Function at 0x140047060
Capabilities:
Get hostname
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b0]
sub rsp, 0x3b0
mov rax, qword [0x1400a45f8]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor eax, eax
mov r13, r8
mov r14, rdx
mov qword [rbp + 0x170], rax
mov r15, rcx
mov qword [rbp + 0x178], rax
xor edx, edx
mov qword [rbp + 0x180], rax
lea r8d, [rax + 0x64]
mov qword [rbp + 0x188], rax
lea rcx, [rbp + 0x1b0]
mov qword [rbp + 0x190], rax
lea r12d, [rax + 1]
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], rax
call sub.VCRUNTIME140.dll_memset
test r13, r13
jne 0x1400470f1
or rax, 0xffffffffffffffff
jmp 0x14004742d
mov qword [rsp + 0x3f8], rbx
mov byte [r13], 0
call fcn.140028ba0
xor ecx, ecx
mov ebx, r12d
cmp eax, ebx
cmove ebx, ecx
call fcn.140029000
test eax, eax
lea rcx, [rbp + 0x220]
cmovne ebx, r12d
xor edx, edx
lea r8d, [rdx + 0x64]
call sub.VCRUNTIME140.dll_memset
lea r8, [r14 + 2]
mov edx, 0x64
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rdx, str.RNBO_SPN_LOCAL
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x14004716d
cmp ebx, r12d
jne 0x14004716d
mov rdx, r13
mov rcx, r15
call fcn.14004dd40
jmp 0x140047425
lea rdx, str.RNBO_SPN_LOCAL
lea rcx, [rbp + 0x220]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400471b8
test ebx, ebx
jne 0x1400471b8
cmp word [r14 + 0x98], 2
lea edx, [rax + 0x64]
lea rcx, [rbp + 0x1b0]
jne 0x1400471a5
call fcn.140028720
jmp 0x1400471d1
call sub.WSOCK32.dll_gethostname
cmp eax, 0xffffffff
jne 0x1400471d1
lea r8, str.127.0.0.1
jmp 0x1400471bf
lea r8, [rbp + 0x220]
mov edx, 0x64
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov qword [rsp + 0x3a8], rsi
call fcn.140026f10
movzx edx, word [r14 + 0x98]
mov ebx, 2
sub edx, r12d
je 0x140047222
sub edx, r12d
je 0x140047203
sub edx, ebx
je 0x14004720f
cmp edx, 4
je 0x140047203
test r12b, al
jne 0x14004722b
test bl, al
je 0x140047831
mov esi, ebx
jmp 0x14004722e
mov r8, r13
mov rdx, r14
mov rcx, r15
call fcn.1400491e0
jmp 0x14004741d
test r12b, al
je 0x140047831
mov esi, r12d
lea rcx, [rbp + 0x1b0]
mov qword [rsp + 0x3a0], rdi
call fcn.1400276a0
test eax, eax
jne 0x14004724c
test bl, sil
cmovne esi, ebx
cmp word [r14 + 0x98], r12w
mov edi, 6
mov rax, qword [0x1400a36d0]
cmove rax, qword [0x1400a36c8]
cmp rax, 0xffffffffffffffff
jne 0x1400472af
mov edx, ebx
cmp esi, ebx
jne 0x14004727e
mov r8d, 0x3e8
mov ecx, edi
jmp 0x140047286
mov r8d, sendto
mov ecx, ebx
call fcn.140026910
cmp rax, 0xffffffffffffffff
je 0x140047373
cmp word [r14 + 0x98], r12w
jne 0x1400472a8
mov qword [0x1400a36c8], rax
jmp 0x1400472af
mov qword [0x1400a36d0], rax
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x1b0]
cmp esi, ebx
jne 0x1400472d2
xor r8d, r8d
call fcn.140028810
test eax, eax
je 0x1400472e6
jmp 0x140047410
xor r9d, r9d
lea r8d, [r9 + 0x40]
call fcn.1400272d0
test eax, eax
jne 0x140047410
cmp dword [0x1400a36b4], 0
je 0x140047305
lea rcx, [0x1400a7360]
call fcn.14004c5e0
mov dword [0x1400a36b4], 0
call sub.api_ms_win_crt_runtime_l1_1_0.dll__getpid
cmp qword [0x1400a7360], 0
mov dword [0x1400a738c], eax
je 0x140047397
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jb 0x140047397
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jb 0x14004733e
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 4
jb 0x140047397
cmp esi, ebx
jne 0x140047397
cmp word [r14 + 0x98], r12w
mov rcx, qword [0x1400a36d0]
cmove rcx, qword [0x1400a36c8]
call sub.WSOCK32.dll_closesocket
mov r8d, 0x3e8
mov edx, ebx
mov ecx, edi
call fcn.140026910
cmp rax, 0xffffffffffffffff
jne 0x14004737d
mov eax, 0x3f
jmp 0x140047415
cmp word [r14 + 0x98], r12w
jne 0x140047390
mov qword [0x1400a36c8], rax
jmp 0x140047397
mov qword [0x1400a36d0], rax
mov rcx, qword [0x1400a7360]
lea rdx, [rbp + 0x170]
call fcn.1400480d0
mov rdi, rax
test rax, rax
jne 0x14004749d
lea ecx, [rax + 0x58]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
test rax, rax
jne 0x1400473cc
lea eax, [rdi + 0x40]
jmp 0x140047415
xor eax, eax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], rax
cmp esi, ebx
jne 0x14004744d
mov eax, 6
mov word [rdi + 8], ax
movzx ecx, word [0x1400a36b0]
call fcn.1400265e0
lea rdx, [rdi + 8]
mov word [rdi + 0x14], ax
lea rcx, [rbp + 0x170]
call fcn.140028a50
test eax, eax
jne 0x140047475
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, 0x3d
mov rdi, qword [rsp + 0x3a0]
mov rsi, qword [rsp + 0x3a8]
mov rbx, qword [rsp + 0x3f8]
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.140077b10
add rsp, 0x3b0
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov word [rdi + 8], bx
movzx ecx, word [0x1400a36b0]
call fcn.1400265e0
lea rcx, [rbp + 0x170]
mov word [rdi + 0xa], ax
call fcn.140026620
mov dword [rdi + 0xc], eax
cmp eax, 0xffffffff
jmp 0x140047405
lea rcx, [rdi + 0x18]
mov edx, 0x40
lea r8, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rdx, rdi
mov dword [rdi], r12d
lea rcx, [0x1400a7360]
call fcn.14004c500
mov r12d, 0x2c6
mov dword [0x1400a7380], r12d
mov eax, dword [rdi]
and eax, 0x1fff
mov dword [0x1400a7388], 0
mov dword [0x1400a7384], eax
or rax, 0xffffffffffffffff
nop word [rax + rax]
cmp byte [r15 + rax + 1], 0
lea rax, [rax + 1]
jne 0x1400474d0
lea ecx, [rax + 1]
cmp ecx, 0x3e8
ja 0x140047500
movsxd r8, ecx
mov rdx, r15
lea rcx, [0x1400a7390]
call sub.VCRUNTIME140.dll_memcpy
mov r12d, dword [0x1400a7380]
xor edx, edx
lea rcx, [0x1400a7780]
mov r8d, 0x3f8
call sub.VCRUNTIME140.dll_memset
mov eax, 6
mov dword [rbp + 0x160], 4
xor edx, edx
mov dword [rbp + 0x164], 5
mov r8d, 0x3f8
mov dword [rbp + 0x168], eax
lea rcx, [0x1400a7b80]
lea ebx, [rax - 5]
call sub.VCRUNTIME140.dll_memset
mov ecx, r12d
call fcn.1400265a0
mov ecx, dword [0x1400a7384]
mov dword [0x1400a7b80], eax
call fcn.1400265a0
mov ecx, dword [0x1400a7388]
mov dword [0x1400a7b84], eax
call fcn.1400265a0
mov ecx, dword [0x1400a738c]
mov dword [0x1400a7b88], eax
call fcn.1400265a0
lea r8, [0x1400a7390]
mov dword [0x1400a7b8c], eax
mov edx, 0x3e8
lea rcx, [0x1400a7b90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r12d, r12d
mov r15d, esi
mov esi, r12d
nop dword [rax]
cmp rsi, 3
jge 0x140047827
cmp r15, 2
jne 0x14004761c
test ebx, ebx
je 0x140047665
cmp word [r14 + 0x98], 1
lea rax, [rdi + 8]
mov rcx, qword [0x1400a36d0]
lea rdx, [0x1400a7b80]
cmove rcx, qword [0x1400a36c8]
mov r8d, 0x3f8
xor r9d, r9d
mov dword [rsp + 0x28], reloc.WSOCK32.dll_recv
mov qword [rsp + 0x20], rax
call sub.WSOCK32.dll_sendto
cmp eax, 0x3f8
je 0x140047665
call sub.WSOCK32.dll_WSAGetLastError
mov eax, 0x3e
jmp 0x140047415
test ebx, ebx
je 0x140047665
cmp word [r14 + 0x98], 1
lea rax, [rdi + 8]
mov rcx, qword [0x1400a36d0]
lea rdx, [0x1400a7b80]
cmove rcx, qword [0x1400a36c8]
mov r8d, 0x3f8
xor r9d, r9d
mov dword [rsp + 0x28], reloc.WSOCK32.dll_recv
mov qword [rsp + 0x20], rax
call fcn.140026820
cmp eax, 0x3f8
jne 0x140047612
movzx edx, word [r14 + 0x98]
mov ebx, r12d
mov r8, qword [0x1400a36d0]
cmp dx, 1
mov rax, r8
mov dword [rsp + 0x40], 1
cmove rax, qword [0x1400a36c8]
lea rdx, [rsp + 0x40]
cmove r8, qword [0x1400a36c8]
xor r9d, r9d
mov qword [rsp + 0x48], rax
mov eax, dword [rbp + rsi*4 + 0x160]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x38]
lea ecx, [r8 + 1]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov dword [rsp + 0x3c], r12d
call fcn.1400267b0
cmp eax, 0xffffffff
je 0x14004781d
test eax, eax
je 0x140047810
xor edx, edx
mov dword [rsp + 0x30], reloc.WSOCK32.dll_recv
mov r8d, 0x3f8
lea rcx, [0x1400a7b80]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1400a36d0]
mov r8d, 0x3f8
lea rdx, [0x1400a7b80]
cmp r15, 2
jne 0x14004773a
cmp word [r14 + 0x98], 1
cmove rcx, qword [0x1400a36c8]
xor r9d, r9d
call sub.WSOCK32.dll_recv
cmp eax, 0x3f8
je 0x14004776e
mov eax, WSAGetLastError
jmp 0x140047415
cmp word [r14 + 0x98], 1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x150]
cmove rcx, qword [0x1400a36c8]
xor r9d, r9d
mov qword [rsp + 0x20], rax
call fcn.140026730
cmp eax, 0xffffffff
je 0x140047730
mov ecx, dword [0x1400a7b80]
call fcn.1400265a0
mov ecx, dword [0x1400a7b84]
mov dword [0x1400a7780], eax
call fcn.1400265a0
mov ecx, dword [0x1400a7b88]
mov dword [0x1400a7784], eax
call fcn.1400265a0
mov ecx, dword [0x1400a7b8c]
mov dword [0x1400a7788], eax
call fcn.1400265a0
lea r8, [0x1400a7b90]
mov dword [0x1400a778c], eax
mov edx, 0x3e8
lea rcx, [0x1400a7790]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
cmp r15, 1
jne 0x1400477e0
mov eax, dword [rdi + 0xc]
cmp eax, dword [rbp + 0x154]
jne 0x1400475b0
mov eax, dword [0x1400a7384]
cmp dword [0x1400a7784], eax
jne 0x1400475b0
inc dword [rdi]
lea r8, [0x1400a7790]
mov edx, 0x3e8
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor eax, eax
jmp 0x140047415
mov ebx, 1
inc rsi
jmp 0x1400475b0
mov eax, WSAGetLastError
jmp 0x140047415
mov eax, 0x3c
jmp 0x140047415
mov eax, 0x4c
jmp 0x14004741d