Function at 0x4780b0
Capabilities:
Get hostname
Receive data
Receive data on socket
Resolve function by parsing pe exports
Send data
Send data on socket

Disassembly:
sub esp, 0x244
push ebx
push ebp
push esi
push edi
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x39]
mov byte [esp + 0x38], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x5da30c]
mov ecx, 0x18
mov byte [esp + 0x88], al
xor eax, eax
lea edi, [esp + 0x89]
mov ebp, 1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0x260]
test eax, eax
jne 0x47810c
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
add esp, 0x244
ret
mov byte [eax], 0
call fcn.0046ab50
cmp eax, 1
jne 0x47811b
xor ebp, ebp
call fcn.0046b5e0
test eax, eax
je 0x478129
mov ebp, 1
mov ebx, dword [esp + 0x25c]
mov ecx, 0x19
xor eax, eax
lea edi, [esp + 0xec]
rep stosd dword es:[edi], eax
lea edi, [ebx + 2]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xec]
mov eax, ecx
mov esi, edi
mov edi, edx
push str.RNBO_SPN_LOCAL
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xf0]
push ecx
call fcn.004d48bd
add esp, 8
test eax, eax
jne 0x4781a6
cmp ebp, 1
jne 0x4781a6
mov edx, dword [esp + 0x260]
mov eax, dword [esp + 0x258]
push edx
push eax
call fcn.0047dd90
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret
lea ecx, [esp + 0xec]
push str.RNBO_SPN_LOCAL
push ecx
call fcn.004d48bd
add esp, 8
test eax, eax
jne 0x478221
test ebp, ebp
jne 0x478221
mov edi, 2
push 0x64
cmp word [ebx + 0x8c], di
jne 0x4781e5
lea edx, [esp + 0x8c]
push edx
call fcn.0046b400
add esp, 8
jmp 0x478251
lea eax, [esp + 0x8c]
push eax
call sub.WSOCK32.dll_gethostname
cmp eax, 0xffffffff
jne 0x478251
mov ecx, dword [str.127.0.0.1]
mov edx, dword [0x5ceebc]
mov ax, word [0x5ceec0]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], edx
mov word [esp + 0x90], ax
jmp 0x478251
lea edi, [esp + 0xec]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x88]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 2
call fcn.0046b1c0
xor ecx, ecx
mov cx, word [ebx + 0x8c]
dec ecx
cmp ecx, 7
ja case.0x478265.3
jmp dword [ecx*4 + 0x4788d8]
mov ecx, dword [esp + 0x260]
mov edx, dword [esp + 0x258]
push ecx
push ebx
push edx
call fcn.004789d0
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret
and eax, 1
cmp al, 1
jne 0x4782a7
mov dword [esp + 0x10], 1
jmp 0x4782d5
and eax, edi
cmp al, 2
je 0x4782d1
pop edi
pop esi
pop ebp
mov eax, 0x4c
pop ebx
add esp, 0x244
ret
mov ecx, eax
and ecx, 1
cmp cl, 1
jne 0x4782cb
mov dword [esp + 0x10], 1
jmp 0x4782d5
and eax, edi
cmp al, 2
jne 0x4782a7
mov dword [esp + 0x10], edi
lea edx, [esp + 0x88]
push edx
call fcn.0046b220
add esp, 4
test eax, eax
jne 0x4782f4
test byte [esp + 0x10], 2
je 0x4782f4
mov dword [esp + 0x10], edi
push ebx
call fcn.00477210
add esp, 4
cmp eax, 0xffffffff
jne 0x47833d
cmp dword [esp + 0x10], edi
jne 0x478312
push 0x3e8
push edi
push 6
jmp 0x478316
push 0x11
push edi
push edi
call fcn.0046b950
add esp, 0xc
cmp eax, 0xffffffff
jne 0x478333
pop edi
pop esi
pop ebp
mov eax, 0x3f
pop ebx
add esp, 0x244
ret
push eax
push ebx
call fcn.00477230
add esp, 8
mov eax, dword [esp + 0x10]
push 0
cmp eax, edi
jne 0x47835b
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x8c]
push eax
push ecx
call fcn.0046b340
jmp 0x47836d
lea edx, [esp + 0x3c]
lea eax, [esp + 0x8c]
push edx
push eax
call fcn.0046af80
add esp, 0xc
test eax, eax
je 0x478384
pop edi
pop esi
pop ebp
mov eax, 0x3d
pop ebx
add esp, 0x244
ret
mov eax, dword [0x5cffb8]
test eax, eax
je 0x4783a5
call fcn.00478900
push eax
call fcn.00479ba0
add esp, 4
mov dword [0x5cffb8], 0
call fcn.0046aac0
mov dword [0x5da80c], eax
call fcn.00478900
cmp dword [eax], 0
je 0x47841b
mov esi, dword [sym.imp.KERNEL32.dll_GetVersion]
call esi
cmp eax, 0x80000000
jb 0x47841b
call esi
cmp eax, 0x80000000
jb 0x4783d7
call esi
cmp al, 4
jb 0x47841b
cmp dword [esp + 0x10], edi
jne 0x47841b
push ebx
call fcn.00477210
add esp, 4
push eax
call sub.WSOCK32.dll_closesocket
push 0x3e8
push edi
push 6
call fcn.0046b950
add esp, 0xc
cmp eax, 0xffffffff
jne 0x478411
pop edi
pop esi
pop ebp
mov eax, 0x3f
pop ebx
add esp, 0x244
ret
push eax
push ebx
call fcn.00477230
add esp, 8
lea ecx, [esp + 0x38]
push ecx
call fcn.00478900
mov edx, dword [eax]
push edx
call fcn.00478910
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x47853d
push 0x58
call fcn.004cf255
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x47845a
pop edi
pop esi
pop ebp
mov eax, 0x40
pop ebx
add esp, 0x244
ret
cmp dword [esp + 0x10], edi
jne 0x4784b1
lea esi, [ebp + 8]
xor eax, eax
mov ecx, esi
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov word [esi], 6
call fcn.00477280
push eax
call fcn.0046ba80
lea edx, [esp + 0x3c]
push esi
push edx
mov word [esi + 0xc], ax
call fcn.0046b2b0
add esp, 0xc
test eax, eax
jne 0x478503
push ebp
call fcn.004ce2e1
add esp, 4
mov eax, 0x3d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret
lea eax, [ebp + 8]
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov word [eax], di
call fcn.00477280
push eax
call fcn.0046ba80
mov word [ebp + 0xa], ax
lea eax, [esp + 0x3c]
push eax
call fcn.0046b900
add esp, 8
cmp eax, 0xffffffff
mov dword [ebp + 0xc], eax
jne 0x478503
push ebp
call fcn.004ce2e1
add esp, 4
mov eax, 0x3d
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret
lea edi, [esp + 0x38]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push ebp
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp], 1
call fcn.00478900
push eax
call fcn.00479bb0
add esp, 8
mov esi, dword [esp + 0x258]
mov dword [0x5da800], 0x2c6
mov ecx, dword [ebp]
mov edi, esi
and ecx, 0x1fff
xor eax, eax
mov dword [0x5da804], ecx
or ecx, 0xffffffff
mov dword [0x5da808], 0
repne scasb al, byte es:[edi]
not ecx
cmp ecx, 0x3e8
ja 0x47858d
mov edx, ecx
mov edi, 0x5da810
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0xfe
xor eax, eax
mov edi, 0x5dac08
rep stosd dword es:[edi], eax
lea eax, [esp + 0x2c]
push eax
call fcn.00478090
mov ecx, 0xfe
xor eax, eax
mov edi, 0x5db000
mov dword [esp + 0x1c], 0
rep stosd dword es:[edi], eax
mov ecx, dword [0x5da800]
mov dword [esp + 0x18], 1
push ecx
call fcn.0046bab0
mov edx, dword [0x5da804]
mov dword [0x5db000], eax
push edx
call fcn.0046bab0
mov dword [0x5db004], eax
mov eax, dword [0x5da808]
push eax
call fcn.0046bab0
mov ecx, dword [0x5da80c]
mov dword [0x5db008], eax
push ecx
call fcn.0046bab0
mov dword [0x5db00c], eax
mov edi, 0x5da810
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea eax, [esp + 0x2c]
mov edx, ecx
mov esi, edi
mov edi, 0x5db010
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x18], 3
jge 0x47888c
mov eax, dword [esp + 0x10]
mov esi, 2
cmp eax, esi
mov eax, dword [esp + 0x14]
jne 0x478684
test eax, eax
je 0x4786b7
lea ecx, [ebp + 8]
push 0x10
push ecx
push 0
push 0x3f8
push 0x5db000
push ebx
call fcn.00477210
add esp, 4
push eax
call sub.WSOCK32.dll_sendto
cmp eax, 0x3f8
jne 0x478857
jmp 0x4786b7
test eax, eax
je 0x4786b7
lea edx, [ebp + 8]
push 0x10
push edx
push 0
push 0x3f8
push 0x5db000
push ebx
call fcn.00477210
add esp, 4
push eax
call fcn.0046ba00
add esp, 0x18
cmp eax, 0x3f8
jne 0x47885c
xor edi, edi
push ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x154], edi
call fcn.00477210
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0x20]
add esp, 4
mov dword [esp + 0x28], edi
mov dword [esp + ecx*4 + 0x154], eax
mov ecx, dword [esp + 0x150]
mov eax, dword [edx]
inc ecx
mov dword [esp + 0x150], ecx
lea ecx, [esp + 0x24]
push ecx
push edi
lea edx, [esp + 0x158]
push edi
push edx
push ebx
mov dword [esp + 0x38], eax
call fcn.00477210
add esp, 4
inc eax
push eax
call fcn.0046b980
add esp, 0x14
cmp eax, 0xffffffff
je 0x47887c
cmp eax, edi
je 0x47883a
mov ecx, 0xfe
xor eax, eax
mov edi, 0x5db000
mov dword [esp + 0x20], 0x10
rep stosd dword es:[edi], eax
cmp dword [esp + 0x10], esi
jne 0x47876f
push 0
push 0x3f8
push 0x5db000
push ebx
call fcn.00477210
add esp, 4
push eax
call sub.WSOCK32.dll_recv
cmp eax, 0x3f8
jne 0x47886c
jmp 0x4787a0
lea eax, [esp + 0x20]
lea ecx, [esp + 0x78]
push eax
push ecx
push 0
push 0x3f8
push 0x5db000
push ebx
call fcn.00477210
add esp, 4
push eax
call fcn.0046ba40
add esp, 0x18
cmp eax, 0xffffffff
je 0x47886c
mov edx, dword [0x5db000]
push edx
call fcn.0046bab0
mov dword [0x5dac08], eax
mov eax, dword [0x5db004]
push eax
call fcn.0046bab0
mov ecx, dword [0x5db008]
mov dword [0x5dac0c], eax
push ecx
call fcn.0046bab0
mov edx, dword [0x5db00c]
mov dword [0x5dac10], eax
push edx
call fcn.0046bab0
mov dword [0x5dac14], eax
mov edi, 0x5db010
or ecx, 0xffffffff
xor eax, eax
add esp, 0x10
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x5dac18
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x10]
and ecx, 3
cmp eax, 1
rep movsb byte es:[edi], byte [esi]
jne 0x478826
mov eax, dword [ebp + 0xc]
lea edx, [ebp + 0xc]
lea ecx, [esp + 0x7c]
cmp eax, dword [ecx]
jne 0x478636
mov ecx, dword [0x5dac0c]
mov eax, dword [0x5da804]
cmp ecx, eax
je 0x47889c
jmp 0x478636
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ecx
mov dword [esp + 0x14], 1
mov dword [esp + 0x18], ecx
add eax, 4
jmp 0x478632
call sub.WSOCK32.dll_WSAGetLastError
pop edi
pop esi
pop ebp
mov eax, 0x3e
pop ebx
add esp, 0x244
ret
pop edi
pop esi
pop ebp
mov eax, 0x6c
pop ebx
add esp, 0x244
ret
pop edi
pop esi
pop ebp
mov eax, 0x6d
pop ebx
add esp, 0x244
ret
pop edi
pop esi
pop ebp
mov eax, 0x3c
pop ebx
add esp, 0x244
ret
mov ecx, dword [ebp]
mov edi, 0x5dac18
inc ecx
xor eax, eax
mov dword [ebp], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x260]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x244
ret