Function at 0x43aa10
Capabilities:
Create thread
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48b218
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x4bc1dc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp + 0xc]
mov dword [ebp - 4], 0
call fcn.0046b310
push eax
lea ecx, [ebp - 0x14]
call fcn.00402130
mov esi, dword [eax]
mov byte [ebp - 4], 1
test esi, esi
je 0x43aa6f
cmp dword [esi + 4], 0
jne 0x43aa6a
push dword [esi]
call fcn.0046fa80
mov dword [esi + 4], eax
mov eax, dword [esi + 4]
jmp 0x43aa71
xor eax, eax
push eax
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov esi, dword [ebp - 0x14]
mov edi, eax
mov byte [ebp - 4], 0
test esi, esi
je 0x43aad1
lea ecx, [esi + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x43aaca
test esi, esi
je 0x43aaca
mov eax, dword [esi]
test eax, eax
je 0x43aaaa
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x43aac1
push eax
call fcn.004705af
add esp, 4
mov dword [esi + 4], 0
push esi
call fcn.004705af
add esp, 4
mov dword [ebp - 0x14], 0
mov esi, dword [sym.imp.WS2_32.dll_WSAGetLastError]
call esi
test edi, edi
je 0x43acfd
mov eax, dword [edi + 0xc]
cmp dword [eax], 0
je 0x43acfd
push dword [edi]
lea ecx, [ebp - 0x18]
call fcn.00403e90
mov eax, dword [eax]
mov byte [ebp - 4], 5
test eax, eax
je 0x43ab05
mov eax, dword [eax]
jmp 0x43ab07
xor eax, eax
push eax
lea ecx, [ebp + 0xc]
call fcn.0046b290
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call fcn.004021d0
mov eax, dword [edi + 0xc]
mov eax, dword [eax]
push dword [eax]
lea eax, [ebp - 0x10]
push eax
call fcn.0043b320
add esp, 8
mov byte [ebp - 4], 6
call esi
lea ecx, [ebp - 0x10]
call fcn.0046b860
test eax, eax
je 0x43ac91
push 0x4a372c
call fcn.0046b670
push eax
push 0x4a372c
call fcn.0046b800
mov dword [ebp - 0x18], eax
push 0x4a3714
mov byte [ebp - 4], 7
call fcn.0046b670
push eax
push 0x4a3714
call fcn.0046b800
mov dword [ebp - 0x14], eax
push 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 8
push 0x5ab3
push eax
call fcn.004366a0
mov esi, eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x2c]
push 0x4a36d4
push eax
call fcn.0046b330
add esp, 0x30
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xa
push ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0046b3d0
push esi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
push ecx
mov ecx, eax
call fcn.0046b3d0
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xc
push ecx
lea ecx, [ebp - 0x20]
push ecx
mov ecx, eax
call fcn.0046b3d0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xd
push ecx
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, eax
call fcn.0046b3d0
push 0x30
push 0x49794c
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0046b310
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1c]
mov byte [ebp - 4], 0xd
test ecx, ecx
je 0x43ac1d
call fcn.0046b840
mov ecx, dword [ebp - 0x20]
mov byte [ebp - 4], 0xc
test ecx, ecx
je 0x43ac2d
call fcn.0046b840
mov ecx, dword [ebp - 0x24]
mov byte [ebp - 4], 0xb
test ecx, ecx
je 0x43ac3d
call fcn.0046b840
mov ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 0xa
test ecx, ecx
je 0x43ac4d
call fcn.0046b840
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 9
test ecx, ecx
je 0x43ac5d
call fcn.0046b840
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 8
test ecx, ecx
je 0x43ac6d
call fcn.0046b840
mov ecx, dword [ebp - 0x14]
mov byte [ebp - 4], 7
test ecx, ecx
je 0x43ac7d
call fcn.0046b840
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 6
test ecx, ecx
je 0x43ac8d
call fcn.0046b840
xor bl, bl
jmp 0x43ace4
cmp byte [0x4bdfa9], 0
mov dword [0x4bde30], 2
je 0x43aca9
call fcn.0043b270
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push 0x439f30
push 0
push 0
call fcn.00474460
mov dword [0x4bde1c], eax
lea eax, [ebp - 0x30]
push eax
push 0
push 0
push 0x43a230
push 0
push 0
call fcn.00474460
add esp, 0x30
mov dword [0x4bde20], eax
mov bl, 1
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0
test ecx, ecx
je 0x43ad8f
call fcn.0046b840
jmp 0x43ad8f
push 0x498928
call fcn.0046b670
push eax
push 0x498928
call fcn.0046b800
mov dword [ebp - 0x18], eax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x2c]
push 0x4a3680
push eax
call fcn.0046b330
add esp, 0x18
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 3
push ecx
lea ecx, [ebp - 0x30]
push ecx
mov ecx, eax
call fcn.0046b3d0
push 0x30
push 0x49794c
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.0046b310
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x30]
mov byte [ebp - 4], 3
test ecx, ecx
je 0x43ad6d
call fcn.0046b840
mov ecx, dword [ebp - 0x2c]
mov byte [ebp - 4], 2
test ecx, ecx
je 0x43ad7d
call fcn.0046b840
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0
test ecx, ecx
je 0x43ad8d
call fcn.0046b840
xor bl, bl
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 4], 0xffffffff
test ecx, ecx
je 0x43ada2
call fcn.0046b840
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret