Function at 0x404e40
Capabilities:
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x41e088
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
push ebx
push ebp
push esi
push edi
push str.ICMP.DLL
mov dword [esp + 0x64], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
jne 0x404ea0
push 1
lea ecx, [esp + 0x6c]
mov dword [esp + 0x64], 0xffffffff
call fcn.004069a0
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
mov eax, dword [esp + 0x6c]
test eax, eax
jne 0x404ead
mov eax, 0x41f230
push eax
call dword [sym.imp.WSOCK32.dll_gethostbyname]
test eax, eax
mov dword [esp + 0x14], eax
jne 0x404f0e
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x404ef6
mov al, byte [ecx - 1]
test al, al
je 0x404eec
cmp al, 0xff
je 0x404eec
dec al
pop edi
pop esi
mov byte [ecx - 1], al
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.IcmpCreateFile
push ebx
call esi
push str.IcmpCloseHandle
push ebx
mov edi, eax
call esi
push 0x4223c8
push ebx
mov dword [esp + 0x18], eax
call esi
test edi, edi
mov ebp, eax
je 0x40510f
mov eax, dword [esp + 0x10]
test eax, eax
je 0x40510f
test ebp, ebp
je 0x40510f
call edi
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x404fad
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x404f95
mov al, byte [ecx - 1]
test al, al
je 0x404f8b
cmp al, 0xff
je 0x404f8b
dec al
pop edi
pop esi
mov byte [ecx - 1], al
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
mov ecx, 0x10
mov eax, 0xaaaaaaaa
lea edi, [esp + 0x18]
push 0x5c
rep stosd dword es:[edi], eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
jne 0x40501f
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x405007
mov al, byte [ecx - 1]
test al, al
je 0x404ffd
cmp al, 0xff
je 0x404ffd
dec al
pop edi
pop esi
mov byte [ecx - 1], al
pop ebp
mov eax, 6
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 6
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push 0x3e8
push 0x5c
mov dword [esi + 0x10], eax
mov word [esi + 0xc], 0x40
mov eax, dword [edx + 0xc]
push esi
push 0
lea ecx, [esp + 0x28]
push 0x40
push ecx
mov ecx, dword [eax]
mov eax, dword [esp + 0x28]
mov edx, dword [ecx]
push edx
push eax
call ebp
test eax, eax
je 0x4050b7
mov edx, dword [esp + 0x78]
mov ecx, dword [esi + 8]
push esi
mov dword [edx], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4050a2
mov al, byte [ecx - 1]
test al, al
je 0x405098
cmp al, 0xff
je 0x405098
dec al
pop edi
pop esi
mov byte [ecx - 1], al
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x4050f7
mov al, byte [ecx - 1]
test al, al
je 0x4050ed
cmp al, 0xff
je 0x4050ed
dec al
pop edi
pop esi
mov byte [ecx - 1], al
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 7
pop ebx
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
add esp, 0x54
ret
mov ecx, dword [esp + 0x6c]
test ecx, ecx
je 0x405133
mov al, byte [ecx - 1]
test al, al
je 0x405129
cmp al, 0xff
je 0x405129
dec al
mov byte [ecx - 1], al
jmp 0x405133
dec ecx
push ecx
call fcn.00410ad8
add esp, 4
mov ecx, dword [esp + 0x58]
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
mov dword fs:[0], ecx
add esp, 0x54
ret