Function at 0x1401741a0
Capabilities:
Access peb ldr_data
Generate random numbers via winapi

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0xe0
mov rax, qword [0x140344548]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rdi, rcx
mov qword [rsp + 0x60], rcx
xor ebx, ebx
mov ecx, dword [0x140352968]
mov rax, qword gs:[0x58]
mov edx, 0x24
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x14034f390], ecx
jg 0x14017438f
xor r9d, r9d
lea r8d, [r9 + 0x10]
lea rdx, [rsp + 0x60]
mov rcx, qword [0x14034f388]
call sub.bcrypt.dll_BCryptGenRandom
movsxd rsi, eax
test eax, eax
jne 0x14017432c
movzx eax, byte [rsp + 0x68]
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x68], al
movzx eax, byte [rsp + 0x66]
and al, 0xf
or al, 0x40
mov byte [rsp + 0x66], al
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movups xmmword [rdi], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov edx, 0x30
mov rcx, rdi
call fcn.140087360
mov qword [rdi], rax
mov qword [rdi + 0x10], 0x24
mov qword [rdi + 0x18], 0x2f
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], cl
mov rax, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14017428e
mov rax, qword [rdi]
mov r9d, 0x57
nop dword [rax]
nop dword [rax + rax]
movzx r8d, byte [rsp + rbx + 0x70]
mov edx, r8d
shr rdx, 4
mov ecx, 0x30
cmp rdx, 9
cmova ecx, r9d
add cl, dl
mov byte [rax], cl
and r8d, 0xf
mov ecx, 0x30
cmp r8, 9
cmova ecx, r9d
add cl, r8b
mov byte [rax + 1], cl
add rax, 2
lea rcx, [rbx - 3]
test rcx, 0xfffffffffffffff9
jne 0x1401742ec
mov byte [rax], 0x2d
inc rax
inc rbx
lea rcx, [rsp + 0x70]
add rcx, rbx
lea rdx, [rsp + 0x80]
cmp rcx, rdx
jne 0x1401742a0
mov rax, rdi
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.140266400
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.get_random_bytes
mov r8d, 0x58
lea rdx, str.C:conan.conandata_boost1.81.0__package8d47612c404bfb3cc5b267708e639b6b2cda0c3ainclude_boost_uuid_detail_random_provider_bcrypt.ipp
lea rcx, [rsp + 0x90]
call fcn.1400a6d60
mov rbx, rax
lea rdx, [0x140297c48]
lea rcx, [rsp + 0xb0]
call fcn.140096cb0
nop
mov rdx, rsi
lea r8, [rsp + 0xb0]
lea rcx, [rsp + 0x38]
call fcn.140173dc0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140173a00
nop
lea rcx, [0x14034f390]
call fcn.140265ec0
cmp dword [0x14034f390], 0xffffffff
jne 0x1401741f5
lea rcx, [0x14034f388]
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x140297b40]
call sub.ncrypt.dll_BCryptOpenAlgorithmProvider
movsxd rsi, eax
test eax, eax
je 0x14017442b
mov dword [rsp + 0x20], reloc.WS2_32.dll_listen
lea r9, str.random_provider_base
mov r8d, gethostname
lea rdx, str.C:conan.conandata_boost1.81.0__package8d47612c404bfb3cc5b267708e639b6b2cda0c3ainclude_boost_uuid_detail_random_provider_bcrypt.ipp
lea rcx, [rsp + 0x70]
call fcn.1400a6d60
mov rbx, rax
lea rdx, [0x140297c10]
lea rcx, [rsp + 0x90]
call fcn.140096cb0
nop
mov rdx, rsi
lea r8, [rsp + 0x90]
lea rcx, [rsp + 0xb0]
call fcn.140173dc0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140173a00
nop
lea rcx, [0x140278910]
call fcn.140266278
nop
lea rcx, [0x14034f390]
call fcn.140265e60
jmp 0x1401741f5