Function at 0x180003af8
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x1e0
xor esi, esi
xor eax, eax
mov rbx, rdx
and dword [r11 + 0x20], eax
mov edx, 0x8789d37b
mov rdi, r8
xor r8d, r8d
mov qword [rsp + 0x30], rsi
mov dword [r11 + 8], 0x57
lea r12d, [rsi + 4]
mov r13d, 0x119
cmp ecx, edx
ja 0x180003ef5
je 0x180003eeb
mov eax, 0x440c113f
cmp ecx, eax
ja 0x180003d4b
je 0x180003d25
cmp ecx, 0xcb3669a
je 0x180003cc9
cmp ecx, 0xf30cfa9
je 0x180003ca5
cmp ecx, 0x1623d945
je 0x180003c78
cmp ecx, 0x21969926
je 0x180003c57
cmp ecx, 0x26ff9756
je 0x180003c2f
cmp ecx, 0x37c26f8b
je 0x180003c14
cmp ecx, 0x3d00c328
je 0x180003bf0
cmp ecx, 0x401c7c9e
jne 0x180004080
test rbx, rbx
je 0x180004274
mov rcx, rbx
call fcn.180003044
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004274
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.1800112ec
jmp 0x18000426a
mov eax, 0x10
movzx r8d, word [0x180058764]
mov ecx, 0xffef
and r8w, cx
mov ecx, dword [0x180058760]
or r8w, ax
xor edx, edx
jmp 0x180003c45
mov ecx, 0x118
xor edx, edx
mov r9, rdi
call fcn.1800112ec
mov dword [rsp + 0x200], eax
jmp 0x18000426a
test rbx, rbx
je 0x180004274
movzx r8d, word [0x180058764]
mov rdx, rbx
xor ecx, ecx
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.180005470
jmp 0x180003bc6
test rbx, rbx
je 0x180004274
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000f1a8
jmp 0x180003bc6
lea rax, [0x18005d42a]
mov edx, 0xb
mov ecx, 0x112
lea r9, [0x18005dc63]
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.180004c0c
jmp 0x180003bc6
test rbx, rbx
je 0x180004274
mov edx, 0x10f
mov r8d, 1
mov r9, rdi
mov rcx, rbx
call fcn.18000275c
jmp 0x180003c23
test rbx, rbx
je 0x180004274
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004ccc
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000413e
mov ecx, 0x105
mov rsi, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x218]
mov r9, rdi
mov rdx, rsi
call fcn.1800112ec
mov dword [rsp + 0x200], eax
jmp 0x180004253
test rbx, rbx
je 0x180004274
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x200], esi
jmp 0x180003bd5
cmp ecx, 0x471a9bd7
je 0x180003ed5
cmp ecx, 0x4d620095
je 0x180003ecb
cmp ecx, 0x5980ca6f
je 0x180003e8e
cmp ecx, 0x5bba381a
je 0x180003e84
cmp ecx, 0x62aa9f62
je 0x180003dd8
cmp ecx, 0x69e38da6
je 0x180003dce
cmp ecx, 0x73296a18
je 0x180003dc4
cmp ecx, 0x7df87476
jne 0x180004080
mov r8d, 1
test rbx, rbx
je 0x180004274
neg r8d
sbb edx, edx
and edx, 8
add edx, 0x10f
xor r8d, r8d
jmp 0x180003cb9
mov ecx, 0x111
jmp 0x180003c19
mov ecx, 0x10c
jmp 0x180003c19
test rbx, rbx
je 0x1800040e9
lea rcx, [0x180059c00]
mov rdx, rbx
call fcn.180007b30
mov esi, eax
test eax, eax
jne 0x180003e4a
mov rdx, qword [0x1800593f0]
lea r8, [rsp + 0x218]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov esi, eax
test eax, eax
jne 0x180003e4a
and dword [rsp + 0x28], eax
mov rcx, qword [rsp + 0x218]
and qword [rsp + 0x20], 0
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x218]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [rsp + 0x200], esi
test esi, esi
jne 0x180003e6b
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.1800112ec
test rbx, rbx
je 0x1800040e9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
jmp 0x1800040eb
mov ecx, 0x109
jmp 0x180003c19
test rbx, rbx
je 0x180004274
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004ccc
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000413e
mov ecx, 0x107
jmp 0x180003d01
call fcn.180007058
jmp 0x180003bc6
lea rax, [0x18005d426]
mov edx, 8
mov ecx, 0x10e
jmp 0x180003c89
mov ecx, 0x114
jmp 0x180003c19
mov edx, 0xbb140c62
cmp ecx, edx
ja 0x180004028
je 0x180003da5
cmp ecx, 0x8b038f94
je 0x180003fd9
cmp ecx, 0x8dc05229
je 0x180003fcf
cmp ecx, 0x8dd7aafe
je 0x180003fc5
cmp ecx, 0x98e70129
je 0x180003faf
cmp ecx, 0x9ceda5b8
je 0x180003f87
cmp ecx, 0xa195d165
je 0x180003f7d
cmp ecx, 0xae5c2259
je 0x180003bf5
cmp ecx, 0xb9baf2af
jne 0x180004080
test rbx, rbx
je 0x180004274
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000efcc
jmp 0x180003bc6
mov ecx, 0x124
jmp 0x180003c19
test rbx, rbx
je 0x180004274
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r8d, 1
mov rdx, rbx
add r8d, eax
mov ecx, 0x102
jmp 0x180003c1b
test rbx, rbx
je 0x180004274
mov rcx, rbx
call fcn.180001dcc
jmp 0x180003c23
mov ecx, 0x108
jmp 0x180003c19
mov ecx, 0x103
jmp 0x180003c19
test rbx, rbx
je 0x180004274
lea rdx, [rsp + 0x40]
mov ecx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x180004009
lea r8d, [rax + 1]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.180019ca8
jmp 0x18000400b
xor eax, eax
test eax, eax
je 0x18000426a
mov r8d, 0x10
lea rdx, [rsp + 0x30]
mov ecx, 0x110
jmp 0x180003c1b
cmp ecx, 0xbd99c429
je 0x18000420c
cmp ecx, 0xd11e7a2d
je 0x180004202
cmp ecx, 0xda133f00
je 0x180004148
cmp ecx, 0xeda409a4
je 0x180004105
cmp ecx, 0xeec85bef
je 0x1800040fb
cmp ecx, 0xef6d125d
je 0x180003e6b
cmp ecx, 0xf190093c
je 0x1800040b3
cmp ecx, 0xf40acb61
je 0x180004093
mov r8d, 1
mov dword [rsp + 0x200], r8d
jmp 0x180004274
test rbx, rbx
je 0x1800040a3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x123
jmp 0x180003c1b
test rbx, rbx
je 0x180004274
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rbx
call fcn.180004ccc
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000413e
mov ecx, 0x122
jmp 0x180003d01
xor eax, eax
mov r8d, eax
mov rdx, rbx
mov ecx, 0x128
jmp 0x180003c1b
mov ecx, 0x10a
jmp 0x180003c19
test rbx, rbx
je 0x180004274
lea r8, [rsp + 0x218]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.180004ccc
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x18000413e
mov ecx, 0x106
jmp 0x180003d01
mov rsi, qword [rsp + 0x30]
jmp 0x180004253
movzx r8d, word [0x180058764]
mov ecx, dword [0x180058760]
mov r9b, 0xff
xor edx, edx
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.180005470
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004274
mov rcx, qword [0x1800592e8]
lea r8d, [rax + 1]
xor edx, edx
call fcn.180005f44
mov rbx, rax
test rax, rax
je 0x1800041f7
mov ecx, dword [0x18005878c]
and dword [rsp + 0x28], esi
and qword [rsp + 0x20], rsi
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x218], rcx
lea rdx, [rsp + 0x218]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x1800041d5
and dword [rsp + 0x200], esi
jmp 0x1800041e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x200], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x200]
jmp 0x180003bcd
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x180003bc6
mov ecx, 0x10b
jmp 0x180003c19
movzx r8d, word [0x180058764]
mov ecx, dword [0x180058760]
mov eax, 0xfff7
mov r9b, 0xff
xor edx, edx
and r8w, ax
mov byte [rsp + 0x20], 0xff
call fcn.180005470
mov dword [rsp + 0x200], eax
test eax, eax
jne 0x180004274
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.1800112ec
test rsi, rsi
je 0x18000426a
mov rcx, qword [0x180059270]
mov r8, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x200], 0
je 0x18000428a
lea rdx, [rsp + 0x200]
mov r9, rdi
mov r8d, r12d
mov ecx, r13d
call fcn.1800112ec
mov eax, dword [rsp + 0x200]
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
ret