Function at 0x140007494
Capabilities:
Acquire debug privileges
Initialize winsock library

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
mov eax, 0x1290
call fcn.14005ad00
sub rsp, rax
mov rax, qword [0x14007e090]
xor rax, rsp
mov qword [rsp + 0x1280], rax
mov rdi, rcx
lea rcx, str.GlobalA51BB395_ECF3_4294_9A75_995BAB94ED74
call fcn.14000676c
xor esi, esi
cmp eax, esi
je 0x1400074d6
lea eax, [rsi + 2]
jmp 0x14000777c
cmp dword [0x14008146c], 2
je 0x1400074e9
mov eax, 1
jmp 0x14000777c
xor eax, eax
lea r8, [rsp + 0x3c]
lea rdx, str.SeDebugPrivilege
mov dword [rsp + 0x44], eax
xor ecx, ecx
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x40], eax
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
cmp eax, esi
je 0x14000756e
mov qword [rsp + 0x30], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x30]
mov rcx, rax
mov edx, 0xf01ff
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
cmp eax, esi
je 0x14000756e
mov rcx, qword [rsp + 0x30]
lea r8, [rsp + 0x38]
mov r9d, recvfrom
xor edx, edx
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.5FE34960_6E9C_4cb6_B915_17F7F6E672FA
call fcn.14000676c
cmp eax, esi
jne 0x14000777a
mov edx, 0x12
lea r9, str.5FE34960_6E9C_4cb6_B915_17F7F6E672FA
xor ecx, ecx
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov edx, 1
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea rcx, [rsp + 0x70]
xor edx, edx
mov r8d, 0x198
call fcn.1400452b0
lea rdx, [rsp + 0x70]
mov ecx, 0x202
call sub.WS2_32.dll_WSAStartup
mov ecx, 3
call qword [sym.imp.libcurl64.dll_curl_global_init]
lea rcx, str.user32.dll
mov byte [0x14008298a], 1
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.SetProcessDPIAware
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp rax, rsi
je 0x1400075fe
call rax
call fcn.140008f14
cmp word [0x1400835b8], si
jne 0x140007655
lea rcx, [rsp + 0x72]
xor edx, edx
mov r8d, 0x206
mov word [rsp + 0x70], si
call fcn.1400452b0
lea rcx, [rsp + 0x70]
xor edx, edx
call fcn.14002da64
cmp word [rsp + 0x70], si
je 0x140007655
lea rdx, [rsp + 0x70]
lea rcx, [0x1400835b8]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rcx, [0x1400837c8]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov rax, qword [0x1400843c0]
cmp rax, rsi
jne 0x140007682
call fcn.14000f984
lea rdx, [0x140067110]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400843c0], rax
cmp rax, rsi
je 0x14000768e
lea rdx, [0x140001028]
mov rcx, rdi
call rax
lea rcx, [0x140082910]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, 2
call fcn.140032fe4
lea rcx, [rsp + 0x48]
call fcn.14002b770
cmp qword [rax + 0x20], 8
jb 0x1400076bc
mov rcx, qword [rax + 8]
jmp 0x1400076c0
lea rcx, [rax + 8]
call fcn.14000d014
cmp qword [rsp + 0x68], 8
jb 0x1400076d7
mov rcx, qword [rsp + 0x50]
call fcn.140042a98
mov rcx, qword [0x140081478]
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], rsi
mov word [rsp + 0x50], si
mov rcx, qword [rcx + 8]
xor edx, edx
call fcn.1400035a0
lea r11, str._GlobalConfigNotifyThread
lea r9, str..globalcfg.cpp
mov qword [rsp + 0x28], r11
lea r8, str._s._d:_s
lea rcx, [rsp + 0x280]
mov edx, 0x800
mov dword [rsp + 0x20], 0x21
call qword [sym.imp.SHLWAPI.dll_wnsprintfW]
lea r8, [rsp + 0x280]
lea rcx, [0x140001408]
xor edx, edx
call fcn.1400103f0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14002b718
cmp eax, esi
je 0x140007772
lea rcx, str.CLIENT_ONLINE
xor edx, edx
call fcn.14000faa8
mov rcx, rdi
call fcn.140007374
xor eax, eax
mov rcx, qword [rsp + 0x1280]
xor rcx, rsp
call fcn.140042a40
mov rsi, qword [rsp + 0x12a8]
add rsp, 0x1290
pop rdi
ret