Function at 0x4033c0
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
push str._v1.11_NT_www.vulnwatch.org_netcat___nconnect_to_somewhere:_tnc___options__hostname_port_s___ports__...__nlisten_for_inbound:_tnc__l__p_port__options___hostname___port__noptions:
mov word [0x40e7b4], 1
call fcn.00402060
push str._t_d_t_tdetach_from_console__background_mode_n
call fcn.00402060
push str._t_e_prog_t_tinbound_program_to_exec__dangerous___
call fcn.00402060
push str._t_g_gateway_tsource_routing_hop_point_s___up_to_8_n_t_G_num_t_tsource_routing_pointer:_4__8__12__..._n_t_h_t_tthis_cruft_n_t_i_secs_t_tdelay_interval_for_lines_sent__ports_scanned_n_t_l_t_tlisten_mode__for_inbound_connects_n_t_L_t_tlisten_harder__re_listen_on_socket_close_n_t_n_t_tnumeric_only_IP_addresses__no_DNS_n_t_o_file_t_thex_dump_of_traffic_n_t_p_port_t_tlocal_port_number_n_t_r_t_trandomize_local_and_remote_ports_n_t_s_addr_t_tlocal_source_address
call fcn.00402060
push str._t_t_t_tanswer_TELNET_negotiation
call fcn.00402060
push str._t_u_t_tUDP_mode_n_t_v_t_tverbose__use_twice_to_be_more_verbose__n_t_w_secs_t_ttimeout_for_connects_and_final_net_reads_n_t_z_t_tzero_I_O_mode__used_for_scanning_
call fcn.00402060
add esp, 0x18
push str.port_numbers_can_be_individual_or_ranges:_m_n__inclusive_
call fcn.004020f0
int3
sub esp, 0x1b0
mov eax, dword [0x40e090]
push ebx
mov dword [esp + 0x1b0], eax
xor ebx, ebx
lea eax, [esp + 0x20]
push eax
push 0x101
mov dword [esp + 0x10], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], ebx
call sub.WS2_32.dll_WSAStartup
test eax, eax
jne 0x403412
mov ax, word [esp + 0x20]
cmp al, 1
jne 0x40340d
cmp ah, al
je 0x403412
call sub.WS2_32.dll_WSACleanup
push 0x14
call fcn.00404125
add esp, 4
cmp eax, ebx
push 0x14
je 0x403f0f
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [0x40e780], eax
call fcn.00404125
add esp, 4
cmp eax, ebx
je 0x403f0d
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
push 0x2004
mov dword [0x40e784], eax
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403efe
push edi
xor eax, eax
mov edi, edx
mov ecx, 0x801
rep stosd dword es:[edi], eax
push 0x2004
mov dword [0x40e9ec], edx
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403eef
xor eax, eax
mov edi, edx
mov ecx, 0x801
rep stosd dword es:[edi], eax
push 0x108
mov dword [0x40ea40], edx
call fcn.00404125
add esp, 4
mov edx, eax
cmp edx, ebx
push 0x108
je 0x403ef4
xor eax, eax
mov edi, edx
mov ecx, 0x42
rep stosd dword es:[edi], eax
mov dword [0x40ea44], edx
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403ee0
xor eax, eax
mov edi, edx
mov ecx, 0x42
rep stosd dword es:[edi], eax
push 0x4c
mov dword [0x40e9e8], edx
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403ed4
xor eax, eax
mov edi, edx
push esi
mov ecx, 0x13
rep stosd dword es:[edi], eax
push 1
mov dword [0x40e790], edx
call fcn.00404125
add esp, 4
mov dword [0x40ea48], eax
mov byte [eax], 1
mov dword [0x40e7cc], ebx
mov dword [0x40e060], 4
push ebp
mov esi, dword [esp + 0x1c4]
cmp esi, 1
jne 0x40369e
mov eax, dword [esp + 0x1c8]
mov esi, dword [eax]
push 0x204
call fcn.00404125
mov ebp, eax
add esp, 4
cmp ebp, ebx
je 0x403dc1
xor eax, eax
mov ecx, 0x81
mov edi, ebp
rep stosd dword es:[edi], eax
push 0x2004
mov dword [esp + 0x1cc], ebp
mov dword [ebp], esi
call fcn.00404125
mov esi, eax
add esp, 4
cmp esi, ebx
je 0x403db2
xor eax, eax
mov ecx, 0x801
mov edi, esi
push str.Cmd_line:
rep stosd dword es:[edi], eax
push 0x40e0d8
mov dword [ebp + 4], esi
call fcn.004041b8
push 0x40e0d8
call fcn.00404346
push 0x2000
push esi
push ebx
call fcn.00409250
add esp, 0x18
cmp eax, ebx
mov dword [0x40e76c], eax
jbe 0x403da8
cmp eax, 0x2000
jbe 0x4035f8
xor edx, edx
jmp 0x40361c
mov ecx, eax
cmp ecx, ebx
mov edx, esi
jle 0x40360f
cmp byte [edx], 0xa
je 0x40367c
inc edx
dec ecx
cmp ecx, ebx
jg 0x403600
mov edx, eax
cmp edx, ebx
je 0x40361c
sub eax, edx
mov dword [0x40e76c], eax
cmp eax, ebx
je 0x403638
mov edi, dword [0x40e9ec]
add esi, edx
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
push 0xa
push eax
call fcn.004049e0
add esp, 8
cmp eax, ebx
je 0x40364d
mov byte [eax], 0
mov ecx, dword [ebp + 4]
push 0xd
push ecx
call fcn.004049e0
add esp, 8
cmp eax, ebx
je 0x403662
mov byte [eax], 0
mov eax, dword [ebp + 4]
mov dl, byte [eax + 1]
inc eax
test dl, dl
mov ecx, 2
je 0x403695
cmp byte [eax], 0x20
jne 0x403681
mov byte [eax], 0
jmp 0x40368d
sub edx, esi
inc edx
jmp 0x403611
mov dl, byte [eax - 1]
test dl, dl
jne 0x40368d
mov dword [ebp + ecx*4], eax
inc ecx
mov dl, byte [eax + 1]
inc eax
test dl, dl
jne 0x403672
mov esi, ecx
mov dword [esp + 0x1c4], esi
mov edx, dword [esp + 0x1c8]
push str.ade:g:G:hi:lLno:p:rs:tuvw:z
push edx
push esi
call fcn.00401d70
mov ebp, eax
add esp, 0xc
cmp ebp, 0xffffffff
je 0x403929
nop
lea eax, [ebp - 0x47]
cmp eax, 0x33
ja case.0x4036d3.72
movzx eax, byte [eax + 0x403f6c]
jmp dword [eax*4 + 0x403f1c]
mov ecx, dword [0x40e754]
mov dword [0x40e7c0], ecx
jmp 0x403908
inc word [0x40e7a0]
mov dword [esp + 0x1c], 1
jmp 0x403908
call dword [sym.imp.KERNEL32.dll_FreeConsole]
jmp 0x403908
mov edx, dword [0x40e754]
push edx
call fcn.004047f4
add esp, 4
cmp eax, ebx
je 0x403dda
mov ecx, eax
and ecx, 0x1c
cmp eax, ecx
jne 0x403dda
mov dword [0x40e060], eax
jmp 0x403908
cmp dword [0x40e768], 8
jg 0x403de5
cmp dword [0x40e788], ebx
jne 0x403772
push 0x2c
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403def
mov ecx, 0xb
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [0x40e788], edx
movzx edx, word [0x40e7a4]
mov eax, dword [0x40e754]
push edx
push eax
call fcn.004021a0
add esp, 8
cmp eax, ebx
je 0x40379b
mov ecx, dword [0x40e768]
mov edx, dword [0x40e788]
mov dword [edx + ecx*4], eax
inc dword [0x40e768]
jmp 0x403908
mov eax, dword [0x40e754]
push eax
call fcn.004047f4
and eax, 0xffff
imul eax, eax, 0x3e8
add esp, 4
cmp eax, ebx
mov dword [0x40e79c], eax
jne 0x403908
mov ecx, dword [0x40e754]
push ecx
push str.invalid_interval_time__s
call fcn.004020f0
inc word [0x40e7a0]
jmp 0x403908
inc word [0x40e7a4]
jmp 0x403908
mov ecx, dword [0x40e754]
inc word [0x40e7a8]
mov dword [0x40e794], ecx
jmp 0x403908
mov edx, dword [0x40e754]
push ebx
push edx
call fcn.004023e0
add esp, 8
cmp ax, bx
mov dword [esp + 0x10], eax
jne 0x403908
mov edx, dword [0x40e754]
push edx
push str.invalid_local_port__s
call fcn.004020f0
inc word [0x40e7ac]
jmp 0x403908
movzx eax, word [0x40e7a4]
mov ecx, dword [0x40e754]
push eax
push ecx
call fcn.004021a0
add esp, 8
add eax, 0x1c0
mov dword [esp + 0x20], eax
jmp 0x403908
inc word [0x40e7c4]
jmp 0x403908
inc word [0x40e7b0]
jmp 0x403908
inc word [0x40e7b4]
jmp 0x403908
mov edx, dword [0x40e754]
push edx
call fcn.004047f4
add esp, 4
cmp eax, ebx
mov dword [0x40e7b8], eax
jbe 0x403e06
push 0xc
call fcn.00404125
add esp, 4
cmp eax, ebx
push 0xc
je 0x403e54
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [0x40e778], eax
call fcn.00404125
add esp, 4
cmp eax, ebx
je 0x403e16
xor ecx, ecx
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov ecx, dword [0x40e778]
mov dword [0x40e77c], eax
mov eax, dword [0x40e7b8]
mov dword [ecx], eax
jmp 0x403908
inc word [0x40e7bc]
mov edx, dword [esp + 0x1c8]
push str.ade:g:G:hi:lLno:p:rs:tuvw:z
push edx
push esi
call fcn.00401d70
mov ebp, eax
add esp, 0xc
cmp ebp, 0xffffffff
jne 0x4036c0
cmp word [0x40e7ac], bx
je 0x403964
push ebx
call fcn.00404996
push eax
call fcn.004047f9
push 0x10004
call fcn.00404125
mov edx, eax
add esp, 0xc
cmp edx, ebx
je 0x403e32
mov ecx, 0x4001
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x24], edx
cmp dword [0x40e7c0], ebx
je 0x403984
push ebx
call fcn.00409ec3
add esp, 4
mov word [0x40e7a8], bx
mov dword [0x40e764], ebx
jmp 0x4039d7
cmp word [0x40e7a8], bx
je 0x4039d7
mov eax, dword [0x40e794]
push 0x1b4
push 0x301
push eax
call fcn.0040a5d9
add esp, 0xc
cmp eax, ebx
mov dword [0x40e764], eax
jle 0x403e41
push 0x68
call fcn.00404125
mov edx, eax
add esp, 4
cmp edx, ebx
je 0x403e52
mov ecx, 0x1a
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [0x40e794], edx
mov ecx, dword [0x40e758]
mov edx, dword [esp + 0x1c8]
mov eax, dword [edx + ecx*4]
cmp eax, ebx
je 0x403a08
movzx ecx, word [0x40e7a4]
push ecx
push eax
call fcn.004021a0
mov ecx, dword [0x40e758]
add esp, 8
mov dword [esp + 0x14], eax
jmp 0x403a0c
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x403a21
add eax, 0x1c0
cmp eax, ebx
je 0x403a21
mov edi, eax
mov dword [esp + 0x18], edi
jmp 0x403a25
mov edi, dword [esp + 0x18]
cmp edi, ebx
je 0x403a30
inc ecx
mov dword [0x40e758], ecx
cmp word [0x40e7a0], bx
mov dword [0x40e7cc], ebx
je 0x403aed
mov edx, dword [esp + 0x1c8]
mov ecx, dword [edx + ecx*4]
xor eax, eax
cmp ecx, ebx
je 0x403a66
push ebx
push ecx
call fcn.004023e0
add esp, 8
cmp ax, bx
je 0x403e5e
movzx ecx, word [esp + 0x10]
mov edx, dword [esp + 0x20]
push ecx
movzx eax, ax
push edx
push eax
push edi
call fcn.004027f0
add esp, 0x10
cmp eax, ebx
mov dword [0x40e048], eax
jle 0x403e79
cmp dword [0x40e7c0], ebx
je 0x403aaa
push eax
call fcn.00401420
mov eax, dword [0x40e7c0]
add esp, 4
cmp eax, ebx
jne 0x403ab5
mov eax, dword [0x40e048]
push eax
call fcn.00402e20
add esp, 4
mov ebp, eax
mov edi, 1
cmp word [0x40e7b4], di
jbe 0x403ade
mov ecx, dword [0x40e770]
mov edx, dword [0x40e774]
push ecx
push edx
push str._sent__d__rcvd__d
call fcn.00402060
add esp, 0xc
cmp dword [esp + 0x1c], edi
je 0x403555
jmp 0x403ec7
cmp edi, ebx
je 0x403e83
mov eax, dword [esp + 0x1c8]
cmp dword [eax + ecx*4], ebx
je 0x403e8d
cmp dword [eax + ecx*4 + 4], ebx
je 0x403b12
mov word [0x40e064], bx
mov eax, dword [esp + 0x1c8]
mov eax, dword [eax + ecx*4]
test eax, eax
mov ebx, dword [esp + 0x10]
je 0x403d60
push 0x2d
push eax
xor edi, edi
call fcn.004049e0
mov esi, eax
add esp, 8
test esi, esi
je 0x403b54
mov byte [esi], 0
inc esi
push edi
push esi
call fcn.004023e0
add esp, 8
mov edi, eax
test di, di
je 0x403e97
mov ecx, dword [0x40e758]
mov edx, dword [esp + 0x1c8]
mov eax, dword [edx + ecx*4]
push 0
push eax
call fcn.004023e0
add esp, 8
mov esi, eax
test si, si
mov dword [esp + 0x28], esi
je 0x403ea2
cmp di, si
jbe 0x403ca0
cmp word [0x40e7ac], 0
mov word [0x40e064], 0
je 0x403bb7
movzx ecx, di
mov edi, dword [esp + 0x24]
movzx edx, si
push ecx
push edx
push edi
call fcn.00402570
push edi
call fcn.00402510
add esp, 0x10
mov edi, eax
cmp si, di
ja 0x403d43
cmp word [esp + 0x10], 0
jne 0x403be6
cmp word [0x40e7ac], 0
je 0x403be6
call fcn.00404803
mov ebx, eax
cmp bx, 0x2000
jae 0x403be6
add ebx, 0x2000
movzx eax, di
push eax
push 0
call fcn.004023e0
mov edx, dword [esp + 0x28]
mov ebp, dword [esp + 0x20]
movzx ecx, bx
push ecx
mov edi, eax
movzx esi, di
push edx
push esi
push ebp
call fcn.004025d0
add esp, 0x18
test eax, eax
mov dword [0x40e048], eax
jle 0x403ca7
cmp word [0x40e7bc], 0
je 0x403c3d
cmp word [0x40e7b0], 0
je 0x403c3d
push ebp
push eax
call fcn.00402b80
add esp, 8
mov dword [0x40e048], eax
test eax, eax
jle 0x403ca7
mov eax, dword [0x40e790]
push eax
mov eax, dword [esp + 0x18]
push esi
lea ecx, [eax + 0x100]
push ecx
push eax
push str._s___s___d___s__open
xor ebp, ebp
call fcn.00402060
mov eax, dword [0x40e7c0]
add esp, 0x14
test eax, eax
je 0x403c7b
mov edx, dword [0x40e048]
push edx
call fcn.00401420
add esp, 4
cmp word [0x40e7bc], 0
jne 0x403cec
mov eax, dword [0x40e7c0]
test eax, eax
jne 0x403cec
mov eax, dword [0x40e048]
push eax
call fcn.00402e20
add esp, 4
mov ebp, eax
jmp 0x403cec
mov edi, esi
jmp 0x403bc0
cmp word [0x40e064], 0
mov ebp, 1
jne 0x403ccb
cmp word [0x40e7b4], bp
ja 0x403ccb
call sub.WS2_32.dll_WSAGetLastError
cmp eax, 0x274d
je 0x403cec
mov ecx, dword [0x40e790]
mov eax, dword [esp + 0x14]
push ecx
push esi
lea edx, [eax + 0x100]
push edx
push eax
push str._s___s___d___s_
call fcn.00402060
add esp, 0x14
mov eax, dword [0x40e048]
push 2
push eax
call sub.WS2_32.dll_shutdown
mov ecx, dword [0x40e048]
push ecx
call sub.WS2_32.dll_closesocket
mov eax, dword [0x40e79c]
test eax, eax
je 0x403d17
push eax
call fcn.00404592
add esp, 4
cmp word [0x40e7ac], 0
je 0x403d32
mov edx, dword [esp + 0x24]
push edx
call fcn.00402510
add esp, 4
mov edi, eax
jmp 0x403d38
add edi, 0xffff
cmp word [esp + 0x28], di
jbe 0x403bc0
mov eax, dword [0x40e758]
mov ecx, dword [esp + 0x1c8]
inc eax
mov dword [0x40e758], eax
mov eax, dword [ecx + eax*4]
test eax, eax
jne 0x403b28
mov esi, 1
cmp word [0x40e7b4], si
mov dword [0x40e7cc], 0
jbe 0x403d92
mov edx, dword [0x40e770]
mov eax, dword [0x40e774]
push edx
push eax
push str.sent__d__rcvd__d
call fcn.00402060
add esp, 0xc
call sub.WS2_32.dll_WSACleanup
cmp dword [esp + 0x1c], esi
jne 0x403ebd
xor ebx, ebx
jmp 0x40354e
push str.wrong
call fcn.004020f0
push 0x2004
push str.Hmalloc__d_failed
call fcn.004020f0
push 0x204
push str.Hmalloc__d_failed
call fcn.004020f0
push str.all_A_records_NIY
call fcn.004020f0
push eax
push str.invalid_hop_pointer__d__must_be_multiple_of_4___28
call fcn.004020f0
push str.too_many__g_hops
call fcn.004020f0
push 0x2c
push str.Hmalloc__d_failed
call fcn.004020f0
mov dword [0x40e7cc], ebx
jmp 0x403360
mov eax, dword [0x40e754]
push eax
push str.invalid_wait_time__s
call fcn.004020f0
push 0xc
push str.Hmalloc__d_failed
call fcn.004020f0
push str.nc__h_for_help
mov dword [0x40e7cc], ebx
call fcn.004020f0
push 0x10004
push str.Hmalloc__d_failed
call fcn.004020f0
mov ecx, dword [0x40e794]
push ecx
push str.cant_open__s
call fcn.004020f0
push 0x68
push str.Hmalloc__d_failed
call fcn.004020f0
mov edx, dword [0x40e758]
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + edx*4]
push ecx
push str.invalid_port__s
call fcn.004020f0
push str.no_connection
call fcn.004020f0
push str.no_destination
call fcn.004020f0
push str.no_port_s__to_connect_to
call fcn.004020f0
push esi
push str.invalid_port__s
call fcn.004020f0
mov edx, dword [0x40e758]
mov eax, dword [esp + 0x1c8]
mov ecx, dword [eax + edx*4]
push ecx
push str.invalid_port__s
call fcn.004020f0
cmp word [0x40e064], 0
je 0x403ecd
push ebp
call fcn.00404552
push 0
call fcn.00404552
push 0x4c
push str.Hmalloc__d_failed
call fcn.004020f0
push 0x108
push str.Hmalloc__d_failed
call fcn.004020f0
push 0x2004
push str.Hmalloc__d_failed
call fcn.004020f0
push 0x2004
push str.Hmalloc__d_failed
call fcn.004020f0
push 0x14
push str.Hmalloc__d_failed
call fcn.004020f0
lea ecx, [ecx]
or dh, byte [edi]
inc eax
add bl, ch
inc eax
add al, dl
cmp eax, 0x36ff0040
inc eax
add dl, bl
inc eax
add byte [eax], bh
aaa
inc eax
add bl, bh
cmp eax, 0x37a60040
inc eax
add ch, bl
aaa
inc eax
add cl, ch
aaa
inc eax
add ch, dh
aaa
inc eax
add byte [0x3b004038], cl
cmp byte [eax], al
inc edi
cmp byte [eax], al
insb byte es:[edi], dx
cmp byte [eax], al
js 0x403f92
inc eax
add byte [eax + edi + 0x38900040], al
inc eax
add byte [ecx], al
cmp dword [eax], eax
and bh, byte [esi]
inc eax
add byte [eax], al
adc edx, dword [ebx]
adc edx, dword [ebx]
add dword [ebx], edx
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc edx, dword [ebx]
adc eax, dword [edx]
adc edx, dword [ebx]
add eax, dword [ebx + edx]
add eax, 320014086
or byte [ebx], dl
or dword [edx], ecx
or edx, dword [ebx]
or al, 13
push cs
movups xmm2, xmmword [ecx]
adc ecx, dword [ecx]
or cl, byte [ebx]
adc ecx, dword [ecx + 286265102]
adc edx, dword [ebx]
adc bh, bh
jmp dword [sym.imp.WS2_32.dll_send]