joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4256e0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x425937
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
mov qword [rsp + 0x38], r14
mov rcx, qword [r14 + 0x30]
inc dword [rcx + 0xd8]
nop
mov eax, dword [0x00eb733c]
mov ecx, eax
and eax, 0x80000000
test eax, eax
jne 0x42573c
lea edx, [rcx + 1]
mov ebx, eax
mov eax, ecx
lea rsi, [0x00eb733c]
lock cmpxchg dword [rsi], edx
sete cl
test cl, cl
je 0x425707
mov ecx, dword [0x00ede118]
test ebx, ebx
jmp 0x425749
mov ecx, dword [0x00ede118]
lea rsi, [0x00eb733c]
mov dword [rsp + 0x20], ecx
sete byte [rsp + 0x24]
je 0x425774
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
dec dword [rcx + 0xd8]
mov rax, 0xffffffffffffffff
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x00ece000]
nop dword [rax + rax]
call fcn.00425020
test rax, rax
je 0x4257fa
nop
mov cl, byte [rax + 0x63]
cmp cl, 1
je 0x4257aa
mov edx, dword [rax + 0x58]
mov ebx, dword [rsp + 0x20]
cmp ebx, edx
je 0x425774
lea esi, [rbx + 3]
cmp edx, esi
je 0x425774
jmp 0x4258b4
mov rbx, rax
lea rax, [rsp + 0x20]
call fcn.00425640
mov qword [rsp + 0x28], rax
nop dword [rax]
test bl, bl
je 0x425774
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x30], rcx
lea rax, [rsp + 0x28]
xor ebx, ebx
call fcn.00425ac0
test al, al
je 0x4257f4
nop
mov rcx, qword [rsp + 0x30]
lea rdx, [0x00ede168]
mov rsi, rcx
lock xadd qword [rdx], rcx
jmp 0x4257f6
xor esi, esi
xor edx, edx
jmp 0x425834
nop
mov eax, dword [0x00eb733c]
mov edx, eax
and eax, 0x80000000
test eax, eax
jne 0x42582a
mov esi, edx
bts edx, 0x1f
mov ecx, eax
mov eax, esi
lea rdi, [0x00eb733c]
lock cmpxchg dword [rdi], edx
sete dl
test dl, dl
je 0x4257fa
test ecx, ecx
sete dl
mov rsi, 0xffffffffffffffff
mov byte [rsp + 0x17], dl
mov qword [rsp + 0x30], rsi
mov ebx, dword [rsp + 0x20]
movzx ecx, byte [rsp + 0x24]
lea rax, [0x00eb733c]
call fcn.004251e0
movzx edx, byte [rsp + 0x17]
test dl, dl
je 0x425896
cmp dword [0x00f0c908], 0
jle 0x425886
lea rax, [0x00b12280]
mov qword [rsp], rax
call fcn.00466120
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
nop
nop
mov ecx, 1
lea rdx, [0x00eb7ae0]
xchg dword [rdx], ecx
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
dec dword [rcx + 0xd8]
mov rax, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov byte [rsp + 0x16], cl
mov dword [rsp + 0x1c], edx
mov dword [rsp + 0x18], ebx
call fcn.0043a300
lea rax, [0x00ad8450]
mov ebx, 0x1a
call fcn.0043ac00
movzx eax, byte [rsp + 0x16]
movzx eax, al
nop
call fcn.0043a900
lea rax, [0x00acbc06]
mov ebx, 0xc
call fcn.0043ac00
mov eax, dword [rsp + 0x1c]
call fcn.0043a900
lea rax, [0x00aca155]
mov ebx, 0xa
call fcn.0043ac00
mov eax, dword [rsp + 0x18]
call fcn.0043a900
call fcn.0043a560
nop
call fcn.0043a380
lea rax, [0x00adbc62]
mov ebx, 0x1f
call fcn.004389c0
nop
call fcn.00466260
nop dword [rax]
jmp fcn.004256e0
Function at 0x429f20
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42a12a
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rbx
call fcn.00427e40
test rax, rax
je 0x42a118
mov qword [rsp + 0x18], rax
mov rcx, qword [r14 + 0x30]
nop
inc dword [rcx + 0xd8]
mov rcx, qword [r14 + 0x30]
mov qword [rsp + 0x28], rcx
call fcn.00425960
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x18]
sub rcx, qword [rax + 0x18]
mov qword [rsp + 0x20], rcx
mov rdx, qword [rsp + 0x50]
movzx ebx, byte [rdx + 0xa]
mov byte [rsp + 0x17], bl
lea rsi, [rax + 0x78]
mov qword [rsp + 0x30], rsi
nop
mov rax, rsi
nop dword [rax + rax]
call fcn.0040cf20
mov rcx, qword [rsp + 0x18]
lea rdx, [rcx + 0x80]
movzx ebx, byte [rsp + 0x17]
mov rsi, qword [rsp + 0x20]
jmp 0x429fc0
mov rdx, rdi
mov rdi, qword [rdx]
test rdi, rdi
je 0x42a02b
movzx r8d, word [rdi + 8]
cmp r8, rsi
jne 0x429fda
cmp byte [rdi + 0xa], bl
je 0x429fe7
cmp r8, rsi
ja 0x42a02b
jne 0x429fbd
nop
cmp byte [rdi + 0xa], bl
jbe 0x429fbd
jmp 0x42a02b
nop
nop
mov rax, qword [rsp + 0x30]
call fcn.0040d140
nop
mov rcx, qword [rsp + 0x28]
mov edx, dword [rcx + 0xd8]
lea ebx, [rdx - 1]
mov dword [rcx + 0xd8], ebx
cmp edx, 1
jne 0x42a01f
cmp byte [r14 + 0xb1], 0
je 0x42a01f
mov qword [r14 + 0x10], 0xfffffffffffffade
xor eax, eax
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rbx, qword [rsp + 0x50]
mov word [rbx + 8], si
mov rsi, qword [rdx]
mov qword [rbx], rsi
mov qword [rdx], rbx
nop
nop
mov rax, qword [rcx + 0x18]
movabs rdx, 0x800000000000
add rdx, rax
mov rbx, rdx
shr rdx, 0x2a
nop word [rax + rax]
cmp rdx, 0x40
jae 0x42a10b
lea rsi, [0x00ede170]
mov rdx, qword [rsi + rdx*8]
test byte [rdx], al
shr rbx, 0x16
and ebx, 0xfffff
mov rdx, qword [rdx + rbx*8]
test byte [rdx], al
shr rax, 0xd
mov rcx, rax
and eax, 0x1ff
shr rax, 3
cmp rax, 0x40
jae 0x42a101
lea rbx, [rax + 0x11480]
add rdx, rbx
and ecx, 7
mov ebx, 1
shl ebx, cl
lock or byte [rdx], bl
nop
nop
mov rax, qword [rsp + 0x30]
nop dword [rax + rax]
call fcn.0040d140
nop
mov rdx, qword [rsp + 0x28]
mov ebx, dword [rdx + 0xd8]
lea esi, [rbx - 1]
mov dword [rdx + 0xd8], esi
cmp ebx, 1
jne 0x42a0f1
cmp byte [r14 + 0xb1], 0
je 0x42a0f1
mov qword [r14 + 0x10], 0xfffffffffffffade
mov eax, 1
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
nop
ret
mov ecx, 0x40
call fcn.00468900
mov rax, rdx
mov ecx, 0x40
call fcn.00468900
lea rax, [0x00ada28f]
mov ebx, 0x1d
call fcn.004389c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00429f20
Function at 0x42ac60
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42ad06
sub rsp, 0x28
mov qword [rsp + 0x20], rbp
lea rbp, [rsp + 0x20]
mov rax, qword [0x00f0c748]
nop
test rax, rax
je 0x42aca6
mov qword [rsp + 0x10], rax
mov rcx, qword [rax + 8]
mov qword [0x00f0c748], rcx
mov ebx, 0x10000
call fcn.00468fc0
mov rax, qword [rsp + 0x10]
jmp 0x42ace2
nop
nop
lea rax, [0x00f0c740]
call fcn.0040d140
mov eax, 0x10000
lea rbx, [0x00f11a58]
call fcn.00418aa0
test rax, rax
je 0x42acf0
mov qword [rsp + 0x18], rax
nop
nop
lea rax, [0x00f0c740]
call fcn.0040cf20
mov rax, qword [rsp + 0x18]
movups xmmword [rax], xmm15
mov rbp, qword [rsp + 0x20]
add rsp, 0x28
ret
lea rax, [0x00adbd98]
mov ebx, 0x1f
nop dword [rax]
call fcn.004389c0
nop
call fcn.00466260
jmp fcn.0042ac60
Function at 0x42fb00
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x42fc46
sub rsp, 0x38
mov qword [rsp + 0x30], rbp
lea rbp, [rsp + 0x30]
nop
mov ecx, dword [rax + 0x90]
nop
cmp ecx, 2
je 0x42fbf9
nop
mov ecx, 1
lea rdx, [0x009cf188]
lock xadd qword [rdx], rcx
mov rdx, qword [0x009cf198]
cmp rcx, rdx
jge 0x42fbe7
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x18], xmm15
mov qword [rsp + 0x28], 0
lea rdx, [0x0042fc60]
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rcx
lea rdx, [rsp + 0x18]
mov qword [rsp], rdx
call fcn.00466120
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [0x009cf1a8]
mov rcx, qword [0x009cf1b0]
test rax, rax
je 0x42fbdd
mov rdx, qword [rsp + 0x40]
mov rdx, qword [rdx + 0x168]
mov rbx, qword [rsp + 0x10]
nop
cmp rbx, rcx
jae 0x42fbf1
lea rdi, [rax + rbx*8]
cmp dword [0x00f0c520], 0
jne 0x42fbd8
mov qword [rax + rbx*8], rdx
jmp 0x42fbdd
call fcn.00468560
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov rbp, qword [rsp + 0x30]
add rsp, 0x38
ret
mov rax, rbx
call fcn.004688e0
mov rax, qword [rax + 0x98]
mov qword [rsp + 0x10], rax
call fcn.0043a300
lea rax, [0x00ada377]
mov ebx, 0x1d
call fcn.0043ac00
mov rax, qword [rsp + 0x10]
call fcn.0043a900
call fcn.0043a560
call fcn.0043a380
lea rax, [0x00ae0305]
mov ebx, 0x26
nop dword [rax + rax]
call fcn.004389c0
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.0042fb00

Function at 0x431700
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x431766
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
lea rcx, [rax + 0x10]
mov qword [rax], rcx
cmp byte [0x00f0c525], 0
je 0x43172e
lea rcx, [rax + 0x20]
mov qword [rax + 8], rcx
jmp 0x431739
add rcx, 0x1000
mov qword [rax + 8], rcx
mov rcx, qword [rax + 8]
sub rcx, qword [rax]
test rcx, 0xf
jne 0x431753
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00adb8a1]
mov ebx, 0x1f
nop
call fcn.004389c0
nop
mov qword [rsp + 8], rax
call fcn.00466260
mov rax, qword [rsp + 8]
jmp fcn.00431700
Function at 0x431840
Capabilities:
Hash data using murmur3

Disassembly:
cmp rsp, qword [r14 + 0x18]
jbe 0x431ae6
sub rsp, 0x40
mov qword [rsp + 0x38], rbp
lea rbp, [rsp + 0x38]
test byte [rax], al
lea rsi, [rax + 0x1270]
mov rcx, qword [rax + 0x1260]
sub rcx, rsi
shr rcx, 3
cmp rcx, 0x200
ja 0x431ada
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x30], rcx
mov qword [rax + 0x1260], 0
cmp byte [0x00f0bd50], 0
jne 0x4318a2
xor edx, edx
xor ebx, ebx
nop
jmp 0x4318ea
xor edx, edx
jmp 0x4318cd
mov qword [rsp + 0x28], rdx
mov rcx, qword [rax + rdx*8 + 0x1270]
mov rax, rcx
call fcn.00420e00
mov rdx, qword [rsp + 0x28]
inc rdx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
cmp rdx, rcx
jl 0x4318a6
add rax, 0x1260
call fcn.00431700
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
inc rdx
cmp rdx, rcx
jge 0x431a74
mov rsi, qword [rax + rdx*8 + 0x1270]
nop dword [rax + rax]
cmp rsi, 0x1000
jb 0x4318e7
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rbx
mov rax, rsi
xor ebx, ebx
mov rcx, rbx
nop dword [rax + rax]
call fcn.00415ca0
test rax, rax
jne 0x431942
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
nop
jmp 0x4318e7
mov rsi, qword [rbx + 0x50]
test byte [rsi], al
nop
mov r8, rcx
shr rcx, 3
movzx r9d, byte [rsi + rcx]
and r8d, 7
mov rdx, rcx
mov rcx, r8
mov r10d, 1
shl r10d, cl
add rsi, rdx
test r10b, r9b
je 0x431989
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
jmp 0x4318e7
nop
lock or byte [rsi], r10b
nop
nop
mov rcx, qword [rbx + 0x18]
nop
movabs rsi, 0x800000000000
lea r8, [rsi + rcx]
mov r9, r8
shr r8, 0x2a
cmp r8, 0x40
jae 0x431acd
lea r10, [0x00ede170]
mov r8, qword [r10 + r8*8]
shr r9, 0x16
and r9d, 0xfffff
mov r9, qword [r8 + r9*8]
test byte [r9], al
test byte [r8], al
mov r8, rcx
shr rcx, 0x10
and ecx, 0x3f
movzx r10d, byte [r9 + rcx + 0x11440]
lea r11, [rcx + 0x11440]
add r9, r11
shr r8, 0xd
and r8d, 7
mov rcx, r8
mov r8d, 1
shl r8d, cl
test r8b, r10b
jne 0x431a0e
lock or byte [r9], r8b
movzx r8d, byte [rbx + 0x62]
test r8b, 1
je 0x431a45
mov rax, qword [rsp + 0x48]
mov r8, qword [rax + 0x1248]
add r8, qword [rbx + 0x68]
mov qword [rax + 0x1248], r8
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x20]
nop
jmp 0x4318e7
mov r8, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
cmp r8, rcx
jae 0x431ac5
mov rbx, qword [rsp + 0x48]
mov qword [rbx + r8*8 + 0x1270], rax
inc r8
mov rax, rbx
mov rdx, qword [rsp + 0x28]
mov rbx, r8
jmp 0x4318e7
cmp rbx, 0x200
ja 0x431ab8
lea rdx, [rax + 0x1270]
lea rsi, [rax + 0x1238]
mov rcx, rbx
mov edi, 0x200
mov rbx, rdx
mov rax, rsi
call fcn.00426f40
mov rax, qword [rsp + 0x48]
add rax, 0x1260
call fcn.00431700
mov rbp, qword [rsp + 0x38]
add rsp, 0x40
ret
mov rcx, rbx
mov edx, 0x200
call fcn.00468960
mov rax, r8
call fcn.004688e0
mov rax, r8
mov ecx, 0x40
call fcn.00468900
mov edx, 0x200
nop
call fcn.00468940
nop
mov qword [rsp + 8], rax
call fcn.0046aea0
mov rax, qword [rsp + 8]
jmp fcn.00431840
Function at 0x43d6c0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43d92f
sub rsp, 0x60
mov qword [rsp + 0x58], rbp
lea rbp, [rsp + 0x58]
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0xd8], 0
jg 0x43d91d
mov qword [rsp + 0x40], r14
nop
nop
lea rax, [0x00eb8798]
call fcn.0040cf20
mov ecx, dword [0x00f0bddc]
mov dword [0x00eb886c], ecx
nop
nop
mov ecx, 1
lea rdx, [0x00eb8868]
xchg byte [rdx], cl
call fcn.00446340
mov rcx, qword [rsp + 0x40]
mov rcx, qword [rcx + 0x30]
mov rcx, qword [rcx + 0xa0]
mov dword [rcx + 4], 3
dec dword [0x00eb886c]
mov rcx, qword [0x00eb6ce0]
mov qword [rsp + 0x50], rcx
mov rdx, qword [0x00eb6ce8]
mov qword [rsp + 0x30], rdx
xor eax, eax
jmp 0x43d75a
lea rax, [rsi + 1]
cmp rax, rdx
jge 0x43d7de
mov rbx, qword [rcx + rax*8]
cmp dword [rbx + 4], 2
jne 0x43d782
mov rsi, rax
mov eax, 2
mov edi, 3
lock cmpxchg dword [rbx + 4], edi
sete r8b
nop
jmp 0x43d78d
mov rsi, rax
mov edi, 3
xor r8d, r8d
test r8b, r8b
je 0x43d756
cmp byte [0x00ebdf10], 0
je 0x43d7d0
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x38], rbx
mov rax, rbx
call fcn.00458fe0
mov rax, qword [rsp + 0x38]
call fcn.00458860
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x28]
mov edi, 3
inc dword [rbx + 0x14]
dec dword [0x00eb886c]
jmp 0x43d756
nop
nop
call fcn.0046a2c0
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp]
mov qword [rsp + 0x18], rax
jmp 0x43d814
mov dword [rax + 4], 3
dec dword [0x00eb886c]
mov rax, qword [rsp + 0x18]
call fcn.00447320
test rax, rax
jne 0x43d802
nop
nop
mov ecx, dword [0x00eb886c]
mov dword [rsp + 0x14], ecx
lea rax, [0x00eb8798]
call fcn.0040d140
mov ecx, dword [rsp + 0x14]
test ecx, ecx
jle 0x43d868
nop
jmp 0x43d847
call fcn.00446340
lea rax, [0x00eb8870]
mov ebx, 0x186a0
call fcn.0040d680
test al, al
je 0x43d842
nop
mov qword [0x00eb8870], 0
cmp dword [0x00eb886c], 0
jne 0x43d88a
mov rcx, qword [0x00eb6ce0]
mov rdx, qword [0x00eb6ce8]
xor eax, eax
xor ebx, ebx
xor esi, esi
jmp 0x43d90d
mov eax, 0x29
lea rcx, [0x00ae2535]
mov dl, byte [0x00f0bd47]
nop dword [rax]
test dl, dl
je 0x43d8d4
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x48], rcx
nop
nop
lea rax, [0x00f0c0c8]
call fcn.0040cf20
nop
nop
lea rax, [0x00f0c0c8]
call fcn.0040cf20
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x48]
test rax, rax
jne 0x43d8e3
mov rbp, qword [rsp + 0x58]
add rsp, 0x60
ret
mov rbx, rax
mov rax, rcx
call fcn.004389c0
mov rdi, qword [rcx + rax*8]
cmp dword [rdi + 4], 3
mov edi, 0x2e
cmovne rbx, rdi
lea r8, [0x00ae4a0c]
cmovne rsi, r8
inc rax
cmp rax, rdx
jl 0x43d8ee
mov rax, rbx
mov rcx, rsi
jmp 0x43d896
lea rax, [0x00ad914f]
mov ebx, 0x1b
call fcn.004389c0
nop
call fcn.00466260
jmp fcn.0043d6c0
Function at 0x43fc80
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x43fd57
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov cl, byte [0x00eb8868]
nop
test cl, cl
je 0x43fd45
mov rcx, qword [r14 + 0x30]
cmp byte [rcx + 0xe4], 0
je 0x43fcd2
mov byte [rcx + 0xe4], 0
mov ecx, 0xffffffff
lea rdx, [0x00eb87dc]
lock xadd dword [rdx], ecx
dec ecx
test ecx, ecx
jl 0x43fd34
call fcn.004456a0
mov qword [rsp + 0x10], rax
nop
nop
lea rax, [0x00eb8798]
call fcn.0040cf20
mov rax, qword [rsp + 0x10]
mov dword [rax + 4], 3
mov eax, dword [0x00eb886c]
lea ecx, [rax - 1]
mov dword [0x00eb886c], ecx
cmp eax, 1
jne 0x43fd16
lea rax, [0x00eb8870]
call fcn.0040d220
nop
nop
lea rax, [0x00eb8798]
nop
call fcn.0040d140
call fcn.0043f0e0
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x00ad9922]
mov ebx, 0x1c
call fcn.004389c0
lea rax, [0x00ad8b9d]
mov ebx, 0x1b
call fcn.004389c0
nop
call fcn.00466260
nop dword [rax]
jmp fcn.0043fc80
Function at 0x4413e0
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x441457
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov rcx, qword [r14 + 0x30]
cmp byte [rcx + 0xe4], 0
nop
je 0x441445
mov byte [rcx + 0xe4], 0
nop
mov ecx, 0xffffffff
lea rdx, [0x00eb87dc]
lock xadd dword [rdx], ecx
dec ecx
nop dword [rax]
test ecx, ecx
jl 0x441433
call fcn.0043f800
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00add05f]
mov ebx, 0x21
nop
call fcn.004389c0
lea rax, [0x00adbd79]
mov ebx, 0x1f
call fcn.004389c0
nop
call fcn.00466260
jmp fcn.004413e0

Function at 0x442800
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov rcx, qword [r14 + 0x30]
mov rdx, r14
cmp qword [rcx], rdx
je 0x442849
nop word [rax + rax]
cmp qword [rcx + 0x50], rdx
je 0x442849
mov qword [rdx + 0x40], rax
mov qword [rdx + 0x38], rbx
movups xmmword [rdx + 0x58], xmm15
cmp qword [rdx + 0x50], 0
je 0x44283f
call fcn.0043be60
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
lea rax, [0x00ad9dd6]
mov ebx, 0x1c
call fcn.004389c0
nop
int3
Function at 0x444540
Capabilities:
Reference sql statements

Disassembly:
sub rsp, 0x18
mov qword [rsp + 0x10], rbp
lea rbp, [rsp + 0x10]
mov ecx, dword [0x00f0c7a0]
test ecx, ecx
jne 0x44455d
call fcn.0043ef00
mov rcx, qword [r14 + 0x30]
inc dword [rcx + 0x238]
mov rcx, qword [r14 + 0x30]
cmp dword [rcx + 0x238], 0
je 0x444598
mov rax, qword [r14 + 0x30]
nop
mov rcx, r14
mov qword [rax + 0x130], rcx
mov rax, qword [r14 + 0x30]
mov qword [r14 + 0xe8], rax
mov rbp, qword [rsp + 0x10]
add rsp, 0x18
ret
mov dword [rcx + 0x238], 0xffffffff
lea rax, [0x00a16860]
lea rbx, [0x00b98c50]
call fcn.00438220
nop
int3
Function at 0x445860
Capabilities:
Reference sql statements

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x445b66
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
cmp byte [0x00f0bd4b], 0
nop
jne 0x445a39
cmp byte [0x00f0bd4a], 0
jne 0x445a39
mov ecx, dword [0x00f0bdf8]
nop dword [rax]
test ecx, ecx
ja 0x445a2f
cmp byte [0x0097b9cc], 0
je 0x4458b5
xor ecx, ecx
jmp 0x4458e5
cmp byte [0x00f0bd45], 0
jne 0x4458c2
xor ecx, ecx
jmp 0x4458e5
mov eax, 1
call fcn.0043eb40
cmp dword [0x00f0bdc0], 0
seta cl
nop
nop
lea rdx, [0x00f0c0d8]
xchg qword [rdx], rax
movzx ecx, cl
mov edx, dword [0x00eb87a8]
mov rbx, qword [0x00eb87b0]
sub rbx, qword [0x00eb87c0]
mov rsi, rbx
sub ebx, edx
mov edi, dword [0x00eb87ac]
sub ebx, edi
mov r8d, dword [0x00eb87bc]
sub ebx, r8d
cmp ecx, ebx
jl 0x445a25
nop dword [rax + rax]
test ebx, ebx
jl 0x445ab0
mov qword [rsp + 0x20], 0
movups xmmword [rsp + 0x30], xmm15
lea rcx, [0x00445b80]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x38], rcx
lea rax, [rsp + 0x30]
call fcn.0043bfe0
cmp qword [rsp + 0x20], 0
jne 0x44597e
nop
nop
lea rax, [0x00eb8798]
call fcn.0040d140
lea rax, [0x00ae767b]
mov ebx, 0x36
call fcn.00438ac0
cmp qword [0x00f0c0e0], 0
je 0x44599c
call fcn.00457020
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
jl 0x4459b1
mov rcx, qword [0x00eb6ce0]
mov rdx, qword [0x00eb6ce8]
xor eax, eax
jmp 0x445a68
mov qword [0x00f0c0e0], rax
call fcn.00447320
nop dword [rax]
test rax, rax
je 0x445a54
nop
mov rcx, qword [0x00eb87a0]
test rcx, rcx
je 0x4459ed
mov rdx, qword [rcx + 0x128]
mov qword [0x00eb87a0], rdx
dec dword [0x00eb87a8]
test rcx, rcx
je 0x445a43
nop
mov edx, 1
lea rbx, [0x00eb87dc]
lock xadd dword [rbx], edx
mov byte [rcx + 0xe4], 1
nop
mov qword [rcx + 0xa8], rax
lea rax, [rcx + 0x118]
call fcn.0040d220
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rax, [0x00ad7152]
mov ebx, 0x19
call fcn.004389c0
lea rax, [0x00ad716b]
mov ebx, 0x19
call fcn.004389c0
inc rax
cmp rax, rdx
jge 0x445a87
mov rbx, qword [rcx + rax*8]
test byte [rbx], al
cmp qword [rbx + 0x2288], 0
je 0x445a65
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
nop
nop
lea rax, [0x00eb8798]
call fcn.0040d140
lea rax, [0x00adf821]
mov ebx, 0x25
call fcn.00438ac0
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x1c], edx
mov dword [rsp + 0x18], edi
mov dword [rsp + 0x14], r8d
call fcn.0043a300
lea rax, [0x00ad905c]
mov ebx, 0x1b
call fcn.0043ac00
mov eax, dword [rsp + 0x1c]
movsxd rax, eax
nop
call fcn.0043aa00
lea rax, [0x00acd439]
mov ebx, 0xe
call fcn.0043ac00
mov eax, dword [rsp + 0x18]
movsxd rax, eax
nop dword [rax]
call fcn.0043aa00
lea rax, [0x00ac7915]
mov ebx, 8
call fcn.0043ac00
mov rax, qword [rsp + 0x28]
movsxd rax, eax
nop
call fcn.0043aa00
lea rax, [0x00ac5a97]
mov ebx, 7
call fcn.0043ac00
mov eax, dword [rsp + 0x14]
movsxd rax, eax
nop dword [rax]
call fcn.0043aa00
call fcn.0043a560
call fcn.0043a380
lea rax, [0x00adae93]
mov ebx, 0x1e
nop dword [rax + rax]
call fcn.004389c0
nop
call fcn.00466260
jmp fcn.00445860
Function at 0x447180
Capabilities:
Encode data using base64

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x4472ea
sub rsp, 0x20
mov qword [rsp + 0x18], rbp
lea rbp, [rsp + 0x18]
mov ecx, dword [rax + 0x190]
mov edx, dword [rax + 0x194]
mov rsi, qword [rax + 0x998]
mov edi, dword [rax + 0x194]
cmp edi, edx
jne 0x447198
cmp edx, ecx
jne 0x4472d8
nop dword [rax]
test rsi, rsi
jne 0x4472d8
mov qword [rsp + 0x28], rax
test rbx, rbx
jne 0x4471f4
nop
call fcn.0046a2c0
xorps xmm15, xmm15
mov r14, qword [0x00f0c1e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp]
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x10], rbx
call fcn.00447080
mov rcx, qword [0x00eb6d68]
mov rdx, qword [0x00eb6d60]
mov rbx, qword [rsp + 0x28]
mov esi, dword [rbx]
mov edi, esi
sar esi, 0x1f
shr esi, 0x1b
add esi, edi
mov r8d, esi
and esi, 0xffffffe0
sub edi, esi
test edi, edi
jl 0x4472d3
cmp edi, 0x20
sbb esi, esi
sar r8d, 5
mov rax, rcx
mov ecx, edi
mov r9d, 1
shl r9d, cl
and r9d, esi
movsxd rsi, r8d
cmp rax, rsi
jbe 0x4472c8
lea rcx, [rdx + rsi*4]
lock or dword [rcx], r9d
mov rcx, qword [0x00eb87d0]
mov qword [rbx + 8], rcx
nop
mov rcx, rbx
mov qword [0x00eb87d0], rbx
nop
mov edx, 1
lea rsi, [0x00eb87d8]
lock xadd dword [rsi], edx
mov rdx, qword [rcx + 0x1220]
shr rdx, 0x3d
test dl, dl
jne 0x4472b7
nop
nop
mov rax, qword [rsp + 0x10]
movabs rdx, 0x1fffffffffffffff
and rdx, rax
bts rdx, 0x3f
xchg qword [rcx + 0x1220], rdx
mov rbp, qword [rsp + 0x18]
add rsp, 0x20
ret
lea rax, [0x00ae1bb1]
mov ebx, 0x28
call fcn.004389c0
mov rcx, rax
mov rax, rsi
call fcn.004688e0
call fcn.00436c00
lea rax, [0x00ade945]
mov ebx, 0x23
call fcn.004389c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.00447180
Function at 0x447620
Capabilities:
Reference sql statements

Disassembly:
lea r12, [rsp - 0x3b0]
cmp r12, qword [r14 + 0x10]
jbe 0x4477cc
sub rsp, 0x430
mov qword [rsp + 0x428], rbp
lea rbp, [rsp + 0x428]
movups xmmword [rsp + 0x20], xmm15
mov edx, edi
lea rdi, [rsp + 0x28]
nop word [rax + rax]
nop
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00468aa0
mov rbp, qword [rbp]
sub edx, ecx
shr edx, 1
nop word [rax + rax]
cmp edx, 0x80
jne 0x4477ba
xor edx, edx
jmp 0x4476a8
test byte [rax], al
lea esi, [rdx + rcx]
movzx esi, sil
mov rsi, qword [rax + rsi*8 + 0x198]
mov qword [rsp + rdx*8 + 0x20], rsi
inc edx
cmp edx, 0x80
jb 0x447690
lea edx, [rcx + 0x80]
mov rsi, rax
mov eax, ecx
lock cmpxchg dword [rsi + 0x190], edx
sete dl
test dl, dl
je 0x4476d6
mov qword [rsp + 0x420], rbx
xor eax, eax
jmp 0x4476f4
xor eax, eax
mov rbp, qword [rsp + 0x428]
add rsp, 0x430
ret
mov rbx, qword [rsp + rax*8 + 0x20]
mov qword [rdx + 0xa0], rbx
cmp eax, 0x80
jae 0x447711
mov rdx, qword [rsp + rax*8 + 0x20]
test byte [rdx], al
inc eax
cmp rax, 0x81
jb 0x4476e8
jmp 0x4477b0
movups xmmword [rsp + 0x10], xmm15
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x10], rcx
mov rcx, qword [rsp + 0x420]
mov qword [rsp + 0x18], rcx
nop
nop
lea rax, [0x00eb8798]
call fcn.0040cf20
nop
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x10]
test rcx, rcx
je 0x44777d
mov rbx, rcx
mov qword [rcx + 0xa0], 0
mov rcx, qword [0x00eb87f0]
test rcx, rcx
je 0x44776f
mov qword [rcx + 0xa0], rdx
jmp 0x447776
mov qword [0x00eb87e8], rdx
mov qword [0x00eb87f0], rbx
add dword [0x00eb87f8], 0x81
movups xmmword [rsp + 0x10], xmm15
nop
nop
lea rax, [0x00eb8798]
call fcn.0040d140
mov eax, 1
mov rbp, qword [rsp + 0x428]
add rsp, 0x430
ret
mov ecx, 0x81
call fcn.004688e0
lea rax, [0x00adb2e9]
mov ebx, 0x1e
call fcn.004389c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], ecx
mov dword [rsp + 0x1c], edi
nop
call fcn.00466260
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov ecx, dword [rsp + 0x18]
mov edi, dword [rsp + 0x1c]
jmp fcn.00447620