Function at 0x180003f3c
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x1e0
xor esi, esi
xor eax, eax
mov rdi, r8
and dword [r11 + 0x20], eax
mov r8d, 0x89467003
mov rbx, rdx
xor edx, edx
mov qword [rsp + 0x30], rsi
mov dword [r11 + 8], 0x57
lea r12d, [rsi + 4]
mov r13d, 0x119
cmp ecx, r8d
ja 0x18000435c
je 0x18000433b
mov eax, 0x4d04f6da
cmp ecx, eax
ja 0x180004173
je 0x180004150
cmp ecx, 0x7048b13
je 0x180004317
cmp ecx, 0x73eed27
je 0x180004146
cmp ecx, 0xdfc4184
je 0x180004124
cmp ecx, 0x116a1b8a
je 0x180004106
cmp ecx, 0x160315fa
je 0x1800040e1
cmp ecx, 0x26df5be9
je 0x18000408f
cmp ecx, 0x3c4fe436
je 0x180004042
cmp ecx, 0x3fcc4d05
je 0x180004021
cmp ecx, 0x43d5e8b4
jne 0x1800044e6
lea ecx, [r13 - 8]
xor r8d, r8d
mov r9, rdi
call fcn.18000fc1c
mov dword [rsp + 0x200], eax
jmp 0x1800046ab
test rbx, rbx
je 0x1800046b5
mov edx, 0x10f
mov r8d, 1
mov r9, rdi
mov rcx, rbx
call fcn.1800026f4
jmp 0x180004015
test rbx, rbx
je 0x1800046b5
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004c74
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004676
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x105
mov rdx, rsi
jmp 0x180004685
lea rax, [0x18003d492]
mov edx, 0xb
mov ecx, 0x112
lea r9, [0x18003dcc9]
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.180004ba8
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x1800046b5
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000fc1c
jmp 0x1800046ab
test rbx, rbx
je 0x1800046b5
movzx r8d, word [0x180038644]
mov rdx, rbx
xor ecx, ecx
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.1800052ac
jmp 0x1800040b7
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000e664
jmp 0x1800040b7
mov eax, 0x10
movzx r8d, word [0x180038644]
mov ecx, 0xffef
and r8w, cx
or r8w, ax
mov ecx, dword [0x180038640]
jmp 0x1800040f7
mov ecx, 0x118
jmp 0x18000400a
mov edx, 1
test rbx, rbx
je 0x1800046b5
neg edx
sbb edx, edx
and edx, 8
add edx, 0x10f
xor r8d, r8d
jmp 0x180004035
cmp ecx, 0x52561dce
je 0x180004284
cmp ecx, 0x591f0f0a
je 0x18000427a
cmp ecx, 0x697c48c3
je 0x18000422d
cmp ecx, 0x6b46bab6
je 0x180004223
cmp ecx, 0x70e0fe32
je 0x18000420d
cmp ecx, 0x74f09393
je 0x1800041e7
cmp ecx, 0x77e6197b
je 0x1800041d1
cmp ecx, 0x7d9e8239
jne 0x1800044e6
call fcn.180006b70
jmp 0x1800040b7
lea rax, [0x18003d48e]
mov edx, 8
mov ecx, 0x10e
jmp 0x1800040a0
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x200], esi
jmp 0x1800040c6
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call fcn.180003034
jmp 0x1800040b7
mov ecx, 0x109
jmp 0x18000400a
test rbx, rbx
je 0x1800046b5
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004c74
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004676
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x107
mov rdx, rsi
jmp 0x180004685
mov ecx, 0x10c
jmp 0x18000400a
test rbx, rbx
je 0x180004329
lea rcx, [0x18003a080]
mov rdx, rbx
call fcn.180007878
mov esi, eax
test eax, eax
jne 0x1800042f6
mov rdx, qword [0x180039c98]
lea r8, [rsp + 0x218]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov esi, eax
test eax, eax
jne 0x1800042f6
and dword [rsp + 0x28], eax
mov rcx, qword [rsp + 0x218]
and qword [rsp + 0x20], 0
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x218]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x200], esi
test esi, esi
jne 0x180004317
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000fc1c
test rbx, rbx
je 0x180004329
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
jmp 0x18000432b
xor eax, eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x128
jmp 0x18000400d
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000e488
jmp 0x1800040b7
mov r8d, 0xbd2b2852
cmp ecx, r8d
ja 0x18000448a
je 0x180004480
cmp ecx, 0x8be88ece
je 0x180004155
cmp ecx, 0x8d654685
je 0x18000446a
cmp ecx, 0x916953c9
je 0x180004460
cmp ecx, 0x9ea0a0f5
je 0x180004129
cmp ecx, 0xa81b8385
je 0x18000444a
cmp ecx, 0xac112714
je 0x180004422
cmp ecx, 0xb77551d7
je 0x180004418
cmp ecx, 0xbbff0d38
jne 0x1800044e6
test rbx, rbx
je 0x1800046b5
lea rdx, [rsp + 0x40]
mov ecx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1800043f9
lea r8d, [rax + 1]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.180018ca4
jmp 0x1800043fb
xor eax, eax
test eax, eax
je 0x1800046ab
mov r8d, 0x10
lea rdx, [rsp + 0x30]
mov ecx, 0x110
jmp 0x18000400d
mov ecx, 0x114
jmp 0x18000400a
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r8d, 1
mov rdx, rbx
add r8d, eax
mov ecx, 0x102
jmp 0x18000400d
test rbx, rbx
je 0x1800046b5
mov rcx, rbx
call fcn.180001c9c
jmp 0x180004015
mov ecx, 0x124
jmp 0x18000400a
movzx r8d, word [0x180038644]
mov eax, 0xfff7
and r8w, ax
jmp 0x18000413e
mov ecx, 0x108
jmp 0x18000400a
cmp ecx, 0xbd3cd085
je 0x18000467d
cmp ecx, 0xc16c8b90
je 0x180004637
cmp ecx, 0xc4f649cd
je 0x180004617
cmp ecx, 0xd15793f7
je 0x18000460d
cmp ecx, 0xdd588b08
je 0x1800045c3
cmp ecx, 0xde34d943
je 0x1800045b9
cmp ecx, 0xe1e2f881
je 0x1800045af
cmp ecx, 0xeaefbdac
je 0x1800044f7
mov edx, 1
mov dword [rsp + 0x200], edx
jmp 0x1800046b5
movzx r8d, word [0x180038644]
mov ecx, dword [0x180038640]
mov r9b, 0xff
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.1800052ac
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x1800046b5
mov rcx, qword [0x180039bb0]
lea r8d, [rax + 1]
xor edx, edx
call fcn.180005844
mov rbx, rax
test rax, rax
je 0x1800045a4
mov ecx, dword [0x180039138]
and dword [rsp + 0x28], esi
and qword [rsp + 0x20], rsi
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x218], rcx
lea rdx, [rsp + 0x218]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x180004582
and dword [rsp + 0x200], esi
jmp 0x18000458f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x200], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x200]
jmp 0x1800040be
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1800040b7
mov ecx, 0x10b
jmp 0x18000400a
mov ecx, 0x10a
jmp 0x18000400a
test rbx, rbx
je 0x1800046b5
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004c74
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004676
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x106
mov rdx, rsi
jmp 0x180004685
mov ecx, 0x12e
jmp 0x18000400a
test rbx, rbx
je 0x180004627
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x123
jmp 0x18000400d
test rbx, rbx
je 0x1800046b5
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rbx
call fcn.180004c74
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004676
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov ecx, 0x122
mov rdx, rsi
jmp 0x180004685
mov rsi, qword [rsp + 0x30]
jmp 0x180004694
xor r8d, r8d
mov ecx, 0x103
mov r9, rdi
call fcn.18000fc1c
mov dword [rsp + 0x200], eax
test rsi, rsi
je 0x1800046ab
mov rcx, qword [0x180039b48]
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x200], 0
je 0x1800046cb
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.18000fc1c
mov eax, dword [rsp + 0x200]
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret