Function at 0x1400508e0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x60
mov byte [rbp + 0x20], Ordinal_50
mov al, 0x4c
mov cl, 0x43
mov dl, 0x4a
mov r8b, Ordinal_79
mov r9b, 0x5d
xor r10d, r10d
xor al, 0x2f
mov byte [rbp + 0x21], al
xor cl, 0x2f
mov byte [rbp + 0x22], cl
xor dl, 0x2f
mov byte [rbp + 0x23], dl
xor r8b, 0x2f
mov byte [rbp + 0x24], r8b
xor r9b, 0x2f
mov byte [rbp + 0x25], r9b
mov byte [rbp + 0x26], r10b
lea rcx, [rbp + 0x21]
mov rbx, 0xffffffffffffffff
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r10b
jne 0x140050940
lea rdi, [0x1400fa208]
mov rcx, rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1400fa208]
mov rsi, qword [0x1400fa218]
cmp rsi, rax
jne 0x14005097f
mov r8, rsi
lea rdx, [rbp + 0x21]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400509e9
mov byte [rbp + 0x20], 0x48
mov al, 0x2b
mov cl, 0x24
mov dl, Ordinal_60
xor r8d, r8d
xor al, 0x48
mov byte [rbp + 0x21], al
xor cl, 0x48
mov byte [rbp + 0x22], cl
xor dl, 0x48
mov byte [rbp + 0x23], dl
mov byte [rbp + 0x24], r8b
lea rcx, [rbp + 0x21]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r8b
jne 0x1400509b0
mov rcx, rdi
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x1400fa208]
cmp rsi, rax
jne 0x140050c3e
mov r8, rsi
lea rdx, [rbp + 0x21]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140050c3e
mov r14d, dword [0x1400fad3c]
cmp r14d, 2
jne 0x140050b10
mov byte [rbp + 0x20], Ordinal_50
xor al, al
mov cl, reloc.WS2_32.dll_recv
xor edx, edx
xor al, 0x2f
mov byte [rbp + 0x21], al
xor cl, 0x2f
mov byte [rbp + 0x22], cl
mov byte [rbp + 0x23], dl
lea rax, [rbp + 0x21]
inc rbx
cmp byte [rax + rbx], dl
jne 0x140050a16
lea rcx, [0x1400fadc0]
cmp qword [0x1400fadd8], 0x10
cmovae rcx, qword [0x1400fadc0]
mov r8, qword [0x1400fadd0]
cmp r8, rbx
jne 0x140050b4d
lea rdx, [rbp + 0x21]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140050b4d
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x1400fa208]
cmp rsi, 0x10
jae 0x140050a86
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x40], xmm0
lea ebx, [rax + 0xf]
jmp 0x140050afa
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140050add
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140050c59
mov rcx, rax
call fcn.14009a8dc
mov rcx, rax
test rax, rax
je 0x140050ad6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140050ae7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140050ae7
call fcn.14009a8dc
mov qword [rbp - 0x40], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rbx
lea rcx, [rbp - 0x40]
call fcn.14004cbd0
jmp 0x140050c37
cmp r14d, 1
jne 0x140050b47
mov byte [rbp + 0x20], 0x69
mov al, 0xa
mov cl, 5
mov dl, reloc.WLDAP32.dll_Ordinal_26
xor r8d, r8d
xor al, 0x69
mov byte [rbp + 0x21], al
xor cl, 0x69
mov byte [rbp + 0x22], cl
xor dl, 0x69
mov byte [rbp + 0x23], dl
mov byte [rbp + 0x24], r8b
lea rcx, [rbp + 0x21]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x140050c37
jle 0x140050c37
lea rax, [rbp - 0x20]
mov qword [rbp + 0x20], rax
lea eax, [r14 - 1]
movsxd rdx, eax
shl rdx, 5
lea rax, [0x1400fada0]
add rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140052220
mov r14, rax
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov rsi, qword [0x1400fa218]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rdi, qword [0x1400fa208]
cmp rsi, 0x10
jae 0x140050bad
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x40], xmm0
lea ebx, [rax + 0xf]
jmp 0x140050c1d
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140050c00
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140050c53
mov rcx, rax
call fcn.14009a8dc
mov rcx, rax
test rax, rax
je 0x140050bf9
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140050c0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140050c0a
call fcn.14009a8dc
mov qword [rbp - 0x40], rax
lea r8, [rsi + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rbx
mov r8d, 1
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.14004c920
mov byte [0x1400fad74], 1
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.140001340
nop
call fcn.140001340
int3