Function at 0x401a10
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x422040]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
xor eax, eax
mov word [ebp - 0x3a8], ax
push 0x206
push 0
lea ecx, [ebp - 0x3a6]
push ecx
call fcn.00411ad0
add esp, 0xc
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x198]
push edx
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov ecx, 0x4249a0
call fcn.00403830
add esp, 4
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x401c28
xor eax, eax
mov word [ebp - 0x3e4], ax
push 0x3a
push 0
lea ecx, [ebp - 0x3e2]
push ecx
call fcn.00411ad0
add esp, 0xc
lea edi, [ebp - 0x3e4]
call fcn.0040455e
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e8], edx
mov dword [ebp - 0x3ec], 0x424b48
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3e8]
mov dx, word [ecx]
mov word [ebp - 0x3f2], dx
mov eax, dword [ebp - 0x3ec]
mov cx, word [ebp - 0x3f2]
mov word [eax], cx
mov edx, dword [ebp - 0x3e8]
add edx, 2
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0x3ec]
add eax, 2
mov dword [ebp - 0x3ec], eax
cmp word [ebp - 0x3f2], 0
jne 0x401ad4
push 0x41fb00
push 0x4249a4
call fcn.00403040
add esp, 8
push 0x41fb1c
push 0x424a26
call fcn.00403060
add esp, 8
push 0x41fb28
push 0x424a46
call fcn.00403040
add esp, 8
mov ecx, 0x51
mov word [0x424a24], cx
mov edx, 0x2b70
mov word [0x424ac6], dx
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3fc], 0x424b28
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x3f8]
mov ax, word [edx]
mov word [ebp - 0x402], ax
mov ecx, dword [ebp - 0x3fc]
mov dx, word [ebp - 0x402]
mov word [ecx], dx
mov eax, dword [ebp - 0x3f8]
add eax, 2
mov dword [ebp - 0x3f8], eax
mov ecx, dword [ebp - 0x3fc]
add ecx, 2
mov dword [ebp - 0x3fc], ecx
cmp word [ebp - 0x402], 0
jne 0x401b8c
mov edx, 0x424b28
add edx, 0xfffffffe
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x408]
mov cx, word [eax + 2]
mov word [ebp - 0x40a], cx
add dword [ebp - 0x408], 2
cmp word [ebp - 0x40a], 0
jne 0x401be2
mov edi, dword [ebp - 0x408]
mov edx, dword [0x41fb44]
mov dword [edi], edx
mov ax, word [0x41fb48]
mov word [edi + 4], ax
mov ecx, dword [0x423088]
mov dword [0x424b68], ecx
call fcn.004045ec
lea edi, [ebp - 0x3a8]
call fcn.0040455e
lea edx, [ebp - 0x3a8]
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x414], 0x424960
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x410]
mov dx, word [ecx]
mov word [ebp - 0x41a], dx
mov eax, dword [ebp - 0x414]
mov cx, word [ebp - 0x41a]
mov word [eax], cx
mov edx, dword [ebp - 0x410]
add edx, 2
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x414]
add eax, 2
mov dword [ebp - 0x414], eax
cmp word [ebp - 0x41a], 0
jne 0x401c5a
push 0x424960
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
je 0x401cd4
mov ecx, dword [ebp - 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x401d3d
push 0x424960
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x401cf8
xor eax, eax
jmp 0x401d3d
push 0x41fb4c
call fcn.00404675
add esp, 4
mov dword [0x424828], eax
push 0x424ba0
call section..text
add esp, 4
mov edx, dword [0x424b6c]
mov dword [0x424ba8], edx
push 0
push 0
push 0
push 0x4049a1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00408e3f
mov esp, ebp
pop ebp
ret