Function at 0x4d9a50
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov rax, rsp
sub rsp, 0x1c8
mov qword [rax - 8], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
mov r15, qword [rcx]
xor eax, eax
mov rdi, r9
mov rbx, r8
cmp dword [rcx + 0x4c], eax
mov qword [rsp + 0xb8], r15
mov rbp, rdx
mov r12, rcx
mov dword [rsp + 0xe0], eax
mov r13, rax
mov rsi, rax
mov qword [rsp + 0xd8], rax
mov dword [rsp + 0xc8], eax
mov dword [rsp + 0xd4], eax
mov dword [rsp + 0xf0], eax
mov dword [rsp + 0xc4], eax
mov dword [rsp + 0x70], eax
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x118], rax
jne 0x4dc74e
cmp byte [r15 + 0x50], al
jne 0x4dc74e
call fcn.004c3110
test rax, rax
mov rbp, rax
mov qword [rsp + 0x80], rax
je 0x4dc73e
mov rdx, qword [rbp + 0x70]
mov rax, qword [r12]
mov r14d, 0xfff0bdc0
test rdx, rdx
je 0x4d9b51
mov ecx, dword [rax + 0x28]
xor r14d, r14d
test ecx, ecx
jle 0x4d9b51
mov rax, qword [rax + 0x20]
add rax, 0x18
nop
cmp qword [rax], rdx
je 0x4d9b51
inc r14d
add rax, 0x20
cmp r14d, ecx
jl 0x4d9b40
lea rax, [rsp + 0x108]
mov r9, rbx
mov r8d, WSAGetLastError
mov rdx, rbp
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.00436220
mov rdx, rbp
mov rcx, r12
mov qword [rsp + 0x100], rax
xor eax, eax
cmp qword [rbp + 0x18], rax
setne al
mov dword [rsp + 0xf8], eax
call fcn.0048ff30
test eax, eax
jne 0x4dc72c
mov r8d, dword [rsp + 0x108]
mov rdx, rbp
mov rcx, r12
call fcn.0046a400
test eax, eax
jne 0x4dc71a
mov r8d, dword [r12 + 0x50]
mov r9, qword [rsp + 0x1d8]
mov dword [r9 + 0x50], r8d
inc dword [r12 + 0x50]
test byte [rbp + 0x48], 0x20
mov edx, dword [r12 + 0x50]
lea eax, [r8 + 1]
mov dword [rsp + 0x64], r8d
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x6c], r8d
jne 0x4d9bfb
xor r8d, r8d
mov qword [rsp + 0xa8], r8
jmp 0x4d9c0e
mov rcx, rbp
call fcn.00432c60
mov r8, rax
mov qword [rsp + 0xa8], rax
mov rcx, qword [rbp + 0x10]
xor ebx, ebx
test rcx, rcx
je 0x4d9c4b
nop
nop
mov eax, dword [rcx + 0x64]
and al, 3
cmp al, 2
jne 0x4d9c36
test r8, r8
je 0x4d9c36
mov dword [rsp + 0x64], edx
mov dword [r9 + 0x50], edx
inc dword [r12 + 0x50]
mov rcx, qword [rcx + 0x28]
mov edx, dword [r12 + 0x50]
inc ebx
test rcx, rcx
jne 0x4d9c20
movsx eax, word [rbp + 0x42]
movsxd rdi, ebx
mov rcx, r15
add eax, ebx
cdqe
lea rdx, [rdi + rax*4 + 2]
call fcn.0043b030
test rax, rax
mov r13, rax
mov qword [rsp + 0x78], rax
je 0x4dc653
movsx rcx, word [rbp + 0x42]
mov edx, 1
lea rax, [rax + rcx*4]
mov qword [rsp + 0x120], rax
lea r15, [rax + rdi*4]
lea eax, [rbx + 1]
cdqe
mov rcx, r15
mov qword [rsp + 0xe8], r15
mov r8, rax
mov qword [rsp + 0x110], rax
call sub.msvcrt.dll_memset
xor edx, edx
mov byte [rdi + r15 + 1], 0
cmp word [rbp + 0x42], dx
jle 0x4d9cd4
mov rcx, r13
nop
mov dword [rcx], 0xffffffff
movsx eax, word [rbp + 0x42]
inc edx
add rcx, 4
cmp edx, eax
jl 0x4d9cc0
mov rbx, qword [rsp + 0x1e0]
xor eax, eax
xor bpl, bpl
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rax
xor dil, dil
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x1d8]
xor r13d, r13d
mov qword [rsp + 0x140], r12
mov dword [rsp + 0xa0], ebp
cmp dword [rbx], r13d
mov qword [rsp + 0x148], rax
mov byte [rsp + 0x60], dil
movsxd r15, r14d
jle 0x4da0e1
xor r12d, r12d
nop
nop
nop
nop
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x140]
mov rdx, qword [r12 + rdx]
call fcn.0047fd70
test eax, eax
jne 0x4dc6f3
mov r8, qword [rsp + 0x80]
xor r10d, r10d
xor ebx, ebx
movsx r11d, word [r8 + 0x42]
test r11d, r11d
jle 0x4d9ec8
mov rsi, qword [rsp + 0x1e0]
mov rbp, qword [r8 + 8]
mov rsi, qword [rsi + 8]
mov r9, rbp
mov rdi, qword [r12 + rsi + 8]
mov r8, qword [r9]
mov rdx, rdi
movzx eax, byte [r8]
test al, al
je 0x4d9df2
lea r15, [0x0069aea0]
nop
nop
nop
movzx ecx, al
movzx eax, byte [rdx]
movzx eax, byte [rax + r15]
cmp byte [rcx + r15], al
jne 0x4d9def
mov al, byte [r8 + 1]
inc r8
inc rdx
test al, al
jne 0x4d9dd0
movsxd r15, r14d
movzx eax, byte [rdx]
lea rdx, [0x0069aea0]
movzx ecx, byte [rax + rdx]
movzx eax, byte [r8]
movzx eax, byte [rax + rdx]
sub eax, ecx
je 0x4d9e3c
inc r10d
inc rbx
add r9, 0x30
cmp r10d, r11d
jl 0x4d9db0
mov rsi, qword [rsp + 0xd8]
mov ebp, dword [rsp + 0xa0]
movzx edi, byte [rsp + 0x60]
mov r8, qword [rsp + 0x80]
jmp 0x4d9ec8
mov r8, qword [rsp + 0x80]
movsx eax, word [r8 + 0x40]
cmp r10d, eax
jne 0x4d9e6b
mov rsi, qword [r12 + rsi]
mov ebp, dword [rsp + 0xa0]
mov dil, 1
mov qword [rsp + 0xd8], rsi
mov byte [rsp + 0x60], dil
jmp 0x4d9ebf
cmp qword [rsp + 0xa8], 0
je 0x4d9eab
mov rsi, qword [rsp + 0xd8]
mov dil, byte [rsp + 0x60]
lea rax, [rbx + rbx*2]
add rax, rax
test byte [rbp + rax*8 + 0x2b], 1
mov ebp, dword [rsp + 0xa0]
mov eax, 1
movzx ebp, bpl
cmovne ebp, eax
mov dword [rsp + 0xa0], ebp
jmp 0x4d9ebf
mov rsi, qword [rsp + 0xd8]
mov ebp, dword [rsp + 0xa0]
mov dil, byte [rsp + 0x60]
mov rax, qword [rsp + 0x78]
mov dword [rax + rbx*4], r13d
movsx eax, word [r8 + 0x42]
cmp r10d, eax
jl 0x4da012
cmp qword [rsp + 0xa8], 0
jne 0x4da25e
mov rax, qword [rsp + 0x1e0]
lea rdx, str._ROWID_
mov r11, qword [rax + 8]
mov r10, qword [r12 + r11 + 8]
mov r8, r10
movzx r9d, byte [r10]
test r9b, r9b
je 0x4d9f3f
movzx eax, r9b
lea rbx, [0x0069aea0]
nop
nop
nop
movzx ecx, al
movzx eax, byte [rdx]
movzx eax, byte [rax + rbx]
cmp byte [rcx + rbx], al
jne 0x4d9f46
mov al, byte [r8 + 1]
inc r8
inc rdx
test al, al
jne 0x4d9f20
jmp 0x4d9f46
lea rbx, [0x0069aea0]
movzx eax, byte [rdx]
movzx ecx, byte [rax + rbx]
movzx eax, byte [r8]
movzx eax, byte [rax + rbx]
sub eax, ecx
je 0x4d9fe6
test r9b, r9b
mov r8, r10
lea rdx, str.ROWID
je 0x4d9f8d
movzx eax, r9b
movzx ecx, al
movzx eax, byte [rdx]
movzx eax, byte [rax + rbx]
cmp byte [rcx + rbx], al
jne 0x4d9f8d
mov al, byte [r8 + 1]
inc r8
inc rdx
test al, al
jne 0x4d9f70
movzx eax, byte [r8]
movzx ecx, byte [rax + rbx]
movzx eax, byte [rdx]
movzx eax, byte [rax + rbx]
cmp ecx, eax
je 0x4d9fe6
test r9b, r9b
lea rdx, [0x006a0a60]
je 0x4d9fcf
nop
movzx eax, byte [rdx]
movzx ecx, r9b
movzx eax, byte [rax + rbx]
cmp byte [rcx + rbx], al
jne 0x4d9fcf
mov r9b, byte [r10 + 1]
inc r10
inc rdx
test r9b, r9b
jne 0x4d9fb0
movzx eax, byte [rdx]
movzx ecx, byte [rax + rbx]
movzx eax, byte [r10]
movzx eax, byte [rax + rbx]
cmp eax, ecx
jne 0x4da25e
mov rsi, qword [r12 + r11]
mov r8, qword [rsp + 0x80]
mov dil, 1
mov rbx, 0xffffffffffffffff
mov byte [rsp + 0x60], dil
lea r9, str.ROWID
mov qword [rsp + 0xd8], rsi
jmp 0x4da02f
test rbx, rbx
jns 0x4da020
lea r9, str.ROWID
jmp 0x4da02f
mov rax, qword [r8 + 8]
lea rcx, [rbx + rbx*2]
add rcx, rcx
mov r9, qword [rax + rcx*8]
mov rax, qword [rsp + 0xb8]
mov rcx, r15
mov rax, qword [rax + 0x20]
shl rcx, 5
mov rdx, qword [rcx + rax]
mov rax, qword [rsp + 0x1d0]
mov rcx, qword [rax]
cmp byte [rcx + 0xa1], 0
jne 0x4da0b9
cmp byte [rax + 0x1f3], 0
jne 0x4da0b9
mov r10, qword [rcx + 0x178]
test r10, r10
je 0x4da0b9
mov rax, qword [rax + 0x230]
mov r8, qword [r8]
mov rcx, qword [rcx + 0x180]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
mov edx, reloc.WS2_32.dll_socket
call r10
cmp eax, 1
je 0x4da1bd
test eax, eax
je 0x4da0a8
cmp eax, 2
jne 0x4da20d
cmp eax, 2
jne 0x4da0b9
mov rax, qword [rsp + 0x78]
mov dword [rax + rbx*4], 0xffffffff
mov rbx, qword [rsp + 0x1e0]
inc r13d
add r12, 0x28
cmp r13d, dword [rbx]
jl 0x4d9d60
mov r12, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0x1d8]
mov rbx, qword [rsp + 0x80]
mov r8, qword [rsp + 0x78]
lea r13d, [rdi + rbp]
mov qword [rax + 0x68], 0
movzx eax, r13b
mov rdx, rbx
mov rcx, r12
mov r9d, eax
mov byte [rsp + 0x61], r13b
mov dword [rsp + 0x10c], eax
call fcn.00434ae0
mov r9, qword [rbx + 0x10]
movsxd r12, eax
xor r11d, r11d
test r9, r9
mov dword [rsp + 0xb0], r12d
mov rbx, r12
je 0x4da300
mov rdi, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x1d0]
mov r12, qword [rsp + 0xa8]
mov r15, qword [rsp + 0xe8]
test r13b, r13b
jne 0x4da2cc
test rbx, rbx
jne 0x4da2cc
cmp qword [r9 + 0x48], rbx
jne 0x4da2cc
cmp r9, r12
je 0x4da2cc
movzx r8d, word [r9 + 0x5e]
xor r10d, r10d
xor edx, edx
test r8d, r8d
jle 0x4da2d8
mov rcx, qword [r9 + 8]
mov rbp, qword [rsp + 0x78]
movsx rax, word [rcx]
cmp dword [rbp + rax*4], r10d
mov ebp, dword [rsp + 0xa0]
jge 0x4da2c3
inc edx
add rcx, 2
cmp edx, r8d
jl 0x4da192
jmp 0x4da2d8
mov rbx, qword [rsp + 0x1d0]
lea rdx, str.not_authorized
mov rcx, rbx
call fcn.00462100
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
mov dword [rbx + 0x18], reloc.WS2_32.dll_socket
mov rbx, qword [rsp + 0x1e0]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1d0]
lea rdx, str.authorizer_malfunction
mov rcx, rbx
call fcn.00462100
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov eax, 1
mov dword [rbx + 0x18], eax
mov rbx, qword [rsp + 0x1e0]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1d0]
movsxd rax, r13d
lea rdx, str.no_such_column:__s
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x1e0]
mov r8, qword [rax + 8]
mov r8, qword [r8 + rcx*8 + 8]
mov rcx, rbx
call fcn.00462100
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
mov byte [rbx + 0x1d], 1
mov rbx, qword [rsp + 0x1e0]
jmp 0x4dc74e
inc dword [rsi + 0x54]
mov r10d, dword [rsi + 0x54]
jmp 0x4da2d3
inc dword [rsi + 0x54]
mov r10d, dword [rsi + 0x54]
test r10d, r10d
jne 0x4da2de
mov byte [r11 + r15 + 1], 0
mov dword [rdi + r11*4], r10d
mov r9, qword [r9 + 0x28]
inc r11
test r9, r9
jne 0x4da156
mov rsi, qword [rsp + 0xd8]
movsxd r15, r14d
mov r12d, ebx
mov r10, qword [rsp + 0x1d0]
mov r13, qword [r10 + 0x10]
test r13, r13
mov qword [rsp + 0x88], r13
jne 0x4da3b4
mov rcx, r10
call fcn.0044f4c0
mov rcx, qword [rsp + 0x1d0]
test rax, rax
mov qword [rcx + 0x10], rax
mov r13, rax
mov qword [rsp + 0x88], rax
je 0x4da38b
movsxd rbx, dword [rax + 0x3c]
mov rax, qword [rax + 0x30]
cmp dword [rax + 0x60], ebx
jg 0x4da35f
mov edx, 1
mov rcx, r13
call fcn.00441a80
test eax, eax
jne 0x4da38b
inc dword [r13 + 0x3c]
mov rax, qword [r13 + 8]
lea rcx, [rbx + rbx*2]
xor edx, edx
mov byte [rax + rcx*8], 0x99
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
mov r10, qword [rsp + 0x1d0]
cmp qword [r10 + 0x1c0], 0
jne 0x4da3ab
mov rax, qword [r10]
test byte [rax + 0x4c], 8
jne 0x4da3ab
mov byte [r10 + 0x23], 1
test r13, r13
je 0x4dc621
cmp byte [r10 + 0x1e], 0
jne 0x4da3c3
or dword [r13 + 0x8c], 0x10
mov rax, qword [r10 + 0x1c0]
mov rbx, r10
mov r9, r10
test rax, rax
mov ecx, r14d
mov edi, 1
cmovne rbx, rax
test rax, rax
cmovne r9, rax
shl edi, cl
mov edx, dword [r9 + 0x16c]
test edx, edi
jne 0x4da431
mov eax, edi
mov r8, r15
or eax, edx
shl r8, 5
cmp r14d, 1
mov dword [r9 + 0x16c], eax
mov rax, qword [r9]
mov rdx, qword [rax + 0x20]
mov rax, qword [r8 + rdx + 0x18]
mov edx, dword [rax]
mov dword [r9 + r15*4 + 0x170], edx
jne 0x4da431
mov rcx, r9
call fcn.004a7960
mov r10, qword [rsp + 0x1d0]
or dword [rbx + 0x168], edi
or byte [rbx + 0x20], 1
mov rbx, qword [rsp + 0x80]
test byte [rbx + 0x48], 0x10
je 0x4da4ac
mov eax, dword [rsp + 0x1f0]
mov r13, qword [rsp + 0x78]
mov r9, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x1d8]
mov dword [rsp + 0x38], eax
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x30], rax
mov r8, rbx
mov rcx, r10
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rsi
call fcn.004ccd30
mov rbx, qword [rsp + 0x1e0]
mov r15, qword [rsp + 0xb8]
mov rax, qword [rsp + 0x90]
xor edi, edi
xor ebp, ebp
jmp 0x4dc74e
mov r15d, dword [r10 + 0x54]
inc r15d
test bpl, bpl
lea edx, [r15 + 1]
mov dword [rsp + 0xf4], r15d
mov dword [rsp + 0x9c], edx
mov dword [r10 + 0x54], edx
mov r14d, edx
mov dword [rsp + 0x68], edx
jne 0x4da4e8
mov rax, qword [rsp + 0x100]
test rax, rax
jne 0x4da4e8
test r12d, r12d
je 0x4da504
lea eax, [rdx + 1]
mov dword [rsp + 0xc4], eax
movsx eax, word [rbx + 0x42]
add eax, edx
mov dword [r10 + 0x54], eax
mov rax, qword [rsp + 0x100]
cmp byte [rsp + 0x61], 0
jne 0x4da515
test rax, rax
jne 0x4da515
test r12d, r12d
je 0x4da524
inc dword [r10 + 0x54]
mov eax, dword [r10 + 0x54]
mov dword [rsp + 0x9c], eax
mov ecx, dword [r10 + 0x54]
lea eax, [rcx + 1]
mov dword [rsp + 0xd0], eax
movsx eax, word [rbx + 0x42]
add eax, ecx
cmp dword [rsp + 0xf8], 0
mov dword [r10 + 0x54], eax
je 0x4da584
mov rax, qword [r10 + 0x230]
mov rdi, qword [rsp + 0x1e8]
mov r9d, dword [rsp + 0x64]
mov qword [rsp + 0x90], rax
mov rax, qword [rbx]
mov r8, rdi
mov rdx, rbx
mov rcx, r10
mov qword [rsp + 0x118], r10
mov qword [r10 + 0x230], rax
call fcn.004d1d60
jmp 0x4da58c
mov rdi, qword [rsp + 0x1e8]
lea rcx, [rsp + 0x140]
mov rdx, rdi
call fcn.0047fd70
test eax, eax
jne 0x4dc5f7
test byte [rbx + 0x48], 0x20
jne 0x4da70a
mov rbp, qword [rsp + 0x88]
mov rax, qword [rbp + 0x30]
movsxd rbx, dword [rbp + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4da5d4
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4da603
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
lea rcx, [rbx + rbx*2]
xor edx, edx
mov byte [rax + rcx*8], Ordinal_30
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r15d
mov dword [rax + rcx*8 + 0xc], r14d
mov dword [rax + rcx*8 + 4], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
jmp 0x4da605
xor edx, edx
mov eax, dword [rsp + 0x98]
mov r13, qword [rsp + 0x1d0]
xor r9d, r9d
mov dword [rsp + 0x30], eax
mov word [rsp + 0x28], 4
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x1d8]
mov r8, rdi
mov rcx, r13
call fcn.004a87d0
test rax, rax
mov rsi, rax
je 0x4dc5cd
mov rcx, qword [rbp + 0x30]
movsxd rdi, dword [rbp + 0x3c]
mov rbx, qword [rax + 0x4c]
cmp dword [rcx + 0x60], edi
movzx r12d, byte [rax + 0x36]
mov qword [rsp + 0x128], rbx
mov dword [rsp + 0xcc], r12d
jg 0x4da67d
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4da6ad
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov edx, dword [rsp + 0x64]
lea rcx, [rdi + rdi*2]
mov dword [rax + rcx*8 + 4], edx
xor edx, edx
mov byte [rax + rcx*8], 0x67
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r14d
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
test r12d, r12d
jne 0x4da6fd
mov rax, qword [rbp + 0x30]
movsxd rdi, dword [rbp + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4da6d0
lea edx, [r12 + 1]
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4da6fd
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
lea rcx, [rdi + rdi*2]
xor edx, edx
mov byte [rax + rcx*8], 0x80
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r15d
mov dword [rax + rcx*8 + 8], r14d
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
mov rcx, rsi
call fcn.0044cae0
jmp 0x4daaf0
mov rsi, qword [rsp + 0x1d0]
mov r8, qword [rsp + 0xa8]
mov eax, dword [rsi + 0x54]
movsx r12d, word [r8 + 0x5e]
mov edi, dword [rsi + 0x50]
lea r14d, [rax + 1]
lea eax, [r12 + rax + 1]
mov dword [rsp + 0xc8], edi
mov dword [rsi + 0x54], eax
mov dword [rsp + 0x70], eax
lea eax, [rdi + 1]
mov dword [rsi + 0x50], eax
mov rax, qword [r13 + 0x30]
movsxd rbx, dword [r13 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4da760
mov edx, 1
mov rcx, r13
call fcn.00441a80
test eax, eax
jne 0x4da78f
inc dword [r13 + 0x3c]
mov rax, qword [r13 + 8]
lea rcx, [rbx + rbx*2]
xor ebx, ebx
mov byte [rax + rcx*8], Ordinal_30
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], ebx
mov dword [rax + rcx*8 + 8], r14d
mov dword [rax + rcx*8 + 0xc], ebx
mov qword [rax + rcx*8 + 0x10], rbx
mov byte [rax + rcx*8 + 1], bl
jmp 0x4da791
xor ebx, ebx
movsxd rbp, dword [r13 + 0x3c]
mov rax, qword [r13 + 0x30]
cmp dword [rax + 0x60], ebp
mov dword [rsp + 0xc0], ebp
jg 0x4da7c6
mov edx, 1
mov rcx, r13
call fcn.00441a80
test eax, eax
je 0x4da7c6
mov eax, 1
mov ebp, eax
mov dword [rsp + 0xc0], eax
jmp 0x4da7f3
mov rax, qword [r13 + 8]
inc dword [r13 + 0x3c]
lea rcx, [rbp + rbp*2]
mov byte [rax + rcx*8], reloc.WS2_32.dll_gethostname
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edi
mov dword [rax + rcx*8 + 8], r12d
mov dword [rax + rcx*8 + 0xc], ebx
mov qword [rax + rcx*8 + 0x10], rbx
mov byte [rax + rcx*8 + 1], 0
mov rdx, qword [rsp + 0xa8]
mov rdi, qword [rsi + 0x10]
mov rcx, rsi
call fcn.00481820
mov rbx, qword [rdi + 8]
mov rcx, qword [rdi]
test rbx, rbx
mov rsi, rax
je 0x4da860
cmp byte [rcx + 0x50], 0
jne 0x4da860
mov edx, dword [rdi + 0x3c]
dec edx
movsxd rdx, edx
lea rdi, [rdx + rdx*2]
movsx edx, byte [rbx + rdi*8 + 1]
mov r8, qword [rbx + rdi*8 + 0x10]
call fcn.00441fd0
xor eax, eax
test rsi, rsi
mov qword [rbx + rdi*8 + 0x10], rax
jne 0x4da84e
mov qword [rbx + rdi*8 + 0x10], rax
mov byte [rbx + rdi*8 + 1], al
jmp 0x4da86d
mov qword [rbx + rdi*8 + 0x10], rsi
mov byte [rbx + rdi*8 + 1], 0xfa
jmp 0x4da86d
mov r8, rax
mov edx, 0xfffffffa
call fcn.00441fd0
mov eax, dword [rsp + 0x98]
mov rdi, qword [rsp + 0x1e8]
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1d0]
mov dword [rsp + 0x30], eax
mov r8, rdi
xor r9d, r9d
mov word [rsp + 0x28], 4
mov qword [rsp + 0x20], 0
call fcn.004a87d0
test rax, rax
mov r13, rax
mov qword [rsp + 0x138], rax
je 0x4dc5a3
mov rbx, qword [rax + 0x4c]
movzx eax, byte [rax + 0x36]
xor edi, edi
test r12d, r12d
mov dword [rsp + 0xcc], eax
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x128], rbx
jle 0x4da960
mov r15, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
mov r13d, dword [rsp + 0x64]
mov rbp, qword [rsp + 0xa8]
xor esi, esi
nop
nop
nop
mov rax, qword [rbp + 8]
lea ecx, [r14 + rdi]
mov r8d, r13d
movsx r9d, word [rsi + rax]
mov dword [rsp + 0x20], ecx
mov rdx, rbx
mov rcx, r15
call fcn.00480470
inc edi
add rsi, 2
cmp edi, r12d
jl 0x4da910
mov rbx, qword [rsp + 0x130]
mov ebp, dword [rsp + 0xc0]
mov r13, qword [rsp + 0x138]
mov r15d, dword [rsp + 0xf4]
mov eax, dword [rsp + 0xcc]
test eax, eax
je 0x4daa04
mov rcx, qword [rsp + 0x88]
cmp ebp, dword [rcx + 0x3c]
jge 0x4da9d5
mov rdi, qword [rcx + 8]
mov rcx, qword [rcx]
movsxd rax, ebp
lea rsi, [rax + rax*2]
movsx edx, byte [rdi + rsi*8 + 1]
mov r8, qword [rdi + rsi*8 + 0x10]
call fcn.00441fd0
mov rax, qword [rsp + 0x88]
xor r11d, r11d
mov qword [rdi + rsi*8], r11
mov qword [rdi + rsi*8 + 8], r11
mov qword [rdi + rsi*8 + 0x10], r11
mov byte [rdi + rsi*8], 0x9a
mov eax, dword [rax + 0x3c]
dec eax
cmp ebp, eax
jne 0x4da9ea
mov rbp, qword [rsp + 0x88]
mov dword [rsp + 0xd4], r12d
mov dword [rsp + 0x70], r14d
mov dword [rbp + 0x3c], eax
jmp 0x4daae0
mov rbp, rcx
mov dword [rsp + 0xd4], r12d
mov dword [rsp + 0x70], r14d
jmp 0x4daae0
mov rbp, qword [rsp + 0x88]
mov dword [rsp + 0xd4], r12d
mov dword [rsp + 0x70], r14d
jmp 0x4daae0
mov rbp, qword [rsp + 0x88]
mov rdx, qword [rsp + 0xa8]
mov rcx, rbp
call fcn.00448ef0
mov rcx, qword [rbp + 0x30]
movsxd rdi, dword [rbp + 0x3c]
cmp dword [rcx + 0x60], edi
mov rsi, rax
jg 0x4daa49
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
je 0x4daa49
mov r14d, dword [rsp + 0x70]
mov edi, 1
jmp 0x4daa7f
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
lea rcx, [rdi + rdi*2]
mov dword [rax + rcx*8 + 4], r14d
mov r14d, dword [rsp + 0x70]
mov byte [rax + rcx*8], gethostbyaddr
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r12d
mov qword [rax + rcx*8 + 0x10], 0
mov dword [rax + rcx*8 + 0xc], r14d
mov byte [rax + rcx*8 + 1], 0
mov r9d, r12d
mov r8, rsi
mov edx, edi
mov rcx, rbp
call fcn.004423e0
mov rax, qword [rbp + 0x30]
movsxd rdi, dword [rbp + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4daaad
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4daae0
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov edx, dword [rsp + 0xc8]
lea rcx, [rdi + rdi*2]
mov dword [rax + rcx*8 + 4], edx
xor edx, edx
mov byte [rax + rcx*8], WSAGetLastError
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r14d
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
mov rcx, r13
call fcn.0044cae0
mov r13, qword [rsp + 0x1d0]
mov rax, qword [rsp + 0xb8]
test byte [rax + 0x2c], 0x80
je 0x4dab6b
cmp qword [r13 + 0x1c8], 0
jne 0x4dab6b
inc dword [r13 + 0x54]
mov rax, qword [rbp + 0x30]
movsxd rdi, dword [rbp + 0x3c]
cmp dword [rax + 0x60], edi
mov esi, dword [r13 + 0x54]
mov dword [rsp + 0xf0], esi
jg 0x4dab35
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4dab6b
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
lea rcx, [rdi + rdi*2]
mov byte [rax + rcx*8], Ordinal_27
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], 0
mov dword [rax + rcx*8 + 8], esi
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
mov r13, qword [rbp + 0x30]
movsxd r14, dword [r13 + 0x78]
lea eax, [r14 + 1]
mov dword [r13 + 0x78], eax
lea eax, [r14 - 1]
test r14d, eax
jne 0x4dac55
mov rsi, qword [r13]
mov r12, qword [r13 + 0x80]
lea eax, [r14 + r14 + 1]
movsxd rbp, eax
xor edi, edi
shl rbp, 2
cmp byte [rsi + 0x50], dil
jne 0x4dac36
test r12, r12
jne 0x4dabc0
mov rdx, rbp
mov rcx, rsi
call fcn.0043b030
mov rdi, rax
jmp 0x4dac36
cmp r12, qword [rsi + 0x168]
jb 0x4dac16
cmp r12, qword [rsi + 0x170]
jae 0x4dac16
movzx eax, word [rsi + 0x148]
cmp rbp, rax
ja 0x4dabe3
mov rdi, r12
jmp 0x4dac36
mov rdx, rbp
mov rcx, rsi
call fcn.0043b030
test rax, rax
mov rdi, rax
je 0x4dac36
movzx r8d, word [rsi + 0x148]
mov rdx, r12
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov rdx, r12
mov rcx, rsi
call fcn.00425ea0
jmp 0x4dac36
call fcn.0049a550
test eax, eax
jne 0x4dac32
mov rdx, rbp
mov rcx, r12
call fcn.0043ac70
test rax, rax
mov rdi, rax
jne 0x4dac36
mov byte [rsi + 0x50], 1
test rdi, rdi
jne 0x4dac46
mov rdx, r12
mov rcx, rsi
call fcn.00425ea0
mov rbp, qword [rsp + 0x88]
mov qword [r13 + 0x80], rdi
mov rcx, qword [r13 + 0x80]
test rcx, rcx
je 0x4dac69
mov dword [rcx + r14*4], 0xffffffff
mov r13d, 0xffffffff
sub r13d, r14d
cmp dword [rsp + 0xf8], 0
mov dword [rsp + 0xf4], r13d
jne 0x4dad7d
cmp dword [rsp + 0x1f0], 5
jne 0x4dacb9
mov rsi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x110]
mov edx, 1
mov rcx, rsi
call sub.msvcrt.dll_memset
mov r14, qword [rsp + 0x80]
jmp 0x4dad10
mov r14, qword [rsp + 0x80]
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x4dad08
nop
nop
cmp byte [rax + 0x62], 5
je 0x4dace9
mov rax, qword [rax + 0x28]
test rax, rax
jne 0x4dacd0
mov rsi, qword [rsp + 0xe8]
jmp 0x4dad10
mov rsi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x110]
mov edx, 1
mov rcx, rsi
call sub.msvcrt.dll_memset
jmp 0x4dad10
mov rsi, qword [rsp + 0xe8]
mov edi, dword [rsp + 0xcc]
test edi, edi
je 0x4dad4f
test ebx, ebx
js 0x4dad30
movsxd rcx, ebx
movsxd rbx, dword [rsp + 0x6c]
sub rcx, rbx
mov byte [rcx + rsi], 0
jmp 0x4dad34
mov ebx, dword [rsp + 0x6c]
movsxd rax, dword [rsp + 0x12c]
test eax, eax
js 0x4dad53
mov rcx, rax
movsxd rax, ebx
sub rcx, rax
mov byte [rcx + rsi], 0
jmp 0x4dad53
mov ebx, dword [rsp + 0x6c]
mov rcx, qword [rsp + 0x1d0]
xor eax, eax
mov r9d, ebx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
lea r8d, [rax + 0x37]
mov rdx, r14
mov qword [rsp + 0x20], rsi
call fcn.00490f20
jmp 0x4dad98
mov ebx, dword [rsp + 0x6c]
mov r14, qword [rsp + 0x80]
mov edi, dword [rsp + 0xcc]
mov rsi, qword [rsp + 0xe8]
test edi, edi
je 0x4daef2
movsxd rdi, dword [rsp + 0x64]
movsxd rax, ebx
mov rcx, rdi
sub rcx, rax
cmp byte [rcx + rsi], 0
je 0x4dae7f
mov rax, qword [rbp + 0x30]
movsxd rbx, dword [rbp + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dade1
mov esi, 1
mov rcx, rbp
mov edx, esi
call fcn.00441a80
test eax, eax
je 0x4dade1
mov r12d, dword [rsp + 0x70]
mov ebx, esi
jmp 0x4dae16
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
mov r12d, dword [rsp + 0x70]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], 0x44
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edi
mov dword [rax + rcx*8 + 8], r13d
mov dword [rax + rcx*8 + 0xc], r12d
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
mov rdi, qword [rbp + 8]
movsxd rsi, dword [rsp + 0xd4]
mov rcx, qword [rbp]
test rdi, rdi
je 0x4dae70
cmp byte [rcx + 0x50], 0
jne 0x4dae70
test ebx, ebx
jns 0x4dae3a
mov ebx, dword [rbp + 0x3c]
dec ebx
movsxd rax, ebx
lea rbx, [rax + rax*2]
movsx edx, byte [rdi + rbx*8 + 1]
mov r8, qword [rdi + rbx*8 + 0x10]
call fcn.00441fd0
mov qword [rdi + rbx*8 + 0x10], 0
mov dword [rdi + rbx*8 + 0x10], esi
mov byte [rdi + rbx*8 + 1], 0xf2
jmp 0x4dae84
mov r8, rsi
mov edx, 0xfffffff2
call fcn.00441fd0
jmp 0x4dae84
mov r12d, dword [rsp + 0x70]
mov rax, qword [rbp + 0x30]
movsxd rbx, dword [rbp + 0x3c]
mov dword [rsp + 0x6c], r13d
cmp dword [rax + 0x60], ebx
jg 0x4daeab
mov edx, 1
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4db18d
inc dword [rbp + 0x3c]
mov rcx, qword [rbp + 8]
mov r8, qword [rsp + 0xa8]
mov eax, dword [rsp + 0x68]
lea rdx, [rbx + rbx*2]
test r8, r8
cmovne eax, r12d
mov dword [rcx + rdx*8 + 8], r13d
xor r13d, r13d
mov byte [rcx + rdx*8], Ordinal_79
mov byte [rcx + rdx*8 + 3], 0
mov dword [rcx + rdx*8 + 0xc], r13d
mov qword [rcx + rdx*8 + 0x10], r13
mov byte [rcx + rdx*8 + 1], r13b
mov dword [rcx + rdx*8 + 4], eax
jmp 0x4db190
cmp qword [rsp + 0xa8], 0
je 0x4db0d1
mov rdi, qword [rbp + 0x30]
movsxd rbx, dword [rdi + 0x78]
lea eax, [rbx + 1]
mov dword [rdi + 0x78], eax
lea eax, [rbx - 1]
test ebx, eax
jne 0x4daf37
mov rdx, qword [rdi + 0x80]
mov rcx, qword [rdi]
lea eax, [rbx + rbx + 1]
movsxd r8, eax
shl r8, 2
call fcn.0043b230
mov qword [rdi + 0x80], rax
mov rcx, qword [rdi + 0x80]
test rcx, rcx
je 0x4daf4a
mov dword [rcx + rbx*4], 0xffffffff
mov rax, qword [rbp + 0x30]
mov esi, 0xffffffff
sub esi, ebx
movsxd rbx, dword [rbp + 0x3c]
cmp dword [rax + 0x60], ebx
mov dword [rsp + 0x6c], esi
jg 0x4dafb4
mov r15d, 1
mov rcx, rbp
mov edx, r15d
call fcn.00441a80
test eax, eax
je 0x4dafba
mov ebx, dword [rsp + 0xc8]
xor r13d, r13d
movsxd r12, dword [rbp + 0x3c]
mov rax, qword [rbp + 0x30]
cmp dword [rax + 0x60], r12d
mov dword [rsp + 0xe0], r12d
jg 0x4daff2
mov edx, r15d
mov rcx, rbp
call fcn.00441a80
test eax, eax
je 0x4daff2
mov edi, dword [rsp + 0x70]
mov dword [rsp + 0xe0], r15d
jmp 0x4db021
mov r15d, 1
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
lea rcx, [rbx + rbx*2]
mov ebx, dword [rsp + 0xc8]
mov dword [rax + rcx*8 + 8], r13d
xor r13d, r13d
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], r13b
mov byte [rax + rcx*8], WSAGetLastError
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], ebx
jmp 0x4daf81
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
mov edi, dword [rsp + 0x70]
lea rcx, [r12 + r12*2]
mov byte [rax + rcx*8], 0x65
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], ebx
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], 0
mov rax, qword [rbp + 0x30]
movsxd rbx, dword [rbp + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db042
mov edx, r15d
mov rcx, rbp
call fcn.00441a80
test eax, eax
je 0x4db042
mov ebx, r15d
jmp 0x4db070
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
mov edx, dword [rsp + 0x64]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], 0x44
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], esi
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], 0
mov rdi, qword [rbp + 8]
mov rcx, qword [rbp]
test rdi, rdi
je 0x4db0c0
cmp byte [rcx + 0x50], 0
jne 0x4db0c0
test ebx, ebx
jns 0x4db08c
mov ebx, dword [rbp + 0x3c]
dec ebx
movsxd rax, ebx
lea rbx, [rax + rax*2]
movsx edx, byte [rdi + rbx*8 + 1]
mov r8, qword [rdi + rbx*8 + 0x10]
call fcn.00441fd0
mov qword [rdi + rbx*8 + 0x10], r13
mov dword [rdi + rbx*8 + 0x10], r13d
mov byte [rdi + rbx*8 + 1], 0xf2
jmp 0x4db190
xor r8d, r8d
lea edx, [r8 - 0xe]
call fcn.00441fd0
jmp 0x4db190
movsxd rsi, dword [rbp + 0x3c]
mov rax, qword [rbp + 0x30]
cmp dword [rax + 0x60], esi
mov dword [rsp + 0x6c], esi
jg 0x4db108
mov r12d, 1
mov rcx, rbp
mov edx, r12d
call fcn.00441a80
test eax, eax
je 0x4db10e
mov edi, dword [rsp + 0x68]
mov esi, r12d
mov dword [rsp + 0x6c], r12d
xor r13d, r13d
jmp 0x4db141
mov r12d, 1
inc dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov edi, dword [rsp + 0x68]
lea rcx, [rsi + rsi*2]
mov dword [rax + rcx*8 + 8], r13d
xor r13d, r13d
mov byte [rax + rcx*8], 0x81
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r15d
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], r13b
mov rax, qword [rbp + 0x30]
movsxd rbx, dword [rbp + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db15d
mov edx, r12d
mov rcx, rbp
call fcn.00441a80
test eax, eax
jne 0x4db190
mov rax, qword [rbp + 8]
inc dword [rbp + 0x3c]
mov edx, dword [rsp + 0x64]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], 0x46
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], esi
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db190
xor r13d, r13d
mov r12b, byte [rsp + 0x60]
test r12b, r12b
je 0x4db2ec
mov rdx, qword [rsp + 0xd8]
test rdx, rdx
je 0x4db215
cmp byte [rdx], 0x9f
jne 0x4db215
mov rax, qword [rsp + 0x1d0]
mov esi, dword [rdx + 0x2c]
mov rbx, qword [rax + 0x10]
mov rax, qword [rbx + 0x30]
movsxd rdi, dword [rbx + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4db1e1
mov edx, 1
mov rcx, rbx
call fcn.00441a80
test eax, eax
jne 0x4db289
mov rax, qword [rbx + 8]
inc dword [rbx + 0x3c]
mov ebp, dword [rsp + 0x9c]
lea rcx, [rdi + rdi*2]
mov byte [rax + rcx*8], reloc.WLDAP32.dll_Ordinal_33
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db290
mov ebp, dword [rsp + 0x9c]
mov rbx, qword [rsp + 0x1d0]
mov r8d, ebp
mov rcx, rbx
call fcn.004d55b0
cmp eax, ebp
mov esi, eax
je 0x4db290
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x4db290
mov rcx, qword [rbx + 0x30]
movsxd rdi, dword [rbx + 0x3c]
cmp dword [rcx + 0x60], edi
jg 0x4db25c
mov edx, 1
mov rcx, rbx
call fcn.00441a80
test eax, eax
jne 0x4db290
mov rax, qword [rbx + 8]
inc dword [rbx + 0x3c]
lea rcx, [rdi + rdi*2]
mov byte [rax + rcx*8], Ordinal_35
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db290
mov ebp, dword [rsp + 0x9c]
mov rdi, qword [rsp + 0x88]
mov rax, qword [rdi + 0x30]
movsxd rbx, dword [rdi + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db2b6
mov edx, 1
mov rcx, rdi
call fcn.00441a80
test eax, eax
jne 0x4db2ec
mov rax, qword [rdi + 8]
inc dword [rdi + 0x3c]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], Ordinal_41
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], ebp
mov dword [rax + rcx*8 + 8], 0
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
cmp byte [rsp + 0xa0], 0
jne 0x4db417
cmp dword [rsp + 0xb0], 0
jne 0x4db425
cmp qword [rsp + 0x100], 0
je 0x4db5f2
xor r15d, r15d
mov dword [rsp + 0xc0], r15d
mov rax, qword [rsp + 0x100]
xor r14d, r14d
test rax, rax
mov r13, rax
je 0x4db4a0
mov r15, qword [rsp + 0x80]
cmp byte [r13 + 0x10], 0x6e
jne 0x4db486
test byte [r13 + 0x11], 3
je 0x4db486
mov rbp, qword [r13 + 0x20]
test rbp, rbp
je 0x4db462
mov rax, qword [rsp + 0x1e0]
xor esi, esi
mov r12d, dword [rax]
test r12d, r12d
jle 0x4db486
mov ebx, dword [rbp + 8]
xor edi, edi
nop
xor r10d, r10d
test ebx, ebx
jle 0x4db451
mov rax, qword [rax + 8]
mov r9, qword [rbp]
mov r11, qword [rax + rdi + 8]
nop
nop
mov r8, qword [r9]
mov rdx, r11
movzx ecx, byte [r8]
test cl, cl
je 0x4db3e7
lea r15, [0x0069aea0]
nop
nop
nop
movzx eax, byte [rdx]
movzx ecx, cl
movzx eax, byte [rax + r15]
cmp byte [rcx + r15], al
jne 0x4db3df
mov cl, byte [r8 + 1]
inc r8
inc rdx
test cl, cl
jne 0x4db3c0
mov r15, qword [rsp + 0x80]
movzx eax, byte [rdx]
lea rdx, [0x0069aea0]
movzx ecx, byte [rax + rdx]
movzx eax, byte [r8]
movzx eax, byte [rax + rdx]
cmp eax, ecx
je 0x4db444
inc r10d
add r9, 0x10
cmp r10d, ebx
jl 0x4db3a0
mov rax, qword [rsp + 0x1e0]
jmp 0x4db451
cmp dword [rsp + 0xb0], 0
je 0x4db317
mov rcx, qword [rsp + 0x1d0]
mov rdx, r14
call fcn.0046d790
mov r15d, eax
mov dword [rsp + 0xc0], eax
jmp 0x4db322
test r10d, r10d
jns 0x4db462
mov rax, qword [rsp + 0x1e0]
inc esi
add rdi, 0x28
cmp esi, r12d
jl 0x4db380
jmp 0x4db486
mov r9d, dword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1d0]
mov r8, r15
mov rdx, r13
call fcn.004df690
test rax, rax
je 0x4db486
or r14d, dword [rax + 0x1c]
mov r13, qword [r13 + 0x40]
test r13, r13
jne 0x4db341
mov r15d, dword [rsp + 0xc0]
mov r12b, byte [rsp + 0x60]
or r15d, r14d
mov r14, qword [rsp + 0x80]
xor ebx, ebx
cmp word [r14 + 0x42], bx
mov ecx, 1
mov esi, ecx
jle 0x4db582
mov r13d, dword [rsp + 0xc4]
mov r12, qword [rsp + 0x88]
xor ebp, ebp
cmp r15d, 0xffffffff
je 0x4db548
cmp ebx, 0x20
jge 0x4db4e1
test r15d, esi
jne 0x4db548
mov rax, qword [r14 + 8]
test byte [rax + rbp + 0x2b], 1
jne 0x4db548
mov rax, qword [r12 + 0x30]
movsxd rdi, dword [r12 + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4db509
mov edx, ecx
mov rcx, r12
call fcn.00441a80
test eax, eax
jne 0x4db563
mov rcx, qword [r12 + 8]
inc dword [r12 + 0x3c]
lea rdx, [rdi + rdi*2]
lea eax, [rbx + r13]
mov byte [rcx + rdx*8], Ordinal_30
mov byte [rcx + rdx*8 + 3], 0
mov dword [rcx + rdx*8 + 4], 0
mov dword [rcx + rdx*8 + 0xc], 0
mov qword [rcx + rdx*8 + 0x10], 0
mov dword [rcx + rdx*8 + 8], eax
mov byte [rcx + rdx*8 + 1], 0
jmp 0x4db563
mov r8d, dword [rsp + 0x64]
lea eax, [rbx + r13]
mov r9d, ebx
mov rdx, r14
mov rcx, r12
mov dword [rsp + 0x20], eax
call fcn.00480470
movsx eax, word [r14 + 0x42]
inc ebx
add rbp, 0x30
rol esi, 1
cmp ebx, eax
mov ecx, 1
jl 0x4db4d1
mov r12b, byte [rsp + 0x60]
test r12b, r12b
jne 0x4db5f2
cmp qword [rsp + 0xa8], 0
jne 0x4db5f2
mov rdi, qword [rsp + 0x88]
mov rax, qword [rdi + 0x30]
movsxd rbx, dword [rdi + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db5b5
mov edx, ecx
mov rcx, rdi
call fcn.00441a80
test eax, eax
jne 0x4db5f2
mov rax, qword [rdi + 8]
inc dword [rdi + 0x3c]
mov edx, dword [rsp + 0x68]
lea rcx, [rbx + rbx*2]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x9c]
mov byte [rax + rcx*8], reloc.WLDAP32.dll_Ordinal_33
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov dword [rax + rcx*8 + 8], edx
mov byte [rax + rcx*8 + 1], 0
mov r12, qword [rsp + 0x100]
xor r15d, r15d
test r12, r12
mov r13, r12
je 0x4db738
nop
nop
cmp byte [r13 + 0x10], 0x6e
jne 0x4db72b
test byte [r13 + 0x11], 1
je 0x4db72b
mov rbp, qword [r13 + 0x20]
test rbp, rbp
je 0x4db707
mov rax, qword [rsp + 0x1e0]
xor esi, esi
mov r12d, dword [rax]
test r12d, r12d
jle 0x4db72b
mov ebx, dword [rbp + 8]
xor edi, edi
nop
xor r10d, r10d
test ebx, ebx
jle 0x4db6f6
mov rax, qword [rax + 8]
mov r9, qword [rbp]
mov r11, qword [rax + rdi + 8]
nop
nop
mov r8, qword [r9]
mov rdx, r11
movzx eax, byte [r8]
test al, al
je 0x4db6b7
lea r14, [0x0069aea0]
nop
nop
nop
movzx ecx, al
movzx eax, byte [rdx]
movzx eax, byte [rax + r14]
cmp byte [rcx + r14], al
jne 0x4db6af
mov al, byte [r8 + 1]
inc r8
inc rdx
test al, al
jne 0x4db690
mov r14, qword [rsp + 0x80]
movzx eax, byte [r8]
lea r8, [0x0069aea0]
movzx ecx, byte [rax + r8]
movzx eax, byte [rdx]
movzx eax, byte [rax + r8]
cmp ecx, eax
je 0x4db6e9
inc r10d
add r9, 0x10
cmp r10d, ebx
jl 0x4db670
mov rax, qword [rsp + 0x1e0]
jmp 0x4db6f6
test r10d, r10d
jns 0x4db707
mov rax, qword [rsp + 0x1e0]
inc esi
add rdi, 0x28
cmp esi, r12d
jl 0x4db650
jmp 0x4db72b
mov r9d, dword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x1d0]
mov r8, r14
mov rdx, r13
call fcn.004df690
test rax, rax
je 0x4db72b
or r15d, dword [rax + 0x20]
mov r13, qword [r13 + 0x40]
test r13, r13
jne 0x4db610
xor r12d, r12d
mov r8d, 1
cmp word [r14 + 0x42], r12w
mov r13d, r8d
jle 0x4db9a6
mov ebp, dword [rsp + 0xd0]
mov r14, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
jmp 0x4db776
mov r8d, 1
movsx eax, word [rcx + 0x40]
cmp r12d, eax
jne 0x4db7e2
mov rdi, qword [rsp + 0x88]
mov rax, qword [rdi + 0x30]
movsxd rbx, dword [rdi + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db7a7
mov edx, r8d
mov rcx, rdi
call fcn.00441a80
test eax, eax
jne 0x4db985
mov rax, qword [rdi + 8]
inc dword [rdi + 0x3c]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], Ordinal_30
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], 0
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db985
movsxd rax, dword [r14]
test eax, eax
js 0x4db8f4
lea rcx, [rax + rax*4]
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rax + 8]
mov rdx, qword [rax + rcx*8]
test rdx, rdx
je 0x4db871
cmp byte [rdx], 0x9f
jne 0x4db871
mov rax, qword [rsp + 0x1d0]
mov esi, dword [rdx + 0x2c]
mov rbx, qword [rax + 0x10]
mov rax, qword [rbx + 0x30]
movsxd rdi, dword [rbx + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4db83a
mov edx, r8d
mov rcx, rbx
call fcn.00441a80
test eax, eax
jne 0x4db985
mov rax, qword [rbx + 8]
inc dword [rbx + 0x3c]
lea rcx, [rdi + rdi*2]
mov byte [rax + rcx*8], reloc.WLDAP32.dll_Ordinal_33
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db985
mov rbx, qword [rsp + 0x1d0]
mov r8d, ebp
mov rcx, rbx
call fcn.004d55b0
cmp eax, ebp
mov esi, eax
je 0x4db985
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x4db985
mov rcx, qword [rbx + 0x30]
movsxd rdi, dword [rbx + 0x3c]
cmp dword [rcx + 0x60], edi
jg 0x4db8bd
mov edx, 1
mov rcx, rbx
call fcn.00441a80
test eax, eax
jne 0x4db985
mov rax, qword [rbx + 8]
inc dword [rbx + 0x3c]
lea rcx, [rdi + rdi*2]
mov byte [rax + rcx*8], Ordinal_35
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db985
mov eax, dword [rsp + 0x108]
and eax, 1
test al, al
je 0x4db969
cmp r12d, 0x1f
jg 0x4db969
test r13d, r15d
jne 0x4db969
mov rdi, qword [rsp + 0x88]
mov rax, qword [rdi + 0x30]
movsxd rbx, dword [rdi + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4db931
mov edx, r8d
mov rcx, rdi
call fcn.00441a80
test eax, eax
jne 0x4db985
mov rax, qword [rdi + 8]
inc dword [rdi + 0x3c]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], Ordinal_30
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], 0
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
jmp 0x4db985
mov r8d, dword [rsp + 0x64]
mov rdx, rcx
mov rcx, qword [rsp + 0x88]
mov r9d, r12d
mov dword [rsp + 0x20], ebp
call fcn.00480470
mov rcx, qword [rsp + 0x80]
inc r12d
inc ebp
movsx eax, word [rcx + 0x42]
rol r13d, 1
add r14, 4
cmp r12d, eax
jl 0x4db770
test byte [rsp + 0x108], 1
je 0x4dbb9f
mov esi, dword [rsp + 0xd0]
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0x88]
mov r8d, esi
mov rdx, r15
mov rcx, r14
call fcn.00454160
mov ebp, dword [rsp + 0x6c]
mov r12d, dword [rsp + 0x1f0]
mov r13d, dword [rsp + 0x68]
mov r9, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x1d0]
mov dword [rsp + 0x40], ebp
mov dword [rsp + 0x38], r12d
mov edi, 1
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], r15
lea r8d, [rdi + 0x6d]
mov dword [rsp + 0x20], edi
call fcn.004df8e0
cmp qword [rsp + 0xa8], 0
je 0x4dbaf7
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dba55
mov edx, edi
mov rcx, r14
call fcn.00441a80
test eax, eax
je 0x4dba55
mov ebx, edi
jmp 0x4dba8c
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
mov edx, dword [rsp + 0x64]
lea rcx, [rbx + rbx*2]
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x70]
mov byte [rax + rcx*8], 0x44
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], ebp
mov qword [rax + rcx*8 + 0x10], 0
mov dword [rax + rcx*8 + 0xc], edx
mov byte [rax + rcx*8 + 1], 0
mov rdi, qword [r14 + 8]
movsxd rsi, dword [rsp + 0xd4]
mov rcx, qword [r14]
test rdi, rdi
je 0x4dbae1
cmp byte [rcx + 0x50], 0
jne 0x4dbae1
test ebx, ebx
jns 0x4dbab0
mov ebx, dword [r14 + 0x3c]
dec ebx
movsxd rax, ebx
lea rbx, [rax + rax*2]
movsx edx, byte [rdi + rbx*8 + 1]
mov r8, qword [rdi + rbx*8 + 0x10]
call fcn.00441fd0
mov qword [rdi + rbx*8 + 0x10], 0
mov dword [rdi + rbx*8 + 0x10], esi
mov esi, dword [rsp + 0xd0]
mov byte [rdi + rbx*8 + 1], 0xf2
jmp 0x4dbb46
mov r8, rsi
mov edx, 0xfffffff2
call fcn.00441fd0
mov esi, dword [rsp + 0xd0]
jmp 0x4dbb46
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dbb12
mov edx, edi
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dbb46
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
mov edx, dword [rsp + 0x64]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], 0x46
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
xor ebx, ebx
cmp word [r15 + 0x42], bx
jle 0x4dbbc0
mov rdi, qword [rsp + 0x78]
mov r12d, dword [rsp + 0x64]
nop
nop
cmp dword [rdi], 0
jge 0x4dbb86
movsx eax, word [r15 + 0x40]
cmp ebx, eax
je 0x4dbb86
lea eax, [rsi + rbx]
mov r9d, ebx
mov r8d, r12d
mov rdx, r15
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.00480470
movsx eax, word [r15 + 0x42]
inc ebx
add rdi, 4
cmp ebx, eax
jl 0x4dbb60
mov r12d, dword [rsp + 0x1f0]
jmp 0x4dbbc0
mov r14, qword [rsp + 0x88]
mov r15, qword [rsp + 0x80]
mov ebp, dword [rsp + 0x6c]
mov r12d, dword [rsp + 0x1f0]
mov r13d, dword [rsp + 0x68]
cmp dword [rsp + 0xf8], 0
jne 0x4dc17c
mov r15, qword [rsp + 0x120]
mov esi, dword [rsp + 0x9c]
mov r9d, dword [rsp + 0x64]
lea rax, [rsp + 0xc4]
xor edi, edi
mov r8, r15
mov qword [rsp + 0x50], rax
movzx eax, byte [rsp + 0x61]
mov dword [rsp + 0x48], ebp
mov rbp, qword [rsp + 0x80]
mov byte [rsp + 0x40], r12b
mov r12, qword [rsp + 0x1d0]
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x30], r13d
mov rdx, rbp
mov rcx, r12
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], eax
mov dword [rsp + 0xc4], edi
call fcn.004d76c0
mov ebx, dword [rsp + 0xb0]
test ebx, ebx
je 0x4dbc73
mov rax, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x10c]
mov r8d, dword [rsp + 0x68]
xor r9d, r9d
mov rdx, rbp
mov rcx, r12
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call fcn.004c32f0
jmp 0x4dbc7b
mov r13d, dword [rsp + 0x10c]
mov r12d, dword [rsp + 0xc4]
test r12d, r12d
jne 0x4dbc93
cmp byte [rsp + 0x61], dil
je 0x4dbdbf
cmp qword [rsp + 0xa8], rdi
je 0x4dbd61
mov rax, qword [r14 + 0x30]
movsxd rdi, dword [r14 + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4dbcc5
mov esi, 1
mov rcx, r14
mov edx, esi
call fcn.00441a80
test eax, eax
je 0x4dbcc5
mov edi, esi
jmp 0x4dbcfc
inc dword [r14 + 0x3c]
mov rax, qword [r14 + 8]
mov edx, dword [rsp + 0x64]
lea rcx, [rdi + rdi*2]
xor r8d, r8d
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x70]
mov byte [rax + rcx*8], 0x44
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r8d
mov qword [rax + rcx*8 + 0x10], r8
mov dword [rax + rcx*8 + 0xc], edx
mov byte [rax + rcx*8 + 1], r8b
mov rsi, qword [r14 + 8]
movsxd rbp, dword [rsp + 0xd4]
mov rcx, qword [r14]
test rsi, rsi
mov eax, edi
je 0x4dbd50
cmp byte [rcx + 0x50], 0
jne 0x4dbd50
test edi, edi
jns 0x4dbd22
mov eax, dword [r14 + 0x3c]
dec eax
cdqe
lea rbx, [rax + rax*2]
movsx edx, byte [rsi + rbx*8 + 1]
mov r8, qword [rsi + rbx*8 + 0x10]
call fcn.00441fd0
mov qword [rsi + rbx*8 + 0x10], 0
mov dword [rsi + rbx*8 + 0x10], ebp
mov byte [rsi + rbx*8 + 1], 0xf2
mov ebx, dword [rsp + 0xb0]
mov esi, dword [rsp + 0x9c]
mov rbp, qword [rsp + 0x80]
jmp 0x4dbdbf
mov rax, qword [r14 + 0x30]
movsxd rdi, dword [r14 + 0x3c]
cmp dword [rax + 0x60], edi
jg 0x4dbd88
mov edx, 1
mov rcx, r14
call fcn.00441a80
test eax, eax
je 0x4dbd88
mov eax, 1
mov edi, eax
jmp 0x4dbdbf
inc dword [r14 + 0x3c]
mov rax, qword [r14 + 8]
mov edx, dword [rsp + 0x64]
lea rcx, [rdi + rdi*2]
xor r8d, r8d
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0x68]
mov byte [rax + rcx*8], 0x46
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 8], r8d
mov qword [rax + rcx*8 + 0x10], r8
mov dword [rax + rcx*8 + 0xc], edx
mov byte [rax + rcx*8 + 1], r8b
mov r9d, dword [rsp + 0x98]
mov r8d, dword [rsp + 0x64]
mov rcx, qword [rsp + 0x1d0]
mov rdx, rbp
mov qword [rsp + 0x20], r15
call fcn.004900b0
test ebx, ebx
jne 0x4dbdf8
mov al, byte [rsp + 0x61]
test al, al
jne 0x4dbdf8
cmp qword [rsp + 0xa8], 0
je 0x4dbe5e
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dbe16
mov edx, 1
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dbe53
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
mov edx, dword [rsp + 0x64]
lea rcx, [rbx + rbx*2]
mov ebx, dword [rsp + 0xb0]
mov dword [rax + rcx*8 + 4], edx
xor edx, edx
mov byte [rax + rcx*8], 0x5f
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], rdx
mov byte [rax + rcx*8 + 1], dl
mov byte [rax + rcx*8 + 3], 0
mov al, byte [rsp + 0x61]
jmp 0x4dbe5e
mov ebx, dword [rsp + 0xb0]
mov al, byte [rsp + 0x61]
test r12d, r12d
jne 0x4dbe67
test al, al
je 0x4dbe8a
mov edx, dword [r14 + 0x3c]
cmp edx, edi
jbe 0x4dbe7d
mov eax, edi
lea rcx, [rax + rax*2]
mov rax, qword [r14 + 8]
mov dword [rax + rcx*8 + 8], edx
mov ecx, dword [r14 + 0x3c]
mov rax, qword [r14 + 0x30]
dec ecx
mov dword [rax + 0x64], ecx
test ebx, ebx
je 0x4dbeb8
mov rax, qword [rsp + 0x78]
mov rdx, rbp
mov rbp, qword [rsp + 0x1d0]
mov r9d, esi
xor r8d, r8d
mov rcx, rbp
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
call fcn.004c32f0
jmp 0x4dbec0
mov rbp, qword [rsp + 0x1d0]
mov r13d, dword [rsp + 0x98]
mov r12d, dword [rsp + 0x64]
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov edi, 1
mov r9d, r13d
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], r15
mov r15, qword [rsp + 0x80]
mov r8d, r12d
mov rcx, rbp
mov rdx, r15
mov dword [rsp + 0x20], esi
call fcn.0045d310
test ebx, ebx
je 0x4dc1a0
mov rax, qword [rbp]
bt dword [rax + 0x2c], 0x13
jae 0x4dc1a0
mov r10, qword [r15 + 0x70]
mov r11, qword [r15]
mov r9, qword [r10 + 0x60]
test r9, r9
je 0x4dbf80
movzx ecx, byte [r11]
xor eax, eax
mov r8, r11
test cl, cl
je 0x4dbf68
lea r14, [0x0069aea0]
movzx ecx, cl
inc r8
movzx edx, byte [rcx + r14]
lea ecx, [rax*8]
xor edx, ecx
mov cl, byte [r8]
xor eax, edx
test cl, cl
jne 0x4dbf43
mov r14, qword [rsp + 0x88]
xor edx, edx
div dword [r10 + 0x50]
mov ecx, edx
shl rcx, 4
add rcx, r9
mov r9, qword [rcx + 8]
mov r10d, dword [rcx]
jmp 0x4dbf88
mov r9, qword [r10 + 0x58]
mov r10d, dword [r10 + 0x54]
test r10d, r10d
je 0x4dc1a0
lea rbx, [0x0069aea0]
nop
nop
mov rdx, qword [r9 + 0x18]
dec r10d
mov r8, r11
movzx ecx, byte [rdx]
test cl, cl
je 0x4dbfdd
nop
nop
nop
nop
movzx eax, byte [r8]
movzx ecx, cl
movzx eax, byte [rax + rbx]
cmp byte [rcx + rbx], al
jne 0x4dbfdd
mov cl, byte [rdx + 1]
inc rdx
inc r8
test cl, cl
jne 0x4dbfc0
movzx eax, byte [r8]
movzx ecx, byte [rax + rbx]
movzx eax, byte [rdx]
movzx eax, byte [rax + rbx]
cmp eax, ecx
je 0x4dbffd
test r10d, r10d
mov r9, qword [r9]
jne 0x4dbfa0
jmp 0x4dc1a0
mov r13, qword [r9 + 0x10]
test r13, r13
je 0x4dc198
mov r14d, dword [rsp + 0x68]
nop
mov r12d, dword [r13 + 0x28]
xor ebp, ebp
test r12d, r12d
jle 0x4dc14b
movsx edi, word [r15 + 0x42]
lea rsi, [r13 + 0x48]
nop
nop
mov rbx, qword [rsi]
xor r10d, r10d
test edi, edi
jle 0x4dc132
mov r11, qword [rsp + 0x78]
xor r9d, r9d
cmp dword [r11], 0
jge 0x4dc065
movsx eax, word [r15 + 0x40]
cmp r10d, eax
jne 0x4dc11e
cmp byte [rsp + 0x61], 0
je 0x4dc11e
test rbx, rbx
mov rax, qword [r15 + 8]
je 0x4dc116
mov rdx, qword [r9 + rax]
mov r8, rbx
movzx ecx, byte [rdx]
test cl, cl
je 0x4dc0b4
lea r14, [0x0069aea0]
nop
nop
nop
movzx eax, byte [r8]
movzx ecx, cl
movzx eax, byte [rax + r14]
cmp byte [rcx + r14], al
jne 0x4dc0af
mov cl, byte [rdx + 1]
inc rdx
inc r8
test cl, cl
jne 0x4dc090
mov r14d, dword [rsp + 0x68]
movzx eax, byte [r8]
lea r8, [0x0069aea0]
movzx ecx, byte [rax + r8]
movzx eax, byte [rdx]
movzx eax, byte [rax + r8]
cmp eax, ecx
jne 0x4dc11e
mov rbp, qword [rsp + 0x1d0]
mov r9, qword [rsp + 0x1e0]
mov r8, r13
mov rcx, rbp
mov rdx, r15
call fcn.0046d990
test rax, rax
je 0x4dc153
mov r9d, r14d
mov r8, r15
mov rdx, rax
mov rcx, rbp
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 2
call fcn.004df6d0
jmp 0x4dc153
test byte [r9 + rax + 0x2b], 1
jne 0x4dc0d0
inc r10d
add r11, 4
add r9, 0x30
cmp r10d, edi
jl 0x4dc046
inc ebp
add rsi, 0x10
cmp ebp, r12d
jl 0x4dc030
mov rbp, qword [rsp + 0x1d0]
jmp 0x4dc153
mov rbp, qword [rsp + 0x1d0]
mov r13, qword [r13 + 0x18]
test r13, r13
jne 0x4dc010
mov r14, qword [rsp + 0x88]
mov r12d, dword [rsp + 0x64]
mov r13d, dword [rsp + 0x98]
mov edi, 1
jmp 0x4dc1a0
mov rbp, qword [rsp + 0x1d0]
mov r12d, dword [rsp + 0x64]
mov r13d, dword [rsp + 0x98]
mov edi, 1
jmp 0x4dc1a0
mov r13d, dword [rsp + 0x98]
mov rax, qword [rsp + 0xb8]
test byte [rax + 0x2c], 0x80
je 0x4dc20d
cmp qword [rbp + 0x1c8], 0
jne 0x4dc20d
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dc1d3
mov edx, edi
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dc20d
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
mov edx, dword [rsp + 0xf0]
lea rcx, [rbx + rbx*2]
mov byte [rax + rcx*8], 0x25
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], 0
mov qword [rax + rcx*8 + 0x10], 0
mov byte [rax + rcx*8 + 1], 0
mov eax, dword [rsp + 0x1f0]
mov edi, dword [rsp + 0x6c]
mov r9, qword [rsp + 0x1e0]
mov rdx, qword [rsp + 0x100]
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x68]
mov r8d, WSAGetLastError
mov rcx, rbp
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], 2
call fcn.004df8e0
cmp dword [rsp + 0xcc], 0
jne 0x4dc358
cmp qword [rsp + 0xa8], 0
je 0x4dc2fe
mov r8, qword [r14 + 0x30]
mov eax, 0xffffffff
sub eax, edi
js 0x4dc293
mov rdx, qword [r8 + 0x80]
test rdx, rdx
je 0x4dc293
movsxd rcx, eax
mov eax, dword [r14 + 0x3c]
mov dword [rdx + rcx*4], eax
mov eax, dword [r14 + 0x3c]
dec eax
mov dword [r8 + 0x64], eax
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dc2bf
mov edx, 1
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dc34e
inc dword [r14 + 0x3c]
mov rax, qword [r14 + 8]
mov edx, dword [rsp + 0xc8]
lea rcx, [rbx + rbx*2]
xor r9d, r9d
mov dword [rax + rcx*8 + 4], edx
mov edx, dword [rsp + 0xe0]
mov byte [rax + rcx*8], 9
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
mov dword [rax + rcx*8 + 8], edx
mov byte [rax + rcx*8 + 1], r9b
jmp 0x4dc35b
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dc31c
mov edx, 1
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dc353
inc dword [r14 + 0x3c]
mov rax, qword [r14 + 8]
lea rcx, [rbx + rbx*2]
xor r9d, r9d
mov byte [rax + rcx*8], reloc.WS2_32.dll_recv
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r9d
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
mov byte [rax + rcx*8 + 1], r9b
jmp 0x4dc35b
xor r9d, r9d
jmp 0x4dc35b
xor r9d, r9d
jmp 0x4dc35b
xor r9d, r9d
mov r8, qword [r14 + 0x30]
mov eax, 0xffffffff
sub eax, dword [rsp + 0xf4]
js 0x4dc383
mov rdx, qword [r8 + 0x80]
test rdx, rdx
je 0x4dc383
movsxd rcx, eax
mov eax, dword [r14 + 0x3c]
mov dword [rdx + rcx*4], eax
mov eax, dword [r14 + 0x3c]
dec eax
mov dword [r8 + 0x64], eax
mov rbx, qword [r15 + 0x10]
test rbx, rbx
je 0x4dc422
mov rdi, qword [rsp + 0xe8]
mov esi, r13d
mov r12d, 1
inc rdi
nop
cmp byte [rdi], 0
je 0x4dc407
mov rax, qword [r14 + 0x30]
movsxd rbp, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebp
jg 0x4dc3d4
mov edx, r12d
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dc404
xor r9d, r9d
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
lea rcx, [rbp + rbp*2]
mov byte [rax + rcx*8], 0x3d
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
mov byte [rax + rcx*8 + 1], 0
jmp 0x4dc407
xor r9d, r9d
mov rbx, qword [rbx + 0x28]
inc esi
inc rdi
test rbx, rbx
jne 0x4dc3b0
mov rbp, qword [rsp + 0x1d0]
mov r12d, dword [rsp + 0x64]
cmp r12d, r13d
jge 0x4dc479
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dc445
mov edx, 1
mov rcx, r14
call fcn.00441a80
test eax, eax
jne 0x4dc475
inc dword [r14 + 0x3c]
mov rax, qword [r14 + 8]
lea rcx, [rbx + rbx*2]
xor edi, edi
mov byte [rax + rcx*8], 0x3d
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r12d
mov dword [rax + rcx*8 + 8], edi
mov dword [rax + rcx*8 + 0xc], edi
mov qword [rax + rcx*8 + 0x10], rdi
mov byte [rax + rcx*8 + 1], dil
jmp 0x4dc47b
xor edi, edi
jmp 0x4dc47b
xor edi, edi
cmp byte [rbp + 0x1e], 0
jne 0x4dc493
cmp qword [rbp + 0x1c8], 0
jne 0x4dc493
mov rcx, rbp
call fcn.00490c40
mov r15, qword [rsp + 0xb8]
test byte [r15 + 0x2c], 0x80
je 0x4dc678
cmp qword [rbp + 0x1c8], 0
jne 0x4dc6a2
cmp byte [rbp + 0x1e], 0
jne 0x4dc6cc
mov rax, qword [r14 + 0x30]
movsxd rbx, dword [r14 + 0x3c]
cmp dword [rax + 0x60], ebx
jg 0x4dc4e0
mov esi, 1
mov rcx, r14
mov edx, esi
call fcn.00441a80
test eax, eax
jne 0x4dc51d
jmp 0x4dc4e5
mov esi, 1
mov rax, qword [r14 + 8]
inc dword [r14 + 0x3c]
mov ecx, dword [rsp + 0xf0]
lea r9, [rbx + rbx*2]
mov byte [rax + r9*8], reloc.WLDAP32.dll_Ordinal_35
mov byte [rax + r9*8 + 3], 0
mov dword [rax + r9*8 + 4], ecx
mov dword [rax + r9*8 + 8], esi
mov dword [rax + r9*8 + 0xc], edi
mov qword [rax + r9*8 + 0x10], rdi
mov byte [rax + r9*8 + 1], 0
mov edx, esi
mov rcx, r14
call fcn.0044f950
mov r11, qword [r14]
cmp byte [r11 + 0x50], 0
jne 0x4dc579
mov rcx, qword [r14 + 0x20]
lea rdx, str.rows_updated
mov r9b, 1
mov r8d, 0xffffffff
mov qword [rsp + 0x20], rdi
call fcn.00457b80
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbx, qword [rsp + 0x1e0]
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x1e8]
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
jmp 0x4dc74e
mov rbp, qword [rsp + 0x1d8]
mov rax, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x118]
mov r14, qword [rsp + 0x190]
mov r12, qword [rsp + 0x1a0]
test rsi, rsi
je 0x4dc772
mov qword [rsi + 0x230], rax
mov rdx, r13
mov rcx, r15
call fcn.00425ea0
mov rdx, rbp
mov rcx, r15
call fcn.004334e0
mov rdx, rbx
mov rcx, r15
call fcn.00445760
test rdi, rdi
mov r13, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x1b0]
mov rbp, qword [rsp + 0x1b8]
je 0x4dc8a4
bt dword [rdi + 4], 0xe
jb 0x4dc892
mov rdx, qword [rdi + 0x10]
mov rcx, r15
call fcn.00445010
mov rdx, qword [rdi + 0x18]
mov rcx, r15
call fcn.00445010
bt dword [rdi + 4], 0x10
jae 0x4dc7ea
mov rdx, qword [rdi + 8]
mov rcx, r15
call fcn.00425ea0
bt dword [rdi + 4], 0xb
jae 0x4dc886
mov rbx, qword [rdi + 0x20]
test rbx, rbx
je 0x4dc892
mov rdx, qword [rbx]
mov rcx, r15
call fcn.00445760
mov rdx, qword [rbx + 0x28]
mov rcx, r15
call fcn.004334e0
mov rdx, qword [rbx + 0x30]
mov rcx, r15
call fcn.00445010
mov rdx, qword [rbx + 0x38]
mov rcx, r15
call fcn.00445760
mov rdx, qword [rbx + 0x40]
mov rcx, r15
call fcn.00445010
mov rdx, qword [rbx + 0x48]
mov rcx, r15
call fcn.00445760
mov rdx, qword [rbx + 0x50]
mov rcx, r15
call fcn.004353b0
mov rdx, qword [rbx + 0x60]
mov rcx, r15
call fcn.00445010
mov rdx, qword [rbx + 0x68]
mov rcx, r15
call fcn.00445010
mov rdx, qword [rbx + 0x70]
mov rcx, r15
call fcn.00433b40
mov rdx, rbx
mov rcx, r15
call fcn.00425ea0
jmp 0x4dc892
mov rdx, qword [rdi + 0x20]
mov rcx, r15
call fcn.00445760
bt dword [rdi + 4], 0xf
jb 0x4dc8a4
mov rdx, rdi
mov rcx, r15
call fcn.00425ea0
mov r15, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x1a8]
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x1c8
ret