Function at 0x4e0920
Capabilities:
Receive data
Receive data on socket

Disassembly:
test dword [0x7eeab0], 0xffffff80
jne 0x4e0948
test dword [0x7eeab0], 0xffffffff
jne 0x4e0b70
call fcn.006a7fbc
jmp fcn.004e0920
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e09a2
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e0b5f
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e0963
jmp 0x4e0b5f
test eax, eax
jne 0x4e0b27
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e09b8
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e09ba
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e5a7c
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e09ed
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e09db
push str.CONTENT_LENGTH:
push eax
call fcn.006978b0
add esp, 8
mov edi, eax
test edi, edi
je 0x4e0a24
lea eax, [edi + 0x10]
push 0x6c4ad8
push eax
call fcn.00697a0f
add edi, 0x10
cmp eax, 0
cmove eax, edi
push eax
call fcn.00697b1e
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0a4d
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0a3b
push str.COMPRESSED:
push eax
call fcn.006978b0
add esp, 8
test eax, eax
je 0x4e0a97
add eax, 0xc
push 0x6c4ad8
push eax
call fcn.00697a0f
add esp, 8
test eax, eax
je 0x4e0a97
movsx eax, byte [eax]
test eax, eax
je 0x4e0a97
push eax
call fcn.00698170
pop ecx
cmp eax, 0x59
je 0x4e0a90
mov dword [ebp + 4], 0
jmp 0x4e0a97
mov dword [ebp + 4], 1
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0ac0
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0aae
push str.UNICODE:
push eax
call fcn.006978b0
add esp, 8
test eax, eax
je 0x4e0b0a
add eax, 9
push 0x6c4ad8
push eax
call fcn.00697a0f
add esp, 8
test eax, eax
je 0x4e0b0a
movsx eax, byte [eax]
test eax, eax
je 0x4e0b0a
push eax
call fcn.00698170
pop ecx
cmp eax, 0x59
je 0x4e0b03
mov dword [ebp], 0
jmp 0x4e0b0a
mov dword [ebp], 1
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e5b7c
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0b58
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e09aa
xor edi, edi
jmp 0x4e0963
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e0bcf
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e0bc1
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e0b8b
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
test eax, eax
jne 0x4e0d40
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0be5
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e0be7
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e5a7c
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0c1a
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0c08
push str.CONTENT_LENGTH:
push eax
call fcn.006978b0
add esp, 8
mov edi, eax
test edi, edi
je 0x4e0c51
lea eax, [edi + 0x10]
push 0x6c4ad8
push eax
call fcn.00697a0f
add edi, 0x10
test eax, eax
je 0x4e0c45
mov edi, eax
push edi
call fcn.00697b1e
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0c7a
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0c68
push str.COMPRESSED:
push eax
call fcn.006978b0
add esp, 8
test eax, eax
je 0x4e0cba
add eax, 0xc
push 0x6c4ad8
push eax
call fcn.00697a0f
add esp, 8
test eax, eax
je 0x4e0cba
movsx eax, byte [eax]
test eax, eax
je 0x4e0cba
push eax
call fcn.00698170
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp + 4], edx
lea ecx, [esp]
call fcn.0057f960
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0ce3
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0cd1
push str.UNICODE:
push eax
call fcn.006978b0
add esp, 8
test eax, eax
je 0x4e0d23
add eax, 9
push 0x6c4ad8
push eax
call fcn.00697a0f
add esp, 8
test eax, eax
je 0x4e0d23
movsx eax, byte [eax]
test eax, eax
je 0x4e0d23
push eax
call fcn.00698170
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp], edx
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e5b7c
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0d71
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e0bd7
xor edi, edi
jmp 0x4e0b8b