Function at 0x405ec0
Capabilities:
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3b4
mov eax, dword [0x411014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x3b4], eax
lea eax, [ebp - 0x3b4]
push 0
push eax
push esi
call sub.vmwarebase.DLL_Unicode_Init
push 0
push 0
push 0
call sub.vmwarebase.DLL_SSL_Init
mov eax, dword [ebp - 0x3b4]
push 0x5c
push dword [eax]
call sub.VCRUNTIME140.dll_strrchr
add esp, 0x20
test eax, eax
jne 0x405f1b
mov eax, dword [ebp - 0x3b4]
mov eax, dword [eax]
jmp 0x405f1c
inc eax
push eax
call fcn.00402610
add esp, 4
call fcn.00402330
cmp esi, 1
jne 0x40609a
push edi
push 0x208
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x21c], 0x40c378
push 0
push eax
mov dword [ebp - 0x218], 0x4059d0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0
call sub.VCRUNTIME140.dll_memset
push bind
push str.authd.lspCategory
call fcn.00402d50
add esp, 0x14
mov edi, eax
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, eax
test esi, esi
jne 0x405fb0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.VMAuthdRunService
push str._s:_GetModuleFileNameW_Failed:__d_n
jmp 0x40601b
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0
push eax
push 0
push 0
push 0
push 0
push esi
lea eax, [ebp - 0x20c]
push eax
call sub.WS2_32.dll_WSCSetApplicationCategory
test eax, eax
jne 0x40600b
lea eax, [ebp - 0x220]
push eax
push 0
push edi
push 0
push 0
push esi
lea eax, [ebp - 0x20c]
push eax
call sub.WS2_32.dll_WSCSetApplicationCategory
test eax, eax
jne 0x40600b
push edi
push str.VMAuthdRunService
push str._s:_WSCSetApplicationCategory_succeeded:__x_n
call sub.vmwarebase.DLL_Log
jmp 0x406020
push dword [ebp - 0x220]
push str.VMAuthdRunService
push str._s:_WSCSetApplicationCategory_Failed:__d_n
call sub.vmwarebase.DLL_Warning
add esp, 0xc
lea eax, [ebp - 0x3b0]
push eax
push 2
call dword [sym.imp.WS2_32.dll_WSAStartup]
pop edi
test eax, eax
je 0x40605d
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
push str.No_usable_WinSock_DLL._error:__d._n
call sub.vmwarebase.DLL_Warning
add esp, 8
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x40617e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.StartServiceCtrlDispatcher_error___d_n
push 2
call fcn.004027c0
add esp, 0xc
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
cmp esi, 2
jne 0x40617e
mov esi, dword [ebp - 0x3b4]
mov eax, 0x40c8bc
mov ecx, dword [esi + 4]
mov edx, ecx
mov bl, byte [eax]
cmp bl, byte [edx]
jne 0x4060d3
test bl, bl
je 0x4060cf
mov bl, byte [eax + 1]
cmp bl, byte [edx + 1]
jne 0x4060d3
add eax, 2
add edx, 2
test bl, bl
jne 0x4060b3
xor eax, eax
jmp 0x4060d8
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4060fa
push 1
push dword [esi]
call fcn.00403f60
add esp, 8
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
mov edx, ecx
mov eax, 0x40c8c0
mov bl, byte [eax]
cmp bl, byte [edx]
jne 0x406121
test bl, bl
je 0x40611d
mov bl, byte [eax + 1]
cmp bl, byte [edx + 1]
jne 0x406121
add eax, 2
add edx, 2
test bl, bl
jne 0x406101
xor eax, eax
jmp 0x406126
sbb eax, eax
or eax, 1
test eax, eax
jne 0x406147
push eax
push dword [esi]
call fcn.00403f60
add esp, 8
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004083a0
mov esp, ebp
pop ebp
ret
mov eax, 0x40c8c4
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x406170
test dl, dl
je 0x40616c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x406170
add eax, 2
add ecx, 2
test dl, dl
jne 0x406150
xor eax, eax
jmp 0x406175
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40617e
call fcn.00402450
mov ecx, dword [ebp - 4]
xor eax, eax
pop esi
xor ecx, ebp
pop ebx
call fcn.004083a0
mov esp, ebp
pop ebp
ret