joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1002b6c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x1c], 0x10
push ebx
mov ebx, dword [edx + 0x18]
push esi
lea esi, [edx + 8]
mov dword [ebp - 4], ecx
jb 0x1002b6da
mov esi, dword [esi]
xor ecx, ecx
push edi
mov edi, 0x811c9dc5
test ebx, ebx
je 0x1002b6f7
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edi
imul edi, eax, 0x1000193
cmp ecx, ebx
jb 0x1002b6e6
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edi
pop edi
lea esi, [eax*8]
mov eax, dword [ecx + esi]
add ecx, esi
cmp dword [ecx + 4], edx
jne 0x1002b731
cmp eax, edx
jne 0x1002b729
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
mov dword [esi + ecx + 4], eax
jmp 0x1002b739
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
jmp 0x1002b739
cmp eax, edx
jne 0x1002b73c
mov eax, dword [edx]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
mov esi, dword [edx]
push edx
mov dword [eax], esi
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
dec dword [ebx + 8]
call fcn.10016800
mov eax, dword [ebp + 8]
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1002c550
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c2320
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
mov dword [ebp - 4], 0
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ebx
cmp dword [ebx + 0x14], 0x10
mov edi, dword [ebx + 0x10]
mov dword [ebp - 0x14], ecx
jb 0x1002c58b
mov esi, dword [ebx]
xor ecx, ecx
mov edx, 0x811c9dc5
test edi, edi
je 0x1002c5a7
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, edi
jb 0x1002c596
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x18]
mov esi, dword [ecx + 4]
and eax, edx
lea edx, [eax*8]
mov eax, dword [ecx + 0xc]
mov dword [ebp + 0xc], edx
mov edi, dword [edx + eax]
cmp esi, edi
je 0x1002c63a
mov esi, dword [edx + eax + 4]
mov esi, dword [esi]
nop dword [eax]
cmp esi, edi
je 0x1002c63a
mov esi, dword [esi + 4]
cmp dword [esi + 0x1c], 0x10
lea edx, [esi + 8]
jb 0x1002c5e3
mov edx, dword [esi + 8]
cmp dword [ebx + 0x14], 0x10
mov ecx, ebx
jb 0x1002c5ed
mov ecx, dword [ebx]
push dword [esi + 0x18]
push edx
mov edx, dword [ebx + 0x10]
call fcn.1000ba70
add esp, 8
test al, al
je 0x1002c5d0
mov edx, dword [ebp + 0x10]
push edx
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [ecx], eax
mov ecx, dword [edx]
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x14]
dec dword [ecx + 8]
call fcn.10016800
mov eax, dword [ebp + 8]
mov dword [eax], esi
mov byte [eax + 4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x18], edi
mov eax, dword [edi]
cmp esi, eax
je 0x1002c667
mov ecx, dword [edi + 4]
mov dword [ecx], eax
mov ecx, dword [eax + 4]
mov dword [ecx], esi
mov ecx, dword [esi + 4]
mov dword [ecx], edi
mov ecx, dword [eax + 4]
mov edx, dword [esi + 4]
mov dword [esi + 4], ecx
mov ecx, dword [edi + 4]
mov dword [eax + 4], ecx
mov dword [edi + 4], edx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
add edx, ebx
mov eax, dword [edx]
cmp eax, dword [ecx + 4]
jne 0x1002c684
mov dword [edx], edi
mov eax, dword [ecx + 0xc]
mov dword [ebx + eax + 4], edi
jmp 0x1002c6a9
cmp eax, esi
jne 0x1002c68c
mov dword [edx], edi
jmp 0x1002c6a9
mov eax, dword [edx + 4]
mov eax, dword [eax]
mov dword [edx + 4], eax
cmp eax, edi
je 0x1002c6a9
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + ebx + 4]
mov eax, dword [eax + 4]
mov dword [ecx + ebx + 4], eax
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 4], 2
call fcn.1002b620
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edi
pop edi
pop esi
mov byte [eax + 4], 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x1002ce00
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 4], ecx
cmp dword [edi + 0x1c], 0x10
lea esi, [edi + 8]
mov ebx, dword [edi + 0x18]
jb 0x1002ce1c
mov esi, dword [edi + 8]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x1002ce38
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x1002ce27
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
lea edx, [eax*8]
mov eax, dword [ecx + edx]
add ecx, edx
cmp dword [ecx + 4], edi
jne 0x1002ce71
cmp eax, edi
jne 0x1002ce69
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
mov dword [edx + ecx + 4], eax
jmp 0x1002ce79
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
jmp 0x1002ce79
cmp eax, edi
jne 0x1002ce79
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
mov esi, dword [edi]
mov dword [eax], esi
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [edx + 4], eax
dec dword [ebx + 8]
call fcn.1002a8d0
push 0x28
push edi
call fcn.1006cd71
mov eax, dword [ebp + 8]
add esp, 8
pop edi
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1002ceb0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ebx, ecx
movzx eax, byte [edi + 8]
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
movzx eax, byte [edi + 9]
xor edx, eax
movzx eax, byte [edi + 0xa]
imul ecx, edx, 0x1000193
xor ecx, eax
movzx eax, byte [edi + 0xb]
imul ecx, ecx, 0x1000193
xor ecx, eax
imul eax, ecx, 0x1000193
mov ecx, dword [ebx + 0x18]
and ecx, eax
lea edx, [ecx*8]
mov ecx, dword [ebx + 0xc]
add ecx, edx
mov eax, dword [ecx]
cmp dword [ecx + 4], edi
jne 0x1002cf23
cmp eax, edi
jne 0x1002cf1b
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
mov dword [edx + ecx + 4], eax
jmp 0x1002cf2b
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
jmp 0x1002cf2b
cmp eax, edi
jne 0x1002cf2b
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
mov esi, dword [edi]
mov dword [eax], esi
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
lea ecx, [edi + 0xc]
dec dword [ebx + 8]
call fcn.10021bc0
push 0x2c
push edi
call fcn.1006cd71
mov eax, dword [ebp + 8]
add esp, 8
pop edi
mov dword [eax], esi
pop esi
pop ebx
pop ebp
ret 8
Function at 0x1002cfe0
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
movzx edx, byte [eax + 8]
movzx ecx, byte [eax + 0xa]
xor edx, 0x811c9dc5
imul esi, edx, 0x1000193
movzx edx, byte [eax + 9]
xor esi, edx
imul edx, esi, 0x1000193
xor edx, ecx
movzx ecx, byte [eax + 0xb]
imul edx, edx, 0x1000193
xor edx, ecx
imul ecx, edx, 0x1000193
mov edx, dword [edi + 0x18]
and edx, ecx
lea esi, [edx*8]
mov edx, dword [edi + 0xc]
add edx, esi
mov ecx, dword [edx]
cmp dword [edx + 4], eax
jne 0x1002d053
cmp ecx, eax
jne 0x1002d04b
mov ecx, dword [edi + 4]
mov dword [edx], ecx
mov edx, dword [edi + 0xc]
mov ecx, dword [edi + 4]
mov dword [esi + edx + 4], ecx
jmp 0x1002d05b
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
jmp 0x1002d05b
cmp ecx, eax
jne 0x1002d05b
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov esi, dword [eax]
push eax
mov dword [ecx], esi
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
dec dword [edi + 8]
call fcn.100299f0
mov eax, dword [ebp + 8]
pop edi
mov dword [eax], esi
pop esi
pop ebp
ret 8

Function at 0x1002d080
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 4], ecx
cmp dword [edi + 0x1c], 0x10
lea esi, [edi + 8]
mov ebx, dword [edi + 0x18]
jb 0x1002d09c
mov esi, dword [edi + 8]
xor ecx, ecx
mov edx, 0x811c9dc5
test ebx, ebx
je 0x1002d0b8
movzx eax, byte [ecx + esi]
inc ecx
xor eax, edx
imul edx, eax, 0x1000193
cmp ecx, ebx
jb 0x1002d0a7
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + 0x18]
mov ecx, dword [ebx + 0xc]
and eax, edx
lea edx, [eax*8]
mov eax, dword [ecx + edx]
add ecx, edx
cmp dword [ecx + 4], edi
jne 0x1002d0f1
cmp eax, edi
jne 0x1002d0e9
mov eax, dword [ebx + 4]
mov dword [ecx], eax
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
mov dword [edx + ecx + 4], eax
jmp 0x1002d0f9
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
jmp 0x1002d0f9
cmp eax, edi
jne 0x1002d0f9
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
lea ecx, [edi + 8]
mov esi, dword [edi]
mov dword [eax], esi
mov edx, dword [edi]
mov eax, dword [edi + 4]
mov dword [edx + 4], eax
dec dword [ebx + 8]
call fcn.1002aa00
push 0x40
push edi
call fcn.1006cd71
mov eax, dword [ebp + 8]
add esp, 8
pop edi
mov dword [eax], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1002ded0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
lea eax, [ebp - 4]
mov esi, edx
push eax
push 0x40
mov edi, ecx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x1002def4
pop edi
xor al, al
pop esi
mov esp, ebp
pop ebp
ret
push esi
push 0x90
push edi
call fcn.100849c0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop edi
mov al, 1
pop esi
mov esp, ebp
pop ebp
ret
Function at 0x1002f050
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2528
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push esi
mov esi, ecx
push edi
mov edi, edx
mov eax, dword [esi]
test eax, eax
je 0x1002f093
push eax
push edi
call dword [sym.imp.ODBC32.dll_SQLFreeHandle]
movzx eax, ax
test ax, ax
je 0x1002f08d
cmp ax, 1
jne 0x1002f0a3
mov dword [esi], 0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:795:
lea ecx, [ebp - 0x24]
call fcn.1000a100
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push edi
push dword [esi]
lea ecx, [ebp - 0x64]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x64]
push eax
call fcn.10084947
int3

Function at 0x1002f170
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c2570
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb8
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], esi
cmp dword [esi], 0
jne 0x1002f1e0
push esi
push 0
push 1
call dword [sym.imp.ODBC32.dll_SQLAllocHandle]
movzx eax, ax
test ax, ax
je 0x1002f1b7
cmp ax, 1
jne 0x1002f1f1
push 0xfffffffffffffffb
push 0x17c
push 0xc8
mov dword [ebp - 4], 1
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetEnvAttr]
movzx eax, ax
test ax, ax
je 0x1002f1e0
cmp ax, 1
jne 0x1002f229
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:807:
lea ecx, [ebp - 0x2c]
call fcn.1000a100
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
push 1
push dword [esi]
lea ecx, [ebp - 0x84]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x84]
push eax
call fcn.10084947
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:819:
lea ecx, [ebp - 0x44]
call fcn.1000a100
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 2
push eax
push 1
push dword [esi]
lea ecx, [ebp - 0xc4]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0xc4]
push eax
call fcn.10084947
mov ecx, dword [ebp - 0x14]
mov edx, 1
call fcn.1002f050
push 0
push 0
call fcn.10084947
int3
Function at 0x1002f280
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c2588
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
cmp dword [ecx], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, edx
mov dword [ebp - 0x14], ecx
jne 0x1002f2ca
push ecx
push esi
push 2
mov dword [ebp - 4], 0
call dword [sym.imp.ODBC32.dll_SQLAllocHandle]
movzx eax, ax
test ax, ax
je 0x1002f2ca
cmp ax, 1
jne 0x1002f2db
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:839:
lea ecx, [ebp - 0x2c]
call fcn.1000a100
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 1
push eax
push 1
push esi
lea ecx, [ebp - 0x6c]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x6c]
push eax
call fcn.10084947
mov ecx, dword [ebp - 0x14]
mov edx, 2
call fcn.1002f050
push 0
push 0
call fcn.10084947
int3

Function at 0x1002f3c0
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c25c0
push eax
mov dword fs:[0], esp
sub esp, 0xb0
push esi
push edi
mov edi, ecx
call fcn.1002f170
mov ecx, edi
call fcn.1002f4f0
mov edx, 2
lea ecx, [edi + 4]
call fcn.1002f050
mov edx, dword [edi]
lea ecx, [edi + 4]
call fcn.1002f280
push 0
push 5
push 0x67
push dword [edi + 4]
call dword [sym.imp.ODBC32.dll_SQLSetConnectAttr]
movzx eax, ax
test ax, ax
je 0x1002f422
cmp ax, 1
jne 0x1002f476
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 0x10
jb 0x1002f42d
mov eax, dword [eax]
push 0
push 0
push 0
push 0
push 0xfffffffffffffffd
push eax
push 0
push dword [edi + 4]
call dword [sym.imp.ODBC32.dll_SQLDriverConnect]
movzx eax, ax
test ax, ax
je 0x1002f45f
cmp ax, 1
jne 0x1002f4a9
test ax, ax
je 0x1002f45f
cmp ax, ax
je 0x1002f45f
xor cl, cl
jmp 0x1002f461
mov cl, 1
mov byte [edi + 8], cl
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1077:
lea ecx, [ebp - 0x24]
call fcn.1000a100
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push 2
push dword [edi + 4]
lea ecx, [ebp - 0x7c]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x7c]
push eax
call fcn.10084947
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1097:
lea ecx, [ebp - 0x3c]
call fcn.1000a100
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 1
push eax
push 2
push dword [edi + 4]
lea ecx, [ebp - 0xbc]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0xbc]
push eax
call fcn.10084947
int3
Function at 0x1002f4f0
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2528
push eax
mov dword fs:[0], esp
sub esp, 0x58
push esi
mov esi, ecx
cmp byte [esi + 8], 0
je 0x1002f52b
push dword [esi + 4]
call dword [sym.imp.ODBC32.dll_SQLDisconnect]
movzx eax, ax
test ax, ax
je 0x1002f52b
cmp ax, 1
jne 0x1002f53e
mov ecx, dword [ebp - 0xc]
mov byte [esi + 8], 0
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1113:
lea ecx, [ebp - 0x24]
call fcn.1000a100
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push 2
push dword [esi + 4]
lea ecx, [ebp - 0x64]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x64]
push eax
call fcn.10084947
int3

Function at 0x1002f730
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2640
push eax
mov dword fs:[0], esp
sub esp, 0x60
push esi
push edi
mov edi, ecx
call fcn.1002f830
mov esi, dword [ebp + 8]
push edi
mov eax, dword [esi]
push dword [eax + 4]
push 3
call dword [sym.imp.ODBC32.dll_SQLAllocHandle]
movzx eax, ax
test ax, ax
je 0x1002f777
cmp ax, 1
je 0x1002f777
xor al, al
jmp 0x1002f779
mov al, 1
mov byte [edi + 4], al
test al, al
jne 0x1002f7a3
cmp dword [edi], 0
lea ecx, [ebp - 0x28]
je 0x1002f7fa
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1456:
call fcn.1000a100
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 1
push eax
push 3
push dword [edi]
jmp 0x1002f819
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x1002f7b1
lock inc dword [ecx + 4]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [edi + 8], eax
mov esi, dword [edi + 0xc]
mov dword [edi + 0xc], ecx
mov dword [ebp - 4], 2
test esi, esi
je 0x1002f7e8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x1002f7e8
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x1002f7e8
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 4
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1454:
call fcn.1000a100
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 0
push eax
push 2
mov ecx, esi
call fcn.10030f90
push eax
lea ecx, [ebp - 0x68]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x68]
push eax
call fcn.10084947
int3
Function at 0x1002f910
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2660
push eax
mov dword fs:[0], esp
sub esp, 0x68
push esi
mov esi, ecx
push edi
cmp byte [esi + 4], 0
je 0x1002f989
call fcn.1002f9f0
mov eax, dword [ebp + 8]
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x1002f948
mov eax, dword [eax]
push ecx
push eax
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLPrepare]
movzx edi, ax
test di, di
je 0x1002f966
cmp di, 1
je 0x1002f966
cmp di, 2
jne 0x1002f9b7
push 0
push 0
push 0
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
mov ecx, dword [ebp - 0xc]
mov ax, di
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0xc
push str.statement_has_no_associated_open_connection
lea ecx, [ebp - 0x34]
call fcn.1000a100
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x1c]
call fcn.1002ebc0
push 0x100f7ab4
lea eax, [ebp - 0x1c]
push eax
call fcn.10084947
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1549:
lea ecx, [ebp - 0x34]
call fcn.1000a100
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 1
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0x74]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x74]
push eax
call fcn.10084947
int3

Function at 0x1002f9f0
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2528
push eax
mov dword fs:[0], esp
sub esp, 0x58
push esi
mov esi, ecx
cmp byte [esi + 0x39], 0
je 0x1002fa34
push 0xfffffffffffffffa
push 0
push 4
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
movzx eax, ax
test ax, ax
je 0x1002fa30
cmp ax, 1
jne 0x1002fa43
mov byte [esi + 0x39], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1614:
lea ecx, [ebp - 0x24]
call fcn.1000a100
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0x64]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x64]
push eax
call fcn.10084947
int3
Function at 0x1002fae0
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c2680
push eax
mov dword fs:[0], esp
sub esp, 0xb0
push esi
push dword [ebp + 8]
mov esi, ecx
call fcn.1002f730
mov ecx, esi
call fcn.1002f9f0
push 0
push 1
push 0x16
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
movzx eax, ax
test ax, ax
je 0x1002fb2c
cmp ax, 1
jne 0x1002fb7b
push 0
push 0
push 0
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x14], 0x10
jb 0x1002fb45
mov eax, dword [eax]
push 0xfffffffffffffffd
push eax
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLExecDirect]
movzx eax, ax
test ax, ax
je 0x1002fb6a
cmp ax, 1
je 0x1002fb6a
cmp ax, 0x64
je 0x1002fb6a
cmp ax, 2
jne 0x1002fbad
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0x18
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1724:
lea ecx, [ebp - 0x24]
call fcn.1000a100
lea eax, [ebp - 0x24]
mov dword [ebp - 4], 0
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0x7c]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x7c]
push eax
call fcn.10084947
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1731:
lea ecx, [ebp - 0x3c]
call fcn.1000a100
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 2
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0xbc]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0xbc]
push eax
call fcn.10084947
int3
Function at 0x1002fc40
Capabilities:
Reference absolute stream path on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100c26a8
push eax
mov dword fs:[0], esp
sub esp, 0xb0
push esi
mov esi, ecx
cmp byte [esi + 4], 0
je 0x1002fc83
push 0
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLFreeStmt]
movzx eax, ax
test ax, ax
je 0x1002fc83
cmp ax, 1
jne 0x1002fd3a
mov ecx, esi
call fcn.1002f9f0
push 0
push 1
push 0x16
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
movzx eax, ax
test ax, ax
je 0x1002fcc5
cmp ax, 1
je 0x1002fcc5
cmp ax, 0x64
je 0x1002fcc5
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1791:
lea ecx, [ebp - 0x24]
call fcn.1000a100
mov dword [ebp - 4], 2
jmp 0x1002fd4e
push 0
push 0
push 0
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLSetStmtAttr]
push dword [esi]
call dword [sym.imp.ODBC32.dll_SQLExecute]
movzx eax, ax
test ax, ax
je 0x1002fd29
cmp ax, 1
je 0x1002fd29
cmp ax, 0x64
je 0x1002fd29
cmp ax, 2
je 0x1002fd29
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1797:
lea ecx, [ebp - 0x3c]
call fcn.1000a100
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 4
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0xbc]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0xbc]
jmp 0x1002fd66
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0x10
push str.c:users_sarko_pc_source_repos_sr_gameserver_dll_sr_gameserver_dll_sr_gameserver_dll_nanodbc_nanodbc.cpp:1773:
lea ecx, [ebp - 0x24]
call fcn.1000a100
mov dword [ebp - 4], 1
lea eax, [ebp - 0x24]
push eax
push 3
push dword [esi]
lea ecx, [ebp - 0x7c]
call fcn.1002ec10
push 0x100f7aa4
lea eax, [ebp - 0x7c]
push eax
call fcn.10084947
int3