Function at 0x408c70
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7f0
mov eax, dword [0x420044]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x422c88
push 0x422bc0
push 0
mov dword [0x422d50], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x408f50
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x65a]
push ecx
mov word [ebp - 0x65c], ax
call fcn.00411f00
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [ebp - 0x24a]
push eax
mov word [ebp - 0x24c], dx
call fcn.00411f00
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x452]
push edx
mov word [ebp - 0x454], cx
call fcn.00411f00
add esp, 0xc
xor eax, eax
mov edi, edi
movzx ecx, word [eax + 0x41e4c4]
mov word [ebp + eax - 0x24c], cx
add eax, 2
test cx, cx
jne 0x408d20
xor eax, eax
lea esp, [esp]
movzx ecx, word [ebp + eax - 0x24c]
mov word [ebp + eax - 0x454], cx
add eax, 2
test cx, cx
jne 0x408d40
lea eax, [ebp - 0x454]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x408d61
mov ecx, dword [0x41e4d4]
mov edx, dword [0x41e4d8]
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [eax], ecx
mov ecx, dword [0x41e4dc]
mov dword [eax + 4], edx
lea edx, [ebp - 0x24c]
push edx
push 0
push 0x20000
mov dword [eax + 8], ecx
call ebx
test eax, eax
je 0x408dfe
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x454]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebp - 0x24c]
push ecx
xor esi, esi
push esi
push 0x20000
call ebx
test eax, eax
je 0x408dfe
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, 5
jge 0x408dfe
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xc8
inc esi
call edi
lea edx, [ebp - 0x24c]
push edx
push 0
push 0x20000
call ebx
test eax, eax
jne 0x408dd6
lea eax, [ebp - 0x7ec]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x4233a0
call fcn.00404230
add esp, 4
test eax, eax
jne 0x408f09
xor ecx, ecx
push 0x3a
push ecx
lea edx, [ebp - 0x42]
push edx
mov word [ebp - 0x44], cx
call fcn.00411f00
add esp, 0xc
lea edi, [ebp - 0x44]
call fcn.00408960
xor eax, eax
jmp 0x408e50
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x423548], cx
add eax, 2
test cx, cx
jne 0x408e50
push 0x41e4e0
push 0x40
push 0x4233a4
call fcn.0040a7ee
add esp, 0xc
push 0x41e4fc
mov eax, 0x51
push 0x10
push 0x423426
mov word [0x423424], ax
call fcn.0040a7ee
add esp, 0xc
push 0x41e508
push 0x40
push 0x423446
call fcn.0040a7ee
mov ecx, 0x2b66
add esp, 0xc
mov word [0x4234c6], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x423528], cx
add eax, 2
test cx, cx
jne 0x408ec0
mov eax, 0x423528
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x408ee0
mov edx, dword [0x41e524]
mov cx, word [0x41e528]
mov dword [eax], edx
mov word [eax + 4], cx
mov dword [0x423568], 5
call fcn.004091e0
lea edi, [ebp - 0x65c]
call fcn.00408960
xor eax, eax
jmp 0x408f20
movzx ecx, word [ebp + eax - 0x65c]
mov word [eax + 0x4235a0], cx
add eax, 2
test cx, cx
jne 0x408f20
push 0x4235a0
push 0
push 0x20000
call ebx
test eax, eax
je 0x408f63
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0040a7df
mov esp, ebp
pop ebp
ret
push 0x4235a0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x408f50
mov esi, 0x422f60
call fcn.0040a230
mov edx, dword [0x42356c]
push 0
push 0
push 0
push 0x409120
push 0
push 0
mov dword [0x422f68], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 8]
pop edi
pop esi
mov dword [0x420f18], eax
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0040a7df
mov esp, ebp
pop ebp
ret