Function at 0x4c8b20
Capabilities:
Resolve dns

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x410
mov ecx, dword [esp + 0x424]
mov eax, dword [0x606180]
xor eax, esp
mov dword [esp + 0x40c], eax
movzx eax, word [ecx]
mov dword [esp + 4], eax
mov eax, 0x5f2eeaf2
lea edi, [esp + 8]
jmp 0x4c8b70
cmp dword [0x60b840], 0xa
cmovl eax, esi
setl dh
xor dh, dl
cmovne eax, ecx
nop word cs:[eax + eax]
cmp eax, 0xeb6c788c
jle 0x4c8bf0
cmp eax, 0x4433d750
jle 0x4c8c50
cmp eax, 0x6406ab8b
jle 0x4c8d16
cmp eax, 0x715a218d
jg 0x4c8e0a
cmp eax, 0x6406ab8c
je 0x4c8e3f
cmp eax, 0x6c6ce7e9
jne 0x4c8b70
mov eax, dword [esp + 0x424]
cmp word [eax], 0x17
sete byte [esp + 2]
mov eax, dword [0x60b844]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xa12c1c80
mov eax, 0x7ae7df26
mov esi, 0xa12c1c80
cmp edx, 0xffffffff
sete dl
je 0x4c8b51
mov esi, 0x7ae7df26
jmp 0x4c8b51
cmp eax, 0xc4737dd4
jle 0x4c8cd0
cmp eax, 0xd2b863b6
jle 0x4c8d53
cmp eax, 0xe606ee98
jg 0x4c8e2a
cmp eax, 0xd2b863b7
je 0x4c8e77
cmp eax, 0xe240e157
jne 0x4c8b70
mov eax, dword [esp + 0x424]
movzx eax, word [eax + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov ecx, dword [esp + 0x430]
mov dword [ecx], eax
mov eax, 0xca9b720a
jmp 0x4c8b70
cmp eax, 0x1564255b
jg 0x4c8db2
cmp eax, 0xeb6c788d
je 0x4c8e91
cmp eax, 0x9208985
je 0x4c8eb9
cmp eax, 0x1107e5be
jne 0x4c8b70
push 0x401
push 0
push edi
call fcn.005d3690
sub esp, 0x10
vmovaps xmm0, xmmword [0x5f10a0]
vmovups xmmword [esp + 0xc], xmm0
mov dword [esp + 8], edi
mov eax, dword [esp + 0x444]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x440]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_getnameinfo]
mov eax, 0xa68940b7
jmp 0x4c8b70
cmp eax, 0xa68940b6
jg 0x4c8ddf
cmp eax, 0x81195689
je 0x4c8eff
cmp eax, 0x83e5f0ba
je 0x4c8f09
cmp eax, 0xa12c1c80
jne 0x4c8b70
cmp byte [esp + 2], 0
mov eax, 0xeb6c788d
jne 0x4c8b70
mov eax, 0x6406ab8c
jmp 0x4c8b70
cmp eax, 0x4433d751
je 0x4c8f4d
cmp eax, 0x57f9ebb4
je 0x4c8f86
cmp eax, 0x5f2eeaf2
jne 0x4c8b70
mov ecx, dword [esp + 4]
mov eax, 0xe240e157
cmp ecx, 2
je 0x4c8b70
mov eax, 0x715a218e
jmp 0x4c8b70
cmp eax, 0xc4737dd5
je 0x4c8f90
cmp eax, 0xca9b720a
je 0x4c8f9c
cmp eax, 0xcd7b943e
jne 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xb9fa7a3b
mov esi, 0xb9fa7a3b
jne 0x4c8eee
mov esi, 0x3fce4a7e
jmp 0x4c8eee
cmp eax, 0x1564255c
je 0x4c8fd1
cmp eax, 0x2cbe6ad2
je 0x4c8fdb
cmp eax, 0x3fce4a7e
jne 0x4c8b70
mov eax, 0xb9fa7a3b
xor ebx, ebx
jmp 0x4c8b70
cmp eax, 0xa68940b7
je 0x4c8ffe
cmp eax, 0xb9fa7a3b
je 0x4c9084
cmp eax, 0xc40e98ea
jne 0x4c8b70
mov eax, 0x9208985
jmp 0x4c8b70
cmp eax, 0x715a218e
je 0x4c90ca
cmp eax, 0x7ae7df26
jne 0x4c8b70
mov eax, 0x6c6ce7e9
jmp 0x4c8b70
cmp eax, 0xe606ee99
jne 0x4c9110
mov eax, 0xca9b720a
jmp 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
test ebp, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x83e5f0ba
mov esi, 0x83e5f0ba
jne 0x4c8e73
mov esi, 0xc4737dd5
test ebp, edx
jmp 0x4c8ef1
cmp byte [esp + 3], 0
mov eax, 0xcd7b943e
jne 0x4c8b70
mov eax, 0x2cbe6ad2
jmp 0x4c8b70
mov eax, dword [esp + 0x424]
movzx eax, word [eax + 2]
push eax
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
mov ecx, dword [esp + 0x430]
mov dword [ecx], eax
mov eax, 0xe606ee99
jmp 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x4433d751
mov esi, 0x4433d751
jne 0x4c8eee
mov esi, 0x81195689
cmp edx, 0xffffffff
cmovne eax, esi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x4c8b70
mov eax, 0x4433d751
jmp 0x4c8b70
mov eax, dword [0x60b844]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
mov ecx, 0x57f9ebb4
mov eax, 0xc4737dd5
mov esi, 0x57f9ebb4
test ebx, edx
sete dl
je 0x4c8f34
mov esi, 0xc4737dd5
cmp dword [0x60b840], 0xa
setl dh
cmovl eax, esi
xor dl, dh
cmovne eax, ecx
xor ebx, ebx
jmp 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x1564255c
mov esi, 0x1564255c
je 0x4c8ee9
jmp 0x4c8eee
mov eax, 0xeb3d20b4
jmp 0x4c8b70
mov eax, 0x83e5f0ba
xor ebx, ebx
jmp 0x4c8b70
mov eax, dword [0x60b844]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xa68940b7
mov eax, 0x1107e5be
mov esi, 0xa68940b7
cmp edx, 0xffffffff
sete dl
je 0x4c8b51
mov esi, 0x1107e5be
jmp 0x4c8b51
mov eax, 0xeb3d20b4
jmp 0x4c8b70
push edi
call fcn.005db270
add esp, 4
mov ecx, dword [esp + 0x42c]
push eax
push edi
call fcn.004095f0
mov eax, 0x9208985
mov bl, 1
jmp 0x4c8b70
push 0x401
push 0
push edi
call fcn.005d3690
sub esp, 0x10
vmovaps xmm0, xmmword [0x5f10a0]
vmovups xmmword [esp + 0xc], xmm0
mov dword [esp + 8], edi
mov eax, dword [esp + 0x444]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x440]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_getnameinfo]
test eax, eax
setne byte [esp + 3]
mov eax, dword [0x60b844]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov ecx, 0xd2b863b7
mov eax, 0x1107e5be
mov esi, 0xd2b863b7
test ebp, edx
sete dl
je 0x4c906d
mov esi, 0x1107e5be
cmp dword [0x60b840], 0xa
cmovl eax, esi
setl dh
xor dl, dh
cmovne eax, ecx
jmp 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
test ebx, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xc40e98ea
mov esi, 0xc40e98ea
jne 0x4c90b8
mov esi, 0x3fce4a7e
test ebx, edx
cmovne eax, esi
cmp ecx, 0xa
cmovge eax, esi
xor ebx, ebx
jmp 0x4c8b70
mov eax, dword [0x60b844]
mov ecx, dword [0x60b840]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x6c6ce7e9
mov ebp, 0x6c6ce7e9
jne 0x4c90ff
mov ebp, 0x7ae7df26
cmp edx, 0xffffffff
cmovne eax, ebp
cmp ecx, 0xa
cmovge eax, ebp
jmp 0x4c8b70
cmp eax, 0xeb3d20b4
jne 0x4c8b70
and bl, 1
mov ecx, dword [esp + 0x40c]
xor ecx, esp
call fcn.005ce735
mov eax, ebx
add esp, 0x410
pop esi
pop edi
pop ebx
pop ebp
ret