joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6525cdb0
Capabilities:
Reference sql statements

Disassembly:
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_column_id__column_name__domain_id__width__scale__n_IF_nullsY_THEN_1_ELSE_0_ENDIF__n_IF_pkeyY_THEN_1_ELSE_0_ENDIF_n_FROM_SYS.SYSCOLUMN_n_WHERE_table_id__:oallcTid_n_ORDER_BY_column_id
mov esi, ecx
mov ecx, dword [str.syncinfo]
push 0x652fa97c
push ecx
push 0
lea eax, [esp + 0x2c]
lea edi, [esi + 8]
push edi
mov dword [0x652e6cf4], eax
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525cdf8
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525cdf8
mov dword [esi + 0x90], eax
mov edx, dword [str.syncinfo]
push 1
push 0
push 0
push 0x652e6ce0
push 0x652fa97c
push edx
push 0
push str.SI_ALL_COLUMNS
push edi
call sub.dblib8.dll_Ordinal_258
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525ce35
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525ce33
mov dword [esi + 0x90], eax
test eax, eax
je 0x6525ce3d
mov word [esi + 4], 9
xor ecx, ecx
test eax, eax
sete cl
pop edi
pop esi
mov eax, ecx
ret 4

Function at 0x6525cf60
Capabilities:
Reference sql statements

Disassembly:
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_foreign_key_id__primary_table_id__role_n_FROM_SYS.SYSFOREIGNKEY_n_WHERE_SYS.SYSFOREIGNKEY.foreign_table_id__:ofkFTid_n_ORDER_BY_foreign_key_id
mov esi, ecx
mov ecx, dword [str.syncinfo]
push 0x652fa980
push ecx
push 0
lea eax, [esp + 0x2c]
lea edi, [esi + 8]
push edi
mov dword [0x652e6f20], eax
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525cfa8
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525cfa8
mov dword [esi + 0x90], eax
mov edx, dword [str.syncinfo]
push 1
push 0
push 0
push 0x652e6f0c
push 0x652fa980
push edx
push 0
push str.SI_FOREIGN_KEYS
push edi
call sub.dblib8.dll_Ordinal_258
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525cfe5
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525cfe3
mov dword [esi + 0x90], eax
test eax, eax
je 0x6525cfed
mov word [esi + 4], 0xa
xor ecx, ecx
test eax, eax
sete cl
pop edi
pop esi
mov eax, ecx
ret 4

Function at 0x6525df90
Capabilities:
Reference sql statements

Disassembly:
sub esp, 8
push ebx
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_sync_id_n_FROM_syssync_n_WHERE_site_name__:userName_n_AND_publication_id__:pubId
mov esi, ecx
mov ecx, dword [str.syncinfo]
lea eax, [esp + 0x20]
push eax
push ecx
push 0
lea edi, [esi + 8]
push edi
mov ebx, 1
mov dword [esp + 0x30], 0
call sub.dblib8.dll_Ordinal_260
mov edx, dword [esp + 0x1c]
push 0x652e7778
push 0x652e7710
mov dword [0x652e7724], edx
lea eax, [esp + 0x20]
lea edx, [esp + 0x14]
push edx
mov dword [0x652e7750], eax
mov eax, dword [str.syncinfo]
push eax
push 0
lea ecx, [esp + 0x24]
push edi
mov dword [0x652e778c], ecx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
je 0x6525e025
mov ecx, dword [esp + 0x20]
pop edi
mov word [esi + 4], 0xe
pop esi
xor eax, eax
mov dword [ecx], 0xffffffff
pop ebx
add esp, 8
ret 0xc
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
pop edi
mov dword [edx], eax
pop esi
mov eax, ebx
pop ebx
add esp, 8
ret 0xc
Function at 0x6525e040
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x14
push ebx
push esi
push edi
push 0
push 2
push 0
push 0
mov esi, ecx
mov eax, dword [esi + 0x94]
mov ecx, dword [esp + 0x38]
push str.SELECT_publication_name_n_FROM_SYS.SYSPUBLICATION_n_WHERE_publication_id__:pubId
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x28], eax
mov eax, dword [str.syncinfo]
push eax
lea edi, [esi + 8]
push 0
push edi
mov ebx, 1
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], 0x22b8
mov dword [esp + 0x40], 0
mov dword [esp + 0x30], ecx
mov dword [esp + 0x4c], 0
call sub.dblib8.dll_Ordinal_260
mov edx, dword [esp + 0x24]
push 0x652e7844
push 0x652e7808
lea ecx, [esp + 0x14]
lea eax, [esp + 0x30]
push eax
mov dword [0x652e781c], ecx
mov ecx, dword [str.syncinfo]
push ecx
push 0
push edi
mov dword [0x652e7858], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
je 0x6525e0df
mov word [esi + 4], 0xb
xor ebx, ebx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x6525e108
cmp eax, dword [esp + 0x1c]
je 0x6525e108
mov eax, dword [esp + 0x10]
test eax, eax
je 0x6525e108
mov edx, dword [esp + 0x18]
push edx
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.65263210
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x14
ret 8

Function at 0x6525e120
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x18
mov edx, dword [str.syncinfo]
push ebx
push esi
push edi
push 0
push 2
push 0
push 0
mov esi, ecx
mov eax, dword [esi + 0x94]
push str.SELECT_publication_id_n_FROM_SYS.SYSPUBLICATION_n_WHERE_publication_name__:gpiPubName
lea ecx, [esp + 0x20]
push ecx
push edx
lea edi, [esi + 8]
push 0
push edi
mov ebx, 1
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], 0x22b8
mov dword [esp + 0x44], 0
mov dword [esp + 0x30], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esp + 0x28]
push 0x652e7914
push 0x652e78d8
lea edx, [esp + 0x14]
push edx
mov dword [0x652e78ec], eax
mov eax, dword [str.syncinfo]
push eax
push 0
lea ecx, [esp + 0x24]
push edi
mov dword [0x652e7928], ecx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
je 0x6525e1b8
mov word [esi + 4], 0xb
xor ebx, ebx
jmp 0x6525e1c2
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x10]
mov dword [ecx], edx
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x6525e1eb
cmp eax, dword [esp + 0x20]
je 0x6525e1eb
mov eax, dword [esp + 0x14]
test eax, eax
je 0x6525e1eb
mov edx, dword [esp + 0x1c]
push edx
push eax
push ecx
lea ecx, [esp + 0x20]
call fcn.65263210
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 8
Function at 0x6525fcd0
Capabilities:
Reference sql statements

Disassembly:
push ecx
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_table_name__user_name_n_FROM_SYS.SYSTABLE__SYS.SYSUSERPERMS_n_WHERE_SYS.SYSTABLE.table_id__:tid
mov esi, ecx
mov ecx, dword [str.syncinfo]
lea eax, [esp + 0x1c]
push eax
push ecx
push 0
lea edi, [esi + 8]
push edi
mov dword [esp + 0x2c], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x6525fd49
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push 0x652e8718
lea edx, [esp + 0x14]
push 0x652e86d8
mov dword [0x652e86ec], edx
lea edx, [esp + 0x10]
push edx
mov dword [0x652e872c], eax
mov eax, dword [str.syncinfo]
push eax
push 0
push edi
mov dword [0x652e8758], ecx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525fd61
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525fd59
mov dword [esi + 0x90], eax
pop edi
xor eax, eax
pop esi
pop ecx
ret 0xc
xor ecx, ecx
test eax, eax
sete cl
pop edi
pop esi
mov eax, ecx
pop ecx
ret 0xc

Function at 0x6525fd70
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x10
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_min__progress___FROM_SYS.SYSSYNC_n_WHERE_publication_id_IS_NOT_NULL_n_AND_site_name_IS_NOT_NULL_n_AND_progress_IS_NOT_NULL
mov esi, ecx
mov ecx, dword [str.syncinfo]
lea eax, [esp + 0x20]
push eax
push ecx
push 0
lea edi, [esi + 8]
push edi
mov dword [esp + 0x30], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x6525fddf
push 0x652e8800
push 0
lea edx, [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
mov dword [0x652e8814], edx
mov edx, dword [str.syncinfo]
push edx
push 0
lea eax, [esp + 0x1c]
push edi
mov dword [0x652e8818], eax
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525fdf9
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525fdef
mov dword [esi + 0x90], eax
pop edi
xor eax, eax
pop esi
add esp, 0x10
ret 4
cmp word [esp + 8], 0
mov eax, dword [esp + 0x1c]
jge 0x6525fe24
mov dword [eax], 0xffffffff
mov dword [eax + 4], 0xffffffff
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
pop edi
sete al
pop esi
add esp, 0x10
ret 4
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
pop edi
sete al
pop esi
add esp, 0x10
ret 4
Function at 0x6525fe50
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x10
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_min_confirm_sent__n_FROM_SYS.SYSREMOTEUSER_ru__SYS.SYSSUBSCRIPTION_sub_n_WHERE_ru.user_id__sub.user_id_n_AND_sub.started_IS_NOT_NULL
mov esi, ecx
mov ecx, dword [str.syncinfo]
lea eax, [esp + 0x20]
push eax
push ecx
push 0
lea edi, [esi + 8]
push edi
mov dword [esp + 0x30], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x6525ff34
push 0x652e88cc
push 0
lea edx, [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
mov dword [0x652e88e0], edx
mov edx, dword [str.syncinfo]
push edx
push 0
lea eax, [esp + 0x1c]
push edi
mov dword [0x652e88e4], eax
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x6525ff34
cmp word [esp + 8], 0
jge 0x6525ff79
mov ecx, dword [str.syncinfo]
push 0
push 2
push 0
push 0
push str.SELECT_min_confirm_sent__n_FROM_SYS.SYSREMOTEUSER
lea eax, [esp + 0x20]
push eax
push ecx
push 0
push edi
mov dword [esp + 0x30], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x6525ff34
push 0x652e893c
push 0
lea edx, [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
mov dword [0x652e8950], edx
mov edx, dword [str.syncinfo]
push edx
push 0
lea eax, [esp + 0x1c]
push edi
mov dword [0x652e8954], eax
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x6525ff4e
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x6525ff44
mov dword [esi + 0x90], eax
pop edi
xor eax, eax
pop esi
add esp, 0x10
ret 4
cmp word [esp + 8], 0
jge 0x6525ff79
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xffffffff
mov dword [eax + 4], 0xffffffff
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
pop edi
sete al
pop esi
add esp, 0x10
ret 4
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, dword [esi + 0x14]
xor eax, eax
test ecx, ecx
pop edi
sete al
pop esi
add esp, 0x10
ret 4
Function at 0x65260dd0
Capabilities:
Reference sql statements

Disassembly:
mov eax, dword [str.syncinfo]
sub esp, 0x98
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_table_id_FROM_SYS.SYSTABLE_n_WHERE_creator____0_n_AND_table_type____VIEW_n_AND_NOT_table_name_IN__SELECT_name_FROM_excludeobject_n_WHERE_type__u_OR_type__e_
push 0x652fa988
push eax
mov esi, ecx
push 0
lea edi, [esi + 8]
push edi
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x65260e2c
mov ecx, dword [str.syncinfo]
push 1
push 0
push 0
push 0
push 0x652fa988
push ecx
push 0
push str.SI_ALL_TABLES
push edi
call sub.dblib8.dll_Ordinal_258
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x65260e49
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x65260e3c
mov dword [esi + 0x90], eax
pop edi
xor eax, eax
pop esi
add esp, 0x98
ret 4
push ebx
push ebp
push 0
push 0
push 0x652e8630
push 1
push 2
push str.SI_ALL_TABLES
lea edx, [esp + 0x28]
push edi
mov dword [0x652e8644], edx
call sub.dblib8.dll_Ordinal_254
mov eax, dword [esi + 0x14]
test eax, eax
jl 0x65260f31
mov ebp, dword [esp + 0xac]
test eax, eax
jne 0x65260f53
mov eax, dword [esp + 0x10]
push eax
mov ecx, ebp
call fcn.6522ffd0
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, esi
mov ebx, eax
call fcn.6525cf60
test eax, eax
je 0x65260f04
mov edx, dword [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.652605e0
test eax, eax
je 0x65260ee2
lea ebx, [ebx]
mov ecx, dword [esp + 0x18]
push ecx
push ebx
mov ecx, ebp
call fcn.65230020
mov edx, dword [esp + 0x10]
push edx
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.652605e0
test eax, eax
jne 0x65260ec0
push str.SI_FOREIGN_KEYS
push edi
call sub.dblib8.dll_Ordinal_237
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x65260f04
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x65260f04
mov dword [esi + 0x90], eax
push 0
push 0
push 0x652e8630
push 1
push 2
push str.SI_ALL_TABLES
lea ecx, [esp + 0x28]
push edi
mov dword [0x652e8644], ecx
call sub.dblib8.dll_Ordinal_254
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x65260e81
mov eax, dword [esi + 0x90]
test eax, eax
jne 0x65260f44
mov edx, dword [esi + 0x14]
mov dword [esi + 0x90], edx
pop ebp
pop ebx
pop edi
xor eax, eax
pop esi
add esp, 0x98
ret 4
push str.SI_ALL_TABLES
push edi
call sub.dblib8.dll_Ordinal_237
mov eax, dword [esi + 0x14]
test eax, eax
jge 0x65260f84
mov ecx, dword [esi + 0x90]
test ecx, ecx
jne 0x65260f75
mov dword [esi + 0x90], eax
pop ebp
pop ebx
pop edi
xor eax, eax
pop esi
add esp, 0x98
ret 4
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
add esp, 0x98
ret 4
Function at 0x65262cf0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x68
mov eax, dword [esp + 0x6c]
mov edx, dword [str.cursor]
push ebx
push ebp
push esi
push edi
mov edi, dword [eax + 0x1e8]
push 0
push 2
push 0
push 0
push str.SELECT_table_id_FROM_SYS.SYSTABLE_n_WHERE_table_name__SYSLOGIN_n_AND_creator__0
lea ecx, [esp + 0x24]
push ecx
push edx
push 0
lea esi, [edi + 0xc]
push esi
mov dword [esp + 0x34], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262d67
mov ebp, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor eax, eax
test ebp, ebp
setge al
push 0x64
lea ecx, [esp + 0x18]
push ecx
push esi
add eax, 0x154b
mov ebp, eax
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
add esp, 0x10
mov ecx, dword [str.cursor]
push 0x652e922c
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push 0
lea edx, [esp + 0x90]
push esi
mov dword [0x652e9240], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262dca
mov eax, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor edx, edx
test eax, eax
setge dl
push 0x64
lea eax, [esp + 0x18]
push eax
push esi
add edx, 0x154b
mov ebp, edx
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
add esp, 0x10
mov ecx, dword [edi + 0x18]
pop edi
pop esi
xor eax, eax
test ecx, ecx
pop ebp
sete al
pop ebx
add esp, 0x68
ret
Function at 0x65262de0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x6c
mov eax, dword [esp + 0x70]
mov edx, dword [str.cursor]
push ebx
push ebp
push esi
push edi
mov edi, dword [eax + 0x1e8]
push 0
push 2
push 0
push 0
push str.SELECT_table_id_FROM_SYS.SYSTABLE_n_WHERE_table_name__EXCLUDEOBJECT_AND_creator__n___SELECT_uid_n_FROM_dbo.sysusers_n_WHERE_namedbo__
lea ecx, [esp + 0x24]
push ecx
push edx
push 0
lea esi, [edi + 0xc]
push esi
mov dword [esp + 0x34], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262e57
mov ebp, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor eax, eax
test ebp, ebp
setge al
push 0x64
lea ecx, [esp + 0x1c]
push ecx
push esi
add eax, 0x154b
mov ebp, eax
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
add esp, 0x10
mov ecx, dword [str.cursor]
push 0x652e92f4
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push 0
lea edx, [esp + 0x94]
push esi
mov dword [0x652e9308], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262ebf
mov eax, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor edx, edx
test eax, eax
setge dl
push 0x64
lea eax, [esp + 0x1c]
push eax
push esi
add edx, 0x154b
mov ebp, edx
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
mov eax, dword [edi + 0x18]
add esp, 0x10
test eax, eax
jne 0x65262f8f
mov edx, dword [str.cursor]
push 0
push 2
push 0
push 0
push str.SELECT_COUNT___FROM_dbo.EXCLUDEOBJECT
lea ecx, [esp + 0x24]
push ecx
push edx
push 0
push esi
mov dword [esp + 0x34], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262f28
mov ebp, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor eax, eax
test ebp, ebp
setge al
push 0x64
lea ecx, [esp + 0x1c]
push ecx
push esi
add eax, 0x154b
mov ebp, eax
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
add esp, 0x10
mov ecx, dword [str.cursor]
push 0x652e9358
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push 0
lea edx, [esp + 0x28]
push esi
mov dword [0x652e936c], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [edi + 0x18]
test eax, eax
jge 0x65262f8d
mov eax, dword [esi + 0xc]
mov ebx, dword [edi + 4]
xor edx, edx
test eax, eax
setge dl
push 0x64
lea eax, [esp + 0x1c]
push eax
push esi
add edx, 0x154b
mov ebp, edx
call sub.dblib8.dll_Ordinal_286
push eax
push ebp
push ebx
call fcn.652659d0
push 1
call fcn.65268a10
mov eax, dword [edi + 0x18]
add esp, 0x10
test eax, eax
je 0x65262f99
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x6c
ret
mov edx, dword [esp + 0x14]
pop edi
xor ecx, ecx
cmp ecx, edx
pop esi
sbb eax, eax
pop ebp
neg eax
pop ebx
add esp, 0x6c
ret
Function at 0x652648a0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0xac
mov ecx, dword [str.dbvalid]
push esi
push edi
push 0
push 2
push 0
push 0
push str.SELECT_if_exists__select_1_FROM_SYS.SYSCOLUMN_c__SYS.SYSTABLE_t_n_WHERE_table_name__SYSTABLE_AND_creator__0_AND_column_name__server_type_n_AND_c.table_id__t.table_id__then_1_else_0_endif_FROM_DUMMY
mov esi, eax
lea eax, [esp + 0x24]
push eax
push ecx
push 0
lea edi, [esi + 0xc]
push edi
mov dword [esp + 0x34], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x18]
test eax, eax
jl 0x65264982
mov ecx, dword [str.dbvalid]
push 0x652e9c9c
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push 0
lea edx, [esp + 0x20]
push edi
mov dword [0x652e9cb0], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0x18]
test eax, eax
jl 0x65264982
cmp word [esp + 0xc], 0
mov eax, str._AND_server_type__SA
jne 0x6526491f
mov eax, 0x6528b61a
push eax
lea edx, [esp + 0x18]
push str.SELECT_table_name__user_name_FROM_SYS.SYSTABLE__SYS.SYSUSERPERMS_WHERE_table_type__BASE__s_ORDER_BY_user_name__table_name
push edx
call fcn.6527bd9b
mov edx, dword [str.dbvalid]
add esp, 0xc
push 0
push 3
push 0
push 0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
push ecx
push edx
push 0
push edi
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0x18]
test eax, eax
jl 0x65264982
mov ecx, dword [str.dbvalid]
push 0
push 0
push 0
push 0
lea eax, [esp + 0x18]
push eax
push ecx
push 0
push 0x652e9cd8
push edi
call sub.dblib8.dll_Ordinal_258
mov eax, dword [esi + 0x18]
test eax, eax
jge 0x65264992
call fcn.65264840
pop edi
xor eax, eax
pop esi
add esp, 0xac
ret
pop edi
mov eax, 1
pop esi
add esp, 0xac
ret
Function at 0x65265640
Capabilities:
Reference sql statements

Disassembly:
push ebx
mov ebx, dword [esp + 8]
xor eax, eax
mov ax, word [ebx]
cmp ax, 0x1f5e
push edi
mov edi, dword [esp + 0x14]
mov dword [ebx + 0x10], edi
jle 0x6526566b
push edi
push eax
call fcn.65272c40
add esp, 8
pop edi
mov ax, 1
pop ebx
ret 0xc
push esi
mov esi, dword [esp + 0x14]
push esi
call sub.dblib8.dll_Ordinal_219
test eax, eax
jne 0x65265692
push 0x18b1
push edi
call fcn.652659d0
add esp, 8
pop esi
pop edi
mov ax, 1
pop ebx
ret 0xc
mov ecx, dword [str.syscoll]
push 0
push 2
push 0
push 0
push str.SELECT_table_id_FROM_SYS.SYSTABLE_n_WHERE_table_name__SYSCOLLATION
lea eax, [esp + 0x2c]
push eax
push ecx
push 0
push esi
mov dword [esp + 0x3c], 0
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0xc]
test eax, eax
jge 0x652656d6
push edi
push esi
call fcn.652738f0
add esp, 8
pop esi
pop edi
mov ax, 1
pop ebx
ret 0xc
mov ecx, dword [str.syscoll]
push 0x652e9fc0
push 0
lea eax, [esp + 0x20]
push eax
push ecx
push 0
lea edx, [esp + 0x24]
push esi
mov dword [0x652e9fd4], edx
call sub.dblib8.dll_Ordinal_267
mov eax, dword [esi + 0xc]
test eax, eax
jl 0x652656c2
cmp eax, 0x64
je 0x65265688
mov edx, dword [str.syscoll]
push 0
push 2
push 0
push 0
push str.SELECT_collation_label__collation_name_n_FROM_SYS.SYSCOLLATION_n_ORDER_BY_collation_id
push 0x652fa994
push edx
push 0
push esi
call sub.dblib8.dll_Ordinal_260
mov eax, dword [esi + 0xc]
test eax, eax
jl 0x652656c2
mov eax, dword [str.syscoll]
push 1
push 0
push 0
push 0
push 0x652fa994
push eax
push 0
push str.C_COLLATE
push esi
call sub.dblib8.dll_Ordinal_258
mov eax, dword [esi + 0xc]
test eax, eax
jl 0x652656c2
pop esi
pop edi
mov dword [ebx + 0x20], 1
xor ax, ax
pop ebx
ret 0xc

Function at 0x652660b0
Capabilities:
Allocate thread local storage

Disassembly:
mov eax, dword [0x652faa5c]
push edi
xor edi, edi
cmp eax, edi
jne 0x652660e8
mov dword [0x652faa5c], 1
call fcn.6526f920
push edi
mov dword [0x652faa4c], edi
mov dword [0x652faa50], edi
mov dword [0x652faa54], edi
call fcn.65265ea0
add esp, 4
pop edi
ret
push esi
call fcn.6526f960
mov esi, eax
cmp esi, edi
jne 0x652660ff
push edi
call fcn.65265ea0
add esp, 4
mov esi, eax
mov eax, dword [0x652faa50]
cmp eax, esi
jne 0x65266111
mov ecx, dword [0x652faa54]
inc ecx
jmp 0x6526612b
push esi
push 0x652faa4c
call fcn.65265da0
mov eax, esi
add esp, 8
mov dword [0x652faa50], eax
mov ecx, 1
mov esi, dword [0x652faa5c]
inc esi
dec ecx
mov dword [0x652faa5c], esi
pop esi
mov dword [0x652faa54], ecx
jne 0x65266157
mov dword [0x652faa50], edi
push 0x652faa4c
mov edi, eax
call fcn.65265e10
add esp, 4
pop edi
ret
Function at 0x6526bb00
Capabilities:
Hash data using crc32b

Disassembly:
mov edx, dword [esp + 4]
mov eax, dword [esp + 8]
push edi
lea edi, [edx + eax]
cmp edx, edi
mov eax, dword [esp + 0x10]
jae 0x6526bb3c
push esi
mov ecx, eax
mov esi, 8
lea esp, [esp]
mov eax, ecx
shl ecx, 1
test eax, eax
jge 0x6526bb2e
xor ecx, 0x4c11db7
dec esi
jne 0x6526bb20
movzx eax, byte [edx]
xor eax, ecx
inc edx
cmp edx, edi
jb 0x6526bb15
pop esi
not eax
pop edi
ret

Function at 0x6526dbf0
Capabilities:
Terminate process

Disassembly:
push esi
mov esi, dword [esp + 8]
test esi, esi
mov eax, str.Unknown_error
je 0x6526dc00
mov eax, esi
push 0
push str.SQLAnywhere_Fatal_Error
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
test esi, esi
je 0x6526dc1d
push esi
call fcn.6527dfd4
add esp, 4
push 1
call fcn.652801a8
pop esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop

Function at 0x6526f980
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0xd0
push ebx
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push esi
push edi
mov ebx, 0x652ebe30
jmp 0x6526f9a0
mov ecx, 0xa
mov esi, str.SoftwareSybaseAdaptive_Server_Anywhere
lea edi, [esp + 0x18]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x18]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x6526f9b6
mov ax, word [0x6528b6f4]
mov word [edi], ax
mov eax, dword [esp + 0xe4]
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x6526f9d0
lea edi, [esp + 0x18]
sub eax, edx
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x6526f9e0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebx]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push 0
lea edx, [esp + 0x24]
push edx
push eax
call ebp
test eax, eax
jne 0x6526fa5a
mov edx, dword [esp + 0xec]
lea ecx, [esp + 0xf0]
push ecx
mov ecx, dword [esp + 0xec]
push edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
push eax
push 0
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov esi, eax
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x6526fa5a
mov ecx, dword [esp + 0xf4]
cmp dword [esp + 0x14], ecx
je 0x6526fa76
add ebx, 4
cmp ebx, 0x652ebe38
jl 0x6526f9a0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xd0
ret
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xd0
ret