Function at 0x408cc0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7f0
mov eax, dword [0x422044]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x424c88
push 0x424bc0
push 0
mov dword [0x424d50], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x408fa0
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x65a]
push ecx
mov word [ebp - 0x65c], ax
call fcn.00411f50
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x24a]
push eax
mov word [ebp - 0x24c], dx
call fcn.00411f50
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x452]
push edx
mov word [ebp - 0x454], cx
call fcn.00411f50
add esp, 0xc
xor eax, eax
mov edi, edi
movzx ecx, word [eax + 0x41c290]
mov word [ebp + eax - 0x24c], cx
add eax, 2
test cx, cx
jne 0x408d70
xor eax, eax
lea esp, [esp]
movzx ecx, word [ebp + eax - 0x24c]
mov word [ebp + eax - 0x454], cx
add eax, 2
test cx, cx
jne 0x408d90
lea eax, [ebp - 0x454]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x408db1
mov ecx, dword [0x41c2a0]
mov edx, dword [0x41c2a4]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [eax], ecx
mov ecx, dword [0x41c2a8]
mov dword [eax + 4], edx
lea edx, [ebp - 0x24c]
push edx
push 0
push 0x20000
mov dword [eax + 8], ecx
call ebx
test eax, eax
je 0x408e4e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x454]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebp - 0x24c]
push ecx
xor esi, esi
push esi
push 0x20000
call ebx
test eax, eax
je 0x408e4e
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 5
jge 0x408e4e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xc8
inc esi
call edi
lea edx, [ebp - 0x24c]
push edx
push 0
push 0x20000
call ebx
test eax, eax
jne 0x408e26
lea eax, [ebp - 0x7ec]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x4253a0
call fcn.00404290
add esp, 4
test eax, eax
jne 0x408f59
xor ecx, ecx
push 0x3a
push ecx
lea edx, [ebp - 0x42]
push edx
mov word [ebp - 0x44], cx
call fcn.00411f50
add esp, 0xc
lea edi, [ebp - 0x44]
call fcn.004089b0
xor eax, eax
jmp 0x408ea0
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x425548], cx
add eax, 2
test cx, cx
jne 0x408ea0
push 0x41c2d4
push 0x40
push 0x4253a4
call fcn.0040a83e
add esp, 0xc
push 0x41c2f0
mov eax, 0x51
push 0x10
push 0x425426
mov word [0x425424], ax
call fcn.0040a83e
add esp, 0xc
push 0x41c2fc
push 0x40
push 0x425446
call fcn.0040a83e
mov ecx, 0x2b66
add esp, 0xc
mov word [0x4254c6], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x425528], cx
add eax, 2
test cx, cx
jne 0x408f10
mov eax, 0x425528
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x408f30
mov edx, dword [0x41c318]
mov cx, word [0x41c31c]
mov dword [eax], edx
mov word [eax + 4], cx
mov dword [0x425568], 5
call fcn.00409230
lea edi, [ebp - 0x65c]
call fcn.004089b0
xor eax, eax
jmp 0x408f70
movzx ecx, word [ebp + eax - 0x65c]
mov word [eax + 0x4255a0], cx
add eax, 2
test cx, cx
jne 0x408f70
push 0x4255a0
push 0
push 0x20000
call ebx
test eax, eax
je 0x408fb3
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0040a82f
mov esp, ebp
pop ebp
ret
push 0x4255a0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x408fa0
mov esi, 0x424f60
call fcn.0040a280
mov edx, dword [0x42556c]
push 0
push 0
push 0
push 0x409170
push 0
push 0
mov dword [0x424f68], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 8]
pop edi
pop esi
mov dword [0x422f18], eax
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0040a82f
mov esp, ebp
pop ebp
ret