Function at 0x403c60
Capabilities:
Initialize winsock library
Reference cloudflare dns server

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1cc
mov eax, dword [0x44e004]
xor eax, esp
mov dword [esp + 0x1c8], eax
mov ecx, dword [0x44f610]
lea eax, [esp + 0x34]
push ebx
push esi
push edi
push eax
call fcn.00402f80
mov ecx, 0x33
mov esi, eax
mov edi, 0x44f670
add esp, 4
rep movsd dword es:[edi], dword [esi]
cmp word [0x44f6ca], 0
je 0x404030
mov byte [0x44f768], 0
call fcn.00401090
lock inc dword [0x44f628]
push 0xf8
call fcn.0042ff7c
mov edi, eax
add esp, 4
test edi, edi
je 0x404045
movsd xmm0, qword [0x44bf70]
mov esi, 0x44f634
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
movsd qword [esp + 0x28], xmm0
nop
push 0xf8
push 0
push edi
call fcn.0042a720
add esp, 0xc
mov ecx, 1
xor eax, eax
lock cmpxchg dword [esi], ecx
test eax, eax
jne 0x403d1f
lea eax, [esp + 0x40]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov dword [edi + 4], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [edi + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [edi + 0x34], eax
lea eax, [edi + 0x84]
mov dword [eax], eax
mov dword [eax + 4], eax
lea eax, [edi + 0xe0]
push eax
mov dword [edi + 0x90], 0
mov dword [edi + 0x94], 0
mov dword [edi + 0x98], 0x4059e0
mov dword [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0x4059e0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esp + 0x30]
mov dword [edi + 0xcc], 0xffffffff
push eax
mov dword [edi + 0xc8], 0xffffffff
call fcn.004302a1
mov eax, dword [esp + 0x34]
mov esi, 0x3e8
cdq
add esp, 4
mov ecx, eax
mov eax, edx
mul esi
mov esi, eax
mov eax, ecx
mov ecx, 0x3e8
mul ecx
mov ecx, eax
add esi, edx
movzx eax, word [esp + 0x38]
cdq
add ecx, eax
mov eax, dword [0x44f618]
mov dword [edi + 8], ecx
adc esi, edx
or eax, dword [0x44f61c]
mov dword [edi + 0xc], esi
jne 0x403e1e
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [0x44f618], ecx
or ecx, eax
mov dword [0x44f61c], eax
jne 0x403e1e
xorps xmm0, xmm0
movlpd qword [esp + 0x10], xmm0
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
jmp 0x403e65
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
call fcn.00442960
mov edx, dword [0x44f61c]
mov ecx, dword [0x44f618]
movsd qword [esp + 0x10], xmm0
call fcn.00442960
movsd xmm1, qword [esp + 0x10]
divsd xmm1, xmm0
mulsd xmm1, qword [esp + 0x28]
movaps xmm0, xmm1
call fcn.004428b0
or dword [edi], 2
push ecx
mov dword [edi + 0x24], edx
mov ecx, edi
mov dword [edi + 0x14], edx
mov edx, str.1.1.1.1
push 0x1000000
push 0x1bb
mov dword [edi + 0x20], eax
mov dword [edi + 0x10], eax
mov dword [0x44f764], edi
call fcn.00406df0
mov esi, eax
add esp, 0xc
test esi, esi
je 0x403ef9
mov eax, dword [esi + 0x44]
movzx eax, word [eax]
cmp eax, 2
jne 0x403eb8
cmp word [0x44fb94], 0
je 0x403ed7
push 0x10
push 0x44fb94
jmp 0x403ece
cmp eax, 0x17
jne 0x403ed7
cmp word [0x44fb78], 0
je 0x403ed7
push 0x1c
push 0x44fb78
push dword [esi + 0x30]
call dword [sym.imp.WS2_32.dll_bind]
mov ecx, esi
mov dword [esi + 0xb8], 0x403b90
mov dword [esi + 0xb0], 0x403990
call fcn.00407c70
xor ecx, ecx
test eax, eax
cmovne esi, ecx
call fcn.0040abc0
test eax, eax
je 0x403f16
or dword [esi + 0x24], 0x8000
mov dword [esi + 0x28], 0x1000000
mov dword [esi + 0xfc], eax
mov esi, dword [0x44f764]
test esi, esi
je 0x403fed
cmp dword [esi + 4], 1
je 0x403fed
mov dword [esi + 4], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esi + 0x30], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 0x3c], 0
mov dword [esi + 0x34], eax
jne 0x403f71
lea edi, [esi + 0xe0]
push edi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [esi + 0xcc], 0xffffffff
jne 0x403f6a
mov ecx, esi
call fcn.00406020
push edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esi + 4]
test eax, eax
je 0x403fb2
cmp eax, 2
jne 0x403f8a
push 0xa
call ebx
mov ecx, esi
call fcn.00406600
jmp 0x403fab
add dword [esi + 0x28], 1
adc dword [esi + 0x2c], 0
test byte [esi], 4
je 0x403f9f
mov eax, dword [esi + 0x40]
cmp eax, dword [esi + 0x3c]
jbe 0x403fb2
mov ecx, esi
call fcn.00405c70
test byte [esi], 1
jne 0x403fb2
mov eax, dword [esi + 4]
test eax, eax
jne 0x403f78
mov dword [esi + 4], 0
call fcn.00406f40
test byte [esi], 2
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edx
je 0x403fed
cmp dword [esi + 4], 3
je 0x403fed
mov ecx, esi
mov dword [esi + 4], 3
call fcn.004062c0
push esi
call fcn.0042f371
add esp, 4
lock inc dword [0x44f62c]
cmp byte [0x44f768], 0
mov dword [0x44f764], 0
jne 0x404030
push 0x3a98
call ebx
call fcn.00401090
lock inc dword [0x44f628]
push 0xf8
call fcn.0042ff7c
mov edi, eax
add esp, 4
mov esi, 0x44f634
test edi, edi
je 0x404045
jmp 0x403cf0
mov ecx, dword [esp + 0x1d4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00429577
mov esp, ebp
pop ebp
ret
push str.malloc_failed__n
push 2
call fcn.0042c79a
add esp, 4
push eax
call fcn.00408c50
add esp, 8
push 0xffffffffffffffff
call fcn.00431995
int3