Function at 0x140180e70
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x2928
call fcn.1403a70f0
sub rsp, rax
mov dword [rsp + 0x18f0], 0
mov r8, qword [rsp + 0x2940]
lea rdx, str.RegistryMachineSystemCurrentControlSetServices_
lea rcx, [rsp + 0x19d8]
call fcn.140091b50
nop
lea rax, [rsp + 0x19d8]
mov qword [rsp + 0x7c8], rax
mov rax, qword [rsp + 0x7c8]
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x7c8]
cmp qword [rax + 0x18], 7
jbe 0x140180ee8
mov dword [rsp + 0x2fc], 1
jmp 0x140180ef3
mov dword [rsp + 0x2fc], 0
movzx eax, byte [rsp + 0x2fc]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x70]
test eax, eax
je 0x140180f2b
mov rax, qword [rsp + 0x7c8]
mov rax, qword [rax]
mov qword [rsp + 0x1890], rax
mov rax, qword [rsp + 0x1890]
mov qword [rsp + 0x910], rax
mov rax, qword [rsp + 0x910]
mov qword [rsp + 0x1898], rax
mov rax, qword [rsp + 0x1898]
mov qword [rsp + 0x18a0], rax
mov rax, qword [rsp + 0x18a0]
mov qword [rsp + 0xfd0], rax
lea rax, [rsp + 0x1de0]
mov qword [rsp + 0xfd8], rax
mov dword [rsp + 0x720], 0x9988a8a
lea rax, [rsp + 0x18f4]
mov qword [rsp + 0x918], rax
mov rax, qword [rsp + 0x918]
mov dword [rax], 0
mov rax, qword [rsp + 0x918]
mov eax, dword [rax]
mov dword [rsp + 0x730], eax
mov eax, dword [rsp + 0x720]
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x724], eax
mov eax, dword [rsp + 0x724]
mov dword [rsp + 0x728], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x920], rax
mov rax, qword [rsp + 0x920]
mov qword [rsp + 0x18a8], rax
mov rax, qword [rsp + 0x18a8]
mov qword [rsp + 0x1908], rax
mov byte [rsp + 0x1910], 1
mov rax, qword [rsp + 0x920]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x18b0], rax
lea r8, [rsp + 0x728]
lea rdx, [rsp + 0x938]
mov rcx, qword [rsp + 0x18b0]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x18b8], rax
mov rax, qword [rsp + 0x18b8]
add rax, 8
mov qword [rsp + 0x928], rax
mov rax, qword [rsp + 0x2050]
mov qword [rsp + 0x930], rax
mov rax, qword [rsp + 0x928]
mov qword [rsp + 0x930], rax
mov rax, qword [rsp + 0x928]
mov rax, qword [rax]
mov qword [rsp + 0x18c0], rax
mov r8, qword [rsp + 0x930]
mov rdx, qword [rsp + 0x18c0]
lea rcx, [rsp + 0x18c8]
call fcn.14006f260
lea rax, [rsp + 0x18c8]
mov qword [rsp + 0x18d0], rax
mov rax, qword [rsp + 0x18d0]
mov rax, qword [rax]
cmp qword [rsp + 0x938], rax
jne 0x1401810f0
mov dword [rsp + 0xf8], 1
jmp 0x1401810fb
mov dword [rsp + 0xf8], 0
movzx eax, byte [rsp + 0xf8]
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x71]
test eax, eax
je 0x14018111e
mov qword [rsp + 0x940], 0
jmp 0x140181186
mov rax, qword [rsp + 0x938]
add rax, 0x10
mov qword [rsp + 0x18d8], rax
mov rax, qword [rsp + 0x18d8]
mov qword [rsp + 0x18e0], rax
mov rax, qword [rsp + 0x18e0]
mov qword [rsp + 0x18e8], rax
mov rax, qword [rsp + 0x18e8]
mov qword [rsp + 0xea8], rax
mov rax, qword [rsp + 0xea8]
mov qword [rsp + 0xeb0], rax
mov rax, qword [rsp + 0xeb0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x940], rax
mov rax, qword [rsp + 0x940]
mov qword [rsp + 0xec0], rax
movzx eax, byte [rsp + 0x1910]
test eax, eax
je 0x1401811c2
mov rax, qword [rsp + 0x1908]
mov qword [rsp + 0xeb8], rax
mov rax, qword [rsp + 0xeb8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0xec0]
mov qword [rsp + 0x320], rax
cmp qword [rsp + 0x320], 0
jne 0x140181fb9
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x738], eax
mov eax, dword [rsp + 0x730]
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0x738]
mov dword [rsp + 0x130], eax
mov dword [rsp + 0x740], 0
mov eax, dword [rsp + 0x740]
cmp dword [rsp + 0x130], eax
jne 0x14018123a
xor eax, eax
cmp eax, 1
je 0x14018123a
mov dword [rsp + 0xfc], 1
jmp 0x140181245
mov dword [rsp + 0xfc], 0
movzx eax, byte [rsp + 0xfc]
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x72]
test eax, eax
je 0x14018126b
mov qword [rsp + 0x318], 0
jmp 0x140181eb9
mov byte [rsp + 0xc3], 1
mov qword [rsp + 0xe10], 0
mov qword [rsp + 0xe18], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0xec8], rax
mov rax, qword [rsp + 0xec8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xed0], rax
mov rax, qword [rsp + 0xed0]
add rax, 0x10
mov qword [rsp + 0x7d0], rax
mov eax, 1
test eax, eax
je 0x1401812e5
mov rax, qword [rsp + 0x7d0]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0x948], rax
jmp 0x1401812f8
mov rax, qword [rsp + 0x7d0]
mov rax, qword [rax]
mov qword [rsp + 0x948], rax
mov rax, qword [rsp + 0x948]
mov qword [rsp + 0xe10], rax
mov rax, qword [rsp + 0x7d0]
mov qword [rsp + 0xe18], rax
lea rax, [rsp + 0xe10]
mov qword [rsp + 0x950], rax
mov rax, qword [rsp + 0x950]
mov rax, qword [rax]
mov qword [rsp + 0xed8], rax
mov rax, qword [rsp + 0xed8]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x950]
mov rax, qword [rax + 8]
mov qword [rsp + 0xee0], rax
mov rax, qword [rsp + 0xee0]
mov qword [rsp + 0xee8], rax
jmp 0x140181384
mov rax, qword [rsp + 0x300]
mov rax, qword [rax]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0xee8]
cmp qword [rsp + 0x300], rax
je 0x1401813a3
mov dword [rsp + 0x100], 1
jmp 0x1401813ae
mov dword [rsp + 0x100], 0
movzx eax, byte [rsp + 0x100]
test eax, eax
je 0x140181ead
xor eax, eax
mov qword [rsp + 0xef0], rax
mov rax, qword [rsp + 0xef0]
mov rcx, qword [rsp + 0x300]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0xef8], rax
lea rax, [rsp + 0xef8]
mov qword [rsp + 0x960], rax
mov dword [rsp + 0x744], 0
mov eax, dword [rsp + 0x744]
cmp dword [rsp + 0x108], eax
jne 0x140181425
xor eax, eax
cmp eax, 1
je 0x140181425
mov dword [rsp + 0x104], 1
jmp 0x140181430
mov dword [rsp + 0x104], 0
movzx eax, byte [rsp + 0x104]
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x73]
test eax, eax
jne 0x14018175d
mov rax, qword [rsp + 0x960]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0xf00], rax
mov rax, qword [rsp + 0xf00]
mov rax, qword [rax + 8]
mov qword [rsp + 0x958], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0x1a08], rax
mov rax, qword [rsp + 0x958]
mov qword [rsp + 0xf08], rax
mov qword [rsp + 0x308], 0xffffffffffffffff
inc qword [rsp + 0x308]
mov rax, qword [rsp + 0xf08]
mov rcx, qword [rsp + 0x308]
cmp word [rax + rcx*2], 0
jne 0x1401814a0
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0xf10], rax
mov rax, qword [rsp + 0xf10]
mov qword [rsp + 0x1a10], rax
lea rax, [rsp + 0x1a08]
mov qword [rsp + 0xf18], rax
lea rax, [rsp + 0x1ba0]
mov rdi, rax
mov rsi, qword [rsp + 0xf18]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x108]
mov dword [rsp + 0x748], eax
lea rax, [rsp + 0x1920]
lea rcx, [rsp + 0x1ba0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x748]
mov dword [rsp + 0x120], eax
lea rax, [rsp + 0x110]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x110], 0x1b6e1b1e
lea rax, [rsp + 0x110]
mov qword [rsp + 0xf20], rax
lea rax, [rsp + 0x1bb0]
lea rcx, [rsp + 0x1920]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1bc0]
lea rcx, [rsp + 0x1bb0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1bc0]
mov rcx, qword [rsp + 0xf20]
call fcn.140097890
mov dword [rsp + 0x74c], eax
mov rax, qword [rsp + 0x1928]
mov qword [rsp + 0xf28], rax
mov rax, qword [rsp + 0xf28]
sub rax, 4
mov qword [rsp + 0xf30], rax
mov r9, qword [rsp + 0xf30]
xor r8d, r8d
lea rdx, [rsp + 0x1bd0]
lea rcx, [rsp + 0x1920]
call fcn.14019ab70
lea rax, [rsp + 0x114]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x114], 0x1b6e1b1e
lea rax, [rsp + 0x114]
mov qword [rsp + 0xf38], rax
lea rax, [rsp + 0x1be0]
lea rcx, [rsp + 0x1bd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1bf0]
lea rcx, [rsp + 0x1be0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1bf0]
mov rcx, qword [rsp + 0xf38]
call fcn.140097890
mov dword [rsp + 0x754], eax
mov eax, dword [rsp + 0x74c]
mov dword [rsp + 0x750], eax
mov eax, dword [rsp + 0x750]
cmp dword [rsp + 0x120], eax
jne 0x1401816c2
xor eax, eax
cmp eax, 1
je 0x1401816c2
mov dword [rsp + 0x118], 1
jmp 0x1401816cd
mov dword [rsp + 0x118], 0
movzx eax, byte [rsp + 0x118]
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x74]
test eax, eax
jne 0x140181741
mov eax, dword [rsp + 0x754]
mov dword [rsp + 0x758], eax
mov eax, dword [rsp + 0x758]
cmp dword [rsp + 0x120], eax
jne 0x140181714
xor eax, eax
cmp eax, 1
je 0x140181714
mov dword [rsp + 0x128], 1
jmp 0x14018171f
mov dword [rsp + 0x128], 0
movzx eax, byte [rsp + 0x128]
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x75]
test eax, eax
jne 0x140181741
mov dword [rsp + 0x12c], 1
jmp 0x14018174c
mov dword [rsp + 0x12c], 0
movzx eax, byte [rsp + 0x12c]
test eax, eax
je 0x14018175d
jmp 0x140181371
mov rax, qword [rsp + 0x960]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x968], rax
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0x710], rax
mov rax, qword [rsp + 0x968]
mov qword [rsp + 0xf40], rax
mov rax, qword [rsp + 0xf40]
mov qword [rsp + 0x970], rax
mov rax, qword [rsp + 0x970]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x970]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xf48], rax
mov eax, dword [rsp + 0xf48]
add rax, qword [rsp + 0x710]
mov qword [rsp + 0xf50], rax
mov rax, qword [rsp + 0xf50]
mov qword [rsp + 0x718], rax
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x75c], eax
mov eax, dword [rsp + 0x75c]
mov dword [rsp + 0x760], eax
lea rdx, [rsp + 0x2650]
lea rcx, [rsp + 0x710]
call fcn.1401906d0
lea rcx, [rsp + 0x2228]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2678]
lea rcx, [rsp + 0x710]
call fcn.14018ec60
lea rcx, [rsp + 0x2250]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2280]
lea rcx, [rsp + 0x2228]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x22b0]
lea rcx, [rsp + 0x2250]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x760]
lea r8, [rsp + 0x2280]
lea rdx, [rsp + 0x22b0]
lea rcx, [rsp + 0x20a0]
call fcn.140097110
lea rdx, [rsp + 0x26a0]
lea rcx, [rsp + 0x710]
call fcn.1401906d0
mov qword [rsp + 0x978], rax
mov rax, qword [rsp + 0x978]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x20a8], rax
jne 0x140181912
mov rax, qword [rsp + 0x978]
mov rax, qword [rax]
cmp qword [rsp + 0x20a0], rax
jne 0x140181912
mov dword [rsp + 0x138], 1
jmp 0x14018191d
mov dword [rsp + 0x138], 0
movzx eax, byte [rsp + 0x138]
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x76]
test eax, eax
je 0x140181937
jmp 0x140181371
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1401819fd
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0x988], rax
mov rax, qword [rsp + 0x988]
mov qword [rsp + 0x980], rax
mov rax, qword [rsp + 0x980]
mov qword [rax], 0
mov rax, qword [rsp + 0x980]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0x988]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x20b0]
mov qword [rsp + 0x990], rax
mov rax, qword [rsp + 0x990]
mov qword [rsp + 0x2058], rax
mov rax, qword [rsp + 0x990]
add rax, 0x10
mov qword [rsp + 0x7e8], rax
mov rax, qword [rsp + 0x7e8]
mov rax, qword [rax]
mov qword [rsp + 0x9b0], rax
mov rax, qword [rsp + 0x710]
mov qword [rsp + 0xf58], rax
mov rax, qword [rsp + 0xf58]
mov qword [rsp + 0x998], rax
mov rax, qword [rsp + 0x998]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x998]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x9a0], rax
mov eax, dword [rsp + 0x9a0]
add rax, qword [rsp + 0x710]
mov qword [rsp + 0x9a8], rax
mov eax, dword [rsp + 0x9a4]
mov rcx, qword [rsp + 0x9a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xf60], rax
mov rax, qword [rsp + 0x9a8]
cmp qword [rsp + 0x9b0], rax
jb 0x140181aec
mov rax, qword [rsp + 0xf60]
cmp qword [rsp + 0x9b0], rax
jae 0x140181aec
mov dword [rsp + 0x13c], 1
jmp 0x140181af7
mov dword [rsp + 0x13c], 0
movzx eax, byte [rsp + 0x13c]
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x77]
test eax, eax
je 0x140181e93
mov rax, qword [rsp + 0x7e8]
mov rax, qword [rax]
mov qword [rsp + 0xf68], rax
mov rax, qword [rsp + 0xf68]
mov qword [rsp + 0x9b8], rax
lea rax, [rsp + 0x2188]
mov qword [rsp + 0x7d8], rax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0x9b8]
mov qword [rax], rcx
mov rax, qword [rsp + 0x9b8]
mov qword [rsp + 0xf70], rax
mov qword [rsp + 0x310], 0xffffffffffffffff
inc qword [rsp + 0x310]
mov rax, qword [rsp + 0xf70]
mov rcx, qword [rsp + 0x310]
cmp byte [rax + rcx], 0
jne 0x140181b72
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0xf78], rax
mov rax, qword [rsp + 0x7d8]
mov rcx, qword [rsp + 0xf78]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x850]
mov rdi, rax
mov rsi, qword [rsp + 0x7d8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x858]
mov rcx, qword [rsp + 0x850]
call fcn.140096220
mov qword [rsp + 0x7e0], rax
cmp qword [rsp + 0x7e0], 0xffffffffffffffff
je 0x140181c86
mov r9, qword [rsp + 0x7e0]
xor r8d, r8d
lea rdx, [rsp + 0x1c00]
lea rcx, [rsp + 0x850]
call fcn.14019aaa0
mov rax, qword [rsp + 0x7e0]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1c10]
lea rcx, [rsp + 0x850]
call fcn.14019aaa0
lea rax, [rsp + 0x1ab8]
lea rcx, [rsp + 0x1c00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ac8]
lea rcx, [rsp + 0x1c10]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140181ce5
lea rax, [rsp + 0x850]
mov qword [rsp + 0xf80], rax
mov qword [rsp + 0x1a18], 0
mov qword [rsp + 0x1a20], 0
lea rax, [rsp + 0x1ab8]
mov rdi, rax
mov rsi, qword [rsp + 0xf80]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ac8]
lea rcx, [rsp + 0x1a18]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ab8]
mov qword [rsp + 0xf88], rax
lea rax, [rsp + 0x1ac8]
mov qword [rsp + 0xf98], rax
lea rax, [rsp + 0x18f8]
mov qword [rsp + 0x9c0], rax
lea rax, [rsp + 0x140]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x140], 0x1b6e1b1e
lea rax, [rsp + 0x140]
mov qword [rsp + 0xf90], rax
lea rax, [rsp + 0x1c20]
mov rdi, rax
mov rsi, qword [rsp + 0xf88]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c30]
lea rcx, [rsp + 0x1c20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c30]
mov rcx, qword [rsp + 0xf90]
call fcn.1400977d0
mov dword [rsp + 0x768], eax
mov rax, qword [rsp + 0x9c0]
mov ecx, dword [rsp + 0x768]
mov dword [rax], ecx
mov rax, qword [rsp + 0x9c0]
mov eax, dword [rax]
mov dword [rsp + 0x778], eax
lea rax, [rsp + 0x18fc]
mov qword [rsp + 0x9c8], rax
lea rax, [rsp + 0x144]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x144], 0x1b6e1b1e
lea rax, [rsp + 0x144]
mov qword [rsp + 0xfa0], rax
lea rax, [rsp + 0x1c40]
mov rdi, rax
mov rsi, qword [rsp + 0xf98]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c50]
lea rcx, [rsp + 0x1c40]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c50]
mov rcx, qword [rsp + 0xfa0]
call fcn.1400977d0
mov dword [rsp + 0x770], eax
mov rax, qword [rsp + 0x9c8]
mov ecx, dword [rsp + 0x770]
mov dword [rax], ecx
mov rax, qword [rsp + 0x9c8]
mov eax, dword [rax]
mov dword [rsp + 0x77c], eax
mov r8d, dword [rsp + 0x778]
mov edx, dword [rsp + 0x77c]
lea rcx, [rsp + 0x9d0]
call fcn.140191150
mov qword [rsp + 0x318], rax
jmp 0x140181eb9
mov rax, qword [rsp + 0x7e8]
mov rax, qword [rax]
mov qword [rsp + 0x318], rax
jmp 0x140181eb9
mov qword [rsp + 0x318], 0
mov rax, qword [rsp + 0x318]
mov qword [rsp + 0x9d0], rax
mov rax, qword [rsp + 0x9d0]
mov qword [rsp + 0x320], rax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x780], eax
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0xfb8], rax
mov eax, dword [rsp + 0x780]
mov dword [rsp + 0x788], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xfa8], rax
mov rax, qword [rsp + 0xfa8]
mov qword [rsp + 0x860], rax
mov byte [rsp + 0x868], 0
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0xfb0], rax
mov rax, qword [rsp + 0xfb0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x868], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0xfc0], rax
lea r9, [rsp + 0xfb8]
lea r8, [rsp + 0x788]
lea rdx, [rsp + 0x2198]
mov rcx, qword [rsp + 0xfc0]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x868]
test eax, eax
je 0x140181fb9
mov rax, qword [rsp + 0x860]
mov qword [rsp + 0xfc8], rax
mov rax, qword [rsp + 0xfc8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x320]
mov qword [rsp + 0x9d8], rax
mov byte [rsp + 0xa8], 0
mov byte [rsp + 0xa9], 0
mov rax, qword [rsp + 0xfd0]
mov qword [rsp + 0xfe0], rax
mov byte [rsp + 0xaa], 0
mov byte [rsp + 0xab], 0
mov rax, qword [rsp + 0xfd8]
mov qword [rsp + 0xfe8], rax
cmp qword [rsp + 0x9d8], 0
jne 0x140182016
jmp 0x14018203e
mov rax, qword [rsp + 0x9d8]
mov qword [rsp + 0xff0], rax
mov rdx, qword [rsp + 0xfe0]
mov rcx, qword [rsp + 0xfe8]
call qword [rsp + 0xff0]
nop
mov r8, qword [rsp + 0x2940]
lea rdx, str.SYSTEMCurrentControlSetServices_
lea rcx, [rsp + 0xe70]
call fcn.140091b50
nop
lea rax, [rsp + 0x1328]
mov qword [rsp + 0x1180], rax
lea rax, [rsp + 0xe70]
mov qword [rsp + 0x7f0], rax
mov rax, qword [rsp + 0x7f0]
mov qword [rsp + 0x9e0], rax
mov rax, qword [rsp + 0x7f0]
cmp qword [rax + 0x18], 7
jbe 0x1401820a7
mov dword [rsp + 0x148], 1
jmp 0x1401820b2
mov dword [rsp + 0x148], 0
movzx eax, byte [rsp + 0x148]
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x78]
test eax, eax
je 0x1401820ea
mov rax, qword [rsp + 0x7f0]
mov rax, qword [rax]
mov qword [rsp + 0xff8], rax
mov rax, qword [rsp + 0xff8]
mov qword [rsp + 0x9e0], rax
mov rax, qword [rsp + 0x9e0]
mov qword [rsp + 0x1000], rax
mov rax, qword [rsp + 0x1000]
mov qword [rsp + 0x1008], rax
mov rax, qword [rsp + 0x1008]
mov qword [rsp + 0x1188], rax
mov qword [rsp + 0x1190], 0xffffffff80000002
mov dword [rsp + 0x790], 0x4ad34779
lea rax, [rsp + 0x1900]
mov qword [rsp + 0x9e8], rax
mov rax, qword [rsp + 0x9e8]
mov dword [rax], 0
mov rax, qword [rsp + 0x9e8]
mov eax, dword [rax]
mov dword [rsp + 0x7a0], eax
mov eax, dword [rsp + 0x790]
mov dword [rsp + 0xd0], eax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x794], eax
mov eax, dword [rsp + 0x794]
mov dword [rsp + 0x798], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x9f0], rax
mov rax, qword [rsp + 0x9f0]
mov qword [rsp + 0x1010], rax
mov rax, qword [rsp + 0x1010]
mov qword [rsp + 0x1930], rax
mov byte [rsp + 0x1938], 1
mov rax, qword [rsp + 0x9f0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1018], rax
lea r8, [rsp + 0x798]
lea rdx, [rsp + 0xa08]
mov rcx, qword [rsp + 0x1018]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1020], rax
mov rax, qword [rsp + 0x1020]
add rax, 8
mov qword [rsp + 0x9f8], rax
mov rax, qword [rsp + 0x2060]
mov qword [rsp + 0xa00], rax
mov rax, qword [rsp + 0x9f8]
mov qword [rsp + 0xa00], rax
mov rax, qword [rsp + 0x9f8]
mov rax, qword [rax]
mov qword [rsp + 0x1028], rax
mov r8, qword [rsp + 0xa00]
mov rdx, qword [rsp + 0x1028]
lea rcx, [rsp + 0x1030]
call fcn.14006f260
lea rax, [rsp + 0x1030]
mov qword [rsp + 0x1038], rax
mov rax, qword [rsp + 0x1038]
mov rax, qword [rax]
cmp qword [rsp + 0xa08], rax
jne 0x1401822ab
mov dword [rsp + 0x14c], 1
jmp 0x1401822b6
mov dword [rsp + 0x14c], 0
movzx eax, byte [rsp + 0x14c]
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x79]
test eax, eax
je 0x1401822d9
mov qword [rsp + 0xa10], 0
jmp 0x140182341
mov rax, qword [rsp + 0xa08]
add rax, 0x10
mov qword [rsp + 0x1040], rax
mov rax, qword [rsp + 0x1040]
mov qword [rsp + 0x1048], rax
mov rax, qword [rsp + 0x1048]
mov qword [rsp + 0x1050], rax
mov rax, qword [rsp + 0x1050]
mov qword [rsp + 0x1058], rax
mov rax, qword [rsp + 0x1058]
mov qword [rsp + 0x1060], rax
mov rax, qword [rsp + 0x1060]
mov rax, qword [rax + 8]
mov qword [rsp + 0xa10], rax
mov rax, qword [rsp + 0xa10]
mov qword [rsp + 0x1070], rax
movzx eax, byte [rsp + 0x1938]
test eax, eax
je 0x14018237d
mov rax, qword [rsp + 0x1930]
mov qword [rsp + 0x1068], rax
mov rax, qword [rsp + 0x1068]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x1070]
mov qword [rsp + 0x348], rax
cmp qword [rsp + 0x348], 0
jne 0x140183174
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x7a8], eax
mov eax, dword [rsp + 0x7a0]
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x7a8]
mov dword [rsp + 0x188], eax
mov dword [rsp + 0x7b0], 0
mov eax, dword [rsp + 0x7b0]
cmp dword [rsp + 0x188], eax
jne 0x1401823f5
xor eax, eax
cmp eax, 1
je 0x1401823f5
mov dword [rsp + 0x150], 1
jmp 0x140182400
mov dword [rsp + 0x150], 0
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7a]
test eax, eax
je 0x140182426
mov qword [rsp + 0x340], 0
jmp 0x140183074
mov byte [rsp + 0xac], 1
mov qword [rsp + 0xe20], 0
mov qword [rsp + 0xe28], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x1078], rax
mov rax, qword [rsp + 0x1078]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1080], rax
mov rax, qword [rsp + 0x1080]
add rax, 0x10
mov qword [rsp + 0x7f8], rax
mov eax, 1
test eax, eax
je 0x1401824a0
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xa18], rax
jmp 0x1401824b3
mov rax, qword [rsp + 0x7f8]
mov rax, qword [rax]
mov qword [rsp + 0xa18], rax
mov rax, qword [rsp + 0xa18]
mov qword [rsp + 0xe20], rax
mov rax, qword [rsp + 0x7f8]
mov qword [rsp + 0xe28], rax
lea rax, [rsp + 0xe20]
mov qword [rsp + 0xa20], rax
mov rax, qword [rsp + 0xa20]
mov rax, qword [rax]
mov qword [rsp + 0x1088], rax
mov rax, qword [rsp + 0x1088]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0xa20]
mov rax, qword [rax + 8]
mov qword [rsp + 0x1090], rax
mov rax, qword [rsp + 0x1090]
mov qword [rsp + 0x1098], rax
jmp 0x14018253f
mov rax, qword [rsp + 0x328]
mov rax, qword [rax]
mov qword [rsp + 0x328], rax
mov rax, qword [rsp + 0x1098]
cmp qword [rsp + 0x328], rax
je 0x14018255e
mov dword [rsp + 0x154], 1
jmp 0x140182569
mov dword [rsp + 0x154], 0
movzx eax, byte [rsp + 0x154]
test eax, eax
je 0x140183068
xor eax, eax
mov qword [rsp + 0x10a0], rax
mov rax, qword [rsp + 0x10a0]
mov rcx, qword [rsp + 0x328]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x10a8], rax
lea rax, [rsp + 0x10a8]
mov qword [rsp + 0xa30], rax
mov dword [rsp + 0x7b4], 0
mov eax, dword [rsp + 0x7b4]
cmp dword [rsp + 0x160], eax
jne 0x1401825e0
xor eax, eax
cmp eax, 1
je 0x1401825e0
mov dword [rsp + 0x158], 1
jmp 0x1401825eb
mov dword [rsp + 0x158], 0
movzx eax, byte [rsp + 0x158]
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7b]
test eax, eax
jne 0x140182918
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x10b0], rax
mov rax, qword [rsp + 0x10b0]
mov rax, qword [rax + 8]
mov qword [rsp + 0xa28], rax
mov rax, qword [rsp + 0xa28]
mov qword [rsp + 0x1a28], rax
mov rax, qword [rsp + 0xa28]
mov qword [rsp + 0x10b8], rax
mov qword [rsp + 0x330], 0xffffffffffffffff
inc qword [rsp + 0x330]
mov rax, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0x330]
cmp word [rax + rcx*2], 0
jne 0x14018265b
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x10c0], rax
mov rax, qword [rsp + 0x10c0]
mov qword [rsp + 0x1a30], rax
lea rax, [rsp + 0x1a28]
mov qword [rsp + 0x10c8], rax
lea rax, [rsp + 0x1c60]
mov rdi, rax
mov rsi, qword [rsp + 0x10c8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x7b8], eax
lea rax, [rsp + 0x1940]
lea rcx, [rsp + 0x1c60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x7b8]
mov dword [rsp + 0x178], eax
lea rax, [rsp + 0x168]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x168], 0x1b6e1b1e
lea rax, [rsp + 0x168]
mov qword [rsp + 0x10d0], rax
lea rax, [rsp + 0x1c70]
lea rcx, [rsp + 0x1940]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1c80]
lea rcx, [rsp + 0x1c70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1c80]
mov rcx, qword [rsp + 0x10d0]
call fcn.140097890
mov dword [rsp + 0x7bc], eax
mov rax, qword [rsp + 0x1948]
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x10d8]
sub rax, 4
mov qword [rsp + 0x10e0], rax
mov r9, qword [rsp + 0x10e0]
xor r8d, r8d
lea rdx, [rsp + 0x1c90]
lea rcx, [rsp + 0x1940]
call fcn.14019ab70
lea rax, [rsp + 0x16c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x16c], 0x1b6e1b1e
lea rax, [rsp + 0x16c]
mov qword [rsp + 0x10e8], rax
lea rax, [rsp + 0x1ca0]
lea rcx, [rsp + 0x1c90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1cb0]
lea rcx, [rsp + 0x1ca0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1cb0]
mov rcx, qword [rsp + 0x10e8]
call fcn.140097890
mov dword [rsp + 0x3e8], eax
mov eax, dword [rsp + 0x7bc]
mov dword [rsp + 0x7c0], eax
mov eax, dword [rsp + 0x7c0]
cmp dword [rsp + 0x178], eax
jne 0x14018287d
xor eax, eax
cmp eax, 1
je 0x14018287d
mov dword [rsp + 0x170], 1
jmp 0x140182888
mov dword [rsp + 0x170], 0
movzx eax, byte [rsp + 0x170]
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x7c]
test eax, eax
jne 0x1401828fc
mov eax, dword [rsp + 0x3e8]
mov dword [rsp + 0x3ec], eax
mov eax, dword [rsp + 0x3ec]
cmp dword [rsp + 0x178], eax
jne 0x1401828cf
xor eax, eax
cmp eax, 1
je 0x1401828cf
mov dword [rsp + 0x180], 1
jmp 0x1401828da
mov dword [rsp + 0x180], 0
movzx eax, byte [rsp + 0x180]
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x7d]
test eax, eax
jne 0x1401828fc
mov dword [rsp + 0x184], 1
jmp 0x140182907
mov dword [rsp + 0x184], 0
movzx eax, byte [rsp + 0x184]
test eax, eax
je 0x140182918
jmp 0x14018252c
mov rax, qword [rsp + 0xa30]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xa38], rax
mov rax, qword [rsp + 0xa38]
mov qword [rsp + 0x700], rax
mov rax, qword [rsp + 0xa38]
mov qword [rsp + 0x10f0], rax
mov rax, qword [rsp + 0x10f0]
mov qword [rsp + 0xa40], rax
mov rax, qword [rsp + 0xa40]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xa40]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x10f8], rax
mov eax, dword [rsp + 0x10f8]
add rax, qword [rsp + 0x700]
mov qword [rsp + 0x1100], rax
mov rax, qword [rsp + 0x1100]
mov qword [rsp + 0x708], rax
mov eax, dword [rsp + 0x188]
mov dword [rsp + 0x3f0], eax
mov eax, dword [rsp + 0x3f0]
mov dword [rsp + 0x3f8], eax
lea rdx, [rsp + 0x26c8]
lea rcx, [rsp + 0x700]
call fcn.1401906d0
lea rcx, [rsp + 0x22e0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x26f0]
lea rcx, [rsp + 0x700]
call fcn.14018ec60
lea rcx, [rsp + 0x2308]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2330]
lea rcx, [rsp + 0x22e0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2360]
lea rcx, [rsp + 0x2308]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x3f8]
lea r8, [rsp + 0x2330]
lea rdx, [rsp + 0x2360]
lea rcx, [rsp + 0x20c8]
call fcn.140097110
lea rdx, [rsp + 0x2718]
lea rcx, [rsp + 0x700]
call fcn.1401906d0
mov qword [rsp + 0xa48], rax
mov rax, qword [rsp + 0xa48]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x20d0], rax
jne 0x140182acd
mov rax, qword [rsp + 0xa48]
mov rax, qword [rax]
cmp qword [rsp + 0x20c8], rax
jne 0x140182acd
mov dword [rsp + 0x190], 1
jmp 0x140182ad8
mov dword [rsp + 0x190], 0
movzx eax, byte [rsp + 0x190]
mov byte [rsp + 0x7e], al
movzx eax, byte [rsp + 0x7e]
test eax, eax
je 0x140182af2
jmp 0x14018252c
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x140182bb8
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xa58], rax
mov rax, qword [rsp + 0xa58]
mov qword [rsp + 0xa50], rax
mov rax, qword [rsp + 0xa50]
mov qword [rax], 0
mov rax, qword [rsp + 0xa50]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xa58]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x20d8]
mov qword [rsp + 0xa60], rax
mov rax, qword [rsp + 0xa60]
mov qword [rsp + 0x2068], rax
mov rax, qword [rsp + 0xa60]
add rax, 0x10
mov qword [rsp + 0x810], rax
mov rax, qword [rsp + 0x810]
mov rax, qword [rax]
mov qword [rsp + 0xa80], rax
mov rax, qword [rsp + 0x700]
mov qword [rsp + 0x1108], rax
mov rax, qword [rsp + 0x1108]
mov qword [rsp + 0xa68], rax
mov rax, qword [rsp + 0xa68]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xa68]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xa70], rax
mov eax, dword [rsp + 0xa70]
add rax, qword [rsp + 0x700]
mov qword [rsp + 0xa78], rax
mov eax, dword [rsp + 0xa74]
mov rcx, qword [rsp + 0xa78]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1110], rax
mov rax, qword [rsp + 0xa78]
cmp qword [rsp + 0xa80], rax
jb 0x140182ca7
mov rax, qword [rsp + 0x1110]
cmp qword [rsp + 0xa80], rax
jae 0x140182ca7
mov dword [rsp + 0x194], 1
jmp 0x140182cb2
mov dword [rsp + 0x194], 0
movzx eax, byte [rsp + 0x194]
mov byte [rsp + 0x7f], al
movzx eax, byte [rsp + 0x7f]
test eax, eax
je 0x14018304e
mov rax, qword [rsp + 0x810]
mov rax, qword [rax]
mov qword [rsp + 0x1118], rax
mov rax, qword [rsp + 0x1118]
mov qword [rsp + 0xa88], rax
lea rax, [rsp + 0x21a8]
mov qword [rsp + 0x800], rax
mov rax, qword [rsp + 0x800]
mov rcx, qword [rsp + 0xa88]
mov qword [rax], rcx
mov rax, qword [rsp + 0xa88]
mov qword [rsp + 0x1120], rax
mov qword [rsp + 0x338], 0xffffffffffffffff
inc qword [rsp + 0x338]
mov rax, qword [rsp + 0x1120]
mov rcx, qword [rsp + 0x338]
cmp byte [rax + rcx], 0
jne 0x140182d2d
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x1128], rax
mov rax, qword [rsp + 0x800]
mov rcx, qword [rsp + 0x1128]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x870]
mov rdi, rax
mov rsi, qword [rsp + 0x800]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x878]
mov rcx, qword [rsp + 0x870]
call fcn.140096220
mov qword [rsp + 0x808], rax
cmp qword [rsp + 0x808], 0xffffffffffffffff
je 0x140182e41
mov r9, qword [rsp + 0x808]
xor r8d, r8d
lea rdx, [rsp + 0x1cc0]
lea rcx, [rsp + 0x870]
call fcn.14019aaa0
mov rax, qword [rsp + 0x808]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1cd0]
lea rcx, [rsp + 0x870]
call fcn.14019aaa0
lea rax, [rsp + 0x1ad8]
lea rcx, [rsp + 0x1cc0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ae8]
lea rcx, [rsp + 0x1cd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140182ea0
lea rax, [rsp + 0x870]
mov qword [rsp + 0x1130], rax
mov qword [rsp + 0x1a38], 0
mov qword [rsp + 0x1a40], 0
lea rax, [rsp + 0x1ad8]
mov rdi, rax
mov rsi, qword [rsp + 0x1130]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ae8]
lea rcx, [rsp + 0x1a38]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ad8]
mov qword [rsp + 0x1138], rax
lea rax, [rsp + 0x1ae8]
mov qword [rsp + 0x1148], rax
lea rax, [rsp + 0x1904]
mov qword [rsp + 0xa90], rax
lea rax, [rsp + 0x198]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x198], 0x1b6e1b1e
lea rax, [rsp + 0x198]
mov qword [rsp + 0x1140], rax
lea rax, [rsp + 0x1ce0]
mov rdi, rax
mov rsi, qword [rsp + 0x1138]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1cf0]
lea rcx, [rsp + 0x1ce0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1cf0]
mov rcx, qword [rsp + 0x1140]
call fcn.1400977d0
mov dword [rsp + 0x400], eax
mov rax, qword [rsp + 0xa90]
mov ecx, dword [rsp + 0x400]
mov dword [rax], ecx
mov rax, qword [rsp + 0xa90]
mov eax, dword [rax]
mov dword [rsp + 0x410], eax
lea rax, [rsp + 0x19d0]
mov qword [rsp + 0xa98], rax
lea rax, [rsp + 0x19c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x19c], 0x1b6e1b1e
lea rax, [rsp + 0x19c]
mov qword [rsp + 0x1150], rax
lea rax, [rsp + 0x1d00]
mov rdi, rax
mov rsi, qword [rsp + 0x1148]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d10]
lea rcx, [rsp + 0x1d00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1d10]
mov rcx, qword [rsp + 0x1150]
call fcn.1400977d0
mov dword [rsp + 0x408], eax
mov rax, qword [rsp + 0xa98]
mov ecx, dword [rsp + 0x408]
mov dword [rax], ecx
mov rax, qword [rsp + 0xa98]
mov eax, dword [rax]
mov dword [rsp + 0x414], eax
mov r8d, dword [rsp + 0x410]
mov edx, dword [rsp + 0x414]
lea rcx, [rsp + 0xaa0]
call fcn.140191150
mov qword [rsp + 0x340], rax
jmp 0x140183074
mov rax, qword [rsp + 0x810]
mov rax, qword [rax]
mov qword [rsp + 0x340], rax
jmp 0x140183074
mov qword [rsp + 0x340], 0
mov rax, qword [rsp + 0x340]
mov qword [rsp + 0xaa0], rax
mov rax, qword [rsp + 0xaa0]
mov qword [rsp + 0x348], rax
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0x418], eax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x1168], rax
mov eax, dword [rsp + 0x418]
mov dword [rsp + 0x420], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1158], rax
mov rax, qword [rsp + 0x1158]
mov qword [rsp + 0x880], rax
mov byte [rsp + 0x888], 0
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x1160], rax
mov rax, qword [rsp + 0x1160]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x888], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1170], rax
lea r9, [rsp + 0x1168]
lea r8, [rsp + 0x420]
lea rdx, [rsp + 0x21b8]
mov rcx, qword [rsp + 0x1170]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x888]
test eax, eax
je 0x140183174
mov rax, qword [rsp + 0x880]
mov qword [rsp + 0x1178], rax
mov rax, qword [rsp + 0x1178]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0xaa8], rax
mov byte [rsp + 0xad], 0
mov byte [rsp + 0xae], 0
mov rax, qword [rsp + 0x1180]
mov qword [rsp + 0x1198], rax
mov byte [rsp + 0xaf], 0
mov byte [rsp + 0xb0], 0
mov rax, qword [rsp + 0x1188]
mov qword [rsp + 0x11a0], rax
mov byte [rsp + 0xb1], 0
mov byte [rsp + 0xb2], 0
mov rax, qword [rsp + 0x1190]
mov qword [rsp + 0x11a8], rax
cmp qword [rsp + 0xaa8], 0
jne 0x1401831fc
mov dword [rsp + 0x1a0], 0
jmp 0x140183232
mov rax, qword [rsp + 0xaa8]
mov qword [rsp + 0x11b0], rax
mov r8, qword [rsp + 0x1198]
mov rdx, qword [rsp + 0x11a0]
mov rcx, qword [rsp + 0x11a8]
call qword [rsp + 0x11b0]
mov dword [rsp + 0x1a0], eax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x1401832b4
cmp dword [rsp + 0xa4], 2
jne 0x140183284
mov byte [rsp + 0x80], 1
lea rcx, [rsp + 0xe70]
call fcn.14018ddf0
nop
lea rcx, [rsp + 0x19d8]
call fcn.14018ddf0
movzx eax, byte [rsp + 0x80]
jmp 0x140187c6b
mov byte [rsp + 0x81], 0
lea rcx, [rsp + 0xe70]
call fcn.14018ddf0
nop
lea rcx, [rsp + 0x19d8]
call fcn.14018ddf0
movzx eax, byte [rsp + 0x81]
jmp 0x140187c6b
mov dword [rsp + 0x428], 0xbb6d293d
lea rax, [rsp + 0x19d4]
mov qword [rsp + 0xab0], rax
mov rax, qword [rsp + 0xab0]
mov dword [rax], 0
mov rax, qword [rsp + 0xab0]
mov eax, dword [rax]
mov dword [rsp + 0x438], eax
mov eax, dword [rsp + 0x428]
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x42c], eax
mov eax, dword [rsp + 0x42c]
mov dword [rsp + 0x430], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xab8], rax
mov rax, qword [rsp + 0xab8]
mov qword [rsp + 0x11b8], rax
mov rax, qword [rsp + 0x11b8]
mov qword [rsp + 0x1950], rax
mov byte [rsp + 0x1958], 1
mov rax, qword [rsp + 0xab8]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x11c0], rax
lea r8, [rsp + 0x430]
lea rdx, [rsp + 0xad0]
mov rcx, qword [rsp + 0x11c0]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x11c8], rax
mov rax, qword [rsp + 0x11c8]
add rax, 8
mov qword [rsp + 0xac0], rax
mov rax, qword [rsp + 0x1b78]
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0xac0]
mov qword [rsp + 0xac8], rax
mov rax, qword [rsp + 0xac0]
mov rax, qword [rax]
mov qword [rsp + 0x11d0], rax
mov r8, qword [rsp + 0xac8]
mov rdx, qword [rsp + 0x11d0]
lea rcx, [rsp + 0x11d8]
call fcn.14006f260
lea rax, [rsp + 0x11d8]
mov qword [rsp + 0x11e0], rax
mov rax, qword [rsp + 0x11e0]
mov rax, qword [rax]
cmp qword [rsp + 0xad0], rax
jne 0x140183439
mov dword [rsp + 0x1a4], 1
jmp 0x140183444
mov dword [rsp + 0x1a4], 0
movzx eax, byte [rsp + 0x1a4]
mov byte [rsp + 0x82], al
movzx eax, byte [rsp + 0x82]
test eax, eax
je 0x14018346d
mov qword [rsp + 0xad8], 0
jmp 0x1401834d5
mov rax, qword [rsp + 0xad0]
add rax, 0x10
mov qword [rsp + 0x11e8], rax
mov rax, qword [rsp + 0x11e8]
mov qword [rsp + 0x11f0], rax
mov rax, qword [rsp + 0x11f0]
mov qword [rsp + 0x11f8], rax
mov rax, qword [rsp + 0x11f8]
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x1200]
mov qword [rsp + 0x1208], rax
mov rax, qword [rsp + 0x1208]
mov rax, qword [rax + 8]
mov qword [rsp + 0xad8], rax
mov rax, qword [rsp + 0xad8]
mov qword [rsp + 0x1218], rax
movzx eax, byte [rsp + 0x1958]
test eax, eax
je 0x140183511
mov rax, qword [rsp + 0x1950]
mov qword [rsp + 0x1210], rax
mov rax, qword [rsp + 0x1210]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0x370], rax
cmp qword [rsp + 0x370], 0
jne 0x14018432c
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x440], eax
mov eax, dword [rsp + 0x438]
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x440]
mov dword [rsp + 0x1e0], eax
mov dword [rsp + 0x448], 0
mov eax, dword [rsp + 0x448]
cmp dword [rsp + 0x1e0], eax
jne 0x140183589
xor eax, eax
cmp eax, 1
je 0x140183589
mov dword [rsp + 0x1a8], 1
jmp 0x140183594
mov dword [rsp + 0x1a8], 0
movzx eax, byte [rsp + 0x1a8]
mov byte [rsp + 0x83], al
movzx eax, byte [rsp + 0x83]
test eax, eax
je 0x1401835c0
mov qword [rsp + 0x368], 0
jmp 0x14018422c
mov byte [rsp + 0xb3], 1
mov qword [rsp + 0xe30], 0
mov qword [rsp + 0xe38], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x1220], rax
mov rax, qword [rsp + 0x1220]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1228], rax
mov rax, qword [rsp + 0x1228]
add rax, 0x10
mov qword [rsp + 0x818], rax
mov eax, 1
test eax, eax
je 0x14018363a
mov rax, qword [rsp + 0x818]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xae0], rax
jmp 0x14018364d
mov rax, qword [rsp + 0x818]
mov rax, qword [rax]
mov qword [rsp + 0xae0], rax
mov rax, qword [rsp + 0xae0]
mov qword [rsp + 0xe30], rax
mov rax, qword [rsp + 0x818]
mov qword [rsp + 0xe38], rax
lea rax, [rsp + 0xe30]
mov qword [rsp + 0xae8], rax
mov rax, qword [rsp + 0xae8]
mov rax, qword [rax]
mov qword [rsp + 0x1230], rax
mov rax, qword [rsp + 0x1230]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0xae8]
mov rax, qword [rax + 8]
mov qword [rsp + 0x1238], rax
mov rax, qword [rsp + 0x1238]
mov qword [rsp + 0x1240], rax
jmp 0x1401836d9
mov rax, qword [rsp + 0x350]
mov rax, qword [rax]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x1240]
cmp qword [rsp + 0x350], rax
je 0x1401836f8
mov dword [rsp + 0x1ac], 1
jmp 0x140183703
mov dword [rsp + 0x1ac], 0
movzx eax, byte [rsp + 0x1ac]
test eax, eax
je 0x140184220
xor eax, eax
mov qword [rsp + 0x1248], rax
mov rax, qword [rsp + 0x1248]
mov rcx, qword [rsp + 0x350]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1250], rax
lea rax, [rsp + 0x1250]
mov qword [rsp + 0xaf8], rax
mov dword [rsp + 0x44c], 0
mov eax, dword [rsp + 0x44c]
cmp dword [rsp + 0x1b8], eax
jne 0x14018377a
xor eax, eax
cmp eax, 1
je 0x14018377a
mov dword [rsp + 0x1b0], 1
jmp 0x140183785
mov dword [rsp + 0x1b0], 0
movzx eax, byte [rsp + 0x1b0]
mov byte [rsp + 0x84], al
movzx eax, byte [rsp + 0x84]
test eax, eax
jne 0x140183ac4
mov rax, qword [rsp + 0xaf8]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x1258], rax
mov rax, qword [rsp + 0x1258]
mov rax, qword [rax + 8]
mov qword [rsp + 0xaf0], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0x1a48], rax
mov rax, qword [rsp + 0xaf0]
mov qword [rsp + 0x1260], rax
mov qword [rsp + 0x358], 0xffffffffffffffff
inc qword [rsp + 0x358]
mov rax, qword [rsp + 0x1260]
mov rcx, qword [rsp + 0x358]
cmp word [rax + rcx*2], 0
jne 0x1401837fb
mov rax, qword [rsp + 0x358]
mov qword [rsp + 0x1268], rax
mov rax, qword [rsp + 0x1268]
mov qword [rsp + 0x1a50], rax
lea rax, [rsp + 0x1a48]
mov qword [rsp + 0x1270], rax
lea rax, [rsp + 0x1d20]
mov rdi, rax
mov rsi, qword [rsp + 0x1270]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x1b8]
mov dword [rsp + 0x450], eax
lea rax, [rsp + 0x1960]
lea rcx, [rsp + 0x1d20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x450]
mov dword [rsp + 0x1d0], eax
lea rax, [rsp + 0x1c0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1c0], 0x1b6e1b1e
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x1278], rax
lea rax, [rsp + 0x1d30]
lea rcx, [rsp + 0x1960]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d40]
lea rcx, [rsp + 0x1d30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1d40]
mov rcx, qword [rsp + 0x1278]
call fcn.140097890
mov dword [rsp + 0x454], eax
mov rax, qword [rsp + 0x1968]
mov qword [rsp + 0x1280], rax
mov rax, qword [rsp + 0x1280]
sub rax, 4
mov qword [rsp + 0x1288], rax
mov r9, qword [rsp + 0x1288]
xor r8d, r8d
lea rdx, [rsp + 0x1d50]
lea rcx, [rsp + 0x1960]
call fcn.14019ab70
lea rax, [rsp + 0x1c4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1c4], 0x1b6e1b1e
lea rax, [rsp + 0x1c4]
mov qword [rsp + 0x1290], rax
lea rax, [rsp + 0x1d60]
lea rcx, [rsp + 0x1d50]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1d70]
lea rcx, [rsp + 0x1d60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1d70]
mov rcx, qword [rsp + 0x1290]
call fcn.140097890
mov dword [rsp + 0x45c], eax
mov eax, dword [rsp + 0x454]
mov dword [rsp + 0x458], eax
mov eax, dword [rsp + 0x458]
cmp dword [rsp + 0x1d0], eax
jne 0x140183a1d
xor eax, eax
cmp eax, 1
je 0x140183a1d
mov dword [rsp + 0x1c8], 1
jmp 0x140183a28
mov dword [rsp + 0x1c8], 0
movzx eax, byte [rsp + 0x1c8]
mov byte [rsp + 0x85], al
movzx eax, byte [rsp + 0x85]
test eax, eax
jne 0x140183aa8
mov eax, dword [rsp + 0x45c]
mov dword [rsp + 0x460], eax
mov eax, dword [rsp + 0x460]
cmp dword [rsp + 0x1d0], eax
jne 0x140183a75
xor eax, eax
cmp eax, 1
je 0x140183a75
mov dword [rsp + 0x1d8], 1
jmp 0x140183a80
mov dword [rsp + 0x1d8], 0
movzx eax, byte [rsp + 0x1d8]
mov byte [rsp + 0x86], al
movzx eax, byte [rsp + 0x86]
test eax, eax
jne 0x140183aa8
mov dword [rsp + 0x1dc], 1
jmp 0x140183ab3
mov dword [rsp + 0x1dc], 0
movzx eax, byte [rsp + 0x1dc]
test eax, eax
je 0x140183ac4
jmp 0x1401836c6
mov rax, qword [rsp + 0xaf8]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xb00], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0x6f0], rax
mov rax, qword [rsp + 0xb00]
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0x1298]
mov qword [rsp + 0xb08], rax
mov rax, qword [rsp + 0xb08]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xb08]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x12a0], rax
mov eax, dword [rsp + 0x12a0]
add rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x12a8], rax
mov rax, qword [rsp + 0x12a8]
mov qword [rsp + 0x6f8], rax
mov eax, dword [rsp + 0x1e0]
mov dword [rsp + 0x464], eax
mov eax, dword [rsp + 0x464]
mov dword [rsp + 0x468], eax
lea rdx, [rsp + 0x2740]
lea rcx, [rsp + 0x6f0]
call fcn.1401906d0
lea rcx, [rsp + 0x2390]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2768]
lea rcx, [rsp + 0x6f0]
call fcn.14018ec60
lea rcx, [rsp + 0x23b8]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x23e0]
lea rcx, [rsp + 0x2390]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2410]
lea rcx, [rsp + 0x23b8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x468]
lea r8, [rsp + 0x23e0]
lea rdx, [rsp + 0x2410]
lea rcx, [rsp + 0x2078]
call fcn.140097110
lea rdx, [rsp + 0x2790]
lea rcx, [rsp + 0x6f0]
call fcn.1401906d0
mov qword [rsp + 0xb10], rax
mov rax, qword [rsp + 0xb10]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x2080], rax
jne 0x140183c79
mov rax, qword [rsp + 0xb10]
mov rax, qword [rax]
cmp qword [rsp + 0x2078], rax
jne 0x140183c79
mov dword [rsp + 0x1e8], 1
jmp 0x140183c84
mov dword [rsp + 0x1e8], 0
movzx eax, byte [rsp + 0x1e8]
mov byte [rsp + 0x87], al
movzx eax, byte [rsp + 0x87]
test eax, eax
je 0x140183ca4
jmp 0x1401836c6
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x140183d6a
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xb20], rax
mov rax, qword [rsp + 0xb20]
mov qword [rsp + 0xb18], rax
mov rax, qword [rsp + 0xb18]
mov qword [rax], 0
mov rax, qword [rsp + 0xb18]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xb20]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x2088]
mov qword [rsp + 0xb28], rax
mov rax, qword [rsp + 0xb28]
mov qword [rsp + 0x1b80], rax
mov rax, qword [rsp + 0xb28]
add rax, 0x10
mov qword [rsp + 0x830], rax
mov rax, qword [rsp + 0x830]
mov rax, qword [rax]
mov qword [rsp + 0xb48], rax
mov rax, qword [rsp + 0x6f0]
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x12b0]
mov qword [rsp + 0xb30], rax
mov rax, qword [rsp + 0xb30]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xb30]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xb38], rax
mov eax, dword [rsp + 0xb38]
add rax, qword [rsp + 0x6f0]
mov qword [rsp + 0xb40], rax
mov eax, dword [rsp + 0xb3c]
mov rcx, qword [rsp + 0xb40]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x12b8], rax
mov rax, qword [rsp + 0xb40]
cmp qword [rsp + 0xb48], rax
jb 0x140183e59
mov rax, qword [rsp + 0x12b8]
cmp qword [rsp + 0xb48], rax
jae 0x140183e59
mov dword [rsp + 0x1ec], 1
jmp 0x140183e64
mov dword [rsp + 0x1ec], 0
movzx eax, byte [rsp + 0x1ec]
mov byte [rsp + 0x88], al
movzx eax, byte [rsp + 0x88]
test eax, eax
je 0x140184206
mov rax, qword [rsp + 0x830]
mov rax, qword [rax]
mov qword [rsp + 0x12c0], rax
mov rax, qword [rsp + 0x12c0]
mov qword [rsp + 0xb50], rax
lea rax, [rsp + 0x2218]
mov qword [rsp + 0x820], rax
mov rax, qword [rsp + 0x820]
mov rcx, qword [rsp + 0xb50]
mov qword [rax], rcx
mov rax, qword [rsp + 0xb50]
mov qword [rsp + 0x12c8], rax
mov qword [rsp + 0x360], 0xffffffffffffffff
inc qword [rsp + 0x360]
mov rax, qword [rsp + 0x12c8]
mov rcx, qword [rsp + 0x360]
cmp byte [rax + rcx], 0
jne 0x140183ee5
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x12d0], rax
mov rax, qword [rsp + 0x820]
mov rcx, qword [rsp + 0x12d0]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x890]
mov rdi, rax
mov rsi, qword [rsp + 0x820]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x898]
mov rcx, qword [rsp + 0x890]
call fcn.140096220
mov qword [rsp + 0x828], rax
cmp qword [rsp + 0x828], 0xffffffffffffffff
je 0x140183ff9
mov r9, qword [rsp + 0x828]
xor r8d, r8d
lea rdx, [rsp + 0x1d80]
lea rcx, [rsp + 0x890]
call fcn.14019aaa0
mov rax, qword [rsp + 0x828]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1d90]
lea rcx, [rsp + 0x890]
call fcn.14019aaa0
lea rax, [rsp + 0x1af8]
lea rcx, [rsp + 0x1d80]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b08]
lea rcx, [rsp + 0x1d90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140184058
lea rax, [rsp + 0x890]
mov qword [rsp + 0x12d8], rax
mov qword [rsp + 0x1a58], 0
mov qword [rsp + 0x1a60], 0
lea rax, [rsp + 0x1af8]
mov rdi, rax
mov rsi, qword [rsp + 0x12d8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b08]
lea rcx, [rsp + 0x1a58]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1af8]
mov qword [rsp + 0x12e0], rax
lea rax, [rsp + 0x1b08]
mov qword [rsp + 0x12f0], rax
lea rax, [rsp + 0xe90]
mov qword [rsp + 0xb58], rax
lea rax, [rsp + 0x1f0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1f0], 0x1b6e1b1e
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x12e8], rax
lea rax, [rsp + 0x1da0]
mov rdi, rax
mov rsi, qword [rsp + 0x12e0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1db0]
lea rcx, [rsp + 0x1da0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1db0]
mov rcx, qword [rsp + 0x12e8]
call fcn.1400977d0
mov dword [rsp + 0x470], eax
mov rax, qword [rsp + 0xb58]
mov ecx, dword [rsp + 0x470]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb58]
mov eax, dword [rax]
mov dword [rsp + 0x480], eax
lea rax, [rsp + 0xe94]
mov qword [rsp + 0xb60], rax
lea rax, [rsp + 0x1f4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x1f4], 0x1b6e1b1e
lea rax, [rsp + 0x1f4]
mov qword [rsp + 0x12f8], rax
lea rax, [rsp + 0x1dc0]
mov rdi, rax
mov rsi, qword [rsp + 0x12f0]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1dd0]
lea rcx, [rsp + 0x1dc0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1dd0]
mov rcx, qword [rsp + 0x12f8]
call fcn.1400977d0
mov dword [rsp + 0x478], eax
mov rax, qword [rsp + 0xb60]
mov ecx, dword [rsp + 0x478]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb60]
mov eax, dword [rax]
mov dword [rsp + 0x484], eax
mov r8d, dword [rsp + 0x480]
mov edx, dword [rsp + 0x484]
lea rcx, [rsp + 0xb68]
call fcn.140191150
mov qword [rsp + 0x368], rax
jmp 0x14018422c
mov rax, qword [rsp + 0x830]
mov rax, qword [rax]
mov qword [rsp + 0x368], rax
jmp 0x14018422c
mov qword [rsp + 0x368], 0
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0xb68], rax
mov rax, qword [rsp + 0xb68]
mov qword [rsp + 0x370], rax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x488], eax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x1310], rax
mov eax, dword [rsp + 0x488]
mov dword [rsp + 0x490], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1300], rax
mov rax, qword [rsp + 0x1300]
mov qword [rsp + 0x8a0], rax
mov byte [rsp + 0x8a8], 0
mov rax, qword [rsp + 0x8a0]
mov qword [rsp + 0x1308], rax
mov rax, qword [rsp + 0x1308]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x8a8], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1318], rax
lea r9, [rsp + 0x1310]
lea r8, [rsp + 0x490]
lea rdx, [rsp + 0x21d8]
mov rcx, qword [rsp + 0x1318]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x8a8]
test eax, eax
je 0x14018432c
mov rax, qword [rsp + 0x8a0]
mov qword [rsp + 0x1320], rax
mov rax, qword [rsp + 0x1320]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0xb70], rax
mov byte [rsp + 0xb4], 0
mov byte [rsp + 0xb5], 0
mov rax, qword [rsp + 0x1328]
mov qword [rsp + 0x1330], rax
cmp qword [rsp + 0xb70], 0
jne 0x140184374
mov dword [rsp + 0x498], 0
jmp 0x14018439a
mov rax, qword [rsp + 0xb70]
mov qword [rsp + 0x1338], rax
mov rcx, qword [rsp + 0x1330]
call qword [rsp + 0x1338]
mov dword [rsp + 0x498], eax
lea rax, [rsp + 0x1de0]
mov qword [rsp + 0x1348], rax
mov dword [rsp + 0x49c], 0x1be48513
mov eax, dword [rsp + 0x49c]
mov dword [rsp + 0x4a0], eax
mov eax, dword [rsp + 0x4a0]
mov dword [rsp + 0x4a8], eax
mov eax, dword [rsp + 0x4a8]
mov dword [rsp + 0xde8], eax
mov dword [rsp + 0xdec], 0
lea rax, [rsp + 0xdf0]
mov qword [rsp + 0x1340], rax
mov dword [rsp + 0x4dc], 0x49
mov dword [rsp + 0x4d8], 0x89
mov dword [rsp + 0x4d4], 0xca
mov dword [rsp + 0x4d0], 0x48
mov dword [rsp + 0x4cc], 0xc7
mov dword [rsp + 0x4c8], 0xc0
mov dword [rsp + 0x4c4], 0x3f
mov dword [rsp + 0x4c0], 0x10
mov dword [rsp + 0x4bc], 0
mov dword [rsp + 0x4b8], 0
mov dword [rsp + 0x4b4], 0xf
mov dword [rsp + 0x4b0], 5
mov dword [rsp + 0x4ac], 0xc3
lea rax, [rsp + 0x4ac]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x4b0]
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x4b4]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x4b8]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x4bc]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x4c0]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x4c4]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4c8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x4cc]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4d0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x4d4]
lea r8, [rsp + 0x4d8]
lea rdx, [rsp + 0x4dc]
mov rcx, qword [rsp + 0x1340]
call fcn.14008f900
mov byte [rsp + 0xb6], 0
mov byte [rsp + 0xb7], 0
mov rax, qword [rsp + 0x1348]
mov qword [rsp + 0x1508], rax
mov eax, dword [rsp + 0xde8]
mov dword [rsp + 0x4e0], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xb78], rax
mov rax, qword [rsp + 0xb78]
mov qword [rsp + 0x1350], rax
mov rax, qword [rsp + 0x1350]
mov qword [rsp + 0x1970], rax
mov byte [rsp + 0x1978], 1
mov rax, qword [rsp + 0xb78]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1358], rax
lea r8, [rsp + 0x4e0]
lea rdx, [rsp + 0xb90]
mov rcx, qword [rsp + 0x1358]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1360], rax
mov rax, qword [rsp + 0x1360]
add rax, 8
mov qword [rsp + 0xb80], rax
mov rax, qword [rsp + 0x1b88]
mov qword [rsp + 0xb88], rax
mov rax, qword [rsp + 0xb80]
mov qword [rsp + 0xb88], rax
mov rax, qword [rsp + 0xb80]
mov rax, qword [rax]
mov qword [rsp + 0x1368], rax
mov r8, qword [rsp + 0xb88]
mov rdx, qword [rsp + 0x1368]
lea rcx, [rsp + 0x1370]
call fcn.14006f260
lea rax, [rsp + 0x1370]
mov qword [rsp + 0x1378], rax
mov rax, qword [rsp + 0x1378]
mov rax, qword [rax]
cmp qword [rsp + 0xb90], rax
jne 0x14018467e
mov dword [rsp + 0x1f8], 1
jmp 0x140184689
mov dword [rsp + 0x1f8], 0
movzx eax, byte [rsp + 0x1f8]
mov byte [rsp + 0x89], al
movzx eax, byte [rsp + 0x89]
test eax, eax
je 0x1401846b2
mov qword [rsp + 0xb98], 0
jmp 0x14018471a
mov rax, qword [rsp + 0xb90]
add rax, 0x10
mov qword [rsp + 0x1380], rax
mov rax, qword [rsp + 0x1380]
mov qword [rsp + 0x1388], rax
mov rax, qword [rsp + 0x1388]
mov qword [rsp + 0x1390], rax
mov rax, qword [rsp + 0x1390]
mov qword [rsp + 0x1398], rax
mov rax, qword [rsp + 0x1398]
mov qword [rsp + 0x13a0], rax
mov rax, qword [rsp + 0x13a0]
mov rax, qword [rax + 8]
mov qword [rsp + 0xb98], rax
mov rax, qword [rsp + 0xb98]
mov qword [rsp + 0x13b0], rax
movzx eax, byte [rsp + 0x1978]
test eax, eax
je 0x140184756
mov rax, qword [rsp + 0x1970]
mov qword [rsp + 0x13a8], rax
mov rax, qword [rsp + 0x13a8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x13b0]
mov qword [rsp + 0xba0], rax
cmp qword [rsp + 0xba0], 0
je 0x140184796
mov rax, qword [rsp + 0xba0]
mov eax, dword [rax + 4]
mov dword [rsp + 0x4e8], eax
mov eax, dword [rsp + 0x4e8]
mov dword [rsp + 0xdec], eax
jmp 0x140185632
lea rax, [rsp + 0xe98]
mov qword [rsp + 0xba8], rax
mov rax, qword [rsp + 0xba8]
mov dword [rax], 0
mov rax, qword [rsp + 0xba8]
mov eax, dword [rax]
mov dword [rsp + 0x4f8], eax
lea rax, [rsp + 0xe9c]
mov qword [rsp + 0xbb0], rax
mov eax, dword [rsp + 0xde8]
mov dword [rsp + 0x4f0], eax
mov rax, qword [rsp + 0xbb0]
mov ecx, dword [rsp + 0x4f0]
mov dword [rax], ecx
mov rax, qword [rsp + 0xbb0]
mov eax, dword [rax]
mov dword [rsp + 0x4fc], eax
mov eax, dword [rsp + 0x4f8]
mov dword [rsp + 0x208], eax
mov eax, dword [rsp + 0x4fc]
mov dword [rsp + 0x230], eax
mov dword [rsp + 0x500], 0
mov eax, dword [rsp + 0x500]
cmp dword [rsp + 0x230], eax
jne 0x140184850
xor eax, eax
cmp eax, 1
je 0x140184850
mov dword [rsp + 0x1fc], 1
jmp 0x14018485b
mov dword [rsp + 0x1fc], 0
movzx eax, byte [rsp + 0x1fc]
mov byte [rsp + 0x8a], al
movzx eax, byte [rsp + 0x8a]
test eax, eax
je 0x140184887
mov qword [rsp + 0x390], 0
jmp 0x1401854f3
mov byte [rsp + 0xb8], 1
mov qword [rsp + 0xe40], 0
mov qword [rsp + 0xe48], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x13b8], rax
mov rax, qword [rsp + 0x13b8]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x13c0], rax
mov rax, qword [rsp + 0x13c0]
add rax, 0x10
mov qword [rsp + 0x838], rax
mov eax, 1
test eax, eax
je 0x140184901
mov rax, qword [rsp + 0x838]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xbb8], rax
jmp 0x140184914
mov rax, qword [rsp + 0x838]
mov rax, qword [rax]
mov qword [rsp + 0xbb8], rax
mov rax, qword [rsp + 0xbb8]
mov qword [rsp + 0xe40], rax
mov rax, qword [rsp + 0x838]
mov qword [rsp + 0xe48], rax
lea rax, [rsp + 0xe40]
mov qword [rsp + 0xbc0], rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax]
mov qword [rsp + 0x13c8], rax
mov rax, qword [rsp + 0x13c8]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0xbc0]
mov rax, qword [rax + 8]
mov qword [rsp + 0x13d0], rax
mov rax, qword [rsp + 0x13d0]
mov qword [rsp + 0x13d8], rax
jmp 0x1401849a0
mov rax, qword [rsp + 0x378]
mov rax, qword [rax]
mov qword [rsp + 0x378], rax
mov rax, qword [rsp + 0x13d8]
cmp qword [rsp + 0x378], rax
je 0x1401849bf
mov dword [rsp + 0x200], 1
jmp 0x1401849ca
mov dword [rsp + 0x200], 0
movzx eax, byte [rsp + 0x200]
test eax, eax
je 0x1401854e7
xor eax, eax
mov qword [rsp + 0x13e0], rax
mov rax, qword [rsp + 0x13e0]
mov rcx, qword [rsp + 0x378]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x13e8], rax
lea rax, [rsp + 0x13e8]
mov qword [rsp + 0xbd0], rax
mov dword [rsp + 0x504], 0
mov eax, dword [rsp + 0x504]
cmp dword [rsp + 0x208], eax
jne 0x140184a41
xor eax, eax
cmp eax, 1
je 0x140184a41
mov dword [rsp + 0x204], 1
jmp 0x140184a4c
mov dword [rsp + 0x204], 0
movzx eax, byte [rsp + 0x204]
mov byte [rsp + 0x8b], al
movzx eax, byte [rsp + 0x8b]
test eax, eax
jne 0x140184d8b
mov rax, qword [rsp + 0xbd0]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x13f0], rax
mov rax, qword [rsp + 0x13f0]
mov rax, qword [rax + 8]
mov qword [rsp + 0xbc8], rax
mov rax, qword [rsp + 0xbc8]
mov qword [rsp + 0x1a68], rax
mov rax, qword [rsp + 0xbc8]
mov qword [rsp + 0x13f8], rax
mov qword [rsp + 0x380], 0xffffffffffffffff
inc qword [rsp + 0x380]
mov rax, qword [rsp + 0x13f8]
mov rcx, qword [rsp + 0x380]
cmp word [rax + rcx*2], 0
jne 0x140184ac2
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x1400], rax
mov rax, qword [rsp + 0x1400]
mov qword [rsp + 0x1a70], rax
lea rax, [rsp + 0x1a68]
mov qword [rsp + 0x1408], rax
lea rax, [rsp + 0x1df0]
mov rdi, rax
mov rsi, qword [rsp + 0x1408]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x208]
mov dword [rsp + 0x508], eax
lea rax, [rsp + 0x1980]
lea rcx, [rsp + 0x1df0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x508]
mov dword [rsp + 0x220], eax
lea rax, [rsp + 0x210]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x210], 0x1b6e1b1e
lea rax, [rsp + 0x210]
mov qword [rsp + 0x1410], rax
lea rax, [rsp + 0x1e00]
lea rcx, [rsp + 0x1980]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1e10]
lea rcx, [rsp + 0x1e00]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1e10]
mov rcx, qword [rsp + 0x1410]
call fcn.140097890
mov dword [rsp + 0x50c], eax
mov rax, qword [rsp + 0x1988]
mov qword [rsp + 0x1418], rax
mov rax, qword [rsp + 0x1418]
sub rax, 4
mov qword [rsp + 0x1420], rax
mov r9, qword [rsp + 0x1420]
xor r8d, r8d
lea rdx, [rsp + 0x1e20]
lea rcx, [rsp + 0x1980]
call fcn.14019ab70
lea rax, [rsp + 0x214]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x214], 0x1b6e1b1e
lea rax, [rsp + 0x214]
mov qword [rsp + 0x1428], rax
lea rax, [rsp + 0x1e30]
lea rcx, [rsp + 0x1e20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1e40]
lea rcx, [rsp + 0x1e30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1e40]
mov rcx, qword [rsp + 0x1428]
call fcn.140097890
mov dword [rsp + 0x514], eax
mov eax, dword [rsp + 0x50c]
mov dword [rsp + 0x510], eax
mov eax, dword [rsp + 0x510]
cmp dword [rsp + 0x220], eax
jne 0x140184ce4
xor eax, eax
cmp eax, 1
je 0x140184ce4
mov dword [rsp + 0x218], 1
jmp 0x140184cef
mov dword [rsp + 0x218], 0
movzx eax, byte [rsp + 0x218]
mov byte [rsp + 0x8c], al
movzx eax, byte [rsp + 0x8c]
test eax, eax
jne 0x140184d6f
mov eax, dword [rsp + 0x514]
mov dword [rsp + 0x518], eax
mov eax, dword [rsp + 0x518]
cmp dword [rsp + 0x220], eax
jne 0x140184d3c
xor eax, eax
cmp eax, 1
je 0x140184d3c
mov dword [rsp + 0x228], 1
jmp 0x140184d47
mov dword [rsp + 0x228], 0
movzx eax, byte [rsp + 0x228]
mov byte [rsp + 0x8d], al
movzx eax, byte [rsp + 0x8d]
test eax, eax
jne 0x140184d6f
mov dword [rsp + 0x22c], 1
jmp 0x140184d7a
mov dword [rsp + 0x22c], 0
movzx eax, byte [rsp + 0x22c]
test eax, eax
je 0x140184d8b
jmp 0x14018498d
mov rax, qword [rsp + 0xbd0]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xbd8], rax
mov rax, qword [rsp + 0xbd8]
mov qword [rsp + 0x6e0], rax
mov rax, qword [rsp + 0xbd8]
mov qword [rsp + 0x1430], rax
mov rax, qword [rsp + 0x1430]
mov qword [rsp + 0xbe0], rax
mov rax, qword [rsp + 0xbe0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xbe0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1438], rax
mov eax, dword [rsp + 0x1438]
add rax, qword [rsp + 0x6e0]
mov qword [rsp + 0x1440], rax
mov rax, qword [rsp + 0x1440]
mov qword [rsp + 0x6e8], rax
mov eax, dword [rsp + 0x230]
mov dword [rsp + 0x51c], eax
mov eax, dword [rsp + 0x51c]
mov dword [rsp + 0x520], eax
lea rdx, [rsp + 0x27b8]
lea rcx, [rsp + 0x6e0]
call fcn.1401906d0
lea rcx, [rsp + 0x2440]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x27e0]
lea rcx, [rsp + 0x6e0]
call fcn.14018ec60
lea rcx, [rsp + 0x2468]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2490]
lea rcx, [rsp + 0x2440]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x24c0]
lea rcx, [rsp + 0x2468]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x520]
lea r8, [rsp + 0x2490]
lea rdx, [rsp + 0x24c0]
lea rcx, [rsp + 0x20f0]
call fcn.140097110
lea rdx, [rsp + 0x2808]
lea rcx, [rsp + 0x6e0]
call fcn.1401906d0
mov qword [rsp + 0xbe8], rax
mov rax, qword [rsp + 0xbe8]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x20f8], rax
jne 0x140184f40
mov rax, qword [rsp + 0xbe8]
mov rax, qword [rax]
cmp qword [rsp + 0x20f0], rax
jne 0x140184f40
mov dword [rsp + 0x238], 1
jmp 0x140184f4b
mov dword [rsp + 0x238], 0
movzx eax, byte [rsp + 0x238]
mov byte [rsp + 0x8e], al
movzx eax, byte [rsp + 0x8e]
test eax, eax
je 0x140184f6b
jmp 0x14018498d
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x140185031
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xbf8], rax
mov rax, qword [rsp + 0xbf8]
mov qword [rsp + 0xbf0], rax
mov rax, qword [rsp + 0xbf0]
mov qword [rax], 0
mov rax, qword [rsp + 0xbf0]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xbf8]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x2100]
mov qword [rsp + 0xc00], rax
mov rax, qword [rsp + 0xc00]
mov qword [rsp + 0x1b90], rax
mov rax, qword [rsp + 0xc00]
add rax, 0x10
mov qword [rsp + 0x660], rax
mov rax, qword [rsp + 0x660]
mov rax, qword [rax]
mov qword [rsp + 0xc20], rax
mov rax, qword [rsp + 0x6e0]
mov qword [rsp + 0x1448], rax
mov rax, qword [rsp + 0x1448]
mov qword [rsp + 0xc08], rax
mov rax, qword [rsp + 0xc08]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xc08]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xc10], rax
mov eax, dword [rsp + 0xc10]
add rax, qword [rsp + 0x6e0]
mov qword [rsp + 0xc18], rax
mov eax, dword [rsp + 0xc14]
mov rcx, qword [rsp + 0xc18]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1450], rax
mov rax, qword [rsp + 0xc18]
cmp qword [rsp + 0xc20], rax
jb 0x140185120
mov rax, qword [rsp + 0x1450]
cmp qword [rsp + 0xc20], rax
jae 0x140185120
mov dword [rsp + 0x23c], 1
jmp 0x14018512b
mov dword [rsp + 0x23c], 0
movzx eax, byte [rsp + 0x23c]
mov byte [rsp + 0x8f], al
movzx eax, byte [rsp + 0x8f]
test eax, eax
je 0x1401854cd
mov rax, qword [rsp + 0x660]
mov rax, qword [rax]
mov qword [rsp + 0x1458], rax
mov rax, qword [rsp + 0x1458]
mov qword [rsp + 0xc28], rax
lea rax, [rsp + 0x21e8]
mov qword [rsp + 0x650], rax
mov rax, qword [rsp + 0x650]
mov rcx, qword [rsp + 0xc28]
mov qword [rax], rcx
mov rax, qword [rsp + 0xc28]
mov qword [rsp + 0x1460], rax
mov qword [rsp + 0x388], 0xffffffffffffffff
inc qword [rsp + 0x388]
mov rax, qword [rsp + 0x1460]
mov rcx, qword [rsp + 0x388]
cmp byte [rax + rcx], 0
jne 0x1401851ac
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x1468], rax
mov rax, qword [rsp + 0x650]
mov rcx, qword [rsp + 0x1468]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x8b0]
mov rdi, rax
mov rsi, qword [rsp + 0x650]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x8b8]
mov rcx, qword [rsp + 0x8b0]
call fcn.140096220
mov qword [rsp + 0x658], rax
cmp qword [rsp + 0x658], 0xffffffffffffffff
je 0x1401852c0
mov r9, qword [rsp + 0x658]
xor r8d, r8d
lea rdx, [rsp + 0x1e50]
lea rcx, [rsp + 0x8b0]
call fcn.14019aaa0
mov rax, qword [rsp + 0x658]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1e60]
lea rcx, [rsp + 0x8b0]
call fcn.14019aaa0
lea rax, [rsp + 0x1b18]
lea rcx, [rsp + 0x1e50]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b28]
lea rcx, [rsp + 0x1e60]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x14018531f
lea rax, [rsp + 0x8b0]
mov qword [rsp + 0x1470], rax
mov qword [rsp + 0x1a78], 0
mov qword [rsp + 0x1a80], 0
lea rax, [rsp + 0x1b18]
mov rdi, rax
mov rsi, qword [rsp + 0x1470]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b28]
lea rcx, [rsp + 0x1a78]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b18]
mov qword [rsp + 0x1478], rax
lea rax, [rsp + 0x1b28]
mov qword [rsp + 0x1488], rax
lea rax, [rsp + 0xea0]
mov qword [rsp + 0xc30], rax
lea rax, [rsp + 0x240]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x240], 0x1b6e1b1e
lea rax, [rsp + 0x240]
mov qword [rsp + 0x1480], rax
lea rax, [rsp + 0x1e70]
mov rdi, rax
mov rsi, qword [rsp + 0x1478]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1e80]
lea rcx, [rsp + 0x1e70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1e80]
mov rcx, qword [rsp + 0x1480]
call fcn.1400977d0
mov dword [rsp + 0x528], eax
mov rax, qword [rsp + 0xc30]
mov ecx, dword [rsp + 0x528]
mov dword [rax], ecx
mov rax, qword [rsp + 0xc30]
mov eax, dword [rax]
mov dword [rsp + 0x538], eax
lea rax, [rsp + 0xea4]
mov qword [rsp + 0xc38], rax
lea rax, [rsp + 0x244]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x244], 0x1b6e1b1e
lea rax, [rsp + 0x244]
mov qword [rsp + 0x1490], rax
lea rax, [rsp + 0x1e90]
mov rdi, rax
mov rsi, qword [rsp + 0x1488]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ea0]
lea rcx, [rsp + 0x1e90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ea0]
mov rcx, qword [rsp + 0x1490]
call fcn.1400977d0
mov dword [rsp + 0x530], eax
mov rax, qword [rsp + 0xc38]
mov ecx, dword [rsp + 0x530]
mov dword [rax], ecx
mov rax, qword [rsp + 0xc38]
mov eax, dword [rax]
mov dword [rsp + 0x53c], eax
mov r8d, dword [rsp + 0x538]
mov edx, dword [rsp + 0x53c]
lea rcx, [rsp + 0x668]
call fcn.140191150
mov qword [rsp + 0x390], rax
jmp 0x1401854f3
mov rax, qword [rsp + 0x660]
mov rax, qword [rax]
mov qword [rsp + 0x390], rax
jmp 0x1401854f3
mov qword [rsp + 0x390], 0
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x668], rax
mov rax, qword [rsp + 0x2030]
mov qword [rsp + 0xc40], rax
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0xc40], rax
mov eax, dword [rsp + 0xde8]
mov dword [rsp + 0x540], eax
mov rax, qword [rsp + 0xc40]
mov qword [rsp + 0x14a8], rax
mov eax, dword [rsp + 0x540]
mov dword [rsp + 0x548], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1498], rax
mov rax, qword [rsp + 0x1498]
mov qword [rsp + 0x8c0], rax
mov byte [rsp + 0x8c8], 0
mov rax, qword [rsp + 0x8c0]
mov qword [rsp + 0x14a0], rax
mov rax, qword [rsp + 0x14a0]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x8c8], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x14b0], rax
lea r9, [rsp + 0x14a8]
lea r8, [rsp + 0x548]
lea rdx, [rsp + 0x21f8]
mov rcx, qword [rsp + 0x14b0]
call fcn.140098320
movzx eax, byte [rsp + 0x8c8]
test eax, eax
je 0x140185602
mov rax, qword [rsp + 0x8c0]
mov qword [rsp + 0x14b8], rax
mov rax, qword [rsp + 0x14b8]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x668]
mov qword [rsp + 0x14c0], rax
mov rax, qword [rsp + 0x14c0]
mov eax, dword [rax + 4]
mov dword [rsp + 0x550], eax
mov eax, dword [rsp + 0x550]
mov dword [rsp + 0xdec], eax
lea rax, [rsp + 0xdf0]
mov qword [rsp + 0x14c8], rax
mov eax, dword [rsp + 0xdec]
mov dword [rsp + 0x558], eax
mov rax, qword [rsp + 0x14c8]
add rax, 0x11
mov qword [rsp + 0x14d0], rax
mov eax, 6
mov rcx, qword [rsp + 0x14d0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x14d8], rax
mov rax, qword [rsp + 0x14d8]
mov ecx, dword [rsp + 0x558]
mov dword [rax], ecx
lea rax, [rsp + 0xdf0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
add rax, 0x10
mov qword [rsp + 0x2070], rax
mov rax, qword [0x1404d0cd8]
mov qword [rsp + 0x14e0], rax
mov qword [rsp + 0xc48], 0
mov qword [rsp + 0x14e8], 0xd
mov rax, qword [rsp + 0x14e0]
mov qword [rsp + 0x14f0], rax
mov eax, 0x3000
and eax, 0xffffffc0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x14e8]
xor r8d, r8d
lea rdx, [rsp + 0xc48]
mov rcx, 0xffffffffffffffff
call qword [rsp + 0x14f0]
mov dword [rsp + 0x560], eax
cmp dword [rsp + 0x560], 0
jl 0x140185743
mov rax, qword [rsp + 0xc48]
mov qword [rsp + 0xc50], rax
jmp 0x14018574f
mov qword [rsp + 0xc50], 0
mov rax, qword [rsp + 0xc50]
mov qword [rsp + 0x14f8], rax
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x14f8]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0xf0]
cmp qword [rax + 8], 0
jne 0x140185784
jmp 0x1401857cd
mov rax, qword [rsp + 0xf0]
add rax, 0x11
mov qword [rsp + 0x1500], rax
mov rax, qword [rsp + 0xf0]
mov rax, qword [rax + 8]
mov rdi, rax
mov rsi, qword [rsp + 0x1500]
mov ecx, reloc.WS2_32.dll_listen
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xf0]
mov rcx, qword [rcx + 8]
mov qword [rax], rcx
mov rax, qword [rsp + 0xdf0]
mov qword [rsp + 0x1510], rax
mov rcx, qword [rsp + 0x1508]
call qword [rsp + 0x1510]
mov dword [rsp + 0x564], eax
lea rax, [rsp + 0xdf0]
mov rcx, rax
call fcn.1400a0db0
mov eax, dword [rsp + 0x564]
mov dword [rsp + 0x568], eax
cmp dword [rsp + 0x568], 0
je 0x140186a2c
lea rax, [rsp + 0xe70]
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0x670]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0x670]
cmp qword [rax + 0x18], 7
jbe 0x14018585b
mov dword [rsp + 0x248], 1
jmp 0x140185866
mov dword [rsp + 0x248], 0
movzx eax, byte [rsp + 0x248]
mov byte [rsp + 0x90], al
movzx eax, byte [rsp + 0x90]
test eax, eax
je 0x1401858a4
mov rax, qword [rsp + 0x670]
mov rax, qword [rax]
mov qword [rsp + 0x1518], rax
mov rax, qword [rsp + 0x1518]
mov qword [rsp + 0xc58], rax
mov rax, qword [rsp + 0xc58]
mov qword [rsp + 0x1520], rax
mov rax, qword [rsp + 0x1520]
mov qword [rsp + 0x1528], rax
mov rax, qword [rsp + 0x1528]
mov qword [rsp + 0x16a0], rax
mov qword [rsp + 0x16a8], 0xffffffff80000002
mov dword [rsp + 0x56c], 0x11f6efa8
lea rax, [rsp + 0x188c]
mov qword [rsp + 0xc60], rax
mov rax, qword [rsp + 0xc60]
mov dword [rax], 0
mov rax, qword [rsp + 0xc60]
mov eax, dword [rax]
mov dword [rsp + 0x580], eax
mov eax, dword [rsp + 0x56c]
mov dword [rsp + 0xe0], eax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x570], eax
mov eax, dword [rsp + 0x570]
mov dword [rsp + 0x578], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xc68], rax
mov rax, qword [rsp + 0xc68]
mov qword [rsp + 0x1530], rax
mov rax, qword [rsp + 0x1530]
mov qword [rsp + 0x1990], rax
mov byte [rsp + 0x1998], 1
mov rax, qword [rsp + 0xc68]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1538], rax
lea r8, [rsp + 0x578]
lea rdx, [rsp + 0xc80]
mov rcx, qword [rsp + 0x1538]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1540], rax
mov rax, qword [rsp + 0x1540]
add rax, 8
mov qword [rsp + 0xc70], rax
mov rax, qword [rsp + 0x1b98]
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0xc70]
mov qword [rsp + 0xc78], rax
mov rax, qword [rsp + 0xc70]
mov rax, qword [rax]
mov qword [rsp + 0x1548], rax
mov r8, qword [rsp + 0xc78]
mov rdx, qword [rsp + 0x1548]
lea rcx, [rsp + 0x1550]
call fcn.14006f260
lea rax, [rsp + 0x1550]
mov qword [rsp + 0x1558], rax
mov rax, qword [rsp + 0x1558]
mov rax, qword [rax]
cmp qword [rsp + 0xc80], rax
jne 0x140185a65
mov dword [rsp + 0x24c], 1
jmp 0x140185a70
mov dword [rsp + 0x24c], 0
movzx eax, byte [rsp + 0x24c]
mov byte [rsp + 0x91], al
movzx eax, byte [rsp + 0x91]
test eax, eax
je 0x140185a99
mov qword [rsp + 0xc88], 0
jmp 0x140185b01
mov rax, qword [rsp + 0xc80]
add rax, 0x10
mov qword [rsp + 0x1560], rax
mov rax, qword [rsp + 0x1560]
mov qword [rsp + 0x1568], rax
mov rax, qword [rsp + 0x1568]
mov qword [rsp + 0x1570], rax
mov rax, qword [rsp + 0x1570]
mov qword [rsp + 0x1578], rax
mov rax, qword [rsp + 0x1578]
mov qword [rsp + 0x1580], rax
mov rax, qword [rsp + 0x1580]
mov rax, qword [rax + 8]
mov qword [rsp + 0xc88], rax
mov rax, qword [rsp + 0xc88]
mov qword [rsp + 0x1590], rax
movzx eax, byte [rsp + 0x1998]
test eax, eax
je 0x140185b3d
mov rax, qword [rsp + 0x1990]
mov qword [rsp + 0x1588], rax
mov rax, qword [rsp + 0x1588]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x1590]
mov qword [rsp + 0x3b8], rax
cmp qword [rsp + 0x3b8], 0
jne 0x140186958
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x588], eax
mov eax, dword [rsp + 0x580]
mov dword [rsp + 0x260], eax
mov eax, dword [rsp + 0x588]
mov dword [rsp + 0x288], eax
mov dword [rsp + 0x590], 0
mov eax, dword [rsp + 0x590]
cmp dword [rsp + 0x288], eax
jne 0x140185bb5
xor eax, eax
cmp eax, 1
je 0x140185bb5
mov dword [rsp + 0x250], 1
jmp 0x140185bc0
mov dword [rsp + 0x250], 0
movzx eax, byte [rsp + 0x250]
mov byte [rsp + 0x92], al
movzx eax, byte [rsp + 0x92]
test eax, eax
je 0x140185bec
mov qword [rsp + 0x3b0], 0
jmp 0x140186858
mov byte [rsp + 0xb9], 1
mov qword [rsp + 0xe50], 0
mov qword [rsp + 0xe58], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x1598], rax
mov rax, qword [rsp + 0x1598]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x15a0], rax
mov rax, qword [rsp + 0x15a0]
add rax, 0x10
mov qword [rsp + 0x678], rax
mov eax, 1
test eax, eax
je 0x140185c66
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xc90], rax
jmp 0x140185c79
mov rax, qword [rsp + 0x678]
mov rax, qword [rax]
mov qword [rsp + 0xc90], rax
mov rax, qword [rsp + 0xc90]
mov qword [rsp + 0xe50], rax
mov rax, qword [rsp + 0x678]
mov qword [rsp + 0xe58], rax
lea rax, [rsp + 0xe50]
mov qword [rsp + 0xc98], rax
mov rax, qword [rsp + 0xc98]
mov rax, qword [rax]
mov qword [rsp + 0x15a8], rax
mov rax, qword [rsp + 0x15a8]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0xc98]
mov rax, qword [rax + 8]
mov qword [rsp + 0x15b0], rax
mov rax, qword [rsp + 0x15b0]
mov qword [rsp + 0x15b8], rax
jmp 0x140185d05
mov rax, qword [rsp + 0x398]
mov rax, qword [rax]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x15b8]
cmp qword [rsp + 0x398], rax
je 0x140185d24
mov dword [rsp + 0x254], 1
jmp 0x140185d2f
mov dword [rsp + 0x254], 0
movzx eax, byte [rsp + 0x254]
test eax, eax
je 0x14018684c
xor eax, eax
mov qword [rsp + 0x15c0], rax
mov rax, qword [rsp + 0x15c0]
mov rcx, qword [rsp + 0x398]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x15c8], rax
lea rax, [rsp + 0x15c8]
mov qword [rsp + 0xca8], rax
mov dword [rsp + 0x594], 0
mov eax, dword [rsp + 0x594]
cmp dword [rsp + 0x260], eax
jne 0x140185da6
xor eax, eax
cmp eax, 1
je 0x140185da6
mov dword [rsp + 0x258], 1
jmp 0x140185db1
mov dword [rsp + 0x258], 0
movzx eax, byte [rsp + 0x258]
mov byte [rsp + 0x93], al
movzx eax, byte [rsp + 0x93]
test eax, eax
jne 0x1401860f0
mov rax, qword [rsp + 0xca8]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x15d0], rax
mov rax, qword [rsp + 0x15d0]
mov rax, qword [rax + 8]
mov qword [rsp + 0xca0], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x19f8], rax
mov rax, qword [rsp + 0xca0]
mov qword [rsp + 0x15d8], rax
mov qword [rsp + 0x3a0], 0xffffffffffffffff
inc qword [rsp + 0x3a0]
mov rax, qword [rsp + 0x15d8]
mov rcx, qword [rsp + 0x3a0]
cmp word [rax + rcx*2], 0
jne 0x140185e27
mov rax, qword [rsp + 0x3a0]
mov qword [rsp + 0x15e0], rax
mov rax, qword [rsp + 0x15e0]
mov qword [rsp + 0x1a00], rax
lea rax, [rsp + 0x19f8]
mov qword [rsp + 0x15e8], rax
lea rax, [rsp + 0x1eb0]
mov rdi, rax
mov rsi, qword [rsp + 0x15e8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x260]
mov dword [rsp + 0x598], eax
lea rax, [rsp + 0x19a0]
lea rcx, [rsp + 0x1eb0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x598]
mov dword [rsp + 0x278], eax
lea rax, [rsp + 0x268]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x268], 0x1b6e1b1e
lea rax, [rsp + 0x268]
mov qword [rsp + 0x15f0], rax
lea rax, [rsp + 0x1ec0]
lea rcx, [rsp + 0x19a0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1ed0]
lea rcx, [rsp + 0x1ec0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1ed0]
mov rcx, qword [rsp + 0x15f0]
call fcn.140097890
mov dword [rsp + 0x59c], eax
mov rax, qword [rsp + 0x19a8]
mov qword [rsp + 0x15f8], rax
mov rax, qword [rsp + 0x15f8]
sub rax, 4
mov qword [rsp + 0x1600], rax
mov r9, qword [rsp + 0x1600]
xor r8d, r8d
lea rdx, [rsp + 0x1ee0]
lea rcx, [rsp + 0x19a0]
call fcn.14019ab70
lea rax, [rsp + 0x26c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x26c], 0x1b6e1b1e
lea rax, [rsp + 0x26c]
mov qword [rsp + 0x1608], rax
lea rax, [rsp + 0x1ef0]
lea rcx, [rsp + 0x1ee0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f00]
lea rcx, [rsp + 0x1ef0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1f00]
mov rcx, qword [rsp + 0x1608]
call fcn.140097890
mov dword [rsp + 0x5a4], eax
mov eax, dword [rsp + 0x59c]
mov dword [rsp + 0x5a0], eax
mov eax, dword [rsp + 0x5a0]
cmp dword [rsp + 0x278], eax
jne 0x140186049
xor eax, eax
cmp eax, 1
je 0x140186049
mov dword [rsp + 0x270], 1
jmp 0x140186054
mov dword [rsp + 0x270], 0
movzx eax, byte [rsp + 0x270]
mov byte [rsp + 0x94], al
movzx eax, byte [rsp + 0x94]
test eax, eax
jne 0x1401860d4
mov eax, dword [rsp + 0x5a4]
mov dword [rsp + 0x5a8], eax
mov eax, dword [rsp + 0x5a8]
cmp dword [rsp + 0x278], eax
jne 0x1401860a1
xor eax, eax
cmp eax, 1
je 0x1401860a1
mov dword [rsp + 0x280], 1
jmp 0x1401860ac
mov dword [rsp + 0x280], 0
movzx eax, byte [rsp + 0x280]
mov byte [rsp + 0x95], al
movzx eax, byte [rsp + 0x95]
test eax, eax
jne 0x1401860d4
mov dword [rsp + 0x284], 1
jmp 0x1401860df
mov dword [rsp + 0x284], 0
movzx eax, byte [rsp + 0x284]
test eax, eax
je 0x1401860f0
jmp 0x140185cf2
mov rax, qword [rsp + 0xca8]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xcb0], rax
mov rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x6d0], rax
mov rax, qword [rsp + 0xcb0]
mov qword [rsp + 0x1610], rax
mov rax, qword [rsp + 0x1610]
mov qword [rsp + 0xcb8], rax
mov rax, qword [rsp + 0xcb8]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xcb8]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x1618], rax
mov eax, dword [rsp + 0x1618]
add rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x1620], rax
mov rax, qword [rsp + 0x1620]
mov qword [rsp + 0x6d8], rax
mov eax, dword [rsp + 0x288]
mov dword [rsp + 0x5ac], eax
mov eax, dword [rsp + 0x5ac]
mov dword [rsp + 0x5b0], eax
lea rdx, [rsp + 0x2830]
lea rcx, [rsp + 0x6d0]
call fcn.1401906d0
lea rcx, [rsp + 0x24f0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2858]
lea rcx, [rsp + 0x6d0]
call fcn.14018ec60
lea rcx, [rsp + 0x2518]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2540]
lea rcx, [rsp + 0x24f0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2570]
lea rcx, [rsp + 0x2518]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x5b0]
lea r8, [rsp + 0x2540]
lea rdx, [rsp + 0x2570]
lea rcx, [rsp + 0x2118]
call fcn.140097110
lea rdx, [rsp + 0x2880]
lea rcx, [rsp + 0x6d0]
call fcn.1401906d0
mov qword [rsp + 0xcc0], rax
mov rax, qword [rsp + 0xcc0]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x2120], rax
jne 0x1401862a5
mov rax, qword [rsp + 0xcc0]
mov rax, qword [rax]
cmp qword [rsp + 0x2118], rax
jne 0x1401862a5
mov dword [rsp + 0x290], 1
jmp 0x1401862b0
mov dword [rsp + 0x290], 0
movzx eax, byte [rsp + 0x290]
mov byte [rsp + 0x96], al
movzx eax, byte [rsp + 0x96]
test eax, eax
je 0x1401862d0
jmp 0x140185cf2
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x140186396
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xcd0], rax
mov rax, qword [rsp + 0xcd0]
mov qword [rsp + 0xcc8], rax
mov rax, qword [rsp + 0xcc8]
mov qword [rax], 0
mov rax, qword [rsp + 0xcc8]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xcd0]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x2128]
mov qword [rsp + 0xcd8], rax
mov rax, qword [rsp + 0xcd8]
mov qword [rsp + 0x2038], rax
mov rax, qword [rsp + 0xcd8]
add rax, 0x10
mov qword [rsp + 0x690], rax
mov rax, qword [rsp + 0x690]
mov rax, qword [rax]
mov qword [rsp + 0xcf8], rax
mov rax, qword [rsp + 0x6d0]
mov qword [rsp + 0x1628], rax
mov rax, qword [rsp + 0x1628]
mov qword [rsp + 0xce0], rax
mov rax, qword [rsp + 0xce0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xce0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xce8], rax
mov eax, dword [rsp + 0xce8]
add rax, qword [rsp + 0x6d0]
mov qword [rsp + 0xcf0], rax
mov eax, dword [rsp + 0xcec]
mov rcx, qword [rsp + 0xcf0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1630], rax
mov rax, qword [rsp + 0xcf0]
cmp qword [rsp + 0xcf8], rax
jb 0x140186485
mov rax, qword [rsp + 0x1630]
cmp qword [rsp + 0xcf8], rax
jae 0x140186485
mov dword [rsp + 0x294], 1
jmp 0x140186490
mov dword [rsp + 0x294], 0
movzx eax, byte [rsp + 0x294]
mov byte [rsp + 0x97], al
movzx eax, byte [rsp + 0x97]
test eax, eax
je 0x140186832
mov rax, qword [rsp + 0x690]
mov rax, qword [rax]
mov qword [rsp + 0x1638], rax
mov rax, qword [rsp + 0x1638]
mov qword [rsp + 0xd00], rax
lea rax, [rsp + 0x2208]
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0x680]
mov rcx, qword [rsp + 0xd00]
mov qword [rax], rcx
mov rax, qword [rsp + 0xd00]
mov qword [rsp + 0x1640], rax
mov qword [rsp + 0x3a8], 0xffffffffffffffff
inc qword [rsp + 0x3a8]
mov rax, qword [rsp + 0x1640]
mov rcx, qword [rsp + 0x3a8]
cmp byte [rax + rcx], 0
jne 0x140186511
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x1648], rax
mov rax, qword [rsp + 0x680]
mov rcx, qword [rsp + 0x1648]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x8d0]
mov rdi, rax
mov rsi, qword [rsp + 0x680]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x8d8]
mov rcx, qword [rsp + 0x8d0]
call fcn.140096220
mov qword [rsp + 0x688], rax
cmp qword [rsp + 0x688], 0xffffffffffffffff
je 0x140186625
mov r9, qword [rsp + 0x688]
xor r8d, r8d
lea rdx, [rsp + 0x1f10]
lea rcx, [rsp + 0x8d0]
call fcn.14019aaa0
mov rax, qword [rsp + 0x688]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1f20]
lea rcx, [rsp + 0x8d0]
call fcn.14019aaa0
lea rax, [rsp + 0x1b38]
lea rcx, [rsp + 0x1f10]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b48]
lea rcx, [rsp + 0x1f20]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140186684
lea rax, [rsp + 0x8d0]
mov qword [rsp + 0x1650], rax
mov qword [rsp + 0x1a98], 0
mov qword [rsp + 0x1aa0], 0
lea rax, [rsp + 0x1b38]
mov rdi, rax
mov rsi, qword [rsp + 0x1650]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b48]
lea rcx, [rsp + 0x1a98]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b38]
mov qword [rsp + 0x1658], rax
lea rax, [rsp + 0x1b48]
mov qword [rsp + 0x1668], rax
lea rax, [rsp + 0x1888]
mov qword [rsp + 0xd08], rax
lea rax, [rsp + 0x298]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x298], 0x1b6e1b1e
lea rax, [rsp + 0x298]
mov qword [rsp + 0x1660], rax
lea rax, [rsp + 0x1f30]
mov rdi, rax
mov rsi, qword [rsp + 0x1658]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f40]
lea rcx, [rsp + 0x1f30]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1f40]
mov rcx, qword [rsp + 0x1660]
call fcn.1400977d0
mov dword [rsp + 0x5b8], eax
mov rax, qword [rsp + 0xd08]
mov ecx, dword [rsp + 0x5b8]
mov dword [rax], ecx
mov rax, qword [rsp + 0xd08]
mov eax, dword [rax]
mov dword [rsp + 0x5c8], eax
lea rax, [rsp + 0x1884]
mov qword [rsp + 0xd10], rax
lea rax, [rsp + 0x29c]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x29c], 0x1b6e1b1e
lea rax, [rsp + 0x29c]
mov qword [rsp + 0x1670], rax
lea rax, [rsp + 0x1f50]
mov rdi, rax
mov rsi, qword [rsp + 0x1668]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f60]
lea rcx, [rsp + 0x1f50]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1f60]
mov rcx, qword [rsp + 0x1670]
call fcn.1400977d0
mov dword [rsp + 0x5c0], eax
mov rax, qword [rsp + 0xd10]
mov ecx, dword [rsp + 0x5c0]
mov dword [rax], ecx
mov rax, qword [rsp + 0xd10]
mov eax, dword [rax]
mov dword [rsp + 0x5cc], eax
mov r8d, dword [rsp + 0x5c8]
mov edx, dword [rsp + 0x5cc]
lea rcx, [rsp + 0xd18]
call fcn.140191150
mov qword [rsp + 0x3b0], rax
jmp 0x140186858
mov rax, qword [rsp + 0x690]
mov rax, qword [rax]
mov qword [rsp + 0x3b0], rax
jmp 0x140186858
mov qword [rsp + 0x3b0], 0
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0xd18], rax
mov rax, qword [rsp + 0xd18]
mov qword [rsp + 0x3b8], rax
mov eax, dword [rsp + 0xe0]
mov dword [rsp + 0x5d0], eax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x1688], rax
mov eax, dword [rsp + 0x5d0]
mov dword [rsp + 0x5d8], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1678], rax
mov rax, qword [rsp + 0x1678]
mov qword [rsp + 0x8e0], rax
mov byte [rsp + 0x8e8], 0
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x1680], rax
mov rax, qword [rsp + 0x1680]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x8e8], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1690], rax
lea r9, [rsp + 0x1688]
lea r8, [rsp + 0x5d8]
lea rdx, [rsp + 0x21c8]
mov rcx, qword [rsp + 0x1690]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x8e8]
test eax, eax
je 0x140186958
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x1698], rax
mov rax, qword [rsp + 0x1698]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0xd20], rax
mov byte [rsp + 0xba], 0
mov byte [rsp + 0xbb], 0
mov rax, qword [rsp + 0x16a0]
mov qword [rsp + 0x16b0], rax
mov byte [rsp + 0xbc], 0
mov byte [rsp + 0xbd], 0
mov rax, qword [rsp + 0x16a8]
mov qword [rsp + 0x16b8], rax
cmp qword [rsp + 0xd20], 0
jne 0x1401869c0
mov dword [rsp + 0x2a0], 0
jmp 0x1401869ee
mov rax, qword [rsp + 0xd20]
mov qword [rsp + 0x16c0], rax
mov rdx, qword [rsp + 0x16b0]
mov rcx, qword [rsp + 0x16b8]
call qword [rsp + 0x16c0]
mov dword [rsp + 0x2a0], eax
mov eax, dword [rsp + 0x2a0]
mov dword [rsp + 0xa4], eax
mov byte [rsp + 0x98], 0
lea rcx, [rsp + 0xe70]
call fcn.14018ddf0
nop
lea rcx, [rsp + 0x19d8]
call fcn.14018ddf0
movzx eax, byte [rsp + 0x98]
jmp 0x140187c6b
lea rax, [rsp + 0xe70]
mov qword [rsp + 0x698], rax
mov rax, qword [rsp + 0x698]
mov qword [rsp + 0xd28], rax
mov rax, qword [rsp + 0x698]
cmp qword [rax + 0x18], 7
jbe 0x140186a68
mov dword [rsp + 0x2a4], 1
jmp 0x140186a73
mov dword [rsp + 0x2a4], 0
movzx eax, byte [rsp + 0x2a4]
mov byte [rsp + 0x99], al
movzx eax, byte [rsp + 0x99]
test eax, eax
je 0x140186ab1
mov rax, qword [rsp + 0x698]
mov rax, qword [rax]
mov qword [rsp + 0x16c8], rax
mov rax, qword [rsp + 0x16c8]
mov qword [rsp + 0xd28], rax
mov rax, qword [rsp + 0xd28]
mov qword [rsp + 0x16d0], rax
mov rax, qword [rsp + 0x16d0]
mov qword [rsp + 0x16d8], rax
mov rax, qword [rsp + 0x16d8]
mov qword [rsp + 0x1850], rax
mov qword [rsp + 0x1858], 0xffffffff80000002
mov dword [rsp + 0x5e0], 0x11f6efa8
lea rax, [rsp + 0x1880]
mov qword [rsp + 0xd30], rax
mov rax, qword [rsp + 0xd30]
mov dword [rax], 0
mov rax, qword [rsp + 0xd30]
mov eax, dword [rax]
mov dword [rsp + 0x5f0], eax
mov eax, dword [rsp + 0x5e0]
mov dword [rsp + 0xe8], eax
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x5e4], eax
mov eax, dword [rsp + 0x5e4]
mov dword [rsp + 0x5e8], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0xd38], rax
mov rax, qword [rsp + 0xd38]
mov qword [rsp + 0x16e0], rax
mov rax, qword [rsp + 0x16e0]
mov qword [rsp + 0x19b0], rax
mov byte [rsp + 0x19b8], 1
mov rax, qword [rsp + 0xd38]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockShared
nop
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x16e8], rax
lea r8, [rsp + 0x5e8]
lea rdx, [rsp + 0xd50]
mov rcx, qword [rsp + 0x16e8]
call fcn.140096f50
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x16f0], rax
mov rax, qword [rsp + 0x16f0]
add rax, 8
mov qword [rsp + 0xd40], rax
mov rax, qword [rsp + 0x2040]
mov qword [rsp + 0xd48], rax
mov rax, qword [rsp + 0xd40]
mov qword [rsp + 0xd48], rax
mov rax, qword [rsp + 0xd40]
mov rax, qword [rax]
mov qword [rsp + 0x16f8], rax
mov r8, qword [rsp + 0xd48]
mov rdx, qword [rsp + 0x16f8]
lea rcx, [rsp + 0x1700]
call fcn.14006f260
lea rax, [rsp + 0x1700]
mov qword [rsp + 0x1708], rax
mov rax, qword [rsp + 0x1708]
mov rax, qword [rax]
cmp qword [rsp + 0xd50], rax
jne 0x140186c72
mov dword [rsp + 0x2a8], 1
jmp 0x140186c7d
mov dword [rsp + 0x2a8], 0
movzx eax, byte [rsp + 0x2a8]
mov byte [rsp + 0x9a], al
movzx eax, byte [rsp + 0x9a]
test eax, eax
je 0x140186ca6
mov qword [rsp + 0xd58], 0
jmp 0x140186d0e
mov rax, qword [rsp + 0xd50]
add rax, 0x10
mov qword [rsp + 0x1710], rax
mov rax, qword [rsp + 0x1710]
mov qword [rsp + 0x1718], rax
mov rax, qword [rsp + 0x1718]
mov qword [rsp + 0x1720], rax
mov rax, qword [rsp + 0x1720]
mov qword [rsp + 0x1728], rax
mov rax, qword [rsp + 0x1728]
mov qword [rsp + 0x1730], rax
mov rax, qword [rsp + 0x1730]
mov rax, qword [rax + 8]
mov qword [rsp + 0xd58], rax
mov rax, qword [rsp + 0xd58]
mov qword [rsp + 0x1740], rax
movzx eax, byte [rsp + 0x19b8]
test eax, eax
je 0x140186d4a
mov rax, qword [rsp + 0x19b0]
mov qword [rsp + 0x1738], rax
mov rax, qword [rsp + 0x1738]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockShared
mov rax, qword [rsp + 0x1740]
mov qword [rsp + 0x3e0], rax
cmp qword [rsp + 0x3e0], 0
jne 0x140187b65
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x5f8], eax
mov eax, dword [rsp + 0x5f0]
mov dword [rsp + 0x2b8], eax
mov eax, dword [rsp + 0x5f8]
mov dword [rsp + 0x2e0], eax
mov dword [rsp + 0x600], 0
mov eax, dword [rsp + 0x600]
cmp dword [rsp + 0x2e0], eax
jne 0x140186dc2
xor eax, eax
cmp eax, 1
je 0x140186dc2
mov dword [rsp + 0x2ac], 1
jmp 0x140186dcd
mov dword [rsp + 0x2ac], 0
movzx eax, byte [rsp + 0x2ac]
mov byte [rsp + 0x9b], al
movzx eax, byte [rsp + 0x9b]
test eax, eax
je 0x140186df9
mov qword [rsp + 0x3d8], 0
jmp 0x140187a65
mov byte [rsp + 0xbe], 1
mov qword [rsp + 0xe60], 0
mov qword [rsp + 0xe68], 0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x1748], rax
mov rax, qword [rsp + 0x1748]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x1750], rax
mov rax, qword [rsp + 0x1750]
add rax, 0x10
mov qword [rsp + 0x6a0], rax
mov eax, 1
test eax, eax
je 0x140186e73
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax]
mov rax, qword [rax]
mov qword [rsp + 0xd60], rax
jmp 0x140186e86
mov rax, qword [rsp + 0x6a0]
mov rax, qword [rax]
mov qword [rsp + 0xd60], rax
mov rax, qword [rsp + 0xd60]
mov qword [rsp + 0xe60], rax
mov rax, qword [rsp + 0x6a0]
mov qword [rsp + 0xe68], rax
lea rax, [rsp + 0xe60]
mov qword [rsp + 0xd68], rax
mov rax, qword [rsp + 0xd68]
mov rax, qword [rax]
mov qword [rsp + 0x1758], rax
mov rax, qword [rsp + 0x1758]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0xd68]
mov rax, qword [rax + 8]
mov qword [rsp + 0x1760], rax
mov rax, qword [rsp + 0x1760]
mov qword [rsp + 0x1768], rax
jmp 0x140186f12
mov rax, qword [rsp + 0x3c0]
mov rax, qword [rax]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x1768]
cmp qword [rsp + 0x3c0], rax
je 0x140186f31
mov dword [rsp + 0x2b0], 1
jmp 0x140186f3c
mov dword [rsp + 0x2b0], 0
movzx eax, byte [rsp + 0x2b0]
test eax, eax
je 0x140187a59
xor eax, eax
mov qword [rsp + 0x1770], rax
mov rax, qword [rsp + 0x1770]
mov rcx, qword [rsp + 0x3c0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1778], rax
lea rax, [rsp + 0x1778]
mov qword [rsp + 0xd78], rax
mov dword [rsp + 0x604], 0
mov eax, dword [rsp + 0x604]
cmp dword [rsp + 0x2b8], eax
jne 0x140186fb3
xor eax, eax
cmp eax, 1
je 0x140186fb3
mov dword [rsp + 0x2b4], 1
jmp 0x140186fbe
mov dword [rsp + 0x2b4], 0
movzx eax, byte [rsp + 0x2b4]
mov byte [rsp + 0x9c], al
movzx eax, byte [rsp + 0x9c]
test eax, eax
jne 0x1401872fd
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
add rax, 0x58
mov qword [rsp + 0x1780], rax
mov rax, qword [rsp + 0x1780]
mov rax, qword [rax + 8]
mov qword [rsp + 0xd70], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0x1aa8], rax
mov rax, qword [rsp + 0xd70]
mov qword [rsp + 0x1788], rax
mov qword [rsp + 0x3c8], 0xffffffffffffffff
inc qword [rsp + 0x3c8]
mov rax, qword [rsp + 0x1788]
mov rcx, qword [rsp + 0x3c8]
cmp word [rax + rcx*2], 0
jne 0x140187034
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x1790], rax
mov rax, qword [rsp + 0x1790]
mov qword [rsp + 0x1ab0], rax
lea rax, [rsp + 0x1aa8]
mov qword [rsp + 0x1798], rax
lea rax, [rsp + 0x1f70]
mov rdi, rax
mov rsi, qword [rsp + 0x1798]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x2b8]
mov dword [rsp + 0x608], eax
lea rax, [rsp + 0x19c0]
lea rcx, [rsp + 0x1f70]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov eax, dword [rsp + 0x608]
mov dword [rsp + 0x2d0], eax
lea rax, [rsp + 0x2c0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2c0], 0x1b6e1b1e
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x17a0], rax
lea rax, [rsp + 0x1f80]
lea rcx, [rsp + 0x19c0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1f90]
lea rcx, [rsp + 0x1f80]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1f90]
mov rcx, qword [rsp + 0x17a0]
call fcn.140097890
mov dword [rsp + 0x60c], eax
mov rax, qword [rsp + 0x19c8]
mov qword [rsp + 0x17a8], rax
mov rax, qword [rsp + 0x17a8]
sub rax, 4
mov qword [rsp + 0x17b0], rax
mov r9, qword [rsp + 0x17b0]
xor r8d, r8d
lea rdx, [rsp + 0x1fa0]
lea rcx, [rsp + 0x19c0]
call fcn.14019ab70
lea rax, [rsp + 0x2c4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2c4], 0x1b6e1b1e
lea rax, [rsp + 0x2c4]
mov qword [rsp + 0x17b8], rax
lea rax, [rsp + 0x1fb0]
lea rcx, [rsp + 0x1fa0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1fc0]
lea rcx, [rsp + 0x1fb0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x1fc0]
mov rcx, qword [rsp + 0x17b8]
call fcn.140097890
mov dword [rsp + 0x614], eax
mov eax, dword [rsp + 0x60c]
mov dword [rsp + 0x610], eax
mov eax, dword [rsp + 0x610]
cmp dword [rsp + 0x2d0], eax
jne 0x140187256
xor eax, eax
cmp eax, 1
je 0x140187256
mov dword [rsp + 0x2c8], 1
jmp 0x140187261
mov dword [rsp + 0x2c8], 0
movzx eax, byte [rsp + 0x2c8]
mov byte [rsp + 0x9d], al
movzx eax, byte [rsp + 0x9d]
test eax, eax
jne 0x1401872e1
mov eax, dword [rsp + 0x614]
mov dword [rsp + 0x618], eax
mov eax, dword [rsp + 0x618]
cmp dword [rsp + 0x2d0], eax
jne 0x1401872ae
xor eax, eax
cmp eax, 1
je 0x1401872ae
mov dword [rsp + 0x2d8], 1
jmp 0x1401872b9
mov dword [rsp + 0x2d8], 0
movzx eax, byte [rsp + 0x2d8]
mov byte [rsp + 0x9e], al
movzx eax, byte [rsp + 0x9e]
test eax, eax
jne 0x1401872e1
mov dword [rsp + 0x2dc], 1
jmp 0x1401872ec
mov dword [rsp + 0x2dc], 0
movzx eax, byte [rsp + 0x2dc]
test eax, eax
je 0x1401872fd
jmp 0x140186eff
mov rax, qword [rsp + 0xd78]
mov rax, qword [rax]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xd80], rax
mov rax, qword [rsp + 0xd80]
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0xd80]
mov qword [rsp + 0x17c0], rax
mov rax, qword [rsp + 0x17c0]
mov qword [rsp + 0xd88], rax
mov rax, qword [rsp + 0xd88]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xd88]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0x17c8], rax
mov eax, dword [rsp + 0x17c8]
add rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x17d0], rax
mov rax, qword [rsp + 0x17d0]
mov qword [rsp + 0x6c8], rax
mov eax, dword [rsp + 0x2e0]
mov dword [rsp + 0x61c], eax
mov eax, dword [rsp + 0x61c]
mov dword [rsp + 0x620], eax
lea rdx, [rsp + 0x28a8]
lea rcx, [rsp + 0x6c0]
call fcn.1401906d0
lea rcx, [rsp + 0x25a0]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x28d0]
lea rcx, [rsp + 0x6c0]
call fcn.14018ec60
lea rcx, [rsp + 0x25c8]
mov rdi, rcx
mov rsi, rax
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x25f0]
lea rcx, [rsp + 0x25a0]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2620]
lea rcx, [rsp + 0x25c8]
mov rdi, rax
mov rsi, rcx
mov ecx, Ordinal_41
rep movsb byte [rdi], byte [rsi]
mov r9d, dword [rsp + 0x620]
lea r8, [rsp + 0x25f0]
lea rdx, [rsp + 0x2620]
lea rcx, [rsp + 0x2140]
call fcn.140097110
lea rdx, [rsp + 0x28f8]
lea rcx, [rsp + 0x6c0]
call fcn.1401906d0
mov qword [rsp + 0xd90], rax
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax + 8]
cmp qword [rsp + 0x2148], rax
jne 0x1401874b2
mov rax, qword [rsp + 0xd90]
mov rax, qword [rax]
cmp qword [rsp + 0x2140], rax
jne 0x1401874b2
mov dword [rsp + 0x2e8], 1
jmp 0x1401874bd
mov dword [rsp + 0x2e8], 0
movzx eax, byte [rsp + 0x2e8]
mov byte [rsp + 0x9f], al
movzx eax, byte [rsp + 0x9f]
test eax, eax
je 0x1401874dd
jmp 0x140186eff
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
and eax, 1
test eax, eax
jne 0x1401875a3
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rcx + rax]
or eax, 1
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
mov edi, reloc.WLDAP32.dll_Ordinal_32
mov edi, edi
mov rcx, qword [rdx + rcx*8]
mov dword [rdi + rcx], eax
mov eax, 8
mov eax, eax
mov ecx, dword [0x1404d6060]
mov rdx, qword gs:[0x58]
add rax, qword [rdx + rcx*8]
mov qword [rsp + 0xda0], rax
mov rax, qword [rsp + 0xda0]
mov qword [rsp + 0xd98], rax
mov rax, qword [rsp + 0xd98]
mov qword [rax], 0
mov rax, qword [rsp + 0xd98]
mov qword [rax + 8], 0
mov rax, qword [rsp + 0xda0]
mov qword [rax + 0x10], 0
lea rax, [rsp + 0x2150]
mov qword [rsp + 0xda8], rax
mov rax, qword [rsp + 0xda8]
mov qword [rsp + 0x2048], rax
mov rax, qword [rsp + 0xda8]
add rax, 0x10
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x6b8]
mov rax, qword [rax]
mov qword [rsp + 0xdc8], rax
mov rax, qword [rsp + 0x6c0]
mov qword [rsp + 0x17d8], rax
mov rax, qword [rsp + 0x17d8]
mov qword [rsp + 0xdb0], rax
mov rax, qword [rsp + 0xdb0]
mov eax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0xdb0]
mov rax, qword [rcx + rax + 0x88]
mov qword [rsp + 0xdb8], rax
mov eax, dword [rsp + 0xdb8]
add rax, qword [rsp + 0x6c0]
mov qword [rsp + 0xdc0], rax
mov eax, dword [rsp + 0xdbc]
mov rcx, qword [rsp + 0xdc0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x17e0], rax
mov rax, qword [rsp + 0xdc0]
cmp qword [rsp + 0xdc8], rax
jb 0x140187692
mov rax, qword [rsp + 0x17e0]
cmp qword [rsp + 0xdc8], rax
jae 0x140187692
mov dword [rsp + 0x2ec], 1
jmp 0x14018769d
mov dword [rsp + 0x2ec], 0
movzx eax, byte [rsp + 0x2ec]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0xa0]
test eax, eax
je 0x140187a3f
mov rax, qword [rsp + 0x6b8]
mov rax, qword [rax]
mov qword [rsp + 0x17e8], rax
mov rax, qword [rsp + 0x17e8]
mov qword [rsp + 0xdd0], rax
lea rax, [rsp + 0x2168]
mov qword [rsp + 0x6a8], rax
mov rax, qword [rsp + 0x6a8]
mov rcx, qword [rsp + 0xdd0]
mov qword [rax], rcx
mov rax, qword [rsp + 0xdd0]
mov qword [rsp + 0x17f0], rax
mov qword [rsp + 0x3d0], 0xffffffffffffffff
inc qword [rsp + 0x3d0]
mov rax, qword [rsp + 0x17f0]
mov rcx, qword [rsp + 0x3d0]
cmp byte [rax + rcx], 0
jne 0x14018771e
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x17f8], rax
mov rax, qword [rsp + 0x6a8]
mov rcx, qword [rsp + 0x17f8]
mov qword [rax + 8], rcx
lea rax, [rsp + 0x8f0]
mov rdi, rax
mov rsi, qword [rsp + 0x6a8]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r9b, reloc.WLDAP32.dll_Ordinal_46
xor r8d, r8d
mov rdx, qword [rsp + 0x8f8]
mov rcx, qword [rsp + 0x8f0]
call fcn.140096220
mov qword [rsp + 0x6b0], rax
cmp qword [rsp + 0x6b0], 0xffffffffffffffff
je 0x140187832
mov r9, qword [rsp + 0x6b0]
xor r8d, r8d
lea rdx, [rsp + 0x1fd0]
lea rcx, [rsp + 0x8f0]
call fcn.14019aaa0
mov rax, qword [rsp + 0x6b0]
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0x1fe0]
lea rcx, [rsp + 0x8f0]
call fcn.14019aaa0
lea rax, [rsp + 0x1b58]
lea rcx, [rsp + 0x1fd0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b68]
lea rcx, [rsp + 0x1fe0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
jmp 0x140187891
lea rax, [rsp + 0x8f0]
mov qword [rsp + 0x1800], rax
mov qword [rsp + 0x1a88], 0
mov qword [rsp + 0x1a90], 0
lea rax, [rsp + 0x1b58]
mov rdi, rax
mov rsi, qword [rsp + 0x1800]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b68]
lea rcx, [rsp + 0x1a88]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x1b58]
mov qword [rsp + 0x1808], rax
lea rax, [rsp + 0x1b68]
mov qword [rsp + 0x1818], rax
lea rax, [rsp + 0x187c]
mov qword [rsp + 0xdd8], rax
lea rax, [rsp + 0x2f0]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2f0], 0x1b6e1b1e
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0x1810], rax
lea rax, [rsp + 0x1ff0]
mov rdi, rax
mov rsi, qword [rsp + 0x1808]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2000]
lea rcx, [rsp + 0x1ff0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2000]
mov rcx, qword [rsp + 0x1810]
call fcn.1400977d0
mov dword [rsp + 0x628], eax
mov rax, qword [rsp + 0xdd8]
mov ecx, dword [rsp + 0x628]
mov dword [rax], ecx
mov rax, qword [rsp + 0xdd8]
mov eax, dword [rax]
mov dword [rsp + 0x638], eax
lea rax, [rsp + 0x1878]
mov qword [rsp + 0xde0], rax
lea rax, [rsp + 0x2f4]
mov rdi, rax
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
mov dword [rsp + 0x2f4], 0x1b6e1b1e
lea rax, [rsp + 0x2f4]
mov qword [rsp + 0x1820], rax
lea rax, [rsp + 0x2010]
mov rdi, rax
mov rsi, qword [rsp + 0x1818]
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x2020]
lea rcx, [rsp + 0x2010]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x2020]
mov rcx, qword [rsp + 0x1820]
call fcn.1400977d0
mov dword [rsp + 0x630], eax
mov rax, qword [rsp + 0xde0]
mov ecx, dword [rsp + 0x630]
mov dword [rax], ecx
mov rax, qword [rsp + 0xde0]
mov eax, dword [rax]
mov dword [rsp + 0x63c], eax
mov r8d, dword [rsp + 0x638]
mov edx, dword [rsp + 0x63c]
lea rcx, [rsp + 0x840]
call fcn.140191150
mov qword [rsp + 0x3d8], rax
jmp 0x140187a65
mov rax, qword [rsp + 0x6b8]
mov rax, qword [rax]
mov qword [rsp + 0x3d8], rax
jmp 0x140187a65
mov qword [rsp + 0x3d8], 0
mov rax, qword [rsp + 0x3d8]
mov qword [rsp + 0x840], rax
mov rax, qword [rsp + 0x840]
mov qword [rsp + 0x3e0], rax
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x640], eax
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x1838], rax
mov eax, dword [rsp + 0x640]
mov dword [rsp + 0x648], eax
lea rax, [0x1404d0cf0]
mov qword [rsp + 0x1828], rax
mov rax, qword [rsp + 0x1828]
mov qword [rsp + 0x900], rax
mov byte [rsp + 0x908], 0
mov rax, qword [rsp + 0x900]
mov qword [rsp + 0x1830], rax
mov rax, qword [rsp + 0x1830]
mov rcx, rax
call sub.KERNEL32.dll_AcquireSRWLockExclusive
mov byte [rsp + 0x908], 1
lea rax, [0x1404d0cf0]
add rax, 8
mov qword [rsp + 0x1840], rax
lea r9, [rsp + 0x1838]
lea r8, [rsp + 0x648]
lea rdx, [rsp + 0x2178]
mov rcx, qword [rsp + 0x1840]
call fcn.140098320
nop
movzx eax, byte [rsp + 0x908]
test eax, eax
je 0x140187b65
mov rax, qword [rsp + 0x900]
mov qword [rsp + 0x1848], rax
mov rax, qword [rsp + 0x1848]
mov rcx, rax
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
mov rax, qword [rsp + 0x3e0]
mov qword [rsp + 0x848], rax
mov byte [rsp + 0xbf], 0
mov byte [rsp + 0xc0], 0
mov rax, qword [rsp + 0x1850]
mov qword [rsp + 0x1860], rax
mov byte [rsp + 0xc1], 0
mov byte [rsp + 0xc2], 0
mov rax, qword [rsp + 0x1858]
mov qword [rsp + 0x1868], rax
cmp qword [rsp + 0x848], 0
jne 0x140187bcd
mov dword [rsp + 0x2f8], 0
jmp 0x140187bfb
mov rax, qword [rsp + 0x848]
mov qword [rsp + 0x1870], rax
mov rdx, qword [rsp + 0x1860]
mov rcx, qword [rsp + 0x1868]
call qword [rsp + 0x1870]
mov dword [rsp + 0x2f8], eax
mov eax, dword [rsp + 0x2f8]
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0
je 0x140187c40
mov byte [rsp + 0xa1], 0
lea rcx, [rsp + 0xe70]
call fcn.14018ddf0
nop
lea rcx, [rsp + 0x19d8]
call fcn.14018ddf0
movzx eax, byte [rsp + 0xa1]
jmp 0x140187c6b
mov byte [rsp + 0xa2], 1
lea rcx, [rsp + 0xe70]
call fcn.14018ddf0
nop
lea rcx, [rsp + 0x19d8]
call fcn.14018ddf0
movzx eax, byte [rsp + 0xa2]
add rsp, 0x2928
pop rdi
pop rsi
ret