Function at 0x140050c60
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x1400fa070]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov byte [rbp - 0x31], reloc.WS2_32.dll_setsockopt
mov al, 0x66
mov cl, 0x6c
movzx edx, al
mov r8b, 0x61
mov r9b, reloc.WS2_32.dll_WSASetLastError
mov r10b, 0x78
xor r11d, r11d
xor al, 0x15
mov byte [rbp - 0x30], al
xor cl, 0x15
mov byte [rbp - 0x2f], cl
xor dl, 0x15
mov byte [rbp - 0x2e], dl
xor r8b, 0x15
mov byte [rbp - 0x2d], r8b
xor r9b, 0x15
mov byte [rbp - 0x2c], r9b
xor r10b, 0x15
mov byte [rbp - 0x2b], r10b
mov byte [rbp - 0x2a], r11b
lea rcx, [rbp - 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r11b
jne 0x140050ce1
lea r12, [0x1400fa208]
mov rcx, r12
mov r14, qword [reloc.WS2_32.dll_ntohs]
cmp r14, 0x10
mov rsi, qword [0x1400fa208]
cmovae rcx, rsi
mov rbx, qword [0x1400fa218]
cmp rbx, rax
jne 0x140050d26
mov r8, rbx
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140050d85
mov byte [rbp - 0x31], 0x69
mov al, reloc.WLDAP32.dll_Ordinal_26
mov cl, reloc.WS2_32.dll_recv
movzx edx, al
xor r8d, r8d
xor al, 0x69
mov byte [rbp - 0x30], al
xor cl, 0x69
mov byte [rbp - 0x2f], cl
xor dl, 0x69
mov byte [rbp - 0x2e], dl
mov byte [rbp - 0x2d], r8b
lea rcx, [rbp - 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r8b
jne 0x140050d54
mov rcx, r12
cmp r14, 0x10
cmovae rcx, rsi
cmp rbx, rax
jne 0x1400512f5
mov r8, rbx
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400512f5
lea r15, [0x1400fadc0]
cmp dword [0x1400fad3c], 2
jne 0x140050eb1
mov byte [rbp - 0x39], reloc.WLDAP32.dll_Ordinal_32
mov al, reloc.WS2_32.dll_ntohs
mov cl, Ordinal_32
xor edx, edx
xor al, 0x20
mov byte [rbp - 0x38], al
xor cl, 0x20
mov byte [rbp - 0x37], cl
mov byte [rbp - 0x36], dl
lea rcx, [rbp - 0x38]
mov r9, 0xffffffffffffffff
mov rax, r9
nop
inc rax
cmp byte [rcx + rax], dl
jne 0x140050dc0
mov rcx, r15
cmp qword [0x1400fadd8], 0x10
cmovae rcx, qword [0x1400fadc0]
mov r8, qword [0x1400fadd0]
cmp r8, rax
jne 0x140050ec5
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140050ebe
xor edi, edi
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], rdi
cmp r14, 0x10
cmovae r12, rsi
cmp rbx, 0x10
jae 0x140050e27
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x21], xmm0
lea r13d, [rax + 0xf]
jmp 0x140050e9b
mov r13, rbx
or r13, 0xf
movabs rsi, 0x7fffffffffffffff
cmp r13, rsi
cmova r13, rsi
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x140050e7b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140051328
mov rcx, rax
call fcn.14009a8dc
test rax, rax
je 0x140050e74
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140050e88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140050e88
call fcn.14009a8dc
mov rdi, rax
mov qword [rbp - 0x21], rdi
lea r8, [rbx + 1]
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x11], rbx
mov qword [rbp - 9], r13
lea rcx, [rbp - 0x21]
call fcn.14004cbd0
jmp 0x1400512ee
cmp dword [0x1400fad3c], 1
jle 0x140051157
mov r9, 0xffffffffffffffff
xor edi, edi
mov qword [rbp + 7], rdi
mov qword [rbp + 0x17], rdi
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f], r13
mov byte [rbp + 7], dil
mov dword [rbp - 0x31], 1
cmp dword [0x1400fad3c], 1
jle 0x1400510e8
mov r8d, reloc.WLDAP32.dll_Ordinal_22
movabs rcx, 0x7fffffffffffffff
mov byte [rbp - 0x39], 0x42
mov al, 0x62
xor edx, edx
xor al, 0x42
mov byte [rbp - 0x38], al
mov byte [rbp - 0x37], dl
mov rdx, qword [r15 + 0x10]
mov qword [rbp - 1], rdx
lea rax, [rbp - 0x38]
mov rbx, r9
inc rbx
cmp byte [rax + rbx], 0
jne 0x140050f20
mov rax, rcx
sub rax, rdx
cmp rax, rbx
jb 0x140051334
mov qword [rbp - 0x29], r15
cmp qword [r15 + 0x18], 0x10
jb 0x140050f4a
mov rax, qword [r15]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], rdi
lea r12, [rdx + rbx]
mov rsi, r13
lea r14, [rbp - 0x21]
cmp r12, r13
jbe 0x140050fdd
mov rsi, r12
or rsi, 0xf
cmp rsi, rcx
jbe 0x140050f77
mov rsi, rcx
jmp 0x140050f7f
cmp rsi, 0x16
cmovb rsi, r8
mov rcx, rsi
add rcx, 1
cmovb rcx, r9
cmp rcx, 0x1000
jb 0x140050fc3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005132e
mov rcx, rax
call fcn.14009a8dc
test rax, rax
je 0x1400510dd
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov rdx, qword [rbp - 1]
jmp 0x140050fd9
test rcx, rcx
je 0x140050fd6
call fcn.14009a8dc
mov r14, rax
mov rdx, qword [rbp - 1]
jmp 0x140050fd9
mov r14, rdi
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], rsi
mov r8, rdx
mov rdx, qword [rbp - 0x29]
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbp - 1]
add rcx, r14
mov r8, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + r14], 0
lea r9, [rbp - 0x21]
mov rsi, qword [rbp - 0x21]
mov r12, qword [rbp - 9]
cmp r12, 0x10
cmovae r9, rsi
mov rcx, qword [rbp + 0x17]
mov qword [rbp - 0x29], rcx
mov rdx, qword [rbp + 0x1f]
mov rax, rdx
sub rax, rcx
mov r14, qword [rbp - 0x11]
cmp r14, rax
ja 0x14005106c
lea rax, [r14 + rcx]
mov qword [rbp + 0x17], rax
lea rbx, [rbp + 7]
cmp rdx, 0x10
cmovae rbx, qword [rbp + 7]
add rcx, rbx
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r14 + rbx]
mov rcx, qword [rbp - 0x29]
mov byte [rax + rcx], 0
jmp 0x140051085
mov qword [rsp + 0x20], r14
mov rdx, r14
lea rcx, [rbp + 7]
call fcn.1400526f0
mov r12, qword [rbp - 9]
mov rsi, qword [rbp - 0x21]
cmp r12, 0x10
jb 0x1400510b9
lea rdx, [r12 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1400510b1
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400510dd
mov rcx, rsi
call fcn.14009a918
mov r8d, dword [rbp - 0x31]
inc r8d
mov dword [rbp - 0x31], r8d
add r15, 0x20
cmp r8d, dword [0x1400fad3c]
jge 0x1400510e4
mov r9, 0xffffffffffffffff
jmp 0x140050ef1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r13, qword [rbp + 0x1f]
lea rcx, [rbp + 7]
cmp r13, 0x10
cmovae rcx, qword [rbp + 7]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x1400524e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x1400512ee
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005114d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005114d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009a918
jmp 0x1400512ee
lea rax, [rbp - 0x21]
mov qword [rbp - 1], rax
mov eax, dword [0x1400fad3c]
dec eax
movsxd r14, eax
shl r14, 5
lea rax, [0x1400fada0]
add r14, rax
xor edi, edi
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x11], rdi
mov qword [rbp - 9], rdi
mov rax, qword [r14 + 0x10]
mov qword [rbp - 0x29], rax
cmp qword [r14 + 0x18], 0x10
jb 0x140051198
mov r14, qword [r14]
movabs rsi, 0x7fffffffffffffff
mov r13d, reloc.WS2_32.dll_ntohs
cmp rax, 0x10
jae 0x1400511bb
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x21], xmm0
mov r15d, r13d
jmp 0x140051237
mov r15, rax
or r15, r13
cmp r15, rsi
cmova r15, rsi
lea rcx, [r15 + 1]
cmp rcx, 0x1000
jb 0x140051207
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005133a
mov rcx, rax
call fcn.14009a8dc
mov rcx, rax
test rax, rax
je 0x140051200
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140051216
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140051213
call fcn.14009a8dc
jmp 0x140051216
mov rax, rdi
mov qword [rbp - 0x21], rax
mov r8, qword [rbp - 0x29]
inc r8
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rbx, qword [0x1400fa218]
mov rax, qword [rbp - 0x29]
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], r15
mov qword [rbp + 7], rdi
mov qword [rbp + 0x17], rdi
mov qword [rbp + 0x1f], rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r12, qword [0x1400fa208]
cmp rbx, 0x10
jae 0x14005126c
movups xmm0, xmmword [r12]
movups xmmword [rbp + 7], xmm0
jmp 0x1400512d6
mov r13, rbx
or r13, 0xf
cmp r13, rsi
cmova r13, rsi
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x1400512b6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140051322
mov rcx, rax
call fcn.14009a8dc
test rax, rax
je 0x1400512af
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400512c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400512c3
call fcn.14009a8dc
mov rdi, rax
mov qword [rbp + 7], rdi
lea r8, [rbx + 1]
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x17], rbx
mov qword [rbp + 0x1f], r13
xor r8d, r8d
lea rdx, [rbp - 0x21]
lea rcx, [rbp + 7]
call fcn.14004c920
mov byte [0x1400fad74], 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14009a620
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001340
nop
call fcn.140001340
nop
call fcn.140001340
int3
call fcn.1400013e0
nop
call fcn.140001340
int3