Function at 0x40ce0a
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push edi
push esi
lea edx, [6]
push edx
mov edi, 0x4ee
shr edi, 8
push edi
pop dword [0x42499a]
push 0x424b96
mov ebx, 0x482
and ebx, 0xff
or ebx, ebx
jne 0x40ce3f
shl ebx, 6
mov dword [ebp - 0x30], ebx
push 0x60
call fcn.0040c224
push str.ISAietLG
push str.qcnixX
call dword [sym.imp.kernel32.dll_lstrcmpA]
mov dword [0x424a82], eax
push 0x101
push 0
call dword [sym.imp.WSOCK32.DLL_WSAStartup]
mov dword [0x4249ee], eax
mov edi, 0x4c5
and edi, 0xfff
ror edi, 0xc
mov dword [ebp - 0x24], edi
mov esi, 0xca0
add esi, dword [0x422139]
test esi, esi
jne 0x40ce93
shr esi, 4
mov dword [ebp - 0x10], esi
mov eax, 0x679
sub eax, 0xde6
test eax, eax
jne 0x40cea7
shl eax, 8
push eax
pop dword [0x424983]
push str.yangs
push str.TZzMCn
call dword [sym.imp.kernel32.dll_lstrcmpA]
mov dword [0x424b04], eax
push 0x101
push 0
call dword [sym.imp.WSOCK32.DLL_WSAStartup]
mov dword [0x42491b], eax
push 0x422c1f
push str.hdTXVA
call dword [sym.imp.kernel32.dll_lstrcmpA]
mov dword [0x424ad2], eax
mov dword [0x424ce9], 0xc8a8e1b2
push 0x101
push 0
call dword [sym.imp.WSOCK32.DLL_WSAStartup]
mov dword [0x4248f0], eax
push esp
push esi
call fcn.0040c144
lea edx, [0x1f]
push edx
lea edx, [0x20]
push edx
push edi
call fcn.0040c224
push 0x101
push 0
call dword [sym.imp.WSOCK32.DLL_WSAStartup]
mov dword [0x4248b6], eax
add dword [0x424ce9], 0x3797f1d3
mov edi, 0x3d4
mov dword [0x424840], edi
sub edi, 0x8b3
push edi
pop dword [0x4248dc]
mov edi, 0x485
add edi, dword [0x423b1b]
push edi
pop dword [0x42496d]
mov edx, dword [0x42496d]
mov dword [0x424921], edx
push dword [0x422387]
push dword [0x423169]
push str.oBzz
call dword [sym.imp.winspool.drv_AddPrinterW]
push eax
push eax
push eax
push str.hFxWieFBWvdphN
push eax
call dword [sym.imp.winspool.drv_SetPrinterDataW]
push 0x30
push 0x424ab6
lea edx, [0x47]
push edx
call fcn.0040c0d4
lea edx, [0x17]
push edx
lea edx, [0x2f]
push edx
push 0x424a97
mov ecx, 0x8d8
and ecx, 0xff
cmp ecx, 0x71
jne 0x40cfd6
push ecx
pop dword [0x4248ae]
mov dword [0x4249c3], ecx
push 0x424a1a
call fcn.0040c20c
mov dword [0x4249ec], 0x2a8
sub dword [0x4249ec], 0x77
or dword [0x4249ec], 0x475
mov esi, dword [0x4249ec]
mov dword [0x4248e7], esi
mov edi, 0xe5a
push edi
pop dword [0x424ad7]
mov esi, dword [0x424ad7]
mov dword [0x42497a], esi
push 0x30
push 0x4249db
push eax
mov dword [0x4248d9], 0x194
dec dword [0x4248d9]
add dword [0x4248d9], 0x7b
mov ebx, dword [0x4248d9]
mov dword [0x424a14], ebx
push 0x424963
push ebp
call fcn.0040c174
push dword [0x4224cb]
push dword [0x4239bb]
push str.ghsjQ
call dword [sym.imp.winspool.drv_AddPrinterW]
push eax
push eax
push eax
push str.ERoRAUR
push eax
call dword [sym.imp.winspool.drv_SetPrinterDataW]
push 0xdf773f37
mov esi, 0x6724
mov ecx, 0x597
mov dword [0x42490c], ecx
push ecx
pop dword [0x424b29]
mov edx, dword [0x424b29]
mov dword [0x424b25], edx
add esi, 0x382
mov dword [0x4249a6], 0x2ba
push dword [0x4249a6]
pop edx
shl edx, 5
mov dword [0x424a66], edx
mov ebx, 0x6d8
sub ebx, dword [0x4232e5]
push ebx
pop dword [0x424ab4]
mov dword [0x4249e6], 0x86c
push dword [0x4249e6]
pop ebx
push ebx
pop dword [0x424a57]
add esi, 0x45a
mov dword [0x42493c], 0xe32
sub dword [0x42493c], 0x77
test dword [0x42493c], 0xf4a
jne 0x40d11c
dec dword [0x42493c]
mov ecx, dword [0x42493c]
mov dword [0x424893], ecx
mov dword [0x424858], 0xb14
inc dword [0x424858]
sub dword [0x424858], 0x52
mov ebx, dword [0x424858]
mov dword [0x42488e], ebx
sub esi, 0x6ec0
mov ebx, 0x1c6
push ebx
pop dword [0x424844]
cmp dword [0x424844], 0x6a
je 0x40d16d
add dword [0x424844], 0x3b
mov edx, dword [0x424844]
mov dword [0x42495b], edx
mov dword [0x424b3a], 0xc0c
add dword [0x424b3a], 0x64
or dword [0x424b3a], 0x45
mov ebx, dword [0x424b3a]
mov dword [0x424b18], ebx
shl esi, 0x10
mov edx, 0x731
sub edx, 0x8db
test edx, edx
je 0x40d1b6
push edx
pop dword [0x424941]
mov dword [0x4248b3], edx
mov dword [0x424b0c], 0xfd5
and dword [0x424b0c], 0xff
test dword [0x424b0c], 0xd45
je 0x40d1e2
dec dword [0x424b0c]
mov edx, dword [0x424b0c]
mov dword [0x424886], edx
add esi, 0xc46a
mov edx, 0xa6d
add edx, dword [0x422896]
and edx, 0xfff
mov dword [0x424936], edx
mov dword [0x42488e], 0xd54
or dword [0x42488e], 0x78
mov ecx, dword [0x42488e]
mov dword [0x424901], ecx
mov edx, 0x2cb
shr edx, 8
mov dword [0x4248f6], edx
push esi
push 0
mov esi, sym.imp.user32.dll_EnumDesktopsW
call dword [esi]
mov dword [0x424998], eax
mov edi, 0x6b2
shr edi, 6
test edi, edi
je 0x40d257
mov dword [0x42490a], edi
mov esi, dword [0x42490a]
mov dword [0x424971], esi
mov dword [0x4248e9], 0xdcb
dec dword [0x4248e9]
mov ecx, dword [0x4248e9]
mov dword [0x424b08], ecx
mov dword [0x424936], 0xbd9
add dword [0x424936], 0x6b
mov edi, dword [0x424936]
mov dword [0x42496a], edi
mov ecx, 0xcdb
push ecx
pop dword [0x424a6d]
mov ecx, dword [0x424a6d]
mov dword [0x424b88], ecx
mov edi, 0x8a6
and edi, 0xff
add edi, dword [0x422269]
mov dword [0x424b94], edi
mov esi, 0x424ab7
lea edx, [0x71]
push edx
mov ecx, 0xa92
ror ecx, 0x18
push ecx
pop dword [0x424941]
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
mov ecx, 0x265
mov dword [0x424a8e], ecx
shr ecx, 4
push ecx
pop dword [0x424aee]
push esp
push 0x424b02
jmp section..htext