Function at 0x4df29c
Capabilities:
Receive data
Receive data on socket

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x14
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
mov edi, str._r_n_r_n
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4df2c2
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4df2ba
mov edi, eax
xor esi, esi
xor edx, edx
mov dword [ebx], edx
mov dword [ebx + 4], edx
mov dword [ebx + 8], edx
lea edx, [esp]
push 0
push 1
push edx
push dword [esp + 0x34]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
je 0x4df531
test eax, eax
je 0x4df336
xor esi, esi
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
lea ebx, [esp]
mov eax, 1
push eax
push eax
push ebx
call dword [edx + 0x30]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x4df2d0
mov edx, dword [ecx]
push 0
push edi
push str._r_n_r_n
call dword [edx + 0x54]
test eax, eax
je 0x4df514
cmp esi, 0x927c0
jbe 0x4df2d0
mov eax, 1
add esp, 0x14
pop ebx
pop ebp
pop esi
pop edi
ret 0xc
mov ebx, dword [esp + 0x30]
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x4df348
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4df34a
xor eax, eax
lea ecx, [esp + 4]
push eax
call fcn.004e2910
lea ecx, [esp + 4]
call fcn.004e2a14
mov ecx, eax
mov esi, dword [0x65f528]
mov dl, byte [eax]
test dl, dl
je 0x4df382
movsx edx, byte [eax]
and edx, 0xff
mov dl, byte [edx + esi]
mov byte [ecx], dl
movsx edx, byte [ecx + 1]
inc ecx
test edx, edx
jne 0x4df36e
push str.CONTENT_LENGTH:
push eax
call fcn.006022b0
mov esi, eax
add esp, 8
test esi, esi
je 0x4df3e4
mov edi, str.CONTENT_LENGTH:
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4df3ad
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4df3a5
add eax, esi
push 0x62cd1c
push eax
call fcn.0060240f
add esp, 8
test eax, eax
jne 0x4df3da
mov edi, str.CONTENT_LENGTH:
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4df3d8
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4df3d0
add eax, esi
push eax
call fcn.0060251a
pop ecx
mov dword [ebx + 8], eax
lea ecx, [esp + 4]
call fcn.004e2a14
mov ecx, eax
mov esi, dword [0x65f528]
mov dl, byte [eax]
test dl, dl
je 0x4df412
movsx edx, byte [eax]
and edx, 0xff
mov dl, byte [edx + esi]
mov byte [ecx], dl
movsx edx, byte [ecx + 1]
inc ecx
test edx, edx
jne 0x4df3fe
push str.COMPRESSED:
push eax
call fcn.006022b0
mov esi, eax
add esp, 8
test esi, esi
je 0x4df46f
mov edi, str.COMPRESSED:
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4df43d
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4df435
add esi, eax
push 0x62cd1c
push esi
call fcn.0060240f
add esp, 8
test eax, eax
je 0x4df46f
movsx eax, byte [eax]
test eax, eax
je 0x4df46f
push eax
call fcn.00602b5d
pop ecx
cmp eax, 0x59
je 0x4df51d
mov dword [ebx + 4], 0
lea ecx, [esp + 4]
call fcn.004e2a14
mov ecx, eax
mov esi, dword [0x65f528]
mov dl, byte [eax]
test dl, dl
je 0x4df49d
movsx edx, byte [eax]
and edx, 0xff
mov dl, byte [edx + esi]
mov byte [ecx], dl
movsx edx, byte [ecx + 1]
inc ecx
test edx, edx
jne 0x4df489
push str.UNICODE:
push eax
call fcn.006022b0
mov esi, eax
add esp, 8
test esi, esi
je 0x4df4f5
mov edi, str.UNICODE:
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4df4c8
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4df4c0
add esi, eax
push 0x62cd1c
push esi
call fcn.0060240f
add esp, 8
test eax, eax
je 0x4df4f5
movsx eax, byte [eax]
test eax, eax
je 0x4df4f5
push eax
call fcn.00602b5d
pop ecx
cmp eax, 0x59
je 0x4df529
mov dword [ebx], 0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp + 4]
call fcn.004e2a1c
xor eax, eax
add esp, 0x14
pop ebx
pop ebp
pop esi
pop edi
ret 0xc
mov ebx, dword [esp + 0x30]
jmp 0x4df33a
mov dword [ebx + 4], 1
jmp 0x4df46f
mov dword [ebx], 1
jmp 0x4df4f5
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
je 0x4df54c
mov eax, 1
add esp, 0x14
pop ebx
pop ebp
pop esi
pop edi
ret 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add esi, 0x64
jmp 0x4df31f