Function at 0x14000db40
Capabilities:
Get system information on windows
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1401b06f8]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rsi, r9
mov rbx, r8
mov qword [rsp + 0x40], rdx
mov rdi, qword [rbp + 0x100]
mov qword [rsp + 0x70], rdi
mov rax, qword [rbp + 0x110]
mov qword [rsp + 0x60], rax
mov r15, qword [0x1401cd148]
mov qword [rsp + 0x48], r15
cmp byte [0x1401cd160], 0
je 0x14000e224
mov r14, qword [rbp + 0xf8]
test r14, r14
je 0x14000dbd0
mov rcx, qword [rdi + 8]
sub rcx, qword [rdi]
sar rcx, 3
movzx eax, word [r14]
cmp rcx, rax
jae 0x14000e1fa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rax
lea rcx, [rbp - 0x18]
call fcn.14000f0d0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000d7c0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x48], xmm1
movups xmmword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x28], xmm1
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
test rbx, rbx
je 0x14000dc25
mov rbx, qword [rbx]
jmp 0x14000dc29
mov rbx, qword [rbp - 0x40]
test rsi, rsi
je 0x14000dc33
mov r12, qword [rsi]
jmp 0x14000dc37
mov r12, qword [rbp - 0x38]
mov qword [rsp + 0x50], r12
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e0
ja 0x14000dc68
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e1
jb 0x14000dc52
shr rax, 0x20
lea esi, [rax + 0xa00]
mov qword [rsp + 0x58], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], 0
mov ecx, Ordinal_26
call fcn.1401293a4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x58], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 7
mov qword [rbp + 0x78], 8
mov dword [rbp + 0x40], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x58]
call fcn.14000f410
nop
cmp rbx, r12
jae 0x14000e110
movzx edi, byte [rbp + 0x108]
mov r14, qword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x1401cd158]
mov rdx, rbx
test rax, rax
je 0x14000dd43
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], Ordinal_50
lea r9, [rbp - 0x78]
xor r8d, r8d
mov rcx, r15
call rax
mov rax, qword [rbp + 0x10]
jmp 0x14000dd5a
mov r9d, Ordinal_50
lea r8, [rbp - 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000e101
mov eax, dword [rbp - 0x54]
cmp dword [rbp - 0x58], 0x1000
jne 0x14000dd8f
bt eax, 8
jb 0x14000dd8f
test dil, dil
jne 0x14000dd98
test al, 4
jne 0x14000ddac
test al, 8
jne 0x14000ddac
mov rbx, qword [rbp - 0x60]
add rbx, qword [rbp - 0x78]
jmp 0x14000e107
test dil, dil
je 0x14000e0f7
test al, 0x10
jne 0x14000ddac
test al, 0x20
jne 0x14000ddac
test al, 0x40
jne 0x14000ddac
test al, al
jns 0x14000e0f7
mov rdi, qword [rbp - 0x78]
mov qword [rsp + 0x30], rdi
mov rcx, qword [rbp - 0x60]
add rcx, rdi
cmp rdi, rcx
jae 0x14000e0f0
nop word [rax + rax]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov qword [rbp - 8], rax
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.14000cbe0
mov rcx, qword [rbp - 0x18]
lea rbx, [rcx + rsi]
mov r8, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x10], rbx
mov rax, qword [0x1401cd0d0]
mov r9, rsi
mov r8, qword [rbp - 0x18]
mov rdx, rdi
test rax, rax
je 0x14000de2b
lea rcx, [rbp + 8]
mov qword [rsp + 0x20], rcx
mov rcx, r15
call rax
shr eax, 0x1f
xor al, 1
jmp 0x14000de42
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
setne al
test al, al
je 0x14000e098
xor r11d, r11d
mov qword [rsp + 0x38], r11
mov rax, qword [rbp + 8]
cmp rax, qword [r14 + 0x10]
je 0x14000e098
mov r9, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
sub r9, rdx
sar r9, 3
test r9, r9
je 0x14000deee
mov r10, qword [rbp - 0x18]
add r10, r11
mov r8, r10
add rdx, 4
mov eax, dword [rdx - 4]
cmp eax, 1
je 0x14000dedc
cmp eax, 2
jne 0x14000deab
movzx eax, byte [rdx]
movzx ecx, byte [r8]
sub ecx, eax
and ecx, 0x8000000f
jge 0x14000dea7
dec ecx
or ecx, 0xfffffff0
inc ecx
test ecx, ecx
jmp 0x14000ded6
cmp eax, 3
jne 0x14000decc
movzx eax, byte [r8]
movzx ecx, byte [rdx]
cmp al, cl
jb 0x14000e06d
add ecx, 0xf
cmp eax, ecx
ja 0x14000e06d
jmp 0x14000dedc
test eax, eax
jne 0x14000dedc
movzx eax, byte [rdx]
cmp byte [r8], al
jne 0x14000e06d
add rdx, 8
inc r8
mov rax, r8
sub rax, r10
cmp rax, r9
jb 0x14000de82
lea rbx, [r11 + rdi]
mov qword [rbp + 0x18], rbx
mov rdi, rbx
shr rdi, 0x38
mov rsi, rbx
shr rsi, 0x30
mov r14, rbx
shr r14, 0x28
mov r15, rbx
shr r15, 0x20
mov r12, rbx
shr r12, 0x18
mov r13, rbx
shr r13, 0x10
mov rax, rbx
shr rax, 8
mov qword [rsp + 0x68], rax
mov dl, 1
movzx ecx, bl
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x14000df56
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call r8
movzx edx, al
movzx ecx, bl
mov rax, qword [rsp + 0x68]
mov r11, qword [rsp + 0x38]
movzx ecx, cl
movabs r8, 0xcbf29ce484222325
xor rcx, r8
movabs r8, 0x100000001b3
imul rcx, r8
movzx eax, al
xor rcx, rax
imul rcx, r8
movzx eax, r13b
xor rcx, rax
imul rcx, r8
movzx eax, r12b
xor rcx, rax
imul rcx, r8
movzx eax, r15b
xor rcx, rax
imul rcx, r8
movzx eax, r14b
xor rcx, rax
imul rcx, r8
movzx eax, sil
xor rcx, rax
imul rcx, r8
xor rcx, rdi
imul rcx, r8
mov rax, qword [rbp + 0x70]
and rax, rcx
add rax, rax
mov r8, qword [rbp + 0x58]
mov rcx, qword [r8 + rax*8 + 8]
mov r9, qword [rbp + 0x48]
cmp rcx, r9
je 0x14000dff3
mov rax, qword [r8 + rax*8]
cmp rbx, qword [rcx + 0x10]
je 0x14000dff5
cmp rcx, rax
je 0x14000dff3
mov rcx, qword [rcx + 8]
cmp rbx, qword [rcx + 0x10]
jne 0x14000dfe2
jmp 0x14000dff5
xor ecx, ecx
mov rax, r9
test rcx, rcx
cmovne rax, rcx
cmp rax, r9
jne 0x14000e068
test dl, dl
je 0x14000e068
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rdi + 8]
cmp rdx, qword [rdi + 0x10]
je 0x14000e021
mov qword [rdx], rbx
add qword [rdi + 8], 8
jmp 0x14000e02d
lea r8, [rbp + 0x18]
mov rcx, rdi
call fcn.1400103b0
lea r8, [rbp + 0x18]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x40]
call fcn.14000f6b0
mov r14, qword [rbp + 0xf8]
test r14, r14
je 0x14000e063
mov rcx, qword [rdi + 8]
sub rcx, qword [rdi]
sar rcx, 3
movzx eax, word [r14]
cmp rcx, rax
jae 0x14000e162
mov r11, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
inc r11
mov qword [rsp + 0x38], r11
mov rax, qword [rbp + 8]
mov rdx, qword [rsp + 0x40]
sub rax, qword [rdx + 0x10]
cmp r11, rax
jb 0x14000de60
mov rsi, qword [rsp + 0x58]
mov r14, rdx
mov r15, qword [rsp + 0x48]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14000e0d2
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e0cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1ee
call fcn.140129630
add rdi, rsi
mov qword [rsp + 0x30], rdi
mov rcx, qword [rbp - 0x78]
add rcx, qword [rbp - 0x60]
cmp rdi, rcx
jb 0x14000ddd0
mov r12, qword [rsp + 0x50]
movzx edi, byte [rbp + 0x108]
mov rbx, qword [rbp - 0x60]
add rbx, qword [rbp - 0x78]
jmp 0x14000e107
mov eax, dword [rbp - 0x44]
add rbx, rax
cmp rbx, r12
jb 0x14000dd10
lea rcx, [rbp + 0x40]
call fcn.14000e2c0
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14000e1fa
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14000e1a8
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e193
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1ee
call fcn.140129630
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], 0
lea rcx, [rbp + 0x40]
call fcn.14000e2c0
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14000e1fa
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e1f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e1f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140129630
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1401292a0
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movss xmm0, dword [0x14019253c]
call fcn.140098f80
int3