joyce8/EMBER2024-capa huggingface dataset:
Function at 0x18001cb10
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x1f0
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
mov rdi, rdx
mov r12, rcx
test rdx, rdx
jne 0x18001cb47
xor eax, eax
jmp 0x18001cd19
xor eax, eax
lea rcx, [rsp + 0x51]
xor edx, edx
lea r8d, [rax + 0x7f]
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x31], rax
mov dword [rsp + 0x39], eax
mov word [rsp + 0x3d], ax
mov byte [rsp + 0x3f], al
mov byte [rsp + 0x40], al
mov qword [rsp + 0x41], rax
mov dword [rsp + 0x49], eax
mov word [rsp + 0x4d], ax
mov byte [rsp + 0x4f], al
mov byte [rsp + 0x50], al
call fcn.180052810
mov r15d, 0x103
lea rcx, [rsp + 0xd1]
mov r8, r15
xor edx, edx
mov byte [rsp + 0xd0], 0
call fcn.180052810
xor ebp, ebp
xor esi, esi
lea ebx, [rbp + 1]
cmp ebp, 0xc8
ja 0x18001cd14
xor edx, edx
lea rcx, [rsp + 0x40]
lea r8d, [rdx + 0x10]
call fcn.180052810
xor edx, edx
lea rcx, [rsp + 0x30]
lea r8d, [rdx + 0x10]
call fcn.180052810
lea rcx, [rsp + 0x50]
xor edx, edx
mov r8d, 0x80
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x40]
mov r9d, esi
mov edx, SQLNumResultCols
call fcn.1800528fc
lea rax, [0x18009b470]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rdx, str.UserName
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x18001cc41
inc ebp
jmp 0x18001cd06
lea rcx, [rsp + 0x50]
call fcn.1800529c0
lea rcx, [rsp + 0x50]
mov rdx, rax
call fcn.18000b550
lea rax, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.AccountStatus
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x20], SQLNumResultCols
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x18001cd06
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, str.Enable
lea rcx, [rsp + 0x30]
call fcn.180053060
mov r9, rdi
mov rdx, r15
test eax, eax
lea rax, [rsp + 0x50]
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r8, str.PRIVMSG__s_:Account__d:__s_____Enable_r_n
je 0x18001cce0
lea r8, str.PRIVMSG__s_:Account__d:__s_____Disable_r_n
call fcn.1800528fc
lea rdx, [rsp + 0xd0]
mov rcx, r12
inc ebx
call fcn.180012d7c
test eax, eax
je 0x18001cd14
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0x3e8
jb 0x18001cbb1
mov eax, 1
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x230]
add rsp, 0x1f0
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x180022e48
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.AllowedIP
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x180022eec
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.18000839c
jmp 0x180022efb
lea rdx, [0x180067838]
mov rcx, rdi
call fcn.18000831c
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret

Function at 0x180022f48
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.DeniedIP
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x180022fec
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.1800084f0
jmp 0x180022ffb
lea rdx, str.None
mov rcx, rdi
call fcn.180008470
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret

Function at 0x180023048
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.AllowedDestIP
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x1800230ec
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.180008644
jmp 0x1800230fb
lea rdx, [0x180067838]
mov rcx, rdi
call fcn.1800085c4
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret
Function at 0x180023148
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.DeniedDestPort
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x1800231ec
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.180008760
jmp 0x1800231f6
xor edx, edx
mov rcx, rdi
call fcn.180008718
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret

Function at 0x180023244
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.AllowedDestPort
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x1800232e8
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.1800088f0
jmp 0x1800232f2
xor edx, edx
mov rcx, rdi
call fcn.1800088a8
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret

Function at 0x180023340
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rdi
sub rsp, 0x440
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
mov rdi, rcx
mov rbx, rdx
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.DeniedDestIP
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x1800233e4
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.180008ab8
jmp 0x1800233f3
lea rdx, str.None
mov rcx, rdi
call fcn.180008a38
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x460]
add rsp, 0x440
pop rdi
ret
Function at 0x180023414
Capabilities:
Read .ini file

Disassembly:
sub rsp, 0x448
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x430], rax
lea rcx, [rsp + 0x31]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x30], 0
call fcn.180052810
lea rcx, [rsp + 0x30]
xor edx, edx
mov r8d, 0x400
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], r11
lea rdx, str.ListenPort
lea rcx, str.GlobalSettings
xor r8d, r8d
mov dword [rsp + 0x20], 0x400
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jle 0x1800234b6
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rcx, [rsp + 0x30]
call fcn.180008c7c
test eax, eax
je 0x1800234b6
mov eax, 1
jmp 0x1800234c0
mov ecx, 0x438
call fcn.180008bb4
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.1800527e0
add rsp, 0x448
ret
Function at 0x1800239c8
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x190
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x180], rax
xor eax, eax
mov r12, rcx
mov dword [rsp + 0x30], r8d
mov rdi, rdx
lea rcx, [rsp + 0x71]
mov r8d, 0x103
xor edx, edx
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x49], rax
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov dword [rsp + 0x61], eax
mov word [rsp + 0x65], ax
mov byte [rsp + 0x67], al
mov byte [rsp + 0x70], al
call fcn.180052810
xor eax, eax
xor ebp, ebp
xor ebx, ebx
mov byte [rsp + 0x38], 0
lea r13, [0x18009b470]
mov qword [rsp + 0x39], rax
mov dword [rsp + 0x41], eax
mov word [rsp + 0x45], ax
mov byte [rsp + 0x47], al
xor esi, esi
cmp ebp, 0xc8
ja 0x180023b78
xor edx, edx
lea rcx, [rsp + 0x48]
lea r8d, [rdx + 0x20]
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x48]
mov r9d, esi
mov edx, reloc.ODBC32.dll_SQLFreeHandle
call fcn.1800528fc
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x104
call fcn.180052810
lea r9, [rsp + 0x70]
lea rdx, str.UserName
lea rcx, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0x104
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x180023ad0
inc ebp
jmp 0x180023b6a
lea rcx, [rsp + 0x70]
call fcn.1800529c0
lea rcx, [rsp + 0x70]
mov rdx, rax
call fcn.18000b550
xor edx, edx
lea rcx, [rsp + 0x38]
lea r8d, [rdx + 0x10]
call fcn.180052810
lea r9, [rsp + 0x38]
lea rdx, str.AccountStatus
lea rcx, [rsp + 0x48]
xor r8d, r8d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], SQLNumResultCols
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
je 0x180023b6a
lea rcx, [rsp + 0x38]
call fcn.1800529c0
lea rcx, [rsp + 0x38]
mov rdx, rax
call fcn.18000b550
lea rdx, str.Enable
lea rcx, [rsp + 0x38]
call fcn.180053060
test eax, eax
je 0x180023b6a
lea r8, [rsp + 0x70]
mov r9d, 1
mov rdx, rdi
mov rcx, r12
call fcn.1800215a4
test eax, eax
je 0x180023b6a
inc ebx
inc esi
cmp esi, 0x3e8
jb 0x180023a57
mov r13d, dword [rsp + 0x30]
test r13d, r13d
jne 0x180023bf8
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x104
call fcn.180052810
mov edx, 0x103
lea rcx, [rsp + 0x70]
test rdi, rdi
jne 0x180023bc6
test ebx, ebx
je 0x180023bb8
lea r8, str._r_n_d_Accounts_Has_Been_Deleted_r_n_r_n
mov r9d, ebx
call fcn.1800528fc
jmp 0x180023beb
lea r8, str._r_nNo_Accounts_Has_Been_Deleted_r_n_r_n
call fcn.1800528fc
jmp 0x180023beb
mov r9, rdi
test ebx, ebx
je 0x180023bdf
lea r8, str.PRIVMSG__s_:_d_Accounts_Has_Been_Deleted_r_n
mov dword [rsp + 0x20], ebx
call fcn.1800528fc
jmp 0x180023beb
lea r8, str.PRIVMSG__s_:No_Accounts_Has_Been_Deleted_r_n
call fcn.1800528fc
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.180012d7c
mov eax, 1
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x190
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x180023dd0
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r14
sub rsp, 0x200
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
xor eax, eax
mov rbp, r8
mov r12, rcx
mov rbx, rdx
lea rcx, [rsp + 0x61]
lea r8d, [rax + 0x7f]
xor edx, edx
mov byte [rsp + 0x40], 0
mov qword [rsp + 0x41], rax
mov qword [rsp + 0x49], rax
mov qword [rsp + 0x51], rax
mov dword [rsp + 0x59], eax
mov word [rsp + 0x5d], ax
mov byte [rsp + 0x5f], al
mov byte [rsp + 0x60], al
call fcn.180052810
xor eax, eax
mov r14d, 0x103
lea rcx, [rsp + 0xe1]
xor edx, edx
mov r8, r14
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x31], rax
mov dword [rsp + 0x39], eax
mov word [rsp + 0x3d], ax
mov byte [rsp + 0x3f], al
xor esi, esi
mov byte [rsp + 0xe0], al
call fcn.180052810
mov rcx, rbp
call fcn.180004a30
test eax, eax
je 0x180023e82
xor eax, eax
jmp 0x180023f7e
xor edi, edi
cmp esi, 0xc8
ja 0x180023f79
xor edx, edx
lea rcx, [rsp + 0x40]
lea r8d, [rdx + 0x20]
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x40]
mov r9d, edi
mov edx, reloc.ODBC32.dll_SQLFreeHandle
call fcn.1800528fc
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x80
call fcn.180052810
lea rax, [0x18009b470]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rdx, str.UserName
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x180023f01
inc esi
jmp 0x180023f6b
lea rcx, [rsp + 0x60]
call fcn.1800529c0
lea rcx, [rsp + 0x60]
mov rdx, rax
call fcn.18000b550
lea rcx, [rsp + 0x60]
mov rdx, rbp
call fcn.180053060
test eax, eax
jne 0x180023f6b
lea r8d, [rax + 0x10]
lea rcx, [rsp + 0x30]
xor edx, edx
call fcn.180052810
lea rax, [0x18009b470]
lea r9, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rdx, str.AccountStatus
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x20], SQLNumResultCols
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
test eax, eax
jne 0x180023fa5
inc edi
cmp edi, 0x3e8
jb 0x180023e84
mov eax, 1
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x248]
add rsp, 0x200
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rsp + 0x30]
call fcn.1800529c0
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.18000b550
lea rdx, str.Enable
lea rcx, [rsp + 0x30]
call fcn.180053060
mov rdx, r14
lea rcx, [rsp + 0xe0]
test eax, eax
jne 0x180023ff3
test rbx, rbx
jne 0x180023fea
lea r8, str._r_n_s_Is_Enable_r_n_r_n
jmp 0x180023fff
lea r8, str.PRIVMSG__s_:_s_Is_Enable_r_n
jmp 0x180024012
test rbx, rbx
jne 0x18002400b
lea r8, str._r_n_s_Is_Disable_r_n_r_n
lea r9, [rsp + 0x60]
call fcn.1800528fc
jmp 0x180024024
lea r8, str.PRIVMSG__s_:_s_Is_Disable_r_n
lea rax, [rsp + 0x60]
mov r9, rbx
mov qword [rsp + 0x20], rax
call fcn.1800528fc
lea rdx, [rsp + 0xe0]
mov rcx, r12
call fcn.180012d7c
jmp 0x180023f7e
Function at 0x180024ba0
Capabilities:
Read .ini file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x208
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x270]
mov r13, rcx
mov r15, r8
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x278]
mov rsi, rdx
mov edi, 0x103
lea rcx, [rsp + 0xe1]
xor ebx, ebx
xor edx, edx
mov r8, rdi
mov qword [rsp + 0x40], rax
mov r14, r9
mov byte [rsp + 0xe0], bl
call fcn.180052810
mov rcx, r15
call fcn.180004a30
cmp eax, ebx
jne 0x180024d95
mov rcx, r14
call fcn.180004a30
cmp eax, ebx
jne 0x180024d95
xor eax, eax
lea r8d, [rbx + 0x7f]
lea rcx, [rsp + 0x61]
xor edx, edx
mov byte [rsp + 0x50], bl
mov edi, ebx
mov qword [rsp + 0x51], rax
mov dword [rsp + 0x59], eax
mov word [rsp + 0x5d], ax
mov byte [rsp + 0x5f], al
mov r12d, ebx
mov byte [rsp + 0x60], bl
call fcn.180052810
mov ebp, ebx
cmp r12d, 0xc8
ja 0x180024d3d
xor edx, edx
lea rcx, [rsp + 0x50]
lea r8d, [rdx + 0x10]
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x50]
mov r9d, ebp
mov edx, SQLNumResultCols
call fcn.1800528fc
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x80
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x28], r11
lea rdx, str.UserName
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp eax, ebx
jne 0x180024cde
inc r12d
jmp 0x180024d2f
lea rcx, [rsp + 0x60]
call fcn.1800529c0
lea rcx, [rsp + 0x60]
mov rdx, rax
call fcn.18000b550
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x48]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov r9, r15
mov rdx, rsi
mov rcx, r13
mov qword [rsp + 0x20], r14
call fcn.1800226ec
cmp eax, ebx
je 0x180024d2f
inc edi
inc ebp
cmp ebp, 0x3e8
jb 0x180024c5f
cmp dword [rsp + 0x280], ebx
jne 0x180024d8c
mov edx, 0x103
lea rcx, [rsp + 0xe0]
cmp rsi, rbx
jne 0x180024d69
lea r8, str._r_n_d_Accounts_Remote_Proxy_Has_Been_Enable_r_n_r_n
mov r9d, edi
call fcn.1800528fc
jmp 0x180024d7c
lea r8, str.PRIVMSG__s_:_d_Accounts_Remote_Proxy_Has_Been_Enable_r_n
mov r9, rsi
mov dword [rsp + 0x20], edi
call fcn.1800528fc
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.180012d7c
cmp edi, ebx
seta bl
mov eax, ebx
jmp 0x180024ddd
cmp dword [rsp + 0x280], ebx
jne 0x180024ddb
mov rdx, rdi
lea rcx, [rsp + 0xe0]
cmp rsi, rbx
jne 0x180024dbc
lea r8, str._r_nThe_Input_Is_Invalid_r_n_r_n
call fcn.1800528fc
jmp 0x180024dcb
lea r8, str.PRIVMSG__s_:The_Input_Is_Invalid_r_n
mov r9, rsi
call fcn.1800528fc
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.180012d7c
xor eax, eax
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1800527e0
add rsp, 0x208
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180024e04
Capabilities:
Read .ini file

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x208
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x270]
mov r13, rcx
mov r15, r8
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x278]
mov rsi, rdx
mov edi, 0x103
lea rcx, [rsp + 0xe1]
xor ebx, ebx
xor edx, edx
mov r8, rdi
mov qword [rsp + 0x40], rax
mov r14, r9
mov byte [rsp + 0xe0], bl
call fcn.180052810
mov rcx, r15
call fcn.180004a30
cmp eax, ebx
jne 0x180024ff9
mov rcx, r14
call fcn.180004a30
cmp eax, ebx
jne 0x180024ff9
xor eax, eax
lea r8d, [rbx + 0x7f]
lea rcx, [rsp + 0x61]
xor edx, edx
mov byte [rsp + 0x50], bl
mov edi, ebx
mov qword [rsp + 0x51], rax
mov dword [rsp + 0x59], eax
mov word [rsp + 0x5d], ax
mov byte [rsp + 0x5f], al
mov r12d, ebx
mov byte [rsp + 0x60], bl
call fcn.180052810
mov ebp, ebx
cmp r12d, 0xc8
ja 0x180024fa1
xor edx, edx
lea rcx, [rsp + 0x50]
lea r8d, [rdx + 0x10]
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x50]
mov r9d, ebp
mov edx, SQLNumResultCols
call fcn.1800528fc
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0x80
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x60]
mov qword [rsp + 0x28], r11
lea rdx, str.UserName
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp eax, ebx
jne 0x180024f42
inc r12d
jmp 0x180024f93
lea rcx, [rsp + 0x60]
call fcn.1800529c0
lea rcx, [rsp + 0x60]
mov rdx, rax
call fcn.18000b550
mov rax, qword [rsp + 0x40]
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x48]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov r9, r15
mov rdx, rsi
mov rcx, r13
mov qword [rsp + 0x20], r14
call fcn.180022a9c
cmp eax, ebx
je 0x180024f93
inc edi
inc ebp
cmp ebp, 0x3e8
jb 0x180024ec3
cmp dword [rsp + 0x280], ebx
jne 0x180024ff0
mov edx, 0x103
lea rcx, [rsp + 0xe0]
cmp rsi, rbx
jne 0x180024fcd
lea r8, str._r_n_d_Accounts_BackUP_Proxy_Has_Been_Enable_r_n_r_n
mov r9d, edi
call fcn.1800528fc
jmp 0x180024fe0
lea r8, str.PRIVMSG__s_:_d_Accounts_BackUP_Proxy_Has_Been_Enable_r_n
mov r9, rsi
mov dword [rsp + 0x20], edi
call fcn.1800528fc
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.180012d7c
cmp edi, ebx
seta bl
mov eax, ebx
jmp 0x180025041
cmp dword [rsp + 0x280], ebx
jne 0x18002503f
mov rdx, rdi
lea rcx, [rsp + 0xe0]
cmp rsi, rbx
jne 0x180025020
lea r8, str._r_nThe_Input_Is_Invalid_r_n_r_n
call fcn.1800528fc
jmp 0x18002502f
lea r8, str.PRIVMSG__s_:The_Input_Is_Invalid_r_n
mov r9, rsi
call fcn.1800528fc
lea rdx, [rsp + 0xe0]
mov rcx, r13
call fcn.180012d7c
xor eax, eax
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.1800527e0
add rsp, 0x208
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x180025144
Capabilities:
Read .ini file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1e0
mov rax, qword [0x1800830c8]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
mov r14, rcx
mov r13d, r8d
mov r12, rdx
mov r15d, 0x103
lea rcx, [rsp + 0xc1]
xor ebx, ebx
mov r8, r15
xor edx, edx
mov byte [rsp + 0xc0], bl
call fcn.180052810
xor eax, eax
lea r8d, [rbx + 0x7f]
lea rcx, [rsp + 0x41]
xor edx, edx
mov byte [rsp + 0x30], bl
mov qword [rsp + 0x31], rax
mov dword [rsp + 0x39], eax
mov word [rsp + 0x3d], ax
mov byte [rsp + 0x3f], al
mov edi, ebx
mov ebp, ebx
mov byte [rsp + 0x40], bl
call fcn.180052810
mov esi, ebx
cmp ebp, 0xc8
ja 0x180025278
xor edx, edx
lea rcx, [rsp + 0x30]
lea r8d, [rdx + 0x10]
call fcn.180052810
lea r8, str.User_d
lea rcx, [rsp + 0x30]
mov r9d, esi
mov edx, SQLNumResultCols
call fcn.1800528fc
lea rcx, [rsp + 0x40]
xor edx, edx
mov r8d, 0x80
call fcn.180052810
lea r11, [0x18009b470]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x28], r11
lea rdx, str.UserName
lea rcx, [rsp + 0x30]
xor r8d, r8d
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp eax, ebx
jne 0x180025246
inc ebp
jmp 0x18002526a
lea rcx, [rsp + 0x40]
call fcn.1800529c0
lea rcx, [rsp + 0x40]
mov rdx, rax
call fcn.18000b550
mov ecx, esi
call fcn.180025068
cmp eax, ebx
je 0x18002526a
inc edi
inc esi
cmp esi, 0x3e8
jb 0x1800251c9
cmp r13d, ebx
jne 0x1800252c1
mov rdx, r15
lea rcx, [rsp + 0xc0]
cmp r12, rbx
jne 0x18002529e
lea r8, str._r_n_d_Accounts_Remote_Proxy_Chain_Has_Been_Disabled_r_n_r_n
mov r9d, edi
call fcn.1800528fc
jmp 0x1800252b1
lea r8, str.PRIVMSG__s_:_d_Accounts_Remote_Proxy_Chain_Has_Been_Disabled_r_n
mov r9, r12
mov dword [rsp + 0x20], edi
call fcn.1800528fc
lea rdx, [rsp + 0xc0]
mov rcx, r14
call fcn.180012d7c
cmp edi, ebx
seta bl
mov eax, ebx
mov rcx, qword [rsp + 0x1d0]
xor rcx, rsp
call fcn.1800527e0
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret