Function at 0x140001192
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov rsi, rcx
xor ebx, ebx
mov qword [rsp + 0x28], rbx
mov qword [rcx], rbx
mov ecx, 5
call fcn.1400032c2
mov rdi, rax
movsxd rax, dword [rax + 0x3c]
mov eax, dword [rdi + rax + 0x88]
mov ecx, dword [rdi + rax + 0x20]
add rcx, rdi
lea r8, [rdi + 1]
mov edx, ebx
mov r9d, dword [rcx + rdx*4]
mov r10b, byte [rdi + r9]
test r10b, r10b
je 0x14000120a
add r9, r8
mov r11d, 0x1993f061
movsx r10d, r10b
xor r10d, r11d
imul r11d, r10d, 0x1000193
mov r10b, byte [r9]
inc r9
test r10b, r10b
jne 0x1400011e8
cmp r11d, 0xf8b15637
je 0x14000120e
inc ebx
jmp 0x1400011d0
mov ecx, dword [rdi + rax + 0x1c]
mov eax, dword [rdi + rax + 0x24]
add rcx, rdi
add rax, rdi
movzx eax, word [rax + rdx*2]
mov ecx, dword [rcx + rax*4]
mov rax, qword gs:[0x60]
mov rdx, qword [rax + 0x18]
add rdx, 0x10
mov rdx, qword [rdx]
mov rax, qword [rdx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140001234
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140001234
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rbx, [rax + 1]
dec r9
mov r11d, r9d
mov r14d, dword [r10 + r11*4]
mov bpl, byte [rax + r14]
test bpl, bpl
je 0x1400012a0
add r14, rbx
mov r15d, 0x1893eece
movsx ebp, bpl
xor ebp, r15d
imul r15d, ebp, 0x1000193
mov bpl, byte [r14]
inc r14
test bpl, bpl
jne 0x14000127e
cmp r15d, 0xb0977770
je 0x1400012a7
test r11, r11
jne 0x140001262
jmp 0x140001234
add rdi, rcx
mov ecx, dword [rax + r8 + 0x1c]
mov edx, dword [rax + r8 + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov ecx, dword [rcx + rdx*4]
add rcx, rax
call rcx
lea r8, [rsp + 0x28]
mov rcx, rax
mov edx, 8
call rdi
test eax, eax
je 0x140001d7c
mov dword [rsp + 0x34], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400012f7
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400012f7
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140001359
add rdi, r10
mov ebp, 0x898c51ec
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x14000133d
cmp ebp, 0x5d9abefd
je 0x140001360
test r11, r11
jne 0x140001324
jmp 0x1400012f7
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rax
mov rcx, qword [rsp + 0x28]
lea rbx, [rsp + 0x34]
mov qword [rsp + 0x20], rbx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call r10
test eax, eax
jne 0x1400013aa
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000190b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400013bb
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400013bb
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bpl, byte [rax + rdi]
test bpl, bpl
je 0x140001426
add rdi, r10
mov r14d, 0x1ba53ca8
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rdi]
inc rdi
test bpl, bpl
jne 0x140001404
cmp r14d, 0xfdeb33a8
je 0x14000142d
test r11, r11
jne 0x1400013e8
jmp 0x1400013bb
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
mov edx, dword [rsp + 0x34]
mov ecx, 0x40
call r8
mov rdi, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
add rax, 0x10
test rdi, rdi
je 0x1400014de
mov rax, qword [rax]
mov rcx, qword [rax + 0x30]
movsxd rdx, dword [rcx + 0x3c]
mov edx, dword [rcx + rdx + 0x88]
test rdx, rdx
je 0x14000146c
mov r8d, dword [rcx + rdx + 0x18]
test r8, r8
je 0x14000146c
mov r9d, dword [rcx + rdx + 0x20]
add r9, rcx
lea r10, [rcx + 1]
dec r8
mov r11d, r8d
mov r14d, dword [r9 + r11*4]
mov bpl, byte [rcx + r14]
test bpl, bpl
je 0x1400014d7
add r14, r10
mov r15d, 0x23cda67e
movsx ebp, bpl
xor ebp, r15d
imul r15d, ebp, 0x1000193
mov bpl, byte [r14]
inc r14
test bpl, bpl
jne 0x1400014b5
cmp r15d, 0x971f0fd3
je 0x14000154b
test r11, r11
jne 0x140001499
jmp 0x14000146c
mov rax, qword [rax]
mov rcx, qword [rax + 0x30]
movsxd rdx, dword [rcx + 0x3c]
mov edx, dword [rcx + rdx + 0x88]
test rdx, rdx
je 0x1400014de
mov r8d, dword [rcx + rdx + 0x18]
test r8, r8
je 0x1400014de
mov r9d, dword [rcx + rdx + 0x20]
add r9, rcx
lea r10, [rcx + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rcx + rsi]
test bl, bl
je 0x140001544
add rsi, r10
mov edi, 0x9ec3dac3
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001524
cmp edi, 0x48cf6997
je 0x140001837
test r11, r11
jne 0x14000150b
jmp 0x1400014de
mov eax, dword [rcx + rdx + 0x1c]
mov edx, dword [rcx + rdx + 0x24]
add rax, rcx
add rdx, rcx
movzx edx, word [rdx + r11*2]
mov r10d, dword [rax + rdx*4]
add r10, rcx
mov r9d, dword [rsp + 0x34]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x20], rbx
mov edx, 1
mov r8, rdi
call r10
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
test eax, eax
je 0x140001606
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001594
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001594
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x1400015ff
add rbx, r10
mov r14d, 0x8583c029
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x1400015dd
cmp r14d, 0xac5c5f0d
je 0x140001673
test r11, r11
jne 0x1400015c1
jmp 0x140001594
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001606
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001606
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x14000166c
add rsi, r10
mov ebp, 0xa0d2e873
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x14000164c
cmp ebp, 0xb76bb198
je 0x140001989
test r11, r11
jne 0x140001633
jmp 0x140001606
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rdi]
call rdx
mov ebx, eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400016a4
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400016a4
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov r14d, dword [r9 + r11*4]
mov bpl, byte [rax + r14]
test bpl, bpl
je 0x14000170f
add r14, r10
mov r15d, 0x2ff117b7
movsx ebp, bpl
xor ebp, r15d
imul r15d, ebp, 0x1000193
mov bpl, byte [r14]
inc r14
test bpl, bpl
jne 0x1400016ed
cmp r15d, 0x8b4e7bf7
je 0x140001716
test r11, r11
jne 0x1400016d1
jmp 0x1400016a4
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
mov edx, ebx
mov ecx, 0x40
call r8
mov qword [rsi], rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
add rcx, 0x10
test rax, rax
je 0x1400017ca
mov rcx, qword [rcx]
mov rdx, qword [rcx + 0x30]
movsxd r8, dword [rdx + 0x3c]
mov r8d, dword [rdx + r8 + 0x88]
test r8, r8
je 0x140001753
mov r9d, dword [rdx + r8 + 0x18]
test r9, r9
je 0x140001753
mov r10d, dword [rdx + r8 + 0x20]
add r10, rdx
lea r11, [rdx + 1]
dec r9
mov r14d, r9d
mov r15d, dword [r10 + r14*4]
mov bpl, byte [rdx + r15]
test bpl, bpl
je 0x1400017c3
add r15, r11
mov r12d, 0x5b5d87ed
movsx ebp, bpl
xor ebp, r12d
imul r12d, ebp, 0x1000193
mov bpl, byte [r15]
inc r15
test bpl, bpl
jne 0x14000179d
cmp r12d, 0xdb1783d8
je 0x140001855
test r14, r14
jne 0x140001781
jmp 0x140001753
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400017ca
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400017ca
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001830
add rsi, r10
mov ebp, 0xf151bd5f
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001810
cmp ebp, 0xb3f2333c
je 0x140001a25
test r11, r11
jne 0x1400017f7
jmp 0x1400017ca
mov eax, dword [rcx + rdx + 0x1c]
mov edx, dword [rcx + rdx + 0x24]
add rax, rcx
add rdx, rcx
movzx edx, word [rdx + r11*2]
mov edx, dword [rax + rdx*4]
add rdx, rcx
jmp 0x140001d75
mov ecx, dword [rdx + r8 + 0x1c]
mov r8d, dword [rdx + r8 + 0x24]
add rcx, rdx
add r8, rdx
movzx r8d, word [r8 + r14*2]
mov r9d, dword [rcx + r8*4]
add r9, rdx
mov r8, qword [rdi]
mov ecx, ebx
mov rdx, rax
call r9
test eax, eax
jne 0x140001ae6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001895
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001895
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x140001904
add rbx, r10
mov r14d, 0xff2e260a
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x1400018de
cmp r14d, 0x1bc7688f
je 0x140001ac1
test r11, r11
jne 0x1400018c2
jmp 0x140001895
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x14000191c
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x14000191c
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001982
add rsi, r10
mov edi, 0x8e9b6455
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001962
cmp edi, 0x899785b5
je 0x140001d5c
test r11, r11
jne 0x140001949
jmp 0x14000191c
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400019b8
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400019b8
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001a1e
add rsi, r10
mov edi, 0xf1aa187a
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x1400019fe
cmp edi, 0x930fd820
je 0x140001d5c
test r11, r11
jne 0x1400019e5
jmp 0x1400019b8
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001a54
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001a54
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001aba
add rsi, r10
mov edi, 0x2828425
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001a9a
cmp edi, 0x4de4c2c5
je 0x140001d5c
test r11, r11
jne 0x140001a81
jmp 0x140001a54
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rsi]
call rdx
mov qword [rsi], 0
mov qword [rsp + 0x38], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001b00
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001b00
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x140001b6b
add rbx, r10
mov r14d, 0xbcc1b17a
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x140001b49
cmp r14d, 0x287593d8
je 0x140001b72
test r11, r11
jne 0x140001b2d
jmp 0x140001b00
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
mov rcx, qword [rsi]
lea rdx, [rsp + 0x38]
call r8
test eax, eax
je 0x140001c4a
mov rdx, qword [rsp + 0x38]
lea rcx, str.SID:__s_n
call fcn.140004124
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001bc1
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001bc1
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001c23
add rsi, r10
mov ebp, 0xe708f310
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001c07
cmp ebp, 0x906578f1
je 0x140001c2a
test r11, r11
jne 0x140001bee
jmp 0x140001bc1
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rsp + 0x38]
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001c5b
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001c5b
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001cbd
add rsi, r10
mov ebp, 0xb777877
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001ca1
cmp ebp, 0x1f8bad34
je 0x140001cc4
test r11, r11
jne 0x140001c88
jmp 0x140001c5b
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001cf3
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001cf3
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001d55
add rsi, r10
mov edi, 0x9ca0b9f8
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001d39
cmp edi, 0x1e92562
je 0x140001d5c
test r11, r11
jne 0x140001d20
jmp 0x140001cf3
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rsp + 0x28]
call rdx
nop
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret