Function at 0x10005a6a
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2718
call fcn.10006780
mov eax, dword [0x100393b8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.WS2_32.dll_recv]
lea eax, [ebp - 0x2714]
push edi
xor edi, edi
mov ebx, 0x2710
push edi
push ebx
push eax
push dword [0x10039320]
call esi
test eax, eax
jle 0x10005caf
lea edx, [ebp - 0x2714]
mov ecx, edi
movzx eax, byte [edx + ecx]
mov ebx, str.VALID
cmp al, byte [ebx + ecx]
mov ebx, 0x2710
jne 0x10005cdf
inc ecx
cmp ecx, 6
jne 0x10005ab2
push edi
push ebx
lea eax, [ebp - 0x2714]
push eax
push dword [0x10039320]
call esi
lea ecx, [ebp - 0x2714]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10005ae9
sub ecx, edx
lea eax, [ebp - 0x2714]
push ecx
push eax
mov ecx, 0x1003936c
call fcn.10001340
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push ebx
lea eax, [ebp - 0x2714]
push eax
push dword [0x10039320]
call esi
lea ecx, [ebp - 0x2714]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10005b26
sub ecx, edx
lea eax, [ebp - 0x2714]
push ecx
push eax
mov ecx, 0x10039384
call fcn.10001340
push 8
pop ecx
push 0x1003a518
push 0x10006319
xor eax, eax
mov edi, 0x1003a550
push str._snprintf
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.msvcr90.dll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push eax
call fcn.10004784
add esp, 0xc
mov ebx, str.ws2_32.dll
push 0x1003a520
push 0x1000662b
push str.send
push ebx
call edi
push eax
call esi
push eax
call fcn.10004784
add esp, 0xc
push 0x1003a528
push 0x10004fc0
push str.connect
push ebx
call edi
push eax
call esi
push eax
call fcn.10004784
push 8
pop esi
push 0x1003a540
push 0x100064d7
push 0x741cb0
mov dword [0x1003a544], esi
call fcn.10004784
push 0x1003a548
push 0x10006495
push 0xa510a0
mov dword [0x1003a54c], esi
call fcn.10004784
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0x24
xor ebx, ebx
push 0x10e42b18
push ebx
push ebx
push 0x10004ba6
push ebx
push ebx
call esi
push 0x10e42b1c
push ebx
push ebx
push 0x10004b98
push ebx
push ebx
mov dword [0x1073e85c], eax
call esi
push 0x10e42b20
push ebx
push ebx
push 0x10005f54
push ebx
push ebx
mov dword [0x10e42b04], eax
call esi
push 0x10e42b24
push ebx
push ebx
push 0x10006617
push ebx
push ebx
mov dword [0x10e42b08], eax
call esi
push ebx
push ebx
push ebx
push 0x10005e23
push ebx
push ebx
mov dword [0x10e42b0c], eax
call esi
push 0x10e42b28
push ebx
push eax
push 0x100064e7
push ebx
push ebx
call esi
push 0x10e42b2c
push ebx
push ebx
push 0x10006425
push ebx
push ebx
mov dword [0x10e42b10], eax
call esi
mov dword [0x10e42b14], eax
call fcn.1000646d
sub esp, 0x18
mov ecx, esp
push 0x1003939c
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.10003241
push dword [0x10039318]
call fcn.10005e55
add esp, 0x1c
jmp 0x10005cd0
jne 0x10005cbd
push str.connection_closed.
call fcn.10005dee
jmp 0x10005ccf
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.recv_failed_with_error:__d_n
call fcn.10004765
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10006764
leave
ret
push edi
push str.Error
push str.PleaseReinstallyourclienttherearesomeunauthorizedchangesmadetosomecriticalfilesfromourclient.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 2
push dword [0x10039320]
call dword [sym.imp.WS2_32.dll_shutdown]
call fcn.1000660f
int3