Function at 0x5a3e80
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x657290
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x7496c8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x18], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp byte [esi + 0x31fe], bl
jne 0x5a3f87
mov eax, dword [esi + 0xc0]
lea edi, [esi + 0x198]
cmp dword [eax + 0x24], 5
jne 0x5a3edd
push 1
push edi
call fcn.005a04c0
jmp 0x5a3eed
push ebx
push 1
push edi
mov ecx, dword [esi + 0x31e8]
push ecx
call sub.WS2_32.dll_recv
push str.recv_first_byte
push eax
mov ecx, esi
call fcn.005582d0
mov ecx, eax
cmp ecx, ebx
je 0x5a3f1f
mov eax, ecx
sub eax, 0x2733
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [esi + 0x31fe], 1
lea ecx, [ebp - 0x14]
call fcn.00402500
mov byte [ebp - 4], 1
movsx edx, byte [edi]
push edx
push str.recv_handshake__type___02X_n
lea eax, [ebp - 0x14]
push eax
call fcn.00402f80
add esp, 0xc
mov ecx, dword [ebp - 0x14]
push ecx
mov ecx, esi
call fcn.005579a0
mov ecx, esi
call fcn.0059df40
test eax, eax
je 0x5a3f7c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
cmp dword [esi + 0x3210], ebx
jne 0x5a3fa2
push 0x600
call fcn.005e76b2
add esp, 4
mov dword [esi + 0x3210], eax
cmp dword [esi + 0x3214], ebx
jne 0x5a3fbd
push 0x600
call fcn.005e76b2
add esp, 4
mov dword [esi + 0x3214], eax
mov ecx, dword [esi + 0x3210]
cmp ecx, ebx
je 0x5a4258
cmp dword [esi + 0x3214], ebx
je 0x5a4258
cmp byte [esi + 0x31ff], bl
jne 0x5a40bd
mov edx, dword [esi + 0xc0]
mov eax, dword [esi + 0x321c]
cmp dword [edx + 0x24], 5
mov edx, 0x600
jne 0x5a4009
sub edx, eax
push edx
add eax, ecx
push eax
mov ecx, esi
call fcn.005a04c0
jmp 0x5a401c
push ebx
sub edx, eax
push edx
add eax, ecx
push eax
mov eax, dword [esi + 0x31e8]
push eax
call sub.WS2_32.dll_recv
mov edi, eax
push str.recv_handshake_p1
push edi
mov ecx, esi
call fcn.005582d0
mov ecx, eax
cmp ecx, ebx
jne 0x5a3f00
add dword [esi + 0x321c], edi
cmp dword [esi + 0x321c], 0x600
jl 0x5a3f68
mov byte [esi + 0x31ff], 1
lea ecx, [ebp - 0x14]
call fcn.00402500
mov byte [ebp - 4], 2
mov ecx, dword [esi + 0x3210]
mov eax, dword [ecx]
push eax
call sub.WS2_32.dll_ntohl
mov ecx, dword [esi + 0x3210]
movsx edx, byte [ecx + 7]
push edx
movsx edx, byte [ecx + 6]
push edx
movsx edx, byte [ecx + 5]
push edx
movsx ecx, byte [ecx + 4]
push ecx
push eax
push str.Server_time:__ld_nVersion:__d._d._d._d_n
lea edx, [ebp - 0x14]
push edx
call fcn.00402f80
add esp, 0x1c
mov eax, dword [ebp - 0x14]
push eax
mov ecx, esi
call fcn.005579a0
mov ecx, esi
call fcn.0059df40
test eax, eax
jne 0x5a3f5d
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
mov ecx, dword [esi + 0xc0]
mov eax, dword [esi + 0x3220]
mov edx, 0x600
sub edx, eax
cmp dword [ecx + 0x24], 5
mov ecx, dword [esi + 0x3214]
jne 0x5a40e9
push edx
add ecx, eax
push ecx
mov ecx, esi
call fcn.005a04c0
jmp 0x5a40fa
push ebx
push edx
add ecx, eax
push ecx
mov edx, dword [esi + 0x31e8]
push edx
call sub.WS2_32.dll_recv
mov edi, eax
push str.recv_handshake_p2
push edi
mov ecx, esi
call fcn.005582d0
mov ecx, eax
cmp ecx, ebx
jne 0x5a3f00
add dword [esi + 0x3220], edi
mov eax, 0x600
cmp dword [esi + 0x3220], eax
jl 0x5a3f68
mov edx, dword [esi + 0x3214]
mov ecx, dword [esi + 0x3218]
inc ecx
cmp eax, 4
jb 0x5a4181
mov edi, dword [ecx]
cmp edi, dword [edx]
jne 0x5a414d
sub eax, 4
add edx, 4
add ecx, 4
jmp 0x5a4137
movzx eax, byte [ecx]
movzx edi, byte [edx]
sub eax, edi
jne 0x5a4179
movzx eax, byte [ecx + 1]
movzx edi, byte [edx + 1]
sub eax, edi
jne 0x5a4179
movzx eax, byte [ecx + 2]
movzx edi, byte [edx + 2]
sub eax, edi
jne 0x5a4179
movzx eax, byte [ecx + 3]
movzx ecx, byte [edx + 3]
sub eax, ecx
sar eax, 0x1f
or eax, 1
jmp 0x5a4183
xor eax, eax
cmp eax, ebx
sete al
cmp al, bl
jne 0x5a4198
push str.Part2_of_server_handshake_does_not_match__n
mov ecx, esi
call fcn.005579a0
mov edx, dword [esi + 0xc0]
cmp dword [edx + 0x24], 5
jne 0x5a41ad
mov ecx, esi
call fcn.005a18e0
jmp 0x5a41d3
push str.send_handshake_2_
push ebx
push 0x600
mov eax, dword [esi + 0x3210]
push eax
mov ecx, dword [esi + 0x31e8]
push ecx
call sub.WS2_32.dll_send
push eax
mov ecx, esi
call fcn.005582d0
cmp eax, ebx
jne 0x5a428c
mov byte [ebp - 4], 3
mov eax, dword [esi + 0x3218]
push eax
call fcn.005e76a7
mov eax, dword [esi + 0x3210]
push eax
call fcn.005e76a7
mov eax, dword [esi + 0x3214]
push eax
call fcn.005e76a7
add esp, 0xc
mov dword [ebp - 4], ebx
jmp 0x5a421d
mov dword [esi + 0x3218], ebx
mov dword [esi + 0x3210], ebx
mov dword [esi + 0x3214], ebx
mov edx, dword [esi + 0xc0]
cmp dword [edx + 0x24], 5
je 0x5a3f68
mov ecx, esi
call fcn.005a18e0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret