Function at 0x7b1790
Capabilities:
Generate random numbers via winapi
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x160
mov edi, dword [ebp + 8]
mov eax, dword [0xa7d04c]
xor eax, ebp
mov dword [esp + 0x158], eax
xorps xmm0, xmm0
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
movaps xmmword [esp + 0x30], xmm0
movaps xmmword [esp + 0x20], xmm0
movaps xmmword [esp + 0x10], xmm0
test edi, edi
je 0x7b1b87
test byte [0xa8c601], 1
jne 0x7b1b87
lea eax, [esp + 0x10]
push eax
call fcn.007c6070
add esp, 4
mov dword [esp + 0xc0], 0
sub esp, 0x14
movdqa xmm0, xmmword [0x9dc200]
movdqu xmmword [esp + 4], xmm0
lea ebx, [esp + 0xd4]
mov dword [esp], ebx
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
je 0x7b1889
lea eax, [esp + 0x80]
push eax
push 0x20
push dword [esp + 0xc8]
call dword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
jne 0x7b19f7
push 2
call fcn.00904618
add esp, 4
mov ecx, eax
movzx eax, byte [0xa594a8]
cmp al, 0xd
je 0x7b19e5
mov dl, 0x2d
nop word cs:[eax + eax]
mov al, 0x81
lock cmpxchg byte [0xa594a8], dl
je 0x7b198d
cmp al, 0xd
jne 0x7b1870
jmp 0x7b19e5
push 2
call fcn.00904618
add esp, 4
mov edx, eax
movzx eax, byte [0xa5948d]
cmp al, 0x3a
je 0x7b1979
mov cl, 0x2a
nop word cs:[eax + eax]
mov al, 0x43
lock cmpxchg byte [0xa5948d], cl
je 0x7b18c5
cmp al, 0x3a
jne 0x7b18b0
jmp 0x7b1979
mov dword [esp + 0xc], edx
mov ecx, 0xffffffe4
lea eax, [0x7c0d34ec]
mov dword [esp], eax
mov eax, 0x84908db0
lea edx, [0x7c0d34ed]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x84908daf
mov edi, 0x8d3dcb09
nop word cs:[eax + eax]
mov esi, eax
mul edi
mov ebx, edx
mov eax, dword [esp + 4]
mul edi
shr edx, 4
lea eax, [edx + edx*8]
lea eax, [eax + eax*2]
add edx, edx
add edx, eax
mov eax, dword [esp + 8]
movzx eax, byte [eax + edx]
xor al, 0xad
add byte [ecx + 0xa5948c], al
test ecx, ecx
je 0x7b1963
shr ebx, 4
lea eax, [ebx + ebx*8]
lea eax, [eax + eax*2]
add ebx, ebx
add ebx, eax
mov edx, dword [esp]
movzx eax, byte [edx + ebx]
xor al, 0xad
add byte [ecx + 0xa5948d], al
add ecx, 2
add edx, 0xfffffffe
mov dword [esp], edx
mov eax, esi
add eax, 2
add dword [esp + 8], 0xfffffffe
add dword [esp + 4], 2
jmp 0x7b1900
mov al, 0x3a
xchg byte [0xa5948d], al
mov edi, dword [ebp + 8]
lea ebx, [esp + 0xc0]
mov edx, dword [esp + 0xc]
push edx
push 1
push 0x1c
push 0xa59470
call fcn.00904903
add esp, 0x10
jmp 0x7b1a06
movdqa xmm0, xmmword [0xa59490]
paddb xmm0, xmmword [0x9dc210]
movdqa xmmword [0xa59490], xmm0
movq xmm0, qword [0xa594a0]
movq xmm1, qword [0x9dc220]
paddb xmm1, xmm0
pxor xmm0, xmmword [0x9dc230]
movdqa xmm2, xmmword [0x9dc240]
pand xmm1, xmm2
pandn xmm2, xmm0
por xmm2, xmm1
movq qword [0xa594a0], xmm2
mov al, 0xd
xchg byte [0xa594a8], al
push ecx
push 1
push 0x17
push 0xa59490
call fcn.00904903
add esp, 0x10
push 0
push dword [esp + 0xc4]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
lea esi, [esp + 0x80]
push 0x20
push esi
lea eax, [esp + 0x18]
push eax
call fcn.007c61c0
add esp, 0xc
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0x13c], 0
mov dword [esp + 0x138], 0
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x7b1aa8
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x88], eax
lea eax, [esp + 0x138]
push eax
call fcn.00906bb1
add esp, 4
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x13c]
mov dword [esp + 0x90], ecx
mov dword [esp + 0x8c], eax
push 0x20
push esi
lea esi, [esp + 0x18]
push esi
call fcn.007c61c0
add esp, 0xc
lea eax, [esp + 0xa0]
push esi
push eax
mov esi, eax
call fcn.007c6790
add esp, 8
pxor xmm0, xmm0
movdqa xmmword [esp + 0x120], xmm0
movdqa xmmword [esp + 0x110], xmm0
movdqa xmmword [esp + 0x100], xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
push ebx
call fcn.007c6070
add esp, 4
push 0x20
push esi
push ebx
call fcn.007c61c0
add esp, 0xc
push 0x10
push edi
push ebx
call fcn.007c61c0
add esp, 0xc
lea eax, [edi + 0x10]
push 0x10
push eax
push ebx
call fcn.007c61c0
add esp, 0xc
lea esi, [esp + 0x138]
push ebx
push esi
call fcn.007c6790
add esp, 8
lea eax, [edi + 0x28]
push 0
push 0
push 0x10
push esi
push eax
call fcn.007a5920
add esp, 0x14
movups xmm0, xmmword [esp + 0x138]
movups xmmword [edi + 0x10], xmm0
movups xmm0, xmmword [esp + 0x148]
movups xmmword [edi], xmm0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 1
mov ecx, dword [esp + 0x158]
xor ecx, ebp
call fcn.0091d849
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret