Function at 0x140011620
Capabilities:
Encode data using xor
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rsi, rdx
mov rdi, rcx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov eax, dword [0x141dbe008]
xor eax, dword [0x141dbe00c]
movaps xmmword [rsp + 0x20], xmm0
add eax, 0xc69f389a
and eax, 0x5f5fc90f
cmp eax, 0x739885a0
jne 0x14001167c
lea rdx, [rsp + 0x20]
xor ecx, ecx
mov r8d, 0x20
mov r9d, 2
call qword [sym.imp.bcrypt.dll_BCryptGenRandom]
lea r14, [rsp + 0x20]
mov r15, qword [sym.imp.bcrypt.dll_BCryptGenRandom]
nop dword [rax + rax]
mov eax, dword [0x141dbe010]
imul eax, dword [0x141dbe014]
imul eax, eax, 0x90855c5c
or eax, 0x2773ce4d
imul ebp, eax, 0x58386afc
xor ecx, ecx
mov rdx, r14
mov r8d, 0x20
mov r9d, 2
call r15
cmp ebp, 0xa1c878af
je 0x140011690
mov ebx, eax
nop dword [rax]
mov eax, dword [0x141dbe018]
imul eax, dword [0x141dbe01c]
add eax, 0xc5048312
and eax, 0xe040a2aa
cmp eax, 0xbf1c3823
ja 0x1400116d0
cmp ebx, 0xc0000000
jb 0x1400117a4
mov eax, dword [0x141dbe020]
mov ecx, dword [0x141dbe024]
add eax, ecx
add eax, 0xc6b3c7d0
or eax, 0x588c04c8
xor eax, 0x731417f0
cmp eax, 0x6a103f62
jbe 0x14001172e
lea rcx, [rsp + 0x20]
mov edx, 0x20
call qword [sym.imp.ADVAPI32.dll_SystemFunction036]
mov r15d, 0xec890e21
lea r14, [rsp + 0x20]
mov r12, qword [sym.imp.ADVAPI32.dll_SystemFunction036]
mov r13d, dword [0x141dbe028]
imul r13d, dword [0x141dbe02c]
add r13d, 0x3c2092df
imul r13, r15
shr r13, 0x3c
and r13d, 7
mov rcx, r14
mov edx, 0x20
call r12
cmp r13d, 0x59361d6f
je 0x140011740
nop word cs:[rax + rax]
mov ecx, dword [0x141dbe030]
and ecx, dword [0x141dbe034]
and ecx, 0x1120b400
xor ecx, 0x3c66590f
cmp ecx, 0x6923640d
ja 0x140011780
test al, al
je 0x1400117f3
movaps xmm0, xmmword [rsp + 0x20]
movaps xmm1, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
lea rbx, [rsp + 0x70]
mov eax, dword [0x141dbe058]
mov ecx, dword [0x141dbe05c]
add eax, ecx
add eax, 0x7ab751c5
or eax, 0x26aceb04
shr eax, 2
imul rax, rax, 0x2234159d
shr rax, 0x3a
cmp eax, 0x4f5125ea
jne 0x140011900
jmp 0x140011921
add ebx, 0x80000000
nop dword [rax]
mov eax, dword [0x141dbe038]
xor edx, edx
div dword [0x141dbe03c]
add eax, 0x10322919
imul rax, rax, 0x41ee8ead
shr rax, 0x3d
cmp eax, 0x38f1a4aa
ja 0x140011800
nop word cs:[rax + rax]
mov eax, dword [0x141dbe040]
xor edx, edx
div dword [0x141dbe044]
imul eax, eax, 0x1db3884b
and eax, 0x9a814490
cmp eax, 0x583ad2b2
ja 0x140011830
test ebx, ebx
je 0x1400117a4
movzx eax, byte [0x141dd7ff8]
mov edx, 4
xor ecx, ecx
call fcn.1400beea0
test rax, rax
je 0x1400118b5
mov dword [rax], ebx
mov rcx, qword [0x141dd7fe0]
xor edx, edx
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dbe0d0]
xor edx, edx
div dword [0x141dbe0d4]
imul eax, eax, 0x2463ce7
or eax, 0xe63e9ba3
cmp eax, 0x80ac6d6
jb 0x140011890
jmp 0x140011c02
mov eax, dword [0x141dbe048]
xor eax, dword [0x141dbe04c]
or eax, 0x38200841
xor eax, 0xc401021
or eax, 0xc309a79e
cmp eax, 0x3f7d109c
jne 0x1400118d9
ud2
mov eax, dword [0x141dbe050]
xor eax, dword [0x141dbe054]
imul eax, eax, 0xfb207b65
or eax, 0x5a37c755
add eax, 0xec9dcfad
ud2
mov eax, dword [0x141dbe060]
xor edx, edx
div dword [0x141dbe064]
and eax, 0x41608
mov rcx, qword [0x141dd7fe8]
cmp eax, 0xe98ab163
jbe 0x14001192a
mov rax, qword [0x141dd7fe8]
jmp 0x140011900
test rcx, rcx
je 0x140011a82
nop word cs:[rax + rax]
mov eax, dword [0x141dbe078]
xor edx, edx
div dword [0x141dbe07c]
imul rax, rax, 0x22bd35c3
shr rax, 0x3d
add eax, 0x1545394d
and eax, 0x1003907
cmp eax, 0x6de76ba2
ja 0x140011940
and ecx, 0x4000
mov eax, dword [0x141dbe080]
sub eax, dword [0x141dbe084]
add eax, 0x808317f3
and eax, 0xca775702
add eax, 0x3dc9b01d
cmp eax, 0x8b69db6e
ja 0x140011970
xor eax, eax
nop word cs:[rax + rax]
mov edx, dword [0x141dbe088]
and edx, dword [0x141dbe08c]
xor edx, 0x640192e1
and edx, 0x65b3faeb
imul edx, edx, 0xc61b12fa
cmp edx, 0xf2795927
ja 0x1400119a0
nop word cs:[rax + rax]
mov edx, dword [0x141dbe090]
add edx, dword [0x141dbe094]
xor edx, 0x208d45c7
imul edx, edx, 0x53f772d9
cmp edx, 0xaabad8ef
je 0x1400119d0
or rcx, rax
je 0x140011a0e
lea r8, [0x141db6280]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14006efe0
jmp 0x140011b40
mov ecx, 0xfa1175d3
nop word cs:[rax + rax]
mov eax, dword [0x141dbe098]
xor edx, edx
div dword [0x141dbe09c]
imul eax, eax, 0xb9cff37b
imul rax, rcx
shr rax, 0x3e
imul eax, eax, 0x428ac4d2
cmp eax, 0x73f94912
jb 0x140011a20
movaps xmm0, xmmword [rsp + 0x40]
movaps xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x70], xmm0
mov eax, dword [0x141dbe0a0]
xor eax, dword [str.:ef_]
movaps xmmword [rsp + 0x80], xmm1
or eax, 0x2100842
and eax, 0x21088c2
cmp eax, 0xd8343ad4
jbe 0x140011af9
jmp 0x140011b2c
call fcn.1400f98e0
mov rcx, rax
and ecx, 0x4000
xor eax, eax
nop word cs:[rax + rax]
mov edx, dword [0x141dbe068]
sub edx, dword [0x141dbe06c]
imul edx, edx, 0xcf919b6f
xor edx, 0x84050550
and edx, 0x87a707da
cmp edx, 0x4e136416
ja 0x140011aa0
nop word cs:[rax + rax]
mov edx, dword [0x141dbe070]
mov r8d, dword [0x141dbe074]
add edx, r8d
add edx, 0xdbd4fd72
or edx, 0x76082dc9
cmp edx, 0xb03d09b2
je 0x140011ad0
jmp 0x1400119d0
mov eax, dword [0x141dbe0a8]
and eax, dword [0x141dbe0ac]
or eax, 0x57376c96
add eax, 0x7449ba50
imul rax, rax, 0x4ce4fe93
shr rax, 0x3e
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
cmp eax, 0x2f157cb7
jne 0x140011b40
xorps xmm0, xmm0
movaps xmmword [rsp + 0x90], xmm0
jmp 0x140011af9
mov eax, dword [0x141dbe0b0]
add eax, dword [0x141dbe0b4]
xor eax, 0x666c6300
add eax, 0xfa300c01
cmp eax, 0xa13e106e
ja 0x140011b40
mov eax, dword [0x141dbe0b8]
xor eax, dword [0x141dbe0bc]
add eax, 0xc1f71640
or eax, 0xe5469f68
imul eax, eax, 0x812cb8c7
cmp eax, 0xf63dac95
je 0x140011bb9
mov eax, dword [0x141dbe0c0]
sub eax, dword [0x141dbe0c4]
imul eax, eax, 0x9cec31c9
add eax, 0xebabf452
or eax, 0x10ce1c04
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [rdi + 0x20], xmm2
movaps xmmword [rdi + 0x10], xmm1
movaps xmmword [rdi], xmm0
cmp eax, 0x10c695a0
jae 0x140011bd1
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [rdi + 0x20], xmm2
movaps xmmword [rdi + 0x10], xmm1
movaps xmmword [rdi], xmm0
jmp 0x140011b80
mov eax, 0x801018a9
nop word cs:[rax + rax]
mov ecx, dword [0x141dbe0c8]
and ecx, dword [0x141dbe0cc]
add ecx, 0xa0ec7353
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x4a5501ec
jae 0x140011be0
mov eax, dword [0x141dbe0d8]
xor edx, edx
div dword [0x141dbe0dc]
add eax, 0x514fd9dd
and eax, 0x90100084
cmp eax, 0xad327074
ja 0x140011c4b
mov eax, dword [0x141dbe0e0]
xor eax, dword [0x141dbe0e4]
xor eax, 0x2102
and eax, 0x202512
add eax, 0xd296410a
mov qword [rdi + 0x40], 0
cmp eax, 0x11e0c7e1
jae 0x140011c55
mov qword [rdi + 0x40], 0
jmp 0x140011c21
mov rax, 0xffffffffffffff00
add rax, qword [rdi + 0x30]
mov qword [rdi + 0x38], rax
mov rcx, rdi
mov rdx, rsi
call fcn.14006f030
nop
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret