Function at 0x4e0488
Capabilities:
Receive data
Receive data on socket

Disassembly:
test dword [0x7eeab0], 0xffffff80
jne 0x4e04b0
test dword [0x7eeab0], 0xffffffff
jne 0x4e06d8
call fcn.006a7b4c
jmp fcn.004e0488
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e050a
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e06c7
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e04cb
jmp 0x4e06c7
test eax, eax
jne 0x4e068f
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e0520
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e0522
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e55ec
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0555
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0543
push str.CONTENT_LENGTH:
push eax
call fcn.00697440
add esp, 8
mov edi, eax
test edi, edi
je 0x4e058c
lea eax, [edi + 0x10]
push 0x6c4a50
push eax
call fcn.0069759f
add edi, 0x10
cmp eax, 0
cmove eax, edi
push eax
call fcn.006976ae
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e05b5
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e05a3
push str.COMPRESSED:
push eax
call fcn.00697440
add esp, 8
test eax, eax
je 0x4e05ff
add eax, 0xc
push 0x6c4a50
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x4e05ff
movsx eax, byte [eax]
test eax, eax
je 0x4e05ff
push eax
call fcn.00697d00
pop ecx
cmp eax, 0x59
je 0x4e05f8
mov dword [ebp + 4], 0
jmp 0x4e05ff
mov dword [ebp + 4], 1
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0628
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0616
push str.UNICODE:
push eax
call fcn.00697440
add esp, 8
test eax, eax
je 0x4e0672
add eax, 9
push 0x6c4a50
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x4e0672
movsx eax, byte [eax]
test eax, eax
je 0x4e0672
push eax
call fcn.00697d00
pop ecx
cmp eax, 0x59
je 0x4e066b
mov dword [ebp], 0
jmp 0x4e0672
mov dword [ebp], 1
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e56ec
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e06c0
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e0512
xor edi, edi
jmp 0x4e04cb
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
push edi
push esi
push ebp
sub esp, 0x14
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
xor eax, eax
mov dword [ebp], eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
xor edi, edi
lea eax, [esp + 0x10]
push 0
push 1
push eax
push dword [esp + 0x30]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x4e0737
call sub.WSOCK32.dll_WSAGetLastError
cmp eax, 0x2733
jne 0x4e0729
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
add edi, 0x64
cmp edi, 0x927c0
jbe 0x4e06f3
mov eax, 1
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
test eax, eax
jne 0x4e08a8
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e074d
mov eax, dword [ecx]
call dword [eax + 0x50]
jmp 0x4e074f
xor eax, eax
push eax
lea ecx, [esp + 4]
call fcn.004e55ec
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e0782
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0770
push str.CONTENT_LENGTH:
push eax
call fcn.00697440
add esp, 8
mov edi, eax
test edi, edi
je 0x4e07b9
lea eax, [edi + 0x10]
push 0x6c4a50
push eax
call fcn.0069759f
add edi, 0x10
test eax, eax
je 0x4e07ad
mov edi, eax
push edi
call fcn.006976ae
add esp, 0xc
mov dword [ebp + 8], eax
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e07e2
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e07d0
push str.COMPRESSED:
push eax
call fcn.00697440
add esp, 8
test eax, eax
je 0x4e0822
add eax, 0xc
push 0x6c4a50
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x4e0822
movsx eax, byte [eax]
test eax, eax
je 0x4e0822
push eax
call fcn.00697d00
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp + 4], edx
lea ecx, [esp]
call fcn.004e5460
mov edi, eax
mov ecx, dword [0x7e2c4c]
movsx edx, byte [eax]
test edx, edx
je 0x4e084b
movzx edx, dl
movzx edx, byte [edx + ecx]
mov byte [edi], dl
movsx edx, byte [edi + 1]
inc edi
test edx, edx
jne 0x4e0839
push str.UNICODE:
push eax
call fcn.00697440
add esp, 8
test eax, eax
je 0x4e088b
add eax, 9
push 0x6c4a50
push eax
call fcn.0069759f
add esp, 8
test eax, eax
je 0x4e088b
movsx eax, byte [eax]
test eax, eax
je 0x4e088b
push eax
call fcn.00697d00
pop ecx
xor edx, edx
cmp eax, 0x59
sete dl
mov dword [ebp], edx
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
push 1
call dword [eax + 0x14]
lea ecx, [esp]
call fcn.004e56ec
xor eax, eax
add esp, 0x14
pop ebp
pop esi
pop edi
ret 0xc
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
lea edi, [esp + 0x10]
mov edx, 1
push edx
push edx
push edi
call dword [eax + 0x30]
mov ecx, dword [esi + 0xc]
test ecx, ecx
je 0x4e08d9
mov eax, dword [ecx]
push 0
push 4
push str._r_n_r_n
call dword [eax + 0x54]
test eax, eax
je 0x4e073f
xor edi, edi
jmp 0x4e06f3