Function at 0x401a40
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
sub esp, 0xa50
mov eax, dword [0x414044]
xor eax, esp
mov dword [esp + 0xa4c], eax
mov eax, dword [esp + 0xa54]
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x415dc8
push 0x415d00
push 0
mov dword [0x415e90], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x401be3
call fcn.00401260
mov dword [0x417498], eax
call fcn.004017b0
test eax, eax
jne 0x401ab6
call fcn.00401470
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [esp + 0x698]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x104
lea ecx, [esp + 0x84c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x7f
lea edx, [esp + 0x1ed]
push 0
push edx
mov byte [esp + 0x1f4], 0
call fcn.0040af40
add esp, 0xc
push 0x42e
lea eax, [esp + 0x26c]
push 0
push eax
call fcn.0040af40
lea ecx, [esp + 0x1f4]
add esp, 0xc
push ecx
lea eax, [esp + 0x84c]
call fcn.004045c0
add esp, 4
cmp eax, 1
jne 0x401b4c
xor eax, eax
nop
mov dl, byte [esp + eax + 0x1e8]
not dl
mov byte [esp + eax + 0x1e8], dl
add eax, 3
cmp eax, 0x4ae
jb 0x401b30
jmp 0x401ba3
push 0x412c5c
call fcn.00401160
mov dword [esp + 0x66c], eax
add esp, 4
mov eax, 0x2bb6
push 0x412c78
mov word [esp + 0x670], ax
call fcn.00401160
add esp, 4
push 0x412c98
lea ecx, [esp + 0x67a]
push 0x10
push ecx
mov dword [esp + 0x67a], eax
mov dword [esp + 0x67e], 0x51
call fcn.0040470b
add esp, 0xc
xor eax, eax
jmp 0x401bb0
movzx ecx, word [eax + 0x412ca8]
mov word [eax + 0x4176a8], cx
add eax, 2
test cx, cx
jne 0x401bb0
push 0x4176a8
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
test eax, eax
je 0x401bfc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0xa4c]
xor ecx, esp
call fcn.004046d0
add esp, 0xa50
ret
push 0x4176a8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x401be3
lea edi, [esp + 0x1e8]
call fcn.00401f00
xor eax, eax
push 0x1e0
push eax
mov dword [esp + 0x832], eax
mov dword [esp + 0x836], eax
mov dword [esp + 0x83a], eax
mov dword [esp + 0x83e], eax
mov dword [esp + 0x842], eax
mov dword [esp + 0x846], eax
mov dword [esp + 0x84a], eax
mov word [esp + 0x84e], ax
lea eax, [esp + 0x10]
xor edx, edx
push eax
mov word [esp + 0x834], dx
call fcn.0040af40
mov ecx, dword [esp + 0x67a]
add esp, 0xc
lea esi, [esp + 0x828]
mov dword [esp + 8], 0x504d534d
call fcn.00401060
xor eax, eax
jmp 0x401ca0
movzx ecx, word [esp + eax + 0x828]
mov word [esp + eax + 0xc], cx
add eax, 2
test cx, cx
jne 0x401ca0
mov cx, word [esp + 0x672]
mov word [esp + 0x8c], cx
mov ecx, dword [esp + 0x668]
lea esi, [esp + 0x828]
call fcn.00401060
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x828]
mov word [esp + eax + 0xae], cx
add eax, 2
test cx, cx
jne 0x401ce0
mov ax, word [esp + 0x66c]
mov ecx, dword [esp + 0x67a]
mov edx, dword [esp + 0x668]
mov word [esp + 0x12e], ax
mov word [0x4174a0], ax
xor eax, eax
mov dword [esp + 0x8e], eax
mov dword [esp + 0x92], eax
mov dword [esp + 0x96], eax
mov dword [esp + 0x9a], eax
mov eax, dword [esp + 0x676]
mov dword [esp + 0x8e], eax
movzx eax, word [esp + 0x682]
mov dword [esp + 0x92], ecx
mov dword [0x41749c], edx
mov edx, dword [esp + 0x67e]
lea ecx, [esp + 8]
push ecx
mov dword [esp + 0x9a], edx
mov word [esp + 0x9e], ax
call fcn.00404630
mov ecx, dword [esp + 0xa58]
add esp, 4
pop edi
pop esi
xor ecx, esp
mov eax, 1
call fcn.004046d0
add esp, 0xa50
ret