Function at 0x10017d40
Capabilities:
Create thread
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2930
call fcn.10021630
mov eax, dword [0x100d2948]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov dword [ebp - 0x271c], 0x2710
push 0
mov eax, dword [ebp - 0x271c]
push eax
lea ecx, [ebp - 0x2714]
push ecx
mov edx, dword [0x100d2910]
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [ebp - 0x2718], eax
cmp dword [ebp - 0x2718], 0
jle 0x10018076
push str.VALID
lea eax, [ebp - 0x2714]
push eax
call fcn.1005e550
add esp, 8
test eax, eax
jne 0x1001804b
push 0
mov eax, dword [ebp - 0x271c]
push eax
lea ecx, [ebp - 0x2714]
push ecx
mov edx, dword [0x100d2910]
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [ebp - 0x2718], eax
lea eax, [ebp - 0x2714]
push eax
mov ecx, 0x10ede538
call fcn.10003ed0
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
mov eax, dword [ebp - 0x271c]
push eax
lea ecx, [ebp - 0x2714]
push ecx
mov edx, dword [0x100d2910]
push edx
call dword [sym.imp.WS2_32.dll_recv]
mov dword [ebp - 0x2718], eax
lea eax, [ebp - 0x2714]
push eax
mov ecx, 0x10ede550
call fcn.10003ed0
push 0x20
push 0
push 0x100d5f30
call fcn.10040a50
add esp, 0xc
push 0x100d5ef8
push 0x100192e0
push str._snprintf
push str.msvcr90.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call fcn.1000edd0
add esp, 0xc
push 0x100d5f00
push 0x1001ff60
push str.send
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call fcn.1000edd0
add esp, 0xc
push 0x100d5f08
push 0x10016630
push str.connect
push str.ws2_32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call fcn.1000edd0
add esp, 0xc
mov dword [ebp - 0x2720], 0x741cb0
mov dword [ebp - 0x2724], 0xa510a0
mov dword [ebp - 0x2728], 0x741f57
mov dword [0x100d5f24], 8
push 0x100d5f20
push 0x100195c0
mov eax, dword [ebp - 0x2720]
push eax
call fcn.1000edd0
add esp, 0xc
mov dword [0x100d5f1c], 8
push 0x100d5f18
push 0x10019560
mov eax, dword [ebp - 0x2728]
push eax
call fcn.1000edd0
add esp, 0xc
mov dword [0x100d5f2c], 8
push 0x100d5f28
push 0x10019520
mov eax, dword [ebp - 0x2724]
push eax
call fcn.1000edd0
add esp, 0xc
push 0x10ede500
push 0
push 0
push 0x10015cf0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x107da23c], eax
push 0x10ede504
push 0
push 0
push 0x10015cc0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4e4], eax
push 0x10ede508
push 0
push 0
push 0x10018c30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4e8], eax
push 0x10ede50c
push 0
push 0
push 0x1001fb90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4ec], eax
push 0
push 0
push 0
push 0x10018260
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x272c], eax
push 0x10ede510
push 0
mov eax, dword [ebp - 0x272c]
push eax
push 0x10019600
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4f0], eax
push 0x10ede514
push 0
push 0
push 0x10019430
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4f4], eax
push 0x10ede518
push 0
push 0
push 0x100164c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x10ede4f8], eax
call fcn.100194e0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2930], esp
push 0x10ede568
call fcn.100037c0
mov eax, dword [0x100d2908]
push eax
call fcn.10018850
add esp, 0x1c
jmp 0x10018074
push 0
push str.Error
push str.PleaseReinstallyourclienttherearesomeunauthorizedchangesmadetosomecriticalfilesfromourclient.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 2
mov eax, dword [0x100d2910]
push eax
call dword [sym.imp.WS2_32.dll_shutdown]
call fcn.1001e970
jmp 0x100180a2
jmp 0x100180a2
cmp dword [ebp - 0x2718], 0
jne 0x1001808e
push str.connection_closed.
call fcn.10018210
add esp, 4
jmp 0x100180a2
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.recv_failed_with_error:__d_n
call fcn.1000ed40
add esp, 8
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002161d
mov esp, ebp
pop ebp
ret