Function at 0x4055c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4252ef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x81c
push ebx
push ebp
push esi
push edi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xfffffffffffffff5
call esi
push 0xfffffffffffffff6
mov dword [0x4324c0], eax
call esi
or ebx, 0xffffffff
mov dword [0x4324c4], eax
mov edi, str.logon.exe_is_heart_beat_version_n
mov ecx, ebx
xor eax, eax
xor ebp, ebp
repne scasb al, byte es:[edi]
mov eax, dword [0x4324c0]
push ebp
not ecx
dec ecx
push ebp
push ecx
push str.logon.exe_is_heart_beat_version_n
push eax
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push 0x4324d8
call fcn.00405ea0
add esp, 4
push str.Please_waiting_for_a_moment_..._n
call fcn.00407b20
mov cl, byte [esp + 0x17]
add esp, 4
mov byte [esp + 0x38], cl
lea ecx, [esp + 0x38]
push ebp
call fcn.004040c0
mov dl, byte [esp + 0x13]
push ebp
lea ecx, [esp + 0x18]
mov dword [esp + 0x838], ebp
mov byte [esp + 0x18], dl
call fcn.004040c0
mov al, byte [esp + 0x13]
push ebp
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
mov byte [esp + 0x28], al
call fcn.004040c0
lea ecx, [esp + 0x13]
mov byte [esp + 0x834], 2
push ecx
lea ecx, [esp + 0x4c]
call fcn.00406b10
lea edx, [esp + 0x37]
lea ecx, [esp + 0x58]
push edx
mov byte [esp + 0x838], 3
call fcn.00406b10
mov esi, dword [esp + 0x83c]
mov byte [esp + 0x834], 4
cmp esi, ebp
jle 0x405d2f
cmp esi, 2
jle 0x40576f
cmp esi, 4
jne 0x405d2f
mov esi, dword [esp + 0x840]
mov ecx, ebx
xor eax, eax
mov edx, dword [esi + 4]
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x40]
call fcn.00404520
mov edx, dword [esi + 8]
mov ecx, ebx
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.00404520
mov esi, dword [esi + 0xc]
mov ecx, ebx
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x2c]
call fcn.00404520
mov eax, dword [0x4271a0]
lea ecx, [esp + 0x38]
push eax
push ebp
push ecx
lea ecx, [esp + 0x54]
call fcn.00404850
mov edx, dword [0x4271a0]
lea eax, [esp + 0x24]
push edx
push ebp
push eax
lea ecx, [esp + 0x64]
call fcn.00404850
mov eax, dword [0x4324d0]
lea ecx, [esp + 0x48]
push ecx
push eax
mov ecx, 0x4324c8
call fcn.00406b30
jmp 0x4057f3
call fcn.004062c0
test eax, eax
je 0x405792
push str.GetMatchAcIP_fail_n
call fcn.00407b20
add esp, 4
mov byte [esp + 0x834], 5
jmp 0x405d54
mov edi, str.1773
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.1773
lea ecx, [esp + 0x1c]
call fcn.00404520
cmp esi, 2
jne 0x4057f3
mov edx, dword [esp + 0x840]
mov ecx, esi
mov edi, 0x42db98
xor eax, eax
mov esi, dword [edx + 4]
repe cmpsb byte [esi], byte es:[edi]
je 0x4057cf
sbb eax, eax
sbb eax, ebx
cmp eax, ebp
jne 0x4057f3
push ebp
push 3
push str.try_d__recv_d_n
mov dword [0x42d9d4], 3
mov dword [0x42d9d8], ebp
call fcn.00407b20
add esp, 0xc
push str.Load_finished..._n
call fcn.00407b20
mov eax, dword [esp + 0x1c]
add esp, 4
cmp eax, ebp
jne 0x40580d
mov eax, 0x4271ac
push eax
call fcn.0040aef9
mov ebp, eax
add esp, 4
test bp, bp
jne 0x4058a6
push 0xa4
push str._nERR:_command_params_format:_ip_port_key__ERR_NO:__d__n
call fcn.00407b20
add esp, 8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 7
call fcn.004040c0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.004040c0
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.004040c0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.004040c0
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.004040c0
mov eax, 0xfffffffd
jmp 0x405dac
push str.Check_PORT..._n
call fcn.00407b20
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x230]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x330]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x430]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x530]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x630]
rep stosd dword es:[edi], eax
mov ecx, 0x40
lea edi, [esp + 0x730]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x230]
push eax
call fcn.004084f0
add esp, 8
test eax, eax
je 0x405942
push eax
push 0xb0
push str._nERR_LINE:__d_Get_logins_info_failed__Ret:__d_n
call fcn.00407b20
add esp, 0xc
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 8
jmp 0x4059a9
push str.GET_HOST_AD__UserName__SOURCE..._n
call fcn.00407b20
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x131]
mov byte [esp + 0x130], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x130]
push 0x100
push ecx
stosb byte es:[edi], al
call fcn.004088c0
add esp, 0xc
test eax, eax
je 0x405a06
push 0xbb
push str._nERR:_Get_hostname_failed__ERR_NO:__d_n
call fcn.00407b20
add esp, 8
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 9
push 1
lea ecx, [esp + 0x5c]
call fcn.004040c0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.004040c0
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.004040c0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.004040c0
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.004040c0
xor eax, eax
jmp 0x405dac
push 0x42daa8
call fcn.00407b20
lea edx, [esp + 0x630]
lea eax, [esp + 0x130]
push edx
lea ecx, [esp + 0x234]
push eax
push ecx
call fcn.00408950
add esp, 0x10
mov esi, eax
push esi
push str._n_winslogonMethod___d__n
call fcn.00407b20
add esp, 8
cmp esi, 1
je 0x405a6f
push 0xc8
push str._nERR:_Logon_method_is_err__ERR_NO:__d_n
call fcn.00407b20
add esp, 8
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 0xa
jmp 0x405d54
push 0x42daa8
call fcn.00407b20
lea edx, [esp + 0x7c]
push edx
call fcn.00408a50
add esp, 8
push str.Send_login_info..._n
call fcn.00407b20
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x8c]
add esp, 4
rep stosd dword es:[edi], eax
mov ecx, 0x10
lea edi, [esp + 0xc8]
rep stosd dword es:[edi], eax
mov ecx, 6
lea edi, [esp + 0x10c]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea edi, [esp + 0x22c]
mov ecx, ebx
xor eax, eax
lea edx, [esp + 0x88]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xcc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
mov word [esp + 0x6c], 2
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x80]
lea edi, [esp + 0x330]
mov dword [esp + 0x12c], ecx
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [esp + 0x10c], 1
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call sub.WS2_32.dll_htons
mov esi, dword [0x4324cc]
mov word [esp + 0x6a], ax
cmp esi, dword [0x4324d0]
je 0x405c40
mov eax, dword [esi + 0x14]
xor edi, edi
cmp eax, edi
mov ecx, 0x4271ac
je 0x405b61
mov ecx, eax
mov eax, dword [esi + 4]
cmp eax, edi
jne 0x405b6d
mov eax, 0x4271ac
push ecx
push eax
push str.sinforIP_s__key_s_n
call fcn.00407b20
mov eax, dword [esi + 0x14]
add esp, 0xc
cmp eax, edi
jne 0x405b88
mov eax, 0x4271ac
push 0x18
lea ecx, [esp + 0x110]
push eax
push ecx
call fcn.0040ad70
mov eax, dword [esi + 4]
add esp, 0xc
cmp eax, edi
jne 0x405ba7
mov eax, 0x4271ac
push eax
call sub.WS2_32.dll_inet_addr
mov dword [esp + 0x6c], eax
lea edx, [esp + 0x88]
lea eax, [esp + 0x78]
push edx
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.00406800
add esp, 0xc
test eax, eax
jne 0x405bee
push str.Logon_complete__n
call fcn.00407b20
mov eax, dword [0x4324d0]
add esi, 0x20
add esp, 4
cmp esi, eax
jne 0x405b51
jmp 0x405c42
push str.Logon_Failed__n
call fcn.00407b20
add esp, 4
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 0xb
call fcn.004040c0
mov ecx, dword [esp + 0x4c]
cmp ecx, edi
je 0x405c32
mov al, byte [ecx - 1]
test al, al
je 0x405c28
cmp al, 0xff
je 0x405c28
dec al
mov byte [ecx - 1], al
jmp 0x405c32
dec ecx
push ecx
call fcn.0040a3f2
add esp, 4
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], edi
jmp 0x405ca2
xor edi, edi
mov eax, dword [esp + 0x83c]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp eax, 4
jne 0x405c75
push 0x3e8
call esi
lea edx, [esp + 0x88]
lea eax, [esp + 0x78]
push edx
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.004065c0
add esp, 0xc
push 0xbb8
call esi
push 1
lea ecx, [esp + 0x5c]
mov byte [esp + 0x838], 0xc
call fcn.004040c0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.004040c0
mov ecx, dword [esp + 0x28]
cmp ecx, edi
je 0x405cc6
mov al, byte [ecx - 1]
test al, al
je 0x405cbc
cmp al, 0xff
je 0x405cbc
dec al
mov byte [ecx - 1], al
jmp 0x405cc6
dec ecx
push ecx
call fcn.0040a3f2
add esp, 4
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x28], edi
cmp ecx, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
je 0x405cf6
mov al, byte [ecx - 1]
test al, al
je 0x405cec
cmp al, 0xff
je 0x405cec
dec al
mov byte [ecx - 1], al
jmp 0x405cf6
dec ecx
push ecx
call fcn.0040a3f2
add esp, 4
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x18], edi
cmp ecx, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
je 0x405d2b
mov al, byte [ecx - 1]
test al, al
je 0x405d21
cmp al, 0xff
je 0x405d21
dec al
mov byte [ecx - 1], al
xor eax, eax
jmp 0x405dac
dec ecx
push ecx
call fcn.0040a3f2
add esp, 4
xor eax, eax
jmp 0x405dac
push 0x97
push str._nERR:_command_params_format:_ip_port_key__ERR_NO:_d__n
call fcn.00407b20
add esp, 8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [esp + 0x834], 6
push 1
lea ecx, [esp + 0x5c]
call fcn.004040c0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x838], 2
call fcn.004040c0
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x838], 1
call fcn.004040c0
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x838], 0
call fcn.004040c0
push 1
lea ecx, [esp + 0x3c]
mov dword [esp + 0x838], ebx
call fcn.004040c0
mov eax, ebx
mov ecx, dword [esp + 0x82c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x828
ret