Function at 0x416cd0
Capabilities:
Get hostname
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x5e3fdf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
mov eax, dword [0x65290c]
push ebx
push ebp
push esi
push edi
mov ebx, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [0x667d98]
xor edi, edi
cmp ecx, edi
mov dword [esp + 0x124], edi
je 0x416d22
call fcn.004132d0
mov ecx, dword [0x667d98]
cmp ecx, edi
je 0x416d22
mov edx, dword [ecx]
push 1
call dword [edx]
push 0x1a0
call fcn.005c00fd
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, edi
mov byte [esp + 0x124], 1
je 0x416d48
mov ecx, eax
call fcn.00411ce0
jmp 0x416d4a
xor eax, eax
mov ebp, dword [esp + 0x12c]
mov ecx, eax
push ebp
push 0x186a0
push ebx
push 0x416c00
mov byte [esp + 0x134], 0
mov dword [0x667d98], eax
call fcn.00411fd0
test al, al
je 0x416eb0
lea eax, [esp + 0x1c]
push pe_nt_image_headers32
push eax
call dword [sym.imp.WS2_32.dll_gethostname]
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov esi, eax
cmp esi, edi
je 0x416dff
mov edx, dword [esi + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x14]
call fcn.005c4f3c
mov edx, dword [esi + 0xc]
movsx eax, word [esi + 0xa]
mov ecx, dword [edx]
add ecx, eax
mov eax, dword [esi]
cmp ecx, eax
jae 0x416dff
push 0x64b4b4
lea ecx, [esp + 0x14]
call fcn.005c4f3c
mov edx, dword [esi + 0xc]
add edi, 4
mov eax, dword [edx + edi]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
push eax
lea ecx, [esp + 0x14]
call fcn.005c4f3c
mov edx, dword [esi + 0xc]
movsx eax, word [esi + 0xa]
mov ecx, dword [edx + edi]
add ecx, eax
mov eax, dword [esi]
cmp ecx, eax
jb 0x416dc3
mov eax, dword [0x65290c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
push ebp
lea edx, [esp + 0x1c]
push 0x64b4a8
push edx
mov byte [esp + 0x130], 3
call fcn.005bd692
mov eax, dword [esp + 0x24]
add esp, 0xc
lea esi, [ebx + 0x640]
push eax
push 2
mov ecx, esi
call fcn.004b2190
push ebp
lea ecx, [esp + 0x18]
push 0x64b484
push ecx
call fcn.005bd692
mov edx, dword [esp + 0x20]
mov ecx, dword [0x667814]
add esp, 0xc
xor edi, edi
push edi
push edi
push edx
call fcn.004149e0
lea eax, [esp + 0x14]
push 0x64b430
push eax
call fcn.005bd692
mov ecx, dword [esp + 0x1c]
add esp, 8
push edi
push edi
push ecx
mov ecx, dword [0x667814]
call fcn.004149e0
lea ecx, [esp + 0x14]
mov dword [0x667a28], ebp
mov byte [esp + 0x124], 2
call fcn.005c4b60
lea ecx, [esp + 0x18]
mov byte [esp + 0x124], 0
call fcn.005c4b60
jmp 0x416ef0
push ebp
lea edx, [esp + 0x14]
push 0x64b3f0
push edx
call fcn.005bd692
add esp, 0xc
lea esi, [ebx + 0x640]
mov ecx, esi
push 0x64b3e8
push 2
call fcn.004b2190
mov eax, dword [esp + 0x10]
mov ecx, dword [0x667814]
push 1
push edi
push eax
call fcn.004149e0
mov dword [0x667a28], edi
mov ecx, ebx
call fcn.00415ba0
lea ecx, [ebx + 0x820]
push ecx
push 1
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push edi
mov ecx, ebx
call fcn.004177f0
push 0x64b3dc
push 3
mov ecx, esi
call fcn.004b2190
lea ecx, [esp + 0x10]
mov dword [esp + 0x124], 0xffffffff
call fcn.005c4b60
mov ecx, dword [esp + 0x11c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x118
ret 8