Function at 0x180017d60
Capabilities:
Encrypt data using chaskey
Hash data using murmur3
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
and qword [r8], 0
mov r13, r9
mov ebx, ecx
mov r15, r8
mov r14, rdx
test rdx, rdx
je 0x180017db3
cmp ebx, 4
jb 0x180017db3
cmp dword [rdx], 0x201
jne 0x180017e2b
cmp ebx, 0x30
jb 0x180017db3
mov eax, 0x10000
test dword [rdx + 0x24], eax
je 0x180017dd6
lea eax, [rbx - 8]
cmp dword [rdx + 8], eax
jbe 0x180017ddb
mov eax, 0xc000000d
mov ecx, eax
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp fcn.180007120
cmp dword [rdx + 8], ebx
ja 0x180017db3
mov rcx, r14
call sym.SspiCli.dll_SspiValidateAuthIdentity
test eax, eax
js 0x180017db8
lea rdx, [rbx + 2]
mov ecx, 0x40
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
mov qword [r15], rax
test rax, rax
jne 0x180017e0b
mov eax, 0xc0000017
jmp 0x180017db8
mov r8, rbx
mov rdx, r14
mov rcx, rax
call sub.api_ms_win_core_crt_l1_1_0.dll_memcpy
test r13, r13
je 0x180018045
mov dword [r13], ebx
jmp 0x180018045
cmp dword [rdx], 0x200
jne 0x180017db3
cmp ebx, 0x2c
jb 0x180017db3
movups xmm0, xmmword [rdx]
mov r8d, dword [rdx + 0x28]
mov eax, 0x10000
movups xmm1, xmmword [rdx + 0x10]
mov dword [rbp + 0x48], r8d
movups xmmword [rbp - 0x30], xmm0
movsd xmm0, qword [rdx + 0x20]
movsd qword [rbp - 0x10], xmm0
mov esi, dword [rbp - 0x10]
movups xmmword [rbp - 0x20], xmm1
test eax, esi
je 0x180017e6d
btr esi, 0x10
mov ebx, esi
mov r12d, esi
not ebx
mov r9d, 0xfffffff8
and ebx, 1
inc ebx
and r12d, eax
mov rax, qword [rbp - 0x28]
je 0x180017e97
shr rax, 0x20
imul eax, ebx
add eax, 7
and eax, r9d
jmp 0x180017e9e
shr rax, 0x20
imul eax, ebx
lea ecx, [rax + 0x48]
cmp ecx, 0x48
jb 0x18001804c
mov rax, qword [rbp - 0x20]
shr rax, 0x20
imul eax, ebx
test r12d, r12d
je 0x180017ec0
add eax, 7
and eax, r9d
lea edx, [rax + rcx]
cmp edx, ecx
jb 0x18001804c
mov rax, qword [rbp - 0x18]
shr rax, 0x20
imul eax, ebx
test r12d, r12d
je 0x180017ee1
add eax, 7
and eax, r9d
lea ecx, [rax + rdx]
cmp ecx, edx
jb 0x18001804c
mov edx, ebx
imul edx, r8d
add edx, ecx
cmp edx, ecx
jb 0x18001804c
lea eax, [rdx + 8]
mov dword [rbp + 0x50], eax
cmp eax, edx
jb 0x18001804c
mov edx, eax
mov ecx, 0x40
add rdx, 2
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
mov qword [r15], rax
mov rdi, rax
test rax, rax
je 0x180017e04
mov ecx, dword [rbp - 0x28]
lea r15, [rax + 0x48]
mov eax, dword [rbp - 0x30]
mov dword [rdi], eax
mov eax, dword [rbp - 0x24]
mov dword [rdi + 0x10], eax
mov dword [rdi + 0x34], esi
mov dword [rdi + 4], 0x48
test ecx, ecx
je 0x180017f88
mov esi, ebx
mov qword [rdi + 8], r15
imul esi, eax
test r12d, r12d
je 0x180017f66
lea eax, [rsi + 7]
and eax, 0xfffffff8
jmp 0x180017f68
mov eax, esi
lea rdx, [r14 + rcx]
mov r8d, eax
mov rcx, r15
call sub.api_ms_win_core_crt_l1_1_0.dll_memcpy
test r12d, r12d
je 0x180017f82
add esi, 7
and esi, 0xfffffff8
lea ecx, [rbx + rsi]
add r15, rcx
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x1c]
mov dword [rdi + 0x20], eax
test ecx, ecx
je 0x180017fcd
mov esi, ebx
mov qword [rdi + 0x18], r15
imul esi, eax
test r12d, r12d
je 0x180017fab
lea eax, [rsi + 7]
and eax, 0xfffffff8
jmp 0x180017fad
mov eax, esi
lea rdx, [r14 + rcx]
mov r8d, eax
mov rcx, r15
call sub.api_ms_win_core_crt_l1_1_0.dll_memcpy
test r12d, r12d
je 0x180017fc7
add esi, 7
and esi, 0xfffffff8
lea ecx, [rbx + rsi]
add r15, rcx
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
mov dword [rdi + 0x30], eax
test ecx, ecx
je 0x180018012
mov esi, ebx
mov qword [rdi + 0x28], r15
imul esi, eax
test r12d, r12d
je 0x180017ff0
lea eax, [rsi + 7]
and eax, 0xfffffff8
jmp 0x180017ff2
mov eax, esi
lea rdx, [r14 + rcx]
mov r8d, eax
mov rcx, r15
call sub.api_ms_win_core_crt_l1_1_0.dll_memcpy
test r12d, r12d
je 0x18001800c
add esi, 7
and esi, 0xfffffff8
lea ecx, [rbx + rsi]
add r15, rcx
mov eax, dword [rbp - 0xc]
mov ecx, dword [rbp + 0x48]
mov dword [rdi + 0x40], ecx
test eax, eax
je 0x180018035
imul ebx, ecx
lea rdx, [r14 + rax]
mov rcx, r15
mov qword [rdi + 0x38], r15
mov r8d, ebx
call sub.api_ms_win_core_crt_l1_1_0.dll_memcpy
or dword [rdi + 0x34], 4
test r13, r13
je 0x180018045
mov eax, dword [rbp + 0x50]
mov dword [r13], eax
xor eax, eax
jmp 0x180017db8
mov eax, 0xc0000095
jmp 0x180017db8