Function at 0x4296f0
Capabilities:
Read file on windows
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2690
call fcn.00401956
push ebx
push esi
push edi
lea edi, [ebp - 0x2090]
mov ecx, 0x824
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x529844]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x20], 0
je 0x429a3f
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [edx + ecx*4]
mov eax, dword [eax + 0x20]
sub eax, dword [edx + 0x28]
mov dword [ebp - 0x2020], eax
mov esi, esp
push 0
mov eax, dword [ebp - 0x2020]
push eax
lea ecx, [ebp - 0x2014]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.WS2_32.dll_recv]
cmp esi, esp
call fcn.004035b2
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 8], 1
jne 0x4297cd
push str.Tried_to_treat_a_DATAGRAM_socket_like_a_stream.
mov eax, dword [0x529810]
add eax, 0xe
push eax
push str.C:Users1Downloadsdnscat2_masterclientlibs_select_group.c
push str.Unrecoverable_error_in__s__d_:__s_n_n
push 2
call fcn.00402d1f
add esp, 4
push eax
call fcn.0040359e
add esp, 0x14
call fcn.00403c92
cmp dword [ebp - 0x202c], 0
jge 0x42985d
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x18], 0
je 0x429848
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
push eax
call fcn.00429570
add esp, 4
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x18]
call ecx
add esp, 0x10
cmp esi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042b560
add esp, 0xc
jmp 0x429858
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429a3a
cmp dword [ebp - 0x202c], 0
jne 0x4298d2
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x1c], 0
je 0x4298bd
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 0x1c]
call edx
add esp, 0xc
cmp esi, esp
call fcn.004035b2
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042b560
add esp, 0xc
jmp 0x4298cd
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429a3a
mov eax, dword [ebp - 0x202c]
push eax
lea ecx, [ebp - 0x2014]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ecx + eax*4]
mov edx, dword [edx + 0x24]
add edx, dword [ecx + 0x28]
push edx
call fcn.00404313
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x28]
add ecx, dword [ebp - 0x202c]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov edx, dword [ebp + 0xc]
mov eax, dword [eax + edx*4]
mov dword [eax + 0x28], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [edx + ecx*4]
mov eax, dword [eax + 0x28]
cmp eax, dword [edx + 0x20]
jbe 0x429975
push str.Something_caused_data_corruption__overflow__
mov eax, dword [0x529810]
add eax, 0x29
push eax
push str.C:Users1Downloadsdnscat2_masterclientlibs_select_group.c
push str.Unrecoverable_error_in__s__d_:__s_n_n
push 2
call fcn.00402d1f
add esp, 4
push eax
call fcn.0040359e
add esp, 0x14
call fcn.00403c92
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [edx + ecx*4]
mov eax, dword [eax + 0x28]
cmp eax, dword [edx + 0x20]
jne 0x429a3a
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
push 0xffff
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx + 0x28]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 0x24]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx + 0x10]
call eax
add esp, 0x1c
cmp esi, esp
call fcn.004035b2
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.0042b560
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x28]
push ecx
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx + 0x24]
push eax
call fcn.00402743
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov dword [eax + 0x28], 0
jmp 0x429eb7
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 8], 0
je 0x429a65
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 8], 3
jne 0x429cbe
mov byte [ebp - 0x267d], 0
mov dword [ebp - 0x2044], 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 8], 0
jne 0x429aae
push 0x2000
lea eax, [ebp - 0x2014]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.00402fc7
add esp, 0xc
mov byte [ebp - 0x267d], 1
mov dword [ebp - 0x2038], eax
jmp 0x429aff
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 8], 3
jne 0x429aff
mov esi, esp
push 0
mov byte [ebp - 0x267d], 1
lea eax, [ebp - 0x2038]
push eax
push 0x2000
lea ecx, [ebp - 0x2014]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp esi, esp
call fcn.004035b2
mov dword [ebp - 0x2044], eax
cmp byte [ebp - 0x267d], 0
jne 0x429b15
push 0x429f36
call fcn.00404539
add esp, 4
cmp dword [ebp - 0x2038], 0
jb 0x429b2b
cmp dword [ebp - 0x2044], 0
jne 0x429bae
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x18], 0
je 0x429b99
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
push eax
call fcn.00429570
add esp, 4
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x18]
call ecx
add esp, 0x10
cmp esi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042b560
add esp, 0xc
jmp 0x429ba9
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429cb9
cmp byte [ebp - 0x267d], 0
jne 0x429bc4
push 0x429f36
call fcn.00404539
add esp, 4
cmp dword [ebp - 0x2038], 0
jne 0x429c39
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x1c], 0
je 0x429c24
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 0x1c]
call edx
add esp, 0xc
cmp esi, esp
call fcn.004035b2
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042b560
add esp, 0xc
jmp 0x429c34
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429cb9
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x10], 0
je 0x429cb9
cmp byte [ebp - 0x267d], 0
jne 0x429c60
push 0x429f36
call fcn.00404539
add esp, 4
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
push 0xffff
push 0
mov edx, dword [ebp - 0x2038]
push edx
lea eax, [ebp - 0x2014]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 0x1c
cmp esi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042b560
add esp, 0xc
jmp 0x429eb7
mov dword [ebp - 0x2068], 0x10
push 0x10
push 0
lea eax, [ebp - 0x205c]
push eax
call fcn.00402743
add esp, 0xc
mov esi, esp
lea eax, [ebp - 0x2068]
push eax
lea ecx, [ebp - 0x205c]
push ecx
push 0
push 0x2000
lea edx, [ebp - 0x2014]
push edx
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.WS2_32.dll_recvfrom]
cmp esi, esp
call fcn.004035b2
mov dword [ebp - 0x2074], eax
cmp dword [ebp - 0x2074], 0
jb 0x429d26
cmp dword [ebp - 0x2074], 0xffffffff
jne 0x429da9
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x18], 0
je 0x429d94
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + ecx*4]
mov eax, dword [edx]
push eax
call fcn.00429570
add esp, 4
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x18]
call ecx
add esp, 0x10
cmp esi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042b560
add esp, 0xc
jmp 0x429da4
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429eb7
cmp dword [ebp - 0x2074], 0
jne 0x429e1e
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x1c], 0
je 0x429e09
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 0xc]
mov ecx, dword [edx + eax*4]
mov edx, dword [ecx + 0x1c]
call edx
add esp, 0xc
cmp esi, esp
call fcn.004035b2
push eax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0042b560
add esp, 0xc
jmp 0x429e19
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402f22
add esp, 8
jmp 0x429eb7
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
cmp dword [eax + 0x10], 0
je 0x429eb7
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov esi, esp
mov ecx, dword [eax + 0x34]
push ecx
mov edi, esp
movzx edx, word [ebp - 0x205a]
push edx
call dword [sym.imp.WS2_32.dll_ntohs]
cmp edi, esp
call fcn.004035b2
movzx eax, ax
push eax
mov edi, esp
mov ecx, dword [ebp - 0x2058]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
cmp edi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0x2074]
push edx
lea eax, [ebp - 0x2014]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 0xc]
mov eax, dword [ecx + edx*4]
mov ecx, dword [eax + 0x10]
call ecx
add esp, 0x1c
cmp esi, esp
call fcn.004035b2
push eax
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0042b560
add esp, 0xc
push edx
mov ecx, ebp
push eax
lea edx, [0x429ee8]
call fcn.00402f72
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004026a8
add esp, 0x2690
cmp ebp, esp
call fcn.004035b2
mov esp, ebp
pop ebp
ret