Function at 0x436670
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Get socket status
Receive data
Receive data on socket
Resolve function by parsing pe exports
Send data
Send data on socket
Set socket configuration

Disassembly:
mov eax, dword [esp + 4]
test eax, eax
jne 0x43667e
mov eax, 5
ret
mov ecx, dword [eax]
cmp ecx, 3
ja case.0x436685.0
jmp dword [ecx*4 + 0x4366ac]
mov dword [esp + 4], eax
jmp 0x4367f0
mov dword [esp + 4], eax
jmp 0x4366c0
mov dword [esp + 4], eax
jmp 0x436d40
xor eax, eax
ret
sub esp, 0x6fc
push ebx
xor ebx, ebx
push esi
mov esi, dword [esp + 0x708]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 8], 0x10
mov eax, dword [esi + 0x88]
lea ecx, [esp + 0xc]
push ecx
push ebx
lea edx, [esp + 0x2c]
push ebx
push edx
push 0x40
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 1
call sub.WSOCK32.dll_select
cmp eax, 0xffffffff
je 0x4367a7
cmp eax, ebx
je 0x4367a7
lea eax, [esp + 8]
lea ecx, [esp + 0x14]
push eax
mov eax, dword [esi + 0x88]
push ecx
push ebx
lea edx, [esp + 0x134]
push 0x5db
push edx
push eax
call sub.WSOCK32.dll_recvfrom
cmp eax, 0xffffffff
je 0x4366e1
lea ecx, [esp + 0x128]
push str._final_
push ecx
mov byte [esp + 0x70b], bl
call fcn.00533820
add esp, 8
test eax, eax
je 0x4366e1
mov edx, dword [esp + 0x16]
push edx
call sub.WSOCK32.dll_ntohs
and eax, 0xffff
push eax
mov eax, dword [esp + 0x1c]
push eax
push esi
call fcn.00436360
add esp, 0xc
cmp eax, 0xffffffff
jne 0x4366e1
mov ecx, dword [esp + 0x16]
push 5
push ecx
call sub.WSOCK32.dll_ntohs
mov edx, dword [esp + 0x1c]
push eax
push edx
push esi
call fcn.00436310
add esp, 0x10
jmp 0x4366e1
call sub.KERNEL32.dll_GetTickCount
sub eax, dword [esi + 0x8c]
cmp eax, 0xbb8
jbe 0x4367da
mov eax, dword [esi + 0x88]
push eax
call sub.WSOCK32.dll_closesocket
push 3
push esi
mov dword [esi + 0x88], 0xffffffff
call fcn.00436170
add esp, 8
pop esi
xor eax, eax
pop ebx
add esp, 0x6fc
ret
sub esp, 0x10c
push ebx
mov ebx, dword [esp + 0x114]
push ebp
push esi
mov eax, dword [ebx + 0x88]
push edi
lea ecx, [esp + 0x10]
xor edi, edi
push ecx
push edi
lea edx, [esp + 0x20]
push edi
push edx
push 0x40
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 1
call sub.WSOCK32.dll_select
test eax, eax
jg 0x436841
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10c
ret
mov eax, dword [0x593430]
mov ecx, 0x7ff
sub ecx, eax
push edi
lea edx, [eax + 0x592bd8]
mov eax, dword [ebx + 0x88]
push ecx
push edx
push eax
call sub.WSOCK32.dll_recv
mov esi, eax
or ebp, 0xffffffff
cmp esi, ebp
je 0x436abb
cmp esi, edi
je 0x436abb
cmp dword [ebx + 0x55c], ebp
je 0x43689c
mov ecx, dword [0x593430]
push esi
lea eax, [ebx + 0x9c]
lea edx, [ecx + 0x592bd8]
push edx
push eax
call fcn.00437a30
add esp, 0xc
mov eax, dword [0x593430]
add eax, esi
mov esi, 0x592bd8
mov dword [0x593430], eax
mov ecx, dword [ebx + 0x55c]
cmp ecx, ebp
jne 0x436952
movsx ecx, byte [0x592bd8]
xor ecx, 0xec
cmp eax, ecx
jle 0x436946
mov al, byte [0x592bd8]
lea esi, [ebx + 0x2c]
xor al, 0xec
mov edi, esi
mov byte [0x592bd8], al
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
test edi, edi
jle 0x436902
mov dl, byte [esi + eax]
mov cl, byte [eax + 0x592bd9]
xor cl, dl
mov byte [eax + 0x592bd9], cl
inc eax
cmp eax, edi
jl 0x4368ec
movsx eax, byte [0x592bd8]
lea edi, [ebx + 0x9c]
push edi
push eax
push 0x592bd9
call fcn.00437980
movsx esi, byte [0x592bd8]
mov ecx, dword [0x593430]
add esi, 0x592bd9
sub ecx, esi
add ecx, 0x592bd8
push ecx
push esi
push edi
call fcn.00437a30
mov eax, dword [0x593430]
add esp, 0x18
cmp dword [ebx + 0x55c], ebp
je 0x436a91
mov edx, esi
lea ecx, [eax - 6]
sub edx, 0x592bd8
cmp edx, ecx
jg 0x436a91
jmp 0x43696a
or ebp, 0xffffffff
push 7
push str._final_
push esi
call fcn.005354d0
add esp, 0xc
test eax, eax
je 0x436a30
mov eax, dword [ebx + 0x74]
test eax, eax
jne 0x436a30
mov eax, dword [0x593430]
cmp eax, 6
jl 0x436a91
mov ecx, dword [ebx + 0x90]
cmp ecx, 6
je 0x4369f3
cmp ecx, 7
je 0x4369f3
mov edi, dword [esi]
mov edx, dword [ebx + 0x98]
mov bp, word [esi + 4]
add esi, 4
push edx
push ebp
add esi, 2
call sub.WSOCK32.dll_ntohs
and eax, 0xffff
push eax
push edi
push ebx
call fcn.00436390
add esp, 0x10
cmp eax, 0xffffffff
jne 0x436a16
mov eax, dword [ebx + 0x90]
push eax
push ebp
call sub.WSOCK32.dll_ntohs
push eax
push edi
push ebx
call fcn.00436310
add esp, 0x10
jmp 0x436a16
sub eax, esi
add eax, 0x592bd8
push eax
push esi
push ebx
call fcn.00436b00
add esp, 0xc
test eax, eax
jge 0x436a12
mov dword [ebx + 0x74], 1
jmp 0x436a16
je 0x436a8c
add esi, eax
mov eax, dword [0x593430]
mov ecx, esi
sub ecx, 0x592bd8
lea edx, [eax - 6]
cmp ecx, edx
jle 0x436967
jmp 0x436a91
mov eax, dword [ebx + 0x88]
push eax
call sub.WSOCK32.dll_closesocket
mov dword [ebx + 0x88], ebp
mov dword [0x593430], 0
mov eax, dword [ebx + 0x90]
cmp eax, 6
je 0x436a74
cmp eax, 7
je 0x436a74
push 3
push ebx
call fcn.00436170
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10c
ret
push 0
push ebx
call fcn.00436170
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10c
ret
mov eax, dword [0x593430]
mov ecx, 0x592bd8
sub ecx, esi
add eax, ecx
push eax
push esi
push 0x592bd8
mov dword [0x593430], eax
call fcn.00534830
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10c
ret
mov edx, dword [ebx + 0x88]
push edx
call sub.WSOCK32.dll_closesocket
mov dword [ebx + 0x88], ebp
push ebx
mov dword [0x593430], edi
call fcn.004370a0
push 3
push ebx
call fcn.00436170
add esp, 0xc
mov eax, 3
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10c
ret
sub esp, 0x704
push ebx
push ebp
push esi
mov esi, dword [esp + 0x714]
push edi
xor ebp, ebp
mov eax, dword [esi + 0x6c]
xor edi, edi
xor edx, edx
cmp eax, ebp
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x34], edx
jle 0x436f0c
mov ecx, dword [esi + 8]
cmp dword [ecx + 4], ebp
je 0x436d97
inc edi
cmp edx, 0x40
jae 0x436d97
mov ebx, dword [ecx]
mov dword [esp + edx*4 + 0x38], ebx
mov edx, dword [esp + 0x34]
inc edx
mov dword [esp + 0x34], edx
add ecx, 0x1c
dec eax
jne 0x436d7d
cmp edi, ebp
mov dword [esp + 0x18], edi
jle 0x436f0c
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x34]
push eax
push ebp
push ebp
push ecx
push 0x40
call sub.WSOCK32.dll_select
cmp eax, 0xffffffff
je 0x436f0c
cmp eax, ebp
je 0x436f0c
mov eax, dword [esi + 0x6c]
mov dword [esp + 0x10], ebp
cmp eax, ebp
jle 0x436f0c
mov edx, dword [esi + 8]
mov ecx, dword [edx + ebp + 4]
lea eax, [edx + ebp]
test ecx, ecx
je 0x436ef5
mov edx, dword [eax]
lea ecx, [esp + 0x34]
push ecx
push edx
call sub.WSOCK32.dll___WSAFDIsSet
test eax, eax
je 0x436ef5
lea eax, [esp + 0x14]
lea ecx, [esp + 0x24]
push eax
mov eax, dword [esi + 8]
push ecx
mov dword [esp + 0x1c], 0x10
mov ecx, dword [eax + ebp]
push 0
lea edx, [esp + 0x144]
push 0x5db
push edx
push ecx
call sub.WSOCK32.dll_recvfrom
mov edx, dword [esi + 8]
mov edi, dword [edx + ebp + 0x10]
lea ecx, [edx + ebp]
mov edx, dword [esp + 0x28]
cmp edx, edi
jne 0x436ef5
mov dx, word [esp + 0x26]
cmp dx, word [ecx + 0xe]
jne 0x436ef5
cmp eax, 0xffffffff
je 0x436eee
mov byte [esp + eax + 0x138], 0
lea eax, [esp + 0x138]
push str._final_
push eax
call fcn.00533820
mov ecx, dword [esi + 8]
mov edi, eax
add esp, 8
mov ebx, dword [ecx + ebp + 4]
neg edi
sbb edi, edi
neg edi
cmp word [ebx + 6], 0x270f
jne 0x436ea3
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [esi + 8]
sub ax, word [edx + ebp + 8]
mov word [ebx + 6], ax
lea eax, [esp + 0x138]
push eax
push ebx
call fcn.00435850
add esp, 8
test edi, edi
je 0x436ef5
mov ecx, dword [esi + 4]
push ecx
call fcn.0042fc70
mov ecx, eax
mov eax, dword [esi + 0x70]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 2
cdq
idiv ecx
mov edx, dword [esi + 0x7c]
push eax
push ebx
push edx
push 2
push esi
call dword [esi + 0x78]
mov eax, dword [esi + 8]
add esp, 0x18
mov dword [eax + ebp + 4], 0
jmp 0x436ef5
mov dword [ecx + 4], 0
mov eax, dword [esp + 0x10]
mov ecx, dword [esi + 0x6c]
inc eax
add ebp, 0x1c
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x436ddc
mov eax, dword [esi + 0x6c]
xor ebx, ebx
test eax, eax
jle 0x436f48
xor edi, edi
mov ecx, dword [esi + 8]
mov eax, dword [edi + ecx + 4]
test eax, eax
je 0x436f3d
mov edx, ecx
lea ebp, [edi + edx]
call sub.KERNEL32.dll_GetTickCount
sub eax, dword [ebp + 8]
cmp eax, 0xbb8
jbe 0x436f3d
mov dword [ebp + 4], 0
mov eax, dword [esi + 0x6c]
inc ebx
add edi, 0x1c
cmp ebx, eax
jl 0x436f17
mov eax, dword [esi + 0x74]
test eax, eax
jne 0x437049
mov eax, dword [esi + 4]
push eax
call fcn.0042fc70
mov ecx, dword [esi + 0x70]
add esp, 4
cmp ecx, eax
jl 0x436f72
mov eax, dword [esp + 0x18]
test eax, eax
je 0x437049
mov eax, dword [esi + 0x6c]
xor ebx, ebx
test eax, eax
jle 0x43705a
xor edi, edi
mov ecx, dword [esi + 4]
mov ebp, dword [esi + 0x70]
push ecx
call fcn.0042fc70
add esp, 4
cmp ebp, eax
jge 0x43705a
mov edx, dword [esi + 8]
mov eax, dword [edi + edx + 4]
test eax, eax
jne 0x43702d
mov eax, dword [esi + 4]
push ebp
push eax
call fcn.0042fc80
mov ecx, dword [esi + 0x70]
mov ebp, dword [eax]
inc ecx
push ebp
mov dword [esi + 0x70], ecx
mov ecx, dword [esi + 8]
mov dword [edi + ecx + 4], ebp
mov edx, dword [esi + 8]
mov word [edi + edx + 0xc], 2
call fcn.00435970
add esp, 0xc
push eax
call sub.WSOCK32.dll_inet_addr
mov ecx, dword [esi + 8]
push ebp
mov dword [edi + ecx + 0x10], eax
call fcn.00435990
add esp, 4
push eax
call sub.WSOCK32.dll_htons
mov edx, dword [esi + 8]
push 0x10
mov word [edi + edx + 0xe], ax
mov eax, dword [esi + 8]
mov ebp, dword [ebp + 8]
add eax, edi
shl ebp, 2
lea ecx, [eax + 0xc]
mov edx, dword [ebp + 0x54ecec]
push ecx
mov ecx, dword [ebp + 0x5624e0]
push 0
push edx
mov edx, dword [eax]
push ecx
push edx
call sub.WSOCK32.dll_sendto
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [esi + 8]
mov dword [edi + ecx + 8], eax
mov eax, dword [esi + 0x6c]
inc ebx
add edi, 0x1c
cmp ebx, eax
jl 0x436f81
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x704
ret
push esi
call fcn.00437070
push 0
push esi
call fcn.00436170
add esp, 0xc
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x704
ret