209
call fcn.00458130
lea eax, [0xd62f83]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0042e730
xor eax, eax
call fcn.00458100
nop
call fcn.004567f0
jmp fcn.0042a780
Function at 0x42c2f0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42c4e7
sub esp, 0x50
mov dword [esp + 0x24], 0
mov eax, dword [0xbacdcc]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0xfffffffe
mov dword [esp + 0xc], 0xffffffff
lea eax, [esp + 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 2
call fcn.0042c760
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
test byte [eax], al
add eax, 0x168
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.00402500
lea edi, [esp + 0x34]
xor eax, eax
call fcn.00458329
mov eax, dword [0xbace34]
mov dword [esp], eax
lea eax, [esp + 0x34]
mov dword [esp + 4], eax
lea eax, [esp + 0x34]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x1c
call fcn.0042c660
mov eax, dword [esp + 0x10]
test eax, eax
je 0x42c48b
mov eax, dword [esp + 0x38]
lea ecx, [eax + 0x4000]
mov dword [esp + 0x28], ecx
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov ebx, dword [edx + 4]
mov dword [esp + 0x30], ebx
cmp ecx, ebx
ja 0x42c401
sub ebx, ecx
cmp ebx, 0x4000000
ja 0x42c401
mov dword [edx], ecx
add eax, 0x4b70
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
call fcn.00457c20
add esp, 0x50
ret
call fcn.0042f560
lea eax, [0xd500fe]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0042fe00
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fcd0
lea eax, [0xd3f53c]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0042fe00
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fcd0
lea eax, [0xd3f5b7]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0042fe00
call fcn.0042f5d0
lea eax, [0xd47f09]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0042e730
call fcn.00458c70
mov eax, dword [esp]
mov dword [esp + 0x2c], eax
call fcn.0042f560
lea eax, [0xd6385f]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call fcn.0042fe00
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
call fcn.0042f780
call fcn.0042f5d0
lea eax, [0xd60ef7]
mov dword [esp], eax
mov dword [esp + 4], 0x22
call fcn.0042e730
nop
call fcn.004567f0
jmp fcn.0042c2f0

Function at 0x42d770
Capabilities:
Reference sql statements

Disassembly:
sub esp, 8
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
cmp dword [ecx + 0x4c], eax
jne 0x42d7b9
mov ecx, dword [esp + 0xc]
mov word [ecx + 4], 0
lea edx, [esp + 0xc]
mov dword [ecx + 8], edx
mov edx, dword [esp + 8]
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x14], 0
mov edx, dword [eax + 0x14]
mov dword [ecx + 0x18], edx
mov dword [eax + 0x14], ecx
call fcn.00457ff0
add esp, 8
ret
lea eax, [0xd520b9]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.0042e730
nop
Function at 0x42d7d0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x42da03
sub esp, 0x28
lea edi, [esp + 0x14]
xor eax, eax
call fcn.0045832b
xor eax, eax
jmp 0x42d801
mov dword [esp + eax*4 + 0x14], 0xffffffff
inc eax
cmp eax, 5
jge 0x42d80d
jb 0x42d7f8
jmp 0x42d9f8
xor eax, eax
jmp 0x42d812
inc eax
cmp eax, 4
ja 0x42d90e
xor ecx, ecx
cmp ecx, 5
jae 0x42d90a
cmp eax, 4
ja 0x42d902
mov edx, 0x20
cmp edx, 0x8000
jae 0x42d8cc
cmp edx, 0x3f8
ja 0x42d891
add edx, 7
shr edx, 3
cmp edx, 0x81
jae 0x42d9ec
lea ebx, [0xb79200]
movzx edx, byte [edx + ebx]
cmp edx, 0x43
jae 0x42d9e0
lea ebp, [0xb793e0]
movzx edx, word [ebp + edx*2]
lea esi, [esp + 0x14]
mov edi, dword [esi + ecx*4]
test edi, edi
jge 0x42d888
mov dword [esi + ecx*4], edx
jmp 0x42d811
cmp edi, edx
je 0x42d811
jmp 0x42d919
add edx, 0xfffffc7f
shr edx, 7
cmp edx, 0xf9
jae 0x42d9d4
lea ebx, [0xb7abe0]
movzx edx, byte [edx + ebx]
cmp edx, 0x43
jae 0x42d9c8
lea ebp, [0xb793e0]
movzx edx, word [ebp + edx*2]
lea ebx, [0xb79200]
jmp 0x42d878
lea ebx, [edx + 0x2000]
cmp ebx, edx
jae 0x42d8e4
lea ebx, [0xb79200]
lea ebp, [0xb793e0]
jmp 0x42d878
nop
add edx, 0x1fff
and edx, 0xffffe000
lea ebx, [0xb79200]
lea ebp, [0xb793e0]
jmp 0x42d878
lea edx, [eax + 0x1c]
jmp 0x42d834
add esp, 0x28
ret
lea ecx, [eax + 0xb]
shr ecx, 4
jmp 0x42d81d
mov dword [esp + 0x10], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0042f560
lea eax, [0xd556c4]
mov dword [esp], eax
mov dword [esp + 4], 0x18
call fcn.0042fe00
mov eax, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
lea eax, [0xd4053f]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.0042fe00
mov eax, dword [esp + 8]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
lea eax, [0xd44bcb]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.0042fe00
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0042fb10
call fcn.0042f780
call fcn.0042f5d0
lea eax, [0xd50be1]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042e730
mov eax, edx
mov ecx, 0x43
call fcn.00458100
mov eax, edx
mov ecx, 0xf9
call fcn.00458110
mov eax, edx
mov ecx, 0x43
call fcn.00458100
mov eax, edx
mov ecx, 0x81
call fcn.00458110
mov ecx, 5
call fcn.00458100
nop
call fcn.004567f0
jmp fcn.0042d7d0