Function at 0x100128c0
Capabilities:
Check for time delay via gettickcount
Get local ipv4 addresses
Get socket information
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1004df69
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2bec
call fcn.10036fa0
mov eax, dword [0x1005d330]
push ebx
mov ebx, dword [ebp + 0x10]
mov dword [esp + 0x2bec], eax
cmp dword [ebx], 2
push esi
push edi
mov dword [esp + 0x14], ecx
jne 0x10013989
mov edx, dword [ebx + 4]
cmp edx, 0xffffffff
je 0x10013989
mov eax, dword [ebx + 0x18]
xor esi, esi
cmp eax, 0x1005fd50
mov dword [esp + 0x20], esi
jne 0x1001292a
mov esi, 0x40
mov dword [esp + 0x20], esi
cmp eax, 0x1005f770
jne 0x1001293a
mov esi, 2
mov dword [esp + 0x20], esi
cmp eax, 0x1005f540
jne 0x1001294a
mov esi, 0x80
mov dword [esp + 0x20], esi
cmp eax, 0x1005f658
jne 0x1001295a
mov esi, 0x20
mov dword [esp + 0x20], esi
cmp eax, 0x1005f888
jne 0x1001296a
mov esi, 0x80
mov dword [esp + 0x20], esi
cmp eax, 0x1005f9a0
jne 0x1001297a
mov esi, 0x80
mov dword [esp + 0x20], esi
cmp eax, 0x1005fab8
jne 0x1001298a
mov esi, 4
mov dword [esp + 0x20], esi
cmp eax, 0x1005fc38
jne 0x1001299a
mov esi, 4
mov dword [esp + 0x20], esi
cmp eax, 0x1005fe68
jne 0x100129aa
mov esi, 8
mov dword [esp + 0x20], esi
cmp eax, 0x1005f384
jne 0x100129ba
mov esi, 0xfe
mov dword [esp + 0x20], esi
mov eax, dword [0x10067900]
test eax, eax
je 0x10012bfd
cmp dword [ecx + 0x11c], 1
je 0x10012bfd
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0xc4]
push ecx
push edx
mov dword [esp + 0x30], 0x10
call dword [sym.imp.WS2_32.dll_getsockname]
mov edx, dword [esp + 0xc4]
mov eax, 0x10067d08
lea esp, [esp]
mov ecx, dword [eax]
test ecx, ecx
je 0x10012a18
cmp edx, ecx
je 0x10012bfd
add eax, 4
cmp eax, 0x10067d30
jl 0x10012a00
mov edx, dword [ebx + 4]
xor eax, eax
mov byte [esp + 0x1be8], 0
mov ecx, 0x400
lea edi, [esp + 0x1be9]
push eax
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x18]
push edx
mov dword [esp + 0x34], 0x1001
call fcn.10017160
test eax, eax
je 0x10012a66
mov edx, dword [ebx + 4]
push 0
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1bf0]
push ecx
mov ecx, dword [esp + 0x20]
push edx
call fcn.10017520
lea eax, [esp + 0x28]
push str.The_proxy_server_blocked_the_external_users_connections.
push eax
call fcn.1000e2c0
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x1bf4]
push ecx
call fcn.10036e11
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10012aa6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
mov byte [esp + 0x3e8], 0
mov ecx, 0xff
lea edi, [esp + 0x3e9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x3ec]
push ecx
push 0
push 0x10
lea edx, [ebx + 8]
push edx
mov dword [esp + 0x44], 0x400
call dword [sym.imp.WS2_32.dll_WSAAddressToStringA]
mov eax, dword [0x10061430]
add eax, 0xfffffff0
push eax
call fcn.10008e60
add eax, 0x10
add esp, 4
mov dword [esp + 0x10], eax
lea eax, [esp + 0x3e8]
push eax
push str._IP_
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c0c], 0
call fcn.1000c690
push 0x10050713
push str._MAC_
lea ecx, [esp + 0x18]
call fcn.1000c690
push 0
call fcn.10038497
add esp, 4
push str._Y__m__d__H:_M:_S
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
call fcn.1000dfb0
mov eax, dword [eax]
push eax
push str._Time_
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c0c], 1
call fcn.1000c690
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x2c04], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10012b94
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x1be8]
push eax
push str._AuthResult_
lea ecx, [esp + 0x18]
call fcn.1000c690
cmp esi, 2
je 0x10012bbd
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x18]
call fcn.10010660
mov esi, dword [esp + 0x10]
mov edx, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
push esi
push edx
call fcn.10017670
lea eax, [esi - 0x10]
mov dword [esp + 0x2c04], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10013989
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x10013989
mov edi, dword [esp + 0x14]
lea esi, [edi + 0x56c]
mov ecx, esi
call fcn.10001290
xor eax, eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
lea eax, [edi + 0x528]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x2c08], 2
call fcn.100120c0
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
mov eax, dword [edi + 0x11c]
test eax, eax
jne 0x10012c77
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x100136ec
push ebx
push 0x10050713
push str.Unknown
mov ecx, edi
call fcn.100125a0
lea ecx, [esp + 0x3c]
mov esi, eax
call fcn.10008960
mov eax, esi
jmp 0x1001398b
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x10], eax
xor eax, eax
mov byte [esp + 0x3e8], 0
mov ecx, 0xff
lea edi, [esp + 0x3e9]
rep stosd dword es:[edi], eax
mov ecx, dword [ebx + 0xc]
stosw word es:[edi], ax
push ecx
stosb byte es:[edi], al
call dword [sym.imp.WS2_32.dll_inet_ntoa]
lea edx, [esp + 0x3e8]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
mov byte [edx], cl
inc edx
test cl, cl
jne 0x10012cb0
mov byte [esp + 0xbe8], cl
xor eax, eax
mov ecx, 0x3ff
lea edi, [esp + 0xbe9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor edx, edx
mov dword [esp + 0xb1], edx
mov dword [esp + 0xb5], edx
xor eax, eax
mov byte [esp + 0x7e8], dl
mov ecx, 0xff
lea edi, [esp + 0x7e9]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x24]
push str.Invalid_user.
xor esi, esi
push eax
mov dword [esp + 0x34], esi
mov byte [esp + 0xb8], 0
mov dword [esp + 0xc1], edx
call fcn.1000e2c0
mov ecx, dword [eax]
add esp, 8
lea edx, [esp + 0x7e8]
mov edi, edi
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x10012d30
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10012d58
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x30], esi
lea eax, [edi + 0x29c]
test edi, edi
mov dword [esp + 0x18], eax
jne 0x10012d72
xor eax, eax
jmp 0x10012d89
mov ecx, dword [esp + 0x44]
sub ecx, edi
mov eax, 0x2f149903
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x30], eax
jge 0x100134ac
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0x10c]
test eax, eax
je 0x100133e5
mov edx, ecx
cmp dword [edx], 0
jne 0x100133e5
mov eax, ecx
mov ecx, dword [eax - 0x140]
test ecx, ecx
je 0x100133e5
mov ecx, dword [eax - 0x148]
test ecx, ecx
je 0x10012e0c
mov ecx, dword [eax - 0x14c]
mov esi, dword [sym.imp.WS2_32.dll_ntohl]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
mov edi, eax
call esi
cmp eax, edi
ja 0x100133e5
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x150]
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
mov edi, eax
call esi
cmp eax, edi
jb 0x100133e5
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x154]
test ecx, ecx
je 0x10012f4b
lea ecx, [esp + 0x1c]
call fcn.10002570
test byte [0x1005ed5c], 1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [esp + 0x2c04], 3
jne 0x10012e48
or dword [0x1005ed5c], 1
call edi
mov dword [0x1005ed58], eax
mov ebx, dword [esp + 0x14]
lea esi, [ebx + 0x5e4]
mov ecx, esi
call fcn.10001290
call edi
sub eax, dword [0x1005ed58]
cmp eax, 0x927c0
jbe 0x10012e7a
call edi
lea ecx, [ebx + 0x58c]
mov dword [0x1005ed58], eax
call fcn.100089a0
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push eax
add edi, 0x58c
push ecx
mov ecx, edi
call fcn.1000d900
mov edx, dword [esi]
mov ecx, esi
mov ebx, eax
call dword [edx + 0x14]
test ebx, ebx
jne 0x10012ee7
mov al, byte [esp + 0xb0]
test al, al
jne 0x10012ed6
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0xb0]
push eax
push ecx
call fcn.1000b0f0
mov al, byte [esp + 0xb8]
add esp, 8
test al, al
jne 0x10012ed6
lea ecx, [esp + 0x1c]
jmp 0x100133d8
lea edx, [esp + 0xb0]
push edx
lea ecx, [esp + 0x20]
call fcn.10003940
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
add eax, 0xfffffe9c
push eax
push ecx
call fcn.1003ebdf
add esp, 8
test eax, eax
je 0x10012f0b
lea ecx, [esp + 0x1c]
jmp 0x100133d8
mov ecx, esi
call fcn.10001290
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.1000c610
mov eax, dword [esp + 0x14]
push eax
mov ecx, edi
call fcn.1000df40
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c04], 2
call fcn.10002590
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x168]
test ecx, ecx
je 0x10013075
mov eax, dword [esp + 0x20]
cmp eax, 0x40
je 0x10012f6b
cmp eax, 2
jne 0x10013075
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp + 0x2c], 1
je 0x100133e5
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10012f81
sub eax, edx
mov dword [esp + 0x24], eax
je 0x100133e5
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 8]
add eax, 0xfffffd64
push eax
push ecx
call fcn.1003ebdf
add esp, 8
test eax, eax
jne 0x100133e5
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x100133e5
mov eax, dword [esp + 0x18]
add eax, 0xfffffe65
mov edi, str._NT_USER_AUTH
mov esi, eax
mov ecx, 0xe
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x10013037
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x124]
test ecx, ecx
je 0x100133e5
lea ecx, [esp + 0x68]
call fcn.10034ab0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x14]
push ecx
push edx
add eax, 0x128
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x2c10], 4
call fcn.10034fb0
test eax, eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x2c04], 2
jne 0x10013030
call fcn.10034ae0
jmp 0x100133e5
call fcn.10034ae0
jmp 0x10013075
mov esi, eax
mov eax, dword [ebp + 0xc]
lea esp, [esp]
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x10013068
test cl, cl
je 0x10013064
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x10013068
add eax, 2
add esi, 2
test cl, cl
jne 0x10013040
xor eax, eax
jmp 0x1001306d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100133e5
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x148]
test ecx, ecx
jne 0x100130b1
mov ecx, eax
mov eax, dword [ecx - 0x154]
test eax, eax
jne 0x100130b1
mov edx, ecx
mov eax, dword [edx - 0x168]
test eax, eax
je 0x100133e5
mov eax, dword [esp + 0x20]
cmp eax, 0x40
je 0x100130b1
cmp eax, 2
jne 0x100133e5
mov edi, dword [esp + 0x18]
mov eax, dword [edi + 4]
test eax, eax
je 0x10013155
lea eax, [esp + 0x60]
push eax
call fcn.1000b270
push str._Y__m__d__H:_M:_S
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x68]
call fcn.1000dfb0
mov eax, dword [eax]
lea esi, [edi + 8]
mov dword [esp + 0x24], esi
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x1001310e
test cl, cl
je 0x1001310a
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x1001310e
add eax, 2
add esi, 2
test cl, cl
jne 0x100130e6
xor eax, eax
jmp 0x10013113
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
lea ecx, [esp + 0x5c]
setg bl
call fcn.10002590
test bl, bl
je 0x10013155
lea eax, [esp + 0x54]
push str.Auto_disabled_at__s
push eax
call fcn.1000e2c0
mov ecx, dword [esp + 0x2c]
mov edx, dword [eax]
push ecx
push edx
lea eax, [esp + 0x7f8]
push eax
call fcn.10036e11
add esp, 0x14
lea ecx, [esp + 0x54]
jmp 0x100133e0
mov ebx, dword [esp + 0x20]
test dword [edi - 0x144], ebx
jne 0x1001318c
lea ecx, [esp + 0x58]
push str.The_required_service_is_disabled
push ecx
call fcn.1000e2c0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x7f4]
push eax
call fcn.10036e11
add esp, 0x10
lea ecx, [esp + 0x58]
jmp 0x100133e0
cmp dword [edi - 0x130], 0xffffffff
je 0x10013414
lea ecx, [esp + 0xc0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [edi - 0x130]
mov edx, dword [esp + 0x14]
mov esi, dword [edx + 0x54c]
movzx edx, word [esp + 0xc4]
mov eax, ecx
imul eax, eax, 0x7054
add eax, esi
test dword [eax + edx*4 + 0x7038], ebx
je 0x10013414
imul ecx, ecx, 0x7054
imul edx, edx, 0x1001
add ecx, esi
lea eax, [edx + ecx + 0x31]
push eax
lea ecx, [esp + 0x2c]
call fcn.100047c0
mov ebx, dword [sym.imp.SHLWAPI.dll_StrTrimA]
mov byte [esp + 0x2c04], 5
mov dword [esp + 0x24], 0
jmp 0x10013210
xor eax, eax
mov byte [esp + 0xd0], 0
mov ecx, 0x41
lea edi, [esp + 0xd1]
rep stosd dword es:[edi], eax
mov byte [esp + 0x2e0], al
mov ecx, 0x41
lea edi, [esp + 0x2e1]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x24]
push ecx
push 0x1005111c
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x34]
call fcn.1000d300
mov ecx, dword [eax]
lea edx, [esp + 0xd0]
mov edi, edi
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x10013260
lea ecx, [esp + 0x4c]
call fcn.10002590
push 0x10050c04
lea eax, [esp + 0xd4]
push eax
call ebx
lea ecx, [esp + 0xd0]
push 0x10051118
push ecx
call fcn.10036fe0
add esp, 8
test eax, eax
je 0x100132c1
mov byte [eax], 0
inc eax
lea edx, [esp + 0x2e0]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x100132a8
push 0x10050c04
lea edx, [esp + 0x2e4]
push edx
call ebx
xor eax, eax
mov byte [esp + 0x1d8], 0
mov ecx, 0x41
lea edi, [esp + 0x1d9]
rep stosd dword es:[edi], eax
movzx eax, word [esp + 0xca]
movzx ecx, word [esp + 0xc8]
push eax
push ecx
lea edx, [esp + 0x1e0]
push str._02d:_02d
push edx
call fcn.10036e11
add esp, 0x10
lea esi, [esp + 0x1d8]
lea eax, [esp + 0xd0]
mov edi, edi
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10013334
test cl, cl
je 0x10013330
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10013334
add eax, 2
add esi, 2
test cl, cl
jne 0x10013310
xor eax, eax
jmp 0x10013339
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jg 0x10013381
lea esi, [esp + 0x2e0]
lea eax, [esp + 0x1d8]
jmp 0x10013350
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x10013374
test cl, cl
je 0x10013370
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x10013374
add eax, 2
add esi, 2
test cl, cl
jne 0x10013350
xor eax, eax
jmp 0x10013379
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jle 0x10013403
cmp dword [esp + 0x24], 0xffffffff
jne 0x10013210
lea eax, [esp + 0x34]
push str.The_client_is_disabled_by_time_schedule___s_
push eax
call fcn.1000e2c0
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx - 0x130]
mov edx, dword [esp + 0x1c]
imul ecx, ecx, 0x7054
mov edx, dword [edx + 0x54c]
mov eax, dword [eax]
add ecx, edx
push ecx
push eax
lea eax, [esp + 0x7f8]
push eax
call fcn.10036e11
add esp, 0x14
lea ecx, [esp + 0x34]
call fcn.10002590
lea ecx, [esp + 0x28]
mov byte [esp + 0x2c04], 2
call fcn.10002590
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x40]
mov ebx, dword [ebp + 0x10]
inc ecx
mov dword [esp + 0x30], ecx
add eax, 0x2b8
jmp 0x10012d66
lea ecx, [esp + 0x28]
mov byte [esp + 0x2c04], 2
call fcn.10002590
mov edi, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
test eax, eax
mov esi, dword [esp + 0x40]
je 0x10013461
mov esi, dword [esp + 0x14]
add esi, 0x56c
mov ecx, esi
call fcn.10001290
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x14]
mov ebx, eax
mov eax, dword [esp + 0x10]
push eax
add ecx, 0x5a8
call fcn.1000c550
mov dword [eax], ebx
mov dword [eax + 4], edi
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
mov esi, dword [esp + 0x40]
imul edi, edi, 0x2b8
mov ecx, dword [edi + esi + 0x15c]
test ecx, ecx
lea eax, [edi + esi]
jge 0x10013551
mov ecx, dword [ebp + 0x14]
test ecx, ecx
jne 0x1001353a
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
call fcn.100125a0
test esi, esi
mov edi, eax
je 0x100134a5
push esi
call fcn.10045c46
add esp, 4
mov eax, edi
jmp 0x1001398b
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x1001383e
mov ebx, dword [esp + 0x14]
lea esi, [ebx + 0x56c]
mov ecx, esi
call fcn.10001290
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x50]
push edx
push eax
lea ecx, [ebx + 0x5a8]
call fcn.1000b450
test eax, eax
je 0x10013514
mov ebx, dword [eax + 4]
mov edi, dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x927c0
mov ecx, esi
jbe 0x10013530
mov eax, dword [esi]
call dword [eax + 0x14]
lea ecx, [esp + 0x3c]
call fcn.10008960
or eax, 0xffffffff
jmp 0x1001398b
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x14]
test edi, edi
je 0x10013528
push edi
call fcn.10045c46
add esp, 4
or eax, 0xffffffff
jmp 0x1001398b
mov edx, dword [esi]
call dword [edx + 0x14]
jmp 0x10013418
test esi, esi
je 0x10013547
push esi
call fcn.10045c46
add esp, 4
mov eax, 1
jmp 0x1001398b
jne 0x10013561
test esi, esi
je 0x10013989
push esi
jmp 0x10013981
mov ecx, dword [eax + 0x15c]
mov dword [esp + 0x24], ecx
push eax
lea ecx, [esp + 0x20]
call fcn.100047c0
mov byte [esp + 0x2c04], 6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x34], eax
cmp dword [edx], 2
jne 0x1001367c
mov esi, dword [esp + 0x14]
mov edi, edx
lea esp, [esp]
lea ecx, [esi + 0x56c]
call fcn.10001290
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov eax, dword [esi + 0x53c]
test eax, eax
je 0x100135d8
mov ecx, dword [esi + 0x540]
sub ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x2c], eax
jge 0x1001363a
mov eax, dword [esi + 0x53c]
mov ecx, dword [esp + 0x1c]
add eax, ebx
push ecx
push eax
call fcn.1003ebdf
add esp, 8
test eax, eax
jne 0x1001361f
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x53c]
mov edi, dword [ebp + 0x10]
add eax, ebx
add edi, 8
lea esi, [eax + 0x13c]
mov ecx, 4
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x1001361f
inc dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov edi, dword [ebp + 0x10]
mov esi, dword [esp + 0x14]
inc ecx
mov dword [esp + 0x2c], ecx
add ebx, 0x150
jmp 0x100135b5
mov edx, dword [esi + 0x56c]
lea ecx, [esi + 0x56c]
call dword [edx + 0x14]
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x28], eax
jl 0x100136b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esp + 0x34]
cmp eax, 0x7530
jae 0x100136ff
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [edi], 2
je 0x100135a0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x2c04], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100136a2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x3c]
call fcn.10008960
jmp 0x10013989
mov eax, dword [ebp + 0x14]
test eax, eax
jne 0x100136e3
mov ecx, dword [ebp + 0xc]
mov edx, dword [esp + 0x1c]
push edi
push ecx
push edx
mov ecx, esi
call fcn.100125a0
lea ecx, [esp + 0x1c]
mov esi, eax
call fcn.10002590
lea ecx, [esp + 0x3c]
call fcn.10008960
mov eax, esi
jmp 0x1001398b
lea ecx, [esp + 0x1c]
call fcn.10002590
lea ecx, [esp + 0x3c]
call fcn.10008960
mov eax, 1
jmp 0x1001398b
mov eax, dword [edi + 4]
push 0
push eax
mov ecx, esi
call fcn.10017160
test eax, eax
je 0x10013729
mov edx, dword [edi + 4]
push 0
push 0x1000
lea ecx, [esp + 0xbf0]
push ecx
push edx
call dword [sym.imp.WS2_32.dll_recv]
lea eax, [esp + 0x34]
push str.The_account___s__has_been_limited_to__d_connections.
push eax
call fcn.1000e2c0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
mov eax, dword [eax]
push ecx
push edx
push eax
lea eax, [esp + 0xbfc]
push eax
call fcn.10036e11
add esp, 0x18
lea ecx, [esp + 0x34]
call fcn.10002590
push 0x10061430
lea ecx, [esp + 0x14]
call fcn.1000c610
lea ecx, [esp + 0x3e8]
push ecx
mov bl, 7
push str._IP_
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c0c], bl
call fcn.1000c690
lea edx, [esp + 0xb0]
push edx
push str._MAC_
lea ecx, [esp + 0x18]
call fcn.1000c690
push str._Y__m__d__H:_M:_S
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x68]
push ecx
call fcn.1000b270
mov ecx, eax
call fcn.1000dfb0
mov eax, dword [eax]
push eax
push str._Time_
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c0c], 8
call fcn.1000c690
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c04], bl
call fcn.10002590
lea edx, [esp + 0xbe8]
push edx
push str._AuthResult_
lea ecx, [esp + 0x18]
call fcn.1000c690
cmp dword [esp + 0x20], 2
je 0x1001380e
lea eax, [esp + 0x10]
push eax
mov ecx, esi
call fcn.10010660
mov ecx, dword [esp + 0x10]
mov edx, dword [edi + 4]
push ecx
push edx
mov ecx, esi
call fcn.10017670
lea ecx, [esp + 0x10]
call fcn.10002590
lea ecx, [esp + 0x1c]
call fcn.10002590
lea ecx, [esp + 0x3c]
call fcn.10008960
jmp 0x10013989
mov eax, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
push 0
push eax
call fcn.10017160
test eax, eax
je 0x1001386a
mov edx, dword [ebx + 4]
push 0
push 0x1000
lea ecx, [esp + 0xbf0]
push ecx
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov eax, dword [0x10061430]
add eax, 0xfffffff0
push eax
call fcn.10008e60
add eax, 0x10
add esp, 4
mov dword [esp + 0x10], eax
lea eax, [esp + 0x3e8]
push eax
mov bl, 9
push str._IP_
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c0c], bl
call fcn.1000c690
lea ecx, [esp + 0xb0]
push ecx
push str._MAC_
lea ecx, [esp + 0x18]
call fcn.1000c690
push 0
call fcn.10038497
add esp, 4
mov dword [esp + 0x50], edx
push str._Y__m__d__H:_M:_S
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x54]
mov dword [esp + 0x54], eax
call fcn.1000dfb0
mov eax, dword [eax]
push eax
push str._Time_
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c0c], 0xa
call fcn.1000c690
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x2c04], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001391a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x7e8]
push eax
push str._AuthResult_
lea ecx, [esp + 0x18]
call fcn.1000c690
cmp dword [esp + 0x20], 2
je 0x10013945
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x18]
call fcn.10010660
mov edx, dword [ebp + 0x10]
mov esi, dword [esp + 0x10]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x14]
push esi
push eax
call fcn.10017670
lea eax, [esi - 0x10]
mov byte [esp + 0x2c04], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1001397c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
test edi, edi
je 0x10013989
push edi
call fcn.10045c46
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x2bfc]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x2bf4]
call fcn.10036c09
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10