Function at 0x406f60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x41ff7e
mov eax, dword fs:[0]
push eax
sub esp, 0x170
mov eax, dword [0x427c34]
xor eax, esp
mov dword [esp + 0x16c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x427c34]
xor eax, esp
push eax
lea eax, [esp + 0x184]
mov dword fs:[0], eax
mov eax, dword [0x428fec]
mov edi, dword [0x428fe8]
xor ebx, ebx
mov dword [esp + 0x18c], ebx
mov ebp, eax
cmp edi, eax
jbe 0x406fc5
call fcn.0040a697
mov eax, dword [0x428fec]
mov edi, dword [0x428fe8]
mov esi, dword [0x428fdc]
cmp edi, eax
jbe 0x406fd4
call fcn.0040a697
mov eax, dword [0x428fdc]
push ebp
push esi
push edi
push eax
lea ecx, [esp + 0x28]
push ecx
mov ecx, 0x428fdc
call fcn.004069d0
push ebx
push str.count
push str.config
mov ecx, 0x428e58
call fcn.00409c30
push 0xff
mov esi, eax
xor eax, eax
lea edx, [esp + 0x85]
push ebx
push edx
mov dword [esp + 0x24], esi
mov byte [esp + 0x80], bl
mov dword [esp + 0x81], eax
mov dword [esp + 0x85], eax
mov byte [esp + 0x89], al
mov byte [esp + 0x8c], bl
call fcn.0040a4c0
add esp, 0xc
cmp esi, ebx
mov dword [esp + 0x14], ebx
jle 0x40727a
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x78]
push 0x4215c0
push ecx
call fcn.0040b943
add esp, 0xc
push 0x421561
push 0x100
lea edx, [esp + 0x88]
push edx
push str.domainIP
lea eax, [esp + 0x84]
push eax
mov ecx, 0x428e58
call fcn.00409b90
lea eax, [esp + 0x80]
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4070a8
sub eax, esi
push eax
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x28]
call fcn.00404110
cmp dword [esp + 0x1ac], 0x10
mov edx, dword [esp + 0x198]
jae 0x4070db
lea edx, [esp + 0x198]
mov esi, dword [esp + 0x34]
mov edi, dword [esp + 0x1a8]
mov ecx, esi
cmp esi, edi
jb 0x4070ee
mov ecx, edi
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x24]
cmp ebp, 0x10
jae 0x4070ff
lea eax, [esp + 0x24]
push ecx
push edx
push eax
call fcn.00405bc0
add esp, 0xc
cmp eax, ebx
jne 0x40711d
cmp esi, edi
jb 0x40711d
xor eax, eax
cmp esi, edi
setne al
cmp eax, ebx
je 0x407137
mov byte [esp + 0x18c], bl
cmp ebp, 0x10
jb 0x407267
mov edx, dword [esp + 0x24]
push edx
jmp 0x40725f
mov edi, 0xf
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
push 0x421561
push 0x100
lea eax, [esp + 0x88]
push eax
push str.sinforIP
lea ecx, [esp + 0x84]
push ecx
mov ecx, 0x428e58
mov byte [esp + 0x1a0], 2
call fcn.00409b90
lea eax, [esp + 0x80]
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x407190
sub eax, ecx
push eax
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x44]
call fcn.00404110
push 0x421561
push 0x100
lea eax, [esp + 0x88]
push eax
push str.shareKey
lea ecx, [esp + 0x84]
push ecx
mov ecx, 0x428e58
call fcn.00409b90
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4071e0
sub eax, edx
push eax
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x60]
call fcn.00404110
lea eax, [esp + 0x3c]
push eax
mov ecx, 0x428fdc
call fcn.00406eb0
mov esi, 0x10
cmp dword [esp + 0x70], esi
jb 0x407222
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0040a3d0
add esp, 4
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov byte [esp + 0x5c], bl
cmp dword [esp + 0x54], esi
jb 0x407241
mov edx, dword [esp + 0x40]
push edx
call fcn.0040a3d0
add esp, 4
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
mov byte [esp + 0x18c], bl
cmp dword [esp + 0x38], esi
jb 0x407267
mov eax, dword [esp + 0x24]
push eax
call fcn.0040a3d0
add esp, 4
mov eax, dword [esp + 0x14]
inc eax
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
jl 0x40704e
mov ecx, dword [0x428fec]
sub ecx, dword [0x428fe8]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
jne 0x4072e2
mov eax, dword [esp + 0x198]
mov esi, 0x10
cmp dword [esp + 0x1ac], esi
jae 0x4072b7
lea eax, [esp + 0x198]
push eax
push str.g_vecDomainAC_empty__cant_find_match_ac_ip__dns_s_n
call fcn.004083b0
add esp, 8
cmp dword [esp + 0x1ac], esi
jb 0x4072de
mov edx, dword [esp + 0x198]
push edx
call fcn.0040a3d0
add esp, 4
xor eax, eax
jmp 0x407301
cmp dword [esp + 0x1ac], 0x10
jb 0x4072fc
mov eax, dword [esp + 0x198]
push eax
call fcn.0040a3d0
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x184]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x16c]
xor ecx, esp
call fcn.0040abf2
add esp, 0x17c
ret