Function at 0x41d480
Capabilities:
Create thread
Get hostname
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x92c
mov eax, dword [0x75ce68]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x104], 0
push 0x7f
push 0
lea eax, [ebp - 0x103]
push eax
call fcn.0061cde0
add esp, 0xc
mov byte [ebp - 0x84], 0
push 0x7f
push 0
lea ecx, [ebp - 0x83]
push ecx
call fcn.0061cde0
add esp, 0xc
mov dword [ebp - 0x8fc], 0
push 0x3f8
push 0
lea edx, [ebp - 0x8f8]
push edx
call fcn.0061cde0
add esp, 0xc
mov dword [ebp - 0x500], 0
push 0x3f8
push 0
lea eax, [ebp - 0x4fc]
push eax
call fcn.0061cde0
add esp, 0xc
push 0x80
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
jne 0x41d7c2
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.WS2_32.dll_gethostbyname]
mov dword [ebp - 0x91c], eax
mov dword [ebp - 0x920], 0
jmp 0x41d54f
mov eax, dword [ebp - 0x920]
add eax, 1
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x91c], 0
je 0x41d7c2
mov ecx, dword [ebp - 0x91c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x920]
cmp dword [edx + eax*4], 0
je 0x41d7c2
xor ecx, ecx
mov dword [ebp - 0x90c], ecx
mov dword [ebp - 0x908], ecx
mov dword [ebp - 0x904], ecx
mov dword [ebp - 0x900], ecx
mov edx, dword [ebp - 0x91c]
movsx eax, word [edx + 0xa]
push eax
mov ecx, dword [ebp - 0x91c]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x920]
mov ecx, dword [edx + eax*4]
push ecx
lea edx, [ebp - 0x908]
push edx
call fcn.0061c860
add esp, 0xc
mov dword [ebp - 0x918], 0
jmp 0x41d5d7
mov eax, dword [ebp - 0x918]
add eax, 1
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x918], 0xff
jge 0x41d6f1
push 0x80
push 0
lea ecx, [ebp - 0x84]
push ecx
call fcn.0061cde0
add esp, 0xc
mov edx, dword [ebp - 0x918]
push edx
movzx eax, byte [ebp - 0x906]
push eax
movzx ecx, byte [ebp - 0x907]
push ecx
movzx edx, byte [ebp - 0x908]
push edx
push 0x711a7c
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push 0x14
call fcn.0063ac57
add esp, 4
mov ecx, dword [ebp - 0x918]
mov dword [ebp + ecx*4 - 0x500], eax
lea edx, [ebp - 0x84]
mov dword [ebp - 0x928], edx
mov eax, dword [ebp - 0x918]
mov ecx, dword [ebp + eax*4 - 0x500]
mov dword [ebp - 0x924], ecx
mov edx, dword [ebp - 0x924]
mov dword [ebp - 0x92c], edx
mov eax, dword [ebp - 0x928]
mov cl, byte [eax]
mov byte [ebp - 0x90d], cl
mov edx, dword [ebp - 0x924]
mov al, byte [ebp - 0x90d]
mov byte [edx], al
mov ecx, dword [ebp - 0x928]
add ecx, 1
mov dword [ebp - 0x928], ecx
mov edx, dword [ebp - 0x924]
add edx, 1
mov dword [ebp - 0x924], edx
cmp byte [ebp - 0x90d], 0
jne 0x41d673
push 0
push 0
mov eax, dword [ebp - 0x918]
mov ecx, dword [ebp + eax*4 - 0x500]
push ecx
push 0x41cf50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [ebp - 0x918]
mov dword [ebp + edx*4 - 0x8fc], eax
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41d5c8
mov dword [ebp - 0x914], 0
jmp 0x41d70c
mov eax, dword [ebp - 0x914]
add eax, 1
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x914], 0xff
jge 0x41d7bd
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x914]
mov edx, dword [ebp + ecx*4 - 0x8fc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x914]
mov ecx, dword [ebp + eax*4 - 0x500]
push ecx
call fcn.0063ac52
add esp, 4
mov edx, dword [ebp - 0x914]
mov dword [ebp + edx*4 - 0x500], 0
mov eax, dword [ebp - 0x914]
mov ecx, dword [ebp + eax*4 - 0x8fc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x914]
mov dword [ebp + edx*4 - 0x8fc], 0
push 0x4290c0
mov eax, dword [ebp - 0x914]
mov ecx, dword [ebp + eax*4 - 0x8fc]
push ecx
mov edx, dword [ebp - 0x914]
push edx
mov ecx, 0x76cf90
call fcn.004237d0
mov ecx, eax
call fcn.00423630
mov ecx, eax
call fcn.004239b0
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41d6fd
jmp 0x41d540
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005faac9
mov esp, ebp
pop ebp
ret