Function at 0x140043960
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x14020b010]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rsi, rdx
mov r12, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x28], rcx
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov r14d, reloc.WS2_32.dll_sendto
mov eax, dword [r14 + rdi]
mov ebp, reloc.WLDAP32.dll_Ordinal_32
mov r15d, 0xffffffff
test al, 1
jne 0x140043a0d
or eax, 1
mov dword [r14 + rdi], eax
mov ebx, ebp
add rbx, rdi
call fcn.1400915f0
mov ecx, eax
mov dword [rbx + 0x1384], r15d
mov dword [rbx + 4], eax
mov edx, 1
lea r8, [rbx + 8]
mov eax, ecx
shr eax, 0x1e
xor eax, ecx
imul ecx, eax, 0x6c078965
add ecx, edx
mov dword [r8], ecx
inc rdx
lea r8, [r8 + 4]
cmp rdx, 0x270
jb 0x1400439e1
mov dword [rbx], 0x270
mov eax, dword [r14 + rdi]
mov ebx, 0x13a8
test al, 2
jne 0x140043a2e
or eax, 2
mov dword [r14 + rdi], eax
mov qword [rdi + rbx], 0
mov qword [rdi + rbx + 8], Ordinal_33
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rax + 8], 0
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
mov qword [rax], rcx
mov qword [rsp + 0x68], 0
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x70], r15
mov byte [rsp + 0x58], 0
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.140087ea0
test rsi, rsi
je 0x140043bda
lea rax, [rdi + rbx]
mov qword [rsp + 0x28], rax
add rbp, rdi
nop dword [rax]
nop word [rax + rax]
dec rsi
mov qword [rsp + 0x38], rsi
mov r15, qword [rax + 8]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
mov rbx, 0xffffffffffffffff
mov ecx, 0xffffffff
mov r13d, 0x40
nop word [rax + rax]
dec r13
shr rbx, 1
cmp rbx, rcx
ja 0x140043ae0
sub r15, rax
cmp r15, 0xffffffffffffffff
jne 0x140043b2d
xor edi, edi
xor esi, esi
nop dword [rax + rax]
lea rcx, [r13 - 1]
shl rdi, cl
add rdi, rdi
nop word [rax + rax]
mov rcx, rbp
call fcn.14008d940
mov eax, eax
cmp rax, rbx
ja 0x140043b10
or rdi, rax
add rsi, r13
cmp rsi, 0x40
jb 0x140043b00
jmp 0x140043b9f
lea r12, [r15 + 1]
xor edi, edi
xor esi, esi
test r15, r15
je 0x140043b74
nop word [rax + rax]
lea rcx, [r13 - 1]
shl rdi, cl
add rdi, rdi
nop word [rax + rax]
mov rcx, rbp
call fcn.14008d940
mov eax, eax
cmp rax, rbx
ja 0x140043b50
or rdi, rax
lea rcx, [r13 - 1]
shl rsi, cl
add rsi, rsi
or rsi, rbx
cmp rsi, r15
jb 0x140043b40
xor edx, edx
mov rax, rsi
div r12
mov r8, rdx
mov rcx, rax
xor edx, edx
mov rax, rdi
div r12
cmp rax, rcx
jb 0x140043b94
cmp r8, r15
jne 0x140043b31
xor edx, edx
mov rax, rdi
div r12
mov rdi, rdx
mov rax, qword [rsp + 0x30]
add rax, rdi
lea rcx, str.QWERTYUIOPASDFGHJKLZXCVBNM
movzx edx, byte [rax + rcx]
lea rcx, [rsp + 0x50]
call fcn.140089e90
mov rsi, qword [rsp + 0x38]
test rsi, rsi
mov rax, qword [rsp + 0x28]
jne 0x140043ab0
mov r15d, reloc.WS2_32.dll_ntohs
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x68]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, rdi
cmp rax, 4
jb 0x140043cf8
lea rbp, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rbp, qword [rsp + 0x58]
mov qword [r12], 0
xor eax, eax
mov qword [r12 + 8], rax
mov qword [r12 + 0x18], rax
mov qword [r12 + 0x20], rax
lea rsi, [rdi + 4]
lea rbx, [r12 + 8]
lea rax, [rsp + 0x20]
mov qword [rsp + 0x48], rax
mov ecx, reloc.WS2_32.dll_recv
call fcn.14008c900
mov qword [rsp + 0x40], rax
mov qword [rax], r12
mov qword [rax + 8], 0
mov qword [r12], rax
cmp rsi, 0xf
jbe 0x140043c88
mov r15, rsi
or r15, 0xf
cmp r15, r13
jbe 0x140043c6b
mov r15, r13
jmp 0x140043c77
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp r15, rax
cmovb r15, rax
lea rcx, [r15 + 1]
call fcn.14008c900
mov rbx, rax
mov qword [r12 + 8], rax
mov qword [r12 + 0x18], rsi
mov qword [r12 + 0x20], r15
mov r8, rdi
mov rdx, rbp
mov rcx, rbx
call fcn.14013f050
mov dword [rbx + rdi], 0x6578652e
mov byte [rbx + rsi], 0
lea rcx, [rsp + 0x50]
call fcn.140089e00
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x50], 0
mov edx, reloc.WS2_32.dll_recv
call fcn.14008c9e0
mov rax, r12
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14008db20
mov rbx, qword [rsp + 0xd0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140037fa0
nop
int3