Function at 0x140088e70
Capabilities:
Encode data using xor
Generate random numbers via winapi

Disassembly:
push r12
push r13
push r14
sub rsp, 0x150
mov rax, qword [0x1400bf040]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x60], r8d
mov r14, rcx
mov qword [rsp + 0x68], rdx
test rcx, rcx
je 0x14008913a
test rdx, rdx
je 0x14008913a
test r8d, r8d
jne 0x140088eba
xor eax, eax
jmp 0x14008913f
cmp r8d, 0x10000
ja 0x14008913a
cmp byte [rcx + 0x18], 1
je 0x140088ed7
mov eax, 0xffffff39
jmp 0x14008913f
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x188], rbx
mov qword [rsp + 0x130], r15
call fcn.140088510
xor r15d, r15d
mov ebx, eax
cmp eax, 2
jne 0x140089104
mov rax, qword [r14 + 8]
lea r9, str.c63w
mov qword [rsp + 0x48], rax
mov ebx, 1
lea rax, [rsp + 0xa0]
xor r8d, r8d
mov qword [rsp + 0x38], rax
xor edx, edx
lea rax, [0x1400abc48]
mov dword [rsp + 0x30], 0x20
mov qword [rsp + 0x28], rax
mov ecx, ebx
mov dword [rsp + 0x20], 0x30
call fcn.140089250
test eax, eax
jne 0x14008910d
xorps xmm3, xmm3
lea rcx, [0x1400abd20]
xorps xmm4, xmm4
mov eax, r15d
movd xmm2, dword [rax + rcx]
xorps xmm0, xmm0
movd xmm1, dword [rsp + rax + 0xa0]
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
movd xmm1, dword [rax + rcx + 4]
orps xmm3, xmm2
punpcklbw xmm1, xmm0
movd xmm2, dword [rsp + rax + 0xa4]
add rax, 8
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
orps xmm2, xmm4
movdqa xmm4, xmm2
cmp rax, 0x80
jl 0x140088f60
orps xmm3, xmm2
movdqa xmm0, xmm3
psrldq xmm0, 8
orps xmm3, xmm0
movdqa xmm0, xmm3
psrldq xmm0, 4
orps xmm3, xmm0
movd eax, xmm3
test eax, eax
jne 0x14008910d
mov r9d, ebx
mov qword [rsp + 0x138], rdi
xor r8d, r8d
mov dword [rsp + 0x20], 0xf0000000
xor edx, edx
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
mov edi, 0x24
test eax, eax
je 0x1400890e3
mov rcx, qword [r14]
lea r8, [rsp + 0x70]
mov edx, edi
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
je 0x1400890e3
mov rcx, qword [r14]
xor edx, edx
mov qword [rsp + 0x148], rbp
mov qword [rsp + 0x140], rsi
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov eax, 4
mov ebx, r15d
mov r13d, eax
mov esi, r15d
mov rbp, r15
mov r12d, 3
nop dword [rax + rax]
mov ecx, eax
lea rdx, [rsp + 0x70]
add rcx, rbp
mov r8d, eax
add rdx, rcx
lea rcx, [rsp + 0x70]
add rcx, rbp
call fcn.140087e60
test eax, eax
mov eax, edi
cmove ebx, r12d
add esi, r13d
sub eax, esi
add rbp, 4
cmp eax, r13d
cmova eax, r13d
cmp esi, 0x20
jb 0x140089060
mov rsi, qword [rsp + 0x140]
mov rbp, qword [rsp + 0x148]
mov r12d, dword [rsp + 0x60]
mov r13, qword [rsp + 0x68]
test ebx, ebx
jne 0x1400890e3
mov rcx, qword [r14 + 0x10]
lea rdx, [rsp + 0x74]
mov r8d, 0x20
call fcn.1400881b0
mov ebx, eax
test eax, eax
jne 0x1400890e3
mov rcx, qword [r14 + 0x10]
mov r8d, r12d
mov rdx, r13
call fcn.140088510
mov ebx, eax
lea rax, [rsp + 0x70]
nop dword [rax + rax]
mov byte [rax], r15b
lea rax, [rax + 1]
add edi, 0xffffffff
jne 0x1400890f0
mov rdi, qword [rsp + 0x138]
test ebx, ebx
je 0x140089125
cmp ebx, 3
jne 0x14008911a
mov r15d, 0xffffff2f
mov byte [r14 + 0x18], 3
jmp 0x140089125
mov r15d, 0xffffff39
mov byte [r14 + 0x18], 2
mov rbx, qword [rsp + 0x188]
mov eax, r15d
mov r15, qword [rsp + 0x130]
jmp 0x14008913f
mov eax, 0xffffff53
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.14009f800
add rsp, 0x150
pop r14
pop r13
pop r12
ret