Function at 0x448e20
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x450080
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push esi
mov eax, dword [0x4622c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 0x4c], 0
jne 0x448e85
mov eax, 0x80004005
jmp 0x4490bc
mov esi, dword [ebp + 8]
add esi, 1
mov ecx, dword [ebp - 0x6c]
call fcn.00449210
cmp esi, eax
jb 0x448ea1
mov eax, 0x80004005
jmp 0x4490bc
lea ecx, [ebp - 0x24]
call fcn.00405f10
mov dword [ebp - 4], 0
call fcn.0041e5a0
test eax, eax
je 0x448ec3
call fcn.00425e70
call fcn.00447360
mov dword [ebp - 0x28], 0
push 0
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0
push 0xf
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x6c]
call fcn.00449230
mov ecx, eax
call dword [sym.imp.MSVCP90.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call sub.DNSAPI.dll_DnsQuery_A
mov dword [ebp - 0x2c], eax
call fcn.004444e0
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
je 0x448f03
jmp 0x448f0d
call fcn.00427090
call fcn.004473f0
cmp dword [ebp - 0x2c], 0
je 0x448f36
mov dword [ebp - 0x38], 0x80004005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00405f80
mov eax, dword [ebp - 0x38]
jmp 0x4490bc
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x448fc8
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 8]
cmp edx, 0xf
jne 0x448fbb
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x6c]
call fcn.00449230
mov ecx, eax
call dword [sym.imp.MSVCP90.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call dword [sym.imp.MSVCR90.dll__stricmp]
add esp, 8
test eax, eax
jne 0x448fbb
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x18]
push ecx
mov edx, dword [ebp - 0x30]
movzx eax, word [edx + 0x1c]
push eax
lea ecx, [ebp - 0x60]
push ecx
call fcn.00406f30
add esp, 0xc
push eax
lea ecx, [ebp - 0x58]
call fcn.00406f50
mov byte [ebp - 4], 1
lea edx, [ebp - 0x58]
push edx
lea ecx, [ebp - 0x24]
call fcn.00406050
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58]
call fcn.00405e20
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov dword [ebp - 0x30], ecx
jmp 0x448f3c
cmp dword [ebp - 0x28], 0
je 0x448ffa
push 1
mov edx, dword [ebp - 0x28]
push edx
call sub.DNSAPI.dll_DnsFree
call fcn.0041e5a0
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
je 0x448fe9
jmp 0x448ff3
call fcn.00447480
call fcn.004474f0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x34], 0
jmp 0x44900c
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x24]
call fcn.00405fe0
cmp dword [ebp - 0x34], eax
jae 0x4490a3
mov ecx, dword [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00406000
cmp dword [eax], 0xd
jne 0x44909e
mov edx, dword [ebp - 0x34]
push edx
lea ecx, [ebp - 0x24]
call fcn.00406000
add eax, 4
mov ecx, eax
call dword [sym.imp.MSVCP90.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::length_void_const]
test eax, eax
je 0x44909e
mov eax, dword [ebp - 0x34]
push eax
lea ecx, [ebp - 0x24]
call fcn.00406000
add eax, 4
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x6c]
call fcn.00449230
add eax, 0x1c
mov ecx, eax
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
call fcn.00444470
test eax, eax
je 0x449083
call fcn.00447560
call fcn.004475f0
mov dword [ebp - 0x64], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00405f80
mov eax, dword [ebp - 0x64]
jmp 0x4490bc
jmp 0x449003
mov dword [ebp - 0x68], 0x80004005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00405f80
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 4