Function at 0x5afdc0
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x664960
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp byte [esi + 0x320e], bl
jne 0x5afec7
mov eax, dword [esi + 0xc8]
lea edi, [esi + 0x1a0]
cmp dword [eax + 0x24], 5
jne 0x5afe1d
push 1
push edi
call fcn.005ac3b0
jmp 0x5afe2d
push ebx
push 1
push edi
mov ecx, dword [esi + 0x31f8]
push ecx
call sub.WS2_32.dll_recv
push str.recv_first_byte
push eax
mov ecx, esi
call fcn.00562650
mov ecx, eax
cmp ecx, ebx
je 0x5afe5f
mov eax, ecx
sub eax, 0x2733
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [esi + 0x320e], 1
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
movsx edx, byte [edi]
push edx
push str.recv_handshake__type___02X_n
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, esi
call fcn.00561d40
mov ecx, esi
call fcn.005a9e50
test eax, eax
je 0x5afebc
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
cmp dword [esi + 0x3220], ebx
jne 0x5afee2
push 0x600
call fcn.005f4522
add esp, 4
mov dword [esi + 0x3220], eax
cmp dword [esi + 0x3224], ebx
jne 0x5afefd
push 0x600
call fcn.005f4522
add esp, 4
mov dword [esi + 0x3224], eax
mov ecx, dword [esi + 0x3220]
cmp ecx, ebx
je 0x5b0198
cmp dword [esi + 0x3224], ebx
je 0x5b0198
cmp byte [esi + 0x320f], bl
jne 0x5afffd
mov edx, dword [esi + 0xc8]
mov eax, dword [esi + 0x322c]
cmp dword [edx + 0x24], 5
mov edx, 0x600
jne 0x5aff49
sub edx, eax
push edx
add eax, ecx
push eax
mov ecx, esi
call fcn.005ac3b0
jmp 0x5aff5c
push ebx
sub edx, eax
push edx
add eax, ecx
push eax
mov eax, dword [esi + 0x31f8]
push eax
call sub.WS2_32.dll_recv
mov edi, eax
push str.recv_handshake_p1
push edi
mov ecx, esi
call fcn.00562650
mov ecx, eax
cmp ecx, ebx
jne 0x5afe40
add dword [esi + 0x322c], edi
cmp dword [esi + 0x322c], 0x600
jl 0x5afea8
mov byte [esi + 0x320f], 1
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 2
mov ecx, dword [esi + 0x3220]
mov eax, dword [ecx]
push eax
call sub.WS2_32.dll_ntohl
mov ecx, dword [esi + 0x3220]
movsx edx, byte [ecx + 7]
push edx
movsx edx, byte [ecx + 6]
push edx
movsx edx, byte [ecx + 5]
push edx
movsx ecx, byte [ecx + 4]
push ecx
push eax
push str.Server_time:__ld_nVersion:__d._d._d._d_n
lea edx, [ebp - 0x14]
push edx
call fcn.00402f80
add esp, 0x1c
mov eax, dword [ebp - 0x14]
push eax
mov ecx, esi
call fcn.00561d40
mov ecx, esi
call fcn.005a9e50
test eax, eax
jne 0x5afe9d
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
mov ecx, dword [esi + 0xc8]
mov eax, dword [esi + 0x3230]
mov edx, 0x600
sub edx, eax
cmp dword [ecx + 0x24], 5
mov ecx, dword [esi + 0x3224]
jne 0x5b0029
push edx
add ecx, eax
push ecx
mov ecx, esi
call fcn.005ac3b0
jmp 0x5b003a
push ebx
push edx
add ecx, eax
push ecx
mov edx, dword [esi + 0x31f8]
push edx
call sub.WS2_32.dll_recv
mov edi, eax
push str.recv_handshake_p2
push edi
mov ecx, esi
call fcn.00562650
mov ecx, eax
cmp ecx, ebx
jne 0x5afe40
add dword [esi + 0x3230], edi
mov eax, 0x600
cmp dword [esi + 0x3230], eax
jl 0x5afea8
mov edx, dword [esi + 0x3224]
mov ecx, dword [esi + 0x3228]
inc ecx
cmp eax, 4
jb 0x5b00c1
mov edi, dword [ecx]
cmp edi, dword [edx]
jne 0x5b008d
sub eax, 4
add edx, 4
add ecx, 4
jmp 0x5b0077
movzx eax, byte [ecx]
movzx edi, byte [edx]
sub eax, edi
jne 0x5b00b9
movzx eax, byte [ecx + 1]
movzx edi, byte [edx + 1]
sub eax, edi
jne 0x5b00b9
movzx eax, byte [ecx + 2]
movzx edi, byte [edx + 2]
sub eax, edi
jne 0x5b00b9
movzx eax, byte [ecx + 3]
movzx ecx, byte [edx + 3]
sub eax, ecx
sar eax, 0x1f
or eax, 1
jmp 0x5b00c3
xor eax, eax
cmp eax, ebx
sete al
cmp al, bl
jne 0x5b00d8
push str.Part2_of_server_handshake_does_not_match__n
mov ecx, esi
call fcn.00561d40
mov edx, dword [esi + 0xc8]
cmp dword [edx + 0x24], 5
jne 0x5b00ed
mov ecx, esi
call fcn.005ad7f0
jmp 0x5b0113
push str.send_handshake_2_
push ebx
push 0x600
mov eax, dword [esi + 0x3220]
push eax
mov ecx, dword [esi + 0x31f8]
push ecx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.00562650
cmp eax, ebx
jne 0x5b01cc
mov byte [ebp - 4], 3
mov eax, dword [esi + 0x3228]
push eax
call fcn.005f4517
mov eax, dword [esi + 0x3220]
push eax
call fcn.005f4517
mov eax, dword [esi + 0x3224]
push eax
call fcn.005f4517
add esp, 0xc
mov dword [ebp - 4], ebx
jmp 0x5b015d
mov dword [esi + 0x3228], ebx
mov dword [esi + 0x3220], ebx
mov dword [esi + 0x3224], ebx
mov edx, dword [esi + 0xc8]
cmp dword [edx + 0x24], 5
je 0x5afea8
mov ecx, esi
call fcn.005ad7f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret