Function at 0x648002f0
Capabilities:
Create new key via cryptacquirecontext
Generate random numbers via winapi
Get disk size
Get memory capacity
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
mov eax, dword [0x64854008]
xor eax, ebp
mov dword [ebp - 8], eax
push edi
xor eax, eax
lea edi, [ebp - 0x14c]
mov ecx, 0x40
xorps xmm0, xmm0
rep stosd dword es:[edi], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x16c], 0x6a09e667
mov dword [ebp - 0x168], 0xbb67ae85
mov dword [ebp - 0x164], 0x3c6ef372
mov dword [ebp - 0x160], 0xa54ff53a
mov dword [ebp - 0x15c], 0x510e527f
mov dword [ebp - 0x158], 0x9b05688c
mov dword [ebp - 0x154], 0x1f83d9ab
mov dword [ebp - 0x150], 0x5be0cd19
movq qword [ebp - 0x20], xmm0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 8
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 4
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 4
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 4
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x174]
call fcn.64800820
push 0x3c
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1b4], 0x40
push 0
push eax
call fcn.6480764e
add esp, 0x10
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x64800420
push 8
lea edx, [ebp - 0x1a4]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 8
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 8
push 0
push 0
lea eax, [ebp - 0x44]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x64800447
push 8
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 4
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimes]
test eax, eax
je 0x648004c0
push 4
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 4
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 4
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 4
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 4
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x174]
call fcn.64800820
push 4
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 0x18
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x648004e1
push 8
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 4
rdtsc
mov dword [ebp - 0x10], edx
lea ecx, [ebp - 0x174]
push 8
lea edx, [ebp - 0x14]
mov dword [ebp - 0x14], eax
call fcn.64800820
add esp, 4
lea eax, [ebp - 0x18]
push 0xf0000040
push 1
push str.Microsoft_Base_Cryptographic_Provider_v1.0
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x64800551
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
push eax
push 8
push dword [ebp - 0x18]
movlpd qword [ebp - 0x14], xmm0
call dword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
je 0x64800546
push 8
lea edx, [ebp - 0x14]
lea ecx, [ebp - 0x174]
call fcn.64800820
add esp, 4
push 0
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0x174]
call fcn.64800880
mov ecx, dword [ebp - 8]
mov eax, dword [ebp + 8]
xor ecx, ebp
pop edi
call fcn.648031e0
mov esp, ebp
pop ebp
ret