Function at 0x41a140
Capabilities:
Open clipboard
Receive data
Receive data on socket
Write clipboard data

Disassembly:
sub esp, 0x298
push ebp
push edi
push esi
push ebx
mov ebp, dword [esp + 0x2b0]
mov edx, dword [esp + 0x2b4]
mov eax, dword [esp + 0x2b8]
cmp ebp, 0x402
je 0x41a26e
ja 0x41a17a
cmp ebp, 0x401
je 0x41a197
jmp 0x41a6c9
cmp ebp, 0x403
je 0x41a296
cmp ebp, 0x404
je 0x41a25e
jmp 0x41a6c9
push eax
push edx
push ebp
call fcn.0041993c
mov eax, dword [0x424b74]
push eax
call sub.wsock32.dll_inet_ntoa
push eax
push 0x41e360
call sub.crtdll.dll_strcpy
mov esi, 0x41e360
mov edx, esi
mov eax, esi
and edx, 3
je 0x41a1d9
jp 0x41a1d4
cmp edx, 2
je 0x41a1cf
cmp byte [eax], dh
je 0x41a1ff
inc eax
cmp byte [eax], dh
je 0x41a1ff
inc eax
cmp byte [eax], dh
je 0x41a1ff
inc eax
mov edx, dword [eax]
test dl, dh
jne 0x41a1e7
test dl, dl
je 0x41a1ff
test dh, dh
je 0x41a1fe
test edx, 0xff0000
je 0x41a1fd
add eax, 4
test edx, 0xff000000
jne 0x41a1d9
sub eax, 3
inc eax
inc eax
sub eax, esi
inc eax
push eax
push 0x2002
call sub.kernel32.dll_GlobalAlloc
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x41a6c9
push ebx
call sub.kernel32.dll_GlobalLock
test eax, eax
jne 0x41a22f
push ebx
call sub.kernel32.dll_GlobalFree
jmp 0x41a6c9
push esi
push eax
call sub.crtdll.dll_strcpy
push ebx
call sub.kernel32.dll_GlobalUnlock
mov eax, dword [0x41e2a4]
push eax
call sub.user32.dll_OpenClipboard
call sub.user32.dll_EmptyClipboard
push ebx
push 1
call sub.user32.dll_SetClipboardData
call sub.user32.dll_CloseClipboard
jmp 0x41a6c6
push eax
push edx
push ebp
call fcn.0041993c
add esp, 0xc
jmp 0x41a6c9
push eax
push edx
push ebp
call fcn.0041993c
push 0xffffffffffffffff
call sub.wsock32.dll_htonl
add esp, 0xc
cmp dword [0x424b74], eax
je 0x41a6c9
call fcn.00419b28
jmp 0x41a6c9
mov edi, dword [0x426a4c]
cmp edx, edi
je 0x41a2ac
cmp dword [0x426a50], edx
jne 0x41a6c9
xor edx, edx
mov dx, ax
cmp edx, 0x20
jne 0x41a3b5
push 0x411
call fcn.00419708
push 0
push 0
mov eax, dword [esp + 0x2b8]
push eax
mov eax, dword [0x426a4c]
push eax
call sub.wsock32.dll_WSAAsyncSelect
mov edx, eax
add esp, 4
cmp edx, 0xffffffff
jne 0x41a2f8
push 0x415
call sub.wsock32.dll_WSAGetLastError
push eax
call fcn.00419744
add esp, 8
cmp dword [0x426a44], 0
jne 0x41a30e
push 1
mov eax, dword [0x426a4c]
push eax
call sub.wsock32.dll_shutdown
lea ebx, [esp + 0x14]
push 0
push 0x200
push ebx
mov eax, dword [0x426a4c]
push eax
call sub.wsock32.dll_recv
mov edx, eax
lea eax, [edx + 1]
cmp eax, 1
jbe 0x41a33b
push edx
push ebx
call fcn.00419f68
add esp, 8
jmp 0x41a312
mov eax, dword [0x426a4c]
push eax
call sub.wsock32.dll_closesocket
mov dword [0x426a4c], 0xffffffff
push 0x412
call fcn.00419708
add esp, 4
mov eax, dword [0x41c5c0]
test eax, eax
je 0x41a36f
push 1
call fcn.004024c8
jmp 0x41a3a8
mov dword [0x426a4c], 0xffffffff
cmp dword [0x426a44], 0
je 0x41a6c9
mov dword [0x426a44], eax
push 0xffffffffffffffff
call sub.wsock32.dll_htonl
cmp dword [0x424b74], eax
jne 0x41a28c
push 0x40c
call fcn.00419708
call fcn.004197ec
add esp, 4
jmp 0x41a6c9
mov esi, eax
shr esi, 0x10
je 0x41a3d1
push 0x40e
push esi
call fcn.00419744
call fcn.004197ec
jmp 0x41a6c6
cmp edx, 2
je 0x41a6bf
jg 0x41a3ea
cmp edx, 1
je 0x41a67d
jmp 0x41a6c9
cmp edx, 8
je 0x41a3fd
cmp edx, 0x10
je 0x41a570
jmp 0x41a6c9
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x10
push eax
lea eax, [esp + 0x21c]
push eax
mov eax, dword [0x426a50]
push eax
call sub.wsock32.dll_accept
mov edi, eax
cmp edi, 0xffffffff
jne 0x41a44c
call sub.wsock32.dll_WSAGetLastError
mov esi, eax
cmp esi, 0x2733
je 0x41a6c9
push 0x41a
push esi
call fcn.00419744
call fcn.004197ec
jmp 0x41a6c6
push pe_nt_image_headers32
lea ebx, [esp + 0x22c]
push ebx
push 0x40f
mov eax, dword [0x41db78]
push eax
call sub.user32.dll_LoadStringA
xor eax, eax
mov ax, word [esp + 0x21a]
push eax
call sub.wsock32.dll_ntohs
and eax, 0xffff
push eax
mov eax, dword [esp + 0x220]
push eax
call sub.wsock32.dll_inet_ntoa
push eax
push ebx
push 0x41e360
call sub.user32.dll_wsprintfA
push 0xffffffffffffff81
push 0x41e360
call fcn.00401a34
add esp, 0x18
cmp dword [0x426a4c], 0xffffffff
je 0x41a4c8
push edi
call sub.wsock32.dll_closesocket
push 0x40d
call fcn.00419708
add esp, 4
jmp 0x41a6c9
mov eax, dword [esp + 0x21c]
mov dword [0x424b74], eax
push 0x400
push 0x424774
push 2
push 4
push 0x424b74
push 0x404
mov eax, dword [0x41e2a4]
push eax
call sub.wsock32.dll_WSAAsyncGetHostByAddr
mov dword [0x426a48], eax
mov dword [0x426a4c], edi
push 0x23
push ebp
mov eax, dword [0x41e2a4]
push eax
push edi
call sub.wsock32.dll_WSAAsyncSelect
mov edx, eax
cmp edx, 0xffffffff
jne 0x41a532
push 0x415
call sub.wsock32.dll_WSAGetLastError
push eax
call fcn.00419744
call fcn.004197ec
jmp 0x41a6c6
mov dword [0x41c5c0], 1
mov dword [0x41c660], esi
mov dword [0x426920], 0xfb9
mov dword [0x424d38], esi
mov dword [0x424f3c], esi
push 1
push 1
call fcn.0040c9b8
mov dword [0x4267f8], 0xfc1
jmp 0x41a6c6
mov dword [0x424d38], esi
mov dword [0x424f3c], esi
push 0x410
call fcn.00419708
add esp, 4
cmp dword [0x426a44], 0
je 0x41a657
mov eax, dword [0x41a136]
mov dword [0x41e360], eax
mov al, byte [0x41a13a]
mov ebx, 0x41e360
mov byte [ebx + 4], al
push 0x2f
mov eax, dword [0x424b78]
add eax, 7
push eax
call sub.crtdll.dll_strchr
add esp, 8
test eax, eax
je 0x41a5cf
push eax
push ebx
call sub.crtdll.dll_strcat
add esp, 8
push 0x41a13b
push ebx
call sub.crtdll.dll_strcat
mov eax, ebx
mov edx, ebx
and eax, 3
je 0x41a5f9
jp 0x41a5f4
cmp eax, 2
je 0x41a5ef
cmp byte [edx], ah
je 0x41a61d
inc edx
cmp byte [edx], ah
je 0x41a61d
inc edx
cmp byte [edx], ah
je 0x41a61d
inc edx
mov eax, dword [edx]
test al, ah
jne 0x41a607
test al, al
je 0x41a61d
test ah, ah
je 0x41a61c
test eax, 0xff0000
je 0x41a61b
add edx, 4
test eax, 0xff000000
jne 0x41a5f9
sub edx, 3
inc edx
inc edx
sub edx, ebx
push edx
push ebx
call fcn.00419e38
mov ecx, esi
mov byte [eax + ebx], cl
push 0xffffffffffffff80
push ebx
call fcn.00401a34
push 1
mov eax, dword [0x426a4c]
push eax
call sub.wsock32.dll_shutdown
push 0xffffffffffffffff
call sub.wsock32.dll_htonl
mov dword [0x424b74], eax
mov dword [0x424d34], esi
add esp, 0x18
jmp 0x41a671
mov dword [0x41c5c0], 1
mov dword [0x41c660], esi
mov dword [0x426920], 0xfb9
mov dword [0x4267f8], 0xfc1
jmp 0x41a6c9
push esi
push 0x200
lea ebx, [esp + 0x1c]
push ebx
push edi
call sub.wsock32.dll_recv
mov edx, eax
cmp edx, 0xffffffff
jne 0x41a6b6
call sub.wsock32.dll_WSAGetLastError
mov esi, eax
cmp esi, 0x2733
je 0x41a6c9
push 0x41d
push esi
call fcn.00419744
call fcn.004197ec
jmp 0x41a6c6
push edx
push ebx
call fcn.00419f68
jmp 0x41a6c6
push esi
push esi
call fcn.00419e38
add esp, 8
pop ebx
pop esi
pop edi
pop ebp
xor eax, eax
add esp, 0x298
ret