Function at 0x43a5c0
Capabilities:
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x4547f0
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x467334]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x467334]
xor eax, esp
push eax
lea eax, [esp + 0x7c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x8c]
xor ebx, ebx
cmp dword [ebp + 0x4c], ebx
jne 0x43a60a
mov eax, 0x80004005
jmp 0x43a959
push ebx
call fcn.0043cb47
mov ecx, dword [ebp + 0x44]
add esp, 4
cmp ecx, edx
jl 0x43a62a
jg 0x43a623
mov edx, dword [ebp + 0x40]
cmp edx, eax
jbe 0x43a62a
xor eax, eax
jmp 0x43a959
push ebx
call fcn.0043cb47
mov ecx, dword [ebp + 0x10]
add esp, 4
add eax, 0xe10
adc edx, ebx
sub ecx, dword [ebp + 0xc]
mov dword [ebp + 0x40], eax
mov dword [ebp + 0x44], edx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x43a690
lea ecx, [ecx]
push esi
mov eax, ebp
call fcn.0043acd0
mov edi, eax
add edi, 0x1c
call fcn.004290c0
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
inc esi
add ecx, edx
cmp esi, ecx
jb 0x43a660
mov dword [ebp + 0x38], ebx
cmp dword [ebp + 0x34], 0x10
jb 0x43a69e
mov eax, dword [ebp + 0x20]
jmp 0x43a6a1
lea eax, [ebp + 0x20]
push eax
call sub.WS2_32.dll_gethostbyname
cmp eax, ebx
je 0x43a600
mov edx, dword [eax + 0xc]
mov eax, dword [edx]
mov ecx, dword [eax]
mov dword [ebp + 0x38], ecx
call fcn.004178d0
mov dword [esp + 0x84], 0xffffffff
mov edx, dword [ebp + 0x38]
mov dword [esp + 0x4c], 1
mov dword [esp + 0x50], edx
call fcn.0043c831
cdq
mov ecx, 0x14
idiv ecx
mov esi, edx
inc esi
call fcn.0043c831
cdq
idiv esi
cmp edx, esi
jg 0x43a6fd
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x43a707
call fcn.00401450
call fcn.00438a50
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
xor edi, edi
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x20], edi
je 0x43a924
lea ecx, [esp + 0x2c]
push ecx
mov dword [esp + 0x20], ebx
call fcn.0042a300
push edi
mov eax, ebp
mov dword [esp + 0x88], 2
call fcn.0043acd0
cmp dword [eax + 0x18], 0x10
jb 0x43a75c
mov eax, dword [eax + 4]
jmp 0x43a75f
add eax, 4
push ebx
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x54]
push ecx
push ebx
push 0xf
push eax
call sub.DNSAPI.dll_DnsQuery_A
cmp eax, ebx
jne 0x43a8c8
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x18], esi
cmp esi, ebx
je 0x43a82e
jmp 0x43a794
mov esi, dword [esp + 0x18]
cmp word [esi + 8], 0xf
jne 0x43a815
push edi
mov eax, ebp
call fcn.0043acd0
cmp dword [eax + 0x18], 0x10
jb 0x43a7ae
mov eax, dword [eax + 4]
jmp 0x43a7b1
add eax, 4
mov edx, dword [esi + 4]
push edx
push eax
call fcn.0043cd92
add esp, 8
test eax, eax
jne 0x43a815
mov eax, dword [esi + 0x18]
mov cx, word [esi + 0x1c]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x44]
lea esi, [esp + 0x54]
mov word [esp + 0x44], cx
call fcn.00405b70
mov ebx, esi
lea edi, [esp + 0x2c]
mov byte [esp + 0x84], 3
call fcn.004054c0
mov byte [esp + 0x84], 2
call fcn.00405250
call fcn.00431ed0
test eax, eax
je 0x43a80d
call fcn.00438a50
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x18]
mov esi, dword [esi]
xor ebx, ebx
push ebx
mov dword [esp + 0x1c], esi
call fcn.0043cb47
add esp, 4
cmp esi, ebx
jne 0x43a790
mov edx, dword [esp + 0x3c]
sub edx, dword [esp + 0x38]
xor esi, esi
sar edx, 5
test edx, edx
jbe 0x43a8c8
mov eax, esi
lea ecx, [esp + 0x2c]
call fcn.00405430
cmp dword [eax], 0xd
jne 0x43a866
mov eax, esi
lea ecx, [esp + 0x2c]
call fcn.00405430
add eax, 4
cmp dword [eax + 0x14], ebx
jne 0x43a878
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x38]
inc esi
sar eax, 5
cmp esi, eax
jb 0x43a843
jmp 0x43a8c8
mov eax, esi
lea ecx, [esp + 0x2c]
call fcn.00405430
mov esi, eax
push edi
mov eax, ebp
add esi, 4
call fcn.0043acd0
push 0xffffffffffffffff
add eax, 0x1c
push ebx
push esi
mov ecx, eax
call fcn.00402ea0
call fcn.00417b10
sub eax, 1
jne 0x43a8b2
call fcn.00439450
call fcn.004394c0
mov dword [esp + 0x24], 1
call fcn.00417ad0
test eax, eax
je 0x43a8c8
call fcn.00439530
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x43a8ea
push 1
push eax
call sub.DNSAPI.dll_DnsFree
mov dword [esp + 0x1c], ebx
call fcn.00403c90
test eax, eax
je 0x43a8ea
call fcn.004395c0
lea esi, [esp + 0x2c]
mov dword [esp + 0x84], 0xffffffff
call fcn.004053e0
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
inc edi
add ecx, edx
mov dword [esp + 0x20], edi
cmp edi, ecx
jb 0x43a730
lea eax, [esp + 0x17]
mov dword [ebp + 0x48], ebx
mov byte [esp + 0x17], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x43a932
sub eax, edx
je 0x43a947
call fcn.00419f50
call fcn.004396b0
mov eax, dword [esp + 0x24]
neg eax
sbb eax, eax
and eax, 0x7fffbffb
add eax, 0x80004005
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.0043c2d9
add esp, 0x74
ret 4