Function at 0x4e035c
Capabilities:
Receive data
Receive data on socket

Disassembly:
test dword [0x7eda90], 0xffffff80
jne 0x4e0384
test dword [0x7eda90], 0xffffffff
jne 0x4e05ac
call fcn.006a6b5c
jmp fcn.004e035c
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e03de
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e059b
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e039f
jmp 0x4e059b
test eax, eax
jne 0x4e0563
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e03f4
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e03f6
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e54bc
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0429
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0417
push str.CONTENT_LENGTH:
push eax
call fcn.00696450
add esp, 8
mov edi, eax
test edi, edi
je 0x4e0460
lea eax, [edi + 0x10]
push 0x6c3a50
push eax
call fcn.006965af
add edi, 0x10
cmp eax, 0
cmove eax, edi
push eax
call fcn.006966be
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0489
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0477
push str.COMPRESSED:
push eax
call fcn.00696450
add esp, 8
test eax, eax
je 0x4e04d3
add eax, 0xc
push 0x6c3a50
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x4e04d3
movsx eax, byte [eax]
test eax, eax
je 0x4e04d3
push eax
call fcn.00696d10
pop ecx
cmp eax, 0x59
je 0x4e04cc
mov dword [ebp + 4], 0
jmp 0x4e04d3
mov dword [ebp + 4], 1
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e04fc
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e04ea
push str.UNICODE:
push eax
call fcn.00696450
add esp, 8
test eax, eax
je 0x4e0546
add eax, 9
push 0x6c3a50
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x4e0546
movsx eax, byte [eax]
test eax, eax
je 0x4e0546
push eax
call fcn.00696d10
pop ecx
cmp eax, 0x59
je 0x4e053f
mov dword [ebp], 0
jmp 0x4e0546
mov dword [ebp], 1
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e55bc
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0594
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e03e6
xor edi, edi
jmp 0x4e039f
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e060b
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e05fd
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e05c7
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
test eax, eax
jne 0x4e077c
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0621
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e0623
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e54bc
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0656
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0644
push str.CONTENT_LENGTH:
push eax
call fcn.00696450
add esp, 8
mov edi, eax
test edi, edi
je 0x4e068d
lea eax, [edi + 0x10]
push 0x6c3a50
push eax
call fcn.006965af
add edi, 0x10
test eax, eax
je 0x4e0681
mov edi, eax
push edi
call fcn.006966be
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e06b6
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e06a4
push str.COMPRESSED:
push eax
call fcn.00696450
add esp, 8
test eax, eax
je 0x4e06f6
add eax, 0xc
push 0x6c3a50
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x4e06f6
movsx eax, byte [eax]
test eax, eax
je 0x4e06f6
push eax
call fcn.00696d10
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp + 4], edx
lea ecx, [esp]
call fcn.004e5330
mov edi, eax
mov ecx, dword [0x7e1c2c]
movsx edx, byte [eax]
test edx, edx
je 0x4e071f
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e070d
push str.UNICODE:
push eax
call fcn.00696450
add esp, 8
test eax, eax
je 0x4e075f
add eax, 9
push 0x6c3a50
push eax
call fcn.006965af
add esp, 8
test eax, eax
je 0x4e075f
movsx eax, byte [eax]
test eax, eax
je 0x4e075f
push eax
call fcn.00696d10
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp], edx
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e55bc
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e07ad
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e0613
xor edi, edi
jmp 0x4e05c7