Function at 0x140040b40
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1590]
mov eax, 0x1690
call fcn.1400ce160
sub rsp, rax
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x16e0], rbx
mov rax, qword [0x14015b138]
xor rax, rsp
mov qword [rbp + 0x1580], rax
movzx r12d, r8b
mov r15, rdx
mov r13, rcx
lea rsi, [rcx + 0x50]
xor r14d, r14d
cmp qword [rsi + 0x10], r14
jne 0x140040c6d
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x1380]
call fcn.1400cf640
lea rcx, [rbp + 0x1380]
call fcn.140003130
mov qword [rbp + 0x1370], r14
mov qword [rbp + 0x1378], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1360], r14b
lea rax, [rbp + 0x1380]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r14b
jne 0x140040be5
lea rdx, [rbp + 0x1380]
lea rcx, [rbp + 0x1360]
call fcn.140003a60
lea rax, [rbp + 0x1360]
cmp rsi, rax
je 0x140040c2c
mov rcx, rsi
call fcn.140003930
movups xmm0, xmmword [rbp + 0x1360]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0x1370]
movups xmmword [rsi + 0x10], xmm1
jmp 0x140040c6d
mov rdx, qword [rbp + 0x1378]
cmp rdx, 0x10
jb 0x140040c6d
inc rdx
mov rcx, qword [rbp + 0x1360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040c68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004157f
call fcn.1400cd424
lea rdi, [r13 + 0x70]
cmp qword [rdi + 0x10], r14
jne 0x140040ce8
lea rcx, [rbp - 0x70]
call fcn.140008b10
mov rbx, rax
cmp rdi, rax
je 0x140040cad
mov rcx, rdi
call fcn.140003930
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], r14b
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140040ce8
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040ce3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140041585
call fcn.1400cd424
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
mov qword [rbp + 0x1390], r14
mov qword [rbp + 0x1398], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1380], al
lea r8d, [rax + 0xb]
lea rdx, str.sdk_version
lea rcx, [rbp + 0x1380]
call fcn.140003a60
nop
mov qword [rbp + 0x13b0], r14
mov qword [rbp + 0x13b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x13a0], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.ADP_WIN_1.0.13.0
lea rcx, [rbp + 0x13a0]
call fcn.140003a60
nop
mov qword [rbp + 0x13d0], r14
mov qword [rbp + 0x13d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x13c0], 0
mov r8d, ntohl
lea rdx, str.module_name
lea rcx, [rbp + 0x13c0]
call fcn.140003a60
nop
mov qword [rbp + 0x13f0], r14
mov qword [rbp + 0x13f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x13e0], 0
mov r8d, 7
lea rdx, str.ADP_WIN
lea rcx, [rbp + 0x13e0]
call fcn.140003a60
nop
mov qword [rbp + 0x1410], r14
mov qword [rbp + 0x1418], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1400], 0
mov r8d, 7
lea rdx, str.version
lea rcx, [rbp + 0x1400]
call fcn.140003a60
nop
mov qword [rbp + 0x1430], r14
mov qword [rbp + 0x1438], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1420], 0
mov r8d, 5
lea rdx, str.3.0.0
lea rcx, [rbp + 0x1420]
call fcn.140003a60
nop
mov qword [rbp + 0x1450], r14
mov qword [rbp + 0x1458], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1440], 0
mov r8d, 9
lea rdx, str.device_id
lea rcx, [rbp + 0x1440]
call fcn.140003a60
nop
mov rdx, rsi
lea rcx, [rbp + 0x1460]
call fcn.140003990
nop
mov qword [rbp + 0x1490], r14
mov qword [rbp + 0x1498], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1480], 0
mov r8d, 9
lea rdx, str.client_id
lea rcx, [rbp + 0x1480]
call fcn.140003a60
nop
mov rdx, rdi
lea rcx, [rbp + 0x14a0]
call fcn.140003990
nop
mov qword [rsp + 0x30], r14
lea rdx, str._time
lea rcx, [rsp + 0x30]
call fcn.14007d290
nop
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.14007e740
mov rbx, rax
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14007d290
nop
mov rax, qword [rbx]
test rax, rax
je 0x140040eeb
cvttsd2si r9, qword [rax + 8]
jmp 0x140040eee
mov r9, r14
xor r8d, r8d
lea edx, [r8 + 3]
lea rcx, [rsp + 0x38]
call fcn.140026760
mov rbx, rax
mov qword [rbp + 0x14d0], r14
mov qword [rbp + 0x14d8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x14c0], 0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.event_generation_time
lea rcx, [rbp + 0x14c0]
call fcn.140003a60
mov qword [rbp + 0x14f0], r14
mov qword [rbp + 0x14f8], r14
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x14e0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rbp + 0x14f0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140040fa3
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140040f9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004158b
call fcn.1400cd424
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x38], 0
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 3]
lea rcx, [rsp + 0x58]
call fcn.140026760
mov rbx, rax
mov qword [rbp + 0x1510], r14
mov qword [rbp + 0x1518], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1500], 0
mov r8d, ntohl
lea rdx, str.device_time
lea rcx, [rbp + 0x1500]
call fcn.140003a60
mov qword [rbp + 0x1530], r14
mov qword [rbp + 0x1538], r14
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x1520], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rbp + 0x1530], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14004106e
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041069
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004158b
call fcn.1400cd424
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x58], 0
call fcn.1400cab8c
mov ecx, eax
mov dword [rbp + 0x1354], 0xffffffff
mov dword [rbp - 0x2c], eax
mov r8d, 1
mov edx, r8d
nop
mov eax, ecx
shr eax, 0x1e
xor eax, ecx
imul ecx, eax, 0x6c078965
add ecx, r8d
mov dword [rbp + rdx*4 - 0x2c], ecx
inc r8d
inc rdx
cmp rdx, 0x270
jl 0x1400410a0
mov dword [rbp - 0x30], 0x270
mov qword [rbp + 0x1360], r14
mov qword [rbp + 0x1368], 0xffffffffffffffff
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1360]
call fcn.140009e60
mov rbx, rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x1360]
call fcn.140009e60
mov rcx, rbx
shl rcx, 0x20
mov eax, eax
or rcx, rax
or rbx, rcx
lea r9, [rbp + 0x1375]
movabs r8, 0xcccccccccccccccd
nop
dec r9
mov rax, r8
mul rbx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov rbx, rdx
test rdx, rdx
jne 0x140041120
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], dl
lea rax, [rbp + 0x1375]
cmp r9, rax
je 0x14004117a
lea r8, [rbp + 0x1375]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x70]
call fcn.140003a60
nop
mov qword [rbp + 0x1550], r14
mov qword [rbp + 0x1558], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1540], 0
mov r8d, 8
lea rdx, str.event_id
lea rcx, [rbp + 0x1540]
call fcn.140003a60
movups xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x1560], xmm0
movups xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x1570], xmm1
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
call fcn.140049720
mov rbx, rax
mov qword [rbp - 0x80], rax
lea rdi, [rbp + 0x1380]
nop dword [rax]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.140049c80
lea r9, [rax + 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
lea rdx, [rbp + 0x1360]
lea rcx, [rbp - 0x80]
call fcn.140049cf0
add rdi, 0x40
lea rax, [rbp + 0x1580]
cmp rdi, rax
je 0x14004121e
mov rbx, qword [rbp - 0x80]
jmp 0x1400411e0
lea r9, [fcn.1400415a0]
mov edx, 0x40
lea r8d, [rdx - 0x38]
lea rcx, [rbp + 0x1380]
call fcn.1400cdd20
mov rdi, qword [rbp - 0x80]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1400413c3
nop word [rax + rax]
lea rdx, [rbx + 0x20]
lea rcx, [rbp - 0x70]
call fcn.140003990
nop
lea rdx, [rbx + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140003990
nop
mov qword [rsp + 0x30], r14
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14007e4d0
nop
mov qword [rbp + 0x1360], r14
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
lea rdx, [rbp + 0x1360]
mov rcx, r15
call fcn.14007e620
mov rsi, rax
mov rcx, rax
call fcn.14007f3f0
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1400412d8
mov qword [rsi], rax
mov qword [rsp + 0x30], r14
xor edx, edx
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
lea rcx, [rsp + 0x30]
call fcn.14007f3f0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14004132d
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041328
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004157f
call fcn.1400cd424
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140041368
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140041363
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004157f
call fcn.1400cd424
cmp byte [rbx + 0x19], 0
jne 0x1400413b6
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x140041392
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x1400413b6
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140041384
jmp 0x1400413b6
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400413b3
nop dword [rax]
cmp rbx, qword [rax + 0x10]
jne 0x1400413b3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400413a0
mov rbx, rax
cmp rbx, rdi
jne 0x140041250
mov rdi, qword [rbp - 0x80]
test r12b, r12b
je 0x14004152e
mov rcx, qword [r13 + 0x90]
test rcx, rcx
je 0x14004151f
cmp dword [rcx], 4
je 0x1400413f9
cmp qword [rcx + 0x50], 0
jne 0x14004140d
mov rax, qword [rcx + 0x38]
cmp qword [rcx + 0x30], rax
jne 0x14004140d
cmp qword [rcx + 0x20], 0
jne 0x14004140d
xorps xmm0, xmm0
movsd xmm1, qword [rcx + 8]
ucomisd xmm1, xmm0
jp 0x14004140d
je 0x14004151f
mov qword [rsp + 0x30], r14
lea rdx, str.user
lea rcx, [rsp + 0x30]
call fcn.14007e4d0
nop
mov qword [rbp + 0x1360], r14
lea rdx, str.facets
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
lea rdx, [rbp + 0x1360]
mov rcx, r15
call fcn.14007e620
mov rsi, rax
xor edx, edx
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
mov rax, qword [rsi]
test rax, rax
jne 0x1400414a0
lea ecx, [rax + 0x58]
call fcn.1400cd42c
mov rbx, rax
mov qword [rbp + 0x1360], rax
xor edx, edx
lea r8d, [rdx + 0x58]
mov rcx, rax
call fcn.1400cf640
mov rcx, rbx
call fcn.14007d7d0
nop
mov qword [rsi], rax
test rax, rax
jne 0x1400414a0
call fcn.14007d960
jmp 0x1400414ad
mov edx, 0xffffffff
mov rcx, rax
call fcn.14007d9f0
mov rbx, rax
mov rcx, rax
call fcn.14007f3f0
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1400414ca
mov qword [rbx], rax
mov qword [rsp + 0x30], r14
lea rcx, [rsp + 0x30]
call fcn.14007f3f0
mov qword [rbp + 0x1360], r14
lea rdx, str.user_info
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
lea rdx, [rbp + 0x1360]
mov rcx, r15
call fcn.14007e620
mov rbx, rax
xor edx, edx
lea rcx, [rbp + 0x1360]
call fcn.14007d290
nop
lea rdx, [r13 + 0x90]
mov rcx, rbx
call fcn.14007f310
mov rdx, r15
call fcn.140041680
mov r14d, eax
mov rdi, qword [rbp - 0x80]
mov r9, rdi
mov r8, qword [rdi]
lea rdx, [rbp + 0x1360]
lea rcx, [rbp - 0x80]
call fcn.1400493f0
mov edx, 0x60
mov rcx, qword [rbp - 0x80]
call fcn.1400cd424
mov eax, r14d
mov rcx, qword [rbp + 0x1580]
xor rcx, rsp
call fcn.1400cd400
mov rbx, qword [rsp + 0x16e0]
add rsp, 0x1690
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400d20f4
nop
call fcn.1400d20f4
nop
call fcn.1400d20f4
int3