Function at 0x413df0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x4cb180]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
cmp dword [ebx + 0x1cc], 0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0x4af39c
mov dword [ebp - 0x20], str.host_key_algorithm
mov dword [ebp - 0x1c], str.client_to_server_cipher
mov dword [ebp - 0x18], str.server_to_client_cipher
mov dword [ebp - 0x14], str.client_to_server_MAC
mov dword [ebp - 0x10], str.server_to_client_MAC
mov dword [ebp - 0xc], str.client_to_server_compression_method
mov dword [ebp - 8], str.server_to_client_compression_method
jne 0x413e71
push 0x74c
push 1
call fcn.00406130
mov ecx, dword [ebp - 0x34]
add esp, 8
mov dword [ebx + 0x1cc], eax
mov dword [eax], 0
mov esi, dword [ebx + 0x1cc]
mov dword [ebp - 0x44], esi
mov eax, dword [esi]
cmp eax, 0x1b73
jg 0x4141a6
je 0x41413f
cmp eax, 0x1aff
jg 0x414025
je 0x413fd7
test eax, eax
je 0x413f59
cmp eax, 0x1a26
je 0x413f1c
cmp eax, 0x1abc
jne 0x413f42
test ecx, ecx
je 0x413ec3
push str.Unexpected_data_from_server_while_waiting_for_user_response
jmp 0x413f33
cmp dword [ebp + 0x10], 0
jg 0x415a48
mov eax, dword [ebx + 0x25c]
mov dword [esi + 0x140], eax
push 0
push ebx
call fcn.0041d720
add esp, 8
cmp dword [esi + 0x140], 0
jne 0x415a5f
push 1
push 0
push 0
push str.User_aborted_at_kex_warning
push ebx
call fcn.0041c820
add esp, 0x14
mov dword [esi], 0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
test ecx, ecx
je 0x415603
cmp dword [ecx + 8], 0x14
je 0x41561a
push str.expected_key_exchange_packet_from_server
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0xc
pop edi
mov dword [esi], 0
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
mov dword [esi + 0x4c], 0
mov dword [esi + 0x48], 0
mov dword [esi + 0x54], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x64], 0
mov dword [esi + 0x60], 0
mov dword [esi + 0x138], 0
mov dword [esi + 0x134], 0
mov dword [esi + 0x12c], 0
mov dword [esi + 0x130], 0
test byte [ebx + 0x50], 2
je 0x413fc4
mov dword [esi + 0x40], 0x4acee0
mov dword [esi + 0x44], 3
jmp 0x414ea8
mov dword [esi + 0x40], 0x4aced0
mov dword [esi + 0x44], 4
jmp 0x414ea8
test ecx, ecx
jne 0x413ebc
cmp dword [ebp + 0x10], ecx
jg 0x415b6b
mov eax, dword [ebx + 0x25c]
mov dword [esi + 0x140], eax
push 0
push ebx
call fcn.0041d720
add esp, 8
cmp dword [esi + 0x140], 0
jne 0x415b82
push 1
push 0
push 0
push str.User_aborted_at_host_key_warning
push ebx
call fcn.0041c820
add esp, 0x14
jmp 0x413f42
sub eax, 0x1b18
je 0x4140b8
sub eax, 0x19
je 0x41406a
sub eax, 0x12
jne 0x413f42
test ecx, ecx
je 0x415be5
mov ecx, dword [ebx + 0x98]
mov edx, dword [ecx + 8]
test edx, edx
jne 0x415dd6
mov eax, dword [esi + 0x48]
test eax, eax
je 0x415bfc
mov eax, dword [eax + 0x28]
jmp 0x415bfe
test ecx, ecx
jne 0x413ebc
cmp dword [ebp + 0x10], ecx
jg 0x414128
mov eax, dword [ebx + 0x25c]
mov dword [esi + 0x140], eax
push 0
push ebx
call fcn.0041d720
add esp, 8
cmp dword [esi + 0x140], 0
jne 0x415bd8
push 1
push 0
push 0
push str.User_aborted_at_cipher_warning
push ebx
call fcn.0041c820
add esp, 0x14
jmp 0x413f42
test ecx, ecx
jne 0x413ebc
cmp dword [ebp + 0x10], ecx
jg 0x415bc1
mov eax, dword [ebx + 0x25c]
mov dword [esi + 0x140], eax
push 0
push ebx
call fcn.0041d720
add esp, 8
cmp dword [esi + 0x140], 0
je 0x41409f
cmp dword [esi + 0x18], 0
je 0x415bd8
push 1
push ebx
call fcn.0041d720
mov eax, dword [esi + 0x4c]
push ebx
push 0x41c7d0
push dword [eax + 0x20]
push str.server_to_client_cipher
push dword [ebx + 0x110]
call fcn.0043e200
add esp, 0x1c
mov dword [esi + 0x140], eax
test eax, eax
jns 0x414087
pop edi
mov dword [esi], 0x1b31
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
test ecx, ecx
je 0x415cfd
cmp dword [ecx + 8], 0x1f
je 0x414157
push str.expected_key_exchange_group_packet_from_server
jmp 0x413f33
push ecx
call fcn.00419d80
push dword [ebp - 0x34]
mov dword [esi + 0x1c], eax
call fcn.00419d80
mov ecx, dword [esi + 0x1c]
add esp, 8
mov dword [esi + 0x20], eax
test ecx, ecx
je 0x41419c
test eax, eax
je 0x41419c
push eax
push ecx
call fcn.00428150
mov dword [ebx + 0xe8], eax
add esp, 8
mov dword [esi + 0x38], 0x20
mov dword [esi + 0x3c], 0x21
jmp 0x415d54
push str.unable_to_read_mp_ints_from_incoming_group_packet
jmp 0x413f33
cmp eax, 0x1c85
jg 0x414b09
je 0x414797
sub eax, 0x1b96
je 0x4145a5
sub eax, 0x56
je 0x414434
sub eax, 0x3e
jne 0x413f42
test ecx, ecx
je 0x415ec3
cmp dword [ecx + 8], 0x1e
je 0x4141ec
push str.expected_RSA_public_key_packet_from_server
jmp 0x413f33
lea eax, [esi + 0x7c]
push eax
lea edi, [esi + 0x68]
push edi
push ecx
call fcn.0041cfa0
mov eax, dword [edi]
add esp, 0xc
test eax, eax
jne 0x41420d
push str.unable_to_parse_RSA_public_key_packet
jmp 0x413f33
push dword [esi + 0x7c]
push eax
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [esi + 0x7c]
mov eax, dword [ebx + 0x9c]
push dword [edi]
push eax
mov eax, dword [eax]
call eax
mov dword [esi + 0x88], eax
lea edi, [esi + 0x84]
push edi
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x34]
call fcn.0041cfa0
add esp, 0x28
cmp dword [ebp - 0x44], 0
je 0x414203
push 1
push dword [edi]
call fcn.00406130
push dword [edi]
mov dword [esi + 0x70], eax
push dword [ebp - 0x44]
push eax
call fcn.0044b7f0
push dword [edi]
push dword [esi + 0x70]
call fcn.00433bf0
mov ecx, dword [esi + 0x70]
add esp, 0x1c
mov dword [esi + 0x8c], eax
test eax, eax
jne 0x4142a4
push ecx
call fcn.00406110
push str.unable_to_parse_RSA_public_key_from_server
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
push dword [edi]
mov eax, dword [ebx + 0x98]
push ecx
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [esi + 0x8c]
call fcn.00433bd0
mov ecx, dword [ebx + 0x98]
mov ebx, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + 0x14]
shl ecx, 4
sub ebx, ecx
sub ebx, 0x31
mov dword [ebp - 0x30], ebx
lea eax, [ebx - 1]
push eax
call fcn.00422ef0
add esp, 0x18
mov dword [esi + 0x2c], eax
xor edi, edi
test ebx, ebx
jle 0x414330
nop dword [eax + eax]
mov ebx, edi
and ebx, 7
jne 0x414311
call fcn.00431e20
mov dword [ebp - 0x44], eax
jmp 0x414314
mov eax, dword [ebp - 0x44]
mov edx, eax
mov ecx, ebx
sar edx, cl
and edx, 1
push edx
push edi
push dword [esi + 0x2c]
call fcn.00422da0
inc edi
add esp, 0xc
cmp edi, dword [ebp - 0x30]
jl 0x414300
lea eax, [ebp - 0x30]
push eax
push dword [esi + 0x2c]
call fcn.004189e0
mov ebx, dword [ebp - 0x30]
push 1
mov dword [ebp - 0x38], eax
lea edi, [ebx + 4]
push edi
call fcn.00406130
mov ecx, ebx
mov dword [ebp - 0x44], eax
sar ecx, 0x18
push ebx
push dword [ebp - 0x38]
mov byte [eax], cl
mov ecx, ebx
sar ecx, 0x10
mov byte [eax + 1], cl
mov ecx, ebx
sar ecx, 8
mov byte [eax + 2], cl
mov byte [eax + 3], bl
add eax, 4
push eax
call fcn.0044b7f0
mov eax, dword [ebp - 0x40]
add eax, 7
cdq
and edx, 7
push 1
lea ebx, [edx + eax]
sar ebx, 3
push ebx
call fcn.00406130
push dword [esi + 0x8c]
mov ecx, dword [ebp - 0x28]
push ebx
push eax
push edi
mov ecx, dword [ecx + 0x98]
push dword [ebp - 0x44]
mov dword [ebp - 0x30], eax
push dword [ecx + 0xc]
call fcn.00433ab0
push 0x1f
call fcn.00419dc0
add esp, 0x40
mov dword [esi + 0x13c], eax
push eax
call fcn.0041cdd0
mov edi, dword [ebp - 0x30]
push ebx
push edi
push dword [esi + 0x13c]
call fcn.0041cd70
push dword [esi + 0x13c]
push dword [ebp - 0x28]
call fcn.00419ef0
mov eax, dword [ebp - 0x28]
push ebx
push edi
push dword [eax + 0xc]
mov eax, dword [eax + 0x98]
push dword [eax + 0xc]
call fcn.00416930
push dword [ebp - 0x44]
call fcn.00406110
push dword [ebp - 0x38]
call fcn.00406110
push edi
call fcn.00406110
push dword [esi + 0x8c]
call fcn.00433bc0
add esp, 0x38
mov dword [esi], 0x1c85
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
test ecx, ecx
je 0x415e94
cmp dword [ecx + 8], 0x1f
je 0x414466
push dword [esi + 0x90]
call fcn.0042ce60
push str.expected_ECDH_reply_packet_from_server
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
lea eax, [esi + 0x7c]
push eax
lea edi, [esi + 0x68]
push edi
push ecx
call fcn.0041cfa0
mov eax, dword [edi]
add esp, 0xc
test eax, eax
jne 0x414487
push str.unable_to_parse_ECDH_reply_packet
jmp 0x413f33
push dword [esi + 0x7c]
push eax
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [esi + 0x7c]
mov eax, dword [ebx + 0x9c]
push dword [edi]
push eax
mov eax, dword [eax]
call eax
mov dword [esi + 0x88], eax
lea eax, [ebp - 0x30]
push eax
push dword [esi + 0x90]
call fcn.0042cf30
mov edi, eax
add esp, 0x24
test edi, edi
jne 0x4144ee
push dword [esi + 0x90]
call fcn.0042ce60
push str.Unable_to_encode_public_key_for_ECDH_hash
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
push dword [ebp - 0x30]
mov eax, dword [ebx + 0x98]
push edi
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push edi
call fcn.00406110
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x34]
call fcn.0041cfa0
mov eax, dword [ebp - 0x44]
add esp, 0x20
test eax, eax
je 0x41447d
mov edi, dword [ebp - 0x30]
push edi
push eax
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push edi
push dword [ebp - 0x44]
push dword [esi + 0x90]
call fcn.0042ce70
add esp, 0x1c
mov dword [esi + 0x2c], eax
test eax, eax
jne 0x41457a
push dword [esi + 0x90]
call fcn.0042ce60
push str.point_received_in_ECDH_was_not_valid
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
lea eax, [esi + 0x80]
push eax
lea edi, [esi + 0x6c]
push edi
push dword [ebp - 0x34]
call fcn.0041cfa0
add esp, 0xc
cmp dword [edi], 0
je 0x4145e5
push dword [esi + 0x90]
call fcn.0042ce60
jmp 0x414804
test ecx, ecx
je 0x415dbf
mov eax, dword [ecx + 8]
cmp eax, dword [esi + 0x3c]
je 0x4145bf
push str.expected_key_exchange_reply_packet_from_server
jmp 0x413f33
push 2
push dword [ebx + 0x110]
call fcn.0043e880
lea eax, [esi + 0x7c]
push eax
lea edi, [esi + 0x68]
push edi
push dword [ebp - 0x34]
call fcn.0041cfa0
mov ecx, dword [edi]
add esp, 0x14
test ecx, ecx
jne 0x4145ef
push str.unable_to_parse_key_exchange_reply_packet
jmp 0x413f33
push dword [esi + 0x7c]
mov eax, dword [ebx + 0x9c]
push ecx
push eax
mov eax, dword [eax]
call eax
push dword [ebp - 0x34]
mov dword [esi + 0x88], eax
call fcn.00419d80
add esp, 0x10
mov dword [esi + 0x28], eax
test eax, eax
je 0x4145e5
lea eax, [esi + 0x80]
push eax
lea edi, [esi + 0x6c]
push edi
push dword [ebp - 0x34]
call fcn.0041cfa0
add esp, 0xc
cmp dword [edi], 0
je 0x4145e5
push dword [esi + 0x28]
push dword [ebx + 0xe8]
call fcn.004281d0
add esp, 8
test eax, eax
je 0x414660
push eax
push str.key_exchange_reply_failed_validation:__s
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
push dword [esi + 0x28]
push dword [ebx + 0xe8]
call fcn.004280e0
mov dword [esi + 0x2c], eax
push 0
push dword [ebx + 0x110]
call fcn.0043e880
push dword [esi + 0x7c]
mov eax, dword [ebx + 0x98]
push dword [esi + 0x68]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [ebx + 0x98]
call fcn.00428130
add esp, 0x24
test eax, eax
je 0x414731
test dword [ebx + 0x50], 0x1000
jne 0x4146cd
mov eax, dword [ebx + 0x98]
push 0x400
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416980
add esp, 0xc
push dword [esi + 8]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416980
add esp, 0xc
test dword [ebx + 0x50], 0x1000
jne 0x414706
mov eax, dword [ebx + 0x98]
push 0x2000
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416980
add esp, 0xc
push dword [esi + 0x1c]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416900
push dword [esi + 0x20]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416900
add esp, 0x18
push dword [esi + 0x24]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416900
push dword [esi + 0x28]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416900
push dword [ebx + 0xe8]
call fcn.00427f50
push dword [esi + 0x28]
call fcn.00422fb0
push dword [ebx + 0x98]
call fcn.00428130
add esp, 0x24
test eax, eax
je 0x414807
push dword [esi + 0x20]
call fcn.00422fb0
push dword [esi + 0x1c]
call fcn.00422fb0
add esp, 8
jmp 0x414807
test ecx, ecx
jne 0x4147b2
pop edi
mov dword [esi], 0x1c85
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
cmp dword [ecx + 8], 0x20
je 0x4147d9
push dword [esi + 0x70]
call fcn.00406110
push str.expected_signature_packet_from_server
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
lea eax, [esi + 0x80]
push eax
lea edi, [esi + 0x6c]
push edi
push ecx
call fcn.0041cfa0
add esp, 0xc
cmp dword [edi], 0
jne 0x4147fc
push str.unable_to_parse_signature_packet
jmp 0x413f33
push dword [esi + 0x70]
call fcn.00406110
add esp, 4
push dword [esi + 0x2c]
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416900
mov eax, dword [ebx + 0x98]
lea edi, [esi + 0x94]
push edi
push dword [ebx + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
call eax
mov dword [ebx + 0xe8], 0
add esp, 0x14
mov edx, dword [esi + 0x88]
test edx, edx
jne 0x414854
push str.Servers_host_key_is_invalid
jmp 0x413f33
mov eax, dword [ebx + 0x98]
mov ecx, dword [ebx + 0x9c]
mov eax, dword [eax + 0xc]
push dword [eax + 0x14]
mov eax, dword [ecx + 0x28]
push edi
push dword [esi + 0x80]
push dword [esi + 0x6c]
push edx
call eax
add esp, 0x14
test eax, eax
jne 0x414887
push str.Servers_host_key_did_not_match_the_signature_supplied
jmp 0x413f33
mov eax, dword [ebx + 0x9c]
push dword [esi + 0x88]
mov eax, dword [eax + 8]
call eax
add esp, 4
mov edi, eax
cmp dword [esi + 0x134], 0
mov dword [esi + 0x74], edi
jne 0x414a4e
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x3c], edx
xor edi, edi
mov dword [ebp - 0x2c], ecx
nop dword [eax]
mov eax, dword [edi*8 + 0x4acea0]
cmp eax, dword [ebx + 0x9c]
je 0x4148f7
mov edx, dword [ebx + 0x6c8]
xor eax, eax
test edx, edx
jle 0x4148f4
lea ecx, [ebx + 0x6b0]
cmp dword [ecx], edi
je 0x414995
inc eax
add ecx, 4
cmp eax, edx
jl 0x4148e1
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
inc edi
cmp edi, 6
jb 0x4148c0
test ecx, ecx
je 0x414937
cmp edx, 1
mov eax, str.any_of_them
mov edi, 0x4af970
mov edx, 0x4aa407
cmovle eax, edi
push eax
mov eax, 0x4aa9c4
cmovle eax, edx
push eax
push ecx
push str.Server_also_has__s_host_key_s__but_we_dont_know__s
push ebx
call fcn.00416a20
push dword [ebp - 0x2c]
call fcn.00406110
add esp, 0x18
push dword [esi + 0x88]
push dword [ebx + 0x9c]
call fcn.0042ff50
mov dword [esi + 0x78], eax
push str.Host_key_fingerprint_is:
push dword [ebx + 0x110]
call fcn.0043e810
push dword [esi + 0x78]
push dword [ebx + 0x110]
call fcn.0043e810
push dword [esi + 0x88]
push dword [ebx + 0x9c]
push dword [esi + 0x78]
push ebx
call fcn.0041e4a0
add esp, 0x28
mov dword [esi + 0x140], eax
test eax, eax
jne 0x4149ec
push str.Host_key_did_not_appear_in_manually_configured_list
jmp 0x413f33
cmp eax, edx
jge 0x4148f1
mov ecx, dword [edi*8 + 0x4acea0]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ecx + 0x30]
push ecx
test eax, eax
je 0x4149bf
push eax
push 0x4af95c
call fcn.00405a80
add esp, 0xc
jmp 0x4149cc
push 0x4aaa64
call fcn.00405a80
add esp, 8
push dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
call fcn.00406110
mov edx, dword [ebp - 0x3c]
add esp, 4
mov ecx, dword [ebp - 0x44]
inc edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], edx
jmp 0x4148f7
jns 0x415f69
push 1
push ebx
call fcn.0041d720
mov eax, dword [ebx + 0x9c]
push ebx
push 0x41c7d0
push dword [esi + 0x78]
push dword [esi + 0x74]
push dword [eax + 0x34]
push dword [ebx + 0xfc]
push dword [ebx + 0xf8]
push dword [ebx + 0x110]
call fcn.0043e8b0
add esp, 0x28
mov dword [esi + 0x140], eax
test eax, eax
jns 0x415f3c
pop edi
mov dword [esi], 0x1ced
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
cmp dword [ebx + 0x6cc], 0
je 0x414ac0
push dword [esi + 0x88]
push dword [ebx + 0x9c]
call fcn.0042ff50
mov dword [esi + 0x78], eax
push str.Storing_additional_host_key_for_this_host:
push dword [ebx + 0x110]
call fcn.0043e810
push dword [esi + 0x78]
push dword [ebx + 0x110]
call fcn.0043e810
push dword [esi + 0x78]
call fcn.00406110
push dword [esi + 0x74]
mov eax, dword [ebx + 0x9c]
push dword [eax + 0x34]
push dword [ebx + 0xfc]
push dword [ebx + 0xf8]
call fcn.00447490
add esp, 0x2c
mov dword [ebx + 0x6cc], 0
jmp 0x415f74
mov eax, dword [ebx + 0xa0]
mov ecx, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x414ae8
test dl, dl
je 0x414ae4
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x414ae8
add eax, 2
add ecx, 2
test dl, dl
jne 0x414ac8
xor eax, eax
jmp 0x414aed
sbb eax, eax
or eax, 1
test eax, eax
je 0x414afb
push str.Host_key_was_different_in_repeat_key_exchange
jmp 0x413f33
push edi
call fcn.00406110
add esp, 4
jmp 0x415f7d
sub eax, 0x1ced
je 0x415f05
sub eax, 0x91
je 0x414bdd
sub eax, 0x7f
jne 0x413f42
test ecx, ecx
jne 0x414e56
mov eax, dword [ebp + 0x10]
test eax, eax
jns 0x414e5c
cmp eax, 0xfffffffe
jne 0x414b5c
mov dword [esi + 0x12c], 1
cmp dword [esi + 0x130], ecx
je 0x414e5c
mov dword [esi + 0x130], ecx
test byte [ebx + 0x50], 0x40
push edi
je 0x414bca
push str.Server_bug_prevents_key_re_exchange___s_
push ebx
call fcn.00416a20
push 0x1a
push dword [ebx + 0x248]
mov dword [ebx + 0x688], 0
mov dword [ebx + 0x684], 0
call fcn.004030e0
add esp, 0x14
test eax, eax
je 0x414e5c
push ebx
push 0x41b510
push 0x1a
push dword [ebx + 0x248]
call fcn.004030e0
imul eax, eax, 0xea60
add esp, 8
push eax
call fcn.0043cf60
add esp, 0xc
mov dword [ebx + 0x698], eax
jmp 0x414e5c
push str.Initiating_key_re_exchange___s_
push ebx
call fcn.00416a20
add esp, 0xc
jmp 0x414ea8
test ecx, ecx
je 0x4161db
cmp dword [ecx + 8], 0x15
je 0x414bf5
push str.expected_new_keys_packet_from_server
jmp 0x413f33
mov ecx, dword [ebx + 0x6c]
mov dword [ebx + 0x684], 0
test ecx, ecx
je 0x414c12
mov eax, dword [ebx + 0x64]
push ecx
mov eax, dword [eax + 4]
call eax
add esp, 4
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x414c23
mov dword [ebx + 0x64], eax
mov eax, dword [eax]
call eax
mov dword [ebx + 0x6c], eax
mov ecx, dword [ebx + 0x84]
test ecx, ecx
je 0x414c39
mov eax, dword [ebx + 0x74]
push ecx
mov eax, dword [eax + 4]
call eax
add esp, 4
mov ecx, dword [esi + 0x54]
test ecx, ecx
je 0x414c59
push dword [ebx + 0x6c]
mov dword [ebx + 0x74], ecx
mov eax, dword [esi + 0x5c]
mov dword [ebx + 0x7c], eax
mov eax, dword [ecx]
call eax
add esp, 4
mov dword [ebx + 0x84], eax
mov ecx, dword [ebx + 0x94]
test ecx, ecx
je 0x414c72
mov eax, dword [ebx + 0x8c]
push ecx
mov eax, dword [eax + 0x18]
call eax
add esp, 4
mov eax, dword [esi + 0x64]
mov dword [ebx + 0x8c], eax
mov eax, dword [eax + 0x14]
call eax
mov dword [ebx + 0x94], eax
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x414d0c
push dword [eax + 0x2c]
lea ebx, [esi + 0x94]
push 0x44
push ebx
push dword [esi + 0x2c]
push dword [ebp - 0x28]
call fcn.004188a0
mov edi, eax
mov eax, dword [ebp - 0x28]
push edi
mov ecx, dword [eax + 0x64]
push dword [eax + 0x6c]
mov ecx, dword [ecx + 0xc]
call ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x64]
push dword [ecx + 0x2c]
push edi
call fcn.00440760
push edi
call fcn.00406110
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x64]
push dword [eax + 0x24]
push 0x42
push ebx
push dword [esi + 0x2c]
mov ebx, dword [ebp - 0x28]
push ebx
call fcn.004188a0
mov ecx, dword [ebx + 0x64]
mov edi, eax
push edi
push dword [ebx + 0x6c]
mov ecx, dword [ecx + 8]
call ecx
mov ecx, dword [ebx + 0x64]
add esp, 0x44
push dword [ecx + 0x24]
push edi
call fcn.00440760
push edi
call fcn.00406110
add esp, 0xc
mov eax, dword [ebx + 0x74]
test eax, eax
je 0x414d4e
push dword [eax + 0x30]
lea eax, [esi + 0x94]
push 0x46
push eax
push dword [esi + 0x2c]
push ebx
call fcn.004188a0
mov ecx, dword [ebx + 0x74]
mov edi, eax
push edi
push dword [ebx + 0x84]
mov ecx, dword [ecx + 8]
call ecx
mov ecx, dword [ebx + 0x74]
push dword [ecx + 0x30]
push edi
call fcn.00440760
push edi
call fcn.00406110
add esp, 0x28
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x414d66
push dword [eax + 0x34]
push str.Initialised__.200s_server__client_encryption
push ebx
call fcn.00416a20
add esp, 0xc
mov edx, dword [ebx + 0x74]
test edx, edx
je 0x414da0
mov eax, dword [ebx + 0x64]
mov edi, 0x4aa407
mov ecx, str.__required_by_cipher_
cmp dword [eax + 0x38], 0
mov eax, str.__in_ETM_mode_
cmove ecx, edi
cmp dword [ebx + 0x7c], 0
push ecx
cmove eax, edi
push eax
push dword [edx + 0x34]
push str.Initialised__.200s_server__client_MAC_algorithm_s_s
push ebx
call fcn.00416a20
add esp, 0x14
mov eax, dword [ebx + 0x8c]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x414dbc
push eax
push str.Initialised__s_decompression
push ebx
call fcn.00416a20
add esp, 0xc
push dword [esi + 0x2c]
call fcn.00422fb0
push dword [ebx + 0x110]
call fcn.0043e8a0
mov eax, dword [ebx + 0x6a0]
add esp, 8
test eax, eax
je 0x414dfe
push eax
push dword [ebx + 0x110]
call fcn.0043e810
mov dword [ebp - 0x34], 0
mov dword [ebx + 0x6a0], 0
jmp 0x414ea5
mov dword [ebx + 0x694], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x1a
push dword [ebx + 0x248]
mov dword [ebx + 0x69c], eax
call fcn.004030e0
add esp, 8
test eax, eax
je 0x414e53
push ebx
push 0x41b510
push 0x1a
push dword [ebx + 0x248]
call fcn.004030e0
imul eax, eax, 0xea60
add esp, 8
push eax
call fcn.0043cf60
add esp, 0xc
mov dword [ebx + 0x698], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 8], 0x14
je 0x414e95
cmp dword [ebx + 0x238], 0
jne 0x414e7e
push 0
push 0
push 0
push ebx
mov dword [ebx + 0x238], 1
call fcn.00411140
add esp, 0x10
pop edi
mov dword [esi], 0x1dfd
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
push str.Server_initiated_key_re_exchange
push dword [ebx + 0x110]
call fcn.0043e810
add esp, 8
mov dword [ebx + 0x184], 0
xor edi, edi
mov dword [esi + 0xd4], 0
nop
push edi
push 0x18
push dword [ebx + 0x248]
call fcn.00403110
add esp, 0xc
cmp eax, 5
ja case.default.0x414eda
jmp dword [eax*4 + 0x4161f4]
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0x4b52d0
jmp 0x414f56
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0x4b52c8
jmp 0x414f56
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0x4b52c0
jmp 0x414f56
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0x4b6528
jmp 0x414f56
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0x4b5658
jmp 0x414f56
cmp edi, 5
jae case.default.0x414eda
mov eax, dword [esi + 0xd4]
mov dword [esi + eax*4 + 0xd8], 0
inc dword [esi + 0xd4]
inc edi
cmp edi, 6
jl 0x414ec0
mov dword [esi + 0xf0], 0
xor edi, edi
push edi
push 0x19
push dword [ebx + 0x248]
call fcn.00403110
add esp, 0xc
test eax, eax
jne 0x414f8c
cmp edi, 4
jae 0x414f9f
mov ecx, dword [esi + 0xf0]
mov dword [esi + ecx*4 + 0xf4], eax
inc dword [esi + 0xf0]
inc edi
cmp edi, 5
jl 0x414f72
mov dword [esi + 0x108], 0
xor edi, edi
push edi
push 0x1f
push dword [ebx + 0x248]
call fcn.00403110
add esp, 0xc
cmp eax, 6
ja case.default.0x414fcb
jmp dword [eax*4 + 0x41620c]
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b30f4
jmp 0x415075
push 0x22
push dword [ebx + 0x248]
call fcn.004030e0
add esp, 8
test eax, eax
je case.default.0x414fcb
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b4718
jmp 0x415075
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b4710
jmp 0x415075
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b0ba0
jmp 0x415075
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b3020
jmp 0x415075
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0x4b4210
jmp 0x415075
cmp edi, 6
jae case.default.0x414fcb
mov eax, dword [esi + 0x108]
mov dword [esi + eax*4 + 0x10c], 0
inc dword [esi + 0x108]
inc edi
cmp edi, 7
jl 0x414fb1
push 0x17
push dword [ebx + 0x248]
call fcn.004030e0
add esp, 8
mov edx, 0x4b73c8
test eax, eax
mov ecx, 0x4aceec
lea eax, [esi + 0x14c]
cmovne ecx, edx
mov edx, 8
mov dword [esi + 0x128], ecx
mov dword [ebx + 0x164], 1
mov dword [ebx + 0x694], 1
nop dword [eax]
mov ecx, 0x10
nop word [eax + eax]
mov dword [eax], 0
add eax, 0xc
sub ecx, 1
jne 0x4150e0
sub edx, 1
jne 0x4150d0
xor eax, eax
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x3c], eax
cmp dword [esi + 0xd4], eax
jle 0x415173
lea edx, [esi + 0x14c]
lea ecx, [esi + 0xd8]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x40], ecx
mov ebx, dword [ecx]
test ebx, ebx
jne 0x415124
mov dword [ebp - 0x38], 1
jmp 0x41515e
xor edi, edi
cmp dword [ebx], edi
jle 0x41515e
mov esi, dword [ebp - 0x38]
nop dword [eax]
mov eax, dword [ebx + 4]
mov eax, dword [eax + edi*4]
push dword [eax]
push edx
call fcn.004184a0
mov ecx, dword [ebx + 4]
add esp, 8
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ecx + edi*4]
inc edi
mov dword [eax + 4], ecx
mov dword [eax + 8], esi
cmp edi, dword [ebx]
jl 0x415130
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
inc eax
add ecx, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], ecx
cmp eax, dword [esi + 0xd4]
jl 0x415115
mov ebx, dword [ebp - 0x28]
cmp dword [esi + 0x134], 0
jne 0x4152bc
mov edx, dword [esi + 0xf0]
xor eax, eax
mov dword [ebp - 0x40], eax
lea edi, [eax + 1]
test edx, edx
jle 0x415232
lea ecx, [esi + 0xf4]
mov dword [ebp - 0x2c], ecx
nop
cmp dword [ecx], 0
mov edx, 0x4acea4
cmove eax, edi
xor edi, edi
mov dword [ebp - 0x38], eax
mov eax, dword [edx + edi]
cmp eax, dword [ecx]
jne 0x415207
mov eax, dword [edi + 0x4acea0]
push dword [eax + 0x34]
push dword [ebx + 0xfc]
push dword [ebx + 0xf8]
call fcn.00446e60
add esp, 0xc
test eax, eax
je 0x4151ff
mov eax, dword [edi + 0x4acea0]
push dword [eax + 0x30]
lea eax, [esi + 0x20c]
push eax
call fcn.004184a0
mov ecx, dword [edi + 0x4acea0]
add esp, 8
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x2c]
mov edx, 0x4acea4
add edi, 8
cmp edi, 0x30
jb 0x4151b0
mov eax, dword [ebp - 0x40]
add ecx, 4
mov edx, dword [esi + 0xf0]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, edx
mov eax, dword [ebp - 0x38]
mov edi, 1
mov dword [ebp - 0x2c], ecx
jl 0x4151a0
mov dword [ebp - 0x40], 0
test edx, edx
jle 0x4152e4
lea ecx, [esi + 0xf4]
mov eax, 0x4acea4
mov dword [ebp - 0x38], ecx
xor ebx, ebx
cmp dword [ecx], 0
cmove ebx, edi
xor edi, edi
nop dword [eax]
mov eax, dword [edi + eax]
cmp eax, dword [ecx]
jne 0x41528e
mov eax, dword [edi + 0x4acea0]
push dword [eax + 0x30]
lea eax, [esi + 0x20c]
push eax
call fcn.004184a0
mov ecx, dword [edi + 0x4acea0]
add esp, 8
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 8], ebx
add edi, 8
mov eax, 0x4acea4
cmp edi, 0x30
jb 0x415260
mov eax, dword [ebp - 0x40]
add ecx, 4
inc eax
mov dword [ebp - 0x38], ecx
cmp eax, dword [esi + 0xf0]
mov edi, 1
mov dword [ebp - 0x40], eax
mov eax, 0x4acea4
jl 0x415251
jmp 0x4152e4
mov eax, dword [ebx + 0x9c]
push dword [eax + 0x30]
lea eax, [esi + 0x20c]
push eax
call fcn.004184a0
mov ecx, dword [ebx + 0x9c]
add esp, 8
mov dword [eax + 4], ecx
mov dword [eax + 8], 0
lea ecx, [esi + 0x2cc]
mov eax, 2
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
nop word [eax + eax]
xor edx, edx
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x38], edx
cmp dword [esi + 0x108], edx
jle 0x415384
lea eax, [esi + 0x10c]
mov dword [ebp - 0x3c], eax
nop dword [eax]
mov ebx, dword [eax]
test ebx, ebx
jne 0x41532f
mov dword [ebp - 0x40], 1
jmp 0x41536f
xor edi, edi
cmp dword [ebx], edi
jle 0x41536f
mov esi, dword [ebp - 0x40]
nop dword [eax + eax]
mov eax, dword [ebx + 4]
mov eax, dword [eax + edi*4]
push dword [eax + 0x20]
push ecx
call fcn.004184a0
mov ecx, dword [ebx + 4]
add esp, 8
mov ecx, dword [ecx + edi*4]
inc edi
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 8], esi
cmp edi, dword [ebx]
jl 0x415340
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
inc edx
add eax, 4
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x3c], eax
cmp edx, dword [esi + 0x108]
jl 0x415320
mov eax, dword [ebp - 0x30]
add ecx, 0xc0
sub eax, 1
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
jne 0x415300
lea ecx, [esi + 0x44c]
mov edx, 2
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], edx
nop word [eax + eax]
mov eax, dword [esi + 0x44]
xor edi, edi
test eax, eax
jle 0x4153f0
mov ebx, dword [ebp - 0x2c]
nop dword [eax]
mov eax, dword [esi + 0x40]
mov eax, dword [eax + edi*4]
push dword [eax + 0x24]
push ebx
call fcn.004184a0
mov ecx, dword [esi + 0x40]
add esp, 8
mov ecx, dword [ecx + edi*4]
inc edi
mov dword [eax + 4], ecx
mov dword [eax + 8], 0
mov eax, dword [esi + 0x44]
cmp edi, eax
jl 0x4153c0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
xor edi, edi
test eax, eax
jle 0x415433
mov ebx, dword [ebp - 0x2c]
nop dword [eax]
mov eax, dword [esi + 0x40]
mov eax, dword [eax + edi*4]
mov eax, dword [eax + 0x28]
test eax, eax
je 0x415427
push eax
push ebx
call fcn.004184a0
mov ecx, dword [esi + 0x40]
add esp, 8
mov ecx, dword [ecx + edi*4]
mov dword [eax + 4], ecx
mov dword [eax + 8], 1
inc edi
cmp edi, dword [esi + 0x44]
jl 0x415400
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
add ecx, 0xc0
sub edx, 1
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], edx
jne 0x4153b0
lea ebx, [esi + 0x5cc]
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], ebx
nop dword [eax + eax]
mov eax, dword [esi + 0x128]
push dword [eax]
push ebx
call fcn.004184a0
mov ecx, dword [esi + 0x128]
add esp, 8
mov dword [eax + 4], ecx
cmp dword [esi + 0x12c], 0
je 0x4154a3
mov eax, dword [esi + 0x128]
mov eax, dword [eax + 4]
test eax, eax
je 0x4154a3
push eax
push ebx
call fcn.004184a0
mov ecx, dword [esi + 0x128]
add esp, 8
mov dword [eax + 4], ecx
xor ebx, ebx
mov edi, dword [ebx + 0x4acf5c]
push dword [edi]
push dword [ebp - 0x2c]
call fcn.004184a0
add esp, 8
mov dword [eax + 4], edi
cmp dword [esi + 0x12c], 0
je 0x4154da
mov eax, dword [edi + 4]
test eax, eax
je 0x4154da
push eax
push dword [ebp - 0x2c]
call fcn.004184a0
add esp, 8
mov dword [eax + 4], edi
add ebx, 4
cmp ebx, 8
jb 0x4154a5
mov ebx, dword [ebp - 0x2c]
add ebx, 0xc0
sub dword [ebp - 0x30], 1
mov dword [ebp - 0x2c], ebx
jne 0x415460
push 0x14
call fcn.00419dc0
add esp, 4
mov dword [esi + 0x13c], eax
mov edi, 0x10
nop dword [eax]
call fcn.00431e20
push eax
push dword [esi + 0x13c]
call fcn.0041cd00
add esp, 8
sub edi, 1
jne 0x415510
lea ebx, [esi + 0x14c]
mov dword [ebp - 0x40], 8
nop word [eax + eax]
push dword [esi + 0x13c]
call fcn.0041cdd0
add esp, 4
mov dword [ebp - 0x30], 0
mov edi, ebx
mov eax, dword [edi]
test eax, eax
je 0x41557b
push eax
push dword [esi + 0x13c]
call fcn.00419970
mov eax, dword [ebp - 0x30]
add esp, 8
inc eax
add edi, 0xc
mov dword [ebp - 0x30], eax
cmp eax, 0x10
jl 0x415557
add ebx, 0xc0
sub dword [ebp - 0x40], 1
jne 0x415540
push dword [esi + 0x13c]
call fcn.0041cdd0
push dword [esi + 0x13c]
call fcn.0041cdd0
push 0
push dword [esi + 0x13c]
call fcn.00419910
push 0
push dword [esi + 0x13c]
call fcn.0041ce20
mov eax, dword [esi + 0x13c]
push 1
mov eax, dword [eax]
add eax, 0xfffffffb
push eax
mov dword [esi + 0x34], eax
call fcn.00406130
mov ecx, dword [esi + 0x13c]
push dword [esi + 0x34]
mov dword [esi + 0x30], eax
mov ecx, dword [ecx + 0x10]
add ecx, 5
push ecx
push eax
call fcn.0044b7f0
push dword [esi + 0x13c]
mov ebx, dword [ebp - 0x28]
push ebx
call fcn.00419ef0
mov ecx, dword [ebp - 0x34]
add esp, 0x34
test ecx, ecx
jne 0x413f24
pop edi
mov dword [esi], 0x1a26
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
mov dword [ebx + 0x98], 0
mov dword [ebx + 0x9c], 0
mov dword [esi + 0x48], 0
mov dword [esi + 0x4c], 0
mov dword [esi + 0x50], 0
mov dword [esi + 0x54], 0
mov dword [esi + 0x60], 0
mov dword [esi + 0x64], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x14], 0
add dword [ecx + 0x18], 0x10
xor edi, edi
mov dword [esi + 0x144], 0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push ecx
call fcn.0041cfa0
mov edx, dword [ebp - 0x3c]
add esp, 0xc
test edx, edx
je 0x415efb
cmp edi, 4
jne 0x4156c7
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x4156ee
mov ecx, dword [ecx + 0x38]
test ecx, ecx
je 0x4156ee
xor eax, eax
mov dword [esi + 0x50], ecx
cmp dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x34]
setne al
inc edi
mov dword [esi + 0x58], eax
jmp 0x415684
cmp edi, 5
jne 0x4156ee
mov ecx, dword [esi + 0x4c]
test ecx, ecx
je 0x4156ee
mov ecx, dword [ecx + 0x38]
test ecx, ecx
je 0x4156ee
xor eax, eax
mov dword [esi + 0x54], ecx
cmp dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x34]
setne al
inc edi
mov dword [esi + 0x5c], eax
jmp 0x415684
xor ecx, ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x10
jge 0x415eda
mov eax, edi
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
lea eax, [eax + 0x53]
lea eax, [esi + eax*4]
mov dword [ebp - 0x28], eax
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
test eax, eax
je 0x415eda
push dword [ebp - 0x2c]
push edx
push eax
call fcn.004169c0
add esp, 0xc
test eax, eax
jne 0x415766
cmp edi, 6
je 0x415737
cmp edi, 7
jne 0x41575d
mov ecx, dword [ebp - 0x28]
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ecx + 4]
push dword [eax + 4]
call fcn.004169c0
add esp, 0xc
test eax, eax
je 0x41575d
mov dword [esi + 0x130], 1
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3c]
inc ecx
jmp 0x4156f0
test edi, edi
je 0x415773
cmp edi, 1
jne 0x415860
cmp dword [ebp - 0x38], 0
jne 0x41578f
push dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
push eax
push dword [ebp - 0x30]
call fcn.00416830
add esp, 0xc
test eax, eax
jne 0x415799
mov dword [esi + 0x144], 0
test edi, edi
jne 0x4157b8
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov dword [ebx + 0x98], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0xc], eax
jmp 0x415684
cmp edi, 1
jne 0x415860
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 4]
mov dword [ebx + 0x9c], eax
mov eax, dword [ecx + 8]
mov dword [esi + 0x10], eax
xor eax, eax
mov dword [ebx + 0x6c8], 0
mov dword [ebp - 0x28], eax
nop dword [eax]
nop word [eax + eax]
mov ecx, dword [eax*8 + 0x4acea0]
mov dword [ebp - 0x30], ecx
cmp ecx, dword [ebx + 0x9c]
je 0x41584e
push dword [ebp - 0x2c]
push dword [ebp - 0x3c]
push dword [ecx + 0x30]
call fcn.004169c0
add esp, 0xc
test eax, eax
je 0x41584b
mov eax, dword [ebp - 0x30]
push dword [eax + 0x34]
push dword [ebx + 0xfc]
push dword [ebx + 0xf8]
call fcn.00446e60
add esp, 0xc
test eax, eax
jne 0x41584b
mov eax, dword [ebx + 0x6c8]
mov ecx, dword [ebp - 0x28]
mov dword [ebx + eax*4 + 0x6b0], ecx
inc dword [ebx + 0x6c8]
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 6
jb 0x4157f0
mov ecx, dword [ebp - 0x34]
inc edi
jmp 0x415684
cmp edi, 2
jne 0x41587d
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov dword [esi + 0x48], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x14], eax
jmp 0x415684
cmp edi, 3
jne 0x41589a
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov dword [esi + 0x4c], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x18], eax
jmp 0x415684
cmp edi, 4
jne 0x4158b7
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov dword [esi + 0x50], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x58], eax
jmp 0x415684
cmp edi, 5
jne 0x4158d4
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov dword [esi + 0x54], eax
mov eax, dword [ecx + 8]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x5c], eax
jmp 0x415684
cmp edi, 6
jne 0x4158eb
mov ecx, dword [ebp - 0x28]
inc edi
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x34]
mov dword [esi + 0x60], eax
jmp 0x415684
cmp edi, 7
je 0x4158fe
inc edi
cmp edi, 8
jge 0x415907
mov ecx, dword [ebp - 0x34]
jmp 0x415684
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 4]
mov dword [esi + 0x64], eax
cmp dword [esi + 0x130], 0
je 0x415923
push str.Server_supports_delayed_compression__will_try_this_later
push dword [ebx + 0x110]
call fcn.0043e810
add esp, 8
mov edi, dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
call fcn.0041cfa0
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
call fcn.0041cfa0
push edi
call fcn.00419d50
add esp, 0x1c
test eax, eax
je 0x41595f
cmp dword [esi + 0x144], 0
jne 0x41595f
mov eax, 1
jmp 0x415961
xor eax, eax
mov dword [esi + 0x148], eax
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
call eax
mov edi, dword [ebx + 4]
mov edx, eax
mov ecx, edi
mov dword [ebx + 0xc], edx
lea eax, [ecx + 1]
mov dword [ebp - 0x30], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x415984
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebx + 0x98]
push ecx
push edi
push edx
push dword [eax + 0xc]
call fcn.00416930
mov edx, dword [ebx + 8]
add esp, 0x10
mov ecx, edx
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4159b0
mov eax, dword [ebx + 0x98]
sub ecx, edi
push ecx
push edx
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [esi + 0x34]
mov eax, dword [ebx + 0x98]
push dword [esi + 0x30]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
push dword [esi + 0x30]
call fcn.00406110
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
inc eax
push eax
mov eax, dword [ecx + 0x14]
dec eax
push eax
mov eax, dword [ebx + 0x98]
push dword [ebx + 0xc]
push dword [eax + 0xc]
call fcn.00416930
add esp, 0x34
cmp dword [esi + 0xc], 0
je 0x415a5f
push 1
push ebx
call fcn.0041d720
mov eax, dword [ebx + 0x98]
push ebx
push 0x41c7d0
push dword [eax]
push str.key_exchange_algorithm
push dword [ebx + 0x110]
call fcn.0043e200
add esp, 0x1c
mov dword [esi + 0x140], eax
test eax, eax
jns 0x413ed9
pop edi
mov dword [esi], 0x1abc
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x10], 0
je 0x415b82
push 1
push ebx
call fcn.0041d720
xor edi, edi
add esp, 8
mov dword [ebp - 0x30], edi
cmp dword [ebx + 0x6c8], edi
jle 0x415b17
lea eax, [ebx + 0x6b0]
xor esi, esi
mov dword [ebp - 0x40], eax
mov eax, dword [eax]
xor edi, edi
mov dword [ebp - 0x38], eax
push edi
push 0x19
push dword [ebx + 0x248]
call fcn.00403110
add esp, 0xc
test eax, eax
je 0x415af6
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx*8 + 0x4acea4]
je 0x415ac0
inc edi
cmp edi, 5
jl 0x415a97
jmp 0x415af6
mov eax, dword [ecx*8 + 0x4acea0]
mov eax, dword [eax + 0x30]
test esi, esi
je 0x415aeb
push 0
push eax
push 0x4ab834
push esi
mov edi, esi
call fcn.004059c0
push edi
mov esi, eax
call fcn.00406110
add esp, 0x14
jmp 0x415af6
push eax
call fcn.00405aa0
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
inc ecx
add eax, 4
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x40], eax
cmp ecx, dword [ebx + 0x6c8]
jl 0x415a90
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x38]
mov eax, dword [ebx + 0x9c]
mov ecx, dword [ebx + 0x110]
push ebx
push 0x41c7d0
mov eax, dword [eax + 0x30]
test edi, edi
je 0x415b49
push edi
push eax
push ecx
call fcn.0043e420
push edi
mov dword [esi + 0x140], eax
call fcn.00406110
add esp, 0x18
jmp 0x415b5e
push eax
push str.host_key_type
push ecx
call fcn.0043e200
add esp, 0x14
mov dword [esi + 0x140], eax
cmp dword [esi + 0x140], 0
jge 0x413ff4
pop edi
mov dword [esi], 0x1aff
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x14], 0
je 0x4140e9
push 1
push ebx
call fcn.0041d720
mov eax, dword [esi + 0x48]
push ebx
push 0x41c7d0
push dword [eax + 0x20]
push str.client_to_server_cipher
push dword [ebx + 0x110]
call fcn.0043e200
add esp, 0x1c
mov dword [esi + 0x140], eax
test eax, eax
jns 0x4140d5
pop edi
mov dword [esi], 0x1b18
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
cmp dword [esi + 0x148], 0
je 0x414046
pop edi
mov dword [esi], 0x1b43
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
xor eax, eax
mov ecx, dword [esi + 0x4c]
test ecx, ecx
je 0x415c0a
mov ecx, dword [ecx + 0x28]
jmp 0x415c0c
xor ecx, ecx
cmp eax, ecx
cmovg ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
shl eax, 3
cmp ecx, eax
jle 0x415c2a
mov dword [esi + 4], eax
push dword [ebx + 0x98]
call fcn.00428130
add esp, 4
test eax, eax
je 0x415d14
push str.Doing_Diffie_Hellman_group_exchange
push dword [ebx + 0x110]
call fcn.0043e810
mov dword [ebx + 0x184], 2
add esp, 8
mov eax, dword [esi + 4]
dec eax
cdq
and edx, 0x3f
lea ecx, [edx + eax]
mov edx, 0x200
sar ecx, 6
shl edx, cl
mov dword [esi + 8], edx
cmp edx, 0x400
jge 0x415c86
mov dword [esi + 8], 0x400
jmp 0x415c95
cmp edx, 0x2000
jle 0x415c95
mov dword [esi + 8], 0x2000
test dword [ebx + 0x50], 0x1000
je 0x415cb3
push 0x1e
call fcn.00419dc0
mov ecx, dword [esi + 8]
add esp, 4
mov dword [esi + 0x13c], eax
jmp 0x415ce7
push 0x22
call fcn.00419dc0
push 0x400
push eax
mov dword [esi + 0x13c], eax
call fcn.0041ce20
push dword [esi + 8]
push dword [esi + 0x13c]
call fcn.0041ce20
mov eax, dword [esi + 0x13c]
add esp, 0x14
mov ecx, 0x2000
push ecx
push eax
call fcn.0041ce20
push dword [esi + 0x13c]
push ebx
call fcn.00419ef0
add esp, 0x10
pop edi
mov dword [esi], 0x1b73
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
push dword [ebx + 0x98]
mov dword [ebx + 0x184], 1
call fcn.00428190
mov dword [ebx + 0xe8], eax
mov dword [esi + 0x38], 0x1e
mov dword [esi + 0x3c], 0x1f
mov eax, dword [ebx + 0x98]
push dword [eax + 4]
push str.Using_Diffie_Hellman_with_standard_group___s_
push ebx
call fcn.00416a20
add esp, 0x10
mov eax, dword [ebx + 0x98]
mov eax, dword [eax + 0xc]
push dword [eax + 0x18]
push str.Doing_Diffie_Hellman_key_exchange_with_hash__s
push ebx
call fcn.00416a20
push 2
push dword [ebx + 0x110]
call fcn.0043e880
mov eax, dword [esi + 4]
add eax, eax
push eax
push dword [ebx + 0xe8]
call fcn.00427fa0
push dword [esi + 0x38]
mov dword [esi + 0x24], eax
call fcn.00419dc0
push dword [esi + 0x24]
mov dword [esi + 0x13c], eax
push eax
call fcn.00419930
push dword [esi + 0x13c]
push ebx
call fcn.00419ef0
push 1
push dword [ebx + 0x110]
call fcn.0043e880
add esp, 0x38
pop edi
mov dword [esi], 0x1b96
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0xc]
push dword [eax + 0x18]
cmp edx, 2
jne 0x415eab
push ecx
call fcn.0042ce40
add esp, 4
push eax
push str.Doing_ECDH_key_exchange_with_curve__s_and_hash__s
push ebx
call fcn.00416a20
push dword [ebx + 0x98]
mov dword [ebx + 0x184], 3
call fcn.0042d000
add esp, 0x14
mov dword [esi + 0x90], eax
test eax, eax
jne 0x415e26
push str.Unable_to_generate_key_for_ECDH
jmp 0x413f33
lea ecx, [ebp - 0x30]
push ecx
push eax
call fcn.0042cf30
mov edi, eax
add esp, 8
test edi, edi
jne 0x415e5d
push dword [esi + 0x90]
call fcn.0042ce60
push str.Unable_to_encode_public_key_for_ECDH
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x10
jmp 0x413f42
push 0x1e
call fcn.00419dc0
push eax
mov dword [esi + 0x13c], eax
call fcn.0041cdd0
push dword [ebp - 0x30]
push edi
push dword [esi + 0x13c]
call fcn.0041cd70
push edi
call fcn.00406110
push dword [esi + 0x13c]
push ebx
call fcn.00419ef0
add esp, 0x20
pop edi
mov dword [esi], 0x1bec
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
push str.Doing_RSA_key_exchange_with_hash__s
push ebx
call fcn.00416a20
add esp, 0xc
mov dword [ebx + 0x184], 4
pop edi
mov dword [esi], 0x1c2a
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
push edx
push dword [ebp - 0x2c]
push dword [ebp + edi*4 - 0x24]
push str.Couldnt_agree_a__s__available:__.s_
call fcn.00405a80
push eax
push ebx
call fcn.0040e780
add esp, 0x18
jmp 0x413f42
push str.KEXINIT_packet_was_incomplete
jmp 0x413f33
test ecx, ecx
je 0x415f13
push str.Unexpected_data_from_server_while_waiting_for_user_host_key_response
jmp 0x413f33
cmp dword [ebp + 0x10], 0
jle 0x415f30
pop edi
mov dword [esi], 0x1ced
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x25c]
mov dword [esi + 0x140], eax
push 0
push ebx
call fcn.0041d720
add esp, 8
cmp dword [esi + 0x140], 0
jne 0x415f69
push 1
push 0
push 0
push str.Aborted_at_host_key_verification
push ebx
call fcn.0041c820
add esp, 0x14
jmp 0x413f42
push dword [esi + 0x78]
call fcn.00406110
add esp, 4
mov eax, dword [esi + 0x74]
mov dword [ebx + 0xa0], eax
mov eax, dword [ebx + 0x9c]
push dword [esi + 0x88]
mov eax, dword [eax + 4]
call eax
add esp, 4
cmp dword [esi + 0x134], 0
jne 0x415fee
movups xmm0, xmmword [esi + 0x94]
mov eax, dword [ebx + 0x98]
movups xmmword [ebx + 0xa4], xmm0
movups xmm0, xmmword [esi + 0xa4]
movups xmmword [ebx + 0xb4], xmm0
movups xmm0, xmmword [esi + 0xb4]
movups xmmword [ebx + 0xc4], xmm0
movups xmm0, xmmword [esi + 0xc4]
movups xmmword [ebx + 0xd4], xmm0
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
mov dword [ebx + 0xe4], eax
mov dword [esi + 0x134], 1
push 0x15
call fcn.00419dc0
push eax
push ebx
mov dword [esi + 0x13c], eax
call fcn.00419ef0
mov ecx, dword [ebx + 0x68]
add esp, 0xc
mov dword [ebx + 0x688], 0
test ecx, ecx
je 0x416022
mov eax, dword [ebx + 0x60]
push ecx
mov eax, dword [eax + 4]
call eax
add esp, 4
mov eax, dword [esi + 0x48]
mov dword [ebx + 0x60], eax
test eax, eax
je 0x416033
mov eax, dword [eax]
call eax
mov dword [ebx + 0x68], eax
mov ecx, dword [ebx + 0x80]
test ecx, ecx
je 0x416049
mov eax, dword [ebx + 0x70]
push ecx
mov eax, dword [eax + 4]
call eax
add esp, 4
mov ecx, dword [esi + 0x50]
mov dword [ebx + 0x70], ecx
mov eax, dword [esi + 0x58]
mov dword [ebx + 0x78], eax
test ecx, ecx
je 0x416069
push dword [ebx + 0x68]
mov eax, dword [ecx]
call eax
add esp, 4
mov dword [ebx + 0x80], eax
mov ecx, dword [ebx + 0x90]
test ecx, ecx
je 0x416082
mov eax, dword [ebx + 0x88]
push ecx
mov eax, dword [eax + 0xc]
call eax
add esp, 4
mov eax, dword [esi + 0x60]
mov dword [ebx + 0x88], eax
mov eax, dword [eax + 8]
call eax
mov dword [ebx + 0x90], eax
mov eax, dword [ebx + 0x60]
test eax, eax
je 0x416118
push dword [eax + 0x2c]
lea ebx, [esi + 0x94]
push 0x43
push ebx
push dword [esi + 0x2c]
push dword [ebp - 0x28]
call fcn.004188a0
mov edi, eax
mov eax, dword [ebp - 0x28]
push edi
mov ecx, dword [eax + 0x60]
push dword [eax + 0x68]
mov ecx, dword [ecx + 0xc]
call ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x60]
push dword [ecx + 0x2c]
push edi
call fcn.00440760
push edi
call fcn.00406110
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x60]
push dword [eax + 0x24]
push 0x41
push ebx
push dword [esi + 0x2c]
mov ebx, dword [ebp - 0x28]
push ebx
call fcn.004188a0
mov ecx, dword [ebx + 0x60]
mov edi, eax
push edi
push dword [ebx + 0x68]
mov ecx, dword [ecx + 8]
call ecx
mov ecx, dword [ebx + 0x60]
add esp, 0x44
push dword [ecx + 0x24]
push edi
call fcn.00440760
push edi
call fcn.00406110
add esp, 0xc
mov eax, dword [ebx + 0x70]
test eax, eax
je 0x41615a
push dword [eax + 0x30]
lea eax, [esi + 0x94]
push 0x45
push eax
push dword [esi + 0x2c]
push ebx
call fcn.004188a0
mov ecx, dword [ebx + 0x70]
mov edi, eax
push edi
push dword [ebx + 0x80]
mov ecx, dword [ecx + 8]
call ecx
mov ecx, dword [ebx + 0x70]
push dword [ecx + 0x30]
push edi
call fcn.00440760
push edi
call fcn.00406110
add esp, 0x28
mov eax, dword [ebx + 0x60]
test eax, eax
je 0x416172
push dword [eax + 0x34]
push str.Initialised__.200s_client__server_encryption
push ebx
call fcn.00416a20
add esp, 0xc
mov edx, dword [ebx + 0x70]
test edx, edx
je 0x4161ac
mov eax, dword [ebx + 0x60]
mov edi, 0x4aa407
mov ecx, str.__required_by_cipher_
cmp dword [eax + 0x38], 0
mov eax, str.__in_ETM_mode_
cmove ecx, edi
cmp dword [ebx + 0x78], 0
push ecx
cmove eax, edi
push eax
push dword [edx + 0x34]
push str.Initialised__.200s_client__server_MAC_algorithm_s_s
push ebx
call fcn.00416a20
add esp, 0x14
mov eax, dword [ebx + 0x88]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x4161c8
push eax
push str.Initialised__s_compression
push ebx
call fcn.00416a20
add esp, 0xc
push ebx
mov dword [ebx + 0x164], 0
call fcn.00419e70
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
mov dword [esi], 0x1d7e
xor ecx, ebp
pop esi
pop ebx
call fcn.0044a3f7
mov esp, ebp
pop ebp
ret