joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4e80b0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4e8262
sub esp, 0x28
mov eax, dword [esp + 0x34]
test byte [eax], al
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + 4]
mov ebx, dword [edx]
lea ebp, [eax + 8]
mov ecx, dword [ecx + 0x10]
mov dword [esp], ebp
mov dword [esp + 4], ecx
call ebx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
je 0x4e813f
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x30]
test byte [eax], al
lea eax, [0x700060]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [0x93f150]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4e811d
mov eax, dword [esp + 0x44]
jmp 0x4e8128
call fcn.00471830
mov eax, dword [esp + 0x44]
mov dword [edi], eax
mov dword [esp + 0x18], ecx
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x40]
mov ebp, ecx
jmp 0x4e81a1
mov eax, dword [esp + 0x38]
test byte [eax], al
mov ecx, dword [esp + 0x30]
test byte [ecx], al
lea ecx, [eax + 4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.00465940
mov eax, dword [esp + 0x38]
mov dword [esp + 0x48], eax
add esp, 0x28
ret
mov dword [esp + 0x1c], ecx
mov dword [ecx + 0x10], eax
test byte [eax], al
mov edx, dword [esp + 0x10]
lea eax, [eax + edx*4 + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00465940
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x14]
mov edx, ecx
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
test ebx, ebx
je 0x4e8249
add ebx, 0xfffffffc
mov esi, ecx
mov ecx, ebx
shr eax, cl
shr edx, cl
cmp ecx, 0x20
sbb ebp, ebp
and eax, ebp
and eax, 0xf
and edx, ebp
and edx, 0xf
cmp edx, eax
jne 0x4e8209
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], esi
nop
lea eax, [0x700060]
mov dword [esp], eax
call fcn.0040bb90
mov eax, dword [0x93f150]
mov ecx, dword [esp + 4]
test eax, eax
jne 0x4e81f9
mov eax, dword [esp + 0x24]
jmp 0x4e816a
call fcn.00471830
mov eax, dword [esp + 0x24]
mov dword [edi], eax
jmp 0x4e816a
test byte [esi], al
lea eax, [esi + eax*4 + 0x14]
lea ecx, [esi + edx*4 + 0x14]
mov dword [esp + 0x20], ecx
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
call fcn.00465940
mov eax, dword [esp + 0x38]
test byte [eax], al
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00465940
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], eax
add esp, 0x28
ret
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a7b8]
mov dword [esp + 4], eax
call fcn.0046a9e0
nop
call fcn.00470430
jmp fcn.004e80b0
Function at 0x4e8670
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4e878d
sub esp, 0x28
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 4]
mov ecx, dword [edx]
mov ebx, dword [eax + 0x10]
lea ebp, [esp + 0x34]
mov dword [esp], ebp
mov dword [esp + 4], ebx
call ecx
mov eax, dword [esp + 8]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x2c]
mov ebx, dword [ecx]
mov ebp, dword [esp + 0x30]
mov edx, 0x20
jmp 0x4e86cd
mov ebp, dword [esp + 0x30]
mov esi, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x2c]
mov ebx, eax
mov eax, esi
test edx, edx
je 0x4e8774
add edx, 0xfffffffc
test edx, edx
jl 0x4e876f
mov dword [esp + 0x20], edx
test byte [ebx], al
test byte [ebp], al
mov ecx, edx
shr eax, cl
cmp ecx, 0x20
sbb edi, edi
and eax, edi
and eax, 0xf
lea eax, [ebx + eax*4 + 0x14]
mov dword [esp], eax
call fcn.00476090
mov eax, dword [esp + 4]
test eax, eax
je 0x4e875e
movzx edx, byte [eax]
test dl, dl
je 0x4e86b9
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + 8]
movzx edx, byte [esp + 0x34]
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov esi, dword [esp + 0x2c]
mov esi, dword [esi + 8]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov byte [esp + 8], dl
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004e8970
mov eax, dword [esp + 0x18]
movzx ecx, byte [esp + 0x1c]
mov dword [esp + 0x40], eax
mov byte [esp + 0x44], cl
add esp, 0x28
ret
mov dword [esp + 0x40], 0
mov byte [esp + 0x44], 0
add esp, 0x28
ret
call fcn.00435150
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a7b0]
mov dword [esp + 4], eax
call fcn.0046a9e0
nop
call fcn.00470430
jmp fcn.004e8670
Function at 0x4ee320
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4ee514
sub esp, 0x58
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4ee4fb
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4ee355
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
jmp 0x4ee359
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x5c]
test byte [edx], al
lea ebx, [edx + 8]
mov dword [esp + 0x20], ebx
mov dword [esp], ebx
call fcn.004868a0
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x1c]
test ecx, ecx
jne 0x4ee444
mov ecx, dword [esp + 0x64]
mov dword [eax + 0x1c], ecx
mov edx, dword [0x93f150]
test edx, edx
jne 0x4ee3a0
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x24]
jmp 0x4ee3be
call fcn.00471860
mov edx, dword [esp + 0x68]
mov dword [edi], edx
mov ebx, dword [eax + 0x20]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x24]
mov dword [edi + 8], ebx
mov ebp, dword [eax + 0x28]
mov dword [edi + 0xc], ebp
mov dword [eax + 0x20], edx
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], ebx
lea ebp, [eax + 0x10]
mov dword [esp + 0x1c], ebp
mov dword [esp], ebp
call fcn.00475e20
lea eax, [0x6d49e0]
cmp dword [esp + 4], eax
jne 0x4ee3ec
mov ecx, dword [esp + 8]
jmp 0x4ee3ee
xor ecx, ecx
test ecx, ecx
je 0x4ee3fc
mov dword [esp], ecx
call fcn.00405a70
jmp 0x4ee416
mov ecx, dword [0x91ec30]
mov edx, dword [esp + 0x1c]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00475eb0
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx + 0x18]
lea edi, [esp + 0x28]
xor eax, eax
call fcn.00471ac4
lea ecx, [0x6de4c0]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [esp + 0x28]
mov dword [esp + 8], ecx
call fcn.00467970
jmp 0x4ee492
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00486c20
add esp, 0x58
ret
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
mov dword [esp], eax
mov byte [esp + 4], 0
mov eax, dword [esp + 0x64]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x68]
mov dword [esp + 0xc], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x14], ebp
call ecx
lea eax, [esp + 0x28]
mov dword [esp], eax
call fcn.00467b60
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x4ee454
mov eax, dword [0x93f150]
test eax, eax
jne 0x4ee4aa
mov eax, dword [esp + 0x5c]
jmp 0x4ee4b8
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0x18]
call fcn.00471830
mov dword [edi], ecx
mov dword [eax + 0x18], 0
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
call fcn.00486c20
movzx eax, byte [esp + 0x60]
test al, al
je 0x4ee4f7
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x78b5fc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004ed900
add esp, 0x58
ret
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x78a4b8]
mov dword [esp + 4], eax
call fcn.0046a9e0
nop
call fcn.00470430
jmp fcn.004ee320
Function at 0x4eedc0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4eeeb3
sub esp, 0x1c
mov eax, dword [esp + 0x20]
test byte [eax], al
mov dword [esp], eax
mov byte [esp + 4], 0
mov ecx, dword [esp + 0x28]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x14], ecx
call fcn.004ee320
movzx eax, byte [esp + 0x24]
test al, al
je 0x4eee36
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp], ecx
mov dword [esp + 4], edx
lea ecx, [0x78b5d4]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.004ed900
mov eax, dword [esp + 0x20]
lea ecx, [eax + 8]
mov dword [esp + 0x18], ecx
mov dword [esp], ecx
call fcn.004868a0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x2c]
test ecx, ecx
je 0x4eee8a
movzx edx, byte [ecx + 4]
nop
test dl, dl
je 0x4eee9a
mov dword [esp], ecx
call fcn.0046ecd0
mov eax, dword [0x93f150]
test eax, eax
jne 0x4eee75
mov eax, dword [esp + 0x20]
jmp 0x4eee83
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x2c]
call fcn.00471830
mov dword [edi], ecx
mov dword [eax + 0x2c], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00486c20
add esp, 0x1c
ret
lea eax, [0x6db180]
mov dword [esp], eax
lea eax, [0x789e50]
mov dword [esp + 4], eax
call fcn.0046a9e0
nop
call fcn.00470430
jmp fcn.004eedc0
Function at 0x4f1310
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0xb0]
cmp eax, dword [ecx + 8]
jbe 0x4f14de
sub esp, 0x130
lea edi, [esp + 0x13c]
xor eax, eax
call fcn.00471a8d
mov ecx, dword [esp + 0x134]
movzx edx, byte [ecx + 0x24]
test dl, dl
je 0x4f1354
mov edx, dword [ecx + 0x28]
mov dword [ecx + 0x1c], edx
movzx edx, byte [ecx + 0x18]
movzx ebx, byte [esp + 0x138]
cmp bl, dl
jbe 0x4f1372
mov edx, dword [0x913de0]
mov ebx, dword [0x913de4]
jmp 0x4f13e4
jae 0x4f1382
mov edx, dword [0x913de8]
mov ebx, dword [0x913dec]
jmp 0x4f13e4
mov byte [ecx + 0x24], 0
cmp bl, 3
ja 0x4f13a1
cmp bl, 2
jne 0x4f1396
movzx edx, word [ecx + 0x10]
jmp 0x4f13b9
cmp bl, 3
jne 0x4f13b7
movzx edx, word [ecx + 0x12]
jmp 0x4f13b9
cmp bl, 4
jne 0x4f13ac
movzx edx, word [ecx + 0x14]
jmp 0x4f13b9
cmp bl, 5
jne 0x4f13b7
movzx edx, word [ecx + 0x16]
jmp 0x4f13b9
xor edx, edx
movzx edx, dx
cmp dword [ecx + 0x20], edx
jne 0x4f13e0
mov dword [ecx + 0x20], 0
movzx ebp, byte [ecx + 0x18]
inc ebp
xchg ebp, eax
mov byte [ecx + 0x18], al
xchg ebp, eax
mov edx, dword [0x913de8]
mov ebx, dword [0x913dec]
jmp 0x4f13e4
xor edx, edx
xor ebx, ebx
test edx, edx
jne 0x4f14bd
lea edi, [esp + 0x20]
call fcn.00471a8d
mov ecx, dword [esp + 0x134]
mov edx, dword [ecx + 4]
mov ebx, dword [ecx + 8]
mov ebp, dword [ecx]
mov esi, dword [ecx + 0x1c]
lea ecx, [esp + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], esi
call fcn.004f2d20
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4f1460
mov dword [esp + 0x12c], ecx
mov edx, dword [esp + 0x1c]
lea edi, [esp + 0x13c]
xor eax, eax
call fcn.00471a8d
mov ecx, dword [esp + 0x12c]
mov dword [esp + 0x248], ecx
mov dword [esp + 0x24c], edx
add esp, 0x130
ret
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x134]
mov byte [ecx + 0x24], 1
mov edx, dword [ecx + 0x1c]
mov dword [ecx + 0x28], edx
movzx edx, word [esp + 0x120]
mov word [ecx + 0x2c], dx
movzx edx, word [esp + 0x128]
mov word [ecx + 0x2e], dx
mov dword [ecx + 0x1c], eax
lea edi, [esp + 0x13c]
lea esi, [esp + 0x20]
call fcn.00471d42
mov dword [esp + 0x248], 0
mov dword [esp + 0x24c], 0
add esp, 0x130
ret
lea edi, [esp + 0x13c]
call fcn.00471a8d
mov dword [esp + 0x248], edx
mov dword [esp + 0x24c], ebx
add esp, 0x130
ret
call fcn.00470430
jmp fcn.004f1310
Function at 0x4f2210
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f23cc
sub esp, 0x5c
lea edi, [esp + 0x7c]
xor eax, eax
call fcn.00471ac7
mov ecx, dword [esp + 0x60]
test ecx, ecx
je 0x4f2248
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
mov eax, dword [esp + 0x60]
jmp 0x4f2271
lea eax, [0x6db200]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x200
call fcn.0046c5c0
mov eax, dword [esp + 0xc]
xor ecx, ecx
mov edx, 0x200
mov dword [esp + 0x30], ecx
lea edi, [esp + 0x34]
mov ebx, eax
xor eax, eax
call fcn.00471ac7
mov dword [esp + 0x34], ebx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x50], ecx
movzx ecx, word [esp + 0x70]
shl ecx, 0xb
movzx edx, word [esp + 0x78]
movzx ebx, byte [esp + 0x75]
or edx, ecx
test bl, bl
je 0x4f22b4
or edx, 0x80
movzx eax, byte [esp + 0x74]
test al, al
je 0x4f22c3
or edx, 0x100
movzx eax, byte [esp + 0x73]
test al, al
je 0x4f22d2
or edx, 0x200
movzx eax, byte [esp + 0x72]
test al, al
je 0x4f22e1
or edx, 0x400
movzx eax, byte [esp + 0x6e]
test al, al
je 0x4f22f0
or edx, 0xffff8000
movzx eax, byte [esp + 0x76]
test al, al
je 0x4f22fc
or edx, 0x20
movzx eax, byte [esp + 0x77]
test al, al
je 0x4f2308
or edx, 0x10
movzx eax, word [esp + 0x6c]
mov word [esp + 0x42], ax
mov word [esp + 0x44], dx
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
lea edx, [ecx + 0xc]
mov ebx, dword [esp + 0x34]
cmp eax, edx
jae 0x4f2378
mov dword [esp + 0x30], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
lea eax, [0x6db200]
mov dword [esp + 0x10], eax
call fcn.0046c670
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edx
mov dword [esp + 0x58], ebx
add ecx, ebx
mov dword [esp], ecx
lea ecx, [esp + 0x20]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xc
call fcn.004721c0
mov eax, dword [esp + 0x58]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x3c], eax
mov byte [esp + 0x40], 1
lea edi, [esp + 0x7c]
lea esi, [esp + 0x34]
call fcn.00471f86
add esp, 0x5c
ret
call fcn.00470430
jmp fcn.004f2210
Function at 0x4f23e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f258a
sub esp, 0x30
mov eax, dword [esp + 0x34]
movzx ecx, byte [eax + 0xc]
cmp cl, 2
jb 0x4f256c
ja 0x4f254e
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov ebx, dword [eax]
mov ebp, dword [eax + 0x20]
mov esi, dword [eax + 0x1c]
lea edi, [esp + 0x38]
mov dword [esp], edi
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.004f3eb0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
test eax, eax
jne 0x4f2538
mov eax, dword [esp + 0x34]
movzx ebp, byte [eax + 0xc]
xchg ebp, eax
cmp al, 3
xchg ebp, eax
ja 0x4f2493
xchg ebp, eax
cmp al, 2
xchg ebp, eax
jne 0x4f247b
lea ebp, [eax + 0x12]
mov esi, dword [0x913e48]
mov edi, dword [0x913e4c]
jmp 0x4f24c9
xchg ebp, eax
cmp al, 3
xchg ebp, eax
jne 0x4f24c3
lea ebp, [eax + 0x14]
mov esi, dword [0x913e50]
mov edi, dword [0x913e54]
jmp 0x4f24c9
xchg ebp, eax
cmp al, 4
xchg ebp, eax
jne 0x4f24ab
lea ebp, [eax + 0x16]
mov esi, dword [0x913e58]
mov edi, dword [0x913e5c]
jmp 0x4f24c9
xchg ebp, eax
cmp al, 5
xchg ebp, eax
jne 0x4f24c3
lea ebp, [eax + 0x18]
mov esi, dword [0x913e60]
mov edi, dword [0x913e64]
jmp 0x4f24c9
xor ebp, ebp
xor esi, esi
xor edi, edi
mov dword [esp + 0x2c], ecx
movzx ecx, word [ebp]
cmp cx, 0xffff
je 0x4f24e0
inc ecx
mov word [ebp], cx
xor esi, esi
xor edi, edi
test esi, esi
jne 0x4f2526
mov dword [eax + 4], edx
mov dword [eax + 8], ebx
mov ecx, dword [0x93f150]
test ecx, ecx
jne 0x4f24fa
mov ecx, dword [esp + 0x2c]
jmp 0x4f250a
call fcn.00471840
mov ecx, dword [esp + 0x2c]
mov dword [edi], ecx
mov edx, dword [eax]
mov dword [edi + 4], edx
mov dword [eax], ecx
mov dword [esp + 0x13c], 0
mov dword [esp + 0x140], 0
add esp, 0x30
ret
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], edi
add esp, 0x30
ret
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ecx
add esp, 0x30
ret
mov eax, dword [0x913de8]
mov ecx, dword [0x913dec]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ecx
add esp, 0x30
ret
mov eax, dword [0x913de0]
mov ecx, dword [0x913de4]
mov dword [esp + 0x13c], eax
mov dword [esp + 0x140], ecx
add esp, 0x30
ret
call fcn.00470430
jmp fcn.004f23e0
Function at 0x4f29e0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4f2aa1
sub esp, 0x1c
mov eax, dword [esp + 0x20]
movzx ebx, byte [eax + 0xc]
test bl, bl
je 0x4f2a6b
mov byte [eax + 0xc], 6
mov edx, dword [eax + 8]
mov ecx, dword [eax + 0x1c]
cmp edx, ecx
jb 0x4f2a9b
lea ebx, [eax + 0xe]
mov ebp, dword [eax]
mov dword [esp], ebx
sub edx, ecx
mov ebx, edx
neg edx
sar edx, 0x1f
and ecx, edx
add ecx, ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], ebx
call fcn.004f09d0
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
add esp, 0x1c
ret
mov eax, dword [0x913de0]
mov ecx, dword [0x913de4]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
add esp, 0x1c
ret
call fcn.004718f0
nop
call fcn.00470430
jmp fcn.004f29e0
Function at 0x4fead0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x1e4]
cmp eax, dword [ecx + 8]
jbe 0x4fed27
sub esp, 0x264
mov esi, dword [esp + 0x268]
test byte [esi], al
lea edi, [esp + 0x234]
call fcn.00471f68
lea edi, [esp]
lea esi, [esp + 0x234]
call fcn.00471f68
mov eax, dword [esp + 0x26c]
mov dword [esp + 0x30], eax
lea edi, [esp + 0x32]
lea esi, [esp + 0x26e]
call fcn.00471fc2
call fcn.004feeb0
movzx eax, word [esp + 0x40]
movzx ecx, byte [esp + 0x42]
cmp ax, 3
je 0x4fed06
mov word [esp + 0x11e], ax
mov byte [esp + 0x11d], cl
nop
mov eax, dword [esp + 0x268]
mov dword [esp], eax
mov byte [esp + 4], 3
call fcn.004f1310
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x230], ecx
lea edi, [esp + 0x124]
lea esi, [esp + 8]
call fcn.00471d42
test eax, eax
je 0x4febff
cmp dword [0x913de8], eax
je 0x4feba5
mov ecx, 1
jmp 0x4febda
mov dword [esp + 0x120], eax
mov ecx, dword [0x913dec]
mov dword [esp], eax
mov edx, dword [esp + 0x230]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00404430
movzx eax, byte [esp + 0xc]
xor eax, 1
mov ecx, eax
mov eax, dword [esp + 0x120]
test cl, cl
je 0x4febff
mov eax, dword [0x913a78]
mov ecx, dword [0x913a7c]
mov dword [esp + 0x27c], eax
mov dword [esp + 0x280], ecx
add esp, 0x264
ret
movzx ecx, word [esp + 0x11e]
test cx, cx
jne 0x4fec64
movzx edx, byte [esp + 0x272]
test dl, dl
je 0x4fec1c
xor eax, eax
jmp 0x4fec66
movzx edx, byte [esp + 0x275]
test dl, dl
je 0x4fec2c
xor eax, eax
jmp 0x4fec66
cmp dword [0x913de8], eax
je 0x4fec38
xor eax, eax
jmp 0x4fec66
mov ecx, dword [0x913dec]
mov dword [esp], eax
mov eax, dword [esp + 0x230]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00404430
movzx eax, byte [esp + 0xc]
movzx ecx, word [esp + 0x11e]
jmp 0x4fec66
xor eax, eax
test al, al
je 0x4fec9c
movzx eax, byte [esp + 0x11d]
test al, al
je 0x4fec7b
test cx, cx
jmp 0x4fec9f
mov eax, dword [0x913a70]
mov ecx, dword [0x913a74]
mov dword [esp + 0x27c], eax
mov dword [esp + 0x280], ecx
add esp, 0x264
ret
test cx, cx
je 0x4fece9
cmp cx, 2
jne 0x4fecc8
mov eax, dword [0x913454]
lea ecx, [0x78b020]
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], eax
add esp, 0x264
ret
mov eax, dword [0x913a88]
mov ecx, dword [0x913a8c]
mov dword [esp + 0x27c], eax
mov dword [esp + 0x280], ecx
add esp, 0x264
ret
mov dword [esp + 0x27c], 0
mov dword [esp + 0x280], 0
add esp, 0x264
ret
mov eax, dword [0x913480]
lea ecx, [0x78afd0]
mov dword [esp + 0x27c], ecx
mov dword [esp + 0x280], eax
add esp, 0x264
ret
call fcn.00470430
jmp fcn.004fead0
Function at 0x4fed40
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x2bc]
cmp eax, dword [ecx + 8]
jbe 0x4feea3
sub esp, 0x33c
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov byte [esp + 4], 3
call fcn.004f1310
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x118]
mov dword [esp + 0x338], ecx
lea edi, [esp + 0x22c]
lea esi, [esp + 8]
call fcn.00471d42
lea edi, [esp + 0x120]
lea esi, [esp + 0x22c]
call fcn.00471d42
cmp dword [0x913de8], eax
jne 0x4feded
mov dword [esp + 0x11c], eax
mov ecx, dword [0x913dec]
mov dword [esp], eax
mov edx, dword [esp + 0x338]
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00404430
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4fee82
mov eax, dword [esp + 0x11c]
test eax, eax
jne 0x4fee61
movzx eax, word [esp + 0x344]
cmp word [esp + 0x220], ax
je 0x4fee44
mov eax, dword [esp + 0x340]
mov dword [esp], eax
mov byte [esp + 4], 3
call fcn.004f14f0
mov eax, dword [esp + 8]
test eax, eax
je 0x4fed61
mov eax, dword [0x913a78]
mov ecx, dword [0x913a7c]
mov dword [esp + 0x348], eax
mov dword [esp + 0x34c], ecx
add esp, 0x33c
ret
mov dword [esp + 0x348], 0
mov dword [esp + 0x34c], 0
add esp, 0x33c
ret
mov eax, dword [0x913a78]
mov ecx, dword [0x913a7c]
mov dword [esp + 0x348], eax
mov dword [esp + 0x34c], ecx
add esp, 0x33c
ret
mov eax, dword [0x913480]
lea ecx, [0x78afd0]
mov dword [esp + 0x348], ecx
mov dword [esp + 0x34c], eax
add esp, 0x33c
ret
call fcn.00470430
jmp fcn.004fed40
Function at 0x4feeb0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword [0x93ee7c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c0]
cmp eax, dword [ecx + 8]
jbe 0x4ff070
sub esp, 0x340
nop
lea eax, [esp + 0x344]
mov dword [esp], eax
mov byte [esp + 4], 3
call fcn.004f14f0
mov eax, dword [esp + 8]
cmp dword [0x913de8], eax
jne 0x4fef23
mov dword [esp + 0x124], eax
mov ecx, dword [0x913dec]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00404430
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4fef27
mov eax, dword [esp + 0x124]
test eax, eax
je 0x4feed2
nop
lea eax, [esp + 0x344]
mov dword [esp], eax
mov byte [esp + 4], 4
call fcn.004f14f0
mov eax, dword [esp + 8]
cmp dword [0x913de8], eax
jne 0x4fef79
mov dword [esp + 0x120], eax
mov ecx, dword [0x913dec]
mov edx, dword [esp + 0xc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.00404430
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4fef7d
mov eax, dword [esp + 0x120]
test eax, eax
je 0x4fef28
xor eax, eax
jmp 0x4fef86
mov eax, 1
mov byte [esp + 0x11f], al
lea ecx, [esp + 0x344]
mov dword [esp], ecx
mov byte [esp + 4], 5
call fcn.004f1310
mov eax, dword [esp + 0x114]
lea edi, [esp + 0x234]
lea esi, [esp + 8]
call fcn.00471d42
lea edi, [esp + 0x128]
lea esi, [esp + 0x234]
call fcn.00471d42
test eax, eax
jne 0x4ff04a
cmp word [esp + 0x228], 0x29
je 0x4ff015
lea eax, [esp + 0x344]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.004f14f0
mov eax, dword [esp + 8]
test eax, eax
je 0x4fef81
movzx eax, word [esp + 0x380]
mov word [esp + 0x384], ax
mov byte [esp + 0x386], 1
add esp, 0x340
ret
mov eax, dword [esp + 0x22c]
movzx ecx, word [esp + 0x380]
test eax, 0xff0000
jne 0x4ff033
shr eax, 0x18
shl eax, 4
or ecx, eax
mov word [esp + 0x384], cx
mov byte [esp + 0x386], 1
add esp, 0x340
ret
movzx eax, word [esp + 0x380]
mov word [esp + 0x384], ax
movzx eax, byte [esp + 0x11f]
mov byte [esp + 0x386], al
add esp, 0x340
ret
call fcn.00470430
jmp fcn.004feeb0