Function at 0x10015ef6
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov eax, 0x1013e821
call fcn.1013e250
sub esp, 0xd0
movdqa xmm0, xmmword [0x1000eac0]
lea eax, [ebp - 0xc0]
push ebx
push esi
push edi
push dword [ebp - 0x24]
xor ebx, ebx
lea ecx, [ebp - 0x64]
push eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x64], ebx
push eax
push ebx
movdqu xmmword [ebp - 0xd0], xmm0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
call fcn.10014f3b
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x24], 0xd4e7937d
or esi, 0xffffffff
mov dword [ebp - 0x24], 0x8462751c
push 2
pop edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], 0x9d4346
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xb2b74c38
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0x67101392
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0x421e0bec
mov dword [ebp - 0x24], 0x826a056e
push 3
call fcn.10013ee8
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x1aa84cbe
push 3
mov dword [ebp - 0x24], 0xc22c9208
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], ebx
jmp 0x10015fd7
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10015fc8
dec dword [ebp - 0x28]
lea ecx, [ebp - 0xb0]
call fcn.100144eb
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.100144eb
mov eax, dword [0x110e4128]
test al, 1
jne 0x10016017
push ecx
or eax, 1
mov dword [0x110e4114], esi
push 0x1571
mov dword [0x110e4128], eax
call fcn.10017111
push dword [ebp - 0x24]
movdqa xmm0, xmmword [0x1000ea70]
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x1c], 0xdb5cabfc
push eax
mov dword [ebp - 0x14], 0x6f93bd5d
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x18], 5
push ebx
movdqu xmmword [ebp - 0xc0], xmm0
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call fcn.10014f3b
push edi
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 1
call fcn.10013ee8
mov dword [ebp - 0x2c], 0xf39281c1
mov dword [ebp - 0x28], 0x1f199e1f
mov dword [ebp - 0x18], ebx
jmp 0x10016098
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0xdc0223de
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10016085
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
imul ecx, dword [ebp - 0x18], 0x4006
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x88]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x53a3
setle al
xor ecx, ecx
mov dword [esi + 4], eax
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x14]
cmp dword [esi + 4], eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0xb0f7
setle al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, dword [esi + 4]
jle 0x10016133
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x28], 0x5d1cc0c7
jg 0x10016133
mov eax, ebx
jmp 0x10016136
xor eax, eax
inc eax
mov dword [edi + 4], eax
mov ecx, 0x4043ca31
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
sub ecx, dword [edx + 8]
add eax, ecx
je 0x10016158
cmp dword [esi + 4], ebx
je 0x10016158
xor ecx, ecx
inc ecx
jmp 0x1001615a
mov ecx, ebx
xor eax, eax
cmp ecx, dword [edx + 8]
lea ecx, [ebp - 0x88]
setne al
mov dword [ebp - 0x2c], eax
call fcn.100144eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.100144eb
cmp byte [0x110e2b75], 0
jne 0x100164c3
mov dword [ebp - 0x34], 0x5e3edfa8
lea ecx, [ebp - 0x70]
push 2
mov dword [ebp - 0x24], 0x391cb4e7
pop esi
mov dword [ebp - 0x14], 0x5a9864ba
mov dword [ebp - 0x18], 0xade0980d
mov dword [ebp - 0x28], 0x5c1d1022
push esi
call fcn.10013ee8
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x1c], 0xca3691f6
mov dword [ebp - 0x2c], 0x32e26595
push 1
call fcn.10013ee8
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], 0xcd85
mov dword [ebp - 0x20], ebx
jmp 0x100161f3
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0xaf72b572
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100161e3
mov dword [ebp - 0x20], ebx
jmp 0x1001620a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100161fd
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10016268
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x7d0
push 0x1a45
push 0x1f12
push ebx
push 0x144f
push 0xe65
call edi
mov esi, dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
push 2
pop esi
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
lea eax, [ecx + 1]
cmp eax, 1
ja 0x1001628c
test ecx, ecx
jne 0x1001628c
mov eax, ebx
jmp 0x1001628f
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x2c]
imul ecx, eax
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x2c]
cmp ecx, eax
jge 0x100162a4
xor ecx, ecx
inc ecx
jmp 0x100162a6
mov ecx, ebx
xor eax, eax
cmp ecx, 0x3b91
setg al
xor ecx, ecx
inc ecx
cmp eax, ecx
jbe 0x100162c0
cmp dword [ebp - 0x18], ebx
je 0x100162c0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
cmp dword [eax], ebx
je 0x100163f4
mov dword [ebp - 0x20], 0xce724d25
mov dword [ebp - 0x2c], ebx
jmp 0x100163df
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x7c]
push 4
call fcn.10013ee8
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], ebx
jmp 0x10016307
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x7c]
mov dword [eax + ecx*4], 0x7874d2d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100162f7
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0x1c
jne 0x100163d0
mov esi, dword [ebp - 0x7c]
mov dword [ebp - 0x34], esi
push 3
lea ecx, [ebp - 0x94]
call fcn.10013ee8
mov dword [ebp - 0x1c], ebx
jmp 0x10016345
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xeb613644
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10016332
cmp dword [ebp - 0x20], ebx
jne 0x10016358
mov dword [ebp - 0x1c], ebx
cmp dword [esi + 8], ebx
je 0x1001635f
mov dword [ebp - 0x1c], 1
mov esi, dword [esi + 8]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x94]
sub esi, dword [edi + 8]
cmp ecx, eax
setl dl
sub esi, edx
sub esi, dword [ebp - 0x1c]
sub esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
sub esi, 9
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp eax, esi
mov esi, dword [ebp - 0x34]
setg cl
sub ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, dword [esi + 8]
lea ecx, [ebp - 0x94]
setle al
mov dword [edi + 8], eax
call fcn.100144eb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
je 0x10016320
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 3
call fcn.100144eb
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x15
jne 0x100162dd
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
jmp 0x1001648e
mov dword [ebp - 0x14], 0xfd11e6ac
mov eax, 0x9fb0e7fb
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x1001645c
mov dword [ebp - 0x14], ebx
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
sub ecx, eax
jne 0x1001643e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], 4
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
inc ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x1c]
jns 0x10016420
imul eax, dword [ebp - 0x14], 0xc6b9
test eax, eax
je 0x1001647c
cmp dword [edx + 4], ebx
jne 0x10016478
cmp dword [ebp - 0x1c], ebx
jne 0x10016478
mov eax, dword [ebp - 0x70]
cmp dword [eax], ebx
je 0x1001647c
mov edx, ecx
jmp 0x1001647e
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0xa0], ecx
lea ecx, [ebp - 0x58]
call fcn.100144eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100144eb
push 0xf90b
push 0x3111
call fcn.100290d8
pop ecx
pop ecx
call eax
push ecx
push eax
call fcn.10017111
mov byte [0x110e2b75], 1
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x4c]
push 1
call fcn.10013ee8
mov dword [ebp - 0x2c], 0xc7f05f43
xor edx, edx
mov dword [ebp - 0x28], 0xa2b8ea2c
inc edx
mov dword [ebp - 0x14], 0xfaa23240
push 0xfffffffffffffff7
mov dword [ebp - 0x14], 0xef7e2919
mov dword [ebp - 0x20], ebx
pop esi
jmp 0x10016507
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x100164fb
mov dword [ebp - 0x20], ebx
jmp 0x10016522
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10016511
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov dword [eax], edx
xor edx, edx
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setge dl
add edx, dword [ebp - 0x28]
je 0x10016554
mov eax, dword [ebp - 0x4c]
cmp dword [eax], ebx
je 0x10016554
xor eax, eax
inc eax
jmp 0x10016556
mov eax, ebx
mov ecx, dword [ebp - 0x18]
xor edx, edx
imul ecx, eax
mov eax, 0xffff0008
sub eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
sub eax, ecx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x14], ebx
jmp 0x100165e2
mov dword [ebp - 0x24], 0x82a7
mov dword [ebp - 0x34], 0xb5b0d69b
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100165df
push ebx
push 1
push 0x717
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100165af
lea ecx, [ebp - 0x4c]
call fcn.100144eb
mov eax, dword [0x110e2d90]
cmp eax, 0x270
jne 0x1001663b
mov edx, 0x110e2d98
mov ecx, dword [edx - 4]
xor ecx, dword [edx]
and ecx, 0x7fffffff
xor ecx, dword [edx - 4]
mov eax, ecx
and al, 1
movzx eax, al
neg eax
sbb eax, eax
shr ecx, 1
and eax, 0x9908b0df
xor eax, dword [edx + 0x630]
xor eax, ecx
mov dword [edx + 0x9bc], eax
add edx, 4
cmp edx, 0x110e3758
jl 0x10016600
jmp 0x10016647
cmp eax, 0x4e0
jb 0x1001664c
call fcn.1001714c
mov eax, dword [0x110e2d90]
mov ecx, dword [eax*4 + 0x110e2d94]
inc eax
mov dword [0x110e2d90], eax
mov eax, ecx
shr eax, 0xb
and eax, dword [0x110e4114]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov eax, ecx
pop edi
shr eax, 0x12
xor eax, ecx
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret