Function at 0x4de4f0
Capabilities:
Receive data
Receive data on socket

Disassembly:
mov eax, str._r_n_r_n
sub esp, 0x10
lea edx, [eax + 1]
jmp 0x4de500
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4de500
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
mov ebp, dword [esp + 0x1c]
push esi
sub eax, edx
push edi
xor esi, esi
mov edi, eax
mov eax, dword [esp + 0x2c]
mov dword [eax], esi
mov dword [eax + 4], esi
mov dword [eax + 8], esi
push 0
push 1
lea eax, [esp + 0x2c]
push eax
push ebp
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4de565
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4de556
push 0x64
call ebx
add esi, 0x64
cmp esi, 0x927c0
jbe 0x4de527
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret 0xc
test eax, eax
je 0x4de5a0
mov ecx, dword [esp + 0x28]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx]
push 1
push 1
lea eax, [esp + 0x2c]
push eax
xor esi, esi
call dword [edx + 0x30]
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x4de527
push esi
mov edx, ecx
mov ecx, dword [edx + 0xc]
mov eax, dword [ecx]
push edi
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
jne 0x4de527
mov ebp, dword [esp + 0x28]
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x4de5b4
mov ecx, eax
mov edx, dword [ecx]
call dword [edx + 0x50]
jmp 0x4de5b6
xor eax, eax
push eax
lea ecx, [esp + 0x14]
call fcn.004e1d40
lea ecx, [esp + 0x10]
call fcn.00533d50
cmp byte [eax], 0
mov esi, dword [0x757e48]
mov ecx, eax
je 0x4de5e6
movzx edx, byte [ecx]
mov dl, byte [edx + esi]
mov byte [ecx], dl
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x4de5d6
push str.CONTENT_LENGTH:
push eax
call fcn.00609740
mov esi, eax
add esp, 8
test esi, esi
je 0x4de644
mov eax, str.CONTENT_LENGTH:
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4de602
sub eax, edx
add eax, esi
push 0x626a9c
push eax
call fcn.006098de
add esp, 8
test eax, eax
jne 0x4de632
mov eax, str.CONTENT_LENGTH:
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4de627
sub eax, edx
add eax, esi
push eax
call fcn.00609a1b
mov edi, dword [esp + 0x30]
add esp, 4
mov dword [edi + 8], eax
jmp 0x4de648
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
call fcn.00533d50
cmp byte [eax], 0
mov esi, dword [0x757e48]
mov ecx, eax
je 0x4de670
mov edi, edi
movzx edx, byte [ecx]
mov dl, byte [edx + esi]
mov byte [ecx], dl
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x4de660
push str.COMPRESSED:
push eax
call fcn.00609740
add esp, 8
test eax, eax
je 0x4de6ca
mov ecx, str.COMPRESSED:
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4de690
sub ecx, esi
add ecx, eax
push 0x626a9c
push ecx
call fcn.006098de
add esp, 8
test eax, eax
je 0x4de6ca
mov al, byte [eax]
test al, al
je 0x4de6ca
movsx eax, al
push eax
call fcn.0060a250
sub eax, 0x59
add esp, 4
neg eax
sbb eax, eax
inc eax
mov dword [edi + 4], eax
lea ecx, [esp + 0x10]
call fcn.00533d50
cmp byte [eax], 0
mov esi, dword [0x757e48]
mov ecx, eax
je 0x4de6f0
movzx edx, byte [ecx]
mov dl, byte [edx + esi]
mov byte [ecx], dl
mov dl, byte [ecx + 1]
inc ecx
test dl, dl
jne 0x4de6e0
push str.UNICODE:
push eax
call fcn.00609740
add esp, 8
test eax, eax
je 0x4de749
mov ecx, str.UNICODE:
lea esi, [ecx + 1]
lea ebx, [ebx]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4de710
sub ecx, esi
add ecx, eax
push 0x626a9c
push ecx
call fcn.006098de
add esp, 8
test eax, eax
je 0x4de749
mov al, byte [eax]
test al, al
je 0x4de749
movsx eax, al
push eax
call fcn.0060a250
sub eax, 0x59
add esp, 4
neg eax
sbb eax, eax
inc eax
mov dword [edi], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
push 1
call dword [edx + 0x14]
lea ecx, [esp + 0x10]
call fcn.004e1cf0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret 0xc