Function at 0x1400cfdd8
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
mov r12, rcx
lea r13, [rsp + 0x198]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], r13
mov rax, qword [r13]
xor rax, rcx
mov qword [rsp + 0x20], rax
xor ebx, ebx
mov qword [r13], rbx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x1400cfea5
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x1400cfea5
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1400cfea0
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400cfe7d
cmp r11d, 0x185776b5
je 0x1400d0048
test r9d, r9d
jne 0x1400cfe61
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
jne 0x1400cfe3c
mov r8, rbx
xor edx, edx
lea ecx, [rdx + 2]
call r8
mov rbp, rax
cmp rax, 0xffffffffffffffff
je 0x1400d0139
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rsp + 0x44]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x40], 0x130
mov r15b, bl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x1400cff62
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x1400cff62
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1400cff5d
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400cff3a
cmp r11d, 0xa4c8c8f
je 0x1400d0067
test r9d, r9d
jne 0x1400cff1e
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
jne 0x1400cfef9
mov r8, rbx
lea rdx, [rsp + 0x40]
mov rcx, rbp
call r8
test eax, eax
je 0x1400d0089
lea rcx, [rsp + 0x6c]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x1400cff8c
mov r8, qword [r12 + 0x10]
mov rcx, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x1400cffa8
mov rcx, qword [r12]
cmp r8, rax
jne 0x1400cffbf
lea rdx, [rsp + 0x6c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400d0086
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x1400d0038
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x1400d0038
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1400d0033
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400d0014
cmp r11d, 0x15eec872
je 0x1400d0067
test r9d, r9d
jne 0x1400cfff8
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
jne 0x1400cffd3
jmp 0x1400cff6d
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, rdx
jmp 0x1400cfeb3
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, rdx
jmp 0x1400cff70
mov r15b, 1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, rdi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x1400d0102
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x1400d0102
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x811c9dc5
mov al, byte [rcx]
inc rcx
test al, al
je 0x1400d00fd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400d00de
cmp r11d, 0xfaba0065
je 0x1400d010f
test r9d, r9d
jne 0x1400d00c2
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
jne 0x1400d009d
jmp 0x1400d0128
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, rdx
mov rcx, rbp
call rbx
neg r15b
sbb eax, eax
test dword [rsp + 0x48], eax
setne bl
mov rcx, qword [rsp + 0x20]
movabs rax, 0xff00ff00ff00ff00
xor rcx, rax
mov qword [r13], rcx
mov al, bl
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret