Function at 0x41b040
Capabilities:
Initialize winsock library
Resolve dns

Disassembly:
sub esp, 0x1a4
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x1b8]
push ebx
push ebp
mov ebp, dword [esp + 0x1c8]
mov dword [eax], 0
push esi
lea eax, [esp + 0x20]
push edi
mov dword [ecx], 0x270f
push eax
mov dword [edx], 0
push 0x202
mov dword [esp + 0x1c], 0
mov dword [ebp], 0
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x41b0a8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1a4
ret
mov esi, dword [esp + 0x1b8]
push esi
call dword [sym.imp.WS2_32.dll_inet_addr]
mov edi, eax
cmp edi, 0xffffffff
jne 0x41b145
mov edx, esi
xor ecx, ecx
sub edx, str.255.255.255.255
mov al, byte [edx + ecx + str.255.255.255.255]
mov bl, byte [ecx + str.255.255.255.255]
cmp al, bl
jne 0x41b149
inc ecx
cmp ecx, 0x10
jl 0x41b0cb
mov dword [esp + 0x10], edi
mov ebx, dword [esp + 0x1c0]
or ecx, 0xffffffff
mov edi, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x41b125
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push str.ICMP.DLL
call dword [0x46c200]
mov edi, eax
test edi, edi
mov dword [esp + 0x18], edi
jne 0x41b19b
call dword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x41b311
test edi, edi
jne 0x41b0e2
push esi
call dword [sym.imp.WS2_32.dll_gethostbyname]
test eax, eax
jne 0x41b167
call dword [sym.imp.WS2_32.dll_WSACleanup]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1a4
ret
mov ecx, dword [eax + 0xc]
mov edi, dword [eax]
xor eax, eax
mov edx, dword [ecx]
mov ecx, dword [edx]
mov dword [esp + 0x10], ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x1bc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x41b0e6
mov esi, dword [0x46c1fc]
push str.IcmpCreateFile
push edi
call esi
push str.IcmpSendEcho
push edi
mov dword [0x48734c], eax
call esi
push str.IcmpCloseHandle
push edi
mov dword [0x487348], eax
call esi
mov ecx, dword [0x48734c]
mov dword [0x487344], eax
test ecx, ecx
je 0x41b311
mov edx, dword [0x487348]
test edx, edx
je 0x41b311
test eax, eax
je 0x41b311
call ecx
mov ebx, eax
cmp ebx, 0xffffffff
je 0x41b311
xor ebp, ebp
xor ecx, ecx
mov eax, 0x20
cmp eax, 0x7e
jl 0x41b20c
mov eax, 0x20
mov byte [ecx + 0x489368], al
inc ecx
inc eax
cmp ecx, 0x20
jl 0x41b202
mov byte [esp + 0x1c], 0x40
mov byte [esp + 0x1d], 0
mov byte [esp + 0x1e], 0
mov byte [esp + 0x1f], 0
mov dword [esp + 0x20], ebp
test ebp, ebp
je 0x41b23f
push 1
push 0x64
call dword [0x46c294]
mov ecx, dword [esp + 0x10]
push 0xbb8
push 0x2018
lea eax, [esp + 0x24]
push 0x487350
push eax
push 0x20
push 0x489368
push ecx
push ebx
call dword [0x487348]
test eax, eax
je 0x41b2f9
mov edi, dword [esp + 0x1c0]
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [0x487350]
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x41b2b2
push edx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x1c0]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x487358]
test eax, eax
je 0x41b2f5
mov cl, byte [0x487364]
test cl, cl
je 0x41b2f5
mov ecx, dword [esp + 0x1c4]
mov edi, dword [esp + 0x14]
add edi, eax
mov esi, dword [ecx]
mov dword [esp + 0x14], edi
inc esi
mov dword [ecx], esi
mov ecx, dword [esp + 0x1c8]
cmp eax, dword [ecx]
jbe 0x41b2e8
mov dword [ecx], eax
mov ecx, dword [esp + 0x1cc]
cmp eax, dword [ecx]
jae 0x41b2f5
mov dword [ecx], eax
mov edi, dword [esp + 0x18]
inc ebp
cmp ebp, 9
jl 0x41b231
push ebx
call dword [0x487344]
mov ebp, dword [esp + 0x1d0]
mov eax, dword [esp + 0x1c4]
mov ecx, dword [eax]
test ecx, ecx
jne 0x41b327
mov dword [ebp], 0xffffffff
jmp 0x41b332
mov eax, dword [esp + 0x14]
xor edx, edx
div ecx
mov dword [ebp], eax
push edi
call dword [0x46c1f8]
call dword [sym.imp.WS2_32.dll_WSACleanup]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1a4
ret