Function at 0x140006e40
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x1401a80c0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r10, qword [0x14027f2f0]
mov r13d, 1
test r10, r10
jne 0x140006fd5
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0xbdcac9ce
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x140006eed
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140006ee0
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140006ed1
cmp edx, ebx
jne 0x140006fb5
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x140006fb5
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140006fb5
mov r12d, dword [r11 + 0x20]
dec r10d
mov esi, 0x811c9dc5
lea rcx, [r12 + r10*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x140006f41
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x140006f36
cmp esi, edi
je 0x140006f55
test r10d, r10d
jne 0x140006f21
jmp 0x140006fb5
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r10*2]
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov r10d, dword [rdx + r8*4]
add r10, r9
cmp r10, r11
jbe 0x140006fce
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x140006fce
mov ebx, 0x811c9dc5
mov edi, ebx
jmp 0x140006f94
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add r10, r13
mov al, byte [r10]
cmp al, 0x2e
jne 0x140006f86
jmp 0x140006fa8
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add r10, r13
mov al, byte [r10]
test al, al
jne 0x140006f9d
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x140006fcb
cmp qword [rax + 0x30], 0
jne 0x140006ea5
xor r10d, r10d
mov qword [0x14027f2f0], r10
movdqa xmm0, xmmword [str._L_2_t]
xor ecx, ecx
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x11], 0x3e
mov byte [rbp - 0xf], r13b
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x21], al
add rcx, r13
cmp rcx, 0x11
jb 0x140006fee
and qword [rsp + 0x30], 0
lea rcx, [rbp - 0x21]
and dword [rsp + 0x28], 0
xor r9d, r9d
mov edx, 0x80000000
mov byte [rbp - 0xf], 0
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call r10
cmp rax, 0xffffffffffffffff
je 0x140007036
mov qword [0], r13
mov rdx, qword [0x14027f2e0]
test rdx, rdx
jne 0x140007191
mov rax, qword gs:[0x60]
xor ebx, ebx
mov esi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r8, r15
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400070ac
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x14000709f
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140007090
cmp edx, ebx
jne 0x140007172
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140007172
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140007172
mov r12d, dword [r10 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x140007100
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x1400070f5
cmp edi, esi
je 0x140007114
test r11d, r11d
jne 0x1400070e0
jmp 0x140007172
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov edx, dword [rdx + r8*4]
add rdx, r9
cmp rdx, r10
jbe 0x14000718a
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14000718a
mov ebx, 0x811c9dc5
mov esi, ebx
jmp 0x140007153
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140007145
jmp 0x140007166
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
test al, al
jne 0x14000715b
mov r8, qword [r15]
mov rax, qword [r8]
mov r8, rax
cmp rax, r15
je 0x140007188
cmp qword [rax + 0x30], 0
jne 0x140007064
xor edx, edx
mov qword [0x14027f2e0], rdx
mov dword [rbp - 0x49], 0x1b0d2336
xor ecx, ecx
mov dword [rbp - 0x45], 0xc090a2c
mov dword [rbp - 0x41], 0x7060d46
mov word [rbp - 0x3d], 0x100
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x49], al
add rcx, r13
cmp rcx, 0xc
jb 0x1400071ae
lea rcx, [rbp - 0x49]
mov byte [rbp - 0x3c], 0
call rdx
test rax, rax
je 0x1400071d5
mov qword [0], r13
and qword [rbp + 0x1f], 0
mov r13d, 0xdf6a51c
mov r10, qword [0x14027f2c8]
test r10, r10
jne 0x140007343
mov rax, qword gs:[0x60]
xor esi, esi
mov r15d, r13d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov r8, r12
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140007254
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140007247
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140007238
cmp edx, esi
jne 0x140007323
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x140007323
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140007323
mov r14d, dword [r11 + 0x20]
dec r10d
mov ebx, 0x811c9dc5
lea rcx, [r9 + r10*4]
mov edx, dword [rcx + r14]
add rdx, r9
jmp 0x1400072a8
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x14000729d
cmp ebx, r15d
je 0x1400072bd
test r10d, r10d
jne 0x140007288
jmp 0x140007323
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r10*2]
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov r10d, dword [rdx + r8*4]
add r10, r9
cmp r10, r11
jbe 0x14000733c
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x14000733c
mov eax, 0x811c9dc5
mov esi, eax
mov r15d, eax
jmp 0x1400072ff
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400072f1
jmp 0x140007315
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x140007308
mov r8, qword [r12]
mov rax, qword [r8]
mov r8, rax
cmp rax, r12
je 0x140007339
cmp qword [rax + 0x30], 0
jne 0x14000720c
xor r10d, r10d
mov qword [0x14027f2c8], r10
movdqa xmm0, xmmword [0x14018ce50]
xor ecx, ecx
movdqa xmm1, xmmword [0x14018cd60]
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 1], 0xe7e6c0a0
movdqu xmmword [rbp - 0x11], xmm1
mov dword [rbp + 3], 0xe8eff1ed
mov dword [rbp + 7], 0x100fae6
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x21], al
inc rcx
cmp rcx, 0x2a
jb 0x140007374
lea rax, [rbp + 0x1f]
mov byte [rbp + 0xa], 0
mov r9d, 0x20019
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp - 0x21]
mov rcx, 0xffffffff80000002
call r10
mov r15d, 0x1242154a
mov dword [rbp + 0x17], r15d
test eax, eax
jne 0x14000753c
mov rcx, qword [rbp + 0x1f]
test rcx, rcx
je 0x14000753c
mov rdx, qword [0x14027f2b8]
test rdx, rdx
jne 0x14000752e
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov r8, r12
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x14000743b
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x14000742d
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14000741e
cmp edx, r14d
jne 0x14000750b
mov r10, qword [r8 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x14000750b
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x14000750b
mov esi, dword [r9 + 0x20]
dec r11d
mov ebx, 0x811c9dc5
lea rcx, [rsi + r11*4]
mov edx, dword [rcx + r10]
add rdx, r10
jmp 0x14000748f
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140007484
cmp ebx, r15d
je 0x1400074a4
test r11d, r11d
jne 0x14000746f
jmp 0x14000750b
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x140007523
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140007523
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1400074e9
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1400074d9
jmp 0x1400074fe
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1400074f1
mov r8, qword [r12]
mov rax, qword [r8]
mov r8, rax
cmp rax, r12
je 0x140007521
cmp qword [rax + 0x30], 0
jne 0x1400073f1
xor edx, edx
mov rcx, qword [rbp + 0x1f]
mov qword [0x14027f2b8], rdx
call rdx
mov qword [0], 1
and qword [rbp + 0x1f], 0
mov r10, qword [0x14027f2c8]
test r10, r10
jne 0x1400076a2
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r8, r15
movups xmm0, xmmword [r8 + 0x58]
mov r12d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x1400075b9
psrldq xmm0, 8
mov edx, r12d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400075ab
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14000759c
cmp edx, r14d
jne 0x140007682
mov r11, qword [r8 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x140007682
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140007682
mov esi, dword [r9 + 0x20]
dec r10d
mov ebx, r12d
lea rcx, [r11 + r10*4]
mov edx, dword [rcx + rsi]
add rdx, r11
jmp 0x14000760a
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1400075ff
cmp ebx, r13d
je 0x14000761f
test r10d, r10d
jne 0x1400075ed
jmp 0x140007682
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x14000769b
lea rcx, [r9 + rax]
cmp r10, rcx
jae 0x14000769b
mov r14d, r12d
mov r13d, r12d
jmp 0x14000765f
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14000764f
jmp 0x140007675
movsx eax, al
xor eax, r13d
imul r13d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x140007668
mov r8, qword [r15]
mov rax, qword [r8]
mov r8, rax
cmp rax, r15
je 0x140007698
cmp qword [rax + 0x30], 0
jne 0x14000756b
xor r10d, r10d
mov qword [0x14027f2c8], r10
movdqa xmm0, xmmword [0x14018cf10]
xor edx, edx
movdqu xmmword [rbp - 0x21], xmm0
mov dword [rbp - 0x11], 0x3d3d3824
mov dword [rbp - 0xd], 0x40f2628
mov dword [rbp - 9], 0x171c0c
mov byte [rbp - 5], 1
lea eax, [rdx + 0x60]
xor byte [rbp + rdx - 0x21], al
inc rdx
cmp rdx, 0x1b
jb 0x1400076ca
lea rax, [rbp + 0x1f]
mov byte [rbp - 5], 0
mov r9d, 0x20019
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea rdx, [rbp - 0x21]
mov rcx, 0xffffffff80000002
call r10
test eax, eax
jne 0x140008332
and dword [rbp + 0x27], eax
mov r15d, 0xc2c33c3d
mov r8, qword [0x14027f320]
mov dword [rbp + 0x2b], 0x100
mov dword [rbp + 0xf], r15d
test r8, r8
jne 0x14000787c
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov r8, r12
movups xmm0, xmmword [r8 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140007792
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140007784
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140007775
cmp edx, r14d
jne 0x14000785c
mov r10, qword [r8 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x14000785c
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x14000785c
mov esi, dword [r9 + 0x20]
dec r11d
mov ebx, r13d
lea rcx, [r10 + r11*4]
mov edx, dword [rcx + rsi]
add rdx, r10
jmp 0x1400077e3
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1400077d8
cmp ebx, r15d
je 0x1400077f8
test r11d, r11d
jne 0x1400077c6
jmp 0x14000785c
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov r8d, dword [rdx + r8*4]
add r8, r10
cmp r8, r9
jbe 0x140007875
lea rcx, [rax + r9]
cmp r8, rcx
jae 0x140007875
mov r14d, r13d
mov r15d, r13d
jmp 0x140007838
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140007828
jmp 0x14000784e
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x140007841
mov r8, qword [r12]
mov rax, qword [r8]
mov r8, rax
cmp rax, r12
je 0x140007872
cmp qword [rax + 0x30], 0
jne 0x140007744
xor r8d, r8d
mov qword [0x14027f320], r8
mov edx, 0x10a
mov ecx, 0x40
call r8
mov r10, qword [0x14027f360]
mov r15d, 0x9027eb7c
mov dword [rbp + 0x13], r15d
mov r13, rax
test r10, r10
jne 0x1400079fc
mov rcx, qword gs:[0x60]
xor r14d, r14d
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r10, r12
movups xmm0, xmmword [r10 + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x14000790a
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1400078fc
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1400078ed
cmp edx, r14d
jne 0x1400079dc
mov r11, qword [r10 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x1400079dc
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x1400079dc
mov esi, dword [r9 + 0x20]
dec r8d
mov ebx, 0x811c9dc5
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r11]
add rdx, r11
jmp 0x14000795e
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140007953
cmp ebx, r15d
je 0x140007973
test r8d, r8d
jne 0x14000793e
jmp 0x1400079dc
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r8*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x1400079f5
lea rcx, [rax + r9]
cmp r10, rcx
jae 0x1400079f5
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1400079b8
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400079a8
jmp 0x1400079ce
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x1400079c1
mov r10, qword [r12]
mov rax, qword [r10]
mov r10, rax
cmp rax, r12
je 0x1400079f2
cmp qword [rax + 0x30], 0
jne 0x1400078c0
xor r10d, r10d
mov qword [0x14027f360], r10
movdqa xmm0, xmmword [0x14018cc70]
xor ecx, ecx
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x11], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0xf], 1
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x21], al
inc rcx
cmp rcx, 0x11
jb 0x140007a15
mov rcx, qword [rbp + 0x1f]
lea rax, [rbp + 0x2b]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x27]
xor r8d, r8d
mov qword [rsp + 0x20], r13
lea rdx, [rbp - 0x21]
mov byte [rbp - 0xf], 0
call r10
test eax, eax
jne 0x140007ac5
or rax, 0xffffffffffffffff
inc rax
cmp byte [rax + r13], 0
jne 0x140007a51
test eax, eax
je 0x140007a78
mov rbx, r13
mov edi, eax
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
inc rbx
sub rdi, 1
jne 0x140007a64
cmp dword [rbp + 0x27], 1
je 0x140007a84
cmp dword [rbp + 0x27], 7
jne 0x140007ac5
mov dword [rbp - 0x59], 0x1b0d0316
xor ecx, ecx
mov word [rbp - 0x55], 0x100
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 4
jb 0x140007a93
lea rdx, [rbp - 0x59]
mov byte [rbp - 0x54], 0
mov rcx, r13
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140007ac5
mov qword [0], 1
mov rdx, qword [0x14027f2b0]
mov r15d, 0xbf0306f6
mov dword [rbp - 0x59], r15d
test rdx, rdx
jne 0x140007c32
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov r11, r12
movups xmm0, xmmword [r11 + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140007b43
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140007b35
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140007b26
cmp edx, r14d
jne 0x140007c13
mov r10, qword [r11 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140007c13
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x140007c13
mov esi, dword [r9 + 0x20]
dec r8d
mov ebx, 0x811c9dc5
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r10]
add rdx, r10
jmp 0x140007b97
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140007b8c
cmp ebx, r15d
je 0x140007bac
test r8d, r8d
jne 0x140007b77
jmp 0x140007c13
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r8*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x140007c2b
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140007c2b
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140007bf1
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140007be1
jmp 0x140007c06
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140007bf9
mov r11, qword [r12]
mov rax, qword [r11]
mov r11, rax
cmp rax, r12
je 0x140007c29
cmp qword [rax + 0x30], 0
jne 0x140007af9
xor edx, edx
mov qword [0x14027f2b0], rdx
mov rcx, r13
call rdx
mov r8, qword [0x14027f320]
and dword [rbp + 0x27], 0
mov dword [rbp + 0x2b], 0x200
test r8, r8
jne 0x140007db0
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r11, r15
movups xmm0, xmmword [r11 + 0x58]
mov r12d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140007cba
psrldq xmm0, 8
mov edx, r12d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140007cac
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140007c9d
cmp edx, r14d
jne 0x140007d90
mov r10, qword [r11 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140007d90
mov r8d, dword [r9 + 0x18]
test r8d, r8d
je 0x140007d90
mov esi, dword [r9 + 0x20]
dec r8d
mov ebx, r12d
lea rcx, [rsi + r8*4]
mov edx, dword [rcx + r10]
add rdx, r10
jmp 0x140007d0c
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140007d01
cmp ebx, dword [rbp + 0xf]
je 0x140007d21
test r8d, r8d
jne 0x140007cee
jmp 0x140007d90
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r8*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov r8d, dword [rdx + r8*4]
add r8, r10
cmp r8, r9
jbe 0x140007da9
lea rcx, [rax + r9]
cmp r8, rcx
jae 0x140007da9
mov ecx, r12d
mov r14d, r12d
mov dword [rbp + 0xf], ecx
jmp 0x140007d64
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140007d54
inc r8
mov al, byte [r8]
test al, al
je 0x140007d8d
movsx eax, al
inc r8
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [r8]
test al, al
jne 0x140007d75
mov dword [rbp + 0xf], ecx
mov r11, qword [r15]
mov rax, qword [r11]
mov r11, rax
cmp rax, r15
je 0x140007da6
cmp qword [rax + 0x30], 0
jne 0x140007c6c
xor r8d, r8d
mov qword [0x14027f320], r8
mov edx, 0x20a
mov ecx, 0x40
call r8
mov r10, qword [0x14027f360]
mov r12, rax
test r10, r10
jne 0x140007f2e
mov rcx, qword gs:[0x60]
xor r14d, r14d
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov r8, r15
movups xmm0, xmmword [r8 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140007e38
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140007e2a
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140007e1b
cmp edx, r14d
jne 0x140007f0e
mov r11, qword [r8 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x140007f0e
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140007f0e
mov esi, dword [r9 + 0x20]
dec r10d
mov ebx, r13d
lea rcx, [rsi + r10*4]
mov edx, dword [rcx + r11]
add rdx, r11
jmp 0x140007e8a
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140007e7f
cmp ebx, dword [rbp + 0x13]
je 0x140007e9f
test r10d, r10d
jne 0x140007e6c
jmp 0x140007f0e
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x140007f27
lea rcx, [rax + r9]
cmp r10, rcx
jae 0x140007f27
mov ecx, r13d
mov r14d, r13d
mov dword [rbp + 0x13], ecx
jmp 0x140007ee2
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x140007ed2
inc r10
mov al, byte [r10]
test al, al
je 0x140007f0b
movsx eax, al
inc r10
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [r10]
test al, al
jne 0x140007ef3
mov dword [rbp + 0x13], ecx
mov r8, qword [r15]
mov rax, qword [r8]
mov r8, rax
cmp rax, r15
je 0x140007f24
cmp qword [rax + 0x30], 0
jne 0x140007dea
xor r10d, r10d
mov qword [0x14027f360], r10
movdqa xmm0, xmmword [0x14018ccc0]
xor ecx, ecx
movdqu xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x39], 0x100
lea r13d, [rcx + 1]
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x49], al
add rcx, r13
cmp rcx, 0x10
jb 0x140007f47
mov rcx, qword [rbp + 0x1f]
lea rax, [rbp + 0x2b]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x27]
xor r8d, r8d
mov qword [rsp + 0x20], r12
lea rdx, [rbp - 0x49]
mov byte [rbp - 0x38], 0
call r10
test eax, eax
jne 0x14000805a
cmp dword [rbp + 0x27], 7
jne 0x14000805a
mov rbx, r12
cmp byte [r12], al
je 0x14000805a
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140007f9e
test eax, eax
je 0x140007fc3
mov rdi, rbx
mov esi, eax
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rdi], al
add rdi, r13
sub rsi, r13
jne 0x140007fb0
mov dword [rbp - 0x51], 0x3130f
xor ecx, ecx
mov dword [rbp - 0x4d], 0x1000008
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x51], al
add rcx, r13
cmp rcx, 6
jb 0x140007fd3
lea rdx, [rbp - 0x51]
mov byte [rbp - 0x4a], 0
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140008036
mov dword [rbp - 0x31], 0x17100816
xor ecx, ecx
mov dword [rbp - 0x2d], 0x50a0411
mov dword [rbp - 0x29], 0x1001107
lea eax, [rcx + 0x60]
xor byte [rbp + rcx - 0x31], al
add rcx, r13
cmp rcx, 0xa
jb 0x140008010
lea rdx, [rbp - 0x31]
mov byte [rbp - 0x26], 0
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000803e
mov qword [0], r13
or rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], 0
jne 0x140008042
inc rbx
add rbx, rax
cmp byte [rbx], 0
jne 0x140007f9a
mov rdx, qword [0x14027f2b0]
test rdx, rdx
jne 0x1400081c0
mov rax, qword gs:[0x60]
xor ebx, ebx
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400080cb
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400080be
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400080af
cmp edx, ebx
jne 0x1400081a1
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1400081a1
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1400081a1
mov r15d, dword [r10 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r9 + r11*4]
mov edx, dword [rcx + r15]
add rdx, r9
jmp 0x14000811f
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x140008114
cmp edi, dword [rbp - 0x59]
je 0x140008134
test r11d, r11d
jne 0x1400080ff
jmp 0x1400081a1
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov edx, dword [rdx + r8*4]
add rdx, r9
cmp rdx, r10
jbe 0x1400081b9
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x1400081b9
mov eax, 0x811c9dc5
mov ebx, eax
mov dword [rbp - 0x59], eax
mov ecx, eax
jmp 0x140008178
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14000816a
add rdx, r13
mov al, byte [rdx]
test al, al
je 0x14000819e
movsx eax, al
add rdx, r13
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
test al, al
jne 0x140008187
mov dword [rbp - 0x59], ecx
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x1400081b7
cmp qword [rax + 0x30], 0
jne 0x140008083
xor edx, edx
mov qword [0x14027f2b0], rdx
mov rcx, r12
call rdx
mov rdx, qword [0x14027f2b8]
test rdx, rdx
jne 0x14000832a
mov rax, qword gs:[0x60]
xor ebx, ebx
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r8, rsi
movups xmm0, xmmword [r8 + 0x58]
mov r12d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x14000823a
psrldq xmm0, 8
mov edx, r12d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x14000822d
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14000821e
cmp edx, ebx
jne 0x14000830b
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14000830b
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14000830b
mov r15d, dword [r10 + 0x20]
dec r11d
mov edi, r12d
lea rcx, [r9 + r11*4]
mov edx, dword [rcx + r15]
add rdx, r9
jmp 0x14000828c
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x140008281
cmp edi, dword [rbp + 0x17]
je 0x1400082a1
test r11d, r11d
jne 0x14000826e
jmp 0x14000830b
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov edx, dword [rdx + r8*4]
add rdx, r9
cmp rdx, r10
jbe 0x140008323
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x140008323
mov ecx, r12d
mov ebx, r12d
mov dword [rbp + 0x17], ecx
jmp 0x1400082e2
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1400082d4
add rdx, r13
mov al, byte [rdx]
test al, al
je 0x140008308
movsx eax, al
add rdx, r13
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
test al, al
jne 0x1400082f1
mov dword [rbp + 0x17], ecx
mov r8, qword [rsi]
mov rax, qword [r8]
mov r8, rax
cmp rax, rsi
je 0x140008321
cmp qword [rax + 0x30], 0
jne 0x1400081ee
xor edx, edx
mov qword [0x14027f2b8], rdx
mov rcx, qword [rbp + 0x1f]
call rdx
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140148a70
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret