Function at 0x401a70
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x433c20]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
xor eax, eax
mov word [ebp - 0x3a8], ax
push 0x206
push 0
lea ecx, [ebp - 0x3a6]
push ecx
call fcn.00416d60
add esp, 0xc
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x198]
push edx
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov edi, 0x4384d0
call fcn.00403a20
add esp, 4
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x401c88
xor eax, eax
mov word [ebp - 0x3e4], ax
push 0x3a
push 0
lea ecx, [ebp - 0x3e2]
push ecx
call fcn.00416d60
add esp, 0xc
lea edi, [ebp - 0x3e4]
call fcn.00404990
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e8], edx
mov dword [ebp - 0x3ec], 0x438678
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3e8]
mov dx, word [ecx]
mov word [ebp - 0x3f2], dx
mov eax, dword [ebp - 0x3ec]
mov cx, word [ebp - 0x3f2]
mov word [eax], cx
mov edx, dword [ebp - 0x3e8]
add edx, 2
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0x3ec]
add eax, 2
mov dword [ebp - 0x3ec], eax
cmp word [ebp - 0x3f2], 0
jne 0x401b34
push 0x42e6b8
push 0x4384d4
call fcn.00402ee0
add esp, 8
push 0x42e6d4
push 0x438556
call fcn.00402f00
add esp, 8
push 0x42e6e0
push 0x438576
call fcn.00402ee0
add esp, 8
mov ecx, 0x51
mov word [0x438554], cx
mov edx, 0x2b70
mov word [0x4385f6], dx
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3fc], 0x438658
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x3f8]
mov ax, word [edx]
mov word [ebp - 0x402], ax
mov ecx, dword [ebp - 0x3fc]
mov dx, word [ebp - 0x402]
mov word [ecx], dx
mov eax, dword [ebp - 0x3f8]
add eax, 2
mov dword [ebp - 0x3f8], eax
mov ecx, dword [ebp - 0x3fc]
add ecx, 2
mov dword [ebp - 0x3fc], ecx
cmp word [ebp - 0x402], 0
jne 0x401bec
mov edx, 0x438658
add edx, 0xfffffffe
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x408]
mov cx, word [eax + 2]
mov word [ebp - 0x40a], cx
add dword [ebp - 0x408], 2
cmp word [ebp - 0x40a], 0
jne 0x401c42
mov edi, dword [ebp - 0x408]
mov edx, dword [0x42e6fc]
mov dword [edi], edx
mov ax, word [0x42e700]
mov word [edi + 4], ax
mov ecx, dword [0x434fb8]
mov dword [0x438698], ecx
call fcn.00404a30
lea edi, [ebp - 0x3a8]
call fcn.00404990
lea edx, [ebp - 0x3a8]
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x414], 0x438490
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x410]
mov dx, word [ecx]
mov word [ebp - 0x41a], dx
mov eax, dword [ebp - 0x414]
mov cx, word [ebp - 0x41a]
mov word [eax], cx
mov edx, dword [ebp - 0x410]
add edx, 2
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x414]
add eax, 2
mov dword [ebp - 0x414], eax
cmp word [ebp - 0x41a], 0
jne 0x401cba
push 0x438490
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
je 0x401d34
mov ecx, dword [ebp - 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x401d8b
push 0x438490
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x401d58
xor eax, eax
jmp 0x401d8b
push 0x4386d0
call section..text
add esp, 4
mov edx, dword [0x43869c]
mov dword [0x4386d8], edx
push 0
push 0
push 0
push 0x404e80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004147ce
mov esp, ebp
pop ebp
ret