Function at 0x403c90
Capabilities:
Initialize winsock library
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1cc
mov eax, dword [0x44e004]
xor eax, esp
mov dword [esp + 0x1c8], eax
mov ecx, dword [0x44f610]
lea eax, [esp + 0x34]
push ebx
push esi
push edi
push eax
call fcn.00402fc0
mov ecx, 0x33
mov esi, eax
mov edi, 0x44f670
add esp, 4
rep movsd dword es:[edi], dword [esi]
cmp word [0x44f6ca], 0
je 0x404060
mov byte [0x44f768], 0
call fcn.004010d0
lock inc dword [0x44f628]
push 0xf8
call fcn.0042ffac
mov edi, eax
add esp, 4
test edi, edi
je 0x404075
movsd xmm0, qword [0x44bf50]
mov esi, 0x44f634
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
movsd qword [esp + 0x28], xmm0
nop
push 0xf8
push 0
push edi
call fcn.0042a750
add esp, 0xc
mov ecx, 1
xor eax, eax
lock cmpxchg dword [esi], ecx
test eax, eax
jne 0x403d4f
lea eax, [esp + 0x40]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov dword [edi + 4], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [edi + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [edi + 0x34], eax
lea eax, [edi + 0x84]
mov dword [eax], eax
mov dword [eax + 4], eax
lea eax, [edi + 0xe0]
push eax
mov dword [edi + 0x90], 0
mov dword [edi + 0x94], 0
mov dword [edi + 0x98], 0x405a10
mov dword [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0x405a10
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esp + 0x30]
mov dword [edi + 0xcc], 0xffffffff
push eax
mov dword [edi + 0xc8], 0xffffffff
call fcn.004302d1
mov eax, dword [esp + 0x34]
mov esi, 0x3e8
cdq
add esp, 4
mov ecx, eax
mov eax, edx
mul esi
mov esi, eax
mov eax, ecx
mov ecx, 0x3e8
mul ecx
mov ecx, eax
add esi, edx
movzx eax, word [esp + 0x38]
cdq
add ecx, eax
mov eax, dword [0x44f618]
mov dword [edi + 8], ecx
adc esi, edx
or eax, dword [0x44f61c]
mov dword [edi + 0xc], esi
jne 0x403e4e
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [0x44f618], ecx
or ecx, eax
mov dword [0x44f61c], eax
jne 0x403e4e
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
jmp 0x403e95
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
call fcn.00442990
mov edx, dword [0x44f61c]
mov ecx, dword [0x44f618]
movsd qword [esp + 0x10], xmm0
call fcn.00442990
movsd xmm1, qword [esp + 0x10]
divsd xmm1, xmm0
mulsd xmm1, qword [esp + 0x28]
movaps xmm0, xmm1
call fcn.004428e0
or dword [edi], 2
push ecx
mov dword [edi + 0x24], edx
mov ecx, edi
mov dword [edi + 0x14], edx
mov edx, str.1.1.1.1
push 0x1000000
push 0x1bb
mov dword [edi + 0x20], eax
mov dword [edi + 0x10], eax
mov dword [0x44f764], edi
call fcn.00406e20
mov esi, eax
add esp, 0xc
test esi, esi
je 0x403f29
mov eax, dword [esi + 0x44]
movzx eax, word [eax]
cmp eax, 2
jne 0x403ee8
cmp word [0x44fb94], 0
je 0x403f07
push 0x10
push 0x44fb94
jmp 0x403efe
cmp eax, 0x17
jne 0x403f07
cmp word [0x44fb78], 0
je 0x403f07
push 0x1c
push 0x44fb78
push dword [esi + 0x30]
call dword [sym.imp.WS2_32.dll_bind]
mov ecx, esi
mov dword [esi + 0xb8], 0x403bd0
mov dword [esi + 0xb0], 0x4039d0
call fcn.00407ca0
xor ecx, ecx
test eax, eax
cmovne esi, ecx
call fcn.0040abf0
test eax, eax
je 0x403f46
or dword [esi + 0x24], 0x8000
mov dword [esi + 0x28], 0x1000000
mov dword [esi + 0xfc], eax
mov esi, dword [0x44f764]
test esi, esi
je 0x40401d
cmp dword [esi + 4], 1
je 0x40401d
mov dword [esi + 4], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esi + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x3c], 0
mov dword [esi + 0x34], eax
jne 0x403fa1
lea edi, [esi + 0xe0]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0xcc], 0xffffffff
jne 0x403f9a
mov ecx, esi
call fcn.00406050
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esi + 4]
test eax, eax
je 0x403fe2
cmp eax, 2
jne 0x403fba
push 0xa
call ebx
mov ecx, esi
call fcn.00406630
jmp 0x403fdb
add dword [esi + 0x28], 1
adc dword [esi + 0x2c], 0
test byte [esi], 4
je 0x403fcf
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x3c]
jbe 0x403fe2
mov ecx, esi
call fcn.00405ca0
test byte [esi], 1
jne 0x403fe2
mov eax, dword [esi + 4]
test eax, eax
jne 0x403fa8
mov dword [esi + 4], 0
call fcn.00406f70
test byte [esi], 2
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edx
je 0x40401d
cmp dword [esi + 4], 3
je 0x40401d
mov ecx, esi
mov dword [esi + 4], 3
call fcn.004062f0
push esi
call fcn.0042f3a1
add esp, 4
lock inc dword [0x44f62c]
cmp byte [0x44f768], 0
mov dword [0x44f764], 0
jne 0x404060
push 0x3a98
call ebx
call fcn.004010d0
lock inc dword [0x44f628]
push 0xf8
call fcn.0042ffac
mov edi, eax
add esp, 4
mov esi, 0x44f634
test edi, edi
je 0x404075
jmp 0x403d20
mov ecx, dword [esp + 0x1d4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004295a7
mov esp, ebp
pop ebp
ret
push str.malloc_failed__n
push 2
call fcn.0042c7ca
add esp, 4
push eax
call fcn.00408c80
add esp, 8
push 0xffffffffffffffff
call fcn.004319c5
int3