Function at 0x403530
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
mov eax, dword [0x433c20]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
xor eax, eax
mov word [ebp - 0x3a8], ax
push 0x206
push 0
lea ecx, [ebp - 0x3a6]
push ecx
call fcn.00415580
add esp, 0xc
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a0], 0
lea edx, [ebp - 0x198]
push edx
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 1
mov ecx, 0x4384b8
call fcn.00403a0f
add esp, 4
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x403748
xor eax, eax
mov word [ebp - 0x3e4], ax
push 0x3a
push 0
lea ecx, [ebp - 0x3e2]
push ecx
call fcn.00415580
add esp, 0xc
lea edi, [ebp - 0x3e4]
call fcn.004043fd
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e8], edx
mov dword [ebp - 0x3ec], 0x438660
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3e8]
mov dx, word [ecx]
mov word [ebp - 0x3f2], dx
mov eax, dword [ebp - 0x3ec]
mov cx, word [ebp - 0x3f2]
mov word [eax], cx
mov edx, dword [ebp - 0x3e8]
add edx, 2
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0x3ec]
add eax, 2
mov dword [ebp - 0x3ec], eax
cmp word [ebp - 0x3f2], 0
jne 0x4035f4
push 0x42e3ac
push 0x4384bc
call fcn.00402840
add esp, 8
push 0x42e3c8
push 0x43853e
call fcn.00402820
add esp, 8
push 0x42e3d4
push 0x43855e
call fcn.00402840
add esp, 8
mov ecx, 0x51
mov word [0x43853c], cx
mov edx, 0x2b70
mov word [0x4385de], dx
lea eax, [ebp - 0x3e4]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3fc], 0x438640
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], ecx
mov edx, dword [ebp - 0x3f8]
mov ax, word [edx]
mov word [ebp - 0x402], ax
mov ecx, dword [ebp - 0x3fc]
mov dx, word [ebp - 0x402]
mov word [ecx], dx
mov eax, dword [ebp - 0x3f8]
add eax, 2
mov dword [ebp - 0x3f8], eax
mov ecx, dword [ebp - 0x3fc]
add ecx, 2
mov dword [ebp - 0x3fc], ecx
cmp word [ebp - 0x402], 0
jne 0x4036ac
mov edx, 0x438640
add edx, 0xfffffffe
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x408]
mov cx, word [eax + 2]
mov word [ebp - 0x40a], cx
add dword [ebp - 0x408], 2
cmp word [ebp - 0x40a], 0
jne 0x403702
mov edi, dword [ebp - 0x408]
mov edx, dword [0x42e3f0]
mov dword [edi], edx
mov ax, word [0x42e3f4]
mov word [edi + 4], ax
mov ecx, dword [0x434fc8]
mov dword [0x438680], ecx
call fcn.0040448b
lea edi, [ebp - 0x3a8]
call fcn.004043fd
lea edx, [ebp - 0x3a8]
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x414], 0x438478
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x410]
mov dx, word [ecx]
mov word [ebp - 0x41a], dx
mov eax, dword [ebp - 0x414]
mov cx, word [ebp - 0x41a]
mov word [eax], cx
mov edx, dword [ebp - 0x410]
add edx, 2
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x414]
add eax, 2
mov dword [ebp - 0x414], eax
cmp word [ebp - 0x41a], 0
jne 0x40377a
push 0x438478
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
je 0x4037f4
mov ecx, dword [ebp - 0x1a0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x40385d
push 0x438478
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x403818
xor eax, eax
jmp 0x40385d
push 0x42e3f8
call fcn.00404514
add esp, 4
mov dword [0x438340], eax
push 0x4386b8
call fcn.00403290
add esp, 4
mov edx, dword [0x438684]
mov dword [0x4386c0], edx
push 0
push 0
push 0
push 0x404840
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00413157
mov esp, ebp
pop ebp
ret