Function at 0x4203c0
Capabilities:
Access peb ldr_data
Send data
Send data on socket

Disassembly:
push 0xffffffffffffffff
push 0x58a1d5
mov eax, dword fs:[0]
push eax
sub esp, 0x654
mov eax, dword [0x5f4760]
xor eax, esp
mov dword [esp + 0x650], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5f4760]
xor eax, esp
push eax
lea eax, [esp + 0x668]
mov dword fs:[0], eax
mov esi, dword [esp + 0x67c]
mov edi, dword [esp + 0x680]
mov eax, dword [esp + 0x684]
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], edi
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x28], edx
xor ebx, ebx
mov dword [esp + 0x670], ebx
lea eax, [esp + 0x2c]
push eax
call fcn.00462370
mov byte [esp + 0x670], 1
mov ecx, dword [esp + 0x678]
add ecx, 0xc
push ecx
lea eax, [esp + 0x30]
call fcn.00414420
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov edx, ecx
sub edx, eax
jne 0x42046e
call fcn.004a35f3
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
sub ecx, eax
mov dword [esp + 0x24], eax
cmp ecx, 3
jb 0x420939
mov dl, byte [eax + 1]
lea ebp, [eax + 1]
cmp dl, 1
jb 0x420939
movzx edx, dl
add edx, 2
cmp ecx, edx
jb 0x420939
cmp byte [eax], 5
je 0x4204d7
mov dword [edi], 2
movzx eax, byte [eax]
mov dword [esi], eax
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x2c]
push ecx
call fcn.004264d0
mov dword [esp + 0x670], 0xffffffff
lea eax, [esp + 0x678]
call fcn.0042d520
jmp 0x420992
mov edx, dword [esp + 0x678]
add edx, 0xc
push edx
call fcn.00414c50
movzx edx, byte [ebp]
add esp, 4
xor esi, esi
xor edi, edi
xor eax, eax
cmp edx, ebx
jle 0x420527
jmp 0x420500
mov ecx, dword [esp + 0x24]
mov cl, byte [ecx + eax + 2]
cmp cl, bl
jne 0x420513
mov esi, 1
jmp 0x42051d
cmp cl, 2
jne 0x42051d
mov edi, 1
cmp eax, 0xa
jg 0x420527
inc eax
cmp eax, edx
jl 0x420500
mov byte [esp + 0x1c], 5
mov byte [esp + 0x1d], bl
cmp esi, ebx
jne 0x4205a2
cmp edi, ebx
jne 0x4205a2
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov dword [edx], 3
movzx eax, byte [ebp]
mov dword [ecx], eax
mov byte [esp + 0x670], bl
lea edx, [esp + 0x2c]
push edx
call fcn.004264d0
mov dword [esp + 0x670], 0xffffffff
mov eax, dword [esp + 0x678]
cmp eax, ebx
je 0x420992
mov esi, eax
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x420992
cmp esi, ebx
je 0x420992
mov eax, dword [esi]
mov edx, dword [eax]
push 1
mov ecx, esi
call edx
jmp 0x420992
cmp byte [0x603f3a], bl
jne 0x4205c1
mov byte [esp + 0x1d], bl
cmp esi, ebx
jne 0x4205e5
mov eax, dword [esp + 0x18]
mov dword [eax], 4
jmp 0x4204aa
mov byte [esp + 0x1d], 2
cmp edi, ebx
jne 0x4205e5
mov edx, dword [esp + 0x18]
mov dword [edx], 5
mov byte [esp + 0x670], bl
lea eax, [esp + 0x2c]
push eax
jmp 0x4204b6
mov ecx, dword [esp + 0x678]
mov eax, dword [ecx + 8]
push ebx
push 2
lea edx, [esp + 0x24]
push edx
push eax
call dword [sym.imp.WS2_32.dll_send]
or ebp, 0xffffffff
cmp eax, ebp
jne 0x420644
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [ecx], eax
mov dword [edx], 6
mov byte [esp + 0x670], bl
lea eax, [esp + 0x2c]
push eax
call fcn.004264d0
mov dword [esp + 0x670], ebp
lea eax, [esp + 0x678]
call fcn.0042d520
jmp 0x420992
mov al, byte [esp + 0x1d]
mov edx, dword [esp + 0x28]
movsx ecx, al
mov dword [edx], ecx
cmp al, 2
jne 0x420928
push 0x101
lea eax, [esp + 0x458]
push ebx
push eax
call fcn.004add60
add esp, 0xc
push 0x101
lea ecx, [esp + 0x560]
push ebx
push ecx
call fcn.004add60
add esp, 0xc
push 0x402
lea edx, [esp + 0x50]
push ebx
push edx
call fcn.004add60
add esp, 0xc
push 1
lea eax, [esp + 0x28]
push eax
mov eax, dword [esp + 0x680]
lea ecx, [esp + 0x1c]
push ecx
push 0x402
lea edx, [esp + 0x5c]
push edx
lea edi, [esp + 0x3c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
call fcn.00413d40
mov edi, dword [esp + 0x28]
test eax, eax
mov al, byte [esp + 0x14]
je 0x4208f4
cmp al, bl
jne 0x4208f4
cmp edi, ebx
je 0x4208f4
mov al, byte [esp + 0x4c]
cmp al, 1
je 0x420732
cmp al, 5
je 0x420732
mov ecx, dword [esp + 0x18]
movzx edx, al
mov eax, dword [esp + 0x20]
mov dword [ecx], 8
mov dword [eax], edx
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x2c]
push ecx
call fcn.004264d0
mov dword [esp + 0x670], ebp
lea eax, [esp + 0x678]
call fcn.0042d520
jmp 0x420992
mov al, byte [esp + 0x4d]
cmp al, bl
je 0x4208df
movzx esi, al
lea edx, [esi + 3]
cmp edi, edx
jb 0x4208ca
push esi
lea eax, [esp + 0x52]
push eax
lea ecx, [esp + 0x45c]
push ecx
call fcn.004ad550
movzx eax, byte [esp + esi + 0x5a]
add esp, 0xc
cmp eax, ebx
je 0x4208b5
lea edx, [esi + eax + 3]
cmp edi, edx
jb 0x4208a0
push eax
lea eax, [esp + esi + 0x53]
push eax
lea ecx, [esp + 0x564]
push ecx
call fcn.004ad550
add esp, 0xc
mov byte [esp + 0x14], 5
lea ecx, [esp + 0x454]
mov eax, 0x603f3a
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4207c2
cmp dl, bl
je 0x4207be
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4207c2
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4207a2
xor eax, eax
jmp 0x4207c6
sbb eax, eax
sbb eax, ebp
cmp eax, ebx
jne 0x420802
lea ecx, [esp + 0x55c]
mov eax, 0x604066
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4207f6
cmp dl, bl
je 0x4207f2
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4207f6
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x4207d6
xor eax, eax
jmp 0x4207fa
sbb eax, eax
sbb eax, ebp
mov byte [esp + 0x15], bl
cmp eax, ebx
je 0x420807
mov byte [esp + 0x15], 0xff
mov edx, dword [esp + 0x678]
mov eax, dword [edx + 8]
push ebx
push 2
lea ecx, [esp + 0x1c]
push ecx
push eax
call dword [sym.imp.WS2_32.dll_send]
cmp eax, ebp
jne 0x42083f
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, dword [esp + 0x20]
mov dword [edx], eax
mov eax, dword [esp + 0x18]
mov dword [eax], 0xc
jmp 0x420709
cmp byte [esp + 0x15], 0xff
jne 0x420872
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov dword [edx], 0xb
xor eax, eax
cmp byte [0x604066], bl
setne al
mov dword [ecx], eax
mov byte [esp + 0x670], bl
lea edx, [esp + 0x2c]
push edx
jmp 0x420715
mov byte [esp + 0x670], bl
lea eax, [esp + 0x2c]
push eax
call fcn.004264d0
mov dword [esp + 0x670], ebp
lea eax, [esp + 0x678]
call fcn.0042d520
mov eax, 1
jmp 0x420994
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov dword [ecx], 0x12
mov dword [edx], eax
jmp 0x42061b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov dword [ecx], 0xa
mov dword [edx], ebx
jmp 0x42061b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov dword [ecx], 0x11
mov dword [edx], esi
jmp 0x42061b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x20]
mov dword [ecx], 9
mov dword [edx], ebx
jmp 0x42061b
mov ecx, dword [esp + 0x44]
movzx edx, al
mov eax, dword [esp + 0x48]
mov dword [ecx], edi
mov ecx, dword [esp + 0x18]
mov dword [eax], edx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov dword [ecx], 7
mov dword [eax], edx
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x2c]
push ecx
jmp 0x420627
mov byte [esp + 0x670], bl
lea edx, [esp + 0x2c]
push edx
jmp 0x42087e
movzx eax, byte [eax + 1]
imul eax, eax, 0xf4240
add eax, ecx
mov dword [esi], eax
mov dword [edi], 1
mov byte [esp + 0x670], bl
lea ecx, [esp + 0x2c]
push ecx
call fcn.004264d0
mov dword [esp + 0x670], 0xffffffff
mov eax, dword [esp + 0x678]
cmp eax, ebx
je 0x420992
mov esi, eax
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x420992
cmp esi, ebx
je 0x420992
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
xor eax, eax
mov ecx, dword [esp + 0x668]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x650]
xor ecx, esp
call fcn.004a314d
add esp, 0x660
ret