joyce8/EMBER2024-capa huggingface dataset:
Function at 0x45b3a0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45b64b
sub esp, 0x2c
mov eax, dword [esp + 0x34]
test eax, eax
je 0x45b3cd
mov ecx, dword [esp + 0x30]
lea edx, [0x7921a0]
jmp 0x45b3df
mov dword [esp + 0x38], 0
add esp, 0x2c
ret
mov edx, dword [edx + 0x118]
test edx, edx
je 0x45b40a
mov ebx, dword [edx + 0x94]
cmp ecx, ebx
jb 0x45b3d9
mov ebp, dword [edx + 0x98]
cmp ecx, ebp
jae 0x45b3d9
lea ecx, [ebx + eax]
cmp ebp, ecx
jb 0x45b59e
mov dword [esp + 0x38], ecx
add esp, 0x2c
ret
mov dword [esp + 0x18], ecx
nop
nop
lea eax, [0x7d3c60]
mov dword [esp], eax
call fcn.0040a140
mov eax, dword [0x7d3c68]
lea ecx, [0x5f37a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
call fcn.0040edf0
movzx eax, byte [esp + 0x10]
mov byte [esp + 0x17], al
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx]
mov dword [esp + 0x24], ecx
nop
nop
nop
lea edx, [0x7d3c60]
mov dword [esp], edx
call fcn.0040a340
movzx eax, byte [esp + 0x17]
test al, al
jne 0x45b4ef
call fcn.004388b0
lea eax, [0x61ed54]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.004391b0
mov eax, dword [esp + 0x34]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439030
lea eax, [0x61af42]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61e21e]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004391b0
call fcn.00438920
lea eax, [0x7921a0]
jmp 0x45b580
mov eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
add esp, 0x2c
ret
mov dword [esp + 0x28], eax
mov ecx, dword [eax + 0x94]
mov dword [esp + 0x20], ecx
mov edx, dword [eax + 0x98]
mov dword [esp + 0x1c], edx
call fcn.004388b0
lea eax, [0x61b51f]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61b686]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00439030
call fcn.00438ad0
call fcn.00438920
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 0x118]
test eax, eax
jne 0x45b4fb
lea eax, [0x629440]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.00436e90
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebp
call fcn.004388b0
lea eax, [0x61ed54]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.004391b0
mov eax, dword [esp + 0x34]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439030
lea eax, [0x61d6b2]
mov dword [esp], eax
mov dword [esp + 4], 0xe
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61a843]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.00439030
call fcn.00438ad0
call fcn.00438920
lea eax, [0x625fde]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0045b3a0
Function at 0x45b960
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45bb61
sub esp, 0x24
mov eax, dword [esp + 0x2c]
cmp eax, 0xffffffff
je 0x45b98e
mov ecx, dword [esp + 0x28]
lea edx, [0x7921a0]
jmp 0x45b9a2
lea eax, [0x409f30]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov edx, dword [edx + 0x118]
test edx, edx
je 0x45b9b8
cmp dword [edx + 0x94], ecx
ja 0x45b99c
cmp dword [edx + 0x98], ecx
jbe 0x45b99c
jmp 0x45b9ba
xor edx, edx
test edx, edx
jne 0x45baa5
mov dword [esp + 0x10], ecx
nop
nop
lea eax, [0x7d3c60]
mov dword [esp], eax
call fcn.0040a140
mov eax, dword [0x7d3c68]
lea ecx, [0x5f37a0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
call fcn.0040eca0
mov eax, dword [esp + 0xc]
mov eax, dword [eax]
mov dword [esp + 0x1c], eax
nop
nop
nop
lea ecx, [0x7d3c60]
mov dword [esp], ecx
call fcn.0040a340
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x45ba9d
call fcn.004388b0
lea eax, [0x61ed87]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.004391b0
mov eax, dword [esp + 0x2c]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439030
lea eax, [0x61af42]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61e21e]
mov dword [esp], eax
mov dword [esp + 4], 0x10
call fcn.004391b0
call fcn.00438920
lea eax, [0x7921a0]
jmp 0x45bb42
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.004512d0
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
add esp, 0x24
ret
mov dword [esp + 0x20], eax
mov ecx, dword [eax + 0x94]
mov dword [esp + 0x18], ecx
mov edx, dword [eax + 0x98]
mov dword [esp + 0x14], edx
call fcn.004388b0
lea eax, [0x61b51f]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call fcn.00439030
lea eax, [0x61b686]
mov dword [esp], eax
mov dword [esp + 4], 8
call fcn.004391b0
mov dword [esp + 4], 0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.00439030
call fcn.00438ad0
call fcn.00438920
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x118]
test eax, eax
jne 0x45babd
lea eax, [0x62949c]
mov dword [esp], eax
mov dword [esp + 4], 0x2e
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0045b960
Function at 0x45fdb0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x45ff5c
sub esp, 0x20
lea eax, [0x7f8c38]
mov dword [esp], eax
call fcn.004314a0
mov eax, dword [esp + 4]
mov dword [esp + 0xc], eax
test byte [eax], al
lea ecx, [eax + 0x14]
mov dword [esp + 0x14], ecx
nop
mov dword [esp], ecx
call fcn.0040a140
nop
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0x10]
mov dword [esp + 0x1c], ecx
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45fe16
cmp eax, 1
jne 0x45ff45
nop
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0xc]
mov dword [esp + 0x18], ecx
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45fe3b
cmp eax, 1
jne 0x45ff2f
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 4], eax
mov byte [ecx + 0x18], 0
mov dword [esp], ecx
mov byte [esp + 4], 0
call fcn.00430bd0
mov eax, dword [esp + 0xc]
inc dword [eax + 0x20]
nop
mov ecx, dword [esp + 0x18]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.00402430
mov eax, dword [esp + 0xc]
mov dword [eax + 0x54], 0
mov dword [eax + 0x58], 0
inc dword [eax + 0x5c]
nop
mov ecx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.00402430
mov eax, dword [esp + 0xc]
mov dword [eax + 0x90], 0
mov dword [eax + 0x94], 0
mov dword [eax + 0x98], eax
mov dword [esp], eax
call fcn.00430b30
nop
nop
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0040a340
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.00431620
mov eax, dword [esp + 8]
test eax, eax
je 0x45ff1b
mov dword [esp + 0x10], eax
lea eax, [0x7f8c38]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.00430ce0
mov dword [esp + 0x28], 0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x2c], eax
add esp, 0x20
ret
mov eax, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0
add esp, 0x20
ret
lea eax, [0x62782f]
mov dword [esp], eax
mov dword [esp + 4], 0x26
call fcn.00436e90
lea eax, [0x627a9b]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0045fdb0
Function at 0x45ff70
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x460028
sub esp, 8
mov eax, dword [esp + 0xc]
movzx ecx, byte [eax + 0x18]
test cl, cl
je 0x460011
nop
lea ecx, [eax + 0x10]
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45ffae
cmp eax, 1
jne 0x45fffb
nop
mov eax, dword [esp + 0xc]
lea ecx, [eax + 0xc]
mov dword [esp], ecx
call fcn.004023f0
mov eax, dword [esp + 4]
test eax, eax
je 0x45ffcb
cmp eax, 1
jne 0x45ffe5
lea eax, [0x7f8c38]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 4], eax
call fcn.00430ce0
add esp, 8
ret
lea eax, [0x628312]
mov dword [esp], eax
mov dword [esp + 4], 0x29
call fcn.00436e90
lea eax, [0x628778]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.00436e90
lea eax, [0x6269dc]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.00436e90
nop
call fcn.00462f70
jmp fcn.0045ff70
Function at 0x460aa0
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x1c
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
inc dword [ecx + 0x7c]
lea ecx, [esp + 0x20]
cmp dword [eax + 0x38], ecx
jb 0x460c94
mov dword [esp + 0xc], eax
mov dword [eax + 0x5c], 0
mov dword [eax + 0x60], 0
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x60]
mov dword [esp + 0x10], edx
mov dword [ecx + 0x60], 0
mov dword [esp], edx
call fcn.00441880
movzx eax, byte [esp + 4]
test al, al
jne 0x460b27
mov eax, dword [esp + 0xc]
mov dword [eax + 0x84], 0
mov dword [eax + 0x88], 0
movzx ecx, byte [0x7dd148]
test cl, cl
je 0x460c1c
mov ecx, dword [esp + 0x10]
jmp 0x460c62
movzx eax, byte [0x7d08a4]
test al, al
je 0x460b60
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
lea eax, [0x441850]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x14]
mov dword [esp], ecx
call fcn.00462e60
movzx eax, byte [0x7dd148]
test al, al
je 0x460b9c
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x58]
mov ebx, dword [esp + 0x10]
cmp edx, ebx
jne 0x460b88
mov ecx, dword [ecx + 0x164]
cmp dword [edx + 0x10], ecx
je 0x460ba0
lea eax, [0x62cbb8]
mov dword [esp], eax
call fcn.00462e60
mov eax, dword [esp + 0xc]
jmp 0x460ba0
mov eax, dword [esp + 0xc]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
inc dword [ecx + 0x10]
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 2
call fcn.0043b3a0
mov eax, dword [esp + 0xc]
mov dword [eax + 0x38], 0
mov ecx, dword [eax + 0x18]
dec dword [ecx + 0x7c]
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x460be3
mov dword [eax + 8], 0xfffffade
jmp 0x460bee
mov ecx, dword [eax]
add ecx, 0xba0
mov dword [eax + 8], ecx
mov byte [eax + 0x6b], 0
movzx ecx, byte [0x7d46a0]
test cl, cl
je 0x460c18
mov dword [esp], eax
mov byte [esp + 4], 1
call fcn.0045ad00
movzx eax, byte [esp + 8]
test al, al
jne 0x460c18
call fcn.00439a30
add esp, 0x1c
ret
mov ecx, dword [eax + 0x18]
dec dword [ecx + 0x7c]
lea ecx, [0x62ca7c]
mov dword [esp], ecx
call fcn.00462e00
mov eax, dword [esp + 0xc]
mov dword [eax + 0x38], 0
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
inc dword [ecx + 0x10]
mov byte [eax + 0x6b], 0
add esp, 0x1c
ret
lea eax, [0x62cbac]
mov dword [esp], eax
call fcn.00462e60
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x460c74
mov edx, dword [eax + 0x18]
mov ebx, dword [ecx + 0x10]
cmp dword [edx + 0x164], ebx
je 0x460c4c
call fcn.004641f0
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
mov dword [edx + 0x88], eax
mov dword [edx + 0x84], ecx
mov eax, edx
jmp 0x460c1c
lea eax, [0x628f72]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00436e90
nop
int3
Function at 0x462500
Capabilities:
Reference sql statements

Disassembly:
sub esp, 0x28
mov eax, 0
mov dword [esp + 0x24], eax
mov byte [esp + 0xf], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov edx, dword [esp + 0x34]
cmp edx, 4
jge 0x462580
mov ebx, dword [esp + 0x30]
lea ebp, [esp + 0x10]
cmp ebx, ebp
je 0x462575
mov dword [esp], ebp
mov dword [esp + 4], ebx
shl edx, 2
mov dword [esp + 8], edx
call fcn.00464cc0
mov edx, dword [esp + 0x34]
mov eax, 4
lea ecx, [esp + 0x10]
jmp 0x46258f
cmp edx, 0x2a
jg 0x462656
mov eax, edx
mov ecx, dword [esp + 0x30]
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
nop
inc dword [ebx + 0x148]
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
nop
mov esi, ebx
mov dword [ebp + 0xc0], ebx
mov ebx, dword [esi + 0x18]
mov dword [esi + 0x98], ebx
lea ebx, [0x62cbc0]
mov dword [esp + 0x24], ebx
mov byte [esp + 0xf], 1
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
mov ebp, dword [esp + 0x2c]
mov dword [ebx + 0x190], ebp
mov dword [ebx + 0x194], edx
test eax, eax
jbe 0x46264d
mov dword [esp + 0x20], ebx
mov dword [ebx + 0x198], ecx
mov eax, dword [0x7d3360]
mov dword [esp], eax
lea eax, [ebx + 0x190]
mov dword [esp + 4], eax
call fcn.00404240
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x19c]
mov edx, dword [eax + 0x1a0]
mov eax, dword [eax + 0x1a4]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], eax
mov byte [esp + 0xf], 0
call fcn.00442c10
add esp, 0x28
ret
xor eax, eax
mov ecx, eax
call fcn.00464400
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e3d4]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00435d10
add esp, 0x28
ret
Function at 0x464230
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
movd xmm0, dword [esp + 8]
pinsrw xmm0, ebx, 4
pshufhw xmm0, xmm0, 0
movdqa xmm1, xmm0
pxor xmm0, xmmword [0x7f8ec0]
aesenc xmm0, xmm0
cmp ebx, 0x10
jb 0x4629fb
je 0x462a4e
cmp ebx, 0x20
jbe 0x462a54
cmp ebx, 0x40
jbe 0x462a9a
jmp 0x462b3b
test ebx, ebx
je 0x462a44
add eax, 0x10
test ax, 0xff0
je 0x462a30
movdqu xmm1, xmmword [eax - 0x10]
add ebx, ebx
pand xmm1, xmmword [ebx*8 + 0x66f3e0]
pxor xmm1, xmm0
aesenc xmm1, xmm1
aesenc xmm1, xmm1
aesenc xmm1, xmm1
movd dword [edx], xmm1
ret
movdqu xmm1, xmmword [eax + ebx - 0x20]
add ebx, ebx
pshufb xmm1, xmmword [ebx*8 + 0x66f5e0]
jmp 0x462a18
aesenc xmm0, xmm0
movd dword [edx], xmm0
ret
movdqu xmm1, xmmword [eax]
jmp 0x462a18
pxor xmm1, xmmword [0x7f8ed0]
aesenc xmm1, xmm1
movdqu xmm2, xmmword [eax]
movdqu xmm3, xmmword [eax + ebx - 0x10]
pxor xmm2, xmm0
pxor xmm3, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
aesenc xmm2, xmm2
aesenc xmm3, xmm3
aesenc xmm2, xmm2
aesenc xmm3, xmm3
pxor xmm2, xmm3
movd dword [edx], xmm2
ret
movdqa xmm2, xmm1
movdqa xmm3, xmm1
pxor xmm1, xmmword [0x7f8ed0]
pxor xmm2, xmmword [0x7f8ee0]
pxor xmm3, xmmword [0x7f8ef0]
aesenc xmm1, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
movdqu xmm4, xmmword [eax]
movdqu xmm5, xmmword [eax + 0x10]
movdqu xmm6, xmmword [eax + ebx - 0x20]
movdqu xmm7, xmmword [eax + ebx - 0x10]
pxor xmm4, xmm0
pxor xmm5, xmm1
pxor xmm6, xmm2
pxor xmm7, xmm3
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
pxor xmm4, xmm6
pxor xmm5, xmm7
pxor xmm4, xmm5
movd dword [edx], xmm4
ret
movdqa xmm2, xmm1
movdqa xmm3, xmm1
pxor xmm1, xmmword [0x7f8ed0]
pxor xmm2, xmmword [0x7f8ee0]
pxor xmm3, xmmword [0x7f8ef0]
aesenc xmm1, xmm1
aesenc xmm2, xmm2
aesenc xmm3, xmm3
movdqu xmm4, xmmword [eax + ebx - 0x40]
movdqu xmm5, xmmword [eax + ebx - 0x30]
movdqu xmm6, xmmword [eax + ebx - 0x20]
movdqu xmm7, xmmword [eax + ebx - 0x10]
aesenc xmm4, xmm0
aesenc xmm5, xmm1
aesenc xmm6, xmm2
aesenc xmm7, xmm3
dec ebx
shr ebx, 6
movdqu xmm0, xmmword [eax]
movdqu xmm1, xmmword [eax + 0x10]
movdqu xmm2, xmmword [eax + 0x20]
movdqu xmm3, xmmword [eax + 0x30]
aesenc xmm4, xmm0
aesenc xmm5, xmm1
aesenc xmm6, xmm2
aesenc xmm7, xmm3
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
add eax, 0x40
dec ebx
jne 0x462b9a
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
aesenc xmm4, xmm4
aesenc xmm5, xmm5
aesenc xmm6, xmm6
aesenc xmm7, xmm7
pxor xmm4, xmm6
pxor xmm5, xmm7
pxor xmm4, xmm5
movd dword [edx], xmm4
ret
cmp byte [0x7f8ab1], 0
je 0x46424a
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0xc]
lea edx, [esp + 0x10]
jmp 0x4629c0
jmp fcn.00408af0
Function at 0x464250
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4030de
sub esp, 0x10
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00408af0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x1c], eax
add esp, 0x10
ret
call fcn.00462f70
jmp 0x4030a0
cmp byte [0x7f8ab1], 0
je 0x46426b
mov eax, dword [esp + 4]
mov ebx, dword [eax + 4]
mov eax, dword [eax]
lea edx, [esp + 0xc]
jmp 0x4629c0
jmp 0x4030a0

Function at 0x468f60
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x469066
sub esp, 0x10
mov eax, dword [esp + 0x18]
test eax, eax
je 0x46904d
mov eax, dword [esp + 0x14]
test byte [eax], al
mov dword [esp], eax
call fcn.004694c0
mov eax, dword [esp + 4]
test eax, eax
je 0x468fa7
lea ecx, [0x7f8ab8]
cmp eax, ecx
je 0x468f85
jmp 0x468fe0
call fcn.00460cf0
mov eax, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], 0
lea ecx, [0x7f8ab8]
mov dword [esp + 8], ecx
call fcn.0045f390
movzx eax, byte [esp + 0xc]
test al, al
jne 0x469001
call fcn.00460d10
lea ecx, [0x7f8ab8]
jmp 0x468f85
cmp dword [esp + 0x18], eax
jne 0x469035
mov eax, dword [esp + 0x14]
add eax, 4
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0045f300
add esp, 0x10
ret
mov eax, dword [esp + 0x14]
lea ecx, [eax + 4]
mov edx, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0045f300
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0045f300
call fcn.00460d10
add esp, 0x10
ret
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4bc]
mov dword [esp + 4], eax
call fcn.00436760
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4b4]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00462f70
jmp fcn.00468f60
Function at 0x46bde0
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46bf40
sub esp, 0xc
mov eax, dword [esp + 0x18]
mov ecx, eax
and eax, 0x1f
mov dword [esp + 8], eax
cmp eax, 0x12
ja 0x46be68
cmp eax, 0x11
je 0x46be59
cmp eax, 0x12
jne 0x46bed5
mov eax, dword [esp + 0x10]
cmp dword [eax], 4
jne 0x46bf27
mov eax, dword [eax + 4]
test eax, eax
je 0x46bf27
test ecx, 0x80
je 0x46be41
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
jmp 0x46be45
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0045f4f0
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
add esp, 0xc
ret
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x1c], eax
add esp, 0xc
ret
cmp eax, 0x15
jne 0x46bead
mov eax, dword [esp + 0x10]
cmp dword [eax], 4
jne 0x46bf0f
mov eax, dword [eax + 4]
test eax, eax
je 0x46bf0f
test ecx, 0x80
je 0x46be95
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
jmp 0x46be99
mov eax, dword [esp + 0x14]
mov dword [esp], eax
call fcn.0045fa50
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
add esp, 0xc
ret
cmp eax, 0x17
je 0x46bec6
cmp eax, 0x18
jne 0x46bed5
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
mov dword [esp + 0x1c], eax
add esp, 0xc
ret
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 4]
mov dword [esp + 0x1c], eax
add esp, 0xc
ret
lea eax, [0x5fd1e0]
mov dword [esp], eax
call fcn.0040c1e0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x61ecee]
mov dword [eax], ecx
mov ecx, dword [esp + 8]
mov dword [eax + 8], ecx
lea ecx, [0x5f5ee0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00436760
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e12c]
mov dword [esp + 4], eax
call fcn.00436760
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e12c]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00462f70
jmp fcn.0046bde0
Function at 0x46f600
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46f737
sub esp, 0x1c
mov eax, dword [esp + 0x20]
test byte [eax], al
mov dword [esp], eax
mov ecx, dword [esp + 0x24]
mov dword [esp + 8], ecx
mov dword [esp + 4], 0
call fcn.00469460
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
jl 0x46f71e
test eax, eax
je 0x46f663
mov edx, dword [esp + 0x24]
test edx, edx
jle 0x46f65f
cmp edx, ecx
je 0x46f706
test ecx, ecx
jmp 0x46f665
test ecx, ecx
jmp 0x46f665
test ecx, ecx
jg 0x46f66b
test eax, eax
jne 0x46f66f
add esp, 0x1c
ret
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
mov dword [esp], eax
call fcn.004694a0
mov eax, dword [esp + 0x18]
cmp dword [esp + 8], eax
setne al
mov ecx, dword [esp + 0x14]
cmp dword [esp + 4], ecx
setne dl
or eax, edx
test al, al
jne 0x46f6ee
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00469500
mov eax, dword [esp + 0x14]
jmp 0x46f6e6
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
lea ecx, [eax + 8]
mov dword [esp], ecx
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.004615d0
mov eax, dword [esp + 0x14]
dec eax
test eax, eax
jne 0x46f6c1
add esp, 0x1c
ret
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4a4]
mov dword [esp + 4], eax
call fcn.00436760
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4a4]
mov dword [esp + 4], eax
call fcn.00436760
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e49c]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00462f70
jmp fcn.0046f600

Function at 0x46f790
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x46f83a
sub esp, 0x18
mov eax, dword [esp + 0x1c]
test byte [eax], al
mov dword [esp], eax
call fcn.004694a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
test eax, eax
je 0x46f81d
add ecx, 1
adc eax, 0
mov edx, dword [esp + 0x1c]
mov dword [esp], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ecx
call fcn.00469420
movzx eax, byte [esp + 0x14]
test al, al
je 0x46f7a9
mov eax, dword [esp + 0x1c]
lea ecx, [eax + 8]
mov dword [esp], ecx
call fcn.00461530
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call fcn.004694a0
mov eax, dword [esp + 4]
test eax, eax
setne al
mov ecx, dword [esp + 8]
test ecx, ecx
setne cl
or ecx, eax
test cl, cl
jne 0x46f821
add esp, 0x18
ret
add esp, 0x18
ret
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4ac]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00462f70
jmp fcn.0046f790
Function at 0x472e70
Capabilities:
Reference sql statements

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x472ed7
sub esp, 0x1c
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
call fcn.00472b30
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x14]
test edx, edx
jne 0x472ebe
test ecx, ecx
jbe 0x472eb5
mov dword [esp + 0x28], eax
add esp, 0x1c
ret
xor eax, eax
mov ecx, eax
call fcn.00464400
lea eax, [0x5f1960]
mov dword [esp], eax
lea eax, [0x66e4ec]
mov dword [esp + 4], eax
call fcn.00436760
nop
call fcn.00462f70
jmp fcn.00472e70