Function at 0x4020e0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
sub esp, 0x7f0
mov eax, dword [0x437c24]
xor eax, esp
mov dword [esp + 0x7ec], eax
mov eax, dword [esp + 0x7f4]
push ebx
push ebp
push esi
push edi
push 0
push eax
push 0
push 0
push 0
push closesocket
push 0
push closesocket
push 0xcf0000
push 0x43c130
push 0x43c068
push 0
mov dword [0x43c1f8], eax
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
je 0x4023dc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x5fa]
push ecx
mov word [esp + 0x5fc], ax
call fcn.00417c90
add esp, 0xc
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x1ea]
push eax
mov word [esp + 0x1ec], dx
call fcn.00417c90
add esp, 0xc
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x3f2]
push edx
mov word [esp + 0x3f4], cx
call fcn.00417c90
add esp, 0xc
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [eax + 0x432f28]
mov word [esp + eax + 0x1e0], cx
add eax, 2
test cx, cx
jne 0x4021a0
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1e0]
mov word [esp + eax + 0x3e8], cx
add eax, 2
test cx, cx
jne 0x4021c0
lea eax, [esp + 0x3e8]
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4021e2
mov ecx, dword [0x432f38]
mov edx, dword [0x432f3c]
mov ebx, dword [sym.imp.KERNEL32.DLL_OpenEventW]
mov dword [eax], ecx
mov ecx, dword [0x432f40]
mov dword [eax + 4], edx
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
mov dword [eax + 8], ecx
call ebx
mov ebp, dword [sym.imp.KERNEL32.DLL_CloseHandle]
test eax, eax
je 0x402285
push eax
call ebp
lea eax, [esp + 0x3e8]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventW]
lea ecx, [esp + 0x1e0]
push ecx
xor esi, esi
push esi
push 0x20000
call ebx
test eax, eax
je 0x402285
mov edi, dword [sym.imp.KERNEL32.DLL_Sleep]
lea esp, [esp]
cmp esi, 5
jge 0x402285
push eax
call ebp
push 0xc8
inc esi
call edi
lea edx, [esp + 0x1e0]
push edx
push 0
push 0x20000
call ebx
test eax, eax
jne 0x402260
lea eax, [esp + 0x10]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x43c9b8
call fcn.00406d20
add esp, 4
test eax, eax
jne 0x402399
xor ecx, ecx
push 0x3a
push ecx
lea edx, [esp + 0x1ae]
push edx
mov word [esp + 0x1b0], cx
call fcn.00417c90
add esp, 0xc
lea edi, [esp + 0x1a4]
call fcn.00401000
xor eax, eax
jmp 0x4022e0
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43cb60], cx
add eax, 2
test cx, cx
jne 0x4022e0
push 0x432f6c
push 0x40
push 0x43c9bc
call fcn.004158b1
add esp, 0xc
push 0x432f88
mov eax, 0x51
push 0x10
push 0x43ca3e
mov word [0x43ca3c], ax
call fcn.004158b1
add esp, 0xc
push 0x432f94
push 0x40
push 0x43ca5e
call fcn.004158b1
mov ecx, 0x2b66
add esp, 0xc
mov word [0x43cade], cx
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1a4]
mov word [eax + 0x43cb40], cx
add eax, 2
test cx, cx
jne 0x402350
mov eax, 0x43cb40
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x402370
mov edx, dword [0x432fb0]
mov cx, word [0x432fb4]
mov dword [eax], edx
mov word [eax + 4], cx
mov dword [0x43cb80], 5
call fcn.004013a0
lea edi, [esp + 0x5f0]
call fcn.00401000
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x5f0]
mov word [eax + 0x43cbb8], cx
add eax, 2
test cx, cx
jne 0x4023b0
push 0x43cbb8
push 0
push 0x20000
call ebx
test eax, eax
je 0x4023e0
push eax
call ebp
xor eax, eax
jmp 0x40242a
push 0x43cbb8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateEventW]
test eax, eax
je 0x4023dc
mov ecx, 0x43d048
call fcn.00402750
mov edx, dword [0x43cb84]
push 0
push 0
push 0
push 0x4012e0
push 0
push 0
mov dword [0x43d050], edx
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [0x4394d0], eax
mov eax, 1
mov ecx, dword [esp + 0x7fc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0041563c
add esp, 0x7f0
ret