Function at 0x401550
Capabilities:
Capture network configuration via ipconfig
Execute command

Disassembly:
push rbp
push rbx
sub rsp, 0x208
lea rbp, [rsp + 0x80]
call fcn.004018a0
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004017c0
lea rax, [rbp - 0x60]
mov r8d, 1
lea rdx, str.C:WindowsSystem32driversetchosts
mov rcx, rax
call fcn.004017d8
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004017c8
test al, al
je 0x4016b9
lea rax, str._n_Start_of_Discord_Blocklist_n0.0.0.0_www.discord.com_n0.0.0.0_discord.com_n0.0.0.0_www.discord.gg_n0.0.0.0_discord.gg_n0.0.0.0_support.discord.com_n0.0.0.0_canary.discord.com_n0.0.0.0_api.discord.com_n0.0.0.0_cdn.discord.com_n0.0.0.0_dev.discord.com_n0.0.0.0_app.discord.com_n0.0.0.0_status.discord.com_n0.0.0.0_blog.discord.com_n0.0.0.0_payments.discord.com_n0.0.0.0_gateway.discord.gg_n0.0.0.0_media.discordapp.com_n0.0.0.0_image.discordapp.net_n0.0.0.0_discordstatus.com_n0.0.0.0_voice.discord.com_n0.0.0.0_rtc.discord.com_n0.0.0.0_webrtc.discord.com_n0.0.0.0_udp.discord.com_n0.0.0.0_sip.discord.com_n_End_of_Discord_Blocklist_n
mov qword [rbp + 0x178], rax
lea rax, str._n_Start_of_Trash_Blocklist_n0.0.0.0_twitch_games.plus_n0.0.0.0_twitchgift.com_n0.0.0.0_twitchplaysmugen.com_n0.0.0.0_twitchs_cs2.com_n0.0.0.0_twitchs_tv.com_n0.0.0.0_twitterchief.com_n0.0.0.0_twittple.com_n0.0.0.0_twltch_exclusives.com_n0.0.0.0_twltchs_cs.tv_n0.0.0.0_adnexus.net_n0.0.0.0_az361816.vo.msecnd.net_n0.0.0.0_az512334.vo.msecnd.net_n0.0.0.0_cdn.atdmt.com_n0.0.0.0_cds26.ams9.msecn.net_n0.0.0.0_feedback.microsoft_hohm.com_n0.0.0.0_h1.msn.com_n0.0.0.0_live.rads.msn.com_n0.0.0.0_preview.msn.com_n0.0.0.0_reports.wes.df.telemetry.microsoft.com_n0.0.0.0_schemas.microsoft.akadns.net_n0.0.0.0_secure.flashtalking.com_n0.0.0.0_statsfe2.ws.microsoft.com_n0.0.0.0_wes.df.telemetry.microsoft.com_n0.0.0.0_abtest_va_tiktok.byteoversea.com_n0.0.0.0_dm_maliva16.byteoversea.com_n0.0.0.0_dm.bytedance.com_n0.0.0.0_ibytedtos.com_n0.0.0.0_muscdn.com_n0.0.0.0_musical.ly_n0.0.0.0_musically.ly_n0.0.0.0_p16_tiktokcdn_com.akamaized.net_n0.0.0.0_p16.hypstarcdn.com_n0.0.0.0_s16.tiktokcdn.com_n0.0.0.0_sf_tb_sg.ibytedtos.com_n0.0.0.0_sgali3.l.byteoversea.net_n0.0.0.0_tiktok.com_n0.0.0.0_tiktok.org_n0.0.0.0_tiktokcdn_com.akamaized.net_n0.0.0.0_tiktokcdn.com_n0.0.0.0_tiktokv.com_n0.0.0.0_v16_tiktokcdn_com.akamaized.net_n0.0.0.0_verification_va.byteoversea.com_n0.0.0.0_www.tiktok.com_n0.0.0.0_xlog_va.byteoversea.com_n0.0.0.0_tinder.com_n0.0.0.0_bumble.com_n0.0.0.0_badoo.com_n0.0.0.0_okcupid.com_n0.0.0.0_hinge.co_n0.0.0.0_coffeemeetsbagel.com_n0.0.0.0_happn.com_n0.0.0.0_weareher.com_n0.0.0.0_clover.co_n0.0.0.0_pof.com_n0.0.0.0_match.com_n0.0.0.0_mbga.jp_n0.0.0.0_mixi.jp_n0.0.0.0_mixch.tv_n0.0.0.0_lobi.co_n0.0.0.0_ads.youtube.com_n0.0.0.0_androidyoutubetomp3.com_n0.0.0.0_www.androidyoutubetomp3.com_n0.0.0.0_www.youtub_link.com_n0.0.0.0_www.youtube_com.pol.beauty_n0.0.0.0_www.youtube_com.waw.pl_n0.0.0.0_www.youtube.p1.beauty_n0.0.0.0_www.youtube.p1.gives_n0.0.0.0_www.youtube.tm.pl_n0.0.0.0_ad.rs.doubleclick.net_n0.0.0.0_affiliate.2mdn.net_n0.0.0.0_clickserve.us2.dartsearch.net_n0.0.0.0_ad_apac.doubleclick.net_n0.0.0.0_ad.mo.doubleclick.net_n0.0.0.0_adclick.g.doubleclick.net_n0.0.0.0_gan.doubleclick.net_n0.0.0.0_googleads2.g.doubleclick.net_n0.0.0.0_n4061ad.hk.doubleclick.net_n0.0.0.0_c.admob.com_n0.0.0.0_code.adtlgc.com_n0.0.0.0_ip_geo.appspot.com_n0.0.0.0_nojsstats.appspot.com_n0.0.0.0_ad_ace.doubleclick.net_n0.0.0.0_ad.bg.doubleclick.net_n0.0.0.0_fls.au.doubleclick.net_n0.0.0.0_www.doubleclickbygoogle.com_n0.0.0.0_video_stats.video.google.com_n0.0.0.0_4.afs.googleadservices.com_n0.0.0.0_partner.googleadservices.com_n0.0.0.0_www.googletagservices.com_n0.0.0.0_www.linksalpha.com_n0.0.0.0_s.youtube.com_n0.0.0.0_wyoutube.fr_n0.0.0.0_youtube.112.2o7.net_n0.0.0.0_ehg_youtube.hitbox.com_n0.0.0.0_androidyoutubetomp3.com_n0.0.0.0_www.androidyoutubetomp3.com_n_End_of_Trash_Blocklist_n
mov qword [rbp + 0x170], rax
lea rax, [rbp - 0x60]
lea rdx, str._Start_of_Discord_Blocklist_n
mov rcx, rax
call fcn.00401798
mov rdx, qword [rbp + 0x178]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.00401798
lea rax, [rbp - 0x60]
lea rdx, str._End_of_Discord_Blocklist_n_n
mov rcx, rax
call fcn.00401798
lea rax, [rbp - 0x60]
lea rdx, str._Start_of_Trash_Blocklist_n
mov rcx, rax
call fcn.00401798
mov rdx, qword [rbp + 0x170]
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.00401798
lea rax, [rbp - 0x60]
lea rdx, str._End_of_Trash_Blocklist_n
mov rcx, rax
call fcn.00401798
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004017d0
lea rdx, str.Blocklists_added_to_the_hosts_file.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call fcn.00401798
mov rdx, qword [0x004051a0]
mov rcx, rax
call fcn.004017e0
lea rcx, str.ipconfig__flushdns
call sub.msvcrt.dll_system
lea rdx, str.DNS_cache_flushed.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call fcn.00401798
mov rdx, qword [0x004051a0]
mov rcx, rax
call fcn.004017e0
lea rcx, str.attrib_r_C:WindowsSystem32driversetchosts
call sub.msvcrt.dll_system
lea rdx, str.Hosts_file_set_to_read_only.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call fcn.00401798
mov rdx, qword [0x004051a0]
mov rcx, rax
call fcn.004017e0
jmp 0x4016e2
lea rdx, str.Failed_to_open_the_hosts_file._Please_run_the_program_as_an_administrator.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call fcn.00401798
mov rdx, qword [0x004051a0]
mov rcx, rax
call fcn.004017e0
mov ebx, 1
jmp 0x4016e7
mov ebx, 0
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004017b8
mov eax, ebx
jmp 0x401711
add rsp, 0x208
pop rbx
pop rbp
ret