Function at 0x140055590
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x310
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140142080]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov r10, qword [0x1401466b8]
test r10, r10
jne 0x140055796
mov rax, qword gs:[0x60]
xor r9d, r9d
mov edi, 0xbdcac9ce
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x10], xmm0
sub ax, 8
test r9d, r9d
je 0x14005564d
mov rcx, qword [rbp + 0x18]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140055644
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140055630
cmp edx, r9d
jne 0x140055776
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rcx, qword [rax + r11 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r11
cmp rbx, r11
je 0x140055776
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140055776
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400556c7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400556b0
cmp edx, edi
je 0x1400556d5
test r8d, r8d
jne 0x140055690
jmp 0x140055776
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
cmp r10, rbx
jbe 0x14005578f
lea rax, [r15 + rbx]
cmp r10, rax
jae 0x14005578f
movzx eax, byte [r10]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005573c
nop dword [rax + rax]
movsx eax, al
inc r10
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x140055720
mov dword [rbp], r9d
movzx eax, byte [r10 + 1]
inc r10
test al, al
je 0x14005576a
nop dword [rax + rax]
movsx eax, al
lea r10, [r10 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r10]
test al, al
jne 0x140055750
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x14005578c
cmp qword [rax + 0x30], 0
jne 0x140055600
xor r10d, r10d
mov qword [0x1401466b8], r10
movabs rcx, 0x4e4d7cd723fb8286
mov qword [rsp + 0x30], 0
movabs rax, 0x6c2ad9aa18c7a597
mov dword [rsp + 0x28], 0
mov qword [rbp + 0x10], rax
movabs r13, 0x14459bfc44e9f9cb
mov rax, qword [rbp + 0x10]
movabs r12, 0x217e3dbd65e8dbe4
mov qword [rbp + 0x100], rax
xor r9d, r9d
movabs rax, 0x650c59ef0c86b2a9
mov dword [rsp + 0x20], 3
mov qword [rbp + 0x10], rax
mov edx, 0x80000000
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x108], rax
lea r8d, [r9 + 7]
movabs rax, 0xf96d16d66ae7f5a3
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x10], rcx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x220], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x228], rax
movabs rax, 0xf96d16d66ae7f5ed
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x10], rcx
lea rcx, [rbp + 0x100]
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x238], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x100], ymm1
vzeroupper
call r10
cmp rax, 0xffffffffffffffff
je 0x1400558e6
call fcn.140061210
xor r8d, r8d
lea r9, [rbp + 0x174]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x184]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rdx, qword [0x1401466b0]
test rdx, rdx
jne 0x140055abe
mov rax, qword gs:[0x60]
xor r9d, r9d
mov edi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x10], xmm0
sub ax, 8
test r9d, r9d
je 0x14005596d
mov rcx, qword [rbp + 0x18]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140055964
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140055950
cmp edx, r9d
jne 0x140055a95
mov r10, qword [rsi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r10
cmp rbx, r10
je 0x140055a95
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140055a95
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r10 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400559e7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400559d0
cmp edx, edi
je 0x1400559f5
test r8d, r8d
jne 0x1400559b0
jmp 0x140055a95
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov edx, dword [rcx + rdx*4]
add rdx, r10
cmp rdx, rbx
jbe 0x140055aad
lea rax, [rbx + r15]
cmp rdx, rax
jae 0x140055aad
movzx eax, byte [rdx]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x140055a5b
nop dword [rax]
movsx eax, al
inc rdx
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140055a40
mov dword [rbp], r9d
movzx eax, byte [rdx + 1]
inc rdx
test al, al
je 0x140055a89
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
test al, al
jne 0x140055a70
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140055aab
cmp qword [rax + 0x30], 0
jne 0x140055920
xor edx, edx
mov qword [0x1401466b0], rdx
movabs r12, 0x217e3dbd65e8dbe4
movabs rax, 0x7f2af4b43c86bb9d
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x60], rax
movabs rax, 0x217e3dbd0984bfca
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
movdqa xmm0, xmmword [rbp + 0x60]
mov qword [rbp + 0x198], rax
pxor xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rbp + 0x60], xmm0
call rdx
test rax, rax
je 0x140055b67
call fcn.140061210
xor r8d, r8d
lea r9, [rbp + 0x16c]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x180]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov r10, qword [0x1401466a8]
mov r13d, 0xdf6a51c
mov qword [rbp + 0x160], 0
test r10, r10
jne 0x140055d50
mov rax, qword gs:[0x60]
xor r9d, r9d
mov edi, r13d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x10], xmm0
sub ax, 8
test r9d, r9d
je 0x140055bfd
mov rcx, qword [rbp + 0x18]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140055bf4
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140055be0
cmp edx, r9d
jne 0x140055d26
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rcx, qword [rax + r11 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r11
cmp rbx, r11
je 0x140055d26
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140055d26
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140055c77
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140055c60
cmp edx, edi
je 0x140055c85
test r8d, r8d
jne 0x140055c40
jmp 0x140055d26
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
cmp r10, rbx
jbe 0x140055d3f
lea rax, [rbx + r15]
cmp r10, rax
jae 0x140055d3f
movzx eax, byte [r10]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x140055cec
nop dword [rax + rax]
movsx eax, al
inc r10
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x140055cd0
mov dword [rbp], r9d
movzx eax, byte [r10 + 1]
inc r10
test al, al
je 0x140055d1a
nop dword [rax + rax]
movsx eax, al
lea r10, [r10 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r10]
test al, al
jne 0x140055d00
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140055d3c
cmp qword [rax + 0x30], 0
jne 0x140055bb0
xor r10d, r10d
mov qword [0x1401466a8], r10
movabs r12, 0x217e3dbd65e8dbe4
movabs rax, 0x5117daab10afb698
lea rdx, [rbp + 0x120]
mov qword [rbp + 0x10], rax
mov r9d, 0x20019
mov rax, qword [rbp + 0x10]
xor r8d, r8d
mov qword [rbp + 0x120], rax
mov rcx, 0xffffffff80000002
movabs rax, 0x7d1b51de049a94b8
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x128], rax
movabs rax, 0xbb0177a31e959cbb
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x130], rax
movabs rax, 0x3a3e19a264dbfae9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x138], rax
movabs rax, 0xd4ec94c97542a7df
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x140], rax
movabs rax, 0x3d7086a1d4983106
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x148], rax
movabs rax, 0x14459bfc44e9f9cb
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xf96d16d66ae7f5ed
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4e4d7cd723fb8286
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xbb85e0a01126e6ff
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x200], rax
movabs rax, 0x3d7086a1d4984268
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
movdqa xmm2, xmmword [rbp + 0x140]
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
mov qword [rbp + 0x208], rax
lea rax, [rbp + 0x160]
vpxor xmm2, xmm2, xmmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqa xmmword [rbp + 0x140], xmm2
mov qword [rsp + 0x20], rax
vzeroupper
call r10
mov r8d, 0x1242154a
mov qword [rbp + 0x10], r8
test eax, eax
jne 0x140056109
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x140056109
mov rdx, qword [0x140146698]
test rdx, rdx
jne 0x1400560c5
mov rax, qword gs:[0x60]
xor r9d, r9d
mov edi, r8d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x20], xmm0
sub ax, 8
test r9d, r9d
je 0x140055f6d
mov rcx, qword [rbp + 0x28]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140055f64
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140055f50
cmp edx, r9d
jne 0x140056095
mov r10, qword [rsi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r10
cmp rbx, r10
je 0x140056095
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140056095
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r10 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140055fe7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140055fd0
cmp edx, edi
je 0x140055ff5
test r8d, r8d
jne 0x140055fb0
jmp 0x140056095
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov edx, dword [rcx + rdx*4]
add rdx, r10
cmp rdx, rbx
jbe 0x1400560ad
lea rax, [rbx + r15]
cmp rdx, rax
jae 0x1400560ad
movzx eax, byte [rdx]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005605b
nop dword [rax]
movsx eax, al
inc rdx
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140056040
mov dword [rbp], r9d
movzx eax, byte [rdx + 1]
inc rdx
test al, al
je 0x140056089
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
test al, al
jne 0x140056070
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x1400560ab
cmp qword [rax + 0x30], 0
jne 0x140055f20
xor edx, edx
mov rcx, qword [rbp + 0x160]
movabs r12, 0x217e3dbd65e8dbe4
mov qword [0x140146698], rdx
call rdx
call fcn.140061210
xor r8d, r8d
lea r9, [rbp + 0x16d]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x17c]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov r10, qword [0x1401466a8]
mov qword [rbp + 0x160], 0
test r10, r10
jne 0x1400562d5
mov rax, qword gs:[0x60]
xor r9d, r9d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
nop
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x20], xmm0
sub ax, 8
test r9d, r9d
je 0x14005618d
mov rcx, qword [rbp + 0x28]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140056184
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140056170
cmp edx, r9d
jne 0x1400562b5
mov r11, qword [rdi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rcx, qword [rax + r11 + 0x88]
mov r14, rcx
mov ebx, ecx
shr r14, 0x20
add rbx, r11
cmp rbx, r11
je 0x1400562b5
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400562b5
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r11 + r8*4]
mov ecx, dword [rax + rsi]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140056207
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400561f0
cmp edx, r13d
je 0x140056216
test r8d, r8d
jne 0x1400561d0
jmp 0x1400562b5
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
cmp r10, rbx
jbe 0x1400562ce
lea rax, [rbx + r14]
cmp r10, rax
jae 0x1400562ce
movzx eax, byte [r10]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005627c
nop dword [rax]
movsx eax, al
inc r10
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x140056260
mov dword [rbp], r9d
movzx eax, byte [r10 + 1]
inc r10
test al, al
je 0x1400562aa
nop dword [rax + rax]
movsx eax, al
lea r10, [r10 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r10]
test al, al
jne 0x140056290
mov dword [rbp + 4], ecx
mov r13, qword [rbp]
mov rdi, qword [r15]
shr r13, 0x20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x1400562cb
cmp qword [rax + 0x30], 0
jne 0x140056140
xor r10d, r10d
mov qword [0x1401466a8], r10
movabs rax, 0x5117daab00bbb883
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x20], rax
mov r9d, 0x20019
mov rax, qword [rbp + 0x20]
xor r8d, r8d
mov qword [rbp + 0xe0], rax
mov rcx, 0xffffffff80000002
movabs rax, 0x71376ffe36ad9fb8
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
movabs rax, 0x8a14458a24a8bcb9
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
movabs rax, 0x4e4d7cd72396e7f2
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
movabs rax, 0x14459bfc44e9f9cb
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x248], rax
movabs rax, 0xf96d16d66ae7f5ed
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x250], rax
movabs rax, 0x4e4d7cd723fb8286
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x258], rax
lea rax, [rbp + 0x160]
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xe0], ymm1
mov qword [rsp + 0x20], rax
vzeroupper
call r10
test eax, eax
jne 0x140057565
mov r8, qword [0x1401466c0]
mov dword [rbp + 0x168], eax
mov eax, 0xc2c33c3d
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x170], 0x100
test r8, r8
jne 0x1400565c6
mov edi, eax
xor r9d, r9d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x20], xmm0
sub ax, 8
test r9d, r9d
je 0x14005647d
mov rcx, qword [rbp + 0x28]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140056474
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140056460
cmp edx, r9d
jne 0x1400565a6
mov r10, qword [rsi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r10
cmp rbx, r10
je 0x1400565a6
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400565a6
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r14 + r8*4]
mov ecx, dword [rax + r10]
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400564f7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400564e0
cmp edx, edi
je 0x140056505
test r8d, r8d
jne 0x1400564c0
jmp 0x1400565a6
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov r8d, dword [rcx + rdx*4]
add r8, r10
cmp r8, rbx
jbe 0x1400565bf
lea rax, [r15 + rbx]
cmp r8, rax
jae 0x1400565bf
movzx eax, byte [r8]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005656c
nop dword [rax + rax]
movsx eax, al
inc r8
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x140056550
mov dword [rbp], r9d
movzx eax, byte [r8 + 1]
inc r8
test al, al
je 0x14005659a
nop dword [rax + rax]
movsx eax, al
lea r8, [r8 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r8]
test al, al
jne 0x140056580
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x1400565bc
cmp qword [rax + 0x30], 0
jne 0x140056430
xor r8d, r8d
mov qword [0x1401466c0], r8
mov edx, 0x10a
mov ecx, 0x40
call r8
mov r10, qword [0x1401466e0]
mov r13, rax
mov eax, 0x9027eb7c
mov qword [rbp + 8], rax
test r10, r10
jne 0x1400567a6
mov rcx, qword gs:[0x60]
xor r9d, r9d
mov edi, eax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov rsi, r12
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x20], xmm0
sub ax, 8
test r9d, r9d
je 0x14005665d
mov rcx, qword [rbp + 0x28]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140056654
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140056640
cmp edx, r9d
jne 0x140056786
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rcx, qword [rax + r11 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r11
cmp rbx, r11
je 0x140056786
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140056786
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r14 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400566d7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400566c0
cmp edx, edi
je 0x1400566e5
test r8d, r8d
jne 0x1400566a0
jmp 0x140056786
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
cmp r10, rbx
jbe 0x14005679f
lea rax, [r15 + rbx]
cmp r10, rax
jae 0x14005679f
movzx eax, byte [r10]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005674c
nop dword [rax + rax]
movsx eax, al
inc r10
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x140056730
mov dword [rbp], r9d
movzx eax, byte [r10 + 1]
inc r10
test al, al
je 0x14005677a
nop dword [rax + rax]
movsx eax, al
lea r10, [r10 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r10]
test al, al
jne 0x140056760
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x14005679c
cmp qword [rax + 0x30], 0
jne 0x140056610
xor r10d, r10d
mov qword [0x1401466e0], r10
movabs rcx, 0x4e4d7cd723fb8286
lea r9, [rbp + 0x168]
movabs rax, 0x7d07f699309a8098
lea rdx, [rbp + 0xc0]
mov qword [rbp + 0x20], rax
movabs rbx, 0x14459bfc44e9f9cb
mov rax, qword [rbp + 0x20]
movabs rsi, 0x217e3dbd65e8dbe4
mov qword [rbp + 0xc0], rax
xor r8d, r8d
movabs rax, 0x4e174ecf00bea88b
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xc8], rax
movabs rax, 0xf96d16d66ae7f583
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x268], rax
movabs rax, 0xf96d16d66ae7f5ed
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x278], rax
lea rax, [rbp + 0x170]
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
mov qword [rsp + 0x28], rax
vmovdqa ymmword [rbp + 0xc0], ymm1
mov qword [rsp + 0x20], r13
vzeroupper
call r10
test eax, eax
jne 0x140056972
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rax + r13], 0
jne 0x1400568c0
test eax, eax
je 0x1400568f2
mov rbx, r13
mov edi, eax
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x1400568d3
movabs rbx, 0x14459bfc44e9f9cb
mov eax, dword [rbp + 0x168]
cmp eax, 1
je 0x140056902
cmp eax, 7
jne 0x140056972
movabs rax, 0x14459bfc3c869bbd
lea rdx, [rbp + 0x50]
mov qword [rbp + 0x20], rax
mov rcx, r13
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
movdqa xmm0, xmmword [rbp + 0x50]
mov qword [rbp + 0x1a8], rax
pxor xmm0, xmmword [rbp + 0x1a0]
movdqa xmmword [rbp + 0x50], xmm0
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140056972
mov qword [0], 1
mov rdx, qword [0x140146690]
mov eax, 0xbf0306f6
mov qword [rbp + 0x20], rax
test rdx, rdx
jne 0x140056b44
mov edi, eax
xor r10d, r10d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x30], xmm0
sub ax, 8
test r10d, r10d
je 0x1400569fd
mov rcx, qword [rbp + 0x38]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400569f4
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400569e0
cmp edx, r10d
jne 0x140056b25
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
mov ebx, ecx
shr r15, 0x20
add rbx, r9
cmp rbx, r9
je 0x140056b25
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140056b25
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140056a77
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140056a60
cmp edx, edi
je 0x140056a85
test r8d, r8d
jne 0x140056a40
jmp 0x140056b25
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, rbx
jbe 0x140056b3d
lea rax, [r15 + rbx]
cmp rdx, rax
jae 0x140056b3d
movzx eax, byte [rdx]
mov r10d, 0x811c9dc5
mov dword [rbp], r10d
mov ecx, r10d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x140056aeb
nop dword [rax]
movsx eax, al
inc rdx
xor eax, r10d
imul r10d, eax, 0x1000193
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140056ad0
mov dword [rbp], r10d
movzx eax, byte [rdx + 1]
inc rdx
test al, al
je 0x140056b19
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
test al, al
jne 0x140056b00
mov dword [rbp + 4], ecx
mov rdi, qword [rbp]
mov rsi, qword [r12]
shr rdi, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140056b3b
cmp qword [rax + 0x30], 0
jne 0x1400569b0
xor edx, edx
mov qword [0x140146690], rdx
mov rcx, r13
call rdx
mov r8, qword [0x1401466c0]
mov dword [rbp + 0x168], 0
mov dword [rbp + 0x170], 0x200
test r8, r8
jne 0x140056d2c
mov rax, qword gs:[0x60]
xor r9d, r9d
mov r12, qword [rbp + 0x40]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
nop dword [rax + rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x30], xmm0
sub ax, 8
test r9d, r9d
je 0x140056bdd
mov rcx, qword [rbp + 0x38]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140056bd4
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140056bc0
cmp edx, r9d
jne 0x140056d0c
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r14, rcx
mov ebx, ecx
shr r14, 0x20
add rbx, r10
cmp rbx, r10
je 0x140056d0c
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140056d0c
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r10]
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140056c57
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140056c40
cmp edx, r12d
je 0x140056c66
test r8d, r8d
jne 0x140056c20
jmp 0x140056d0c
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov r8d, dword [rcx + rdx*4]
add r8, r10
cmp r8, rbx
jbe 0x140056d25
lea rax, [rbx + r14]
cmp r8, rax
jae 0x140056d25
movzx eax, byte [r8]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x140056ccc
nop dword [rax]
movsx eax, al
inc r8
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x140056cb0
mov dword [rbp], r9d
movzx eax, byte [r8 + 1]
inc r8
test al, al
je 0x140056cfa
nop dword [rax + rax]
movsx eax, al
lea r8, [r8 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r8]
test al, al
jne 0x140056ce0
mov dword [rbp + 4], ecx
mov rax, qword [rbp]
mov rdi, qword [r15]
shr rax, 0x20
mov qword [rbp + 0x40], rax
mov r12, rax
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140056d22
cmp qword [rax + 0x30], 0
jne 0x140056b90
xor r8d, r8d
mov qword [0x1401466c0], r8
mov edx, 0x20a
mov ecx, 0x40
call r8
mov r10, qword [0x1401466e0]
mov r12, rax
test r10, r10
jne 0x140056f0c
mov rcx, qword gs:[0x60]
xor r9d, r9d
mov r13, qword [rbp + 8]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rdi, r15
nop word [rax + rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x30], xmm0
sub ax, 8
test r9d, r9d
je 0x140056dbd
mov rcx, qword [rbp + 0x38]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140056db4
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140056da0
cmp edx, r9d
jne 0x140056eec
mov r11, qword [rdi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rcx, qword [rax + r11 + 0x88]
mov r14, rcx
mov ebx, ecx
shr r14, 0x20
add rbx, r11
cmp rbx, r11
je 0x140056eec
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140056eec
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r11]
add rcx, r11
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140056e37
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140056e20
cmp edx, r13d
je 0x140056e46
test r8d, r8d
jne 0x140056e00
jmp 0x140056eec
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
cmp r10, rbx
jbe 0x140056f05
lea rax, [rbx + r14]
cmp r10, rax
jae 0x140056f05
movzx eax, byte [r10]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x140056eac
nop dword [rax]
movsx eax, al
inc r10
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [r10]
cmp al, 0x2e
jne 0x140056e90
mov dword [rbp], r9d
movzx eax, byte [r10 + 1]
inc r10
test al, al
je 0x140056eda
nop dword [rax + rax]
movsx eax, al
lea r10, [r10 + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [r10]
test al, al
jne 0x140056ec0
mov dword [rbp + 4], ecx
mov rax, qword [rbp]
mov rdi, qword [r15]
shr rax, 0x20
mov qword [rbp + 8], rax
mov r13, rax
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140056f02
cmp qword [rax + 0x30], 0
jne 0x140056d70
xor r10d, r10d
mov qword [0x1401466e0], r10
movabs rdx, 0xf96d16d66ae7f5ed
lea r9, [rbp + 0x168]
movabs rcx, 0x4e4d7cd723fb8286
movabs rax, 0x7b2cd993218d909d
mov qword [rbp + 8], rax
movabs rsi, 0x14459bfc44e9f9cb
mov rax, qword [rbp + 8]
movabs rbx, 0x217e3dbd65e8dbe4
mov qword [rbp + 0xa0], rax
xor r8d, r8d
movabs rax, 0x4f1154ce178d8d97
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 8], rdx
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x280], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x288], rax
mov qword [rbp + 8], rdx
lea rdx, [rbp + 0xa0]
mov rax, qword [rbp + 8]
mov qword [rbp + 0x290], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0x160]
mov qword [rbp + 0x298], rax
lea rax, [rbp + 0x170]
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
mov qword [rsp + 0x28], rax
vmovdqa ymmword [rbp + 0xa0], ymm1
mov qword [rsp + 0x20], r12
vzeroupper
call r10
test eax, eax
jne 0x1400571bd
cmp dword [rbp + 0x168], 7
jne 0x1400571bd
mov rdi, r12
cmp byte [r12], al
je 0x1400571bd
movabs r14, 0x1445fe9027888ba4
movabs r15, 0x7629fa89309b90bd
movabs r13, 0x217e3dbd65e8a38b
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x140057057
test eax, eax
je 0x140057099
mov rbx, rdi
mov esi, eax
nop dword [rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx], al
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x140057070
movabs rbx, 0x217e3dbd65e8dbe4
movabs rsi, 0x14459bfc44e9f9cb
mov qword [rbp + 8], r14
lea rdx, [rbp + 0x80]
mov rax, qword [rbp + 8]
mov rcx, rdi
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1b8], rax
movdqa xmm0, xmmword [rbp + 0x1b0]
pxor xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x80], xmm0
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14005715c
mov qword [rbp + 8], r15
lea rdx, [rbp + 0x70]
mov rax, qword [rbp + 8]
mov rcx, rdi
mov qword [rbp + 0x70], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x78], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
movdqa xmm0, xmmword [rbp + 0x70]
mov qword [rbp + 0x1c8], rax
pxor xmm0, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x70], xmm0
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14005719e
call fcn.140061210
xor r8d, r8d
lea r9, [rbp + 0x16e]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp + 0x178]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdi + rax], 0
jne 0x1400571a5
inc rdi
add rdi, rax
cmp byte [rdi], 0
jne 0x140057050
mov rdx, qword [0x140146690]
test rdx, rdx
jne 0x14005738a
mov rax, qword gs:[0x60]
xor r9d, r9d
mov r13, qword [rbp + 0x20]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
nop dword [rax + rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x30], xmm0
sub ax, 8
test r9d, r9d
je 0x14005723d
mov rcx, qword [rbp + 0x38]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140057234
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140057220
cmp edx, r9d
jne 0x14005736b
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r14, rcx
mov ebx, ecx
shr r14, 0x20
add rbx, r10
cmp rbx, r10
je 0x14005736b
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14005736b
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r10 + r8*4]
mov ecx, dword [rax + rsi]
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400572b7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400572a0
cmp edx, r13d
je 0x1400572c6
test r8d, r8d
jne 0x140057280
jmp 0x14005736b
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov edx, dword [rcx + rdx*4]
add rdx, r10
cmp rdx, rbx
jbe 0x140057383
lea rax, [rbx + r14]
cmp rdx, rax
jae 0x140057383
movzx eax, byte [rdx]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x14005732b
nop word [rax + rax]
movsx eax, al
inc rdx
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140057310
mov dword [rbp], r9d
movzx eax, byte [rdx + 1]
inc rdx
test al, al
je 0x140057359
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
test al, al
jne 0x140057340
mov dword [rbp + 4], ecx
mov rax, qword [rbp]
mov rdi, qword [r15]
shr rax, 0x20
mov qword [rbp + 0x20], rax
mov r13, rax
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140057381
cmp qword [rax + 0x30], 0
jne 0x1400571f0
xor edx, edx
mov qword [0x140146690], rdx
mov rcx, r12
call rdx
mov rdx, qword [0x140146698]
test rdx, rdx
jne 0x14005755a
mov rax, qword gs:[0x60]
xor r9d, r9d
mov r12, qword [rbp + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
nop dword [rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
movups xmmword [rbp + 0x30], xmm0
sub ax, 8
test r9d, r9d
je 0x14005740d
mov rcx, qword [rbp + 0x38]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140057404
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400573f0
cmp edx, r9d
jne 0x14005753b
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r14, rcx
mov ebx, ecx
shr r14, 0x20
add rbx, r10
cmp rbx, r10
je 0x14005753b
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14005753b
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r10 + r8*4]
mov eax, dword [rax + rsi]
add rax, r10
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140057487
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x140057470
cmp edx, r12d
je 0x140057496
test r8d, r8d
jne 0x140057450
jmp 0x14005753b
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov edx, dword [rcx + rdx*4]
add rdx, r10
cmp rdx, rbx
jbe 0x140057553
lea rax, [r14 + rbx]
cmp rdx, rax
jae 0x140057553
movzx eax, byte [rdx]
mov r9d, 0x811c9dc5
mov dword [rbp], r9d
mov ecx, r9d
mov dword [rbp + 4], ecx
cmp al, 0x2e
je 0x1400574fb
nop word [rax + rax]
movsx eax, al
inc rdx
xor eax, r9d
imul r9d, eax, 0x1000193
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x1400574e0
mov dword [rbp], r9d
movzx eax, byte [rdx + 1]
inc rdx
test al, al
je 0x140057529
nop word [rax + rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
test al, al
jne 0x140057510
mov dword [rbp + 4], ecx
mov rax, qword [rbp]
mov rdi, qword [r15]
shr rax, 0x20
mov qword [rbp + 0x10], rax
mov r12, rax
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x140057551
cmp qword [rax + 0x30], 0
jne 0x1400573c0
xor edx, edx
mov qword [0x140146698], rdx
mov rcx, qword [rbp + 0x160]
call rdx
xor eax, eax
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.1400dcbf0
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret