Function at 0x47da1a
Capabilities:
Receive data
Receive data on socket
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov eax, edx
mov esi, ebx
mov dword [esp + 0x18], eax
lea ebp, [edi + 0x1e8]
cmp dword [ebp], ebx
jg 0x47e0e0
push 2
pop edx
test eax, eax
je 0x47de57
mov esi, dword [sym.imp.WS2_32.dll_recv]
cmp dword [edi + 0x224], ebx
je 0x47dace
cmp dword [edi + 0x1240], ebx
jne 0x47dace
push edx
push dword [edi + 0x1fc]
push dword [edi + 0x1f8]
push dword [edi + 0x34]
call esi
mov ecx, dword [edi + 0x1f8]
cmp eax, 5
jl 0x47da99
cmp byte [ecx], 0x16
movsx eax, byte [ecx + 5]
jne 0x47da99
cmp byte [ecx + 1], 1
jb 0x47da99
test eax, eax
je 0x47dac3
xor ecx, ecx
inc ecx
cmp eax, ecx
je 0x47dac3
cmp eax, 2
je 0x47dac3
push dword [edi + 0x224]
call fcn.0057ca30
mov eax, dword [edi + 0x1c0]
mov dword [edi + 0x224], ebx
pop ecx
test eax, eax
je 0x47dac3
push dword [edi + 0x1dc]
push 0xffffffffffffffff
push edi
call eax
add esp, 0xc
xor eax, eax
inc eax
mov dword [edi + 0x1240], eax
jmp 0x47dad1
xor eax, eax
inc eax
mov dword [esp + 0x10], 0x1c
cmp dword [edi + 0x224], ebx
je 0x47dd2a
push 0xf
push dword [edi + 0x22c]
call fcn.004b5b30
xor eax, eax
inc eax
pop ecx
pop ecx
cmp word [edi + 0x40], ax
jne 0x47db1c
mov eax, dword [edi + 0x234]
push ebx
mov ecx, dword [eax]
mov eax, dword [eax + 8]
sub eax, ecx
push eax
lea eax, [edi + 0x23c]
add eax, ecx
push eax
push dword [edi + 0x34]
call esi
jmp 0x47db44
mov ecx, dword [edi + 0x234]
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x78]
push eax
mov eax, dword [ecx + 8]
sub eax, dword [ecx]
push ebx
push eax
lea eax, [edi + 0x23c]
add eax, dword [ecx]
push eax
push dword [edi + 0x34]
call dword [sym.imp.WS2_32.dll_recvfrom]
mov esi, eax
test esi, esi
jle 0x47dcfb
mov eax, dword [edi + 0x234]
add dword [eax], esi
cmp dword [edi + 0x123c], ebx
jne 0x47dbe3
push dword [edi + 0x224]
call fcn.0057c610
pop ecx
mov ecx, eax
sub ecx, ebx
je 0x47dbda
sub ecx, 1
je 0x47db97
push eax
push dword [edi + 0x224]
call fcn.0057d230
pop ecx
pop ecx
cmp eax, 1
jne 0x47dbbe
mov dword [edi + 0x21c], eax
or esi, 0xffffffff
jmp 0x47dbe3
xor eax, eax
inc eax
mov dword [edi + 0x123c], eax
mov dword [edi + 0x220], eax
mov eax, dword [edi + 0x1c0]
test eax, eax
je 0x47dbbe
push dword [edi + 0x1dc]
push 0xffffffffffffffff
push edi
call eax
add esp, 0xc
mov ecx, edi
call fcn.0047d8ea
jmp 0x47dbe3
push 0x1000
push 0x72f000
push eax
call fcn.004aec90
add esp, 0xc
call fcn.004aee70
test eax, eax
jne 0x47dbc7
cmp dword [edi + 0x123c], 1
jne 0x47dcfb
mov eax, dword [edi + 0x234]
cmp dword [eax], ebx
jbe 0x47dcfb
mov ecx, dword [edi + 0x1f4]
mov eax, dword [edi + 0x1fc]
sub eax, ecx
push eax
mov eax, dword [edi + 0x1f8]
add eax, ecx
push eax
push dword [edi + 0x224]
call fcn.0057e010
add esp, 0xc
test eax, eax
jle 0x47dcda
add dword [edi + 0x1f4], eax
mov ecx, dword [edi + 0x1fc]
mov eax, ecx
sub eax, dword [edi + 0x1f4]
jne 0x47dca8
mov eax, dword [edi + 0x210]
add ecx, 0x1000
cmp ecx, eax
jl 0x47dc59
test eax, eax
cmove eax, ecx
mov ecx, eax
mov ebx, dword [edi + 0x1f8]
xor eax, eax
push 0x513
push 0x71f380
inc eax
mov dword [edi + 0x1fc], ecx
push eax
push ecx
push ebx
call fcn.005e80c0
add esp, 0x14
mov dword [edi + 0x1f8], eax
test eax, eax
je 0x47e0e8
cmp eax, ebx
je 0x47dca8
mov ecx, dword [edi + 0x1d4]
test ecx, ecx
je 0x47dca8
sub eax, ebx
push eax
push dword [edi + 0x1dc]
push edi
call ecx
add esp, 0xc
mov ecx, dword [edi + 0x1f4]
mov eax, dword [edi + 0x1fc]
sub eax, ecx
push eax
mov eax, dword [edi + 0x1f8]
add eax, ecx
push eax
push dword [edi + 0x224]
call fcn.0057e010
add esp, 0xc
test eax, eax
jg 0x47dc2c
xor ebx, ebx
test eax, eax
jns 0x47dcfb
push eax
push dword [edi + 0x224]
call fcn.0057d230
mov eax, dword [edi + 0x238]
pop ecx
pop ecx
cmp dword [eax], ebx
jbe 0x47dcfb
mov ecx, edi
call fcn.0047d8ea
mov eax, dword [edi + 0x234]
cmp dword [eax], ebx
jne 0x47de57
push ebx
xor eax, eax
push ebx
inc eax
push eax
push dword [edi + 0x22c]
call fcn.004b5b60
mov eax, dword [edi + 0x234]
add esp, 0x10
mov dword [eax], ebx
jmp 0x47de57
mov ecx, dword [edi + 0x1f4]
cmp word [edi + 0x40], ax
jne 0x47dd50
mov eax, dword [edi + 0x1fc]
push ebx
sub eax, ecx
push eax
mov eax, dword [edi + 0x1f8]
add eax, ecx
push eax
push dword [edi + 0x34]
call esi
jmp 0x47dd75
lea eax, [esp + 0x10]
push eax
lea eax, [edi + 0x78]
push eax
mov eax, dword [edi + 0x1fc]
push ebx
sub eax, ecx
push eax
mov eax, dword [edi + 0x1f8]
add eax, ecx
push eax
push dword [edi + 0x34]
call dword [sym.imp.WS2_32.dll_recvfrom]
mov esi, eax
xor eax, eax
inc eax
cmp word [edi + 0x40], ax
je 0x47ddc2
cmp word [edi + 0x78], 0x17
jne 0x47ddc2
mov eax, dword [edi + 0x80]
mov ecx, 0x722a04
cmp eax, dword [ecx]
jne 0x47ddc2
mov eax, dword [edi + 0x84]
cmp eax, dword [ecx + 4]
jne 0x47ddc2
mov eax, dword [edi + 0x88]
cmp eax, dword [ecx + 8]
jne 0x47ddc2
push dword [edi + 0x8c]
call dword [sym.imp.WS2_32.dll_ntohl]
push 2
mov dword [edi + 0x7c], eax
pop eax
mov word [edi + 0x78], ax
test esi, esi
jle 0x47de57
add dword [edi + 0x1f4], esi
jmp 0x47de57
cmp dword [ebp], ebx
jg 0x47de61
mov edx, dword [edi + 0x1f0]
mov ecx, dword [edi + 0x1f4]
cmp edx, ecx
je 0x47de61
test ecx, ecx
je 0x47de61
mov dword [esp + 0x14], ebx
mov ebx, dword [edi + 0x1bc]
test ebx, ebx
je 0x47de55
push ebp
lea eax, [edi + 0x1dc]
sub ecx, edx
push eax
lea eax, [edi + 0x1cc]
push eax
push ecx
lea eax, [esp + 0x24]
push eax
mov eax, dword [edi + 0x1f8]
add eax, edx
push eax
push edi
call ebx
xor ebx, ebx
add esp, 0x1c
cmp dword [edi + 0x1f8], ebx
je 0x47de57
mov eax, dword [edi + 0x1f4]
mov edx, dword [edi + 0x1f0]
sub eax, edx
mov ecx, dword [esp + 0x14]
cmp ecx, eax
jg 0x47de57
test ecx, ecx
je 0x47de61
lea eax, [edx + ecx]
mov dword [edi + 0x1f0], eax
jmp 0x47de57
xor ebx, ebx
cmp dword [edi + 0x34], 0xffffffff
jne 0x47ddd5
mov eax, dword [edi + 0x1f0]
cmp eax, dword [edi + 0x1f4]
jne 0x47de7b
mov dword [edi + 0x1f4], ebx
mov dword [edi + 0x1f0], ebx
test esi, esi
jg 0x47dfab
cmp dword [esp + 0x18], 0
je 0x47dfab
cmp esi, 0xffffffff
jne 0x47dea4
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2738
je 0x47e0e0
mov ecx, edi
call fcn.0047cc26
push 2
pop eax
push eax
push dword [edi + 0x34]
call dword [sym.imp.WS2_32.dll_shutdown]
push dword [edi + 0x34]
call dword [sym.imp.WS2_32.dll_closesocket]
or dword [edi + 0x34], 0xffffffff
mov ecx, edi
call fcn.0047cc26
mov ebx, dword [edi + 0x224]
test ebx, ebx
je 0x47def6
push ebx
call fcn.0057ca30
pop ecx
lea esi, [edi + 0x20c]
mov ecx, esi
call fcn.0044c7d2
xor ebp, ebp
mov dword [edi + 0x224], ebp
mov dword [esi], ebp
jmp 0x47def8
xor ebp, ebp
mov dword [edi + 0x1254], ebp
mov dword [edi + 0x1250], ebp
test ebx, ebx
je 0x47df31
cmp dword [edi + 0x220], ebp
jne 0x47df58
mov eax, dword [edi + 0x1c0]
test eax, eax
je 0x47df27
push dword [edi + 0x1dc]
push ebp
push edi
call eax
add esp, 0xc
cmp dword [edi + 0x220], ebp
je 0x47df6d
jmp 0x47df58
cmp dword [edi + 0x1ec], ebp
jg 0x47df58
mov eax, dword [edi + 0x1c0]
test eax, eax
je 0x47df50
push dword [edi + 0x1dc]
push ebp
push edi
call eax
add esp, 0xc
cmp dword [edi + 0x1ec], ebp
jle 0x47df6d
mov eax, dword [edi + 0x1c4]
test eax, eax
je 0x47df6d
push dword [edi + 0x1dc]
push edi
call eax
pop ecx
pop ecx
mov eax, dword [edi + 0x1f8]
mov dword [edi + 0x220], ebp
mov dword [edi + 0x1ec], ebp
test eax, eax
je 0x47e0e0
cmp eax, 0x740000
je 0x47df9a
xor ecx, ecx
inc ecx
push ecx
push eax
call fcn.005e7dd0
pop ecx
pop ecx
mov dword [edi + 0x1f8], ebp
mov dword [edi + 0x1fc], ebp
jmp 0x47e0e0
mov ecx, dword [edi + 0x1f0]
test ecx, ecx
je 0x47e031
mov edx, dword [edi + 0x1f8]
mov eax, dword [edi + 0x1f4]
lea esi, [ecx + edx]
sub eax, ecx
je 0x47e002
test edx, edx
jne 0x47dfde
call fcn.005e4ae0
mov dword [eax], 0x16
call fcn.005e2c10
jmp 0x47e002
test esi, esi
je 0x47dfcc
cmp dword [edi + 0x1fc], eax
jae 0x47dff7
call fcn.005e4ae0
mov dword [eax], 0x22
jmp 0x47dfd7
push eax
push esi
push edx
call fcn.005b5230
add esp, 0xc
mov eax, dword [edi + 0x1f0]
sub dword [edi + 0x1f4], eax
mov eax, dword [edi + 0x1d4]
mov dword [edi + 0x1f0], ebx
test eax, eax
je 0x47e031
sub esi, dword [edi + 0x1f8]
push esi
push dword [edi + 0x1dc]
push edi
call eax
add esp, 0xc
mov ecx, dword [edi + 0x1fc]
mov eax, ecx
sub eax, dword [edi + 0x1f4]
cmp eax, 0x400
jge 0x47e0e0
mov eax, dword [edi + 0x210]
test eax, eax
je 0x47e05c
cmp ecx, eax
jge 0x47e0e0
add ecx, 0x1000
cmp ecx, eax
jl 0x47e06d
test eax, eax
cmove eax, ecx
mov ecx, eax
mov esi, dword [edi + 0x1f8]
mov ebx, 0x5d9
push ebx
xor eax, eax
mov dword [edi + 0x1fc], ecx
push 0x71f404
inc eax
push eax
push ecx
push esi
call fcn.005e80c0
add esp, 0x14
mov dword [edi + 0x1f8], eax
test eax, eax
jne 0x47e0c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edx, 0x71f424
push esi
push ebx
xor ecx, ecx
call fcn.00488a50
push ebx
push 0x71f444
push 0x71f464
jmp 0x47e112
cmp eax, esi
je 0x47e0e0
mov ecx, dword [edi + 0x1d4]
test ecx, ecx
je 0x47e0e0
sub eax, esi
push eax
push dword [edi + 0x1dc]
push edi
call ecx
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov esi, 0xfe
mov edi, 0x513
push esi
push edi
mov edx, 0x71f3a0
xor ecx, ecx
call fcn.00488a50
push edi
push 0x71f3c0
push 0x71f3e0
call fcn.00401109
add esp, 0x18
push esi
call fcn.005c3000
int3