Function at 0x10006b54
Capabilities:
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2718
call fcn.10008f80
mov eax, dword [0x100414a4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.WS2_32.dll_recv]
lea eax, [ebp - 0x2714]
push edi
xor edi, edi
mov ebx, 0x2710
push edi
push ebx
push eax
push dword [0x10041410]
call esi
test eax, eax
jle 0x10006de7
lea edx, [ebp - 0x2714]
mov ecx, edi
movzx eax, byte [edx + ecx]
mov ebx, str.VALID
cmp al, byte [ebx + ecx]
mov ebx, 0x2710
jne 0x10006e19
inc ecx
cmp ecx, 6
jne 0x10006b9c
push edi
push ebx
lea eax, [ebp - 0x2714]
push eax
push dword [0x10041410]
call esi
lea ecx, [ebp - 0x2714]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006bd3
sub ecx, edx
lea eax, [ebp - 0x2714]
push ecx
push eax
mov ecx, 0x1004145c
call fcn.10001706
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push ebx
lea eax, [ebp - 0x2714]
push eax
push dword [0x10041410]
call esi
lea ecx, [ebp - 0x2714]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10006c10
sub ecx, edx
lea eax, [ebp - 0x2714]
push ecx
push eax
mov ecx, 0x10041474
call fcn.10001706
push 8
pop ecx
push 0x1004288c
push 0x10007928
xor eax, eax
mov edi, 0x100428c4
push str._snprintf
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.msvcr90.dll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push eax
call fcn.10004b69
add esp, 0xc
mov ebx, str.ws2_32.dll
push 0x10042894
push 0x100089d3
push str.send
push ebx
call edi
push eax
call esi
push eax
call fcn.10004b69
add esp, 0xc
push 0x1004289c
push 0x10005e80
push str.connect
push ebx
call edi
push eax
call esi
push eax
call fcn.10004b69
push 8
pop esi
push 0x100428b4
push 0x10007b1b
push 0x741cb0
mov dword [0x100428b8], esi
call fcn.10004b69
push 0x100428ac
push 0x10007ae8
push 0x741f57
mov dword [0x100428b0], esi
call fcn.10004b69
push 0x100428bc
push 0x10007aa4
push 0xa510a0
mov dword [0x100428c0], esi
call fcn.10004b69
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0x30
xor ebx, ebx
push 0x10e4ae9c
push ebx
push ebx
push 0x10005882
push ebx
push ebx
call esi
push 0x10e4aea0
push ebx
push ebx
push 0x10005874
push ebx
push ebx
mov dword [0x10e4ae74], eax
call esi
push 0x10e4aea4
mov dword [0x10e4ae78], eax
push ebx
push ebx
push 0x1000755f
push ebx
push ebx
call esi
push 0x10e4aea8
push ebx
push ebx
push 0x10008810
push ebx
push ebx
mov dword [0x10e4ae7c], eax
call esi
push 0x10e4aeac
push ebx
mov edi, 0x10006f35
mov dword [0x10e4ae80], eax
push edi
push 0x10007b2b
push ebx
push ebx
call esi
push 0x10e4aeb0
push ebx
push ebx
push 0x10007a34
push ebx
push ebx
mov dword [0x10e4ae84], eax
call esi
push 0x10e4aeb4
push ebx
push ebx
push 0x10005e41
push ebx
push ebx
mov dword [0x10e4ae88], eax
call esi
push 0x10e4aeb8
push ebx
push ebx
push 0x100071e3
push ebx
push ebx
mov dword [0x10e4ae8c], eax
call esi
push 0x10e4aebc
push ebx
push ebx
push edi
push ebx
push ebx
mov dword [0x10e4ae90], eax
call esi
mov dword [0x10e4ae94], eax
call fcn.10007a7c
sub esp, 0x18
mov ecx, esp
push 0x1004148c
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.10003577
push dword [0x100413f8]
call fcn.1000745e
add esp, 0x1c
jmp 0x10006e08
jne 0x10006df5
push str.connection_closed.
call fcn.10006f00
jmp 0x10006e07
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.recv_failed_with_error:__d_n
call fcn.10004b4a
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10008f6b
mov esp, ebp
pop ebp
ret
push edi
push str.Error
push str.PleaseReinstallyourclienttherearesomeunauthorizedchangesmadetosomecriticalfilesfromourclient.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 2
push dword [0x10041410]
call dword [sym.imp.WS2_32.dll_shutdown]
call fcn.100084ef
int3