Function at 0x439ea0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fc7c8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor eax, eax
push 0xffffffffffffffff
push eax
push dword [ecx + 0xc]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], 0
mov word [ebp - 0x2c], ax
call fcn.00434d60
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c]
mov esi, dword [ebp - 0x18]
lea edi, [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
cmp esi, 8
mov eax, dword [ebp - 0x1c]
cmovae ecx, edx
mov dword [ebp - 0x30], fcn.005d6049
cmovae edi, edx
lea eax, [ecx + eax*2]
lea ecx, [ebp - 0x2c]
cmovae ecx, edx
lea edx, [ebp - 0x30]
push edx
push edi
push eax
push ecx
call fcn.0042c330
add esp, 0x10
lea ecx, [ebp - 0x2c]
push 8
push 0
push str.phishing
call fcn.0041d7f0
cmp eax, 0xffffffff
je 0x439f50
mov dword [ebp - 0x30], 0xa
jmp 0x43a180
push 3
push 0
push 0x640184
lea ecx, [ebp - 0x2c]
call fcn.0041d7f0
cmp eax, 0xffffffff
je 0x439f72
mov dword [ebp - 0x30], 4
jmp 0x43a180
push 7
push 0
push str.rootkit
lea ecx, [ebp - 0x2c]
call fcn.0041d7f0
cmp eax, 0xffffffff
je 0x439f94
mov dword [ebp - 0x30], 0xd
jmp 0x43a180
push 0
push str.adware
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x439fb4
mov dword [ebp - 0x30], 1
jmp 0x43a180
push 0
push str.miner
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x439fd4
mov dword [ebp - 0x30], 9
jmp 0x43a180
push 0
push str.coinhive
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x439ff4
mov dword [ebp - 0x30], 9
jmp 0x43a180
push 0
push str.banker
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a014
mov dword [ebp - 0x30], 3
jmp 0x43a180
push 0
push str.ransom
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a034
mov dword [ebp - 0x30], 0xb
jmp 0x43a180
push 0
push str.remoteadmin
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a054
mov dword [ebp - 0x30], 0xc
jmp 0x43a180
push 0
push str.hacktool
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a074
mov dword [ebp - 0x30], 0xc
jmp 0x43a180
push 0
push str.downloader
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a094
mov dword [ebp - 0x30], 5
jmp 0x43a180
push 0
push str.dropper
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a0b4
mov dword [ebp - 0x30], 5
jmp 0x43a180
push 0
push str.worm
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a0d4
mov dword [ebp - 0x30], 0x12
jmp 0x43a180
push 0
push str.exploit
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a0f4
mov dword [ebp - 0x30], 7
jmp 0x43a180
push 0
push 0x64025c
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a111
mov dword [ebp - 0x30], 7
jmp 0x43a180
push 0
push str.virus
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a12e
mov dword [ebp - 0x30], 0x11
jmp 0x43a180
push 0
push str.trojan
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a14b
mov dword [ebp - 0x30], 0x10
jmp 0x43a180
push 0
push str.pup.
lea ecx, [ebp - 0x2c]
call fcn.0041a9c0
cmp eax, 0xffffffff
je 0x43a193
mov dword [ebp - 0x30], 1
lea eax, [ebp - 0x30]
push dword [ebp - 0x30]
push eax
push ecx
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.00426390
mov dword [ebp - 0x30], 0xf
push dword [ebp - 0x30]
lea eax, [ebp - 0x30]
push eax
push ecx
lea eax, [ebp - 0x38]
mov ecx, ebx
push eax
call fcn.00426390
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x43a1a8
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00434bd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
ret 4