Function at 0x1400011e0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1360]
mov eax, 0x1460
call fcn.140002ce0
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov ecx, 0x30
call fcn.140001db0
mov r12, rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x50], 0x26
mov qword [rbp - 0x48], 0x2f
movups xmm0, xmmword [str.https:__example.com_driver_updater.bat]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400033d0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400033e0]
mov dword [rax + 0x20], ecx
movzx eax, word [0x1400033e4]
mov word [r12 + 0x24], ax
mov byte [r12 + 0x26], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x140003430]
movdqu xmmword [rbp - 0x70], xmm1
movsd xmm0, qword [str.secretfile.zip]
movsd qword [rbp - 0x80], xmm0
mov eax, dword [0x1400033f0]
mov dword [rbp - 0x78], eax
movzx eax, word [0x1400033f4]
mov word [rbp - 0x74], ax
mov byte [rbp - 0x72], 0
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1344], 0xffffffff
mov dword [rbp - 0x3c], eax
mov edx, 1
nop dword [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x3c], eax
inc rdx
cmp rdx, 0x270
jb 0x1400012d0
mov dword [rbp - 0x40], 0x270
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov ecx, 0x26
call fcn.140001db0
mov rdi, rax
mov qword [rsp + 0x68], rax
lea r15, [rax + 0x26]
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
mov dword [rdi + 0x20], eax
mov word [rdi + 0x24], ax
mov qword [rsp + 0x70], r15
xor ebx, ebx
lea rcx, [rbp - 0x40]
call fcn.140001bf0
shr eax, 0x18
mov byte [rdi + rbx], al
inc rbx
cmp rbx, 0x26
jb 0x140001333
mov edx, 0x26
lea rcx, [rsp + 0x48]
call fcn.140001690
nop
xor edx, edx
mov r8, rdi
sub r8, r12
nop dword [rax]
nop word [rax + rax]
lea rax, [r12 + rdx]
movzx ecx, byte [rax + r8]
xor cl, byte [rax]
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x60], 0xf
cmova rax, qword [rsp + 0x48]
mov byte [rax + rdx], cl
inc rdx
cmp rdx, 0x26
jb 0x140001370
lea rdx, str.Encrypted_message:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001810
lea rsi, [rsp + 0x48]
mov r14, qword [rsp + 0x48]
mov r13, qword [rsp + 0x60]
cmp r13, 0xf
cmova rsi, r14
lea rcx, [rsp + 0x48]
cmova rcx, r14
mov rax, qword [rsp + 0x58]
add rax, rcx
cmp rsi, rax
je 0x14000141e
mov r13, rax
nop dword [rax + rax]
movzx ebx, byte [rsi]
lea rdx, [0x1400011c0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x14000340c]
call fcn.140001810
inc rsi
cmp rsi, r13
jne 0x1400013e0
mov r13, qword [rsp + 0x60]
lea rdx, [0x1400019f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x26
lea rcx, [rsp + 0x28]
call fcn.140001690
nop
xor edx, edx
nop dword [rax]
nop dword [rax + rax]
lea rax, [rsp + 0x48]
cmp r13, 0xf
cmova rax, r14
movzx ecx, byte [rdi + rdx]
xor cl, byte [rax + rdx]
lea rax, [rsp + 0x28]
cmp qword [rsp + 0x40], 0xf
cmova rax, qword [rsp + 0x28]
mov byte [rax + rdx], cl
inc rdx
cmp rdx, 0x26
jb 0x140001450
lea rdx, str.Decrypted_message:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001810
lea rdx, [rsp + 0x28]
cmp qword [rsp + 0x40], 0xf
cmova rdx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x38]
mov rcx, rax
call fcn.140001a30
lea rdx, [0x1400019f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 0xf
jbe 0x140001503
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400014fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400014fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001dec
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0xf
mov byte [rsp + 0x28], 0
cmp r13, 0xf
jbe 0x140001555
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000154c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000154c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140001dec
nop
test rdi, rdi
je 0x14000158a
sub r15, rdi
cmp r15, 0x1000
jb 0x14000157e
add r15, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1400015c9
mov rdi, rcx
mov rdx, r15
mov rcx, rdi
call fcn.140001dec
nop
mov edx, 0x30
mov rcx, r12
call fcn.140001dec
xor eax, eax
mov rcx, qword [rbp + 0x1350]
xor rcx, rsp
call fcn.140001d90
lea r11, [rsp + 0x1460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x14000161b
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140001609
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140001621
mov rcx, r8
call fcn.140001dec
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
add rsp, 0x20
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3