Function at 0x1400172f0
Capabilities:
Get system information on windows
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140112718]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov rdi, r8
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x78], xmm1
movups xmmword [rbp - 0x78], xmm1
movups xmmword [rbp - 0x68], xmm1
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
movabs rbx, 0x300000000
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e0
ja 0x140017388
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e1
jb 0x140017372
shr rax, 0x20
lea r13d, [rax + 0xa00]
mov qword [rsp + 0x30], r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov dword [rbp - 0x30], 0
mov qword [rbp - 0x28], 0
mov qword [rbp - 0x20], 0
mov ecx, Ordinal_27
call fcn.1400c1680
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x18], 0
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], 7
mov qword [rbp + 8], 8
mov dword [rbp - 0x30], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x18]
call fcn.140025020
nop
movabs rsi, 0x1500000000
nop word [rax + rax]
mov r9d, Ordinal_50
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [0x140114958]
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x140017710
cmp dword [rsp + 0x68], 0x1000
jne 0x140017700
mov eax, dword [rsp + 0x6c]
bt eax, 8
jb 0x140017700
test al, 4
jne 0x14001746c
test al, 8
je 0x140017700
mov rcx, qword [rsp + 0x48]
mov r12, rcx
mov rdx, qword [rsp + 0x60]
lea rax, [rcx + rdx]
cmp rcx, rax
jae 0x14001770a
nop word [rax + rax]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
mov qword [rbp - 0x48], rax
mov rdx, r13
lea rcx, [rbp - 0x58]
call fcn.14002b4c0
mov rcx, qword [rbp - 0x58]
lea rbx, [rcx + r13]
mov r8, r13
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x50], rbx
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, qword [rbp - 0x58]
mov rdx, r12
mov rcx, qword [0x140114958]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140017699
xor ebx, ebx
mov rsi, qword [0x140112818]
mov r14, qword [0x140112810]
mov rcx, rsi
sub rcx, r14
mov r15, qword [rbp - 0x38]
cmp r15, rcx
je 0x140017699
mov r8, rsi
mov rdx, r14
mov r11, qword [rbp - 0x28]
mov r10, qword [rbp - 0x58]
movabs r13, 0x100000001b3
sub r8, rdx
je 0x140017553
mov rcx, rdx
mov r9, r10
sub r9, rdx
add r9, rbx
movzx eax, byte [rcx]
cmp al, 0x99
je 0x140017545
cmp byte [r9 + rcx], al
jne 0x140017674
inc rcx
mov rax, rcx
sub rax, rdx
cmp rax, r8
jb 0x140017534
lea r8, [rbx + r12]
mov qword [rbp - 0x40], r8
mov rax, r8
shr rax, 8
movzx edx, al
movzx eax, r8b
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
imul rax, r13
xor rdx, rax
imul rdx, r13
mov rax, r8
shr rax, 0x10
movzx ecx, al
xor rdx, rcx
imul rdx, r13
mov rax, r8
shr rax, 0x18
movzx ecx, al
xor rdx, rcx
imul rdx, r13
mov rax, r8
shr rax, 0x20
movzx ecx, al
xor rdx, rcx
imul rdx, r13
mov rax, r8
shr rax, 0x28
movzx ecx, al
xor rdx, rcx
imul rdx, r13
mov rax, r8
shr rax, 0x30
movzx ecx, al
xor rdx, rcx
imul rdx, r13
mov rax, r8
shr rax, 0x38
xor rdx, rax
imul rdx, r13
mov rax, qword [rbp]
and rax, rdx
add rax, rax
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rdx + rax*8 + 8]
cmp rcx, r11
je 0x140017617
mov rax, qword [rdx + rax*8]
cmp r8, qword [rcx + 0x10]
je 0x140017619
cmp rcx, rax
je 0x140017617
mov rcx, qword [rcx + 8]
cmp r8, qword [rcx + 0x10]
jne 0x140017606
jmp 0x140017619
xor ecx, ecx
mov rax, r11
test rcx, rcx
cmovne rax, rcx
cmp rax, r11
jne 0x140017674
mov rdx, qword [rdi + 8]
cmp rdx, qword [rdi + 0x10]
je 0x14001763c
mov qword [rdx], r8
add qword [rdi + 8], 8
jmp 0x140017648
lea r8, [rbp - 0x40]
mov rcx, rdi
call fcn.14002e070
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x30]
call fcn.140027f00
mov r11, qword [rbp - 0x28]
mov r10, qword [rbp - 0x58]
mov r15, qword [rbp - 0x38]
mov rsi, qword [0x140112818]
mov r14, qword [0x140112810]
inc rbx
mov r8, rsi
mov rdx, r14
mov rcx, rsi
sub rcx, r14
mov rax, r15
sub rax, rcx
cmp rbx, rax
jb 0x140017523
mov r13, qword [rsp + 0x30]
jmp 0x14001769d
mov r10, qword [rbp - 0x58]
test r10, r10
je 0x1400176d6
mov rdx, qword [rbp - 0x48]
sub rdx, r10
mov rax, r10
cmp rdx, 0x1000
jb 0x1400176ce
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017756
mov rcx, r10
call fcn.1400c19dc
add r12, r13
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rdx + rcx]
cmp r12, rax
jb 0x140017490
movabs rsi, 0x1500000000
lea rbx, [rdx + rcx]
jmp 0x140017717
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rbx, [rdx + rcx]
jmp 0x140017717
mov eax, dword [rsp + 0x7c]
add rbx, rax
cmp rbx, rsi
jb 0x140017420
lea rcx, [rbp - 0x30]
call fcn.1400179b0
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.1400c1540
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
int3