Function at 0x1400a4a40
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x26e8
call fcn.1403a70f0
sub rsp, rax
mov dword [rsp + 0x16c0], 0
mov byte [rsp + 0xa0], Ordinal_79
mov byte [rsp + 0xa1], 0x83
mov byte [rsp + 0xa2], 0xec
mov byte [rsp + 0xa3], gethostname
mov byte [rsp + 0xa4], Ordinal_79
mov byte [rsp + 0xa5], 0xb8
mov byte [rsp + 0xa6], 0
mov byte [rsp + 0xa7], 0
mov byte [rsp + 0xa8], 0
mov byte [rsp + 0xa9], 0
mov byte [rsp + 0xaa], 0
mov byte [rsp + 0xab], 0
mov byte [rsp + 0xac], 0
mov byte [rsp + 0xad], 0
mov byte [rsp + 0xae], Ordinal_79
mov byte [rsp + 0xaf], Ordinal_143
mov byte [rsp + 0xb0], 0x44
mov byte [rsp + 0xb1], Ordinal_41
mov byte [rsp + 0xb2], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xb3], Ordinal_79
mov byte [rsp + 0xb4], Ordinal_143
mov byte [rsp + 0xb5], 0x44
mov byte [rsp + 0xb6], Ordinal_41
mov byte [rsp + 0xb7], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xb8], 0x83
mov byte [rsp + 0xb9], gethostname
mov byte [rsp + 0xba], 0
mov byte [rsp + 0xbb], 0x75
mov byte [rsp + 0xbc], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0xbd], Ordinal_79
mov byte [rsp + 0xbe], Ordinal_143
mov byte [rsp + 0xbf], 0x44
mov byte [rsp + 0xc0], Ordinal_41
mov byte [rsp + 0xc1], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xc2], Ordinal_200
mov byte [rsp + 0xc3], 0
mov byte [rsp + 0xc4], 1
mov byte [rsp + 0xc5], 0
mov byte [rsp + 0xc6], 0
mov byte [rsp + 0xc7], 0
mov byte [rsp + 0xc8], Ordinal_79
mov byte [rsp + 0xc9], Ordinal_143
mov byte [rsp + 0xca], 0x44
mov byte [rsp + 0xcb], Ordinal_41
mov byte [rsp + 0xcc], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xcd], Ordinal_79
mov byte [rsp + 0xce], Ordinal_143
mov byte [rsp + 0xcf], 0x40
mov byte [rsp + 0xd0], 8
mov byte [rsp + 0xd1], Ordinal_79
mov byte [rsp + 0xd2], Ordinal_143
mov byte [rsp + 0xd3], 0x44
mov byte [rsp + 0xd4], Ordinal_41
mov byte [rsp + 0xd5], Ordinal_45
mov byte [rsp + 0xd6], 0x45
mov byte [rsp + 0xd7], gethostname
mov byte [rsp + 0xd8], 0xc0
mov byte [rsp + 0xd9], 0xba
mov byte [rsp + 0xda], 1
mov byte [rsp + 0xdb], 0
mov byte [rsp + 0xdc], 0
mov byte [rsp + 0xdd], 0
mov byte [rsp + 0xde], Ordinal_79
mov byte [rsp + 0xdf], Ordinal_143
mov byte [rsp + 0xe0], 0x44
mov byte [rsp + 0xe1], Ordinal_41
mov byte [rsp + 0xe2], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xe3], Ordinal_79
mov byte [rsp + 0xe4], Ordinal_143
mov byte [rsp + 0xe5], Ordinal_79
mov byte [rsp + 0xe6], reloc.WS2_32.dll_recv
mov byte [rsp + 0xe7], 0xff
mov byte [rsp + 0xe8], 0x54
mov byte [rsp + 0xe9], Ordinal_41
mov byte [rsp + 0xea], Ordinal_45
mov byte [rsp + 0xeb], Ordinal_79
mov byte [rsp + 0xec], Ordinal_143
mov byte [rsp + 0xed], 0x44
mov byte [rsp + 0xee], Ordinal_41
mov byte [rsp + 0xef], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xf0], Ordinal_200
mov byte [rsp + 0xf1], 0
mov byte [rsp + 0xf2], 2
mov byte [rsp + 0xf3], 0
mov byte [rsp + 0xf4], 0
mov byte [rsp + 0xf5], 0
mov byte [rsp + 0xf6], Ordinal_79
mov byte [rsp + 0xf7], 0x83
mov byte [rsp + 0xf8], Ordinal_200
mov byte [rsp + 0xf9], gethostname
mov byte [rsp + 0xfa], Ordinal_200
mov byte [rsp + 0xfb], Ordinal_211
mov dword [rsp + 0x16c4], 6
lea rax, [rsp + 0x140]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
mov dword [rsp + 0x6b0], 0x6be87d44
lea rax, [rsp + 0x16c8]
mov qword [rsp + 0x8b0], rax
mov rax, qword [rsp + 0x8b0]
mov dword [rax], 0
mov rax, qword [rsp + 0x8b0]
mov eax, dword [rax]
mov dword [rsp + 0x718], eax
mov eax, dword [rsp + 0x6b0]
mov dword [rsp + 0x128], eax
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x708], eax
mov eax, dword [rsp + 0x708]
mov dword [rsp + 0x710], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x8b8], rax
mov rax, qword [rsp + 0x8b8]
mov qword [rsp + 0x1670], rax
mov rax, qword [rsp + 0x1670]
mov qword [rsp + 0x16d8], rax
mov byte [rsp + 0x16e0], 1
mov rax, qword [rsp + 0x8b8]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1678], rax
lea r8, [rsp + 0x710]
lea rdx, [rsp + 0x8d0]
mov rcx, qword [rsp + 0x1678]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1680], rax
mov rax, qword [rsp + 0x1680]
add rax, 8
mov qword [rsp + 0x8c0], rax
mov rax, qword [rsp + 0x1d70]
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x8c0]
mov qword [rsp + 0x8c8], rax
mov rax, qword [rsp + 0x8c0]
mov rax, qword [rax]
mov qword [rsp + 0x1688], rax
mov r8, qword [rsp + 0x8c8]
mov rdx, qword [rsp + 0x1688]
lea rcx, [rsp + 0x1690]
call fcn.14006f260
lea rax, [rsp + 0x1690]
mov qword [rsp + 0x1698], rax
mov rax, qword [rsp + 0x1698]
mov rax, qword [rax]
cmp qword [rsp + 0x8d0], rax
jne 0x1400a4ee3
mov dword [rsp + 0x2e8], 1
jmp 0x1400a4eee
mov dword [rsp + 0x2e8], 0
movzx eax, byte [rsp + 0x2e8]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x70]
test eax, eax
je 0x1400a4f11
mov qword [rsp + 0x8d8], 0
jmp 0x1400a4f79
mov rax, qword [rsp + 0x8d0]
add rax, 0x10
mov qword [rsp + 0x16a0], rax
mov rax, qword [rsp + 0x16a0]
mov qword [rsp + 0x16a8], rax
mov rax, qword [rsp + 0x16a8]
mov qword [rsp + 0x16b0], rax
mov rax, qword [rsp + 0x16b0]
mov qword [rsp + 0x16b8], rax
mov rax, qword [rsp + 0x16b8]
mov qword [rsp + 0xda8], rax
mov rax, qword [rsp + 0xda8]
mov rax, qword [rax + 8]
mov qword [rsp + 0x8d8], rax
mov rax, qword [rsp + 0x8d8]
mov qword [rsp + 0xdb8], rax
movzx eax, byte [rsp + 0x16e0]
test eax, eax
je 0x1400a4fb5
mov rax, qword [rsp + 0x16d8]
mov qword [rsp + 0xdb0], rax
mov rax, qword [rsp + 0xdb0]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0xdb8]
mov qword [rsp + 0x318], rax
cmp qword [rsp + 0x318], 0
jne 0x1400a5dac
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x720], eax
mov eax, dword [rsp + 0x718]
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x720]
mov dword [rsp + 0x188], eax
mov dword [rsp + 0x728], 0
mov eax, dword [rsp + 0x728]
cmp dword [rsp + 0x188], eax
jne 0x1400a502d
xor eax, eax
cmp eax, 1
je 0x1400a502d
mov dword [rsp + 0x2ec], 1
jmp 0x1400a5038
mov dword [rsp + 0x2ec], 0
movzx eax, byte [rsp + 0x2ec]
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x71]
test eax, eax
je 0x1400a505e
mov qword [rsp + 0x310], 0
jmp 0x1400a5cac
mov byte [rsp + 0x100], 1
mov qword [rsp + 0xd38], 0
mov qword [rsp + 0xd40], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0xdc0], rax
mov rax, qword [rsp + 0xdc0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xdc8], rax
mov rax, qword [rsp + 0xdc8]
add rax, 0x10
mov qword [rsp + 0x7a8], rax
mov eax, 1
test eax, eax
je 0x1400a50d8
mov rax, qword [rsp + 0x7a8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x8e0], rax
jmp 0x1400a50eb
mov rax, qword [rsp + 0x7a8]
mov rax, qword [rax]
mov qword [rsp + 0x8e0], rax
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0x7a8]
mov qword [rsp + 0xd40], rax
lea rax, [rsp + 0xd38]
mov qword [rsp + 0x8e8], rax
mov rax, qword [rsp + 0x8e8]
mov rax, qword [rax]
mov qword [rsp + 0xdd0], rax
mov rax, qword [rsp + 0xdd0]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x8e8]
mov rax, qword [rax + 8]
mov qword [rsp + 0xdd8], rax
mov rax, qword [rsp + 0xdd8]
mov qword [rsp + 0xde0], rax
jmp 0x1400a5177
mov rax, qword [rsp + 0x2f8]
mov rax, qword [rax]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0xde0]
cmp qword [rsp + 0x2f8], rax
je 0x1400a5196
mov dword [rsp + 0x2f0], 1
jmp 0x1400a51a1
mov dword [rsp + 0x2f0], 0
movzx eax, byte [rsp + 0x2f0]
test eax, eax
je 0x1400a5ca0
xor eax, eax
mov qword [rsp + 0xde8], rax
mov rax, qword [rsp + 0xde8]
mov rcx, qword [rsp + 0x2f8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xdf0], rax
lea rax, [rsp + 0xdf0]
mov qword [rsp + 0x8f8], rax
mov dword [rsp + 0x72c], 0
mov eax, dword [rsp + 0x72c]
cmp dword [rsp + 0x160], eax
jne 0x1400a5218
xor eax, eax
cmp eax, 1
je 0x1400a5218
mov dword [rsp + 0x2f4], 1
jmp 0x1400a5223
mov dword [rsp + 0x2f4], 0
movzx eax, byte [rsp + 0x2f4]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x72]
test eax, eax
jne 0x1400a5550
mov rax, qword [rsp + 0x8f8]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0xdf8], rax
mov rax, qword [rsp + 0xdf8]
mov rax, qword [rax + 8]
mov qword [rsp + 0x8f0], rax
mov rax, qword [rsp + 0x8f0]
mov qword [rsp + 0x1818], rax
mov rax, qword [rsp + 0x8f0]
mov qword [rsp + 0xe00], rax
mov qword [rsp + 0x300], 0xffffffffffffffff
inc qword [rsp + 0x300]
mov rax, qword [rsp + 0xe00]
mov rcx, qword [rsp + 0x300]
cmp word [rax + rcx*2], 0
jne 0x1400a5293
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0xe08], rax
mov rax, qword [rsp + 0xe08]
mov qword [rsp + 0x1820], rax
lea rax, [rsp + 0x1818]
mov qword [rsp + 0xe10], rax
lea rax, [rsp + 0x1970]
mov rdi, rax
mov rsi, qword [rsp + 0xe10]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x730], eax
lea rax, [rsp + 0x16f0]
lea rcx, [rsp + 0x1970]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x730]
mov dword [rsp + 0x178], eax
lea rax, [rsp + 0x168]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x168], 0x1b6e1b1e
lea rax, [rsp + 0x168]
mov qword [rsp + 0xe18], rax
lea rax, [rsp + 0x1980]
lea rcx, [rsp + 0x16f0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1990]
lea rcx, [rsp + 0x1980]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1990]
mov rcx, qword [rsp + 0xe18]
call fcn.140097890
mov dword [rsp + 0x734], eax
mov rax, qword [rsp + 0x16f8]
mov qword [rsp + 0xe20], rax
mov rax, qword [rsp + 0xe20]
sub rax, 4
mov qword [rsp + 0xe28], rax
mov r9, qword [rsp + 0xe28]
xor r8d, r8d
lea rdx, [rsp + 0x19a0]
lea rcx, [rsp + 0x16f0]
call fcn.14019ab70
lea rax, [rsp + 0x16c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x16c], 0x1b6e1b1e
lea rax, [rsp + 0x16c]
mov qword [rsp + 0xe30], rax
lea rax, [rsp + 0x19b0]
lea rcx, [rsp + 0x19a0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x19c0]
lea rcx, [rsp + 0x19b0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x19c0]
mov rcx, qword [rsp + 0xe30]
call fcn.140097890
mov dword [rsp + 0x73c], eax
mov eax, dword [rsp + 0x734]
mov dword [rsp + 0x738], eax
mov eax, dword [rsp + 0x738]
cmp dword [rsp + 0x178], eax
jne 0x1400a54b5
xor eax, eax
cmp eax, 1
je 0x1400a54b5
mov dword [rsp + 0x170], 1
jmp 0x1400a54c0
mov dword [rsp + 0x170], 0
movzx eax, byte [rsp + 0x170]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x73]
test eax, eax
jne 0x1400a5534
mov eax, dword [rsp + 0x73c]
mov dword [rsp + 0x740], eax
mov eax, dword [rsp + 0x740]
cmp dword [rsp + 0x178], eax
jne 0x1400a5507
xor eax, eax
cmp eax, 1
je 0x1400a5507
mov dword [rsp + 0x180], 1
jmp 0x1400a5512
mov dword [rsp + 0x180], 0
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x74]
test eax, eax
jne 0x1400a5534
mov dword [rsp + 0x184], 1
jmp 0x1400a553f
mov dword [rsp + 0x184], 0
movzx eax, byte [rsp + 0x184]
test eax, eax
je 0x1400a5550
jmp 0x1400a5164
mov rax, qword [rsp + 0x8f8]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x900], rax
mov rax, qword [rsp + 0x900]
mov qword [rsp + 0x6f8], rax
mov rax, qword [rsp + 0x900]
mov qword [rsp + 0xe38], rax
mov rax, qword [rsp + 0xe38]
mov qword [rsp + 0x908], rax
mov rax, qword [rsp + 0x908]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x908]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xe40], rax
mov eax, dword [rsp + 0xe40]
add rax, qword [rsp + 0x6f8]
mov qword [rsp + 0xe48], rax
mov rax, qword [rsp + 0xe48]
mov qword [rsp + 0x700], rax
mov eax, dword [rsp + 0x188]
mov dword [rsp + 0x744], eax
mov eax, dword [rsp + 0x744]
mov dword [rsp + 0x748], eax
lea rdx, [rsp + 0x24a8]
lea rcx, [rsp + 0x6f8]
call fcn.1401906d0
lea rcx, [rsp + 0x2250]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2278]
lea rcx, [rsp + 0x6f8]
call fcn.14018ec60
lea rcx, [rsp + 0x1f00]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f30]
lea rcx, [rsp + 0x2250]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f60]
lea rcx, [rsp + 0x1f00]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x748]
lea r8, [rsp + 0x1f30]
lea rdx, [rsp + 0x1f60]
lea rcx, [rsp + 0x1dc0]
call fcn.140097110
lea rdx, [rsp + 0x22a0]
lea rcx, [rsp + 0x6f8]
call fcn.1401906d0
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x1dc8], rax
jne 0x1400a5705
mov rax, qword [rsp + 0x910]
mov rax, qword [rax]
cmp qword [rsp + 0x1dc0], rax
jne 0x1400a5705
mov dword [rsp + 0x190], 1
jmp 0x1400a5710
mov dword [rsp + 0x190], 0
movzx eax, byte [rsp + 0x190]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x75]
test eax, eax
je 0x1400a572a
jmp 0x1400a5164
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1400a57f0
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0x920], rax
mov rax, qword [rsp + 0x920]
mov qword [rsp + 0x918], rax
mov rax, qword [rsp + 0x918]
mov qword [rax], 0
mov rax, qword [rsp + 0x918]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0x920]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x1dd0]
mov qword [rsp + 0x928], rax
mov rax, qword [rsp + 0x928]
mov qword [rsp + 0x1d78], rax
mov rax, qword [rsp + 0x928]
add rax, 0x10
mov qword [rsp + 0x7c0], rax
mov rax, qword [rsp + 0x7c0]
mov rax, qword [rax]
mov qword [rsp + 0x948], rax
mov rax, qword [rsp + 0x6f8]
mov qword [rsp + 0xe50], rax
mov rax, qword [rsp + 0xe50]
mov qword [rsp + 0x930], rax
mov rax, qword [rsp + 0x930]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x930]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x938], rax
mov eax, dword [rsp + 0x938]
add rax, qword [rsp + 0x6f8]
mov qword [rsp + 0x940], rax
mov eax, dword [rsp + 0x93c]
mov rcx, qword [rsp + 0x940]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xe58], rax
mov rax, qword [rsp + 0x940]
cmp qword [rsp + 0x948], rax
jb 0x1400a58df
mov rax, qword [rsp + 0xe58]
cmp qword [rsp + 0x948], rax
jae 0x1400a58df
mov dword [rsp + 0x194], 1
jmp 0x1400a58ea
mov dword [rsp + 0x194], 0
movzx eax, byte [rsp + 0x194]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x76]
test eax, eax
je 0x1400a5c86
mov rax, qword [rsp + 0x7c0]
mov rax, qword [rax]
mov qword [rsp + 0xe60], rax
mov rax, qword [rsp + 0xe60]
mov qword [rsp + 0x950], rax
lea rax, [rsp + 0x1ef0]
mov qword [rsp + 0x7b0], rax
mov rax, qword [rsp + 0x7b0]
mov rcx, qword [rsp + 0x950]
mov qword [rax], rcx
mov rax, qword [rsp + 0x950]
mov qword [rsp + 0xe68], rax
mov qword [rsp + 0x308], 0xffffffffffffffff
inc qword [rsp + 0x308]
mov rax, qword [rsp + 0xe68]
mov rcx, qword [rsp + 0x308]
cmp byte [rax + rcx], 0
jne 0x1400a5965
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0xe70], rax
mov rax, qword [rsp + 0x7b0]
mov rcx, qword [rsp + 0xe70]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x810]
mov rdi, rax
mov rsi, qword [rsp + 0x7b0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x818]
mov rcx, qword [rsp + 0x810]
call fcn.140096220
mov qword [rsp + 0x7b8], rax
cmp qword [rsp + 0x7b8], 0xffffffffffffffff
je 0x1400a5a79
mov r9, qword [rsp + 0x7b8]
xor r8d, r8d
lea rdx, [rsp + 0x19d0]
lea rcx, [rsp + 0x810]
call fcn.14019aaa0
mov rax, qword [rsp + 0x7b8]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x19e0]
lea rcx, [rsp + 0x810]
call fcn.14019aaa0
lea rax, [rsp + 0x1848]
lea rcx, [rsp + 0x19d0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1858]
lea rcx, [rsp + 0x19e0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1400a5ad8
lea rax, [rsp + 0x810]
mov qword [rsp + 0xe78], rax
mov qword [rsp + 0x1828], 0
mov qword [rsp + 0x1830], 0
lea rax, [rsp + 0x1848]
mov rdi, rax
mov rsi, qword [rsp + 0xe78]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1858]
lea rcx, [rsp + 0x1828]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1848]
mov qword [rsp + 0xe80], rax
lea rax, [rsp + 0x1858]
mov qword [rsp + 0xe90], rax
lea rax, [rsp + 0x16cc]
mov qword [rsp + 0x958], rax
lea rax, [rsp + 0x198]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x198], 0x1b6e1b1e
lea rax, [rsp + 0x198]
mov qword [rsp + 0xe88], rax
lea rax, [rsp + 0x19f0]
mov rdi, rax
mov rsi, qword [rsp + 0xe80]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1a00]
lea rcx, [rsp + 0x19f0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1a00]
mov rcx, qword [rsp + 0xe88]
call fcn.1400977d0
mov dword [rsp + 0x750], eax
mov rax, qword [rsp + 0x958]
mov ecx, dword [rsp + 0x750]
mov dword [rax], ecx
mov rax, qword [rsp + 0x958]
mov eax, dword [rax]
mov dword [rsp + 0x760], eax
lea rax, [rsp + 0x16d0]
mov qword [rsp + 0x960], rax
lea rax, [rsp + 0x19c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x19c], 0x1b6e1b1e
lea rax, [rsp + 0x19c]
mov qword [rsp + 0xe98], rax
lea rax, [rsp + 0x1a10]
mov rdi, rax
mov rsi, qword [rsp + 0xe90]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1a20]
lea rcx, [rsp + 0x1a10]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1a20]
mov rcx, qword [rsp + 0xe98]
call fcn.1400977d0
mov dword [rsp + 0x758], eax
mov rax, qword [rsp + 0x960]
mov ecx, dword [rsp + 0x758]
mov dword [rax], ecx
mov rax, qword [rsp + 0x960]
mov eax, dword [rax]
mov dword [rsp + 0x764], eax
mov r8d, dword [rsp + 0x760]
mov edx, dword [rsp + 0x764]
lea rcx, [rsp + 0x968]
call fcn.140191150
mov qword [rsp + 0x310], rax
jmp 0x1400a5cac
mov rax, qword [rsp + 0x7c0]
mov rax, qword [rax]
mov qword [rsp + 0x310], rax
jmp 0x1400a5cac
mov qword [rsp + 0x310], 0
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x968], rax
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0x318], rax
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x768], eax
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0xeb0], rax
mov eax, dword [rsp + 0x768]
mov dword [rsp + 0x770], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xea0], rax
mov rax, qword [rsp + 0xea0]
mov qword [rsp + 0x820], rax
mov byte [rsp + 0x828], 0
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0xea8], rax
mov rax, qword [rsp + 0xea8]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x828], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0xeb8], rax
lea r9, [rsp + 0xeb0]
lea r8, [rsp + 0x770]
lea rdx, [rsp + 0x1eb0]
mov rcx, qword [rsp + 0xeb8]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x828]
test eax, eax
je 0x1400a5dac
mov rax, qword [rsp + 0x820]
mov qword [rsp + 0xec0], rax
mov rax, qword [rsp + 0xec0]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x970], rax
mov byte [rsp + 0x101], 0
mov byte [rsp + 0x102], 0
cmp qword [rsp + 0x970], 0
jne 0x1400a5de5
mov qword [rsp + 0x978], 0
jmp 0x1400a5e0b
mov rax, qword [rsp + 0x970]
mov qword [rsp + 0xec8], rax
lea rcx, [0x1403fad40]
call qword [rsp + 0xec8]
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x978]
mov qword [rsp + 0x658], rax
cmp qword [rsp + 0x658], 0
jne 0x1400a5e2b
jmp 0x1400aaef2
mov rax, qword [rsp + 0x1928]
mov qword [rsp + 0x980], rax
lea rax, [0x1404d0e40]
mov rax, qword [rax]
mov qword [rsp + 0x980], rax
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax]
mov eax, dword [rax]
mov dword [rsp + 0x778], eax
mov qword [rsp + 0x1780], 0
mov qword [rsp + 0x1788], 0x1000
mov eax, dword [rsp + 0x778]
mov dword [rsp + 0x1790], eax
mov dword [rsp + 0x1794], 0x40
mov r8d, 0x95c
lea rdx, [rsp + 0x1780]
mov rcx, qword [rsp + 0x980]
call fcn.1401997d0
mov rax, qword [rsp + 0x1780]
mov qword [rsp + 0x370], rax
cmp qword [rsp + 0x370], 0
jne 0x1400a5ecd
jmp 0x1400aaef2
mov dword [rsp + 0x1798], 0x74
mov edx, reloc.WS2_32.dll_WSACleanup
lea rcx, [rsp + 0x158]
call fcn.140097c00
nop
mov rax, qword [rsp + 0x1930]
mov qword [rsp + 0x988], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x988], rax
lea rax, [rsp + 0xfc]
mov qword [rsp + 0xed0], rax
lea rax, [rsp + 0xed0]
mov qword [rsp + 0xed8], rax
mov rax, qword [rsp + 0xed8]
mov rax, qword [rax]
mov qword [rsp + 0xee0], rax
mov rax, qword [rsp + 0xee0]
mov qword [rsp + 0xf00], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xee8], rax
lea rax, [rsp + 0xee8]
mov qword [rsp + 0xef0], rax
mov rax, qword [rsp + 0xef0]
mov rax, qword [rax]
mov qword [rsp + 0xef8], rax
mov rax, qword [rsp + 0xef8]
mov qword [rsp + 0xf08], rax
mov r8, qword [rsp + 0x988]
mov rdx, qword [rsp + 0xf00]
mov rcx, qword [rsp + 0xf08]
call fcn.140096dc0
mov rax, qword [rsp + 0x370]
add rax, 0x5c
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xf10], rax
mov rax, qword [rsp + 0xf10]
mov rcx, qword [rsp + 0x800]
mov qword [rax + 6], rcx
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xf18], rax
mov rax, qword [rsp + 0xf18]
add rax, 0x5c
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax + 8]
mov rcx, qword [rsp + 0x3b8]
mov rax, qword [rax]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax + 8]
mov rcx, qword [rsp + 0x2700]
mov rcx, qword [rcx + 0x10]
mov rcx, qword [rcx]
mov ecx, dword [rcx + 0x28]
add rcx, qword [rax]
mov rax, rcx
mov rcx, qword [rsp + 0x3b8]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x1938]
mov qword [rsp + 0x998], rax
lea rax, [0x1404d0e40]
mov rax, qword [rax]
mov qword [rsp + 0x998], rax
mov rax, qword [rsp + 0x1940]
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax]
mov eax, dword [rax]
mov dword [rsp + 0x77c], eax
mov eax, dword [rsp + 0x77c]
mov dword [rsp + 0x18e8], eax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x18f0], rax
mov rax, qword [rsp + 0x990]
mov qword [rsp + 0x18f8], rax
mov qword [rsp + 0x1900], 0x74
mov r8d, 0x139
lea rdx, [rsp + 0x18e8]
mov rcx, qword [rsp + 0x998]
call fcn.1401997d0
mov dword [rsp + 0x408], 0x104
mov dword [rsp + 0x780], 0xcee4ad1c
lea rax, [rsp + 0x179c]
mov qword [rsp + 0x9a0], rax
mov rax, qword [rsp + 0x9a0]
mov dword [rax], 0
mov rax, qword [rsp + 0x9a0]
mov eax, dword [rax]
mov dword [rsp + 0x790], eax
mov eax, dword [rsp + 0x780]
mov dword [rsp + 0x130], eax
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x784], eax
mov eax, dword [rsp + 0x784]
mov dword [rsp + 0x788], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x9a8], rax
mov rax, qword [rsp + 0x9a8]
mov qword [rsp + 0xf20], rax
mov rax, qword [rsp + 0xf20]
mov qword [rsp + 0x1700], rax
mov byte [rsp + 0x1708], 1
mov rax, qword [rsp + 0x9a8]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0xf28], rax
lea r8, [rsp + 0x788]
lea rdx, [rsp + 0x9c0]
mov rcx, qword [rsp + 0xf28]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0xf30], rax
mov rax, qword [rsp + 0xf30]
add rax, 8
mov qword [rsp + 0x9b0], rax
mov rax, qword [rsp + 0x1948]
mov qword [rsp + 0x9b8], rax
mov rax, qword [rsp + 0x9b0]
mov qword [rsp + 0x9b8], rax
mov rax, qword [rsp + 0x9b0]
mov rax, qword [rax]
mov qword [rsp + 0xf38], rax
mov r8, qword [rsp + 0x9b8]
mov rdx, qword [rsp + 0xf38]
lea rcx, [rsp + 0xf40]
call fcn.14006f260
lea rax, [rsp + 0xf40]
mov qword [rsp + 0xf48], rax
mov rax, qword [rsp + 0xf48]
mov rax, qword [rax]
cmp qword [rsp + 0x9c0], rax
jne 0x1400a6290
mov dword [rsp + 0x1a0], 1
jmp 0x1400a629b
mov dword [rsp + 0x1a0], 0
movzx eax, byte [rsp + 0x1a0]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x77]
test eax, eax
je 0x1400a62be
mov qword [rsp + 0x9c8], 0
jmp 0x1400a6326
mov rax, qword [rsp + 0x9c0]
add rax, 0x10
mov qword [rsp + 0xf50], rax
mov rax, qword [rsp + 0xf50]
mov qword [rsp + 0xf58], rax
mov rax, qword [rsp + 0xf58]
mov qword [rsp + 0xf60], rax
mov rax, qword [rsp + 0xf60]
mov qword [rsp + 0xf68], rax
mov rax, qword [rsp + 0xf68]
mov qword [rsp + 0xf70], rax
mov rax, qword [rsp + 0xf70]
mov rax, qword [rax + 8]
mov qword [rsp + 0x9c8], rax
mov rax, qword [rsp + 0x9c8]
mov qword [rsp + 0xf80], rax
movzx eax, byte [rsp + 0x1708]
test eax, eax
je 0x1400a6362
mov rax, qword [rsp + 0x1700]
mov qword [rsp + 0xf78], rax
mov rax, qword [rsp + 0xf78]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0xf80]
mov qword [rsp + 0x340], rax
cmp qword [rsp + 0x340], 0
jne 0x1400a7159
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x798], eax
mov eax, dword [rsp + 0x790]
mov dword [rsp + 0x1b0], eax
mov eax, dword [rsp + 0x798]
mov dword [rsp + 0x1d8], eax
mov dword [rsp + 0x7a0], 0
mov eax, dword [rsp + 0x7a0]
cmp dword [rsp + 0x1d8], eax
jne 0x1400a63da
xor eax, eax
cmp eax, 1
je 0x1400a63da
mov dword [rsp + 0x1a4], 1
jmp 0x1400a63e5
mov dword [rsp + 0x1a4], 0
movzx eax, byte [rsp + 0x1a4]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x78]
test eax, eax
je 0x1400a640b
mov qword [rsp + 0x338], 0
jmp 0x1400a7059
mov byte [rsp + 0x103], 1
mov qword [rsp + 0xd48], 0
mov qword [rsp + 0xd50], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0xf88], rax
mov rax, qword [rsp + 0xf88]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xf90], rax
mov rax, qword [rsp + 0xf90]
add rax, 0x10
mov qword [rsp + 0x7c8], rax
mov eax, 1
test eax, eax
je 0x1400a6485
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x9d0], rax
jmp 0x1400a6498
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x9d0], rax
mov rax, qword [rsp + 0x9d0]
mov qword [rsp + 0xd48], rax
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0xd50], rax
lea rax, [rsp + 0xd48]
mov qword [rsp + 0x9d8], rax
mov rax, qword [rsp + 0x9d8]
mov rax, qword [rax]
mov qword [rsp + 0xf98], rax
mov rax, qword [rsp + 0xf98]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x9d8]
mov rax, qword [rax + 8]
mov qword [rsp + 0xfa0], rax
mov rax, qword [rsp + 0xfa0]
mov qword [rsp + 0xfa8], rax
jmp 0x1400a6524
mov rax, qword [rsp + 0x320]
mov rax, qword [rax]
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0xfa8]
cmp qword [rsp + 0x320], rax
je 0x1400a6543
mov dword [rsp + 0x1a8], 1
jmp 0x1400a654e
mov dword [rsp + 0x1a8], 0
movzx eax, byte [rsp + 0x1a8]
test eax, eax
je 0x1400a704d
xor eax, eax
mov qword [rsp + 0xfb0], rax
mov rax, qword [rsp + 0xfb0]
mov rcx, qword [rsp + 0x320]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xfb8], rax
lea rax, [rsp + 0xfb8]
mov qword [rsp + 0x9e8], rax
mov dword [rsp + 0x7a4], 0
mov eax, dword [rsp + 0x7a4]
cmp dword [rsp + 0x1b0], eax
jne 0x1400a65c5
xor eax, eax
cmp eax, 1
je 0x1400a65c5
mov dword [rsp + 0x1ac], 1
jmp 0x1400a65d0
mov dword [rsp + 0x1ac], 0
movzx eax, byte [rsp + 0x1ac]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x79]
test eax, eax
jne 0x1400a68fd
mov rax, qword [rsp + 0x9e8]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0xfc0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x9e0], rax
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x17a8], rax
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0xfc8], rax
mov qword [rsp + 0x328], 0xffffffffffffffff
inc qword [rsp + 0x328]
mov rax, qword [rsp + 0xfc8]
mov rcx, qword [rsp + 0x328]
cmp word [rax + rcx*2], 0
jne 0x1400a6640
mov rax, qword [rsp + 0x328]
mov qword [rsp + 0xfd0], rax
mov rax, qword [rsp + 0xfd0]
mov qword [rsp + 0x17b0], rax
lea rax, [rsp + 0x17a8]
mov qword [rsp + 0xfd8], rax
lea rax, [rsp + 0x1a30]
mov rdi, rax
mov rsi, qword [rsp + 0xfd8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x3c0], eax
lea rax, [rsp + 0x1710]
lea rcx, [rsp + 0x1a30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x3c0]
mov dword [rsp + 0x1c8], eax
lea rax, [rsp + 0x1b8]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1b8], 0x1b6e1b1e
lea rax, [rsp + 0x1b8]
mov qword [rsp + 0xfe0], rax
lea rax, [rsp + 0x1a40]
lea rcx, [rsp + 0x1710]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1a50]
lea rcx, [rsp + 0x1a40]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1a50]
mov rcx, qword [rsp + 0xfe0]
call fcn.140097890
mov dword [rsp + 0x3c4], eax
mov rax, qword [rsp + 0x1718]
mov qword [rsp + 0xfe8], rax
mov rax, qword [rsp + 0xfe8]
sub rax, 4
mov qword [rsp + 0xff0], rax
mov r9, qword [rsp + 0xff0]
xor r8d, r8d
lea rdx, [rsp + 0x1a60]
lea rcx, [rsp + 0x1710]
call fcn.14019ab70
lea rax, [rsp + 0x1bc]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1bc], 0x1b6e1b1e
lea rax, [rsp + 0x1bc]
mov qword [rsp + 0xff8], rax
lea rax, [rsp + 0x1a70]
lea rcx, [rsp + 0x1a60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1a80]
lea rcx, [rsp + 0x1a70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1a80]
mov rcx, qword [rsp + 0xff8]
call fcn.140097890
mov dword [rsp + 0x3cc], eax
mov eax, dword [rsp + 0x3c4]
mov dword [rsp + 0x3c8], eax
mov eax, dword [rsp + 0x3c8]
cmp dword [rsp + 0x1c8], eax
jne 0x1400a6862
xor eax, eax
cmp eax, 1
je 0x1400a6862
mov dword [rsp + 0x1c0], 1
jmp 0x1400a686d
mov dword [rsp + 0x1c0], 0
movzx eax, byte [rsp + 0x1c0]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7a]
test eax, eax
jne 0x1400a68e1
mov eax, dword [rsp + 0x3cc]
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x3d0]
cmp dword [rsp + 0x1c8], eax
jne 0x1400a68b4
xor eax, eax
cmp eax, 1
je 0x1400a68b4
mov dword [rsp + 0x1d0], 1
jmp 0x1400a68bf
mov dword [rsp + 0x1d0], 0
movzx eax, byte [rsp + 0x1d0]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7b]
test eax, eax
jne 0x1400a68e1
mov dword [rsp + 0x1d4], 1
jmp 0x1400a68ec
mov dword [rsp + 0x1d4], 0
movzx eax, byte [rsp + 0x1d4]
test eax, eax
je 0x1400a68fd
jmp 0x1400a6511
mov rax, qword [rsp + 0x9e8]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x9f0], rax
mov rax, qword [rsp + 0x9f0]
mov qword [rsp + 0x6e8], rax
mov rax, qword [rsp + 0x9f0]
mov qword [rsp + 0x1000], rax
mov rax, qword [rsp + 0x1000]
mov qword [rsp + 0x9f8], rax
mov rax, qword [rsp + 0x9f8]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x9f8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1008], rax
mov eax, dword [rsp + 0x1008]
add rax, qword [rsp + 0x6e8]
mov qword [rsp + 0x1010], rax
mov rax, qword [rsp + 0x1010]
mov qword [rsp + 0x6f0], rax
mov eax, dword [rsp + 0x1d8]
mov dword [rsp + 0x3d4], eax
mov eax, dword [rsp + 0x3d4]
mov dword [rsp + 0x3d8], eax
lea rdx, [rsp + 0x22c8]
lea rcx, [rsp + 0x6e8]
call fcn.1401906d0
lea rcx, [rsp + 0x1f90]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x22f0]
lea rcx, [rsp + 0x6e8]
call fcn.14018ec60
lea rcx, [rsp + 0x1fb8]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1fe0]
lea rcx, [rsp + 0x1f90]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2010]
lea rcx, [rsp + 0x1fb8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x3d8]
lea r8, [rsp + 0x1fe0]
lea rdx, [rsp + 0x2010]
lea rcx, [rsp + 0x1de8]
call fcn.140097110
lea rdx, [rsp + 0x2318]
lea rcx, [rsp + 0x6e8]
call fcn.1401906d0
mov qword [rsp + 0xa00], rax
mov rax, qword [rsp + 0xa00]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x1df0], rax
jne 0x1400a6ab2
mov rax, qword [rsp + 0xa00]
mov rax, qword [rax]
cmp qword [rsp + 0x1de8], rax
jne 0x1400a6ab2
mov dword [rsp + 0x1e0], 1
jmp 0x1400a6abd
mov dword [rsp + 0x1e0], 0
movzx eax, byte [rsp + 0x1e0]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x7c]
test eax, eax
je 0x1400a6ad7
jmp 0x1400a6511
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1400a6b9d
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xa10], rax
mov rax, qword [rsp + 0xa10]
mov qword [rsp + 0xa08], rax
mov rax, qword [rsp + 0xa08]
mov qword [rax], 0
mov rax, qword [rsp + 0xa08]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xa10]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x1df8]
mov qword [rsp + 0xa18], rax
mov rax, qword [rsp + 0xa18]
mov qword [rsp + 0x1950], rax
mov rax, qword [rsp + 0xa18]
add rax, 0x10
mov qword [rsp + 0x7e0], rax
mov rax, qword [rsp + 0x7e0]
mov rax, qword [rax]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0x6e8]
mov qword [rsp + 0x1018], rax
mov rax, qword [rsp + 0x1018]
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0xa20]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xa20]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xa28], rax
mov eax, dword [rsp + 0xa28]
add rax, qword [rsp + 0x6e8]
mov qword [rsp + 0xa30], rax
mov eax, dword [rsp + 0xa2c]
mov rcx, qword [rsp + 0xa30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1020], rax
mov rax, qword [rsp + 0xa30]
cmp qword [rsp + 0xa38], rax
jb 0x1400a6c8c
mov rax, qword [rsp + 0x1020]
cmp qword [rsp + 0xa38], rax
jae 0x1400a6c8c
mov dword [rsp + 0x1e4], 1
jmp 0x1400a6c97
mov dword [rsp + 0x1e4], 0
movzx eax, byte [rsp + 0x1e4]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x7d]
test eax, eax
je 0x1400a7033
mov rax, qword [rsp + 0x7e0]
mov rax, qword [rax]
mov qword [rsp + 0x1028], rax
mov rax, qword [rsp + 0x1028]
mov qword [rsp + 0xa40], rax
lea rax, [rsp + 0x1e60]
mov qword [rsp + 0x7d0], rax
mov rax, qword [rsp + 0x7d0]
mov rcx, qword [rsp + 0xa40]
mov qword [rax], rcx
mov rax, qword [rsp + 0xa40]
mov qword [rsp + 0x1030], rax
mov qword [rsp + 0x330], 0xffffffffffffffff
inc qword [rsp + 0x330]
mov rax, qword [rsp + 0x1030]
mov rcx, qword [rsp + 0x330]
cmp byte [rax + rcx], 0
jne 0x1400a6d12
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x1038], rax
mov rax, qword [rsp + 0x7d0]
mov rcx, qword [rsp + 0x1038]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x830]
mov rdi, rax
mov rsi, qword [rsp + 0x7d0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x838]
mov rcx, qword [rsp + 0x830]
call fcn.140096220
mov qword [rsp + 0x7d8], rax
cmp qword [rsp + 0x7d8], 0xffffffffffffffff
je 0x1400a6e26
mov r9, qword [rsp + 0x7d8]
xor r8d, r8d
lea rdx, [rsp + 0x1a90]
lea rcx, [rsp + 0x830]
call fcn.14019aaa0
mov rax, qword [rsp + 0x7d8]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1aa0]
lea rcx, [rsp + 0x830]
call fcn.14019aaa0
lea rax, [rsp + 0x1868]
lea rcx, [rsp + 0x1a90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1878]
lea rcx, [rsp + 0x1aa0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1400a6e85
lea rax, [rsp + 0x830]
mov qword [rsp + 0x1040], rax
mov qword [rsp + 0x17b8], 0
mov qword [rsp + 0x17c0], 0
lea rax, [rsp + 0x1868]
mov rdi, rax
mov rsi, qword [rsp + 0x1040]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1878]
lea rcx, [rsp + 0x17b8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1868]
mov qword [rsp + 0x1048], rax
lea rax, [rsp + 0x1878]
mov qword [rsp + 0x1058], rax
lea rax, [rsp + 0xd88]
mov qword [rsp + 0xa48], rax
lea rax, [rsp + 0x1e8]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1e8], 0x1b6e1b1e
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x1050], rax
lea rax, [rsp + 0x1ab0]
mov rdi, rax
mov rsi, qword [rsp + 0x1048]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ac0]
lea rcx, [rsp + 0x1ab0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ac0]
mov rcx, qword [rsp + 0x1050]
call fcn.1400977d0
mov dword [rsp + 0x3e0], eax
mov rax, qword [rsp + 0xa48]
mov ecx, dword [rsp + 0x3e0]
mov dword [rax], ecx
mov rax, qword [rsp + 0xa48]
mov eax, dword [rax]
mov dword [rsp + 0x3f0], eax
lea rax, [rsp + 0xd8c]
mov qword [rsp + 0xa50], rax
lea rax, [rsp + 0x1ec]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1ec], 0x1b6e1b1e
lea rax, [rsp + 0x1ec]
mov qword [rsp + 0x1060], rax
lea rax, [rsp + 0x1ad0]
mov rdi, rax
mov rsi, qword [rsp + 0x1058]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ae0]
lea rcx, [rsp + 0x1ad0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ae0]
mov rcx, qword [rsp + 0x1060]
call fcn.1400977d0
mov dword [rsp + 0x3e8], eax
mov rax, qword [rsp + 0xa50]
mov ecx, dword [rsp + 0x3e8]
mov dword [rax], ecx
mov rax, qword [rsp + 0xa50]
mov eax, dword [rax]
mov dword [rsp + 0x3f4], eax
mov r8d, dword [rsp + 0x3f0]
mov edx, dword [rsp + 0x3f4]
lea rcx, [rsp + 0xa58]
call fcn.140191150
mov qword [rsp + 0x338], rax
jmp 0x1400a7059
mov rax, qword [rsp + 0x7e0]
mov rax, qword [rax]
mov qword [rsp + 0x338], rax
jmp 0x1400a7059
mov qword [rsp + 0x338], 0
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0x340], rax
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x3f8], eax
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0x1078], rax
mov eax, dword [rsp + 0x3f8]
mov dword [rsp + 0x400], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1068], rax
mov rax, qword [rsp + 0x1068]
mov qword [rsp + 0x840], rax
mov byte [rsp + 0x848], 0
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x1070], rax
mov rax, qword [rsp + 0x1070]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x848], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1080], rax
lea r9, [rsp + 0x1078]
lea r8, [rsp + 0x400]
lea rdx, [rsp + 0x1e70]
mov rcx, qword [rsp + 0x1080]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x848]
test eax, eax
je 0x1400a7159
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x1088], rax
mov rax, qword [rsp + 0x1088]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0xa60], rax
mov byte [rsp + 0x104], 1
mov byte [rsp + 0x105], 0
movsxd rax, dword [rsp + 0x408]
mov qword [rsp + 0x1090], rax
mov byte [rsp + 0x106], 0
mov byte [rsp + 0x107], 0
lea rax, [rsp + 0x24d0]
mov qword [rsp + 0x1098], rax
mov byte [rsp + 0x108], 0
mov byte [rsp + 0x109], 0
mov rax, qword [rsp + 0x658]
mov qword [rsp + 0x10a0], rax
cmp qword [rsp + 0xa60], 0
jne 0x1400a71e1
mov dword [rsp + 0x1f0], 0
jmp 0x1400a7217
mov rax, qword [rsp + 0xa60]
mov qword [rsp + 0x10a8], rax
mov r8, qword [rsp + 0x1090]
mov rdx, qword [rsp + 0x1098]
mov rcx, qword [rsp + 0x10a0]
call qword [rsp + 0x10a8]
mov dword [rsp + 0x1f0], eax
cmp dword [rsp + 0x1f0], 0
jne 0x1400a7233
lea rcx, [rsp + 0x158]
call fcn.1400a0fc0
jmp 0x1400aaef2
lea rax, [rsp + 0x1bb0]
mov qword [rsp + 0x1220], rax
mov dword [rsp + 0x40c], 0x9988a8a
lea rax, [rsp + 0xd90]
mov qword [rsp + 0xa68], rax
mov rax, qword [rsp + 0xa68]
mov dword [rax], 0
mov rax, qword [rsp + 0xa68]
mov eax, dword [rax]
mov dword [rsp + 0x420], eax
mov eax, dword [rsp + 0x40c]
mov dword [rsp + 0x138], eax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x410], eax
mov eax, dword [rsp + 0x410]
mov dword [rsp + 0x418], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xa70], rax
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x10b0], rax
mov rax, qword [rsp + 0x10b0]
mov qword [rsp + 0x1720], rax
mov byte [rsp + 0x1728], 1
mov rax, qword [rsp + 0xa70]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x10b8], rax
lea r8, [rsp + 0x418]
lea rdx, [rsp + 0xa88]
mov rcx, qword [rsp + 0x10b8]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x10c0], rax
mov rax, qword [rsp + 0x10c0]
add rax, 8
mov qword [rsp + 0xa78], rax
mov rax, qword [rsp + 0x1958]
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0xa78]
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0xa78]
mov rax, qword [rax]
mov qword [rsp + 0x10c8], rax
mov r8, qword [rsp + 0xa80]
mov rdx, qword [rsp + 0x10c8]
lea rcx, [rsp + 0x10d0]
call fcn.14006f260
lea rax, [rsp + 0x10d0]
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x10d8]
mov rax, qword [rax]
cmp qword [rsp + 0xa88], rax
jne 0x1400a73c8
mov dword [rsp + 0x1f4], 1
jmp 0x1400a73d3
mov dword [rsp + 0x1f4], 0
movzx eax, byte [rsp + 0x1f4]
mov byte [rsp + 0x7e], al
movzx eax, byte [rsp + 0x7e]
test eax, eax
je 0x1400a73f6
mov qword [rsp + 0xa90], 0
jmp 0x1400a745e
mov rax, qword [rsp + 0xa88]
add rax, 0x10
mov qword [rsp + 0x10e0], rax
mov rax, qword [rsp + 0x10e0]
mov qword [rsp + 0x10e8], rax
mov rax, qword [rsp + 0x10e8]
mov qword [rsp + 0x10f0], rax
mov rax, qword [rsp + 0x10f0]
mov qword [rsp + 0x10f8], rax
mov rax, qword [rsp + 0x10f8]
mov qword [rsp + 0x1100], rax
mov rax, qword [rsp + 0x1100]
mov rax, qword [rax + 8]
mov qword [rsp + 0xa90], rax
mov rax, qword [rsp + 0xa90]
mov qword [rsp + 0x1110], rax
movzx eax, byte [rsp + 0x1728]
test eax, eax
je 0x1400a749a
mov rax, qword [rsp + 0x1720]
mov qword [rsp + 0x1108], rax
mov rax, qword [rsp + 0x1108]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x1110]
mov qword [rsp + 0x368], rax
cmp qword [rsp + 0x368], 0
jne 0x1400a82af
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x428], eax
mov eax, dword [rsp + 0x420]
mov dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x428]
mov dword [rsp + 0x230], eax
mov dword [rsp + 0x430], 0
mov eax, dword [rsp + 0x430]
cmp dword [rsp + 0x230], eax
jne 0x1400a7512
xor eax, eax
cmp eax, 1
je 0x1400a7512
mov dword [rsp + 0x1f8], 1
jmp 0x1400a751d
mov dword [rsp + 0x1f8], 0
movzx eax, byte [rsp + 0x1f8]
mov byte [rsp + 0x7f], al
movzx eax, byte [rsp + 0x7f]
test eax, eax
je 0x1400a7543
mov qword [rsp + 0x360], 0
jmp 0x1400a81af
mov byte [rsp + 0x10a], 1
mov qword [rsp + 0xd58], 0
mov qword [rsp + 0xd60], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x1118], rax
mov rax, qword [rsp + 0x1118]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1120], rax
mov rax, qword [rsp + 0x1120]
add rax, 0x10
mov qword [rsp + 0x7e8], rax
mov eax, 1
test eax, eax
je 0x1400a75bd
mov rax, qword [rsp + 0x7e8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xa98], rax
jmp 0x1400a75d0
mov rax, qword [rsp + 0x7e8]
mov rax, qword [rax]
mov qword [rsp + 0xa98], rax
mov rax, qword [rsp + 0xa98]
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0xd60], rax
lea rax, [rsp + 0xd58]
mov qword [rsp + 0xaa0], rax
mov rax, qword [rsp + 0xaa0]
mov rax, qword [rax]
mov qword [rsp + 0x1128], rax
mov rax, qword [rsp + 0x1128]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0xaa0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x1130], rax
mov rax, qword [rsp + 0x1130]
mov qword [rsp + 0x1138], rax
jmp 0x1400a765c
mov rax, qword [rsp + 0x348]
mov rax, qword [rax]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0x1138]
cmp qword [rsp + 0x348], rax
je 0x1400a767b
mov dword [rsp + 0x1fc], 1
jmp 0x1400a7686
mov dword [rsp + 0x1fc], 0
movzx eax, byte [rsp + 0x1fc]
test eax, eax
je 0x1400a81a3
xor eax, eax
mov qword [rsp + 0x1140], rax
mov rax, qword [rsp + 0x1140]
mov rcx, qword [rsp + 0x348]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1148], rax
lea rax, [rsp + 0x1148]
mov qword [rsp + 0xab0], rax
mov dword [rsp + 0x434], 0
mov eax, dword [rsp + 0x434]
cmp dword [rsp + 0x208], eax
jne 0x1400a76fd
xor eax, eax
cmp eax, 1
je 0x1400a76fd
mov dword [rsp + 0x200], 1
jmp 0x1400a7708
mov dword [rsp + 0x200], 0
movzx eax, byte [rsp + 0x200]
mov byte [rsp + 0x80], al
movzx eax, byte [rsp + 0x80]
test eax, eax
jne 0x1400a7a47
mov rax, qword [rsp + 0xab0]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x1150], rax
mov rax, qword [rsp + 0x1150]
mov rax, qword [rax + 8]
mov qword [rsp + 0xaa8], rax
mov rax, qword [rsp + 0xaa8]
mov qword [rsp + 0x17c8], rax
mov rax, qword [rsp + 0xaa8]
mov qword [rsp + 0x1158], rax
mov qword [rsp + 0x350], 0xffffffffffffffff
inc qword [rsp + 0x350]
mov rax, qword [rsp + 0x1158]
mov rcx, qword [rsp + 0x350]
cmp word [rax + rcx*2], 0
jne 0x1400a777e
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x1160], rax
mov rax, qword [rsp + 0x1160]
mov qword [rsp + 0x17d0], rax
lea rax, [rsp + 0x17c8]
mov qword [rsp + 0x1168], rax
lea rax, [rsp + 0x1af0]
mov rdi, rax
mov rsi, qword [rsp + 0x1168]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x438], eax
lea rax, [rsp + 0x1730]
lea rcx, [rsp + 0x1af0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x438]
mov dword [rsp + 0x220], eax
lea rax, [rsp + 0x210]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x210], 0x1b6e1b1e
lea rax, [rsp + 0x210]
mov qword [rsp + 0x1170], rax
lea rax, [rsp + 0x1b00]
lea rcx, [rsp + 0x1730]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b10]
lea rcx, [rsp + 0x1b00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1b10]
mov rcx, qword [rsp + 0x1170]
call fcn.140097890
mov dword [rsp + 0x43c], eax
mov rax, qword [rsp + 0x1738]
mov qword [rsp + 0x1178], rax
mov rax, qword [rsp + 0x1178]
sub rax, 4
mov qword [rsp + 0x1180], rax
mov r9, qword [rsp + 0x1180]
xor r8d, r8d
lea rdx, [rsp + 0x1b20]
lea rcx, [rsp + 0x1730]
call fcn.14019ab70
lea rax, [rsp + 0x214]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x214], 0x1b6e1b1e
lea rax, [rsp + 0x214]
mov qword [rsp + 0x1188], rax
lea rax, [rsp + 0x1b30]
lea rcx, [rsp + 0x1b20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b40]
lea rcx, [rsp + 0x1b30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1b40]
mov rcx, qword [rsp + 0x1188]
call fcn.140097890
mov dword [rsp + 0x444], eax
mov eax, dword [rsp + 0x43c]
mov dword [rsp + 0x440], eax
mov eax, dword [rsp + 0x440]
cmp dword [rsp + 0x220], eax
jne 0x1400a79a0
xor eax, eax
cmp eax, 1
je 0x1400a79a0
mov dword [rsp + 0x218], 1
jmp 0x1400a79ab
mov dword [rsp + 0x218], 0
movzx eax, byte [rsp + 0x218]
mov byte [rsp + 0x81], al
movzx eax, byte [rsp + 0x81]
test eax, eax
jne 0x1400a7a2b
mov eax, dword [rsp + 0x444]
mov dword [rsp + 0x448], eax
mov eax, dword [rsp + 0x448]
cmp dword [rsp + 0x220], eax
jne 0x1400a79f8
xor eax, eax
cmp eax, 1
je 0x1400a79f8
mov dword [rsp + 0x228], 1
jmp 0x1400a7a03
mov dword [rsp + 0x228], 0
movzx eax, byte [rsp + 0x228]
mov byte [rsp + 0x82], al
movzx eax, byte [rsp + 0x82]
test eax, eax
jne 0x1400a7a2b
mov dword [rsp + 0x22c], 1
jmp 0x1400a7a36
mov dword [rsp + 0x22c], 0
movzx eax, byte [rsp + 0x22c]
test eax, eax
je 0x1400a7a47
jmp 0x1400a7649
mov rax, qword [rsp + 0xab0]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xab8], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x6d8], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x1190], rax
mov rax, qword [rsp + 0x1190]
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0xac0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xac0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1198], rax
mov eax, dword [rsp + 0x1198]
add rax, qword [rsp + 0x6d8]
mov qword [rsp + 0x11a0], rax
mov rax, qword [rsp + 0x11a0]
mov qword [rsp + 0x6e0], rax
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x44c], eax
mov eax, dword [rsp + 0x44c]
mov dword [rsp + 0x450], eax
lea rdx, [rsp + 0x2340]
lea rcx, [rsp + 0x6d8]
call fcn.1401906d0
lea rcx, [rsp + 0x2040]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2368]
lea rcx, [rsp + 0x6d8]
call fcn.14018ec60
lea rcx, [rsp + 0x2068]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2090]
lea rcx, [rsp + 0x2040]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x20c0]
lea rcx, [rsp + 0x2068]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x450]
lea r8, [rsp + 0x2090]
lea rdx, [rsp + 0x20c0]
lea rcx, [rsp + 0x1e10]
call fcn.140097110
lea rdx, [rsp + 0x2390]
lea rcx, [rsp + 0x6d8]
call fcn.1401906d0
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0xac8]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x1e18], rax
jne 0x1400a7bfc
mov rax, qword [rsp + 0xac8]
mov rax, qword [rax]
cmp qword [rsp + 0x1e10], rax
jne 0x1400a7bfc
mov dword [rsp + 0x238], 1
jmp 0x1400a7c07
mov dword [rsp + 0x238], 0
movzx eax, byte [rsp + 0x238]
mov byte [rsp + 0x83], al
movzx eax, byte [rsp + 0x83]
test eax, eax
je 0x1400a7c27
jmp 0x1400a7649
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1400a7ced
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0xad0], rax
mov rax, qword [rsp + 0xad0]
mov qword [rax], 0
mov rax, qword [rsp + 0xad0]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xad8]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x1e20]
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0x1960], rax
mov rax, qword [rsp + 0xae0]
add rax, 0x10
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x650]
mov rax, qword [rax]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0x6d8]
mov qword [rsp + 0x11a8], rax
mov rax, qword [rsp + 0x11a8]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0xae8]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xae8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xaf0], rax
mov eax, dword [rsp + 0xaf0]
add rax, qword [rsp + 0x6d8]
mov qword [rsp + 0xaf8], rax
mov eax, dword [rsp + 0xaf4]
mov rcx, qword [rsp + 0xaf8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x11b0], rax
mov rax, qword [rsp + 0xaf8]
cmp qword [rsp + 0xb00], rax
jb 0x1400a7ddc
mov rax, qword [rsp + 0x11b0]
cmp qword [rsp + 0xb00], rax
jae 0x1400a7ddc
mov dword [rsp + 0x23c], 1
jmp 0x1400a7de7
mov dword [rsp + 0x23c], 0
movzx eax, byte [rsp + 0x23c]
mov byte [rsp + 0x84], al
movzx eax, byte [rsp + 0x84]
test eax, eax
je 0x1400a8189
mov rax, qword [rsp + 0x650]
mov rax, qword [rax]
mov qword [rsp + 0x11b8], rax
mov rax, qword [rsp + 0x11b8]
mov qword [rsp + 0xb08], rax
lea rax, [rsp + 0x1e80]
mov qword [rsp + 0x640], rax
mov rax, qword [rsp + 0x640]
mov rcx, qword [rsp + 0xb08]
mov qword [rax], rcx
mov rax, qword [rsp + 0xb08]
mov qword [rsp + 0x11c0], rax
mov qword [rsp + 0x358], 0xffffffffffffffff
inc qword [rsp + 0x358]
mov rax, qword [rsp + 0x11c0]
mov rcx, qword [rsp + 0x358]
cmp byte [rax + rcx], 0
jne 0x1400a7e68
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x11c8], rax
mov rax, qword [rsp + 0x640]
mov rcx, qword [rsp + 0x11c8]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x850]
mov rdi, rax
mov rsi, qword [rsp + 0x640]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x858]
mov rcx, qword [rsp + 0x850]
call fcn.140096220
mov qword [rsp + 0x648], rax
cmp qword [rsp + 0x648], 0xffffffffffffffff
je 0x1400a7f7c
mov r9, qword [rsp + 0x648]
xor r8d, r8d
lea rdx, [rsp + 0x1b50]
lea rcx, [rsp + 0x850]
call fcn.14019aaa0
mov rax, qword [rsp + 0x648]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1b60]
lea rcx, [rsp + 0x850]
call fcn.14019aaa0
lea rax, [rsp + 0x1888]
lea rcx, [rsp + 0x1b50]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1898]
lea rcx, [rsp + 0x1b60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1400a7fdb
lea rax, [rsp + 0x850]
mov qword [rsp + 0x11d0], rax
mov qword [rsp + 0x17d8], 0
mov qword [rsp + 0x17e0], 0
lea rax, [rsp + 0x1888]
mov rdi, rax
mov rsi, qword [rsp + 0x11d0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1898]
lea rcx, [rsp + 0x17d8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1888]
mov qword [rsp + 0x11d8], rax
lea rax, [rsp + 0x1898]
mov qword [rsp + 0x11e8], rax
lea rax, [rsp + 0xd94]
mov qword [rsp + 0xb10], rax
lea rax, [rsp + 0x240]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x240], 0x1b6e1b1e
lea rax, [rsp + 0x240]
mov qword [rsp + 0x11e0], rax
lea rax, [rsp + 0x1b70]
mov rdi, rax
mov rsi, qword [rsp + 0x11d8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b80]
lea rcx, [rsp + 0x1b70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1b80]
mov rcx, qword [rsp + 0x11e0]
call fcn.1400977d0
mov dword [rsp + 0x458], eax
mov rax, qword [rsp + 0xb10]
mov ecx, dword [rsp + 0x458]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb10]
mov eax, dword [rax]
mov dword [rsp + 0x468], eax
lea rax, [rsp + 0xd98]
mov qword [rsp + 0xb18], rax
lea rax, [rsp + 0x244]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x244], 0x1b6e1b1e
lea rax, [rsp + 0x244]
mov qword [rsp + 0x11f0], rax
lea rax, [rsp + 0x1b90]
mov rdi, rax
mov rsi, qword [rsp + 0x11e8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ba0]
lea rcx, [rsp + 0x1b90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ba0]
mov rcx, qword [rsp + 0x11f0]
call fcn.1400977d0
mov dword [rsp + 0x460], eax
mov rax, qword [rsp + 0xb18]
mov ecx, dword [rsp + 0x460]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb18]
mov eax, dword [rax]
mov dword [rsp + 0x46c], eax
mov r8d, dword [rsp + 0x468]
mov edx, dword [rsp + 0x46c]
lea rcx, [rsp + 0xb20]
call fcn.140191150
mov qword [rsp + 0x360], rax
jmp 0x1400a81af
mov rax, qword [rsp + 0x650]
mov rax, qword [rax]
mov qword [rsp + 0x360], rax
jmp 0x1400a81af
mov qword [rsp + 0x360], 0
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xb20]
mov qword [rsp + 0x368], rax
mov eax, dword [rsp + 0x138]
mov dword [rsp + 0x470], eax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x1208], rax
mov eax, dword [rsp + 0x470]
mov dword [rsp + 0x478], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x11f8], rax
mov rax, qword [rsp + 0x11f8]
mov qword [rsp + 0x860], rax
mov byte [rsp + 0x868], 0
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x1200]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x868], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1210], rax
lea r9, [rsp + 0x1208]
lea r8, [rsp + 0x478]
lea rdx, [rsp + 0x1e90]
mov rcx, qword [rsp + 0x1210]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x868]
test eax, eax
je 0x1400a82af
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x1218]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0xb28], rax
mov byte [rsp + 0x10b], 0
mov byte [rsp + 0x10c], 0
lea rax, [rsp + 0x24d0]
mov qword [rsp + 0x1228], rax
mov byte [rsp + 0x10d], 0
mov byte [rsp + 0x10e], 0
mov rax, qword [rsp + 0x1220]
mov qword [rsp + 0x1230], rax
cmp qword [rsp + 0xb28], 0
jne 0x1400a830c
jmp 0x1400a8334
mov rax, qword [rsp + 0xb28]
mov qword [rsp + 0x1238], rax
mov rdx, qword [rsp + 0x1228]
mov rcx, qword [rsp + 0x1230]
call qword [rsp + 0x1238]
nop
mov dword [rsp + 0x4c8], 0
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x1248], rax
mov dword [rsp + 0x4cc], 3
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1250], rax
lea rax, [rsp + 0x1bb0]
mov qword [rsp + 0x1258], rax
mov dword [rsp + 0x480], 0x6b72d895
mov eax, dword [rsp + 0x480]
mov dword [rsp + 0x484], eax
mov eax, dword [rsp + 0x484]
mov dword [rsp + 0x488], eax
mov eax, dword [rsp + 0x488]
mov dword [rsp + 0x490], eax
mov eax, dword [rsp + 0x490]
mov dword [rsp + 0xce8], eax
mov dword [rsp + 0xcec], 0
lea rax, [rsp + 0xcf0]
mov qword [rsp + 0x1240], rax
mov dword [rsp + 0x4c4], 0x49
mov dword [rsp + 0x4c0], 0x89
mov dword [rsp + 0x4bc], 0xca
mov dword [rsp + 0x4b8], 0x48
mov dword [rsp + 0x4b4], 0xc7
mov dword [rsp + 0x4b0], 0xc0
mov dword [rsp + 0x4ac], 0x3f
mov dword [rsp + 0x4a8], 0x10
mov dword [rsp + 0x4a4], 0
mov dword [rsp + 0x4a0], 0
mov dword [rsp + 0x49c], 0xf
mov dword [rsp + 0x498], 5
mov dword [rsp + 0x494], 0xc3
lea rax, [rsp + 0x494]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x498]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x49c]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x4a4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x4a8]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x4ac]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4b0]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x4b4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4b8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4bc]
lea r8, [rsp + 0x4c0]
lea rdx, [rsp + 0x4c4]
mov rcx, qword [rsp + 0x1240]
call fcn.14008f900
mov byte [rsp + 0x10f], 1
mov byte [rsp + 0x110], 0
movsxd rax, dword [rsp + 0x4c8]
mov qword [rsp + 0x1418], rax
mov byte [rsp + 0x111], 0
mov byte [rsp + 0x112], 0
mov rax, qword [rsp + 0x1248]
mov qword [rsp + 0x1420], rax
mov byte [rsp + 0x113], 1
mov byte [rsp + 0x114], 0
movsxd rax, dword [rsp + 0x4cc]
mov qword [rsp + 0x1428], rax
mov byte [rsp + 0x115], 0
mov byte [rsp + 0x116], 1
mov rax, qword [rsp + 0x1250]
mov eax, dword [rax]
mov qword [rsp + 0x1430], rax
mov byte [rsp + 0x117], 0
mov byte [rsp + 0x118], 0
mov rax, qword [rsp + 0x1258]
mov qword [rsp + 0x1438], rax
mov byte [rsp + 0x119], 0
mov byte [rsp + 0x11a], 0
mov rax, qword [rsp + 0x658]
mov qword [rsp + 0x1440], rax
mov eax, dword [rsp + 0xce8]
mov dword [rsp + 0x4d0], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0xb30]
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x1260]
mov qword [rsp + 0x1740], rax
mov byte [rsp + 0x1748], 1
mov rax, qword [rsp + 0xb30]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1268], rax
lea r8, [rsp + 0x4d0]
lea rdx, [rsp + 0xb48]
mov rcx, qword [rsp + 0x1268]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1270], rax
mov rax, qword [rsp + 0x1270]
add rax, 8
mov qword [rsp + 0xb38], rax
mov rax, qword [rsp + 0x1d40]
mov qword [rsp + 0xb40], rax
mov rax, qword [rsp + 0xb38]
mov qword [rsp + 0xb40], rax
mov rax, qword [rsp + 0xb38]
mov rax, qword [rax]
mov qword [rsp + 0x1278], rax
mov r8, qword [rsp + 0xb40]
mov rdx, qword [rsp + 0x1278]
lea rcx, [rsp + 0x1280]
call fcn.14006f260
lea rax, [rsp + 0x1280]
mov qword [rsp + 0x1288], rax
mov rax, qword [rsp + 0x1288]
mov rax, qword [rax]
cmp qword [rsp + 0xb48], rax
jne 0x1400a8702
mov dword [rsp + 0x248], 1
jmp 0x1400a870d
mov dword [rsp + 0x248], 0
movzx eax, byte [rsp + 0x248]
mov byte [rsp + 0x85], al
movzx eax, byte [rsp + 0x85]
test eax, eax
je 0x1400a8736
mov qword [rsp + 0xb50], 0
jmp 0x1400a879e
mov rax, qword [rsp + 0xb48]
add rax, 0x10
mov qword [rsp + 0x1290], rax
mov rax, qword [rsp + 0x1290]
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0x1298]
mov qword [rsp + 0x12a0], rax
mov rax, qword [rsp + 0x12a0]
mov qword [rsp + 0x12a8], rax
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x12b0]
mov rax, qword [rax + 8]
mov qword [rsp + 0xb50], rax
mov rax, qword [rsp + 0xb50]
mov qword [rsp + 0x12c0], rax
movzx eax, byte [rsp + 0x1748]
test eax, eax
je 0x1400a87da
mov rax, qword [rsp + 0x1740]
mov qword [rsp + 0x12b8], rax
mov rax, qword [rsp + 0x12b8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x12c0]
mov qword [rsp + 0xb58], rax
cmp qword [rsp + 0xb58], 0
je 0x1400a881a
mov rax, qword [rsp + 0xb58]
mov eax, dword [rax + 4]
mov dword [rsp + 0x4d8], eax
mov eax, dword [rsp + 0x4d8]
mov dword [rsp + 0xcec], eax
jmp 0x1400a96b6
lea rax, [rsp + 0xd9c]
mov qword [rsp + 0xb60], rax
mov rax, qword [rsp + 0xb60]
mov dword [rax], 0
mov rax, qword [rsp + 0xb60]
mov eax, dword [rax]
mov dword [rsp + 0x4e8], eax
lea rax, [rsp + 0xda0]
mov qword [rsp + 0xb68], rax
mov eax, dword [rsp + 0xce8]
mov dword [rsp + 0x4e0], eax
mov rax, qword [rsp + 0xb68]
mov ecx, dword [rsp + 0x4e0]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb68]
mov eax, dword [rax]
mov dword [rsp + 0x4ec], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0x258], eax
mov eax, dword [rsp + 0x4ec]
mov dword [rsp + 0x280], eax
mov dword [rsp + 0x4f0], 0
mov eax, dword [rsp + 0x4f0]
cmp dword [rsp + 0x280], eax
jne 0x1400a88d4
xor eax, eax
cmp eax, 1
je 0x1400a88d4
mov dword [rsp + 0x24c], 1
jmp 0x1400a88df
mov dword [rsp + 0x24c], 0
movzx eax, byte [rsp + 0x24c]
mov byte [rsp + 0x86], al
movzx eax, byte [rsp + 0x86]
test eax, eax
je 0x1400a890b
mov qword [rsp + 0x390], 0
jmp 0x1400a9577
mov byte [rsp + 0x11b], 1
mov qword [rsp + 0xd68], 0
mov qword [rsp + 0xd70], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x12c8], rax
mov rax, qword [rsp + 0x12c8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x12d0], rax
mov rax, qword [rsp + 0x12d0]
add rax, 0x10
mov qword [rsp + 0x660], rax
mov eax, 1
test eax, eax
je 0x1400a8985
mov rax, qword [rsp + 0x660]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xb70], rax
jmp 0x1400a8998
mov rax, qword [rsp + 0x660]
mov rax, qword [rax]
mov qword [rsp + 0xb70], rax
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0xd68], rax
mov rax, qword [rsp + 0x660]
mov qword [rsp + 0xd70], rax
lea rax, [rsp + 0xd68]
mov qword [rsp + 0xb78], rax
mov rax, qword [rsp + 0xb78]
mov rax, qword [rax]
mov qword [rsp + 0x12d8], rax
mov rax, qword [rsp + 0x12d8]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0xb78]
mov rax, qword [rax + 8]
mov qword [rsp + 0x12e0], rax
mov rax, qword [rsp + 0x12e0]
mov qword [rsp + 0x12e8], rax
jmp 0x1400a8a24
mov rax, qword [rsp + 0x378]
mov rax, qword [rax]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x12e8]
cmp qword [rsp + 0x378], rax
je 0x1400a8a43
mov dword [rsp + 0x250], 1
jmp 0x1400a8a4e
mov dword [rsp + 0x250], 0
movzx eax, byte [rsp + 0x250]
test eax, eax
je 0x1400a956b
xor eax, eax
mov qword [rsp + 0x12f0], rax
mov rax, qword [rsp + 0x12f0]
mov rcx, qword [rsp + 0x378]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x12f8], rax
lea rax, [rsp + 0x12f8]
mov qword [rsp + 0xb88], rax
mov dword [rsp + 0x4f4], 0
mov eax, dword [rsp + 0x4f4]
cmp dword [rsp + 0x258], eax
jne 0x1400a8ac5
xor eax, eax
cmp eax, 1
je 0x1400a8ac5
mov dword [rsp + 0x254], 1
jmp 0x1400a8ad0
mov dword [rsp + 0x254], 0
movzx eax, byte [rsp + 0x254]
mov byte [rsp + 0x87], al
movzx eax, byte [rsp + 0x87]
test eax, eax
jne 0x1400a8e0f
mov rax, qword [rsp + 0xb88]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x1300]
mov rax, qword [rax + 8]
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x17e8], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0x1308], rax
mov qword [rsp + 0x380], 0xffffffffffffffff
inc qword [rsp + 0x380]
mov rax, qword [rsp + 0x1308]
mov rcx, qword [rsp + 0x380]
cmp word [rax + rcx*2], 0
jne 0x1400a8b46
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x1310], rax
mov rax, qword [rsp + 0x1310]
mov qword [rsp + 0x17f0], rax
lea rax, [rsp + 0x17e8]
mov qword [rsp + 0x1318], rax
lea rax, [rsp + 0x1bc0]
mov rdi, rax
mov rsi, qword [rsp + 0x1318]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x258]
mov dword [rsp + 0x4f8], eax
lea rax, [rsp + 0x1750]
lea rcx, [rsp + 0x1bc0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x4f8]
mov dword [rsp + 0x270], eax
lea rax, [rsp + 0x260]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x260], 0x1b6e1b1e
lea rax, [rsp + 0x260]
mov qword [rsp + 0x1320], rax
lea rax, [rsp + 0x1bd0]
lea rcx, [rsp + 0x1750]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1be0]
lea rcx, [rsp + 0x1bd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1be0]
mov rcx, qword [rsp + 0x1320]
call fcn.140097890
mov dword [rsp + 0x4fc], eax
mov rax, qword [rsp + 0x1758]
mov qword [rsp + 0x1328], rax
mov rax, qword [rsp + 0x1328]
sub rax, 4
mov qword [rsp + 0x1330], rax
mov r9, qword [rsp + 0x1330]
xor r8d, r8d
lea rdx, [rsp + 0x1bf0]
lea rcx, [rsp + 0x1750]
call fcn.14019ab70
lea rax, [rsp + 0x264]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x264], 0x1b6e1b1e
lea rax, [rsp + 0x264]
mov qword [rsp + 0x1338], rax
lea rax, [rsp + 0x1c00]
lea rcx, [rsp + 0x1bf0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c10]
lea rcx, [rsp + 0x1c00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c10]
mov rcx, qword [rsp + 0x1338]
call fcn.140097890
mov dword [rsp + 0x504], eax
mov eax, dword [rsp + 0x4fc]
mov dword [rsp + 0x500], eax
mov eax, dword [rsp + 0x500]
cmp dword [rsp + 0x270], eax
jne 0x1400a8d68
xor eax, eax
cmp eax, 1
je 0x1400a8d68
mov dword [rsp + 0x268], 1
jmp 0x1400a8d73
mov dword [rsp + 0x268], 0
movzx eax, byte [rsp + 0x268]
mov byte [rsp + 0x88], al
movzx eax, byte [rsp + 0x88]
test eax, eax
jne 0x1400a8df3
mov eax, dword [rsp + 0x504]
mov dword [rsp + 0x508], eax
mov eax, dword [rsp + 0x508]
cmp dword [rsp + 0x270], eax
jne 0x1400a8dc0
xor eax, eax
cmp eax, 1
je 0x1400a8dc0
mov dword [rsp + 0x278], 1
jmp 0x1400a8dcb
mov dword [rsp + 0x278], 0
movzx eax, byte [rsp + 0x278]
mov byte [rsp + 0x89], al
movzx eax, byte [rsp + 0x89]
test eax, eax
jne 0x1400a8df3
mov dword [rsp + 0x27c], 1
jmp 0x1400a8dfe
mov dword [rsp + 0x27c], 0
movzx eax, byte [rsp + 0x27c]
test eax, eax
je 0x1400a8e0f
jmp 0x1400a8a11
mov rax, qword [rsp + 0xb88]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xb90], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0x6c8], rax
mov rax, qword [rsp + 0xb90]
mov qword [rsp + 0x1340], rax
mov rax, qword [rsp + 0x1340]
mov qword [rsp + 0xb98], rax
mov rax, qword [rsp + 0xb98]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xb98]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1348], rax
mov eax, dword [rsp + 0x1348]
add rax, qword [rsp + 0x6c8]
mov qword [rsp + 0x1350], rax
mov rax, qword [rsp + 0x1350]
mov qword [rsp + 0x6d0], rax
mov eax, dword [rsp + 0x280]
mov dword [rsp + 0x50c], eax
mov eax, dword [rsp + 0x50c]
mov dword [rsp + 0x510], eax
lea rdx, [rsp + 0x23b8]
lea rcx, [rsp + 0x6c8]
call fcn.1401906d0
lea rcx, [rsp + 0x20f0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x23e0]
lea rcx, [rsp + 0x6c8]
call fcn.14018ec60
lea rcx, [rsp + 0x2118]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2140]
lea rcx, [rsp + 0x20f0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2170]
lea rcx, [rsp + 0x2118]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x510]
lea r8, [rsp + 0x2140]
lea rdx, [rsp + 0x2170]
lea rcx, [rsp + 0x1d98]
call fcn.140097110
lea rdx, [rsp + 0x2408]
lea rcx, [rsp + 0x6c8]
call fcn.1401906d0
mov qword [rsp + 0xba0], rax
mov rax, qword [rsp + 0xba0]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x1da0], rax
jne 0x1400a8fc4
mov rax, qword [rsp + 0xba0]
mov rax, qword [rax]
cmp qword [rsp + 0x1d98], rax
jne 0x1400a8fc4
mov dword [rsp + 0x288], 1
jmp 0x1400a8fcf
mov dword [rsp + 0x288], 0
movzx eax, byte [rsp + 0x288]
mov byte [rsp + 0x8a], al
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x1400a8fef
jmp 0x1400a8a11
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1400a90b5
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xbb0], rax
mov rax, qword [rsp + 0xbb0]
mov qword [rsp + 0xba8], rax
mov rax, qword [rsp + 0xba8]
mov qword [rax], 0
mov rax, qword [rsp + 0xba8]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xbb0]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x1da8]
mov qword [rsp + 0xbb8], rax
mov rax, qword [rsp + 0xbb8]
mov qword [rsp + 0x1d80], rax
mov rax, qword [rsp + 0xbb8]
add rax, 0x10
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
mov qword [rsp + 0xbd8], rax
mov rax, qword [rsp + 0x6c8]
mov qword [rsp + 0x1358], rax
mov rax, qword [rsp + 0x1358]
mov qword [rsp + 0xbc0], rax
mov rax, qword [rsp + 0xbc0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xbc0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xbc8], rax
mov eax, dword [rsp + 0xbc8]
add rax, qword [rsp + 0x6c8]
mov qword [rsp + 0xbd0], rax
mov eax, dword [rsp + 0xbcc]
mov rcx, qword [rsp + 0xbd0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1360], rax
mov rax, qword [rsp + 0xbd0]
cmp qword [rsp + 0xbd8], rax
jb 0x1400a91a4
mov rax, qword [rsp + 0x1360]
cmp qword [rsp + 0xbd8], rax
jae 0x1400a91a4
mov dword [rsp + 0x28c], 1
jmp 0x1400a91af
mov dword [rsp + 0x28c], 0
movzx eax, byte [rsp + 0x28c]
mov byte [rsp + 0x8b], al
movzx eax, byte [rsp + 0x8b]
test eax, eax
je 0x1400a9551
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
mov qword [rsp + 0x1368], rax
mov rax, qword [rsp + 0x1368]
mov qword [rsp + 0xbe0], rax
lea rax, [rsp + 0x1ea0]
mov qword [rsp + 0x668], rax
mov rax, qword [rsp + 0x668]
mov rcx, qword [rsp + 0xbe0]
mov qword [rax], rcx
mov rax, qword [rsp + 0xbe0]
mov qword [rsp + 0x1370], rax
mov qword [rsp + 0x388], 0xffffffffffffffff
inc qword [rsp + 0x388]
mov rax, qword [rsp + 0x1370]
mov rcx, qword [rsp + 0x388]
cmp byte [rax + rcx], 0
jne 0x1400a9230
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x1378], rax
mov rax, qword [rsp + 0x668]
mov rcx, qword [rsp + 0x1378]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x870]
mov rdi, rax
mov rsi, qword [rsp + 0x668]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x878]
mov rcx, qword [rsp + 0x870]
call fcn.140096220
mov qword [rsp + 0x670], rax
cmp qword [rsp + 0x670], 0xffffffffffffffff
je 0x1400a9344
mov r9, qword [rsp + 0x670]
xor r8d, r8d
lea rdx, [rsp + 0x1c20]
lea rcx, [rsp + 0x870]
call fcn.14019aaa0
mov rax, qword [rsp + 0x670]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1c30]
lea rcx, [rsp + 0x870]
call fcn.14019aaa0
lea rax, [rsp + 0x18a8]
lea rcx, [rsp + 0x1c20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18b8]
lea rcx, [rsp + 0x1c30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1400a93a3
lea rax, [rsp + 0x870]
mov qword [rsp + 0x1380], rax
mov qword [rsp + 0x17f8], 0
mov qword [rsp + 0x1800], 0
lea rax, [rsp + 0x18a8]
mov rdi, rax
mov rsi, qword [rsp + 0x1380]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18b8]
lea rcx, [rsp + 0x17f8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18a8]
mov qword [rsp + 0x1388], rax
lea rax, [rsp + 0x18b8]
mov qword [rsp + 0x1398], rax
lea rax, [rsp + 0x17a0]
mov qword [rsp + 0xbe8], rax
lea rax, [rsp + 0x290]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x290], 0x1b6e1b1e
lea rax, [rsp + 0x290]
mov qword [rsp + 0x1390], rax
lea rax, [rsp + 0x1c40]
mov rdi, rax
mov rsi, qword [rsp + 0x1388]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c50]
lea rcx, [rsp + 0x1c40]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c50]
mov rcx, qword [rsp + 0x1390]
call fcn.1400977d0
mov dword [rsp + 0x518], eax
mov rax, qword [rsp + 0xbe8]
mov ecx, dword [rsp + 0x518]
mov dword [rax], ecx
mov rax, qword [rsp + 0xbe8]
mov eax, dword [rax]
mov dword [rsp + 0x528], eax
lea rax, [rsp + 0x1668]
mov qword [rsp + 0xbf0], rax
lea rax, [rsp + 0x294]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x294], 0x1b6e1b1e
lea rax, [rsp + 0x294]
mov qword [rsp + 0x13a0], rax
lea rax, [rsp + 0x1c60]
mov rdi, rax
mov rsi, qword [rsp + 0x1398]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c70]
lea rcx, [rsp + 0x1c60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c70]
mov rcx, qword [rsp + 0x13a0]
call fcn.1400977d0
mov dword [rsp + 0x520], eax
mov rax, qword [rsp + 0xbf0]
mov ecx, dword [rsp + 0x520]
mov dword [rax], ecx
mov rax, qword [rsp + 0xbf0]
mov eax, dword [rax]
mov dword [rsp + 0x52c], eax
mov r8d, dword [rsp + 0x528]
mov edx, dword [rsp + 0x52c]
lea rcx, [rsp + 0x680]
call fcn.140191150
mov qword [rsp + 0x390], rax
jmp 0x1400a9577
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
mov qword [rsp + 0x390], rax
jmp 0x1400a9577
mov qword [rsp + 0x390], 0
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0x1d88]
mov qword [rsp + 0xbf8], rax
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0xbf8], rax
mov eax, dword [rsp + 0xce8]
mov dword [rsp + 0x530], eax
mov rax, qword [rsp + 0xbf8]
mov qword [rsp + 0x13b8], rax
mov eax, dword [rsp + 0x530]
mov dword [rsp + 0x538], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x13a8], rax
mov rax, qword [rsp + 0x13a8]
mov qword [rsp + 0x880], rax
mov byte [rsp + 0x888], 0
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x13b0], rax
mov rax, qword [rsp + 0x13b0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x888], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x13c0], rax
lea r9, [rsp + 0x13b8]
lea r8, [rsp + 0x538]
lea rdx, [rsp + 0x1ee0]
mov rcx, qword [rsp + 0x13c0]
call fcn.140098320
movzx eax, byte [rsp + 0x888]
test eax, eax
je 0x1400a9686
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x13c8], rax
mov rax, qword [rsp + 0x13c8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x680]
mov qword [rsp + 0x13d0], rax
mov rax, qword [rsp + 0x13d0]
mov eax, dword [rax + 4]
mov dword [rsp + 0x540], eax
mov eax, dword [rsp + 0x540]
mov dword [rsp + 0xcec], eax
lea rax, [rsp + 0xcf0]
mov qword [rsp + 0x13d8], rax
mov eax, dword [rsp + 0xcec]
mov dword [rsp + 0x548], eax
mov rax, qword [rsp + 0x13d8]
add rax, 0x11
mov qword [rsp + 0x13e0], rax
mov eax, 6
mov rcx, qword [rsp + 0x13e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x13e8], rax
mov rax, qword [rsp + 0x13e8]
mov ecx, dword [rsp + 0x548]
mov dword [rax], ecx
lea rax, [rsp + 0xcf0]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0x148]
add rax, 0x10
mov qword [rsp + 0x1d90], rax
mov rax, qword [0x1404d0cd8]
mov qword [rsp + 0x13f0], rax
mov qword [rsp + 0xc00], 0
mov qword [rsp + 0x13f8], 0xd
mov rax, qword [rsp + 0x13f0]
mov qword [rsp + 0x1400], rax
mov eax, 0x3000
and eax, 0xffffffc0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x13f8]
xor r8d, r8d
lea rdx, [rsp + 0xc00]
mov rcx, 0xffffffffffffffff
call qword [rsp + 0x1400]
mov dword [rsp + 0x550], eax
cmp dword [rsp + 0x550], 0
jl 0x1400a97c7
mov rax, qword [rsp + 0xc00]
mov qword [rsp + 0xc08], rax
jmp 0x1400a97d3
mov qword [rsp + 0xc08], 0
mov rax, qword [rsp + 0xc08]
mov qword [rsp + 0x1408], rax
mov rax, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x1408]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x148]
cmp qword [rax + 8], 0
jne 0x1400a9808
jmp 0x1400a9851
mov rax, qword [rsp + 0x148]
add rax, 0x11
mov qword [rsp + 0x1410], rax
mov rax, qword [rsp + 0x148]
mov rax, qword [rax + 8]
mov rdi, rax
mov rsi, qword [rsp + 0x1410]
mov ecx, reloc.WS2_32.dll_listen
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x148]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [rsp + 0xcf0]
mov qword [rsp + 0x1448], rax
mov rax, qword [rsp + 0x1418]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x1420]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x1428]
mov r8, qword [rsp + 0x1430]
mov rdx, qword [rsp + 0x1438]
mov rcx, qword [rsp + 0x1440]
call qword [rsp + 0x1448]
mov qword [rsp + 0x1450], rax
lea rax, [rsp + 0xcf0]
mov rcx, rax
call fcn.1400a0db0
mov rax, qword [rsp + 0x1450]
mov qword [rsp + 0xc10], rax
cmp qword [rsp + 0xc10], 0
jne 0x1400a98e7
lea rcx, [rsp + 0x158]
call fcn.1400a0fc0
jmp 0x1400aaef2
mov rax, qword [rsp + 0xc10]
mov qword [rsp + 0x1650], rax
mov rax, qword [rsp + 0x3b8]
cmp dword [rax], 2
je 0x1400aaed7
mov dword [rsp + 0x5a0], 0
mov dword [rsp + 0x5a4], 0
mov dword [rsp + 0x5a8], 0
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1460], rax
mov dword [rsp + 0x554], 0x2f1287f1
mov eax, dword [rsp + 0x554]
mov dword [rsp + 0x558], eax
mov eax, dword [rsp + 0x558]
mov dword [rsp + 0x560], eax
mov eax, dword [rsp + 0x560]
mov dword [rsp + 0x568], eax
mov eax, dword [rsp + 0x568]
mov dword [rsp + 0xd10], eax
mov dword [rsp + 0xd14], 0
lea rax, [rsp + 0xd18]
mov qword [rsp + 0x1458], rax
mov dword [rsp + 0x59c], 0x49
mov dword [rsp + 0x598], 0x89
mov dword [rsp + 0x594], 0xca
mov dword [rsp + 0x590], 0x48
mov dword [rsp + 0x58c], 0xc7
mov dword [rsp + 0x588], 0xc0
mov dword [rsp + 0x584], 0x3f
mov dword [rsp + 0x580], 0x10
mov dword [rsp + 0x57c], 0
mov dword [rsp + 0x578], 0
mov dword [rsp + 0x574], 0xf
mov dword [rsp + 0x570], 5
mov dword [rsp + 0x56c], 0xc3
lea rax, [rsp + 0x56c]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x570]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x574]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x578]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x57c]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x580]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x584]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x588]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x58c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x590]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x594]
lea r8, [rsp + 0x598]
lea rdx, [rsp + 0x59c]
mov rcx, qword [rsp + 0x1458]
call fcn.14008f900
mov byte [rsp + 0x11c], 1
mov byte [rsp + 0x11d], 0
movsxd rax, dword [rsp + 0x5a0]
mov qword [rsp + 0x1620], rax
mov byte [rsp + 0x11e], 1
mov byte [rsp + 0x11f], 0
movsxd rax, dword [rsp + 0x5a4]
mov qword [rsp + 0x1628], rax
mov byte [rsp + 0x120], 1
mov byte [rsp + 0x121], 0
movsxd rax, dword [rsp + 0x5a8]
mov qword [rsp + 0x1630], rax
mov byte [rsp + 0x122], 0
mov byte [rsp + 0x123], 1
mov rax, qword [rsp + 0x1460]
mov eax, dword [rax]
mov qword [rsp + 0x1638], rax
mov eax, dword [rsp + 0xd10]
mov dword [rsp + 0x5b0], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xc18], rax
mov rax, qword [rsp + 0xc18]
mov qword [rsp + 0x1468], rax
mov rax, qword [rsp + 0x1468]
mov qword [rsp + 0x1760], rax
mov byte [rsp + 0x1768], 1
mov rax, qword [rsp + 0xc18]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1470], rax
lea r8, [rsp + 0x5b0]
lea rdx, [rsp + 0xc30]
mov rcx, qword [rsp + 0x1470]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1478], rax
mov rax, qword [rsp + 0x1478]
add rax, 8
mov qword [rsp + 0xc20], rax
mov rax, qword [rsp + 0x1968]
mov qword [rsp + 0xc28], rax
mov rax, qword [rsp + 0xc20]
mov qword [rsp + 0xc28], rax
mov rax, qword [rsp + 0xc20]
mov rax, qword [rax]
mov qword [rsp + 0x1480], rax
mov r8, qword [rsp + 0xc28]
mov rdx, qword [rsp + 0x1480]
lea rcx, [rsp + 0x1488]
call fcn.14006f260
lea rax, [rsp + 0x1488]
mov qword [rsp + 0x1490], rax
mov rax, qword [rsp + 0x1490]
mov rax, qword [rax]
cmp qword [rsp + 0xc30], rax
jne 0x1400a9c81
mov dword [rsp + 0x298], 1
jmp 0x1400a9c8c
mov dword [rsp + 0x298], 0
movzx eax, byte [rsp + 0x298]
mov byte [rsp + 0x8c], al
movzx eax, byte [rsp + 0x8c]
test eax, eax
je 0x1400a9cb5
mov qword [rsp + 0xc38], 0
jmp 0x1400a9d1d
mov rax, qword [rsp + 0xc30]
add rax, 0x10
mov qword [rsp + 0x1498], rax
mov rax, qword [rsp + 0x1498]
mov qword [rsp + 0x14a0], rax
mov rax, qword [rsp + 0x14a0]
mov qword [rsp + 0x14a8], rax
mov rax, qword [rsp + 0x14a8]
mov qword [rsp + 0x14b0], rax
mov rax, qword [rsp + 0x14b0]
mov qword [rsp + 0x14b8], rax
mov rax, qword [rsp + 0x14b8]
mov rax, qword [rax + 8]
mov qword [rsp + 0xc38], rax
mov rax, qword [rsp + 0xc38]
mov qword [rsp + 0x14c8], rax
movzx eax, byte [rsp + 0x1768]
test eax, eax
je 0x1400a9d59
mov rax, qword [rsp + 0x1760]
mov qword [rsp + 0x14c0], rax
mov rax, qword [rsp + 0x14c0]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x14c8]
mov qword [rsp + 0xc40], rax
cmp qword [rsp + 0xc40], 0
je 0x1400a9d99
mov rax, qword [rsp + 0xc40]
mov eax, dword [rax + 4]
mov dword [rsp + 0x5b8], eax
mov eax, dword [rsp + 0x5b8]
mov dword [rsp + 0xd14], eax
jmp 0x1400aac35
lea rax, [rsp + 0x1664]
mov qword [rsp + 0xc48], rax
mov rax, qword [rsp + 0xc48]
mov dword [rax], 0
mov rax, qword [rsp + 0xc48]
mov eax, dword [rax]
mov dword [rsp + 0x5c8], eax
lea rax, [rsp + 0x1660]
mov qword [rsp + 0xc50], rax
mov eax, dword [rsp + 0xd10]
mov dword [rsp + 0x5c0], eax
mov rax, qword [rsp + 0xc50]
mov ecx, dword [rsp + 0x5c0]
mov dword [rax], ecx
mov rax, qword [rsp + 0xc50]
mov eax, dword [rax]
mov dword [rsp + 0x5cc], eax
mov eax, dword [rsp + 0x5c8]
mov dword [rsp + 0x2a8], eax
mov eax, dword [rsp + 0x5cc]
mov dword [rsp + 0x2d0], eax
mov dword [rsp + 0x5d0], 0
mov eax, dword [rsp + 0x5d0]
cmp dword [rsp + 0x2d0], eax
jne 0x1400a9e53
xor eax, eax
cmp eax, 1
je 0x1400a9e53
mov dword [rsp + 0x29c], 1
jmp 0x1400a9e5e
mov dword [rsp + 0x29c], 0
movzx eax, byte [rsp + 0x29c]
mov byte [rsp + 0x8d], al
movzx eax, byte [rsp + 0x8d]
test eax, eax
je 0x1400a9e8a
mov qword [rsp + 0x3b0], 0
jmp 0x1400aaaf6
mov byte [rsp + 0x124], 1
mov qword [rsp + 0xd78], 0
mov qword [rsp + 0xd80], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x14d0], rax
mov rax, qword [rsp + 0x14d0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x14d8], rax
mov rax, qword [rsp + 0x14d8]
add rax, 0x10
mov qword [rsp + 0x688], rax
mov eax, 1
test eax, eax
je 0x1400a9f04
mov rax, qword [rsp + 0x688]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xc58], rax
jmp 0x1400a9f17
mov rax, qword [rsp + 0x688]
mov rax, qword [rax]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0xd78], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0xd80], rax
lea rax, [rsp + 0xd78]
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0xc60]
mov rax, qword [rax]
mov qword [rsp + 0x14e0], rax
mov rax, qword [rsp + 0x14e0]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0xc60]
mov rax, qword [rax + 8]
mov qword [rsp + 0x14e8], rax
mov rax, qword [rsp + 0x14e8]
mov qword [rsp + 0x14f0], rax
jmp 0x1400a9fa3
mov rax, qword [rsp + 0x398]
mov rax, qword [rax]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x14f0]
cmp qword [rsp + 0x398], rax
je 0x1400a9fc2
mov dword [rsp + 0x2a0], 1
jmp 0x1400a9fcd
mov dword [rsp + 0x2a0], 0
movzx eax, byte [rsp + 0x2a0]
test eax, eax
je 0x1400aaaea
xor eax, eax
mov qword [rsp + 0x14f8], rax
mov rax, qword [rsp + 0x14f8]
mov rcx, qword [rsp + 0x398]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1500], rax
lea rax, [rsp + 0x1500]
mov qword [rsp + 0xc70], rax
mov dword [rsp + 0x5d4], 0
mov eax, dword [rsp + 0x5d4]
cmp dword [rsp + 0x2a8], eax
jne 0x1400aa044
xor eax, eax
cmp eax, 1
je 0x1400aa044
mov dword [rsp + 0x2a4], 1
jmp 0x1400aa04f
mov dword [rsp + 0x2a4], 0
movzx eax, byte [rsp + 0x2a4]
mov byte [rsp + 0x8e], al
movzx eax, byte [rsp + 0x8e]
test eax, eax
jne 0x1400aa38e
mov rax, qword [rsp + 0xc70]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x1508], rax
mov rax, qword [rsp + 0x1508]
mov rax, qword [rax + 8]
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x1808], rax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x1510], rax
mov qword [rsp + 0x3a0], 0xffffffffffffffff
inc qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x1510]
mov rcx, qword [rsp + 0x3a0]
cmp word [rax + rcx*2], 0
jne 0x1400aa0c5
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1518]
mov qword [rsp + 0x1810], rax
lea rax, [rsp + 0x1808]
mov qword [rsp + 0x1520], rax
lea rax, [rsp + 0x1c80]
mov rdi, rax
mov rsi, qword [rsp + 0x1520]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x2a8]
mov dword [rsp + 0x5d8], eax
lea rax, [rsp + 0x1770]
lea rcx, [rsp + 0x1c80]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x5d8]
mov dword [rsp + 0x2c0], eax
lea rax, [rsp + 0x2b0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2b0], 0x1b6e1b1e
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x1528], rax
lea rax, [rsp + 0x1c90]
lea rcx, [rsp + 0x1770]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ca0]
lea rcx, [rsp + 0x1c90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ca0]
mov rcx, qword [rsp + 0x1528]
call fcn.140097890
mov dword [rsp + 0x5dc], eax
mov rax, qword [rsp + 0x1778]
mov qword [rsp + 0x1530], rax
mov rax, qword [rsp + 0x1530]
sub rax, 4
mov qword [rsp + 0x1538], rax
mov r9, qword [rsp + 0x1538]
xor r8d, r8d
lea rdx, [rsp + 0x1cb0]
lea rcx, [rsp + 0x1770]
call fcn.14019ab70
lea rax, [rsp + 0x2b4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2b4], 0x1b6e1b1e
lea rax, [rsp + 0x2b4]
mov qword [rsp + 0x1540], rax
lea rax, [rsp + 0x1cc0]
lea rcx, [rsp + 0x1cb0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1cd0]
lea rcx, [rsp + 0x1cc0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1cd0]
mov rcx, qword [rsp + 0x1540]
call fcn.140097890
mov dword [rsp + 0x5e4], eax
mov eax, dword [rsp + 0x5dc]
mov dword [rsp + 0x5e0], eax
mov eax, dword [rsp + 0x5e0]
cmp dword [rsp + 0x2c0], eax
jne 0x1400aa2e7
xor eax, eax
cmp eax, 1
je 0x1400aa2e7
mov dword [rsp + 0x2b8], 1
jmp 0x1400aa2f2
mov dword [rsp + 0x2b8], 0
movzx eax, byte [rsp + 0x2b8]
mov byte [rsp + 0x8f], al
movzx eax, byte [rsp + 0x8f]
test eax, eax
jne 0x1400aa372
mov eax, dword [rsp + 0x5e4]
mov dword [rsp + 0x5e8], eax
mov eax, dword [rsp + 0x5e8]
cmp dword [rsp + 0x2c0], eax
jne 0x1400aa33f
xor eax, eax
cmp eax, 1
je 0x1400aa33f
mov dword [rsp + 0x2c8], 1
jmp 0x1400aa34a
mov dword [rsp + 0x2c8], 0
movzx eax, byte [rsp + 0x2c8]
mov byte [rsp + 0x90], al
movzx eax, byte [rsp + 0x90]
test eax, eax
jne 0x1400aa372
mov dword [rsp + 0x2cc], 1
jmp 0x1400aa37d
mov dword [rsp + 0x2cc], 0
movzx eax, byte [rsp + 0x2cc]
test eax, eax
je 0x1400aa38e
jmp 0x1400a9f90
mov rax, qword [rsp + 0xc70]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0xc78]
mov qword [rsp + 0x1548], rax
mov rax, qword [rsp + 0x1548]
mov qword [rsp + 0xc80], rax
mov rax, qword [rsp + 0xc80]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xc80]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1550], rax
mov eax, dword [rsp + 0x1550]
add rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x1558], rax
mov rax, qword [rsp + 0x1558]
mov qword [rsp + 0x6c0], rax
mov eax, dword [rsp + 0x2d0]
mov dword [rsp + 0x5ec], eax
mov eax, dword [rsp + 0x5ec]
mov dword [rsp + 0x5f0], eax
lea rdx, [rsp + 0x2430]
lea rcx, [rsp + 0x6b8]
call fcn.1401906d0
lea rcx, [rsp + 0x21a0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2458]
lea rcx, [rsp + 0x6b8]
call fcn.14018ec60
lea rcx, [rsp + 0x21c8]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x21f0]
lea rcx, [rsp + 0x21a0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2220]
lea rcx, [rsp + 0x21c8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x5f0]
lea r8, [rsp + 0x21f0]
lea rdx, [rsp + 0x2220]
lea rcx, [rsp + 0x1e38]
call fcn.140097110
lea rdx, [rsp + 0x2480]
lea rcx, [rsp + 0x6b8]
call fcn.1401906d0
mov qword [rsp + 0xc88], rax
mov rax, qword [rsp + 0xc88]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x1e40], rax
jne 0x1400aa543
mov rax, qword [rsp + 0xc88]
mov rax, qword [rax]
cmp qword [rsp + 0x1e38], rax
jne 0x1400aa543
mov dword [rsp + 0x2d8], 1
jmp 0x1400aa54e
mov dword [rsp + 0x2d8], 0
movzx eax, byte [rsp + 0x2d8]
mov byte [rsp + 0x91], al
movzx eax, byte [rsp + 0x91]
test eax, eax
je 0x1400aa56e
jmp 0x1400a9f90
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1400aa634
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0xc98]
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0xc90]
mov qword [rax], 0
mov rax, qword [rsp + 0xc90]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xc98]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x1e48]
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x1d48], rax
mov rax, qword [rsp + 0xca0]
add rax, 0x10
mov qword [rsp + 0x6a0], rax
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax]
mov qword [rsp + 0xcc0], rax
mov rax, qword [rsp + 0x6b8]
mov qword [rsp + 0x1560], rax
mov rax, qword [rsp + 0x1560]
mov qword [rsp + 0xca8], rax
mov rax, qword [rsp + 0xca8]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xca8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xcb0], rax
mov eax, dword [rsp + 0xcb0]
add rax, qword [rsp + 0x6b8]
mov qword [rsp + 0xcb8], rax
mov eax, dword [rsp + 0xcb4]
mov rcx, qword [rsp + 0xcb8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1568], rax
mov rax, qword [rsp + 0xcb8]
cmp qword [rsp + 0xcc0], rax
jb 0x1400aa723
mov rax, qword [rsp + 0x1568]
cmp qword [rsp + 0xcc0], rax
jae 0x1400aa723
mov dword [rsp + 0x2dc], 1
jmp 0x1400aa72e
mov dword [rsp + 0x2dc], 0
movzx eax, byte [rsp + 0x2dc]
mov byte [rsp + 0x92], al
movzx eax, byte [rsp + 0x92]
test eax, eax
je 0x1400aaad0
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax]
mov qword [rsp + 0x1570], rax
mov rax, qword [rsp + 0x1570]
mov qword [rsp + 0xcc8], rax
lea rax, [rsp + 0x1ec0]
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x690]
mov rcx, qword [rsp + 0xcc8]
mov qword [rax], rcx
mov rax, qword [rsp + 0xcc8]
mov qword [rsp + 0x1578], rax
mov qword [rsp + 0x3a8], 0xffffffffffffffff
inc qword [rsp + 0x3a8]
mov rax, qword [rsp + 0x1578]
mov rcx, qword [rsp + 0x3a8]
cmp byte [rax + rcx], 0
jne 0x1400aa7af
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x1580], rax
mov rax, qword [rsp + 0x690]
mov rcx, qword [rsp + 0x1580]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x890]
mov rdi, rax
mov rsi, qword [rsp + 0x690]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x898]
mov rcx, qword [rsp + 0x890]
call fcn.140096220
mov qword [rsp + 0x698], rax
cmp qword [rsp + 0x698], 0xffffffffffffffff
je 0x1400aa8c3
mov r9, qword [rsp + 0x698]
xor r8d, r8d
lea rdx, [rsp + 0x1ce0]
lea rcx, [rsp + 0x890]
call fcn.14019aaa0
mov rax, qword [rsp + 0x698]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1cf0]
lea rcx, [rsp + 0x890]
call fcn.14019aaa0
lea rax, [rsp + 0x18c8]
lea rcx, [rsp + 0x1ce0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18d8]
lea rcx, [rsp + 0x1cf0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x1400aa922
lea rax, [rsp + 0x890]
mov qword [rsp + 0x1588], rax
mov qword [rsp + 0x1838], 0
mov qword [rsp + 0x1840], 0
lea rax, [rsp + 0x18c8]
mov rdi, rax
mov rsi, qword [rsp + 0x1588]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18d8]
lea rcx, [rsp + 0x1838]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x18c8]
mov qword [rsp + 0x1590], rax
lea rax, [rsp + 0x18d8]
mov qword [rsp + 0x15a0], rax
lea rax, [rsp + 0x165c]
mov qword [rsp + 0xcd0], rax
lea rax, [rsp + 0x2e0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2e0], 0x1b6e1b1e
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x1598], rax
lea rax, [rsp + 0x1d00]
mov rdi, rax
mov rsi, qword [rsp + 0x1590]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d10]
lea rcx, [rsp + 0x1d00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1d10]
mov rcx, qword [rsp + 0x1598]
call fcn.1400977d0
mov dword [rsp + 0x5f8], eax
mov rax, qword [rsp + 0xcd0]
mov ecx, dword [rsp + 0x5f8]
mov dword [rax], ecx
mov rax, qword [rsp + 0xcd0]
mov eax, dword [rax]
mov dword [rsp + 0x608], eax
lea rax, [rsp + 0x1658]
mov qword [rsp + 0xcd8], rax
lea rax, [rsp + 0x2e4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2e4], 0x1b6e1b1e
lea rax, [rsp + 0x2e4]
mov qword [rsp + 0x15a8], rax
lea rax, [rsp + 0x1d20]
mov rdi, rax
mov rsi, qword [rsp + 0x15a0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d30]
lea rcx, [rsp + 0x1d20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1d30]
mov rcx, qword [rsp + 0x15a8]
call fcn.1400977d0
mov dword [rsp + 0x600], eax
mov rax, qword [rsp + 0xcd8]
mov ecx, dword [rsp + 0x600]
mov dword [rax], ecx
mov rax, qword [rsp + 0xcd8]
mov eax, dword [rax]
mov dword [rsp + 0x60c], eax
mov r8d, dword [rsp + 0x608]
mov edx, dword [rsp + 0x60c]
lea rcx, [rsp + 0x6a8]
call fcn.140191150
mov qword [rsp + 0x3b0], rax
jmp 0x1400aaaf6
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax]
mov qword [rsp + 0x3b0], rax
jmp 0x1400aaaf6
mov qword [rsp + 0x3b0], 0
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x1d50]
mov qword [rsp + 0xce0], rax
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0xce0], rax
mov eax, dword [rsp + 0xd10]
mov dword [rsp + 0x610], eax
mov rax, qword [rsp + 0xce0]
mov qword [rsp + 0x15c0], rax
mov eax, dword [rsp + 0x610]
mov dword [rsp + 0x618], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x15b0], rax
mov rax, qword [rsp + 0x15b0]
mov qword [rsp + 0x8a0], rax
mov byte [rsp + 0x8a8], 0
mov rax, qword [rsp + 0x8a0]
mov qword [rsp + 0x15b8], rax
mov rax, qword [rsp + 0x15b8]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x8a8], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x15c8], rax
lea r9, [rsp + 0x15c0]
lea r8, [rsp + 0x618]
lea rdx, [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x15c8]
call fcn.140098320
movzx eax, byte [rsp + 0x8a8]
test eax, eax
je 0x1400aac05
mov rax, qword [rsp + 0x8a0]
mov qword [rsp + 0x15d0], rax
mov rax, qword [rsp + 0x15d0]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x6a8]
mov qword [rsp + 0x15d8], rax
mov rax, qword [rsp + 0x15d8]
mov eax, dword [rax + 4]
mov dword [rsp + 0x620], eax
mov eax, dword [rsp + 0x620]
mov dword [rsp + 0xd14], eax
lea rax, [rsp + 0xd18]
mov qword [rsp + 0x15e0], rax
mov eax, dword [rsp + 0xd14]
mov dword [rsp + 0x628], eax
mov rax, qword [rsp + 0x15e0]
add rax, 0x11
mov qword [rsp + 0x15e8], rax
mov eax, 6
mov rcx, qword [rsp + 0x15e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x15f0], rax
mov rax, qword [rsp + 0x15f0]
mov ecx, dword [rsp + 0x628]
mov dword [rax], ecx
lea rax, [rsp + 0xd18]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
add rax, 0x10
mov qword [rsp + 0x1d58], rax
mov rax, qword [0x1404d0cd8]
mov qword [rsp + 0x15f8], rax
mov qword [rsp + 0x7f0], 0
mov qword [rsp + 0x1600], 0xd
mov rax, qword [rsp + 0x15f8]
mov qword [rsp + 0x1608], rax
mov eax, 0x3000
and eax, 0xffffffc0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x1600]
xor r8d, r8d
lea rdx, [rsp + 0x7f0]
mov rcx, 0xffffffffffffffff
call qword [rsp + 0x1608]
mov dword [rsp + 0x630], eax
cmp dword [rsp + 0x630], 0
jl 0x1400aad46
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x7f8], rax
jmp 0x1400aad52
mov qword [rsp + 0x7f8], 0
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0x1610], rax
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x1610]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x150]
cmp qword [rax + 8], 0
jne 0x1400aad87
jmp 0x1400aadd0
mov rax, qword [rsp + 0x150]
add rax, 0x11
mov qword [rsp + 0x1618], rax
mov rax, qword [rsp + 0x150]
mov rax, qword [rax + 8]
mov rdi, rax
mov rsi, qword [rsp + 0x1618]
mov ecx, reloc.WS2_32.dll_listen
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x150]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [rsp + 0xd18]
mov qword [rsp + 0x1640], rax
mov r9, qword [rsp + 0x1620]
mov r8, qword [rsp + 0x1628]
mov rdx, qword [rsp + 0x1630]
mov rcx, qword [rsp + 0x1638]
call qword [rsp + 0x1640]
mov qword [rsp + 0x1d60], rax
lea rax, [rsp + 0xd18]
mov rcx, rax
call fcn.1400a0db0
mov dword [rsp + 0x634], 0xa
movsxd rax, dword [rsp + 0x634]
mov qword [rsp + 0x1648], rax
lea rcx, [rsp + 0x1648]
call fcn.1400980f0
mov rax, qword [rsp + 0x1d68]
mov qword [rsp + 0x808], rax
lea rax, [0x1404d0e40]
mov rax, qword [rax]
mov qword [rsp + 0x808], rax
mov rax, qword [rsp + 0x2700]
mov rax, qword [rax]
mov eax, dword [rax]
mov dword [rsp + 0x638], eax
mov eax, dword [rsp + 0x638]
mov dword [rsp + 0x1908], eax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x1910], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x1918], rax
mov qword [rsp + 0x1920], 0x18
mov r8d, Ordinal_301
lea rdx, [rsp + 0x1908]
mov rcx, qword [rsp + 0x808]
call fcn.1401997d0
jmp 0x1400a98f7
lea rcx, [rsp + 0x1650]
call fcn.1400a12c0
nop
lea rcx, [rsp + 0x158]
call fcn.1400a0fc0
add rsp, 0x26e8
pop rdi
pop rsi
ret