Function at 0x4020b0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
sub esp, 0x7f0
mov eax, dword [0x437c24]
xor eax, esp
mov dword [esp + 0x7ec], eax
mov eax, dword [esp + 0x7f4]
push ebx
push ebp
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x43c130
push 0x43c068
push 0
mov dword [0x43c1f8], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4023ac
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x5fa]
push ecx
mov word [esp + 0x5fc], ax
call fcn.00417c50
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x1ea]
push eax
mov word [esp + 0x1ec], dx
call fcn.00417c50
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3f2]
push edx
mov word [esp + 0x3f4], cx
call fcn.00417c50
add esp, 0xc
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + 0x432f50]
mov word [esp + eax + 0x1e0], cx
add eax, 2
test cx, cx
jne 0x402170
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1e0]
mov word [esp + eax + 0x3e8], cx
add eax, 2
test cx, cx
jne 0x402190
lea eax, [esp + 0x3e8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4021b2
mov ecx, dword [0x432f60]
mov edx, dword [0x432f64]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [eax], ecx
mov ecx, dword [0x432f68]
mov dword [eax + 4], edx
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
mov dword [eax + 8], ecx
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x402255
push eax
call ebp
lea eax, [esp + 0x3e8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [esp + 0x1e0]
push ecx
xor esi, esi
push esi
push 0x20000
call ebx
test eax, eax
je 0x402255
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
lea esp, [esp]
cmp esi, 5
jge 0x402255
push eax
call ebp
push 0xc8
inc esi
call edi
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
call ebx
test eax, eax
jne 0x402230
lea eax, [esp + 0x10]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x43c9b8
call fcn.00406cf0
add esp, 4
test eax, eax
jne 0x402369
xor ecx, ecx
push 0x3a
push ecx
lea edx, [esp + 0x1ae]
push edx
mov word [esp + 0x1b0], cx
call fcn.00417c50
add esp, 0xc
lea edi, [esp + 0x1a4]
call fcn.00401000
xor eax, eax
jmp 0x4022b0
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43cb60], cx
add eax, 2
test cx, cx
jne 0x4022b0
push 0x432f94
push 0x40
push 0x43c9bc
call fcn.00415871
add esp, 0xc
push 0x432fb0
mov eax, 0x51
push 0x10
push 0x43ca3e
mov word [0x43ca3c], ax
call fcn.00415871
add esp, 0xc
push 0x432fbc
push 0x40
push 0x43ca5e
call fcn.00415871
mov ecx, 0x2b66
add esp, 0xc
mov word [0x43cade], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43cb40], cx
add eax, 2
test cx, cx
jne 0x402320
mov eax, 0x43cb40
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x402340
mov edx, dword [0x432fd8]
mov cx, word [0x432fdc]
mov dword [eax], edx
mov word [eax + 4], cx
mov dword [0x43cb80], 5
call fcn.004013a0
lea edi, [esp + 0x5f0]
call fcn.00401000
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x5f0]
mov word [eax + 0x43cbb8], cx
add eax, 2
test cx, cx
jne 0x402380
push 0x43cbb8
push 0
push 0x20000
call ebx
test eax, eax
je 0x4023b0
push eax
call ebp
xor eax, eax
jmp 0x4023fa
push 0x43cbb8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x4023ac
mov ecx, 0x43d048
call fcn.00402720
mov edx, dword [0x43cb84]
push 0
push 0
push 0
push 0x4012e0
push 0
push 0
mov dword [0x43d050], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4394d0], eax
mov eax, 1
mov ecx, dword [esp + 0x7fc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004155fc
add esp, 0x7f0
ret