Function at 0x402ec0
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
sub esp, 0xa4
mov eax, dword [0x44eea4]
xor eax, esp
mov dword [esp + 0xa0], eax
movzx eax, word [esp + 0xb0]
add eax, 0xffffffff
cmp eax, 0x1f
ja case.0x402eef.1
movzx eax, byte [eax + 0x403184]
jmp dword [eax*4 + 0x403170]
mov ecx, dword [0x44f1b4]
push 0
push 0
push ecx
mov byte [0x44f1af], 2
call sub.WSOCK32.dll_accept
cmp eax, 0xffffffff
mov dword [0x44f46c], eax
jne 0x402f57
push 0
push str.Error
push str.Accpet___Error
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov edx, dword [0x44f46c]
push edx
call sub.WSOCK32.dll_closesocket
mov eax, dword [0x44f1b4]
push eax
call sub.WSOCK32.dll_closesocket
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004451a2
add esp, 0xa4
ret
mov ecx, dword [0x44f1b4]
push ebp
push esi
push edi
push ecx
call sub.WSOCK32.dll_closesocket
mov edx, dword [0x44f46c]
push 0
push 0xe
push str.u_can_connect
push edx
call sub.WSOCK32.dll_send
push 0x4d
lea eax, [esp + 0x10]
push 0
push eax
call sub.MSVCR80.dll_memset
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0xc
push 0xbb8
call ebp
mov edx, dword [0x44f46c]
push 0
push 0x4d
lea ecx, [esp + 0x14]
push ecx
push edx
call sub.WSOCK32.dll_recv
push 0x1f4
call ebp
mov ecx, 0x13
mov esi, str.1111000000000000000000000000000000000000000000000000000000000000000000000000
lea edi, [esp + 0x5c]
rep movsd dword es:[edi], dword [esi]
push 0x2d
lea eax, [esp + 0x80]
push 0x5f
push eax
movsb byte es:[edi], byte [esi]
call sub.MSVCR80.dll_memset
add esp, 0xc
xor esi, esi
lea esp, [esp]
lea eax, [esi + 0x44fcc0]
mov ecx, esi
sub ecx, eax
lea edx, [esp + ecx + 0x7c]
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, 1
test cl, cl
jne 0x402ff0
add esi, 0xb
cmp esi, 0x2c
jl 0x402fe0
xor eax, eax
cmp byte [esp + eax + 0x7c], 0
jne 0x403012
mov byte [esp + eax + 0x7c], 0x5f
add eax, 1
cmp eax, 0x2c
jl 0x403006
mov eax, dword [0x44f46c]
push 0
push 0x4d
lea edx, [esp + 0x64]
push edx
push eax
mov byte [esp + 0xb8], 0
call sub.WSOCK32.dll_send
push 0x1f4
call ebp
mov ecx, dword [0x44f46c]
push 0
push 0xbb9
push 0x44ff90
push ecx
call sub.WSOCK32.dll_send
pop edi
mov al, 0x31
pop esi
or ecx, 0xffffffff
cmp byte [esp + 4], al
mov dword [0x450b4c], 1
mov dword [0x450b50], 2
mov dword [0x450b54], 3
mov dword [0x450b58], 4
pop ebp
jne 0x403091
mov dword [0x450b4c], ecx
cmp byte [esp + 1], al
jne 0x40309d
mov dword [0x450b50], ecx
cmp byte [esp + 2], al
jne 0x4030a9
mov dword [0x450b54], ecx
cmp byte [esp + 3], al
jne 0x4030b5
mov dword [0x450b58], ecx
cmp byte [esp + 4], al
jne 0x4030c1
mov dword [0x450b5c], ecx
cmp byte [esp + 5], al
jne 0x4030cd
mov dword [0x450b60], ecx
cmp byte [esp + 6], al
jne 0x4030d9
mov dword [0x450b64], ecx
cmp byte [esp + 7], al
jne 0x4030e5
mov dword [0x450b68], ecx
xor eax, eax
jmp 0x4030f0
mov cl, byte [esp + eax + 0x20]
cmp cl, 0x5f
mov byte [eax + 0x44fcec], cl
jne 0x403106
mov byte [eax + 0x44fcec], 0
add eax, 1
cmp eax, 0x2c
jl 0x4030f0
mov byte [0x44f1ae], 1
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004451a2
add esp, 0xa4
ret
push 0
push str.Handle_Message
push str.FD_CONNECT
jmp 0x403152
push 0
push str.Handle_Message
push str.FD_READ
jmp 0x403152
push 0
push str.Handle_Message
push str.FD_CLOSE
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [esp + 0xa0]
xor ecx, esp
call fcn.004451a2
add esp, 0xa4
ret