Function at 0x405690
Capabilities:
Create udp socket
Hide graphical window
Initialize winsock library
Read .ini file
Reference cloudflare dns server
Resolve dns
Terminate thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x348
mov eax, dword [0x43f014]
xor eax, esp
mov dword [esp + 0x344], eax
push esi
push edi
mov edi, dword [ebp + 8]
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x4083a0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x64
push 0x50ce90
push 0x67
push edi
mov dword [0x50cef4], eax
call esi
push 0x64
push 0x50ce28
push 0x6d
push edi
call esi
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x6b
push edi
mov dword [esp + 0x1c8], 0x30
mov dword [esp + 0x1cc], 3
mov dword [esp + 0x1d0], 0x405dc0
mov dword [esp + 0x1d4], 0
mov dword [esp + 0x1d8], 0
mov dword [esp + 0x1dc], edi
call esi
push 0x7f00
push 0
mov dword [esp + 0x1e0], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0x6c
push dword [esp + 0x1d8]
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1e8], 6
mov dword [esp + 0x1ec], 0x6d
mov dword [esp + 0x1f0], 0x50ce28
call esi
mov dword [esp + 0x1ec], eax
lea eax, [esp + 0x1c0]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push edi
push 0
push 0
push 0x258
push 0x258
push 0
push closesocket
push 0xcf0000
push 0x50ce90
push 0x50ce28
push 0
mov dword [0x50ce8c], edi
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [0x50ce24], eax
test eax, eax
jne 0x4057de
pop edi
pop esi
mov ecx, dword [esp + 0x344]
xor ecx, esp
call fcn.0040c166
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp + 0x14]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x50ce24]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push str..JoinServer.ini
push 0x64
push 0x50cdc0
push 0x439712
push str.UserEmail
push str.JoinServerInfo
call esi
push str..JoinServer.ini
push 0x32
push 0x50cd8c
push str.MEMB_INFO
push str.VipTable
push str.JoinServerInfo
call esi
push str..JoinServer.ini
push 0x32
push 0x50cd58
push 0x43a908
push str.VipColumn
push str.JoinServerInfo
call esi
push str..JoinServer.ini
push 0x32
push 0x50cd24
push str.memb___id
push str.VipWhere
push str.JoinServerInfo
call esi
push 0
push 0
push 0
push str.1.0.0.1
lea eax, [esp + 0x258]
push str.__s__JoinServer__AccountCount_:__d__d_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea eax, [esp + 0x248]
push eax
push dword [0x50ce24]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x50ce24]
push 0x43aea0
push ecx
mov dword [0x508e94], eax
call fcn.00407a90
push str.LOG_ACCOUNT
push ecx
call fcn.00407a90
lea eax, [esp + 0x30]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x405d01
push str..JoinServer.ini
push 0x20
lea eax, [esp + 0x208]
xorps xmm0, xmm0
push eax
push 0x439712
push str.JoinServerODBC
push str.JoinServerInfo
movaps xmmword [esp + 0x218], xmm0
movaps xmmword [esp + 0x228], xmm0
movaps xmmword [esp + 0x238], xmm0
movaps xmmword [esp + 0x248], xmm0
movaps xmmword [esp + 0x1d8], xmm0
movaps xmmword [esp + 0x1e8], xmm0
call esi
push str..JoinServer.ini
push 0x20
lea eax, [esp + 0x228]
push eax
push 0x439712
push str.JoinServerUSER
push str.JoinServerInfo
call esi
push str..JoinServer.ini
push 0x20
lea eax, [esp + 0x1c8]
push eax
push 0x439712
push str.JoinServerPASS
push str.JoinServerInfo
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str..JoinServer.ini
push 0xdaa2
push str.JoinServerPort
push str.JoinServerInfo
call esi
push str..JoinServer.ini
movzx eax, ax
xorps xmm0, xmm0
push 0x10
mov dword [esp + 0x18], eax
lea eax, [esp + 0x1f8]
push eax
push str.127.0.0.1
push str.ConnectServerAddress
push str.JoinServerInfo
movaps xmmword [esp + 0x208], xmm0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push str..JoinServer.ini
push 0xd905
push str.ConnectServerPort
push str.JoinServerInfo
call esi
push str..JoinServer.ini
push 0
push str.CaseSensitive
movzx eax, ax
push str.JoinServerInfo
mov dword [esp + 0x1c], eax
call esi
push str..JoinServer.ini
push 0
push str.MD5Encryption
push str.JoinServerInfo
mov dword [0x50cd20], eax
call esi
push str..JoinServer.ini
push 0
push str.RegexFixAccount
push str.JoinServerInfo
mov dword [0x50cd1c], eax
call esi
push ecx
mov ecx, 0x43fafc
mov dword [0x50cd18], eax
call fcn.00404cf0
push dword [0x50cd18]
push str.Regex_State:__d
push 1
call fcn.0040a1d0
mov eax, dword [0x43fb04]
add esp, 0xc
sub eax, dword [0x43fb00]
sar eax, 5
push eax
push str.Badsyntax_Lenght:__d
push 1
call fcn.0040a1d0
add esp, 0xc
lea eax, [esp + 0x200]
push eax
push 0x20
push 0x43ff50
call fcn.004106d3
add esp, 0xc
lea eax, [esp + 0x220]
push eax
push 0x20
push 0x43ff70
call fcn.004106d3
add esp, 0xc
lea eax, [esp + 0x1c0]
push eax
push 0x20
push 0x43ff90
call fcn.004106d3
mov esi, dword [sym.imp.ODBC32.dll_SQLAllocHandle]
add esp, 0xc
push 0x43ff48
push dword [0x43ff44]
push 2
call esi
test ax, 0xfffe
jne 0x405cf0
push 0xfffffffffffffffd
push 0x43ff90
push 0xfffffffffffffffd
push 0x43ff70
push 0xfffffffffffffffd
push 0x43ff50
push dword [0x43ff48]
call dword [sym.imp.ODBC32.dll_SQLConnect]
test ax, 0xfffe
jne 0x405cf0
push 0x43ff4c
push dword [0x43ff48]
push 3
call esi
test ax, 0xfffe
jne 0x405cf0
push dword [esp + 0x10]
call fcn.00408ea0
test al, al
jne 0x405b6f
mov eax, dword [0x43ff4c]
mov esi, dword [sym.imp.ODBC32.dll_SQLFreeHandle]
test eax, eax
je 0x405b36
push eax
push 3
call esi
mov dword [0x43ff4c], 0
mov eax, dword [0x43ff48]
test eax, eax
je 0x405b4e
push eax
push 2
call esi
mov dword [0x43ff48], 0
mov eax, dword [0x43ff44]
test eax, eax
je 0x405d17
push eax
push 1
call esi
mov dword [0x43ff44], 0
jmp 0x405d17
push 0
push 2
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov dword [0x509994], eax
cmp eax, 0xffffffff
jne 0x405b93
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str._SocketManagerUdp__WSASocket___failed_with_error:__d
jmp 0x405bf2
mov eax, 2
mov word [0x509998], ax
lea eax, [esp + 0x1f0]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
push dword [esp + 0xc]
mov dword [0x50999c], eax
call dword [sym.imp.WS2_32.dll_htons]
cmp dword [0x50999c], 0xffffffff
mov word [0x50999a], ax
jne 0x405cb4
lea eax, [esp + 0x1f0]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ecx, eax
test ecx, ecx
jne 0x405c9d
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str._SocketManagerUdp__gethostbyname___failed_with_error:__d
push 1
call fcn.0040a1d0
mov eax, dword [0x5099a8]
add esp, 0xc
test eax, eax
je 0x405c24
push 0
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [0x5099a8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x5099a8], 0
mov eax, dword [0x509994]
cmp eax, 0xffffffff
je 0x405c3f
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [0x509994], 0xffffffff
mov ecx, 0x509900
call fcn.00409160
mov eax, dword [0x43ff4c]
mov esi, dword [sym.imp.ODBC32.dll_SQLFreeHandle]
test eax, eax
je 0x405c67
push eax
push 3
call esi
mov dword [0x43ff4c], 0
mov eax, dword [0x43ff48]
test eax, eax
je 0x405c7f
push eax
push 2
call esi
mov dword [0x43ff48], 0
mov eax, dword [0x43ff44]
test eax, eax
je 0x405d17
push eax
push 1
call esi
mov dword [0x43ff44], 0
jmp 0x405d17
movsx eax, word [ecx + 0xa]
push eax
mov eax, dword [ecx + 0xc]
push dword [eax]
push 0x50999c
call fcn.0040da20
add esp, 0xc
push 0x1000
push 0
push 0x50a9b0
call fcn.0040dfa0
add esp, 8
mov dword [0x50b9b0], 0
call fcn.00404820
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0x3e8
push 0x64
push dword [0x50ce24]
call esi
jmp 0x405d1d
push str.Could_not_connect_to_database
push 1
call fcn.0040a1d0
add esp, 8
jmp 0x405d17
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.WSAStartup___failed_with_error:__d
push 1
call fcn.0040a1d0
add esp, 0xc
mov esi, dword [sym.imp.USER32.dll_SetTimer]
call fcn.00408c20
push 0
push 0x7d0
push 0x65
push dword [0x50ce24]
call esi
push 0x6d
push edi
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 0x1c]
push 0
push eax
call esi
test eax, eax
je 0x405d9a
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
nop dword [eax]
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x10]
push dword [esp + 0x1c]
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x405d89
lea eax, [esp + 0x14]
push eax
call edi
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [esp + 0x20]
push eax
call esi
test eax, eax
jne 0x405d60
push dword [0x50cef4]
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov ecx, dword [esp + 0x34c]
mov eax, dword [esp + 0x1c]
pop edi
pop esi
xor ecx, esp
call fcn.0040c166
mov esp, ebp
pop ebp
ret 0x10