Function at 0x4e7c00
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x30]
cmp r12, qword [r14 + 0x10]
jbe 0x4e7e49
push rbp
mov rbp, rsp
sub rsp, 0xa8
nop word [rax + rax]
test rax, rax
je 0x4e7e34
mov qword [rsp + 0xb8], rax
mov rbx, qword [rax + 8]
test rbx, rbx
jne 0x4e7c42
xor ebx, ebx
xor ecx, ecx
nop
jmp 0x4e7c5c
mov rdx, qword [rax]
mov rcx, qword [rax + 0x10]
mov rax, rdx
call sym.net.IP.String
mov rcx, rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x48], rbx
cmp qword [rax + 0x28], 0
je 0x4e7d71
mov rcx, qword [rax + 0x18]
mov rax, rcx
nop dword [rax + rax]
call sym.internal_itoa.Itoa
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0xb8]
mov r8, qword [rcx + 0x20]
mov r9, qword [rcx + 0x28]
mov rcx, qword [rsp + 0x48]
lea rdi, [0x006bb3f0]
mov esi, 1
lea rax, [rsp + 0x68]
mov rbx, qword [rsp + 0x88]
call sym.runtime.concatstring3
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x3a
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x0086bfc8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
jl 0x4e7d3b
xor eax, eax
lea rbx, str.__S_LMCyO_:__ip53__:_25i___000s_____dDS___m_INCSCHHSDHKXLPMBMDMFMGMRMXNSPXRPRTTA____________n__s__Pn___n__n___n__t____idLlLtLuMniv0b0x0X0o__nOUCNSTudpdnstcp::1setcgoftpssh125625NaNSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTC_mStdDltEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614:0x_0XKEYDLVCDSkey_ANYDSAechPGPURIOIDAPLAVCCAAEIDGIDHIPL32L64LOCNIDNXTOPTPTRSIGSOASPFSRVTXTUIDX25EOFnil_:__finptrobjgc__:_gp___in__n___n_____P__MPC___end___..._:_n___pc__GTTLRSAMD4MD5SETintmapadxaesshaavxfmanet____25___dialbindfile__r_t_nread_on_pipeunixicmpigmpftpshttppop3smtp3125trueAtoi_InfInfJuneJuly_as_hourEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_tlsTYPESHA1NONEalpnportPKIXSPKIIPIXIPGPAAAAATMAAXFRCERTGPOSISDNIXFRNSECNULLNoneRKEYSVCBTKEYTLSATSIGopenStatallgallprootitabsbrkidledead_is_LEAFbase_of___GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__mbitsNameTypeasn1boolint8uintchanfunccallkind___ermssse3avx2bmi1bmi2cx16sse2hostsCNAME_nil_writeclosefileshttpsimap2imap3imapspop3s1562578125falseMarchAprilmonthLocal053004300545063003300845103012451345_0930CLASSdns:_udp:__d__d___s_QUERYED448OtherISPKIAFSDBCSYNCDHCIDDNAMEEUI48EUI64HINFOHTTPSMAILAMAILBMINFONAPTRNINFONSEC3RRSIGSSHFPUINFOntohsCall_Error__at_defersweepschedhchansudoggscanmheaptracepanicsleep_cntgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:ClassGreektls:_EarlyECDSASHA_1P_224P_256P_384P_521int16int32int64uint8arrayslicesse41sse42ssse3parsenetdns.localreturnlisten.onionipnetsocketdomaingophertelnet390625SundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13nil_rrDNSKEY0._02d_.2fm__.0fm__0.16x_0.16XSHA256GOST94SHA384SHA512IQUERYSTATUSNOTIFYUPDATERSAMD5NOTIMPBADSIGBADKEYBADALGACPKIXNIMLOCSMIMEATALINKUNSPECZONEMDGetACPsendtoStringFormat__bytestringsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base___val_LengthheaderAnswerCommonX25519_w_.0wuint16uint32uint64structchan____chan_Valuerdtscppopcntcmd_goSTREETavx512rdrandrdseedwindowsrunningwsarecvwsasendconnectlookup_19531259765625TuesdayJanuaryOctoberMUI_StdMUI_Dltbad_offNOTIMPLCDNSKEY::ffff:_16.16x_12.12xRSASHA1ED25519BlockedNOERRORFORMERRREFUSEDYXRRSETNXRRSETNOTAUTHNOTZONEBADTIMEBADMODEBADNAMEdohpathIACPKIXCopySidFreeSidSleepExWSARecvWSASendfloat32float64:eventsconsoleforcegccpuprofunknowngctraceIO_waitsyscallwaitingUNKNOWN__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_nil_keyanswersderivedInitialEd25519MD2_RSAMD5_RSAserial:SHA_224SHA_256SHA_384SHA_512invaliduintptrSwapperChanDir_Value_internos_execruntime2.5.4.62.5.4.32.5.4.52.5.4.72.5.4.82.5.4.9avx512fosxsavePREFIX_::1_:53continue_gatewayshutdownaddress_wsaioctlunixgram48828125strconv.parsing_ParseIntThursdaySaturdayFebruaryNovemberDecember__Month_bad_timeflags:___n__EDE:__n__ESU:__s:___s_ECC_GOSTINDIRECTCensoredFilteredSERVFAILNXDOMAINYXDOMAINBADTRUNCipv4hintipv6hintAMTRELAYIPSECKEYReservedNSAP_PTREqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromGoStringFullPathscavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnablerax_____rbx_____rcx_____rdi_____rsi_____rbp_____rsp_____r8______r9______r10_____r11_____r12_____r13_____r14_____r15_____rip_____rflags__cs______fs______gs_______is_not__pointer_packedBAD_RANK_status_unknown_trigger_npages_nalloc_nfreed_signal__newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_no_anodeClassANYQuestionCurveID_finishedexporterSHA1_RSADSA_SHA1x509sha1DNS_nameMD5SHA1SHA3_224SHA3_256SHA3_384SHA3_512net_httpgo_build2.5.4.102.5.4.112.5.4.17avx512cdavx512eravx512pfavx512vlavx512bwavx512dqntdll.dll.DOMAIN_outboundlocalhostconnectexfiles_dnsdns_filesipv6_icmp244140625ParseUintWednesdaySeptemberbad_rcodebad_rdata_n__NSID:_R
mov ecx, 1
mov rdi, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x60]
lea r8, [0x00654943]
mov r9d, 2
mov r10, qword [rsp + 0x98]
mov r11, qword [rsp + 0x58]
call sym.runtime.concatstring4
jmp 0x4e7d68
xor eax, eax
mov rbx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x60]
lea rdi, [0x006bb350]
mov esi, 1
mov r8, qword [rsp + 0x98]
mov r9, qword [rsp + 0x58]
call sym.runtime.concatstring3
add rsp, 0xa8
pop rbp
ret
mov rax, qword [rax + 0x18]
call sym.internal_itoa.Itoa
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x88]
mov qword [rsp], rcx
mov rdx, qword [rsp + 0x48]
mov qword [rsp + 8], rdx
mov byte [rsp + 0x10], 0x3a
call sym.internal_bytealg.IndexByteString.abi0
xorps xmm15, xmm15
mov r14, qword [0x0086bfc8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0
nop
jl 0x4e7dfe
xor eax, eax
lea rbx, str.__S_LMCyO_:__ip53__:_25i___000s_____dDS___m_INCSCHHSDHKXLPMBMDMFMGMRMXNSPXRPRTTA____________n__s__Pn___n__n___n__t____idLlLtLuMniv0b0x0X0o__nOUCNSTudpdnstcp::1setcgoftpssh125625NaNSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecUTC_mStdDltEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614:0x_0XKEYDLVCDSkey_ANYDSAechPGPURIOIDAPLAVCCAAEIDGIDHIPL32L64LOCNIDNXTOPTPTRSIGSOASPFSRVTXTUIDX25EOFnil_:__finptrobjgc__:_gp___in__n___n_____P__MPC___end___..._:_n___pc__GTTLRSAMD4MD5SETintmapadxaesshaavxfmanet____25___dialbindfile__r_t_nread_on_pipeunixicmpigmpftpshttppop3smtp3125trueAtoi_InfInfJuneJuly_as_hourEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT_tlsTYPESHA1NONEalpnportPKIXSPKIIPIXIPGPAAAAATMAAXFRCERTGPOSISDNIXFRNSECNULLNoneRKEYSVCBTKEYTLSATSIGopenStatallgallprootitabsbrkidledead_is_LEAFbase_of___GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__mbitsNameTypeasn1boolint8uintchanfunccallkind___ermssse3avx2bmi1bmi2cx16sse2hostsCNAME_nil_writeclosefileshttpsimap2imap3imapspop3s1562578125falseMarchAprilmonthLocal053004300545063003300845103012451345_0930CLASSdns:_udp:__d__d___s_QUERYED448OtherISPKIAFSDBCSYNCDHCIDDNAMEEUI48EUI64HINFOHTTPSMAILAMAILBMINFONAPTRNINFONSEC3RRSIGSSHFPUINFOntohsCall_Error__at_defersweepschedhchansudoggscanmheaptracepanicsleep_cntgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:ClassGreektls:_EarlyECDSASHA_1P_224P_256P_384P_521int16int32int64uint8arrayslicesse41sse42ssse3parsenetdns.localreturnlisten.onionipnetsocketdomaingophertelnet390625SundayMondayFridayAugustminutesecondUTC_11UTC_02UTC_08UTC_09UTC12UTC13nil_rrDNSKEY0._02d_.2fm__.0fm__0.16x_0.16XSHA256GOST94SHA384SHA512IQUERYSTATUSNOTIFYUPDATERSAMD5NOTIMPBADSIGBADKEYBADALGACPKIXNIMLOCSMIMEATALINKUNSPECZONEMDGetACPsendtoStringFormat__bytestringsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base___val_LengthheaderAnswerCommonX25519_w_.0wuint16uint32uint64structchan____chan_Valuerdtscppopcntcmd_goSTREETavx512rdrandrdseedwindowsrunningwsarecvwsasendconnectlookup_19531259765625TuesdayJanuaryOctoberMUI_StdMUI_Dltbad_offNOTIMPLCDNSKEY::ffff:_16.16x_12.12xRSASHA1ED25519BlockedNOERRORFORMERRREFUSEDYXRRSETNXRRSETNOTAUTHNOTZONEBADTIMEBADMODEBADNAMEdohpathIACPKIXCopySidFreeSidSleepExWSARecvWSASendfloat32float64:eventsconsoleforcegccpuprofunknowngctraceIO_waitsyscallwaitingUNKNOWN__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_nil_keyanswersderivedInitialEd25519MD2_RSAMD5_RSAserial:SHA_224SHA_256SHA_384SHA_512invaliduintptrSwapperChanDir_Value_internos_execruntime2.5.4.62.5.4.32.5.4.52.5.4.72.5.4.82.5.4.9avx512fosxsavePREFIX_::1_:53continue_gatewayshutdownaddress_wsaioctlunixgram48828125strconv.parsing_ParseIntThursdaySaturdayFebruaryNovemberDecember__Month_bad_timeflags:___n__EDE:__n__ESU:__s:___s_ECC_GOSTINDIRECTCensoredFilteredSERVFAILNXDOMAINYXDOMAINBADTRUNCipv4hintipv6hintAMTRELAYIPSECKEYReservedNSAP_PTREqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromGoStringFullPathscavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnablerax_____rbx_____rcx_____rdi_____rsi_____rbp_____rsp_____r8______r9______r10_____r11_____r12_____r13_____r14_____r15_____rip_____rflags__cs______fs______gs_______is_not__pointer_packedBAD_RANK_status_unknown_trigger_npages_nalloc_nfreed_signal__newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_no_anodeClassANYQuestionCurveID_finishedexporterSHA1_RSADSA_SHA1x509sha1DNS_nameMD5SHA1SHA3_224SHA3_256SHA3_384SHA3_512net_httpgo_build2.5.4.102.5.4.112.5.4.17avx512cdavx512eravx512pfavx512vlavx512bwavx512dqntdll.dll.DOMAIN_outboundlocalhostconnectexfiles_dnsdns_filesipv6_icmp244140625ParseUintWednesdaySeptemberbad_rcodebad_rdata_n__NSID:_R
mov ecx, 1
mov rdi, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x48]
lea r8, [0x00654943]
mov r9d, 2
mov r10, qword [rsp + 0x90]
mov r11, qword [rsp + 0x50]
call sym.runtime.concatstring4
jmp 0x4e7e2b
xor eax, eax
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x48]
lea rdi, [0x006bb350]
mov esi, 1
mov r8, qword [rsp + 0x90]
mov r9, qword [rsp + 0x50]
call sym.runtime.concatstring3
add rsp, 0xa8
pop rbp
ret
lea rax, [0x00654d70]
mov ebx, 5
add rsp, 0xa8
pop rbp
ret
mov qword [rsp + 8], rax
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
jmp sym.net._TCPAddr_.String