Function at 0x18000bf6c
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
push rbp
push rsi
push rdi
push r13
push r14
sub rsp, 0x210
xor ebp, ebp
xor esi, esi
mov rbx, rdx
and dword [r11 + 0x20], esi
mov edx, 0x8168a47a
xor eax, eax
cmp ecx, edx
mov rdi, r8
mov qword [rsp + 0x40], rbp
mov dword [r11 + 8], 0x57
lea r13d, [rbp + 4]
mov r14d, 0x119
ja 0x18000c482
je 0x18000c478
mov eax, 0x491ef8b9
cmp ecx, eax
ja 0x18000c2b6
je 0x18000c2ac
mov eax, 0x26c27170
cmp ecx, eax
ja 0x18000c0c0
je 0x18000c8c4
cmp ecx, 0x16bec39
je 0x18000c0a2
cmp ecx, 0x602e249
je 0x18000c055
cmp ecx, 0xe776905
je 0x18000c8c7
cmp ecx, 0x17057ca0
je 0x18000c185
cmp ecx, 0x173f1a94
je 0x18000c037
cmp ecx, 0x1dfdb637
jne 0x18000c7f2
lea esi, [rbp + 0x10]
movzx r8d, word [0x18003212c]
and r8w, 0xffef
jmp 0x18000c53d
mov ecx, 0x118
mov r9, r8
xor r8d, r8d
xor edx, edx
call fcn.18000d3c8
mov dword [rsp + 0x240], eax
jmp 0x18000c952
test rbx, rbx
je 0x18000c95c
movzx r8d, word [0x18003212c]
mov rdx, rbx
xor ecx, ecx
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.18001b3fc
mov dword [rsp + 0x240], eax
test eax, eax
jne 0x18000c95c
lea rdx, [rsp + 0x240]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000d3c8
jmp 0x18000c952
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000c990
jmp 0x18000c078
cmp ecx, 0x2c4e1385
je 0x18000c25c
cmp ecx, 0x2fcdbab6
je 0x18000c233
cmp ecx, 0x36deac5a
je 0x18000c206
cmp ecx, 0x387f40e0
je 0x18000c1ad
cmp ecx, 0x4257ea7d
jne 0x18000c7f2
test rbx, rbx
je 0x18000c198
lea rcx, [0x180033f20]
mov rdx, rbx
call fcn.180008d74
test eax, eax
mov esi, eax
jne 0x18000c164
mov rdx, qword [0x180033b38]
lea r8, [rsp + 0x48]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
mov esi, eax
jne 0x18000c164
mov rcx, qword [rsp + 0x48]
and dword [rsp + 0x28], ebp
and qword [rsp + 0x20], rbp
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x48]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
mov dword [rsp + 0x240], esi
jne 0x18000c185
lea rdx, [rsp + 0x240]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000d3c8
test rbx, rbx
je 0x18000c198
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c19a
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
mov ecx, 0x128
jmp 0x18000c044
test byte [0x18003212c], 1
je 0x18000c52f
call fcn.18000968c
test eax, eax
jne 0x18000c52f
lock add dword [0x180033b70], 1
lea rcx, [0x1800298ec]
xor r8d, r8d
xor edx, edx
call fcn.1800191d8
test rax, rax
jne 0x18000c1f8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lock add dword [0x180033b70], 0xffffffff
jmp 0x18000c52f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x18000c52f
lea rax, [0x180036521]
mov edx, 0xb
mov ecx, 0x112
lea r9, [0x180036f07]
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.18000bd68
jmp 0x18000c078
test rbx, rbx
je 0x18000c95c
mov qword [rsp + 0x20], r8
mov r9d, 1
mov r8d, 0x10f
xor edx, edx
mov rcx, rbx
call fcn.180004480
jmp 0x18000c049
test rbx, rbx
je 0x18000c95c
lea r8, [rsp + 0x258]
lea rdx, [rsp + 0x40]
mov r9d, 1
mov rcx, rbx
call fcn.180017260
test eax, eax
mov dword [rsp + 0x240], eax
jne 0x18000c74b
mov rbp, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x258]
mov r9, rdi
mov rdx, rbp
mov ecx, 0x105
jmp 0x18000c92f
mov ecx, 0x10c
jmp 0x18000c03c
mov eax, 0x67e7eec8
cmp ecx, eax
ja 0x18000c3b8
je 0x18000c3a2
cmp ecx, 0x4eb194fe
je 0x18000c8bb
cmp ecx, 0x53d41f07
je 0x18000c398
cmp ecx, 0x56edb4ad
je 0x18000c370
cmp ecx, 0x5d050169
je 0x18000c345
cmp ecx, 0x60e10981
je 0x18000c32f
cmp ecx, 0x64f16420
jne 0x18000c7f2
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x240], esi
jmp 0x18000c087
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call fcn.18001aae8
jmp 0x18000c078
mov eax, 1
test rbx, rbx
je 0x18000c95c
neg eax
mov qword [rsp + 0x20], rdi
sbb r8d, r8d
and r8d, 8
add r8d, 0x10f
xor r9d, r9d
jmp 0x18000c24d
test rbx, rbx
je 0x18000c383
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c385
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
mov ecx, 0x12f
jmp 0x18000c044
mov ecx, 0x111
jmp 0x18000c03c
lea rax, [0x180036504]
mov edx, 8
mov ecx, 0x10e
jmp 0x18000c217
cmp ecx, 0x6d9f758a
je 0x18000c46e
cmp ecx, 0x6df90f12
je 0x18000c446
cmp ecx, 0x797dbf70
je 0x18000c3f6
cmp ecx, 0x7b293e89
je 0x18000c8c1
cmp ecx, 0x7b474d05
jne 0x18000c7f2
mov ecx, 0x109
jmp 0x18000c03c
test rbx, rbx
je 0x18000c95c
lea r8, [rsp + 0x258]
lea rdx, [rsp + 0x40]
mov r9d, 1
mov rcx, rbx
call fcn.180017260
test eax, eax
mov dword [rsp + 0x240], eax
jne 0x18000c74b
mov rbp, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x258]
mov r9, rdi
mov rdx, rbp
mov ecx, 0x107
jmp 0x18000c92f
test rbx, rbx
je 0x18000c459
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c45b
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
mov ecx, 0x130
jmp 0x18000c044
call fcn.18001ca18
jmp 0x18000c078
mov ecx, 0x124
jmp 0x18000c03c
mov edx, 0xbc10d0a7
cmp ecx, edx
ja 0x18000c61f
je 0x18000c5f9
mov edx, 0xa774a664
cmp ecx, edx
ja 0x18000c54d
je 0x18000c543
cmp ecx, 0x8ea15746
je 0x18000c024
cmp ecx, 0x963392c7
je 0x18000c52a
cmp ecx, 0x9904983c
je 0x18000c520
cmp ecx, 0x994787b0
je 0x18000c4ff
cmp ecx, 0x9be9797d
je 0x18000c34a
cmp ecx, 0x9d64b136
jne 0x18000c7f2
movzx r8d, word [0x18003212c]
and r8w, 0xfff7
mov ecx, dword [0x180032128]
xor edx, edx
jmp 0x18000c06b
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.180015e30
jmp 0x18000c078
mov ecx, 0x13a
jmp 0x18000c03c
mov esi, 1
movzx r8d, word [0x18003212c]
and r8w, 0xfffe
or r8w, si
jmp 0x18000c4f2
mov ecx, 0x114
jmp 0x18000c03c
cmp ecx, 0xabfefa8b
je 0x18000c5a8
cmp ecx, 0xad2adfe1
je 0x18000c59e
cmp ecx, 0xad3d2736
je 0x18000c594
cmp ecx, 0xb81a7436
je 0x18000c57e
cmp ecx, 0xb9bdd3a0
je 0x18000c8be
jmp 0x18000c7f2
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call fcn.18002a508
jmp 0x18000c049
mov ecx, 0x103
jmp 0x18000c03c
mov ecx, 0x108
jmp 0x18000c03c
test rbx, rbx
je 0x18000c95c
lea rdx, [rsp + 0x70]
mov cx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x18000c5d7
lea r8d, [rax + 1]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1800196cc
jmp 0x18000c5d9
xor eax, eax
test eax, eax
je 0x18000c952
mov r9, rdi
mov r8d, 0x10
lea rdx, [rsp + 0x58]
mov ecx, 0x110
jmp 0x18000c044
test rbx, rbx
je 0x18000c95c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r9, rdi
mov rdx, rbx
lea r8d, [rax + 1]
mov ecx, 0x102
jmp 0x18000c044
mov eax, 0xd4f7be7e
cmp ecx, eax
ja 0x18000c7ba
je 0x18000c792
cmp ecx, 0xbcf23efb
je 0x18000c775
cmp ecx, 0xc1566444
je 0x18000c76b
cmp ecx, 0xc9cd0f24
je 0x18000c755
cmp ecx, 0xcd597cbb
je 0x18000c6ff
cmp ecx, 0xce352ef0
je 0x18000c6f5
cmp ecx, 0xd16d7c23
jne 0x18000c7f2
test rbx, rbx
je 0x18000c699
lea r8, [rsp + 0x258]
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov rcx, rbx
call fcn.180017260
jmp 0x18000c6cd
mov rcx, qword [0x180033a88]
lea rax, [rsp + 0x258]
mov r9d, 1
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x40]
lea edx, [r9 + 2]
mov qword [rsp + 0x28], rax
and dword [rsp + 0x20], esi
xor r8d, r8d
call fcn.180026bbc
cmp eax, esi
mov dword [rsp + 0x240], eax
jne 0x18000c74b
mov rbp, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x258]
mov r9, rdi
mov rdx, rbp
mov ecx, 0x122
jmp 0x18000c92f
mov ecx, 0x10a
jmp 0x18000c03c
test rbx, rbx
je 0x18000c95c
lea r8, [rsp + 0x258]
lea rdx, [rsp + 0x40]
mov r9d, 1
mov rcx, rbx
call fcn.180017260
test eax, eax
mov dword [rsp + 0x240], eax
jne 0x18000c74b
mov rbp, qword [rsp + 0x40]
mov r8d, dword [rsp + 0x258]
mov r9, rdi
mov rdx, rbp
mov ecx, 0x106
jmp 0x18000c92f
mov rbp, qword [rsp + 0x40]
jmp 0x18000c93b
mov qword [rsp + 0x20], r8
xor r9d, r9d
mov edx, r13d
mov r8d, 0x12c
jmp 0x18000c24f
mov ecx, 0x12e
jmp 0x18000c03c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r9, rdi
mov rdx, rbx
lea r8d, [rax + 1]
mov ecx, 0x133
jmp 0x18000c044
test rbx, rbx
je 0x18000c7a5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c7a7
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
mov ecx, 0x123
jmp 0x18000c044
cmp ecx, 0xda118404
je 0x18000c922
cmp ecx, 0xdbe4a41c
je 0x18000c8fa
cmp ecx, 0xf1e30f32
je 0x18000c8f0
cmp ecx, 0xf4e6a04c
je 0x18000c8b6
cmp ecx, 0xfaee4a1f
je 0x18000c802
mov dword [rsp + 0x240], 1
jmp 0x18000c95c
movzx r8d, word [0x18003212c]
mov ecx, dword [0x180032128]
mov r9b, 0xff
xor edx, edx
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.18001b3fc
test eax, eax
mov dword [rsp + 0x240], eax
jne 0x18000c95c
mov rcx, qword [0x180033a20]
lea r8d, [rax + 1]
xor edx, edx
call fcn.180003dd8
test rax, rax
mov rbx, rax
je 0x18000c8ab
mov ecx, dword [0x1800330c4]
and dword [rsp + 0x28], esi
and qword [rsp + 0x20], rsi
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x50], rcx
lea rdx, [rsp + 0x50]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x18000c889
and dword [rsp + 0x240], esi
jmp 0x18000c896
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x240], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x240]
jmp 0x18000c07f
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x18000c078
mov esi, 1
add esi, 1
add esi, 2
add esi, 1
add esi, 2
test rbx, rbx
je 0x18000c8da
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c8dc
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
lea ecx, [rsi + 0x132]
jmp 0x18000c044
mov ecx, 0x10b
jmp 0x18000c03c
test rbx, rbx
je 0x18000c90d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
jmp 0x18000c90f
xor eax, eax
mov r9, rdi
mov r8d, eax
mov rdx, rbx
mov ecx, 0x136
jmp 0x18000c044
mov r9, r8
xor r8d, r8d
mov ecx, 0x131
xor edx, edx
call fcn.18000d3c8
mov dword [rsp + 0x240], eax
test rbp, rbp
je 0x18000c952
mov rcx, qword [0x1800339a8]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x240], 0
je 0x18000c972
lea rdx, [rsp + 0x240]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000d3c8
mov eax, dword [rsp + 0x240]
mov rbx, qword [rsp + 0x248]
add rsp, 0x210
pop r14
pop r13
pop rdi
pop rsi
pop rbp
ret