Function at 0x7ffe04649098
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x20], r9
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x47]
sub rsp, 0xf0
xor edi, edi
mov rcx, r8
mov eax, edi
mov qword [rbp - 0x41], rdi
mov qword [rsp + 0x60], rax
mov r14, r9
mov qword [rbp - 0x61], rax
mov rbx, r8
mov r15, rdx
mov byte [rsp + 0x50], dil
mov esi, edi
mov byte [rbp - 0x65], dil
mov r13d, edi
mov byte [rsp + 0x52], dil
mov qword [rbp - 0x29], rdi
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x51], dil
call fcn.7ffe0465b430
cmp eax, 0xa
jbe 0x7ffe0464910a
lea eax, [rdi + 0xa]
jmp 0x7ffe04649112
mov rcx, rbx
call fcn.7ffe0465b430
or r9d, 0xffffffff
lea r8, str.gc._msdcs.
mov edx, eax
mov rcx, rbx
call fcn.7ffe0465aeb8
mov r10d, 0x800000
test al, al
je 0x7ffe046491b5
mov r9d, dword [0x7ffe0466eeac]
test r9d, r9d
je 0x7ffe04649171
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649171
test qword [0x7ffe0466eea0], r10
je 0x7ffe04649171
mov r8, rbx
lea rdx, str.Preprocessing_GC_referral_to__S_n
mov ecx, r10d
call fcn.7ffe04636b9c
mov r9d, dword [0x7ffe0466eeac]
mov r10d, 0x800000
mov rcx, rbx
call fcn.7ffe0465b430
lea rdx, [rbx + 0x14]
mov rcx, rbx
lea r8d, [rax*2 - 0x12]
call fcn.7ffe0465af08
test r9d, r9d
je 0x7ffe046491b5
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046491b5
test qword [0x7ffe0466eea0], r10
je 0x7ffe046491b5
mov r8, rbx
lea rdx, str.Chasing_GC_referral_to__S_instead_n
mov ecx, r10d
call fcn.7ffe04636b9c
mov r8d, 0x736e414c
lea rdx, [rbp - 0x41]
mov rcx, rbx
call fcn.7ffe046597a0
xor edx, edx
mov dword [rbp - 0x79], eax
mov r8d, 0x696e554c
mov rcx, rbx
mov r12d, eax
call fcn.7ffe0465afdc
mov rdx, qword [rbp - 0x41]
mov qword [rbp - 0x41], rdx
mov qword [rbp - 0x49], rax
test rax, rax
je 0x7ffe0464b0b9
test r12d, r12d
jne 0x7ffe0464b0b9
mov rdx, qword [rbp + 0x67]
test rdx, rdx
je 0x7ffe04649366
movzx r10d, word [rdx]
mov r11, rdx
mov r8, rdx
test r10w, r10w
je 0x7ffe04649339
mov r12b, 0x41
mov r14b, 5
mov esi, 0x46
add r11, 2
cmp r10w, 0x25
jne 0x7ffe0464931c
movzx ecx, word [r11]
test cx, cx
je 0x7ffe04649332
movzx r9d, word [r11 + 2]
test r9w, r9w
je 0x7ffe04649332
movzx eax, cx
shr ax, 8
test al, al
jne 0x7ffe0464931c
movzx eax, r9w
shr ax, 8
test al, al
jne 0x7ffe0464931c
lea ebx, [rcx - 0x30]
cmp bl, 9
jbe 0x7ffe0464928f
mov al, cl
sub al, r12b
cmp al, r14b
jbe 0x7ffe0464928f
lea eax, [rcx - 0x61]
cmp al, r14b
ja 0x7ffe0464931c
lea edx, [r9 - 0x30]
cmp dl, 9
jbe 0x7ffe046492ac
mov al, r9b
sub al, r12b
cmp al, r14b
jbe 0x7ffe046492ac
lea eax, [r9 - 0x61]
cmp al, r14b
ja 0x7ffe0464931c
cmp bl, 9
jbe 0x7ffe046492d0
mov al, cl
sub al, r12b
cmp al, r14b
ja 0x7ffe046492c0
sub cl, 0x37
jmp 0x7ffe046492d0
lea eax, [rcx - 0x61]
cmp al, r14b
ja 0x7ffe046492cd
sub cl, 0x57
jmp 0x7ffe046492d0
mov cl, dil
cmp dl, 9
jbe 0x7ffe046492f8
mov al, r9b
sub al, r12b
cmp al, r14b
ja 0x7ffe046492e6
lea edx, [r9 - 0x37]
jmp 0x7ffe046492f8
lea eax, [r9 - 0x61]
cmp al, r14b
ja 0x7ffe046492f5
lea edx, [r9 - 0x57]
jmp 0x7ffe046492f8
mov dl, dil
shl cl, 4
add r11, 4
or cl, dl
movzx r10d, cl
cmp r10d, 0x3f
jne 0x7ffe0464931c
mov dword [r8], 0x33005c
add r8, 4
mov word [r8], si
jmp 0x7ffe04649320
mov word [r8], r10w
movzx r10d, word [r11]
add r8, 2
test r10w, r10w
jne 0x7ffe04649227
mov rdx, qword [rbp + 0x67]
mov rsi, rdi
mov word [r8], di
movzx eax, word [rdx]
neg ax
sbb r14, r14
and r14, rdx
je 0x7ffe04649366
mov rcx, r14
call fcn.7ffe0464b748
mov qword [rsp + 0x58], rax
mov r12, rax
test rax, rax
jne 0x7ffe04649369
mov r15d, dword [rbp - 0x79]
jmp 0x7ffe046493e2
mov r12, rdi
mov rbx, qword [rbp + 0x4f]
lea rax, [rbx + 0x30]
mov rcx, rax
mov qword [rbp - 9], rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
movzx eax, word [rbx + 0xb4]
mov r9d, 1
mov r13, qword [rbx + 0x20]
mov byte [rsp + 0x50], r9b
cmp word [rbx + 0xb2], ax
ja 0x7ffe046493ea
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046493d7
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046493d7
mov r10d, 0x800000
test qword [0x7ffe0466eea0], r10
je 0x7ffe046493d7
mov r9, rbx
lea rdx, str.HandleReferral_hit_hop_count_limit_of_0x_x_while_handling_0x_x_n
xor r8d, r8d
mov ecx, r10d
call fcn.7ffe04636b9c
mov r15d, 0x46
mov r12, qword [rsp + 0x58]
mov r14, rdi
jmp 0x7ffe0464a188
cmp word [r15 + 0x3c], di
jne 0x7ffe04649429
test r14, r14
mov qword [rbp - 0x19], r13
lea rax, [rbx + 0xc0]
cmovne rax, r12
cmp byte [rbx + 0xba], 0x63
mov rax, qword [rax]
mov qword [rbp - 0x39], rax
jne 0x7ffe04649483
mov ecx, dword [rbp - 0x65]
cmp dword [rbx + 0xe8], r9d
movzx ecx, cl
cmove ecx, r9d
mov dword [rbp - 0x65], ecx
jmp 0x7ffe04649483
mov r8, qword [rbx + 0xa8]
movzx ecx, word [r15 + 0x3c]
shl rcx, 6
lea rax, [r8 - 0x38]
add rax, rcx
test r14, r14
cmovne rax, r12
cmp byte [rbx + 0xba], 0x63
mov rdx, qword [rax]
mov rax, qword [rcx + r8 - 0x40]
mov qword [rbp - 0x19], rax
mov rax, rdx
mov qword [rbp - 0x39], rdx
jne 0x7ffe04649483
mov qword [rbp - 0x39], rdx
cmp byte [rcx + r8 - 0xa], r9b
jne 0x7ffe04649483
mov qword [rbp - 0x39], rdx
cmp dword [rbx + 0xe8], r9d
jne 0x7ffe04649483
mov byte [rbp - 0x65], r9b
mov qword [rbp - 0x39], rdx
mov r14, qword [rbp - 0x49]
mov r9, rax
movzx r8d, word [rbp + 0x6f]
mov rdx, r14
mov rcx, rbx
call fcn.7ffe04648378
mov dword [rbp - 0x79], eax
mov r15d, eax
test eax, eax
jne 0x7ffe046493dd
lea rcx, [rbx + 0x30]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rax, qword [r13 + 0x2f0]
lea r12, [rbx + 0xd8]
mov rcx, qword [r13 + 0x300]
mov ebx, 0x80
mov byte [rsp + 0x50], dil
mov qword [rbp - 0x11], rax
mov qword [rbp - 0x29], rcx
mov qword [rbp - 0x71], r12
test rax, rax
je 0x7ffe04649a2d
cmp qword [r12], rdi
jne 0x7ffe04649a2d
lea r15, [r13 + 0x200]
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov eax, dword [r13 + 0xa8]
mov dword [rbp - 0x21], eax
mov eax, dword [r13 + 0xac]
mov dword [rbp - 0x1d], eax
cmp dword [r13 + 0x9c], ebx
je 0x7ffe04649608
mov r14, qword [r13 + 0x80]
test r14, r14
je 0x7ffe04649608
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rbx, [r13 + 0x88]
cmp byte [r13 + 0x98], dil
je 0x7ffe0464956c
mov rcx, rbx
call fcn.7ffe04659574
mov byte [r13 + 0x98], dil
mov rcx, qword [r13 + 0x80]
mov edx, 1
mov eax, dword [rcx]
sub eax, edx
cmp eax, 0xfffe
ja 0x7ffe04649598
mov r8d, dword [rcx + 0x34]
shr r8d, 1
and r8b, dl
lea rdx, [rbp - 0x61]
call fcn.7ffe0465304c
jmp 0x7ffe046495ab
mov r8d, dword [r14 + 0x2c]
shr r8d, 1
and r8b, dl
lea rdx, [rbp - 0x61]
call fcn.7ffe04652a60
mov r14d, eax
cmp byte [r13 + 0x98], dil
jne 0x7ffe046495c7
mov rcx, rbx
call fcn.7ffe046596a8
mov byte [r13 + 0x98], 1
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r14d, r14d
je 0x7ffe046495fd
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r14, qword [rbp - 0x61]
mov r15d, dword [rbp - 0x79]
mov r12, qword [rsp + 0x58]
jmp 0x7ffe0464a188
mov r14, qword [rbp - 0x61]
mov qword [rsp + 0x60], r14
jmp 0x7ffe0464960b
mov r14, rdi
mov rcx, r15
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
movzx eax, word [rbp + 0x6f]
lea rcx, [rbp - 0x31]
mov rdx, qword [rbp - 0x19]
mov r15, qword [rbp - 0x41]
mov r8, qword [rbp + 0x67]
mov r9, r15
mov qword [rsp + 0x38], rcx
lea rcx, [rbp - 0x21]
mov rdx, qword [rdx + 0x1c0]
mov qword [rsp + 0x30], rcx
mov rcx, qword [r13 + 0x1c0]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], eax
mov rax, qword [rbp - 0x11]
mov qword [rbp - 0x31], rdi
call qword [0x7ffe0465c528]
test eax, eax
jne 0x7ffe046495ef
mov rcx, qword [rbp - 0x31]
call fcn.7ffe0465989c
mov rsi, rax
test rax, rax
je 0x7ffe04649e04
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe046496ae
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046496ae
test qword [0x7ffe0466eea0], 0x800000
je 0x7ffe046496ae
mov r8, r15
lea rdx, str.HandleReferral:_Given_existing_connection_to__s_n
mov ecx, 0x800000
call fcn.7ffe04636b9c
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp dword [rsi + 0x44], edi
jne 0x7ffe046496d2
cmp dword [rsi + 0x48], edi
je 0x7ffe04649969
mov r8b, byte [rsi + 0x229]
cmp r8b, 8
je 0x7ffe046496ec
cmp byte [rsi + 0x22b], dil
je 0x7ffe04649969
mov rdx, rsi
mov rcx, r13
call fcn.7ffe046486d4
test al, al
je 0x7ffe04649969
mov al, byte [r13 + 0xc1]
cmp byte [rsi + 0xc1], al
jne 0x7ffe04649969
mov al, byte [rsi + 0x286]
cmp al, byte [r13 + 0x286]
jne 0x7ffe04649969
cmp byte [rbp + 0x7f], dil
je 0x7ffe04649733
test al, al
je 0x7ffe04649969
mov eax, dword [r13 + 0x3e0]
cmp dword [rsi + 0x3e0], eax
jb 0x7ffe04649969
cmp r8b, 0x10
je 0x7ffe04649783
cmp byte [rsi + 0x22a], dil
jne 0x7ffe04649783
mov r14d, 1
mov rcx, rbx
add dword [rsi + 0x48], r14d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rax, qword [rsi + 0x300]
mov qword [rbp - 0x29], rax
mov byte [rsp + 0x51], r14b
jmp 0x7ffe04649a24
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
lea r14, [rsi + 0x230]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp byte [rsi + 0x229], 0x10
je 0x7ffe046497cd
cmp byte [rsi + 0x22a], dil
je 0x7ffe04649930
mov rcx, rbx
mov byte [rsi + 0x229], 4
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ffe04627b90
mov r15d, eax
test eax, eax
je 0x7ffe046498f2
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, dword [0x7ffe0466eeac]
test edx, edx
je 0x7ffe0464986c
mov eax, dword [0x7ffe0466eea8]
test eax, eax
je 0x7ffe04649845
mov ecx, 0x100000
test qword [0x7ffe0466eea0], rcx
je 0x7ffe04649845
mov r9, rsi
lea rdx, str.LdapWaitForResponseFromServer:_reconnect_returned_0x_x_for_0x_x_n
mov r8d, r15d
call fcn.7ffe04636b9c
mov edx, dword [0x7ffe0466eeac]
mov eax, dword [0x7ffe0466eea8]
test edx, edx
je 0x7ffe0464986c
test eax, eax
je 0x7ffe0464986c
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464986c
mov r8, rsi
lea rdx, str.Couldnt_autoreconnect_given_cached_connection_0x_x_n
mov ecx, eax
call fcn.7ffe04636b9c
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe046498b6
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046498b6
test byte [0x7ffe0466eea0], 4
je 0x7ffe046498b6
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe046498d8
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe046498e4
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r14, qword [rsp + 0x60]
mov qword [rbp - 0x71], r12
jmp 0x7ffe04649e04
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe04649921
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649921
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe04649921
mov r8, rsi
lea rdx, str.Successfully_autoreconnected_given_cached_connection_0x_x_n
mov ecx, eax
call fcn.7ffe04636b9c
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
inc dword [rsi + 0x48]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rax, rsi
mov byte [rsp + 0x51], 1
mov rcx, qword [rax + 0x300]
mov qword [rbp - 0x29], rcx
jmp 0x7ffe04649a24
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe046499c2
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe046499c2
test byte [0x7ffe0466eea0], 4
je 0x7ffe046499c2
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe046499e4
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe046499f0
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe04649a21
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649a21
test qword [0x7ffe0466eea0], 0x800000
je 0x7ffe04649a21
mov r8, rsi
lea rdx, str.Rejecting_given_cached_connection_0x_x_n
mov ecx, 0x800000
call fcn.7ffe04636b9c
mov rsi, rdi
mov qword [rbp - 0x71], r12
jmp 0x7ffe04649ed0
mov rax, r12
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x71], rax
cmp qword [r12], rdi
jne 0x7ffe04649e01
mov rcx, r14
call fcn.7ffe0465b430
movzx ecx, word [rbp + 0x6f]
mov dword [rbp - 0x51], eax
mov rax, qword [0x7ffe0466ef38]
call qword [0x7ffe0465c528]
movzx eax, ax
lea r12, [r13 + 0x200]
mov rbx, rdi
mov dword [rbp - 0x69], eax
mov rcx, r12
mov qword [rbp - 0x71], rbx
mov r15, rdi
mov r14d, edi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rax, qword [r13 + 0xb0]
mov ecx, dword [r13 + 0x9c]
mov qword [rbp - 1], rax
mov rax, qword [r13 + 0xb8]
mov qword [rbp + 7], rax
mov dword [rbp - 0x59], ecx
cmp ecx, 0x80
jne 0x7ffe04649b79
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp byte [r13 + 0x98], dil
je 0x7ffe04649aea
cmp qword [r13 + 0x80], rdi
je 0x7ffe04649aea
lea rcx, [r13 + 0x88]
call fcn.7ffe04659574
mov byte [r13 + 0x98], dil
mov bl, 1
mov rcx, qword [r13 + 0x50]
xor edx, edx
mov r8d, 0x696e554c
call fcn.7ffe0465afdc
mov rcx, qword [r13 + 0x80]
xor edx, edx
mov r8d, 0x696e554c
mov qword [rbp - 0x71], rax
call fcn.7ffe0465afdc
mov qword [rbp - 0x21], rax
cmp qword [rbp - 0x71], rdi
jne 0x7ffe04649b23
cmp qword [r13 + 0x50], rdi
jne 0x7ffe04649b31
test rax, rax
jne 0x7ffe04649b37
cmp qword [r13 + 0x80], rdi
je 0x7ffe04649b37
mov r14d, 0x5a
test bl, bl
je 0x7ffe04649b61
cmp byte [r13 + 0x98], dil
jne 0x7ffe04649b61
cmp qword [r13 + 0x80], rdi
je 0x7ffe04649b61
lea rcx, [r13 + 0x88]
call fcn.7ffe046596a8
mov byte [r13 + 0x98], 1
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r15, qword [rbp - 0x21]
mov rbx, qword [rbp - 0x71]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r14d, r14d
je 0x7ffe04649bb1
mov r12d, 0x696e554c
mov rcx, r15
mov edx, r12d
call fcn.7ffe0465ae80
mov edx, r12d
mov rcx, rbx
call fcn.7ffe04621ee0
mov r15d, r14d
jmp 0x7ffe046493dd
lea rcx, [0x7ffe0466ee70]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r14, qword [0x7ffe0466e7f0]
lea r12, [0x7ffe0466e7f0]
mov rbx, rdi
cmp r14, r12
je 0x7ffe04649cf9
mov rsi, qword [rbp - 0x71]
lea rax, [0x7ffe0466e7f0]
mov r12d, dword [rbp - 0x59]
lea rbx, [r14 - 8]
cmp byte [rbx + 0x228], 2
je 0x7ffe04649ce7
cmp byte [rbx + 0x229], 8
jne 0x7ffe04649ce7
cmp dword [rbx + 0x44], edi
ja 0x7ffe04649c19
cmp dword [rbx + 0x48], edi
jbe 0x7ffe04649ce7
cmp byte [rbx + 0x22a], dil
jne 0x7ffe04649ce7
movzx eax, word [rbx + 0xea]
cmp eax, dword [rbp - 0x69]
jne 0x7ffe04649ce0
mov rdx, rbx
mov rcx, r13
call fcn.7ffe046486d4
test al, al
je 0x7ffe04649ce0
mov al, byte [r13 + 0xc1]
cmp byte [rbx + 0xc1], al
jne 0x7ffe04649ce0
mov al, byte [rbx + 0x286]
cmp al, byte [r13 + 0x286]
jne 0x7ffe04649ce0
cmp byte [rbp + 0x7f], dil
je 0x7ffe04649c75
test al, al
je 0x7ffe04649ce0
mov r9, rsi
mov qword [rsp + 0x20], r15
lea r8, [rbp - 1]
mov edx, r12d
mov rcx, rbx
call fcn.7ffe046484c4
test al, al
je 0x7ffe04649ce0
mov eax, dword [r13 + 0x3e0]
cmp dword [rbx + 0x3e0], eax
jb 0x7ffe04649ce0
mov r8, qword [rbx + 0x1b0]
or r9d, 0xffffffff
mov edx, dword [rbp - 0x51]
mov rcx, qword [rbp - 0x49]
call fcn.7ffe0465aeb8
test al, al
je 0x7ffe04649ce0
mov ecx, dword [r13 + 0xa8]
cmp ecx, dword [rbx + 0xa8]
jne 0x7ffe04649ce0
mov eax, dword [r13 + 0xac]
cmp eax, dword [rbx + 0xac]
jne 0x7ffe04649ce0
test eax, eax
jne 0x7ffe04649cf6
test ecx, ecx
jne 0x7ffe04649cf6
lea rax, [0x7ffe0466e7f0]
mov r14, qword [r14]
mov rbx, rdi
cmp r14, rax
jne 0x7ffe04649bed
mov rsi, rdi
mov r14d, 0x696e554c
mov rcx, r15
mov edx, r14d
call fcn.7ffe0465ae80
mov rcx, qword [rbp - 0x71]
mov edx, r14d
call fcn.7ffe04621ee0
test rbx, rbx
je 0x7ffe04649eb5
mov rcx, rbx
call fcn.7ffe0465a794
lea rcx, [0x7ffe0466ee70]
mov rsi, rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r14, qword [rbp - 0x31]
mov qword [rbp - 0x71], r14
test rsi, rsi
je 0x7ffe04649e01
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp dword [rsi + 0x44], edi
jne 0x7ffe04649e71
cmp dword [rsi + 0x48], edi
jne 0x7ffe04649e71
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe04649dcf
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649dcf
test byte [0x7ffe0466eea0], 4
je 0x7ffe04649dcf
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe04649df1
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe04649dfd
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov qword [rbp - 0x71], r14
mov r14, rdi
movzx edx, word [rbp + 0x6f]
xor r9d, r9d
movzx r8d, byte [rbp + 0x7f]
mov r15, rdi
mov rcx, qword [rbp - 0x49]
mov r12, rdi
call fcn.7ffe0463d5e8
mov rsi, rax
test rax, rax
jne 0x7ffe04649ee3
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe04649e66
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649e66
mov ebx, 0x2000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe04649e66
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.HandleReferral_failed_to_allocate__error_0x_x._n
mov ecx, ebx
mov r8d, eax
call fcn.7ffe04636b9c
mov r15d, 0x34
jmp 0x7ffe046495f3
inc dword [rsi + 0x48]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe04649ecc
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649ecc
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe04649ecc
mov r8, qword [rbp - 0x49]
lea rdx, str.HandleReferral:_Found_existing_connection_to__S_n
mov ecx, eax
call fcn.7ffe04636b9c
jmp 0x7ffe04649ecc
lea rcx, [0x7ffe0466ee70]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r14, qword [rbp - 0x31]
mov qword [rbp - 0x71], r14
mov r14, qword [rsp + 0x60]
test rsi, rsi
jne 0x7ffe0464ac9d
jmp 0x7ffe04649e04
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call fcn.7ffe0463ddc4
test eax, eax
je 0x7ffe04649fb6
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe04649f27
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649f27
mov ebx, 0x2000000
test qword [0x7ffe0466eea0], rbx
je 0x7ffe04649f27
mov r8d, eax
lea rdx, str.HandleReferral_failed_to_connect__error_0x_x._n
mov ecx, ebx
call fcn.7ffe04636b9c
mov rcx, rsi
call fcn.7ffe04658718
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe04649f80
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe04649f80
test byte [0x7ffe0466eea0], 4
je 0x7ffe04649f80
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe04649fa2
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe04649fae
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rsi, rdi
jmp 0x7ffe04649e66
lea rcx, [r13 + 0x200]
mov r14d, edi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rax, qword [r13 + 0xb0]
mov ecx, dword [r13 + 0x9c]
mov qword [rbp - 1], rax
mov rax, qword [r13 + 0xb8]
mov qword [rbp + 7], rax
mov dword [rbp - 0x51], ecx
cmp ecx, 0x80
jne 0x7ffe0464a0bc
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov bl, dil
cmp byte [r13 + 0x98], dil
je 0x7ffe0464a032
cmp qword [r13 + 0x80], rdi
je 0x7ffe0464a032
lea rcx, [r13 + 0x88]
call fcn.7ffe04659574
mov byte [r13 + 0x98], dil
mov bl, 1
mov rcx, qword [r13 + 0x50]
mov r12d, 0x696e554c
mov r8d, r12d
xor edx, edx
call fcn.7ffe0465afdc
mov rcx, qword [r13 + 0x80]
mov r8d, r12d
xor edx, edx
mov qword [rbp - 0x59], rax
call fcn.7ffe0465afdc
mov r12, rax
cmp qword [rbp - 0x59], rdi
jne 0x7ffe0464a06a
cmp qword [r13 + 0x50], rdi
jne 0x7ffe0464a078
test rax, rax
jne 0x7ffe0464a07e
cmp qword [r13 + 0x80], rdi
je 0x7ffe0464a07e
mov r14d, 0x5a
test bl, bl
je 0x7ffe0464a0a8
cmp byte [r13 + 0x98], dil
jne 0x7ffe0464a0a8
cmp qword [r13 + 0x80], rdi
je 0x7ffe0464a0a8
lea rcx, [r13 + 0x88]
call fcn.7ffe046596a8
mov byte [r13 + 0x98], 1
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r15, qword [rbp - 0x59]
lea rcx, [r13 + 0x200]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r14d, r14d
je 0x7ffe0464a245
mov ebx, 0x696e554c
mov rcx, r12
mov edx, ebx
call fcn.7ffe0465ae80
mov edx, ebx
mov rcx, r15
call fcn.7ffe04621ee0
mov rcx, rsi
call fcn.7ffe04658718
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe0464a14a
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a14a
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464a14a
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe0464a16c
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe0464a178
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rsi, rdi
mov r15d, r14d
mov r12, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x41]
mov edx, 0x736e414c
call fcn.7ffe04621ee0
mov rcx, qword [rbp - 0x49]
mov edx, 0x696e554c
call fcn.7ffe04621ee0
mov rbx, qword [rbp + 0x4f]
add rbx, 0x30
cmp byte [rsp + 0x50], dil
je 0x7ffe0464a1c2
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp byte [rsp + 0x51], dil
je 0x7ffe0464a1e6
mov rax, qword [rbp - 0x29]
test rax, rax
je 0x7ffe0464a1e6
mov rdx, qword [rsi + 0x1c0]
mov rcx, qword [r13 + 0x1c0]
call qword [0x7ffe0465c528]
test r15d, r15d
je 0x7ffe0464b0c4
cmp byte [rsp + 0x52], dil
je 0x7ffe0464b191
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov eax, dword [rsi + 0x48]
dec eax
mov dword [rsi + 0x48], eax
cmp dword [rsi + 0x44], edi
jne 0x7ffe0464b182
test eax, eax
jne 0x7ffe0464b182
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ffe04658718
jmp 0x7ffe0464b191
lea rcx, [0x7ffe0466ee70]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r14, qword [0x7ffe0466e7f0]
lea r8, [0x7ffe0466e7f0]
jmp 0x7ffe0464a409
lea rbx, [r14 - 8]
cmp rbx, rsi
je 0x7ffe0464a406
cmp byte [rbx + 0x228], 2
je 0x7ffe0464a406
cmp byte [rbx + 0x280], dil
jne 0x7ffe0464a406
mov rdx, rbx
mov rcx, r13
call fcn.7ffe046486d4
test al, al
je 0x7ffe0464a406
mov al, byte [r13 + 0xc1]
cmp byte [rbx + 0xc1], al
jne 0x7ffe0464a406
mov al, byte [rbx + 0x286]
cmp al, byte [r13 + 0x286]
jne 0x7ffe0464a406
cmp byte [rbp + 0x7f], dil
je 0x7ffe0464a2d9
test al, al
je 0x7ffe0464a406
mov edx, dword [rbp - 0x51]
lea r8, [rbp - 1]
mov r9, r15
mov qword [rsp + 0x20], r12
mov rcx, rbx
call fcn.7ffe046484c4
test al, al
je 0x7ffe0464a3ff
mov eax, dword [r13 + 0x3e0]
cmp dword [rbx + 0x3e0], eax
jb 0x7ffe0464a3ff
cmp byte [rbx + 0x229], 8
jne 0x7ffe0464a3ff
cmp byte [rbx + 0x22a], dil
jne 0x7ffe0464a3ff
cmp dword [rbx + 0x44], edi
ja 0x7ffe0464a333
cmp dword [rbx + 0x48], edi
jbe 0x7ffe0464a3ff
mov ecx, dword [rbx + 0x174]
test ecx, ecx
je 0x7ffe0464a354
mov r9d, dword [rsi + 0x170]
lea r8, [rsi + 0xe8]
mov rdx, qword [rbx + 0x178]
jmp 0x7ffe0464a373
mov ecx, dword [rsi + 0x174]
test ecx, ecx
je 0x7ffe0464a37a
mov r9d, dword [rbx + 0x170]
lea r8, [rbx + 0xe8]
mov rdx, qword [rsi + 0x178]
call fcn.7ffe0463a8f0
jmp 0x7ffe0464a3d5
mov ecx, dword [rbx + 0x170]
cmp dword [rsi + 0x170], ecx
jne 0x7ffe0464a3ff
movzx eax, word [rbx + 0xea]
cmp word [rsi + 0xea], ax
jne 0x7ffe0464a3ff
cmp ecx, 2
jne 0x7ffe0464a3ab
mov eax, dword [rbx + 0xec]
cmp dword [rsi + 0xec], eax
je 0x7ffe0464a3d3
cmp ecx, 0x17
jne 0x7ffe0464a3ff
mov rax, qword [rsi + 0xf0]
sub rax, qword [rbx + 0xf0]
jne 0x7ffe0464a3ce
mov rax, qword [rsi + 0xf8]
sub rax, qword [rbx + 0xf8]
test rax, rax
jne 0x7ffe0464a3ff
mov al, 1
test al, al
je 0x7ffe0464a3ff
mov ecx, dword [r13 + 0xa8]
cmp ecx, dword [rbx + 0xa8]
jne 0x7ffe0464a3ff
mov eax, dword [r13 + 0xac]
cmp eax, dword [rbx + 0xac]
jne 0x7ffe0464a3ff
test eax, eax
jne 0x7ffe0464a415
test ecx, ecx
jne 0x7ffe0464a415
lea r8, [0x7ffe0466e7f0]
mov r14, qword [r14]
mov rbx, rdi
cmp r14, r8
jne 0x7ffe0464a26b
mov r14d, 0x696e554c
mov rcx, r12
mov edx, r14d
call fcn.7ffe0465ae80
mov edx, r14d
mov rcx, r15
call fcn.7ffe04621ee0
test rbx, rbx
je 0x7ffe0464a622
mov rcx, rbx
call fcn.7ffe0465a794
lea rcx, [0x7ffe0466ee70]
mov rbx, rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test rbx, rbx
je 0x7ffe0464a63e
lea r14, [rbx + 0x200]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp dword [rbx + 0x44], edi
jne 0x7ffe0464a518
cmp dword [rbx + 0x48], edi
jne 0x7ffe0464a518
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rbx]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rbx], r9d
je 0x7ffe0464a4e2
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a4e2
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464a4e2
mov r8, rbx
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rbx]
mov rcx, r14
test eax, eax
jne 0x7ffe0464a504
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rbx
call fcn.7ffe04658c14
jmp 0x7ffe0464a510
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rbx, rdi
jmp 0x7ffe0464a635
mov r15d, 1
mov rcx, r14
add dword [rbx + 0x48], r15d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp dword [rbx + 0x174], edi
jne 0x7ffe0464a568
cmp dword [rsi + 0x174], edi
jbe 0x7ffe0464a568
mov rax, qword [rsi + 0x178]
mov qword [rbx + 0x178], rax
mov eax, dword [rsi + 0x174]
mov dword [rbx + 0x174], eax
mov qword [rsi + 0x178], rdi
mov dword [rsi + 0x174], edi
mov rcx, rsi
call fcn.7ffe04658718
lea r14, [rsi + 0x200]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe0464a5c1
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a5c1
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464a5c1
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, r14
test eax, eax
jne 0x7ffe0464a5e1
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, r15d
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe0464a5ed
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp dword [0x7ffe0466eeac], edi
mov rsi, rbx
je 0x7ffe0464a635
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a635
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a635
mov r8, qword [rbp - 0x49]
lea rdx, str.HandleReferral:_Found_existing_connection_to__S_n
mov ecx, eax
call fcn.7ffe04636b9c
jmp 0x7ffe0464a635
lea rcx, [0x7ffe0466ee70]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test rbx, rbx
jne 0x7ffe0464ac98
lea r14, [r13 + 0x200]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r12d, dword [r13 + 0x9c]
mov rbx, qword [rsp + 0x60]
cmp r12d, 0x80
je 0x7ffe0464a762
mov r14, qword [r13 + 0x80]
test r14, r14
je 0x7ffe0464a75b
test rbx, rbx
je 0x7ffe0464a693
mov edx, 0x6365734c
mov rcx, rbx
call fcn.7ffe0465ae80
mov qword [rbp - 0x61], rdi
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rbx, [r13 + 0x88]
cmp byte [r13 + 0x98], dil
je 0x7ffe0464a6c2
mov rcx, rbx
call fcn.7ffe04659574
mov byte [r13 + 0x98], dil
mov rcx, qword [r13 + 0x80]
mov edx, 1
mov eax, dword [rcx]
sub eax, edx
cmp eax, 0xfffe
ja 0x7ffe0464a6ee
mov r8d, dword [rcx + 0x34]
shr r8d, 1
and r8b, dl
lea rdx, [rbp - 0x61]
call fcn.7ffe0465304c
jmp 0x7ffe0464a701
mov r8d, dword [r14 + 0x2c]
shr r8d, 1
and r8b, dl
lea rdx, [rbp - 0x61]
call fcn.7ffe04652a60
mov r14d, eax
cmp byte [r13 + 0x98], dil
jne 0x7ffe0464a71d
mov rcx, rbx
call fcn.7ffe046596a8
mov byte [r13 + 0x98], 1
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r14d, r14d
je 0x7ffe0464a752
lea rcx, [r13 + 0x200]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ffe04658718
jmp 0x7ffe046495eb
mov rbx, qword [rbp - 0x61]
mov qword [rsp + 0x60], rbx
lea r14, [r13 + 0x200]
mov eax, 1
mov dword [rbp - 0x69], eax
cmp byte [r13 + 0x286], dil
je 0x7ffe0464a809
mov r9b, al
lea r8, [rbp - 0x69]
lea edx, [rax + 9]
mov rcx, rsi
call fcn.7ffe046328dc
mov r15d, eax
test eax, eax
je 0x7ffe0464a7d8
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a7bc
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a7bc
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a7bc
lea rdx, str.Unable_to_setup_SSL_session_on_referral_connection_n
mov ecx, eax
call fcn.7ffe04636c10
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ffe04658718
jmp 0x7ffe0464a17e
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a804
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a804
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a804
lea rdx, str.Successfully_setup_SSL_session_on_referral_connection_n
mov ecx, eax
call fcn.7ffe04636c10
mov eax, 1
cmp byte [r13 + 0xc0], dil
je 0x7ffe0464a88b
mov r9b, al
lea r8, [rbp - 0x69]
mov edx, 0x95
mov rcx, rsi
call fcn.7ffe046328dc
mov r15d, eax
test eax, eax
je 0x7ffe0464a85f
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a7bc
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a7bc
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a7bc
lea rdx, str.Unable_to_setup_Signing_on_referral_connection_n
jmp 0x7ffe0464a7b5
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a88b
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a88b
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a88b
lea rdx, str.Successfully_setup_Signing_on_referral_connection_n
mov ecx, eax
call fcn.7ffe04636c10
cmp byte [r13 + 0xc1], dil
je 0x7ffe0464a911
mov r9b, 1
lea r8, [rbp - 0x69]
mov edx, 0x96
mov rcx, rsi
call fcn.7ffe046328dc
mov r15d, eax
test eax, eax
je 0x7ffe0464a8e5
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a7bc
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a7bc
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a7bc
lea rdx, str.Unable_to_setup_Sealing_on_referral_connection_n
jmp 0x7ffe0464a7b5
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a911
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a911
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a911
lea rdx, str.Successfully_setup_Sealing_on_referral_connection_n
mov ecx, eax
call fcn.7ffe04636c10
mov eax, dword [r13 + 0x3e0]
lea r8, [rbp - 0x59]
mov r9b, 1
mov dword [rbp - 0x59], eax
mov edx, 0x11
mov rcx, rsi
call fcn.7ffe046328dc
mov r15d, eax
test eax, eax
je 0x7ffe0464a96c
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a7bc
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a7bc
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a7bc
lea rdx, str.Unable_to_set_version_on_referral_connection_n
jmp 0x7ffe0464a7b5
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464a99c
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464a99c
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464a99c
mov r8d, dword [rbp - 0x59]
lea rdx, str.Successfully_set_version_ul_on_referral_connection_n
mov ecx, eax
call fcn.7ffe04636b9c
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r15d, 1
lea rcx, [0x7ffe0466ee70]
add dword [rsi + 0x48], r15d
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rax, qword [0x7ffe0466e7f8]
lea rdx, [rsi + 8]
mov qword [rsi + 0x10], rax
lea rcx, [0x7ffe0466e7f0]
mov qword [rdx], rcx
lea rcx, [0x7ffe0466ee70]
mov qword [rax], rdx
mov qword [0x7ffe0466e7f8], rdx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
call fcn.7ffe04647910
mov rdx, rbx
mov bl, dil
test rdx, rdx
jne 0x7ffe0464aa77
test r12d, r12d
je 0x7ffe0464aa77
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp byte [r13 + 0x98], dil
je 0x7ffe0464aa4e
lea rcx, [r13 + 0x88]
call fcn.7ffe04659574
mov byte [r13 + 0x98], dil
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rdx, qword [r13 + 0x80]
mov bl, r15b
mov cl, dil
test r12d, r12d
je 0x7ffe0464aa94
cmp r12d, 0x80
jne 0x7ffe0464aa91
cmp byte [rsi + 0x286], dil
je 0x7ffe0464aa94
mov cl, r15b
mov al, cl
neg al
mov eax, 0x80
sbb r9, r9
and r9, rdx
test r12d, r12d
cmove r12d, eax
test cl, cl
je 0x7ffe0464aab4
mov rdx, qword [r13 + 0x50]
jmp 0x7ffe0464aab7
mov rdx, rdi
mov r8d, r12d
mov byte [rsp + 0x20], r15b
mov rcx, rsi
call fcn.7ffe04628e1c
cmp dword [0x7ffe0466eeac], edi
mov r15d, eax
mov r12d, 0x800000
je 0x7ffe0464aaff
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464aaff
test qword [0x7ffe0466eea0], r12
je 0x7ffe0464aaff
mov r8, qword [rbp - 0x49]
lea rdx, str.HandleReferral:_Bind_to_host__S_returned_0x_x_n
mov r9d, eax
mov ecx, r12d
call fcn.7ffe04636b9c
test bl, bl
je 0x7ffe0464ab5e
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp byte [r13 + 0x98], dil
jne 0x7ffe0464ab3f
lea rcx, [r13 + 0x88]
call fcn.7ffe046596a8
mov byte [r13 + 0x98], 1
lea rcx, [r13 + 0x58]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r15d, r15d
je 0x7ffe0464ab6d
mov byte [rsp + 0x52], 1
jmp 0x7ffe0464a17e
mov eax, dword [r13 + 0xa8]
lea rcx, [rsi + 0xa8]
mov r14, qword [rsp + 0x60]
mov dword [rcx], eax
mov eax, dword [r13 + 0xac]
mov dword [rsi + 0xac], eax
mov r10, qword [r13 + 0x2f8]
mov rax, qword [rbp - 0x11]
mov qword [rsi + 0x2f8], r10
mov qword [rsi + 0x2f0], rax
mov rax, qword [r13 + 0x300]
mov qword [rsi + 0x300], rax
test r10, r10
je 0x7ffe0464ac9d
movzx eax, word [rbp + 0x6f]
mov r15, qword [rbp - 0x41]
mov r8, qword [rbp + 0x67]
mov r9, r15
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x38], rcx
mov rcx, qword [r13 + 0x1c0]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], eax
mov rax, qword [rsi + 0x1c0]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp - 0x19]
mov rdx, qword [rax + 0x1c0]
mov rax, r10
call qword [0x7ffe0465c528]
test al, al
je 0x7ffe0464ac68
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
inc dword [rsi + 0x44]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464ac61
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464ac61
test qword [0x7ffe0466eea0], r12
je 0x7ffe0464ac61
mov r9, rsi
lea rdx, str.HandleReferral:_Handle_was_given_to_callee_for_host__s__0x_x_n
mov r8, r15
mov ecx, r12d
call fcn.7ffe04636b9c
mov byte [rsp + 0x51], 1
jmp 0x7ffe0464ac9d
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464ac9d
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464ac9d
test qword [0x7ffe0466eea0], r12
je 0x7ffe0464ac9d
mov r9, rsi
lea rdx, str.HandleReferral:_Handle_was_not_given_to_callee_for_host__s__0x_x_n
mov r8, r15
mov ecx, r12d
call fcn.7ffe04636b9c
jmp 0x7ffe0464ac9d
mov r14, qword [rsp + 0x60]
mov rcx, qword [rbp - 9]
mov byte [rsp + 0x52], 1
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x4f]
mov byte [rsp + 0x50], 1
movzx eax, word [rcx + 0xb4]
cmp word [rcx + 0xb2], ax
ja 0x7ffe0464ad0a
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464acff
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464acff
mov r10d, 0x800000
test qword [0x7ffe0466eea0], r10
je 0x7ffe0464acff
mov r9, rcx
lea rdx, str.HandleReferral_hit_hop_count_limit_of_0x_x_while_handling_0x_x_n
mov ecx, r10d
mov r8d, eax
call fcn.7ffe04636b9c
mov r15d, 0x46
jmp 0x7ffe046495f3
mov r12, qword [rbp - 0x39]
movzx r8d, word [rsi + 0x1fa]
mov r9, r12
mov rdx, qword [rsi + 0x1b0]
call fcn.7ffe04648378
mov r15d, eax
test eax, eax
jne 0x7ffe046495f3
mov r15, qword [rbp + 0x4f]
mov rbx, qword [r15 + 0xa8]
test rbx, rbx
jne 0x7ffe0464adae
movzx ecx, word [r15 + 0xb2]
mov edx, 0x6154524c
shl ecx, 6
call fcn.7ffe0465ad90
mov rbx, rax
test rax, rax
jne 0x7ffe0464ad97
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464ad8c
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464ad8c
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464ad8c
mov r8, r15
lea rdx, str.HandleReferral_could_not_allocate_ref_table_while_handling_0x_x_n
mov ecx, eax
call fcn.7ffe04636b9c
mov r15d, 0x5a
jmp 0x7ffe046495f3
mov qword [r15 + 0xa8], rax
movzx eax, word [r15 + 0xb2]
mov word [r15 + 0xb0], ax
movzx eax, word [r15 + 0xb0]
mov ecx, 1
movzx r14d, cx
cmp cx, ax
ja 0x7ffe0464b07b
cmp qword [rbx], rdi
je 0x7ffe0464addb
add r14w, cx
add rbx, 0x40
cmp r14w, ax
jbe 0x7ffe0464adc8
cmp r14w, ax
ja 0x7ffe0464b07b
xor edx, edx
mov r8d, 0x4e44524c
mov rcx, r12
call fcn.7ffe0465afdc
test rax, rax
jne 0x7ffe0464ae39
test r12, r12
je 0x7ffe0464ae39
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464ae2e
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464ae2e
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464ae2e
mov r8, r15
lea rdx, str.HandleReferral_could_not_allocate_dn_while_handling_0x_x_n
mov ecx, eax
call fcn.7ffe04636b9c
mov r15d, 0x5a
jmp 0x7ffe0464a17e
mov r12, qword [rsp + 0x58]
mov qword [rbx], rsi
mov word [rbx + 0x34], r14w
mov qword [rbx + 8], rax
test r12, r12
je 0x7ffe0464ae56
mov eax, dword [r12 + 0x14]
jmp 0x7ffe0464ae5b
mov eax, 3
mov dword [rbx + 0x10], eax
test r12, r12
je 0x7ffe0464ae6a
mov rax, qword [r12 + 0x18]
jmp 0x7ffe0464ae6d
mov rax, rdi
mov qword [rbx + 0x18], rax
test r12, r12
je 0x7ffe0464ae7d
mov rax, qword [r12 + 8]
jmp 0x7ffe0464ae80
mov rax, rdi
mov qword [rbx + 0x20], rax
mov al, byte [rsp + 0x51]
mov byte [rbx + 0x37], al
mov byte [rsp + 0x51], dil
cmp byte [rbp - 0x65], dil
je 0x7ffe0464aea1
cmp byte [rbp + 0x77], dil
je 0x7ffe0464aea1
mov al, dil
jmp 0x7ffe0464aea6
mov eax, 1
mov byte [rbx + 0x36], al
mov rcx, rsi
mov eax, 1
add word [r15 + 0xb4], ax
call fcn.7ffe0465a794
lea rcx, [r15 + 0x30]
mov rsi, rax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
movzx r8d, r14w
mov rdx, r15
mov rcx, rsi
call fcn.7ffe0464bbd4
mov r14, qword [rbp - 9]
mov r15d, eax
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov byte [rsp + 0x50], 1
test r15d, r15d
je 0x7ffe0464afc4
mov rcx, qword [rbx + 8]
mov edx, 0x4e44524c
mov qword [rbx], rdi
call fcn.7ffe04621ee0
mov rax, qword [rbp + 0x4f]
mov ecx, 0xffff
mov qword [rbx + 8], rdi
add word [rax + 0xb4], cx
mov rcx, r14
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
lea rbx, [rsi + 0x200]
mov byte [rsp + 0x50], dil
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe0464af8e
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464af8e
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464af8e
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe0464afb3
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov edx, 1
mov rcx, rsi
call fcn.7ffe04658c14
jmp 0x7ffe0464a183
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
jmp 0x7ffe0464a183
mov r14, qword [rbp - 0x71]
cmp qword [r14], rdi
je 0x7ffe0464a183
mov eax, dword [0x7ffe0466eeac]
mov ebx, 0x8000
test eax, eax
je 0x7ffe0464b005
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464b005
test qword [0x7ffe0466eea0], rbx
je 0x7ffe0464b005
lea rdx, str.The_parent_search_was_a_paged_request_n
mov ecx, ebx
call fcn.7ffe04636c10
mov eax, dword [0x7ffe0466eeac]
test rsi, rsi
je 0x7ffe0464a183
test eax, eax
je 0x7ffe0464b037
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464b037
test qword [0x7ffe0466eea0], rbx
je 0x7ffe0464b037
mov r9, qword [r14]
lea rdx, str.Hooking_up_new_connection_0x_x_to_request_0x_x_n
mov r8, rsi
mov ecx, ebx
call fcn.7ffe04636b9c
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov eax, 1
mov rcx, rbx
add dword [rsi + 0x48], eax
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, rsi
call fcn.7ffe0465a794
mov rsi, rax
mov rax, qword [r14]
mov qword [rax + 0x28], rsi
jmp 0x7ffe0464a183
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464b0ae
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464b0ae
mov eax, 0x800000
test qword [0x7ffe0466eea0], rax
je 0x7ffe0464b0ae
movzx r8d, r14w
lea rdx, str.HandleReferral_ref_table_full_0x_x__while_handling_0x_x_n
mov r9, r15
mov ecx, eax
call fcn.7ffe04636b9c
mov r15d, 0x46
jmp 0x7ffe0464a17e
mov r15d, r12d
mov r12, rdi
jmp 0x7ffe046493e2
mov r13, qword [rbp + 0x4f]
cmp qword [r13 + 0xd8], rdi
jne 0x7ffe0464b191
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rcx, qword [r13 + 0x28]
test rcx, rcx
je 0x7ffe0464b176
add rcx, 0x200
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rax, qword [r13 + 0x28]
dec dword [rax]
cmp dword [0x7ffe0466eeac], edi
je 0x7ffe0464b13b
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464b13b
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464b13b
mov r8, qword [r13 + 0x28]
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
mov r9d, dword [r8]
call fcn.7ffe04636b9c
mov rax, qword [r13 + 0x28]
lea rcx, [rax + 0x200]
cmp dword [rax], edi
jne 0x7ffe0464b166
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov rcx, qword [r13 + 0x28]
mov edx, 1
call fcn.7ffe04658c14
jmp 0x7ffe0464b172
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov qword [r13 + 0x28], rdi
mov rcx, rsi
call fcn.7ffe0465a794
mov qword [r13 + 0x28], rsi
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
test rsi, rsi
je 0x7ffe0464b21d
lea rbx, [rsi + 0x200]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov r9d, dword [rsi]
dec r9d
cmp dword [0x7ffe0466eeac], edi
mov eax, r9d
mov dword [rsi], r9d
je 0x7ffe0464b1eb
cmp dword [0x7ffe0466eea8], edi
je 0x7ffe0464b1eb
test byte [0x7ffe0466eea0], 4
je 0x7ffe0464b1eb
mov r8, rsi
lea rdx, str.LDAP_deref_conn_0x_x__new_count__0x_x_n
mov ecx, 4
call fcn.7ffe04636b9c
mov eax, dword [rsi]
mov rcx, rbx
test eax, eax
jne 0x7ffe0464b211
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r13d, 1
mov rcx, rsi
mov edx, r13d
call fcn.7ffe04658c14
jmp 0x7ffe0464b223
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov r13d, 1
test r14, r14
je 0x7ffe0464b235
mov edx, 0x6365734c
mov rcx, r14
call fcn.7ffe0465ae80
test r12, r12
je 0x7ffe0464b2b6
mov rcx, qword [r12]
mov ebx, 0x6c72554c
mov edx, ebx
call fcn.7ffe04621ee0
mov rcx, qword [r12 + 0x18]
mov edx, ebx
call fcn.7ffe04621ee0
mov rcx, qword [r12 + 0x20]
mov edx, ebx
call fcn.7ffe04621ee0
mov rcx, qword [r12 + 0x28]
mov edx, ebx
call fcn.7ffe04621ee0
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x7ffe0464b2a5
cmp dword [r12 + 0x10], edi
jbe 0x7ffe0464b2a5
mov rcx, qword [r12 + 8]
mov edx, ebx
movzx eax, di
mov rcx, qword [rcx + rax*8]
call fcn.7ffe04621ee0
add di, r13w
movzx eax, di
cmp eax, dword [r12 + 0x10]
jb 0x7ffe0464b27f
mov rcx, qword [r12 + 8]
mov edx, ebx
call fcn.7ffe04621ee0
mov edx, ebx
mov rcx, r12
call fcn.7ffe04621ee0
mov rbx, qword [rsp + 0x138]
mov eax, r15d
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret