joyce8/EMBER2024-capa huggingface dataset:
Function at 0x5103a0
Capabilities:
Encode data using xor

Disassembly:
push ecx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
push ebx
push esi
mov dword [eax], 0
push edi
mov dword [esp + 0xc], 0
mov dword [ecx], 0
mov eax, dword [0x62111c]
mov edi, 1
cmp eax, edi
jle 0x5103e2
mov esi, dword [esp + 0x14]
movsx edx, byte [esi]
push 8
push edx
call fcn.0059d764
add esp, 8
jmp 0x5103fb
mov eax, dword [esp + 0x14]
movsx ecx, byte [eax]
mov edx, dword [str.________________________________H]
mov esi, dword [esp + 0x14]
xor eax, eax
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
je 0x510406
inc esi
mov dword [esp + 0x14], esi
jmp 0x5103c0
mov al, byte [esi]
test al, al
je 0x510596
cmp al, 0x60
jne 0x510419
inc esi
mov dword [esp + 0x14], esi
mov ebx, esi
cmp dword [0x62111c], edi
jle 0x510433
movsx eax, byte [esi]
push 8
push eax
call fcn.0059d764
add esp, 8
jmp 0x510444
movsx ecx, byte [esi]
mov edx, dword [str.________________________________H]
xor eax, eax
mov al, byte [edx + ecx*2]
and eax, 8
test eax, eax
jne 0x510461
mov al, byte [esi]
cmp al, 0x28
je 0x510461
cmp al, 0x60
je 0x510461
test al, al
je 0x510461
cmp al, 0x2e
jne 0x51045e
mov dword [esp + 0xc], esi
inc esi
jmp 0x51041b
mov edi, esi
sub edi, ebx
cmp edi, 0x7d0
mov dword [esp + 0x14], esi
jle 0x510478
pop edi
pop esi
mov eax, ebx
pop ebx
pop ecx
ret
mov eax, dword [esp + 0xc]
test eax, eax
push ebp
jne 0x5104c7
mov eax, dword [esp + 0x20]
mov cl, byte [eax]
mov ebp, dword [esp + 0x28]
mov byte [ebp], cl
mov cl, byte [eax]
xor esi, esi
cmp cl, 0x2f
je 0x5104a8
mov ecx, ebp
sub ecx, eax
mov dl, byte [eax + 1]
inc esi
inc eax
mov byte [ecx + eax], dl
cmp byte [eax], 0x2f
jne 0x51049b
push edi
inc esi
lea eax, [esi + ebp]
push ebx
push eax
call fcn.00514000
mov eax, dword [esp + 0x24]
sub esi, ebx
add esp, 0xc
add esi, eax
mov byte [esi + ebp], 0
mov esi, eax
jmp 0x5104e4
mov ebp, dword [esp + 0x28]
push edi
push ebx
push ebp
call fcn.00514000
mov eax, dword [esp + 0x1c]
add esp, 0xc
sub eax, ebx
mov byte [eax + ebp], 0x2f
mov byte [edi + ebp], 0
mov ecx, dword [esp + 0x24]
mov dword [ecx], 1
mov cl, byte [ebp]
xor eax, eax
test cl, cl
mov edx, ebp
je 0x51051d
movsx ecx, cl
mov edi, ecx
xor edi, eax
xor edi, 0x946a4f
shl edi, 8
add edi, eax
xor edi, 0x573ed587
add edi, ecx
mov cl, byte [edx + 1]
inc edx
test cl, cl
mov eax, edi
jne 0x5104f9
mov edx, dword [0x6314ec]
mov ecx, dword [edx + 0x34]
xor eax, 0x62946a4f
xor edx, edx
div dword [ecx]
mov eax, dword [ecx + 4]
mov edi, dword [eax + edx*4]
test edi, edi
je 0x51057a
mov eax, dword [edi + 0x10]
mov esi, ebp
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x510566
test cl, cl
je 0x510562
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x510566
add eax, 2
add esi, 2
test cl, cl
jne 0x51053e
xor eax, eax
jmp 0x51056b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x510576
mov edi, dword [edi + 0x18]
test edi, edi
jne 0x510539
mov esi, dword [esp + 0x18]
test edi, edi
mov eax, edi
jne 0x510589
push ebp
call fcn.0053f150
add esp, 4
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
cmp byte [esi], 0x60
pop ebp
jne 0x510596
inc esi
pop edi
mov eax, esi
pop esi
pop ebx
pop ecx
ret
Function at 0x525470
Capabilities:
Encode data using xor

Disassembly:
push ebx
push esi
push edi
mov edi, dword [esp + 0x10]
lea ecx, [edi + 4]
xor edx, edx
mov esi, 0x16
xor eax, eax
mov al, byte [ecx]
mov ebx, eax
xor ebx, edx
xor ebx, 0x946a4f
shl ebx, 8
add ebx, edx
xor ebx, 0x573ed587
add ebx, eax
inc ecx
dec esi
mov edx, ebx
jne 0x525481
lea esi, [edi + 0x26]
xor eax, eax
mov edi, 0x3fd2
xor ecx, ecx
mov cl, byte [esi]
mov ebx, ecx
xor ebx, eax
xor ebx, 0x946a4f
shl ebx, 8
add ebx, eax
xor ebx, 0x573ed587
add ebx, ecx
inc esi
dec edi
mov eax, ebx
jne 0x5254ac
pop edi
pop esi
add eax, edx
pop ebx
ret

Function at 0x5254e0
Capabilities:
Encode data using xor

Disassembly:
mov edx, dword [esp + 4]
push esi
push edi
xor eax, eax
mov esi, 0x1a
xor ecx, ecx
mov cl, byte [edx]
mov edi, ecx
xor edi, eax
xor edi, 0x946a4f
shl edi, 8
add edi, eax
xor edi, 0x573ed587
add edi, ecx
inc edx
dec esi
mov eax, edi
jne 0x5254ed
pop edi
pop esi
ret
Function at 0x525520
Capabilities:
Enumerate pe sections

Disassembly:
sub esp, 8
xor ecx, ecx
xor eax, eax
push ebx
push esi
mov esi, dword [esp + 0x14]
mov cl, byte [esi + 0x15]
mov al, byte [esi + 0x14]
lea ebx, [esi + 0x14]
xor edx, edx
mov dl, byte [ebx + 2]
shl eax, 8
add eax, ecx
xor ecx, ecx
mov cl, byte [ebx + 3]
shl eax, 8
add eax, edx
xor edx, edx
mov dl, byte [esi + 0x3ffc]
shl eax, 8
add eax, ecx
xor ecx, ecx
mov cl, byte [esi + 0x3ffd]
shl edx, 8
add edx, ecx
xor ecx, ecx
mov cl, byte [esi + 0x3ffe]
shl edx, 8
add edx, ecx
xor ecx, ecx
mov cl, byte [esi + 0x3fff]
shl edx, 8
add edx, ecx
cmp eax, edx
je 0x52558d
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
mov eax, dword [0x6315f0]
test eax, eax
push edi
je 0x52566e
lea edx, [esp + 0xc]
push edx
call fcn.004ff580
add esp, 4
test eax, eax
je 0x52566e
xor eax, eax
mov al, byte [esi + 0x10]
xor ecx, ecx
mov cl, byte [esi + 0x11]
xor edx, edx
mov dl, byte [esi + 0x12]
mov edi, eax
shl edi, 8
add edi, ecx
xor eax, eax
mov al, byte [esi + 0x13]
shl edi, 8
add edi, edx
lea ecx, [esi + 0x14]
shl edi, 8
push ecx
add edi, eax
call fcn.004ed520
mov ecx, dword [esp + 0x10]
add esp, 4
cmp ecx, edi
ja 0x52566e
jb 0x5255f9
mov ecx, dword [esp + 0x10]
cmp ecx, eax
ja 0x52566e
jae 0x52566e
push 0x620ad0
call fcn.004e70c0
push ebx
call fcn.004ed520
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push edx
push ecx
xor edx, edx
mov dl, byte [esi + 0x10]
push eax
xor eax, eax
mov al, byte [esi + 0x11]
xor ecx, ecx
mov cl, byte [esi + 0x12]
shl edx, 8
add edx, eax
xor eax, eax
mov al, byte [esi + 0x13]
shl edx, 8
add edx, ecx
shl edx, 8
xor ecx, ecx
mov cl, byte [esi + 4]
add edx, eax
push edx
xor edx, edx
mov dl, byte [esi + 5]
xor eax, eax
mov al, byte [esi + 6]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 7]
shl ecx, 8
add ecx, eax
shl ecx, 8
add ecx, edx
push ecx
push str.__InnoDB:_Error:_page__lu_log_sequence_number__lu__lu_nInnoDB:_is_in_the_future__Current_system_log_sequence_number__lu__lu._nInnoDB:_Your_database_may_be_corrupt._n
push 0x620ad0
call fcn.00599e71
add esp, 0x24
push esi
call fcn.005254e0
xor edx, edx
mov dl, byte [esi + 0x3ff9]
xor ecx, ecx
mov cl, byte [esi + 0x3ff8]
xor ebx, ebx
mov bl, byte [esi + 0x11]
add esp, 4
pop edi
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 0x3ffa]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 0x3ffb]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 0x10]
shl edx, 8
add edx, ebx
xor ebx, ebx
mov bl, byte [esi + 0x12]
shl edx, 8
add edx, ebx
xor ebx, ebx
mov bl, byte [esi + 0x13]
shl edx, 8
add edx, ebx
cmp ecx, edx
je 0x5256dd
cmp ecx, eax
je 0x5256dd
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
push esi
call fcn.00525470
xor ecx, ecx
mov cl, byte [esi]
xor edx, edx
mov dl, byte [esi + 1]
add esp, 4
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 2]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [esi + 3]
shl ecx, 8
add ecx, edx
je 0x525719
cmp ecx, eax
je 0x525719
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
pop esi
xor eax, eax
pop ebx
add esp, 8
ret
Function at 0x52be60
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, dword [esp + 0xc]
xor eax, eax
test esi, esi
jbe 0x52be92
mov edx, dword [esp + 8]
push edi
xor ecx, ecx
mov cl, byte [edx]
mov edi, ecx
xor edi, eax
xor edi, 0x946a4f
shl edi, 8
add edi, eax
xor edi, 0x573ed587
add edi, ecx
inc edx
dec esi
mov eax, edi
jne 0x52be70
pop edi
pop esi
ret

Function at 0x52d4c0
Capabilities:
Encode data using xor

Disassembly:
mov edx, dword [esp + 4]
xor eax, eax
mov al, byte [edx - 4]
xor ecx, ecx
mov cl, byte [edx - 3]
push ebx
mov ebx, dword [esp + 0xc]
push ebp
push esi
shl eax, 8
push edi
add eax, ecx
shr eax, 1
and eax, 0x3ff
cmp ebx, eax
jbe 0x52d4ee
mov ebx, eax
mov dword [esp + 0x18], ebx
jmp 0x52d4f0
jne 0x52d4f8
mov dword [esp + 0x1c], 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov esi, eax
xor esi, ecx
xor esi, 0x946a4f
shl esi, 8
add esi, ecx
xor esi, 0x573ed587
add esi, eax
xor ebp, ebp
test ebx, ebx
jbe 0x52d584
lea eax, [esp + 0x20]
push eax
push ebp
push edx
call fcn.00557d10
mov edi, dword [esp + 0x2c]
add esp, 0xc
cmp edi, 0xffffffff
je 0x52d57b
mov edx, eax
xor eax, eax
test edi, edi
jbe 0x52d562
xor ecx, ecx
mov cl, byte [edx]
mov ebx, ecx
xor ebx, eax
xor ebx, 0x946a4f
shl ebx, 8
add ebx, eax
xor ebx, 0x573ed587
add ebx, ecx
inc edx
dec edi
mov eax, ebx
jne 0x52d53d
mov ebx, dword [esp + 0x18]
mov ecx, eax
xor ecx, esi
xor ecx, 0x946a4f
shl ecx, 8
add ecx, esi
xor ecx, 0x573ed587
add ecx, eax
mov esi, ecx
mov edx, dword [esp + 0x14]
inc ebp
cmp ebp, ebx
jb 0x52d51d
mov eax, dword [esp + 0x1c]
test eax, eax
jbe 0x52d5f5
lea eax, [esp + 0x20]
push eax
push ebp
push edx
call fcn.00557d10
mov edi, dword [esp + 0x2c]
add esp, 0xc
cmp edi, 0xffffffff
je 0x52d5f5
mov ecx, dword [esp + 0x1c]
cmp edi, ecx
jbe 0x52d5b2
mov edi, ecx
mov dword [esp + 0x20], edi
xor ecx, ecx
test edi, edi
mov edx, eax
jbe 0x52d5db
xor eax, eax
mov al, byte [edx]
mov ebx, eax
xor ebx, ecx
xor ebx, 0x946a4f
shl ebx, 8
add ebx, ecx
xor ebx, 0x573ed587
add ebx, eax
inc edx
dec edi
mov ecx, ebx
jne 0x52d5ba
mov eax, ecx
xor eax, esi
xor eax, 0x946a4f
shl eax, 8
pop edi
add eax, esi
pop esi
xor eax, 0x573ed587
pop ebp
add eax, ecx
pop ebx
ret
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
ret
Function at 0x53e670
Capabilities:
Encode data using xor

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
mov cl, byte [ebp]
push esi
xor eax, eax
test cl, cl
push edi
mov edx, ebp
je 0x53e6a7
movsx ecx, cl
mov esi, ecx
xor esi, eax
xor esi, 0x946a4f
shl esi, 8
add esi, eax
xor esi, 0x573ed587
add esi, ecx
mov cl, byte [edx + 1]
inc edx
test cl, cl
mov eax, esi
jne 0x53e683
mov ecx, dword [0x6314ec]
mov ecx, dword [ecx + 0x34]
xor eax, 0x62946a4f
xor edx, edx
div dword [ecx]
mov eax, dword [ecx + 4]
mov edi, dword [eax + edx*4]
test edi, edi
je 0x53e700
mov ecx, dword [edi + 0x10]
mov esi, ebp
mov dl, byte [ecx]
mov al, byte [esi]
mov bl, dl
cmp dl, al
jne 0x53e6f0
test bl, bl
je 0x53e6ec
mov al, byte [ecx + 1]
mov dl, byte [esi + 1]
mov bl, al
cmp al, dl
jne 0x53e6f0
add ecx, 2
add esi, 2
test bl, bl
jne 0x53e6c8
xor ecx, ecx
jmp 0x53e6f5
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x53e700
mov edi, dword [edi + 0x18]
test edi, edi
jne 0x53e6c3
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
ret
Function at 0x5427d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, dword [esp + 8]
mov cl, byte [ebp]
push esi
xor eax, eax
test cl, cl
push edi
mov edx, ebp
je 0x542806
movsx ecx, cl
mov esi, ecx
xor esi, eax
xor esi, 0x946a4f
shl esi, 8
add esi, eax
xor esi, 0x573ed587
add esi, ecx
mov cl, byte [edx + 1]
inc edx
test cl, cl
mov eax, esi
jne 0x5427e2
mov ecx, dword [0x6314ec]
mov ecx, dword [ecx + 0x34]
xor eax, 0x62946a4f
xor edx, edx
div dword [ecx]
mov eax, dword [ecx + 4]
mov edi, dword [eax + edx*4]
test edi, edi
je 0x542865
push ebx
mov ecx, dword [edi + 0x10]
mov esi, ebp
mov dl, byte [ecx]
mov al, byte [esi]
mov bl, dl
cmp dl, al
jne 0x542850
test bl, bl
je 0x54284c
mov al, byte [ecx + 1]
mov dl, byte [esi + 1]
mov bl, al
cmp al, dl
jne 0x542850
add ecx, 2
add esi, 2
test bl, bl
jne 0x542828
xor ecx, ecx
jmp 0x542855
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
je 0x542860
mov edi, dword [edi + 0x18]
test edi, edi
jne 0x542823
test edi, edi
pop ebx
jne 0x542872
push ebp
call fcn.0053f150
add esp, 4
pop edi
pop esi
pop ebp
ret
mov eax, edi
pop edi
pop esi
pop ebp
ret
Function at 0x56e010
Capabilities:
Encode data using xor

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [esp + 0x14]
mov ebp, dword [esi + 0x28]
push 8
call fcn.00575120
mov dword [ebp], eax
mov eax, dword [esp + 0x14]
mov dword [ebp + 4], edx
mov ecx, dword [eax + 0x30]
mov edx, dword [ecx + 0x34]
mov eax, dword [ebp]
mov dword [edx + 0x40], eax
mov ecx, dword [ebp + 4]
mov dword [edx + 0x44], ecx
mov eax, dword [ebp + 8]
add esp, 4
cmp eax, 2
jne 0x56e11f
mov ebx, dword [ebp + 0x9c]
mov cl, byte [ebx]
xor eax, eax
test cl, cl
push edi
mov edx, ebx
je 0x56e081
movsx ecx, cl
mov edi, ecx
xor edi, eax
xor edi, 0x946a4f
shl edi, 8
add edi, eax
xor edi, 0x573ed587
add edi, ecx
mov cl, byte [edx + 1]
inc edx
test cl, cl
mov eax, edi
jne 0x56e05d
mov edx, dword [0x6314ec]
mov ecx, dword [edx + 0x34]
xor eax, 0x62946a4f
xor edx, edx
div dword [ecx]
mov eax, dword [ecx + 4]
mov edi, dword [eax + edx*4]
test edi, edi
je 0x56e0da
mov eax, dword [edi + 0x10]
mov esi, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x56e0c6
test cl, cl
je 0x56e0c2
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x56e0c6
add eax, 2
add esi, 2
test cl, cl
jne 0x56e0a2
xor eax, eax
jmp 0x56e0cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x56e0d6
mov edi, dword [edi + 0x18]
test edi, edi
jne 0x56e09d
mov esi, dword [esp + 0x18]
mov eax, edi
test edi, edi
pop edi
jne 0x56e0f7
push ebx
call fcn.0053f150
add esp, 4
test eax, eax
jne 0x56e0f7
pop esi
pop ebp
mov eax, 0x1e
pop ebx
ret
mov ecx, dword [eax + 0x14]
mov dword [ebp + 0x14], ecx
mov edx, dword [eax + 0x88]
push 0x18
mov dword [ebp + 0x88], edx
call fcn.00575120
mov dword [ebp + 0x80], eax
add esp, 4
mov dword [ebp + 0x84], edx
mov eax, dword [esi + 0x40]
push eax
push ebp
call fcn.0056e140
mov ecx, dword [esi + 0x2c]
push eax
push ecx
call fcn.00569450
add esp, 0x10
pop esi
pop ebp
mov eax, 0xa
pop ebx
ret
Function at 0x56e9b0
Capabilities:
Encode data using xor

Disassembly:
mov eax, dword [esp + 8]
push ebx
push ebp
mov ebp, dword [eax + 0x28]
mov ebx, dword [ebp + 0x14]
mov cl, byte [ebx]
push esi
xor eax, eax
test cl, cl
push edi
mov edx, ebx
je 0x56e9ec
movsx ecx, cl
mov esi, ecx
xor esi, eax
xor esi, 0x946a4f
shl esi, 8
add esi, eax
xor esi, 0x573ed587
add esi, ecx
mov cl, byte [edx + 1]
inc edx
test cl, cl
mov eax, esi
jne 0x56e9c8
mov ecx, dword [0x6314ec]
mov ecx, dword [ecx + 0x34]
xor eax, 0x62946a4f
xor edx, edx
div dword [ecx]
mov eax, dword [ecx + 4]
mov edi, dword [eax + edx*4]
test edi, edi
je 0x56ea41
mov eax, dword [edi + 0x10]
mov esi, ebx
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x56ea31
test cl, cl
je 0x56ea2d
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x56ea31
add eax, 2
add esi, 2
test cl, cl
jne 0x56ea0d
xor eax, eax
jmp 0x56ea36
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x56ea41
mov edi, dword [edi + 0x18]
test edi, edi
jne 0x56ea08
test edi, edi
mov esi, edi
jne 0x56ea60
push ebx
call fcn.0053f150
mov esi, eax
add esp, 4
test esi, esi
jne 0x56ea60
pop edi
pop esi
pop ebp
mov eax, 0x1f
pop ebx
ret
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x30]
mov ecx, dword [eax + 0x34]
mov edx, dword [esi]
mov ebx, dword [esp + 0x18]
mov dword [ecx + 0x40], edx
mov eax, dword [esi + 4]
mov dword [ecx + 0x44], eax
push 0x10
mov dword [ebx + 0x3c], esi
call fcn.00575120
mov dword [ebp], eax
mov al, byte [ebp + 0xc]
add esp, 4
test al, 1
mov dword [ebp + 4], edx
je 0x56ea99
mov ecx, dword [esi + 0x14]
mov dword [ebp + 0x1c], ecx
mov dword [ebp + 0x20], 0xffffffff
mov edx, dword [edi + 0x30]
mov eax, dword [edx + 0x34]
push eax
mov eax, dword [ebx + 0x48]
push eax
push ebp
call fcn.0056ead0
mov ecx, dword [ebx + 0x2c]
push eax
push ecx
mov dword [ebx + 0x40], eax
call fcn.00569450
add esp, 0x14
pop edi
pop esi
pop ebp
mov eax, 0xa
pop ebx
ret
Function at 0x56f0d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c4
mov eax, dword [esp + 0x4cc]
mov ecx, dword [0x6314ec]
push ebx
push esi
mov esi, dword [ecx + 0x5c]
push edi
mov edi, dword [eax + 0x28]
test byte [edi + 0xc], 1
mov dword [esp + 0xc], edi
mov ebx, 2
je 0x56f112
mov edx, dword [eax + 0x3c]
cmp dword [edx + 8], ebx
jne 0x56f112
pop edi
pop esi
mov eax, 0xa
pop ebx
add esp, 0x4c4
ret
mov ecx, dword [eax + 0x48]
mov edx, dword [eax + 0x40]
push ebp
xor ebp, ebp
push ecx
push edx
mov dword [esp + 0x84], ebp
mov dword [esp + 0x88], ebp
mov dword [esp + 0x2a0], ebp
mov dword [esp + 0x2a4], ebp
mov dword [esp + 0x4c4], 0x15
mov dword [esp + 0x4bc], ebp
mov dword [esp + 0x4c0], ebp
call fcn.0056f300
mov ecx, dword [esi + 0x30]
lea edx, [esp + 0x80]
push edx
push ebp
lea edx, [esp + 0x24]
push edx
push ebx
push 3
push eax
push ebp
mov esi, 0x7514483
push ecx
mov dword [esp + 0x78], esi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x74], ebx
mov dword [esp + 0x90], 3
call fcn.005140b0
mov eax, dword [esp + 0x40]
add esp, 0x28
mov dword [esp + 0x64], 0x7711e160
mov dword [esp + 0x50], esi
push eax
call fcn.004e8c30
lea ecx, [eax + 0x74]
mov eax, dword [esp + 0x1c]
add esp, 4
cmp ecx, eax
push eax
jne 0x56f200
call fcn.004e8c30
add eax, 0xc
push eax
call fcn.004ed520
add esp, 8
cmp eax, 0xffffffff
jne 0x56f1ec
mov edx, dword [esp + 0x18]
push edx
call fcn.004e8c30
mov ecx, dword [esp + 0x1c]
add eax, 0x74
add esp, 4
cmp eax, ecx
je 0x56f240
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00553e20
add esp, 8
jmp 0x56f210
call fcn.004e8d60
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x50], esi
mov edx, dword [esp + 0x18]
push edx
call fcn.004e8c30
lea ecx, [eax + 0x65]
mov eax, dword [esp + 0x1c]
add esp, 4
cmp ecx, eax
je 0x56f1a9
push eax
call fcn.004e8c30
lea edx, [eax + 0x74]
mov eax, dword [esp + 0x1c]
add esp, 4
cmp edx, eax
je 0x56f1a9
mov ecx, dword [edi + 4]
mov edx, dword [edi]
lea eax, [esp + 0x78]
push eax
mov eax, dword [edi + 0x1c]
push ecx
mov ecx, dword [edi + 0xc]
push edx
push eax
push ecx
call fcn.0055bd30
lea edx, [esp + 0x8c]
push edx
push eax
mov dword [edi + 0x20], eax
mov eax, dword [esp + 0x34]
push 8
push eax
call fcn.00581ef0
mov ebx, dword [esp + 0x94]
add esp, 0x24
cmp ebx, ebp
je 0x56f2b9
mov eax, dword [ebx - 8]
mov esi, dword [ebx - 0x28]
add ebx, 0xffffffc0
cmp eax, ebp
je 0x56f295
push ebx
call fcn.004edde0
add esp, 4
cmp esi, ebp
je 0x56f2b0
mov edi, dword [esi + 0x1c]
push esi
push ebx
call fcn.004edc60
add esp, 8
cmp edi, ebp
mov esi, edi
jne 0x56f299
mov edi, dword [esp + 0x10]
mov dword [esp + 0x70], ebp
mov esi, 0x7514483
lea ecx, [esp + 0x78]
push ecx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], 3
mov dword [esp + 0x68], 0x4f36e539
call fcn.0054f250
mov ebx, dword [edi + 0x20]
add esp, 4
xor eax, eax
cmp ebx, 0xffffffff
setne al
pop ebp
pop edi
pop esi
pop ebx
dec eax
and eax, 3
add eax, 0xa
add esp, 0x4c4
ret
Function at 0x570810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [esp + 0xc]
sub esp, 8
push ebx
push ebp
push esi
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x40]
cmp eax, edx
mov ecx, dword [esi + 0x44]
push edi
ja 0x5709e2
jb 0x570841
mov eax, dword [esp + 0x28]
cmp ecx, eax
ja 0x5709e2
jae 0x5709e2
mov eax, dword [0x6314e0]
mov edi, dword [eax + 0x7c]
mov eax, dword [0x631438]
cmp edi, 0x10000
sbb ecx, ecx
inc ecx
add ecx, eax
jne 0x5708e6
push 0x620ad0
call fcn.004e70c0
add esp, 4
push 0x138
push str.C:4017_buildmysql_4.0.17innobaseloglog0recv.c
call sub.KERNEL32.dll_GetCurrentThreadId
push eax
call fcn.004d1950
add esp, 4
push eax
push str.__InnoDB:_Assertion_failure_in_thread__lu_in_file__s_line__lu_n
push 0x620ad0
call fcn.00599e71
push str.InnoDB:_Failing_assertion:_RECV_SCAN_SIZE___log_sys__buf_size
push 0x620ad0
call fcn.00599e71
push str._nInnoDB:_We_intentionally_generate_a_memory_trap._n
push 0x620ad0
call fcn.00599e71
push str.InnoDB:_Send_a_detailed_bug_report_to_mysql_lists.mysql.com_n
push 0x620ad0
call fcn.00599e71
mov edx, dword [0x631440]
mov dword [0x63143c], 1
mov eax, dword [edx]
add esp, 0x2c
test eax, eax
je 0x5708ef
mov dword [0x631440], 0
jmp 0x5708ef
mov eax, dword [0x63143c]
test eax, eax
je 0x570924
push 0x138
push str.C:4017_buildmysql_4.0.17innobaseloglog0recv.c
call sub.KERNEL32.dll_GetCurrentThreadId
push eax
call fcn.004d1950
add esp, 4
push eax
push str.InnoDB:_Thread__lu_stopped_in_file__s_line__lu_n
push 0x620ad0
call fcn.00599e71
push 0x3b9aca00
call fcn.004e7040
add esp, 0x18
mov eax, dword [esi + 0x44]
mov ebp, dword [esi + 0x40]
and eax, 0xfffffe00
mov edi, eax
cmp edi, 0xfffeffff
mov esi, ebp
mov dword [esp + 0x14], edi
lea ebx, [edi + 0x10000]
jbe 0x570946
inc esi
mov ecx, dword [esp + 0x24]
cmp esi, ecx
ja 0x57095a
jb 0x57097f
mov eax, dword [esp + 0x28]
cmp ebx, eax
ja 0x57095e
jmp 0x57097f
mov eax, dword [esp + 0x28]
cmp eax, 0xfffffe00
mov esi, ecx
mov dword [esp + 0x14], eax
ja 0x570972
add eax, 0x1ff
jmp 0x570978
add eax, 0x1ff
inc esi
and eax, 0xfffffe00
mov ebx, eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x6314e0]
mov edx, dword [ecx + 0x78]
push ebx
push esi
push edi
push ebp
push eax
push edx
push 0x5e4e6a3
call fcn.004fc7e0
mov edx, dword [esp + 0x3c]
add esp, 0x1c
push 0
push edi
push ebp
mov eax, ebx
sub eax, edi
push eax
mov eax, dword [0x6314e0]
mov ecx, dword [eax + 0x78]
push ecx
push edx
push 0x5e4e6a3
cmp esi, ebp
call fcn.004faa50
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp esi, eax
ja 0x5709e2
jb 0x5709d9
mov eax, dword [esp + 0x28]
cmp ebx, eax
ja 0x5709e2
jae 0x5709e2
mov ebp, esi
mov edi, ebx
jmp 0x570931
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret
Function at 0x5709f0
Capabilities:
Encode data using xor

Disassembly:
push ebx
push esi
push edi
mov edi, dword [esp + 0x10]
mov edx, edi
xor eax, eax
mov esi, 0x120
xor ecx, ecx
mov cl, byte [edx]
mov ebx, ecx
xor ebx, eax
xor ebx, 0x946a4f
shl ebx, 8
add ebx, eax
xor ebx, 0x573ed587
add ebx, ecx
inc edx
dec esi
mov eax, ebx
jne 0x570a00
xor ecx, ecx
mov cl, byte [edi + 0x120]
xor edx, edx
mov dl, byte [edi + 0x121]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [edi + 0x122]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [edi + 0x123]
shl ecx, 8
add ecx, edx
cmp eax, ecx
je 0x570a5a
pop edi
pop esi
xor eax, eax
pop ebx
ret
lea edx, [edi + 8]
xor eax, eax
mov esi, 0x11c
xor ecx, ecx
mov cl, byte [edx]
mov ebx, ecx
xor ebx, eax
xor ebx, 0x946a4f
shl ebx, 8
add ebx, eax
xor ebx, 0x573ed587
add ebx, ecx
inc edx
dec esi
mov eax, ebx
jne 0x570a64
xor ecx, ecx
mov cl, byte [edi + 0x124]
xor edx, edx
mov dl, byte [edi + 0x125]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [edi + 0x126]
shl ecx, 8
add ecx, edx
xor edx, edx
mov dl, byte [edi + 0x127]
shl ecx, 8
pop edi
pop esi
pop ebx
add ecx, edx
xor edx, edx
cmp eax, ecx
sete dl
mov eax, edx
ret
Function at 0x579210
Capabilities:
Terminate process

Disassembly:
push ebx
push esi
push edi
inc dword [0x631364]
mov edi, dword [esp + 0x10]
mov eax, dword [edi + 0x30]
mov ebx, dword [eax + 0x34]
mov eax, dword [edi + 0x54]
push edi
push eax
call fcn.00579350
mov esi, eax
add esp, 8
cmp esi, 0xa
mov dword [ebx + 0xa8], esi
je 0x57934a
push esi
push str.InnoDB:_Fatal_error__lu_in_rollback._n
push 0x620ad0
call fcn.00599e71
add esp, 0xc
cmp esi, 0xd
jne 0x579272
push str.InnoDB:_Error_13_means_out_of_tablespace._nInnoDB:_Consider_increasing_your_tablespace._n
push 0x620ad0
call fcn.00599e71
add esp, 8
push 1
call fcn.0059b255
mov eax, dword [0x631438]
test eax, eax
jne 0x579306
push 0x620ad0
call fcn.004e70c0
add esp, 4
push 0x150
push str.C:4017_buildmysql_4.0.17innobase_row_row0undo.c
call sub.KERNEL32.dll_GetCurrentThreadId
push eax
call fcn.004d1950
add esp, 4
push eax
push str.__InnoDB:_Assertion_failure_in_thread__lu_in_file__s_line__lu_n
push 0x620ad0
call fcn.00599e71
push str.InnoDB:_Failing_assertion:_0
push 0x620ad0
call fcn.00599e71
push str._nInnoDB:_We_intentionally_generate_a_memory_trap._n
push 0x620ad0
call fcn.00599e71
push str.InnoDB:_Send_a_detailed_bug_report_to_mysql_lists.mysql.com_n
push 0x620ad0
call fcn.00599e71
mov ecx, dword [0x631440]
mov dword [0x63143c], 1
mov eax, dword [ecx]
add esp, 0x2c
test eax, eax
je 0x57930f
mov dword [0x631440], 0
jmp 0x57930f
mov eax, dword [0x63143c]
test eax, eax
je 0x579344
push 0x150
push str.C:4017_buildmysql_4.0.17innobase_row_row0undo.c
call sub.KERNEL32.dll_GetCurrentThreadId
push eax
call fcn.004d1950
add esp, 4
push eax
push str.InnoDB:_Thread__lu_stopped_in_file__s_line__lu_n
push 0x620ad0
call fcn.00599e71
push 0x3b9aca00
call fcn.004e7040
add esp, 0x18
pop edi
pop esi
xor eax, eax
pop ebx
ret
mov eax, edi
pop edi
pop esi
pop ebx
ret