Function at 0x44a9c0
Capabilities:
Get hostname
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 8], eax
cmp byte [0x54472f], 0
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x120], esi
mov edi, edx
je 0x44aa1d
cmp dword [0x54477c], 0xc
jge 0x44aa1d
inc dword [0x54477c]
mov eax, 0x513588
sub edi, eax
nop
mov cl, byte [eax]
mov byte [edi + eax], cl
inc eax
test cl, cl
jne 0x44aa00
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4
push pe_nt_image_headers32
lea eax, [ebp - 0x114]
push eax
mov dword [0x54477c], 0
call dword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
je 0x44aa4c
mov ecx, dword [ebp + 8]
push ecx
push str.Host_name_unavailable
push edi
jmp 0x44ac40
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x44aa70
mov eax, dword [ebp + 8]
push eax
push str.IP_address_unavailable
push edi
jmp 0x44ac40
mov byte [edi], al
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x11c], eax
cmp dword [ecx], eax
je 0x44ab5a
mov dword [ebp - 0x118], eax
xor edx, edx
xor esi, esi
cmp dx, word [ebx + 0xa]
jge 0x44aae6
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx + eax]
movzx eax, byte [edx + esi]
push eax
lea ecx, [ebp - 0x10]
push 0x4d6940
push ecx
call fcn.004a931b
mov eax, edi
add esp, 0xc
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44aac0
sub eax, edx
mov edx, dword [ebp + 8]
sub edx, eax
dec edx
push edx
lea eax, [ebp - 0x10]
push eax
push edi
call fcn.004a8a40
movsx ecx, word [ebx + 0xa]
inc esi
add esp, 0xc
cmp esi, ecx
jl 0x44aa93
mov eax, edi
lea edx, [eax + 1]
jmp 0x44aaf0
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44aaf0
sub eax, edx
mov byte [edi + eax - 1], cl
mov edx, dword [ebx + 0xc]
mov eax, dword [ebp - 0x118]
cmp dword [eax + edx + 4], 0
je 0x44ab30
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44ab12
mov ecx, dword [ebp + 8]
sub eax, edx
sub ecx, eax
dec ecx
push ecx
push 0x4d6944
push edi
call fcn.004a8a40
add esp, 0xc
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebx + 0xc]
inc eax
mov dword [ebp - 0x11c], eax
add eax, eax
add eax, eax
cmp dword [eax + edx], 0
mov dword [ebp - 0x118], eax
jne 0x44aa89
mov esi, dword [ebp - 0x120]
mov eax, edi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44ab60
sub eax, edx
cmp eax, 0x200
jae 0x44ac48
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
call edx
test eax, eax
jne 0x44ac48
cmp byte [0x54472f], al
je 0x44ac03
mov ecx, 0x513588
mov eax, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x44abb4
test dl, dl
je 0x44abb0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x44abb4
add eax, 2
add ecx, 2
test dl, dl
jne 0x44ab94
xor eax, eax
jmp 0x44abb9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44ac03
push 0x513588
push edi
push str.vncmenu.cpp_:_IP_interface_change_detected__s__s_n
xor eax, eax
mov ecx, 0x4ecb00
call fcn.00403230
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 0x160]
add esp, 0xc
call edx
test eax, eax
je 0x44ac03
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 0x15c]
push 0
call edx
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 0x15c]
push 1
call edx
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44ac08
push 0x200
sub eax, edx
push 0
push 0x513588
mov byte [0x54472f], al
call fcn.004b2d10
mov eax, edi
add esp, 0xc
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44ac30
sub eax, edx
push eax
push edi
push 0x513588
call fcn.004a9c60
add esp, 0xc
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret 4