Function at 0x440cbb
Capabilities:
Initialize winsock library
Link many functions at runtime
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c8
mov eax, dword [0x51f5d0]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 0x103
xor esi, esi
lea eax, [ebp - 0x113]
mov edi, ecx
push esi
push eax
mov dword [ebp - 0x3bc], edi
mov byte [ebp - 0x114], 0
call fcn.004c05d0
push 0x18e
lea eax, [ebp - 0x3aa]
push esi
push eax
mov word [ebp - 0x3ac], si
call fcn.004c05d0
add esp, 0x18
mov edx, edi
call fcn.00485754
test eax, eax
jne 0x440d90
cmp dword [0x60c6ec], esi
jne 0x440d36
push str.Iphlpapi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3b0], eax
jmp 0x440d3c
mov dword [ebp - 0x3b0], esi
cmp dword [ebp - 0x3b0], esi
jne 0x440da1
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push str.ICMP.DLL
mov dword [ebp - 0x3b8], esi
call edi
cmp eax, esi
mov dword [ebp - 0x3b0], eax
jne 0x440dab
push esi
push esi
call fcn.0045f646
push eax
lea eax, [ebp - 0x114]
push str._sICMP.DLL
push eax
call fcn.004c054e
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
call edi
cmp eax, esi
mov dword [ebp - 0x3b0], eax
jne 0x440dab
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bfeb5
leave
ret
mov dword [ebp - 0x3b8], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.IcmpCreateFile
push dword [ebp - 0x3b0]
call esi
mov ebx, str.IcmpCloseHandle
push ebx
push dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], eax
call esi
mov edi, str.IcmpSendEcho
push edi
push dword [ebp - 0x3b0]
mov dword [ebp - 0x3c0], eax
call esi
cmp dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3c4], eax
je 0x440e06
cmp dword [ebp - 0x3c0], 0
je 0x440e06
test eax, eax
jne 0x440e97
push dword [ebp - 0x3b0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
cmp dword [ebp - 0x3b8], eax
je 0x440ecf
push str.ICMP.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [ebp - 0x3b0], eax
je 0x440d90
push str.IcmpCreateFile
push eax
call esi
push ebx
push dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], eax
call esi
push edi
push dword [ebp - 0x3b0]
mov dword [ebp - 0x3c0], eax
call esi
xor ecx, ecx
cmp dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3c4], eax
je 0x440d90
cmp dword [ebp - 0x3c0], ecx
je 0x440d90
cmp eax, ecx
je 0x440d90
xor eax, eax
cmp dword [ebp - 0x3b8], ecx
setne al
mov dword [0x60c6ec], eax
lea eax, [ebp - 0x3ac]
push eax
push 0x101
call sub.WSOCK32.dll_WSAStartup
test eax, eax
jne 0x440d90
mov ecx, dword [ebp - 0x3bc]
call fcn.00444a9e
test eax, eax
je 0x440ef7
mov ecx, dword [ebp - 0x3bc]
call fcn.004451fb
jmp 0x440f8e
push eax
push eax
call fcn.0045f646
push eax
lea eax, [ebp - 0x114]
push str._sICMP.DLL
push eax
call fcn.004c054e
add esp, 0x14
lea eax, [ebp - 0x114]
push eax
jmp 0x440e25
push 0x103
lea eax, [ebp - 0x21b]
push 0
push eax
mov byte [ebp - 0x21c], 0
call fcn.004c05d0
push dword [ebp - 0x3bc]
mov edi, 0x104
mov ecx, edi
lea eax, [ebp - 0x21c]
call fcn.00485786
mov esi, 0x609960
add esp, 0x10
mov edx, esi
call fcn.00485754
test eax, eax
jne 0x440f62
lea eax, [ebp - 0x21c]
push 0x609858
push eax
call fcn.004c03bf
test eax, eax
pop ecx
pop ecx
jne 0x440f62
push esi
mov ecx, edi
lea eax, [ebp - 0x21c]
call fcn.00485786
pop ecx
lea eax, [ebp - 0x21c]
push eax
call sub.WSOCK32.dll_gethostbyname
test eax, eax
je 0x440d90
mov eax, dword [eax + 0xc]
test eax, eax
je 0x440d90
cmp dword [eax], 0
je 0x440d90
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x3b8], eax
call dword [ebp - 0x3b4]
cmp eax, 0xffffffff
mov dword [ebp - 0x3b4], eax
je 0x440d90
mov esi, 0x80
push esi
lea eax, [ebp - 0x114]
push 0xffffffffffffffaa
push eax
call fcn.004c05d0
lea ebx, [esi + 0x1c]
push ebx
push 1
call fcn.004bf452
mov edi, eax
add esp, 0x14
test edi, edi
je 0x441024
push dword [ebp + 8]
mov eax, dword [ebp - 0x3bc]
push ebx
push edi
push 0
push esi
mov dword [edi + 0x10], eax
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x3b8]
mov word [edi + 0xc], si
push dword [ebp - 0x3b4]
call dword [ebp - 0x3c4]
test eax, eax
je 0x441019
mov ebx, dword [edi + 8]
test ebx, ebx
ja 0x44100d
xor ebx, ebx
inc ebx
mov esi, dword [edi + 4]
call fcn.0044104a
test eax, eax
je 0x44101b
xor ebx, ebx
push edi
call fcn.004bf2a6
pop ecx
jmp 0x441026
xor ebx, ebx
push dword [ebp - 0x3b4]
call dword [ebp - 0x3c0]
push dword [ebp - 0x3b0]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call sub.WSOCK32.dll_WSACleanup
mov eax, ebx
jmp 0x440d92