Function at 0x180003cac
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x1e0
xor esi, esi
xor eax, eax
mov rdi, r8
and dword [r11 + 0x20], eax
mov r8d, 0x7d9e8239
mov rbx, rdx
xor edx, edx
cmp ecx, r8d
mov qword [rsp + 0x30], rsi
mov dword [r11 + 8], 0x57
lea r12d, [rsi + 4]
mov r13d, 0x119
ja 0x180004082
je 0x180004078
mov eax, 0x4d04f6da
cmp ecx, eax
ja 0x180003eaa
je 0x180003e87
cmp ecx, 0x7048b13
je 0x180004053
cmp ecx, 0x73eed27
je 0x180003e7d
cmp ecx, 0xdfc4184
je 0x180003e5e
cmp ecx, 0x116a1b8a
je 0x180003e40
cmp ecx, 0x160315fa
je 0x180003df3
cmp ecx, 0x3c4fe436
je 0x180003da6
cmp ecx, 0x3fcc4d05
je 0x180003d85
cmp ecx, 0x43d5e8b4
jne 0x180004213
lea ecx, [r13 - 8]
xor r8d, r8d
mov r9, rdi
call fcn.18000f594
mov dword [rsp + 0x200], eax
jmp 0x1800043b4
test rbx, rbx
je 0x1800043be
mov edx, 0x10f
mov r8d, 1
mov r9, rdi
mov rcx, rbx
call fcn.1800026f0
jmp 0x180003d79
test rbx, rbx
je 0x1800043be
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800049fc
test eax, eax
mov dword [rsp + 0x200], eax
jne 0x18000437f
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x105
mov rdx, rsi
jmp 0x18000438e
test rbx, rbx
je 0x1800043be
movzx r8d, word [0x18002f5b4]
mov rdx, rbx
xor ecx, ecx
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.180004f10
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x1800043be
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f594
jmp 0x1800043b4
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000e208
jmp 0x180003e16
mov eax, 0x10
movzx r8d, word [0x18002f5b4]
and r8w, 0xffef
or r8w, ax
mov ecx, dword [0x18002f5b0]
jmp 0x180003e09
mov ecx, 0x118
jmp 0x180003d6e
mov edx, 1
test rbx, rbx
je 0x1800043be
neg edx
sbb edx, edx
and edx, 8
add edx, 0x10f
xor r8d, r8d
jmp 0x180003d99
cmp ecx, 0x52561dce
je 0x180003fc0
cmp ecx, 0x591f0f0a
je 0x180003fb6
cmp ecx, 0x697c48c3
je 0x180003f69
cmp ecx, 0x6b46bab6
je 0x180003f5f
cmp ecx, 0x70e0fe32
je 0x180003f49
cmp ecx, 0x74f09393
je 0x180003f23
cmp ecx, 0x77e6197b
jne 0x180004213
lea rax, [0x1800334bf]
lea r9, [0x180033d49]
mov edx, 8
mov ecx, 0x10e
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.180004944
jmp 0x180003e16
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x200], esi
jmp 0x180003e25
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call fcn.180002f20
jmp 0x180003e16
mov ecx, 0x109
jmp 0x180003d6e
test rbx, rbx
je 0x1800043be
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800049fc
test eax, eax
mov dword [rsp + 0x200], eax
jne 0x18000437f
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x107
mov rdx, rsi
jmp 0x18000438e
mov ecx, 0x10c
jmp 0x180003d6e
test rbx, rbx
je 0x180004066
lea rcx, [0x180030be0]
mov rdx, rbx
call fcn.1800073ac
test eax, eax
mov esi, eax
jne 0x180004032
mov rdx, qword [0x180030928]
lea r8, [rsp + 0x218]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
mov esi, eax
jne 0x180004032
and dword [rsp + 0x28], eax
mov rcx, qword [rsp + 0x218]
and qword [rsp + 0x20], 0
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x218]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
mov dword [rsp + 0x200], esi
jne 0x180004053
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f594
test rbx, rbx
je 0x180004066
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x180004068
xor eax, eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x128
jmp 0x180003d71
call fcn.1800066a0
jmp 0x180003e16
mov r8d, 0xbd2b2852
cmp ecx, r8d
ja 0x1800041c3
je 0x1800041b9
cmp ecx, 0x89467003
je 0x180004198
cmp ecx, 0x8be88ece
je 0x180003e8c
cmp ecx, 0x8d654685
je 0x180004185
cmp ecx, 0x9ea0a0f5
je 0x180003e63
cmp ecx, 0xa81b8385
je 0x18000416f
cmp ecx, 0xac112714
je 0x180004147
cmp ecx, 0xb77551d7
je 0x18000413d
cmp ecx, 0xbbff0d38
jne 0x180004213
test rbx, rbx
je 0x1800043be
lea rdx, [rsp + 0x40]
mov cx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x18000411e
lea r8d, [rax + 1]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.180017f68
jmp 0x180004120
xor eax, eax
test eax, eax
je 0x1800043b4
mov r8d, 0x10
lea rdx, [rsp + 0x30]
mov ecx, 0x110
jmp 0x180003d71
mov ecx, 0x114
jmp 0x180003d6e
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r8d, 1
mov rdx, rbx
add r8d, eax
mov ecx, 0x102
jmp 0x180003d71
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call fcn.180001cbc
jmp 0x180003d79
movzx r8d, word [0x18002f5b4]
and r8w, 0xfff7
jmp 0x180003e75
test rbx, rbx
je 0x1800043be
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000e028
jmp 0x180003e16
mov ecx, 0x108
jmp 0x180003d6e
cmp ecx, 0xbd3cd085
je 0x180004386
cmp ecx, 0xc16c8b90
je 0x180004340
cmp ecx, 0xd15793f7
je 0x180004336
cmp ecx, 0xdd588b08
je 0x1800042f0
cmp ecx, 0xde34d943
je 0x1800042e6
cmp ecx, 0xe1e2f881
je 0x1800042dc
cmp ecx, 0xeaefbdac
je 0x180004224
mov edx, 1
mov dword [rsp + 0x200], edx
jmp 0x1800043be
movzx r8d, word [0x18002f5b4]
mov ecx, dword [0x18002f5b0]
mov r9b, 0xff
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.180004f10
test eax, eax
mov dword [rsp + 0x200], eax
jne 0x1800043be
mov rcx, qword [0x180030840]
lea r8d, [rax + 1]
xor edx, edx
call fcn.1800054a8
test rax, rax
mov rbx, rax
je 0x1800042d1
mov ecx, dword [0x180030044]
and dword [rsp + 0x28], esi
and qword [rsp + 0x20], rsi
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x218], rcx
lea rdx, [rsp + 0x218]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x1800042af
and dword [rsp + 0x200], esi
jmp 0x1800042bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x200], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x200]
jmp 0x180003e1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180003e16
mov ecx, 0x10b
jmp 0x180003d6e
mov ecx, 0x10a
jmp 0x180003d6e
test rbx, rbx
je 0x1800043be
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800049fc
test eax, eax
mov dword [rsp + 0x200], eax
jne 0x18000437f
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x106
mov rdx, rsi
jmp 0x18000438e
mov ecx, 0x12e
jmp 0x180003d6e
test rbx, rbx
je 0x1800043be
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rbx
call fcn.1800049fc
test eax, eax
mov dword [rsp + 0x200], eax
jne 0x18000437f
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x122
mov rdx, rsi
jmp 0x18000438e
mov rsi, qword [rsp + 0x30]
jmp 0x18000439d
xor r8d, r8d
mov ecx, 0x103
mov r9, rdi
call fcn.18000f594
mov dword [rsp + 0x200], eax
test rsi, rsi
je 0x1800043b4
mov rcx, qword [0x1800307d8]
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x200], 0
je 0x1800043d4
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f594
mov eax, dword [rsp + 0x200]
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret