Function at 0x140116200
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x1048
call fcn.1403a70f0
sub rsp, rax
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
lea rax, [rsp + 0x84]
mov qword [rsp + 0xa78], rax
mov qword [rsp + 0xa80], 0
mov dword [rsp + 0x1b0], send
mov dword [rsp + 0x370], 0x12a83c03
mov eax, dword [rsp + 0x370]
mov dword [rsp + 0x378], eax
mov eax, dword [rsp + 0x378]
mov dword [rsp + 0x380], eax
mov eax, dword [rsp + 0x380]
mov dword [rsp + 0x5e0], eax
mov dword [rsp + 0x5e4], 0
lea rax, [rsp + 0x5e8]
mov qword [rsp + 0xa70], rax
mov dword [rsp + 0x1ac], Ordinal_79
mov dword [rsp + 0x1a8], Ordinal_143
mov dword [rsp + 0x1a4], Ordinal_211
mov dword [rsp + 0x1a0], Ordinal_79
mov dword [rsp + 0x3a4], Ordinal_200
mov dword [rsp + 0x3a0], Ordinal_200
mov dword [rsp + 0x39c], 0x3f
mov dword [rsp + 0x398], reloc.WS2_32.dll_recv
mov dword [rsp + 0x394], 0
mov dword [rsp + 0x390], 0
mov dword [rsp + 0x38c], reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x388], 5
mov dword [rsp + 0x384], Ordinal_200
lea rax, [rsp + 0x384]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x388]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x38c]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x390]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x394]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x398]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x39c]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x3a0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x3a4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1a4]
lea r8, [rsp + 0x1a8]
lea rdx, [rsp + 0x1ac]
mov rcx, qword [rsp + 0xa70]
call fcn.14008f900
mov byte [rsp + 0x9c], 0
mov byte [rsp + 0x9d], 0
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0x808], rax
mov byte [rsp + 0x9e], 0
mov byte [rsp + 0x8c], 1
mov eax, dword [rsp + 0x84]
mov qword [rsp + 0x810], rax
mov byte [rsp + 0x8d], 0
mov byte [rsp + 0x8e], 0
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x818], rax
mov byte [rsp + 0x8f], 0
mov byte [rsp + 0x90], 0
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x23c], eax
mov eax, dword [rsp + 0x5e0]
mov dword [rsp + 0x1b8], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x420], rax
mov rax, qword [rsp + 0x420]
mov qword [rsp + 0xa88], rax
mov rax, qword [rsp + 0xa88]
mov qword [rsp + 0xa98], rax
mov byte [rsp + 0xaa0], 1
mov rax, qword [rsp + 0x420]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x658], rax
lea r8, [rsp + 0x1b8]
lea rdx, [rsp + 0x438]
mov rcx, qword [rsp + 0x658]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x660], rax
mov rax, qword [rsp + 0x660]
add rax, 8
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0xb88]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x428]
mov rax, qword [rax]
mov qword [rsp + 0x668], rax
mov r8, qword [rsp + 0x430]
mov rdx, qword [rsp + 0x668]
lea rcx, [rsp + 0x670]
call fcn.14006f260
lea rax, [rsp + 0x670]
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
cmp qword [rsp + 0x438], rax
jne 0x140116587
mov dword [rsp + 0x11c], 1
jmp 0x140116592
mov dword [rsp + 0x11c], 0
movzx eax, byte [rsp + 0x11c]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x70]
test eax, eax
je 0x1401165b5
mov qword [rsp + 0x440], 0
jmp 0x14011661d
mov rax, qword [rsp + 0x438]
add rax, 0x10
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x690]
mov qword [rsp + 0x698], rax
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0x6a0], rax
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x6b0], rax
movzx eax, byte [rsp + 0xaa0]
test eax, eax
je 0x140116659
mov rax, qword [rsp + 0xa98]
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x6a8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x6b0]
mov qword [rsp + 0x448], rax
cmp qword [rsp + 0x448], 0
je 0x140116699
mov rax, qword [rsp + 0x448]
mov eax, dword [rax + 4]
mov dword [rsp + 0x1c0], eax
mov eax, dword [rsp + 0x1c0]
mov dword [rsp + 0x5e4], eax
jmp 0x140117511
lea rax, [rsp + 0xa90]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0x450]
mov dword [rax], 0
mov rax, qword [rsp + 0x450]
mov eax, dword [rax]
mov dword [rsp + 0x1d0], eax
lea rax, [rsp + 0xa94]
mov qword [rsp + 0x458], rax
mov eax, dword [rsp + 0x5e0]
mov dword [rsp + 0x1c8], eax
mov rax, qword [rsp + 0x458]
mov ecx, dword [rsp + 0x1c8]
mov dword [rax], ecx
mov rax, qword [rsp + 0x458]
mov eax, dword [rax]
mov dword [rsp + 0x1d4], eax
mov eax, dword [rsp + 0x1d0]
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0x1d4]
mov dword [rsp + 0xe0], eax
mov dword [rsp + 0x1d8], 0
mov eax, dword [rsp + 0x1d8]
cmp dword [rsp + 0xe0], eax
jne 0x140116753
xor eax, eax
cmp eax, 1
je 0x140116753
mov dword [rsp + 0x144], 1
jmp 0x14011675e
mov dword [rsp + 0x144], 0
movzx eax, byte [rsp + 0x144]
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x71]
test eax, eax
je 0x140116784
mov qword [rsp + 0x170], 0
jmp 0x1401173d2
mov byte [rsp + 0x91], 1
mov qword [rsp + 0x630], 0
mov qword [rsp + 0x638], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x6b8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0x6c0]
add rax, 0x10
mov qword [rsp + 0x3a8], rax
mov eax, 1
test eax, eax
je 0x1401167fe
mov rax, qword [rsp + 0x3a8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x460], rax
jmp 0x140116811
mov rax, qword [rsp + 0x3a8]
mov rax, qword [rax]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x630], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x638], rax
lea rax, [rsp + 0x630]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x468]
mov rax, qword [rax]
mov qword [rsp + 0x6c8], rax
mov rax, qword [rsp + 0x6c8]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x468]
mov rax, qword [rax + 8]
mov qword [rsp + 0x6d0], rax
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x6d8], rax
jmp 0x14011689d
mov rax, qword [rsp + 0x158]
mov rax, qword [rax]
mov qword [rsp + 0x158], rax
mov rax, qword [rsp + 0x6d8]
cmp qword [rsp + 0x158], rax
je 0x1401168bc
mov dword [rsp + 0xb0], 1
jmp 0x1401168c7
mov dword [rsp + 0xb0], 0
movzx eax, byte [rsp + 0xb0]
test eax, eax
je 0x1401173c6
xor eax, eax
mov qword [rsp + 0x6e0], rax
mov rax, qword [rsp + 0x6e0]
mov rcx, qword [rsp + 0x158]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x6e8], rax
lea rax, [rsp + 0x6e8]
mov qword [rsp + 0x478], rax
mov dword [rsp + 0x1dc], 0
mov eax, dword [rsp + 0x1dc]
cmp dword [rsp + 0xb8], eax
jne 0x14011693e
xor eax, eax
cmp eax, 1
je 0x14011693e
mov dword [rsp + 0xb4], 1
jmp 0x140116949
mov dword [rsp + 0xb4], 0
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x72]
test eax, eax
jne 0x140116c76
mov rax, qword [rsp + 0x478]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x6f0], rax
mov rax, qword [rsp + 0x6f0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x6f8], rax
mov qword [rsp + 0x160], 0xffffffffffffffff
inc qword [rsp + 0x160]
mov rax, qword [rsp + 0x6f8]
mov rcx, qword [rsp + 0x160]
cmp word [rax + rcx*2], 0
jne 0x1401169b9
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x700], rax
mov rax, qword [rsp + 0x700]
mov qword [rsp + 0xaf0], rax
lea rax, [rsp + 0xae8]
mov qword [rsp + 0x708], rax
lea rax, [rsp + 0xb98]
mov rdi, rax
mov rsi, qword [rsp + 0x708]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0xb8]
mov dword [rsp + 0x1e0], eax
lea rax, [rsp + 0xab0]
lea rcx, [rsp + 0xb98]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0xd0], eax
lea rax, [rsp + 0xc0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0xc0], 0x1b6e1b1e
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x710], rax
lea rax, [rsp + 0xba8]
lea rcx, [rsp + 0xab0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xbc0]
lea rcx, [rsp + 0xba8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xbc0]
mov rcx, qword [rsp + 0x710]
call fcn.140097890
mov dword [rsp + 0x1e4], eax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x718], rax
mov rax, qword [rsp + 0x718]
sub rax, 4
mov qword [rsp + 0x720], rax
mov r9, qword [rsp + 0x720]
xor r8d, r8d
lea rdx, [rsp + 0xbd0]
lea rcx, [rsp + 0xab0]
call fcn.14019ab70
lea rax, [rsp + 0xc4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0xc4], 0x1b6e1b1e
lea rax, [rsp + 0xc4]
mov qword [rsp + 0x728], rax
lea rax, [rsp + 0xbe0]
lea rcx, [rsp + 0xbd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xbf0]
lea rcx, [rsp + 0xbe0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xbf0]
mov rcx, qword [rsp + 0x728]
call fcn.140097890
mov dword [rsp + 0x1ec], eax
mov eax, dword [rsp + 0x1e4]
mov dword [rsp + 0x1e8], eax
mov eax, dword [rsp + 0x1e8]
cmp dword [rsp + 0xd0], eax
jne 0x140116bdb
xor eax, eax
cmp eax, 1
je 0x140116bdb
mov dword [rsp + 0xc8], 1
jmp 0x140116be6
mov dword [rsp + 0xc8], 0
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x73]
test eax, eax
jne 0x140116c5a
mov eax, dword [rsp + 0x1ec]
mov dword [rsp + 0x1f0], eax
mov eax, dword [rsp + 0x1f0]
cmp dword [rsp + 0xd0], eax
jne 0x140116c2d
xor eax, eax
cmp eax, 1
je 0x140116c2d
mov dword [rsp + 0xd8], 1
jmp 0x140116c38
mov dword [rsp + 0xd8], 0
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x74]
test eax, eax
jne 0x140116c5a
mov dword [rsp + 0xdc], 1
jmp 0x140116c65
mov dword [rsp + 0xdc], 0
movzx eax, byte [rsp + 0xdc]
test eax, eax
je 0x140116c76
jmp 0x14011688a
mov rax, qword [rsp + 0x478]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x480], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x480]
mov qword [rsp + 0x730], rax
mov rax, qword [rsp + 0x730]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x488]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x488]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x738], rax
mov eax, dword [rsp + 0x738]
add rax, qword [rsp + 0x360]
mov qword [rsp + 0x740], rax
mov rax, qword [rsp + 0x740]
mov qword [rsp + 0x368], rax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x1f4], eax
mov eax, dword [rsp + 0x1f4]
mov dword [rsp + 0x1f8], eax
lea rdx, [rsp + 0xf50]
lea rcx, [rsp + 0x360]
call fcn.1401906d0
lea rcx, [rsp + 0xdf0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xf78]
lea rcx, [rsp + 0x360]
call fcn.14018ec60
lea rcx, [rsp + 0xe18]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xe40]
lea rcx, [rsp + 0xdf0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xe70]
lea rcx, [rsp + 0xe18]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x1f8]
lea r8, [rsp + 0xe40]
lea rdx, [rsp + 0xe70]
lea rcx, [rsp + 0xd60]
call fcn.140097110
lea rdx, [rsp + 0xfa0]
lea rcx, [rsp + 0x360]
call fcn.1401906d0
mov qword [rsp + 0x490], rax
mov rax, qword [rsp + 0x490]
mov rax, qword [rax + 8]
cmp qword [rsp + 0xd68], rax
jne 0x140116e2b
mov rax, qword [rsp + 0x490]
mov rax, qword [rax]
cmp qword [rsp + 0xd60], rax
jne 0x140116e2b
mov dword [rsp + 0xe8], 1
jmp 0x140116e36
mov dword [rsp + 0xe8], 0
movzx eax, byte [rsp + 0xe8]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x75]
test eax, eax
je 0x140116e50
jmp 0x14011688a
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x140116f16
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x498]
mov qword [rax], 0
mov rax, qword [rsp + 0x498]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0x4a0]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0xd70]
mov qword [rsp + 0x4a8], rax
mov rax, qword [rsp + 0x4a8]
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0x4a8]
add rax, 0x10
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x4c8], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x748], rax
mov rax, qword [rsp + 0x748]
mov qword [rsp + 0x4b0], rax
mov rax, qword [rsp + 0x4b0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x4b0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x4b8], rax
mov eax, dword [rsp + 0x4b8]
add rax, qword [rsp + 0x360]
mov qword [rsp + 0x4c0], rax
mov eax, dword [rsp + 0x4bc]
mov rcx, qword [rsp + 0x4c0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x750], rax
mov rax, qword [rsp + 0x4c0]
cmp qword [rsp + 0x4c8], rax
jb 0x140117005
mov rax, qword [rsp + 0x750]
cmp qword [rsp + 0x4c8], rax
jae 0x140117005
mov dword [rsp + 0xec], 1
jmp 0x140117010
mov dword [rsp + 0xec], 0
movzx eax, byte [rsp + 0xec]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x76]
test eax, eax
je 0x1401173ac
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x758], rax
mov rax, qword [rsp + 0x758]
mov qword [rsp + 0x4d0], rax
lea rax, [rsp + 0xde0]
mov qword [rsp + 0x3b0], rax
mov rax, qword [rsp + 0x3b0]
mov rcx, qword [rsp + 0x4d0]
mov qword [rax], rcx
mov rax, qword [rsp + 0x4d0]
mov qword [rsp + 0x760], rax
mov qword [rsp + 0x168], 0xffffffffffffffff
inc qword [rsp + 0x168]
mov rax, qword [rsp + 0x760]
mov rcx, qword [rsp + 0x168]
cmp byte [rax + rcx], 0
jne 0x14011708b
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x768], rax
mov rax, qword [rsp + 0x3b0]
mov rcx, qword [rsp + 0x768]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x3e0]
mov rdi, rax
mov rsi, qword [rsp + 0x3b0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x3e8]
mov rcx, qword [rsp + 0x3e0]
call fcn.140096220
mov qword [rsp + 0x3b8], rax
cmp qword [rsp + 0x3b8], 0xffffffffffffffff
je 0x14011719f
mov r9, qword [rsp + 0x3b8]
xor r8d, r8d
lea rdx, [rsp + 0xc00]
lea rcx, [rsp + 0x3e0]
call fcn.14019aaa0
mov rax, qword [rsp + 0x3b8]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0xc10]
lea rcx, [rsp + 0x3e0]
call fcn.14019aaa0
lea rax, [rsp + 0xb28]
lea rcx, [rsp + 0xc00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb38]
lea rcx, [rsp + 0xc10]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1401171fe
lea rax, [rsp + 0x3e0]
mov qword [rsp + 0x770], rax
mov qword [rsp + 0xaf8], 0
mov qword [rsp + 0xb00], 0
lea rax, [rsp + 0xb28]
mov rdi, rax
mov rsi, qword [rsp + 0x770]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb38]
lea rcx, [rsp + 0xaf8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb28]
mov qword [rsp + 0x778], rax
lea rax, [rsp + 0xb38]
mov qword [rsp + 0x788], rax
lea rax, [rsp + 0xae0]
mov qword [rsp + 0x4d8], rax
lea rax, [rsp + 0xf0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0xf0], 0x1b6e1b1e
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x780], rax
lea rax, [rsp + 0xc20]
mov rdi, rax
mov rsi, qword [rsp + 0x778]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xc30]
lea rcx, [rsp + 0xc20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xc30]
mov rcx, qword [rsp + 0x780]
call fcn.1400977d0
mov dword [rsp + 0x200], eax
mov rax, qword [rsp + 0x4d8]
mov ecx, dword [rsp + 0x200]
mov dword [rax], ecx
mov rax, qword [rsp + 0x4d8]
mov eax, dword [rax]
mov dword [rsp + 0x210], eax
lea rax, [rsp + 0xae4]
mov qword [rsp + 0x4e0], rax
lea rax, [rsp + 0xf4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0xf4], 0x1b6e1b1e
lea rax, [rsp + 0xf4]
mov qword [rsp + 0x790], rax
lea rax, [rsp + 0xc40]
mov rdi, rax
mov rsi, qword [rsp + 0x788]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xc50]
lea rcx, [rsp + 0xc40]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xc50]
mov rcx, qword [rsp + 0x790]
call fcn.1400977d0
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0x4e0]
mov ecx, dword [rsp + 0x208]
mov dword [rax], ecx
mov rax, qword [rsp + 0x4e0]
mov eax, dword [rax]
mov dword [rsp + 0x214], eax
mov r8d, dword [rsp + 0x210]
mov edx, dword [rsp + 0x214]
lea rcx, [rsp + 0x320]
call fcn.140191150
mov qword [rsp + 0x170], rax
jmp 0x1401173d2
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x170], rax
jmp 0x1401173d2
mov qword [rsp + 0x170], 0
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0xd50]
mov qword [rsp + 0x4e8], rax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x4e8], rax
mov eax, dword [rsp + 0x5e0]
mov dword [rsp + 0x218], eax
mov rax, qword [rsp + 0x4e8]
mov qword [rsp + 0x7a8], rax
mov eax, dword [rsp + 0x218]
mov dword [rsp + 0x220], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x798], rax
mov rax, qword [rsp + 0x798]
mov qword [rsp + 0x3f0], rax
mov byte [rsp + 0x3f8], 0
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x7a0], rax
mov rax, qword [rsp + 0x7a0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x3f8], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x7b0], rax
lea r9, [rsp + 0x7a8]
lea r8, [rsp + 0x220]
lea rdx, [rsp + 0xdb0]
mov rcx, qword [rsp + 0x7b0]
call fcn.140098320
movzx eax, byte [rsp + 0x3f8]
test eax, eax
je 0x1401174e1
mov rax, qword [rsp + 0x3f0]
mov qword [rsp + 0x7b8], rax
mov rax, qword [rsp + 0x7b8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0x7c0]
mov eax, dword [rax + 4]
mov dword [rsp + 0x228], eax
mov eax, dword [rsp + 0x228]
mov dword [rsp + 0x5e4], eax
lea rax, [rsp + 0x5e8]
mov qword [rsp + 0x7c8], rax
mov eax, dword [rsp + 0x5e4]
mov dword [rsp + 0x230], eax
mov rax, qword [rsp + 0x7c8]
add rax, 0x11
mov qword [rsp + 0x7d0], rax
mov eax, 6
mov rcx, qword [rsp + 0x7d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x7d8]
mov ecx, dword [rsp + 0x230]
mov dword [rax], ecx
lea rax, [rsp + 0x5e8]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
add rax, 0x10
mov qword [rsp + 0xd58], rax
mov rax, qword [0x1404d0cd8]
mov qword [rsp + 0x7e0], rax
mov qword [rsp + 0x4f0], 0
mov qword [rsp + 0x7e8], 0xd
mov rax, qword [rsp + 0x7e0]
mov qword [rsp + 0x7f0], rax
mov eax, 0x3000
and eax, 0xffffffc0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x7e8]
xor r8d, r8d
lea rdx, [rsp + 0x4f0]
mov rcx, 0xffffffffffffffff
call qword [rsp + 0x7f0]
mov dword [rsp + 0x238], eax
cmp dword [rsp + 0x238], 0
jl 0x140117622
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x4f8], rax
jmp 0x14011762e
mov qword [rsp + 0x4f8], 0
mov rax, qword [rsp + 0x4f8]
mov qword [rsp + 0x7f8], rax
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x7f8]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0xa8]
cmp qword [rax + 8], 0
jne 0x140117663
jmp 0x1401176ac
mov rax, qword [rsp + 0xa8]
add rax, 0x11
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax + 8]
mov rdi, rax
mov rsi, qword [rsp + 0x800]
mov ecx, reloc.WS2_32.dll_listen
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xa8]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [rsp + 0x5e8]
mov qword [rsp + 0x820], rax
mov r9, qword [rsp + 0x808]
mov r8, qword [rsp + 0x810]
mov rdx, qword [rsp + 0x818]
mov ecx, dword [rsp + 0x23c]
call qword [rsp + 0x820]
mov dword [rsp + 0x240], eax
lea rax, [rsp + 0x5e8]
mov rcx, rax
call fcn.1400a0db0
mov eax, dword [rsp + 0x240]
mov dword [rsp + 0x140], eax
mov eax, dword [rsp + 0x84]
mov ecx, eax
call fcn.1403a717c
mov qword [rsp + 0x828], rax
mov rax, qword [rsp + 0x828]
mov qword [rsp + 0x838], rax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x830]
mov rcx, qword [rsp + 0x838]
mov qword [rax], rcx
lea rax, [rsp + 0x84]
mov qword [rsp + 0x850], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x858], rax
mov dword [rsp + 0x288], send
mov dword [rsp + 0x244], 0x12a83c03
mov eax, dword [rsp + 0x244]
mov dword [rsp + 0x248], eax
mov eax, dword [rsp + 0x248]
mov dword [rsp + 0x250], eax
mov eax, dword [rsp + 0x250]
mov dword [rsp + 0x608], eax
mov dword [rsp + 0x60c], 0
lea rax, [rsp + 0x610]
mov qword [rsp + 0x848], rax
mov dword [rsp + 0x284], Ordinal_79
mov dword [rsp + 0x280], Ordinal_143
mov dword [rsp + 0x27c], Ordinal_211
mov dword [rsp + 0x278], Ordinal_79
mov dword [rsp + 0x274], Ordinal_200
mov dword [rsp + 0x270], Ordinal_200
mov dword [rsp + 0x26c], 0x3f
mov dword [rsp + 0x268], reloc.WS2_32.dll_recv
mov dword [rsp + 0x264], 0
mov dword [rsp + 0x260], 0
mov dword [rsp + 0x25c], reloc.WS2_32.dll_ntohs
mov dword [rsp + 0x258], 5
mov dword [rsp + 0x254], Ordinal_200
lea rax, [rsp + 0x254]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x25c]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x264]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x268]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x26c]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x270]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x274]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x278]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x27c]
lea r8, [rsp + 0x280]
lea rdx, [rsp + 0x284]
mov rcx, qword [rsp + 0x848]
call fcn.14008f900
mov byte [rsp + 0x92], 0
mov byte [rsp + 0x93], 0
mov rax, qword [rsp + 0x850]
mov qword [rsp + 0xa18], rax
mov byte [rsp + 0x94], 0
mov byte [rsp + 0x95], 1
mov eax, dword [rsp + 0x84]
mov qword [rsp + 0xa20], rax
mov byte [rsp + 0x96], 0
mov byte [rsp + 0x97], 0
mov rax, qword [rsp + 0x858]
mov qword [rsp + 0xa28], rax
mov byte [rsp + 0x98], 0
mov byte [rsp + 0x99], 0
mov eax, dword [rsp + 0x288]
mov dword [rsp + 0x314], eax
mov eax, dword [rsp + 0x608]
mov dword [rsp + 0x290], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x500], rax
mov rax, qword [rsp + 0x500]
mov qword [rsp + 0x860], rax
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0xac0], rax
mov byte [rsp + 0xac8], 1
mov rax, qword [rsp + 0x500]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x868], rax
lea r8, [rsp + 0x290]
lea rdx, [rsp + 0x518]
mov rcx, qword [rsp + 0x868]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x870], rax
mov rax, qword [rsp + 0x870]
add rax, 8
mov qword [rsp + 0x508], rax
mov rax, qword [rsp + 0xd20]
mov qword [rsp + 0x510], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x510], rax
mov rax, qword [rsp + 0x508]
mov rax, qword [rax]
mov qword [rsp + 0x878], rax
mov r8, qword [rsp + 0x510]
mov rdx, qword [rsp + 0x878]
lea rcx, [rsp + 0x880]
call fcn.14006f260
lea rax, [rsp + 0x880]
mov qword [rsp + 0x888], rax
mov rax, qword [rsp + 0x888]
mov rax, qword [rax]
cmp qword [rsp + 0x518], rax
jne 0x140117abc
mov dword [rsp + 0xf8], 1
jmp 0x140117ac7
mov dword [rsp + 0xf8], 0
movzx eax, byte [rsp + 0xf8]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x77]
test eax, eax
je 0x140117aea
mov qword [rsp + 0x520], 0
jmp 0x140117b52
mov rax, qword [rsp + 0x518]
add rax, 0x10
mov qword [rsp + 0x890], rax
mov rax, qword [rsp + 0x890]
mov qword [rsp + 0x898], rax
mov rax, qword [rsp + 0x898]
mov qword [rsp + 0x8a0], rax
mov rax, qword [rsp + 0x8a0]
mov qword [rsp + 0x8a8], rax
mov rax, qword [rsp + 0x8a8]
mov qword [rsp + 0x8b0], rax
mov rax, qword [rsp + 0x8b0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x520], rax
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x8c0], rax
movzx eax, byte [rsp + 0xac8]
test eax, eax
je 0x140117b8e
mov rax, qword [rsp + 0xac0]
mov qword [rsp + 0x8b8], rax
mov rax, qword [rsp + 0x8b8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x8c0]
mov qword [rsp + 0x528], rax
cmp qword [rsp + 0x528], 0
je 0x140117bce
mov rax, qword [rsp + 0x528]
mov eax, dword [rax + 4]
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x298]
mov dword [rsp + 0x60c], eax
jmp 0x140118a46
lea rax, [rsp + 0x650]
mov qword [rsp + 0x530], rax
mov rax, qword [rsp + 0x530]
mov dword [rax], 0
mov rax, qword [rsp + 0x530]
mov eax, dword [rax]
mov dword [rsp + 0x2a8], eax
lea rax, [rsp + 0x654]
mov qword [rsp + 0x538], rax
mov eax, dword [rsp + 0x608]
mov dword [rsp + 0x2a0], eax
mov rax, qword [rsp + 0x538]
mov ecx, dword [rsp + 0x2a0]
mov dword [rax], ecx
mov rax, qword [rsp + 0x538]
mov eax, dword [rax]
mov dword [rsp + 0x2ac], eax
mov eax, dword [rsp + 0x2a8]
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0x2ac]
mov dword [rsp + 0x128], eax
mov dword [rsp + 0x2b0], 0
mov eax, dword [rsp + 0x2b0]
cmp dword [rsp + 0x128], eax
jne 0x140117c88
xor eax, eax
cmp eax, 1
je 0x140117c88
mov dword [rsp + 0xfc], 1
jmp 0x140117c93
mov dword [rsp + 0xfc], 0
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x78]
test eax, eax
je 0x140117cb9
mov qword [rsp + 0x190], 0
jmp 0x140118907
mov byte [rsp + 0x9a], 1
mov qword [rsp + 0x640], 0
mov qword [rsp + 0x648], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x8c8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x8d0], rax
mov rax, qword [rsp + 0x8d0]
add rax, 0x10
mov qword [rsp + 0x328], rax
mov eax, 1
test eax, eax
je 0x140117d33
mov rax, qword [rsp + 0x328]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x540], rax
jmp 0x140117d46
mov rax, qword [rsp + 0x328]
mov rax, qword [rax]
mov qword [rsp + 0x540], rax
mov rax, qword [rsp + 0x540]
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0x648], rax
lea rax, [rsp + 0x640]
mov qword [rsp + 0x548], rax
mov rax, qword [rsp + 0x548]
mov rax, qword [rax]
mov qword [rsp + 0x8d8], rax
mov rax, qword [rsp + 0x8d8]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x548]
mov rax, qword [rax + 8]
mov qword [rsp + 0x8e0], rax
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x8e8], rax
jmp 0x140117dd2
mov rax, qword [rsp + 0x178]
mov rax, qword [rax]
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0x8e8]
cmp qword [rsp + 0x178], rax
je 0x140117df1
mov dword [rsp + 0x100], 1
jmp 0x140117dfc
mov dword [rsp + 0x100], 0
movzx eax, byte [rsp + 0x100]
test eax, eax
je 0x1401188fb
xor eax, eax
mov qword [rsp + 0x8f0], rax
mov rax, qword [rsp + 0x8f0]
mov rcx, qword [rsp + 0x178]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x8f8], rax
lea rax, [rsp + 0x8f8]
mov qword [rsp + 0x558], rax
mov dword [rsp + 0x2b4], 0
mov eax, dword [rsp + 0x2b4]
cmp dword [rsp + 0x108], eax
jne 0x140117e73
xor eax, eax
cmp eax, 1
je 0x140117e73
mov dword [rsp + 0x104], 1
jmp 0x140117e7e
mov dword [rsp + 0x104], 0
movzx eax, byte [rsp + 0x104]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x79]
test eax, eax
jne 0x1401181ab
mov rax, qword [rsp + 0x558]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x900], rax
mov rax, qword [rsp + 0x900]
mov rax, qword [rax + 8]
mov qword [rsp + 0x550], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x908], rax
mov qword [rsp + 0x180], 0xffffffffffffffff
inc qword [rsp + 0x180]
mov rax, qword [rsp + 0x908]
mov rcx, qword [rsp + 0x180]
cmp word [rax + rcx*2], 0
jne 0x140117eee
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
mov qword [rsp + 0xb10], rax
lea rax, [rsp + 0xb08]
mov qword [rsp + 0x918], rax
lea rax, [rsp + 0xc60]
mov rdi, rax
mov rsi, qword [rsp + 0x918]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x2b8], eax
lea rax, [rsp + 0xad0]
lea rcx, [rsp + 0xc60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x2b8]
mov dword [rsp + 0x148], eax
lea rax, [rsp + 0x110]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x110], 0x1b6e1b1e
lea rax, [rsp + 0x110]
mov qword [rsp + 0x920], rax
lea rax, [rsp + 0xc70]
lea rcx, [rsp + 0xad0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xc80]
lea rcx, [rsp + 0xc70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xc80]
mov rcx, qword [rsp + 0x920]
call fcn.140097890
mov dword [rsp + 0x2bc], eax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0x928], rax
mov rax, qword [rsp + 0x928]
sub rax, 4
mov qword [rsp + 0x930], rax
mov r9, qword [rsp + 0x930]
xor r8d, r8d
lea rdx, [rsp + 0xc90]
lea rcx, [rsp + 0xad0]
call fcn.14019ab70
lea rax, [rsp + 0x114]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x114], 0x1b6e1b1e
lea rax, [rsp + 0x114]
mov qword [rsp + 0x938], rax
lea rax, [rsp + 0xca0]
lea rcx, [rsp + 0xc90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xcb0]
lea rcx, [rsp + 0xca0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xcb0]
mov rcx, qword [rsp + 0x938]
call fcn.140097890
mov dword [rsp + 0x2c4], eax
mov eax, dword [rsp + 0x2bc]
mov dword [rsp + 0x2c0], eax
mov eax, dword [rsp + 0x2c0]
cmp dword [rsp + 0x148], eax
jne 0x140118110
xor eax, eax
cmp eax, 1
je 0x140118110
mov dword [rsp + 0x118], 1
jmp 0x14011811b
mov dword [rsp + 0x118], 0
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7a]
test eax, eax
jne 0x14011818f
mov eax, dword [rsp + 0x2c4]
mov dword [rsp + 0x2c8], eax
mov eax, dword [rsp + 0x2c8]
cmp dword [rsp + 0x148], eax
jne 0x140118162
xor eax, eax
cmp eax, 1
je 0x140118162
mov dword [rsp + 0x120], 1
jmp 0x14011816d
mov dword [rsp + 0x120], 0
movzx eax, byte [rsp + 0x120]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7b]
test eax, eax
jne 0x14011818f
mov dword [rsp + 0x124], 1
jmp 0x14011819a
mov dword [rsp + 0x124], 0
movzx eax, byte [rsp + 0x124]
test eax, eax
je 0x1401181ab
jmp 0x140117dbf
mov rax, qword [rsp + 0x558]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x560], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x940], rax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0x568], rax
mov rax, qword [rsp + 0x568]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x568]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x948], rax
mov eax, dword [rsp + 0x948]
add rax, qword [rsp + 0x350]
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0x358], rax
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x2cc], eax
mov eax, dword [rsp + 0x2cc]
mov dword [rsp + 0x2d0], eax
lea rdx, [rsp + 0xfc8]
lea rcx, [rsp + 0x350]
call fcn.1401906d0
lea rcx, [rsp + 0xea0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xff0]
lea rcx, [rsp + 0x350]
call fcn.14018ec60
lea rcx, [rsp + 0xec8]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xef0]
lea rcx, [rsp + 0xea0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xf20]
lea rcx, [rsp + 0xec8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x2d0]
lea r8, [rsp + 0xef0]
lea rdx, [rsp + 0xf20]
lea rcx, [rsp + 0xd88]
call fcn.140097110
lea rdx, [rsp + 0x1018]
lea rcx, [rsp + 0x350]
call fcn.1401906d0
mov qword [rsp + 0x570], rax
mov rax, qword [rsp + 0x570]
mov rax, qword [rax + 8]
cmp qword [rsp + 0xd90], rax
jne 0x140118360
mov rax, qword [rsp + 0x570]
mov rax, qword [rax]
cmp qword [rsp + 0xd88], rax
jne 0x140118360
mov dword [rsp + 0x130], 1
jmp 0x14011836b
mov dword [rsp + 0x130], 0
movzx eax, byte [rsp + 0x130]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x7c]
test eax, eax
je 0x140118385
jmp 0x140117dbf
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x14011844b
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0x580], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x578], rax
mov rax, qword [rsp + 0x578]
mov qword [rax], 0
mov rax, qword [rsp + 0x578]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0x580]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0xd98]
mov qword [rsp + 0x588], rax
mov rax, qword [rsp + 0x588]
mov qword [rsp + 0xd28], rax
mov rax, qword [rsp + 0x588]
add rax, 0x10
mov qword [rsp + 0x340], rax
mov rax, qword [rsp + 0x340]
mov rax, qword [rax]
mov qword [rsp + 0x5a8], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x958], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0x590], rax
mov rax, qword [rsp + 0x590]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x590]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x598], rax
mov eax, dword [rsp + 0x598]
add rax, qword [rsp + 0x350]
mov qword [rsp + 0x5a0], rax
mov eax, dword [rsp + 0x59c]
mov rcx, qword [rsp + 0x5a0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x960], rax
mov rax, qword [rsp + 0x5a0]
cmp qword [rsp + 0x5a8], rax
jb 0x14011853a
mov rax, qword [rsp + 0x960]
cmp qword [rsp + 0x5a8], rax
jae 0x14011853a
mov dword [rsp + 0x134], 1
jmp 0x140118545
mov dword [rsp + 0x134], 0
movzx eax, byte [rsp + 0x134]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x7d]
test eax, eax
je 0x1401188e1
mov rax, qword [rsp + 0x340]
mov rax, qword [rax]
mov qword [rsp + 0x968], rax
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0x5b0], rax
lea rax, [rsp + 0xdc0]
mov qword [rsp + 0x330], rax
mov rax, qword [rsp + 0x330]
mov rcx, qword [rsp + 0x5b0]
mov qword [rax], rcx
mov rax, qword [rsp + 0x5b0]
mov qword [rsp + 0x970], rax
mov qword [rsp + 0x188], 0xffffffffffffffff
inc qword [rsp + 0x188]
mov rax, qword [rsp + 0x970]
mov rcx, qword [rsp + 0x188]
cmp byte [rax + rcx], 0
jne 0x1401185c0
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x330]
mov rcx, qword [rsp + 0x978]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x400]
mov rdi, rax
mov rsi, qword [rsp + 0x330]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x408]
mov rcx, qword [rsp + 0x400]
call fcn.140096220
mov qword [rsp + 0x338], rax
cmp qword [rsp + 0x338], 0xffffffffffffffff
je 0x1401186d4
mov r9, qword [rsp + 0x338]
xor r8d, r8d
lea rdx, [rsp + 0xcc0]
lea rcx, [rsp + 0x400]
call fcn.14019aaa0
mov rax, qword [rsp + 0x338]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0xcd0]
lea rcx, [rsp + 0x400]
call fcn.14019aaa0
lea rax, [rsp + 0xb48]
lea rcx, [rsp + 0xcc0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb58]
lea rcx, [rsp + 0xcd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140118733
lea rax, [rsp + 0x400]
mov qword [rsp + 0x980], rax
mov qword [rsp + 0xb18], 0
mov qword [rsp + 0xb20], 0
lea rax, [rsp + 0xb48]
mov rdi, rax
mov rsi, qword [rsp + 0x980]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb58]
lea rcx, [rsp + 0xb18]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xb48]
mov qword [rsp + 0x988], rax
lea rax, [rsp + 0xb58]
mov qword [rsp + 0x998], rax
lea rax, [rsp + 0xa6c]
mov qword [rsp + 0x5b8], rax
lea rax, [rsp + 0x138]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x138], 0x1b6e1b1e
lea rax, [rsp + 0x138]
mov qword [rsp + 0x990], rax
lea rax, [rsp + 0xce0]
mov rdi, rax
mov rsi, qword [rsp + 0x988]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xcf0]
lea rcx, [rsp + 0xce0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xcf0]
mov rcx, qword [rsp + 0x990]
call fcn.1400977d0
mov dword [rsp + 0x2d8], eax
mov rax, qword [rsp + 0x5b8]
mov ecx, dword [rsp + 0x2d8]
mov dword [rax], ecx
mov rax, qword [rsp + 0x5b8]
mov eax, dword [rax]
mov dword [rsp + 0x2e8], eax
lea rax, [rsp + 0xa68]
mov qword [rsp + 0x5c0], rax
lea rax, [rsp + 0x13c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x13c], 0x1b6e1b1e
lea rax, [rsp + 0x13c]
mov qword [rsp + 0x9a0], rax
lea rax, [rsp + 0xd00]
mov rdi, rax
mov rsi, qword [rsp + 0x998]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xd10]
lea rcx, [rsp + 0xd00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xd10]
mov rcx, qword [rsp + 0x9a0]
call fcn.1400977d0
mov dword [rsp + 0x2e0], eax
mov rax, qword [rsp + 0x5c0]
mov ecx, dword [rsp + 0x2e0]
mov dword [rax], ecx
mov rax, qword [rsp + 0x5c0]
mov eax, dword [rax]
mov dword [rsp + 0x2ec], eax
mov r8d, dword [rsp + 0x2e8]
mov edx, dword [rsp + 0x2ec]
lea rcx, [rsp + 0x348]
call fcn.140191150
mov qword [rsp + 0x190], rax
jmp 0x140118907
mov rax, qword [rsp + 0x340]
mov rax, qword [rax]
mov qword [rsp + 0x190], rax
jmp 0x140118907
mov qword [rsp + 0x190], 0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0xb68]
mov qword [rsp + 0x5c8], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x5c8], rax
mov eax, dword [rsp + 0x608]
mov dword [rsp + 0x2f0], eax
mov rax, qword [rsp + 0x5c8]
mov qword [rsp + 0x9b8], rax
mov eax, dword [rsp + 0x2f0]
mov dword [rsp + 0x2f8], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x9a8], rax
mov rax, qword [rsp + 0x9a8]
mov qword [rsp + 0x410], rax
mov byte [rsp + 0x418], 0
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x9b0], rax
mov rax, qword [rsp + 0x9b0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x418], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x9c0], rax
lea r9, [rsp + 0x9b8]
lea r8, [rsp + 0x2f8]
lea rdx, [rsp + 0xdd0]
mov rcx, qword [rsp + 0x9c0]
call fcn.140098320
movzx eax, byte [rsp + 0x418]
test eax, eax
je 0x140118a16
mov rax, qword [rsp + 0x410]
mov qword [rsp + 0x9c8], rax
mov rax, qword [rsp + 0x9c8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x9d0], rax
mov rax, qword [rsp + 0x9d0]
mov eax, dword [rax + 4]
mov dword [rsp + 0x300], eax
mov eax, dword [rsp + 0x300]
mov dword [rsp + 0x60c], eax
lea rax, [rsp + 0x610]
mov qword [rsp + 0x9d8], rax
mov eax, dword [rsp + 0x60c]
mov dword [rsp + 0x308], eax
mov rax, qword [rsp + 0x9d8]
add rax, 0x11
mov qword [rsp + 0x9e0], rax
mov eax, 6
mov rcx, qword [rsp + 0x9e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x9e8], rax
mov rax, qword [rsp + 0x9e8]
mov ecx, dword [rsp + 0x308]
mov dword [rax], ecx
lea rax, [rsp + 0x610]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
add rax, 0x10
mov qword [rsp + 0xb70], rax
mov rax, qword [0x1404d0cd8]
mov qword [rsp + 0x9f0], rax
mov qword [rsp + 0x5d0], 0
mov qword [rsp + 0x9f8], 0xd
mov rax, qword [rsp + 0x9f0]
mov qword [rsp + 0xa00], rax
mov eax, 0x3000
and eax, 0xffffffc0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x9f8]
xor r8d, r8d
lea rdx, [rsp + 0x5d0]
mov rcx, 0xffffffffffffffff
call qword [rsp + 0xa00]
mov dword [rsp + 0x310], eax
cmp dword [rsp + 0x310], 0
jl 0x140118b57
mov rax, qword [rsp + 0x5d0]
mov qword [rsp + 0x5d8], rax
jmp 0x140118b63
mov qword [rsp + 0x5d8], 0
mov rax, qword [rsp + 0x5d8]
mov qword [rsp + 0xa08], rax
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa08]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0xa0]
cmp qword [rax + 8], 0
jne 0x140118b98
jmp 0x140118be1
mov rax, qword [rsp + 0xa0]
add rax, 0x11
mov qword [rsp + 0xa10], rax
mov rax, qword [rsp + 0xa0]
mov rax, qword [rax + 8]
mov rdi, rax
mov rsi, qword [rsp + 0xa10]
mov ecx, reloc.WS2_32.dll_listen
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa0]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [rsp + 0x610]
mov qword [rsp + 0xa30], rax
mov r9, qword [rsp + 0xa18]
mov r8, qword [rsp + 0xa20]
mov rdx, qword [rsp + 0xa28]
mov ecx, dword [rsp + 0x314]
call qword [rsp + 0xa30]
mov dword [rsp + 0x318], eax
lea rax, [rsp + 0x610]
mov rcx, rax
call fcn.1400a0db0
mov eax, dword [rsp + 0x318]
mov dword [rsp + 0x140], eax
cmp dword [rsp + 0x140], 0
jge 0x140118c85
lea rdx, [0x1403fa348]
mov rcx, qword [rsp + 0x1060]
call fcn.1400991c0
mov eax, dword [rsp + 0x80]
or eax, 1
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0x150]
call fcn.1400a0fc0
mov rax, qword [rsp + 0x1060]
jmp 0x140118e81
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x3c8], rax
mov dword [rsp + 0x88], 0
jmp 0x140118cb2
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x3c8]
mov eax, dword [rax]
cmp dword [rsp + 0x88], eax
jae 0x140118e47
mov eax, dword [rsp + 0x88]
imul rax, rax, 0x128
mov rcx, qword [rsp + 0x3c8]
lea rax, [rcx + rax + 8]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x198]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x198]
mov eax, dword [rax + 0x18]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0x3d0]
cmp qword [rsp + 0x1068], rax
jb 0x140118e42
mov rax, qword [rsp + 0xa38]
mov rcx, qword [rsp + 0x3d0]
add rcx, rax
mov rax, rcx
cmp qword [rsp + 0x1068], rax
jae 0x140118e42
mov rax, qword [rsp + 0x198]
movzx eax, word [rax + 0x26]
mov rcx, qword [rsp + 0x198]
lea rax, [rcx + rax + 0x28]
mov rdx, rax
lea rcx, [rsp + 0xd30]
call fcn.14006f790
nop
lea rax, [rsp + 0x9b]
mov qword [rsp + 0xa50], rax
lea rdx, [rsp + 0xb78]
lea rcx, [rsp + 0xd30]
call fcn.14007cf40
mov rax, qword [rax]
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0xa40]
mov qword [rsp + 0xa58], rax
lea rdx, [rsp + 0xb80]
lea rcx, [rsp + 0xd30]
call fcn.1400790f0
mov rax, qword [rax]
mov qword [rsp + 0xa48], rax
mov rax, qword [rsp + 0xa48]
mov qword [rsp + 0xa60], rax
mov r9, qword [rsp + 0xa50]
mov r8, qword [rsp + 0xa58]
mov rdx, qword [rsp + 0xa60]
mov rcx, qword [rsp + 0x1060]
call fcn.140091540
mov eax, dword [rsp + 0x80]
or eax, 1
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0xd30]
call fcn.140078080
nop
lea rcx, [rsp + 0x150]
call fcn.1400a0fc0
mov rax, qword [rsp + 0x1060]
jmp 0x140118e81
jmp 0x140118ca2
lea rdx, [0x1403fa360]
mov rcx, qword [rsp + 0x1060]
call fcn.1400991c0
mov eax, dword [rsp + 0x80]
or eax, 1
mov dword [rsp + 0x80], eax
lea rcx, [rsp + 0x150]
call fcn.1400a0fc0
mov rax, qword [rsp + 0x1060]
add rsp, 0x1048
pop rdi
pop rsi
ret