Function at 0x5e1d40
Capabilities:
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x656e08
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x40]
mov ebx, ecx
push str.processClientHello
push edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x18], ebx
call fcn.004f0370
mov esi, dword [esp + 0x30]
mov dword [esp + 0x28], 0
test esi, esi
je 0x5e22ad
mov ebp, dword [esp + 0x34]
test ebp, ebp
je 0x5e22ad
call fcn.005e0070
mov ebx, eax
test ebx, ebx
je 0x5e22cd
xor eax, eax
xor ecx, ecx
mov al, byte [esi]
mov dword [ebx + 0x2c], eax
mov cl, byte [esi + 1]
mov dword [ebx + 0x30], ecx
mov al, byte [edi + 0x122]
test al, al
je 0x5e1de7
mov edx, dword [ebx + 0x2c]
mov ecx, edi
push edx
push str.MajorVersion
call fcn.004effe0
mov al, byte [edi + 0x122]
test al, al
je 0x5e1de7
mov eax, dword [ebx + 0x30]
mov ecx, edi
push eax
push str.MinorVersion
call fcn.004effe0
sub ebp, 2
add esi, 2
cmp ebp, 0x20
jae 0x5e1e20
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.ClientHello_too_short__1_.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
lea ecx, [ebx + 0x34]
call fcn.004dd9e0
push 0x20
push esi
lea ecx, [ebx + 0x34]
call fcn.004e1260
sub ebp, 0x20
add esi, 0x20
cmp ebp, 1
jae 0x5e1e6c
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.ClientHello_too_short__2_.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
mov al, byte [edi + 0x122]
mov cl, byte [esi]
test al, al
mov byte [esp + 0x34], cl
je 0x5e1e93
mov edx, dword [esp + 0x34]
mov ecx, edi
and edx, 0xff
push edx
push str.SessionIdLen
call fcn.004effe0
inc esi
lea ecx, [ebx + 0x50]
dec ebp
call fcn.004dd9e0
mov al, byte [esp + 0x34]
test al, al
je 0x5e1ef1
mov eax, dword [esp + 0x34]
and eax, 0xff
cmp ebp, eax
mov dword [esp + 0x34], eax
jae 0x5e1edf
mov ecx, ebx
call fcn.004d7f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
push edi
push eax
push 0x2f
push ecx
mov ecx, dword [esp + 0x20]
call fcn.005f4c00
mov edx, dword [edi]
push str.ClientHello_too_short__3_.
jmp 0x5e22c8
push eax
push esi
lea ecx, [ebx + 0x50]
call fcn.004e1260
mov eax, dword [esp + 0x34]
add esi, eax
sub ebp, eax
cmp ebp, 2
jae 0x5e1f1f
mov ecx, ebx
call fcn.004d7f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
push edi
push eax
push 0x2f
push ecx
mov ecx, dword [esp + 0x20]
call fcn.005f4c00
mov edx, dword [edi]
push str.ClientHello_too_short__4_.
jmp 0x5e22c8
xor eax, eax
sub ebp, 2
mov ah, byte [esi]
mov al, byte [esi + 1]
add esi, 2
cmp ebp, eax
mov dword [esp + 0x40], eax
jae 0x5e1f5d
mov ecx, ebx
call fcn.004d7f00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
push edi
push eax
push 0x2f
push ecx
mov ecx, dword [esp + 0x20]
call fcn.005f4c00
mov edx, dword [edi]
push str.ClientHello_too_short__5_.
jmp 0x5e22c8
push eax
lea ecx, [ebx + 0x6c]
push esi
call fcn.004e1260
mov al, byte [edi + 0x122]
test al, al
je 0x5e1f89
lea ecx, [ebx + 0x6c]
call fcn.004dda10
lea ecx, [ebx + 0x6c]
call fcn.005a8750
push edi
mov ecx, ebx
call fcn.005e5860
lea ecx, [ebx + 0x6c]
mov byte [ebx + 0xc9], 0
call fcn.004dda10
lea ecx, [ebx + 0x6c]
mov dword [esp + 0x34], eax
call fcn.005a8750
shr eax, 1
je 0x5e1fc8
mov ecx, dword [esp + 0x34]
cmp byte [ecx], 0
jne 0x5e1fbe
cmp byte [ecx + 1], 0xff
jne 0x5e1fbe
mov byte [ebx + 0xc9], 1
add ecx, 2
dec eax
mov dword [esp + 0x34], ecx
jne 0x5e1fa8
mov al, byte [ebx + 0xc9]
test al, al
je 0x5e1fde
mov eax, dword [edi]
push str.Client_sent_TLS_EMPTY_RENEGOTIATION_INFO_SCSV
mov ecx, edi
call dword [eax + 0x18]
mov eax, dword [esp + 0x40]
mov cl, byte [edi + 0x122]
add esi, eax
sub ebp, eax
xor eax, eax
mov al, byte [esi]
test cl, cl
mov dword [esp + 0x34], eax
je 0x5e2009
push eax
push str.numCompressionMethods
mov ecx, edi
call fcn.004effe0
mov eax, dword [esp + 0x34]
inc esi
dec ebp
cmp ebp, eax
jae 0x5e203d
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.ClientHello_too_short__6_.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
push eax
push esi
lea ecx, [ebx + 0x88]
call fcn.004e1260
mov eax, dword [esp + 0x34]
sub ebp, eax
add esi, eax
cmp ebp, 2
jbe 0x5e2231
mov cl, byte [edi + 0x121]
xor eax, eax
mov ah, byte [esi]
mov al, byte [esi + 1]
test cl, cl
mov dword [esp + 0x40], eax
je 0x5e2081
push eax
push str.clientHelloExtensionsLen
mov ecx, edi
call fcn.004effe0
mov eax, dword [esp + 0x40]
sub ebp, 2
add esi, 2
cmp eax, ebp
mov dword [esp + 0x34], ebp
jbe 0x5e20bd
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.ClientHello_extensions_length_too_long.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
mov edx, 4
cmp eax, edx
jae 0x5e20f4
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.ClientHello_extensions_length_too_short.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
mov eax, dword [esp + 0x34]
xor ecx, ecx
mov ch, byte [esi]
sub eax, edx
mov cl, byte [esi + 1]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x40]
mov ebp, ecx
add esi, 2
xor ecx, ecx
sub eax, edx
mov ch, byte [esi]
mov dword [esp + 0x40], eax
mov cl, byte [esi + 1]
mov al, byte [edi + 0x121]
add esi, 2
mov dword [esp + 0x30], ecx
test al, al
je 0x5e213c
push edi
push ecx
mov ecx, dword [esp + 0x18]
push ebp
call fcn.005e46f0
mov ecx, dword [esp + 0x30]
cmp ecx, dword [esp + 0x40]
ja 0x5e2282
cmp ebp, 5
jne 0x5e2157
mov byte [ebx + 0xa8], 1
jmp 0x5e220e
cmp ebp, 0xff01
jne 0x5e21a4
test ecx, ecx
mov byte [ebx + 0xa9], 1
jbe 0x5e220e
xor edx, edx
lea eax, [ecx - 1]
mov dl, byte [esi]
cmp edx, eax
je 0x5e218e
mov edx, dword [edi]
push str.Error_in_renegotiate_extension_data.
mov ecx, edi
call dword [edx + 0x14]
mov ecx, dword [esp + 0x30]
jmp 0x5e220e
push eax
lea eax, [esi + 1]
push eax
lea ecx, [ebx + 0xac]
call fcn.004e1260
mov ecx, dword [esp + 0x30]
jmp 0x5e220e
cmp ebp, 0xd
jne 0x5e21b2
mov byte [ebx + 0xc8], 1
jmp 0x5e220e
cmp ebp, 0xa
jne 0x5e220e
xor eax, eax
lea ebp, [esi + 2]
mov ah, byte [esi]
mov al, byte [esi + 1]
cmp eax, 1
jbe 0x5e220e
shr eax, 1
mov edx, eax
xor eax, eax
mov ah, byte [ebp]
mov al, byte [ebp + 1]
cmp eax, 0x17
jne 0x5e21e0
mov byte [ebx + 0xa4], 1
jmp 0x5e2208
cmp eax, 0x18
jne 0x5e21ee
mov byte [ebx + 0xa5], 1
jmp 0x5e2208
cmp eax, 0x19
jne 0x5e21fc
mov byte [ebx + 0xa6], 1
jmp 0x5e2208
cmp eax, 0x16
jne 0x5e2208
mov byte [ebx + 0xa7], 1
add ebp, 2
dec edx
jne 0x5e21ca
mov eax, dword [esp + 0x34]
mov edx, 4
sub eax, ecx
add esi, ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x40]
sub eax, ecx
cmp eax, edx
mov dword [esp + 0x40], eax
jae 0x5e20f4
mov al, byte [edi + 0x122]
test al, al
je 0x5e2247
mov edx, dword [edi]
push str.Queueing_ClientHello_message.
mov ecx, edi
call dword [edx + 0x18]
mov eax, dword [esp + 0x10]
push ebx
lea ecx, [eax + 0x404]
call fcn.00506e40
mov al, byte [edi + 0x122]
test al, al
je 0x5e226d
mov edx, dword [edi]
push str.ClientHello_is_OK.
mov ecx, edi
call dword [edx + 0x18]
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 0xffffffff
call fcn.004f03e0
mov al, 1
jmp 0x5e22e0
mov ecx, ebx
call fcn.004d7f00
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
push edi
push ecx
mov ecx, dword [esp + 0x18]
push 0x2f
push edx
call fcn.005f4c00
mov eax, dword [edi]
push str.Specific_ClientHello_extension_length_too_long.
mov ecx, edi
call dword [eax + 0x14]
jmp 0x5e22cd
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
push edi
push eax
push 0x2f
push ecx
mov ecx, ebx
call fcn.005f4c00
mov edx, dword [edi]
push str.Zero_length_ClientHello
mov ecx, edi
call dword [edx + 0x14]
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 0xffffffff
call fcn.004f03e0
xor al, al
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 0x14