Function at 0x413e77
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0
jmp 0x413e99
jmp 0x413e9e
mov ebx, dword [0x1366df4]
call fcn.00401a63
mov eax, 0
cmp eax, ecx
jl 0x413ebf
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push 1
push 1
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x3c]
mov ebx, dword [0x1366df8]
call fcn.00401a63
mov eax, 0
cmp eax, ecx
jl 0x413efc
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push 1
push 1
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x3c]
mov ebx, dword [0x1366dfc]
call fcn.00401a63
mov eax, 1
cmp eax, ecx
jl 0x413f39
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
mov eax, 0x11ade69
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
mov ebx, eax
test ebx, ebx
je 0x413f77
push ebx
call fcn.005d1166
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x413f87
push ebx
call fcn.005d1166
add esp, 4
push reloc.WS2_32.dll_connect
push 0
push 0x11ade97
push reloc.WS2_32.dll_connect
push 0
push 0x93e9ca
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
push reloc.WS2_32.dll_connect
push 0
push 0x8aa567
push reloc.WS2_32.dll_connect
push 0
push 0x8aa51e
push 0x80000301
push 0
push 1
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
push reloc.WS2_32.dll_connect
push 0
push 0x8aa567
push reloc.WS2_32.dll_connect
push 0
push 0x8aa5ce
push 0x80000301
push 0
push 1
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
push reloc.WS2_32.dll_connect
push 0
push 0x8aa616
push 0x80000301
push 0
push 4
push 2
mov ebx, 0x5d4260
call fcn.005d116c
add esp, 0x1c
push 0
push 0
push 0
push reloc.WS2_32.dll_bind
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x11adea5
push 3
mov ebx, 0x5d1690
call fcn.005d116c
add esp, 0x28
push 0x80000301
push 0
push 0x3e8
push 1
mov eax, 5
mov ebx, 0x65e500
call fcn.005d118a
add esp, 0x10
push 0x11adec0
push dword [0x1366de4]
mov ecx, 2
call fcn.004039a9
add esp, 8
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4140d4
mov eax, 0x6c8576
push eax
push 1
mov ebx, 0x5d3760
call fcn.005d116c
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4140f7
push ebx
call fcn.005d1166
add esp, 4
push 0
push 0
push 0
push reloc.WS2_32.dll_bind
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x11adecd
push 3
mov ebx, 0x5d1690
call fcn.005d116c
add esp, 0x28
push 0x80000301
push 0
push 0x3e8
push 1
mov eax, 5
mov ebx, 0x65e500
call fcn.005d118a
add esp, 0x10
push reloc.WS2_32.dll_connect
push 0
push 0x11adee8
push 0x80000301
push 0
push 4
push 2
mov ebx, 0x5d4260
call fcn.005d116c
add esp, 0x1c
push 0x8aa661
push dword [0x1366de4]
mov ecx, 2
call fcn.004039a9
add esp, 8
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4141a2
mov eax, 0x6c8576
push eax
push 1
mov ebx, 0x5d3760
call fcn.005d116c
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4141c5
push ebx
call fcn.005d1166
add esp, 4
push 0x11adf1f
push dword [0x1366de4]
mov ecx, 2
call fcn.004039a9
add esp, 8
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x4141f3
mov eax, 0x6c8576
push eax
push 1
mov ebx, 0x5d3760
call fcn.005d116c
add esp, 0x10
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414216
push ebx
call fcn.005d1166
add esp, 4
push 0x11adf1f
push dword [0x1366de4]
mov ecx, 2
call fcn.004039a9
add esp, 8
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_getpeername
push 0
push 0x11adf2c
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x414250
mov eax, 0x6c8576
push eax
push 2
mov ebx, 0x5d3a30
call fcn.005d116c
add esp, 0x1c
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414273
push ebx
call fcn.005d1166
add esp, 4
push 0x80000301
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x11d2f34
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
push 0x80000301
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x8aa45e
push 0x80000301
push 0
push 3
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
mov ebx, dword [0x1366dec]
call fcn.00401bb6
xor ecx, ecx
push eax
lea eax, [ebp - 4]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41437e
mov ebx, dword [0x1366dec]
call fcn.00401a63
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x414321
push 4
call fcn.005d1172
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x414334
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x414351
mov eax, 0x6c8576
push eax
push 1
mov ebx, 0x5d3760
call fcn.005d116c
add esp, 0x10
push 0
mov ebx, 0x5d46e0
call fcn.005d116c
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x4142f3
add esp, 0xc
mov ebx, dword [0x1366df0]
call fcn.00401bb6
xor ecx, ecx
push eax
lea eax, [ebp - 4]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x41442c
mov ebx, dword [0x1366df0]
call fcn.00401a63
push ebx
push ecx
mov eax, dword [ebp - 4]
dec eax
jns 0x4143c3
push 4
call fcn.005d1172
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x4143d6
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx]
test eax, eax
jne 0x4143f3
mov eax, 0x6c8576
push eax
push 0x80000301
push 0
push 4
push 2
mov ebx, 0x5d4260
call fcn.005d116c
add esp, 0x1c
push 0
mov ebx, 0x5d46e0
call fcn.005d116c
add esp, 4
pop eax
pop ebx
pop ecx
jmp 0x414395
add esp, 0xc
push reloc.WS2_32.dll_connect
push 0
push 0x6c9153
push 0x80000301
push 0
push 4
push 2
mov ebx, 0x5d4310
call fcn.005d116c
add esp, 0x1c
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x414519
push 0
mov ebx, 0x5d1890
call fcn.005d116c
add esp, 4
mov dword [ebp - 8], eax
push 0
mov ebx, 0x5d18b0
call fcn.005d116c
add esp, 4
mov dword [ebp - 0xc], eax
push dword [ebp - 0xc]
push 0x6c918d
push dword [ebp - 8]
mov ecx, 3
call fcn.004039a9
add esp, 0xc
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x4144bb
push ebx
call fcn.005d1166
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4144cb
push ebx
call fcn.005d1166
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4144de
mov eax, 0x6c8576
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x6c9153
push 0x80000301
push 0
push 4
push 3
mov ebx, 0x5d4240
call fcn.005d116c
add esp, 0x28
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x414519
push ebx
call fcn.005d1166
add esp, 4
push 0
mov ebx, 0x5d1890
call fcn.005d116c
add esp, 4
mov dword [ebp - 8], eax
push 0x6c90e6
push dword [ebp - 8]
mov ecx, 2
call fcn.004039a9
add esp, 8
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x414556
push ebx
call fcn.005d1166
add esp, 4
push 0x80000301
push 0
push 1
mov ebx, 6
call fcn.00401272
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x41457f
mov eax, 0x6c8576
push eax
push 0
push 0
push 0
push 5
mov eax, 4
mov ebx, 0x65e210
call fcn.005d118a
add esp, 0x40
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4145ad
push ebx
call fcn.005d1166
add esp, 4
call fcn.004146b4
mov ebx, dword [0x1366df4]
call fcn.00401a63
mov eax, 0
cmp eax, ecx
jl 0x4145d3
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push 1
push 0
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x3c]
mov ebx, dword [0x1366df8]
call fcn.00401a63
mov eax, 0
cmp eax, ecx
jl 0x414610
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
push 1
push 0
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x3c]
mov ebx, dword [0x1366dfc]
call fcn.00401a63
mov eax, 1
cmp eax, ecx
jl 0x41464d
push 1
call fcn.005d1172
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
push 1
mov eax, 0x11d2f83
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 8]
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x68]
mov ebx, eax
test ebx, ebx
je 0x41468b
push ebx
call fcn.005d1166
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41469b
push ebx
call fcn.005d1166
add esp, 4
jmp 0x4146a0
jmp 0x4146b0
mov esp, ebp
pop ebp
ret