Function at 0x45cc20
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56e21c
mov eax, dword fs:[0]
push eax
mov eax, 0x159c
call fcn.005382c0
mov eax, dword [0x676300]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
push 0x33e
lea eax, [ebp - 0xd2c]
push ebx
push eax
mov dword [ebp - 0x1590], ecx
mov dword [ebp - 0xd30], ebx
call fcn.00534b40
push 0x40
lea ecx, [ebp - 0xe2f]
push ebx
push ecx
mov byte [ebp - 0xe30], bl
call fcn.00534b40
push 0xbc
lea edx, [ebp - 0xdef]
push ebx
push edx
call fcn.00534b40
push 0x3ff
lea eax, [ebp - 0x50b]
push ebx
push eax
mov byte [ebp - 0x50c], bl
call fcn.00534b40
push 0x34a
lea ecx, [ebp - 0x127c]
push ebx
push ecx
mov dword [ebp - 0x1280], ebx
call fcn.00534b40
add esp, 0x3c
lea ecx, [ebp - 0x15a8]
mov dword [ebp - 0x1588], ebx
call fcn.004ee32f
mov eax, dword [0x67d5a8]
add eax, 8
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], ebx
jb 0x45ccf0
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x50c]
push 0x57d070
push edx
call fcn.00535bfb
lea edi, [ebp - 0x50c]
add esp, 0xc
dec edi
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x45cd10
mov dx, word [0x65c970]
lea eax, [ebp - 0x50c]
mov word [edi], dx
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x45cd30
mov ecx, dword [str.NAnalyser]
mov dword [eax], ecx
mov ecx, dword [0x57d068]
mov dword [eax + 4], ecx
mov cx, word [0x57d06c]
lea edi, [ebp - 0x50c]
mov word [eax + 8], cx
dec edi
jmp 0x45cd60
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x45cd60
mov word [edi], dx
lea edx, [ebp - 0x50c]
push edx
call fcn.004ee71c
add esp, 4
test eax, eax
jne 0x45cd8d
lea eax, [ebp - 0x50c]
push eax
call fcn.004ee6c0
add esp, 4
mov esi, 1
push esi
push ebx
push str.Global6E0B99C0_758E_4780_91F6_FBD0B017F0CA
lea ecx, [ebp - 0x1584]
call fcn.004f17a9
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 1
dec eax
nop
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x45cdb0
mov ecx, dword [str.Seriface.conf]
mov edx, dword [0x57d028]
mov dword [eax], ecx
mov ecx, dword [0x57d02c]
mov dword [eax + 4], edx
mov dx, word [0x57d030]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
push str.WEBLOGIN
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x974]
call fcn.004f1577
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
mov byte [ebp - 4], 2
call eax
cmp eax, 2
je 0x45d4b8
jmp 0x45ce27
mov esi, 1
xor ebx, ebx
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
mov edi, dword [sym.imp.WS2_32.dll_gethostbyname]
call eax
cmp eax, 4
je 0x45d4b8
cmp dword [ebp - 0x1588], ebx
jne 0x45cee0
lea ecx, [ebp - 0x50c]
push ecx
call fcn.004ee6fe
add esp, 4
test eax, eax
je 0x45ce82
lea edx, [ebp - 0x50c]
push edx
call fcn.004ee684
add esp, 4
cmp eax, 0x34e
jne 0x45ce82
cmp edx, ebx
je 0x45ce9e
push esi
push 0x34e
lea eax, [ebp - 0x1280]
push eax
lea ecx, [ebp - 0x50c]
push ecx
call fcn.004ef3f2
add esp, 0x10
push esi
push esi
push str.Seriface.conf
lea edx, [ebp - 0x50c]
push edx
lea ecx, [ebp - 0x15a8]
call fcn.004ee411
test eax, eax
je 0x45cee0
push ebx
push 0x34e
lea ecx, [ebp - 0x15a8]
call fcn.004ee34a
test eax, eax
je 0x45cee0
mov eax, dword [ebp - 0x1598]
cmp eax, ebx
je 0x45cee0
mov dword [ebp - 0x1588], eax
push 0xfd
lea eax, [ebp - 0xe30]
push ebx
push eax
call fcn.00534b40
lea ecx, [ebp - 0xe30]
push ecx
call fcn.00432900
add esp, 0x10
cmp eax, esi
jne 0x45cf2b
xor edx, edx
cmp byte [ebp - 0xd72], 0x31
sete dl
xor eax, eax
cmp byte [ebp - 0xd71], 0x31
sete al
mov dword [ebp - 0xd30], edx
mov dword [ebp - 0xd2c], eax
jmp 0x45cf37
mov dword [ebp - 0xd30], ebx
mov dword [ebp - 0xd2c], ebx
lea ecx, [ebp - 0x1580]
call fcn.004327c0
lea ecx, [ebp - 0x1580]
mov byte [ebp - 4], 3
call fcn.005255c0
test eax, eax
je 0x45cf73
lea ecx, [ebp - 0x1580]
call fcn.00432eb0
lea ecx, [ebp - 0x1580]
mov dword [ebp - 0xd28], eax
call fcn.005255c0
jmp 0x45cf79
mov dword [ebp - 0xd28], ebx
push 0x100
lea ecx, [ebp - 0xd1c]
push ebx
push ecx
mov dword [ebp - 0xd24], ebx
call fcn.00534b40
add esp, 0xc
push str.WEBLOGIN
lea ecx, [ebp - 0x974]
call fcn.004f127a
push ebx
push str.Enable
lea ecx, [ebp - 0x974]
call fcn.004f0f3d
test eax, eax
je 0x45cfef
push 0x65c915
push 0x100
lea edx, [ebp - 0xd1c]
push edx
push 0x57d00c
lea ecx, [ebp - 0x974]
mov dword [ebp - 0xd24], esi
call fcn.004f10ba
cmp byte [ebp - 0xd1c], 0
jne 0x45cfef
mov dword [ebp - 0xd24], ebx
push 0x40
lea eax, [ebp - 0xf2f]
push ebx
push eax
mov byte [ebp - 0xf30], 0
call fcn.00534b40
push 0xbc
lea ecx, [ebp - 0xeef]
push ebx
push ecx
call fcn.00534b40
lea edx, [ebp - 0xf30]
push edx
call fcn.00432900
xor eax, eax
cmp byte [ebp - 0xe34], 1
push 0xfa
sete al
lea ecx, [ebp - 0xc18]
push ebx
push ecx
mov dword [ebp - 0xd20], eax
call fcn.00534b40
add esp, 0x28
push str.CALLBOARD
lea ecx, [ebp - 0x974]
mov dword [ebp - 0xc1c], ebx
call fcn.004f127a
push ebx
push str.Enable
lea ecx, [ebp - 0x974]
call fcn.004f0f3d
test eax, eax
je 0x45d200
push 0x65c915
push 0xfa
lea edx, [ebp - 0xc18]
push edx
push str.NoticeURL
lea ecx, [ebp - 0x974]
mov dword [ebp - 0xc1c], esi
call fcn.004f10ba
cmp byte [ebp - 0xc18], 0
jne 0x45d200
mov dword [ebp - 0xc1c], ebx
mov dword [ebp - 0xb1e], ebx
push 0x3ff
lea eax, [ebp - 0x90b]
push ebx
push eax
mov byte [ebp - 0x90c], 0
call fcn.00534b40
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x90c]
push ecx
call dword [sym.imp.WS2_32.dll_gethostname]
cmp eax, 0xffffffff
je 0x45d146
lea edx, [ebp - 0x90c]
push edx
call edi
mov edi, eax
cmp edi, ebx
je 0x45d146
mov eax, dword [edi + 0xc]
cmp dword [eax], ebx
je 0x45d146
xor esi, esi
cmp ebx, 0xa
jge 0x45d146
movsx ecx, word [edi + 0xa]
mov edx, dword [esi + eax]
push ecx
push edx
lea eax, [ebp - 0x928]
push eax
call fcn.00534c80
mov eax, dword [ebp - 0x928]
add esp, 0xc
test eax, eax
je 0x45d13a
push eax
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [ebp + ebx*4 - 0xb1a], eax
inc ebx
mov eax, dword [edi + 0xc]
add esi, 4
cmp dword [esi + eax], 0
jne 0x45d104
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x158c], 0
call eax
test eax, eax
je 0x45d17c
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [ebp - 0x158c]
push ecx
push 0x57cf7c
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x158c]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
test al, al
jne 0x45d395
mov esi, dword [ebp - 0x1590]
lea eax, [ebp - 0x9ec]
push eax
lea ecx, [esi + 0x5c]
call fcn.004319d0
mov edi, eax
test edi, edi
jne 0x45d314
cmp dword [ebp - 0x97e], 1
jne 0x45d314
push 0xa
lea ecx, [ebp - 0x996]
push 0x57cfe8
push ecx
call fcn.0053b5cf
add esp, 0xc
test eax, eax
jne 0x45d2c8
push 8
lea edx, [ebp - 0x9cc]
push 0x57cfdc
push edx
call fcn.0053b5cf
add esp, 0xc
test eax, eax
jne 0x45d2c8
lea edi, [eax + 1]
jmp 0x45d2ca
cmp dword [ebp - 0xc1c], ebx
je 0x45d0b3
push 0xf9
lea eax, [ebp - 0x10b]
push ebx
push eax
mov byte [ebp - 0x10c], 0
call fcn.00534b40
push 0xf9
lea ecx, [ebp - 0xc18]
push ecx
lea edx, [ebp - 0x10c]
push edx
call fcn.00537970
lea eax, [ebp - 0x10c]
push 0x5c
push eax
call fcn.00537590
add esp, 0x20
cmp eax, ebx
jne 0x45d267
lea ecx, [ebp - 0x10c]
push 0x2f
push ecx
call fcn.00537590
add esp, 8
cmp eax, ebx
je 0x45d26a
mov byte [eax], 0
lea edx, [ebp - 0x10c]
push edx
call edi
cmp eax, ebx
je 0x45d0b9
mov edx, dword [eax + 0xc]
xor ecx, ecx
mov dword [ebp - 0x91a], ecx
mov dword [ebp - 0x916], ecx
mov dword [ebp - 0x912], ecx
mov word [ebp - 0x90e], cx
movsx ecx, word [eax + 0xa]
mov eax, dword [edx]
push ecx
push eax
lea ecx, [ebp - 0x918]
push ecx
call fcn.00534c80
mov edx, dword [ebp - 0x918]
add esp, 0xc
push edx
call dword [sym.imp.WS2_32.dll_ntohl]
mov dword [ebp - 0xb1e], eax
jmp 0x45d0b9
xor edi, edi
push 1
push edi
mov ecx, esi
call fcn.0045c850
test edi, edi
je 0x45d2f5
mov eax, dword [0x67d5a8]
push 0x57cfd8
add eax, 0x4c
push 0x57cfd4
push eax
call fcn.004ebec7
add esp, 0xc
jmp 0x45d361
mov ecx, esi
call fcn.0045bea0
mov ecx, esi
call fcn.0045bdb0
test al, al
je 0x45d361
push 1
push 1
mov ecx, esi
call fcn.0045c850
jmp 0x45d361
push str.rwyNCMc.exe
call fcn.004efce4
add esp, 4
test eax, eax
jne 0x45d361
mov ecx, dword [ebp - 0xd28]
push 2
push ecx
mov ecx, esi
call fcn.0045c850
cmp dword [ebp - 0xd28], 0
je 0x45d361
mov edx, dword [ebp - 0x97e]
mov eax, dword [0x67d5a8]
push edx
push edi
push str.NB_No_R__ret:__d__flag:__d
add eax, 0x4c
push 0x57cfd4
push eax
call fcn.004ebec7
add esp, 0x14
lea edi, [esi + 0x10]
test edi, edi
je 0x45d36f
mov ecx, edi
call fcn.004f0b18
mov ecx, dword [esi + 4]
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xf3e], ecx
mov dword [ebp - 0xf3a], edx
mov dword [ebp - 0xf36], eax
test edi, edi
je 0x45d395
mov ecx, edi
call fcn.004f0b20
mov ecx, 0xd0
lea esi, [ebp - 0xd30]
lea edi, [ebp - 0x1280]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov edi, dword [ebp - 0x1588]
test edi, edi
je 0x45d42b
mov edx, 0x34e
mov eax, edi
lea ecx, [ebp - 0x1280]
mov esi, dword [ecx]
cmp esi, dword [eax]
jne 0x45d3e3
sub edx, 4
add eax, 4
add ecx, 4
cmp edx, 4
jae 0x45d3c1
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x45d3e3
mov al, byte [eax + 1]
cmp al, byte [ecx + 1]
je 0x45d42b
mov ecx, 0xd3
lea esi, [ebp - 0x1280]
rep movsd dword es:[edi], dword [esi]
push 0
push 0
lea ecx, [ebp - 0x15a8]
movsw word es:[edi], word [esi]
call fcn.004ee395
lea ecx, [ebp - 0x1584]
call fcn.004f161a
cmp eax, 0xffffffff
je 0x45d42b
lea ecx, [ebp - 0x1584]
call fcn.004f161a
test eax, eax
je 0x45d42b
lea ecx, [ebp - 0x1584]
call fcn.004f161d
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
xor esi, esi
call eax
cmp eax, 2
je 0x45d48d
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x45d450
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
cmp eax, 4
je 0x45d48d
inc esi
cmp esi, 0xa
jg 0x45d48d
push 0x3e8
call edi
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
cmp eax, 2
jne 0x45d450
lea ecx, [ebp - 0x1580]
mov byte [ebp - 4], 2
call fcn.00432e70
mov ecx, dword [0x67d5a8]
mov ecx, dword [ecx + 0xd4]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
cmp eax, 2
jne 0x45ce20
lea ecx, [ebp - 0x1584]
call fcn.004f1675
lea ecx, [ebp - 0x974]
mov byte [ebp - 4], 1
call fcn.004f12d2
lea ecx, [ebp - 0x1584]
mov byte [ebp - 4], 0
call fcn.004f168f
lea ecx, [ebp - 0x15a8]
mov dword [ebp - 4], 0xffffffff
call fcn.004ee40c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00534bba
mov esp, ebp
pop ebp
ret