Function at 0x440d3c
Capabilities:
Initialize winsock library
Resolve dns

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3dc
mov eax, dword [0x5065d0]
xor eax, esp
mov dword [esp + 0x3d8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
xor ebx, ebx
push 0x18e
mov dword [esp + 0x14], eax
lea eax, [esp + 0x2e]
push ebx
push eax
mov word [esp + 0x34], bx
call fcn.004ab5d0
mov edi, 0x103
push edi
lea eax, [esp + 0x1e1]
push ebx
push eax
mov byte [esp + 0x1e8], bl
call fcn.004ab5d0
push edi
lea eax, [esp + 0x2f5]
push ebx
push eax
mov byte [esp + 0x2fc], bl
call fcn.004ab5d0
xor eax, eax
mov word [esp + 0x3c], bx
lea edi, [esp + 0x3e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0x24
cmp dword [ebp + 0x10], ebx
stosw word es:[edi], ax
mov dword [esp + 0x14], ebx
jge 0x440dce
mov dword [ebp + 0x10], 0x104
cmp dword [esp + 0x10], ebx
je 0x440fb8
cmp esi, ebx
je 0x440fb8
cmp dword [ebp + 0x10], ebx
jle 0x440fb8
call fcn.0049c471
push dword [esp + 0x10]
mov ecx, 0x102
lea eax, [esp + 0x1d4]
call fcn.00476b6c
lea eax, [esp + 0x2dc]
call fcn.00476abd
mov edi, 0x4ddce8
push edi
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x1d8]
call fcn.004785ce
cmp eax, ebx
pop ecx
pop ecx
mov dword [esp + 0x10], eax
je 0x440e40
push edi
lea eax, [esp + 0x18]
xor ecx, ecx
call fcn.004785ce
pop ecx
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
call fcn.00476b3a
test eax, eax
jne 0x440e74
push dword [esp + 0x10]
mov ecx, 0x104
lea eax, [esp + 0x2dc]
call fcn.00476b6c
push 0x3a
xor eax, eax
lea edi, [esp + 0x2e0]
call fcn.0047797b
pop ecx
pop ecx
mov edi, 0x5fdfe8
mov edx, edi
call fcn.00476b3a
test eax, eax
jne 0x440eaf
lea eax, [esp + 0x1d0]
push 0x5fdee0
push eax
call fcn.004ab3bf
test eax, eax
pop ecx
pop ecx
jne 0x440eaf
push edi
mov ecx, 0x104
lea eax, [esp + 0x1d4]
call fcn.00476b6c
pop ecx
lea ecx, [esp + 0x1d0]
mov byte [esi], bl
call fcn.004408fe
test eax, eax
je 0x440ef3
lea ebx, [esp + 0x1d0]
call fcn.004407c4
mov ecx, dword [ebp + 0x10]
mov eax, ebx
push eax
mov eax, esi
call fcn.00476b6c
lea eax, [esp + 0x2dc]
push eax
mov eax, dword [ebp + 0x10]
call fcn.00476c3c
pop ecx
pop ecx
mov eax, esi
jmp 0x440fba
lea eax, [esp + 0x28]
push eax
push 0x101
mov byte [esi], bl
call sub.WSOCK32.dll_WSAStartup
test eax, eax
jne 0x440fb8
lea eax, [esp + 0x1d0]
push eax
call sub.WSOCK32.dll_gethostbyname
mov ecx, eax
cmp ecx, ebx
je 0x440f86
movzx edx, word [ecx + 0xa]
cmp dx, bx
jle 0x440f86
xor eax, eax
mov byte [esp + 0x1bc], bl
lea edi, [esp + 0x1bd]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
movsx eax, dx
push eax
mov eax, dword [ecx + 0xc]
push dword [eax]
lea eax, [esp + 0x24]
push eax
call fcn.004aaed0
push dword [esp + 0x28]
lea eax, [esp + 0x1cc]
mov byte [esi], bl
call fcn.00440c5b
mov ecx, dword [ebp + 0x10]
lea eax, [esp + 0x1cc]
push eax
mov eax, esi
call fcn.00476b6c
add esp, 0x14
mov ecx, esi
xor edi, edi
call fcn.004408fe
test eax, eax
jne 0x440f89
or edi, 0xffffffff
call sub.WSOCK32.dll_WSACleanup
cmp edi, ebx
jne 0x440fb8
push esi
call fcn.004aa880
test eax, eax
pop ecx
jbe 0x440fb8
lea eax, [esp + 0x2d8]
push eax
mov eax, dword [ebp + 0x10]
call fcn.00476c3c
pop ecx
call fcn.0049c471
jmp 0x440eec
xor eax, eax
mov ecx, dword [esp + 0x3e4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004aaeb5
mov esp, ebp
pop ebp
ret