Function at 0x427ec0
Capabilities:
Receive data
Receive data on socket

Disassembly:
sub esp, 0x58
mov eax, dword [0x526b24]
xor eax, esp
mov dword [esp + 0x54], eax
mov eax, dword [0x62271c]
push ebx
push ebp
mov ebp, ecx
mov dword [esp + 0x14], 0
mov ecx, dword fs:[0x2c]
lea ebx, [eax*4]
push esi
mov dword [esp + 0x14], ebx
mov eax, dword [ebx + ecx]
cmp byte [eax + 0x2198], 0
jne 0x427f0a
call fcn.004ebad3
mov ecx, dword fs:[0x2c]
mov eax, dword [ebx + ecx]
push 0
push 0
push dword [eax + 0x214]
push dword [ebp + 4]
call dword [sym.imp.WSOCK32.dll_WSAAsyncSelect]
lea eax, [esp + 0x18]
push eax
push 0x8004667e
push dword [ebp + 4]
call dword [sym.imp.WSOCK32.dll_ioctlsocket]
push edi
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
xor esi, esi
mov eax, dword [ebp + 0x20]
mov ecx, eax
cmp esi, eax
jae 0x427f58
mov edx, dword [ebp + 0x18]
cmp byte [edx + esi], 0
je 0x427fc5
mov eax, dword [ebp + 0x20]
inc esi
mov ecx, eax
cmp esi, eax
jb 0x427f48
mov edx, dword [ebp + 0x1c]
cmp eax, edx
jne 0x427fa4
mov ecx, edx
lea eax, [ecx + ecx]
test ecx, ecx
jne 0x427f6d
mov eax, 0x800
cmp dword [ebp + 0x24], 0
jne 0x427fd2
test ecx, ecx
mov edi, 0x800
cmovne edi, ecx
cmp edi, eax
jae 0x427f87
add edi, edi
cmp edi, eax
jb 0x427f81
cmp edi, ecx
jbe 0x427f9e
push edi
push dword [ebp + 0x18]
call ebx
add esp, 8
test eax, eax
je 0x427fcb
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x1c], edi
mov edx, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x18]
sub edx, ecx
push 0
push edx
add eax, ecx
push eax
push dword [ebp + 4]
call dword [sym.imp.WSOCK32.dll_recv]
cmp eax, 0xffffffff
je 0x427fd2
add dword [ebp + 0x20], eax
jmp 0x427f3c
mov dword [esp + 0x20], esi
jmp 0x427fe9
mov dword [ebp + 0x24], 1
push str.An_internal_error_has_occurred_in_the_debugger_engine._nContinue_running_the_script_without_the_debugger_
call fcn.00426b10
mov esi, eax
add esp, 4
test esi, esi
jne 0x4282f7
mov ebx, dword [ebp + 0x18]
push 0x20
push ebx
mov dword [esp + 0x1c], ebx
call sub.VCRUNTIME140.dll_strchr
add esp, 8
xor edi, edi
mov ecx, 0x4f6ee4
mov dword [esp + 0x10], ecx
test eax, eax
je 0x42810d
lea esi, [eax + 1]
mov byte [eax], 0
mov al, byte [esi]
test al, al
je 0x42810d
nop
mov edx, edi
cmp edi, 0x10
je 0x428168
cmp al, 0x2d
jne 0x428168
mov al, byte [esi + 1]
inc esi
test al, al
je 0x428168
cmp byte [esi + 1], 0x20
jne 0x42804e
cmp byte [esi + 2], 0x2d
je 0x42804e
inc esi
mov byte [esi], al
mov dword [esp + edi*4 + 0x24], esi
inc edi
cmp al, 0x69
je 0x42805f
cmp al, 0x2d
je 0x42810d
cmp al, 0x69
lea ebx, [esi + 1]
cmovne ebx, dword [esp + 0x10]
cmovne edx, edi
cmp byte [esi + 1], 0x22
lea edi, [esi + 1]
mov dword [esp + 0x10], edx
jne 0x4280d6
mov al, byte [esi + 2]
add esi, 2
cmp al, 0x22
je 0x4280aa
mov cl, al
cmp al, 0x5c
jne 0x42808c
mov cl, byte [esi + 1]
lea edx, [esi + 1]
cmovne edx, esi
test cl, cl
je 0x42815b
mov byte [edi], cl
lea esi, [edx + 1]
mov al, byte [esi]
inc edi
cmp al, 0x22
jne 0x428083
mov edx, dword [esp + 0x10]
inc esi
mov byte [edi], 0
cmp byte [esi], 0
je 0x428164
push 2
push 0x4f6f38
push esi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x42815b
mov ecx, dword [esp + 0x10]
jmp 0x4280f7
push 0x4f6f38
push edi
call sub.VCRUNTIME140.dll_strstr
mov ecx, dword [esp + 0x18]
mov esi, eax
add esp, 8
mov dword [esp + 0x10], ebx
mov edi, ecx
test esi, esi
je 0x42810d
mov byte [esi], 0
mov al, byte [esi + 1]
inc esi
mov dword [esp + 0x10], ebx
mov edi, ecx
test al, al
jne 0x428020
mov dword [esp + 0x10], ebx
mov esi, dword fs:[0x2c]
xor ebx, ebx
mov eax, dword [esp + 0x18]
mov esi, dword [eax + esi]
add esi, 0x50
mov ecx, dword [esp + 0x14]
mov eax, dword [esi]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4281ee
test dl, dl
je 0x428154
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4281ee
add eax, 2
add ecx, 2
test dl, dl
jne 0x428130
xor eax, eax
jmp 0x4281f3
mov esi, 1
mov ecx, ebx
jmp 0x428171
mov edi, edx
jmp 0x428109
mov esi, 1
mov ecx, dword [esp + 0x10]
mov dword [ebp + 0x30], 0
lea edi, [ebp + 0x28]
mov dword [ebp + 0x34], 0
cmp dword [ebp + 4], 0xffffffff
je 0x4282f7
push ecx
push dword [esp + 0x18]
push str._response_command__s__transaction_id__e
push edi
call fcn.00429110
add esp, 0x10
cmp dword [edi + 0xc], 0
jne 0x428288
mov eax, dword [edi + 8]
mov ebx, 0x800
mov ecx, dword [edi + 4]
add eax, 2
test ecx, ecx
cmovne ebx, ecx
cmp ebx, eax
jae 0x4281c6
add ebx, ebx
cmp ebx, eax
jb 0x4281c0
cmp ebx, ecx
jbe 0x428275
push ebx
push dword [edi]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
add esp, 8
test eax, eax
jne 0x428270
mov dword [edi + 0xc], 1
jmp 0x428288
sbb eax, eax
or eax, 1
test eax, eax
je 0x42820c
inc ebx
add esi, 8
cmp ebx, 0x1a
jne 0x428123
lea esi, [ebx - 0x16]
jmp 0x42816d
mov eax, dword fs:[0x2c]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + eax]
lea ecx, [esp + 0x24]
mov eax, dword [eax + ebx*8 + 0x54]
mov ebx, dword [esp + 0x10]
push ebx
push edi
push ecx
mov ecx, ebp
call eax
mov esi, eax
test esi, esi
jne 0x428263
cmp dword [ebp + 0x30], eax
jne 0x428250
push ebx
push dword [esp + 0x18]
lea eax, [ebp + 0x28]
push str._response_command__s__transaction_id__e___
push eax
call fcn.00429110
add esp, 0x10
mov ecx, ebp
call fcn.00428530
mov esi, eax
test esi, esi
jne 0x4282f7
jmp 0x4282a4
cmp esi, 0xffffffff
jne 0x42816d
xor esi, esi
jmp 0x4282a4
mov dword [edi], eax
mov dword [edi + 4], ebx
mov ecx, dword [edi + 8]
mov edx, dword [edi]
mov ax, word [0x4f7918]
mov word [edx + ecx], ax
add dword [edi + 8], 2
push esi
push str._error_code__i_____response_
push edi
call fcn.00429110
add esp, 0xc
mov ecx, ebp
call fcn.00428530
mov esi, eax
test esi, esi
jne 0x4282f7
cmp dword [ebp + 0x20], 0
je 0x4282d1
mov edi, dword [esp + 0x20]
mov eax, dword [ebp + 0x20]
inc edi
cmp edi, eax
jae 0x4282cc
mov ecx, dword [ebp + 0x18]
sub eax, edi
push eax
lea eax, [ecx + edi]
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp + 0x20]
add esp, 0xc
sub eax, edi
mov dword [ebp + 0x20], eax
mov eax, dword [ebp + 0x38]
cmp eax, 2
je 0x427f34
test eax, eax
je 0x4282f7
mov al, byte [ebp + 0x60]
test al, al
je 0x4282f7
push 1
push eax
call fcn.0042f570
add esp, 8
mov byte [ebp + 0x60], 0
mov ecx, dword [ebp + 4]
pop edi
cmp ecx, 0xffffffff
je 0x42833d
mov edx, dword fs:[0x2c]
mov ebx, dword [esp + 0x14]
mov eax, dword [ebx + edx]
cmp byte [eax + 0x2198], 0
jne 0x428326
call fcn.004ebad3
mov ecx, dword [ebp + 4]
mov edx, dword fs:[0x2c]
mov eax, dword [ebx + edx]
push 0x21
push 0x408
push dword [eax + 0x214]
push ecx
call dword [sym.imp.WSOCK32.dll_WSAAsyncSelect]
mov ecx, dword [esp + 0x60]
mov eax, esi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004ebadf
add esp, 0x58
ret