Function at 0x4020e0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
sub esp, 0x7f0
mov eax, dword [0x435c24]
xor eax, esp
mov dword [esp + 0x7ec], eax
mov eax, dword [esp + 0x7f4]
push ebx
push ebp
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x43a130
push 0x43a068
push 0
mov dword [0x43a1f8], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4023dc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x5fa]
push ecx
mov word [esp + 0x5fc], ax
call fcn.00417c10
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x1ea]
push eax
mov word [esp + 0x1ec], dx
call fcn.00417c10
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3f2]
push edx
mov word [esp + 0x3f4], cx
call fcn.00417c10
add esp, 0xc
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + 0x42e8f4]
mov word [esp + eax + 0x1e0], cx
add eax, 2
test cx, cx
jne 0x4021a0
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1e0]
mov word [esp + eax + 0x3e8], cx
add eax, 2
test cx, cx
jne 0x4021c0
lea eax, [esp + 0x3e8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4021e2
mov ecx, dword [0x42e7e4]
mov edx, dword [0x42e7e8]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [eax], ecx
mov ecx, dword [0x42e7ec]
mov dword [eax + 4], edx
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
mov dword [eax + 8], ecx
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x402285
push eax
call ebp
lea eax, [esp + 0x3e8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [esp + 0x1e0]
push ecx
xor esi, esi
push esi
push 0x20000
call ebx
test eax, eax
je 0x402285
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
lea esp, [esp]
cmp esi, 5
jge 0x402285
push eax
call ebp
push 0xc8
inc esi
call edi
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
call ebx
test eax, eax
jne 0x402260
lea eax, [esp + 0x10]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x43a9b8
call fcn.00406cb0
add esp, 4
test eax, eax
jne 0x402399
xor ecx, ecx
push 0x3a
push ecx
lea edx, [esp + 0x1ae]
push edx
mov word [esp + 0x1b0], cx
call fcn.00417c10
add esp, 0xc
lea edi, [esp + 0x1a4]
call fcn.00401000
xor eax, eax
jmp 0x4022e0
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43ab60], cx
add eax, 2
test cx, cx
jne 0x4022e0
push 0x42e858
push 0x40
push 0x43a9bc
call fcn.00415830
add esp, 0xc
push 0x42e874
mov eax, 0x51
push 0x10
push 0x43aa3e
mov word [0x43aa3c], ax
call fcn.00415830
add esp, 0xc
push 0x42e824
push 0x40
push 0x43aa5e
call fcn.00415830
mov ecx, 0x2b66
add esp, 0xc
mov word [0x43aade], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43ab40], cx
add eax, 2
test cx, cx
jne 0x402350
mov eax, 0x43ab40
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x402370
mov edx, dword [0x42e904]
mov cx, word [0x42e908]
mov dword [eax], edx
mov word [eax + 4], cx
mov dword [0x43ab80], 5
call fcn.004013a0
lea edi, [esp + 0x5f0]
call fcn.00401000
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x5f0]
mov word [eax + 0x43abb8], cx
add eax, 2
test cx, cx
jne 0x4023b0
push 0x43abb8
push 0
push 0x20000
call ebx
test eax, eax
je 0x4023e0
push eax
call ebp
xor eax, eax
jmp 0x40242a
push 0x43abb8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x4023dc
mov ecx, 0x43b048
call fcn.00402750
mov edx, dword [0x43ab84]
push 0
push 0
push 0
push 0x4012e0
push 0
push 0
mov dword [0x43b050], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4374d0], eax
mov eax, 1
mov ecx, dword [esp + 0x7fc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004155bb
add esp, 0x7f0
ret