Function at 0x180003d54
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x1e0
and qword [rsp + 0x30], 0
xor eax, eax
mov rdi, r8
and dword [r11 + 0x20], eax
mov r8d, 0x8be88ece
mov rbx, rdx
xor edx, edx
mov dword [r11 + 8], 0x57
lea r12d, [rax + 4]
mov r13d, 0x119
cmp ecx, r8d
ja 0x180004160
je 0x180003e1a
mov eax, 0x52561dce
cmp ecx, eax
ja 0x18000403d
je 0x180003f91
cmp ecx, 0x73eed27
je 0x180003f87
cmp ecx, 0xdfc4184
je 0x180003f63
cmp ecx, 0x116a1b8a
je 0x180003f45
cmp ecx, 0x160315fa
je 0x180003f20
cmp ecx, 0x26df5be9
je 0x180003ece
cmp ecx, 0x3c4fe436
je 0x180003e72
cmp ecx, 0x3fcc4d05
je 0x180003e51
cmp ecx, 0x43d5e8b4
je 0x180003e35
cmp ecx, 0x4d04f6da
jne 0x180004302
lea edx, [r12 - 3]
test rbx, rbx
je 0x1800044c0
neg edx
sbb edx, edx
and edx, 8
add edx, 0x10f
xor r8d, r8d
jmp 0x180003e65
mov ecx, 0x111
xor r8d, r8d
mov r9, rdi
call fcn.18000f3c8
mov dword [rsp + 0x200], eax
jmp 0x1800044b6
test rbx, rbx
je 0x1800044c0
mov edx, 0x10f
mov r8d, 1
mov r9, rdi
mov rcx, rbx
call fcn.1800025c0
jmp 0x180003e45
test rbx, rbx
je 0x1800044c0
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004a80
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000449a
mov ecx, 0x105
mov rbx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov r9, rdi
mov rdx, rbx
call fcn.18000f3c8
mov dword [rsp + 0x200], eax
jmp 0x18000449f
lea rax, [0x18003b3ff]
mov edx, 0xb
mov ecx, 0x112
lea r9, [0x18003bc05]
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.18000496c
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x1800044c0
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f3c8
jmp 0x1800044b6
test rbx, rbx
je 0x1800044c0
movzx r8d, word [0x180036634]
mov rdx, rbx
xor ecx, ecx
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.180004f44
jmp 0x180003ef6
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000de10
jmp 0x180003ef6
mov eax, 0x10
movzx r8d, word [0x180036634]
mov ecx, 0xffef
and r8w, cx
or r8w, ax
mov ecx, dword [0x180036630]
xor edx, edx
jmp 0x180003f36
mov ecx, 0x118
jmp 0x180003e3a
test rbx, rbx
je 0x1800043df
lea rcx, [0x180038000]
mov rdx, rbx
call fcn.180006f5c
mov esi, eax
test eax, eax
jne 0x180004003
mov rdx, qword [0x180037c38]
lea r8, [rsp + 0x218]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov esi, eax
test eax, eax
jne 0x180004003
and dword [rsp + 0x28], eax
mov rcx, qword [rsp + 0x218]
and qword [rsp + 0x20], 0
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x218]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x200], esi
test esi, esi
jne 0x180004024
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f3c8
test rbx, rbx
je 0x1800043df
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
jmp 0x1800043e1
cmp ecx, 0x591f0f0a
je 0x180004156
cmp ecx, 0x697c48c3
je 0x180004119
cmp ecx, 0x6b46bab6
je 0x18000410f
cmp ecx, 0x70e0fe32
je 0x1800040f9
cmp ecx, 0x74f09393
je 0x1800040d2
cmp ecx, 0x77e6197b
je 0x1800040bc
cmp ecx, 0x7d9e8239
je 0x1800040b2
cmp ecx, 0x89467003
jne 0x180004302
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000dc34
jmp 0x180003ef6
call fcn.180006414
jmp 0x180003ef6
lea rax, [0x18003b3fb]
mov edx, 8
mov ecx, 0x10e
jmp 0x180003edf
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x200], 0
jmp 0x180003f05
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call fcn.180002f00
jmp 0x180003ef6
mov ecx, 0x109
jmp 0x180003e3a
test rbx, rbx
je 0x1800044c0
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004a80
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000449a
mov ecx, 0x107
jmp 0x180003eaa
mov ecx, 0x10c
jmp 0x180003e3a
mov edx, 0xbd3cd085
cmp ecx, edx
ja 0x1800042a6
je 0x180004297
cmp ecx, 0x8d654685
je 0x180004281
cmp ecx, 0x916953c9
je 0x180004272
cmp ecx, 0x9ea0a0f5
je 0x180003f68
cmp ecx, 0xa81b8385
je 0x18000425c
cmp ecx, 0xac112714
je 0x180004234
cmp ecx, 0xb77551d7
je 0x180004225
cmp ecx, 0xbbff0d38
je 0x1800041da
cmp ecx, 0xbd2b2852
jne 0x180004302
xor r8d, r8d
mov ecx, 0x108
xor edx, edx
jmp 0x180003e3d
test rbx, rbx
je 0x1800044c0
lea rdx, [rsp + 0x40]
mov ecx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x180004206
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.180017a84
jmp 0x180004208
xor eax, eax
test eax, eax
je 0x1800044b6
mov r8d, 0x10
lea rdx, [rsp + 0x30]
mov ecx, 0x110
jmp 0x180003e3d
xor r8d, r8d
mov ecx, 0x114
xor edx, edx
jmp 0x180003e3d
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r8d, 1
mov rdx, rbx
add r8d, eax
mov ecx, 0x102
jmp 0x180003e3d
test rbx, rbx
je 0x1800044c0
mov rcx, rbx
call fcn.180001cf4
jmp 0x180003e45
xor r8d, r8d
mov ecx, 0x124
xor edx, edx
jmp 0x180003e3d
movzx r8d, word [0x180036634]
mov eax, 0xfff7
and r8w, ax
jmp 0x180003f7d
xor r8d, r8d
mov ecx, 0x103
xor edx, edx
jmp 0x180003e3d
cmp ecx, 0xc16c8b90
je 0x180004468
cmp ecx, 0xc4f649cd
je 0x180004448
cmp ecx, 0xd15793f7
je 0x180004439
cmp ecx, 0xdd588b08
je 0x180004400
cmp ecx, 0xde34d943
je 0x1800043f1
cmp ecx, 0xdf9190f1
je 0x180004024
cmp ecx, 0xe1e2f881
je 0x1800043d0
cmp ecx, 0xeaefbdac
je 0x180004313
mov edx, 1
mov dword [rsp + 0x200], edx
jmp 0x1800044c0
movzx r8d, word [0x180036634]
mov ecx, dword [0x180036630]
mov r9b, 0xff
xor edx, edx
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.180004f44
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x1800044c0
mov rcx, qword [0x180037b48]
lea r8d, [rax + 1]
xor edx, edx
call fcn.180005254
mov rbx, rax
test rax, rax
je 0x1800043c5
mov ecx, dword [0x180037110]
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x218], rcx
lea rdx, [rsp + 0x218]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x1800043a3
and dword [rsp + 0x200], 0
jmp 0x1800043b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x200], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x200]
jmp 0x180003efd
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180003ef6
xor r8d, r8d
mov ecx, 0x10b
xor edx, edx
jmp 0x180003e3d
xor eax, eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x128
jmp 0x180003e3d
xor r8d, r8d
mov ecx, 0x10a
xor edx, edx
jmp 0x180003e3d
test rbx, rbx
je 0x1800044c0
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004a80
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000449a
mov ecx, 0x106
jmp 0x180003eaa
xor r8d, r8d
mov ecx, 0x12e
xor edx, edx
jmp 0x180003e3d
test rbx, rbx
je 0x180004458
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x123
jmp 0x180003e3d
test rbx, rbx
je 0x1800044c0
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rbx
call fcn.180004a80
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000449a
mov ecx, 0x122
jmp 0x180003eaa
mov rbx, qword [rsp + 0x30]
test rbx, rbx
je 0x1800044b6
mov rcx, qword [0x180037ae8]
mov r8, rbx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x200], 0
je 0x1800044d6
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000f3c8
mov eax, dword [rsp + 0x200]
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret