Function at 0x40f1fb
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebp
mov eax, 0x812c
lea ebp, [esp - 0x78]
call fcn.004216d0
push ebx
xor eax, eax
push esi
push edi
xor ebx, ebx
mov byte [ebp - 0x80b4], bl
mov ecx, 0x1fff
lea edi, [ebp - 0x80b3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp + 0x5c], bl
lea edi, [ebp + 0x5d]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x1f
mov byte [ebp - 0x24], bl
xor eax, eax
pop ecx
lea edi, [ebp - 0x23]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp + 0x6f], bl
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00421658
pop ecx
mov byte [ebp + 0x77], bl
mov edi, 0x7ff8
mov al, byte [ebp + 0x6f]
inc byte [ebp + 0x6f]
cmp al, 0x14
ja 0x40f7d4
call fcn.00421662
cdq
push 5
pop ecx
idiv ecx
movzx eax, dl
cmp eax, 4
jg 0x40f57a
je 0x40f4e9
sub eax, ebx
je 0x40f458
dec eax
je 0x40f3c7
dec eax
je 0x40f336
dec eax
jne 0x40f7c0
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x430140
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x430160
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x19
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f315
cmp cl, 0x39
jbe 0x40f31e
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f309
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x4300dc
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x40
lea eax, [ebp - 0x24]
push eax
push 0x430100
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x34
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f3a6
cmp cl, 0x39
jbe 0x40f3af
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f39a
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x43009c
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x4300bc
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x13
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f437
cmp cl, 0x39
jbe 0x40f440
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f42b
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x43005c
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x43007c
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x14
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f4c8
cmp cl, 0x39
jbe 0x40f4d1
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f4bc
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x430180
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x4301a0
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x11
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f559
cmp cl, 0x39
jbe 0x40f562
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f54d
sub eax, 5
je 0x40f72f
dec eax
je 0x40f69e
dec eax
je 0x40f60b
sub eax, 0x17
jne 0x40f7c0
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push str.asdf
mov dword [ebp + 0x70], edi
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
lea eax, [ebp - 0x80b4]
push str.IP:
push eax
call fcn.00413394
cmp eax, ebx
pop ecx
pop ecx
je 0x40f7c0
add eax, 4
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f5ea
cmp cl, 0x39
jbe 0x40f5f3
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f5de
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x430248
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x28
lea eax, [ebp - 0x24]
push eax
push 0x430268
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0xa9
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f67d
cmp cl, 0x39
jbe 0x40f686
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f671
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x430200
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x28
lea eax, [ebp - 0x24]
push eax
push 0x430220
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x22
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f70e
cmp cl, 0x39
jbe 0x40f717
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f702
push ebx
push ebx
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp - 0x80b4]
push eax
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x4301c0
mov dword [ebp + 0x70], edi
call fcn.00413043
add esp, 0xc
push eax
call fcn.0040ee53
add esp, 0x14
test al, al
je 0x40f7c0
push 0x20
lea eax, [ebp - 0x24]
push eax
push 0x4301e0
call fcn.00413043
push eax
lea eax, [ebp - 0x80b4]
push eax
call fcn.00413394
add esp, 0x14
cmp eax, ebx
je 0x40f7c0
add eax, 0x14
lea edx, [ebp + 0x5c]
xor esi, esi
mov cl, byte [eax]
cmp cl, 0x30
jb 0x40f797
cmp cl, 0x39
jbe 0x40f79c
cmp cl, 0x2e
jne 0x40f7ac
cmp cl, bl
je 0x40f7ac
cmp esi, 0xf
jg 0x40f7ac
mov byte [edx], cl
inc edx
inc eax
inc esi
jmp 0x40f78b
lea eax, [ebp + 0x5c]
push eax
mov byte [edx], bl
call fcn.00414114
test al, al
pop ecx
je 0x40f7c0
mov byte [ebp + 0x77], 1
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [ebp + 0x77], bl
je 0x40f25d
cmp byte [ebp + 0x77], bl
je 0x40f882
lea eax, [ebp + 0x5c]
push eax
call fcn.0041401c
mov dword [esp], 0x458d70
push eax
mov dword [0x459648], eax
call fcn.00413feb
pop ecx
pop ecx
push 0x1f
pop ecx
xor eax, eax
mov byte [ebp - 0xb4], bl
lea edi, [ebp - 0xb3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x80
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.WS2_32.dll_gethostname]
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov esi, eax
cmp esi, ebx
mov byte [0x45964c], bl
je 0x40f87b
mov eax, dword [esi + 0xc]
cmp dword [eax], ebx
je 0x40f87b
xor edi, edi
cmp edi, 0x28
jge 0x40f87b
movsx ecx, word [esi + 0xa]
push ecx
push dword [edi + eax]
lea eax, [ebp - 0x30]
push eax
call fcn.00421200
mov eax, dword [0x459648]
add esp, 0xc
cmp eax, dword [ebp - 0x30]
je 0x40f874
mov eax, dword [esi + 0xc]
add edi, 4
cmp dword [edi + eax], ebx
jne 0x40f844
jmp 0x40f87b
mov byte [0x45964c], 1
mov eax, dword [0x459648]
jmp 0x40f89a
push 0x10
push ebx
push 0x458d70
mov dword [0x459648], ebx
call fcn.00421540
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x78
leave
ret