Function at 0x14000d920
Capabilities:
Get system information on windows
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1401ae6f8]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rsi, r9
mov rbx, r8
mov qword [rsp + 0x40], rdx
mov rdi, qword [rbp + 0x100]
mov qword [rsp + 0x70], rdi
mov rax, qword [rbp + 0x110]
mov qword [rsp + 0x60], rax
mov r15, qword [0x1401cb138]
mov qword [rsp + 0x48], r15
cmp byte [0x1401cb150], 0
je 0x14000e004
mov r14, qword [rbp + 0xf8]
test r14, r14
je 0x14000d9b0
mov rcx, qword [rdi + 8]
sub rcx, qword [rdi]
sar rcx, 3
movzx eax, word [r14]
cmp rcx, rax
jae 0x14000dfda
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rax
lea rcx, [rbp - 0x18]
call fcn.14000eeb0
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000d5a0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x48], xmm1
movups xmmword [rbp - 0x38], xmm1
movups xmmword [rbp - 0x28], xmm1
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
test rbx, rbx
je 0x14000da05
mov rbx, qword [rbx]
jmp 0x14000da09
mov rbx, qword [rbp - 0x40]
test rsi, rsi
je 0x14000da13
mov r12, qword [rsi]
jmp 0x14000da17
mov r12, qword [rbp - 0x38]
mov qword [rsp + 0x50], r12
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e0
ja 0x14000da48
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x201
cmp eax, 0x1e1
jb 0x14000da32
shr rax, 0x20
lea esi, [rax + 0xa00]
mov qword [rsp + 0x58], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], 0
mov ecx, Ordinal_26
call fcn.140127a24
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x58], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 7
mov qword [rbp + 0x78], 8
mov dword [rbp + 0x40], 0x3f800000
mov r8, rax
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp + 0x58]
call fcn.14000f1f0
nop
cmp rbx, r12
jae 0x14000def0
movzx edi, byte [rbp + 0x108]
mov r14, qword [rsp + 0x40]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x1401cb148]
mov rdx, rbx
test rax, rax
je 0x14000db23
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], Ordinal_50
lea r9, [rbp - 0x78]
xor r8d, r8d
mov rcx, r15
call rax
mov rax, qword [rbp + 0x10]
jmp 0x14000db3a
mov r9d, Ordinal_50
lea r8, [rbp - 0x78]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000dee1
mov eax, dword [rbp - 0x54]
cmp dword [rbp - 0x58], 0x1000
jne 0x14000db6f
bt eax, 8
jb 0x14000db6f
test dil, dil
jne 0x14000db78
test al, 4
jne 0x14000db8c
test al, 8
jne 0x14000db8c
mov rbx, qword [rbp - 0x60]
add rbx, qword [rbp - 0x78]
jmp 0x14000dee7
test dil, dil
je 0x14000ded7
test al, 0x10
jne 0x14000db8c
test al, 0x20
jne 0x14000db8c
test al, 0x40
jne 0x14000db8c
test al, al
jns 0x14000ded7
mov rdi, qword [rbp - 0x78]
mov qword [rsp + 0x30], rdi
mov rcx, qword [rbp - 0x60]
add rcx, rdi
cmp rdi, rcx
jae 0x14000ded0
nop word [rax + rax]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov qword [rbp - 8], rax
mov rdx, rsi
lea rcx, [rbp - 0x18]
call fcn.14000c9b0
mov rcx, qword [rbp - 0x18]
lea rbx, [rcx + rsi]
mov r8, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x10], rbx
mov rax, qword [0x1401cb0c0]
mov r9, rsi
mov r8, qword [rbp - 0x18]
mov rdx, rdi
test rax, rax
je 0x14000dc0b
lea rcx, [rbp + 8]
mov qword [rsp + 0x20], rcx
mov rcx, r15
call rax
shr eax, 0x1f
xor al, 1
jmp 0x14000dc22
lea rax, [rbp + 8]
mov qword [rsp + 0x20], rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
setne al
test al, al
je 0x14000de78
xor r11d, r11d
mov qword [rsp + 0x38], r11
mov rax, qword [rbp + 8]
cmp rax, qword [r14 + 0x10]
je 0x14000de78
mov r9, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
sub r9, rdx
sar r9, 3
test r9, r9
je 0x14000dcce
mov r10, qword [rbp - 0x18]
add r10, r11
mov r8, r10
add rdx, 4
mov eax, dword [rdx - 4]
cmp eax, 1
je 0x14000dcbc
cmp eax, 2
jne 0x14000dc8b
movzx eax, byte [rdx]
movzx ecx, byte [r8]
sub ecx, eax
and ecx, 0x8000000f
jge 0x14000dc87
dec ecx
or ecx, 0xfffffff0
inc ecx
test ecx, ecx
jmp 0x14000dcb6
cmp eax, 3
jne 0x14000dcac
movzx eax, byte [r8]
movzx ecx, byte [rdx]
cmp al, cl
jb 0x14000de4d
add ecx, 0xf
cmp eax, ecx
ja 0x14000de4d
jmp 0x14000dcbc
test eax, eax
jne 0x14000dcbc
movzx eax, byte [rdx]
cmp byte [r8], al
jne 0x14000de4d
add rdx, 8
inc r8
mov rax, r8
sub rax, r10
cmp rax, r9
jb 0x14000dc62
lea rbx, [r11 + rdi]
mov qword [rbp + 0x18], rbx
mov rdi, rbx
shr rdi, 0x38
mov rsi, rbx
shr rsi, 0x30
mov r14, rbx
shr r14, 0x28
mov r15, rbx
shr r15, 0x20
mov r12, rbx
shr r12, 0x18
mov r13, rbx
shr r13, 0x10
mov rax, rbx
shr rax, 8
mov qword [rsp + 0x68], rax
mov dl, 1
movzx ecx, bl
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x14000dd36
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call r8
movzx edx, al
movzx ecx, bl
mov rax, qword [rsp + 0x68]
mov r11, qword [rsp + 0x38]
movzx ecx, cl
movabs r8, 0xcbf29ce484222325
xor rcx, r8
movabs r8, 0x100000001b3
imul rcx, r8
movzx eax, al
xor rcx, rax
imul rcx, r8
movzx eax, r13b
xor rcx, rax
imul rcx, r8
movzx eax, r12b
xor rcx, rax
imul rcx, r8
movzx eax, r15b
xor rcx, rax
imul rcx, r8
movzx eax, r14b
xor rcx, rax
imul rcx, r8
movzx eax, sil
xor rcx, rax
imul rcx, r8
xor rcx, rdi
imul rcx, r8
mov rax, qword [rbp + 0x70]
and rax, rcx
add rax, rax
mov r8, qword [rbp + 0x58]
mov rcx, qword [r8 + rax*8 + 8]
mov r9, qword [rbp + 0x48]
cmp rcx, r9
je 0x14000ddd3
mov rax, qword [r8 + rax*8]
cmp rbx, qword [rcx + 0x10]
je 0x14000ddd5
cmp rcx, rax
je 0x14000ddd3
mov rcx, qword [rcx + 8]
cmp rbx, qword [rcx + 0x10]
jne 0x14000ddc2
jmp 0x14000ddd5
xor ecx, ecx
mov rax, r9
test rcx, rcx
cmovne rax, rcx
cmp rax, r9
jne 0x14000de48
test dl, dl
je 0x14000de48
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rdi + 8]
cmp rdx, qword [rdi + 0x10]
je 0x14000de01
mov qword [rdx], rbx
add qword [rdi + 8], 8
jmp 0x14000de0d
lea r8, [rbp + 0x18]
mov rcx, rdi
call fcn.140010190
lea r8, [rbp + 0x18]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x40]
call fcn.14000f490
mov r14, qword [rbp + 0xf8]
test r14, r14
je 0x14000de43
mov rcx, qword [rdi + 8]
sub rcx, qword [rdi]
sar rcx, 3
movzx eax, word [r14]
cmp rcx, rax
jae 0x14000df42
mov r11, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
inc r11
mov qword [rsp + 0x38], r11
mov rax, qword [rbp + 8]
mov rdx, qword [rsp + 0x40]
sub rax, qword [rdx + 0x10]
cmp r11, rax
jb 0x14000dc40
mov rsi, qword [rsp + 0x58]
mov r14, rdx
mov r15, qword [rsp + 0x48]
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14000deb2
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dead
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dfce
call fcn.140127cb0
add rdi, rsi
mov qword [rsp + 0x30], rdi
mov rcx, qword [rbp - 0x78]
add rcx, qword [rbp - 0x60]
cmp rdi, rcx
jb 0x14000dbb0
mov r12, qword [rsp + 0x50]
movzx edi, byte [rbp + 0x108]
mov rbx, qword [rbp - 0x60]
add rbx, qword [rbp - 0x78]
jmp 0x14000dee7
mov eax, dword [rbp - 0x44]
add rbx, rax
cmp rbx, r12
jb 0x14000daf0
lea rcx, [rbp + 0x40]
call fcn.14000e0a0
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14000dfda
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dfd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dfd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14000df88
mov rdx, qword [rbp - 8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000df73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000dfce
call fcn.140127cb0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], 0
lea rcx, [rbp + 0x40]
call fcn.14000e0a0
nop
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14000dfda
mov rdx, qword [rbp + 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dfd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000dfd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140127cb0
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140127920
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movss xmm0, dword [0x1401903dc]
call fcn.140097df0
int3