Function at 0x140011890
Capabilities:
Encode data using xor
Generate random numbers via rtlgenrandom
Generate random numbers via winapi

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rdx
mov rdi, rcx
mov eax, dword [0x141dc1070]
sub eax, dword [0x141dc1074]
add eax, 0xade1ee3b
or eax, 0xbb8ae553
add eax, 0x5290a819
cmp eax, 0xb74362b
jae 0x1400118f0
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
nop
mov ecx, dword [0x141dc1078]
imul ecx, dword [0x141dc107c]
and ecx, 0xfcd6f4a
add ecx, 0xde5b5f61
and ecx, 0x761f5960
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400ef3b0
sub rsp, rax
mov r15, rsp
mov eax, 0x40
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
cmp ecx, 0xd834f8b3
ja 0x1400118f0
mov r13, rbx
xorps xmm0, xmm0
movups xmmword [r15 + 0x10], xmm0
movups xmmword [r15], xmm0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
mov r8d, 0x20
mov r9d, 2
call qword [sym.imp.bcrypt.dll_BCryptGenRandom]
add rsp, 0x20
mov r12d, eax
nop dword [rax + rax]
mov eax, dword [0x141dc1080]
or eax, dword [0x141dc1084]
add eax, 0x4558ca4a
shr eax, 3
imul rax, rax, 0x2ac49381
shr rax, 0x38
add eax, 0x159d5241
cmp eax, 0x26f97854
ja 0x140011980
cmp r12d, 0xc0000000
jb 0x1400119f8
sub rsp, 0x20
mov rcx, r15
mov edx, 0x20
call qword [sym.imp.ADVAPI32.dll_SystemFunction036]
add rsp, 0x20
nop word [rax + rax]
mov ecx, dword [0x141dc1088]
xor ecx, dword [0x141dc108c]
xor ecx, 0x4619ba13
imul ecx, ecx, 0xe96852f6
cmp ecx, 0x271ec81a
jb 0x1400119d0
test al, al
je 0x140011a7f
mov eax, dword [0x141dc10b8]
add eax, dword [0x141dc10bc]
imul eax, eax, 0x2d8921d7
imul rax, rax, 0x33b5e96d
shr rax, 0x3d
or eax, 0xd986198a
cmp eax, 0xe3250d9a
jne 0x140011a33
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
add rbx, 0x10
nop word [rax + rax]
mov eax, dword [0x141dc10c0]
imul eax, dword [0x141dc10c4]
xor eax, 0x5ad0d6a6
add eax, 0x1a56d0fe
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
cmp eax, 0x4d76ef4e
jb 0x140011a40
xor eax, eax
test al, al
je 0x140011ba4
jmp 0x140011bcb
add r12d, 0x80000000
nop word cs:[rax + rax]
mov eax, dword [0x141dc1090]
xor eax, dword [0x141dc1094]
or eax, 0xb1913089
add eax, 0xc559b7e8
or eax, 0xa3401d
cmp eax, 0xae69a2d6
jb 0x140011a90
mov eax, dword [0x141dc1098]
xor edx, edx
div dword [0x141dc109c]
mov eax, dword [0x141dc10a0]
sub eax, dword [0x141dc10a4]
and eax, 0xd91a904d
xor eax, 0x78a98417
cmp eax, 0x69c5a8
jb 0x140011ac0
test r12d, r12d
je 0x1400119f8
movzx eax, byte [0x141ddb9b8]
sub rsp, 0x20
mov edx, 4
xor ecx, ecx
call fcn.1400bf820
add rsp, 0x20
test rax, rax
je 0x140011b56
mov ecx, dword [0x141dc1120]
xor ecx, dword [0x141dc1124]
imul ecx, ecx, 0xe65f62a3
xor ecx, 0xe37a2447
imul rcx, rcx, 0x5a47c3b7
shr rcx, 0x3e
cmp ecx, 0x85b32d58
jne 0x140011b34
mov dword [rax], r12d
xor ecx, ecx
nop word cs:[rax + rax]
mov dword [rax], r12d
test cl, cl
jne 0x140011b40
xor ecx, ecx
test cl, cl
je 0x140011df2
jmp 0x140011e1b
mov eax, dword [0x141dc10a8]
and eax, dword [0x141dc10ac]
imul eax, eax, 0xfadda682
add eax, 0xc7cf08f9
cmp eax, 0x5208e6b8
jae 0x140011b76
ud2
xor eax, eax
ud2
mov ecx, dword [0x141dc10c8]
xor ecx, dword [0x141dc10cc]
xor ecx, 0x6140119
or ecx, 0xe1cbb2e6
mov rax, qword [0x141ddb9a8]
cmp ecx, 0xfba01de6
jne 0x140011bd4
mov rax, qword [0x141ddb9a8]
jmp 0x140011ba4
test rax, rax
je 0x140011ce9
nop dword [rax]
mov ecx, dword [0x141dc10d0]
xor ecx, dword [0x141dc10d4]
xor ecx, 0x89f872b2
add ecx, 0xd30883eb
xor ecx, 0x481c72ee
cmp ecx, 0xf3527cd3
ja 0x140011be0
and eax, 0x4000
nop dword [rax + rax]
mov ecx, dword [0x141dc10d8]
imul ecx, dword [0x141dc10dc]
imul ecx, ecx, 0x254748f5
and ecx, 0xcf882b17
cmp ecx, 0xf1f9cfc8
je 0x140011c10
xor ecx, ecx
nop word cs:[rax + rax]
mov edx, dword [0x141dc10e0]
imul edx, dword [0x141dc10e4]
and edx, 0x591ffe5a
add edx, 0xcb92afd1
cmp edx, 0x985f4888
jb 0x140011c40
or rax, rcx
je 0x140011d06
mov eax, dword [0x141dc10f8]
add eax, dword [0x141dc10fc]
xor eax, 0x954604
or eax, 0xff20201b
add eax, 0x8e1ba83
cmp eax, 0xd9fdda50
jbe 0x140011ca6
sub rsp, 0x20
lea r8, [0x141db9080]
mov rcx, rbx
mov rdx, r14
call fcn.14006fcb0
add rsp, 0x20
lea r15, [0x141db9080]
nop dword [rax]
mov eax, dword [0x141dc1100]
xor edx, edx
div dword [0x141dc1104]
mov r12d, eax
add r12d, 0xd7bcc559
sub rsp, 0x20
mov rcx, rbx
mov rdx, r14
mov r8, r15
call fcn.14006fcb0
add rsp, 0x20
cmp r12d, 0xf639e95b
ja 0x140011cb0
jmp 0x140011d60
sub rsp, 0x20
call fcn.1400fc440
add rsp, 0x20
and eax, 0x4000
xor ecx, ecx
or rax, rcx
jne 0x140011c6a
movaps xmm0, xmmword [r14]
mov eax, dword [0x141dc10e8]
imul eax, dword [0x141dc10ec]
add eax, 0x4390d259
xor eax, 0x7cbb282a
add eax, 0xd0903be1
cmp eax, 0xee817fe5
ja 0x140011d4a
mov eax, dword [0x141dc10f0]
sub eax, dword [0x141dc10f4]
movaps xmm1, xmmword [r14 + 0x10]
movaps xmmword [r13 + 0x10], xmm0
cmp eax, 0xe01ac23c
jne 0x140011d51
movaps xmmword [r13 + 0x10], xmm0
jmp 0x140011d2d
movaps xmmword [r13 + 0x20], xmm1
xorps xmm0, xmm0
movaps xmmword [r13 + 0x30], xmm0
nop
mov eax, dword [0x141dc1108]
xor edx, edx
div dword [0x141dc110c]
xor eax, 0x66b7f128
add eax, 0xd3bd8265
and eax, 0x7aa8346b
cmp eax, 0xb26353fe
ja 0x140011d60
mov eax, dword [0x141dc1110]
xor eax, dword [0x141dc1114]
xor eax, 0x16200807
and eax, 0x9e2a4c3f
add eax, 0xd840dd51
cmp eax, 0x5ed0c8ee
jb 0x140011dda
mov eax, dword [0x141dc1118]
and eax, dword [0x141dc111c]
imul eax, eax, 0x33c61de6
add eax, 0x19352e14
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [rdi + 0x20], xmm2
movaps xmmword [rdi + 0x10], xmm1
movaps xmmword [rdi], xmm0
cmp eax, 0x40b0b437
ja 0x140011e37
movaps xmm0, xmmword [rbx]
movaps xmm1, xmmword [rbx + 0x10]
movaps xmm2, xmmword [rbx + 0x20]
movaps xmmword [rdi + 0x20], xmm2
movaps xmmword [rdi + 0x10], xmm1
movaps xmmword [rdi], xmm0
jmp 0x140011da6
mov ecx, dword [0x141dc1128]
mov edx, dword [0x141dc112c]
add edx, ecx
add edx, 0xab076e2
or edx, 0x8ac46ac8
mov rcx, qword [0x141ddb9a0]
cmp edx, 0x7c5887db
jae 0x140011e24
mov rcx, qword [0x141ddb9a0]
jmp 0x140011df2
sub rsp, 0x20
xor edx, edx
mov r8, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor eax, eax
test al, al
jne 0x140011e68
mov eax, dword [0x141dc1130]
imul eax, dword [0x141dc1134]
and eax, 0x9023000
xor eax, 0x8013008
or eax, 0xf2748bf7
mov qword [rdi + 0x40], 0
cmp eax, 0xd08ed213
jae 0x140011e72
mov qword [rdi + 0x40], 0
jmp 0x140011e3d
mov rbx, 0xffffffffffffff00
nop dword [rax]
mov eax, dword [str.EaQ:_]
add eax, dword [0x141dc113c]
and eax, 0x8eafd249
add eax, 0x2a40c864
or eax, 0x132152ee
cmp eax, 0xd6ff61aa
ja 0x140011e80
add rbx, qword [rdi + 0x30]
xor eax, eax
test al, al
jne 0x140011eda
mov r14d, dword [0x141dc1140]
sub r14d, dword [0x141dc1144]
mov qword [rdi + 0x38], rbx
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.14006fd20
add rsp, 0x20
cmp r14d, 0x8bd2139
jne 0x140011ef3
mov qword [rdi + 0x38], rbx
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.14006fd20
add rsp, 0x20
jmp 0x140011eac
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret