Function at 0x407730
Capabilities:
Create thread
Delete file
Hide graphical window
Initialize winsock library
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x304
mov eax, dword [0x43400c]
xor eax, esp
mov dword [esp + 0x300], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push str.C:WindowsMuAdmins.Notice
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
call fcn.00407d30
test al, al
jne 0x407cbd
push 0
push 0
push 0
push 0x40b400
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 1
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x28], 0
push eax
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0x410390
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x6b
push 0x510448
push 0x67
push ebx
mov dword [0x5104b4], eax
call esi
push 0x6b
push 0x5103d8
push 0x6d
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x82
push ebx
mov dword [esp + 0x50], 0x30
mov dword [esp + 0x54], 3
mov dword [esp + 0x58], 0x408320
mov dword [esp + 0x5c], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], ebx
call esi
push 0x7f00
push 0
mov dword [esp + 0x68], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0x82
push dword [esp + 0x60]
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], 6
mov dword [esp + 0x74], 0x6d
mov dword [esp + 0x78], 0x5103d8
call esi
mov dword [esp + 0x74], eax
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push ebx
push 0
push 0
push 0x2bc
push 0x3ca
push 0
push bind
push 0xcf0000
push 0x510448
push 0x5103d8
push 0
mov dword [0x510444], ebx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [0x5103d4], eax
test eax, eax
jne 0x4078be
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x300]
xor ecx, esp
call fcn.00424550
mov esp, ebp
pop ebp
ret 0x10
mov edi, dword [sym.imp.USER32.dll_GetWindowLongA]
push 0xfffffffffffffff0
push eax
call edi
mov esi, dword [sym.imp.USER32.dll_SetWindowLongA]
and eax, 0xfffbffff
push eax
push 0xfffffffffffffff0
push dword [0x5103d4]
call esi
push 0xfffffffffffffff0
push dword [0x5103d4]
call edi
and eax, 0xfffeffff
push eax
push 0xfffffffffffffff0
push dword [0x5103d4]
call esi
push 3
push 0xf060
push 0
push dword [0x5103d4]
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
push dword [ebp + 0x14]
push dword [0x5103d4]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x5103d4]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
push str..Settings.ini
push 0x20
push 0x50efec
push 0x4289a0
push str.ServerName
push str.SilentGameGuardInfo
call esi
push str..Settings.ini
push 0x24
push 0x50f00c
push 0x4289a0
push str.CustomerHardwareId
push str.SilentGameGuardInfo
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
push str..Settings.ini
push 0
push str.ServerPort
push str.SilentGameGuardInfo
call edi
push str..Settings.ini
push 0
push str.MaxIpConnection
push str.SilentGameGuardInfo
mov dword [0x50f04c], eax
call edi
push str..Settings.ini
push 0x20
push 0x5103a8
push 0x4289a0
push str.ServerName
push str.SilentGameGuardInfo
mov dword [0x50f050], eax
call esi
push str..Settings.ini
push 0x32
push 0x510374
push 0x4289a0
push str.Serial
push str.SilentGameGuardInfo
call esi
push str..Settings.ini
push 0x32
push 0x510340
push 0x4289a0
push str.Email
push str.SilentGameGuardInfo
call esi
push str..Settings.ini
push 0x24
push 0x50ff1c
push 0x4289a0
push str.HardwareId
push str.SilentGameGuardInfo
call esi
mov ecx, 0x50ff1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407a22
sub ecx, edx
je 0x407cdc
mov ecx, 0x510374
mov dword [esp + 0x48], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0xf
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407a51
sub ecx, edx
push ecx
push 0x510374
lea ecx, [esp + 0x50]
call fcn.00401960
lea edx, [esp + 0x48]
lea ecx, [esp + 0x10]
call fcn.0041b240
mov edx, dword [esp + 0x5c]
cmp edx, 0x10
jb 0x407aae
mov ecx, dword [esp + 0x48]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407aa4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407aa4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.0042458e
add esp, 8
push 4
mov ecx, 0x434130
call fcn.00402380
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x40b450
push 1
push 0
call edi
push str.._Settings.ini
push 0
push str.AutoUnBlock
push str.SilentGameGuardInfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
cmp eax, 1
jne 0x407afe
push 0
push 0
push 0
push 0x40b220
push 0
push 0
call edi
lea eax, [esp + 0x208]
push str.Silent_GameGuard_Mu_Online_AntiHack_Server_Load_Settings__Version_Release_1.0.32_R6_Build_:_10_12_2023_
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 8
lea eax, [esp + 0x208]
push eax
push dword [0x5103d4]
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [0x5103d4]
push str.Logs
push 1
mov dword [0x50a86c], eax
call fcn.0040f610
push str.LogsHack_Logs
push 1
call fcn.0040f610
push str.LogsAttack_Logs
push 2
call fcn.0040f610
lea eax, [esp + 0x78]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
test eax, eax
jne 0x407bd7
movzx eax, word [0x50f04c]
push eax
call fcn.004188b0
test al, al
je 0x407bed
cmp byte [0x434168], 0
je 0x407ba5
push 0
push 0
push 0
push 0x40b080
push 0
push 0
call edi
mov ecx, 0x50efe8
call fcn.00417cd0
push 0
push 0x3e8
push 0x64
push dword [0x5103d4]
call esi
push 0
push 0x1388
push 0x66
push dword [0x5103d4]
call esi
push 0
push 1
push 0x67
push dword [0x5103d0]
call esi
jmp 0x407bed
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.WSAStartup___failed_with_error:__d
push 1
call fcn.0041a050
add esp, 0xc
call fcn.00417aa0
push 0
push 0x7d0
push 0x65
push dword [0x5103d4]
call esi
push 0x6d
push ebx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
mov dword [esp + 0x14], eax
lea eax, [esp + 0x34]
push 0
push eax
call esi
test eax, eax
je 0x407c69
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageA]
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x10]
push dword [esp + 0x34]
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x407c58
lea eax, [esp + 0x2c]
push eax
call edi
lea eax, [esp + 0x2c]
push eax
call ebx
push 0
push 0
push 0
lea eax, [esp + 0x38]
push eax
call esi
test eax, eax
jne 0x407c33
push dword [0x5104b4]
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push dword [esp + 0x18]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x34]
push dword [eax + 4]
lea eax, [esp + 0x14]
push eax
mov ecx, eax
call fcn.0040bc30
push 0x40
push dword [esp + 0x14]
call fcn.0042458e
mov ecx, dword [esp + 0x314]
add esp, 8
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00424550
mov esp, ebp
pop ebp
ret 0x10
push 0x1388
sub esp, 8
mov edx, str.Warning:_Hosts_file_has_been_modified_to_include_the_target_IP
push str.Silent_GameGuard_include_the_target_IP_on_hosts_file
call fcn.00410340
add esp, 0x10
call fcn.004029b0
mov ecx, 0x434130
call fcn.00401f40
push 0
push 0x408c10
push dword [0x5103d4]
push 0x89
push dword [0x510444]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
call fcn.004029b0
int3